|Publication number||USRE33087 E|
|Application number||US 07/146,057|
|Publication date||Oct 10, 1989|
|Filing date||Jan 20, 1988|
|Priority date||Jul 3, 1984|
|Publication number||07146057, 146057, US RE33087 E, US RE33087E, US-E-RE33087, USRE33087 E, USRE33087E|
|Inventors||Michael P. Bradford, Gerald W. Parkinson, Ross M. Grant|
|Original Assignee||United Technologies Corporation|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (19), Referenced by (15), Classifications (24), Legal Events (2)|
|External Links: USPTO, USPTO Assignment, Espacenet|
The Government has rights in this patent under Contract No. NAS2-11058 awarded by NASA.
The invention herein relates to electric power distribution and load transfer systems, and more particularly to those that utilize solid-state switching circuitry to provide essentially uninterruptible power to a flight control computer system.
Presently known systems for providing uninterruptible power to flight control computer systems include power supply systems having capacitor banks to store energy and to supply power to the flight control computer system during primary power interruptions.
Additionally, flight control computers have in the past utilized diode-isolated multiple power supplies. In at least one of such diode-isolated power supplies, .[.nickle.]. .Iadd.nickel .Iaddend.cadmium batteries were employed for energy storage.
In addition, power supplies employing multicoil transformers for maintaining DC power upon loss of one or more of the AC primary sources, are also well known.
However, each of these systems is hampered by substantial disadvantages. For example, capacitor banks for power storage typically need to be very large in order to provide a reasonably adequate power storage time. Moreover, the storage capacity of the capacitor banks deteriorates with the failure of individual capacitors of the bank. Such failures are difficult to detect. Moreover, the capacitors are flammable and can be dangerous.
In the case of diode-isolated multiple source power supplies, a ground fault at the flight control computer would simultaneously affect each of the system power sources. Also, a single over-voltage transient can pass through the diode source connection and detrimentally affect all computers tied to that bus. Additionally, no capability exists in such a system to establish power source priorities.
Diode-isolated dual-source supplies featuring batteries have all the disadvantages of diode isolated multiple prime-source supplies, and others in addition. For example, such sources are subject to the added difficulty of needing to measure the charge state of the .[.nickle.]. .Iadd.nickel .Iaddend.cadmium batteries employed. Beyond this, the .[.nickle.]. .Iadd.nickel .Iaddend.cadmium battery packs are heavy and require considerable maintenance. Finally, multicoil transformer supplies offer no over-voltage protection; and, a short circuit in any one of the coils can cause a complete loss of power affecting the entire computer system.
An object of the invention is to provide an electric power distribution and load transfer system, which applies any of a plurality of separate power sources, each of the units being isolated with respect to each other.
According to the invention, an electric power distribution and load transfer system is provided for insuring that at least one of several power sources connected to corresponding lead transfer units is fault free in the case of a single one of said load transfer units failing.
According to the invention, electrical power is supplied (e.g. to a flight computer) through a load transfer unit. The load transfer unit in turn is supplied by several, for example four out of a possible five independent power sources, each of which is independently capable of fully powering the computer alone.
According to the invention, an electric power distribution and load transfer system is provided for insuring that at least one of several power sources connected to corresponding load transfer units is fault free in the case of a single one of said load transfer units failing.
Each load transfer unit monitors each of the four power sources as well as the power output to the flight control computer. Upon detecting an abnormal voltage condition, it automatically switches the computer to another one of the available power sources.
According to the invention, all but one of several power sources are connected to each of several load transfer units, permitting the survival of at least one power source (the disconnected one) in the event that one of said load transfer units is destroyed, possibly rendering inoperable all of the power sources connected to the destroyed load transfer unit.
FIG. 1 is a schematic of the power distribution system generally;
FIG. 2 is a schematic diagram of a load transfer unit according to the invention herein;
FIG. 3 is a schematic of the window comparators employed with the power distribution system; and
FIG. 4 is a flowchart indicating a preferred sequence of operation.
