Anti-hijacking system operable in emergencies to deactivate on-board flight controls and remotely pilot aircraft utilizing autopilot

• US 6,641,087 B1
• Filed: 10/09/2001
• Issued: 11/04/2003
• Est. Priority Date: 10/09/2001
• Status: Expired due to Fees

• Current Assignee: Cubic Defense Systems, Inc. (Cubic Corporation)
• Original Assignee: Cubic Defense Systems, Inc. (Cubic Corporation)
• Inventors: Nelson, Douglas G.
• Primary Examiner(s): Poon, Peter M.
• Assistant Examiner(s): Collins, Timothy D.
• Application Number:
  US09/974,545
• Publication Number:
  US 20030201365A1
• Time in Patent Office: 756 Days
• Field of Search: 244/118.5
• US Class Current: 244/118.5
• CPC Class Codes: B64D 45/0031 means for overriding or restricting access to flight controls
• CPC Class Codes: B64D 45/0034 by ground-control override
• CPC Class Codes: G05D 1/0061 for transition from automatic pilot to manual pilot and vice versa

Abstract

In an anti-hijacking system for autopilot equipped aircraft, a transceiver communicates with at least one remote guidance facility. A panic button is activated by flight crew in case of hijacking. A manager is coupled to the transceiver and the panic button, as well as existing avionics including the aircraft'"'"'s master computer and autopilot. Optionally, a relay is coupled between the pilot controls and selected aircraft flight systems. The manager recognizes predetermined override inputs, such as activation of the panic button or receipt of override signals from the remote guidance facility. Responsive to the override input, the manager deactivates on-board control of selected aircraft flight systems and the autopilot system, and directs the autopilot to fly the aircraft to a safe landing. Flight routing and landing instructions are obtained from the remote guidance facility, or by self-evaluating nearby airports in view of the aircraft'"'"'s position and various preestablished criteria.

Claims

1. A method for preventing hijacking of an aircraft, comprising operations of:

providing a hijacking intervention module aboard an aircraft having an autopilot system;

the module sensing a predetermined override input;

responsive to the sensing of the predetermined override input, the module performing operations comprising;

deactivating on-board control of predetermined aircraft flight systems;

deactivating on-board control of the autopilot system;

directing the autopilot system to fly the aircraft to a landing.

2. The method of claim 1, the operations responsive to the sensing of the predetermined override input further comprising:

receiving manual commands from at least one remote guidance facility, the manual commands comprising instructions to manually manipulate specified aircraft flight systems.

3. The method of claim 2, the specified aircraft flight systems comprising one or more of the following:

rudder, elevator, engine power, flaps, landing gear, brakes, reverse thrust, spoilers, dive brakes, nosewheel steering.

4. The method of claim 1, the operation of directing the autopilot system comprising:

the module receiving flight routing and landing instructions from at least one remote guidance facility;

directing the autopilot system to fly the aircraft according to the flight routing and to land according to the landing instructions.

5. The method of claim 4, the operation of receiving flight routing and landing instructions comprising:

receiving the flight routing and landing instructions via satellite relay.

6. The method of claim 4, the operation of receiving flight routing and landing instructions comprises receiving encrypted flight routing and landing instructions.

7. The method of claim 1, the operation of directing the autopilot system comprising:

the module self-identifying flight routing and landing instructions meeting predetermined qualifications;

directing the autopilot system to fly the aircraft according to the self-identified flight routing and landing instructions.

8. The method of claim 7, the operation of the module self-identifying flight routing and landing instructions meeting predetermined qualifications including executing a pre-programmed automated routine to select a landing site meeting preset criteria.

9. The method of claim 1, the operation of directing the autopilot system comprising:

determining whether flight routing and landing instructions have been received from at least one remote guidance facility;

responsive to absence of flight routing and landing instructions from the remote guidance facility, the module self-identifying a flight routing and landing instructions meeting predetermined qualifications and then directing the autopilot system to fly the aircraft according to the flight routing and landing instructions.

10. The method of claim 9, the operations responsive to the sensing of the predetermined override input further comprising:

attempting to obtain flight routing and landing instructions from the remote guidance facility.

11. The method of claim 1, the operation of directing the autopilot system comprising:

the module attempting to self-identify flight routing and landing instructions meeting predetermined qualifications;

responsive to absence of successful completion of the self-identifying of flight routing and landing instructions, the module obtaining flight routing and landing instructions from at least one remote guidance facility and directing the autopilot system to fly the aircraft according to the flight routing and to land according to the landing instructions.

12. The method of claim 1, the operation of sensing the predetermined override input comprising:

the module receiving a predetermined override signal transmitted by a remote guidance facility.

13. The method of claim 1, the operation of sensing the predetermined override input comprising:

the module detecting activation of a panic button aboard the aircraft.

14. The method of claim 1, the operations responsive to the sensing of the predetermined override input further comprising:

deactivating aircraft communications equipment.

15. The method of claim 1, the operations further comprising assembling and transmitting accident reconstruction information to a remote station, said information including one or more of the following:

data stored by an on-board flight data recorder;

data stored by an on-board cockpit voice recorder.

