Method and system for controlling the elevator assemblies of an aircraft

Claim 1

A method for controlling elevator assemblies of an aircraft, comprising the following steps: (a) normally supplying identical electrical flight control signals in parallel through two electrical control units each including an override mechanism arranged in series between each electrical control unit and respective mechanical control links to a plurality of drive means for each of said elevator assemblies, (b) supplying, in an emergency, mechanically generated control signals through dual mechanical control links to each of said override mechanisms, (c) providing with the aid of said override mechanism, a performance priority of said mechanically generated control signals for controlling and operating said elevator assemblies in an emergency, and (d) mechanically coupling said mechanical control links by a mechanical synchronizing device at least during high speed flight for assuring a symmetric flap deflection of said elevator assemblies.

Claim 2

A method for controlling elevator assemblies of an aircraft, comprising the following steps: (a) normally supplying identical electrical flight control signals in parallel through two electrical control units each including an override mechanism arranged in series between each electrical control unit and respective mechanical control links to a plurality of drive means for each of said elevator assemblies, (b) supplying, in an emergency, mechanically generated control signals through dual mechanical control links to each of said override mechanisms, (c) providing with the aid of said override mechanism, a performance priority of said mechanically generated control signals for controlling and operating said elevator assemblies in an emergency, and (d) mechanically coupling said mechanical control links by a mechanical synchronizing device at least during high speed flight for assuring a symmetric flap deflection of said elevator assemblies.

Claim 3

A system for controlling elevator assemblies of an aircraft, comprising fly-by-wire control means including pilot activated mechanical auxiliary control means, autopilot and flight control computer means, two electrically controlled control units (4) connected to said computer means, right and left elevator flaps (RH1, RL1), respective drive means (2) connected to said right and left elevator flaps, mechanical connecting links (3) between said drive means and said electrically controlled control units, means for normally synchronously (simultaneously) supplying elevator flap control signals from said computer means to said two electrically controlled control units (4) operating in parallel to each other, each of said electrically controlled control units (4) comprising a first section with electro-motors and gear drives and a second section with an override mechanism (4.2) for allocating a first priority to a mechanical emergency control signal generated by said auxiliary control means when a failure occurs in the electrical control, means for providing each active flight control computer means with information regarding instantaneous elevator flap controlled positions as determined by outputs of said two electrically controlled control units, whereby the flight control computer means recognize a non-operating control unit or an asynchronously operating control unit, whereupon faulty components are either switched-off or a switch-over is performed by the control computer means, said pilot activated mechanical auxiliary control means comprising a mechanical emergency control member enabling the pilot to respond to a system failure by providing a mechanical control signal for the control of the elevator assemblies, dual mechanical cable connections between each of said override mechanisms and said auxiliary control means for transmitting a mechanical control signal to each of the two override mechanisms in response to an operation of the emergency control member by the pilot for overriding any electrical control signal, wherein during electrical control, when said auxiliary control means is not activated, electrical elevator control signals cause a follow-up movement of the auxiliary control means synchronously and proportionally to the electrical control signals in response to a respective feedback command, wherein said mechanical emergency control member comprise a pitch control member with a detent for assuring an emergency control through one control cable link even if the other cable control link of said dual mechanical cable connections should be jammed, said pitch control member with its detent being so constructed that during a normal electrical control the generation of higher priority failure signals are prevented and the above mentioned first performance priority of the mechanical control signal is assured if said electrically controlled control means are supplying identical control signals to the mechanical control links leading to the elevator flap drives and to the emergency control member, and a mechanical synchronizing or coupling unit operatively arranged between the mechanical coupling links leading from the two electrically controlled control means to the respective elevator drive means (2) for assuring a synchronization of the elevator drive systems even when the mechanical emergency control is effective at high speed flight.

Claim 4

A system for controlling elevator assemblies of an aircraft, comprising fly-by-wire control means including pilot activated mechanical auxiliary control means, autopilot and flight control computer means, two electrically controlled control units (4) connected to said computer means, right and left elevator flaps (RH1, RL1), respective drive means (2) connected to said right and left elevator flaps, mechanical connecting links (3) between said drive means and said electrically controlled control units, means for normally synchronously (simultaneously) supplying elevator flap control signals from said computer means to said two electrically controlled control units (4) operating in parallel to each other, each of said electrically controlled control units (4) comprising a first section with electro-motors and gear drives and a second section with an override mechanism (4.2) for allocating a first priority to a mechanical emergency control signal generated by said auxiliary control means when a failure occurs in the electrical control, means for providing each active flight control computer means with information regarding instantaneous elevator flap controlled positions as determined by outputs of said two electrically controlled control units, whereby the flight control computer means recognize a non-operating control unit or an asynchronously operating control unit, whereupon faulty components are either switched-off or a switch-over is performed by the control computer means, said pilot activated mechanical auxiliary control means comprising a mechanical emergency control member enabling the pilot to respond to a system failure by providing a mechanical control signal for the control of the elevator assemblies, dual mechanical cable connections between each of said override mechanisms and said auxiliary control means for transmitting a mechanical control signal to each of the two override mechanisms in response to an operation of the emergency control member by the pilot for overriding any electrical control signal, wherein during electrical control, when said auxiliary control means is not activated, electrical elevator control signals cause a follow-up movement of the auxiliary control means synchronously and proportionally to the electrical control signals in response to a respective feedback command, wherein said mechanical emergency control member comprise a pitch control member with a detent for assuring an emergency control through one control cable link even if the other cable control link of said dual mechanical cable connections should be jammed, said pitch control member with its detent being so constructed that during a normal electrical control the generation of higher priority failure signals are prevented and the above mentioned first performance priority of the mechanical control signal is assured if said electrically controlled control means are supplying identical control signals to the mechanical control links leading to the elevator flap drives and to the emergency control member, and a mechanical synchronizing or coupling unit operatively arranged between the mechanical coupling links leading from the two electrically controlled control means to the respective elevator drive means (2) for assuring a synchronization of the elevator drive systems even when the mechanical emergency control is effective at high speed flight.