This patent application claims the benefit under 35 U.S.C. § 119 of French Application No. FR 17 01080 filed on Oct. 17, 2017 which is hereby incorporated by reference in its entirety.
The described technology relates to a method for processing an error when performing a predetermined avionics procedure, the method being carried out automatically by a detection and alert system of an aircraft, the method comprising the monitoring of the operation of one or several device(s) of the aircraft, the monitoring being based on the tracking of a sequence representative of the predetermined avionics procedure being carried out.
The described technology also relates to a computer program product comprising software instructions which, when implemented by an information processing unit integrated into a detection and alert system of an aircraft, implements such a processing method.
The described technology also relates to a detection and alert system of an aircraft comprising a module for monitoring the operation of one or several avionics device(s) of the aircraft, the monitoring module being capable of being connected to a module for tracking a sequence representative of a predetermined avionics procedure being carried out.
The described technology applies to the field of avionics, and more particularly to that of detection and alert systems (FWS for “Flight Warning Systems”) of an aircraft, such as an airplane or helicopter.
Traditionally, detection and alert systems serve a dual purpose, namely on the one hand to alert the pilot when an abnormal flight situation arises, and on the other hand to present the pilot with the procedure(s) making it possible to address the failure associated with the abnormal situation to return to a controlled situation guaranteeing the safety of the flight and the return of the aircraft to the ground.
In current aircraft, the management of the procedures is provided electronically by a procedure management module of the detection and alert system. More specifically, currently, such a procedure management module retrieves one or several avionics procedures to be followed based on the current flight phase and/or based on the abnormal flight situation encountered, each procedure being made up of a sequence of instructions to be followed for the proper progression of the procedure.
The crew reads the restored procedure(s), and performs the actions (i.e., sends commands) corresponding to each instruction on the avionics devices of the aircraft. The crew next acknowledges each performed instruction, or according to one alternative, the detection and alert system is capable of monitoring the status of the systems with which the crew has interacted and as a result, the detection and alert system itself is capable of performing such an acknowledgment.
However, the handling scenario of such an acknowledgment is of little importance; the fact nevertheless remains that if an incorrect action or command is sent to one of the avionics devices, currently, it is up to the crew to recognize the error.
In other words, the current detection and alert systems are not able to detect whether an action or a command is inappropriate in the context of the procedure being performed. Indeed, the current detection and alert systems are only capable of providing continuous monitoring of the nominal or downgraded states of the avionics devices. Nevertheless, this monitoring does not make it possible to identify whether the detected state is appropriate for the situation.
Hereinafter, “inappropriate command” refers on the one hand to a command error associated with a fault by the crew corresponding to the performance by the crew of an incorrect action in place of the expected action, or forgetting an action in the sequence of actions to be performed, and on the other hand a command error associated with a failure of the command interface for example corresponding to the absence or delay in sending the command corresponding to the action by the crew, the lack of correspondence between the sent command and the action by the crew, or the sending of a multitude of commands while the action by the crew only required one.
The effects of an incorrect command are varied and more or less easily detectable depending on the criticality of the procedure, the impact of the incorrect command on the performance of the aircraft, the time needed to correct the error, the nature of the error (human, failure of the command interface).
The identification of an incorrect command carried out by the crew is therefore not guaranteed and compromised even more in a stressful situation faced with an abnormal situation or a heavy workload (in particular in case of multiple failures, for example).
Thus, one inventive aspect of the described technology is therefore to offset the detection errors and errors involving human correction of incorrect commands by proposing automated assistance (i.e., without human intervention) to optimize their management and make it possible to improve the safety and tranquility of a crew if an abnormal flight situation arises.
