Nothing Special   »   [go: up one dir, main page]

US20220351317A1 - System and method for updating data for computing devices included in an aircraft - Google Patents

System and method for updating data for computing devices included in an aircraft Download PDF

Info

Publication number
US20220351317A1
US20220351317A1 US17/623,200 US202017623200A US2022351317A1 US 20220351317 A1 US20220351317 A1 US 20220351317A1 US 202017623200 A US202017623200 A US 202017623200A US 2022351317 A1 US2022351317 A1 US 2022351317A1
Authority
US
United States
Prior art keywords
data
updating
group
computing device
computing devices
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
US17/623,200
Other versions
US11508025B1 (en
Inventor
Denis Delville
Louis Théophile THIRION
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Safran Electronics Defense
Safran Electronics and Defense SAS
Original Assignee
Safran Electronics and Defense SAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from FR1907603A external-priority patent/FR3098617A1/en
Application filed by Safran Electronics and Defense SAS filed Critical Safran Electronics and Defense SAS
Assigned to SAFRAN ELECTRONICS DEFENSE reassignment SAFRAN ELECTRONICS DEFENSE ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: DELVILLE, Denis, THIRION, LOUIS THEOPHILE
Publication of US20220351317A1 publication Critical patent/US20220351317A1/en
Application granted granted Critical
Publication of US11508025B1 publication Critical patent/US11508025B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
    • G06Q50/10—Services
    • G06Q50/26—Government or public services
    • G06Q50/265—Personal security, identity or safety
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B64—AIRCRAFT; AVIATION; COSMONAUTICS
    • B64D—EQUIPMENT FOR FITTING IN OR TO AIRCRAFT; FLIGHT SUITS; PARACHUTES; ARRANGEMENT OR MOUNTING OF POWER PLANTS OR PROPULSION TRANSMISSIONS IN AIRCRAFT
    • B64D43/00—Arrangements or adaptations of instruments
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B64—AIRCRAFT; AVIATION; COSMONAUTICS
    • B64F—GROUND OR AIRCRAFT-CARRIER-DECK INSTALLATIONS SPECIALLY ADAPTED FOR USE IN CONNECTION WITH AIRCRAFT; DESIGNING, MANUFACTURING, ASSEMBLING, CLEANING, MAINTAINING OR REPAIRING AIRCRAFT, NOT OTHERWISE PROVIDED FOR; HANDLING, TRANSPORTING, TESTING OR INSPECTING AIRCRAFT COMPONENTS, NOT OTHERWISE PROVIDED FOR
    • B64F5/00—Designing, manufacturing, assembling, cleaning, maintaining or repairing aircraft, not otherwise provided for; Handling, transporting, testing or inspecting aircraft components, not otherwise provided for
    • B64F5/40—Maintaining or repairing aircraft
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • the present invention relates to a system and a method for updating data for computing devices included in an aircraft.
  • Some computing devices also referred to as computing appliances, that equip aircraft must be updated regularly. This is for example the case with flight management systems (FMS) or flight data management systems (ACMS, standing for Aircraft Condition Monitoring Systems).
  • FMS flight management systems
  • ACMS flight data management systems
  • the updating is not regular and is carried out only at isolated points in time.
  • a computing device used for controlling movable members of the aircraft such as a rudder may, when it is updated, cause the movement of the rudder and injure a maintenance operator located in proximity to the rudder.
  • the operator in the cockpit must visually check that all the computing devices that are to be updated are in a state not presenting any risk for the maintenance operators, for example a possible movement of a movable element of the aircraft, before proceeding with the update.
  • the aim of the present invention is to solve the drawbacks of the prior art by proposing a system and a method for updating data for computing devices included in an aircraft that do not routinely require the presence of an operator in the cockpit of the aircraft.
  • the invention proposes a data-updating system for computing devices included in an aircraft, at least one computing device in a first group of computing devices being, during the updating of the data of the computing device, liable to affect the safety of an operator carrying out maintenance on the aircraft and at least one other computing device in a second group of computing devices not, during the updating of the data of the computing device, being liable to affect the safety of the operator carrying out the maintenance on the aircraft, characterised in that the system is included in the aircraft and comprises a data loading device, for each computing device in the second group of computing devices, a connection connecting the data loading device with the computing device in the second group, a data router connected to the data loading device, the data router being connected to the computing devices in the first group of computing devices and transferring updating data to the computing devices in the second group only when a command by an operator present in the cockpit of the aircraft is detected, and in that the data loading device comprises:
  • the invention also relates to a data updating method for computing devices included in an aircraft, at least one computing device in a first group of computing devices being, during the updating of the data of the computing device, liable to affect the safety of an operator carrying out maintenance on the aircraft and at least one other computing device in a second group of computing devices not, during the updating of the data of the computing device, being liable to affect the safety of the operator carrying out the maintenance on the aircraft, characterised in that the method is implemented by a data loading device of a system for updating data in the aircraft, the data loading device comprising, for each computing device in the second group of computing devices, a connection connecting the data loading device with the computing device in the second group, the data loading device being connected to a data router connected to the computing devices in the first group of computing devices and transferring updating data to the computing devices in the second group only when a command by an operator present in the cockpit of the aircraft is detected, and in that the method comprises the steps of:
  • the updating of the computing devices in the second group can thus be implemented at a distance and within a very short period of time for a fleet of aircraft.
  • the means for identifying the computing device for which the updating data are intended identify the computing device for which the updating data are intended using information included in the updating data.
  • the means for identifying the connection to which the updating data must be transferred comprise a look-up table indicating for each computing device in the second group the connection connecting the computing device to the data loading device.
  • the updating data are received by means of a connection with an updating-data transfer device located outside the aircraft.
  • each connection connecting the data loading device with a computing device in the second group is a point-to-point connection.
  • each connection connecting the data loading device with a computing device of the second group is a connection in accordance with the ARINC 429, ISO/IEC 802-3 Ethernet, ARINC 664 or CAN standard.
  • each connection connecting the data loading device with a computing device in the second group connects the data loading device with the computing device by means of another data router and a point-to-point connection between the computing device and the other router.
  • the data loading device is connected to the other router by two connections, one connection for transferring the data and one connection for transferring information on configuration of the other router.
  • the information on configuration of the other data router is obtained by the loading configuration device from a data table by means of a look-up table indicating, for each computing device in the second group, the point-to-point connection connecting the computing device and the other router.
