Aircraft flight security system and method

• US 20030050745A1
• Filed: 08/21/2002
• Published: 03/13/2003
• Est. Priority Date: 09/11/2001
• Status: Active Grant

• Current Assignee: Kevin Orton
• Original Assignee: Kevin Orton
• Inventors: Orton, Kevin
• Granted Patent: US 6,897,790 B2
• Time in Patent Office: Days
• US Class Current: 701/3
• CPC Class Codes: B60R 2325/302 Airplanes
• CPC Class Codes: B64D 45/0015 Devices specially adapted for the protection against criminal attack, e.g. anti-hijacking systems
• CPC Class Codes: B64D 45/0031 means for overriding or restricting access to flight controls

Abstract

A system of securing access to vehicle control systems using non-persistent identifiers. Identifiers are received and stored at the commencement of vehicle operations. Restricted events are detected and confirmation identifiers are requested, in order to continue vehicle operations. If confirmation identifiers are not presented, vehicle operations enter caution mode, and access to vehicle controls is restricted. Upon termination of a vehicle trip, the non-persistent identifiers are discarded. The system provides a convenient, low-overhead, secure means of regulating access to vehicle control systems.

Claims

1. A method of securing a vehicle, comprising:

commencing pre-departure operations,

creating a non-persistent identifier after commencement of pre-departure operations,

entering the non-persistent identifier into an identifier receiver,

storing the non-persistent identifier in an identifier processor,

detecting during operation of the vehicle a restricted event,

performing a restriction action,

terminating operation of the vehicle,

clearing the non-persistent identifier from the identifier processor.

2. The method of claim 1, wherein performing the restriction action comprises:

requesting entry of a comparison identifier upon detection of the restricted event,

allowing the restricted event to proceed if the comparison identifier matches the non-persistent identifier, and

performing the restriction action if the comparison identifier does not match the non-persistent identifier.

3. The method of claim 2, wherein entering the comparison identifier comprises re-entering the non-persistent identifier.

4. The method of claim 1, wherein the vehicle comprises an aircraft.

5. The method of claim 4, wherein the aircraft comprises an autopilot and the restricted event comprises disengaging the autopilot.

6. The method of claim 5, wherein the restriction action comprises preventing the autopilot from being disengaged.

7. The method of claim 5, wherein the restriction action comprises turning control of the aircraft over to a backup controller.

8. The method of claim 7, wherein the backup controller is located on the ground.

9. The method of claim 4, wherein the restricted event comprises descending below a pre-defined altitude.

10. The method of claim 9, wherein the restriction action comprises preventing the aircraft from descending below the pre-defined altitude.

11. The method of claim 1, wherein the restricted event comprises deviating from a pre-defined course.

12. The method of claim 1, wherein the restriction action comprises transmitting a warning.

13. The method of claim 1, wherein the restriction action comprises limiting access to one or more control systems of the aircraft.

14. The method of claim 1, further comprising detecting an identifier lockout event, and preventing entry of the non-persistent identifier once the identifier lockout event has occurred.

15. The method of claim 14, wherein the identifier lockout event comprises the closing of an aircraft door.

16. The method of claim 15, wherein the aircraft door is the last aircraft door to be closed.

17. The method of claim 14, wherein the identifier lockout event comprises the commencement of flight operations.

18. The method of claim 1, wherein creating a non-persistent identifier after commencement of pre-departure operations comprises creating the non-persistent identifier as part of the pre-departure operations.

19. The method of claim 1, wherein creating a non-persistent identifier after commencement of pre-departure operations comprises creating a plurality of non-persistent identifiers, corresponding to a plurality of vehicle crewmembers.

20. The method of claim 1, wherein performing a restriction action comprises entering a caution mode.

21. The method of claim 20, wherein entering a caution mode comprises switching normal flight control logic to restricted flight control logic.

22. The method of claim 1, further comprising recovering a backup identifier.

23. The method of claim 1, wherein clearing the non-persistent identifier from the identifier processor comprises clearing the non-persistent identifier only after vehicle operations have been terminated.

24. The method of claim 1, wherein the restricted event comprises issuance of a lock command.

25. The method of claim 1, wherein the restricted event comprises an unauthorized entry into a restricted area within the vehicle.

26. The method of claim 1, further comprising entering a confirmation identifier subsequent to entering the non-persistent identifier into the identifier receiver module and prior to commencement of vehicle departure.

