CN112612297A - Airworthiness verification system and method for civil aircraft automatic flight control system - Google Patents
Airworthiness verification system and method for civil aircraft automatic flight control system Download PDFInfo
- Publication number
- CN112612297A CN112612297A CN202011591649.7A CN202011591649A CN112612297A CN 112612297 A CN112612297 A CN 112612297A CN 202011591649 A CN202011591649 A CN 202011591649A CN 112612297 A CN112612297 A CN 112612297A
- Authority
- CN
- China
- Prior art keywords
- verification
- navigation
- simulator
- data
- airworthiness
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012795 verification Methods 0.000 title claims abstract description 473
- RZVHIXYEVGDQDX-UHFFFAOYSA-N 9,10-anthraquinone Chemical compound C1=CC=C2C(=O)C3=CC=CC=C3C(=O)C2=C1 RZVHIXYEVGDQDX-UHFFFAOYSA-N 0.000 title claims abstract description 156
- 238000000034 method Methods 0.000 title claims abstract description 51
- 230000007246 mechanism Effects 0.000 claims abstract description 35
- 239000000872 buffer Substances 0.000 claims abstract description 33
- 230000005284 excitation Effects 0.000 claims abstract description 21
- 238000004891 communication Methods 0.000 claims abstract description 17
- 230000001360 synchronised effect Effects 0.000 claims abstract description 14
- 230000002457 bidirectional effect Effects 0.000 claims abstract description 7
- 238000004458 analytical method Methods 0.000 claims description 91
- 238000013515 script Methods 0.000 claims description 69
- 230000008859 change Effects 0.000 claims description 39
- 230000008569 process Effects 0.000 claims description 31
- 238000004886 process control Methods 0.000 claims description 24
- 238000004088 simulation Methods 0.000 claims description 21
- 238000013016 damping Methods 0.000 claims description 6
- 238000011156 evaluation Methods 0.000 claims description 6
- 238000010276 construction Methods 0.000 claims description 5
- 238000012790 confirmation Methods 0.000 claims description 4
- 238000006243 chemical reaction Methods 0.000 claims description 3
- 238000013461 design Methods 0.000 claims description 3
- 238000012545 processing Methods 0.000 claims description 2
- 230000004044 response Effects 0.000 claims description 2
- 238000012360 testing method Methods 0.000 claims description 2
- 238000007726 management method Methods 0.000 description 12
- 230000009194 climbing Effects 0.000 description 10
- 230000001133 acceleration Effects 0.000 description 4
- 230000001052 transient effect Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 3
- 101000699762 Homo sapiens RNA 3'-terminal phosphate cyclase Proteins 0.000 description 2
- 102100029143 RNA 3'-terminal phosphate cyclase Human genes 0.000 description 2
- IWUCXVSUMQZMFG-AFCXAGJDSA-N Ribavirin Chemical compound N1=C(C(=O)N)N=CN1[C@H]1[C@H](O)[C@H](O)[C@@H](CO)O1 IWUCXVSUMQZMFG-AFCXAGJDSA-N 0.000 description 2
- 238000010200 validation analysis Methods 0.000 description 2
- QXOQNNAWFUXKMH-UHFFFAOYSA-N 1-(Malonylamino)cyclopropanecarboxylic acid Chemical compound OC(=O)CC(=O)NC1(C(O)=O)CC1 QXOQNNAWFUXKMH-UHFFFAOYSA-N 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000013497 data interchange Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000012854 evaluation process Methods 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 230000001105 regulatory effect Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 238000012827 research and development Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05D—SYSTEMS FOR CONTROLLING OR REGULATING NON-ELECTRIC VARIABLES
- G05D1/00—Control of position, course, altitude or attitude of land, water, air or space vehicles, e.g. using automatic pilots
- G05D1/08—Control of attitude, i.e. control of roll, pitch, or yaw
- G05D1/0808—Control of attitude, i.e. control of roll, pitch, or yaw specially adapted for aircraft
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05D—SYSTEMS FOR CONTROLLING OR REGULATING NON-ELECTRIC VARIABLES
- G05D1/00—Control of position, course, altitude or attitude of land, water, air or space vehicles, e.g. using automatic pilots
- G05D1/10—Simultaneous control of position or course in three dimensions
- G05D1/101—Simultaneous control of position or course in three dimensions specially adapted for aircraft
Landscapes
- Engineering & Computer Science (AREA)
- Aviation & Aerospace Engineering (AREA)
- Radar, Positioning & Navigation (AREA)
- Remote Sensing (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Automation & Control Theory (AREA)
- Traffic Control Systems (AREA)
- Control Of Position, Course, Altitude, Or Attitude Of Moving Bodies (AREA)
Abstract
A naval verification system and verification method of civil aircraft automatic flight control system, there are left exciter and right single device, carry on the naval verification workstation of data communication through AFDX network switch with left exciter and right exciter separately, the naval verification workstation carries on the data communication with automatic flight control system through the bus protocol converter, the left exciter has left industrial computer and left AFDX integrated circuit board, there are left data distributors in the left industrial computer, left data synchronous buffer, reconstruction manager, atmospheric environment simulator and left navigation exciter bidirectionally connected with left data distributor separately; the right excitation device is provided with a right industrial personal computer and a right AFDX board card, a right data distributor, a right data synchronous buffer, an airplane simulator, an execution mechanism simulator and a right navigation exciter are arranged in the right industrial personal computer, and the right data synchronous buffer, the airplane simulator, the execution mechanism simulator and the right navigation exciter are respectively connected with the right data distributor in a bidirectional mode; the invention improves the verification efficiency and has wide applicability.
Description
Technical Field
The invention relates to an avionics system verification system. In particular to a seaworthiness verification system and a verification method of a civil aircraft automatic flight control system suitable for ground laboratory verification.
Background
The automatic flight control system is the core of a civil aircraft avionics system, and one of the main functions is to automatically control the attitude, the speed and the track of an aircraft and automatically select a working mode according to the current flight stage and the flight state. The method receives command information from a flight management system and a driver, synthesizes signals such as atmospheric environment, a navigation system, actuator feedback and the like, and generates automatic flight control instructions such as pneumatic control surface deflection, engine throttle control and the like according to a control rule corresponding to a working mode.
The research and development of civil aviation and electrical system products must follow the airworthiness standard of a target machine type, namely CCAR-25 'airworthiness standard of transport type aircrafts', and suitable airworthiness terms are selected based on the machine type and the characteristics of the products, so that the airworthiness requirement of the products is determined. In order to ensure the integrity and sufficiency of the airworthiness requirement of the product, especially for a core avionic system such as a civil aircraft automatic flight control system, the core avionic system not only complies with the CCAR-25 airworthiness standard requirement, but also complies with relevant specific technical standard regulations, consultation notice, industrial standards and host factory requirements. Thus, airworthiness verification of automatic flight control systems requires consideration of numerous regulatory requirements, which are tedious and burdensome.
The airworthiness work of the civil aircraft avionic system starts from the analysis of requirements such as the configuration, the application and the use environment of the civil aircraft, and is subjected to links such as airworthiness analysis, airworthiness criterion cutting, airworthiness requirement generation, airworthiness design and the like, so that the airworthiness requirements such as function, performance, capability, safety and the like are determined and conformance verification is carried out. And repeating the above steps along with the deepening of the airworthiness examination work until the avionics system meets the airworthiness requirement. In the processes, the front link and the rear link are not synchronous frequently, and meanwhile, in order to carry out conformity verification activities with different airworthiness requirements in a matching manner, a plurality of different verification platforms need to be developed, even if some subsequent links are required to prove that the verification platforms are not suitable. Therefore, the whole verification time is long and the cost is high.
Modern civil aircrafts adopt technologies such as avionic full duplex switched Ethernet (AFDX) bus and the like to establish a data channel for transmitting information between an automatic flight control system and other avionic systems, conformity verification analysis needs to be carried out on the automatic flight control system according to airworthiness standard requirements and a data channel protocol, and at present, no special airworthiness verification system and method based on the AFDX bus exist, and the verification of numerous airworthiness requirements of the automatic flight control system can be supported.
Disclosure of Invention
The invention aims to solve the technical problem of providing a airworthiness verification system and a verification method of a civil aircraft automatic flight control system, which can reduce airworthiness verification cost and improve airworthiness verification efficiency and are used for performing conformance verification on airworthiness requirements such as functions, performance, capability, safety and the like of the civil aircraft automatic flight control system in a ground laboratory verification stage.
