Abstract: A control system includes a dual actuator (2) and primary and secondary controllers (20, 22), each of which has two control channels. In a normal mode of operation, the primary controller (20) controls both valves (32, 38) of the actuator (2). Each primary channel generates a model signal and a monitoring signal corresponding to expected and actual operation of the actuator, respectively. The two signals from each channel are communicated to the other channel. Each channel monitors itself as well as the other channel by comparing model and monitoring signals; and is also similarly redundantly monitored by the other channel of the controller (20). Each channel independently compares its own signals with the signals from the other channel. Each of the two channels has a deactivating switch responsive to a fault status signal from either of the two channels to thereby allow deactivation of a failed channel even when the failure in such channel prevents it from deactivating itself.

Abstract: A system for cooling individual integrated actuator packages (IAPs) positioned throughout the aircraft in a power-by-wire actuation system is disclosed. A low-pressure hydraulic fluid circulates throughout the aircraft to control the temperature of the individual IAPs and to maintain and replenish the hydraulic fluid within the individual IAPs. A thermo-control loop containing low-pressure hydraulic fluid includes a pump, low-pressure hydraulic lines, a heat exchanger, a reservoir and a filter. The entire system provides heat transfer for a high- or low-temperature environment, as may be present on an aircraft. The individual IAPs may be coupled together in series or, alternatively, in parallel, depending upon the design constraints of the system. Compared with distributed hydraulic systems, energy consumption, weight, and cost are significantly reduced by using a low hydraulic pressure for the circulating fluid. Survivability is significantly increased over that provided by a distributed hydraulic system.

Abstract: Each wing of an aircraft carries a set of five outboard spoilers, one inboard spoiler, one inboard aileron and one outboard aileron, together constituting the lateral control surfaces for the aircraft. Each spoiler is positioned by means of a single thread electrohydraulic servoactuator. Each outboard aileron is positioned by means of a one/one fail-operational electrohydraulic servoactuator. Each inboard aileron is positioned by a two/one fail-operational, electrohydraulic servoactuator. The control system is operated by four independent electrical control signal processing channels and four independent hydraulic pressure supplies.

Abstract: Disclosed is a method of and apparatus to facilitate the operation of two servoactuators with a two/one (2/1) fail operational capability. In preferred embodiments, four signal processing channels are provided, two of which are active and directly control hydraulic servovalves which in turn controls the rate of operation of the servoactuators. Two other modeling channels produce an electrical output similar to the output expected from the servoactuator when supplied with the input to the active channel. The two actual rate indicative outputs and the two modeled rate indicative outputs are compared and deviations in one channel from the other three cause that channel to be declared a "failed" channel. Through a logical switching system, if an active channel has failed, the output of its associated model channel is connected to the servoactuator to continue operation of that actuator.