Aircraft flight envelope protection and recovery autopilot

Information

  • Patent Grant
  • 12033526
  • Patent Number
    12,033,526
  • Date Filed
    Tuesday, January 17, 2023
    a year ago
  • Date Issued
    Tuesday, July 9, 2024
    4 months ago
Abstract
Systems and vehicle are provided. A vehicle system for a vehicle includes: a trajectory selection module configured to select a potential vehicle path relative to a current vehicle movement condition; a trajectory movement condition module configured to estimate a modeled movement condition of the vehicle along the potential vehicle path; a limit comparison module configured to determine whether the modeled movement condition violates vehicle limits; and a violation indicator module configured to generate an indication of impending violation.
Description
TECHNICAL FIELD

The present disclosure generally relates to aircraft flight envelope protection systems, and more particularly relates to aircraft flight envelope protections systems that model potential aircraft trajectories and test the trajectories for aircraft limit violations.


BACKGROUND

Aircraft are designed to operate within certain operating speeds and loads on control surfaces of the aircraft. These operating limits are known as the flight envelope, outside of which there may be damage or loss of control of the aircraft. In order to protect against operating outside of the flight envelope, conventional aircraft utilize many disparate systems that evaluate individual aspects of the aircraft to determine whether the aircraft is operating outside of the flight envelope or is likely to collide with the ground on the present flight path. These conventional systems, however, have limitations that prevent full envelope protection.


Furthermore, these conventional systems are often disabled for landing based on whether the landing gear is down or by pilot command. Disabling the systems for landing, however, causes the aircraft to lose flight envelope protection during the landing.


Accordingly, it is desirable to provide systems and aircraft that provide greater flight envelope protection during flight and during landing phases. Furthermore, other desirable features and characteristics of the present invention will become apparent from the subsequent detailed description and the appended claims, taken in conjunction with the accompanying drawings and the foregoing technical field and background.


SUMMARY

Systems and aircraft are provided for flight envelope protection. In a first non-limiting embodiment, an avionics system includes, but is not limited to, a trajectory selection module configured to select a potential aircraft path relative to a current aircraft flight condition; a trajectory flight condition module configured to estimate a modeled flight condition of the aircraft along the potential aircraft path; a limit comparison module configured to determine whether the modeled flight condition violates aircraft limits; and a violation indicator module configured to generate an indication of impending violation.


In a second non-limiting embodiment, an aircraft includes, but is not limited to, a sensor system configured to provide aircraft flight condition data, an actuator system configured to manipulate control surfaces of the aircraft, and a control system. The control system includes: a trajectory selection module configured to select a potential aircraft path relative to a current aircraft flight condition; a trajectory flight condition module configured to estimate a modeled flight condition of the aircraft along the potential aircraft path; a limit comparison module configured to determine whether the modeled flight condition violates an aircraft limit; and a violation indicator module configured to generate an indication of impending violation.





BRIEF DESCRIPTION OF THE DRAWINGS

Advantages of the present invention will be readily appreciated, as the same becomes better understood by reference to the following detailed description when considered in connection with the accompanying drawings wherein:



FIG. 1 is a schematic diagram illustrating an aircraft having a control system, in accordance with various embodiments; and



FIG. 2 is a dataflow diagram illustrating the control system of the aircraft of FIG. 1, in accordance with various embodiments.





DETAILED DESCRIPTION

The following detailed description is merely exemplary in nature and is not intended to limit the application and uses. Furthermore, there is no intention to be bound by any expressed or implied theory presented in the preceding technical field, background, brief summary or the following detailed description. As used herein, the term module refers to any hardware, software, firmware, electronic control component, processing logic, and/or processor device, individually or in any combination, including without limitation: application specific integrated circuit (ASIC), an electronic circuit, a processor (shared, dedicated, or group) and memory that executes one or more software or firmware programs, a combinational logic circuit, and/or other suitable components that provide the described functionality.


Embodiments of the present disclosure may be described herein in terms of functional and/or logical block components and various processing steps. It should be appreciated that such block components may be realized by any number of hardware, software, and/or firmware components configured to perform the specified functions. For example, an embodiment of the present disclosure may employ various integrated circuit components, e.g., memory elements, digital signal processing elements, logic elements, look-up tables, or the like, which may carry out a variety of functions under the control of one or more microprocessors or other control devices. In addition, those skilled in the art will appreciate that embodiments of the present disclosure may be practiced in conjunction with any number of systems, and that the systems described herein is merely exemplary embodiments of the present disclosure.


For the sake of brevity, conventional techniques related to signal processing, data transmission, signaling, control, and other functional aspects of the systems (and the individual operating components of the systems) may not be described in detail herein. Furthermore, the connecting lines shown in the various figures contained herein are intended to represent example functional relationships and/or physical couplings between the various elements. It should be noted that many alternative or additional functional relationships or physical connections may be present in an embodiment of the present disclosure.


