US 12,330,613 B2
Aircraft brake system with dissimilar control devices and software module used in the event of a fault
Olivier Frey, Moissy-Cramayel (FR); Julien Thibault, Moissy-Cramayel (FR); and Dominique Onfroy, Moissy-Cramayel (FR)
Assigned to SAFRAN LANDING SYSTEMS, Velizy-Villacoublay (FR)
Appl. No. 17/595,682
Filed by SAFRAN LANDING SYSTEMS, Velizy-Villacoublay (FR)
PCT Filed May 22, 2020, PCT No. PCT/FR2020/050859
§ 371(c)(1), (2) Date Nov. 22, 2021,
PCT Pub. No. WO2020/234551, PCT Pub. Date Nov. 26, 2020.
Claims priority of application No. 1905438 (FR), filed on May 23, 2019.
Prior Publication US 2022/0212640 A1, Jul. 7, 2022
Int. Cl. B60T 8/17 (2006.01); B60T 8/32 (2006.01); B60T 17/22 (2006.01); B64C 25/42 (2006.01); B64C 25/44 (2006.01)
CPC B60T 8/1703 (2013.01) [B60T 8/325 (2013.01); B64C 25/42 (2013.01); B60T 17/22 (2013.01); B60T 2270/404 (2013.01); B60T 2270/413 (2013.01); B64C 25/44 (2013.01)] 14 Claims
OG exemplary drawing
 
1. An aircraft brake system comprising:
a brake unit comprising a first control device and a second control device, wherein the first control device includes a first monitoring module and the second control device includes a second monitoring module,
a first group of at least one electromechanical actuator able to apply a braking force to slow at least one wheel of the aircraft, and
a second group of at least one electromechanical actuator able to apply a braking force to slow said at least one wheel of the aircraft,
wherein the first control device is configured to control the first group of at least one actuator by means of a first software module and a second software module, the second software module being configured to control the first group of at least one electromechanical actuator at least in an event of a fault of the first software module,
wherein the second control device is configured to control the second group of at least one actuator by means of a third software module and a fourth software module, the fourth software module being configured to control the second group of at least one electromechanical actuator at least in an event of a fault of the third software module,
wherein the first control device and the second control device have at least a structural difference,
wherein the second software module differs from the first software module in that:
the second software module includes a smaller number of inputs, and/or
the second software module includes a smaller number of outputs, and/or
the second software module includes a smaller number of functionalities,
and/or wherein the fourth software module differs from the third software module in that:
the fourth software module includes a smaller number of inputs, and/or
the fourth software module includes a smaller number of outputs, and/or
the fourth software module includes a smaller number of functionalities.