Patent Application
20120092193
The present invention relates to an aiding method and device for managing air operations with required navigation and guidance performance, carried out by an aircraft, in particular a transport airplane.
Although not exclusively, the present invention more particularly applies to RNP AR (<<Required Navigation Performance with Authorization Required>>) type operations. Such RNP AR operations are based on a RNAV (<<aRea NAVigation>>) type surface navigation and on RNP (<<Required Navigation Performance>>) type operations. They have the particularity of requiring a special authorization so as to be able to be carried out on an aircraft.
The RNAV type surface navigation allows an aircraft to fly from one <<waypoint>> to another waypoint, and no longer from ground stations (of radio-navigation means of the NAVAID type) to ground stations.
As known, the RNP concept corresponds to a surface navigation for which monitoring and warning means (on board the aircraft) are added, allowing to ensure that the aircraft remains in a corridor, referred to as RNP, around a reference path and authorizing curved paths to be taken into consideration. Outside this corridor there are potentially relieves or other aircrafts. The performance required for a RNP operation type is defined by a RNP value representing half the width (in nautical miles: NM) of the corridor around the reference path, wherein the aircraft should remain for 95% of the time during the operation. A second corridor (around the reference path) having half a width being twice the RNP value is also defined. The probability that the aircraft goes out of this second corridor should be lower than 10−7 per hour of flight.
The RNP AR operation concept is even more requiring. The RNP AR procedures are indeed characterized by:
The air authorities have defined a TLS (<<Target Level of Safety>>) of 10−7 per operation, whatever the type. In the case of the RNP AR operations, as the RNP values are able to go down to 0.1 NM and the obstacles could be located at twice the RNP value of the reference path, such an objective results in a probability that the aircraft goes out of the corridor with half a width D=2·RNP that should not exceed 10−7 per procedure.
The equipment on board aircrafts (flight management system, inertial unit, means for updating GPS data and means for guiding the autopilot), as well as the usual architecture, does not allow to reach the target level of safety, if mitigation operational means are not provided including for the detection and the management of possible breakdowns. This is why a special authorization is required for such a type of operation, so as to ensure that the operational procedures and the training of pilots allow to reach the target level of safety. Furthermore, as the screw should take in charge some breakdowns, aircrafts are to-day not able to ensure a RNP value of 0.1 NM upon a breakdown, as the crew is not able to meet the performance requirements in manual piloting.
On current aircrafts, the monitoring of RNP AR operations is implemented by means of two usual functions, that is:
As previously indicated, current aircrafts are not able to guarantee a RNP value of 0.1 NM upon a breakdown and the crew should be specially trained for following the RNP AR procedures. Indeed, the crew should be able to detect and adequately process breakdowns being able to compromise the on-going operation.
The objective for future aircrafts is to be able to follow the RNP AR procedures with RNP values up to 0.1 NM, and this without restriction (in normal situation and in case of a breakdown) on a start, approach and throttling up. To this end, the crew should no longer be considered as the main means for detecting and processing breakdowns.
The present invention relates to a method for (automatically) aiding the managing of air operations with required navigation and guidance performance, carried out by an aircraft, in particular a transport airplane, allowing the above mentioned drawbacks to be overcome.
To this end, according to the invention, said method for aiding the managing of air operations with required navigation and guidance performance, carried out by an aircraft, being provided with a guidance system comprising at least the following successive stages:
Moreover, advantageously, said global status is shown to the crew of the aircraft, at least in the case of an impairment of said global status, as explained below.
Thus, thanks to this invention, a global status is automatically determined allowing for indicating to the crew the ability of the aircraft to carry out air operations with required performance, preferably RNP AR (<<Required Navigation Performance with Authorization Required>>) type operations, such as mentioned hereinabove.
According to the invention, the detection and the processing of breakdowns are automated, while allowing the crew to be kept informed about the current situation and the impact thereof on the ongoing operation. Thus, the crew are no longer the main means for detecting and processing breakdowns, but merely maintain a safeguarding role. Consequently, while implementing the method according to this invention on an aircraft, the latter is able to implement RNP AR procedures with RNP values up to 0.1 NM, and this without restriction (in normal situation and in case of a breakdown) upon a start, an approach or a throttling up. Moreover, the present invention allows to reduce mitigation means and thus the operational procedures as well as the pilots' training.
