Gun launcher system for a submersible vessel

The present invention relates to a gun launcher system for a submersible vessel.

By submersible vessel is meant in particular a submarine, for example a military submarine.

In a manner known per se, the systems integrated into military submarines are subject to numerous constraints specific to this environment. Among these constraints, we can in particular cite shocks, vibrations, acoustic discretion, electromagnetic emission / sensitivity, size, passive and active diving safety, weapon safety, energy efficiency, etc.

In addition, by virtue of their use, installations relating to submarine weapons, such as, for example, gun launcher tubes, must meet numerous requirements in terms of performance. These requirements relate in particular to the time to set up a weapon, energy consumption, cost of ownership, safety, reliability and availability.

Thus, conventionally, these installations are implemented on board submarines using hydraulic actuators. Hydraulic actuators in fact make it possible to meet most of the aforementioned constraints and requirements.

However, installations using hydraulic actuators have a bulky, heavy, energy-consuming and expensive architecture in operation and maintenance. This is mainly due to a large network of piping necessary to ensure the operation of these installations.

This network generally makes it possible, on the one hand, to remotely control the operation of the hydraulic actuators and, on the other hand, to supply the power required for these actuators. It can thus extend all along the ship, which implies a very large space requirement.

The object of the present invention is to propose an architecture that can be used for an on-board weapon launcher system which makes it possible to avoid the use of hydraulic actuators while respecting the aforementioned constraints and requirements.

To this end, the invention relates to a gun launcher system for a submersible ship, comprising at least one electric actuator capable of exerting a sequence of mechanical actions on a gun launcher tube; a power module capable of supplying electric power; a control module capable of controlling the operation of the electric actuator; a first security module electrically connecting the power module to the control module and capable of

monitoring the operation of the power module by implementing a first monitoring logic; and a second safety module electrically connecting the control module to the actuation and capable of monitoring the operation of the control module by implementing a second monitoring logic, the second monitoring logic being different and dissimilar from the first monitoring logic. surveillance.

According to other advantageous aspects of the invention, the system comprises one or more of the following characteristics, taken in isolation or in any technically possible combination:

- the first security module is connected to a first set of sensors via first connecting means and the second security module is connected to a second set of sensors via second connecting means, each set of sensors being able to provide information relating to the operation of system components;

the first set of sensors is different from the second set of sensors;

the first connection means are different from the second connection means and are configured to operate according to an operating technology different from that of the second connection means;

the first monitoring logic is implemented at least partially by hardware devices;

the second monitoring logic is implemented at least partially by software;

the second security module is able to receive security information produced by the first security module and to analyze the consistency of this security information with security information produced by itself;

- the power module and the first safety module are integrated together in a first cabinet, and the control module and the second safety module are integrated together in a second cabinet;

- the first cabinet is separate from the second cabinet; and

- the first cabinet and the second cabinet are configured to be placed in different enclosures of the submersible vessel;

These characteristics and advantages of the invention will become apparent on reading the description which follows, given solely by way of non-limiting example, and made with reference to the appended drawings, in which:

- Figure 1 is a schematic view of a gun launcher system according to the invention, this system comprising in particular actuation means and control means;

- Figure 2 is a detailed schematic view of the actuating means of Figure 1; and

- Figure 3 is a schematic view illustrating the operation of the control means of Figure 1.

The weapon launcher system 10 of FIG. 1 is intended to be loaded on board a submarine and makes it possible to activate the launching of a weapon from this submarine. To do this, the weapon launcher system 10 is intended to be associated with at least one weapon launching tube and makes it possible to exert a sequence of mechanical actions on this tube to launch an underwater vehicle contained therein. this. The underwater vehicle corresponds in particular to a weapon but in the general case can include any other object capable of being launched from the submarine.

In the remainder of the description, the weapon launcher system 10 will be explained with reference to a single weapon launching tube, for example that on the port side. However, in the general case, it should be understood that this system can be associated with several weapon launching tubes, for example with two tubes, that of port side and that of starboard.

Referring to Figure 1, the gun launcher system 10 comprises at least one electric actuator 12, actuating means 14 of the electric actuator 12, safety means 16 monitoring the operation of the actuating means 14 and control means 18 controlling the actuating means 14.

The electric actuator 12 is associated with the weapon launching tube and makes it possible to exert a mechanical action on this tube in order to trigger a launch. This mechanical action can include, for example, pressurizing the tube with a pressure necessary for launching.

The electrical actuator 12 is connected to the actuating means 14 by an electrical connection 21 and capable of exerting the corresponding mechanical action when the electrical connection 21 provides the necessary electrical power.