Various embodiments disclosed herein describe systems that implement a Trajectory Prediction Algorithm (TPA) and a Recovery Autopilot. The TPA models various possible recovery trajectories and tests those trajectories against the aircraft limits and terrain clearance. The recovery trajectories represent flight paths that will potentially guide the aircraft away from impending aircraft limit violations or terrain conflicts. If a trajectory violates a limit, the trajectory will be ruled out and not used. When only one possible recovery is available and that recovery is approaching a limit, the TPA will trigger the Recovery Autopilot to initiate that recovery and thereby avoid the impending envelope exceedance or terrain conflict. Multiple trajectories are utilized to avoid false warnings. For example, if a right turn could be used to avoid terrain but the system does not model right turns, the system will trigger a recovery when the straight-ahead trajectory intersects the terrain. If the crew was safely planning the right turn, it would be a nuisance that the system activated unnecessarily when a safe route existed. The TPA models the recovery beginning from the current aircraft state using current aircraft performance capability. For example, the TPA uses energy modeling that is based on ambient temperature and engine failure status. The Recovery Autopilot takes control of the aircraft and executes the directed recovery once triggered.


Referring now to FIG. 1, an example of an aircraft 100 is illustrated in accordance with some embodiments. Aircraft 100 includes a control system 110, a sensor system 112, and an actuator system 114, among other systems. Although aircraft 100 is described in this description as an airplane, it should be appreciated that control system 110 may be utilized in other aircraft, land vehicles, water vehicles, space vehicles, or other machinery without departing from the scope of the present disclosure. For example, control system 110 may be utilized in submarines, helicopters, airships, spacecraft, or automobiles.


Control system 110 is an avionics system configured to operate aircraft 100 and to evaluate various trajectories 120a-f, as will be described in further detail below. Sensor system 112 includes one or more sensing devices that sense observable conditions of the exterior environment, the interior environment of aircraft 100, or operational conditions and status of aircraft 100. For example, sensor system 112 may include accelerometers, gyroscopes, RADARs, LIDARs, global positioning systems, optical cameras, thermal cameras, ultrasonic sensors, and/or other sensors.


Actuator system 114 includes one or more actuator devices that control one or more vehicle features. For example, actuator system 114 may include actuators that manipulate control surfaces on aircraft 100, extend or retract landing gear of aircraft 100, an/or move other components of aircraft 100.


Referring now to FIG. 2, and with continued reference to FIG. 1, control system 110 is illustrated in accordance with some embodiments. Control system 110 includes at least one processor and a computer readable storage device or media. The processor may be any custom made or commercially available processor, a central processing unit (CPU), a graphics processing unit (GPU), an auxiliary processor among several processors associated with control system 110, a semiconductor based microprocessor (in the form of a microchip or chip set), a macroprocessor, any combination thereof, or generally any device for executing instructions. The computer readable storage device or media may include volatile and nonvolatile storage in read-only memory (ROM), random-access memory (RAM), and keep-alive memory (KAM), for example. The computer-readable storage device or media may be implemented using any of a number of known memory devices such as PROMs (programmable read-only memory), EPROMs (electrically PROM), EEPROMs (electrically erasable PROM), flash memory, or any other electric, magnetic, optical, or combination memory devices capable of storing data, some of which represent executable instructions, used by control system 110 in controlling aircraft 100.


The instructions may include one or more separate programs, each of which comprises an ordered listing of executable instructions for implementing logical functions. The instructions, when executed by the processor, receive and process signals from the sensor system, perform logic, calculations, methods and/or algorithms for automatically controlling the components of aircraft 100, and generate control signals for actuator system 114 to automatically control the components of aircraft 100 based on the logic, calculations, methods, and/or algorithms. Although only one control system 110 is shown in FIGS. 1-2, embodiments of aircraft 100 may include any number of control systems 110 that communicate over any suitable communication medium or a combination of communication mediums and that cooperate to process the sensor signals, perform logic, calculations, methods, and/or algorithms, and generate control signals to automatically control features of aircraft 100. In various embodiments, one or more instructions of control system, when executed by the processor, models possible recoveries of the aircraft and tests those recoveries for Mach limits, Calibrated Airspeed limits, Angle of Attack limits, and terrain conflicts.


In the example provided, control system 110 includes a flight management system 205, a potential path generation module 210, a trajectory selection module 215, a trajectory flight condition module 220, a terrain database 221, a climb ability database 223, an aircraft limit database 224, a limit comparison module 225, a violation indicator module 230, and a recovery autopilot module 235.


