Electronic avionics systems and methods

Abstract

The present general inventive concept relates to a system of method having an electronic flight display that meets the FAR 23.1311(b) regulatory requirement for redundant backup instruments in the cockpit. The present general inventive concept also provides a system and method to detect failures, obstructions, or improper operation of the aircraft pitot pressure sensing system using a combination of dissimilar sensor data that is independent from each other, e.g., allocated from different sources and employed for different purposes on different displays, and displays information on an avionics display screen.

Description

BACKGROUND

Field

The present general inventive concept relates to electronic avionics systems and methods, more particularly, the present general inventive concept relates to systems and methods to detect and/or provide backup in the event of failures, obstructions, or improper operation of an aircraft pitot pressure sensing system or other failures of instruments. In one embodiment, the present general inventive concept relates to a unique electronic flight display architecture that meets the FAR 23.1311(b) regulatory requirement for redundant backup instruments in the cockpit. In another embodiment the general inventive concept uses a combination of dissimilar sensor data and displays information to an avionics display.

Description of Related Art

The FAA Advisory Circular 23.1311-1B sets forth acceptable means of showing compliance with 14 CFR §23 for installing electronic displays in part 23 airplanes. Among other things, it requires a reversionary or backup architecture for electronic primary flight displays, or an equivalent level of safety.

Pitot pressure and ambient static pressure are used to determine aircraft indicated airspeed, which is a critical performance determinant of the aircraft and which is also often used to schedule the performance or operation of various aircraft systems, e.g., trim motors, artificial feel systems, envelope protection systems, or may be used in the computation of other flight parameters, e.g., attitude information from an Air Data Attitude Heading Reference System (ADAHRS).

Where failure of the pitot system is a critical failure, conventional aircraft design implements a pitot sensing architecture with sufficient redundancy to assure availability of reliable data. Examples of such redundancy architectures are dual redundant pitot probes with dual redundant and monitored heating elements, with each probe heater connected to a different power generation source. In many legacy light aircraft, the installed pitot system does not possess sufficient redundancy to assure availability of the accurate data, which can result in use of misleading data and/or which generally precludes the use of data in performing critical functions, and retrofitting such legacy aircraft with redundant pitot systems is extremely difficult and costly.

SUMMARY

The present general inventive concept relates to a system of method having an electronic flight display that meets the FAR 23.1311(b) regulatory requirement for redundant backup instruments in the cockpit. The present general inventive concept also relates to a system and method to detect failures, obstructions, or improper operation of the aircraft pitot pressure sensing system using a combination of dissimilar sensor data.

The foregoing and other objects are intended to be illustrative of the invention and are not meant in a limiting sense. Many possible embodiments of the invention may be made and will be readily evident upon a study of the following specification and accompanying drawings comprising a part thereof. Various features and subcombinations of invention may be employed without reference to other features and subcombinations. Other objects and advantages of this invention will become apparent from the following description taken in connection with the accompanying drawings, wherein is set forth by way of illustration and example, an embodiment of this invention and various features thereof.

BRIEF DESCRIPTION OF THE DRAWINGS

These and/or other aspects and utilities of the present general inventive concept will become apparent and more readily appreciated from the following description of the embodiments, taken in conjunction with the accompanying drawings. For the purpose of illustration, forms of the present general inventive concept which are presently preferred are shown in the drawings; it being understood, however, that the general inventive concept is not limited to the precise arrangements and instrumentalities shown. In the drawings:

FIG. 1 is an exemplary embodiment of the present general inventive concept.

FIG. 2 is a flowchart of an exemplary embodiment of the present general inventive concept.

DETAILED DESCRIPTION

The present general inventive concept provides systems and methods that relate to a reversionary or backup architecture for electronic primary flight displays, or an equivalent level of safety.

