This is the first application filed for the present invention.
Not Applicable.
The present invention relates to digital signal processing systems, and in particular to low cost, high integrity digital signal processing methods and systems.
In general, all digital signal processing systems utilize a digital hardware path for processing digital input data. This digital hardware path can be composed of any combination of “hardwired” special purpose digital logic and software-driven microprocessor circuitry required to process the digital input data to yield a desired result. Such digital signal processing systems are becoming increasingly popular for use in safety of life applications, such as, for example, aviation electronics (avionics) such as navigation, precision approach, flight management, and medical electronic systems.
The use of the NAVSTAR Global Positioning System (commonly referred to as GPS) for navigation is well known in the art. For aviation navigation, a GPS receiver is installed in an aircraft, and provides accurate Position, Velocity and Time (PVT) data. In precision approach applications it's understood that PVT information and angular guidance are equivalent. The accuracy of the PVT data will normally depend on the number of GPS satellites that are “visible” to the GPS receiver. Generally, PVT accuracy increases with the number of visible satellites, but beyond 12 satellites, any further accuracy improvements are marginal.
Significant accuracy and integrity improvements can be obtained using the Wide Area Augmentation System (WAAS), which uses geo-synchronous WAAS Satellites to supplement the GPS satellite constellation. In ICAO terminology, WAAS is understood to be a Space Based Augmentation System (SBAS).
The Local Area Augmentation System (LAAS) is a ground based augmentation to GPS that focuses its service in the immediate vicinity of an airport (e.g., within a 20 nautical mile radius of the airport). The LAAS broadcasts differential GPS correction and integrity messages from a ground-based Very High Frequency (VHF) transmitter. LAAS has demonstrated a position accuracy of less than 1 meter in both the horizontal and vertical axis. In ICAO terminology, LAAS is understood to be a Ground Based Augmentation System (GBAS).
There is great interest in using augmented GPS with WAAS and/or LAAS as a replacement for the traditional radio beacon-based Instrument Landing System (ILS). While WAAS is envisioned to support Federal Aviation Administration (FAA) Category I Precision Approach, LAAS has been proposed as a technique for meeting the extremely high accuracy, availability, continuity, and integrity necessary for Category I, II, and III precision approaches.
However, an impediment to the adoption of GPS (WAAS and/or LAAS) Precision Approach (for category I, II, and III) is that the GPS receiver installed in an aircraft must simultaneously satisfy the applicable accuracy, availability, continuity, and integrity requirements.
In order to satisfy the FAA Category I (CAT-1) requirements, the Probability of Continuity of Operation (PCO) must be very high (e.g., at least 0.99999); and the Probability of Hazardously Misleading Information (PHMI) must be very low (e.g., 10−7 or less).
Note that algorithms and software that are provably adequate for CAT-1 (or even CAT-2/3) are known. The difficulty is in establishing the GPS receiver system correctness as a result of data processing error whatever the cause (e.g. hardware failure, poor signal quality). The GPS receiver system must provably process the data correctly, as the algorithms/software intended, with a PHMI of less than 10−7. Typically, the GPS receiver PHMI works out to about 10−5, which effectively precludes achievement of the CAT-1 PMHI requirement.
GPS receiver systems capable of achieving a PCO of 0.99999 with a PHMI of 10−7 or less are known in the art. As shown in
An alternative approach is illustrated in
Statistical processes can then be used to compare (at 24) the respective PVT data 20 generated by each of the two parallel hardware paths 4, to generate final output data 26. This operation can be performed by a central processing unit (not shown) which runs independently of the hardware paths 4, or by one of the microprocessors 12, as desired. In either case, this dual path architecture can be shown to yield a PHMI of about 10−10 for the final PVT data 22, even when each path 4 has a respective PHMI of about 10−5. What allows this is the fact that different processing paths will cause statistically independent computational failures. When these computational results are compared to determine whether a computation fault has occurred, then the probability of both computational paths making the same error is the product of the individual error probabilities. Therefore two independent failures with a probability of 10−5 when cross-checked yield a probability of error of (10−5)2=10−10.