The technical scheme adopted by the invention is as follows: a airworthiness verification system of a civil aircraft automatic flight control system comprises a left excitation device and a right excitation single device which are used for generating different verification environment data, an airworthiness verification workstation which is respectively in data communication with the left excitation device and the right excitation device through an AFDX network switch and used for verifying environment data generation control and airworthiness verification analysis, and the airworthiness verification workstation is also in data communication with an automatic flight control system through a bus protocol converter which completes the conversion of an airworthiness verification workstation interface protocol and an automatic flight control system interface protocol, the automatic flight control system is used for generating an automatic flight simulation control instruction according to verification environment data and a verification instruction which are received after analysis processing of the airworthiness verification workstation, wherein the left excitation device comprises a left industrial personal computer and a left AFDX board card, a left data distributor, a left data synchronous buffer, a reconstruction manager, an atmospheric environment simulator and a left navigation exciter are arranged in the left industrial personal computer, and are respectively connected with the left data distributor in a bidirectional mode; the right excitation device comprises a right industrial personal computer and a right AFDX board card, wherein a right data distributor, a right data synchronous buffer, an airplane simulator, an execution mechanism simulator and a right navigation exciter are arranged in the right industrial personal computer, and the right data synchronous buffer, the airplane simulator, the execution mechanism simulator and the right navigation exciter are respectively connected with the right data distributor in a bidirectional mode; left side data synchronization buffer in the industrial computer of left side loops through left side AFDX integrated circuit board and AFDX network switch carry out data communication with the airworthiness workstation of verifying, right side data synchronization buffer in the industrial computer of right side loops through right side AFDX integrated circuit board and AFDX network switch carry out data communication with the airworthiness workstation of verifying, carry out data exchange and data synchronization through the ethernet by left side data synchronization buffer and right side data synchronization buffer between industrial computer of left side and the industrial computer of right side, automatic flight control system through the airworthiness verify the workstation respectively with left side incentive device and right incentive list device carry out data communication.
A airworthiness verification method for an airworthiness verification system of a civil aircraft automatic flight control system comprises the following steps:
1) database initialization: updating an equipment management database in the reconfiguration manager according to the model and the engine applied by the automatic flight control system; an airplane database corresponding to the application model in the flight simulator; a performance database corresponding to the application model and the engine and an execution mechanism database corresponding to the application model and the engine in the execution mechanism simulator; updating a verification script database corresponding to the airworthiness verification requirement in the verification analysis unit according to the airworthiness verification task; the atmospheric environment database in the atmospheric environment simulator and the navigation database and the terrain database in the right navigation exciter are kept unchanged;
2) verifying and initializing: on the control platform, according to the requirements of the verification task and the airworthiness clause, a control instruction is manually input by using a keyboard;
3) verification script selection and parameter initialization:
(3.1) performing and invoking logic generation: the control platform generates a verification control instruction according to the input control instruction; the verification analysis unit generates execution and calling logic of a verification script according to a verification control instruction input by the control platform;
(3.2) verification script calling: calling a corresponding verification script according to the execution and calling logic of the verification script, and injecting airworthiness clause verification parameters into the verification script;
(3.3) initializing the verification environment and the compliance analysis software: analyzing verification process control information in the verification script, combining a verification control instruction input by the control platform, sending a verification instruction to the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the execution mechanism simulator and the automatic flight control system through the corresponding data distributor according to a distribution rule, and initializing parameters of a verification environment; analyzing the conformity passing information in the verification script and initializing a conformity analysis part of the verification analysis unit;
4) and (3) performing verification: the verification instruction generation part of the verification analysis unit analyzes the verification process control information in the verification script, and sends verification instructions to the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the execution mechanism simulator and the automatic flight control system through the corresponding data distributor according to the distribution rule to complete the control of the verification process and the verification environment; the corresponding data distributor carries out data distribution management on the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the executing mechanism simulator and the automatic flight control system according to a distribution rule to complete the construction of a verification environment; the verification analysis unit receives verification environment data and an automatic flight control command to complete conformance analysis; after verification is finished, storing verification environment data and the automatic flight control command as verification data files;
because the generation of the verification data files depends on the verification scripts, each verification data file has a corresponding verification script and is named according to the corresponding verification script; the verification data file stores verification data at set intervals in the following format: the 1 st column is a serial number, the 2 nd column is an actual navigation parameter, the 3 rd column is an atmospheric parameter, the 4 th column is an airborne equipment operation state, the 5 th column is an actual control surface position, the 6 th column is an actual engine state, the 7 th column is control information for an automatic flight control system, the 8 th column is control device information, and the 9 th column is configuration information;
5) and (4) outputting a result: and the control platform receives the conformity analysis result and the verification environment data and displays the conformity analysis result and the verification environment data on a display of the control platform.
The airworthiness verification system and the airworthiness verification method of the civil aircraft automatic flight control system are based on an AFDX network architecture of a modern civil aircraft avionics system, and can be used for carrying out airworthiness research on the automatic flight control system during installation and authentication of different airplanes by changing a flight simulator model, so that the airworthiness verification system and the airworthiness verification method have universality. Meanwhile, the verification script of the system is convenient to develop corresponding to various airworthiness standard requirements, the conformance verification of different airworthiness requirements is supported, and the verification efficiency is improved; the system calls various resources uniformly through the verification script to form a single verification system, so that the use of various verification platforms is avoided, and the verification time and the verification cost are greatly saved. The construction method of the airworthiness verification system is also suitable for construction of verification systems of other avionic products, and has wide applicability.
Drawings
FIG. 1 is a schematic structural diagram of a seaworthiness verification system of the civil aircraft automatic flight control system of the invention;
FIG. 2 is a chart of airworthiness validation subjects of the present invention;
FIG. 3 is a flow chart of the airworthiness verification method for the civil aircraft automatic flight control system of the invention.
Detailed Description
The airworthiness verification system and the airworthiness verification method of the civil aircraft automatic flight control system are described in detail below with reference to the embodiment and the accompanying drawings.
As shown in fig. 1, the airworthiness verification system of the civil aircraft automatic flight control system of the present invention comprises a left excitation device 1 and a right excitation device 2 for generating verification environment data, an airworthiness verification workstation 4 for performing data communication with the left excitation device 1 and the right excitation device 2 respectively through an AFDX network switch 3 and for generating verification environment data control and airworthiness verification analysis, wherein the airworthiness verification workstation 4 further performs data communication with an automatic flight control system 6 through a bus protocol converter 5, the bus protocol converter 5 completes conversion between an interface protocol of the airworthiness verification workstation 4 and an interface protocol of the automatic flight control system 6, the automatic flight control system 6 is used for receiving verification environment data and a verification instruction of the airworthiness verification workstation 4 and generating an automatic flight control instruction, wherein the left excitation device 1 comprises a left board card 1.1 and a left AFDX board card 1.2, a left data distributor 1.1.1, a left data synchronous buffer 1.1.2, a reconstruction manager 1.1.3, an atmospheric environment simulator 1.1.4 and a left navigation exciter 1.1.5 which are respectively connected with the left data distributor 1.1.1 in a bidirectional way are arranged in the left industrial personal computer 1.1; the right excitation device 2 comprises a right industrial personal computer 2.1 and a right AFDX board card 2.2, a right data distributor 2.1.1, a right data synchronous buffer 2.1.2, a flight simulator 2.1.3, an execution mechanism simulator 2.1.4 and a right navigation exciter 2.1.5 are arranged in the right industrial personal computer 2.1 and are respectively connected with the right data distributor 2.1.1 in a bidirectional mode; left side data synchronization buffer 1.1.2 in the industrial computer 1.1 of left side loops through left side AFDX integrated circuit board 1.2 and AFDX network switch 3 carry out data communication with airworthiness verification workstation 4, right side data synchronization buffer 2.1.2 in the industrial computer 2.1 of right side loops through right side AFDX integrated circuit board 2.2 and AFDX network switch 3 carry out data communication with airworthiness verification workstation 4, carry out data exchange and data synchronization through the ethernet by left side data synchronization buffer 1.1.2 and right side data synchronization buffer 2.1.2 between industrial computer 1.1 of left side and the industrial computer 2.1 of right side, automatic flight control system 6 through airworthiness verification workstation 4 respectively with left side actuating device 1 carries out data communication with right actuating unit 2.