Referring to FIG. 1, a complete power distribution system may supply four devices, e.g. independent flight control computers 13 through corresponding load transfer units 18. According to the invention, this arrangement is effective for increasing the level of certainty that at least one fault-free source is available in the event that a particular load transfer unit 18 should fail. This can happen for example by a short circuit at any of electric power leads or inputs 19 from a primary or alternate DC power source 21 or from a battery source 22 leading to the load transfer units 18. Such a combination of power and battery sources is typical of contemporary aircraft systems.
The input leads 19 from the respective power sources 21 and battery source 22, are staggered as shown in FIG. 1 to enable continued operation of all but one of flight control computers 13, if a single one of the load transfer units 18 is destroyed, as in battle for example, and all of the four input leads 19 to that load transfer unit are simultaneously shorted out.
The power inputs 19 are effective for connecting the power sources 21 with the load transfer units according to an interconnection scheme in which each of the power sources is connected to all but one of the load transfer units, the omitted one of the load transfer units 18 being different for each of the power sources. As a consequence of this arrangement, the inadvertent grounding of all of the inputs or leads 19 to any one of the load transfer units 18 can have no impact upon the single one of the power sources 21 not connected to the affected load transfer unit 18.
Each load transfer unit 18 as shown in FIG. 2 includes a four-channel, preferably solid-state switching circuit supplying power to a corresponding one of the flight control computers 13. Such load transfer units 18 provide the fast switching speeds necessary to keep the flight control computers 13 operational and adequately powered. Further, the use of the solid-state components as indicated hereinafter establishes substantially more reliable load transfer units 18 than is possible with electromechanical components.
Each load transfer unit 18, according to a preferred embodiment of the invention, has four of a possible five power inputs 19, each acting independently to provide a sufficient level of power for effective operation of a given flight control computer.
The load transfer unit 18 selects which of the inputs 19 is to power a corresponding flight control computer 13, according to a predetermined priority system. For example, the power sources 21 and battery source 22 can sequentially be assigned priorities as indicated in FIG. 1 by the numbers adjacent the input power leads 19 outside of the LTUs 18.
As shown in FIG. 2, each of the inputs 19 is subject to detection along one of voltage detection leads 61 for abnormal voltage conditions including insufficient or excessive voltage levels. Upon detection of an abnormal voltage condition, the load transfer unit 18 automatically switches to a lower level of priority input 19. Should the original higher priority input 19 subsequently become available at a normal acceptable level of voltage, the load transfer unit 18 automatically switches back to that input 19 after a short time delay.
Each load transfer unit 18 additionally has a single power output 31, which is monitored for an overstress condition as shown in FIG. 2. This overstress can manifest itself in either an excessive output voltage or current. Upon sensing a current overload without a concurrent voltage rise, provided the current overload is of sufficient duration such as for example over five (5) milliseconds, the load transfer unit 18 latches into an off-state under controller 99 direction until all power is removed from the unit. The load transfer unit 18 then resets, enabling power operation to be reinitiated at a later point. In the event of a voltage overstress, the load transfer unit 18 merely switches to a lower priority level input power lead 19.
The switching time of the load transfer unit 18 is one-half of the hold-up time of a flight control computer 13 after loss of power, the total hold-up time being 600 microseconds for a particular known application. The computer hold-up time is defined as the time interval between power interruption and performance degradation of the computer.
Each power or battery source, 21 or 22, is suitably electrically connected to its corresponding load transfer unit 18 through a suitable low-pass power filter 41 effective for suppressing voltage spikes and high frequency oscillations occurring during operation in intense electromagnetic interference, electromagnetic pulse or lightning environments. A suitable filter according to the invention herein is an Erie 1202-056 pi-type filter effective for establishing an attenuation of eight (8) decibel at ten (10) megahertz.
Power is routed in each case through a power transistor 44 and power diode 47 arranged in series, thereby establishing required redundancy and isolation in the event of component failure, while concurrently presenting a simple configuration of components and a low level of internal power dissipation. In one embodiment of the invention, a 120 volt, 50 ampere pnp power transistor JANTX2N6379 can be employed. The corresponding power diode can for example be a 600 volt, 35 ampere JANTXIN1190 diode. The diodes 47 are commonly connected before the corresponding one of power outputs 31, leading power through current sensor 55, such as for example a Hall effect current sensor. Information regarding the output voltage and current of the LTU 18 is analog in form, and is converted to digital form at analog to digital unit 73' for input to controller 99. A single conductor 56 then carries the output power to the associated flight control computer 13.