16. The method of claim 1, the operations further comprising assembling and transmitting aircraft condition information to the remote guidance facility, said information comprising one or more of the following:

airspeed, fuel remaining, altitude, position, attitude, heading, engine condition.

17. The method of claim 1,

the operations further comprising providing a relay interposed between pilot controls and the predetermined aircraft flight control systems;

where the operation of deactivating on-board control of the predetermined aircraft flight systems is performed by operating the relay to electrically disconnect the pilot controls from the predetermined aircraft flight systems.

18. A signal-bearing medium tangibly embodying a program of machine-readable instructions executable by a hijacking intervention module aboard an aircraft having an autopilot system to perform a method for preventing hijacking of the aircraft, the operations comprising:

sensing a predetermined override input;

responsive to the sensing of the predetermined override input, performing operations comprising;

deactivating on-board control of predetermined aircraft flight systems;

deactivating on-board control of the autopilot system;

directing the autopilot system to fly the aircraft to a landing at a landing site.

19. The medium of claim 18, the operations responsive to the sensing of the predetermined override input further comprising:

receiving manual commands from at least one remote guidance facility, the manual commands comprising instructions to manually manipulate specified aircraft flight systems.

20. The medium of claim 19, the specified aircraft flight systems comprising one or more of the following:

rudder, elevator, engine power, flaps, landing gear, brakes, reverse thrust, spoilers, dive brakes, nosewheel steering.

21. The medium of claim 18, the operation of directing the autopilot system comprising:

the module receiving flight routing and landing instructions from at least one remote guidance facility;

directing the autopilot system to fly the aircraft according to the flight routing and to land according to the landing instructions.

22. The medium of claim 18, the operation of directing the autopilot system comprising:

the module self-identifying flight routing and landing instructions meeting predetermined qualifications;

directing the autopilot system to fly the aircraft according to the self-identified flight routing and landing instructions.

23. The medium of claim 22, the operation of the module self-identifying flight routing and landing instructions meeting predetermined qualifications including executing a pre-programmed automated routine to select a landing site meeting preset criteria.

24. The medium of claim 18, the operation of directing the autopilot system comprising:

determining whether flight routing and landing instructions have been received from at least one remote guidance facility;

responsive to absence of flight routing and landing instructions from the remote guidance facility, the module self-identifying a flight routing and landing instructions meeting predetermined qualifications and then directing the autopilot system to fly the aircraft according to the flight routing and landing instructions.

25. The medium of claim 24, the operations responsive to the sensing of the predetermined override input further comprising:

attempting to obtain flight routing and landing instructions from the remote guidance facility.

26. The medium of claim 18, the operation of directing the autopilot system comprising:

the module attempting to self-identify flight routing and landing instructions meeting predetermined qualifications;

responsive to absence of successful completion of the self-identifying of flight routing and landing instructions, the module obtaining flight routing and landing instructions from at least one remote guidance facility and directing the autopilot system to fly the aircraft according to the flight routing and to land according to the landing instructions.

27. The medium of claim 18, the operation of sensing the predetermined override input comprising:

the module receiving a predetermined override signal transmitted by a remote guidance facility.

28. The medium of claim 18, the operation of sensing the predetermined override input comprising:

the module detecting activation of a panic button aboard the aircraft.

29. The medium of claim 18, the operations responsive to the sensing of the predetermined input signal further comprising:

deactivating aircraft communications equipment.

30. The medium of claim 18, the operations further comprising assembling and transmitting accident reconstruction information to a remote station, said information including one or more of the following:

data stored by an on-board flight data recorder;

data stored by an on-board cockpit voice recorder.

31. The medium of claim 18, the operations further comprising assembling and transmitting aircraft condition information to the remote guidance facility, said information comprising one or more of the following:

airspeed, fuel remaining, altitude, position, attitude, heading, engine condition.

32. The medium of claim 18, a relay being interposed between pilot controls and the predetermined aircraft flight control systems, the operation of deactivating on-board control of the predetermined aircraft flight systems comprising is performed by operating the relay to electrically disconnect the pilot controls from the predetermined aircraft flight systems.

33. A logic circuit of multiple interconnected electrically conductive elements configured to perform operations to prevent hijacking of an aircraft by operating a hijacking intervention module aboard the aircraft, the operations comprising:

sensing a predetermined override input;

responsive to the sensing of the predetermined override input, performing operations comprising;

deactivating on-board control of predetermined aircraft flight systems;

deactivating on-board control of the autopilot system;

directing the autopilot system to fly the aircraft to a landing.

34. An anti-hijacking system for use in an aircraft having an autopilot system, comprising:

a transceiver to communicate with remote stations;

a manual panic input;

a manager, coupled to the transceiver and the manual panic input, programmed to perform operations comprising;

sensing a predetermined override input comprising one or more of the following;

activation of the manual panic input, receipt of a predetermined override signal from a remote guidance facility via the transceiver;

responsive to the sensing of the predetermined override input, the manager performing operations comprising;

deactivating on-board control of predetermined aircraft flight systems;

deactivating on-board control of the autopilot system;

directing the autopilot system to fly the aircraft to a landing.