Of course, when the weapon launcher system 10 is associated with several weapon launching tubes, it comprises at least one actuator for each of these tubes.

The actuating means 14 are able to create in the electrical connection 21 the electrical power necessary to actuate the electrical actuator 12.

To do this, the actuating means 14 are connected to a main power source 23 via an electrical connection 24 and to a back-up power source 25 via an electrical connection 26.

The main and backed-up power sources 23, 25 correspond for example respectively to the main and backed-up electrical networks present on board the submarine.

The actuating means 14 are illustrated in more detail in FIG. 2.

Thus, with reference to this FIG. 2, the actuating means 14 are in the form of two boxes, called first box 31 and second box 32.

Each of these boxes 31, 32 have a box containing mechanical / electronic / electrical components necessary to implement the corresponding functions as will be explained below.

Advantageously, each box 31, 32 is waterproof. In addition, it can be resistant to shocks, to different pressures as well as to other types of attacks (of an electromagnetic, thermal or other nature) likely to appear in the corresponding environment.

Again advantageously, the boxes 31, 32 are configured to be placed in different compartments / enclosures of the submarine.

Between them, the boxes are connected by an electrical connection 33.

The first box 31 comprises a power module 35 connected directly to the power sources 23, 25.

The power module 35 thus makes it possible to supply the weapon launcher system 10 by selecting one of the power sources 23, 25.

In particular, the main power source 23 is chosen when the gun launcher system 10 is in its nominal operating mode and the back-up power source 25 is chosen when the gun launcher system 10 is in its faulty operating mode. .

The power module 35 is thus composed of relays and / or corresponding electrical circuits making it possible to select one or the other power source.

By selecting one of the two sources, the power module 35 also makes it possible to isolate the corresponding electrical components from the other source upstream and to shed the electrical energy in the system 10.

In addition, the power module 35 comprises other electrical components making it possible, for example, to adapt the electrical power supplied by the power sources 23, 25 to the power supply of the actuator 12.

The second box 32 comprises a control module 36 making it possible to control the electric actuator 12 by supplying the electric link 21 with the electric power supplied by the power module 35.

To do this, the control module 36 is connected via a controller 38 also integrated into the second box 32, to the control means 18 and capable of receiving commands supplied by these means 18. It is also capable of processing these commands.

The control module 36 is thus at least partially in the form of a computer comprising the software necessary to ensure the processing of the corresponding commands and / or in the form of programmable logic circuits configured to ensure such processing.

The safety means 16 form two safety barriers capable of monitoring the operation of the control means 14 independently of one another.

To do this, the security means 16 are in the form of a first security module 41 integrated in the first cabinet 31 and of a second security module 42 integrated in the second cabinet 32.

In particular, the first security module 41 electrically connects the power module 35 to the control module 36 and makes it possible in particular to monitor the operation of this power module 35.

The first security module 41 is also connected to first instrumentation means 45 via a direct control link 46.

The first instrumentation means 45 make it possible to observe the operation of at least certain components of the weapon launcher system 10 and of its environment. Thus, for example, these instrumentation means 45 are in the form of a first set of sensors. Each sensor of this assembly is associated with at least one component of the weapon launcher system 10 or of its environment and makes it possible to measure a physical quantity (such as pressure, temperature, etc.) associated with this component. The junction of these sensors to the first security module 41 is made, for example, via a first junction box 47 visible in FIG. 1.

To monitor the operation of the power module 35, the first security module 41 implements a first monitoring logic.

This first monitoring logic is implemented using hardware devices such as, for example, safety relays and thus has so-called “wired” logic.

This logic makes it possible, for example, to control the electrical power supplied by the power module 35 and in the event of its non-compliance, to cut the electrical connection 33 between the power module 35 and the control module 36.

The second security module 42 electrically connects the control module 36 to the actuator 12 and makes it possible to monitor the operation in particular of this control module 36.

The second security module 42 is also connected to second instrumentation means 55 via a different and dissimilar link 56 from the link 46 connecting the first safety module 41 to the first instrumentation means 45.

The link 56 comprises in particular a physical medium different from that of the link 46 with different characteristics, such as for example a different electromagnetic sensitivity.

Thus, for example, this link 56 corresponds to a computer network of the submarine explained in more detail below.

As in the case of the first instrumentation means 45, the second instrumentation means 55 are in the form of a second set of sensors. These sensors are similar to the sensors of the first set but have devices that are different and independent of them. Advantageously, the sensors of the second set operate according to different technologies from those of the sensors of the first set. The junction of the sensors of the second set to the link 56 is provided for a second junction box 57 visible in Figure 1.