It is instructive to note that the aviation industry loosely refers to such GPS systems as a “dual” GPS receiver, implying dual and independent digital hardware paths. It has been the industry practice to have two separate hardware paths with corresponding independent software processes that can detect a computational error before that error can adversely affect aircraft guidance used, for example, during a precision approach. The reason why such dual hardware paths are used is because the single path GPS receivers typically do not have the capability to check their own results for correctness at a level that meets or exceeds the PHMI requirements imposed by Category I or higher Precision Approaches. The solution thus far has been to use two independent hardware paths 4 with the corresponding independent software processes to detect errors.
The prior art high integrity digital signal processing systems, such as the GPS systems 2 illustrated in
An additional limitation of the prior art is that the use of two paths 4 in parallel effectively doubles the hardware, which, in turn, doubles the probability of a hardware failure. This has the undesirable effect of lowering the PCO of the overall system.
Accordingly, low cost high integrity digital processing systems and methods, suitable for safety of life applications remain highly desirable.
An object of the present invention is to provide a low cost, high integrity digital signal processing system.
Accordingly, an aspect of the present invention provides a high integrity GPS receiver system. The system comprises: a multichannel correlators for detecting each satellite signal, and for generating respective phase and timing information of each satellite signal; a microprocessor; and at least two algorithmically distinct (unless verified by other techniques such as continuous built-in testing) and mathematically equivalent computation processes implemented within the microprocessor for independently determining respective position data from the phase and timing information of each satellite signal.
A further aspect of the present invention provides a method for determining at least position data using a plurality of satellite signals received from a respective plurality of satellites. The method comprises steps of: providing a multichannel correlator for detecting each satellite signal, and for generating respective phase and timing information of each satellite signal; providing a microprocessor; and implementing at least two algorithmically distinct (unless verified by other techniques such as continuous built-in testing) and mathematically equivalent processes within the microprocessor for independently determining respective position data from the phase and timing information of each satellite signal.
A further (another) aspect of the present invention provides a method for determining the integrity of the RF block. It is recognized that it is rather difficult and costly to determine whether the RF block contributes to the lose of GPS PVT integrity due to component failure. Should there be an RF block integrity failure, the received GPS signals could undergo enough distortion/degradation so as to cause an undetectable PVT error. One aspect of this invention provides a simple and cost-effective means of detecting such a failure. This aspect is that there are more than one RF blocks on the GPS receiver. These RF blocks use the same reference oscillator and feed their down-converted signals to any one of the digital processing channels or correlators. This architecture provides the means for generating the PVT solution from each RF block for comparison. Should there be a large discrepancy, one of the RF blocks would be determined to have failed. Note that signal comparison can be performed prior to a PVT solution. Clearly, this technique includes any antennae failures as well. These RF blocks can also be used as data sources for the above mentioned independent algorithms.
Further features and advantages of the present invention will become apparent from the following detailed description, taken in combination with the appended drawings, in which:
a and 1b are block diagrams schematically illustrating principle elements of respective conventional high-integrity GPS receiver systems;
It will be noted that throughout the appended drawings, like features are identified by like reference numerals.
The present invention provides a low cost, high integrity digital processing methods and techniques, which are suitable for safety of life applications. Typical applications include medical electronics and aviation electronics (avionics) such as aircraft navigation, precision approach and flight management systems. By way of example only, the present invention is described by way of a GPS receiver system capable of satisfying the FAA mandated CAT-1 (or higher) requirements for precision approaches. Embodiments of a GPS receiver system in accordance with the present invention will be described below, by way of example, with reference to
As discussed above, in order to achieve satisfactory position accuracy, each software process 34 operates on phase and timing information from all satellites in view, up to at least 8 but preferably 12. In the embodiment of
As may be appreciated, the correlator channels 18 of each set 40 will yield respective different phase and timing information 42 for each satellite. While this phase and timing information 42 will be of substantially equivalent accuracy, the values will be different, as a result of the different loop control techniques (and/or bandwidth) implemented within each set 40. This approach increases the level of distinctiveness of the processes, each software process 34 not only uses different algorithms but also operates on different phase and timing data. This improves the ability of the compare 38 to detect errors. Obviously, impairments within any one channel within the pair that processes the same satellite will produces a different result for each channel. Furthermore, poor signal quality present at the antenna 6 (e.g. due to RF interference) or due to an impairment within the RF block 8 (e.g. due to common mode noise) will also propagate through the correlator 28 differently within each logical path 32 because of the different properties of the algorithms in the presence of poor quality signals.