35. The apparatus of claim 34, the manager being further programmed such that the operations responsive to the sensing of the predetermined override input further comprise:

receiving manual commands from at least one remote guidance facility, the manual commands comprising instructions to manually manipulate specified aircraft flight systems.

36. The apparatus of claim 35, the manager being programmed such that the specified aircraft flight systems comprise one or more of the following:

rudder, elevator, engine power, flaps, landing gear, brakes, reverse thrust, spoilers, dive brakes, nosewheel steering.

37. The apparatus of claim 34, the manual panic input comprising a portable remote control switch.

38. The apparatus of claim 34, the manager including an input coupled to an on-board aircraft master computer, the manager being further programmed to collect aircraft condition information from the master computer and operate the transceiver to transmit the collected information to a remote station, the aircraft condition information comprising one or more of the following:

airspeed, fuel remaining, altitude, position, attitude, heading, engine condition.

39. The apparatus of claim 34,

further comprising a relay coupled between pilot controls and the predetermined aircraft flight control systems;

the manager being programmed such that the operation of deactivating on-board control of the predetermined aircraft flight systems comprises activating the relay to electrically disconnect the pilot controls from the predetermined aircraft flight systems.

40. The apparatus of claim 34, further comprising:

a source of position information comprising at least one of the following;

a position locating device, an interface to a position locating device;

the manager being further programmed to collect position information from the source and operate the transceiver to transmit the collected position information to a remote station.

41. The apparatus of claim 34, the manager programmed such that the operation of directing the autopilot system comprises:

receiving flight routing and landing instructions from a remote guidance facility;

directing the autopilot system to fly the aircraft according to the flight routing and to land according to the landing instructions.

42. The apparatus of claim 41, the manager programmed such that the operation of receiving flight routing and landing instructions comprises:

receiving the flight routing and landing instructions via satellite relay.

43. The apparatus of claim 34, the manager programmed such that the operation of receiving flight routing and landing instructions comprises receiving encrypted flight routing and landing instructions.

44. The apparatus of claim 34, the manager programmed such that the operation of directing the autopilot system comprises:

the module self-identifying flight routing and landing instructions meeting predetermined qualifications;

directing the autopilot system to fly the aircraft according to the self-identified flight routing and landing instructions.

45. The apparatus of claim 44, the operation of the module self-identifying flight routing and landing instructions meeting predetermined qualifications including executing a pre-programmed automated routine to select a landing site meeting preset criteria.

46. The apparatus of claim 34, the manager programmed such that the operation of directing the autopilot system comprises:

determining whether flight routing and landing instructions have been received from at least one remote guidance facility;

responsive to absence of flight routing and landing instructions from the remote guidance facility, the module self-identifying a flight routing and landing instructions meeting predetermined qualifications and then directing the autopilot system to fly the aircraft according to the flight routing and landing instructions.

47. The apparatus of claim 46, the manager programmed such that the operations responsive to the sensing of the predetermined override input further comprises:

attempting to obtain flight routing and landing instructions from the remote guidance facility.

48. The apparatus of claim 34, the manager programmed such that the operation of directing the autopilot system comprises:

attempting to self-identify flight routing and landing instructions meeting predetermined qualifications;

responsive to absence of successful completion of the self-identifying of flight routing and landing instructions, obtaining flight routing and landing instructions from at least one remote guidance facility and directing the autopilot system to fly the aircraft according to the flight routing and to land according to the landing instructions.

49. The apparatus of claim 34, the manager programmed such that the operation of sensing the predetermined override input comprises:

the module receiving a predetermined override signal transmitted by a remote guidance facility.

50. The apparatus of claim 34, the manager programmed such that the operation of sensing the predetermined override input comprises:

the module detecting activation of a panic button aboard the aircraft.

51. The apparatus of claim 34, the manager programmed such that the operations responsive to the sensing of the predetermined override input further comprise:

deactivating aircraft communications equipment.

52. The apparatus of claim 34, the manager programmed such that the operations further comprise assembling and transmitting accident reconstruction information to a remote station, said information including one or more of the following:

data stored by an on-board flight data recorder;

data stored by an on-board cockpit voice recorder.

53. The apparatus of claim 34, the manager programmed such that the operations further comprise assembling and transmitting aircraft condition information to the remote guidance facility, said information comprising one or more of the following:

airspeed, fuel remaining, altitude, position, attitude, heading, engine condition.

54. The apparatus of claim 34, the transceiver including a transmitter and receiver configured to exchange data via satellite.

55. An anti-hijacking system for use in an aircraft having an autopilot system, comprising:

first means for communicating with remote stations;

second means for receiving manual panic input;

processing means, coupled to the first and second means, for operations comprising;

recognizing occurrence of one or more predetermined override signals arising from one or more of the following;

activation of the second means, receipt of predetermined override signals from one or more remote stations via the first means;

responsive to the receiving of one or more predetermined override signals, the processor performing operations comprising;

deactivating on-board control of aircraft flight systems;

deactivating on-board control of the autopilot system;

directing the autopilot system to fly the aircraft to a landing at a landing site.