An input comparator 66 which is preferably a window comparator as shown in greater detail in FIG. 3, detects the input voltage levels at the respective power inputs 19 through detection leads 61. Details of the window comparator 66 and associated circuitry are shown in FIG. 3.
Similar detection leads 62 provide output comparators 67 with indications of the voltage levels on the output side of transistors 44. The output comparators 67 detect abnormal over- and under-voltage conditions regarding the voltage levels on the outputs of transistors 44.
This arrangement is effective for monitoring the continued operation of all power sources 21 and 22 within MIL-STD-704 voltage limits. Further, this provides information regarding whether all of the transistors 44 are in proper conductive or non-conductive states, and whether each diode 47 is suitably reverse biased.
Comparators 66 and 67 and the discrete logic elements shown in FIG. 3 are used to lighten the computational load of controller 99, such as a microprocessor, for example one manufactured by Intel under model number 8022, thereby increasing cycle speed. The controller 99 is effective for switching transistors 44 on and off by signals sent through a suitable buffer 99' and current limiting resistors 100.
The circuit in FIG. 3 shows the arrangement of a window comparator for detecting a single one of input voltages along one of detection lines 61. High and low voltage thresholds, respectively VH and VL, are set by selecting appropriate resistances for series resistors 87, 88 and 89. The high side of resistor 87 is for example set at positive 10 volts DC, thereby establishing the high voltage threshold VH and the low voltage threshold VL at respectively diminishing fractions of ten volts. Respective comparators 95' are connected as shown in FIG. 3.
FIG. 3 further shows a filter circuit 91 including resistors 93 and 94 and capacitor 95 in parallel with resistor 94, effective for providing a delay to slow circuit response to approximately 50 microseconds from a natural speed of approximately two (2) microseconds. Resistor 93 additionally scales down the detected voltage to an appropriate comparison level.
Thus, if the detected voltage provided along lead 61 is within limits and scaled down by resistor 93, for input to comparators 95' on a single LM139A chip for example (one-hald thereof is shown), and the high and low voltages are applied to the remaining respective inputs of the comparators 95', the output voltage from the comparator is high.
This level is accordingly applied to the input of analog-to-digital converter 96, and transferred in modified form to controller 99 for interpretation.
The voltage and current levels at power output 31 are proportionately sensed for exact indication levels, along respective voltage and current detection leads 73 and 74, because the initial turn-on voltage is feedback controlled in a ramp format and thus increases gradually, requiring monitoring during the entire evolution.
Accordingly, faults and power-source over-voltages with respect to any of flight control computers 13 can be anticipated by calculating the rate of output voltage and current change.
All load transfer unit circuits are initially powered-up by an internal or external turn-on voltage at input 101, which is subsequently removed. Lead 101 is connected to the anode of a power diode 203. After turn-on, the load transfer unit 18 is powered from the power output 31 along leads 73 and 75 through another power diode 206 as shown in FIG. 2. A capacitor 104 or several capacitors in parallel effectively store sufficient charge from lead 101 or power output 31 through power diode 206 and resistor 207, to maintain upon discharge through power diode 210 all functions of the load transfer unit 18 and controller 99, despite possible interrupts and reconfigurations. The combination of resistor 207 and diode 210 protects capacitor 104 from too fast a rate of charging, while nonetheless permitting unrestricted discharge to power the controller 99 and the load transfer unit 18.
Should power to the load transfer unit 18 be lost for a period beyond the discharge capacity of the capacitor 104, the unit 18 shuts down until it receives another turn-on pulse through input 101.
A wraparound signal lead 149 through current limiting resistor 303, for example at 10K ohm, is effective for detecting the voltage level actually supplied to the computer 13.
