System and method using environment memory having signatures

• US 6,768,943 B2
• Filed: 04/18/2002
• Issued: 07/27/2004
• Est. Priority Date: 04/18/2002
• Status: Active Grant

• Current Assignee: L-3 Communications Corporation (L3Harris Technologies, Inc.)
• Original Assignee: Aviation Communication and Surveillance Systems LLC (L3Harris Technologies, Inc.)
• Inventors: Pearson, Jeffery
• Primary Examiner(s): Beaulieu, Yonel
• Application Number:
  US10/126,643
• Publication Number:
  US 20030200026A1
• Time in Patent Office: 831 Days
• Field of Search: 701/301, 701/14, 701/3, 701/4, 701/9, 342/29, 342/30
• US Class Current: 701/301
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A system having replaceable subsystems is operable in a certified configuration after installation of a replacement subsystem. The system includes several subsystems each installed at an interface. For each subsystem, the interface includes memory having a description of the operating environment for that subsystem. The memory stores modules each having a signature, for example, a cyclic redundancy code (CRC). After installation of a replacement subsystem, a processor in the subsystem checks a list of signatures. Each signature corresponds to a module that is certified for use by an application program of the subsystem. If a listed signature corresponds to a module that is available in the memory, is desirable to be used, and the subsystem is not presently configured to use such a module, the subsystem reads the module, integrates the data of the module into an operating configuration, and operates thereafter in accordance with the updated operating configuration. In one implementation, an aircraft collision avoidance system includes one or more replaceable subsystems that each read a memory in a tray of the cockpit interface and configure themselves for updated operation.

Claims

1. A collision avoidance system comprising:

means for determining own aircraft data including position, altitude, velocity, and bearing;

means for interrogating an other aircraft to determine other aircraft data including position, altitude, velocity, and bearing;

means for determining a threat of collision with the other aircraft in accordance with the own aircraft data and with the other aircraft data;

means for displaying at least a portion of the own aircraft data and at least a portion of the other aircraft data;

means for alerting a crew member of a threat of collision with the other aircraft;

wherein;

for at least one of the means for determining own aircraft data, means for interrogating, means for determining a threat of collision with the other aircraft, means for displaying own aircraft data, and the means for alerting a crew member;

the at least one means is packaged in a replaceable unit for installation on the own aircraft at an interface, the interface having a first means for storing first content and a plurality of signature values, each signature value for a respective portion of the first content;

the at least one means further comprises;

second means for storing second content;

means for validating the second content with reference to at least one signature value of the first content;

means for updating the second content in accordance with the first content; and

means for operating the subsystem in accordance with the updated second content.

2. The system of claim 1 wherein the means for operating comprises:

an application program; and

means for establishing an initial configuration of the application program in accordance with the updated second content.

3. The system of claim 1 wherein the means for operating comprises:

means for establishing in accordance with the updated second content a path for data communication between the application program and at least one of the means for determining own aircraft data, means for interrogating, means for determining a threat of collision with other aircraft, means for displaying own aircraft data, means for determining own aircraft position, means for displaying a terrain map, means for determining a threat of collision with terrain, and the means for alerting a crew member.

4. The system of claim 1 wherein:

the means for displaying further comprises means for displaying a terrain map in accordance with own aircraft position;

the means for determining a threat of collision further comprises means for determining a threat of collision with terrain in accordance with the terrain map; and

the means for alerting further comprises means for alerting a crew member of a threat of collision with terrain.

5. The system of claim 1 wherein each portion of the first content comprises a header comprising the respective signature value.

6. The system of claim 1 wherein each signature value comprises a respective cyclic redundancy code.

7. The system of claim 1 wherein the subsystem means further comprises means for receiving data and for writing received data into the means for storing, the received data being from a provided portable memory, the received data comprising a second plurality of signature values.