  • the invention also relates to the computer programs stored on an information carrier, said programs comprising instructions for implementing the previously described methods, when they are loaded into and executed by a computing system.
  • FIG. 1 a shows a first example of architecture of the data updating system for computing devices included in an aircraft
  • FIG. 1 b shows a second example of architecture of the data updating system for computing devices included in an aircraft
  • FIG. 2 shows an example of architecture of a data loading device wherein the present invention is implemented
  • FIG. 3 shows an example of an algorithm executed by the data loading device according to the present invention.
  • FIG. 1 a shows a first example of architecture of the data updating system for computing devices included in an aircraft.
  • an aircraft 10 comprises a data updating system for computing devices 140 1 to 140 N , 150 1 to 150 M included in the aircraft 10 .
  • the data updating system comprises a data loading device 100 a, and a data router 110 the routing function of which is controlled by a control device 120 actuated by an operator positioned in the cockpit of the aircraft 10 .
  • the computing devices 140 1 to 140 N , 150 1 to 150 M are distributed in a first and a second group of computing devices.
  • the first group of computing devices comprises the computing devices 140 1 to 140 N where N is greater than or equal to 1.
  • the computing devices 140 1 to 140 N in the first group of computing devices are, during the data updating thereof, all or partly liable to affect the safety of an operator carrying out maintenance on the aircraft.
  • the second group of computing devices comprises the computing devices 150 1 to 150 M where M is greater than or equal to 1.
  • the computing devices 150 1 to 150 M in the second group of computing devices are liable to be updated in cyclic and repeated manners, and are not, during the data updating thereof, liable to affect the safety of an operator carrying out maintenance on the aircraft.
  • Each computing device in the first group of computing devices is connected to the data router 110 by means of connections of the ARINC 429, ISO/IEC 802-3 Ethernet, Ethernet, ARINC 664 or CAN type.
  • the data router 110 is connected to the data loading device 100 a by means of a connection of the ARINC 429, Ethernet, ISO/IEC 802-3, ARINC 664 or CAN type.
  • the operation of the data router 110 is activated by an operator positioned in the cockpit of the aircraft by means of a virtual or physical control button 120 .
  • a virtual or physical control button 120 the operator, after having checked whether the conditions under which the aircraft is situated do not risk creating safety hazards for persons located in the aircraft or in proximity to the aircraft, has not activated the operation of the data router, no updating of the data of at least one computing device in the first group of computing devices can be implemented.
  • Each computing device in the second group of computing devices is directly connected to the data loading device 100 a by means of connections of the ARINC 429, ISO/IEC 802-3 Ethernet, Ethernet, ARINC 664 or CAN type.
  • the data loading device 100 a is connected by means of a cable and/or wireless network to an updating-data transfer device 180 placed outside the aircraft, for example in a local or remote maintenance centre.
  • a user of the updating-data transfer device 110 demands the transfer of the updating data intended for the data downloading device 100 a while identifying the computing device in the second group to which the data are transmitted.
  • the data downloading device 100 a comprises:
  • FIG. 1 b shows a second example of architecture of the data updating system for computing devices included in an aircraft.
  • the data router 110 the control device 120 , the updating-data transfer device 180 and the computing devices 140 1 to 140 N , 150 1 to 150 M are identical to those described with reference to FIG. 1 a.
  • the data updating system comprises a data loading device 100 b and a second data router 160 .
  • the routing function of the second data router 160 is not controlled by an action of an operator positioned in the cockpit of the aircraft 10 , it is controlled by the data loading device 100 b.
  • the second data router 160 is connected by two connections to the data loading device 100 b.
  • a connection denoted Config in FIG. 1 b is dedicated to transmitting information indicating to the second data router to which port, i.e. to which computing device in the second group of computing devices, the updating data transferred by the data loading device 100 b by the other connection must be transferred.
  • connections connecting the second data router and the data loading device 100 b are connections of the ARINC 429, Ethernet, ISO/IEC 802-3, ARINC 664 or CAN type.
  • the information indicating to the second data router to which port the updating data must be transferred is called configuration data of the second router.
  • the configuration data of the router 160 are transmitted by the data loading device 100 b using the configuration table stored in the data loading device 100 b.
  • Each computing device in the second group of computing devices is connected to the second data router 160 by means of connections of the ARINC 429, ISO/IEC 802-3 Ethernet, Ethernet, ARINC 664 or CAN type.
  • FIG. 2 shows an example of architecture of the data loading device wherein the present invention is implemented.
  • the data loading device 100 a or 100 b comprises:
  • the processor 200 is capable of executing instructions loaded in the volatile memory 203 from the non-volatile memory 202 , from an external memory (not shown), from a storage medium, such as an SD card or the like, or from a communication network.
  • the processor 200 When the data loading device is powered up, the processor 200 is capable of reading instructions from the volatile memory 203 and executing them. These instructions form a computer program that causes the implementation, by the processor 200 , of all or part of the method described in relation to FIG. 3 .
  • All or part of the method described in relation to FIG. 3 can be implemented in software form by executing a set of instructions by a programmable machine, such as a DSP (digital signal processor) or a microcontroller or be implemented in hardware form by a machine or a dedicated component, such as an FPGA field programmable gate array) or an ASIC (application-specific integrated circuit).
  • a programmable machine such as a DSP (digital signal processor) or a microcontroller
  • a dedicated component such as an FPGA field programmable gate array
  • ASIC application-specific integrated circuit
  • FIG. 3 shows an example of an algorithm executed by the data loading device according to the present invention.
  • the data downloading device 100 detects the reception of the updating data by means of the interface 205 .
  • the data downloading device 100 identifies the computing device for which the updating data are intended from information included in the updating data received.
  • the data downloading device 100 passes to the step E 305 and stores the received data, which will be transferred only when the operation of the data router 110 is activated by an operator.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Business, Economics & Management (AREA)
  • Computer Hardware Design (AREA)
  • Aviation & Aerospace Engineering (AREA)
  • Tourism & Hospitality (AREA)
  • Manufacturing & Machinery (AREA)
  • Transportation (AREA)
  • Development Economics (AREA)
  • Educational Administration (AREA)
  • Health & Medical Sciences (AREA)
  • Economics (AREA)
  • General Health & Medical Sciences (AREA)
  • Human Resources & Organizations (AREA)
  • Marketing (AREA)
  • Primary Health Care (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Small-Scale Networks (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

