Abstract: A sensor arrangement and method that may be used with a variety of different energy storage devices, including battery packs found in hybrid vehicles, battery electric vehicles, and other types of vehicles. An exemplary sensor arrangement includes a number of sensor units, a controller, and several connections, wherein two or more sensor units are coupled to each node of the battery pack and are coupled to the controller over different connections. An exemplary method is divided into two aspects: an error detection aspect and an error resolution aspect. Because the sensor arrangement provides multiple sensor readings for each node being evaluated, the method can enable the sensor arrangement to continue operating accurately and with redundancy even if it experiences a loss of one or more sensor units.

Abstract: A sensor arrangement and method that may be used with a variety of different energy storage devices, including battery packs found in hybrid vehicles, battery electric vehicles, and other types of vehicles. Some battery monitoring systems, such as those designed to monitor and/or control lithium-ion battery packs, may require individual voltage readings for each and every cell. If a battery monitoring system component—even one that provides just one of these sensor readings—malfunctions or otherwise experiences a fault condition, then it may be necessary to bring the entire vehicle in for service. The exemplary sensor arrangement and method may be used to control a series of balancing switches in the sensor arrangement in such a way that enables the vehicle to detect fault conditions and to continue operating successfully in the event that such fault conditions occur.

Abstract: A sensor arrangement and method that may be used with a variety of different energy storage devices, including battery packs found in hybrid vehicles, battery electric vehicles, and other types of vehicles. An exemplary sensor arrangement includes a number of sensor units, a controller, and several connections, wherein two or more sensor units are coupled to each node of the battery pack and are coupled to the controller over different connections. An exemplary method is divided into two aspects: an error detection aspect and an error resolution aspect. Because the sensor arrangement provides multiple sensor readings for each node being evaluated, the method can enable the sensor arrangement to continue operating accurately and with redundancy even if it experiences a loss of one or more sensor units.

Abstract: A sensor arrangement and method that may be used with a variety of different energy storage devices, including battery packs found in hybrid vehicles, battery electric vehicles, and other types of vehicles. Some battery monitoring systems, such as those designed to monitor and/or control lithium-ion battery packs, may require individual voltage readings for each and every cell. If a battery monitoring system component—even one that provides just one of these sensor readings—malfunctions or otherwise experiences a fault condition, then it may be necessary to bring the entire vehicle in for service. The exemplary sensor arrangement and method may be used to control a series of balancing switches in the sensor arrangement in such a way that enables the vehicle to detect fault conditions and to continue operating successfully in the event that such fault conditions occur.

Abstract: A distributed engine control system is provided. The engine control system includes first and second engine data concentrators. Each of the first and second engine data concentrators include a processor module, a signal conditioning module coupled to the processor module, a data transfer module coupled to the processor module, and a data bus coupled between the first and second engine data concentrators and a hydro-mechanical unit (HMU).

Abstract: An aircraft flight surface control system and method simultaneously provides the benefits of both an active/active system architecture and in active/standby system architecture. The system is preferably implemented using hydraulic actuator assemblies and electromechanical actuator assemblies coupled to the same flight control surface. During normal system operations the electromechanical actuator assemblies are energized to supply a relatively minimal force to associated flight control surfaces. In effect, the electromechanical actuators, although energized, may be pulled along by the associated hydraulic actuator assemblies, until needed. Thus, the electromechanical actuator assemblies are controlled in a manner that closely resembles the active/standby architecture.

Abstract: A sensor arrangement and method that may be used with a variety of different energy storage devices, including battery packs found in hybrid vehicles, battery electric vehicles, and other types of vehicles. An exemplary sensor arrangement includes a number of sensor units, a controller, and several connections, wherein two or more sensor units are coupled to each node of the battery pack and are coupled to the controller over different connections. An exemplary method is divided into two aspects: an error detection aspect and an error resolution aspect. Because the sensor arrangement provides multiple sensor readings for each node being evaluated, the method can enable the sensor arrangement to continue operating accurately and with redundancy even if it experiences a loss of one or more sensor units.

Abstract: An aircraft flight control surface actuation control system includes an actuator control unit and a flight control module. The actuator control unit includes at least two independent actuator control channels to generate limited authority flight control surface actuator commands based on pilot inceptor position signals and flight control augmentation data. The flight control module supplies the flight control augmentation data to each of the independent actuator control channels, determines operability of each of the actuator control channels and, based on the determined operability of each independent actuator control channel, selectively prevents one of the independent actuator control channels from supplying the limited authority flight control surface actuator commands. The flight control module may also generate full authority flight control surface actuator commands for supply to flight control surface actuators.

Abstract: Methods and systems are provided for redundancy management of a fly-by-wire avionics system. A control module for producing a control signal is provided comprising a common processing partition for receiving a flight input signal and at least one first mode input signal, a first processing partition coupled to the common processing partition and configured to receive the first mode input signals and flight input signal from the common processing partition, and a second processing partition coupled to the common processing partition. The first processing partition produces a first mode output signal in response to one of the first mode input signals and flight input signal. The second processing partition generates a second mode signal in response to the flight input signal when the first processing partition fails. The common processing partition produces the control signal in response to one of the first mode output signal and second mode signal.