Flight Management System 205 (FMS 205) manages a flight plan, as will be appreciated by those with ordinary skill in the art. In the example provided, FMS 205 generates a potential landing indicator 305 when a flight plan/clearance for aircraft 100 indicates a potential landing. For example, when an airport is entered as a waypoint in FMS 205, then FMS 205 may generate the potential landing indicator 305 when aircraft 100 approaches the airport waypoint. It should be appreciated that other criteria and modules may be utilized to generate potential landing indicator 305. For example, other modules may generate potential landing indicator 305 when landing gear is extended, when a runway is within a threshold distance from aircraft 100, or when other conditions are met that suggest a flight crew may attempt to land aircraft 100.


Potential path generation module 210 is configured to generate a plurality of trajectories 310 from which trajectory selection module 215 selects a potential aircraft path relative to a current aircraft flight condition. Each of the potential aircraft paths corresponds to a potential recovery trajectory the aircraft may fly when other potential paths become undesirable.


In the example provided, potential path generation module 210 is configured to generate the plurality of trajectories to cover at least six different directions for a potential escape recovery, such as trajectories 120a-f. For example, trajectories 310 may include a straight-ahead path, a straight climb path, a left climb path, a right climb path, a left descend path, and a right descend path. As will be appreciated by those with ordinary skill in the art, the dangerously low speed hazard is most significant when in a nose high condition and the overspeed hazard is most significant in the nose low condition, so nose high recoveries and nose low recoveries are modeled to provide full envelope protection. It should be appreciated that additional or alternative paths may be utilized without departing from the scope of the present disclosure.


In the example provided, potential path generation module 210 generates both a left bank trajectory and a right bank trajectory using a balance between bank angle and severity of nose high attitude, as will be appreciated by those of ordinary skill in the art. In a nose low situation, elimination of aircraft bank aids in the recovery, yet in the nose high situation, the addition of bank aids in recovery. This balance is based on what a pilot would do. For example, if the aircraft was only slightly nose high, no bank at all may be the most appropriate recovery. Most pilots will balance the amount of bank used with severity of the nose high recovery such that the termination for the recovery is smooth. The potential path generation module 210 balances the bank angle based on creating the smoothest possible recovery without conflict between nose low and nose high cases.


Potential path generation module 210 is further configured to generate a landing path of the plurality of trajectories in response to a potential landing indicator. By including the landing path, control system 110 may continue to operate as described below even during landing without disabling the trajectory evaluation. Control system 110 stays active all the way to the runway by using a “safe landing inhibit.” As the aircraft nears the approach end of the runway, the system will be inhibited from commanding a recovery for ground collision threat if a safe landing is indicated. In other words, while the landing path does not violate a limit, the landing path is available for the pilot to fly. This inhibit leverages the capabilities of conventional runway overrun protection systems to identify a safe approach to a runway. Unsafe approaches will not be inhibited and full protection is retained.


Trajectory selection module 215 is configured to select a potential aircraft path 315 of trajectories 310 for trajectory flight condition module to evaluate. In the example provided, trajectory selection module 215 evaluates each potential aircraft path of trajectories 310 in turn, and is configured to select a next consecutive trajectory of the plurality of trajectories as the potential aircraft path upon a completed evaluation of a previous potential path. Trajectory selection module 215 selects each potential path of trajectories 310 to fully evaluate each potential path aircraft 100 may take.


Trajectory flight condition module 220 is configured to estimate a modeled flight condition 317 of the aircraft along the potential aircraft path. The modeled flight condition may indicate the airspeed, pitch, roll, yaw, and other conditions that may be used to determine whether aircraft 100 violates the aircraft limits. In the example provided, trajectory flight condition module 220 includes a vertical velocity module 240, an energy state module 245, an airspeed prediction module 250, and a terrain conflict module 255. Trajectory flight condition module 220 receives sensor data 316 from sensor system 112.


Vertical velocity module 240 is configured to calculate a vertical velocity of the aircraft on the potential aircraft path. For example, vertical velocity module 240 may calculate the vertical velocity based on a vector velocity and a descent angle provided by sensor system 112.


Energy state module 245 is configured to calculate an energy state of the aircraft on the potential aircraft path. Energy modeling permits accurate prediction of Mach, Airspeed, and Angle of Attack along the potential aircraft path. Multiple trajectories executing in faster than real time can be taxing on the processor, so the energy modeling is performed using a simple, accurate, and fast algorithm.


Energy state module 245 is further configured to calculate the energy state based on a rate of climb of the aircraft at full power and on a rate of descent of the aircraft at idle power. Specifically, energy state module 245 utilizes interpolation between two parameters. The first parameter is the rate of climb at full power and the second is the rate of descent at idle power. These two parameters define the entire span of energy gain/loss of the aircraft. The parameters are computed using table lookup or simplified modeling based on current configuration and flight conditions.