8. A system comprising:

a plurality of subsystems coupled to cooperate;

first means for storing first content and a plurality of first signature values, each first signature associated with a respective portion of the first content;

subsystem means for performing an avionics program, the subsystem means comprising;

means for coupling the subsystem means to at least one of the plurality of other subsystems;

means for accessing the first means for storing to validate the first content with reference to at least one of the plurality of first signature values;

second means for storing second content and a second signature;

means for accessing the second means for storing to validate the second content with reference to the second signature;

means for updating the second content in accordance with at least a portion of the first content; and

means for performing the avionics program in accordance with the updated second content.

9. The system of claim 8 wherein the means for performing comprises means for establishing an initial configuration of the avionics program in accordance with the updated second content.

10. The system of claim 8 wherein the means for performing comprises means for establishing in accordance with the updated second content a path for data communication between the avionics program and at least one of the other subsystems.

11. The system of claim 8 wherein each portion of the first content comprises a header comprising the respective signature value.

12. The system of claim 8 wherein each signature value comprises a respective cyclic redundancy code.

13. The system of claim 8 wherein the subsystem means further comprises means for receiving data and for writing received data into the first means for storing, the received data being from a provided portable memory, the received data comprising a second plurality of signature values.

14. A system for operation in an aircraft, the system comprising:

a plurality of subsystems coupled to cooperate;

an environment memory comprising content of the environment memory and a plurality of first signatures, each first signature associated with at least one of a component, a module, an image, and an entirety of the content of the environment memory; and

a subsystem of the plurality comprising;

a nonvolatile memory comprising content of the nonvolatile memory and a signature value of the content of the nonvolatile memory;

an interface that facilitates removal and replacement of the subsystem; and

a processor having access to the environment memory via the interface;

wherein the processor;

accesses each first signature for at least one of;

identifying the associated component, module, image, or entirety; and

validating the associated component, module, image, or entirety;

validates the content of the nonvolatile memory with reference to the signature value of the content of the nonvolatile memory;

validates the content of the environment memory with reference to the plurality of first signatures;

updates the content of the nonvolatile memory in accordance with the content of the environment memory; and

performs an avionics program in accordance with the updated content of the nonvolatile memory.

15. The system of claim 14 wherein a first signature is associated with an entirety of the content of the environment memory and each other first signature is associated with a respective component of the content of the environment memory.

16. The system of claim 14 wherein the signature value of the content of the nonvolatile memory is stored in a header of the content of the nonvolatile memory.

17. The system of claim 16 wherein a first signature is associated with an entirety of the content of the nonvolatile memory and each other first signature is associated with a respective component of the content of the environment memory.

18. The system of claim 14 wherein the plurality of subsystems are installed on an aircraft and cooperate for alerting a crew member of the aircraft for collision avoidance.

19. The system of claim 18 wherein the avionics program provides an alert for at least one of traffic collision avoidance and terrain collision avoidance.

20. The system of claim 14 wherein the subsystem of the plurality comprises a transponder.

21. The system of claim 14 wherein the avionics program performs a global positioning system function.

22. The system of claim 14 wherein the subsystem of the plurality provides a weather radar function.

23. The system of claim 14 wherein the subsystem of the plurality comprises a display.

24. The system of claim 23 wherein the display provides a radar display.

25. The system of claim 14 wherein the subsystem further comprises a reader of provided portable memory for updating the content of the environment memory.

26. The system of claim 14 wherein the processor updates the content of the nonvolatile memory in accordance with determining whether the nonvolatile memory is incomplete.

27. The system of claim 14 wherein the processor updates the content of the nonvolatile memory in accordance with determining that the content of the environment memory comprises at least one of a component, a module, and an image any of which is not currently stored in the nonvolatile memory.

28. The system of claim 14 wherein:

the subsystem further comprises a store having a preferred signature value corresponding to at least one of a preferred component, a preferred module, and a preferred image;

the content of the environment memory comprises the at least one of preferred component, preferred module, and preferred image; and

the processor updates the nonvolatile memory in response to determining with reference to the preferred signature that the at least one of preferred component, preferred module, and preferred image is not currently stored in the nonvolatile memory.

