Cyclical method and a device for localizing uncontrollable multiple failures in engineering systems in operation

Abstract

A method and device improve efficiency, depth and reliability of diagnosing technical condition of highly complex objects. The technical effect is achieved by signals received from a diagnosed object (DO). These signals are transformed into a technical condition initial estimate vector for the DO elements. Then, technical condition estimates for the DO elements are specified through a cyclical process and by using a reverse logical model and a direct logical model. A technical condition vector estimate is formed after the cyclical process is completed, and its variable components are used for deciding on technical condition of the diagnosed object elements. The device comprises an interface unit which inputs serve for connecting to the DO data outputs, a measuring unit, an initial estimate forming unit, a switching unit, a reverse triplex logical model and a direct triplex logical model, a result interpretation unit and a control unit.

Claims

1. A cyclical method for localizing uncontrollable multiple failures in engineering systems in operation, comprising: using a signal interface unit provided as an apparatus to receive signals from a diagnosed object and selectively transmitting corresponding signals to a measuring unit, said signals processed to start a cycle of a diagnosis process; determining a failure manifestations vector with Boolean elements on the basis of the received signals; a-using an initial technical condition estimate forming unit provided as an apparatus to form an initial technical condition estimate vector from the failure manifestations vector with the use of an exit matrix canonizer for the diagnosed object elements, said estimate vector giving triplex values “operable”, “non-operable”, “condition not determined”, the value “condition not determined” specified on the basis of a failure propagation direct dependency; providing an output of the initial technical condition to a switching unit provided as an apparatus and controlled by a result interpretation unit; using the switching unit and the result interpretation unit to provide outputs of the initial estimate forming unit to a decision-taking unit based on a triplex logical model of reverse dependency and to a decision-taking unit based on a triplex logical model of direct dependency using the switching unit to receive outputs from the decision-taking unit based on a triplex logical model of reverse dependency and from decision-taking unit based on a triplex logical model of direct dependency, with the switching unit, the result interpretation unit and the decision taking unit using a triplex logical model of reverse dependency to apply a reverse dependency matrix, with the technical condition estimate vector for the diagnosed object elements specified cyclically, to generate further technical condition estimates giving triplex values until estimates either do not change, or until completion of a preset number of cycles; in the case of obtaining the value “condition not determined” for elements of the technical condition estimate vector, are specified on the basis of a triplex logical model of failure propagation direct dependency, using the result interpretation unit to issue a final value of the technical condition estimate vector for the diagnosed object elements.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

(1) FIG. 1 shows a functional diagram of the diagnostic device (DD) according to the closest analogous solution;

(2) FIG. 2—same as FIG. 1, a DD based on a direct logical model;

(3) FIG. 3—same as FIG. 1, a DD based on a reverse logical model;

(4) FIG. 4 shows a functional diagram of the device for localizing uncontrollable multiple failures in engineering systems (DTF) according to the present invention;

(5) FIG. 5 shows a mixed directed graph as a methodical example.

BEST MODE FOR CARRYING OUT THE INVENTION

(6) Since the method can be implemented with the use of the operating device (FIG. 4), its full description will be given in the section explaining the operation of the device.

(7) The device (FIG. 4) for localizing uncontrollable multiple failures in engineering systems (DTF) comprises the interface unit 1 (IU), which two inputs serve for connecting to the data outputs of the diagnosed object 2 (DO). The device further comprises the measuring unit 3 (MU), the initial estimate forming unit 4 (IEFU), the switching unit 5 (SU), the decision-taking unit based on a triplex logical model of reverse dependency 6 (DUMRD) and the decision-taking unit based on a triplex logical model of direct dependency 7 (DUMDD), the result interpretation unit 8 (RIU), and the control unit 9 (CU). The output of the interface unit is connected to the input of the MU 3, and the output of the MU 3 is connected to the input of the initial estimate forming unit 4. The first output of the IEFU 4 is connected to the first input of the SU 5, and its second output is connected to the second input of the SU 5. The first output of the SU 5 is connected to the input of the DUMRD 6, and its second output is connected to the input of the DUMDD 7. The output of the DUMRD 6 is connected to the third input of the switching unit 5, and the output of the DUMDD 4 is connected to the fourth input of the SU 5. The third output of the SU 5 is connected to the input of the RIU 8, which first output is connected to the input of the CU 9, and the second output serves for displaying diagnosis result data. The output of the CU 9 is connected to the controlling input of the interface unit 1.

(8) Furthermore, the RIU 8 may be provided with a third output that serves for connecting to the controlling input of the DO 2.

(9) The device (FIG. 4) can be operated as follows.

(10) Signals Q comprising explicit information of the functioning mode of the DO 2, and signals Z comprising implicit information on the technical condition of the elements of the DO 2 are supplied to the inputs of the DTF IU 1, being transmitted by the DO 2. The diagnosis process has cyclical nature. Each cycle starts, when the IU 1, in accordance with instructions coming from the CU 9 and signals Q, selectively transmits signals Z to the MU 3 that, in its turn, transforms them into signals corresponding to the failure manifestation vector Y in the current cycle and transmits them to the IEFU 4. This unit 4 forms signals corresponding to an initial estimate value for the DO technical condition vector {circumflex over (X)}. These signals from the IEFU 4 are transmitted to the switching unit 5 that analyzes operation results DUMRD 6 and DUMDD 7 (for this, feedback is provided for between the outputs of the DUMRD 6 and DUMDD 7 and the third and the fourth inputs of the SU 5). Depending on an analysis result, the SU 5 connects to one of these models and feeds signals corresponding to a current estimate value {circumflex over (X)} for the technical condition of the DO 2 (here, k is a number of a diagnosis cycle current tact), or supplies the RIU 8 with signals corresponding to a final estimate {circumflex over (X)}(h) for the technical condition of the DO 2 (here, h if a number of a diagnosis cycle last tact). The RIU 8 supplies, from its first output, signals to the CU 9 for controlling diagnosis process steps, and issues, from its second output, a diagnosis result in the form of signals corresponding to the obtained estimate {circumflex over (X)} of the technical condition of the DO 2. Signals for reconfiguring the DO 2 may be supplied from the third output of the RIU 8 to the DO 2, if it is provided by the task to be fulfilled.