Energy state module 245 is further configured to calculate the energy state based on a current power setting of the aircraft, a current power capability of the aircraft, a speedbrake position on the aircraft, landing gear and flap settings of the aircraft, and an engine health of the aircraft. For example, energy state module 245 may predict the future energy state of aircraft 100 by interpolating between the maximum climb rate and the idle power descent rate at specific temperatures or other conditions and accounting for the aircraft configuration. This ability to predict energy states permits accurate transition between nose high or nose low recovery and a steady climb final segment. By utilizing a maximum climb rate and idle descent rate based at least in part on engine failure status, control system 110 provides accurate predictions whether all engines are operating or if engine failure occurs. Since the transition between nose high recovery or nose low recovery and final segment climb is determined by energy state, control system 110 can accurately model a nose high recovery even while nose low. For example, if in level flight above the single-engine service ceiling and an engine fails while near an aircraft limit, control system 110 will predict and execute a nose high recovery even though the nose is level or nose low. This is because at level flight above the single engine service ceiling, the aircraft is energy deficient and should descend even to avoid terrain. In some embodiments, the system uses a constant energy plane and a constant altitude to distinguish between nose high unusual attitudes and nose low unusual attitude. Accordingly, control system 110 may accurately avoid terrain that is above the single engine service ceiling of the aircraft while the aircraft is conducting a single engine drift down maneuver, as will be appreciated by those of ordinary skill in the art.


Airspeed prediction module 250 is configured to estimate an airspeed of the aircraft on the potential aircraft path based on the vertical velocity and the energy state. For example, airspeed prediction module 250 may find the difference between climb capability and the vertical velocity, then use throttle position to calculate a change in airspeed.


In some embodiments, each trajectory is evaluated by looping the following algorithm:
















- Begin Loop



  • Model Recovery Autopilot response



  • Adjust aircraft state to reflect autopilot response



  • Extend trajectory 1 time slice



  • Compute vertical velocity based on model trajectory



  • Compute energy gain/loss given current



    conditions/power/speedbrake)



  • Adjust model energy based on vertical velocity and energy



    gain/loss



  • Compute airspeed and Mach of new energy state



  • Test new condition for limits violation



     - Min Speed Limit



     - Mach Limit



     - Max Speed Limit



     - Terrain Clearance



- Loop until aircraft is clear









Terrain database 221 stores terrain data 320 for use by terrain conflict module 255. For example, terrain database 221 may utilize conventional commercially available terrain data that indicates the height and location of terrain. Terrain conflict module 255 is configured to determine whether the potential aircraft path indicates a terrain conflict.


Climb ability database 223 stores climb ability data 325. In the example provided, climb ability data 325 is the climb rate at full power and the descent rate at idle power of aircraft 100 at specific conditions, such as at specific temperatures and altitude.


Aircraft limit database 224 stores aircraft limit data 330. As used herein, the term “aircraft limit” means flight condition limits such as Mach limits, maximum airspeed limits, minimum airspeed limits, angle of attack limits, and other similar limits of aircraft performance. As used herein, the term “aircraft limit” specifically excludes terrain conflicts.


In the example provided, predetermined passenger comfort limits are the aircraft limits. For example, the limits are sufficiently aggressive to be nuisance free yet still provide protection while preventing injury to unsecured passengers. The recovery relies on auto-pilot like maneuvers with roll onset rates constrained and limited g-loading to prevent large lateral and vertical accelerations in the cabin. Use of bank during the recovery aids in minimizing nuisances without imposing additional accelerations on the passengers.


In some embodiments, aircraft capability limits are the aircraft limits. For example, the aircraft capability limits permit greater accelerations and loading than are permitted by passenger comfort limits.


Limit comparison module 225 is configured to determine whether the modeled flight condition violates aircraft limits. For example, if an airspeed of aircraft 100 along the potential path is indicated as exceeding a maximum airspeed of the aircraft limits, then limit comparison module 225 will determine that the modeled flight condition violates aircraft limits.


Violation indicator module 230 is configured to generate an indication of impending violation 335 based on the limit comparison. In the example provided, violation indicator module 230 is further configured to generate the indication of impending violation based on the terrain conflict. In some embodiments, the indication of impending violation 335 may be conveyed to the flight crew by visual representation on a display in a flight deck of aircraft 100.


Recovery autopilot module 235 is configured to guide the aircraft along the selected trajectory in response to the selected trajectory being a last trajectory of the plurality of trajectories to lack a violation indication. For example, if five of six modeled trajectories have an indication of violation, recovery autopilot module 235 will command aircraft 100 to fly along the remaining modeled trajectory when that trajectory has an indication of impending violation. To command the flight, recovery autopilot module 235 may send control commands 340 to actuator system 114 to manipulate control surfaces of aircraft 100.