Power transistor 44 effectively blocks voltage surges from reaching the flight control computer 13. Moreover, the input voltage detection leads 61 are effective for timely detection of over-voltages, causing controller 99 to disable the affected channel before any damage is sustained. Should an over-voltage develop in a powered channel, the load transfer unit 18 deenergizes the transistor 44 and switches away therefrom.
FIG. 4 is a flowchart indicating controller 99 operation according to a preferred scheme of operation. Once operation is started, as by ramping up a turn-on power level on line 101 (see FIG. 2), a lookup table is established defining power source and channel priorities (see block 200) and all sensors are checked for correct start-up status, as indicated at decision block 201.
If any of the input or output voltages with regard to any of transistors 44 are out of bounds or not in correct on or off status, indicating a failed transistor or diode, the associated power channel is turned off by disabling the corresponding transistor 44, as suggested at block 204 of the flowchart.
Decision block 206 then decides whether there are sufficient remaining operable components to permit effective operation. If so, operation continues, as discussed below.
Initially, channel "1" is ramped up through its corresponding transistor, since that is the selected channel of highest priority, as indicated in respective blocks 210 and 211.
Then a check is made (block 220) whether the LTU output voltage and each of the transistor output voltages are within limits. Next, block 230 checks whether the LTU output current is within limits. Finally, a check as per block 240 is performed to determine whether the output voltages for all off-transistors are actually at zero, or within a prescribed range equivalent to zero.
Should any of the aforementioned conditions not be met, further checks and certain responses are performed as set forth below. For example, if the output LTU voltage or any of the transistor output voltages are above limits, an LTU fault is recognized by the controller 99 and an associated fault code is stored in memory, as indicated at respective blocks 320 and 420.
If the LTU output current is above limits, all transistors 44 are disabled, and an output device fault, such as a fault at the flight control computer 13, is signalled, as suggested by blocks 330 and 430.
If the output voltage for any of the off-transistors is not zero, then the particular one or ones of transistors 44 are turned off and the associated channel number is removed from the priority list, as indicated at block 340. Additionally, as block 440 suggests, an associated LTU fault indication is signalled.
Next, a check is conducted to determine whether the on-transistor and channel actually correspond to the power source of highest priority (see block 250). If not, the transistor 44 corresponding to the highest priority source is turned on. As block 350 shows, the presently on source and transistor are turned off.
In the event that the output LTU current is below limits, or the output voltages are above limits without a corresponding overcurrent at the output, transistor "n" is turned on and the previous ramped-up transistor "n-1" is disabled, as suggested at block 500.
The information disclosed above may lead individuals skilled in the art to conceive of related embodiments which nonetheless fall within the scope of the invention addressed herein. Accordingly, attention is directed to the claims which follow, since these specify the precise bounds of the invention.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US3555290 *||May 29, 1969||Jan 12, 1971||Ellermeyer Walter||Second-highest redundant voltage selector|
|US3657603 *||Jul 24, 1970||Apr 18, 1972||Adams William M||Relay control responsive to overvoltage and undervoltage|
|US3696286 *||Aug 6, 1970||Oct 3, 1972||North American Rockwell||System for detecting and utilizing the maximum available power from solar cells|
|US3753001 *||Jun 29, 1972||Aug 14, 1973||Nissan Motor||Electric power supply system using back-up capacitor|