A data updating system for computing devices included in an aircraft, wherein one computing device in a first group of computing devices is, and one other computing device in a second group of computing devices is not, when the data of the computing device is updated, liable to affect the safety of the operator carrying out the maintenance on the aircraft. The system includes a data loading device, a connection connecting the data loading device with the computing device in the second group, and a data router connected to the data loading device, the data router transferring updating data to the computing devices in the first group only when a command by an operator in the cockpit of the aircraft is detected.

Description

    TECHNICAL FIELD
  • The present invention relates to a system and a method for updating data for computing devices included in an aircraft.
    • PRIOR ART
  • Some computing devices, also referred to as computing appliances, that equip aircraft must be updated regularly. This is for example the case with flight management systems (FMS) or flight data management systems (ACMS, standing for Aircraft Condition Monitoring Systems).
  • For other computing devices, the updating is not regular and is carried out only at isolated points in time.
  • Currently, updating the data of a computing device included in an aircraft requires the presence in the cockpit of the aircraft of an operator who controls the updating of the computing device. This is because some computing devices are liable to affect the safety of an operator carrying out maintenance on the aircraft. For example, a computing device used for controlling movable members of the aircraft such as a rudder may, when it is updated, cause the movement of the rudder and injure a maintenance operator located in proximity to the rudder.
  • The operator in the cockpit must visually check that all the computing devices that are to be updated are in a state not presenting any risk for the maintenance operators, for example a possible movement of a movable element of the aircraft, before proceeding with the update.
  • However, other computing devices such as flight data management systems or the flight management systems are not liable to affect the safety of an operator carrying out maintenance on the aircraft.
  • Because of safety constraints, an operator must nevertheless be present in the cockpit of the aircraft for the updating of the data of the computing devices not to be liable to affect the safety of an operator carrying out maintenance on the aircraft.
    • DISCLOSURE OF THE INVENTION
  • The presence of an operator in the cockpit, in particular for operations of updating data of computing devices that are not liable to affect the safety of an operator carrying out maintenance on the aircraft, makes updating thereof more expensive in terms of human resources and may, in certain cases, delay the updating of the data of these computing devices.
  • The aim of the present invention is to solve the drawbacks of the prior art by proposing a system and a method for updating data for computing devices included in an aircraft that do not routinely require the presence of an operator in the cockpit of the aircraft.
  • For this purpose, according to a first aspect, the invention proposes a data-updating system for computing devices included in an aircraft, at least one computing device in a first group of computing devices being, during the updating of the data of the computing device, liable to affect the safety of an operator carrying out maintenance on the aircraft and at least one other computing device in a second group of computing devices not, during the updating of the data of the computing device, being liable to affect the safety of the operator carrying out the maintenance on the aircraft, characterised in that the system is included in the aircraft and comprises a data loading device, for each computing device in the second group of computing devices, a connection connecting the data loading device with the computing device in the second group, a data router connected to the data loading device, the data router being connected to the computing devices in the first group of computing devices and transferring updating data to the computing devices in the second group only when a command by an operator present in the cockpit of the aircraft is detected, and in that the data loading device comprises:
      • means for receiving the updating data,
      • means for identifying the computing device for which the updating data are intended,
      • means for identifying the connection to which the updating data must be transferred,
      • means for transferring the updating data to the identified connection if the computing device for which the updating data are intended forms part of the second group of computing devices.
  • The invention also relates to a data updating method for computing devices included in an aircraft, at least one computing device in a first group of computing devices being, during the updating of the data of the computing device, liable to affect the safety of an operator carrying out maintenance on the aircraft and at least one other computing device in a second group of computing devices not, during the updating of the data of the computing device, being liable to affect the safety of the operator carrying out the maintenance on the aircraft, characterised in that the method is implemented by a data loading device of a system for updating data in the aircraft, the data loading device comprising, for each computing device in the second group of computing devices, a connection connecting the data loading device with the computing device in the second group, the data loading device being connected to a data router connected to the computing devices in the first group of computing devices and transferring updating data to the computing devices in the second group only when a command by an operator present in the cockpit of the aircraft is detected, and in that the method comprises the steps of:
      • receiving the updating data,
      • identifying the computing device for which the updating data are intended,
      • identifying the connection to which the updating data must be transferred,
      • transferring the updating data to the identified connection if the computing device for which the updating data are intended forms part of the second group of computing devices.
  • Thus the presence of an operator in the cockpit of the aircraft for updating data of a computing device is not routinely necessary. The updating of the computing devices in the second group can thus be implemented at a distance and within a very short period of time for a fleet of aircraft.
