Flight control system employing three controllers operating a dual actuator

• US 4,807,516 A
• Filed: 04/23/1987
• Issued: 02/28/1989
• Est. Priority Date: 04/23/1987
• Status: Expired due to Fees

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Takats, Imre J.
• Primary Examiner(s): Look, Edward K.
• Application Number:
  US07/041,872
• Time in Patent Office: 677 Days
• Field of Search: 91/358 R, 91/360, 91/361, 91/363 A, 91/364, 91/367, 91/509, 318/564, 244/194
• US Class Current: 91/363.00A
• CPC Class Codes: B64C 13/505 having duplication or stand-by provisions
• CPC Class Codes: G05D 1/0077 using redundant signals or controls

Abstract

An aircraft flight control system for use with a dual or tandem hydraulic actuator coupled to a flight control surface through an actuating rod. Each half of the tandem actuator is controlled by a respective electrohydraulic servovalve. Each electrohydraulic servovalve is controlled by signals applied to either of two actuating coils. Control signals are applied to the actuating coils from three controllers. The control signals are generated as a function of the difference between the flight control signal and a feedback signal indicative of the position of the actuating rod. Each electrohydraulic servovalve includes a pair of linear variable differential transformers generating feedback signals indicative of the position of the valve stem in each electrohydraulic servovalve. The valve feedback signals are compared to each other and to reference signals corresponding to the expected value of such feedback signals in order to detect and identify malfunctions in the flight control system. In one embodiment, the electrohydraulic servovalves are controlled by two channels of a primary controller in normal operation. In the event of a malfunction, control is transferred to one of two secondary controllers. In another embodiment, the electrohydraulic servovalves are controlled by respective primary controllers, with control being transferred to one of two channels of a secondary controller in the event of a malfunction.

Claims

1. A hydraulic flight control system comprising:

a tandem hydraulic actuator having an actuating rod connected to a pair of pistons mounted in respective first and second cylinders;

first and second electrohydraulic servovalves controlling the flow of hydraulic fluid into and out of said first and second hydraulic cylinders, respectively, each of said electrohydraulic servovalves being controlled by a pair of actuating coils;

first, second and third controller means receiving a flight control signal, said first controller means having a control channel that is capable of providing an output to one actuating coil of said first electrohydraulic servovalve for operating said first electrohydraulic servovalve, said second controller means having a control channel that is capable of providing an output to one actuating coil of said second electrohydraulic servovalve for operating said second electrohydraulic servovalve, said third control having first and second control channels that are capable of providing respective outputs to the other actuating coils of said first and second electrohydraulic servovalves for operating either or both of said electrohydraulic servovalves; and

monitor and control logic means for monitoring the performance of said controller means, electrohydraulic servovalves and actuator, said monitor and control logic means selectively enabling said controller means so that each of said electrohydraulic servovalves is operated by only one controller means at a time and, in the event of a malfunction in the performance of one electrohydraulic servovalve or controller means driving said electrohydraulic servovalve, enabling the other controller means connected to said electrohydraulic servovalve.

2. The flight control system of claim 1, further comprising:

a pair of valve position sensors operatively associated with each of said electohydraulic servovalves, said sensors generating respective outputs indicative of the operation of said valves, said outputs providing valve feedback signals to the respective controller means that are connected to said valves; and

comparator means receiving the feedback signals from said valve position sensors and comparing said valve feedback signals to each other to provide an indication of a failure in the event of a negative comparison.

3. The flight control system of claim 2 wherein said comparator means further compares said valve feedback signals to respective reference signals that correspond to the expected values of said feedback signals as a function of said flight control signals, thereby providing an additional indication of a failure in the event of a negative comparison

4. The flight control system of claim 1, further comprising:

a pair of valve position sensors operatively associated with each of said electrohydraulic servovalves, said sensors generating respective outputs indicative of the operation of said valves, said outputs providing valve feedback signals to the respective controller means that are connected to said valves; and

comparator means receiving the valve feedback signals from said valve position sensors and comparing said valve feedback signals to respective reference signals that correspond to the expected values of said valve feedback signals as a function of said flight control signal, thereby providing an indication of a failure in the event of a negative comparison

5. The flight control system of claim 2 wherein said third controller means further includes first and second model channels operated in tandem with respective first and second control channels of said third controller means, said model channels generating from said flight control signal respective first and second valve model signals corresponding to the valve feedback signals that respective valve position sensors would be expected to generate in response to said flight control signal, and wherein said flight control system further comprises:

first comparator means comparing the valve feedback signal from said first electrohydraulic servovalve with the valve feedback signal from said second electrohydraulic servovalve and said first and second valve models signals and, in the event that the valve feedback signal from said first electrohydraulic servovalve does not correspond to the valve feedback signal from said second electrohydraulic servovalve and to said first and second valve model signals, said first comparator means deactivating said first control channel and driving said first electrohydraulic servovalve with a signal derived from said first model channel; and

second comparator means thereafter comparing said first valve model signal with said second model signal and said first and second valve feedback signals and, in the event that said first valve model signal does not correspond to said second valve model signal and to said first and second valve feedback signals, said second comparator means deactivating said first model channel and enabling said first controller means so that said first electrohydraulic servovalve is thereafter operated by said first controller means through its respective first electrohydraulic servovalve control coil.

