System for a vehicle with redundant computers

摘要

A control and/or management system for a vehicle includes at least one of: (A) at least two redundant vehicle management computers configured to generate system control commands for each maneuvering actuators and for each system actor based on the data acquired by the sensors; (B) at least two redundant remote interface units for interconnecting a sensor or a system actor with a vehicle management computer; (C) at least two redundant actuator control computers configured to generate control commands for each maneuvering actuator based on received maneuvering commands; and (D) a common interface for connecting an external computer, the common interface being directly connected to at least two redundant computers.

主权项

1. A control and/or management system for a vehicle, the system comprising:
maneuvering actuators configured to maneuver the vehicle; system actors configured to control inner system components of the vehicle; sensors configured to acquire data associated with the system actors or maneuvering actuators; and at least two redundant computers configured to control or manage the vehicle, wherein the system further comprises at least one of
at least two redundant vehicle management computers communicatively interconnected with the maneuvering actuators, system actors, and sensors, wherein one of the at least two redundant vehicle management computers is configured to generate system control commands for each maneuvering actuators and for each system actor based on the data acquired by the sensors,wherein one of the at least two redundant vehicle management computers is configured to receive control commands or sensor data from at least one other vehicle management computer and is configured to compare control commands or sensor data from different vehicle management computers to determine errors of a vehicle management computer,wherein a first one of the at least two redundant vehicle management computer is directly connected to a first sensor and a second of the at least two redundant vehicle management computer is directly connected to a second sensor,wherein data received from the first sensor in the first vehicle management computer is transmitted by the first vehicle management computer to the second vehicle management computer,wherein, in the case both vehicle management computers are operating correctly, the first vehicle management computer is configured to process the data from the first sensor and/or to generate control commands for an actuator associated with the first sensor, and the second vehicle management computer is configured to process the data from the second sensor and/or to generate control commands for an actuator associated with the second sensor,wherein the first vehicle management computer is configured to transmit data received from the first sensor in the first vehicle management computer to the second vehicle management computer, andwherein, when fault control commands generated by the first vehicle management computer are detected, the second vehicle management computer is configured to take over the role of the first vehicle management computer and to generate the control commands for the first actuator.