Theoretical Fundamentals of the Proposed Invention

(11) This invention is based on the theory of mixed directed graphs with two logical operators OR and AND, only uppercase letters are used for denoting the operators herein.

(12) A graph of the diagnosed object technical condition is formed by known techniques [O. Ore, Graphs and Their Uses (Translated into Russian).—M.: Mir Publishers, 1965; C. Berge, Theorie Des Graphes et Ses Applications (Translated into Russian).—M.: IL Publishers, 1962] from failure analysis tables for a particular engineering system that are obtained, in their turn, according to methodologies adopted in this industry [Manual P4754 on certification processes for highly integrated complex on-board systems of civil aviation aircraft (on the basis of documents SAE/ARP4754 and EUROCAE/ED-79), 2007; Manual P4761 on safety assessment of systems and on-board equipment of civil aviation aircraft, 2010].

(13) This invention uses only directed (transitions between vertices are possible in one direction, as indicated by arrow, only) mixed (two different operators are used) graphs.

(14) Each part of a diagnosed object, which is considered from the point of failure analysis as independent, is a sub-system, assembly or element. Such a part is represented in a graph by the corresponding vertex (node), and all interactions between these parts are represented by directed links (ribs, arrows) between vortices. Proceeding from methodical considerations, a graph of general kind (with a random number of interlinks) is usually transformed to the kind with not more than two inputs and two outputs by decomposing it (partitioning into bound parts). Each graph vertex has its own fixed tuple of input and output logic represented by the operators “OR” and “AND”. The “OR” operator at the node input means that the corresponding part of the system, as identifiable with this node, is activated (starts functioning, receives information, etc.), if a signal (of information, power, etc.) is present even at one of the inputs (incoming arrow); and, respectively, “AND”—if a signal (of information, power, etc.) is present at both inputs simultaneously. The “OR” operator at the vertex output means that, according to a definite rule, the corresponding part of the system issues a signal (control instruction, information, power, etc.) to one of the vertices bound thereto along the outgoing arrow; and, respectively, “AND”—is such a signal is issued to both vertices simultaneously. Some vertices of such a graph may be elements with possible failures, some are internal processes, and some are manifestations of such failures. Each vertex of a graph is considered as something whole and indivisible. Some vertices may be incomplete in terms of number of inputs and outputs. Only sequence numbers of vertices fix the points of the system input and output.

(15) A directed mixed graph for a hypothetical DO 2 with six vertices is shown in FIG. 5 as a methodical example. In each particular case such a graph for a diagnosed object 2 is formed by experts, proceeding from analysis results of its structure and information flows (power, instructions, reflexes, etc.) or its arranged mathematical models. The symbols shown in FIG. 5 have the following meanings:

(16) ORi—operator “OR” at the element input;

(17) ANDi—operator “AND” at the element input;

(18) ORo—operator “OR” at the element output; this operator is accompanied by the indication on the rule for selecting an element output at which an outgoing signal is formed (according to time-schedule, depending on an DO mode of operation, in a function from some external or internal parameters, etc.);

(19) ANDo—operator “AND” at the element output.

(20) Thus, the element 1 in FIG. 5 has two inputs (two incoming arrows) from the elements 3 and 4 with the ORi operator. It means that this element of the diagnosed object 2 is activated (starts working, performs the prescribed function), if a signal (of information, power, etc.) is present at even one of the two said inputs. This element also has two outputs (two outgoing arrows) toward the elements 2 and 6 with the ORo operator. It means that in the result of action of the element 1 on one of the elements 2 or 6, depending on some known rule, a signal (information, power, etc.) is transmitted. By analogy, the element 6 is activated by simultaneously present signals from the elements 1 and 2 (ANDi operator), and in the result of its functioning it transmits signals to the element 4 or 5 (ORo operator). The elements 2, 3, and 5 in FIG. 5 are incomplete.

(21) This example shows the vertices 1 and 3—system elements that may contain failures, and the vertices 1 and 5—system elements wherein these failures manifest (may be detected and fixed), correspondingly, the vertices 2, 4 and 6 are some inner elements that do not relate to either of these types, but ensure the provision of the studied processes logics.

(22) It should be noted that the claimed technical solution attaches importance to two oppositely directed processes: it is, first, determination of consequences or manifestations that may be caused by failures in the system, and, second, failure localizing, i.e., search for the reason of the system incorrect functioning. These processes are supported by direct and reverse logic, respectively.

(23) A process of failure influence propagation in a diagnosed object DO 2 with triplex description runs in accordance with the rules of logic analysis of such a process that are illustrated in Table 1. This process corresponds to failure (incorrect functioning) influence propagating from the place of origin to other parts and systems until manifestating of that failure.

(24) TABLE-US-00001 TABLE 1 Arithmetic of direct logic Symbols and Column numbers and formulae line numbers 1 2 3 4 5 6 7 8 9 ORi 1 1 + 1 = 1 1 + 0 = 1 1 + * = 1 0 + 1 = 0 0 + 0 = 0 0 + * = * * + 1 = 1 * + 0 = * * + * = * ANDi 2 1 × 1 = 1 1 × 0 = 0 1 × * = * 0 × 1 = 0 0 × 0 = 0 0 × * = 0 * × 1 = * * × 0 = 0 * × * = * ORo 3 custom character 1 = 1 + 0 custom character 1 = 0 + 1 0 = 0 + 0 * = 0 + * custom character * = * + 0 * = * + * ANDo 4 1 = 1 × 1 custom character custom character 0 = 0 × 1 0 = 0 × 0 0 = 0 × * * = * × 1 custom character * = * × *

(25) Here and after, “0” means absence of a failure, “1” means presence of a failure, its manifestation or influence, “*” means uncertain condition; lowercase letters “i” and “o” are used for denoting operators relating to inputs and outputs of the DO 2 elements, respectively.