To that end, in another aspect, the described technology relates to a method for processing an error when performing a predetermined avionics procedure, the method being carried out automatically by a detection and alert system of an aircraft, the method comprising the monitoring of the operation of one or several avionics device(s) of the aircraft, the monitoring being based on the tracking of a sequence representative of the predetermined avionics procedure being carried out,
the method further comprising the following steps carried out automatically by the detection and alert system of the aircraft:
the detection of a break of said sequence due to an incorrect command and/or skipping of at least one expected command according to the predetermined avionics procedure being performed,
the retrieval of at least one piece of information representative of said break in the sequence,
the monitoring of the operation of one or several avionics device(s) of the aircraft corresponding to the monitoring of real-time states of said avionics device(s), and the detection comprising a comparison of the real-time states of one or several avionics device(s) of the aircraft with at least one of the following elements:
a set of prohibited states, associated with the predetermined avionics procedure, and stored in a first dedicated memory space;
a set of expected states, based on the performance moment of the sequence representative of the avionics procedure, the set of expected states being stored in a second dedicated memory space,
and when the comparison of the real-time states and the set of prohibited states is positive, the retrieved representative information corresponds to a first alert comprising a first triplet of data respectively representative of:
the predetermined procedure,
the detected prohibited state from among the real-time states, and
a command to be performed recommended to offset the detected prohibited state,
or wherein the monitoring of the operation of one or several avionics device(s) of the aircraft corresponds to the monitoring of commands received in real time by said avionics device(s), and wherein the detection comprises a comparison of said commands received in real time with a set of expected commands, based on the performance moment of the sequence representative of the predetermined avionics procedure, the set of expected commands being stored in a third dedicated memory space.
According to specific embodiments, the display system has one or more of the following features, considered alone or according to any technically possible combinations:
when the comparison of the real-time states and the set of expected states is negative, the retrieved representative information corresponds to a second alert comprising a second triplet of data respectively representative of:
the predetermined procedure,
the missing expected state from among the real-time states, and
a recommended command to be performed to overcome the missing expected state or to reiterate at least one command associated with at least one previous step of the predetermined procedure;
in the first and/or second dedicated memory spaces, each respectively prohibited and/or expected state is automatically associated with a criticality level;
when the comparison of the commands received in real time and the set of expected commands is negative, the retrieved representative information corresponds to a third alert comprising a third triplet of data respectively representative of:
the predetermined procedure,
an unexpected command and/or a missing command from among the commands received in real time, and
a command to be performed recommended to offset the unexpected and/or missing command,
and wherein the method further comprises a time delay for:
the performance of the unexpected command by retrieving a confirmation request for the unexpected command from the crew, and/or
the retrieval of the information representative of said break in the sequence, by sending a request to enter the missing command;
the method comprises a prior step for building a database comprising at least one of said first, second, third dedicated memory spaces, by automatic learning or by implementing an inference engine.
In another aspect, the described technology also relates to a computer program product comprising software instructions which, when implemented by an information processing unit integrated into a detection and alert system of an aircraft, implements such a processing method as defined above.
In another aspect, the described technology also relates to a detection and alert system of an aircraft comprising a module for monitoring the operation of one or several avionics device(s) of the aircraft and for tracking a sequence representative of a predetermined avionics procedure being carried out,
the detection and alert system being able to process an error during the performance of the predetermined avionics procedure, and further comprises:
a module for detecting a break of said sequence due to an incorrect command and/or due to a skipping of at least one expected command according to the predetermined avionics procedure being performed,
a module for retrieving at least one piece of information representative of said break in the sequence,
the monitoring of the operation of one or several avionics device(s) of the aircraft, implemented by the monitoring module, corresponding to the monitoring of real-time states of said avionics device(s), and the detection, carried out by the detection module, comprising a comparison of the real-time states of one or several avionics device(s) of the aircraft with at least one of the following elements:
a set of prohibited states, associated with the predetermined avionics procedure, and stored in a first dedicated memory space;
a set of expected states, based on the performance moment of the sequence representative of the avionics procedure, the set of expected states being stored in a second dedicated memory space,
and when the comparison of the real-time states and the set of prohibited states is positive, the retrieved representative information corresponds to a first alert comprising a first triplet of data respectively representative of:
the predetermined procedure,
the detected prohibited state from among the real-time states, and
a command to be performed recommended to offset the detected prohibited state,
or wherein the monitoring of the operation of one or several avionics device(s) of the aircraft, carried out by the monitoring module, corresponds to the monitoring of commands received in real time by said avionics device(s), and wherein the detection, carried out by the detection module, comprises a comparison of said commands received in real time with a set of expected commands, based on the performance moment of the sequence representative of the predetermined avionics procedure, the set of expected commands being stored in a third dedicated memory space.
