Method and apparatus for detecting control system data processing errors

• US 4,698,785 A
• Filed: 12/02/1983
• Issued: 10/06/1987
• Est. Priority Date: 12/02/1983
• Status: Expired due to Term

• Current Assignee: Flight Dynamics Inc (Rtx Corporation)
• Original Assignee: Flight Dynamics Incorporated 5289 NE ELAM Young Parkway Hillsboro Or An Corporation
• Inventors: Zimmerman, Kenneth A., Desmond, John P., Fossey, Michael E., Ford, Douglas W., Stanbro, Michael
• Primary Examiner(s): Heckler, Thomas M.
• Application Number:
  US06/557,631
• Time in Patent Office: 1,404 Days
• Field of Search: 364/200 MS File, 364/900 MS File, 371/19, 371/24, 371/70, 371/71, 371/68
• US Class Current: 714/38.1
• CPC Class Codes: G06F 11/1637 using additional compare functionality in one or some but not all of the redundant processing components
• CPC Class Codes: G06F 11/321 Display for diagnostics, e.g. diagnostic result display, self-test user interface
• CPC Class Codes: G06F 11/328 Computer systems status display G06F11/327 takes precedence

Abstract

A digital-based control data processing system detects during system operation the occurrence of data processing errors. Data processing accuracy is verified by receiving output information developed from system input information in accordance with a first operational function, computing a derived version of the system input information in accordance with a second operational function, and comparing the derived version of the system input information to the actual system input information to determine whether they differ by a predetermined operational tolerance. This method for verifying processing accuracy is especially advantageous for detecting latent software errors which are unique to a particular computer program. The processing system includes display apparatus which develops from the output information a set of display symbols that convey the information on a monitor screen to the pilot. Assigned to each display symbol is an identifying tag which identifies in real time a display symbol that conveys erroneous information.

Claims

1. An information processing system, comprising:

3. The system of claim 1 in which the second operatonal function corresponds to an inverse function of the first operational function.

4. The system of claim 1 in which the first digital processing means comprises:

digital computing means for developing the output information and representing the output information in a first format;

conditioning means for receiving the output information represented in the first format and representing the output information in a second format; and

the second processing means receiving the information represented in the second format as a parameter in computing the derived version of the input information.

5. The system in claim 3 which further comprises identifying means in communication with the conditioning means, the identifying means assigning to a predetermined one of the output information an identifying tag which is utilized by the second processing means to identify the predetermined one of the output information which figures in a difference computation that is not within the preassigned operational tolerance.

6. The system of claim 1 in which the input information defines elements of an input vector and the output information defines elements of a solution vector so that the first operational function includes a matrix of the transformation of the input vector into the solution vector, the second operational function including the inverse matrix of the matrix of the transformation.

2. first digital processing means for receiving input information and for processing the input information in accordance with a first operational function to develop output information, the first operational function being implemented in a first of information processing algorithms;

second digital means receiving the output information from thefirst digital processing means for computing a derived version of the input information in accordance with a second operational function, the second operational function being implemented in a second set of information processing algorithms which differs from the first set of information processing algorithms; and

comparison means for comparing the actual input information with the drived version of the input information to determine whether they differ within a preassigned operational tolerance.

7. An information processing system, comprising:

first digital processing means for receiving input information and for processing the input information in accordance with a first operational function to develop output information, the first digital processing means including identifying means for assigning an identifying tag to at least one of the output information;

second digital processing means for computing in accordance with a second operational function a derived version of the input information, the second digital processing means operating asynchronously to the first digital processing means and communicating with the first digital processing means to receive information corresponding to the output information and identified by the identifying tag; and

comparison means for comparing the actual input information with the derived version of the input information to determine whether they differ by more than a preassigned operational tolerance.

9. The system of claim 7 which further comprises identifying means in communication with the conditioning means, the identifying means assigning to a predetermined one of the output information an identifying tag which is utilized by the second processing means to identify the predetermined one of the output information which figures in a difference computation that is not within the preassigned operational tolerance.

8. An information processing system, comprising:

first digital processing means for receiving input information and for processing the input information in accordance with a first operational function to develop output information, the first digital processing means including digital computing means for developing the output information and representing it in a first format and including conditioning means for receiving the output information represented in the first format and for representing it in a second format;

second digital processing means for receiving from the first digital processing means the output information represented in the second format and for using the output information represented in the second format as a parameter in computing a derived version of the input information in accordance with a second operational function; and

comparison means for comparing the actual input information with the derived version of the input information to determine whether they differ within a preassigned operational tolerance.

10. An information processing system, comprising:

first digital processing means for receiving input information and for processing the input information in accordance with a first operational function to develop output information, the input information defining elements of an input vector and the output information defining elements of a solution vector so that the first operational function includes a matrix of the transformation of the input vector into the solution vector;

second digital processing means receiving information from the first digital processing means for computing a derived version of the input information in accordance with a second operational function, the second operational function including the inverse matrix of the matrix of the transformation; and

comparison means for comparing the actual input information with the derived version of the input information to determine whether they differ within a preassigned operational tolerance.

12. The system of claim 10 in which the first digital processing means comprises display symbol generating means for generating a display symbol that conveys to the pilot the information corresponding to the output information, and in which the first communicating means is operable to project the display symbol onto a monitor screen for the pilot to observe.