The left data distributor 1.1.1 and the right data distributor 2.1.1 respectively perform data distribution management on a reconstruction manager 1.1.3, an atmospheric environment simulator 1.1.4, a left navigation exciter 1.1.5, a flight simulator 2.1.3, an execution mechanism simulator 2.1.4, a right navigation exciter 2.1.5 and an airworthiness verification workstation 4 according to distribution rules, and are used for constructing a verification environment corresponding to an airworthiness requirement; the distribution rule is as follows:
(a) the equipment reconstruction and fault simulation instruction generated by the reconstruction manager 1.1.3 is distributed to a left navigation exciter 1.1.5, a flight simulator 2.1.3, an execution mechanism simulator 2.1.4, a right navigation exciter 2.1.5 and an airworthiness verification workstation 4;
(b) distributing the flap, slat and landing gear position information generated by the reconstruction manager 1.1.3 to the flight simulator 2.1.3;
(c) the atmospheric model data generated by the atmospheric environment simulator 1.1.4 are distributed to the left navigation exciter 1.1.5, the flight simulator 2.1.3 and the airworthiness verification workstation 4;
(d) the atmospheric parameters generated by the left navigation actuator 1.1.5 are distributed to the airworthiness verification workstation 4;
(e) real-time attitude and position change information generated by the flight simulator 2.1.3 is distributed to the left navigation exciter 1.1.5, the right navigation exciter 2.1.5 and the airworthiness verification workstation 4;
(f) the control surface position and engine thrust change information generated by the actuator simulator 2.1.4 are distributed to the flight simulator 2.1.3 and the airworthiness verification workstation 4;
(g) the navigation parameters generated by the right navigation exciter 2.1.5 are distributed to the atmospheric environment simulator 1.1.4 and the airworthiness verification workstation 4;
(h) and the verification instruction generated by the airworthiness verification workstation 4 is distributed to the reconstruction manager 1.1.3, the atmospheric environment simulator 1.1.4, the left navigation exciter 1.1.5, the flight simulator 2.1.3, the actuator simulator 2.1.4 and the right navigation exciter 2.1.5.
Among the industrial computer 1.1 on the left side: the reconfiguration manager 1.1.3 comprises an equipment management database corresponding to the application model and the engine, and is used for receiving a verification instruction, generating an equipment reconfiguration and fault simulation instruction and position information of a flap, a slat and a landing gear; the atmospheric environment simulator 1.1.4 comprises an atmospheric environment database for receiving verification instructions, navigation parameters including current aircraft position and altitude information, and generating atmospheric model data including wind, temperature, barometric pressure and density parameters.
Among the industrial computer 2.1 on the right side: the flight simulator 2.1.3 comprises an airplane database corresponding to an application machine type and is used for receiving a verification instruction, atmospheric model data, navigation parameters, control surface position and engine thrust change information and flap, slat and undercarriage position information, generating flight attitude and position change information, receiving an equipment reconstruction and fault simulation instruction and generating flight attitude and position change information influenced by equipment reconstruction and fault; the actuator simulator 2.1.4 comprises an actuator database and a performance database corresponding to the application model and the engine, and is used for receiving an automatic flight control instruction and a verification instruction, generating control surface position and engine thrust change information, receiving an equipment reconstruction and fault simulation instruction, and generating control surface position and engine thrust change information influenced by equipment reconstruction and fault.
The left navigation exciter 1.1.5 in the left industrial personal computer 1.1 is used for receiving a verification instruction, simulating the functions of a plurality of sets of atmospheric data components, receiving the current attitude and position change information of the airplane and atmospheric model data, and generating atmospheric parameters including airspeed, angle of attack, total temperature and the like; receiving an equipment reconstruction and fault simulation instruction, and generating atmospheric parameters influenced by the equipment reconstruction and the fault; the right navigation exciter 2.1.5 in the right industrial personal computer 2.1 comprises a navigation database and a terrain database, is used for simulating a plurality of sets of flight plans, inertial navigation, radio navigation and satellite navigation functions, receiving verification instructions, airplane attitude and position change information and generating navigation parameters comprising flight plans, airplane current attitude, position, height, speed, flight path deviation, glidepath deviation and the like; and receiving a device reconstruction and fault simulation instruction, and generating navigation parameters influenced by the device reconstruction and the fault.
The airworthiness verification workstation 4 comprises a control platform 4.1, a verification data distributor 4.2 and a verification analysis unit 4.3, wherein the control platform 4.1 is used for receiving an external control instruction, generating a verification control instruction and sending the verification control instruction to the verification data distributor 4.2, receiving a conformance analysis result and verification environment data forwarded by the verification data distributor 4.2, storing and displaying the information, and the verification control instruction comprises an airworthiness clause selection instruction and an airworthiness clause verification parameter. The verification analysis unit 4.3 comprises a verification script database corresponding to airworthiness verification requirements and used for generating verification instructions and analyzing the conformity, wherein the verification instructions are generated and analyzed by conformity to receive verification control instructions, automatic flight control instructions, atmospheric model data, atmospheric parameters, navigation parameters, attitude and position change information, control surface position and engine thrust change information, equipment reconstruction and fault simulation instructions and flap, slat and undercarriage position information, and generates verification instructions and a conformity analysis result according to the verification scripts; the verification data distributor 4.2 performs data distribution management according to the following distribution rules:
(a) the received verification instruction generated by the verification analysis unit 4.3 is distributed to the left data distributor 1.1.1, the right data distributor 2.1.1 and the automatic flight control system 6;
(b) the received equipment reconfiguration and fault simulation instructions generated by the reconfiguration manager 1.1.3, and the position information of the flaps, the slats and the undercarriage are distributed to a verification analysis unit 4.3 and an automatic flight control system 6;
(c) the received atmospheric model data generated by the atmospheric environment simulator 1.1.4 is distributed to a verification analysis unit 4.3;
(d) the received atmospheric parameters generated by the left navigation actuator 1.1.5 are distributed to a verification analysis unit 4.3 and an automatic flight control system 6, and the received navigation parameters generated by the right navigation actuator 2.1.5 are distributed to the verification analysis unit 4.3 and the automatic flight control system 6;
(e) the received real-time attitude and position change information generated by the flight simulator 2.1.3 is distributed to a verification analysis unit 4.3 and an automatic flight control system 6;
(f) the control surface position and the engine thrust change information generated by the executing mechanism simulator 2.1.4 are received and distributed to a verification analysis unit 4.3;
(g) the received automatic flight control instruction generated by the automatic flight control system 6 is distributed to the verification analysis unit 4.3 and the right data distributor 2.1.1;
(h) and the received conformance analysis result and the verification environment data generated by the verification analysis unit 4.3 are distributed to the control platform 4.1.
As shown in fig. 2, the verification analysis unit 4.3 generates a verification instruction according to the relevant airworthiness verification subject, and performs a compliance analysis, where the airworthiness verification subject related to the automatic flight control system includes:
(1) and (4) functional verification:
(1.1) verifying the function of the automatic throttle: analyzing whether the working state of the automatic flight control system and the aircraft navigation parameters influenced by the throttle instruction output by the automatic throttle meet the set passing condition of conformity or not under the expected condition;
(1.2) function verification of the autopilot: analyzing whether the working state of the automatic flight control system and the aircraft navigation parameters controlled by the autopilot meet the set passing condition of conformity under the expected condition;
(1.3) flight director function verification: analyzing whether the working state of the automatic flight control system and the navigation parameters of the airplane meet the set passing conditions of conformity or not when the flight crew operates the airplane according to the flight guidance information generated by the flight guidance instrument under the expected conditions;
(1.4) verifying the yaw damping function: analyzing whether the working state of the automatic flight control system and the aircraft navigation parameters influenced by the gain control command generated by the yaw damping function meet the set passing condition of conformity or not under the expected condition;
(2) and (3) performance verification:
(2.1) attitude control performance verification: whether the working state of the automatic flight control system, the airplane attitude influenced by the automatic flight control system and the change of the airplane attitude meet the set passing condition of conformity or not;
(2.2) verifying the track control performance: whether the working state of the automatic flight control system, the aircraft track influenced by the automatic flight control system and the aircraft track change meet the set passing condition of conformity or not;
(2.3) verification of airspeed control performance: whether the working state of the automatic flight control system, the aircraft airspeed influenced by the automatic flight control system and the aircraft airspeed change meet the set passing condition of conformity or not;
(3) capability verification:
(3.1) multi-device functional verification: in the cooperative working process of the automatic flight control system and the designated airborne equipment, whether the working state of the automatic flight control system and control instruction information output by the automatic accelerator function, the automatic pilot function and the yaw damping function meet the passing condition of conformity or not is judged; when the flight crew operates the airplane according to the flight guidance information generated by the flight guidance instrument, whether the navigation parameters of the airplane meet the set passing conditions of the conformity or not is judged;
(3.2) multi-device performance verification: in the cooperative working process of the automatic flight control system and the specified airborne equipment, the working state of the automatic flight control system, and the attitude, track and airspeed of the airplane, the attitude, track and airspeed change of the airplane and the response time of the change meet the set passing condition of conformity;
(4) and (3) safety verification:
(4.1) Functional Hazard Analysis (FHA) comprising: identifying failure states, determining the influence of the failure states and the influence levels of the failure states, performing test analysis on the failure states, selecting a conformity verification method of the failure states and outputting a function hazard analysis result;
(4.2) Preliminary System Security Analysis (PSSA) comprising: safety requirement identification, system architecture and design decision evaluation, safety requirement confirmation of equipment at the next level and output of a primary system safety analysis result;
(4.3) System Security Assessment (SSA) comprising: system safety requirement confirmation, failure mode and influence analysis, final failure tree analysis and system safety evaluation result output.