Various known event scheduling and/or task management techniques may be used to control the microprocessor 32 to independently execute each of the software processes 34. For example, each software process 34 may be divided into discrete operational steps or sub-processes (not shown), in which case steps (or sub-processes) of each of the processes 34 may be “interleaved” so that each process 34 generates its respective PVT data 36 substantially simultaneously. Alternatively, each computation process 34 may be executed in turn, and the resulting PVT data 36 of each process 34 then processed (not shown) to compensate for the time lag between generation of the PVT data 36 of each process 34. If desired, software processes 34 may be controlled to execute at different rates. For example, one software process 34 may be controlled to execute at a much slower rate, which is limited only by the time to alarm requirement of the application. The resulting PVT data 36 of each of the processes 34 can then compared (at 38) at the lower rate.
As discussed above, because different loop control methods are implemented within each set 40 of correlator channels 18, most common mode errors generated in the RF block 8 or due to poor signal quality at the antenna 6 will propagate through the correlator 30 differently in each set 40. For common mode errors having a large enough magnitude to be of significance in the application, this will produce statistically significant differences between the phase and timing data 42 generated by set 40 of channels 18. Furthermore, because of the algorithmic differences between each of the software processes 34 implemented in the microprocessor 32, any statistically significant differences in the phase and timing information 42 will yield a correspondingly statistically significant difference in the PVT data 36 generated by each process 34. As a result, most common mode errors occurring within the RF block a and/or A/D converter 15 can be detected by comparing the PVT data 36 generated by each of the processes 34. In addition, the actual measurements of pseudo range and delta range may be compared prior to a comparison of the PVT solutions. More importantly, however, any computation errors occurring within each process 34 (e.g. due to a fault of either the correlator 10 or the microprocessor 12) will also propagate through each process 34 differently, and produce a statistically significant difference between the PVT data 36 generated by each process 34. It is therefore possible to detect the presence of a computation error occurring in either the correlator 10 or the microprocessor 12 of the GPS receiver 2. As may be appreciated, this type of operation is simply not possible in prior art GPS receivers 4 (see
As may be appreciated, more than two processes 34 may be utilized within the microprocessor 12, if desired. The primary limitations here are that the correlator 10 must provide sufficient channels 18 to permit calculation of sufficiently accurate PVT data 36 by each process 34, and the microprocessor 12 must be capable of operating at sufficient speed to enable each software process 34 to execute within the available time. For example, in order to satisfy CAT-1, the GPS system 2, as a whole, must update position data at a rate of at least 5 but often at 10 times per second. In order to meet this requirement, all of the computation processes 34 must be able to generate respective PVT data 36 within the available 0.1 second update period. Provided that this computational performance can be maintained by the microprocessor 12, three or more software processes 34 may be implemented within the microprocessor 12. As may be appreciated, this has an advantage in that a voting scheme may be implemented (e.g. at 38) so that continued guidance of a precision approach may be possible even in the event of a computational error effecting one of the software processes 34.
In the case where a single RF block 8 is present, a failure in one RF block 8 may not be detectable. In the case of GPS, examining the code correlation function may not provide any indication of a signal anomaly induced by a failure in the RF block. However, two or more RF blocks 8 provide the means to determine independent PVT solutions that can be compared to determine the integrity of the RF blocks 8.
The embodiment(s) of the invention described above is(are) intended to be exemplary only. The scope of the invention is therefore intended to be limited solely by the scope of the appended claims.