The described technology and its advantages will be better understood upon reading the following detailed description of one particular embodiment, provided solely as a non-limiting example, this description being done in reference to the appended drawings, in which:
In reference to general
More specifically, such a monitoring module 12 is first capable of performing an alert and context calculating function (i.e., procedure tracking). In particular, to carry out such a function, using the various physical data produced by the avionics devices equipping the aircraft as inputs, the monitoring module 12 produces a list of events (alerts, flight phase change, etc.) and also provides the state of the various avionics devices (i.e., pieces of equipment) of the aircraft and the various contexts (flight phases, ice conditions for example) as performed by a traditional detection and alert system by basing itself on combinations of mathematical and logic operators.
From the alerts and events detected above and also from various pilot inputs entered to navigate within procedures, such a monitoring module 12 is also able to carry out a procedure management function in particular consisting of presenting the pilot procedure to be carried out to the crew in order to allow it to track its proper progression.
More specifically, such a presentation for example consists of providing the identifier of the procedure and the sub-procedure being carried out, a sub-procedure being defined as a sequence of actions (i.e., a sequenced series of actions) not requiring any choice by the crew, indicating, through a visual (i.e., retrieval on a screen) or audio (i.e., using a speaker) interface, the actuator of the aircraft on which the crew must act (which corresponds to the “challenge”) and further specifying the type of action (i.e., the expected command) to be performed on this actuator (which corresponds to the “response”) and the associated time constraint to carry out such an action.
Furthermore, the monitoring module 12, capable of carrying out such a procedure management function, is also able to allow the crew to acknowledge the actions once the latter have been performed. Such an acknowledgment makes it possible inter alia to guarantee that the crew will have a correct view of the status of the procedure if the performance thereof is interrupted (in particular in case of request by the ground center, for example).
Optionally, according to a more automated version, the monitoring module 12 is capable of allowing the crew to perform the action directly and automatically from the presented avionics procedure.
In other words, an avionics procedure in progress depends on the criticality (capable of establishing an inter-event priority level) of the detected events and alerts and also the choices and actions of the crew.
Furthermore, if an event occurs with a priority level higher than the event associated with the avionics procedure being performed, the monitoring module 12 is capable of interrupting the avionics procedure in progress and automatically presenting an avionics procedure better suited to the higher priority event in terms of criticality.
However, the crew remains free to interact with the monitoring module 12 so as to modify the processing order of the actions of the procedures via a command interface.
According to the described technology, the detection and alert system 10 is specifically capable of processing an error during the performance of the predetermined avionics procedure by the crew, and to that end further comprises an automatic detection module 14 (i.e., without human intervention) for detecting a break in the sequence due to an incorrect command (for example entered by the crew or resulting from an automaton performing the sequence associated with the procedure in place of the crew 22), and/or skipping of at least one expected command according to the predetermined avionics procedure being performed, and a module 16 for retrieving at least one piece of information representative of the break in sequence.
More specifically, the detection module 14 is capable of carrying out an error detection function according to at least two separate embodiments, depending on whether the error detection is based on the states of the avionics devices once the action(s) of the crew is or are acknowledged as illustrated by the structural variants of detection and alert systems of
According to a first embodiment, called “detect and recover” as illustrated by
To that end, the detection and alert system 10 is capable of being structured according to a first alternative in an “integrated structure”, for example multi-instantiated, as shown in
More specifically, such a detection and alert system 10 comprises a piece of equipment 18 for monitoring states of the avionics device(s) of the aircraft in real time and a piece of equipment 20 for managing avionics procedures, these two pieces of the equipment 18 and 20 forming the monitoring module 12 previously indicated in connection with
The equipment 18 for monitoring states of the avionics device(s) in real time is capable of providing, in real time, alerts, events, received commands and states associated with the avionics devices of the aircraft on the one hand to the equipment 20 for managing avionics procedures, which in turn is capable of receiving, as input, the actions from the crew 22, and on the other hand events and states associated with the avionics devices of the aircraft to the error detection equipment 24, i.e., for detecting a break in the sequence representative of the procedure being performed.