As will be appreciated by those of ordinary skill in the art, if the aircraft experiences a serious upset from windshear or other factors that place the aircraft in a near inverted case while at extreme bank angles, control system 110 is configured to determine which way to roll out for recovery by generating potential paths for each direction. For example, if in right bank but nearly inverted and still rolling right, control system 110 will evaluate a potential path that rolls through the inverted attitude to wings level. Control system 110 then commences a nose low recovery, arresting the roll and initiating roll in the shorted direction to commence the recovery. By commanding the selected trajectory, control system 110 ensures that the evaluated trajectory is the recovery flown by aircraft 100. For example, when the recovery trajectory predicts a roll through recovery, the recovery autopilot executes a roll-through recovery rather than a non-roll through recovery.


In the example provided, recovery autopilot module 235 is configured to guide the aircraft using the algorithm:














• If Nose high (Losing Speed) or Insufficient Maneuver margin:


   - Commanded g = 0.8 g


   - Commanded Bank = +60/−60 (as directed by TPA) Until


     Rollout Point


   - Commanded Power = Full


   - Commanded Speedbrake = retract


• If Nose Low (Gaining Speed)


   - Commanded g = 1.2 g (0.8 g if bank >90)


   - Commanded Bank = 0 (roll through in TPA directed direction)


   - Commanded Power = Idle


   - Commanded Speedbrake = Hold


• Speed Constant (within desired margin)


   - Commanded g = Speed on elevator for Vclimb


   - Commanded Bank = −30, 0, +30 (as directed by TPA)


   - Commanded Power = Full


   - Commanded Speedbrake = retract









While at least one exemplary embodiment has been presented in the foregoing detailed description, it should be appreciated that a vast number of variations exist. It should also be appreciated that the exemplary embodiment or exemplary embodiments are only examples, and are not intended to limit the scope, applicability, or configuration of the disclosure in any way. Rather, the foregoing detailed description will provide those skilled in the art with a convenient road map for implementing the exemplary embodiment or exemplary embodiments. It should be understood that various changes can be made in the function and arrangement of elements without departing from the scope of the disclosure as set forth in the appended claims and the legal equivalents thereof

