Systems and methods for performing external data validation for aircraft onboard systems

• US 10,616,241 B2
• Filed: 06/05/2017
• Issued: 04/07/2020
• Est. Priority Date: 06/05/2017
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Toews, Phillip J.
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US15/613,682
• Publication Number:
  US 20180351966A1
• Time in Patent Office: 1,037 Days
• CPC Class Codes: B64D 2045/0075 Adaptations for use of electronic flight bags in aircraft; Supports therefor in the cockpit
• CPC Class Codes: B64D 45/00 Aircraft indicators or protectors not otherwise provided for camouflage F41H3/00
• CPC Class Codes: G06F 11/004 Error avoidance G06F11/07 and subgroups take precedence
• CPC Class Codes: G06F 11/0796 Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
• CPC Class Codes: G06F 11/16 Error detection or correction of the data by redundancy in hardware
• CPC Class Codes: G06F 11/1654 where the output of only one of the redundant processing components can drive the attached hardware, e.g. memory or I/O
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A method for validating incoming data to a computer system is provided. The method receives the incoming data, simultaneously, by the computer system and a mirror computer system, wherein the computer system is separate and distinct from the mirror computer system, wherein the computer system lacks a communication connection to the mirror computer system, and wherein the mirror computer system lacks a communication connection to the computer system; processes the incoming data by the mirror computer system, to produce output; and when the output comprises an acceptable result, processes the incoming data by the computer system.

Claims

1. A method for validating incoming data to a Flight Management System (FMS) onboard an aircraft, the method comprising:

receiving the incoming data, simultaneously, by the FMS and a second avionics system onboard the aircraft, wherein the FMS is separate and distinct from the second avionics system, the FMS lacks a communication connection to the second avionics system, and the second avionics system lacks a communication connection to the FMS;

processing the incoming data by the second avionics system, to produce output;

presenting the output, via a display device communicatively coupled to the second avionics system;

receiving first user input, via a first user interface communicatively coupled to the second avionics system, that indicates validity of the output has been verified;

receiving second user input, via a second user interface communicatively coupled to the FMS, that permits the FMS to use the incoming data;

processing the incoming data by the FMS, in response to the second user input;

establishing communication connections to a computing device executing an Electronic Flight Bag (EFB) application, by the FMS and the second avionics system;

receiving the incoming data via the communication connections, simultaneously, by a data buffer of the FMS and by the second avionics system;

processing a first instance of the incoming data by the second avionics system; and

extracting a second instance of the incoming data from the data buffer and processing the second instance by the FMS when the validity of the output has been verified.

2. The method of claim 1, further comprising:

creating a duplicate of software associated with the FMS, wherein the duplicate is stored, maintained, and executed using the second avionics system comprising at least one processor and system memory;

wherein processing the incoming data by the second avionics system is performed using the duplicate; and

wherein execution of the duplicate by the second avionics system results in a simulation of operation of the computer system.

3. The method of claim 1, further comprising:

establishing wireless communication connections to the computing device, by the FMS and the second avionics system;

wherein the incoming data is received simultaneously by the FMS and the second avionics system, via the wireless communication connections.

4. The method of claim 1, further comprising:

establishing hardwired communication connections to the computing device, by the FMS and the second avionics system;

wherein the incoming data is received simultaneously by the FMS and the second avionics system, via the hardwired communication connections.

5. The method of claim 1, further comprising:

after simultaneously receiving the incoming data by the FMS and the second avionics system,

retaining the first instance of the incoming data in the data buffer, during processing of the second instance of the incoming data by the second avionics system; and

extracting the first instance of the incoming data from the data buffer, in response to the second user input, by the FMS.

