Controlled range and payload for unmanned vehicles, and associated systems and methods

• US 9,266,610 B2
• Filed: 05/15/2014
• Issued: 02/23/2016
• Est. Priority Date: 11/15/2011
• Status: Active Grant

• Current Assignee: Insitu Incorporated (The Boeing Co.)
• Original Assignee: Insitu Incorporated (The Boeing Co.)
• Inventors: Knapp, Jeffrey H., Tasker, David, Viviani, Gary Lee
• Primary Examiner(s): ARTHUR JEANGLAUD, GERTRUDE
• Application Number:
  US14/278,242
• Publication Number:
  US 20140379173A1
• Time in Patent Office: 649 Days
• Field of Search: 701/2, 701/3, 701/13, 701/14, 701/15, 701/33.4, 340/439, 244/75.R, 244/158.1, 294/28
• US Class Current: 1/1
• CPC Class Codes: B64C 19/00 Aircraft control not otherwise provided for
• CPC Class Codes: B64C 39/024 of the remote controlled vehicle type, i.e. RPV
• CPC Class Codes: B64U 2201/10 autonomous, i.e. by navigating independently from ground or air stations, e.g. by using inertial navigation systems [INS]
• CPC Class Codes: B64U 2201/20 Remote controls
• CPC Class Codes: B64U 70/83 using parachutes, balloons or the like
• CPC Class Codes: G05D 1/0055 with safety arrangements
• CPC Class Codes: G05D 1/106 Change initiated in response to external conditions, e.g. avoidance of elevated terrain or of no-fly zones
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 50/18 Legal services
• CPC Class Codes: G06Q 50/26 Government or public services business processes related to the transportation industry G06Q50/40
• CPC Class Codes: Y10T 29/49826 Assembling or joining

Abstract

The presently disclosed technology is directed generally to unmanned vehicle systems and methods configured to satisfy a first set of export control regulations, such as those within the jurisdiction of one government entity or international body (e.g., the U.S. Department of Commerce) without falling within the purview of a second set of export control regulations, such as export control regulations within the jurisdiction of another government entity or international body (e.g., the U.S. Department of State). Through limited range of operation, limited payload types, limited capabilities, and tamper-proof or tamper-resistant features, embodiments of the unmanned vehicle system are designed to fall within the purview and under control of one agency and not within the purview and under control of another agency.

Claims

1. A method, performed by a computing system of an unmanned aerial vehicle, for ensuring that the unmanned aerial vehicle complies with specified export control requirements throughout the operation of the unmanned aerial vehicle, the method comprising:

storing an indication of an initial specification of the unmanned aerial vehicle, the initial specification of the unmanned aerial vehicle specifying initial configuration information and an identification for each of a plurality of tamper-resistant trusted components of the unmanned aerial vehicle, wherein the initial configuration of the unmanned aerial vehicle is in compliance with the specified export control requirements and wherein at least one of the trusted components is configured to ensure that the range of the unmanned aerial vehicle does not exceed a predetermined distance;

receiving a request to operate the unmanned aerial vehicle;

in response to receiving the request to operate the unmanned aerial vehicle, for each of the plurality of trusted components of the unmanned aerial vehicle,

querying the trusted component of the unmanned aerial vehicle for current configuration information, wherein communication with the trusted component of the unmanned aerial vehicle is encrypted,

receiving an indication that the trusted component of the unmanned aerial vehicle is not present within the unmanned aerial vehicle or that the configuration of the trusted component of the unmanned aerial vehicle has been modified since the initial specification was stored, and

in response to receiving the indication that the trusted component of the unmanned aerial vehicle is not present within the unmanned aerial vehicle or that the configuration of the trusted component of the unmanned aerial vehicle has been modified since the initial specification was stored, modifying the operation of the unmanned aerial vehicle;

receiving an indication that the unmanned aerial vehicle is at least a predetermined distance from a launch location or that communication between the unmanned aerial vehicle and a control station has been lost; and

in response to receiving the indication that the unmanned aerial vehicle is at least the predetermined distance from the launch location or that communication between the unmanned aerial vehicle and the control station has been lost, modifying a path of the unmanned aerial vehicle.

2. The method of claim 1 wherein at least one of the trusted components of the unmanned aerial vehicle is configured to ensure that a payload of the unmanned aerial vehicle cannot operate when the payload exceeds a predetermined weight.

