SYSTEM FOR REMOTELY-OPERATED SYSTEMS

• US 20170160739A1
• Filed: 07/08/2015
• Published: 06/08/2017
• Est. Priority Date: 07/08/2014
• Status: Active Grant

• Current Assignee: Safran Electronics & Defense
• Original Assignee: Safran Electronics & Defense
• Inventors: SOULIER, Jeremie
• Granted Patent: US 9,841,760 B2
• Time in Patent Office: Days
• CPC Class Codes: B64U 2201/20 Remote controls
• CPC Class Codes: G05D 1/0022 characterised by the communication link data switching networks in general H04L12/00
• CPC Class Codes: G08G 5/0013 with a ground station
• CPC Class Codes: G08G 5/0034 Assembly of a flight plan
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

The invention relates to a remote-controlled system comprising:—at least one ground interface (3), from which an operator can control a remote-controlled vehicle;—at least one mission unit (7, 8) in said vehicle; and—a data link between said interface (3) and said mission unit (7, 8). Said system is characterized in that it comprises, on the ground and in the vehicle, security monitoring systems (6, 10) suitable for approving and/or authenticating critical data and/or commands exchanged between the ground and the vehicle and also suitable for verifying the integrity of said data. It is thus possible to use, on the ground as on board the vehicle, interfaces and units with a low level of criticality at the same time as interfaces and units with the highest level of criticality.

Claims

1. A remotely-operated system including:

at least one interface on the ground from which an operator may control a remotely-operated vehicle,

one second interface on the ground having a higher criticality level than the first interface on the ground,

at least one mission assembly in said vehicle,

a data link between said interface and said mission assembly, the system including on the ground and in the vehicle safety checking systems adapted for signing and/or authenticating critical data and/or commands exchanged between the ground and the vehicle, and/or for checking the integrity of these data, the safety checking system on the ground being adapted for checking the consistency between the emitted command data intended for on-board the vehicle and a command return which is transmitted from on-board the vehicle by a remotely operated critical assembly and one of the safety checking systems in the vehicle is adapted for checking whether the remotely-operated vehicle is maintained in a safety coverage predefined by the ground and for triggering a predetermined action when this is not the case.

2. The system according to claim 1, wherein the safety checking system on the ground is adapted for signing the critical commands emitted by either one of the interfaces intended for on-board the vehicle and for checking the integrity of the state data received from on-board.

4. The system according to claim 1, wherein the safety checking system on the ground is adapted for copying and controlling emitted command data intended for on-board by a mission operator interface of high criticality.

5. The system according to claim 1, wherein the safety checking system on-board the vehicle is adapted for authenticating the command data intended for a remotely-operated assembly of high criticality on-board the vehicle and for checking their integrity.

6. The system according to claim 1, wherein the safety checking system on-board the vehicle is adapted for checking the temporal validity of the commands from the ground.

7. The system according to claim 1, wherein the safety checking system on-board the vehicle is adapted for emitting to the ground acknowledgments of instructions from a critical assembly on-board the remotely-operated vehicle.

8. The system according to claim 1, wherein the safety checking system on-board the vehicle is adapted for signing the controls and statuses issued from a critical assembly on-board the remotely-operated vehicle.

9. The system according to claim 1, wherein a safety checking system on the ground (respectively on-board the vehicle) is adapted for regularly transmitting to on-board (respectively to the ground) authentication requests.

10. The system according to claim 1, wherein it further includes an independent safety data link chain in order to allow triggering of a predetermined safety action from the ground.

11. The system according to claim 1, wherein the safety checking system of the vehicle is adapted for receiving a series of simple orders from the air traffic control.

3. (canceled)