|US4017779 *||Mar 22, 1976||Apr 12, 1977||Motorola, Inc.||Battery isolator|
|US4096394 *||Jan 21, 1976||Jun 20, 1978||A.G. fur industrielle Elektronic AGIE||Apparatus for supplying electrical energy to a load|
|US4210906 *||Nov 20, 1978||Jul 1, 1980||Le Baron George L||Transient suppression and detection system with operational indicator means|
|US4262214 *||Oct 9, 1979||Apr 14, 1981||The Foxboro Company||System for switching a load between two sources|
|US4356402 *||May 28, 1981||Oct 26, 1982||Nippon Electric Co., Ltd.||Engine generator power supply system|
|US4492876 *||Jul 18, 1983||Jan 8, 1985||At&T Bell Laboratories||Power supply switching arrangement|
|US4496168 *||Aug 25, 1981||Jan 29, 1985||Marker-Patentverwertungsgesellschaft Mbh||Current supply circuit for electronic safety ski bindings|
|US4528458 *||Jan 6, 1984||Jul 9, 1985||Ncr Corporation||Self-diagnostic redundant modular power supply|
|US4564767 *||Nov 7, 1983||Jan 14, 1986||Tii Industries, Inc.||Uninterruptible switching power supply system|
|US4594634 *||Jul 24, 1984||Jun 10, 1986||Bbc Brown, Boveri & Company, Ltd.||High-voltage direct-current supply with over-current protection|
|US4617473 *||Jan 3, 1984||Oct 14, 1986||Intersil, Inc.||CMOS backup power switching circuit|
|US4618779 *||Jun 22, 1984||Oct 21, 1986||Storage Technology Partners||System for parallel power supplies|
|US4623967 *||Jul 15, 1983||Nov 18, 1986||Naimer H L||Computer-controlled switching apparatus|
|US4638175 *||Jul 3, 1984||Jan 20, 1987||United Technologies Corporation||Electric power distribution and load transfer system|
|US4696578 *||Jun 19, 1986||Sep 29, 1987||International Business Machines Corporation||Single chip thermal tester|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US5162623 *||Oct 15, 1991||Nov 10, 1992||Mitsubishi Denki Kabushiki Kaisha||Elevator monitor and control system with multiple power sources|
|US5177657 *||May 16, 1991||Jan 5, 1993||Felchar Manufacturing Corporation||Ground fault interruptor circuit with electronic latch|
|US5459444 *||Oct 19, 1994||Oct 17, 1995||Felchar Manufacturing Corporation||Circuit breaker for use in wall mounted plug|
|US5557738 *||May 9, 1994||Sep 17, 1996||Apple Computer, Inc.||Power system configuration and recovery from a power fault condition in a computer system having multiple power supplies|
|US5623596 *||May 9, 1994||Apr 22, 1997||Apple Computer, Inc.||Power fault protection in a computer system having multiple power supplies|
|US5719490 *||Aug 31, 1995||Feb 17, 1998||Sgs-Thomson Microelectronics S.R.L.||Dual sourced voltage supply circuit|
|US6202171 *||Apr 27, 1995||Mar 13, 2001||Apple Computer, Inc.||Power fault protection in a computer system having multiple power supplies|
|US7007179||Nov 19, 2002||Feb 28, 2006||Honeywell International Inc.||Electric load management center|
|US7020790||Dec 14, 2001||Mar 28, 2006||Honeywell International Inc.||Electric load management center including gateway module and multiple load management modules for distributing power to multiple loads|
|US7162653||Dec 15, 2005||Jan 9, 2007||Honeywell International Inc.||Electric power distribution center having a plurality of ASICS each with a voltage to frequency converter that use an RMS current value|
|US7591653||Sep 5, 2007||Sep 22, 2009||Aees, Inc.||Modular power distribution center|
|US20020108065 *||Dec 14, 2001||Aug 8, 2002||Mircea Mares||Electric load management center|
|US20060101296 *||Dec 15, 2005||May 11, 2006||Mircea Mares||Electric load management center|
|US20080153325 *||Sep 5, 2007||Jun 26, 2008||Boileau Daniel E||Modular power distribution center|
|WO1999060832A1 *||Mar 2, 1999||Nov 25, 1999||Ibm||Electronic circuit card assembly|
|U.S. Classification||307/64, 307/66, 361/80, 361/65, 307/80, 361/90, 361/66, 307/65, 361/92, 361/64, 361/91.5|
|International Classification||H02J9/06, G06F1/30, G06F1/18|
|Cooperative Classification||H02J9/061, G06F1/189, G06F1/305, Y10T307/62, Y10T307/696, Y10T307/625, Y10T307/615|
|European Classification||G06F1/18V, G06F1/30F, H02J9/06B|
|Jun 13, 1990||FPAY||Fee payment|
Year of fee payment: 4
|Jun 9, 1994||FPAY||Fee payment|
Year of fee payment: 8