(26) It is to be noted that in two last lines of the Table 1 some combinations are absent (stricken-through), i.e., corresponding formulae do not exist as such, and the provided combinations contradict to the definitions of the corresponding operators “OR” or “AND”. Such combinations are of no interest when analyzing failure influence propagation (direct logic), but are used for forming reverse analysis logic.

(27) Reverse analysis logic corresponds to what might have been at the element input when its output is known. This corresponds to the direction of the failure localizing (tracing) process, starting from its manifestation. The results of reversing the formulae shown in Table 1 are presented in Table 2, where the operators obtained after reversion are additionally marked with the lowercase letter “r”.

(28) TABLE-US-00002 TABLE 2 Arithmetic of reverse logic Symbols and Column numbers and formulae line numbers 1 2 3 4 5 6 7 8 9 rORi 1 embedded image embedded image embedded image embedded image 0 = 0 + 0 embedded image embedded image embedded image embedded image rANDi 2 1 = 1 × 1 embedded image 0embedded image embedded image embedded image embedded image embedded image embedded image embedded image rORo 3 Conflict 1 + 0 = 1 Conflict 0 + 1 = 1 0 + 0 = 0 0 + * = * Conflict * + 0 = * * + * = * rANDo 4 1 × 1 = 1 Conflict Conflict 0 × 1 = 0 0 × 0 = 0 0 × * = 0 * × 1 = * Conflict * × * = *

(29) Cells causing multiplication of variants are highlighted by bold frames in Table 2. Every time when this situation occurs, branching of a “failure tree” that is not explicitly calculated herein takes place. Thus, during analyzing in the reverse direction it may be stated that the presence of 1 at the output of the logical operator OR may be correlated to the presence of is at its both inputs or 1 at either of them.

(30) The absence of some formulae in the Table 1 leads to conflict (or contradictory) situations appearing in corresponding cells of Table 2. These cells contain the word “conflict”. If a conflict appears, the chain of events under study (transition from a condition to another condition in reverse analysis tacts) is incorrect in terms of logical models of direct and reverse dependency. Therefore, such a chain of events is excluded from further analysis.

(31) Failure Modeling

(32) The present invention pre-supposes that for any real diagnosed object 2 a directed mixed graph of developing and manifesting failures in this DO 2 may be formed on the basis of its analysis. A failure may be a transitory (malfunction) or permanent (prolonged). Some DO elements may fail themselves, and a failure in others may be just a consequence of the failure in the former ones.

(33) In order to simplify solution formalizations, table notation is used. The general rules of transition from directed mixed graphs to the table notation are as follows.

(34) The following notations are introduced: x.sub.j(k) is a triplex value of the j-component of the condition (vertex) of the graph in the beginning of the regular k-tact (x.sub.j=0 means the absence of a failure in the j-element, x.sub.j=1 is the presence, influence or manifestation of a failure in the j-element, x.sub.j=* is an indefinite condition of the j-element), x.sub.j(k+1) is a triplex value of the condition of the j-component (vertex) of the graph after the regular k-tact, the upper index is the symbol of a logical operator at the input of the graph vertex (e.g., x.sup.ORi indicates the OR operator at the element input); the lower index is the symbol of a logical operator at its output (e.g., x.sub.ORo indicates the operator OR at the element output). The sequence number j of each component corresponds to the sequence number of the graph vertex and encrypts the physical content and relation to a category: a failure, its manifestation or an inner variable.

(35) Then, the condition transition formula is formed:
X(k+1)=DM⋄X(k)+X.sub.HO(k),  (3)
wherein the left side contains the DO condition vector written in the form of a vector with n components (according to the graph number of vertices) after k-tact of the direct analysis. The right side contains a sum (according to Table 1) of the two summands, first of them being a further composition (marked by the sign ⋄) of the DM matrix called a failure propagation logical matrix of direct dependency (Dependency Matrix) and the DO condition X(k) vector in the beginning of the k-tact, and the second of them being the X.sub.HO(k) vector, taking into account the presence of so-called direct failures in the DO. If such failures are present, the 1-values are assigned to the corresponding components of the X.sub.HO(k) vector. Failures may be both permanent, and transient (malfunction). Let's assume that a transient malfunction of the q-element appears during functioning of the system (1≦q≦n). In order to model influence of such a malfunction, the 1-value is assigned to the q-component of the X.sub.HO(k) vector. Then, the cyclical use of the formula (3) enables to trace propagation of the element malfunction influence on the DO. When the malfunction is over, the 0-value is assigned to the q-component of the X.sub.HO(k) vector. Now, the cyclical use of the formula (3) enables to trace the process of restoring the DO after the element malfunction is terminated. During performing the failure localizing process being the essence of this invention the vector X.sub.HO(k) is considered as unknown and is not used in the analysis.

(36) The cells of the DM matrix having the n×n size are filled with 0s and 1s in accordance with the DO directed mixed graph, while observing the following rules: the input logic operator of the system corresponding element (graph vertex) is assigned (written to the left) to each line of the matrix, the output logic operator of the system corresponding element is assigned (written below) to each column of the matrix. At the crossing of each l-line and q-column 1 is put, if there is a directed link from the q-element to the l-element (from the q-vertex to the l-vertex of the graph) in the DO. The other cells are filled by 0s.