As shown in fig. 3, the airworthiness verification method for the civil aircraft automatic flight control system of the present invention includes the following steps:
1) database initialization: updating an equipment management database in the reconfiguration manager according to the model and the engine applied by the automatic flight control system; an airplane database corresponding to the application model in the flight simulator; a performance database corresponding to the application model and the engine and an execution mechanism database corresponding to the application model and the engine in the execution mechanism simulator; updating a verification script database corresponding to the airworthiness verification requirement in the verification analysis unit according to the airworthiness verification task; the atmospheric environment database in the atmospheric environment simulator and the navigation database and the terrain database in the right navigation exciter are kept unchanged;
2) verifying and initializing: on the control platform, according to the requirements of the verification task and the airworthiness clause, manually inputting a control instruction through a keyboard;
3) verification script selection and parameter initialization:
(3.1) performing and invoking logic generation: the control platform generates a verification control instruction according to the input control instruction; the verification analysis unit generates execution and calling logic of a verification script according to a verification control instruction input by the control platform;
(3.2) verification script calling: calling a corresponding verification script according to the execution and calling logic of the verification script, and injecting airworthiness clause verification parameters into the verification script;
the verification script is a database file, comprises two data tables and records verification process control information and conformance passing information, wherein:
(3.2.1) validating the process control information table for a total of 9 columns: the 1 st column is a serial number, the 2 nd column is an initial navigation parameter, the 3 rd column is an atmosphere model parameter, the 4 th column is an airborne equipment running state, the 5 th column is an initial control surface position, the 6 th column is an initial engine state, the 7 th column is control information for an automatic flight control system, the 8 th column is control device information, and the 9 th column is configuration information;
(3.2.2) compliance by the information sheet, there are 9 columns: the 1 st column is a serial number, the 2 nd column is a planned navigation parameter condition required to be met by the passing of the conformity, the 3 rd column is an atmospheric parameter required to be met by the passing of the conformity, the 4 th column is an airborne equipment operation state required to be met by the passing of the conformity, the 5 th column is a control surface position condition required to be met by the passing of the conformity, the 6 th column is an engine state condition required to be met by the passing of the conformity, the 7 th column is a control information condition required to be met by the passing of the conformity to the automatic flight control system, the 8 th column is control device information required to be met by the passing of the conformity, and the 9 th column is configuration information required to be.
(3.3) initializing the verification environment and the compliance analysis software: analyzing verification process control information in the verification script, combining a verification control instruction input by the control platform, sending a verification instruction to the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the execution mechanism simulator and the automatic flight control system through the corresponding data distributor according to a distribution rule, and initializing parameters of a verification environment; analyzing the conformity passing information in the verification script and initializing a conformity analysis part of the verification analysis unit;
4) and (3) performing verification: the verification instruction generation part of the verification analysis unit analyzes the verification process control information in the verification script, and sends verification instructions to the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the execution mechanism simulator and the automatic flight control system through the corresponding data distributor according to the distribution rule to complete the control of the verification process and the verification environment; the corresponding data distributor carries out data distribution management on the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the executing mechanism simulator and the automatic flight control system according to a distribution rule to complete the construction of a verification environment; the verification analysis unit receives verification environment data and an automatic flight control command to complete conformance analysis; after verification is finished, storing verification environment data and the automatic flight control command as verification data files;
because the generation of the verification data files depends on the verification scripts, each verification data file has a corresponding verification script and is named according to the corresponding verification script; the verification data file stores verification data at set intervals in the following format: the 1 st column is a serial number, the 2 nd column is an actual navigation parameter, the 3 rd column is an atmospheric parameter, the 4 th column is an airborne equipment operation state, the 5 th column is an actual control surface position, the 6 th column is an actual engine state, the 7 th column is control information for an automatic flight control system, the 8 th column is control device information, and the 9 th column is configuration information;
5) and (4) outputting a result: and the control platform receives the conformity analysis result and the verification environment data and displays the conformity analysis result and the verification environment data on a display of the control platform.
Examples are given below:
the invention is used for carrying out airworthiness conformity verification on automatic pilot positioning and capturing in an automatic pilot height capturing mode of an automatic flight control system under the condition of left aileron jamming, wherein the applied model is a Boeing B777 passenger plane, and the applied engine is a GE90 engine.
Relating to the verification subject: functional verification module-autopilot functional verification
According to CCAR-25 and technical standard regulation, CTSO-C198 'Automatic Flight Guidance and Control System (AFGCS) equipment' requirement for automatic pilot height capture mode automatic pre-positioning and capture, SAE ARP4761 'guidance and method for civil onboard system and equipment safety evaluation process' and advice and evaluation method in consultation notice AC25.1329, flight tasks of climbing and descending processes are designed.
The automatic pilot height capturing mode automatic pre-positioning and capturing flight tasks in the climbing process are as follows:
(a) connecting the flight director with the automatic throttle;
(b) presetting a height reference which is 2000 feet higher than the current height;
(c) selecting a vertical flight mode;
(d) performing a climbing maneuver;
(e) changing a climb command reference;
(f) selecting other vertical modes during height capture;
(g) adjusting a height reference during height capture;
(h) a different vertical pattern is selected, a different climb speed and a different altitude offset, and the above steps are repeated.
The passing conditions of the automatic pilot height capturing mode automatic pilot and capturing in the climbing process are as follows:
(a) the flight mode is automatically switched to an altitude capture mode on the preset altitude reference;
(b) in the height capturing process, the flight mode cannot be transited to other vertical modes;
(c) capturing the acceleration limit and acceleration change meeting the requirements when the height is selected;
(d) keeping the reference airspeed of the airplane during the movement of the flat airplane after the height is captured;
(e) the track transient in the pilot and capture process of the altitude capture mode is not larger than a tiny transient.
The flight tasks of automatic pilot height capture mode automatic pre-positioning and capturing in the descending process are as follows:
(a) connecting the flight director with the automatic throttle;
(b) presetting a height reference which is 2000 feet lower than the current height;
(c) selecting a vertical flight mode;
(d) performing a descent maneuver;
(e) changing a descent command reference;
(f) selecting other vertical modes during height capture;
(g) adjusting a height reference during height capture;
(h) a different vertical pattern is selected, a different descent rate and a different height offset, and the above steps are repeated.
The verification passing conditions of automatic pilot height capture mode automatic pilot and capture in the descending process are as follows:
(a) the flight mode is automatically switched to an altitude acquisition capture mode on the preset altitude reference;
(b) in the height capturing process, the flight mode cannot be transited to other vertical modes;
(c) capturing the acceleration limit and acceleration change meeting the requirements when the height is selected;
(d) keeping the reference airspeed of the airplane during the movement of the flat airplane after the height is captured;
(e) the track transient in the pilot and capture process of the altitude capture mode is not larger than a tiny transient.
According to the flight mission, two verification scripts are compiled: the automatic pilot and capture verification script of the automatic pilot height capture mode in the descending process and the automatic pilot height capture mode in the climbing process. The specific verification steps are as follows:
1) database initialization: according to the parameters of the B777 and the GE90, updating an equipment management database in the reconstruction manager, an airplane database in the flight simulator, a performance database in the actuator simulator and an actuator database; updating a verification script database corresponding to the automatic pilot height capturing mode in a verification analysis unit according to the airworthiness verification requirement of the automatic pilot; the atmospheric environment database in the atmospheric environment simulator and the navigation database and the terrain database in the right navigation exciter are kept unchanged;
2) verifying and initializing: on a control platform, according to the automatic pilot positioning and capturing verification requirements of an automatic pilot height capturing mode, a control instruction is manually input through a keyboard, and corresponding airworthiness terms are selected: CCAR-25.1329(h), CTSO-C198 (refer to RTCA DO-325 "automatic flight guidance and control System and apparatus" 2.2.10), and inputs airworthiness term verification parameters: a preset height reference and a vertical flight mode;
3) verification script selection and parameter initialization:
(3.1) performing and invoking logic generation: the control platform generates a verification control instruction according to the input control instruction; the verification analysis unit generates execution and calling logic of a verification script according to a verification control instruction input by the control platform;
according to the airworthiness clause CCAR-25.1329(h), the requirements of RTCA DO-3252.2.10 and the evaluation methods and suggestions of SAE ARP4761 and AC25.1329, the generated calling and executing logic is as follows: firstly, calling and executing an automatic pilot height capture mode automatic pre-positioning and capture verification script in the aircraft climbing process; if the verification of the climbing process is passed, calling and executing an automatic pilot height capture mode automatic preposition and capture verification script in the descending process of the airplane; and if the verification of the descending process is passed, the autopilot height capturing mode passes the airworthiness verification, and if not, the verification is ended.
