초록 ▼

Each of three redundant sensor sets (16, 18, 20) provides flight status data to a corresponding one of three flight control computers (22, 24, 26). Each of the computers shares sensor data as well as computed control surface command signals with all other system computers. The command signal outputs

Each of three redundant sensor sets (16, 18, 20) provides flight status data to a corresponding one of three flight control computers (22, 24, 26). Each of the computers shares sensor data as well as computed control surface command signals with all other system computers. The command signal outputs from two computers are transduced (34, 36) to mechanical commands which are combined and applied to the appropriate aircraft control surface. The remaining computer output is a mathematical model of the mechanical outputs of the other channels. Fault detection and isolation is accomplished by cross channel comparing sensor data, command signals, model/surface position information and by incorporating channel monitors for detecting generic or common mode flight control computer failures.

대표청구항 ▼

An aircraft autopilot flight director system comprising: first, second and third redundant sensor sets, each sensor set producing predetermined output data signals related to the status of the aircraft; first, second and third flight control computers, each computer including means for: (a) comparin

An aircraft autopilot flight director system comprising: first, second and third redundant sensor sets, each sensor set producing predetermined output data signals related to the status of the aircraft; first, second and third flight control computers, each computer including means for: (a) comparing the associated sensor signal set with the sensor signal sets of the other two flight control computers and identifying a failure in response to a predetermined discrepancy there between; (b) processing said first, second and third sensor set data signals and producing a reference sensor signal set; (c) processing said reference sensor signal set and producing command control signals; (d) comparing said produced command control signals with the command control signals produced by the other two flight control computers and identifying a self-failure in response to a predetermined discrepancy there between; utilization means for utilizing the command control signals from at least two of the flight control computers as aircraft surface control commands; and common mode fault detection means, utilizing apparatus and control laws unique from any of said first, second and third flight control computers, for independently producing command control signals, said common mode fault means including means for comparing each of said first, second and third flight control computer produced control signals with said independently produced control signals and identifying as a failure each of said computers which produces command controls which deviate from said independently produced command control signal by a predetermined value.