This invention relates to a system for communication between a computer network in an aircraft and a computer network on the ground, an aircraft computer network and a ground computer network.
Nowadays an avionic system comprises a set of on-board tools and databases so as, in particular, to computerize the tools, in particular the tools for diagnosis, for maintenance, and documents, such as the manuals for diagnosis of breakdowns or operating manuals for the airplane. The tools therefore now are used, for example, by software or databases.
Mainly, two types of maintenance can be considered.
First, there is considered the maintenance that takes place in the main maintenance base for the airplane or outside this base, consisting in actions limited to adjustment, safety and the need to have the airplane fly, also called dispatch, without delay or within a limited delay.
Then there is considered the maintenance performed in the main maintenance base for the airplane for which additional maintenance actions are performed, such as the maintenance taking place at regular intervals.
In
Maintenance is backed by a system, in particular a central maintenance computer 100 (“Central Maintenance Computer” in English terminology), that collects, consolidates and reports faults in the replaceable entities of the airplane LRU 105 (“Line Replaceable Unit” in English terminology) in order to help the flight crew and the maintenance personnel in the maintenance procedures.
Faults in the replaceable entities of the airplane 105 are the object of alarm management by a computer 110.
The central maintenance computer 100 sends out a maintenance message 115 to the company to which the airplane is attached, in particular to the maintenance control center MCC (acronym for “Maintenance Control Center” in English terminology).
A screen 120 is connected to the alarm management computer 110 in order to display the faults in the replaceable entities of the airplane 105.
The set of faults or events occurring during a service of the airplane is stored in an on-board notebook 125 called “logbook” in English terminology. This logbook linked to the airplane is filled out either by the pilots (“technical logbook” in English terminology) or by the cabin crew (“Cabin Logbook” in English terminology).
To do so, the crew manually enters in the logbook 125 the faults that occurred as well as the flight conditions under which the faults occurred.
When the airplane is on the ground, the logbook is retrieved 130 in the airplane in order to be read on the ground by the maintenance control center MCC 135. Then a maintenance technician goes into the airplane in order to analyze the faults recorded and make a diagnosis 140.
The technician then goes to the maintenance base on the ground in order to obtain the procedure for isolation of the fault 145.
With this procedure, also called TSM (acronym for “Troubleshooting manual” in English terminology), the technician again goes into the airplane in order to carry out this procedure for isolation of faults 150.
At the end of isolation of faults, the technician returns to the base on the ground in order to obtain the repair procedure 155 and if need be to order a replacement part from the spares warehouse.
Then the maintenance technician once again goes back into the airplane to carry out the repair procedure 160.
Then tests 165 are performed in order to check functioning at the end of the repair and an acceptance procedure 170 is carried out, consisting in declaring the airplane as being able to fly.
Finally, this acceptance is entered in the logbook 175.
As will be easily understood upon reading of the foregoing, this maintenance operating mode has a high cost, and grounds the airplane for a considerable time.
Another known solution consists in storing in the storage mediums on board (databases) the set of procedures for isolation of faults and the set of procedures for repair making it possible to do away with the maintenance technician's back-and-forth between the airplane and the maintenance base on the ground.
The set of procedures for isolation of faults and the set of procedures for repair, however, represent a large volume of data, capable of reaching several gigabytes of data.
The set of tools, data and documents furthermore must be regularly updated so that the crew of the airplane, and more particularly the pilot and the maintenance technician, can benefit from the most recent version of the tools and documents.
To do so, the tools and documentation are loaded into the computer or computers of the airplane by a technician in charge of keeping these tools and documents up to date (or synchronizing the on-board databases containing these documents with the databases on the ground). He is equipped, for example, with a portable computer comprising in storage the most recent version of the tools and data, and goes into the airplane in order to perform the loading and updating of the tools and data.
However, given that these tools and the documentation represent a large volume of data, namely several gigabytes, this updating is lengthy and can necessitate grounding the airplane for a relatively long time.
The same is true if the technician uses a portable computer having a Wifi radio connection with which he loads the data and he updates the tools and data stored in the network of the airplane from the data loaded onto his portable computer.