  • By connecting the data loading device to a data router itself connected to the computing devices in the first group of computing devices and by connecting the data loading device directly to the computing devices in the second group of computing devices, it is possible to avoid possible updates of data of the computing devices in the first group of computing devices being implemented without the presence of an operator in the cockpit of the aircraft.
  • According to a particular embodiment of the invention, the means for identifying the computing device for which the updating data are intended identify the computing device for which the updating data are intended using information included in the updating data.
  • According to a particular embodiment of the invention, the means for identifying the connection to which the updating data must be transferred comprise a look-up table indicating for each computing device in the second group the connection connecting the computing device to the data loading device.
  • Thus, by updating this table, it is possible to change the configuration of the aircraft without impact on the data loading device.
  • According to a particular embodiment of the invention, the updating data are received by means of a connection with an updating-data transfer device located outside the aircraft.
  • According to a particular embodiment of the invention, each connection connecting the data loading device with a computing device in the second group is a point-to-point connection.
  • Thus the solution described can be implemented by a simple wiring modification and simplifies the aeronautical certification of the aircraft.
  • According to a particular embodiment of the invention, each connection connecting the data loading device with a computing device of the second group is a connection in accordance with the ARINC 429, ISO/IEC 802-3 Ethernet, ARINC 664 or CAN standard.
  • According to a particular embodiment of the invention, each connection connecting the data loading device with a computing device in the second group connects the data loading device with the computing device by means of another data router and a point-to-point connection between the computing device and the other router.
  • Thus the number of computing devices in the group of computers the updating of which does not present a risk of safety for a maintenance operator can be increased.
  • According to a particular embodiment of the invention, the data loading device is connected to the other router by two connections, one connection for transferring the data and one connection for transferring information on configuration of the other router.
  • According to a particular embodiment of the invention, the information on configuration of the other data router is obtained by the loading configuration device from a data table by means of a look-up table indicating, for each computing device in the second group, the point-to-point connection connecting the computing device and the other router.
  • The invention also relates to the computer programs stored on an information carrier, said programs comprising instructions for implementing the previously described methods, when they are loaded into and executed by a computing system.
    • BRIEF DESCRIPTION OF THE DRAWINGS
  • The features of the invention mentioned above, as well as others, will emerge more clearly from the reading of the following description of an example embodiment, said description being made in relation to the accompanying drawings, among which:
  • FIG. 1a shows a first example of architecture of the data updating system for computing devices included in an aircraft;
  • FIG. 1b shows a second example of architecture of the data updating system for computing devices included in an aircraft;
  • FIG. 2 shows an example of architecture of a data loading device wherein the present invention is implemented;
  • FIG. 3 shows an example of an algorithm executed by the data loading device according to the present invention.
    •
  • FIG. 1a shows a first example of architecture of the data updating system for computing devices included in an aircraft.
  • In FIG. 1 a, an aircraft 10 comprises a data updating system for computing devices 140 1 to 140 N, 150 1 to 150 M included in the aircraft 10.
  • The data updating system comprises a data loading device 100 a, and a data router 110 the routing function of which is controlled by a control device 120 actuated by an operator positioned in the cockpit of the aircraft 10.
  • According to the present invention, the computing devices 140 1 to 140 N, 150 1 to 150 M, called computers on FIG. 1 a, are distributed in a first and a second group of computing devices. The first group of computing devices comprises the computing devices 140 1 to 140 N where N is greater than or equal to 1. The computing devices 140 1 to 140 N in the first group of computing devices are, during the data updating thereof, all or partly liable to affect the safety of an operator carrying out maintenance on the aircraft.
  • The second group of computing devices comprises the computing devices 150 1 to 150 M where M is greater than or equal to 1. The computing devices 150 1 to 150 M in the second group of computing devices are liable to be updated in cyclic and repeated manners, and are not, during the data updating thereof, liable to affect the safety of an operator carrying out maintenance on the aircraft.
  • Each computing device in the first group of computing devices is connected to the data router 110 by means of connections of the ARINC 429, ISO/IEC 802-3 Ethernet, Ethernet, ARINC 664 or CAN type.
  • The data router 110 is connected to the data loading device 100 a by means of a connection of the ARINC 429, Ethernet, ISO/IEC 802-3, ARINC 664 or CAN type.
  • The operation of the data router 110 is activated by an operator positioned in the cockpit of the aircraft by means of a virtual or physical control button 120. Thus, as long as the operator, after having checked whether the conditions under which the aircraft is situated do not risk creating safety hazards for persons located in the aircraft or in proximity to the aircraft, has not activated the operation of the data router, no updating of the data of at least one computing device in the first group of computing devices can be implemented.
  • Each computing device in the second group of computing devices is directly connected to the data loading device 100 a by means of connections of the ARINC 429, ISO/IEC 802-3 Ethernet, Ethernet, ARINC 664 or CAN type.
  • The data loading device 100 a is connected by means of a cable and/or wireless network to an updating-data transfer device 180 placed outside the aircraft, for example in a local or remote maintenance centre.