In addition, the junction of the link 56 to the second control module 42 is provided by the controller 38.

To monitor the operation of the control module 36, the second security module 42 implements a second monitoring logic which is different and dissimilar from the first monitoring logic.

Thus, for example, this second monitoring logic is implemented by at least partially using software implementing a safety PLC. In this case, the second security module 42 is at least partially in the form of a computer implementing such software.

The second monitoring logic consists in particular in analyzing the consistency of all the data accessible to the second security module 42 via the computer network 56 and the various control links.

When the second monitoring logic is not verified, the second safety module cuts the electrical connection 21 between the control module 36 and the electrical actuator 12.

Advantageously, according to an exemplary embodiment, the second security module 42 is also connected to the first security module 41 by a data link. In this case, this second security module 42 is able to receive security information produced by the first security module 41 and to analyze the consistency of this security information with security information produced by itself. If this information is not consistent, the second security module 42 is also able to cut the electrical connection 21.

The control means 18 make it possible to control the operation of the control module 36 and are connected to this module 36 via the controller 38.

With reference to FIG. 1, the control means 18 comprise a remote control station 61, a local control station 62 and a local control panel 63.

The remote control station 61 is arranged for example in a piloting center of the submarine and is in the form of a man-machine interface known per se.

The remote control station 61 is connected to the control module 36 via the computer network 56 of the submarine and is able to send commands in the form of digital data to this module 36.

The computer network 56 of the submarine has a protected computer network known per se. This network meets all the standards relating to its security as well as to the security of data transmitted via this network.

The local control station 62 is arranged near the weapon launching tube with which the system 10 is associated.

This local control station 62 is in the form of a man-machine interface also known per se such as for example a touch screen.

Just like the remote control station 61, the local control station 62 is connected to the control module 36 via the computer network 56 and is able to control the operation of this module 36 by transmitting corresponding commands in the form of digital data via this network 56.

The local control panel 63 is also disposed near the corresponding weapon launch tube and is connected to the control module 56 via a direct control link 66 separate from the computer network 56.

This local control panel 63 is able to control the operation of the control module 56 by transmitting corresponding commands via this direct control link 66. The commands are transmitted for example in the form of analog signals.

The local control panel 63 is for example in the form of mechanical buttons and / or indicator lights associated with each control.

Advantageously, the local control panel 63 further comprises control means making it possible to activate the power supply to the electric actuator 12 by the back-up power source 25 in the event of loss of the main power source 23.

To do this, the local control panel 63 is connected, for example, to the power module 35 via a specific control link (not shown in FIG. 1) in order to control the selection of the backup power source 25.

Of course, when the weapon launcher system 10 is associated with several weapon launching tubes, it advantageously comprises a local control station and a local control panel for each of the tubes.

In the embodiment of FIG. 1, the control means 18 further comprise a weapon interface module 71, a combat management system 72, a weapons handling module 73, an authorization module for shot 74 and a diving safety board 75.

The weapons interface module 71, the combat management system 72 and the weapons handling module 73 are connected to the computer network 56. The diving safety board 75 is connected to the controller 38 via a direct link. These components are known per se and will not be described in detail hereinafter.

The firing authorization module 74 is connected to the control module 36 via a direct control link 76 and via the controller 38. This module is also known per se and makes it possible in particular to authorize firing, that is to say. say the actuation of the actuator 12, when a specific key (physical or digital) is introduced into this module.

Furthermore, according to a particular embodiment of the invention illustrated in FIG. 1, the electric actuator 12 is connected to the actuating means 14 also via the computer network 56 through the second junction box 57 for example to communicate. the state of its operation to these means.

According to the same exemplary embodiment, the weapon launcher system 10 further comprises third instrumentation means 80 independent of the first and second instrumentation means 45, 55. These third instrumentation means 80 are connected to the actuation means. 14 via the computer network 56 through the second junction box 57 and make it possible, for example, to transmit to these means information relating to the operating states of various components of the system 10.

The operation of the gun launcher system 10 will now be explained with particular reference to FIG. 3 schematically illustrating different levels of controls implemented by the control means 18 of this system 10.

Initially, all of the components of the weapon launcher system 10 are in their nominal operating mode. The operation of the actuating means 14 is monitored by the safety means 16 using the two safety barriers described above. The actuating means 14 are supplied by the main power source 23.

To launch an underwater vehicle, the operator introduces a command via the remote control station 61 or the local control station 62 which together form a first control level Ni. This command level has priority over the other levels.

The command then sent by one of the stations 61, 62 is transmitted via the computer network 56 to the actuating means 14 to actuate the actuator 12. After an analysis of this command as well as the information possibly coming from the other modules, the control module 36 supplies the electrical link 21 with the electrical power transmitted by the power module 35.