6. A system for validating incoming data, the system comprising:

a mirror computer system, comprising;

a mirror memory element;

a mirror display device, configured to simulate a primary display device;

a mirror communication device, configured to receive a first instance of incoming data at a particular time;

a mirror processor, communicatively coupled to the mirror memory element, the mirror display device, and the mirror communication device, the mirror processor configured to;

process the first instance of the incoming data, when received via the mirror communication device; and

present output via the mirror display device, based on processing the first instance of the incoming data;

a mirror user interface communicatively coupled to the mirror processor, the mirror user interface configured to receive first user input that indicates validity of the output has been verified; and

a primary computer system, comprising;

a primary memory element;

a primary communication device, configured to receive a second instance of the incoming data at the particular time;

a primary user interface configured to receive second user input that permits the primary computer system to process the second instance of the incoming data;

a primary processor, communicatively coupled to the primary memory element, the primary user interface, and the primary communication device, the primary processor configured to process the second instance of the incoming data, in response to the second input,

wherein the primary computer system comprises a Flight Management System (FMS) onboard an aircraft, the mirror computer system comprises a second avionics system onboard the aircraft, and the system further comprises a computing device executing an Electronic Flight Bag (EFB) application, the computing device having communication connections with the FMS and the second avionics system;

and wherein;

a data buffer of the FMS and the second avionics system simultaneously receive the incoming data via the communication connections;

the second avionics system processes a first instance of the incoming data; and

the FMS extracts a second instance of the incoming data from the data buffer and processes the second instance of the incoming data when the validity of the output has been verified.

7. The system of claim 6, wherein the mirror processor is further configured to:

receive a duplicate of software associated with the primary computer system, via the mirror communication device;

store the duplicate, via the mirror memory element; and

process the first instance of the incoming data by executing the duplicate, using the first instance of the incoming data;

wherein execution of the duplicate results in a simulation of operation of the primary computer system.

8. The system of claim 6, wherein the data buffer is configured to retain the second instance of the incoming data during processing of the first instance of the incoming data by the second avionics system;

and

wherein the primary processor is further configured to extract the second instance from the data buffer to process the second instance, in response to the second input.

9. The system of claim 6, wherein the primary computer system and the mirror computer system are further configured to:

establish wireless communication connections to the computing device; and

receive the incoming data, simultaneously, via the wireless communication connections, wherein the incoming data is received as a broadcast transmitted by the computing device via the wireless communication connections.

10. The system of claim 6, wherein the primary computer system and the mirror computer system are further configured to:

establish hardwired communication connections to the computing device; and

receive the incoming data, simultaneously, via the hardwired communication connections, wherein the incoming data is received as a broadcast transmitted by the computing device via the hardwired communication connections.

11. A method for receiving and processing incoming data by a system comprising at least a primary computer system and a mirror computer system, the method comprising:

obtaining a duplicate of software associated with the primary computer system, by the mirror computer system;

receiving the incoming data, simultaneously, by the primary computer system and a mirror computer system, wherein the primary computer system is separate and distinct from the mirror computer system, wherein the primary computer system lacks a communication connection to the mirror computer system, and wherein the mirror computer system lacks a communication connection to the primary computer system;

processing the incoming data by executing the duplicate, by the mirror computer system, to produce output, wherein execution of the duplicate results in a simulation of operation of the primary computer system;

presenting the output, via a display device communicatively coupled to the mirror computer system;

receiving first user input, via a first user interface communicatively coupled to the mirror computer system, that indicates validity of the output has been verified;

receiving second user input, via a second user interface communicatively coupled to the computer system, that permits the computer system to use the incoming data; and

processing the incoming data by the primary computer system, in response to the second user input,

wherein the primary computer system comprises a Flight Management System (FMS) onboard an aircraft;

wherein the mirror computer system comprises a second avionics system onboard the aircraft; and

wherein the method further comprises;

establishing communication connections to a computing device executing an Electronic Flight Bag (EFB) application, by the FMS and the second avionics system;

receiving the incoming data via the communication connections, simultaneously, by a data buffer of the FMS and by the second avionics system;

processing a first instance of the incoming data by the second avionics system; and

extracting a second instance of the incoming data from the data buffer and processing the second instance by the FMS when the validity of the output has been verified.

12. The method of claim 11, further comprising:

after simultaneously receiving the incoming data by the primary computer system and the mirror computer system,

retaining a first instance of the incoming data in a data buffer that is part of the primary computer system, during processing of a second instance of the incoming data by the mirror computer system; and

extracting the first instance from the data buffer to process the first instance by the primary computer system in response to the second user input.