11. An aircraft control system, comprising:

plural control mechanisms by which a pilot can control the flight of an aircraft;

sensing means for sensing and for providing input informatin relating to the operational status of the control mechanisms;

first digital processing means for processing the input information in accordance with a first operational function to develop output information, the first operational function being implemented in a first set of information processing algorithms;

second digital processing means receiving the output information from the first digital processing means for computing a derived version of the input information in accordance with a second operational function, the second operatonal function being implemented in a second set of information processing algorithms which differs from the first set of information processing algorithms;

comparison means for comparing the actual input information with the derived version of the input information to determine whether they differ within a preassigned operational tolerance;

first means for communicating to the pilot information corresponding to the output information to assist the pilot to manipulate at least some of the control mechanisms to control the flight of the aircraft; and

second means for communicating to the pilot a message whenever the comparison means determines that the actual input information and the derived version of the input information are not within the preassigned operational tolerance, thereby to inform the pilot about the reliability of the information corresponding to the output information for controlling the flight of the aircraft.

13. The system of claim 11 in which the first communicating means has programmed therein a reference location and projects the display symbol for the pilot to observe relative to the reference location, thereby to assist the pilot to control the flight of the aircraft by observing the position of the display symbol on the monitor screen relative to the reference location.

14. The system of claim 11 in which the second communicating means includes means for blanking the display symbol from display onto the monitor screen to provide the message.

16. The method of claim 14 in which the processing means comprises a digital-based processor.

17. The method of claim 14 which further comprises inhibiting a visual display of the display symbol in error.

18. The method of claim 14 in which the identifying tag is assigned to display system information within the display system generating means.

20. The method of claim 18 in which the second predetermined operational function represents an inverse function of the first predetermined operational function.

23. The method of claim 18 which further comprises:

assigning a different identifying tag to each one of at least some of the output signal information, and

applying the identifying tag to the ones of the output signal information prior to the computation of the inverse function, thereby to identify the derived version of the input signal information as that which corresponds to the actual input signal information which figured in the development of the output information having the same identifying tag.

25. The method of claim 23 in which the identifying tag is applied within the display symbol generating means.

26. The method of claim 23 in which the display system comprises a monitor screen and has programmed therein a monitor screen reference location, the display symbol conveying display information by its position on the monitor screen relative to the reference location.

15. In an information display system including processing means for receiving input information and for processing the input information in accordance with a first operational function to develop output information, and including display symbol generating means to provide for visual display of a symbol corresponding to the output information, a method for detecting a display symbol error, comprising:

developing display system information corresponding to the output information;

assigning an identifying tag to the display system information to mark the display symbol;

processing the output information in accordance with a second operational function to compute a derived version of the input information;

comparing the actual input information with the derived version of the input information to determine whether they differ within a preassigned operational tolerance;

acknowledging the existence of a display symbol error whenever the difference between the actual input information and the derived version of the input information exceeds the preassigned operational tolerance; and

determining the display symbol in error by means of the identifying tag corresponding thereto.

19. In an information processing system including means for providing input signal information to the system and digital processing means for processing the input signal information in accordance with a first predetermined operational function to provide output signal information, a processing error detection method comprising:

sensing the output signal information;

processing the output signal information by the digital processing means in accordance with a second predetermined operational function to provide a derived version of the input signal information, the first predetermined operational function being implemented in a first set of information processing algorithms, and the second predetermined operational function being implemented in a second set of information processing algorithms which differs from the first set of information processing algorithms; and

comparing the derived version of the input signal information with the actual input signal information to determine whether they differ by more than a predetermined operational tolerance.

21. The method of claim 19 in which the input information defines an input vector and the output signal information defines a solution vector so that the first predetermined operational function defines a matrix of the transformation of the input vector into the solution vector, the second predetermined operational function defining the inverse matrix of the matrix of the transformation.

22. The method of claim 19 in which the digital processing means comprises first and second separate computational means, the output signal information being developed by the first computational menas and the derived version of the input signal information being developed by the second computational means.

24. In an information display system comprising processing means for processing display information, the processing means including a display symbol generating means for generating display symbol to convey the display information, a method for detecting display symbol errors comprising the steps of:

applying in the processing means an identifying tag to the display information to mark the display symbol;

determining in the processing means whether an error was introduced during the processing of the display information; and

acknowledging with reference to the identifying tag the existence of an error, if any, in the display symbol corresponding to the display information.

27. In an information processing system including means for providing input signal information to the system and digital processing means for processing the input signal information in accordance with a first predetermined operational function to provide output signal information, a processing error detection method comprising:

sensing the output signal information;

processing the output signal information by the digital processing means in accordance with a second redetermined operational function to provide a derived version of the input signal information, the input signal information defining an input vector and the output signal information defining a solution vector so that the first predetermined operational function defines a matrix of the transformation of the input vector into the solution vector, and the second predetermined operational function representing an inverse function of the first predetermined operational function and defining the inverse matrix of the matrix of the transformation; and

comparing the derived version of the input signal informatwon with the actual input signal information to determine whether they differ by more than a predetermined operational tolerance.

28. In an information processing system including means for providing input signal information to the system and digital processing means for processing the input signal information in accordance with a first predetermined operational function to provide output signal information, a processing error detection method comprising:

sensing the output signal information;

processing the output signal information by the digital processing means in accordance with a second predetermined operational function to provide a derived version of the the input signal information;

assigning a different identifying tag to each one of at least some of the output signal information prior to the computation of the derived version of the input signal information, thereby to identify the derived version of the input signal information as that which corresponds to the actual input signal information which figured in the development of the output information having the same identifying tag; and

comparing the derived version of the input signal information with the actual input signal information to determine whether they differ by more than a predetermined operational tolerance.