29. The system of claim 14 wherein the processor updates an entirety of the content of the nonvolatile memory in accordance with an entirety of the content of the environment memory.

30. The system of claim 14 wherein the processor updates an image of the content of the nonvolatile memory in accordance with an image of the content of the environment memory.

31. The system of claim 14 wherein the processor updates a module of the content of the nonvolatile memory in accordance with a module of the content of the environment memory.

32. The system of claim 14 wherein the processor updates a component of the content of the nonvolatile memory in accordance with a component of the content of the environment memory.

33. A method for operating an avionics subsystem after installing the subsystem at an interface between the subsystem and a plurality of other subsystems, the interface having a first side comprising the subsystem and a second side comprising the other subsystems, the subsystem having a first memory, the second side having a second memory, the method performed by the subsystem comprising:

a step for determining whether a first signature of the first memory is inconsistent with a second signature of the second memory;

a step for operating without updating when inconsistency does not exist;

a step for updating in response to inconsistency, the step for updating comprising a method having;

a step for transferring data associated with the second signature from the second memory to the first memory; and

a step for establishing in accordance with the transferred data a path for data communication between the avionics subsystem and at least one of the other subsystems; and

a step for performing an avionics program for communication via the path.

34. The method of claim 33 wherein the data comprises a header, the header comprising the second signature.

35. The method of claim 33 wherein at least one of the first signature and the second signature comprises a cyclic redundancy code.

36. The method of claim 33 wherein the step for determining further comprises a step for determining whether the first signature is inconsistent with the second signature on a basis of whether the first signature is identical to the second signature.

37. The method of claim 33 further comprising a step for receiving second data and for writing second data into the second memory.

38. The method of claim 37 wherein the step for receiving second data comprises a step for reading second data from a portable memory device.

39. A method for operating a subsystem of an avionics system, the system comprising a plurality of subsystems, the subsystem being packaged as a replaceable unit for installation via an interface of the subsystem, the subsystem comprising a processor and a first memory, the system comprising a second memory accessed by the subsystem via the interface, the method performed by a processor of the subsystem, the method comprising:

a step for determining a first calculated signature of a first content of the first memory;

a step for comparing the first calculated signature with a first stored signature stored in the first memory to conclude validity of the first content;

a step for determining a second calculated signature of a second content of the second memory;

a step for comparing the second calculated signature with a second stored signature stored in the second memory to conclude validity of the second content;

a step for updating the first content in accordance with the second content in response to determining that the first content is valid and the second content is valid and a difference exists among at least two of the first calculated signature, the second calculated signature, the first stored signature, and the second stored signature; and

a step for performing an avionics program in accordance with the updated first content.

40. The method of claim 39 wherein the step for comparing the first calculated signature comprises a step for recalling the first stored signature from a header of the first content.

41. The method of claim 39 wherein the step for comparing the second calculated signature comprises a step for recalling the second stored signature from a header of the second content.

42. The method of claim 39 wherein:

the second stored signature is a member of a set of stored signatures each associated with a respective component of the second content; and

the step for comparing the second calculated signature comprises a step for repeating comparing to conclude validity of the second content with reference to each signature of the set.

43. The method of claim 39 wherein:

the second stored signature is a member of a set of stored signatures each associated with a respective module of the second content; and

the step for comparing the second calculated signature comprises a step for repeating comparing to conclude validity of the second content with reference to each signature of the set.

44. The method of claim 39 wherein:

the second stored signature is a member of a set of stored signatures each associated with a respective image of the second content; and

the step for comparing the second calculated signature comprises a step for repeating comparing to conclude validity of the second content with reference to each signature of the set.