Moreover, an airline company usually has a large fleet of airplanes which translates into a high cost for maintenance of the tools and documents of the airplanes in its fleet as well as an extensive configuration management of the data on the ground intended to be loaded on board the airplanes.
Keeping such a volume up to date thus is made difficult. As a result of that, the maintenance technician, relying on these procedures stored in the airplane, may obtain information items concerning the procedures for isolation and repair to be followed which no longer may be up to date, or even be erroneous. Furthermore, when the data for resolution of problems are on board, that does not avoid the need for the maintenance technician to make contact with the spare parts warehouse.
This invention has as its object to remedy at least one of the drawbacks of the techniques and processes of the aforesaid prior art. To do so, the invention proposes a system for communication between a computer network in an aircraft and a computer network on the ground, making possible in particular the reduction of maintenance costs, the rapid return of the airplane to operation, the updating of the data and tools of the aircraft in a secured manner without necessitating the intervention of a technician.
The invention thus has as its object a system for communication between a computer network in an aircraft and a computer network on the ground, characterized in that it comprises means capable of establishing a network connection between a computer network on the ground and a computer network in the aircraft via at least one communication medium according to a synchronous communication mode.
According to the invention, at least one avionic system is connected in real time and in continuous manner with an infrastructure on the ground. At least one computer tool is shared between the ground infrastructure and the on-board avionic system. This tool gives access to the ground, to on-board and to the network, and makes it possible to perform remote actions between the ground and on-board. It can be used by a single operator set up at a fixed location.
A maintenance operation and a simultaneous updating of the ground and on-board databases can be performed in one go in synchronized and coordinated manner, by virtue of the use of the shared computer tool. The maintenance operation can include a test and a consultation of the airplane documentation.
The system involves a single maintenance operation coordinated in real time between the ground and on-board. It involves a single sequence of operations coordinated in real time between the ground and on-board and makes it possible to identify, to correct and to follow (plot) the actions performed in the databases.
Communication can be carried out by secured IP protocol, for example. Coordination and synchronization of the databases are carried out in real time.
The airplane can be in flight and the operator on the ground can conduct a system test during the flight.
Alternatively, the airplane can be on the ground, the operator on board or on the ground at the maintenance center.
The invention provides a system for communication between a computer network in an aircraft and a computer network on the ground by establishment of a network connection according to a synchronous communication mode in order to create a continuity of the network of the aircraft with the computer network on the ground.
Furthermore, this system allows the updating of data stored in the computer network in the aircraft to the computer network on the ground and vice versa.
Moreover, in accordance with the invention, it is permitted to carry out interactive browsing in the data stored in the infrastructure on the ground as well as in the documentary sites containing the airplane documentation (TSM or other), for example.
There is no need for verification or an operation for synchronization of databases between the ground and on-board. The system offers the possibility of executing operations on the ground from on-board (shared ground/on-board tools), or on board from the ground, by virtue of synchronous communication.
The communication medium is, for example, a mobile telephony network, a wireless communication network, a satellite network and/or a hard-wired link.
According to one characteristic, the system comprises means for updating data stored in the computer network of the aircraft from data stored in the computer network on the ground.
According to another characteristic, the system comprises means for sending out data stored in the aircraft computer network to the computer network on the ground.
According to one embodiment, the computer network in the aircraft and the computer network on the ground are connected by a virtual private network.
This invention also has as its object to provide an aircraft computer network, characterized in that it comprises means capable of establishing a network connection with a computer network on the ground via at least one communication medium according to a synchronous communication mode.
This device has the same advantages as the communication system briefly described above.
This invention also has as its object to provide a computer network on the ground, characterized in that it comprises means capable of establishing a network connection with a computer network of an aircraft via at least one communication medium according to a synchronous communication mode.
This device has the same advantages as the communication system briefly described above.
Other advantages, purposes and characteristics of this invention emerge from the detailed description that follows, given by way of non-limitative example, with reference to the attached drawings in which:
In accordance with the invention, there is installed in the airplane an electronic maintenance system capable of performing maintenance operations in order in particular, to replace the paper process by an electronic process.
