Search Results

A multi-axis serially redundant, single channel, multi-path FBW (FBW) control system comprising: serially redundant flight control computers in a single channel where only one “primary” flight control computer is active and controlling at any given time; a matrix of parallel flight control surface controllers including stabilizer motor control units (SMCU) and actuator electronics control modules (AECM) define multiple control paths within the single channel, each implemented with dissimilar hardware and which each control the movement of a distributed set of flight control surfaces on the aircraft in response to flight control surface commands from the primary flight control computer, and a set of (pilot and co-pilot) controls and aircraft surface/reference/navigation sensors and systems which provide input to a primary flight control computer and are used to generate the flight control surface commands in accordance with the control law algorithms implemented in the flight control computers.

This paper presents a generic Redundancy Management (RM) requirements definition process that is applicable to a complex system RM requirements development. In the aerospace industry, the ‘Aerospace Recommended Practices’ (ARP) 4754 and 4761 are typically used processes to ensure given safety and availability goals for complex systems. The process proposed in this paper is based on these standard guidelines and enhances them to provide a standardized process for the development of RM requirements with interactions between the system requirements development and the preliminary system safety assessment processes. The output of this process will help to achieve the following objectives: The system RM/failure monitoring requirements are defined commensurate with the system safety and availability requirements; the system is fault-tolerant to the degree necessary to meet the system safety and availability requirements; the system is robust and the system architecture is optimized.