System and method for fail safe process execution monitoring and output control for critical systems
First Claim
1. A fault detection apparatus for use in a system that transmits data signals over at least one signal path via a bus connecting computation and I/O modules of a system, the apparatus comprising:
- a status monitor for monitoring validity of real-time control system state variable parameters, wherein the real-time control system state variables are made available to an independent partition, process, or module for independent monitoring of intermediate steps in a functions calculation, the control system state variable parameters characterizing a plurality of critical systems that communicate on the bus, wherein the control system state variables are present on the bus;
a state comparator comparing the real-time control system state variables with respect to expected system state variable conditions;
variable producing controller and variable consuming controller for validating output command validity based on expected individual state variable conditions; and
memory for storing state variable parameters.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods and systems for fail-safe process execution, monitoring and output control for critical systems operating on an open bus architecture with multiple, independent partitions on a single processor is presented. The control system state variables and their status of critical systems, within the control laws and mode logic, are monitored for process completion and health, and shut down if necessary. The embodiments provide for a dual path for shut down of, for example, flight critical systems so that the failure of one partitioned module does not affect the operation of the remaining partitioned modules. One path involves the CPM and IOM determination of command/response health. If persistent faults are detected, then either the DSP monitoring or the CPM performance monitoring results in a discrete signal being sent to the H-bridge disable to shutdown the current output. The second path is CPM controlled via a separate discrete signal on the input/output controller to the flight critical system shut-off valve. By implementing these separate paths, critical systems in one partition cannot be defeated by a single failure in another partition.
-
Citations
16 Claims
-
1. A fault detection apparatus for use in a system that transmits data signals over at least one signal path via a bus connecting computation and I/O modules of a system, the apparatus comprising:
-
a status monitor for monitoring validity of real-time control system state variable parameters, wherein the real-time control system state variables are made available to an independent partition, process, or module for independent monitoring of intermediate steps in a functions calculation, the control system state variable parameters characterizing a plurality of critical systems that communicate on the bus, wherein the control system state variables are present on the bus;
a state comparator comparing the real-time control system state variables with respect to expected system state variable conditions;
variable producing controller and variable consuming controller for validating output command validity based on expected individual state variable conditions; and
memory for storing state variable parameters. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A fault detection system for a single processor system partitioned to operate, monitor and control more than one flight critical process, comprising:
-
a single partitioned processor for simultaneously operating more than one flight control software related process;
a status monitor for monitoring validity of real-time control system state variable parameters operating within said processor, wherein the real-time control system state variables are made available to an independent partition, process, or module for independent monitoring of intermediate steps in a functions calculation, the control system state variable parameters characterizing a plurality of critical systems that communicate via at least one bus, wherein the control system state variables are present on the at least one bus;
a state comparator comparing the real-time control system state variables with respect to expected system state variable conditions;
variable producing controller and variable consuming controller for validating output command validity based on expected individual state variable conditions; and
memory for storing state variable parameters. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. A method for fault detection within a system that executes, monitors and controls multiple function within a single processor system that transmits data signals over at least one signal path via a bus connecting computation and I/O modules of a system, the method comprising:
-
monitoring the status of real-time control system state variable parameters, wherein monitoring is programmed into the computation and I/O modules, the control system state variable parameters characterizing a plurality of critical systems that communicate on the bus, wherein the control system state variables are present on the bus;
comparing the real-time control system state variable parameters with respect to expected system state variable conditions; and
validating output command validity based on expected individual state variable conditions. - View Dependent Claims (14, 15, 16)
-
Specification