Hamilton Sundstrand Corporation

Kamaraj Thangavelu

Jeffrey D Myroth

Jeffery S Schmidt

Matthew Ryan Hasseman

Ryan Thomas Carter

Abhay V Munshi

Paul J Peterson

Mark J Nauman

In accordance with at least one aspect of this disclosure, a system includes a generator control relay configured to electrically connect a generator and an exciter switch drive to drive an exciter switch. A first processor is operatively connected to control a state of the generator control relay to control the electrical connection between a generator and the exciter switch drive. The system includes an exciter drive configured to generate excitation current for field windings of a generator system based on a state of the exciter switch. A second processor is operatively connected to control the exciter drive and to communicate with the first processor during a fault event to place the generator control relay in an open state, disconnecting the generator from the exciter switch drive to prevent generation of excitation current. In certain embodiments, the first processor can include a microcontroller and the second processor can include a voltage regulation processor.

Fast disconnects for generator systems

In accordance with at least one aspect of this disclosure, a controller for an aircraft electrical system includes, a software safe module. In embodiments, the software safe module can be configured to determine whether there was a sudden power failure upon controller initialization, and cause operation of the controller in a software safe mode if there was a sudden power failure such that manual intervention is required to leave the software safe mode to prevent repetitive power failure of the controller.

Systems and methods for circuit failure protection

An example method for uninterrupted execution of control software in an aircraft control system includes creating a plurality of static data copies. A first parity bit is determined for each of the plurality of static data copies. A second parity bit is determined for a first static data copy. A parity fault is detected in the first static data copy if the first parity bit does not match the second parity bit. The system switches to read a second static data copy in response to detecting a parity fault in the first static data copy.

Control system software execution during fault detection

Growing community of inventors

Rockford, IL, United States of America

Kamaraj Thangavelu