Communications: electrical – Aircraft alarm or indicating systems
Reexamination Certificate
2000-02-24
2001-09-04
Tweel, John A. (Department: 2736)
Communications: electrical
Aircraft alarm or indicating systems
C701S008000
Reexamination Certificate
active
06285298
ABSTRACT:
BACKGROUND OF THE INVENTION
This invention relates to safety critical systems such as avionics systems and nuclear power monitoring systems and specifically to avionics systems with several data sources or avionics sensor systems providing data to displays or to data input/output concentrators containing comparators that check the validity of the data.
A number of safety critical system applications such as avionics and nuclear power monitoring require data input from two or more similar or identical sensor systems to ensure the validity of the data. The data from one sensor system is compared to the data from another sensor system in a data comparator to ensure the validity of the data.
For safety in critical avionics applications, critical data must be validated by the avionics system. The data from such sources as dual aircraft engine indicating systems (EIS), dual attitude heading system (AHS) and dual air data system (ADS) is provided to a primary flight display (PFD) and a multifunction display (MFD) or an input/output concentrator (IOC) containing data comparator functions. The data comparators in the PFD, MFD, or the IOC establish data reasonableness and validity by comparing the data from the dual sources. When a comparator indicates that the data from one source is significantly different than the other, pilots evaluate all their data sources for reasonableness and deselect the invalid or misleading source from their PFD and MFD. In a highly integrated avionics system, the integrity of the data to the data comparators must be considered.
Complex avionics systems require the introduction of multiple critical sensor data into an IOC device. New avionics systems may use as many as three or more AHS, three ADS, and three EIS sensor systems providing data to an IOC. The IOC sends the concentrated data from the multiple data sources to using systems on board the aircraft such as the primary flight display, the multifunction display, and a flight control system (FCS) on an Ethernet bus or other digital bus. The Ethernet bus itself is protected with a CRC (cyclic redundancy check) to protect against misleading critical data.
A failure mode in the IOC, the PFD, the MFD, or elsewhere may exist that may cause data from one sensor to masquerade as data from another sensor. For example the data from one ADS in a dual ADS system may be present at the second ADS input to a PFD well as its own input to the PFD. This potential failure has been a cause for concern to avionics system and flight control system designers for years. This concern has led to inputting some of the critical data from the dual ADS and the dual AHS directly to the FCS. This approach is no longer feasible with the new complex avionics systems with multiple sensor sources, data concentrators, and high speed data buses.
What is needed is a common sensor detector to detect failures where one sensor is masquerading as another and indicate the failure on a display in safety critical applications such as nuclear power plant monitoring and avionics systems. The common sensor detector should work with conventional systems as well as systems employing multiple sensors, data concentrators, and high speed data buses.
SUMMARY OF THE INVENTION
An avionics system with a common sensor detector is disclosed. The avionics system comprises two or more air data systems for measuring air data parameters. The air data systems further comprise a plurality of pressure and temperature sensors for providing pressure and temperature sensor data. Two or more air data computers compute air data flight parameter data associated with the pressure and temperature sensor data from the plurality of pressure and temperature sensors. The avionics system also comprises two or more attitude heading systems for measuring flight parameter data and the attitude heading systems further comprise a plurality of flux detector, rate gyro, and accelerometer sensors for providing flux detector, rate gyro, and accelerometer sensor data. The attitude heading system also comprises two or more attitude heading computers for computing attitude and heading flight parameter data associated with the flux detector, rate gyro, and accelerometer data from the plurality of flux detector, rate gyro, and accelerometer sensors. The avionics system comprises one or more flight displays for receiving, processing, and displaying the air data and attitude and heading flight parameter data. The flight displays further comprise a plurality of inside limit data comparators to compare the data from the air data computers and the attitude heading computers to indicate a common sensor fault condition when the data difference from what should be different analog sensors is zero or approximately zero for a predetermined period of time.
A safety critical system employing the common sensor detector is disclosed. The safety critical system comprises a plurality of analog sensors for sensing safety critical system parameters and for providing sensor data associated with the safety critical system parameters to a plurality of computers. The computers receive the sensor data and compute system parameter data associated with the sensor data from the plurality of analog sensors. A data display receives the system parameter data from the computers for processing and displaying. The data display further comprises a plurality of inside limit data comparators to compare the system parameter data from at least a same pair of the plurality of computers to indicate a common sensor fault condition when the system parameter data difference is zero or approximately zero for a predetermined period of time.
It is an object of the present invention to detect common sensor faults in a safety critical system.
It is an object of the present invention to detect a common sensor fault in an avionics system with an inside limit data comparator.
It is an advantage of the present invention to detect common sensor faults in a display or input/output data concentrator.
It is a feature of the present invention to display common sensor faults on a display.
REFERENCES:
patent: 3505641 (1970-04-01), Boskovich
patent: 4464661 (1984-08-01), Redmond
patent: 4635030 (1987-01-01), Rauch
patent: 5001638 (1991-03-01), Zimmerman et al.
patent: 5402119 (1995-03-01), Feierstein
patent: 5949677 (1999-09-01), Ho
Eppele Kyle
Jensen Nathan O.
Rockwell Collins
Tweel John A.
LandOfFree
Safety critical system with a common sensor detector does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Safety critical system with a common sensor detector, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Safety critical system with a common sensor detector will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2485263