This system relies on an on-board infrastructure in an airplane, that is, an avionic system comprising in particular a set of functional entities of the airplane, for example replaceable entities of the airplane, accommodating applications for crew and maintenance, an infrastructure on the ground to prepare, personalize and manage the data to be used on board, for example to perform maintenance operations or to obtain data from the airplane to be used on the ground and a connection infrastructure for exchanging data between the infrastructure on the ground and the on-board infrastructure and for updating the tools and the data stored in the on-board infrastructure.
The infrastructure on the ground is, for example, present in the maintenance base of the airline company to which the airplane is attached.
Thus, there is shown a group of airplanes 200 (on-board infrastructures) of an airline company and an infrastructure on the ground 205 of this company. This infrastructure on the ground comprises in particular a set of processing units interconnected via a telecommunication network. This network also comprises a connection 210, for example an Internet connection in order to be connected to the servers of the airplane manufacturers or to any third party 215.
The infrastructure on the ground also is connected via a communication network 220 (connection infrastructure) to the avionic network of the airplanes. The communication network 220 relies, for example, on a wireless communication medium, for example WIFI or Wimax, a mobile telephony communication medium, for example GSM/GPRS or UMTS or a satellite communication medium. Furthermore, the airplane can be connected to the ground by a hard-wired link in case of breakdown in the event of unavailability of the radio communication.
The network of the infrastructure on the ground thus comprises in particular a server 225 capable of sending out data to an airplane and receiving data from an airplane by satellite, and a server 230 capable of sending out data to an airplane and receiving data from an airplane by using a wireless communication or mobile telephony medium.
Furthermore, there may be used a portable medium 235, such as a portable computer, a USB (“Universal Serial Bus” in English terminology) key, a CD/DVD, in order to exchange data with the airplane.
Thus, in accordance with the invention, the infrastructure of the airplane is a mobile network capable of communicating with the infrastructure on the ground of the company of attachment so as to create a continuity between the on-board infrastructure and the infrastructure on the ground.
According to a particular embodiment, the on-board infrastructure communicates with the infrastructure on the ground according to a synchronous communication mode, this type of communication making it possible to do interactive browsing of the documentary sites containing the airplane documentation, for example.
Synchronous communication consists in establishing a link or channel for communication between the avionic system and the infrastructure on the ground, dedicated to communication between them, that is, it is available when, for example, one wishes to consult data in the infrastructure on the ground from the aircraft or one wishes to obtain information items stored in the infrastructure on the ground.
In this way, it is not necessary to establish a communication link or channel each time one wishes to conduct a communication.
Consequently, communication between the aircraft and the infrastructure on the ground is ensured so long as one is not dependent on whether or not a channel is available.
As the infrastructure of the airplane becomes a continuation of the infrastructure on the ground, it is possible to perform updates and maintenance operations in synchronous manner between the ground and on-board.
Moreover, communication can be initiated via the on-board infrastructure or via the infrastructure on the ground.
In accordance with the invention, the communication network 220 connecting the on-board infrastructure of an airplane and the infrastructure on the ground makes it possible no longer to take on board all the tools and software, but only the essential tools, the other data being able to be consulted by connection when that is necessary. In this way, a maintenance technician, in the airplane, can access the data stored in the infrastructure on the ground making it possible to perform maintenance operations, without going back and forth between the airplane and the maintenance base.
Furthermore, the maintenance technician, in the airplane, can perform updates of the tools and the data stored in the infrastructure of the airplane.
Furthermore, the maintenance technician can update the tools and the data in the airplane from the ground, an operation also called remote updating (“remote update” in English terminology). For example, the maintenance technician can update the status of the logbook of the airplane at the end of maintenance.
In the same way, the pilot or the maintenance operator can consult the ground servers in real time in order to have access to all the servers of the company to which the airplane is attached and simultaneously update the on-board data and tools, an operation also called remote operations (“remote operations” in English terminology).
Finally, a technician on the ground can command the performance of tests on the avionic system prior to the performance of maintenance operations by sending out commands via communication network 220. In this way, it is made possible for the maintenance technician, for example, prior to the landing of the airplane, to carry out tests with a view to identifying the replaceable entities of the malfunctioning airplane.
