Hamilton Sundstrand Corporation

United Technologies Corporation

Mark A Johnston

Jeffry K Kamenetz

Douglas A Parsons

John E Games

James A Gosse

John O'Neil

Edward John Marotta

Richard L Bue

James Peter Wivell

Joseph T Gostkowski

Gerald L DePardo

Jay W Kokas

Nicholas D Lappos

James J Howlett

Gregory DiVincenzo

David H Sweet

Charles W Evans

Kevin P Roy

William Betterini

Robert W Rice

Gregory P Wright

Luke T Orsini

Steven R Fischer

Jay H Hartman

Cathleen R Bleier

John M O'Neil, Jr

Luke J Orsini

A multi-channel control system includes at least a primary control microprocessor and a back-up control microprocessor operable to control a device. The primary control microprocessor and the back-up control microprocessor assert control over a controlled device according to a locally stored method of controlling a back-up microprocessor assumption of control of a device.

Multi-channel control switchover logic

A multi-channel control system includes a first primary control microprocessor and a second primary control microprocessor operable to control a device, and a first secondary control microprocessor and a second secondary control microprocessor operable to control the device. Each of the first and second primary control microprocessors and the first and second secondary control microprocessors are arranged as an independent control channel.

A multi-channel controller uses multiple logic gates and multiple control channels to provide fault tolerant protection against undesired events.

Multi-channel protection logic

An electronic control configuration includes at least one secondary microprocessor operable to control a device. The at least one secondary microprocessor assumes protection control of the device responsive to a first type of failure by transmitting a protection control signal to a first effector. The at least one secondary microprocessor assumes backup control of the device responsive to a second type of failure by transmitting a backup control signal to a second effector. The backup control functionality of the at least one secondary microprocessor can be selectively disabled.

Architecture using integrated backup control and protection hardware

A engine control system for helicopters and the like in which free turbine speed is isochronously controlled by a more robust control system having increased bandwidth due to loop architecture and filter implementation accomplished via closed loop control. Dual notch (feedback compensation) is used with design forward path compensation, including variable lead/position of the lead, variable gain and implementation of integrator/proportional. Superior transient control is achieved by the use of a multi-loop governing design using different error compensations when on 'NF' loop control and when not on 'NF' loop control, and with 'bumpless' inner loop reference by the combination of compensation switching and re-initialization of a common integrator. Parallel select logic with dynamic compensation is used separating the system control loops and the selection process of the controlling functions, as they pertain to the application of control loops designed form small signal stability to large transients. A torque loop limitation as a direct function of the speed loop gains provides a predetermined limit to the governed speed excursion in the event of an in-range failure of the torque signal, or an unannounced fail fix on one engine or system of the twin engine application.

Control system for gas turbine helicopter engines and the like

The existence of autorotation of a load (e.g., a helicopter rotor system) coupled to the free turbine of a gas turbine engine is determined and a signal indicative thereof enables an integrator which, upon autorotation, integrates rate-based recovery anticipation provided thereto, the integrator output providing a time-composite bias signal to the main control portion of the engine fuel control to increase the speed of the gas generator of the engine in anticipation of rotor reengagement with the free turbine. The amount of recovery error is determined from the rotor speed error and is multiplied with the integrator output, the product being fed, upon completion of autorotation recovery, to the integrator input whose output now provides a controlled removal of the bias signal from the main control portion so as to minimize transients induced therein.

Helicopter autorotation detection and recovery

Primary logic (116-128) for engine failure detection in a multi-engine aircraft is based on thresholds for engine torque (Q), gas generator speed (NG), power turbine inner stage temperature (T5), power turbine speed (NF), throttle setting (PLA), and throttle manipulation (PLADOT).

Detection of engine failure in a multi-engine aircraft

Growing community of inventors

Windsor, CT, United States of America

Mark A Johnston