公开(公告)号：US06275752B1

公开(公告)日：2001-08-14

申请号：US09423226

申请日：1999-11-04

申请人： Bernhard Giers

发明人： Bernhard Giers

IPC分类号： G05B903

CPC分类号： G06F11/181 ,  F02D41/266 ,  G05B19/0428 ,  G05B2219/24187 ,  G05B2219/24195 ,  G05B2219/2637 ,  G06F11/185

摘要： A microprocessor system for safety-critical control operations includes three central units which are located jointly on one chip and execute the same program. Further, there is provision of read-only memories and random-access memories, input and output units, and comparators which check the output signals of the central units for correlation. The central units are interconnected by way of bus systems and bypasses which enable the central units to jointly read and execute the existing data and commands according to the same program. The memory capacity of the read-only and the random-access memories in total amounts to at least 200% compared to the memory required for a non-redundant system. The memory locations are distributed among the three systems, for example, in a ratio of 100:50:50. The central units are extended by redundant periphery components to provide two complete control signal circuits and are interconnected so that, in case of a failure, the faulty central unit can be identified by a majority decision, and a change-over to an emergency operation mode can take place.

摘要翻译： 用于安全关键控制操作的微处理器系统包括三个中心单元，它们共同位于一个芯片上并执行相同的程序。 此外，提供只读存储器和随机存取存储器，输入和输出单元以及检查中央单元的输出信号用于相关的比较器。 中央单元通过总线系统和旁路互连，使得中央单元能够根据相同的程序共同读取和执行现有的数据和命令。 与非冗余系统所需的存储器相比，只读和随机存取存储器的存储容量总共至少为200％。 存储器位置分布在三个系统中，例如以100:50:50的比例分配。 中央单元由冗余外围组件扩展，以提供两个完整的控制信号电路并且互连，使得在发生故障的情况下，可以通过多数决定识别故障中央单元，并将其转换为紧急操作模式 可以发生

公开(公告)号：US06453221B2

公开(公告)日：2002-09-17

申请号：US09814172

申请日：2001-03-22

申请人： David Burson

发明人： David Burson

IPC分类号： G05B903

CPC分类号： G05D1/0072

摘要： A method for determining a minimum control speed for an aircraft includes measuring, during at least one flight of the aircraft, the values of predefined parameters, recording these values in a memory, and determining, on the basis of these measurements and of at least one predefined certification value received from memory, a certification value (Cnfcertif) for the yaw moment (Cnf) created by the shutting down of one engine of the aircraft. The certification value (Cnfcertif) is used to determine the minimum control speed. On the basis of measured values of the sideslip (&bgr;), the lateral force (Cy), and a certification value (Cycertif), a certification value (&bgr;certif) is determined, and, on the basis of the measured value of the sideslip (&bgr;), the lateral force (Cy), the yaw moment (Cnf), and the certification values (Cycertif) and (&bgr;certif), the certification value (Cnfcertif) is determined.

摘要翻译： 用于确定飞行器的最小控制速度的方法包括在飞行器的至少一次飞行期间测量预定参数的值，将这些值记录在存储器中，以及基于这些测量值和至少一个 从存储器接收到预定义的认证值，通过关闭飞机的一个发动机而产生的横摆力矩（Cnf）的认证值（Cnfcertif）。 认证值（Cnfcertif）用于确定最小控制速度。 基于侧滑（β），侧向力（Cy）和认证值（Cycertif）的测量值，确定认证值（betacertif），并且基于侧滑测量值 β），横向力（Cy），横摆力矩（Cnf）和认证值（Cycertif）和（betacertif），确定认证值（Cnfcertif）。

公开(公告)号：US06636009B2

公开(公告)日：2003-10-21

申请号：US10027009

申请日：2001-12-20

申请人： Alexander Walter

发明人： Alexander Walter

IPC分类号： G05B903

CPC分类号： B60T7/042 ,  B60T2220/04 ,  B62D5/003 ,  B62D5/0484

摘要： A fault-tolerant electromechanical actuating device for converting an electrical actuating signal into a mechanical output actuating value for use in vehicles, having two mutually independent control loops. Each loop has at least one controller and at least one electric motor which is driven by this controller and which, in each case via a self-locking transmission, drives the input to a summing transmission, which superimposes the actuating values of the actuating motors to form the output actuating value. The fault tolerance or reliability of the actuating device is ensured by a comparator controller, which monitors the functions of the other controllers. Interfaces between the controllers and between the subsystems ensure stringent isolation of electrical potential.

公开(公告)号：US06401014B1

公开(公告)日：2002-06-04

申请号：US09705772

申请日：2000-11-06

申请人： Jason Edward Hill ,  John David Brown

发明人： Jason Edward Hill ,  John David Brown

IPC分类号： G05B903

CPC分类号： H04L12/44

摘要： A signal system 10 for a vessel such as an aircraft, incorporates nodes 16A, B, C arranged in a hierarchy. Low level nodes 16C are associated with plant 14 of the aircraft. Mid-level nodes 16B can communicate with groups of low level nodes 16C, grouped by proximity. A top level node 16A can communicate with all mid-level nodes 16B. Decision making capability is built into nodes 16, to allow decisions to be taken at the lowest hierarchical level at which all of the necessary information is available.

摘要翻译： 用于诸如飞行器的容器的信号系统10包括以层级布置的节点16A，B，C。 低级节点16C与飞机的设备14相关联。 中间级节点16B可以与按照接近度分组的低级节点16C组进行通信。 顶级节点16A可以与所有中间级节点16B通信。决策能力内置在节点16中，以允许在所有必需信息可用的最低层级采取决策。

公开(公告)号：US06285096B1

公开(公告)日：2001-09-04

申请号：US09671477

申请日：2000-09-27

申请人： Bernhard Müller ,  Bernhard Wiesgickl ,  Michael Schiffmann

发明人： Bernhard Müller ,  Bernhard Wiesgickl ,  Michael Schiffmann

IPC分类号： G05B903

CPC分类号： G05B9/03

摘要： The invention relates to a safety switch arrangement for switching the power supply of a tool on and off by means of at least two actuators. The actuators are connected to a code generator. The code generator can issue a numerical word divided into two partial words, the values of which can be influenced by a respective one of the at least two actuators. If the actuators are activated, the values for the partial words are changed continuously. As a result of the deactivation of an actuator, the assigned partial word assumes a fixed, predetermined value. In order to check the switching states of the actuators, the partial words are read synchronously into an evaluation unit. The power supply of the tool is switched “on” only when the at least two actuators are activated to the “on” state and the partial words correspond to the predetermined fixed value.

摘要翻译： 本发明涉及一种用于通过至少两个致动器来切换工具的电源的安全开关装置。 致动器连接到代码发生器。 代码生成器可以发出划分为两个部分字的数字，其值可以受到至少两个致动器中的相应一个的影响。 如果致动器被激活，则部分字的值被连续地改变。 作为致动器的停用的结果，分配的部分字假定固定的预定值。 为了检查执行器的切换状态，将部分字同步地读入评估单元。 只有当至少两个致动器被激活到“开”状态并且部分字对应于预定的固定值时，工具的电源被切换为“接通”。