Referring to FIG. 1, the present general inventive concept provides a system having two electronic displays 10, 20 that operate identical hardware and software and where the function of the display can be configured at installation, and where each display has both an integral air data computer and an attitude heading reference computer (“attitude computer”), or is connected to external air data and attitude computer(s). Preferably, one of the two displays 10, 20 is configured as a primary flight display and the other is configured as a Multi Function Display (MFD). For example, the electronic avionics display might include the Electronic Flight Data Display Instrument disclosed in U.S. patent application Ser. No. 11/773,419, the entire disclosure of which is herein incorporated by reference. It will be appreciated that the air data computer and attitude heading reference computer for each display may be integrated together into each separate display, or may be separate independent computers utilized by each display. Furthermore, it will be appreciated that a single computer processor may be utilized for each display that performs the functions of both computers, and or other processor functions that may be necessary for operation of said display. Other independent computers, processors or other hardware (independent for each processor) may be utilized in combination with separate air data and attitude computers for performing other functions of each display. Furthermore, in some embodiments, the air data computer and the attitude computer of each display comprise sub-routines or functions performed by a single processor.

When configured as a primary flight display, the present general inventive concept has a single operating mode. When configured as a Multi Function Display, the present general inventive concept has at least two operating modes, one of which is as a Primary Flight Display accessible either via a single pilot action or via automatic transition.

The two displays 10, 20 intercommunicate with one another via a communications connection 30 to share essential information, such as pilot settings and unit health, or other data or information that may be determined or obtained by one display and usable by the other display. This connection may be by a wired or wireless data communication, and may use industry standard interfaces such as RS232, ARINC 429, USB, Ethernet, Bluetooth, 802.11, etc. Data exchange can include, but is not limited to, items such as unit heath, failures, pilot configured display settings, heartbeat, etc. The displays 10, 20 installed in the aircraft allow the removal of redundant mechanical instruments typically required by regulation. The MFD display that provides the backup capability need not continuously display primary flight information so long as that information remains accessible via a single pilot action.

Each display 10, 20 is powered by a power source 50, 60 independent from the other. For example, a first display 10 is configured as a PFD and is powered by a first power source 50 and a second display 20 is configured as a MFD (with reversionary PFD backup capability) and is powered by a second power source 60, and the first power source 50 is independent of the second power source 60. In one embodiment, this is accomplished using a dedicated external battery 50, 60 that is charged by a display head. In a second embodiment, this would be accomplished using a different aircraft alternator or generator powering a different electrical bus. In yet a third embodiment, this may be accomplished by operating from an emergency bus and battery powered by a single alternator or generator that can be isolated from the aircraft primary bus.

The independent power sources, and other hardware (i.e. air data computer and attitude computer) for each display, allows the displays to operate independent of one another, such that neither display depends upon the other display to perform critical functions. If one display goes out, the other one is unaffected. Notwithstanding, it will be appreciated that information/data and/or other resources may be shared between both displays when both displays are functioning properly. If the attitude and heading reference system of one of the displays fails, the other attitude and heading reference system of the other display is unaffected. In some embodiments, if the attitude and heading reference system of the MFD fails, the MFD can use heading data for non-critical functions from the PFD. In some such embodiments, if the attitude and reference heading system of the PFD fails, the MFD will go into reversionary mode.

In some embodiments, the present general inventive concept includes an input device to change the configuration of the display from a MFD to a PFD. For example, the input device could be a dedicated button or a hot key button. In this manner, a single pilot action, pressing the button, would provide immediate reversion to the PFD, thus satisfying FAA requirements.

In some embodiments, the communications connection 30 communicates the status of each display (or is used to transmit the status of each display or detect the absence of a status message from one display to another display). In the event that the PFD fails, information from the PFD is communicated (or information that is communicated to confirm proper function ceases to communicate) via the communications connection 30 to the MFD which uses such information, or lack of information to make a determination to automatically revert to the PFD configuration (if the MFD is programmed to do so). In some embodiments, the MFD and PFD include identical software in which configuration software for each device tells or instruction the device on boot up to operate either as an MFD or a PFD, and if as an MFD whether to operate with or without a reversion mode. In preferred devices in which the MFD may revert to a PFD (either automatically, or manually), upon reversion, the MFD become a mirror of the PFD display and in how in interfaces with other equipment on the airplane.