Furthermore, the equipment 20 for managing avionics procedures is capable of providing the error detection equipment 24 with the identifier of the avionics procedure being performed (or to be performed) as well as the associated action sequence.
In other words, according to the alternative embodiment of
More specifically, the error detection equipment 24 is capable of comparing, using a comparator, not shown, real-time states of one or several avionics device(s) of the aircraft to at least one of the following elements:
a set of prohibited states, associated with the predetermined avionics procedure, and stored in a first dedicated memory space;
a set of expected states, based on the performance moment of the sequence representative of the predetermined avionics procedure, the set of expected states being stored in a second dedicated memory space.
According to the illustration of
Furthermore, the error detection equipment 24 and the equipment 18 for monitoring received states and/or commands are both capable of being connected to the screen 30 of the retrieval module 16 for at least one piece of information representative of the break in sequence of
According to one alternative, the screen 30 is an existing screen of the aircraft. According to another alternative, the screen 30 is dedicated to the detection and alert system 10 of the described technology.
In particular, the equipment 18 for monitoring received states and/or commands is capable of sending, for retrieval on the screen 30 by the crew 22, the alerts, events and states of one or several monitored avionics devices detected in real time.
The error detection equipment 24 is in turn capable of retrieving a representative piece of information that, when the result of the comparison of the real-time states with the set of prohibited states from the database 28 provided by the comparator is positive, corresponds to a first alert comprising a first triplet of data respectively representative of the predetermined procedure, the detected prohibited state from among the real-time states, and a recommended command to be performed to overcome the detected prohibited state, or when the result of the comparison of the real-time states with the set of expected states from the database 28 provided by the comparator is negative, corresponds to a second alert comprising a second triplet of data respectively representative of the predetermined procedure, the missing expected state from among the real-time states, and a recommended command to be performed in order to offset the missing expected state or to reiterate at least one command associated with at least one previous state from the predetermined procedure.
Hereinafter, “positive” refers, in terms of comparison, for example to the fact that one of the real-time states of one or several avionics devices is a prohibited state. Negative refers, in terms of comparison, for example to the fact that one of the real-time states of one or several avionics devices does not correspond to an expected state, or that one of the expected states at the performance moment of the procedure is missing from among the monitored real-time states.
According to another particular aspect, in the first and/or second dedicated memory space of the database 28, each respectively prohibited and/or expected state is automatically associated with a criticality level on which the more or less significant number of events to be monitored and feared events depends.
In the database 28, a criticality level defined according to a prioritized classification going from “major” (the lowest criticality level) to the intermediate criticality level of “hazardous” to “catastrophic” (the highest criticality level) is used to classify the errors.
In connection with
In other words, according to this distributed structure, separate equipment assemblies 32 and 34, optionally each multi-instantiated, are implemented to provide a fine segregation making it possible to increase the security level of the detection and alert system 10.
According to a second embodiment, called “preclude and recover” as illustrated by
Such an embodiment assumes an overall avionics architecture of the aircraft integrating an automated management system of the avionics devices and owing to which the crew 22 no longer acts directly on the avionics devices of the aircraft. In other words, in such an architecture, all of the commands that the crew 22 carries out are triggered via one or several on board systems (and not directly by the crew 22) capable of sending commands to the external and avionics systems (“utilities”).
Like for the first embodiment previously described, according to the second embodiment, the detection and alert system 10 is also capable of being structured according to two first alternatives in an “integrated structure”, for example multi-instantiated, as shown in
In terms of structure, the integrated detection and alert systems of
Indeed, the error detection equipment 36 is capable of comparing the commands received in real time, and provided by the monitoring equipment 18, with a set of expected commands, based on the performance moment of the sequence representative of the predetermined avionics procedure, the set of expected commands being stored in a third dedicated memory space of the database 28.