  • When data of at least one computing device in the second group of devices must be updated, a user of the updating-data transfer device 110 demands the transfer of the updating data intended for the data downloading device 100 a while identifying the computing device in the second group to which the data are transmitted.
  • The data downloading device 100 a comprises:
      • means for receiving the updating data,
      • means for identifying the computing device for which the updating data are intended from information included in the updating data,
      • means for identifying a connection to which the updating data must be transferred, for example by means of a look-up table indicating, for each computing device in the second group, the connection connecting the computing device to the data loading device,
      • means for transferring the updating data to the identified connection if the computing device for which the updating data are intended forms part of the second group of computing devices.
  • FIG. 1b shows a second example of architecture of the data updating system for computing devices included in an aircraft.
  • In the example in FIG. 1 b, the data router 110, the control device 120, the updating-data transfer device 180 and the computing devices 140 1 to 140 N, 150 1 to 150 M are identical to those described with reference to FIG. 1 a.
  • The data updating system comprises a data loading device 100 b and a second data router 160.
  • Unlike the data router 110, the routing function of the second data router 160 is not controlled by an action of an operator positioned in the cockpit of the aircraft 10, it is controlled by the data loading device 100 b.
  • The second data router 160 is connected by two connections to the data loading device 100 b. A connection denoted Config in FIG. 1b is dedicated to transmitting information indicating to the second data router to which port, i.e. to which computing device in the second group of computing devices, the updating data transferred by the data loading device 100 b by the other connection must be transferred.
  • The connections connecting the second data router and the data loading device 100 b are connections of the ARINC 429, Ethernet, ISO/IEC 802-3, ARINC 664 or CAN type.
  • The information indicating to the second data router to which port the updating data must be transferred is called configuration data of the second router.
  • The configuration data of the router 160 are transmitted by the data loading device 100 b using the configuration table stored in the data loading device 100 b.
  • Each computing device in the second group of computing devices is connected to the second data router 160 by means of connections of the ARINC 429, ISO/IEC 802-3 Ethernet, Ethernet, ARINC 664 or CAN type.
  • FIG. 2 shows an example of architecture of the data loading device wherein the present invention is implemented.
  • The data loading device 100 a or 100 b comprises:
      • a processor, microprocessor or microcontroller 200;
      • a volatile memory 203;
      • a non-volatile memory 202;
      • optionally a storage medium reader 204, such as an SD card (Secure Digital card) or a hard disk;
      • an external network interface 205 for receiving data from the updating data transfer device 180;
      • a connection interface 206 with the data router 110;
      • a connection interface 207 with each computing device in the second group of computing devices;
      • a communication bus 201 connecting the processor 200 to the ROM memory 202, to the RAM memory 203, to the storage medium reader 204 and to the interfaces 205, 206 and 207.
  • The processor 200 is capable of executing instructions loaded in the volatile memory 203 from the non-volatile memory 202, from an external memory (not shown), from a storage medium, such as an SD card or the like, or from a communication network.
  • When the data loading device is powered up, the processor 200 is capable of reading instructions from the volatile memory 203 and executing them. These instructions form a computer program that causes the implementation, by the processor 200, of all or part of the method described in relation to FIG. 3.
  • All or part of the method described in relation to FIG. 3 can be implemented in software form by executing a set of instructions by a programmable machine, such as a DSP (digital signal processor) or a microcontroller or be implemented in hardware form by a machine or a dedicated component, such as an FPGA field programmable gate array) or an ASIC (application-specific integrated circuit).
  • FIG. 3 shows an example of an algorithm executed by the data loading device according to the present invention.
  • At the step E300, the data downloading device 100, for 100 a or 100 b, detects the reception of the updating data by means of the interface 205.
  • At the step E301, the data downloading device 100 identifies the computing device for which the updating data are intended from information included in the updating data received.
  • At the step E302, the data downloading device 100 determines whether the computing device for which the updating data are intended forms part of the first or of the second group of computing devices.
  • If the computing device for which the updating data are intended forms part of the first group of computing devices, the data downloading device 100 passes to the step E305 and stores the received data, which will be transferred only when the operation of the data router 110 is activated by an operator.
  • If the computing device for which the updating data are intended forms part of the second group of computing devices, the data downloading device 100 passes to the step E303 and identifies the connection to which the updating data must be transferred, for example by means of a look-up table indicating, for each computing device in the second group, the connection connecting the computing device to the data downloading device.
  • At the step E304, and in accordance with the first example embodiment as described in FIG. 1 a, the data downloading device 100 demands the transfer of the updating data to the identified connection if the computing device for which the updating data are intended forms part of the second group of computing devices. In accordance with the second example embodiment as described in FIG. 1 b, the data downloading device 100 demands the transfer of the updating data over the link connecting it to the second data router and demands the transfer by the connection denoted Config in FIG. 1b of information indicating to the second data router to which port, i.e. to which computing device in the second group of computing devices, the updating data transferred by the data downloading device 100 b by the other connection must be transferred.