According to a particular embodiment, there is created, on a communication medium between the on-board infrastructure and the infrastructure on the ground, in particular on a wireless network or on a mobile telephony network, an encapsulation, also called tunneling (“tunneling” in English) protocol, capable of encapsulating the data to be transmitted in encoded form. This network created is called a virtual private network (designated as RPV or VPN, acronym for “Virtual Private Network”). This network is referred to as virtual because it connects two physical networks through a not necessarily reliable communication medium, and private because only the computers of the networks of either side of the virtual private network can access the data. Moreover, it makes it possible to secure exchanges on the not necessarily reliable communication medium.
In this way, a secured link at lower cost is created.
A possible implementation of this system in accordance with the invention is illustrated in
According to this implementation, a server outside airplane 300, here on the ground, of the airline company, is connected to a link server 320 of the on-board structure of the airplane via a virtual network 305. The airplane server 310 comprises a network server ANSU (“Aircraft Network Server Unit” according to English terminology) 315 also connected to link server 320.
To the server ANSU 315, there are connected in particular a server interface unit 325, different on-board terminals 330, 335, 340 by means of an electronic network routing unit (“Ethernet Switch Unit” according to English terminology) 345.
According to a particular embodiment of the invention, the electronic storage unit is connected to a Satcom-type satellite network, the latter itself being capable of being connected to the server of the airline company.
The link server 320 is capable of being connected via a connection network, for example a virtual private network, to a server 300 of the airline company by using different communication mediums, in particular the mobile telephony network, for example the GSM (“Global System for Mobile Communications” according to English terminology)/EDGE/UMTS (“Universal Mobile Telecommunications System” in English terminology)/HSDPA (“High Speed Downlink Packet Access” in English terminology) network, or a wireless network, for example the WIFI 802.11a/b/g or a satellite network, for example the HSD (“high speed data Satcom” in English terminology) network.
In that way, the computer network of the airplane is connected to the computer network on the ground, of the airline company to which the airplane is attached.
At the time of establishment of a network connection between the computer network of the airplane and the computer network on the ground, a medium is selected from among the plurality of available communication mediums, in particular according to the availability of the communication mediums or the output of the communication mediums.
The servers 300 and 330 then encapsulate and decapsulate the data via coding and encryption mechanisms.
These communication mediums are capable of providing a high output so as to allow the transmission of large masses of data between the infrastructure on the ground and the on-board infrastructure of the airplane in a reasonable time, and in particular to make it possible to load, from the airline company infrastructure on the ground to the airplane computers, the most recent versions of the tools, data and documents, the loading operation being able to be commanded by a technician on board the airplane or by a technician on the ground from the infrastructure on the ground.
Also, it is possible for a maintenance technician on board the airplane to have access to the maintenance data and the central tools for management of the information of the airline company (“maintenance information server” in English terminology or “Flight Ops Information server”) stored in the infrastructure on the ground.
Furthermore, this type of connection makes it possible, by virtue of the Internet connections, to reach from the airplane servers connected to the airline company infrastructure on the ground, such as the server of the manufacturer of the airplane or of certain major items of equipment making up the airplane or its cabin.
Furthermore, according to this architecture, it is possible for a maintenance technician on board the airplane to have access to providers in order, for example, to consult flight data or maintenance documentations or to connect with service companies on the ground that support the maintenance operations of the airplane.
By means of such an architecture, the maintenance of an airplane, consisting in putting in working order, maintaining an airplane in good flying condition and repairing an airplane is carried out in the shortest possible time and in optimized manner, since all the tools on the ground for maintenance of the airplane are updated in particular at the moment of the authorization to dispatch the airplane.
Furthermore, in accordance with the invention, electronic maintenance makes it possible to put in working order and maintain an airplane in good flying condition at any moment and irrespective of its location.
To do so, a minimum of information data, such as the diagnosis tool, the electronic logbook, the list of minimum equipment MEL (“Minimum Equipment List” in English terminology), or even a subset of these data is loaded into the airplane.