In one configuration, where the multi-function display requires pilot action to switch to a primary flight display, a third independent attitude instrument may be retained to ensure that information needed for safe operation is available without pilot action. This configuration offers the advantage of providing relief from the regulatory requirement to configure the multifunction display as a primary flight display prior to entering critical phases of flight, thereby allowing the multifunction display to continue to operate as such during those flight phases.

In another configuration where the multi-function display can automatically switch to a primary flight display after detecting a failure of the display configured as a primary flight display then a third independent attitude instrument is not installed.

In yet another configuration a third independent attitude indicator is not required and a pilot action is required to switch the multifunction display to a primary flight display. In each configuration the redundant airspeed and altitude instruments typically required by the regulation is not installed.

The exemplary embodiment of the present general inventive concept is implemented as a software algorithm, e.g., computer readable codes, on a computer readable medium such as firmware of an electronic avionics display, such as the electronic avionics devices shown and described in U.S. Provisional Patent Application Ser. No. 61/367,041, entitled “Avionics Display”, filed Jul. 23, 2010, or U.S. Provisional Patent Application Ser. No. 61/367,058, entitled “Avionics Display”, filed July 23, 2010 (the entire disclosures of which are incorporated herein by reference). For instance, a setup procedure may be stored in a database such that, upon request by a user, the setup requests information permits a user to assign a function to the displays 10, 20. Depending on the inputted data, the present general inventive concept will assign a function to one or both of the displays 10, 20.

To assure the integrity of the system, adequate redundancy, and reliability of the flight data used, some embodiments of the present inventive concept are operably connected to two pitot pressure systems, each operating independent of the other, thus assuring at least one reliable source of pitot pressure system data in the event of a single pitot system failure. In other embodiments of the present inventive concept, flight data displayed on one or both of the displays 10, 20 is derived from a single pitot pressure system, thus calling into question the integrity of the system and the flight data relied upon therein. For embodiments employing a single pitot pressure system, the variations and sub-combinations of the present general inventive concept described below are recommended to provide adequate redundancy and backup. Nevertheless, it will be appreciated that some embodiments employing a single pitot pressure system will utilize the variations and sub-combinations of the present general inventive concept described above with respect to FIG. 1 without utilizing the variations and sub-combinations of the present general inventive concept described below with respect to FIG. 2.

The present general inventive concept provides systems and methods whereby obstruction or failures of an unreliable aircraft pitot pressure sensing system (including pitot tube or static pressure tube) is detected, using independent dissimilar information, and corrected, enabling the use of aircraft pitot information to perform critical flight functions. The present general inventive concept employs multiple dissimilar sensor inputs to compute critical flight parameters or schedule the performance or operation of critical flight systems. One example of a critical function performed in a light aircraft is the computation and display of aircraft attitude.

Modern certification rules pertaining to electronic flight displays require that at least two sources of attitude information be installed such that one reliable display of attitude data remain available following any single failure in the aircraft, and that a single failure can not present simultaneous misleading data on more than one display.

Modern low cost attitude heading reference systems employ a mathematical process by which attitude is derived using a combination of low cost sensor data, including information from an aircraft pitot sensor. To install more than one such attitude sensing platform requires that a means be implemented to ensure that no single failure can result in either the loss of all attitude data, or present misleading data on more than one display.

In the case of pitot data, most light aircraft only include a single pitot system, as it is cost prohibitive to add a second pitot system. Larger aircraft that rely on pitot data for critical systems will typically be certified with two, or three, independent pitot systems, adding cost and complexity to their designs, which can be more easily absorbed in the overall costs associated with such larger aircraft. In single-pitot systems, ensuring that a single failure does not result in loss of attitude data, or presenting misleading data requires a means be developed to detect critical failures of the single-pitot sensing system, such as may occur in flight due to an inadvertent¹ encounter with in-flight icing conditions. ¹ Most pitot tubes include heaters to prevent ice from forming and blocking the pitot tube. Nevertheless, pilots often forget to turn on the heaters in potential icing situations and ice forms. Upon activation of the heater, assuming the heater has not failed, the ice melts and normal system operation is restored.