(3.2) verification script calling: calling and executing a verification script related to automatic pilot height capture mode automatic pilot and capture verification according to the execution and calling logic of the verification script; the verification script is a database file, comprises two data tables and respectively records verification process control information and verification passing information of automatic pilot height capture mode automatic pre-positioning and capture, wherein:
(3.2.1) autopilot height capture mode automatic pre-positioning and capture verification process control information table: the 1 st column is a serial number, the 2 nd column is a planned navigation parameter, the 3 rd column is an atmospheric parameter, the 4 th column is an airborne equipment operation state, the 5 th column is a planned control surface position, the 6 th column is a planned engine state, the 7 th column is control information of an automatic flight control system to be verified, the 8 th column is control device information, and the 9 th column is configuration information;
(3.2.2) automatic pilot positioning and capturing compliance of the automatic pilot height capturing mode is realized through an information table: the 1 st column is a serial number, the 2 nd column is a navigation parameter required to be reached by the passing of the conformity, the 3 rd column is an atmosphere model parameter required to be reached by the passing of the conformity, the 4 th column is an airborne equipment running state required to be reached by the passing of the conformity, the 5 th column is a control surface position condition required to be reached by the passing of the conformity, the 6 th column is an engine state condition required to be reached by the passing of the conformity, the 7 th column is a control information condition required to be reached by the passing of the conformity of the automatic flight control system to be verified, the 8 th column is control device information required to be reached by the passing of the conformity, and the 9 th column is configuration information required;
(3.3) initializing the verification environment and the compliance analysis software: analyzing verification process control information in the verification script by combining a verification control instruction, converting initial navigation parameters, atmospheric model parameters, an airborne equipment running state under the fault of a left aileron, an initial control surface position, an initial engine state, control information of an automatic flight control system, control device information and initial configuration information in a 1 st row in a verification process control information table into verification instructions, and distributing the verification instructions to a flight simulator, an atmospheric environment simulator, a reconstruction simulator, an execution mechanism simulator, a left navigation exciter and a right navigation exciter through a data distributor and a data synchronous buffer according to a distribution rule to initialize parameters of a verification environment; analyzing the conformance passing information in the verification script, and using the conformance passing information such as navigation parameter conditions, atmospheric model parameters, airborne equipment running state, control surface position conditions, engine state conditions, control information conditions of the automatic flight control system, control device information, configuration information and the like required to be reached in the conformance passing information table for initializing the conformance analysis software of the verification analysis unit; and sending a verification instruction to an automatic flight control system to be verified, initializing the flight mode and flight parameters of the autopilot, and initializing the flight parameters and the flight mode to a state that the flight director and the autopilot can be normally connected in the air.
4) And (3) performing verification: the verification analysis unit analyzes the verification script: the method comprises the following steps that automatic pre-positioning and capturing verification scripts of an automatic pilot height capture mode in a descending process and part of verification process control information in the automatic pilot height capture mode automatic pre-positioning and capturing verification scripts in a climbing process are converted into verification instructions from the 2 nd line of a verification process control information table, and according to distribution rules, the atmospheric model parameters, the running state of airborne equipment under the fault of a left aileron, automatic flight control system control information, control device information and configuration information are transmitted to a flight simulator, an atmospheric environment simulator, an execution mechanism simulator, a reconfiguration simulator and an automatic flight control system to be verified through a corresponding data distributor, and by combining airworthiness item verification parameters in the verification control instructions, the verification process and the verification environment are controlled; the specific authentication script implementation process is as follows.
Automatic pilot height capture mode automatic pilot and capture verification script in climbing process:
(a) reading the control information of the automatic flight control system in the verification process control information table, converting the control information into a verification instruction, sending the verification instruction to the automatic flight control system to be verified through a corresponding data distributor according to a distribution rule, and connecting a flight director and an automatic throttle;
(b) reading a preset height reference in airworthiness clause verification parameters in the verification control instruction, converting the preset height reference into a verification instruction, and sending the verification instruction to an automatic flight control system to be verified according to a distribution rule through a corresponding data distributor;
(c) reading a vertical flight mode in airworthiness clause verification parameters in the verification control instruction, converting the vertical flight mode into a verification instruction, and sending the verification instruction to an automatic flight control system to be verified according to a distribution rule through a corresponding data distributor;
(d) engaged in vertical flight mode, the aircraft performing a climb maneuver
(e) Reading flight parameters of control information of the automatic flight control system in the verification process control information table, converting the flight parameters into verification instructions, sending the verification instructions to the automatic flight control system to be verified through a corresponding data distributor according to a distribution rule, and changing a climbing command reference:
(f) during height capture, reading the flight mode of the control information of the automatic flight control system in the verification process control information table, converting the flight mode into a verification instruction, sending the verification instruction to the automatic flight control system to be verified through a corresponding data distributor according to a distribution rule, and selecting other vertical modes;
(g) during height capture, reading flight parameters of control information of the automatic flight control system in the verification process control information table, converting the flight parameters into verification instructions, sending the verification instructions to the automatic flight control system to be verified through a corresponding data distributor according to distribution rules, and adjusting a height reference;
automatic pre-positioning and capturing verification script of an autopilot height capturing mode in the descending process:
(a) reading the control information of the automatic flight control system in the verification process control information table, converting the control information into a verification instruction, sending the verification instruction to the automatic flight control system to be verified through a corresponding data distributor according to a distribution rule, and connecting a flight director and an automatic throttle;
(b) reading a preset height reference in airworthiness clause verification parameters in the verification control instruction, converting the preset height reference into a verification instruction, and sending the verification instruction to an automatic flight control system to be verified according to a distribution rule through a corresponding data distributor;
(c) reading a vertical flight mode in airworthiness clause verification parameters in the verification control instruction, converting the vertical flight mode into a verification instruction, and sending the verification instruction to an automatic flight control system to be verified according to a distribution rule through a corresponding data distributor;
(d) engaged in vertical flight mode, the aircraft performing descent maneuvers
(e) Reading flight parameters of control information of the automatic flight control system in the verification process control information table, converting the flight parameters into verification instructions, sending the verification instructions to the automatic flight control system to be verified through a corresponding data distributor according to a distribution rule, and changing a descending command reference:
(f) during height capture, reading the flight mode of the control information of the automatic flight control system in the verification process control information table, converting the flight mode into a verification instruction, sending the verification instruction to the automatic flight control system to be verified through a corresponding data distributor according to a distribution rule, and selecting other vertical modes;
(g) during height capture, reading flight parameters of control information of the automatic flight control system in the verification process control information table, converting the flight parameters into verification instructions, sending the verification instructions to the automatic flight control system to be verified through a corresponding data distributor according to distribution rules, and adjusting a height reference;
the flight simulator, atmospheric environment simulator, actuating mechanism simulator, reconfiguration simulator, left side navigation exciter, right side navigation exciter, treat that the automatic flight control system of verifying carries out data interchange through data distributor, AFDX integrated circuit board, AFDX network switch, wherein:
(4.1) the reconstruction manager sends an equipment reconstruction instruction and a left aileron jamming fault simulation instruction under the condition of left aileron jamming to a flight simulator and an execution mechanism simulator of a right industrial personal computer through a data distributor and a data synchronous buffer of the industrial personal computers at two sides;
and (4.2) the left navigation exciter sends the atmospheric parameters to the automatic flight control system through the left data distributor, the left data synchronization buffer, the left AFDX board, the AFDX network switch, the verification data distributor and the bus protocol converter.
And (4.3) the right navigation exciter sends navigation parameters to the automatic flight control system through the right data distributor, the right data synchronization buffer, the right AFDX board card, the AFDX network switch, the verification data distributor and the bus protocol converter. And sending navigation parameters to the atmospheric environment simulator through the data distributors of the industrial personal computers on the two sides.
(4.4) the atmospheric environment simulator sends atmospheric model data to the left navigation exciter through the left data distributor; sending atmospheric model data to a flight simulator through a data distributor and a data synchronization buffer of industrial personal computers on two sides; the AFDX network switch sends the atmosphere model data to the airworthiness verification workstation through the left data distributor, the left data synchronization buffer and the left AFDX board card;
and (4.5) the to-be-verified automatic flight control system sends an automatic flight control instruction to the execution mechanism simulator through the bus protocol converter, the verification data distributor, the AFDX network switch, the right AFDX board card, the right data synchronous buffer and the right data distributor.