Then, through the intermediary of the communication network 220, the maintenance technician on board the airplane will access by a connection called remote (“remote access” in English terminology), in particular secured, for example data present in the company infrastructure on the ground, such as the repair manual TSM, the maintenance manual AMM (acronym for “Aircraft Maintenance Manual” in English terminology) or the IPC (acronym for “Identification Part Catalogue” in English terminology) that makes it possible to identify the reference of a part to be replaced and to order it from the spares warehouse.
In that way, the technician has, via the communication network 220, in particular by the use of a VPN-type secured channel, an access to the manuals stored in the infrastructure on the ground, these manuals being the most recent versions, such as illustrated in
In this way, such as illustrated in
According to a particular embodiment, this network connection is a synchronous connection.
According to another embodiment, a technician on the ground can, prior to the arrival of the airplane on the ground, send out commands, via the communication network 220, to the on-board infrastructure in order to conduct a certain number of tests so as to diagnose, isolate and repair the faults as quickly as possible.
According to an embodiment, the tools, in particular the diagnosis tools, and the data can be loaded into the on-board infrastructure in the airplane, via the communication network 220, the latter being capable of carrying out exchanges between the on-board infrastructure and the infrastructure on the ground according to a high-output means of communication.
To do so, there can be put in place a communication network 220 capable of communicating between the link server 320 and the company server 300 according to a mobile telephony system and/or according to a wireless communication network, in particular by the use of a secured VPN-type channel.
According to an exemplary scenario, one is informed of a fault in an item of equipment by virtue of the storage of the fault in the logbook (logbook). An operator on the ground is connected to the airplane from the maintenance center (mcc) on the ground.
Since the result of the test concludes that the fault in the item of equipment is, for example, a “spurious message” (extraneous message), the operator can, still from his office, decide that the item of equipment is operational, and issue an “OK” status on board the airplane (updating of the on-board base) at the same time that he updates the ground database.
There is only one ground/on-board tool allowing maintenance of the airplane. It involves a tool that can be used from the airplane or from the maintenance center.
There now is illustrated in
The link server 320 comprises a wireless communication module TWLU 510 (“Terminal Wireless LAN Unit” according to English terminology) capable of communicating, for example, according to the WIFI a/b/g or WImax standards, and a mobile telephony module 515 such as a GSM/GPRS or UMTS module, these two modules being connected to a triplexer module 520 connected to an antenna 525.
On the mobile telephony module 515, there is installed an operating system 530, on which there is present a router 535 capable of routing the communication either to the wireless communication module TWLU 510 or to the triplexer module 520 directly so as to use the mobile telephony protocol.
The communication of the server of the airplane with the server of the airline company is managed by a module VPN 540.
Furthermore, a fireguard (“firewall” according to English terminology) module 545 is installed upstream from the module VPN 540, between the data originating from the network server ANSU 315 and the module VPN 540 so as to protect the server 315 from intrusions.
Within the airplane, such as seen above, a server ANSU 315 and a link server 320 comprising, according to the example, a wireless communication module TWLU 510 and a mobile telephony module 515, are present in the airplane.
Concerning the airline company network with which the server 310 of the airplane will communicate, this comprises a serveur proxy 605 (French translation of “proxy server”, also called “agent server”) of RADIUS (“Remote Authentication Dial-In User Service” according to English terminology) type, capable of receiving and sending out requests and data via an antenna 610.
The proxy server is a machine serving as intermediary between the computers of a local network of the airline company and a second network, the computer network of the airplane.
The proxy server 605 is connected via a local network 615 to other RADIUS servers 620, 625. In fact, it is to be noted that the RADIUS server can function as a proxy, that is, transmit requests from the client to other RADIUS servers.
A RADIUS server makes it possible to produce the link between identification needs and a user base ensuring transport of the authentication data in standardized manner.
In order to carry out data exchanges between the server of the airplane and the local network of the airline company, the server ANSU 315 generates an airplane certificate and transmits it to the wireless communication module 510 via the mobile telephony module 515 such as seen above.
