Device for controlling an aircraft engine comprising two redundant control channels
AssigneeSafran Aircraft Engines
InventorsChristophe Pierre Georges Martin, Sébastien Jacques François Michel Soulie
Life of this patent
Estimating the term…
Abstract
The invention relates to an engine control device comprising a first control channel (V1) and a second control channel (V2), each control channel comprising a first sensor (CAV1, CAV2) and a second sensor (CBV2, CBV2), each configured to provide, respectively, a first measurement (A) and a second measurement (B) to each channel, each of the channels having an active or passive state defining an active channel (V1) or a passive channel (V2), the active channel (V1) being designed to control at least one actuator (ACT) of the engine while the passive channel (V2) is designed to take over for the active channel if the latter fails.
Claims14
A device for controlling an actuator of an engine, the device comprising:
- an active control channel comprising a first consolidating unit, configured to compute a first consolidation parameter, and a first processing unit, configured to process a first command, the command being function of the first consolidation parameter and configured to drive the actuator;
- and
- a passive control channel, comprising a second consolidating unit, configured to compute a second consolidation parameter, and a second processing unit configured to process a second command, the command being function of the second consolidation parameter;
- the device further comprising an inter-channel communication link between the first consolidating unit and the second consolidating unit;
- wherein, the first consolidating unit is configured to compute the first consolidation parameter based on:
- a first measurement of a first parameter and a first measurement of a second parameter respectively supplied by a first sensor and a second sensor to the first consolidating unit, and
- a second measurement of the first parameter and a second measurement of the second parameter respectively supplied by a third sensor and a fourth sensor to the first consolidating unit by the second consolidating, unit through the inter-channel communication link;
- wherein, the second consolidating unit is configured to compute the second consolidation parameter based on:
- the second measurement of the first parameter and the second measurement of the second parameter respectively supplied by the third sensor and the fourth sensor to the second consolidating unit, and
- the first measurement of the first parameter and the first measurement of the second parameter respectively supplied by the first sensor and the second sensor to the second consolidating unit by the first consolidating unit, through the inter-channel communication link;
- wherein the device presents a nominal operating mode in which:
- the first command is processed as a function of the first consolidation parameter and of the first command processed at a previous computing time, and
- the second command is processed as a function of the second consolidation parameter and of the second command processed at a previous computing time;
- wherein the device presents a failsafe operating mode, to unify the first command and the second command after an interruption of the inter-channel communication link, in which:
- the second command is processed as a function of the second consolidation parameter and of the first command processed by the active channel at the previous computing time.
Method to control an actuator of an engine, the device comprising:
- an active control channel comprising a first consolidating unit, configured to compute a first consolidation parameter, and a first processing unit configured to process a first command, the command being function of the first consolidation parameter and configured to drive the actuator;
- and
- a passive control channel, comprising a second consolidating unit, configured to compute a second consolidation parameter, and a second processing unit configured to process a second command, the command being function of the second consolidation parameter;
- the device further comprising an inter-channel communication link between the first consolidating unit and the second consolidating unit;
- wherein, the first consolidating unit is configured to compute the first consolidation parameter based on:
- a first measurement of a first parameter and a first measurement of a second parameter respectively supplied by a first sensor and a second sensor to the first consolidating unit, and
- a second measurement of the first parameter and a second measurement of the second parameter respectively supplied by a third sensor and a fourth sensor to the first consolidating unit by the second consolidating, unit through the inter-channel communication link;
- wherein, the second consolidating unit is configured to compute the second consolidation parameter based on:
- the second measurement of the first parameter and the second measurement of the second parameter respectively supplied by the third sensor and the fourth sensor to the second consolidating unit, and
- the first measurement of the first parameter and the first measurement of the second parameter respectively supplied by the first sensor and the second sensor to the second consolidating unit by the first consolidating unit, through the inter-communication link;
- the method comprising:
- during a nominal operating mode:
- a processing of the first command as a function of the first consolidation parameter and of the first command processed at the previous computing time, and
- a processing of the second command as a function of the second consolidation parameter and of the second command processed at the previous computing time;
- during a failsafe operation implemented when the inter-communication link is reestablished after an interruption of the inter-channel communication link:
- the second command is processed as a function of the second consolidation parameter and of the first command processed by the active channel at the previous computing time,
- wherein the failsafe operation unify the first command and the second command after an interruption of the inter-channel communication link.
Dependencies are inferred from the claim text.