(37) A model of the kind (3) is a direct triplex logical model (DTLM). Compact entry (3) resembles the matrix notation, but is not it in the sense that the composition marked with the sign ⋄ is not a matrix algebra operation. The principal feature of the DM, as well as the mixed graph (in this case, that is shown in FIG. 5), is that particular logical operators are allocated to the lines and columns of particular logical operators.

(38) The model (3) for the directed mixed graph is given as an example in FIG. 5. In accordance with the above-described rule, the following formula is equivalent to the graph shown in FIG. 5:

(39) [ x 1 ( k + 1 ) x 2 ( k + 1 ) x 3 ( k + 1 ) x 4 ( k + 1 ) x 5 ( k + 1 ) x 6 ( k + 1 ) ] = ORi ORi ANDi ANDi ORi ANDi [ 0 0 1 1 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 1 0 0 0 1 0 1 1 1 0 0 0 0 ] ORo ANDo ANDo ORo ORo ORo DM .diamond-solid. [ x 1 ( k ) x 2 ( k ) x 3 ( k ) x 4 ( k ) x 5 ( k ) x 6 ( k ) ] + [ x HO 1 ( k ) x HO 2 ( k ) x HO 3 ( k ) x HO 4 ( k ) x HO 5 ( k ) x HO 6 ( k ) ] . ( 4 )

(40) The general rules of fulfilling a composition in the model of the kind (3), that comprises the DM, are as follows.

(41) A value of each j-component x.sub.j(k+1) of the diagnosed object condition model in the k+1 tact with a possible value from the triad “0, 1, *” is determined by a composition of coefficients of the j-line of the DM and x.sub.l(k) components of the vector in the k tact in the right part of the equality according to the following rules:

(42) 1. The x.sub.l(k) components to which 0s correspond according to the order of sequence in a DM line, are not used in the composition.

(43) Thus, it relates to the x.sub.1(k), x.sub.2(k), x.sub.5 (k), x.sub.6(k) components in the first line of the formula (4) of the illustrative example.

(44) 2. The components, which locations correspond to 1s in a DM line, are used in the composition as follows: if 1 in the DM matrix, which corresponds to the x.sub.1 (k) component, is in a column marked with the ANDo operator below, then this x.sub.1 (k) component participates in the composition with its value directly; if 1 in the DM matrix, which corresponds to the x.sub.p (k) component, is in a column marked with the ORo operator below, then the above rule of selecting a corresponding DO element is taken into consideration, depending on which the x.sub.p (k) component either participates with its value (in a case where the corresponding output of a DO element is used), or the value of 0 is conditionally assigned to the x.sub.p (k) component (in a case where the corresponding output is not used); an operator corresponding to a given DM line (is put to the left of the matrix) is used as the composition operator.

(45) The described rule gives the following results in the methodical example for the first line of the formula (4):

(46) a) in a case of using the output of the element 4 toward the element 1:
x.sub.1(k+1)=x.sub.3(k)ORi x.sub.4(k),

(47) b) otherwise:
x.sub.1(k+1)=x.sub.3(k)ORi0.

(48) If, for example, the x(k) vector of the model (4) has the components 0, 1, *, 1, 0, * in a certain k-tact, i.e., the elements 1 and 5 of the diagnosed object function correctly, the elements 2 and 4 have failures or are subject to their influence, and nothing definite may be stated in respect of the elements 3 and 6, and a calculation result in accordance with Table 1 takes the following values:

(49) a) in a case of using the output of the element 4 toward the element 1:

(50) the formula *+1=1 is located in Table 1 at the crossing of the 1st line and the 7th column, consequently, the composition result has the value of 1, i.e., the DO first element will be subject to the failure influence;

(51) b) otherwise:

(52) the formula *+0=* is located in Table 1 at the crossing of the 1st line and the 8th column, consequently, the composition result will be indefinite.

(53) In addition to the direct dependency matrix DM, one more binary matrix is introduced that is an exit matrix EM (Exit Matrix) and that is used in accordance with the rules of the matrix algebra. The use of this matrix enables to select only those elements (or, in the general case—their combinations) from all the elements of a diagnosed object DO 2, which correspond to observed failure manifestations
Y(k)=EM.Math.X(k).  (5)
Here and after, Y(k) is the failure manifestation vector with m components, X(k) is the DO 2 element technical condition vector with n components, EM is the binary matrix with m lines and n columns; the dot in the middle of a line denotes a multiplication operation performed according to the general rules of matrix algebra [F. R. Gantmakher. Theory of Matrices.—M.: Nauka Publishers, 1988] with due regard to the formulae from Table 1 (lines 1 and 2, columns from 1 to 6, inclusive).

(54) This matrix is realized by the measuring unit 3 (FIG. 4). Here, y.sub.l(k) is the l-component of the failure manifestation vector Y in the k-tact of a diagnosis cycle; the vector Y has m components in total.

(55) Let the output for the model (4) are the 1.sup.st and the 5.sup.th elements of the condition vector. Then, the exit matrix for the methodical example under consideration is determined by the following equalities:

(56) Y ( k ) = [ y 1 ( k ) y 2 ( k ) ] = EM .Math. [ x 1 ( k ) x 2 ( k ) x 3 ( k ) x 4 ( k ) x 5 ( k ) x 6 ( k ) ] = [ 1 0 0 0 0 0 0 0 0 0 1 0 ] EM .Math. [ x 1 ( k ) x 2 ( k ) x 3 ( k ) x 4 ( k ) x 5 ( k ) x 6 ( k ) ] = [ y 1 ( k ) y 2 ( k ) ] . ( 6 )

(57) So, Equation (3) describes the generalized development of failure influences from vertex to vertex (from element to element of the DO 2); Equation (5) describes failure manifestations (on some DO 2 elements, which corresponds to the physical nature of the DO 2).

(58) A particular DO model is adequate to the process of failure development in a real system, which is supported by formalized descriptions of systems, experts' opinions and results of semi-natural experiments. After the model reliability is confirmed, failure localizing is carried out.

