System for a Vehicle with Redundant Computers

• US 20150274293A1
• Filed: 03/25/2015
• Published: 10/01/2015
• Est. Priority Date: 03/26/2014
• Status: Active Grant

• Current Assignee: Airbus Defence and Space GmbH (Airbus SE)
• Original Assignee: Airbus Defence and Space GmbH (Airbus SE)
• Inventors: HEUSINGER, Hugo, LOHMILLER, Winfried, REISCHL, Reinhard, JARASCH, Gregor, DELGADO ROMERO, Rosa Maria
• Granted Patent: US 9,573,682 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: B64C 15/00 Attitude, flight direction, or altitude control by jet reaction
• CPC Class Codes: B64U 10/25 Fixed-wing aircraft VTOL aircraft B64U10/20
• CPC Class Codes: B64U 2201/10 autonomous, i.e. by navigating independently from ground or air stations, e.g. by using inertial navigation systems [INS]
• CPC Class Codes: B64U 2201/20 Remote controls
• CPC Class Codes: G05D 1/0011 associated with a remote control arrangement
• CPC Class Codes: G05D 1/0077 using redundant signals or controls

Abstract

A control and/or management system for a vehicle includes at least one of: (A) at least two redundant vehicle management computers configured to generate system control commands for each maneuvering actuators and for each system actor based on the data acquired by the sensors; (B) at least two redundant remote interface units for interconnecting a sensor or a system actor with a vehicle management computer; (C) at least two redundant actuator control computers configured to generate control commands for each maneuvering actuator based on received maneuvering commands; and (D) a common interface for connecting an external computer, the common interface being directly connected to at least two redundant computers.

Claims

1. A control and/or management system for a vehicle, the system comprising:

maneuvering actuators configured to maneuver the vehicle;

system actors configured to control inner system components of the vehicle;

sensors configured to acquire data associated with the system actors or maneuvering actuators; and

at least two redundant computers configured to control or manage the vehicle,

wherein the system further comprises at least one of

at least two redundant vehicle management computers communicatively interconnected with the maneuvering actuators, system actors, and sensors, wherein one of the at least two redundant vehicle management computers is configured to generate system control commands for each maneuvering actuators and for each system actor based on the data acquired by the sensors,

at least two redundant remote interface units configured to interconnect a sensor or a system actor with the at least two vehicle management computers

at least two redundant actuator control computers configured to receive maneuvering commands from the at least two vehicle control computers, wherein each actuator control computer is adapted to generate control commands for each maneuvering actuator based on received maneuvering commands, and

a common interface, wherein the common interface is directly connected to the at least two redundant computers.

2. The system of claim 1, wherein each vehicle management computer is interconnected with each other vehicle management computer by a separate data link.

3. The system of claim 1, wherein one of the at least two redundant vehicle management computers is configured to receive control commands or sensor data from at least one other vehicle management computer and is configured to compare control commands or sensor data from different vehicle management computers to determine errors of a vehicle management computer.

4. The system of claim 1, wherein

a first one of the at least two redundant vehicle management computer is directly connected to first sensors and a second of the at least two redundant vehicle management computer is directly connected to second sensors;

data received from the first sensors in the first vehicle management computer is transmitted by the first vehicle management computer to the second vehicle management computer.

5. The system of claim 1, wherein the system comprises two, three, or four redundant vehicle management computers.

6. The system of claim 1, wherein

the sensors comprise a first sensor and a second system sensor configured to acquire data associated with a specific system actor or maneuvering actuator;

the first sensor is connected to a first one of the at least two redundant vehicle management computer;

the second system sensor is connected to a second one of the at least two redundant vehicle management computer.

7. The system of claim 1, wherein each of the at least two redundant actuator control computers is interconnected with each other actuator control computer by a separate data link.

8. The system of claim 1, wherein one of the at least two redundant actuator control computers is configured to receive maneuvering commands or control commands from at least one other actuator control computer and is configured to compare the maneuvering commands or the control commands from different actuator control computers to determine errors of an actuator control computer or maneuvering actuator.

9. The system of claim 1, wherein the system comprises two, three or four redundant actuator control computer computers.

10. The system of claim 1, wherein at least one of the at least two redundant computers comprises at least two processing units with different safety criticality.

11. The system of claim 1, wherein

the maneuvering actuators are configured to move control surfaces, or

a control surface moved by a maneuvering actuator is provided by at least one of an aileron, an elevator, and a rudder.

12. The system of claim 1, further comprising:

at least one communication interface to at least one control computer of the vehicle,

wherein the communication interface is directly connected to different vehicle management computers.

13. The system of claim 12, wherein a control computer is a mission management system configured to command the system to automatically perform mission relevant maneuvers.

14. The system of claim 12, wherein the at least one control computer is a communication system allowing a remote pilot to control or monitor the vehicle.

15. The system of claim 1, wherein the vehicle is an unmanned aerial vehicle.