The present general inventive concept compares information from a device that measures the aircraft ground speed, such as a GPS receiver (or Inertial Navigation System, Doppler radar system, or similar). The aircraft ground speed is compared to and correlated with the pitot pressure and/or air-speed to determine if the pitot pressure (or static pressure of the pitot system) has been corrupted. When the monitor determines that the pitot (or static) pressure is corrupted, downstream critical systems that rely on correct pitot pressure are advised of the potentially corrupted data so that they can, as appropriate, be flagged as invalid or transition into a fail-safe operating mode.

The present general inventive concept compares groundspeed to the computed indicated airspeed to determine if the aircraft is airborne according to one data type, yet not airborne according to the other data type. Under these circumstances the pitot data is flagged as invalid as previously described.

For example, in the case of a multiple ADAHRS architecture where the attitude solution is dependent on reliable airspeed data input, a sensed failure or degradation of the pitot input can be, and in certain embodiments is, used to flag the attitude solution as invalid or “fail-hard.”

In this manner, two displays of misleading attitude are not simultaneously presented to the pilot.

In another embodiment, the attitude solution is capable of transitioning to an alternate aiding source, such as substituting the critical airspeed input with a surrogate for airspeed, such as independently derived aircraft groundspeed, i.e., “fail-soft.”

Yet another embodiment substitutes a fixed airspeed input into the ADAHARS solution as a surrogate for actual airspeed. In this case, the fixed airspeed value is selected in such a manner to ensure that any degradation of attitude system performance was not unsafe, e.g., “fail-fixed,” “fail-safe.”

Other embodiments of the invention may be used to detect and mitigate the effect of a failed airspeed input to other critical flight systems, for example envelope protection systems (e.g., stick shaker, pusher, rudder boost, etc.) artificial feel systems, flap actuator scheduling systems, trim actuator scheduling systems, autopilot gain scheduling systems, and/or FADEC control scheduling systems.

In use, as illustrated in FIG. 2, a first data 10 and a second data 20 that is dissimilar from the first data 10 is transmitted to a comparator 30. In one embodiment, all data goes through the comparator 30 before being used by critical systems. In such an embodiment, all critical systems are downstream of the comparator. In another embodiment, data is fed to the critical systems and comparator 30 in parallel.

The comparator 30 is connected to database 60 such that first data 10 and second data 20 can be categorized and compared against each other and ideal data, which is stored in the database 60. The comparator 30 compares the first data 10 to the second data 20 to determine whether either the first data 10 or the second data 20 is corrupt. If one of the first data 10 or the second data 20 is corrupt, the comparator may alter the corrupt data, provide a notification to a user that the data may be corrupt, or cause the other systems that use the data to enter in a fail-hard, fail safe or fail-fixed state. For example, in some embodiments in which all data goes through the comparator prior to being provided to critical systems, the comparator will alter the corrupt data. In other embodiments in which data is provided to comparator 30 and the critical systems in parallel, the comparator will cause the systems that use the data to enter in a fail-hard, fail safe or fail-fixed state (i.e. the comparator takes action to mitigate the effect of failed airspeed input). It is foreseen that the notification may be displayed on either a first display 40 or second display 50.

It will be appreciated that the general inventive concept, as described herein, may be, and in certain embodiments is, used in conjunction with any or all of the general inventive concepts described in U.S. Provisional Patent Application Ser. Nos. 61/228,608, entitled “Information Page Selection System and Method”, 61/228,599, entitled “Altitude Marker System and Method”, 61/228,598, entitled “Multifunction Avionics Display User Interface Method”, 61/228,597, entitled “Dynamic Topography Resolution System and Method of Display”, 61/228,601, entitled “LCD Display Dimming System and Method”, filed Jul. 26, 2009, all five filed on Jul. 26, 2009, the entire disclosures of which are herein incorporated by reference, and also United States Provisional Patent Application Ser. Nos. 61/367,041, entitled “Avionics Display”, filed Jul. 23, 2010, and 61/367,058, entitled “Avionics Display”, both filed Jul. 23, 2010, the entire disclosures of which are herein incorporated by reference.