27. A system for securing a vehicle, the vehicle comprising one or more vehicle controls, the system comprising:

an identifier receiver adapted to receive a non-persistent identifier;

an identifier processor adapted to store the non-persistent identifier, to compare the stored non-persistent identifier with a comparison identifier, and to provide a comparison result; and

a vehicle control access manager adapted to receive the comparison result from the identifier processor, and to grant or deny access to the one or more vehicle controls depending on the comparison result.

28. The system of claim 27, further comprising a vehicle control area lock, wherein the vehicle control area lock is adapted to deny access to the vehicle control area unless the non-persistent identifier is provided.

29. The system of claim 28, wherein the vehicle control area comprises an aircraft cockpit.

30. The system of claim 27, further comprising an access locking device.

31. The system of claim 30, wherein the access locking device comprises a lock button.

32. The system of claim 31, wherein the lock button is located in an aircraft cockpit.

33. The system of claim 27, wherein the access locking device comprises a voice-activated lock adapted to respond to a vocal command.

34. The system of claim 27, wherein the identifier receiver comprises a keypad.

35. The system of claim 27, wherein the identifier receiver comprises a biometric device adapted to receive a biometric identifier.

36. The system of claim 27, wherein the identifier receiver is located proximal to a vehicle crew station within the vehicle.

37. The system of claim 36, wherein the vehicle crew station comprises an aircraft cockpit.

38. The system of claim 36, wherein the vehicle crew station comprises an aircraft flight attendant station.

39. The system of claim 27, wherein the identifier receiver is located in a vehicle departure area external to the vehicle.

40. The system of claim 39, wherein the vehicle departure area comprises an airport terminal.

41. The system of claim 27, wherein the identifier processor comprises an identifier storage module and an identifier comparison module.

42. The system of claim 27, wherein the identifier processor is adapted to recognize a plurality of identifier classes, each identifier class having a different access profile.

43. The system of claim 27, wherein the plurality of identifier classes includes at least an aircraft flight crew class and an aircraft flight attendant class.

44. The system of claim 27, wherein the identifier processor is adapted to receive a restricted event warning from the vehicle control access manager, and to request entry of the comparison identifier.

45. The system of claim 27, wherein the identifier processor is adapted to contain a backup identifier.

46. The system of claim 45, wherein the backup identifier comprises a plurality of backup identifiers, each backup identifier granting different levels of access to the one or more vehicle controls.

47. The system of claim 27, wherein the identifier processor is adapted to prevent entry of the non-persistent identifier once pre-departure operations have been completed.

48. The system of claim 27, wherein the identifier processor is adapted to reset the non-persistent identifiers upon completion of a trip by the vehicle.

49. The system of claim 48, wherein the system further comprises a sensor, and completion of a trip is detected by gathering sensor data from the sensor.

50. The system of claim 49, wherein the vehicle comprises an aircraft, and the sensor data comprises data indicating that the aircraft is on the ground.

51. The system of claim 50, wherein the sensor data comprises landing gear status data.

52. The system of claim 50, wherein the sensor data comprises airspeed data.

53. The system of claim 27, wherein the identifier processor is adapted to require a confirmation identifier be entered subsequent to entry of the non-persistent identifier and prior to commencement of departure operations.

54. The system of claim 53, wherein the identifier processor is adapted to prevent departure operations from commencing until a plurality of confirmation identifiers corresponding to a plurality of vehicle crew members have been received.

55. The system of claim 27, wherein the vehicle control access manager comprises a module within an aircraft flight management computer, the aircraft flight management computer adapted to interface a vehicle control input device with a vehicle control.

56. The system of claim 55, wherein the flight management computer is adapted to contain a plurality of flight control logic modules, and the vehicle control access manager is adapted to select one of the plurality of flight control logic modules depending on the comparison result.

57. The system of claim 56, wherein the vehicle control access manager is adapted to enter a caution mode if the comparison result indicates that the comparison identifier and the non-persistent identifier do not match.

58. The system of claim 27, wherein the vehicle control access manager is adapted to detect a restricted event and report the restricted event to the identifier processor.

59. The system of claim 58, wherein the restricted event comprises a vehicle course deviation.

60. The system of claim 58, wherein the restricted event comprises a vehicle altitude change.

61. The system of claim 58, wherein the restricted event comprises a vehicle autopilot deactivation.

62. The system of claim 27, wherein the vehicle control access manager is adapted to physically disconnect the control input device from the vehicle control.

63. The method of claim 54 wherein the confirmation codes are entered substantially simultaneously at two or more points physically dispersed throughout the aircraft.