Low cost modular architecture for piloting an aerodyne operating with high level of security

• US 6,600,963 B1
• Filed: 08/25/1999
• Issued: 07/29/2003
• Est. Priority Date: 02/25/1997
• Status: Expired due to Fees

• Current Assignee: Sextant Avionique
• Original Assignee: Sextant Avionique
• Inventors: Ledoux, Jean-Pierre, Loise, Dominique, Sardier, Patrick
• Primary Examiner(s): Gordon, Paul P.
• Application Number:
  US09/380,081
• Time in Patent Office: 1,434 Days
• Field of Search: 700/2, 700/9, 700/20, 700/26, 700/79, 700/81, 700/21, 700/292, 700/297, 700/298, 702/118, 702/182, 701/3, 701/14, 701/31, 701/33, 244/76.R
• US Class Current: 700/81
• CPC Class Codes: G06F 11/008 Reliability or availability analysis
• CPC Class Codes: G06F 11/20 using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
• CPC Class Codes: G06F 11/202 where processing functionality is redundant redundant communication control functionality G06F11/2005, redundant storage control functionality G06F11/2089

Abstract

A modular architecture for electronic equipment. Data-concentration modules, processing modules and display devices are interconnected by data-transmitters with sensors, measuring instruments and detectors. The data-concentration modules concentrate only the data which is not critical for the industrial process. This data is transmitted to other modules by a multi-receiver serial bus. The other modules directly receive the critical data which is routed by separate, respective serial digital links between, on the one hand, display devices and functions controlling the processes which are distributed in the process modules, and, on the other hand, sensors, measuring instruments and actuators.

Claims

1. A modular architecture of items of electronic equipment for a control of an industrial process, comprising:

receptacles containing data-concentration modules and processing modules supplied with energy by power supply modules;

critical display devices; and

data transmission means for interconnecting the receptacles and the critical display devices to critical sensors, noncritical sensors and actuators,

wherein the critical sensors transmit their critical information directly to the critical display devices and to the data-concentration and processing modules of the receptacles, the data-concentration modules, on the basis of data from the critical and noncritical sensors, deriving noncritical data intended for the critical display devices and for the processing modules via a multi-receiver serial digital bus, the processing modules deriving commands intended for the actuators on the basis of the data from the critical sensors and of noncritical data output by the concentration modules.

2. The modular architecture of items of electronic equipment according to claim 1, further comprising:

a maintenance unit arranged in a first one of the receptacles and linked to a second one of the receptacles, to the critical display devices, to an engine-parameter measuring device and to the noncritical sensors by maintenance buses; and

a maintenance terminal linked to the maintenance unit by a communications bus.

3. The modular architecture of items of electronic equipment according to claim 1, wherein the critical display devices comprise processing means for interpreting and visually displaying the data which are transmitted to the critical display devices originating from the critical and noncritical sensors.

4. The modular architecture of items of electronic equipment according to claim 3, wherein each processing and data-concentration module comprises an identical processing card, equipped with a processor, and an input/output card providing a connection between the processing card and direct inputs and outputs of a respective module, the processing card comprising a memory into which is loaded a program making it possible to control the processor so as to perform a function of the respective module.

5. The modular architecture of items of electronic equipment according to claim 3, wherein the processing and data-concentration modules are brought together in a rack comprising a primary power supply module performing pre-regulation of primary voltages supplying the rack and exhibiting a wide range of variation, to supply pre-regulated primary voltages exhibiting a small range of variation, each processing and data-concentration module of the rack including a DC voltage converter device receiving the pre-regulated primary voltages and supplying a respective module with the voltages which the respective module needs.

6. The modular architecture of items of electronic equipment according to claim 1, wherein each processing and data-concentration module comprises an identical processing card, equipped with processor, and an input/output card providing a connection between the processing card and direct input and outputs of a respective module, the processing card comprising a memory into which is loaded a program making it possible to control the processor so as to perform a function of the respective module.

7. The modular architecture of items of electronic equipment according to claim 6, wherein each processing and data-concentration module comprises a non-volatile maintenance memory in which are stored results of self-tests and all events assisting with maintenance of a respective module.