In a preferred embodiment, at least some of the following monitorings are implemented allowing, more particularly, determining said global status:
Moreover, in a particular embodiment:
In a preferred, but not exclusive, embodiment, the monitoring statuses are, each time, transmitted to a system arranged directly downstream (in the chain of guidance), that is in the above mentioned particular embodiment: from ADIRS systems to FMS systems and from FMS systems to FOGS systems.
Moreover, advantageously, means are provided being able to emit at least some of the following warnings:
Furthermore, advantageously, the present invention is automatically activated, as explained hereinbelow.
Furthermore, advantageously, at the level of some of said stages, and including at the level of said stage of calculation of the position of the aircraft:
The present invention further relates to an (automatic) device for aiding the managing of air operations with required navigation and guidance performance, and including RNP AR operations, carried out by an aircraft, in particular a transport airplane.
According to the invention, said device of the type comprising a guidance system comprising at least the following successive stages:
The architecture according to this invention for detecting and isolating defective systems is based on a triplex architecture principle (or with N pieces of equipment (N≧3)) and thus provides using three sources, or more, throughout the chain of guidance of the aircraft: the calculation of the position of the aircraft, the managing of the flight plane, the calculation of the path, the calculation of the deviations (the position of the aircraft with respect to the path), and the calculation of the orders of slaving guidance on such a path. Each stage of the chain thus consists in N pieces of equipment (N≧3), allowing breakdowns to be detected and isolated. Moreover, each stage could be made up of identical pieces of equipment (symmetric stage) or of different ones (dissymmetric stage).
The present invention further relates to an aircraft, in particular a transport airplane, being provided with a device such as described hereinabove.
The FIGS. of the appended drawing will better explain how this invention can be implemented. In these FIGS., like reference numerals relate to like components.
The device 1 according to this invention and schematically shown on
Said device 1 of the type having a guidance system 2 comprising at least the following successive stages:
In a preferred embodiment, shown on
According to the invention:
The architecture of the device 1, according to this invention, is therefore an architecture with N pieces of equipment (N≧3) per stage, throughout the chain of guidance. The use de N sources (N≧3) at the level of each stage of the chain allows to detect potential differences between contributors, and to identify, if applicable, a defective contributor. The device 1 on its whole is then able to reconfigure itself so as to isolate, for the whole duration of an operation, the subject contributor in a period of time sufficiently short so that the crew do not have to be involved in the managing of the breakdown.
If they do not require pilot action, such reconfigurations are nevertheless notified to the crew via monitoring functions being detailed hereinbelow.
Four types of monitoring are provided:
Said global status (or RNP AR status) takes into consideration the results of the four above mentioned monitoring functions and illustrates a state of the RNP AR function allowing the crew to have a global overview of the ability of the aircraft to follow the RNP AR procedures.
The above mentioned monitoring functions could result for the crew as three different warnings, being emitted at the level of the cockpit of aircraft:
The aim of the present invention is to aid the managing of air operations with required performance, more particularly, as previously mentioned, of operations of the RNP AR (<<Required Navigation Performance with Authorization Required>>) type. However, the present invention could also be implemented for any parts of a flight requiring a high level of integrity, of robustness to breakdowns and of monitoring for following a flight plane. As an example, it could be implemented for operations in a mountain environment, for which RNP procedures have not been created.
In a preferred embodiment, the architecture and the monitoring functions are activated automatically, without any action from the pilot. More precisely:
Within the scope of the present invention, the activation and the deactivation of the architecture and of the monitoring functions could however be implemented in various ways.
Thus, the triplex architecture could be activated automatically when a RNP value, being sufficiently low for requiring an increased integrity of the guidance of the aircraft, is associated to the path to be flown. In a particular embodiment, the RNP value should be lower than 0.3 NM, whether it is obtained from a navigation data base or from a manual capture of the crew. Beyond such a value, the crew is considered able to detect and to process any breakdown able to occur without compromising the holding of the RNP corridor.
Furthermore, the architecture being implemented only makes sense if the crew try to follow the path. Thus, this is activated only if an autopilot is activated and if the side guidance mode of follow-up of the flight plane (NAV) is activated.
The activation and deactivation could also be triggered by an action of the pilot, for instance the engagement of a second autopilot. In particular, the usual operations of follow-up of a flight plane, as they do not require any particular monitoring and trouble shooting operations, could be flown with one single activated autopilot, whereas the RNP AR operations, requiring a higher level of integrity, could be flown with the two activated autopilots, as is the case for some accuracy approaches of the ILS (<<Instrument Landing System>>) type.