Claims (12)

1. A data-updating system for computing devices, the computing devices being included in an aircraft, at least one computing device in a first group of computing devices being, during the updating of the data of the computing device, liable to affect the safety of an operator carrying out maintenance on the aircraft and at least one other computing device in a second group of computing devices not, during the updating of the data of the computing device, being liable to affect the safety of the operator carrying out the maintenance on the aircraft, wherein the system is included in the aircraft and comprises a data loading device, for each computing device in the second group of computing devices, a connection connecting the data loading device with the computing device in the second group, a data router connected to the data loading device, the data router being connected to the computing devices in the first group of computing devices and transferring updating data to the computing devices in the second group only when a command by an operator present in the cockpit of the aircraft is detected, and in that the data loading device comprises circuitry causing the data loading device to perform:
receiving the updating data,
identifying the computing device for which the updating data are intended,
identifying the connection by which the updating data must be transferred,
transferring the updating data to the identified connection if the computing device for which the updating data are intended forms part of the second group of computing devices.
2. The system according to claim 1, wherein identifying the computing device for which the updating data are intended identifies the computing device for which the updating data are intended using information included in the updating data.
3. The system according to claim 1, wherein identifying the connection by which the updating data must be transferred comprises a look-up table indicating for each computing device in the second group the connection connecting the computing device to the data loading device.
4. A system according to claim 1, wherein the updating data are received by means of a connection with an updating-data transfer device located outside the aircraft.
5. The system according to claim 1, wherein each connection connecting the data loading device with a computing device in the second group is a point-to-point connection.
6. The system according to claim 5, wherein each connection connecting the data loading device with a computing device of the second group is a connection in accordance with the ARINC 429, ISO/IEC 802-3 Ethernet, ARINC 664 or CAN standard.
7. The system according to claim 1, wherein each connection connecting the data loading device with a computing device in the second group connects the data loading device with the computing device by means of another data router and a point-to-point connection between the computing device and the other router.
8. A system according to claim 7, wherein the data loading device is connected to the other router by two connections, one connection for transferring the data and one connection for transferring information on configuration of the other router.
9. The system according to claim 8, wherein the information on configuration of the other data router is obtained by the loading configuration device from a data table by means of a look-up table indicating, for each computing device in the second group, the point-to-point connection connecting the computing device and the other router.
10. A data-updating method for computing devices, the computing devices being included in an aircraft, at least one computing device in a first group of computing devices being, during the updating of the data of the computing device, liable to affect the safety of an operator carrying out maintenance on the aircraft and at least one other computing device in a second group of computing devices not, during the updating of the data of the computing device, being liable to affect the safety of the operator carrying out the maintenance on the aircraft, wherein the method is implemented by a data loading device of a system for updating data in the aircraft, the data loading device comprising, for each computing device in the second group of computing devices, a connection connecting the data loading device with the computing device in the second group, the data loading device being connected to a data router connected to the computing devices in the first group of computing devices and transferring updating data to the computing devices in the second group only when a command by an operator present in the cockpit of the aircraft is detected, and the method causes the data loading device to perform:
receiving the updating data,
identifying the computing device for which the updating data are intended,
identifying the connection by which the updating data must be transferred,
transferring the updating data over the identified connection if the computing device for which the updating data are intended forms part of the second group of computing devices.
11. (canceled)
12. A non-transitory storage medium that stores a computer program comprising instructions for implementing, by a data loading device, the method according to claim 10 when said program is executed by a processor of said data loading device.
US17/623,200 2019-07-08 2020-07-07 System and method for updating data for computing devices included in an aircraft Active US11508025B1 (en)