45. A method for operating a subsystem of an avionics system, the system comprising a plurality of subsystems, the subsystem being packaged as a replaceable unit for installation via an interface of the subsystem, the subsystem comprising a processor and a first memory, the system comprising a second memory accessed by the subsystem via the interface, the method performed by a processor of the subsystem, the method comprising:

a step for determining whether first content of the first memory is not complete, determining being with reference to a preferences store of the subsystem;

a step for transferring a portion of the second content from the second memory to the first memory, the portion of the second content being identified by a signature value; and

a step for repeating the step of transferring until a plurality of portions have been transferred, each portion being identified by a respective signature value.

46. The method of claim 45 wherein each signature value is stored in association with the respective portion of the second content.

47. The method of claim 45 wherein each signature value is stored in a header of the respective portion of the second content.

48. The method of claim 45 wherein a respective portion of the second content comprises at least one of a component, a module, and an image.

49. A system for operation in an aircraft, the system comprising:

a. a plurality of subsystems coupled to cooperate;

b. an environment memory comprising content of the environment memory and a plurality of first signatures, each first signature associated with at least one of a component, a module, an image, and an entirety of the content of the environment memory; and

c. a subsystem of the plurality comprising;

(1) a nonvolatile memory comprising content of the nonvolatile memory and a signature value of the content of the nonvolatile memory;

(2) an interface that facilitates removal and replacement of the subsystem; and

(3) a processor having access to the environment memory via the interface;

wherein the processor validates the content of the nonvolatile memory with reference to the signature value of the content of the nonvolatile memory, validates the content of the environment memory with reference to the plurality of first signatures, updates the content of the nonvolatile memory in accordance with the content of the environment memory, and performs an avionics program in accordance with the updated content of the nonvolatile memory.

50. The system of claim 49 wherein at least one first signature is stored in a header of the content of the environment memory.

51. The system of claim 49 wherein the processor accesses each first signature for at least one of:

a. identifying the associated component, module, image, or entirety; and

b. validating the associated component, module, image, or entirety.

52. The system of claim 49 wherein:

a. the nonvolatile memory comprises a plurality of second signatures, each second signature associated with at least one of a component, a module, an image, and an entirety of the content of the nonvolatile memory; and

b. the processor accesses each second signature for at least one of;

(1) identifying the associated component, module, image, or entirety; and

(2) validating the associated component, module, image, or entirety.

53. The system of claim 49 wherein the signature of the content of the nonvolatile memory is associated with an entirety of the content of the nonvolatile memory and each second signature is associated with a component of the content of the nonvolatile memory.

54. The system of claim 49 wherein the plurality of subsystems are installed on an aircraft and cooperate for alerting a crew member of the aircraft for collision avoidance.

55. The system of claim 49 wherein the avionics program provides an alert for at least one of traffic collision avoidance and terrain collision avoidance.

56. The system of claim 49 wherein the subsystem of the plurality comprises a transponder.

57. The system of claim 49 wherein the application program performs a global positioning system function.

58. The system of claim 49 wherein the subsystem of the plurality provides a weather radar function.

59. The system of claim 49 wherein the subsystem of the plurality comprises a display.

60. The system of claim 49 wherein the display provides a radar display.

61. The system of claim 49 wherein the subsystem comprises a reader of provided portable memory for updating the content of the environment memory.

62. The system of claim 49 wherein the processor updates the content of the nonvolatile memory in accordance with determining whether the nonvolatile memory is incomplete.

63. The system of claim 49 wherein the processor updates the content of the nonvolatile memory in accordance with determining that the content of the environment memory comprises at least one of a component, a module, and an image any of which is not currently stored in the nonvolatile memory.

64. The system of claim 49 wherein:

a. the subsystem further comprises a store having a preferred signature value corresponding to at least one of a preferred component, a preferred module, and a preferred image;

b. the content of the environment memory comprises the at least one of preferred component, preferred module, and preferred image; and

c. the processor updates the nonvolatile memory in response to determining with reference to the preferred signature that the at least one of preferred component, preferred module, and preferred image is not currently stored in the nonvolatile memory.

65. The system of claim 49 wherein the processor updates an entirety of the content of the nonvolatile memory in accordance with an entirety of the content of the environment memory.