As previously indicated, the RNP AR global status is determined as a function of the availability of the systems in the chain of guidance, of the current configuration of the architecture and of the performance of calculation for the position and the guidance. Such a RNP AR global status indicates to the crew the system and operation ability of the aircraft to follow a RNP AR procedure.
The following section further details the way the RNP AR status is determined. Each system 3, 4, 5 thus implements, in addition to its contribution to the guidance, a monitoring function for the upstream system in the chain of guidance and communicates the result to the downstream system in the chain. Each system 3, 4, 5 also monitors its own operation and transmits its own status to the downstream system. Thus, in the example of
It should be noticed that the monitoring of the calculation performance for the position of the aircraft, according to this invention, is improved compared to the usual situation. While the accuracy of the position is compared, usually, to once the RNP value, the integrity of the position is compared, according to the invention, to twice the RNP value,
√{square root over ((2*RNP)2−FTE2−PDE2)}
from which an auxiliary value is subtracted corresponding to the budget left to the guidance error and to the path definition error. The threshold used for the evaluation of the integrity of the position is then as follows:
√{square root over ((2*RNP)2−FTE2−PDE2)}
In this expression, FTE corresponds to the budget allotted to the guidance error (<<Flight Technical Error>>), and PDE corresponds to the budget allotted to the path definition error (<<Path Definition Error>>). In the previous expression, FTE and PDE could be replaced by a constant K taking into account the guidance errors, the path definition errors, and the pilot's reaction time.
If one of the two parameters, either accuracy or integrity, exceeds the allotted threshold, a warning is emitted to the crew. This new threshold of integrity allows the crew to be warned early enough so as to ensure the holding of the corridor having half a width being twice the RNP value.
Furthermore, it is usually known that the accuracy of guidance of the aircraft is monitored by the crew, thanks to the display, on the primary flight screen (of the PFD type for <<Primary Flight Display>>), of side and vertical deviations with respect to the reference path. Thanks to the invention, the monitoring of side and vertical deviations is simplified by the use of a function warning the crew in the case of an excessive (side or vertical) deviation in the position of the aircraft with respect to the reference path. This function is implemented by the systems 5 of the FCGS type from deviations received from the systems 4 of the FMS type.
In a particular embodiment:
Furthermore, a last monitoring function, also implemented by the systems 5 of the FCGS type, checks that the aircraft is in the good configuration for following the RNP procedure. When the procedure is defined with low RNP values, lower than 0.3 NM for instance, and thus, the device 1 is or should be activated, the following parameters are met:
If one of the previous monitored parameters is not in the good configuration, a specific message is displayed so as to guide the crew in the action to carry out so as to put the aircraft back in a configuration consistent with the on-going operation.
Consequently, the systems 5 of the FOGS type concentrate the information of availability of all elements in the chain of guidance. They also concentrate the information of guidance performance and the calculation of the position, as well as the status of the configuration of the aircraft, then calculate a global status of the RNP AR function they transmit, via a link 8, to a warning management system of the FWS (<<Flight Warning System>>) type. The system 9 then generates the warnings associated with the RNP status and transmits them, via a link 10, to usual interface means 11 which show them to the crew.
In a preferred embodiment, the RNP AR global status could have three different states, respectively referred to as <<FULL RNP CAPABLE>>, <<RNP REDUNDANCY LOST>> and <<RNP CAPABILITY LOST>>. More precisely:
Within the scope of the present invention, the RNP AR global status could be notified to the crew in various ways. In the previous solution, only the impairments of the RNP AR status are notified to the crew in the form of warnings. Another solution involves displaying a positive piece of information on the view screen for flight primary parameters, of the PFD (<<Primary Flight Display>>) type, while permanently supplying the RNP AR status to the crew, that is, for instance, an indication of the <<RNP DUAL>> type when the aircraft is able to guarantee the RNP procedure, an indication of the <<RNP SINGLE>> type, in the case of a loss of redundancy, and an indication of the <<RNP LOST>> type when the aircraft is no longer able to guarantee the RNP procedure.
In another embodiment shown on
The above described architecture and different functions of monitoring thereby allow the aircraft to meet the safety requirements inherent to the RNP AR operations while being able to automatically detect, identify and isolate a defective system. The crew can, in addition, follow up and monitor the good holding of the operation, thanks to the different functions of monitoring and to the RNP AR global status supplying them with a global overview of the capacity of the aircraft to follow the RNP AR procedures.
It should be noticed that alternatively:
| Number | Date | Country | Kind |
|---|---|---|---|
| 1058466 | Oct 2010 | FR | national |