3. The method of claim 1, further comprising:

receiving an indication that a speed of the unmanned aerial vehicle is in excess of a predetermined speed threshold; and

in response to receiving the indication that the speed of the unmanned aerial vehicle is in excess of the predetermined speed threshold, disabling a navigation system of the unmanned aerial vehicle.

4. The method of claim 1 wherein at least one of the trusted components of the unmanned aerial vehicle is configured to ensure that an altitude of the unmanned aerial vehicle exceeds a predetermined altitude threshold while the unmanned aerial vehicle is not taking off and not landing.

5. The method of claim 1 wherein modifying the operation of the unmanned aerial vehicle comprises disabling a launch of the unmanned aerial vehicle.

6. The method of claim 1 wherein modifying the operation of the unmanned aerial vehicle comprises executing a spin-stall maneuver.

7. The method of claim 1 wherein modifying the operation of the unmanned aerial vehicle comprises disabling a navigation system of the unmanned aerial vehicle.

8. An unmanned vehicle comprising:

a memory configured to store initial configuration information for each of a plurality of tamper-proof trusted components of the unmanned aerial vehicle having an initial configuration that is in compliance with specified export control requirements; and

a system verification component configured to, for each of the trusted components,

query the trusted component for current configuration information,

receive the current configuration information,

receive an indication that the current configuration information is different from the initial configuration information, and

disable the unmanned aerial vehicle in response to receiving an indication that the current configuration information is different from the initial configuration information.

9. The unmanned vehicle of claim 8 wherein at least one of the trusted components is configured to ensure that a range of the vehicle does not exceed a predetermined distance.

10. A computer-readable storage medium storing instructions that, if executed by a computing system, cause the computing system to perform operations comprising:

storing an indication of an initial specification of a vehicle that, at the time of an initial configuration, is in compliance with specified control requirements;

receiving a request to operate the vehicle; and

in response to receiving the request to operate the vehicle, for each of a plurality of trusted components of the vehicle,

querying the trusted component of the vehicle for current configuration information, wherein communication with the trusted component of the vehicle is encrypted,

receiving an indication that the trusted component of the vehicle is not present within the vehicle or that the configuration of the trusted component of the vehicle has been modified since the initial specification was stored, and

in response to receiving the indication that the trusted component of the vehicle is not present within the vehicle or that the configuration of the trusted component of the vehicle has been modified since the initial specification was stored, denying the request to operate the vehicle.

11. The computer-readable storage medium of claim 10 wherein at least one of the trusted components is configured to ensure that a range of the vehicle does not exceed a predetermined distance.

12. The computer-readable storage medium of claim 10, herein the operations further comprise:

in response to receiving the request to operate the vehicle, for each of the plurality of the trusted components of the vehicle,

receiving a command from a control station,

in response to receiving the command from the control station,

determining that the control station is not a trusted control station, and

ignoring the received command in response to determining that the control station is not a trusted control station, and

receiving an indication that the vehicle is at least a predetermined distance from a launch location, and

in response to receiving the indication that the vehicle is at least the predetermined distance from the launch location, modifying a path of the vehicle.

13. The computer-readable storage medium of claim 10, wherein the operations further comprise:

receiving a plurality of points, each point having an associated latitude and longitude;

identifying an area defined by the received plurality of points; and

preventing the vehicle from traveling outside of the area defined by the received plurality of points.

14. The computer-readable storage medium of claim 13, wherein the operations further comprise:

receiving an indication that the vehicle is within a predetermined distance from an edge of the area defined by the received plurality of points; and

in response to receiving the indication that the vehicle is within the predetermined distance from the edge of the area defined by the received plurality of points, broadcasting an emergency code.

15. The computer-readable storage medium of claim 14, wherein at least a first trusted component of the plurality of trusted components of the vehicle is a software module and wherein at least a second trusted component of the plurality of trusted components of the vehicle is a hardware module.

16. A method, performed by a computing system, for ensuring that an unmanned aerial vehicle complies with specified export control requirements throughout the operation of the unmanned aerial vehicle, the method comprising:

for each of a plurality of the export control requirements,

determining a threshold value associated with the export control requirement, and

installing a component on the unmanned aerial vehicle configured to ensure that the unmanned aerial vehicle cannot be operated when an attribute of the unmanned aerial vehicle violates the threshold value associated with the export control requirement.

17. The method of claim 16 wherein a first export control requirement has an associated threshold range value and wherein installing a component for the first export control requirement comprises installing a component configured to ensure that the unmanned aerial vehicle cannot be operated when the distance of the unmanned aerial vehicle from a launch point exceeds the threshold range value.