The wireless communication module 510 sends out a request to the local network of the airline company according to the EAP-TLS (“Extensible Authentication Protocol-Transport Layer Security” according to English terminology) protocol, in order to exchange certificates and in this way create a secured tunnel between the network of the airplane and the local network of the airline company. This network created in this way is a virtual private network.
To do so, the EAP-TLS protocol uses two certificates for the creation of a secured tunnel which then allows identification: a server side and a client side.
This protocol uses an infrastructure with public keys (“Public Key Infrastructure” in English terminology) in order to secure the identification communications between the clients, namely the servers of the airplanes of the airline company and the RADIUS servers of the airline company.
The identification then is carried out, in particular by the sending out of a DHCP-type (“Dynamic Host Configuration Protocol” according to English terminology) request, to the proxy server of the local network of the airline company 305 in order to inform it of the identity thereof.
According to this Figure, there is illustrated the creation of a virtual private network based on a mobile telephony communication medium, namely the GSM/GPRS or UMTS network. Any type of mobile telephony network, however, can be used as a communication medium with a virtual private network according to the invention.
This type of virtual private network allowing communication of a computer network of an airplane with a network on the ground is achieved in particular via a provider of a radio communication network in packet mode 710 and the Internet network or a local private network 715.
Furthermore, there is illustrated the creation of a virtual private network based on a wireless communication medium 720, namely, for example, the WIFI or WImax network, the latter being in particular the network of the airport. This virtual private network also is achieved via the Internet network or a local private network 715.
Moreover, a virtual private network can be created between a computer network of an airplane and a network on the ground when the airplane is in flight, in particular by using a satellite communication 725.
Once this virtual private network exists, operations of maintenance, of loading, can be performed by a technician on board or on the ground and benefit from the most recent versions of the procedures manuals stored in the infrastructure on the ground.
Furthermore, it is possible to update the tools and data stores by the computers of the airplane in secured manner.
Number | Date | Country | Kind |
---|---|---|---|
07 54396 | Apr 2007 | FR | national |
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/FR2008/000475 | 4/4/2008 | WO | 00 | 1/15/2010 |
Publishing Document | Publishing Date | Country | Kind |
---|---|---|---|
WO2008/139060 | 11/20/2008 | WO | A |
Number | Name | Date | Kind |
---|---|---|---|
4924456 | Maxwell et al. | May 1990 | A |
5826198 | Bergins et al. | Oct 1998 | A |
5935267 | Hayakawa | Aug 1999 | A |
6115656 | Sudolsky | Sep 2000 | A |
7907545 | Ric | Mar 2011 | B2 |
8401729 | Rouyre | Mar 2013 | B2 |
20020058478 | de La Chapelle et al. | May 2002 | A1 |
20030003872 | Brinkley et al. | Jan 2003 | A1 |
20030186706 | Bergins et al. | Oct 2003 | A1 |
20040039499 | Felke et al. | Feb 2004 | A1 |
20040167967 | Bastian et al. | Aug 2004 | A1 |
20040198498 | Yamashita et al. | Oct 2004 | A1 |
20050026609 | Brinkley et al. | Feb 2005 | A1 |
20050256616 | Rhoads | Nov 2005 | A1 |
20060052921 | Bodin et al. | Mar 2006 | A1 |
20060179457 | Brady et al. | Aug 2006 | A1 |
20070010236 | Allen et al. | Jan 2007 | A1 |
20070183435 | Kettering et al. | Aug 2007 | A1 |
Number | Date | Country |
---|---|---|
1914829 | Feb 2007 | CN |
1 316 908 | Jun 2003 | EP |
1 592 203 | Nov 2005 | EP |
2003-271758 | Sep 2003 | JP |
2005-327278 | Nov 2005 | JP |
2005060509 | Jul 2005 | WO |
2007 117285 | Oct 2007 | WO |
Entry |
---|
IP.com search results. |
Google Scholar search results. |
Google Patents search results. |
Chinese Office Action issued Apr. 24, 2012 in Chinese Patent Application No. 200880014899.5 with English translation. |
Japanese Office Action issued Sep. 4, 2012. in Patent Application No. 2010-501553 (English-language translation only). |
Number | Date | Country | |
---|---|---|---|
20100121938 A1 | May 2010 | US |