Control system and method for compliant control of mission functions

• US 7,515,974 B2
• Filed: 02/21/2006
• Issued: 04/07/2009
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Black, Randall H., Michalicek, Andrew J.
• Primary Examiner(s): VON BUHR, MARIA N
• Application Number:
  US11/359,159
• Publication Number:
  US 20070198126A1
• Time in Patent Office: 1,141 Days
• Field of Search: 700/28, 700 32- 34, 700/79, 700/81, 700/97, 700/103, 700/104, 705/1, 705/4, 705 7- 10, 705/35, 705 52- 54, 706/45, 706/47, 706903-918, 706/933
• US Class Current: 700/28
• CPC Class Codes: G05D 1/0055 with safety arrangements

Abstract

Systems and methods are provided for controlling one or more actuators to perform a mission while complying with predetermined regulations. A system for controlling one or more actuators includes a first processor for transmitting a command to operate at least one of the actuators, a second processor having an input coupled to the first processor, and a third processor having an input coupled to the output of the second processor and an output configured to couple to the actuators. The second processor is configured to transmit a first signal based on the command, and the first signal indicates a compliant command. The third processor is configured to transmit a second signal based on the first signal, and the second signal indicates a safe command. Software partitions executing on a single processor may be substituted for the hardware processors.

Claims

1. A system for controlling one or more actuators, the system comprising:

a first processor configured to transmit a mission command to operate at least one of the one or more actuators, said mission command being associated with a motion of the one or more actuators;

a second processor having an input coupled to said first processor and having an output, said second processor configured to transmit a first signal based on said motion of the one or more actuators associated with said mission command, said first signal indicating a compliant command if said motion of the one or more actuators associated with said mission command complies with at least one predetermined industry or government regulation, wherein said second processor comprises a first set of predefined instructions to determine said compliant command based on said motion of the one or more actuators associated with said mission command and said at least one predetermined industry or government regulation; and

a third processor having an input coupled to said output of said second processor and having an output configured to couple to the one or more actuators, said third processor configured to transmit a second signal based on said first signal, said second signal indicating a safe command if said first signal indicates that the motion of the one or more actuators complies with at least one predetermined safety standard, wherein said third processor comprises a second set of predefined instructions to determine said safe command based on said first signal and said at least one predetermined safety standard.

2. A system according to claim 1, wherein said first processor comprises a set of predefined instructions to execute at least one mission and transmit said mission command when executing said at least one mission.

3. A system according to claim 2, wherein said first processor is further configured to:

couple to at least one sensor, at least one of said at least one sensor configured to produce an input signal; and

execute said at least one mission based on said input signal.

4. A system according to claim 1, wherein said first set of predefined instructions suppresses said mission command when said motion of the one or more actuators associated with said mission command is non-compliant with said at least one predetermined industry or government regulation.

5. A system according to claim 1, wherein said second processor is further configured to couple to at least one sensor, at least one of said at least one sensor configured to produce an input signal;

and wherein said first set of predefined instructions is configured to determine said compliant command based on said input signal.

6. A system according to claim 1, wherein said second set of predefined instructions suppresses said mission command when said first signal indicates that said motion of the one or more actuators associated with mission command exceeds said at least one predetermined safety standard.

7. A system according to claim 1, wherein said third processor is further configured to couple to at least one sensor, at least one of said at least one sensor configured to produce an input signal;

and wherein said second set of predefined instructions is configured to determine said safe command based on said input signal.

8. A system according to claim 1, wherein the at least one predetermined industry or government regulation includes at least one of a) airspace regulations or b) altitude regulations.

9. A system according to claim 1, wherein the at least one predetermined safety standard includes at least one of a) obstacle clearance or b) force limits.

11. A controller according to claim 6, wherein said first processing partition is further configured to operate at least one mission algorithm to produce said mission command.

12. A controller according to claim 7, wherein said fourth processing partition has a second input configured to couple to at least one sensor, said at least one sensor producing an input signal, and wherein said at least one mission algorithm produces said mission command based on said input signal.

13. A controller according to claim 6, wherein said second processing partition is further configured to operate at least one compliance algorithm on said first signal to produce said second signal, said at least one compliance algorithm based on said set of industry or government regulations.

14. A controller according to claim 13, wherein said second processing partition is further configured to suppress said second signal when said motion of the one or more actuators is non-compliant based on said at least one compliance algorithm.

10. A controller for operating one or more actuators, the controller comprising:

a router configured to selectively direct one or more signals among a plurality of processing partitions;

a first processing partition of said plurality of processing partitions configured to communicate with said router and further configured to produce a first signal indicating a mission command associated with a motion of the one or more actuators;

a second processing partition of said plurality of processing partitions configured to communicate with said router and further configured to produce a second signal when said motion of the one or more actuators satisfies a set of industry or government regulations;

a third processing partition of said plurality of processing partitions configured to communicate with said router and further configured to produce a third signal when said motion of the one or more actuators satisfies a set of safety standards; and

a fourth processing partition having a first input configured to communicate with said router and an output coupled to the one or more actuators, said fourth processing partition configured to transmit said command upon receipt of said third signal.

15. A controller according to claim 10, wherein said third processing partition is further configured to operate at least one safety algorithm on said second signal to transmit said command, said at least one safety algorithm based on said set of safety standards.

16. A controller according to claim 15, wherein each of said at least one safety algorithm has at least one standard, and wherein said third processing partition is further configured to suppress said command when said motion of the one or more actuators does not satisfy said set of safety standards based on said at least one safety algorithm.

17. A method for controlling one or more actuators to perform a mission, the method comprising the steps of:

producing a first signal while performing at least a portion of the mission, the first signal indicating a mission command associated with a motion of the one or more actuators;

producing a second signal based on the first signal when the motion of the one or more actuators complies with at least one predetermined government or industry regulation, the second signal indicating a compliant command; and

transmitting the command to the one or more actuators when the motion of the one or more actuators satisfies at least one predetermined standard indicating a safe command.

18. A method according to claim 17, wherein said step of producing the first signal comprises selecting a mission algorithm based on at least one sensor input, the mission algorithm based on the mission.

19. A method according to claim 17, wherein said step of producing the second signal comprises operating a compliance algorithm to compare the motion of the one or more actuators with the at least one predetermined government or industry regulation.

20. A method according to claim 17, wherein said step of transmitting the command comprises operating a safety algorithm to compare the motion of the one or more actuators with the at least one predetermined standard.