Furthermore, the error detection equipment 36, in case of negative comparison of the commands received in real time and the set of expected commands, is capable of acting on the processing of the received commands before they are performed by retrieving, on the screen 30, a piece of representative information for example corresponding to a third alert comprising a third triplet of data respectively representative of the predetermined procedure, an unexpected command and/or a missing command from among the commands received in real time, and a recommended command to be carried out to overcome the unexpected and/or missing command.
Furthermore, the error detection equipment 36 is specifically capable of implementing a time delay for the performance of the unexpected command by retrieving a confirmation request for the unexpected command from the crew 22 on the screen 30, and/or a time delay for the retrieval of the information representative of the break in sequence, by sending a request to enter the missing command.
In connection with
Alternatively, in connection with
In other words, in this detection and alert system 10 architecture of the second “preclude and recover” embodiment, either, as shown in
Thus, in the first case of
More specifically, the alternative of
The alternative of
Thus, according to all of the examples of detection and alert system 10 architectures illustrated by
According to one particular aspect, the implementation of one or the other of the two embodiments previously described is able to be selected using a selection tool, not shown, of the detection and alert system according to the described technology, for example a pushbutton or a switch able to be activated manually or remotely via a wireless link.
In connection with
In general, the method comprises three main steps, namely a step 46 for monitoring the operation of one or several avionics device(s) of the aircraft, the monitoring 46 being based on tracking a sequence representative of the predetermined avionics procedure being carried out, a step 48 for detecting a break in the sequence due to an incorrect command (for example entered by the crew or resulting from an automaton performing the sequence associated with the procedure, in place of the crew 22) and/or skipping of at least one expected command according to the predetermined avionics procedure being performed, and a step 50 for retrieving at least one piece of information representative of said break in sequence.
More generally, each avionics procedure is stored and retrieved by the equipment 20 for managing (i.e., tracking) the procedure previously described in the form of a sequence of actions that the crew 22 must carry out.
In connection with
More specifically, according to this first embodiment, the step 46 for monitoring the operation of one or several avionics device(s) of the aircraft on the one hand comprises a step 52 for monitoring real-time states of the avionics device(s) and a step 54 for tracking a sequence representative of the predetermined avionics procedure being carried out. According to this first embodiment, the sequence relates to the list of states of the avionics devices to be monitored as the procedure progresses.
Then, according to this first embodiment, the step 48 for detecting a break in the sequence associated with the avionics procedure being performed comprises either a step 58 for comparing real-time states of one or several avionics device(s) of the aircraft to a set of prohibited states, associated with the predetermined avionics procedure, and stored in a first dedicated memory space of the database 28 previously described, or a step 58 for comparing real-time states of one or several avionics device(s) of the aircraft to a set of expected states, based on the performance moment of the sequence representative of the predetermined avionics procedure, the set of expected states being stored in a second dedicated memory space of the database 28, or the two comparison steps 58 and 60.
According to this first embodiment, the step 50 for retrieving at least one piece of information representative of said break in sequence respectively comprises, for each comparison step 58 and/or 60 previously cited:
when the comparison 58 of the real-time states and the set of prohibited states is positive, the retrieved representative information corresponds to the retrieval 62 of a first alert comprising a first triplet of data respectively representative of the predetermined procedure (e.g., an identifier), the detected prohibited states from among the real-time states, and a recommended command to be performed in order to overcome the detected prohibited state;
when the comparison of the real-time states and the set of expected states is negative, the retrieved representative information corresponds to the retrieval 64 of a second alert comprising a second triplet of data respectively representative of the predetermined procedure, the missing expected state from among the real-time states, and a recommended command to be performed in order to overcome the missing expected state or to reiterate at least one command associated with at least one previous step of the predetermined procedure.
In other words, according to this first embodiment, as the avionics procedure being performed advances, when an event occurs on one of the monitored avionics devices, according to the inventive method, the knowledge database 28 is accessed and the monitoring by comparison to the feared events related thereto is implemented to guarantee that the procedure unfolds correctly.