Claims
  • 1. An avionics system for an aircraft, the avionics system including at least one processor configured to: generate a plurality of possible recovery trajectories for the aircraft, each of the plurality of possible recovery trajectories describing a potential aircraft path relative to a current flight condition;select a possible recovery trajectory from the plurality of possible recovery trajectories, and for the selected possible recovery trajectory: calculate an energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory;estimate a modeled flight condition of the aircraft along the potential aircraft path of the selected possible recovery trajectory based at least in part on the calculated energy state of the aircraft on the potential aircraft path, where the modeled flight condition of the aircraft includes at least an estimate an airspeed of the aircraft on the potential aircraft path;generate an indication of impending violation responsive to determining the modeled flight condition violates an aircraft limit; andguide the aircraft along one of the plurality of possible recovery trajectories in response to the indication of impending violation.
  • 2. The avionics system of claim 1, wherein the at least one processor is further configured to: repeatedly select a next possible recovery trajectory from the plurality of possible recovery trajectories, and for each selected next possible recovery trajectory: calculate an energy state of the aircraft on the potential aircraft path of the selected next possible recovery trajectory;estimate a modeled flight condition of the aircraft along the potential aircraft path of the selected next possible recovery trajectory based at least in part on the calculated energy state of the aircraft on the potential aircraft path, where the modeled flight condition of the aircraft includes at least an estimate an airspeed of the aircraft on the potential aircraft path; andgenerate a next indication of impending violation responsive to determining the modeled flight condition violates the aircraft limit.
  • 3. The avionics system of claim 2, wherein the plurality of possible recovery trajectories for the aircraft comprises at least six possible recovery trajectories, each of the at least six possible recovery trajectories describing a different potential aircraft path relative to the current flight condition.
  • 4. The avionics system of claim 2, wherein the at least one processor is configured to guide the aircraft along the one of the plurality of possible recovery trajectories in response to the indication of impending violation by the avionics system further comprising a recovery autopilot configured to guide the aircraft along the one of the plurality of possible recovery trajectories in response to the one of the plurality of possible recovery trajectories being a last trajectory of the plurality of possible recovery trajectories to lack an indication of impending violation.
  • 5. The avionics system of claim 1, wherein the aircraft limit comprises at least one of a maximum speed limit, a minimum speed limit, a Mach limit, and a terrain clearance limit.
  • 6. The avionics system of claim 1, wherein the at least one processor is further configured to calculate a vertical velocity of the aircraft on the potential aircraft path of the selected possible recovery trajectory and wherein the at least one processor is configured to estimate the modeled flight condition of the aircraft along the potential aircraft path of the selected next possible recovery trajectory further based at least in part on the calculated vertical velocity of the aircraft on the potential aircraft path.
  • 7. The avionics system of claim 1, wherein the at least one processor is configured to calculate the energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory based at least in part on a rate of climb of the aircraft at full power and on a rate of descent of the aircraft at idle power.
  • 8. The avionics system of claim 1, wherein the at least one processor is configured to calculate the energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory based at least in part on a current power setting of the aircraft, a current power capability of the aircraft, a speedbrake position on the aircraft, a landing gear setting, a flap setting, and an engine health of the aircraft.
  • 9. The avionics system of claim 1, wherein the at least one processor is configured to calculate the energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory and estimate the modeled flight condition of the aircraft along the potential aircraft path of the selected possible recovery trajectory for each time slice in the selected possible recovery trajectory.
  • 10. An aircraft comprising: a sensor system configured to provide aircraft flight condition data;an actuator system configured to manipulate control surfaces of the aircraft; anda control system comprising at least one processor configured to: generate a plurality of possible recovery trajectories for the aircraft, each of the plurality of possible recovery trajectories describing a potential aircraft path relative to a current flight condition;select a possible recovery trajectory from the plurality of possible recovery trajectories, and for the selected possible recovery trajectory: calculate an energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory;estimate a modeled flight condition of the aircraft along the potential aircraft path of the selected possible recovery trajectory based at least in part on the calculated energy state of the aircraft on the potential aircraft path, where the modeled flight condition of the aircraft includes at least an estimate an airspeed of the aircraft on the potential aircraft path;generate an indication of impending violation responsive to determining the modeled flight condition violates an aircraft limit; andguide the aircraft along one of the plurality of possible recovery trajectories in response to the indication of impending violation.