In the verification process, an autopilot of the automatic flight control system to be verified completes calculation of the automatic flight control command under the condition that the left aileron is blocked according to the initial flight mode and the altitude target parameter in combination with verification environment data and the verification command, and controls the aircraft to climb or descend; according to the terms of validation, the autopilot should automatically pre-position the altitude capture mode and capture the altitude target during this process without human assistance.
(4.6) the actuator simulator sends the control surface position and the engine thrust change under the condition of the jamming of the left aileron to the flight simulator through the right data distributor;
(4.7) the flight simulator sends the real-time change of the speed and the attitude of the airplane under the jamming condition of the left aileron to the right navigation exciter through the right data distributor; the data are sent to a left navigation exciter through a data distributor and a data synchronization buffer of industrial personal computers on two sides;
(4.8) the data synchronization buffers of the industrial personal computers on the two sides buffer the data output by the navigation exciters of the industrial personal computers on the two sides, the atmospheric environment simulator and the flight simulator of the industrial personal computer on the left side to the automatic flight control system to be verified, so that the time sequences of the output data are the same;
and (4.9) verifying environment data generated by a reconstruction manager, an atmospheric environment simulator and a left navigation exciter of the left industrial personal computer, and a flight simulator, an execution mechanism simulator and a right navigation exciter on the right side respectively pass through a data distributor, a data synchronization buffer and an AFDX board card of the left industrial personal computer and the right industrial personal computer, and an AFDX network switch sends the verifying environment data to an airworthiness verifying workstation.
The verification analysis software of the verification analysis unit receives the verification environment data and the automatic flight control instruction, carries out airworthiness verification analysis according to the passing condition of the conformity, and verifies whether the function of the autopilot meets the airworthiness requirements of the CTSO-C198 and the CCAR-25; and after the verification is finished, storing the verification data as a verification data file and outputting a conformance analysis result.
Since the generation of the verification data files depends on the verification scripts, each verification data file has a corresponding verification script and needs to be named according to the corresponding verification script. The verification data file stores the verification data at intervals of 0.1 second in the following format: the 1 st column is a serial number, the 2 nd column is an actual navigation parameter, the 3 rd column is an atmospheric parameter, the 4 th column is an airborne equipment running state, the 5 th column is an actual control surface position, the 6 th column is an actual engine state, the 7 th column is control information of an automatic flight control system to be verified, the 8 th column is control device information, and the 9 th column is configuration information;
5) and (4) outputting a result: and the control platform receives the conformity analysis result and the verification environment data and displays the conformity analysis result and the verification environment data on a display of the control platform.
In the embodiment of the invention, a navigation exciter, an atmospheric environment simulator and a flight simulator adopt a navigation function module, an atmospheric data generation module and a flight simulation module in Xplane software of Microsoft corporation, and an execution mechanism simulator and a reconfiguration manager adopt a reconfiguration management and execution mechanism simulation module in FlightSIM software of STAGE corporation; the navigation database is a Honeywell database provided by Honeywell corporation, the terrain database is a nationwide 1:25 ten thousand database provided by a national basic geographic information system, the atmospheric environment database is an aeronautical meteorological database provided by Hua navigation corporation, the airplane database and the performance database are respectively a B777 airplane model database and a GE90 performance database in Xplane software of Microsoft corporation, and the execution mechanism database and the equipment management database are respectively a B777 electrical system database and a B777 hydraulic system database and a B777 airborne system management logic database in FlightSIM software of Daxort corporation. The verification analysis unit adopts Isograph software developed by Isograph company, the AFDX network switch adopts a CAV-AFDX-SW-8 type switch of Beijing pink technology, the AFDX board card adopts a CAV-AFDX-PMC network interface board card of Beijing pink technology, and the bus protocol converter adopts a MACC protocol converter of Excalibur Systems company.
Claims (10)
1. The airworthiness verification system of the civil aircraft automatic flight control system is characterized by comprising a left excitation device (1) and a right excitation single device (2) which are used for generating different verification environment data, an airworthiness verification work station (4) which is in data communication with the left excitation device (1) and the right excitation device (2) through an AFDX network switch (3) and used for verifying environment data generation control and airworthiness verification analysis, wherein the airworthiness verification work station (4) is also in data communication with an automatic flight control system (6) through a bus protocol converter (5), the bus protocol converter (5) completes conversion of an interface protocol of the airworthiness verification work station (4) and an interface protocol of the automatic flight control system (6), the automatic flight control system (6) is used for receiving verification environment data and verification instructions after analysis processing of the airworthiness verification work station (4), generating an automatic flight simulation control instruction, wherein the left excitation device (1) comprises a left industrial personal computer (1.1) and a left AFDX board card (1.2), a left data distributor (1.1.1) is arranged in the left industrial personal computer (1.1), and a left data synchronous buffer (1.1.2), a reconstruction manager (1.1.3), an atmospheric environment simulator (1.1.4) and a left navigation exciter (1.1.5) which are respectively connected with the left data distributor (1.1.1) in a bidirectional way; the right excitation device (2) comprises a right industrial personal computer (2.1) and a right AFDX board card (2.2), a right data distributor (2.1.1) is arranged in the right industrial personal computer (2.1), and a right data synchronous buffer (2.1.2), an airplane simulator (2.1.3), an execution mechanism simulator (2.1.4) and a right navigation exciter (2.1.5) are respectively connected with the right data distributor (2.1.1) in a bidirectional mode; left side data synchronization buffer (1.1.2) in left side industrial computer (1.1) loops through left side AFDX integrated circuit board (1.2) and AFDX network switch (3) carry out data communication with airworthiness verification workstation (4), right side data synchronization buffer (2.1.2) in right side industrial computer (2.1) loops through right side AFDX integrated circuit board (2.2) and AFDX network switch (3) carry out data communication with airworthiness verification workstation (4), carry out data exchange and data synchronization through the ethernet between left side industrial computer (1.1) and the right side industrial computer (2.1) by left side data synchronization buffer (1.1.2) and right side data synchronization buffer (2.1.2), automatic flight control system (6) through airworthiness verification workstation (4) respectively with left side excitation device (1) and right side single excitation device (2) carry out data communication.
2. The airworthiness verification system of the civil aircraft automatic flight control system according to claim 1, characterized in that the left data distributor (1.1.1) and the right data distributor (2.1.1) respectively perform data distribution management on the reconstruction manager (1.1.3), the atmospheric environment simulator (1.1.4), the left navigation exciter (1.1.5), the aircraft simulator (2.1.3), the actuator simulator (2.1.4), the right navigation exciter (2.1.5) and the airworthiness verification workstation (4) according to distribution rules, and are used for constructing verification environments corresponding to airworthiness requirements; the distribution rule is as follows:
(a) distributing the equipment reconstruction and fault simulation instruction generated by the reconstruction manager (1.1.3) to a left navigation exciter (1.1.5), an aircraft simulator (2.1.3), an execution mechanism simulator (2.1.4), a right navigation exciter (2.1.5) and a seaworthiness verification workstation (4);
(b) distributing the flap, slat and landing gear position information generated by the reconstruction manager (1.1.3) to an aircraft simulator (2.1.3);
(c) the method comprises the steps that atmospheric model data generated by an atmospheric environment simulator (1.1.4) are distributed to a left navigation exciter (1.1.5), an aircraft simulator (2.1.3) and an airworthiness verification workstation (4);
(d) distributing the atmospheric parameters generated by the left navigation actuator (1.1.5) to the airworthiness verification workstation (4);
(e) real-time attitude and position change information generated by the aircraft simulator (2.1.3) is distributed to a left navigation exciter (1.1.5), a right navigation exciter (2.1.5) and a seaworthiness verification workstation (4);
(f) the control surface position and engine thrust variation information generated by the actuator simulator (2.1.4) are distributed to the aircraft simulator (2.1.3) and the airworthiness verification workstation (4);
(g) distributing the navigation parameters generated by the right navigation exciter (2.1.5) to the atmospheric environment simulator (1.1.4) and the airworthiness verification workstation (4);
(h) and distributing the verification instruction generated by the airworthiness verification workstation (4) to a reconstruction manager (1.1.3), an atmospheric environment simulator (1.1.4), a left navigation exciter (1.1.5), an aircraft simulator (2.1.3), an execution mechanism simulator (2.1.4) and a right navigation exciter (2.1.5).