The exemplary embodiments of the present general inventive concept are implemented as a software algorithm, e.g., computer readable codes, on a computer readable medium. Various other embodiments of the present general inventive concept can be embodied as computer readable codes on a computer readable medium and/or computer readable recording medium (collectively “computer readable recording medium” hereafter). The computer readable recording medium may include any data storage device suitable to store data that can be thereafter read by a computer system. Examples of the computer readable recording medium include, but are not limited to, a read-only memory (ROM), a random-access memory (RAM), CD-ROMs, magnetic tapes, floppy disks, optical data storage devices, and carrier waves (such as data transmission through the Internet). The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. Various embodiments of the present general inventive concept may also be embodied in hardware or in a combination of hardware and software.

Thus, while the present general inventive concept has been shown in the drawings and fully described above with particularity and detail in connection with what is presently deemed to be the most practical and preferred embodiment(s) of the invention, it will be apparent to those of ordinary skill in the art that many modifications thereof may be made without departing from the principles and concepts set forth herein, including, but not limited to, variations in size, materials, shape, form, function and manner of operation, assembly and use.

It is also to be understood that the following claims are intended to cover all of the generic and specific features of the invention herein described, and all statements of the scope of the invention which, as a matter of language, might be said to fall therebetween. Hence, the proper scope of the present general inventive concept should be determined only by the broadest interpretation of the appended claims so as to encompass all such modifications as well as all relationships equivalent to those illustrated in the drawings and described in the specification.

Finally, it will be appreciated that the purpose of the annexed Abstract is to enable the U.S. Patent and Trademark Office and the public generally, and especially the scientists, engineers and practitioners in the art who are not familiar with patent or legal terms or phraseology, to determine quickly from a cursory inspection the nature and essence of the technical disclosure of the application. Accordingly, the Abstract is neither intended to define the invention or the application, which only is measured by the claims, nor is it intended to be limiting as to the scope of the invention in any way.

Claims

1. An electronic avionics system comprising: a comparator operably connected to a data source that derives real-time flight data regarding predetermined flight parameters and operably connected to one or more downstream critical systems that utilize the real-time flight data regarding predetermined flight parameters; anda database accessible by said comparator, said database including ideal flight data regarding said predetermined flight parameters;wherein said comparator categorizes said predetermined flight parameters and compares data from said data source and said ideal flight data regarding said predetermined flight parameters and determines if said data source is deriving corrupt data; andwherein upon determining said data source is deriving corrupt data said comparator takes action to mitigate the effect of said corrupt data on one or more critical systems that utilize the data.

2. The electronic avionics system of claim 1, wherein said ideal flight data comprises a value of real-time flight data from said data source that would be expected based upon real-time flight data derived from at least one of said data source or an other data source.

3. The electronic avionics system of claim 1, wherein a predetermined flight parameter from said data source is pitot pressure.

4. The electronic avionics system of claim 1, wherein a predetermined flight parameter from said data source is ground speed.

5. The electronic avionics system of claim 1, wherein a predetermined flight parameter from said data source is air speed.

6. The electronic avionics system of claim 1, wherein a predetermined flight parameter from said data source is ground speed and an other predetermined flight parameter from at least one of said data source or an other data source is air speed.

7. The electronic avionics system of claim 1, wherein a predetermined flight parameter from said data source is ground speed and an other predetermined flight parameter from at least one of said data source or an other data source is pitot pressure.

8. The electronic avionics system of claim 1, wherein said comparator alters said corrupt data by complete removal of said corrupt data prior to passing data from the comparator to the one or more downstream critical systems that utilize the data.

9. The electronic avionics system of claim 1, wherein said comparator action results in said corrupt data being replaced in critical systems with surrogate data that utilize the data.

10. The electronic avionics system of claim 9, wherein surrogate data is derived from at least one of the data source or an other data source.

11. The electronic avionics system of claim 9, wherein surrogate data is derived from the database.

12. The electronic avionics system of claim 1, wherein said comparator provides a warning notification to downstream critical systems to enable said system to recognize said corrupt data as corrupt.

13. The electronic avionics system of claim 12, wherein said downstream critical systems provides an alert to a user based on recognition of receipt of corrupt data.

14. The electronic avionics system of claim 1, wherein after said comparator compares said data from said data source and said ideal flight data, said comparator passes said data from comparator to one or more downstream critical systems that utilize the data.