When one of the feared events associated with a feared system event is detected, the error message specific thereto is automatically shown to the crew 22 in order to alert the latter to the fact that it is in the process of committing an error and/or that a failure in interpreting its command is present, and/or to present the crew with the list of actions remaining to be performed to overcome this error.
Optionally, according to a prior step that is not shown, for example during the design of the aircraft, the method comprises the construction, for example by machine learning or by implementing an inference engine from safety analyses of the aircraft, of the database 28 comprising at least one of the first, second and third dedicated memory spaces previously cited.
More specifically, the database 28 is a knowledge database of the monitored events according to the described technology and associated with a predetermined procedure. The safety analyses define the feared events and combinations of feared events and associate a criticality level with them. In other words, to avoid a human and/or machine error, system failure states are associated with the commands from which they may originate. Internal system failures are therefore precluded.
In connection with
The software structure of
Such a structure in reference base form makes it possible to avoid definition redundancy and provide coherence between the procedures and how they are monitored.
By way of illustration, according to the example of
When the fuel supply of the second engine is cut off 80, two types of avionics characteristics 70 are associated, namely:
on the one hand, the supply 84 of the second engine by the main pump, which amounts to the detection of the on state 86 of the main pump and the off state of the secondary pump, the associated feared command 72 is then the turning off 88 of the main pump and the message associated with the expected action to resolve this 74 is the turning on 90 of the main pump, and
on the other hand, the supply 92 of the second engine by the secondary pump, which amounts to the detection of the on state 94 of the secondary pump and the off state of the main pump, the associated feared command 72 is then the turning off 96 of the secondary pump and the associated message 74 to resolve this is the turning on 98 of the secondary pump.
When the second engine is cut off 82, two types of avionics characteristics 70 are associated, namely:
on the one hand, the turning off 100 of the second engine, the associated feared command 72 is then on the one hand the adjusting 102 of the power lever of the second engine on a flight idle (FI) and the associated message 74 to resolve this is turning the second engine back on 104, and on the other hand the adjusting 106 of the control lever of the second engine on the fuel cutoff, and the message associated with the expected action 74 is also turning the second engine back on 108;
on the other hand, the securing 110 of the second engine, the associated feared command 72 is then of three types: the establishment 112 of the management power of the second engine on the “maximum continuous thrust” (MCT) level, the adjustment 116 of the power lever of the second engine on a flight idle, or the adjustment 120 of the control lever of the second engine on the fuel cutoff and the associated message 74 to resolve each of these three types of feared commands 72 is turning the second engine back on 114, 118, 122.
Optionally, such a dependency tree is further conditioned by the flight phase in progress at the time of the performance by the crew 22 of the predetermined procedure such that the avionics characteristics 70 and the associated feared commands 72 are reconfigurable in the database 28 based on the flight phase (i.e., landing, takeoff, turning, etc.).
All of the data associated with an avionics procedure implemented in case of complete loss of the communication capability, also stored in the database 28, is capable of being organized similarly to the example of
In connection with
More specifically, according to this second embodiment, the step 46 for monitoring the operation of one or several avionics device(s) of the aircraft on the one hand comprises a step 123 for monitoring commands received in real time by said avionics device(s) and step 54 for tracking a sequence representative of the predetermined avionics procedure being carried out. According to said second embodiment, the sequence relates to the list of commands to be carried out in order to process the procedure, and not the list of states of the avionics devices associated with the first embodiment. The list of commands associated with a procedure will for example be sent as follows, specifying the maximum amount of time for the implementation of the command: command 1: engine shut off 1; engine securing 1; 30s), command 2 (engine shut off 1; extinguisher triggering 1; 10s), command 3 (engine shutoff 1; controlling stopping of the engine fire 1; 10s); command 4 (electrical reversion; ignition of the auxiliary power unit (APU); 10s). Other alternatives of command descriptions are usable in particular in global and macroscopic form in case of non-ambiguity, for example: command 1 (Engine Shutoff 1; 50s), command 2 (Electrical reversion; 30s), etc.