6. The electrohydraulic servovalve of claim 5 wherein said system further comprises:

third comparator means comparing said second valve feedback signal with said first valve feedback signal and said first and second valve model signals and, in the event that said second valve feedback signal does not correspond to said first valve feedback signal and to said first and second valve model signals, said third comparator means deactivating said second control channel and driving said second electrohydraulic servovalve with a signal derived from said second model channel; and

fourth comparator means thereafter comparing said second valve model signal with said first model signal and said first and second valve feedback signals and, in the event that said second valve model signal does not correspond to said first valve model signal and to said first and second valve feedback signals, said fourth comparator means deactivating said second model channel and enabling said second controller means so that said second electrohydraulic servovalve is thereafter operated by said second controller means through its respective second electrohydraulic servovalve control coil.

7. The flight control system of claim 1 wherein said system further includes a pair of valve position sensors operatively associated with each of said electrohydraulic servovalves, said sensors generating respective valve feedback signals indicative of the operation of said valves, and wherein said third controller means further includes first and second valve model channels operated in tandem with respect to first and second control channels of said third controller means, said valve model channels generating from said flight control signal respective first and second valve model signals corresponding to the valve feedback signals that respective valve position sensors would be expected to generate in response to said flight control signal, said third controller means further including transfer circuit means operative in the event of a control channel malfunction to apply a signal from the valve model channel corresponding to the malfunctioning control channel to the electrohydraulic servovalve coil to which the malfunctioning control channel is connected, whereby said valve model channels may be used as redundant control channels.

8. The flight control system of claim 2 wherein said system further includes a valve position sensor operatively associated with said first electrohydraulic servovalve, said sensor generating a valve feedback signal indicative of the operation of said valve, and wherein said first controller means further includes a valve model channel operated in tandem with the control channel of said first controller means, said valve model channel generating from said flight control signal a valve model signal corresponding to the valve feedback signal that said valve position sensor would be expected to generate in response to said flight control signal, said first controller means further including transfer circuit means operative in the event of a control channel malfunction to apply a signal derived from said valve model channel to the electrohydraulic servovalve coil to which said malfunctioning control channel is connected, whereby said valve model channel may be used as a redundant control channel.

9. The flight control system of claim 1, further including four position sensors coupled to said actuating rod generating respective actuator position signals indicative of the position of said actuating rod, said actuator position signals being coupled to the control channels of said controller means and being compared to said flight control signal to generate an error signal indicative of the difference between the actual position of said actuating rod and the position of said actuating rod designated by said flight control signal, said error signals being amplified by said controller means to provide respective outputs to said electrohydraulic servovalve actuating coil.

10. The flight control system of claim 1 wherein each of said controller means is driven by a respective flight control signal, thereby allowing said flight control system to continue operating in the event of a malfunction in the generation of at least one of said flight control signals.

11. The flight control system of claim 1 wherein said controller means further include cross-channel voting means for comparing the operation of said first, second and third controller means with each other to determine the existence and identity of a failed controller means.

12. The flight control system of claim 1 wherein said first and second electrohydraulic servovalves are driven by the control channels of said third controller means until one of said electrohydraulic servovalves or a control channel driving said electrohydraulic servovalve malfunctions, at which point the first or second controller means connected to said electrohydraulic servovalve is enabled.

13. The flight control system of claim 1 wherein said first and second electrohydraulic servovalves are driven by said first and second controller means, respectively, until one of said electrohydraulic servovalves or the controller means driving said electrohydraulic servovalve malfunctions, at which point the control channel of said third controller means that is connected to said electrohydraulic servovalve is enabled.

14. The flight control system of claim 1, further including bypass valve means for each of said cylinders, each of said bypass valve means being operative to bypass the piston in said cylinder responsive to malfunction of both controller means that are connected to the electrohydraulic servovalve controlling the flow of hydraulic fluid to said cylinder.

