System and method using environment memory having signatures

• US 20030200026A1
• Filed: 04/18/2002
• Published: 10/23/2003
• Est. Priority Date: 04/18/2002
• Status: Active Grant

• Current Assignee: L-3 Communications Corporation (L3Harris Technologies, Inc.)
• Original Assignee: Aviation Communication and Surveillance Systems LLC (L3Harris Technologies, Inc.)
• Inventors: Pearson, Jeffery
• Granted Patent: US 6,768,943 B2
• Time in Patent Office: Days
• US Class Current: 701/301
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A system having replaceable subsystems is operable in a certified configuration after installation of a replacement subsystem. The system includes several subsystems each installed at an interface. For each subsystem, the interface includes memory having a description of the operating environment for that subsystem. The memory stores modules each having a signature, for example, a cyclic redundancy code (CRC). After installation of a replacement subsystem, a processor in the subsystem checks a list of signatures. Each signature corresponds to a module that is certified for use by an application program of the subsystem. If a listed signature corresponds to a module that is available in the memory, is desirable to be used, and the subsystem is not presently configured to use such a module, the subsystem reads the module, integrates the data of the module into an operating configuration, and operates thereafter in accordance with the updated operating configuration. In one implementation, an aircraft collision avoidance system includes one or more replaceable subsystems that each read a memory in a tray of the cockpit interface and configure themselves for updated operation.

Claims

1. A collision avoidance system comprising:

means for determining own aircraft data including position, altitude, velocity, and bearing;

means for interrogating other aircraft to determine other aircraft data including position, altitude, velocity, and bearing;

means for determining a threat of collision with other aircraft in accordance with the own aircraft data and with the other aircraft data;

means for displaying at least a portion of the own aircraft data and at least a portion of the other aircraft data;

means for alerting a crew member of a threat of collision with other aircraft;

wherein;

for at least one of the means for determining own aircraft data, means for interrogating, means for determining a threat of collision with other aircraft, means for displaying own aircraft data, means for determining own aircraft position, means for displaying a terrain map, means for determining a threat of collision with terrain, and the means for alerting a crew member;

the at least one means is packaged in a replaceable unit for installation on the own aircraft at an interface, the interface having a first means for storing first content and a plurality of signature values, each signature value for a respective portion of the first content;

the at least one means further comprises;

second means for storing second content;

means for validating the second content with reference to at least one signature value of the first content;

means for updating the second content in accordance with the first content; and

means for operating the subsystem in accordance with the updated second content.

2. The system of claim 1 wherein the means for operating comprises:

an application program; and

means for establishing an initial configuration of the application program in accordance with the updated second content.

3. The system of claim 2 wherein the means for operating further comprises:

means for establishing in accordance with the updated second content a path for data communication between the application program and at least one of the means for determining own aircraft data, means for interrogating, means for determining a threat of collision with other aircraft, means for displaying own aircraft data, means for determining own aircraft position, means for displaying a terrain map, means for determining a threat of collision with terrain, and the means for alerting a crew member.

4. The system of claim 3 wherein:

the means for displaying further comprises means for displaying a terrain map in accordance with own aircraft position;

the means for determining a threat of collision further comprises means for determining a threat of collision with terrain in accordance with the terrain map; and

the means for alerting further comprises means for alerting a crew member of a threat of collision with terrain.

5. The system of claim 4 wherein each portion of the first content comprises a header comprising the respective signature value.

6. The system of claim 5 wherein the first signature comprises a cyclic redundancy code.

7. The system of claim 6 wherein the subsystem means further comprises means for receiving data and for writing received data into the means for storing, the received data being from a provided portable memory, the received data comprising a second plurality of signature values.

8. A system comprising:

a plurality of subsystems coupled to cooperate;

first means for storing first content and a plurality of first signature values, each first signature associated with a respective portion of the first content;

subsystem means for performing an avionics program, the subsystem means comprising;

means for coupling the subsystem means to at least one of the plurality of other subsystems;

means for accessing the first means for storing to validate the first content with reference to at least one of the plurality of first signature values;

second means for storing second content and a second signature;

means for accessing the second means for storing to validate the second content with reference to the second signature;

means for updating the second content in accordance with at least a portion of the first content; and

means for performing the avionics program in accordance with the updated second content.

9. The system of claim 8 wherein the means for operating comprises:

an application program; and

means for establishing an initial configuration of the application program in accordance with the updated second content.