Abstract: A distributed engine control system is provided. The engine control system includes first and second engine data concentrators. Each of the first and second engine data concentrators include a processor module, a signal conditioning module coupled to the processor module, a data transfer module coupled to the processor module, and a data bus coupled between the first and second engine data concentrators and a hydro-mechanical unit (HMU).

Abstract: An aircraft flight control surface actuation control system includes an actuator control unit and a flight control module. The actuator control unit includes at least two independent actuator control channels to generate limited authority flight control surface actuator commands based on pilot inceptor position signals and flight control augmentation data. The flight control module supplies the flight control augmentation data to each of the independent actuator control channels, determines operability of each of the actuator control channels and, based on the determined operability of each independent actuator control channel, selectively prevents one of the independent actuator control channels from supplying the limited authority flight control surface actuator commands. The flight control module may also generate full authority flight control surface actuator commands for supply to flight control surface actuators.

Abstract: A fly-by-wire (FBW) system (104) is coupled to cockpit controls (102) of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) (108) is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector (110) is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out (306) a transfer of partial control of the aircraft from the cockpit controls to the FBW system and the AFCS, in response to a predetermined event.

Abstract: A fly-by-wire (FBW) system (104) is coupled to cockpit controls (102) of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) (108) is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector (110) is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out (306) a transfer of control of the FBW system from the cockpit controls to the AFCS, in response to a predetermined event.

Abstract: An aircraft flight surface control system and method simultaneously provides the benefits of both an active/active system architecture and in active/standby system architecture. The system is preferably implemented using hydraulic actuator assemblies and electromechanical actuator assemblies coupled to the same flight control surface. During normal system operations the electromechanical actuator assemblies are energized to supply a relatively minimal force to associated flight control surfaces. In effect, the electromechanical actuators, although energized, may be pulled along by the associated hydraulic actuator assemblies, until needed. Thus, the electromechanical actuator assemblies are controlled in a manner that closely resembles the active/standby architecture.

Abstract: Methods and apparatus are provided for more reliably transferring operational control for various aircraft flight control surfaces from a first sub-system to a second sub-system. The present invention provides an Actuator Control Electronics (ACE) wrap-back module that monitors the output of the normal mode control module and switches control to the direct control module based upon the detection of an error condition. The switching function is controlled by a monitoring system that monitors the output from an integrated heartbeat module that emits a pre-programmed signal. The pre-programmed signal is encoded and sent over a communication bus where it is then decoded and validated by comparing the decoded signal to the expected results. Any irregularity in the heartbeat signal automatically triggers a change of control from the first flight control sub-system to the second flight control sub-system.

Abstract: A fly-by-wire (FBW) system (104) is coupled to cockpit controls (102) of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) (108) is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector (110) is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out (306) a transfer of control of the FBW system from the cockpit controls to the AFCS, in response to a predetermined event.

Abstract: The present invention, Layered Detection Architecture (“LDA”) is useful to enhance the detection of command control processing errors and also facilitate survivorship among properly functioning flight critical Core Processing Modules (“CPM”) while eliminating faulty CPM responsible for processing execution errors. LDA is contemplated for use with lock-step execution verification schemes and other result comparison command-processing error detection methods also implementing redundant independent processing units.

Abstract: A hand controller system which provides the proper feel of the hand controller during aircraft operation. In both non-redundant and redundant embodiments, torque, and position measurements are made from the hand controller movements and processed to provide a feedback to a control motor in mechanical connection with the hand controller. The system includes self-monitoring of the motor, as well as the signals provided by the position, and torque sensors. Connections are provided from the hand controller system so that cross-coupling may be provided between the pilot's and copilot's hand controllers.

Abstract: A flight critical computer system for an aircraft includes dual independent lanes having two processors in each lane. The first lane has a primary processor and a redundant processor and provides a first command signal. The second lane includes a primary processor and a redundant processor and provides a second command signal. A first monitor compares the primary processor of the first lane with the primary processor of the second lane and generates first comparison signals as a function of disagreement therebetween. A second monitor compares the output signals of the redundant processor of the second lane and the primary processor of the first lane and generates second comparison signals as a function of disagreement therebetween. A third monitor compares the primary processor of the second lane with the redundant processor of the first lane and generates third comparison signals as a function of disagreement therebetween.

Abstract: In a computer system having fault recoverable capability, there is included a first and second data processing unit (DPU), wherein each of the first and second DPU is executing the same task essentially in parallel. Each DPU comprises a processor, a memory and a protected memory. The protected memory stores system data, such that the system data stored in the protected memory is immune from transient conditions. Also included is a monitor, which is operatively connected to the monitor of the other DPU. The monitor detects the occurrence of an upset to reinitialize the DPU, the DPU being reinitialized to a condition just prior to the occurrence of the upset thus avoiding utilization of any potentially erroneous data, and thereby permitting the DPU to return to its normal processing with valid data.