Control system and method for compliant control of mission functions

• US 20070198126A1
• Filed: 02/21/2006
• Published: 08/23/2007
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Michalicek, Andrew, Black, Randall
• Granted Patent: US 7,515,974 B2
• Time in Patent Office: Days
• US Class Current: 700/200
• CPC Class Codes: G05D 1/0055 with safety arrangements

Abstract

Systems and methods are provided for controlling one or more actuators to perform a mission while complying with predetermined regulations. A system for controlling one or more actuators includes a first processor for transmitting a command to operate at least one of the actuators, a second processor having an input coupled to the first processor, and a third processor having an input coupled to the output of the second processor and an output configured to couple to the actuators. The second processor is configured to transmit a first signal based on the command, and the first signal indicates a compliant command. The third processor is configured to transmit a second signal based on the first signal, and the second signal indicates a safe command. Software partitions executing on a single processor may be substituted for the hardware processors.

Claims

1. A system for controlling one or more actuators, the system comprising:

a first processor configured to transmit a command to operate at least one of the one or more actuators;

a second processor having an input coupled to said first processor and having an output, said second processor configured to transmit a first signal based on said command, said first signal indicating a compliant command; and

a third processor having an input coupled to said output of said second processor and having an output configured to couple to the one or more actuators, said third processor configured to transmit a second signal based on said first signal, said second signal indicating a safe command.

2. A system according to claim 1, wherein said first processor comprises a set of predefined instructions to execute at least one mission and transmit said command when executing said at least one mission.

3. A system according to claim 2, wherein said first processor is further configured to:

couple to at least one sensor, at least one of said at least one sensor configured to produce an input signal; and

execute said at least one mission based on said input signal.

4. A system according to claim 1, wherein said second processor comprises a set of predefined instructions to determine said compliant command based on said command and at least one predetermined regulation.

5. A system according to claim 2, wherein said set of predefined instructions suppresses said command when said command is non-compliant with said at least one predetermined regulation.

6. A system according to claim 1, wherein said second processor is further configured to couple to at least one sensor, at least one of said at least one sensor configured to produce an input signal;

and wherein said second processor comprises a set of predefined instructions to determine said compliant command based on said command, at least one predetermined regulation, and said input signal.

7. A system according to claim 1, wherein said third processor comprises a set of predefined instructions to determine said safe command based on said first signal and at least one predetermined safety standard.

8. A system according to claim 7, wherein said set of predefined instructions suppresses said command when said command exceeds said at least one predetermined safety standard.

9. A system according to claim 1, wherein said third processor is further configured to couple to at least one sensor, at least one of said at least one sensor configured to produce an input signal;

and wherein said third processor comprises a set of predefined instructions to determine said safe command based on said command, at least one predetermined safety standard, and said input signal.

10. A controller for operating one or more actuators, the controller comprising:

a router configured to selectively direct one or more signals among a plurality of processing partitions;

a first processing partition of said plurality of processing partitions configured to communicate with said router and further configured to produce a first signal indicating a command;

a second processing partition of said plurality of processing partitions configured to communicate with said router and further configured to produce a second signal when said first signal satisfies a set of regulations;

a third processing partition of said plurality of processing partitions configured to communicate with said router and further configured to produce a third signal when said second signal satisfies a set of standards; and

a fourth processing partition having a first input configured to communicate with said router and an output coupled to the one or more actuators, said fourth processing partition configured to transmit said command upon receipt of said third signal.

11. A controller according to claim 10, wherein said first processing partition is further configured to operate at least one mission algorithm to produce said command.

12. A controller according to claim 11, wherein said fourth processing partition has a second input configured to couple to at least one sensor, said at least one sensor producing an input signal, and wherein said at least one mission algorithm produces said command based on said input signal.

13. A controller according to claim 10, wherein said second processing partition is further configured to operate at least one compliance algorithm on said first signal to produce said second signal, said at least one compliance algorithm based on said set of regulations.

14. A controller according to claim 13, wherein said second processing partition is further configured to suppress said second signal when said first signal is non-compliant based on said at least one compliance algorithm.

15. A controller according to claim 10, wherein said third processing partition is further configured to operate at least one safety algorithm on said second signal to transmit said command, said at least one safety algorithm based on said set of standards.

16. A controller according to claim 15, wherein each of said at least one safety algorithm has at least one standard, and wherein said third processing partition is further configured to suppress said command when said second signal does not satisfy said set of standards based on said at least one safety algorithm.

17. A method for controlling one or more actuators to perform a mission, the method comprising the steps of:

producing a first signal while performing at least a portion of the mission, the first signal indicating a command;

producing a second signal based on the first signal when the command complies with at least one predetermined regulation, the second signal indicating a compliant command; and

transmitting the command to the one or more actuators when the second signal satisfies at least one predetermined standard indicating a safe command.

18. A method according to claim 17, wherein said step of producing the first signal comprises selecting a mission algorithm based on at least one sensor input, the mission algorithm based on the mission.

19. A method according to claim 17, wherein said step of producing the second signal comprises operating a compliance algorithm to compare the first signal with the at least one predetermined regulation.

20. A method according to claim 17, wherein said step of transmitting the command comprises operating a safety algorithm to compare the second signal with the at least one predetermined standard.