Autonomous flight termination system and method

• US 10,323,906 B2
• Filed: 09/30/2016
• Issued: 06/18/2019
• Est. Priority Date: 09/30/2016
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: DeJong, Michelle V.
• Primary Examiner(s): Lee, Benjamin P
• Application Number:
  US15/281,608
• Publication Number:
  US 20180094903A1
• Time in Patent Office: 991 Days
• CPC Class Codes: B64D 1/04 the articles being explosive, e.g. bombs arming or setting bomb fuzes F42C
• CPC Class Codes: F41G 7/001 Devices or systems for testing or checking
• CPC Class Codes: F41G 7/007 Preparatory measures taken before the launching of the guided missiles
• CPC Class Codes: F41G 7/346 using global navigation satellite systems, e.g. GPS, GALILEO, GLONASS
• CPC Class Codes: F42B 15/01 Arrangements thereon for guidance or control steering arrangements F42B10/60; aircraft flight control B64C; guidance systems other than those installed aboard F41G7/00, F41G9/00; locating by use of radio or other waves G01S; flight control in general G05D1/00; computer aspects G06]
• CPC Class Codes: F42B 33/06 Dismantling fuzes, cartridges, projectiles, missiles, rockets or bombs F42B33/004 and F42B33/04 take precedence; elimination of undesirable components of explosives C06B21/0091

Abstract

An autonomous flight termination system for terminating vehicle flight after the vehicle is launched from an aircraft includes a global positioning system (GPS) receiver; a termination unit selected from a cut-off switch connected to terminate vehicle flight when actuated, and a switch connected to detonate an explosive on the vehicle; a system controller for receiving a first signal indicating separation of the vehicle from the aircraft and a second signal from the GPS receiver to calculate an actual vehicle trajectory, and for sending a third signal to actuate the termination unit to terminate the flight of the vehicle when the actual vehicle trajectory is determined to be outside the safety bounds of a mission-planned flight trajectory; and a failsafe controller connected to receive operational data of the system controller, and to actuate the termination unit when the operational data indicates that the system is in an error state.

Claims

1. An autonomous flight termination system for terminating a vehicle flight after the vehicle is launched from an aircraft, the system comprising:

a first global positioning system (GPS) receiver for determining a position of the vehicle during the vehicle flight relative to the Earth;

a first termination unit selected from a first cut-off switch connected to terminate the vehicle flight when actuated, and a first switch connected to detonate an explosive on the vehicle;

a system controller for receiving a first signal from the aircraft indicating separation of the vehicle from the aircraft and a second signal from the first GPS receiver to calculate an actual vehicle trajectory, and for sending a third signal to actuate the first termination unit to terminate the flight of the vehicle in response to determining the actual vehicle trajectory is outside predetermined safety bounds of a mission-planned flight trajectory for the vehicle; and

a failsafe controller connected to receive operational data of the system controller and connected to actuate the first termination unit to terminate the vehicle flight in response to the operational data indicating the system controller is in the error state.

2. The system of claim 1, wherein the cut-off switch of the first termination unit includes a first normally open terminate relay such that a loss of power to the system causes the first normally open relay to open and issue a terminate command.

3. The system of claim 2, wherein the first normally open terminate relay is connected on a line providing electric power to energize a first normally closed valve in a fuel supply line of an engine of the vehicle, and the system controller and the failsafe controller are connected to the first termination unit to actuate the terminate relay to open, which de-energizes and thereby closes the valve.

4. The system of claim 1, wherein the error state includes one or more of a system controller clock failure, a loss of power to the system, a system controller hardware failure, and a system controller software failure.

5. The system of claim 1, wherein the first cut-off switch is actuated to terminate the vehicle flight either when the actual vehicle trajectory is determined by the system controller to be outside the safety bounds of a mission planned flight trajectory for the vehicle, or when the failsafe controller receives the operational data indicating that the system is in the error state.

6. The system of claim 1, wherein the first cut-off switch cuts off fuel flow to a power plant of the vehicle when actuated.

7. The system of claim 1, wherein the first switch detonates an explosive mounted on the vehicle when actuated.

8. The system of claim 1, further comprising one of hardline separation switches or a link to receive the first signal from the aircraft indicating separation of the vehicle from the aircraft.

9. The system of claim 1, wherein the failsafe controller includes a software watchdog timer.

10. The system of claim 1, wherein the first cut-off switch actuates a fuel cut-off valve mounted on the vehicle.

11. The system of claim 1, further comprising a second global positioning system connected to the system controller.

12. The system of claim 1, further comprising a second termination unit including a second cut-off switch connected to terminate the vehicle flight when actuated.

13. The system of claim 1, wherein the system controller is programmed to delay actuation of the first cut-off switch for a predetermined time interval after a launch of the vehicle from the aircraft.

14. A vehicle configured to launch from an aircraft, the vehicle comprising:

an engine;

a first autonomous flight termination system for terminating a flight of the vehicle after the vehicle is launched from an aircraft, the autonomous flight termination system including

a first global positioning system (GPS) receiver for determining a position of the vehicle during the vehicle flight relative to the Earth;

a first termination unit selected from a first cut-off switch connected to terminate the vehicle flight when actuated, and a first switch connected to an explosive on the vehicle;

a system controller for receiving a first signal from the aircraft indicating separation of the vehicle from the aircraft and a second signal from the GPS receiver to calculate an actual vehicle trajectory, and for sending a third signal to actuate the first termination unit to terminate the flight of the vehicle in response to determining the actual vehicle trajectory is outside safety bounds of a mission-planned flight trajectory for the vehicle; and

a failsafe controller connected to receive operational data of the system controller, the failsafe controller connected to actuate the first termination unit to terminate the vehicle flight in response to the operational data indicating the system controller is in an error state.

15. A method for terminating a vehicle flight after the vehicle is launched from an aircraft, the method comprising:

determining a position of the vehicle during the vehicle flight relative to the Earth with a global positioning system (GPS) receiver;

receiving by a system controller a first signal from the aircraft indicating separation of the vehicle from the aircraft and a second signal from the GPS receiver to calculate an actual vehicle trajectory;

calculating an actual vehicle trajectory;

determining the actual vehicle trajectory is outside predetermined safety bounds of a mission planned flight trajectory for the vehicle;

in response to determining the actual vehicle trajectory is outside predetermined safety bounds of the mission planned flight trajectory for the vehicle, sending a third signal from the system controller to actuate a termination unit to terminate the flight of the vehicle;

receiving operational data of the system controller by a failsafe controller;

determining the system controller is in an error state based on the operational data; and

actuating the termination unit to terminate the vehicle flight in response to the operational data indicating the system controller is in the error state.

16. The method of claim 15, wherein the termination unit is selected as a cut-off switch, and wherein terminating the flight of the vehicle includes actuating the cut-off switch to cut off fuel flow to a power plant of the vehicle.

17. The method of claim 15, wherein the termination unit is selected as a first switch, and wherein terminating the flight of the vehicle includes actuating the first switch to detonate an explosive on the vehicle.

18. The method of claim 15, wherein receiving operational data of the system controller by a failsafe controller includes receiving data indicating a clock failure of the system controller.

19. The method of claim 15, further comprising initially separating the vehicle from the aircraft.

20. The method of claim 19, wherein separating the vehicle from the aircraft includes providing a delay of a predetermined time interval before terminating the flight of the vehicle.