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
FRFR1907603 2019-07-08
FR1907603A FR3098617A1 (en) 2019-07-08 2019-07-08 System and method for updating data for computing devices included in an aircraft
FR1907603 2019-07-08
FR1912992A FR3098616B1 (en) 2019-07-08 2019-11-21 System and method for updating data for computing devices included in an aircraft
FRFR1912992 2019-11-21
FR1912992 2019-11-21
PCT/EP2020/069100 WO2021005044A1 (en) 2019-07-08 2020-07-07 System and method for updating data for computing devices in an aircraft

Publications (2)

Publication Number Publication Date
US20220351317A1 true US20220351317A1 (en) 2022-11-03
US11508025B1 US11508025B1 (en) 2022-11-22

Family

ID=71465365

Family Applications (1)

Application Number Title Priority Date Filing Date
US17/623,200 Active US11508025B1 (en) 2019-07-08 2020-07-07 System and method for updating data for computing devices included in an aircraft

Country Status (3)

Country Link
US (1) US11508025B1 (en)
CN (1) CN114126969B (en)
WO (1) WO2021005044A1 (en)

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040106404A1 (en) * 2002-12-02 2004-06-03 Gould Todd W. Remote aircraft manufacturing, monitoring, maintenance and management system
US20060229772A1 (en) * 2005-04-08 2006-10-12 Honeywell International Inc. Systems and methods for avionics software delivery
US20100083242A1 (en) * 2008-09-30 2010-04-01 Kai Altstaedt Installation management system for an aircraft server
US20100235289A1 (en) * 2009-03-13 2010-09-16 Airbus Operation S.A.S Methods and devices for automated downloading of software, in an apparatus such as an aircraft, including the updating of the associated documentation
CA2781029A1 (en) * 2011-06-24 2012-12-24 Ge Aviation Systems Limited Improved diagnostics for aircraft
US20170168810A1 (en) * 2015-12-11 2017-06-15 Airbus Operations Gmbh Technique for updating software on board an aircraft
EP3316126A1 (en) * 2016-10-27 2018-05-02 Honeywell International Inc. Tracking aircraft with older version of software/database and initiating autoload of latest version of software/database when aircraft is in safe state for dataload
US20190384587A1 (en) * 2018-06-14 2019-12-19 Honeywell International Inc. System and method for installing loadable software airplane parts (lsap) of a set of certified orchestrated procedures using a blockchain network

