| 摘要 |
In a control system for a gas turbine aero engine, the control system (ECU) is configured as a dual control system comprising two channels, Ch-A and Ch-B. Ch-A has two CPUs which conduct calculations separately based on the sensor outputs and one of the CPUs compares the results and if they coincide, the CPU sends the result of the other CPU to the FCU. If not, one of the CPUs determines that an abnormality arises in Ch-A and sends a result to Ch-B. Ch-B is constituted as a standby channel having only one CPU whose operation is monitored by a simple watchdog timer circuit. This enhances CPU failure detection with a relatively simple configuration, and eliminates the need for provision of an overspeed protector.
|