Then, according to this second embodiment, step 48 for detecting a break in the sequence associated with the avionics procedure being performed comprises a step 124 for comparing commands received in real-time with a set of expected commands, based on the performance moment of the sequence representative of the predetermined avionics procedure, the set of expected commands being stored in a third dedicated memory space of the database 28 previously described.
According to this second embodiment, the later retrieval step 50 comprises, when the comparison 124 of the commands received in real time and the set of expected commands is negative, a forming/retrieval step 126 of the representative information corresponding to a third alert comprising, for example, a third triplet of data respectively representative of the predetermined procedure, an unexpected command and/or a missing command from among the commands received in real time, and a recommended command to be performed to offset the unexpected and/or missing command.
Furthermore, the later retrieval step 50 also comprises a time delay 128 for the performance of the unexpected command by retrieving a confirmation request for the unexpected command from the crew, and/or for the retrieval of the information representative of the break in sequence, by sending a request to enter the missing command.
In other words, according to this second embodiment, over the course of the detection of the commands entered by the crew 22, the method according to said second embodiment monitors the progression of the performance of the list of commands associated with the avionics procedure to be tracked. If a command is detected 124 that does not correspond to the procedure, the command is not sent directly to the receiving avionics device, but a confirmation is requested beforehand from the crew 22 in order to ensure that the divergent command in question indeed corresponds to its intended use. Likewise, if an expected command identified in the command list associated with the procedure to be tracked is not carried out at the end of the time associated with it, the detection 124 carried out according to this second embodiment will escalate a message to the crew 22 to make sure that this is not an oversight.
According to one completely automated alternative, this second embodiment is in particular capable of being carried out to further trigger/correct, automatically, the various expected commands when there is no reaction from the crew 22, and/or to assist the crew 22 in a stressful situation, and/or to monitor the proper performance of the avionics procedure to be performed, whether it is controlled using only the inventive method or in combination with one or several systems.
In connection with
on the one hand, the turning off 130 of the first engine, the associated expected command 72 is then on the one hand the adjusting 132 of the power lever of the first engine on a flight idle (FI) and the associated message 74 retrieved for the crew 22 to accomplish this action is stopping the first engine 134, and on the other hand the adjusting 136 of the control lever of the first engine on the fuel cutoff, and the associated message 74 is also the stopping 138 of the first engine;
on the other hand, the securing 140 of the first engine, the associated expected command 72 is then of three types: the establishment 112 of the management power of the first engine on the “maximum continuous thrust” (MCT) level, the adjustment 116 of the power lever of the first engine on a flight idle, or the adjustment 120 of the control lever of the first engine on the fuel cutoff and the associated message 74 to resolve each of these three types of expected commands 72 is the stopping 144, 148, 152 of the first engine.
One can thus see that the described technology proposes at least to make it possible to detect and correct an incorrect action by automatically assisting the crew in the detection of the performance of an incorrect action, by showing it that a break in sequence has occurred in the procedure, if applicable further explaining the cause of the break in sequence to the crew, and also helping the crew resolve this break (taking into account the priority between the correction of the incorrect action and the need to resume the procedure).
Furthermore, according to a second embodiment, subject to the implementation of a particular system architecture where the crew does not act directly on the avionics devices to be controlled, the performance of the incorrect command by the crew 22 is able to be avoided (i.e., the incorrect command is filtered) to thus prevent the deterioration in flight safety.
The described technology thus allows significant time savings in the taking into account and correction of the incorrect command by the crew 22.
While there have been shown and described and pointed out the fundamental novel features of the invention as applied to certain inventive embodiments, it will be understood that the foregoing is considered as illustrative only of the principles of the invention and not intended to be exhaustive or to limit the invention to the precise forms disclosed. Modifications or variations are possible in light of the above teachings. The embodiments discussed were chosen and described to provide the best illustration of the principles of the invention and its practical application to enable one of ordinary skill in the art to utilize the invention in various embodiments and with various modifications as are suited to the particular use contemplate. All such modifications and variations are within the scope of the invention as determined by the appended claims when interpreted in accordance with the breadth to which they are entitled.
Number | Date | Country | Kind |
---|---|---|---|
17 01080 | Oct 2017 | FR | national |