8. The modular architecture of items of electronic equipment according to claim 6, wherein each processing card includes a device comprising:

means for dividing a space addressable by the processor into addressable partitions and into addressable areas, and for attributing to each function and each task performed by the processor at least one addressable partition and at least one addressable area respectively,

means for dividing a utilization time of the processor into cyclic time slices, and for allocating the cyclic time slices respectively to a running of each of the functions,

means for successively activating the tasks of each function, in a pre-defined order, during the cyclic time slices allocated to a respective function,

means for updating and storing access rights corresponding to a task being performed, and

means for checking, upon each access to an addressable area, that access rights attributed to the task being performed correspond to the access rights of an area addressed.

9. The modular architecture of items of electronic equipment according to claim 6, wherein a first and second part of the memory which can be used by each task performed by the processor are separated by unused areas.

10. The modular architecture of items of electronic equipment according to claim 9, wherein the unused areas of the program and data memory are filled with code which can be executed by the processor allowing a memory-access error to be signaled, by stopping or blocking of the processor.

11. The modular architecture of items of electronic equipment according to claim 6, wherein each processing card stores in memory a same operating software comprising functions of initialization and self-test of a corresponding processing card, the functions of real-time management of a multi-task system, and a library of functions common to all the processing modules.

12. The modular architecture of items of electronic equipment according to claim 6, wherein the processing and data-concentration modules are brought together in a rack comprising a primary power supply module performing pre-regulation of primary voltages supplying the rack and exhibiting a wide range of variation, to supply pre-regulated primary voltages exhibiting a small range of variation, each processing and data-concentration module of the rack including a DC voltage converter device receiving the preregulated primary voltages and supplying a respective module with the voltages which the respective module needs.

13. The modular architecture of items of electronic equipment according to claim 1, wherein the processing and data-concentration modules are brought together in a rack comprising a primary power supply module performing pre-regulation of primary voltages supplying the rack and exhibiting a wide range of variation, to supply pre-regulated primary voltages exhibiting a small range of variation, each processing and data-concentration module of the rack including a DC voltage converter device receiving the pre-regulated primary voltages and supplying a respective module with the voltages which the respective module needs.

14. The modular architecture of items of electronic equipment according to claim 13, wherein the primary power supply module comprises means for filtering and clipping of overvoltages, and means for compensating for short-duration voltage drops, which are connected to an energy reserve.

15. The modular architecture of items of electronic equipment according to claim 14, wherein each processing and data-concentration module comprises a non-volatile maintenance memory in which are stored results of self-tests and all events assisting with maintenance of a respective module.

16. The modular architecture of items of electronic equipment according to claim 14, wherein the primary power supply module comprises one electronic circuit breaker for protection against short-circuits per module to be supplied to the rack, the electronic circuit breaker being connected to the DC voltage converter device of the module of the rack to supply the DC voltage converter device with one of the pre-regulated primary voltages.

17. The modular architecture of items of electronic equipment according to claim 13, wherein each processing and data-concentration module comprises a non-volatile maintenance memory in which are stored results of self-tests and all events assisting with maintenance of a respective module.

18. The modular architecture of items of electronic equipment according to claim 13, wherein the primary power supply module comprises one electronic circuit breaker for protection against short-circuits per module to be supplied of the rack, the electronic circuit breaker being connected to the DC voltage converter device of the module of the rack to supply the DC voltage converter device with one of the pre-regulated primary voltages.

19. The modular architecture of items of electronic equipment according to claim 18, wherein each processing and data-concentration module comprises a non-volatile maintenance memory in which are stored results of self-tests and all events assisting with maintenance of a respective module.

20. The modular architecture of items of electronic equipment according to claim 13, wherein each processing card includes a device comprising:

means for dividing a space addressable by the processor into addressable partitions and into addressable areas, and for attributing to each function and each task performed by the processor at least one addressable partition and at least one addressable area respectively,

means for dividing a utilization time of the processor into cyclic time slices, and for allocating the cyclic time slices respectively to a running of each of the functions,

means for successively activating the tasks of each function, in a pre-defined order, during the cyclic time slices allocated to a respective function,

means for updating and storing access rights corresponding to a task being performed, and

means for checking, upon each access to an addressable area, that access rights attributed to the task being performed correspond to the access rights of an area addressed.