In the event, for example, of the loss of the computer network 56, the gun launcher system 10 switches to faulty operating mode and the commands are given from a second command level N 2 which is formed by the control panel 63. In this case, the commands from this panel 63 are transmitted to the actuating means 14 via the control link 66.

In the event of loss of the main power source 23, for example, the weapon launcher system 10 switches to degraded operating mode.

In this mode, the commands are for example given from the second level N 2 in order in particular to activate the power supply by the back-up power supply source 24.

When this is not possible, the electric actuator 12 can still be actuated manually by an operator. It is therefore a third level of control N 3 .

It will then be understood that the present invention has a certain number of advantages.

First of all, the proposed architecture of the gun launcher system 10 makes it possible to use an electric actuator instead of a hydraulic actuator conventionally used in submarines. Indeed, this architecture makes it possible to meet all the requirements and constraints linked to the specific environment of submarines.

Replacing a hydraulic actuator with an electric actuator therefore makes it possible to avoid the use of a complex piping network, thus making the system more compact and easier to set up and maintain.

In addition, the proposed architecture has a block architecture which makes it possible to modify one of the components of this system without causing modifications to the other components.

So, for example, it is possible that different submarines have different power supply networks. In this case, it suffices to modify only the power module of the weapon launcher system to adapt it to the corresponding submarine.

In addition, some functions of the gun launcher system may have a lower level of security than others. In this case, one of the safety barriers can be removed for these functions.

According to another example, the gun launcher system can include an already existing actuator. In this case, to order it, it suffices to adapt appropriately only the control module.

Furthermore, the proposed architecture of the weapon launcher system according to the invention makes it possible to guarantee a high level of security for this system.

In fact, according to this architecture, the logical processing is separated between two distinct security modules which are integrated in two distinct boxes. Thus, in the event that one of these modules loses its integrity, the security function is provided by the other module. Such a loss can for example occur in the event of a loss of tightness on one of the boxes.

In addition, according to the proposed architecture, the security information and the commands are routed to the corresponding modules via different physical media which are implemented according to different technologies. This then increases the level of security of the system.

Finally, the architecture of the weapon launcher system according to the invention makes it possible to guarantee it a high level of availability.

Indeed, in the event of loss of the computer network, the gun launcher system can be controlled from the control panel which is connected to the actuation means via a direct link independent of the computer network.

In the event of loss of the main power source, it is still possible to use the back-up source and in the event of total loss of the power supply sources, it is still possible to actuate the actuator manually.

CLAIMS

1.- Weapon launcher system (10) for a submersible vessel, comprising:

- at least one electric actuator (12) capable of exerting a sequence of mechanical actions on a weapon launching tube;

- a power module (35) capable of supplying electrical power;

- a control module (36) capable of controlling the operation of the electric actuator (12);

- a first security module (41) electrically connecting the power module (35) to the control module (36) and able to monitor the operation of the power module (35) by implementing a first monitoring logic;

- a second safety module (42) electrically connecting the control module (36) to the actuator (12) and able to monitor the operation of the control module (36) by implementing a second monitoring logic, the second surveillance logic being different and dissimilar from the first surveillance logic.

2.- System (10) according to claim 1, wherein the first security module (41) is connected to a first set of sensors (45) via first connecting means (46) and the second security module (42). ) is connected to a second set of sensors (55) via second connecting means (56), each set of sensors (45, 55) being able to provide information relating to the operation of components of the system (10).

3. A system (10) according to claim 2, wherein the first set of sensors (45) is different from the second set of sensors (55).

4.- System (10) according to claim 2 or 3, wherein the first connecting means (46) are different from the second connecting means (56) and are configured to operate according to an operating technology different from that of the second means. link (56).

5. A system (10) according to any preceding claim, wherein the first monitoring logic is implemented at least partially by hardware devices.

6. A system (10) according to any preceding claim, wherein the second monitoring logic is implemented at least partially by software.

7.- System (10) according to any one of the preceding claims, wherein the second security module (42) is able to receive security information produced by the first security module (41) and to analyze the consistency of this security information with security information produced by itself.

8.- System (10) according to any preceding claim, wherein the power module (35) and the first security module (41) are integrated together in a first cabinet (31), and the control module (36) and the second security module (42) are integrated together in a second cabinet (32).

9. A system (10) according to claim 8, wherein the first cabinet (31) is separate from the second cabinet (32).

10. A system (10) according to claim 9, wherein the first cabinet (31) and the second cabinet (32) are configured to be placed in different enclosures of the submersible vessel.