Automatic control of an aircraft in the event of flight crew incapacity

• US 8,761,965 B2
• Filed: 11/04/2010
• Issued: 06/24/2014
• Est. Priority Date: 11/04/2010
• Status: Active Grant

• Current Assignee: The Boeing Co.
• Original Assignee: The Boeing Co.
• Inventors: Righi, Luigi P., Talbot, Mark A., Wellbrook, Gregory M.
• Primary Examiner(s): CAMBY, RICHARD M
• Application Number:
  US12/939,216
• Publication Number:
  US 20120116610A1
• Time in Patent Office: 1,328 Days
• Field of Search: 701 2- 11, 701/14, 701/16, 701/117, 701/300, 701/301, 701/23
• US Class Current: 701/3
• CPC Class Codes: B64D 45/0031 means for overriding or restricting access to flight controls
• CPC Class Codes: B64D 45/0034 by ground-control override
• CPC Class Codes: G05D 1/0061 for transition from automatic pilot to manual pilot and vice versa

Abstract

A method for automatic control of an aircraft in event of flight crew incapacity may include determining any incapacity of the flight crew. The method may also include providing a message requiring acknowledgement from the flight crew in response determining incapacity of the flight crew. The method may additionally include commanding an auto pilot to control the aircraft in response to not receiving acknowledgement from the flight crew.

Claims

1. A method for automatic control of an aircraft in event of flight crew incapacity, comprising:

determining any incapacity of the flight crew;

providing a message on a cockpit display requiring acknowledgement from the flight crew in response to determining incapacity of the flight crew, wherein requiring acknowledgement from the flight crew comprises receiving a security code that would only be known by an authorized flight crew member;

commanding an auto pilot to control the aircraft in response to not receiving the acknowledgement from the flight crew;

controlling the aircraft to a landing site by the auto pilot in response to the auto pilot being commanded to control the aircraft;

providing another message requiring acknowledgement from the flight crew when the aircraft reaches the landing site, wherein requiring acknowledgement from the flight crew comprises receiving the security code;

determining a safe area to avoid ground collateral damage and time of flight to the safe area before fuel exhaustion in response to not receiving the security code responsive to the other message; and

flying the aircraft to the safe area prior to fuel exhaustion in response to not receiving the security code responsive to the other message.

2. The method of claim 1, wherein determining any incapacity of the flight crew comprises determining the presence of an active flight crew by evaluating heuristic indicators in flight data corresponding to the aircraft being controlled by an actual person when the aircraft is under manual control.

3. The method of claim 1, further comprising:

monitoring flight control parameters to detect any non-heuristic control of the aircraft; and

monitoring cockpit environmental parameters to detect the loss of aircraft pressurization.

4. The method of claim 1, wherein determining any incapacity of the flight crew comprises at least one of:

detecting a roll and roll rate of the aircraft in excess of a predetermined roll and roll rate value;

detecting a pitch and pitch rate of the aircraft in excess of a predetermined pitch and pitch rate value;

detecting a yaw and yaw rate of the aircraft in excess of a predetermined yaw and yaw rate;

detecting an altitude different from an authorized or preset altitude;

detecting a heading different from an authorized or planned heading;

detecting a speed different from an authorized or predetermined speed;

detecting an aircraft configuration different from an expected configuration for a particular flight stage; and

detecting envelope data different from an expected envelope for the particular flight stage.

5. The method of claim 1, wherein providing a message requiring acknowledgement from the flight crew comprises providing the message in response to detecting loss of pressurization in the aircraft.

6. The method of claim 1, wherein commanding an auto pilot to control the aircraft in response to not receiving the acknowledgement from the flight crew comprises commanding the auto pilot to engage in level flight and to reduce altitude to a preset altitude.

7. The method of claim 6, wherein the preset altitude in is at or below about 10,000 feet.

8. The method of claim 1, further comprising:

detecting control of the aircraft by an unauthorized pilot;

requiring entry of the security code; and

commanding the auto pilot to control the aircraft in response to not receiving the security code or receiving an incorrect security code.

9. The method of claim 8, further comprising transmitting an automated message to a ground station in response to the auto pilot taking control of the aircraft.

10. The method of claim 1, further comprising transmitting an automated message to a ground station in response to the auto pilot taking control of the aircraft.