21. A modular architecture of items of electronic equipment for a control of an industrial process, comprising:

receptacles containing data-concentration modules and processing modules supplied with energy by power supply modules;

critical display devices; and

a data transmission unit configured to interconnect the receptacles and the critical display devices to critical sensors, noncritical sensors and actuators,

wherein the critical sensors transmit their critical information directly to the critical display devices and to the data-concentration and processing modules of the receptacles, the data-concentration modules, on the basis of data from the critical and noncritical sensors, deriving noncritical data intended for the critical display devices and for the processing modules via a multi-receiver serial digital bus, the processing modules deriving commands intended for the actuators on the basis of the data from the critical sensors and of noncritical data output by the concentration modules.

22. The modular architecture of items of electronic equipment according to claim 21, wherein the display devices comprise a processor configured to interpret and visually display the data which are transmitted to the critical display devices originating from the critical and noncritical sensors.

23. The modular architecture of items of electronic equipment according to claim 21, further comprising:

a maintenance unit arranged in a first one of the receptacles and linked to a second one of the receptacles, to the critical display devices, to an engine-parameter measuring device and to the noncritical sensors by maintenance buses; and

a maintenance terminal linked to the maintenance unit by a communications bus.

24. The modular architecture of items of electronic equipment according to claim 21, wherein the processing and data-concentration modules are brought together in a rack comprising a primary power supply module performing pre-regulation of primary voltages supplying the rack and exhibiting a wide range of variation, to supply pre-regulated primary voltages exhibiting a small range of variation, each processing and data-concentration module of the rack including a DC voltage converter device receiving the pre-regulated primary voltages and supplying a respective module with the voltages which the respective module needs.

25. The modular architecture of items of electronic equipment according to claim 24, wherein the primary power supply module comprises a filter configured to filter and clip overvoltages, and a unit configured to compensate for short-duration voltage drops, which are connected to an energy reserve.

26. The modular architecture of items of electronic equipment according to claim 24, wherein the primary power supply module comprises one electronic circuit breaker for protection against short-circuits per module to be supplied of the rack, the electronic circuit breaker being connected to the DC voltage converter device of the module of the rack to supply the DC voltage converter device with one of the pre-regulated primary voltages.

27. The modular architecture of items of electronic equipment according to claim 21, wherein each processing and data-concentration module comprises an identical processing card, equipped with a processor, and an input/output card providing a connection between the processing card and direct inputs and outputs of a respective module, the processing card comprising a memory into which is loaded a program making it possible to control the processor so as to perform a function of the respective module.

28. The modular architecture of items of electronic equipment according to claim 27, wherein each processing card includes a device comprising:

a first divider configured to divide a space addressable by the processor into addressable partitions and into addressable areas, and to attribute to each function and each task performed by the processor at least one addressable partition and at least one addressable area respectively,

a second divider configured to divide a utilization time of the processor into cyclic time slices, and for allocating the cyclic time slices respectively to a running of each of the functions,

an activation unit configured to successively activate the tasks of each function, in a pre-defined order, during the cyclic time slices allocated to a respective function, and

an updating unit configured to update and store access rights corresponding to a task being performed, and

a unit configured to check upon each access to an addressable area, that access rights attributed to the task being performed correspond to access rights of an area addressed.

29. The modular architecture of items of electronic equipment according to claim 27, wherein a first and second part of the memory which can be used by each task performed by the processor are separated by unused areas.

30. The modular architecture of items of electronic equipment according to claim 29, wherein unused areas of the program and data memory are filled with code which can be executed by the processor allowing a memory-access error to be signaled, by stopping or blocking of the processor.

31. The modular architecture of items of electronic equipment according to claim 27, wherein each processing card stores in memory a same operating software comprising functions of initialization and self-test of a corresponding processing card, functions of real-time management of a multi-task system, and a library of functions common to all the processing modules.

32. The modular architecture of items of electronic equipment according to claim 27, wherein each processing and data-concentration module comprises a non-volatile maintenance memory in which are stored results of self-tests and all events assisting with maintenance of a respective module.