10. The system of claim 9 wherein the means for operating further comprises:

an application program; and

means for establishing in accordance with the updated second content a path for data communication between the application program and at least one of the means for determining own aircraft data, means for interrogating, means for determining a threat of collision with other aircraft, means for displaying own aircraft data, means for determining own aircraft position, means for displaying a terrain map, means for determining a threat of collision with terrain, and the means for alerting a crew member.

11. The system of claim 10 wherein:

the means for displaying further comprises means for displaying a terrain map in accordance with own aircraft position;

the means for determining a threat of collision further comprises means for determining a threat of collision with terrain in accordance with the terrain map; and

the means for alerting further comprises means for alerting a crew member of a threat of collision with terrain.

12. The system of claim 11 wherein each portion of the first content comprises a header comprising the respective signature value.

13. The system of claim 12 wherein the first signature comprises a cyclic redundancy code.

14. The system of claim 13 wherein the subsystem means further comprises means for receiving data and for writing received data into the means for storing, the received data being from a provided portable memory, the received data comprising a second plurality of signature values.

15. A system for operation in an aircraft, the system comprising:

a plurality of subsystems coupled to cooperate;

an environment memory comprising content of the environment memory and a plurality of first signatures, each first signature associated with at least one of a component, a module, an image, and an entirety of the content of the environment memory; and

a subsystem of the plurality comprising;

a nonvolatile memory comprising content of the nonvolatile memory and a signature value of the content of the nonvolatile memory;

an interface that facilitates removal and replacement of the subsystem; and

a processor having access to the environment memory via the interface;

wherein the processor;

accesses each first signature for at least one of;

identifying the associated component, module, image, or entirety; and

validating the associated component, module, image, or entirety;

validates the content of the nonvolatile memory with reference to the signature value of the content of the nonvolatile memory;

validates the content of the environment memory with reference to the signature value of the content of the environment memory;

updates the content of the nonvolatile memory in accordance with the content of the environment memory; and

performs an avionics program in accordance with the updated content of the nonvolatile memory.

16. The system of claim 15 wherein the signature of the content of the environment memory is associated with an entirety of the content of the environment memory and each first signature is associated with a component of the content of the environment memory.

17. The system of claim 16 wherein the signature value of the content of the nonvolatile memory is stored in a header of the content of the nonvolatile memory.

18. The system of claim 17 wherein the signature of the content of the environment memory is associated with an entirety of the content of the nonvolatile memory and each first signature is associated with a component of the content of the environment memory.

19. The system of claim 18 wherein the plurality of subsystems are installed on an aircraft and cooperate for alerting a crew member of the aircraft for collision avoidance.

20. The system of claim 19 wherein the application program provides an alert for at least one of traffic collision avoidance and terrain collision avoidance.

21. The system of claim 20 wherein the subsystem of the plurality comprises a transponder.

22. The system of claim 21 wherein the application program performs a global positioning system function.

23. The system of claim 22 wherein the subsystem of the plurality provides a weather radar function.

24. The system of claim 23 wherein the subsystem of the plurality comprises a display.

25. The system of claim 24 wherein the display provides a radar display.

26. The system of claim 25 wherein the subsystem comprises a reader of provided portable memory for updating the content of the environment memory.

27. The system of claim 26 wherein the processor updates the content of the nonvolatile memory in accordance with determining whether the nonvolatile memory is incomplete.

28. The system of claim 27 wherein the processor updates the content of the nonvolatile memory in accordance with determining that the content of the environment memory comprises at least one of a component, a module, and an image any of which is not currently stored in the nonvolatile memory.

29. The system of claim 28 wherein:

the subsystem further comprises a store having a preferred signature value corresponding to at least one of a preferred component, a preferred module, and a preferred image;

the content of the environment memory comprises the at least one of preferred component, preferred module, and preferred image; and

the processor updates the nonvolatile memory in response to determining with reference to the preferred signature that the at least one of preferred component, preferred module, and preferred image is not currently stored in the nonvolatile memory.

30. The system of claim 29 wherein the processor updates an entirety of the content of the nonvolatile memory in accordance with an entirety of the content of the environment memory.

31. The system of claim 30 wherein the processor updates an image of the content of the nonvolatile memory in accordance with an image of the content of the environment memory.

32. The system of claim 31 wherein the processor updates a module of the content of the nonvolatile memory in accordance with a module of the content of the environment memory.

33. The system of claim 32 wherein the processor updates a component of the content of the nonvolatile memory in accordance with a component of the content of the environment memory.