3. Airworthiness verification system for civil aircraft automatic flight control systems according to claim 1, characterized in that in the industrial control computer (1.1) on the left: the reconstruction manager (1.1.3) comprises an equipment management database corresponding to the application model and the engine, and is used for receiving a verification instruction, generating an equipment reconstruction and fault simulation instruction and position information of a flap, a slat and a landing gear; the atmospheric environment simulator (1.1.4) comprises an atmospheric environment database for receiving verification instructions, navigation parameters including current position and altitude information of the aircraft and generating atmospheric model data including wind, temperature, air pressure and density parameters.
4. Airworthiness verification system for civil aircraft automatic flight control systems according to claim 1, characterized in that in the industrial control computer (2.1) on the right: the aircraft simulator (2.1.3) comprises an aircraft database corresponding to an application model, and is used for receiving a verification instruction, atmospheric model data, navigation parameters, control surface position and engine thrust change information and flap, slat and undercarriage position information, generating flight attitude and position change information, receiving an equipment reconstruction and fault simulation instruction, and generating flight attitude and position change information influenced by equipment reconstruction and fault; the actuator simulator (2.1.4) comprises an actuator database and a performance database corresponding to the application model and the engine, and is used for receiving an automatic flight control command and a verification command, generating control surface position and engine thrust change information, receiving a device reconstruction and fault simulation command, and generating control surface position and engine thrust change information influenced by device reconstruction and fault.
5. The airworthiness verification system of the civil aircraft automatic flight control system according to claim 1, wherein a left navigation exciter (1.1.5) in the left industrial personal computer (1.1) is used for receiving a verification instruction, simulating functions of a plurality of sets of atmospheric data components, receiving current attitude and position change information of an aircraft and atmospheric model data, and generating atmospheric parameters including airspeed, angle of attack, total temperature and the like; receiving an equipment reconstruction and fault simulation instruction, and generating atmospheric parameters influenced by the equipment reconstruction and the fault; a right navigation exciter (2.1.5) in the right industrial personal computer (2.1) comprises a navigation database and a terrain database, is used for simulating a plurality of sets of flight plans, inertial navigation, radio navigation and satellite navigation functions, receiving verification instructions, airplane attitude and position change information and generating navigation parameters comprising flight plans, airplane current attitude, position, height, speed, course deviation, glide slope deviation and the like; and receiving a device reconstruction and fault simulation instruction, and generating navigation parameters influenced by the device reconstruction and the fault.
6. Airworthiness verification system for civil aircraft automatic flight control systems, according to claim 1, characterized in that said airworthiness verification workstation (4) comprises a control platform (4.1), a verification data distributor (4.2) and a verification analysis unit (4.3), wherein,
the control platform (4.1) is used for receiving an external control instruction, generating a verification control instruction and sending the verification control instruction to the verification data distributor (4.2), receiving a conformance analysis result and verification environment data forwarded by the verification data distributor (4.2), storing and displaying the information;
the verification analysis unit (4.3) comprises a verification script database corresponding to airworthiness verification requirements and is used for generating verification instructions and analyzing the conformity, the verification instruction generation and the conformity are used for receiving verification control instructions, automatic flight control instructions, atmospheric model data, atmospheric parameters, navigation parameters, attitude and position change information, control surface position and engine thrust change information, equipment reconstruction and fault simulation instructions and flap, slat and undercarriage position information, and the verification instructions and the conformity analysis results are generated according to the verification scripts.
The verification data distributor (4.2) performs data distribution management according to the following distribution rules:
(a) the received verification instruction generated by the verification analysis unit (4.3) is distributed to the left data distributor (1.1.1), the right data distributor (2.1.1) and the automatic flight control system (6);
(b) the device reconstruction and fault simulation instructions generated by the reconstruction manager (1.1.3) are received, and the position information of the flaps, the slats and the landing gear is distributed to a verification analysis unit (4.3) and an automatic flight control system (6);
(c) distributing the received atmospheric model data generated by the atmospheric environment simulator (1.1.4) to a verification analysis unit (4.3);
(d) the received atmospheric parameters generated by the left navigation actuator (1.1.5) are distributed to a verification analysis unit (4.3) and an automatic flight control system (6), and the received navigation parameters generated by the right navigation actuator (2.1.5) are distributed to the verification analysis unit (4.3) and the automatic flight control system (6);
(e) the received real-time attitude and position change information generated by the flight simulator (2.1.3) is distributed to a verification analysis unit (4.3) and an automatic flight control system (6);
(f) the control surface position and the engine thrust change information generated by the actuator simulator (2.1.4) are received and distributed to a verification analysis unit (4.3);
(g) the received automatic flight control instruction generated by the automatic flight control system (6) is distributed to a verification analysis unit (4.3) and a right data distributor (2.1.1);
(h) and the received conformity analysis result and verification environment data generated by the verification analysis unit (4.3) are distributed to the control platform (4.1).
7. The airworthiness verification system of the civil aircraft automatic flight control system of claim 6, wherein the verification control command comprises an airworthiness term selection command and an airworthiness term verification parameter.
8. The airworthiness verification system of the civil aircraft automatic flight control system according to claim 6, wherein the verification analysis unit (4.3) generates verification instructions according to relevant airworthiness verification subjects and performs conformance analysis, and the airworthiness verification subjects relevant to the automatic flight control system include:
(1) and (4) functional verification:
(1.1) verifying the function of the automatic throttle: analyzing whether the working state of the automatic flight control system and the aircraft navigation parameters influenced by the throttle instruction output by the automatic throttle meet the set passing condition of conformity or not under the expected condition;
(1.2) function verification of the autopilot: analyzing whether the working state of the automatic flight control system and the aircraft navigation parameters controlled by the autopilot meet the set passing condition of conformity under the expected condition;
(1.3) flight director function verification: analyzing whether the working state of the automatic flight control system and the navigation parameters of the airplane meet the set passing conditions of conformity or not when the flight crew operates the airplane according to the flight guidance information generated by the flight guidance instrument under the expected conditions;
(1.4) verifying the yaw damping function: analyzing whether the working state of the automatic flight control system and the aircraft navigation parameters influenced by the gain control command generated by the yaw damping function meet the set passing condition of conformity or not under the expected condition;
(2) and (3) performance verification:
(2.1) attitude control performance verification: whether the working state of the automatic flight control system, the airplane attitude influenced by the automatic flight control system and the change of the airplane attitude meet the set passing condition of conformity or not;
(2.2) verifying the track control performance: whether the working state of the automatic flight control system, the aircraft track influenced by the automatic flight control system and the aircraft track change meet the set passing condition of conformity or not;
(2.3) verification of airspeed control performance: whether the working state of the automatic flight control system, the aircraft airspeed influenced by the automatic flight control system and the aircraft airspeed change meet the set passing condition of conformity or not;
(3) capability verification:
(3.1) multi-device functional verification: in the cooperative working process of the automatic flight control system and the designated airborne equipment, whether the working state of the automatic flight control system and control instruction information output by the automatic accelerator function, the automatic pilot function and the yaw damping function meet the passing condition of conformity or not is judged; when the flight crew operates the airplane according to the flight guidance information generated by the flight guidance instrument, whether the navigation parameters of the airplane meet the set passing conditions of the conformity or not is judged;
(3.2) multi-device performance verification: in the cooperative working process of the automatic flight control system and the specified airborne equipment, the working state of the automatic flight control system, and the attitude, track and airspeed of the airplane, the attitude, track and airspeed change of the airplane and the response time of the change meet the set passing condition of conformity;
(4) and (3) safety verification:
(4.1) Functional Hazard Analysis (FHA) comprising: identifying failure states, determining the influence of the failure states and the influence levels of the failure states, performing test analysis on the failure states, selecting a conformity verification method of the failure states and outputting a function hazard analysis result;
(4.2) Preliminary System Security Analysis (PSSA) comprising: safety requirement identification, system architecture and design decision evaluation, safety requirement confirmation of equipment at the next level and output of a primary system safety analysis result;
(4.3) System Security Assessment (SSA) comprising: system safety requirement confirmation, failure mode and influence analysis, final failure tree analysis and system safety evaluation result output.