(59) Failure Localizing

(60) It is a priori supposed in this technical solution that failures may be both simple (single) and complex (multiple). The only limitation, as introduced here, is that failures are not changed during one full cycle of their localizing.

(61) The procedure of reverse transformations of the model introduced as above, see Equations (3) and (5), consists of several steps.

(62) It is supposed that the measuring unit MU 3 correctly determines the Y(0) observed failure manifestation vector at a time 0 corresponding to the beginning of a regular localizing cycle.

(63) Step 1. {circumflex over (X)}(0) estimate is formed for the whole X(0) technical condition vector of the system (logical variables of all the vertices of the mixed graph) at a time 0 corresponding to the beginning of a regular localizing cycle. The following values are assigned to the elements of the {circumflex over (X)}(0) vector: “0”—the respective element is definitely operable; “1”—the respective element is definitely non-operable; “*”—an uncertain element which operability may not be evaluated proceeding from the observed failure manifestation.

(64) This procedure determines the whole totality of solutions for Equation (5) written for the beginning time of a regular failure localizing cycle, i.e.,
Y(0)=EM.Math.X(0),m<n,  (7)
in respect of the X(0) vector.

(65) In the general case the solution of Equation (7) is determined by the following formula [V. N. Bukov, Embedding of Systems. An Analytical Approach To Analysis And Synthesis Of Matrix Systems.—Kaluga: Scientific Literature Publishing House of N. F. Bochkareva, 2006]
{{circumflex over (X)}(0)}.sub.μ=(EM).sup.−.Math.Y(0)+EM.sup.R.Math.μ,  (8)
where the curly brackets indicate a plurality of indiscernible solutions, the plurality being caused by varying the vector μ with random elements. In the formula (8): μ is the vector having n−rankEM elements, i.e., the number of the elements is equal to the number of linearly dependent lines of the matrix EM with the use of binary operations [F. R. Gantmakher, Theory of Matrices. M.: Nauka Publishers, 1988]; custom character is the canonizer for the matrix EM, i.e., a matrix which ensures fulfillment of the identity custom character=custom character.Math.EM.Math.custom character; EM.sup.R is the right divisor of zero for the matrix EM of maximum rank, i.e., a matrix having the dimension n×(n−rankEM) for which the condition EM.Math.EM.sup.R=0 is fulfilled.

(66) The canonizer (EM).sup.˜ in the tasks under consideration (all the elements of the EM matrix are represented by 0s and 1s only, and the matrix itself has a maximum line rank) is equal to the transposed value of the source matrix: (EM).sup.˜=(EM).sup.T. Thus, the resulting formula has the following form:
{{circumflex over (X)}(0)}.sub.μ=(EM).sup.T.Math.Y(0)+EM.sup.R˜μ,  (9)
and all the elements of the vector μ are hereinafter represented by asterisks * (condition uncertainness). All operations in (9) are fulfilled according to the known rules of matrix algebra with due regard to the formulae from Table 1 (lines 1 and 2, columns from 1 to 6, inclusive).

(67) Step 2. On the basis of the known DM matrix, and, in particular, its inversion rDM (reverse Dependency Matrix), the components of the X vector marked with “*”, i.e., regularly uncertain, are specified in the reverse sequence of failure influence propagation according to the following formula:
{circumflex over (X)}(τ+1)=rDM⋄{circumflex over (X)}(τ),τ=0,1,2 . . . ,  (10)
The DM matrix inversion is performed by transposing it (interchanging elements of lines and columns, including totalities of logical operators, i.e., a list of line operators goes to a list of column operators, and vice versa) and by changing source operators by their inversions (reverse analysis logic according to Table 2 is used instead direct analysis logic according to Table 1).

(68) The model of the kind (10) is a reverse triplex logical model (RTLM), and the rDM coefficient matrix is a failure propogation logical matrix of reverse dependency. The compact notation (10), as (3), resembles matrix equality, but, as (3), is not it in the sense that no known rules of matrix algebra are applicable to it.

(69) The rules of working with a rDM are similar to the above-described rules, with due regard to two circumstances:

(70) 1. Now, solution variants are caused by the rORi and rANDi operators (where there are two 1s in a column) in accordance with Table 2. These are alternative variants (hypotheses) of the failure propagation pre-history that are subject to further analysis. After each passing of such operator it is necessary to treble a number of analyzed variants, since the number of possible values for variables is equal to three (0, 1, *).

(71) 2. During calculation of values conflicts that relate to different lines are possible, as shown in Table 2. Then, corresponding hypotheses concerning the failure propagation pre-history are omitted.

(72) In such a case, the first circumstance defines the rule of branching of a “failure tree”, and the second one excludes unpromising (contradicting to the diagnosed object 2 logic) branches.

(73) In general, the iteration procedure of localizing failures with fulfillment of back steps may be written as the following formula:
{circumflex over (X)}(τ)=rDM⋄(rDM⋄( . . . (rDM⋄(EM.sup.T.Math.Y(0)+EM.sup.R.Math.μ)))).  (11)
A number of cycle tacts τ is selected from the provision of either terminating deformation (change) of the condition vector X(τ+1)=X(τ), or limiting to some value.

(74) The direct use of the failure propagation logical model of reverse dependency in respect of elements with *-value (“condition not determined”) may lead to multiplication of uncertainty. Therefore, when failure localizing in a case of an uncertainty multiplication situation, a logical model of direct dependency is changed. According to the invention, the technical condition estimate vector for diagnosed object elements is specified, cyclically in tacts and cyclically for components, with the use of columns of the logical matrix of reverse dependency, which correspond to elements with the values of “operable” and “non-operable”, and with the use of lines of the logical model of direct dependency, which correspond to the value of “condition not determined”. Various embodiments of the proposed generalized method are possible. Here, one embodiment is described.

(75) The exit logic of ORo elements is considered as follows. If, according to the adopted system of forming exit logic, an ORo element transmits 0 in some outputs instead of 1 (failure condition), then corresponding 1s in the DM and rDM matrices are called inverse. For reflecting this fact explicitly, the notation 1 is used, and logical matrices of direct and reverse dependency that comprise inverse is i.e. 1 are denoted as DM and rDM, respectively.

(76) The value of each j-component x.sub.j(τ+1) of the diagnosed object condition model (10) in the τ+1 tact with a possible value from the triad “0, 1, *” is determined by a composition of coefficients of the j-line of the rDM and the x.sub.l(τ) vector component in the τ tact in the right side of the equality, according to the following rules.

(77) First, the failure propagation logical matrix of reverse dependency rDM is used. It is applied only in respect of elements of the {circumflex over (X)}(τ) vector having the values of “operable” (0) and “non-operable” (1). The {circumflex over (X)}(τ) vector is specified cyclically, from tact to tact and from component to component. This is to be performed according to the following rules:

(78) A. An external cycle is organized, during which the components of the {circumflex over (X)}(τ) vector are specified from tact to tact τ, τ=0, 1, 2, 3 . . . .

(79) B. An inner cycle of alternate specification of the components of the {circumflex over (X)}(τ) vector from the first component to the last one: j=1 . . . n is organized. For this, only components having values of 0 and 1 of the {circumflex over (X)}(τ) vector in the right side of the formula (10) are selected. The components with the value of * are omitted, because the use of a failure propagation logical matrix of reverse dependency in respect of them leads only to uncertainty multiplication.

(80) For each new value of ti and j the following analysis is carried out:

(81) 1. If {circumflex over (x)}.sub.j(τ)=0, and the rDM matrix column corresponding thereto is marked with the rORi operator, then zero values are assigned to each component of the vector {circumflex over (x)}.sub.j(τ+1), which corresponds to 1-elements in the j-column of the rDM matrix. The values of the components {circumflex over (x)}.sub.j(τ+1) corresponding to inverse 1 of the rDM matrix are not changed.

(82) 2. If {circumflex over (x)}.sub.j(τ)=0 and the rDM matrix column corresponding thereto is marked with the rANDi operator, then 1-elements are searched for in the j-column of the rDM matrix, and values of corresponding components of the {circumflex over (X)}(τ) vector are checked. If of all these values some are equal to 1 and one value is not determined (*), then 0 is assigned to the indefinite value of that component of the {circumflex over (X)}(τ+1) vector. If the j-column of the rDM matrix contains inverse is i.e. 1 to which 1-values of the condition vector components correspond, then these components are not changed.

(83) 3. If {circumflex over (x)}.sub.j(τ)=1 and the corresponding column of the rDM matrix is marked with the rORi operator, then 1-elements are searched for in the j-column of the rDM matrix, and 1-elements are searched for, and values of corresponding components of the {circumflex over (X)}(τ+1) vector are checked. If, among these components, all values corresponding to is of the matrix are equal to 0, all values corresponding to inverse 1s i.e. 1 of the matrix are equal to 1, and one value is not determined (*), then 1 is assigned to the not determined component of the {circumflex over (X)}(τ+1) vector (if only it does not correspond to inverse 1 i.e. 1). If inverse 1 i.e. 1 corresponds to the only not-determined value, then a conflict situation exists.

(84) 4. If {circumflex over (x)}.sub.j(τ)=1 and the corresponding column of the rDM matrix is marked with the rANDi operator, then the 1-value is assigned to each component of the {circumflex over (X)}(τ+1) vector, which corresponds to 1-element in the j-column of the rDM matrix. The inverse is i.e. 1 in that column of the rDM matrix should be absent. If they are present, a conflict situation exists.

(85) After performing a pre-set number of tacts, a situation may exist that not all components of the {circumflex over (X)}(τ) vector obtained the value of 0 or 1, and components with the * value remain. The failure propagation logical model of direct dependency (3), in particular a composition of the j-line only, is applied in respect of these components, in particular the following composition:
{circumflex over (x)}.sub.j(τ+1)=DM.sub.j⋄{circumflex over (X)}(τ).
In this case the following logic is realized: if the corresponding j-line of the DM matrix is marked with the ORi operator, and even if only one 1 is among the {circumflex over (X)}(τ) components corresponding the 1 values of this line of the DM matrix (but not to inverse is i.e. 1), then {circumflex over (x)}.sub.j(τ+1)=1; if the corresponding j-line of the DM matrix is marked with the ANDi operator, and if even one 0 or even one 1 corresponding to inverse 1 i.e. 1s is among the {circumflex over (X)}(τ) components corresponding to the 1 values of this line of the DM matrix, then {circumflex over (x)}.sub.j(τ+1)=0; otherwise, the value remains unchanged, {circumflex over (x)}.sub.j(τ+1)=*.

(86) Step 3. Possible points of proved failures are indicated by obtained one's values of components of the {circumflex over (X)} estimate of the technical condition vector. The presence of zero elements shows reliably operable elements of the DO 2. The presence of asterisks * indicates those elements of the DO 2 (modules, units, devices, sub-systems), in respect of which no explicit statement on a failure or fault may be formulated on the basis of information available. This shows incomplete control inherent to the DO 2 (an objective property of the DO 2).

Description of a Methodical Example

(87) This example demonstrates step by step (tact by tact and component by component) how the above-described actions should be carried out and their results relative to the DO shown in FIG. 5. The ORo output logic of each element works as follows. If a failure is present (value is equal to 1), it is transmitted as 1 to an element with a lesser sequence number, and 0 is transmitted to an element with a greater sequence number. The elements 1 and 5 are the system output. In this case the EM matrix has the form (5). Direct failures contain the elements 1 and 3.

(88) The failure propagation process for a DO is described by the model (3).

(89) The first tact:

(90) [ x 1 ( 1 ) x 2 ( 1 ) x 3 ( 1 ) x 4 ( 1 ) x 5 ( 1 ) x 6 ( 1 ) ] = ORi ORi ANDi ANDi ORi ANDi [ 0 0 1 1 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 1 0 0 0 1 0 1 1 1 0 0 0 0 ] ORo ANDo ANDo ORo ORo ORo DM .diamond-solid. [ 1 0 1 0 0 0 ] + [ 1 0 1 0 0 0 ] = [ 1 1 1 0 0 0 ] .

(91) The second tact:

(92) [ x 1 ( 2 ) x 2 ( 2 ) x 3 ( 2 ) x 4 ( 2 ) x 5 ( 2 ) x 6 ( 2 ) ] = ORi ORi ANDi ANDi ORi ANDi [ 0 0 1 1 0 0 1 0 0 0 0 0 0 1 0 0 0 0 0 0 1 0 0 1 0 0 0 1 0 1 1 1 0 0 0 0 ] ORo ANDo ANDo ORo ORo ORo DM .diamond-solid. [ 1 1 1 0 0 0 ] + [ 1 0 1 0 0 0 ] = [ 1 1 1 0 0 0 ] .

(93) In tacts that follow no element condition change takes place. Thus, if the 1.sup.st and the 3rd elements fail, the failure will be propagating to the 2.sup.nd element.

(94) The failure localizing process can be implemented as follows.

(95) Step 1. The formula (9) takes the form:

(96) { X ^ ( 0 ) } μ = [ 1 0 0 0 0 0 0 0 0 1 0 0 ] ( EM ) T .Math. [ 1 0 ] Y ( 0 ) + [ 0 0 0 0 1 0 0 0 0 1 0 0 0 0 1 0 0 0 0 0 0 0 0 1 ] .Math. [ * * * * ] μ = [ 1 * * * 0 * ] EM _ R .
Thus, after the first step the condition of the 2.sup.nd, 3.sup.rd, 4.sup.th and 6.sup.th elements remains non-determined

(97) Step 2. In accordance with Equation (3), the recurrent relation for the reverse succession of failure propagation has the form:

(98) [ x 1 ( τ + 1 ) x 2 ( τ + 1 ) x 3 ( τ + 1 ) x 4 ( τ + 1 ) x 5 ( τ + 1 ) x 6 ( τ + 1 ) ] = rORo rANDo rANDo rORo rORo rORo [ 0 1 0 0 0 1 0 0 1 0 0 1 1 0 0 1 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0 1 1 0 ] rORi rORi rANDi rANDi rORi rANDi rDM .diamond-solid. [ x 1 ( τ ) x 2 ( τ ) x 3 ( τ ) x 4 ( τ ) x 5 ( τ ) x 6 ( τ ) ] , ( 12 )
where τ=0, 1, 2, . . . —a number of backward analysis tact. In view the adopted ORo output logic, the rDM matrix takes the form:

(99) r DM _ = [ 0 1 0 0 0 1 _ 0 0 1 0 0 1 1 0 0 1 0 0 1 0 0 0 1 _ 0 0 0 0 0 0 0 0 0 0 1 1 _ 0 ] rORi rORi rANDi rANDi rORi rANDi ,

(100) where 1 are inverse 1s taking into account the output logic in the rDM.

(101) Note: in order to reduce the record volume, here both the X(τ+1) vector and the X(τ) vector are specified at the same time. In order to reduce the record volume, the direct logical model will be applied for elements with the values of 0 and 1, and the reverse logical model will be applied for non-determined elements *.

(102) An external cycle, the 1.sup.st iteration, τ=0, the use of the model (12) gives:

(103) [ x 1 ( 1 ) x 2 ( 1 ) x 3 ( 1 ) x 4 ( 1 ) x 5 ( 1 ) x 6 ( 1 ) ] = [ 0 1 0 0 0 1 _ 0 0 1 0 0 1 1 0 0 1 0 0 1 0 0 0 1 _ 0 0 0 0 0 0 0 0 0 0 1 1 _ 0 ] rORi rORi rANDi rANDi rORi rANDi r DM _ .diamond-solid. [ 1 * * * 0 * ] .

(104) An inner cycle, j=1, {circumflex over (x)}.sub.1(0)=1, the first column of the rDM matrix corresponds to the rORi logic. There are two 1-elements in the first column of the rDM matrix, {circumflex over (x)}.sub.3 (0)=* and {circumflex over (x)}.sub.4(0)=* correspond to them. Therefore, the condition vector cannot be specified.

(105) An inner cycle, j=2, {circumflex over (x)}.sub.2 (0)=*. In order to specify the component, the 2.sup.nd line of the logical matrix of direct dependency (3) is used:

(106) x 2 ( 1 ) = ORi [ 1 0 0 0 0 0 ] .diamond-solid. [ 1 * * * 0 * ] = 1.

(107) An inner cycle, j=3, {circumflex over (x)}.sub.3 (0)=*. In order to specify the component, the 3.sup.rd line of the logical matrix of direct dependency (3) is used:

(108) 0 x 3 ( 1 ) = ANDi [ 0 1 0 0 0 0 ] .diamond-solid. [ 1 1 * * 0 * ] = 1.

(109) An inner cycle, j=4, {circumflex over (x)}(0)=*. In order to specify the component, the 4.sup.th line of the logical matrix of direct dependency (3) is used:

(110) x 4 ( 1 ) = ANDi [ 0 0 1 0 0 1 ] .diamond-solid. [ 1 1 1 * 0 * ] = * .
The condition vector cannot be specified.

(111) An inner cycle, j=5, {circumflex over (x)}(0)=0, the fifth column of the rDM matrix is marked with the rORi operator. The fifth column of the rDM matrix contain inverse 1s only. Therefore, the condition vector cannot be specified.