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8423009B2 (en) * 2006-05-12 2013-04-16 The Boeing Company Automated delivery of flight data to aircraft cockpit devices
FR2983022B1 (en) * 2011-11-17 2013-12-13 Sagem Defense Securite DEVICE FOR SELECTIVELY CONNECTING A FIRST EQUIPMENT TO A PLURALITY OF SECOND EQUIPMENT AND DATA PROCESSING ASSEMBLY COMPRISING SUCH A DEVICE
FR2987145B1 (en) * 2012-02-20 2014-04-04 Airbus Operations Sas METHOD AND APPARATUS FOR OPTIMIZING DATA UPDATES IN OPERALLY APPROVED AIRCRAFT SOFTWARE APPLICATIONS
US9208354B2 (en) * 2013-03-12 2015-12-08 Intel Corporation Techniques for securing use of one-time passwords
US10049508B2 (en) * 2014-02-27 2018-08-14 Satcom Direct, Inc. Automated flight operations system
US9582669B1 (en) * 2014-10-28 2017-02-28 Symantec Corporation Systems and methods for detecting discrepancies in automobile-network data
US10332211B1 (en) * 2016-03-03 2019-06-25 State Farm Mutual Automobile Insurance Company Risk analysis based on electronic security levels of a vehicle
FR3050555B1 (en) * 2016-04-21 2019-09-27 Thales METHOD OF PROCESSING AN AIRCRAFT AVIONICS EQUIPMENT UPDATE, COMPUTER PROGRAM PRODUCT, ELECTRONIC PROCESSING DEVICE AND TREATMENT SYSTEM THEREOF
US10877952B2 (en) * 2016-09-23 2020-12-29 The Boeing Company Flight management system updates
US9648137B1 (en) * 2016-09-23 2017-05-09 International Business Machines Corporation Upgrading a descriptor engine for a network interface card
FR3060792B1 (en) * 2016-12-19 2018-12-07 Safran Electronics & Defense DATA LOADING DEVICE IN COMPUTERIZED DATA PROCESSING UNITS FROM A DATA SOURCE
US10521218B2 (en) * 2017-10-09 2019-12-31 Microsoft Technology Licensing, Llc Enhanced techniques for updating software

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040106404A1 (en) * 2002-12-02 2004-06-03 Gould Todd W. Remote aircraft manufacturing, monitoring, maintenance and management system
US20060229772A1 (en) * 2005-04-08 2006-10-12 Honeywell International Inc. Systems and methods for avionics software delivery
US20100083242A1 (en) * 2008-09-30 2010-04-01 Kai Altstaedt Installation management system for an aircraft server
US20100235289A1 (en) * 2009-03-13 2010-09-16 Airbus Operation S.A.S Methods and devices for automated downloading of software, in an apparatus such as an aircraft, including the updating of the associated documentation
CA2781029A1 (en) * 2011-06-24 2012-12-24 Ge Aviation Systems Limited Improved diagnostics for aircraft
US20170168810A1 (en) * 2015-12-11 2017-06-15 Airbus Operations Gmbh Technique for updating software on board an aircraft
EP3316126A1 (en) * 2016-10-27 2018-05-02 Honeywell International Inc. Tracking aircraft with older version of software/database and initiating autoload of latest version of software/database when aircraft is in safe state for dataload
US20190384587A1 (en) * 2018-06-14 2019-12-19 Honeywell International Inc. System and method for installing loadable software airplane parts (lsap) of a set of certified orchestrated procedures using a blockchain network

Also Published As

Publication number Publication date
CN114126969A (en) 2022-03-01
US11508025B1 (en) 2022-11-22
CN114126969B (en) 2023-11-28
WO2021005044A1 (en) 2021-01-14

Similar Documents

Publication Publication Date Title
RU2717906C2 (en) Flexible deterministic communication network
US20200174466A1 (en) Drone communication system and communication system of drone server
CN106020135B (en) Process control system
US9098374B2 (en) Version control for software configurable aircraft systems
CN105988480B (en) Flight control system command selection and data transmission
EP3382625A1 (en) Processing messages for an application running on a computer external to a communications management unit (cmu)
EP3026556A1 (en) Event generation management for an industrial controller
US11700297B2 (en) Device for loading data into computer processing units from a data source
US5560570A (en) Automatic piloting device for aerodynes
US20230418254A1 (en) Gateway device, gateway control method, and non-transitory computer readable medium
US20060156053A1 (en) A ground-based software tool for controlling redundancy management switching operations
US11508025B1 (en) System and method for updating data for computing devices included in an aircraft
CN110268348A (en) Control device and control method
CN110780590A (en) Techniques for providing safety control parameters for multi-channel control of a machine
US20220327867A1 (en) System and method for remotely updating data for computer devices included in an aircraft
EP2947822B1 (en) Aircraft communication system, aircraft communication method, and communication device
EP3043279B1 (en) Aircraft control domain communication framework
US11947970B2 (en) Information processing device, moving object, and information processing method
US11526282B2 (en) Secure wireless dataloading using in-flight entertainment connectivity systems
US11256645B2 (en) Method for authenticating an equipment, associated emitting device, reception device, communication system and aircraft
CN113260570B (en) Method for verifying the presence of a device on an aircraft and associated device
US20200310949A1 (en) Control Device
EP3566170B1 (en) Securing an unprotected hardware bus
US9998946B1 (en) Mobile local delivery server
US20200301747A1 (en) Control method, control apparatus and server in network system

Legal Events

Date Code Title Description
AS Assignment

Owner name: SAFRAN ELECTRONICS DEFENSE, FRANCE

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:DELVILLE, DENIS;THIRION, LOUIS THEOPHILE;REEL/FRAME:058485/0076

Effective date: 20211220

FEPP Fee payment procedure

Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

STCF Information on status: patent grant

Free format text: PATENTED CASE