9. A seaworthiness verification method for use in the seaworthiness verification system of the civil aircraft automatic flight control system of claim 1, characterized by comprising the steps of:
1) database initialization: updating an equipment management database in the reconfiguration manager according to the model and the engine applied by the automatic flight control system; an airplane database corresponding to the application model in the flight simulator; a performance database corresponding to the application model and the engine and an execution mechanism database corresponding to the application model and the engine in the execution mechanism simulator; updating a verification script database corresponding to the airworthiness verification requirement in the verification analysis unit according to the airworthiness verification task; the atmospheric environment database in the atmospheric environment simulator and the navigation database and the terrain database in the right navigation exciter are kept unchanged;
2) verifying and initializing: on the control platform, according to the requirements of the verification task and the airworthiness clause, a control instruction is manually input by using a keyboard;
3) verification script selection and parameter initialization:
(3.1) performing and invoking logic generation: the control platform generates a verification control instruction according to the input control instruction; the verification analysis unit generates execution and calling logic of a verification script according to a verification control instruction input by the control platform;
(3.2) verification script calling: calling a corresponding verification script according to the execution and calling logic of the verification script, and injecting airworthiness clause verification parameters into the verification script;
(3.3) initializing the verification environment and the compliance analysis software: analyzing verification process control information in the verification script, combining a verification control instruction input by the control platform, sending a verification instruction to the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the execution mechanism simulator and the automatic flight control system through the corresponding data distributor according to a distribution rule, and initializing parameters of a verification environment; analyzing the conformity passing information in the verification script and initializing a conformity analysis part of the verification analysis unit;
4) and (3) performing verification: the verification instruction generation part of the verification analysis unit analyzes the verification process control information in the verification script, and sends verification instructions to the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the execution mechanism simulator and the automatic flight control system through the corresponding data distributor according to the distribution rule to complete the control of the verification process and the verification environment; the corresponding data distributor carries out data distribution management on the flight simulator, the atmospheric environment simulator, the reconstruction simulator, the left navigation exciter, the right navigation exciter, the executing mechanism simulator and the automatic flight control system according to a distribution rule to complete the construction of a verification environment; the verification analysis unit receives verification environment data and an automatic flight control command to complete conformance analysis; after verification is finished, storing verification environment data and the automatic flight control command as verification data files;
because the generation of the verification data files depends on the verification scripts, each verification data file has a corresponding verification script and is named according to the corresponding verification script; the verification data file stores verification data at set intervals in the following format: the 1 st column is a serial number, the 2 nd column is an actual navigation parameter, the 3 rd column is an atmospheric parameter, the 4 th column is an airborne equipment operation state, the 5 th column is an actual control surface position, the 6 th column is an actual engine state, the 7 th column is control information for an automatic flight control system, the 8 th column is control device information, and the 9 th column is configuration information;
5) and (4) outputting a result: and the control platform receives the conformity analysis result and the verification environment data and displays the conformity analysis result and the verification environment data on a display of the control platform.
10. The airworthiness authentication method according to claim 9, wherein the authentication script in step 3) (3.2) is a database file, which comprises two data tables recording authentication process control information and compliance pass information, wherein:
(3.2.1) validating the process control information table for a total of 9 columns: the 1 st column is a serial number, the 2 nd column is an initial navigation parameter, the 3 rd column is an atmosphere model parameter, the 4 th column is an airborne equipment running state, the 5 th column is an initial control surface position, the 6 th column is an initial engine state, the 7 th column is control information for an automatic flight control system, the 8 th column is control device information, and the 9 th column is configuration information;
(3.2.2) compliance by the information sheet, there are 9 columns: the 1 st column is a serial number, the 2 nd column is a planned navigation parameter condition required to be met by the passing of the conformity, the 3 rd column is an atmospheric parameter required to be met by the passing of the conformity, the 4 th column is an airborne equipment operation state required to be met by the passing of the conformity, the 5 th column is a control surface position condition required to be met by the passing of the conformity, the 6 th column is an engine state condition required to be met by the passing of the conformity, the 7 th column is a control information condition required to be met by the passing of the conformity to the automatic flight control system, the 8 th column is control device information required to be met by the passing of the conformity, and the 9 th column is configuration information required to be.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011591649.7A CN112612297A (en) | 2020-12-29 | 2020-12-29 | Airworthiness verification system and method for civil aircraft automatic flight control system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011591649.7A CN112612297A (en) | 2020-12-29 | 2020-12-29 | Airworthiness verification system and method for civil aircraft automatic flight control system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112612297A true CN112612297A (en) | 2021-04-06 |
Family
ID=75248704
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011591649.7A Pending CN112612297A (en) | 2020-12-29 | 2020-12-29 | Airworthiness verification system and method for civil aircraft automatic flight control system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112612297A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114721358A (en) * | 2022-05-10 | 2022-07-08 | 中国民航大学 | Technology for testing ground function of flight control system and switching device |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103116287A (en) * | 2013-01-22 | 2013-05-22 | 中国民航大学 | Avionics equipment running environment dynamic simulating device and method |
| CN109388071A (en) * | 2017-08-12 | 2019-02-26 | 湖北汇欣智能化***工程有限公司 | A kind of digitlization iron bird testing stand construction method |
| US11042673B1 (en) * | 2017-02-27 | 2021-06-22 | Rockwell Collins, Inc. | Systems and methods for autonomous vehicle systems testing |
| CN113050584A (en) * | 2019-12-26 | 2021-06-29 | 中国航空工业集团公司西安飞机设计研究所 | Test system and method for automatic flight control system of airplane |
-
2020
- 2020-12-29 CN CN202011591649.7A patent/CN112612297A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103116287A (en) * | 2013-01-22 | 2013-05-22 | 中国民航大学 | Avionics equipment running environment dynamic simulating device and method |
| US11042673B1 (en) * | 2017-02-27 | 2021-06-22 | Rockwell Collins, Inc. | Systems and methods for autonomous vehicle systems testing |
| CN109388071A (en) * | 2017-08-12 | 2019-02-26 | 湖北汇欣智能化***工程有限公司 | A kind of digitlization iron bird testing stand construction method |
| CN113050584A (en) * | 2019-12-26 | 2021-06-29 | 中国航空工业集团公司西安飞机设计研究所 | Test system and method for automatic flight control system of airplane |
Non-Patent Citations (5)
| Title |
|---|
| 刘晖等: "民机自动飞控***模态分析及适航性研究", 《中国民航飞行学院学报》 * |
| 李敬等: "某型民用飞机自动驾驶仪适航研究", 《航空标准化与质量》 * |
| 罗秋凤等: "轻型无人机飞行控制***适航安全性研究", 《计算机测量与控制》 * |
| 钟伦珑: "一种用于GLS机载设备适航验证的模拟器设计", 《合肥工业大学学报》 * |
| 韩建辉: "自动飞行控制计算机通用自动测试平台设计", 《航空工程进展》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114721358A (en) * | 2022-05-10 | 2022-07-08 | 中国民航大学 | Technology for testing ground function of flight control system and switching device |
| CN114721358B (en) * | 2022-05-10 | 2022-08-23 | 中国民航大学 | Switching device for ground function test of flight control system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Jordan et al. | AirSTAR: A UAV platform for flight dynamics and control system testing | |
| CN108196141A (en) | A kind of avionics system flexibility test platform and avionics integrated verification method | |
| CN109070997A (en) | Unit automation system and method | |
| Angelov | Model-based systems engineering of flight control for VTOL transition aircraft | |
| Cunningham et al. | Practical application of a subscale transport aircraft for flight research in control upset and failure conditions | |
| CN112612297A (en) | Airworthiness verification system and method for civil aircraft automatic flight control system | |
| Fletcher et al. | UH-60M upgrade fly-by-wire flight control risk reduction using the RASCAL JUH-60A in-flight simulator | |
| KR101976542B1 (en) | Method and system for controlling simulation via avionics simulation model | |
| US11249489B2 (en) | Method for determining a vertical path of an aircraft from its current position, associated computer program product and determining system | |
| Rzucidło | Unmanned air vehicle research simulator-prototyping and testing of control and navigation systems | |
| US6292720B1 (en) | Trimming process for adapting a simulation system to an automatically controlled reference system | |
| CN112084630B (en) | Identification test method and system for D-level flight simulation training equipment | |
| Peterson et al. | Run time assurance as an alternate concept to contemporary development assurance processes | |
| Dolega et al. | The new conception of the laboratory testing of the FBW control system for small aircraft | |
| Schroeder et al. | Simulator platform motion effects on pilot-induced oscillation prediction | |
| CN108974389B (en) | Intelligent cabin system implementation method for civil aircraft design and airworthiness approval | |
| Niedermeier et al. | The new research aircraft ISTAR-experimental flight control system | |
| Kish et al. | Using an Autopilot System for Simplified Vehicle Operations in General Aviation | |
| Applegate et al. | Integrated safety systems design and human factors considerations for jet transport aeroplanes | |
| Gawron et al. | When in-flight simulation is necessary | |
| CN116069052A (en) | Unmanned aerial vehicle simulated flight training device and method | |
| Klaes | ATTAS & ACT/FHS system simulation for pre-flight software and hardware testing | |
| Boja | Synthetic Data Package development for FNPT-type simulator | |
| Beard et al. | Space shuttle landing and rollout training at the vertical motion simulator | |
| Atmasari et al. | Development of primary flight display human machine interface for flight control panel model verification |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20210406 |
|
| WD01 | Invention patent application deemed withdrawn after publication |