Vehicle control with functional redundancy
AssigneeRaytheon Technologies Corporation
InventorPaul A. Adamski
Life of this patent
Estimating the term…
Abstract
A control assembly for an aircraft system according to an example of the present disclosure includes a multi-core processor that has a plurality of cores coupled to a communications module and to an arbitration module. The communications module is operable to communicate information between the plurality of cores and one or more aircraft modules. The plurality of cores include first and second cores operable to concurrently execute a first discrete set of software instructions to generate respective instances of an output. The arbitration module is operable to communicate each and every one of the respective instances to control the one or more aircraft modules. A method of operating an aircraft system is also disclosed.
Claims20
A method of operating an aircraft system comprising:
- communicating information between one or more peripheral devices of a gas turbine engine and a multi-core processor, the multi-core processor including a plurality of cores, the plurality of cores including first, second and third cores;
- concurrently executing a first discrete set of software instructions on the first and second cores to generate respective instances of an output based on the information, including executing a predictive model relating to one or more components of the gas turbine engine, wherein the respective instances of the output are based on at least one expected input corresponding to at least one expected condition of the one or more components;
- communicating sensor information from one or more sensors that measure one or more conditions of the gas turbine engine;
- executing software instructions on the third core to generate respective instances of the output based on the sensor information, wherein the at least one expected input differs from the sensor information and differs from an actual condition of the one or more components;
- and
- controlling the gas turbine engine according to the respective instance from the first core in response to at least one predetermined criterion being met, but controlling the gas turbine engine according to the respective instance from another one of the cores in response to the at least one predetermined criterion not being met.
Dependencies are inferred from the claim text.