Control system for an aircraft
First Claim
1. A control system for at least one controlled device of an aircraft, the control system being embedded onboard the aircraft and comprising:
- at least two distinct communication networks; and
at least one control unit associated with this at least one controlled device, this control unit being connected to at least one of the said communication networks,the control system being configured to determine and provide control commands to the controlled device, the determination of the control commands corresponding to a first function of the aircraft having a DAL-A quality assurance level requirement,the control system further comprising;
a set of at least three physical units each comprising an electrical power supply and a network interface device connected to at least one of the communication networks of the aircraft, in which;
the electrical power supplies of the various physical units being of at least three different types;
the network interface devices of the various physical units being of at least three different types;
each of the physical units comprising at least two computers each comprising an operating system;
the various computers of the various units being of at least two different types;
the operating systems of the various computers being of at least two different types;
at least six of the computers being configured to independently determine control commands for the said controlled device, these control commands corresponding to the said first function;
the various computers each having at least one of a DAL-C, DAL-D or DAL-E hardware and software quality assurance level; and
a selection logic unit whose hardware and software quality assurance level is DAL-A, the selection logic unit being connected to the at least two communication networks and being configured to select valid control commands from among the control commands determined by the computers,the control unit associated with the said controlled device being configured to control the controlled device as a function of the valid control commands selected by the selection logic unit.
3 Assignments
0 Petitions
Accused Products
Abstract
The control system of an aircraft including at least two communication networks and a controlled device control unit connected to one of them. The system determines control commands for the device with a DAL-A quality assurance level requirement and includes a set of at least three physical units each including at least two computers, an electrical power supply and a network interface device. The electrical power supplies, and the network interface devices, are of at least three different types, the computers are of at least two different types and include operating systems of at least two different types; the computers each have a DAL-C, DAL-D or DAL-E hardware and/or software quality assurance level and at least six of the computers are configured to independently determine control commands for the device. A DAL-A hardware and software quality assurance level selection logic unit is configured to select valid control commands used by the control unit to control the device.
-
Citations
14 Claims
-
1. A control system for at least one controlled device of an aircraft, the control system being embedded onboard the aircraft and comprising:
-
at least two distinct communication networks; and at least one control unit associated with this at least one controlled device, this control unit being connected to at least one of the said communication networks, the control system being configured to determine and provide control commands to the controlled device, the determination of the control commands corresponding to a first function of the aircraft having a DAL-A quality assurance level requirement, the control system further comprising; a set of at least three physical units each comprising an electrical power supply and a network interface device connected to at least one of the communication networks of the aircraft, in which; the electrical power supplies of the various physical units being of at least three different types; the network interface devices of the various physical units being of at least three different types; each of the physical units comprising at least two computers each comprising an operating system; the various computers of the various units being of at least two different types; the operating systems of the various computers being of at least two different types; at least six of the computers being configured to independently determine control commands for the said controlled device, these control commands corresponding to the said first function; the various computers each having at least one of a DAL-C, DAL-D or DAL-E hardware and software quality assurance level; and a selection logic unit whose hardware and software quality assurance level is DAL-A, the selection logic unit being connected to the at least two communication networks and being configured to select valid control commands from among the control commands determined by the computers, the control unit associated with the said controlled device being configured to control the controlled device as a function of the valid control commands selected by the selection logic unit. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. An aircraft comprising a control system for at least one controlled device of the aircraft, the control system being embedded onboard the aircraft and comprising:
-
at least two distinct communication networks; and at least one control unit associated with this at least one controlled device, this control unit being connected to at least one of the said communication networks, the control system being configured to determine and provide control commands to the controlled device, the determination of the control commands corresponding to a first function of the aircraft having a DAL-A quality assurance level requirement, the control system further comprising; a set of at least three physical units each comprising an electrical power supply and a network interface device connected to at least one of the communication networks of the aircraft, in which; the electrical power supplies of the various physical units being of at least three different types; the network interface devices of the various physical units being of at least three different types; each of the physical units comprising at least two computers each comprising an operating system; the various computers of the various units being of at least two different types; the operating systems of the various computers being of at least two different types; at least six of the computers being configured to independently determine control commands for the said controlled device, these control commands corresponding to the said first function; the various computers each having at least one of a DAL-C, DAL-D or DAL-E hardware and software quality assurance level; and a selection logic unit whose hardware and software quality assurance level is DAL-A, the selection logic unit being connected to the at least two communication networks and being configured to select valid control commands from among the control commands determined by the computers, the control unit associated with the said controlled device being configured to control the controlled device as a function of the valid control commands selected by the selection logic unit.
-
Specification