66. The system of claim 49 wherein the processor updates an image of the content of the nonvolatile memory in accordance with an image of the content of the environment memory.

67. The system of claim 49 wherein the processor updates a module of the content of the nonvolatile memory in accordance with a module of the content of the environment memory.

68. The system of claim 49 wherein the processor updates a component of the content of the nonvolatile memory in accordance with a component of the content of the environment memory.

69. A method for operating an avionics subsystem after installing the subsystem at an interface between the subsystem and a plurality of other subsystems, the interface having a first side comprising the subsystem and a second side comprising the other subsystems, the subsystem having a first memory, the second side having a second memory, the method performed by the subsystem comprising:

determining whether a first signature of the first memory is inconsistent with a second signature of the second memory;

operating without updating when inconsistency does not exist;

updating in response to inconsistency, updating comprising a method including;

transferring data associated with the second signature from the second memory to the first memory; and

establishing in accordance with the transferred data a path for data communication between the avionics subsystem and at least one of the other subsystems; and

performing an avionics program for communication via the path.

70. The method of claim 69 wherein the data comprises a header, the header comprising the second signature.

71. The method of claim 69 wherein at least one of the first signature and the second signature comprises a cyclic redundancy code.

72. The method of claim 69 wherein determining further comprises determining whether the first signature is inconsistent with the second signature on a basis of whether the first signature is identical to the second signature.

73. The method of claim 69 further comprising receiving second data and writing second data into the second memory.

74. The method of claim 73 wherein receiving second data comprises reading second data from a portable memory device.

75. A method for operating a subsystem of an avionics system, the system comprising a plurality of subsystems, the subsystem being packaged as a replaceable unit for installation via an interface of the subsystem, the subsystem comprising a processor and a first memory, the system comprising a second memory accessed by the subsystem via the interface, the method performed by a processor of the subsystem, the method comprising:

determining a first calculated signature of a first content of the first memory;

comparing the first calculated signature with a first stored signature stored in the first memory to conclude validity of the first content;

determining a second calculated signature of a second content of the second memory;

comparing the second calculated signature with a second stored signature stored in the second memory to conclude validity of the second content;

updating the first content in accordance with the second content in response to determining that the first content is valid and the second content is valid and a difference exists among at least two of the first calculated signature, the second calculated signature, the first stored signature, and the second stored signature; and

performing an avionics program in accordance with the updated first content.

76. The method of claim 75 wherein comparing the first calculated signature comprises recalling the first stored signature from a header of the first content.

77. The method of claim 75 wherein comparing the second calculated signature comprises recalling the second stored signature from a header of the second content.

78. The method of claim 75 wherein:

the second stored signature is a member of a set of stored signatures each associated with a respective component of the second content; and

comparing the second calculated signature comprises repeating comparing to conclude validity of the second content with reference to each signature of the set.

79. The method of claim 75 wherein:

the second stored signature is a member of a set of stored signatures each associated with a respective module of the second content; and

comparing the second calculated signature comprises repeating comparing to conclude validity of the second content with reference to each signature of the set.

80. The method of claim 75 wherein:

the second stored signature is a member of a set of stored signatures each associated with a respective image of the second content; and

comparing the second calculated signature comprises repeating comparing to conclude validity of the second content with reference to each signature of the set.

81. A method for operating a subsystem of an avionics system, the system comprising a plurality of subsystems, the subsystem being packaged as a replaceable unit for installation via an interface of the subsystem, the subsystem comprising a processor and a first memory, the system comprising a second memory accessed by the subsystem via the interface, the method performed by a processor of the subsystem, the method comprising:

determining whether first content of the first memory is not complete, determining being with reference to a preferences store of the subsystem;

transferring a portion of the second content from the second memory to the first memory, the portion of the second content being identified by a signature value; and

repeating the step of transferring until a plurality of portions have been transferred, each portion being identified by a respective signature value.