11. The method of claim 10, further comprising transmitting the automated message to one of an operations center and air traffic control to guide other aircraft clear of a potential flight path of the aircraft.

12. The method of claim 1, further comprising automatically engaging the aircraft in a holding pattern at a chosen altitude by the automatic pilot in response to reaching the landing site.

19. The method of claim 1, further comprising presenting a command override screen on the cockpit display to the flight crew in response to the auto pilot automatically taking control of the aircraft, wherein presenting the command override screen comprises presenting a list of possible reasons for the autopilot automatically taking control.

20. The method of claim 1, further comprising highlighting the reason in the list of possible reasons for the autopilot automatically taking control of the aircraft.

21. The method of claim 1, wherein presenting the command override screen comprises presenting another list, the other list comprising a list of actions associated with the reasons for the autopilot automatically taking control of the aircraft and a current status of each action.

13. An on-board system for automatic control of an aircraft in event of flight crew incapacity, the system comprising:

a processor;

a module operating on the processor for automatic control of the aircraft in event of flight crew incapacity, wherein the module is adapted to determine any incapacity of the flight crew and to provide a message on a cockpit display requiring acknowledgement from the flight crew in response to determining incapacity of the flight crew, wherein the acknowledgement from the flight crew comprises a security code that would only be known by an authorized flight crew member;

an auto pilot to control the aircraft in response to not receiving the acknowledgement from the flight crew, wherein the auto pilot controls the aircraft to a landing site in response to the auto pilot being commanded to control of the aircraft;

another module, operating on the processor, being configured to provide another message requiring acknowledgement from the flight crew when the aircraft reaches the landing site, wherein requiring acknowledgement from the flight crew comprises receiving the security code; and

a further module, operating on the processor, being configured to determine a safe area to avoid ground collateral damage and time of flight to the safe area before fuel exhaustion in response to not receiving the security code responsive to the other message; and

the auto pilot flying the aircraft to the safe area prior to fuel exhaustion in response to not receiving the security code responsive to the other message.

14. The on-board system of claim 13, further comprising:

the cockpit display being configured to provide the message requiring acknowledgement from the flight crew; and

an input device for entering the acknowledgement by the flight crew.

15. The on-board system of claim 13, further comprising:

a sensor to detect manual commands from the flight crew, wherein incapacity of the flight crew is determinable by the sensor not detecting any manual commands from the flight crew when the aircraft is being manually operated or the sensor detecting uncharacteristic control of the aircraft; and

a sensor to detect a depressurization of the aircraft.

16. A computer program product for automatic control of an aircraft in event of flight crew incapacity, the computer program product comprising:

a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising;

computer readable program code configured to determine any incapacity of the flight crew;

computer readable program code configured to provide a message on a cockpit display requiring acknowledgement from the flight crew in response to determining incapacity of the flight crew to control the aircraft, wherein the acknowledgement from the flight crew comprises a security code that would only be known by an authorized flight crew member;

computer readable program code configured to command an auto pilot to control the aircraft in response to not receiving the acknowledgement from the flight crew;

computer readable program code configured to control the aircraft to a landing site by the auto pilot in response to the auto pilot being commanded to control the aircraft;

computer readable program code configured to provide another message requiring acknowledgement from the flight crew when the aircraft reaches the landing site, wherein requiring acknowledgement from the flight crew comprises receiving the security code;

computer readable program code configured to determine a safe area to avoid ground collateral damage and time of flight to the safe area before fuel exhaustion in response to not receiving the security code responsive to the other message; and

computer readable program code configured to fly the aircraft to the safe area prior to fuel exhaustion in response to not receiving the security code responsive to the other message.

17. The computer program product of claim 16, wherein the computer readable program code configured to determine presence of an active flight crew comprises computer readable program code configured to evaluate heuristic indicators in flight data corresponding to the aircraft being controlled by an actual person when the aircraft is under manual control.

18. The computer readable program code of claim 16, wherein the computer readable program code configured to command the auto pilot comprises:

computer readable program code configured to command the auto pilot to control a descent of the aircraft to a nearest landing site or airport; and

computer readable program code configured to automatically engage the aircraft in a holding pattern at a chosen altitude in response to reaching the landing site or airport.