34. A tray for accepting a replaceable subsystem, the tray comprising:

interface means for facilitating at least one of installation and removal of the subsystem; and

memory means for storing content and a plurality of signatures, each signature associated with a portion of the content, the memory means being coupled to the subsystem via the interface means.

35. The tray of claim 34 wherein:

a. the interface means further comprises a cable assembly having an electrical connector for connection to the subsystem; and

b. the cable assembly comprises the memory means.

36. A method for operating an avionics subsystem after installing the subsystem at an interface between the subsystem and a plurality of other subsystems, the interface having a first side comprising the subsystem and a second side comprising the other subsystems, the subsystem having a first memory, the second side having a second memory, the method performed by the subsystem comprising:

a step for determining whether a first signature of the first memory is inconsistent with a second signature of the second memory;

a step for operating without updating when inconsistency does not exist;

a step for updating in response to inconsistency, the step for updating comprising a method having;

a step for transferring data associated with the second signature from the second memory to the first memory; and

a step for establishing in accordance with the transferred data a path for data communication between the avionics subsystem and at least one of the other subsystems; and

a step for performing an avionics program for communication via the path.

37. The method of claim 36 wherein the module comprises a header and the data, the header comprising the signature.

38. The method of claim 37 wherein the signature comprises a cyclic redundancy code.

39. The method of claim 38 wherein the step for determining further comprising a step for determining whether the first signature is inconsistent with the second signature on the basis of whether the first signature is identical to the second signature.

40. The method of claim 39 further comprising a step for receiving second data and for writing second data into the second memory.

41. The method of claim 40 wherein the step for receiving second data comprises a step for reading second data from a portable memory device.

42. A method for operating a subsystem of an avionics system, the system comprising a plurality of subsystems, the subsystem being packaged as a replaceable unit for installation via an interface of the subsystem, the subsystem comprising a processor and a first memory, the system comprising a second memory accessed by the subsystem via the interface, the method performed by a processor of the subsystem, the method comprising:

a step for determining a first calculated signature of a first content of the first memory;

a step for comparing the first calculated signature with a first stored signature stored in the first memory to conclude validity of the first content;

a step for determining a second calculated signature of a second content of the second memory;

a step for comparing the second calculated signature with a second stored signature stored in the second memory to conclude validity of the second content;

a step for updating the first content in accordance with the second content in response to determining that the first content is valid and the second content is valid and a difference exists among at least two of the first calculated signature, the second calculated signature, the first stored signature, and the second stored signature; and

a step for performing an avionics program in accordance with the updated first content.

43. The method of claim 42 wherein the step for comparing the first calculated signature comprises a step for recalling the first stored signature from a header of the first content.

44. The method of claim 43 wherein step for comparing the second calculated signature comprises a step for recalling the second stored signature from a header of the second content.

45. The method of claim 44 wherein:

the stored signature of the second content is a member of a set of stored signatures each respectively associated with a component of the second content; and

the step for comparing the second calculated signature comprises a step for repeating comparing to conclude validity of the second content with reference to each signature of the set.

46. The method of claim 45 wherein:

the stored signature of the second content is a member of a set of stored signatures each respectively associated with a module of the second content; and

the step for comparing the second calculated signature comprises a step for repeating comparing to conclude validity of the second content with reference to each signature of the set.

47. The method of claim 46 wherein:

the stored signature of the second content is a member of a set of stored signatures each respectively associated with an image of the second content; and

the step for comparing the second calculated signature comprises a step for repeating comparing to conclude validity of the second content with reference to each signature of the set.

48. A method for operating a subsystem of an avionics system, the system comprising a plurality of subsystems, the subsystem being packaged as a replaceable unit for installation via an interface of the subsystem, the subsystem comprising a processor and a first memory, the system comprising a second memory accessed by the subsystem via the interface, the method performed by a processor of the subsystem, the method comprising:

a step for determining whether first content of the first memory is not complete, determining being with reference to a preferences store of the subsystem;

a step for transferring a portion of the second content from the second memory to the first memory, the portion of the second content being identified by a signature value;

a step for repeating the step of transferring until a plurality of portions have been transferred, each portion being identified by a respective signature value.

49. The method of claim 48 wherein each signature value is stored in association with the respective portion of the second content.

50. The method of claim 49 wherein each signature value is stored in a header of the respective portion of the second content.

51. The method of claim 50 wherein a respective portion of the second content comprises at least one of a component, a module, and an image.