82. The method of claim 81 wherein each signature value is stored in association with the respective portion of the second content.

83. The method of claim 81 wherein each signature value is stored in a header of the respective portion of the second content.

84. The method of claim 81 wherein a respective portion of the second content comprises at least one of a component, a module, and an image.

85. A subsystem for operation in a system in accordance with a provided memory, the subsystem comprising:

a. a nonvolatile memory comprising content of the nonvolatile memory and a signature value of the content of the nonvolatile memory;

b. an interface that facilitates removal and replacement of the subsystem, the interface providing access from the subsystem to the provided memory, the provided memory comprising content of the provided memory and a plurality of first signatures, each first signature associated with at least one of a component, a module, an image, and an entirety of the content of the provided memory; and

c. a processor having access to the provided memory via the interface;

wherein the processor validates the content of the nonvolatile memory with reference to the signature value of the content of the nonvolatile memory, validates the content of the provided memory with reference to the plurality of first signatures, updates the content of the nonvolatile memory in accordance with the content of the provided memory, and performs an avionics program in accordance with the updated content of the nonvolatile memory.

86. The system of claim 85 wherein at least one first signature is stored in a header of the content of the environment memory.

87. The system of claim 85 wherein the processor accesses each first signature for at least one of:

a. identifying the associated component, module, image, or entirety; and

b. validating the associated component, module, image, or entirety.

88. The system of claim 85 wherein:

a. the nonvolatile memory comprises a plurality of second signatures, each second signature associated with at least one of a component, a module, an image, and an entirety of the content of the nonvolatile memory; and

b. the processor accesses each second signature for at least one of;

(1) identifying the associated component, module, image, or entirety; and

(2) validating the associated component, module, image, or entirety.

89. The system of claim 85 wherein the signature of the content of the nonvolatile memory is associated with an entirety of the content of the nonvolatile memory and each second signature is associated with a component of the content of the nonvolatile memory.

90. The system of claim 85 wherein the plurality of subsystems are installed on an aircraft and cooperate for alerting a crew member of the aircraft for collision avoidance.

91. The system of claim 85 wherein the avionics program provides an alert for at least one of traffic collision avoidance and terrain collision avoidance.

92. The system of claim 85 wherein the subsystem of the plurality comprises a transponder.

93. The system of claim 85 wherein the application program performs a global positioning system function.

94. The system of claim 85 wherein the subsystem of the plurality provides a weather radar function.

95. The system of claim 85 wherein the subsystem of the plurality comprises a display.

96. The system of claim 85 wherein the display provides a radar display.

97. The system of claim 85 wherein the subsystem comprises a reader of provided portable memory for updating the content of the environment memory.

98. The system of claim 85 wherein the processor updates the content of the nonvolatile memory in accordance with determining whether the nonvolatile memory is incomplete.

99. The system of claim 85 wherein the processor updates the content of the nonvolatile memory in accordance with determining that the content of the environment memory comprises at least one of a component, a module, and an image any of which is not currently stored in the nonvolatile memory.

100. The system of claim 85 wherein:

a. the subsystem further comprises a store having a preferred signature value corresponding to at least one of a preferred component, a preferred module, and a preferred image;

b. the content of the environment memory comprises the at least one of preferred component, preferred module, and preferred image; and

c. the processor updates the nonvolatile memory in response to determining with reference to the preferred signature that the at least one of preferred component, preferred module, and preferred image is not currently stored in the nonvolatile memory.

101. The system of claim 85 wherein the processor updates an entirety of the content of the nonvolatile memory in accordance with an entirety of the content of the environment memory.

102. The system of claim 85 wherein the processor updates an image of the content of the nonvolatile memory in accordance with an image of the content of the environment memory.

103. The system of claim 85 wherein the processor updates a module of the content of the nonvolatile memory in accordance with a module of the content of the environment memory.

104. The system of claim 85 wherein the processor updates a component of the content of the nonvolatile memory in accordance with a component of the content of the environment memory.