The two main axes, pitch and roll, are controlled by two different systems. There are fail-overs, two or three depending on the system (IIRC the unit reading the side-sticks is the only one with four copies). #Triple redundant flight control system software#Dissimilar means both different CPUs and chipsets (A320 uses i386 (Intel) and m68k (Motorola) newer models use different combinations, basically whatever was widely used at the time they were designed) and software written by two independent teams. What are the principles used in aviation to reduce the possibility for redundant computers to fail or to make the same errors at the same time?Įach unit is composed of two dissimilar boards, one driving the output and the other checking it. That system will still be susceptible to common mode failures that canĬause all channels to fail in the same way. But if theĪircraft uses a redundant architecture built with similar channels, If the same defect is present on all computers on the production line, the purpose of redundancy may be defeated, as they wouldn't be able to detect erroneous behavior.īecause of the severe consequences resulting from a single point ofįailure, hardware redundancy is critical in DAL A systems. However a computer can still be developed from faulty specifications, or be wrongly manufactured, and a program can contains bugs. Boeing aircraft have similar computers, even if the crew has more authority.Ī330 electronic bay, source, photo by 'swiss_a320'īeing critical, systems are redundant and supervise each other to detect possible failures and isolate failed components. Computers take decisions in place of the pilots, or even against their commands. On Airbus aircraft there are computers to secure the flight envelope, or to move the control surfaces.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |