AIRCRAFT COMPRISING A DIRECT CURRENT ELECTRICAL NETWORK AND A PROTECTION SYSTEM FOR SAID NETWORK

Abstract

A direct current electrical network includes nodes linked by branches and protection elements mounted on the branches, each protection element includes a central processing unit, a current sensor, a current limiter device and a circuit breaking device, wherein: the current sensor is configured to determine the direction of the current in the branch relative to the node with which said protection element is associated; the central processing unit is configured to select, as a function of the direction of the current, a selected threshold value as one of a first value or a second threshold value greater than the first threshold value in absolute value, and to compare the value of the intensity of the current to the selected threshold value; and the current limiter device is bidirectional and is configured to limit the current passing through the branch to the selected threshold value.

Claims

1. An aircraft comprising at least one direct current electrical network, said network comprising nodes linked together in pairs by branches, each of the nodes being connected to at least two of the branches, said at least one direct current electrical network being protected by a protection system comprising: a plurality of protection elements each mounted on a respective one of the branches, each of the protection elements comprising: a central processing unit; a current sensor configured to measure a value of current in the branch associated with the protection element; a current limiter device controlled by the central processing unit to limit the current passing through the branch associated with the protection element, and a circuit breaking device controlled by the central processing unit to interrupt the current passing through the branch associated with the protection element; wherein in each of the branches of the network linking two of the nodes, the protection element comprises two protection elements mounted in series on the branch, where each of the two protection elements is associated with the node nearest the protection element, and for each of the two protection elements: the current sensor is configured to determine a direction of the current in the branch relative to the node associated with which said protection element, the direction being determined as one of a first direction in which the current enters into the branch by the node with which said protection element is associated, and a second direction in which the current leaves the branch by the node with which said protection element is associated; the central processing unit is configured to select, as a function of the direction of the current determined by the current sensor, a selected threshold value as one of a first value or a second threshold value greater than the first threshold value in absolute value, and to compare the value of the intensity of the current to the selected threshold value; and the current limiter device is bidirectional and is configured to limit the current passing through the branch to the selected threshold value selected by the central processing unit.

2. The aircraft as in claim 1, wherein the central processing unit is configured to select as the selected threshold value the first threshold value if the current sensor indicates that the current is flowing in the second direction, or the second threshold value if the current sensor indicates that the current is flowing in the first direction.

3. The aircraft as in claim 1, wherein the central processing unit comprises a clock and is configured to count down a predetermined time from an instant at which the intensity of the current measured by the current sensor is greater than the selected threshold value, and the central processing unit is configured to send, during the predetermined time, a signal to the current limiter device to limit the current passing through the branch for the predetermined time.

4. The aircraft as in claim 1, wherein the direct current electrical network is a meshed network.

5. A protection system configured to be in a branch of a direct current electrical network of an aircraft, wherein the branch electrically links nodes of the network, and the protection system includes at least one protection element that includes: a current sensor configured to measure a value and direction of current in the branch; a current limiter device configured to limit current in the branch, and a processing unit configured to: receive information from the current sensor indicative of the value and direction of the current in the branch; select a selected current threshold based on the direction of the current, wherein the selected current threshold is a first current threshold or a second current threshold greater than the first current threshold; compare the selected current threshold to the value of the current in the branch; and command the current limiter device to limit the current in the branch if the comparison determines that the value of the current exceeds the selected current threshold.

6. The protection system of claim 5 wherein the at least one protection element includes a current breaker and the processing unit is configured to command the current breaker to interrupt current in the branch if current in the branch exceeds the selected current threshold after a certain period following commanding the current limiter device to limit the current in the branch.

7. The protection system of claim 6 wherein the certain period is a first period if the selected current threshold is the first current threshold and is a second period, different from the first period, if the selected current threshold is the second current threshold.

8. The protection system of claim 5, wherein the direct current electrical network is a meshed network including a plurality of branches each having at least one of the protection elements.

9. The protection system of claim 5 wherein the at least one protection element is two protection elements connected in series in the branch.

10. A method to protect a branch of a direct current electrical network of an aircraft, wherein the branch electrically links nodes in the network, the method includes: measuring current direction and amplitude in the branch; select a selected current threshold based on the direction of the current, wherein the selected current threshold is either a first current threshold or a second current threshold greater than the first current threshold; compare the selected current threshold to the value of the current in the branch; and command a current limiter in the branch to limit the current in the branch if the comparison determines that the value of the current exceeds the selected current threshold.

11. The method of claim 10 wherein the steps are performed automatically by a processor receiving information regarding current direction and amplitude from a current sensor in the branch and commanding a current limiter in the branch.

12. The method of claim 10 further comprising interrupting current in the branch if the current in the branch exceeds the selected current threshold after a certain period following commanding the current limiter to limit the current in the branch.

13. The method of claim 12 wherein the certain period is a first period if the selected current threshold is the first current threshold and is a second period, different from the first period, if the selected current threshold is the second current threshold.

14. The protection system of claim 12, wherein the direct current electrical network is a meshed network including branches each linking a different pair of nodes and each including at least one protection element configured to perform the steps of claim 12.

Description

[0021] Other advantages and features of the invention will emerge from the nonlimiting detailed description hereinbelow. This description will be given in light of the attached drawings in which:

[0022] FIG. 1, already described, schematically illustrates the operation of a protection system for a portion of a direct current electrical network affected by a short-circuit according to the prior art;

[0023] FIG. 2 represents an aircraft comprising a direct current electrical network according to an embodiment of the invention;

[0024] FIG. 3 is a diagram of the direct current electrical network of FIG. 2, said network being protected by a protection system comprising a plurality of protection elements, according to a preferred embodiment of the invention;

[0025] FIG. 4 is a detailed diagram of a protection element of FIG. 3, according to an embodiment of the invention;

[0026] FIG. 5, similar to FIG. 1, schematically illustrates the operation of a protection system for a portion of a direct current electrical network affected by a short-circuit according to an embodiment of the invention;

[0027] FIG. 6 is a diagram of a meshed direct current electrical network comprising a protection system according to an embodiment of the invention.

[0028] Concerning FIGS. 2 and 3, an aircraft A comprises a high-voltage direct current (HVDC) electrical network 1 arranged in its fuselage C. The electrical network 1 makes it possible to link at least one electrical generator 3 (only one is represented in FIG. 2) to a plurality of user equipment items 5 so as to ensure the transport of the direct current from the electrical generator or generators 3 to the different user equipment items 5.

[0029] The electrical network 1 comprises nodes N.sub.1 . . . , N.sub.i . . . , N.sub.n linked together, in pairs, by branches B.sub.1 . . . , B.sub.k . . . , B.sub.m (or cables). Some nodes are also linked, by branches, to an electrical generator 3 and/or to a user equipment item 5.

[0030] As is known, the direct current electrical network 1 comprises a protection system 7 configured to detect any abrupt change in the intensity of the current in the electrical network 1 and identify a branch affected by an electrical fault (for example a short-circuit) in order to disconnect it if necessary.

[0031] Referring to FIG. 3, the protection system 7 comprises a plurality of protection elements C.sub.i, . . . , C.sub.j . . . , C.sub.p mounted in the different branches.

[0032] According to the invention, on each branch B.sub.k linking two nodes N.sub.j and N.sub.i together, a first protection element C.sub.j and a second protection element C.sub.i are mounted in series. Each protection element adjacent to a node is said to be associated with that node, thus, the first protection element C.sub.j is associated with the node N.sub.j and the second protection element is associated with the node N.sub.i.

[0033] Each protection element associated with a node is configured to: [0034] measure parameters of the current flowing in the branch B.sub.k on which it is mounted, in particular the value of the intensity of the current and its direction relative to the node with which it is associated; [0035] select, as a function of the direction of the current, a threshold value taken from a first threshold value S.sub.1 or a second threshold value S.sub.2 greater than the first threshold value S.sub.1 in absolute value; [0036] compare the value of the intensity of the current to the selected threshold value; [0037] limit the current to the selected threshold value; [0038] and possibly cut the passage of the current in the branch.

[0039] A protection element C.sub.j associated with a node N.sub.1, as illustrated in FIG. 4, is for example an electronic unit mounted on a branch B.sub.k and which comprises a central processing unit 25 linked to a current sensor 9 to measure parameters of the current passing through the branch B.sub.k, to a bidirectional current limiter device 11 and to a circuit breaking device 13. The current limiter device 11 and the circuit breaking device 13 are designed to, respectively, on receipt of a limiting signal emitted by the central processing unit 25, limit the value of the current passing through the branch B.sub.k to the selected threshold value and, possibly, to, on receipt of a cutoff signal emitted by the central processing unit 25, cut the passage of the current passing the branch B.sub.k.

[0040] The current sensor 9 is configured to measure the algebraic value of the intensity of the current, the latter being assigned a sign (+ or −) as a function of the direction of the current. By convention hereinafter in the description, and by way of example only, the current sensor 9 of a protection element C.sub.j associated with the node N.sub.j and mounted on a branch B.sub.k has a positive sign (+) if the current leaves the branch B.sub.k by the node N.sub.j, and has a negative sign (−) if the current enters into the branch B.sub.k by the node N.sub.j.

[0041] The current sensor 9 transmits a signal comprising the algebraic value of the measured current and its sign to the central processing unit 25 (via an analog-digital converter 23 if necessary).

[0042] The central processing unit 25 is, for example, a microcontroller, comprising a processor, memories, a clock, as well as peripheral units and input-output interfaces via which it is connected to the different components of the protection element.

[0043] Two threshold values S.sub.1, S.sub.2 are stored in the memories of the central processing unit 25. The first threshold value S.sub.1 is used as threshold value by the central processing unit 25 for a positive current direction (current leaving the branch B.sub.k by the associated node), whereas the second threshold value S.sub.2, strictly greater in absolute value than the first threshold value S.sub.1, is used as threshold value for a negative current direction (current entering the branch B.sub.k by the associated node). Furthermore, for each threshold value S.sub.1, S.sub.2, a predetermined time T.sub.1, T.sub.2 is stored in the memories of the central processing unit, with first predetermined time T.sub.1 associated with the first threshold value S.sub.1 and the second predetermined time T.sub.2 associated with the second threshold value S.sub.2.

[0044] Based on the sign of the current which is included in the signal emitted by the current sensor 9 to the central processing unit 25, the central processing unit 25 compares the value of the intensity of the current to the threshold value used, either the first threshold value S.sub.1 or the second threshold value S.sub.2.

[0045] If the result of the comparison indicates that the current measured by the current sensor 9 is greater than the threshold value used, the central processing unit 25 emits (via a digital-analog converter 27 if necessary) a limiting signal to the current limiter device 11 to limit the intensity of the current in the branch B.sub.k to the threshold value used, and engages a countdown via its clock to time a predetermined time equal to the first predetermined time T.sub.1 if the threshold value used is the first threshold value S.sub.1 or to the second predetermined time T.sub.2 if the threshold value used is the second threshold value S.sub.2.

[0046] At the end of the predetermined time T.sub.1 or T.sub.2, the current limiter device 11 is no longer activated (the limiting signal is no longer emitted) by the central processing unit 25 and no longer limits the current in the branch B.sub.k.

[0047] If, after the predetermined time T.sub.1 or T.sub.2, the result of the comparison performed by the central processing unit 25 indicates that the current measured by the current sensor 9 is still greater than the threshold value used (S.sub.1 or S.sub.2 as a function of the sign of the current), the central processing unit 25 emits (via the digital-analog converter 27 if necessary), a cutoff signal to the circuit breaking device 13 to cut the passage of current in the branch B.sub.k and isolate it from the other healthy branches.

[0048] As described above, the current limiter device 11 is bidirectional in that it is capable of limiting and configured to limit the current intensity in the branch B.sub.k to a different value as a function of the direction of the current, either to the first threshold value S.sub.1 for a positive current or to the second threshold value S.sub.2 for a negative current. The practical production of the bidirectional current limiter device is within the scope of the person skilled in the art, and, for example, such an element uses semiconductor technology and consists of two depleted-type MOS transistors, head-to-tail, or is an active element consisting of two current sources, head-to-tail, each being associated with a diode ensuring the bidirectional nature of the device.

[0049] The circuit breaking device 13 is, for its part, for example, a switch, of transistor type, or even a pyrotechnic circuit breaker, triggered on receipt of the cutoff signal.

[0050] As a variant, the functions fulfilled by the current limiter device 11 and the circuit breaking device 13 are performed by a single element essentially comprising a field-effect transistor of MOSFET type. In this case, the MOSFET transistor is configured to be controlled by both the limiting signal and the cutoff signal. In effect, when it is controlled by the limiting signal, the MOSFET transistor is configured to act as a resistor whose resistance can be varied as a function of the threshold value selected by the central processing unit (S.sub.1 or S.sub.2). When it is controlled by the cutoff signal, the MOSFET transistor is configured to act as a switch to disconnect the branch on which the protection element is mounted.

[0051] Referring to FIG. 5, the operation of the protection system 7 according to the present invention will be described for a portion 10 of a direct current electrical network comprising three nodes N.sub.1, N.sub.2 and N.sub.3 linked to one another and to user equipment items 5 by several branches B.sub.1, . . . B.sub.k B.sub.10. The node N.sub.1 is linked to the node N.sub.2 by the branch B.sub.3, and the node N.sub.2 is linked to the node N.sub.3 by the branch B.sub.5.

[0052] A current I.sub.1 and a current I.sub.2 enter into the node N.sub.1 via a branch B.sub.1, respectively B.sub.2. The current I.sub.4 leaves the node N.sub.1 by the branch B.sub.4 which links the node N.sub.1 to a user equipment item 5 and the current I.sub.3 leaves the node N.sub.1 by the branch B.sub.3.

[0053] The current I.sub.3 and a current I.sub.6 enter into the node N.sub.2 via the branch b.sub.3, respectively a branch B.sub.6 linking the node N.sub.2 to a user equipment item 5. The current I.sub.7 leaves the node N.sub.2 by the branch B.sub.7 which links the node N.sub.2 to a user equipment item 5 and the current I.sub.5 leaves the node N.sub.2 by the branch B.sub.5.

[0054] The current I.sub.5 and a current I.sub.8 enter into the node N.sub.2 via the branch B.sub.5, respectively a branch B.sub.10 linking the node N.sub.3 to a user equipment item 5. The current I.sub.9 leaves the node N.sub.3 via the branch B.sub.9.

[0055] Applying the law of the nodes to each of the nodes N.sub.1, N.sub.2 then N.sub.3, the equations I.sub.3=I.sub.1+I.sub.2−I.sub.4; I.sub.5=I.sub.3+I.sub.6−I.sub.7; I.sub.9=I.sub.5+I.sub.8−I.sub.10 are respectively obtained.

[0056] The protection system 7 comprises protection elements C.sub.1, . . . , C.sub.j, . . . , C.sub.10 mounted on the different branches. Each protection element C.sub.j is associated with a corresponding node N.sub.i (i=1, 2, 3). More particularly, the protection elements C.sub.1 (mounted on B.sub.1), C.sub.2 (mounted on B.sub.2), C.sub.3 (mounted on B.sub.3), C.sub.4 (mounted on B.sub.4) are associated with the node N.sub.1, the protection elements C.sub.31 (mounted on B.sub.3), C.sub.5 (mounted on B.sub.5), C.sub.6 (mounted on B.sub.6), C.sub.7 (mounted on B.sub.7) are associated with the node N.sub.2, and the protection elements C.sub.51 (mounted on B.sub.5), C.sub.8 (mounted on B.sub.8), C.sub.9 (mounted on B.sub.9), C.sub.10 (mounted on B.sub.10) are associated with the node N.sub.3. For a protection element C.sub.j associated with a node N.sub.i and mounted on a branch B.sub.k, an electrical current leaving the branch B.sub.k by the node N.sub.1 (positive direction according to the chosen convention) is limited by the protection element C.sub.j to the first threshold value S.sub.1 whereas an electrical current entering into the branch B.sub.k by the node N.sub.1 (negative direction according to the present convention) is limited by the protection element C.sub.j to the second threshold value S.sub.2, with, in absolute value, S.sub.1<S.sub.2.

[0057] Thus, each node N.sub.1-N.sub.3 of the electrical network 1 is linked to components of the network (nodes N.sub.1-N.sub.3, or user equipment item 5 or possibly electrical generator (not represented in FIG. 5)) by at least two branches B.sub.1-B.sub.10, with a protection element C.sub.1-C.sub.10 associated with the node, that is to say adjacent to the node, mounted on each of the branches connected to the node.

[0058] When everything is functioning normally, the protection elements C.sub.1-C.sub.10 are operational only according to the first threshold value S.sub.1. In other words, the current intensities are limited by the protection elements C.sub.1-C.sub.10 only in the direction of the positive currents and the second cutoff value S.sub.2 is not reached.

[0059] Referring to the node N.sub.2, in operations similar to the protection elements of the protection systems according to the prior art, in case of overcurrent on the branch B.sub.3 carrying the current I.sub.3 entering into the node N.sub.2, the protection element C.sub.31 associated with the node N.sub.2 limits the current I.sub.3 to the first threshold value S.sub.1 for the time T.sub.1, then, after this time, once again compares the current I.sub.3 to this same threshold value S.sub.1. If the current I.sub.3 is greater than S.sub.1, the protection element C.sub.31 cuts the flow of the current I.sub.3 in the branch B.sub.3.

[0060] In the case where a short-circuit I.sub.s appears in the branch B.sub.5 between the nodes N.sub.2 and N.sub.3 and between the protection elements C.sub.5 and C.sub.51, the intensity of the current in the branch B.sub.5 which passes through the protection element C.sub.5 becomes I.sub.5=I.sub.5+I.sub.s and the intensity of the current in the branch B.sub.3 which passes through the protection element C.sub.31 becomes I.sub.31=I.sub.3+I.sub.s.

[0061] Referring to the node N.sub.2, the current intensity I.sub.31 passing through the protection element C.sub.31 is positive whereas the current intensity I.sub.5, passing through the protection element C.sub.5, is negative. Thus, whatever the order relationship between the initial current intensities I.sub.3 and I.sub.5 (I.sub.3≤I.sub.5 or I.sub.5<I.sub.3), the protection element C.sub.31 associated with the node N.sub.2 limits the value of the intensity of the current I.sub.31 in the branch B.sub.3 to the first threshold value S.sub.1 whereas the protection element C.sub.5 mounted in the branch B.sub.5 limits the value of the intensity of the current I.sub.5 in the branch B.sub.5 to the second threshold value S.sub.2. It is then deduced (whatever the impedances in the branches B.sub.3 and B.sub.5 or whatever the configuration of the circuit) that the short-circuit has occurred in the branch B.sub.5 and not in B.sub.3 and, consequently, the defective branch is correctly identified.

[0062] After a time T.sub.2 of limiting of the current I.sub.5 of the current in the branch B.sub.5 to the second threshold value S.sub.2, the central processing unit 25 of the protection element C.sub.5 once again compares the value of the intensity of the current I.sub.5 to this same threshold value S.sub.2 and if said value is greater than the second threshold value S.sub.2, the central processing unit 25 emits a cutoff signal to the circuit breaking device 13 to cut the flow of the current in the branch B.sub.5 and isolate the latter from the healthy branches.

[0063] It will be noted that the time T.sub.2 can be nil in the case where the defective branch must be immediately disconnected in order to avoid damaging user equipment items 5 connected to that branch.

[0064] Thus, a protection element C.sub.3, C.sub.5 mounted on one of the branches B.sub.3, B.sub.5 connected to a node N.sub.2 with which it is associated limits the value of the intensity of the current leaving the branch B.sub.3 by the node N.sub.2 to the first threshold value S.sub.1 and limits the value of the intensity of the current entering into the branch B.sub.5 by the node N.sub.2 to the second threshold value S.sub.2 which is greater, in absolute value, than the first threshold value S.sub.1.

[0065] As long as there is no fault current (due to a short-circuit) outside of the node N.sub.2, the value of the intensity of the current leaving a branch B.sub.3 by the node N.sub.2 is always limited the first threshold value S.sub.1 by the protection element C.sub.3 mounted on that branch and associated with said node.

[0066] In case of the presence of a fault current on a defective branch B.sub.5 connected to the node, the value of the intensity of the current entering into said branch B.sub.5 by the node N.sub.2 is limited to the second threshold value S.sub.2 by the protection element C.sub.5 mounted on that branch and associated with said node. Then, the passage of the current is possibly interrupted after a predetermined time T.sub.2 if the fault current is still present on the defective branch in order to protect the electrical network 1.

[0067] Advantageously, and as illustrated in FIG. 6, the direct current electrical network is meshed. According to this embodiment, the direct current electrical network 1 has a net-form structure comprising supply nodes N.sub.p connected pair-to-pair by branches B.sub.k. The network 1 is supplied by an HVDC direct current source 41 which outputs a current from injection nodes Nin to user equipment items 5 via the network of supply nodes N.sub.p. Several user equipment items 5 can be connected to one and the same supply node N.sub.p. Each mesh is, for example, of hexagonal form whose vertices are occupied by the supply nodes N.sub.p and some meshes have an injection node N.sub.in at their center. The current is injected by each injection node Nin to the neighboring supply nodes N.sub.p and then from each supply node N.sub.p, the current can flow in the different branches B.sub.k according to any one of the two directions of flow depending on the elements or user equipment items 5 started up.

[0068] This architecture allows the supply nodes N.sub.p to be linked to one another by numerous paths providing great safety and a great tolerance to failures. In effect, if one path (made up of nodes and branches) is defective, the currents can take the other paths to ensure the continuity of the electrical supply.

[0069] Furthermore, the meshed direct current network 1 is protected by the protection system 7 according to the invention. In effect, protection elements C.sub.j are mounted in the different interconnecting branches B.sub.k and protection element C.sub.j is associated with a node in order to rapidly identify and isolate any element (nodes or interconnecting branch) that is defective.

[0070] The meshed direct current electrical network 1 is an electrical supply network in an aircraft supplying for example a direct voltage of approximately 270 V DC. The direct electrical current supplied by electrical generators of the aircraft is routed from the injection nodes Nin to the different electrical equipment items 5 of the aircraft via the network of supply nodes N.sub.p and interconnecting branches B.sub.k which is protected by the protection system 7 according to the invention.

[0071] Furthermore, the protection elements C.sub.j are mounted in the different interconnecting branches and each protection element is associated with a node (injection or supply) in order to rapidly identify and isolate any defective element. Each protection element associated with a node operates according to a first threshold S.sub.1 which can for example be of the order of 8 A for an electrical current leaving a branch by said node and a second threshold value S.sub.2 (with S.sub.1<S.sub.2) which can for example, in absolute value, be of the order of 10 A for an electrical current entering into a branch by said node.

[0072] As a variant, the branches connected to the user equipment items 5 can comprise simple circuit breakers (not represented) of fusible type which are configured to blow in order to cut the current in the branch when an overcurrent is detected in the branch.

[0073] The meshed direct current electrical network thus makes it possible to satisfy the aeronautical needs which are increasingly dictated by particularly severe constraints of safety, reliability and redundancy. Furthermore, the protection system makes it possible to rapidly and accurately identify any defective element, thus ensuring optimal safety on the electrical network of the aircraft.