(112) An inner cycle, j=6, x.sub.6 (0)=*. In order to specify the component, the 6.sup.th line of the logical matrix of direct dependency (3) is used:

(113) x 6 ( 1 ) = ANDi [ 1 _ 1 0 0 0 0 ] .diamond-solid. [ 1 1 1 * 0 * ] = 0

(114) In the result, the first tact gives for τ:

(115) X ( 1 ) = [ 1 1 1 * 0 0 ] .

(116) An external cycle, the 2.sup.nd tact, t=1:

(117) [ x 1 ( 2 ) x 2 ( 2 ) x 3 ( 2 ) x 4 ( 2 ) x 5 ( 2 ) x 6 ( 2 ) ] = [ 0 1 0 0 0 1 _ 0 0 1 0 0 1 1 0 0 1 0 0 1 0 0 0 1 _ 0 0 0 0 0 0 0 0 0 0 1 1 _ 0 ] rORi rORi rANDi rANDi rORi rANDi rDM .diamond-solid. [ 1 1 1 * 0 0 ] .

(118) The first three tacts of an inner cycle do not lead to a change in the X(2). They are omitted here.

(119) An inner cycle, j=4, {circumflex over (x)}.sub.4 (1)=*. In order to specify the component, the 4.sup.th line of the logical matrix of direct dependency (3) is used:

(120) x 4 ( 1 ) = ANDi [ 0 0 1 0 0 1 ] .diamond-solid. [ 1 1 1 * 0 0 ] = 0.

(121) In further iterations for τ and for j the X vector is not changed. Therefore, the final estimate has the following value:

(122) X ^ = [ 1 1 1 0 0 0 ] .

(123) Step 3. The obtained result justifies the following statement as the failure localizing result: the DO 1.sup.st, 2.sup.nd, and 3.sup.rd elements failed, and the 4.sup.th, 5.sup.th, and 6.sup.th elements are operable, there are no elements with the condition not determined.

(124) The DTF is linked to the diagnosed object 2 through the interface unit IU 1. The measuring unit MU 3 controls, according to a set method of control, the technical condition of certain elements of the diagnosed object Y at a time conditionally called the initial time here and forms the failure observed manifestation vector Y(0) for that time. On the basis of information on Y(0) the initial estimate forming unit IEFU 4 forms an initial estimate of the condition vector {circumflex over (X)}(0), this estimate being triplex. Specific positions of indeterminacy are determined by the structure of divisors of the exit matrix EM zero, i.e., by a priori information on the structural peculiarities of the DO 2.

(125) The device works in cycles. After receiving information X(0) from the IEFU 4, the cycle of specifying non-determined components of the technical condition vector {circumflex over (X)} estimate starts. New information from the initial estimate forming unit IEFU 4 is not received, until calculations in this cycle are completed.

(126) After that, in order to specify the technical condition vector X value, one of the triplex logical models RTLM or DTLM in the form of solution taking units based on logical matrices of reverse and direct dependency is used. Control of model connection and control of a number of cycles is carried out according to instructions issued by the SU 5. Diagnosis results are presented through the second output of the RIU 8.

(127) The decision-taking unit based on the logical model of direct dependency DUMDD 7 is used only in a case where a next specified element is equal to “*”, i.e., remains non-determined. In such a case the use of the DUMRD 6 is not productive—see Table 2: back transition from an output having the “*” value always leads to indeterminacy of inputs, i.e., to multiplication of indeterminacy in the system, the DUMDD 7 being used not in full, but only in its part that corresponds to a specified component, i.e., one line of the corresponding logical model. In all other cases only the DUMRD 6 is used. This enables to reduce volume of calculations significantly.

(128) The stop provision is fulfilled, if {circumflex over (X)}(k)={circumflex over (X)}(k−1) or 2n and more steps are performed. Thus, a number of iterations does not exceed 2n, where n is the number of diagnosed elements of the DO 2.

(129) The technical effect, i.e., efficiency, in the claimed solution is ensured due to that, taking into account all complexity of the physical processes that really run in the DO 2, the method and the device for localizing failures work exclusively with logical variables, and the simplicity of the algebraic rules used enables to process information in significantly accelerated time. In the result, it is possible to achieve obtaining of diagnosis results nearly in real time.

(130) The depth is ensured by the use (formal reflection) of practically all (all significant or all known) inner links of the DO 2 in the triplex logical models used, which enables to take into account, and with acceptable care, really existing mutual influences of its parts which, depending on the context, are understood as elements, modules, units, devices or sub-systems.

(131) Reliability is ensured by a triplex description of the technical condition of the diagnosed object parts being under control. This enables, in a determined statement (i.e., without regard to action of random factors), to strictly divide all the object's parts into two groups with definite determination of their operability and one group combining the diagnosed object parts for which it is objectively impossible to definitely determine their technical condition.

(132) The possibility of detecting multiple failures is ensured by alternating the reverse triplex logical model and the direct triplex logical model that enable to fulfill the diagnosis objective without support of the simplifying assumption on uniqueness of a failure.

(133) In addition, explicit indication, as obtained in the result of the use of the proposed invention, to the presence and arrangement of the diagnosed object parts for which a definite judgment on their technical condition may not be formulated, gives a unique possibility for further improving the diagnosed object in terms of achieving its deeper control both by introducing additional control points for its parts, and growing a number of inner links (i.e., interconnecting) between those parts.

INDUSTRIAL APPLICABILITY

(134) The claimed method for localizing uncontrollable multiple failures in engineering systems and the device for implementing it may be most successfully applied in the industry in systems for functional diagnosis of complex engineering objects for the purpose of localizing failures in real time against the background of natural signals, as well as in processes of designing complex engineering systems in the whole and their sub-systems of functional diagnosis in particular.