Triple software redundancy fault tolerant framework architecture
US-2016314057-A1 · Oct 27, 2016 · US
US11390389B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11390389-B2 |
| Application number | US-201916686118-A |
| Country | US |
| Kind code | B2 |
| Filing date | Nov 16, 2019 |
| Priority date | Nov 16, 2019 |
| Publication date | Jul 19, 2022 |
| Grant date | Jul 19, 2022 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A sequencer system for an ejection assembly may comprise a first A-side controller and a second A-side controller in operable communication with the first A-side controller. A first B-side controller may be in operable communication with the first A-side controller. A second B-side controller may be in operable communication with the first B-side controller and the second A-side controller. The controllers may be configured to each make an initial ejection sequence determination and a verified ejection sequence determination. The controllers may make the verified ejection seat determination based on a two of three voting scheme.
Opening claim text (preview).
What is claimed is: 1. A sequencer system for an ejection assembly, the sequencer system comprising: a first A-side controller configured to determine a first initial ejection sequence and a first verified ejection sequence and to output a series of first driver sequence commands, wherein a timing of when each of the first driver sequence commands is output is based on the first verified ejection sequence; a second A-side controller configured to determine a second initial ejection sequence and a second verified ejection sequence and to output a series of second driver sequence commands, wherein a timing of when each of the second driver sequence commands is output is based on the second verified ejection sequence; a first B-side controller configured to determine a third initial ejection sequence and a third verified ejection sequence and to output a series of third driver sequence commands, wherein a timing of when each of the third driver sequence command is output is based on the third verified ejection sequence; a second B-side controller configured to determine a fourth initial ejection sequence and a fourth verified ejection sequence and to output a series of fourth driver sequence commands, wherein a timing of when each of the fourth driver sequence command is output is based on the fourth verified ejection sequence; an A-side electronic explosive device driver module configured to receive the series of first driver sequence commands from the first A-side controller and the series of second driver sequence commands from the second A-side controller; and a B-side electronic explosive device driver module configured to receive the series of third driver sequence commands from the first B-side controller and the series of fourth driver sequence commands from the second B-side controller, wherein: the first A-side controller is configured to determine the first verified ejection sequence based on a comparison of the first initial ejection sequence to the second initial ejection sequence and the third initial ejection sequence, the second A-side controller is configured to determine the second verified ejection sequence based on a comparison of the second initial ejection sequence to the first initial ejection sequence and the fourth initial ejection sequence, the first B-side controller is configured to determine the third verified ejection sequence based on a comparison of the third initial ejection sequence to the first initial ejection sequence and the fourth initial ejection sequence, and the second B-side controller is configured to determine the fourth verified ejection sequence based on a comparison of the fourth initial ejection sequence to the third initial ejection sequence and the second initial ejection sequence. 2. The sequencer system of claim 1 , wherein the first A-side controller is configured to implement the first initial ejection sequence as the first verified ejection sequence in response to the first A-side controller determining that the first initial ejection sequence matches at least one of the second initial ejection sequence or the third initial ejection sequence, and wherein the first A-side controller is configured to implement at least one of the second initial ejection sequence or the third initial ejection sequence as the first verified ejection sequence in response to the first A-side controller determining that the second initial ejection sequence matches the third initial ejection sequence and that the first initial ejection sequence does not match the second initial ejection sequence. 3. The sequencer system of claim 2 , wherein the A-side electronic explosive device driver module includes a first A-side electronic explosive device driver configured to receive a first driver sequence command of the series of first driver sequence commands from the first A-side controller and a second driver sequence command of the series of second driver sequence commands from the second A-side controller; and wherein the B-side electronic explosive device driver module includes a second electronic explosive device driver configured to receive a third driver sequence command of the series of third driver sequence commands from the first B-side controller and a fourth driver sequence command of the series of fourth driver sequence commands from the second B-side controller. 4. The sequencer system of claim 3 , wherein the A-side electronic explosive device driver is configured to output a first firing signal in response to determining that the first driver sequence command matches the second driver sequence command. 5. The sequencer system of claim 4 , wherein the B-side electronic explosive device driver is configured to output a second firing signal in response to determining that the third driver sequence command matches the fourth driver sequence command. 6. The sequencer system of claim 5 , wherein the first firing signal and the second firing signal are output to an ejection system subcomponent. 7. The sequencer system of claim 6 , wherein the ejection system subcomponent is at least one of a canopy driver or a catapult driver. 8. The sequencer system of claim 5 , wherein the first firing signal and the second firing signal are output to an ejection seat subcomponent, and wherein the ejection seat subcomponent is at least one of a parachute mortar or a harness release thruster. 9. An ejection seat, comprising: a parachute mortar; a harness release thruster; and an ejection seat sequencer system located on the ejection seat and configured to control a timing for firing the parachute mortar and the harness release thruster, the ejection seat sequencer system comprising: a first A-side controller configured to determine a first initial ejection sequence and a first verified ejection sequence and to output a series of first driver sequence commands, wherein a timing of when each of the first driver sequence command is output is based on the first verified ejection sequence; a second A-side controller configured to determine a second initial ejection sequence and a second verified ejection sequence and to output a series of second driver sequence commands, wherein a timing of when each of the second driver sequence commands is output is based on the second verified ejection sequence; a first B-side controller configured to determine a third initial ejection sequence and a third verified ejection sequence and to output a series of third driver sequence commands, wherein a timing of when each of the third driver sequence command is output is based on the third verified ejection sequence; a second B-side controller configured to determine a fourth initial ejection sequence and a fourth verified ejection sequence and to output a series of fourth driver sequence commands, wherein a timing of when each of the fourth driver sequence command is output is based on the fourth verified ejection sequence; a first electronic explosive device driver module configured to receive the series of first driver sequence commands from the first A-side controller and the series of second driver sequence commands from the second A-side controller; and a second electronic explosive device driver module configured to receive the series of third driver sequence commands from the first B-side controller and the series of fourth driver sequence commands from the second B-side controller, wherein: the first A-side controller is configured to determine the first verified ejection sequence based on a comparison of the first initial ejection sequence to the second initial ejection sequence and the third initial ejection sequence, the second A-side controller is configured to determine the second verified ejection sequence based on a co
Sequential deployment of a plurality of canopies · CPC title
Ejector seats · CPC title
Redundancy · CPC title
Safety, monitoring (G05B19/0423 takes precedence) · CPC title
Analog I-O to microprocessor to set switch moment for next step · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.