15. In an aircraft having at least one flight control surface and a flight control computer generating flight control commands from manual control inputs, an improved flight control system comprising:

a tandem hydraulic actuator having an actuating rod connected to a pair of pistons mounted in respective first and second cylinders, said actuating rod being connected to one of sad flight control surfaces;

first and second electrohydraulic servovalves controlling the flow of hydraulic fluid into and out of said first and second hydraulic cylinders, respectively, each of said electrohydraulic servovalves being controlled by a pair of actuating coils, said electrohydraulic servovalves each having a pair of valve operation sensors generating respective valve feedback signals indicative of the operation of said valves;

four actuator rod position sensors generating respective actuator rod position signals indicative of the position of said actuating rod;

primary controller means generating first and second control signals through respective first and second control channels as a function of said flight control signal and respective actuator rod position signals from two actuator rod position sensors, said first and second control channels being connected to one actuating coil of said first and second electrohydraulic valves, respectively;

first secondary controller means selectively generating a third control signal as a function of said flight control signal and an actuator rod position signal from a respective actuator rod position sensor, said first secondary controller being connected to the other actuating coil of said first electrohydraulic servovalve;

second secondary controller means selectively generating a fourth control signal as a function of said flight control signal and an actuator rod position signal from a respective actuator rod position sensor, said secondary controller being connected to the other actuating coil of said second electrohydraulic servovalve; and

monitor and control means receiving said valve feedback signals, said monitor and control means comparing the valve feedback signals from each electrohydraulic servovalve to a respective reference signal corresponding to the expected valve feedback signal resulting from said flight control signal and, in the event that a valve feedback signal does not correspond to a respective reference signal, enabling the first or second secondary controller that is connected to the electrohydraulic servovalve that is generating the valve feedback signal that does not correspond to its respective reference signal.

16. The flight control system of claim 15 wherein said primary control further includes first and second valve model channels operated in tandem with respect to first and second control channels of said primary controller, said valve model channels generating respective reference signals from said flight control signals, said primary controller further including transfer circuit means operative in the event of a control channel malfunction to apply a signal from said valve model channel corresponding to the malfunctioning control channel to the electrohydraulic servovalve coil to which the malfunctioning channel is connected, whereby said valve model channels may be used as redundant control channels.

17. The flight control system of claim 15 wherein each of said controller means is driven by a respective flight control signal, thereby allowing said flight control system to continue operating in the event of a malfunction in the generation of at least one of said flight control signals.

18. In an aircraft having at least one flight control surface and a flight control computer generating flight control signals from manual control inputs, an improved flight control system comprising:

a tandem hydraulic actuator having an actuating rod connected to a pair of pistons mounted in respect to first and second cylinders, said actuating rod being connected to said flight control surface;

first and second electrohydraulic servovalves controlling the flow of hydraulic fluid into and out of said first and second hydraulic cylinders, respectively, each of said electrohydraulic servovalves being controlled by a pair of actuating coils, said electrohydraulic servovalves each having a pair of valve operation sensors generating respective valve feedback signals indicative of the operation of said valves;

four actuator rod position sensors generating respective actuator rod position signals indicative of the position of said actuating rods;

first primary controller means generating a first control signal as a function of said flight control signal and a respective actuator rod position from an actuating rod position sensor, said first primary controller means being connected to one actuator coil of said first electrohydraulic servovalve;

second primary controller means generating a second control signal as a function of said flight control signal and a respective actuator rod position signal from an actuating rod position sensor, said second primary controller means being connected to one actuating coil of said second electrohydraulic servovalve;

secondary controller means selectively generating third and fourth control signals with respect to first and second control channels as a function of said flight control signal and respective actuator rod position signals from two actuator rod position sensors, said first and second control channels being connected to one actuating coil of said first and second electrohydraulic servovalves, respectively; and

monitor and control means receiving said valve feedback signals, said monitor and control means comparing the valve feedback signal from each electrohydraulic servovalve to a respective reference signal corresponding to the expected valve feedback signal resulting from said flight control signal and, in the event that a valve feedback signal does not correspond to a respective reference signal, enabling the first or second control channel of said secondary controller that is connected to the electrohydraulic servovalve generating the valve feedback signal that does not correspond to its respective reference signal.

19. The flight control system of claim 18 wherein each of said primary controllers further includes a valve model channel operated in tandem with its control channel, said valve model channels generating respective reference signals from said flight control signal, each of said primary controllers further including transfer circuit means operative in the event of a control channel malfunction to apply a signal derived from said valve model channel to the electrohydraulic servovalve coil to which said malfunctioning control channel is connected, whereby said valve model channels may be used as redundant control channels.

20. The flight control system of claim 18 wherein each of said controller means is driven by a respective flight control signal, thereby allowing said flight control systems to continue operating in the event of a malfunction in the generation of at least one of said flight control signals.

21. The flight control system of claim 18 wherein said controller means further include cross-channel voting means for comparing the operation of said first, second and third controller means with each other to determine the existence and identity of a failed controller means.