Can bus network protection in redundant fly-by-wire systems
A system for protecting a controller area network (CAN) aircraft bus from a flight control module failure has been developed. Multiple CAN bus systems serve multiple connected components located onboard an aircraft. Flight control modules located onboard the aircraft are connected to multiple the CAN bus systems. An electronic isolator/repeater that is located between each connection of a flight control module and a CAN bus system. The isolator/repeater serves to isolate the CAN bus system from a failure of the connected flight control module.
1 . A system for protecting a controller area network (CAN) bus of a fly-by-wire aircraft from a flight control module failure, comprising:
at least one CAN bus system located onboard the aircraft, wherein each CAN bus system serves multiple connected flight control components;
at least one flight control module located onboard the aircraft, wherein each flight control module is connected to multiple CAN bus systems; and
an electronic isolator/repeater that is located between each connection of a flight control module and at least one CAN bus system, and includes a built in test (BIT) capability for testing communication ability between the flight control module and the at least one CAN bus system when the flight control module is in a dominant state, wherein the isolator/repeater isolates the CAN bus system from a failure of the connected flight control module.
2 . The system of claim 1 , wherein each CAN bus system comprises multiple CAN busses.
3 . The system of claim 2 , wherein the multiple CAN busses are bundled together in a CAN bus group.
4 . The system of claim 3 , wherein the system comprises three separate CAN bus groups.
5 . The system of claim 3 , wherein CAN bus groups interface with multiple actuation controllers of the aircraft.
6 . The system of claim 5 , wherein the multiple actuation controllers are evenly distributed across multiple CAN bus groups.
7 . The system of claim 1 , wherein the aircraft comprises a vertical takeoff and landing (VTOL) aircraft.
8 . The system of claim 1 , wherein the aircraft comprises an urban air mobility (UAM) aircraft.
9 . The system of claim 1 , wherein the flight control module is configured to,
determine a command for operating a flight control component;
generate a CAN message addressed with the flight control module for the flight control component; and
output the CAN message to the respective connected CAN bus system.
10 . The system of claim 9 , wherein the flight control component comprises a lift fan of a vertical takeoff and landing (VTOL) aircraft.
11 . The system of claim 9 , wherein the flight control component comprises a lift fan of a urban air mobility (UAM) aircraft.
12 . The system of claim 9 , further comprising a user interface device coupled to the flight a control module, wherein the flight control module is configured to determine the command for operating the flight control component based on an adjustment to the user interface device.
13 . The system of claim 1 , wherein the electronic isolator/repeater includes an input/output (IO) component that maintains a communication connection between the flight control module and the CAN bus system during a power loss event to the electronic isolator/repeater.
14 . A fly-by-wire system for an aircraft, comprising:
a three separate CAN bus groups located onboard the aircraft, wherein each CAN bus group serves multiple connected flight control components;
at least three flight control modules located onboard the aircraft, wherein each flight control module is connected to at least one of CAN bus groups; and
electronic isolator/repeaters that are located between each connection of a flight control module and at least one CAN bus group, and includes a built in test (BIT) capability for testing communication ability between the flight control module and the at least one CAN bus system when the flight control module is in a dominant state, wherein the isolator/repeater isolates the CAN bus group from a failure of the connected flight control module.
15 . The fly-by-wire system of claim 14 , wherein the aircraft comprises a vertical takeoff and landing (VTOL) aircraft.
16 . The fly-by-wire system of claim 14 , wherein the aircraft comprises an urban air mobility (UAM) aircraft.