  • 11. The aircraft of claim 10, wherein the at least one processor is further configured to: repeatedly select a next possible recovery trajectory from the plurality of possible recovery trajectories, and for each selected next possible recovery trajectory: calculate an energy state of the aircraft on the potential aircraft path of the selected next possible recovery trajectory;estimate a modeled flight condition of the aircraft along the potential aircraft path of the selected next possible recovery trajectory based at least in part on the calculated energy state of the aircraft on the potential aircraft path, where the modeled flight condition of the aircraft includes at least an estimate an airspeed of the aircraft on the potential aircraft path; andgenerate a next indication of impending violation responsive to determining the modeled flight condition violates the aircraft limit.
  • 12. The aircraft of claim 11, wherein the plurality of possible recovery trajectories for the aircraft comprises at least six possible recovery trajectories, each of the at least six possible recovery trajectories describing a different potential aircraft path relative to the current flight condition.
  • 13. The aircraft of claim 11, wherein the at least one processor is configured to guide the aircraft along the one of the plurality of possible recovery trajectories in response to the indication of impending violation by the control system further comprising a recovery autopilot configured to guide the aircraft along the one of the plurality of possible recovery trajectories in response to the one of the plurality of possible recovery trajectories being a last trajectory of the plurality of possible recovery trajectories to lack an indication of impending violation.
  • 14. The aircraft of claim 10, wherein the aircraft limit comprises at least one of a maximum speed limit, a minimum speed limit, a Mach limit, and a terrain clearance limit.
  • 15. The aircraft of claim 10, wherein the at least one processor is further configured to calculate a vertical velocity of the aircraft on the potential aircraft path of the selected possible recovery trajectory and wherein the at least one processor is configured to estimate the modeled flight condition of the aircraft along the potential aircraft path of the selected next possible recovery trajectory further based at least in part on the calculated vertical velocity of the aircraft on the potential aircraft path.
  • 16. The aircraft of claim 10, wherein the at least one processor is configured to calculate the energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory based at least in part on a rate of climb of the aircraft at full power and on a rate of descent of the aircraft at idle power.
  • 17. The aircraft of claim 10, wherein the at least one processor is configured to calculate the energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory based at least in part on a current power setting of the aircraft, a current power capability of the aircraft, a speedbrake position on the aircraft, a landing gear setting, a flap setting, and an engine health of the aircraft.
  • 18. The aircraft of claim 10, wherein the at least one processor is configured to calculate the energy state of the aircraft on the potential aircraft path of the selected possible recovery trajectory and estimate the modeled flight condition of the aircraft along the potential aircraft path of the selected possible recovery trajectory for each time slice in the selected possible recovery trajectory.
  • 19. An avionics system for an aircraft, the avionics system including at least one processor configured to: generate a plurality of possible recovery trajectories for the aircraft, each of the plurality of possible recovery trajectories describing a potential aircraft path relative to a current flight condition;repeatedly select a possible recovery trajectory from the plurality of possible recovery trajectories, and for the selected possible recovery trajectory: calculate an energy state of the aircraft for time slices along the potential aircraft path of the selected possible recovery trajectory;estimate a modeled flight condition of the aircraft for the time slices along the potential aircraft path of the selected possible recovery trajectory based at least in part on the calculated energy state of the aircraft on the potential aircraft path, where the modeled flight condition of the aircraft includes at least an estimate an airspeed of the aircraft for the time slices along the potential aircraft path; andgenerate an indication of impending violation responsive to determining the modeled flight condition violates any aircraft limit from a plurality of aircraft limits; andguide the aircraft along one of the plurality of possible recovery trajectories in response to the one of the plurality of possible recovery trajectories being a last trajectory of the plurality of possible recovery trajectories relative to the current flight condition to lack an indication of impending violation.
  • 20. The avionics system of claim 19, wherein the plurality of aircraft limits comprise a maximum speed limit, a minimum speed limit, a Mach limit, and a terrain clearance limit.
CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No. 17/248,319 filed Jan. 20, 2021, which is a continuation of U.S. patent application Ser. No. 16/250,240 filed on Jan. 17, 2019, which is a continuation of U.S. patent application Ser. No. 15/470,776 filed on Mar. 27, 2017. The disclosure of the above applications are incorporated herein by reference.

