System for creating a single electronic checklist in response to multiple faults

• US 5,522,026 A
• Filed: 03/18/1994
• Issued: 05/28/1996
• Est. Priority Date: 03/18/1994
• Status: Expired due to Term

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Taylor, John A., McKenzie, William A., Records, Roger M., Shontz, William D.
• Primary Examiner(s): Bayerl, Raymond J.
• Assistant Examiner(s): HO, RUAY L
• Application Number:
  US08/210,689
• Time in Patent Office: 802 Days
• Field of Search: 395/155, 395/157, 395/161, 395/600, 395/700, 340/945, 345/7, 364/492
• US Class Current: 715/710
• CPC Class Codes: G05B 23/027 Alarm generation, e.g. communication protocol; Forms of alarm
• CPC Class Codes: G05D 1/0055 with safety arrangements
• CPC Class Codes: G06F 11/2257 using expert systems
• CPC Class Codes: G06F 11/2273 Test methods

Abstract

A computer-based electronic checklist system automatically generates a single electronic checklist upon the detection of two or more control system faults. The checklist contains a plurality of notes to be read by, and action items to be performed by, the operator. The system combines a set of predefined action items for each fault and executes a set of conditional rules that modify the action items to reflect the current state of the control system. The system then executes a set of priority rules to determine the correct order in which the action items of the checklist are to be performed. Once the correct order of the action items is determined, the system executes a set of conflict rules to remove any conflicting or redundant action items in order to provide the operator with a single electronic checklist that is customized to the control system'"'"'s current operating condition.

Claims

1. A computer-based method of producing a single electronic checklist in response to two or more faults detected by an aircraft sensing system and transmitted on an aircraft data bus, the method being performed by an electronic checklist system of the type that can monitor the aircraft data bus and display one or more action items to be performed by a pilot or crew in response to an aircraft fault, the method comprising the steps of:

monitoring the aircraft data bus for two or more fault codes that are produced by the aircraft sensing system when the aircraft sensing system detects two or more faults;

reading the fault codes from the aircraft data bus when the faults have been detected;

determining a number of action items to be performed by the pilot or crew in response to each fault code read from the data bus;

placing the number of action items into a single list, each action item having associated with it a priority code;

executing one or more priority rules associated with each fault code, which cause the electronic checklist system to evaluate one or more operating characteristics of the aircraft;

sorting the action items in the angle list by the priority codes and the operating characteristics of the aircraft; and

displaying the single list of action items to the pilot and crew.

2. The computer-based method of claim 1, further comprising the step of:

executing one or more conflict rules before the step of displaying the action items, the conflict rules causing the electronic checklist system to remove any conflicting action items from the list of action items.

3. The computer-based method of claim 2, wherein each action item has associated with it a code that indicates whether the action item is subordinate to or supersedes another action item, wherein the step of executing the one or more conflict rules further comprises the steps of:

evaluating each action item in the list to determine if the action item is subordinate to or supersedes another action item in the list;

removing the action item if the superseding action item is present in the list; and

removing the other subordinate action item if it is present in the list.

4. The computer-based method of claim 1, further comprising the step of:

executing one or more conditional rules before the step of displaying the action items, the conditional rules causing the electronic checklist system to determine if an action item should be performed by the pilot or crew and, if not, deleting the action item from the list of action items.

5. The computer-based method of claim 1, wherein the step of monitoring the aircraft data bus occurs continuously and the steps of reading the fault codes, determining a number of action items, placing the number of action items in a list, executing one or more priority rules, and sorting the action items are done each time a new fault code is read from the aircraft data bus.

6. The computer-based method of claim 1, further comprising the step of:

determining if an action item in the list of action items affects one or more of the action items associated with another electronic checklist and, if so, modifying one or more of the action items associated with the other checklist.

7. The computer-based method of claim 1, further comprising the step of:

determining if a pilot has entered information into the computer regarding a malfunctioning component or system on the aircraft;

determining if the malfunctioning component or system is referenced by an action item in an electronic checklist; and

modifying one or more of the action items of the electronic checklist to indicate the proper steps to be taken by the pilot to compensate for the malfunctioning component or system.

8. An electronic checklist system for producing a single electronic checklist in response to two or more system faults detected by a fault sensing system, the checklist including one or more action items to be performed in response to a fault, the system comprising:

means for detecting two or more fault codes that are produced by the fault sensing system when the fault sensing system detects two or more faults;

means for reading the fault codes from the fault sensing system when the faults have been detected;

means for determining a number of action items to be performed in response to each fault code read;

means for placing a number of action items into a single list, wherein each action item has associated with it at least one priority code;

means for executing one or more priority rules that cause the electronic checklist system to evaluate one or more operating characteristics of the system and to modify the priority codes of the action items based on the operating characteristics of the system;

means for sorting the action items in the single list by the priority codes; and

means for displaying the single list of action items.

9. The electronic checklist system of claim 8, further comprising:

means for executing one or more conflict rules that cause the electronic checklist system to remove any conflicting action items from the list of action items.

10. The electronic checklist system of claim 9, wherein each action item has associated with it a code that indicates whether the action item is subordinate to or supersedes another action item, wherein the means for executing the one or more conflict rules further comprises:

means for evaluating each action item in the list to determine whether the action item is subordinate to or supersedes another action item in the list;

means for removing the action item if the superseding action item is present in the list; and

means for removing the other subordinate action item if it is present in the list.

11. The electronic checklist system of claim 8, further comprising:

means for executing one or more conditional rules that cause the electronic system to determine if an action item can be performed and, if not, means for deleting the action item from the list of action items.

12. The electronic checklist system of claim 8, wherein the means for monitoring the detecting two or more faults operates to monitor the fault sensing system continuously and the means for reading the fault codes, determining a number of action items, placing the number of action items in a list, executing one or more priority rules, and sorting the action items operate each time a new fault is read from the fault sensing system.