US Referenced Citations (144)
Number Name Date Kind
4390949 Beningfield Jun 1983 A
4573925 Styers Mar 1986 A
5053969 Booth Oct 1991 A
5377937 LaMay Jan 1995 A
5892462 Tran Apr 1999 A
6122570 Muller et al. Sep 2000 A
6216065 Hall et al. Apr 2001 B1
6219592 Muller et al. Apr 2001 B1
6236914 Kaloust May 2001 B1
6246929 Kaloust Jun 2001 B1
6282466 Nolte et al. Aug 2001 B1
6292721 Conner et al. Sep 2001 B1
6317663 Meunier et al. Nov 2001 B1
6332105 Calise et al. Dec 2001 B1
6334344 Bonhoure et al. Jan 2002 B1
6347263 Johnson et al. Feb 2002 B1
6421603 Pratt et al. Jul 2002 B1
6437707 Johnson Aug 2002 B1
6445310 Bateman et al. Sep 2002 B1
6452511 Kelly et al. Sep 2002 B1
6480120 Meunier Nov 2002 B1
6484072 Anderson Nov 2002 B1
6538581 Cowie Mar 2003 B2
6567727 Westphal May 2003 B2
6567728 Kelly et al. May 2003 B1
6591170 Block et al. Jul 2003 B2
6643580 Naimer Nov 2003 B1
6675076 Moody Jan 2004 B1
6691004 Johnson et al. Feb 2004 B2
6873903 Baiada et al. Mar 2005 B2
6889124 Block et al. May 2005 B2
6986486 Darbyshire Jan 2006 B2
7098810 Bateman et al. Aug 2006 B2
7120540 Meunier Oct 2006 B2
7132960 Glover Nov 2006 B2
7212917 Wilson, Jr. May 2007 B2
7236104 Tran Jun 2007 B2
7271741 Delaplace et al. Sep 2007 B2
7295134 Jourdan et al. Nov 2007 B2
7321813 Meunier Jan 2008 B2
7366591 Hartmann et al. Apr 2008 B2
7382283 Delaplace et al. Jun 2008 B2
7437246 Kelly et al. Oct 2008 B2
7570177 Reynolds et al. Aug 2009 B2
7571878 Persson et al. Aug 2009 B2
7589646 Glover Sep 2009 B2
7761193 Artini et al. Jul 2010 B2
7786900 Bitar et al. Aug 2010 B2
7826971 Fontaine et al. Nov 2010 B2
7835866 Tzidon Nov 2010 B2
7844373 Deker Nov 2010 B2
7899613 Artini Mar 2011 B2
7899620 Jourdan et al. Mar 2011 B2
7948404 Tran May 2011 B2
8010288 Bouchet et al. Aug 2011 B2
8140264 Salmon et al. Mar 2012 B2
8165733 Caldeira et al. Apr 2012 B2
8184020 He May 2012 B2
8190308 Pitard et al. May 2012 B2
8195346 Duerksen et al. Jun 2012 B1
8200421 Botargues et al. Jun 2012 B2
8214089 Caldeira et al. Jul 2012 B2
8249761 Persson et al. Aug 2012 B2
8249799 Flotte et al. Aug 2012 B2
8355861 Petrini Jan 2013 B2
8463461 Estkowski et al. Jun 2013 B2
8483889 Ishihara et al. Jul 2013 B2
8494766 Walter et al. Jul 2013 B2
8521340 Coulmeau Aug 2013 B2
8548727 Kauffman et al. Oct 2013 B2
8700231 Skarman Apr 2014 B2
8744768 Gutierez-Castaneda et al. Jun 2014 B2
8751070 Silly et al. Jun 2014 B2
8768556 Ben-Arie et al. Jul 2014 B2
8818576 Maldonado et al. Aug 2014 B2
8818577 Louise et al. Aug 2014 B2
8897935 Meunier et al. Nov 2014 B2
8948937 Constans et al. Feb 2015 B2
8965603 Baillon et al. Feb 2015 B2
9002542 Dehais et al. Apr 2015 B2
9008870 Redmond et al. Apr 2015 B2
9020662 Felix et al. Apr 2015 B2
9046894 Bouniol et al. Jun 2015 B2
9051058 Caule et al. Jun 2015 B2
9061756 Jang et al. Jun 2015 B2
9092980 Botargues et al. Jul 2015 B2
9174742 Nelson Nov 2015 B2
9177479 Castillo-Effen et al. Nov 2015 B2
9196165 La Civita et al. Nov 2015 B2
9199744 Petillon Dec 2015 B2
9218002 Schulte et al. Dec 2015 B2
9261883 Ishihara et al. Feb 2016 B2
9286807 Sundqvist Mar 2016 B2
9304514 Kozlow et al. Apr 2016 B2
9315258 Moune et al. Apr 2016 B2
9405295 Polati De Souza et al. Aug 2016 B2
9412072 Chi et al. Aug 2016 B2
9440747 Welsh et al. Sep 2016 B1
9442490 Kumar Mn et al. Sep 2016 B2
9499279 He et al. Nov 2016 B2
9536432 Laurent et al. Jan 2017 B2
9547993 Khatwa et al. Jan 2017 B2
9587961 Toumazet et al. Mar 2017 B2
9625271 Ridenour, II Apr 2017 B2
9633567 Skoog et al. Apr 2017 B1
9741254 Navarro et al. Aug 2017 B2
9824594 Lissajoux et al. Nov 2017 B2
9898934 Wang et al. Feb 2018 B2
9938018 Welsh et al. Apr 2018 B2
10008122 Hardt et al. Jun 2018 B2
10228692 Prosser Mar 2019 B2
10930164 Prosser Feb 2021 B2
11580865 Prosser Feb 2023 B2
20020161489 Johnson Oct 2002 A1
20030107499 Lepere et al. Jun 2003 A1
20040059474 Boorman Mar 2004 A1
20040148103 Chiuo et al. Jul 2004 A1
20050261811 Artini et al. Nov 2005 A1
20060158350 Glover Jul 2006 A1
20080133120 Romanick Jun 2008 A1
20080177429 Berglund et al. Jul 2008 A1
20080208400 Bouchet et al. Aug 2008 A1
20090150008 Villaume Jun 2009 A1
20100250032 Gremmert Sep 2010 A1
20100324772 Aral Dec 2010 A1
20110029162 Ishihara et al. Feb 2011 A1
20120089375 Kordt et al. Apr 2012 A1
20120179368 Walter Jul 2012 A1
20130226373 Bollapragada et al. Aug 2013 A1
20140121863 Barraci May 2014 A1
20140358415 McDonald et al. Dec 2014 A1
20150298821 Ishihara et al. Oct 2015 A1
20160096616 Li Apr 2016 A1
20160225269 Nikolajevic et al. Aug 2016 A1
20160231743 Bendewald Aug 2016 A1
20160232796 Oldach Aug 2016 A1
20170018192 Borgyos Jan 2017 A1
20170038223 Toumazet Feb 2017 A1
20170132942 Mere May 2017 A1
20170139425 Miranda De Souza May 2017 A1
20170301247 Sherry et al. Oct 2017 A1
20170358226 Hodges et al. Dec 2017 A1
20170372619 Borgyos Dec 2017 A1
20180088594 Moon Mar 2018 A1
Foreign Referenced Citations (7)
Number Date Country
101198997 Jun 2008 CN
102610126 Jul 2012 CN
105427379 Mar 2016 CN
105843042 Aug 2016 CN
102010021676 Dec 2011 DE
0747655 Dec 1996 EP
WO-2016111594 Jul 2016 WO
Non-Patent Literature Citations (1)
Entry
Russian Federation Federal Service for Intellectual Property (Rospatent), Inquiry substantive examination in Russian Application No. 2019 133 197, dated Jan. 26, 2021.
Related Publications (1)
Number Date Country
20230154343 A1 May 2023 US
Continuations (3)
Number Date Country
Parent 17248319 Jan 2021 US
Child 18155335 US
Parent 16250240 Jan 2019 US
Child 17248319 US
Parent 15470776 Mar 2017 US
Child 16250240 US