Avionics platform with differentiated resource activation for running software application(s), associated aircraft

Abstract

Avionics platform with differentiated activation of resources for the execution of software application(s), associated aircraft. This avionics platform (20) includes an electronic communication card with one or more external equipment to the platform; a group of electronic computing card(s) (25), each having resources (40) for the execution of software application(s); and a power supply card for the communication and computing cards (25); said cards being interconnected.The group of electronic computing cards (25) includes resources that are enabled by default, called primary resources (40P), and resources that are disabled by default, called secondary resources (40S). The secondary resources (40S) are distinct from the primary resources (40P). The software application(s) can only be executed on enabled resources (40). A predefined quantity of available resources (40) for executing the software application(s) corresponds to the primary resources (40P). In the event of unavailability of primary resources (40P), secondary resources (40S) are enabled to at least partially compensate for the unavailability of said primary resources (40P). See Figure 3 for abbreviations.

Description

Title of the invention: Avionics platform with differentiated activation of resources for the execution of software application(s), associated aircraft

[0001] The present invention relates to an avionics platform intended to be carried on board an aircraft, comprising an electronic communication card configured to communicate with one or more devices external to the platform; a group of electronic computing card(s), each comprising resources and being configured for the execution of software application(s); an electrical power supply card configured to convert electrical energy received from an electrical power supply network carried on board the aircraft into other electrical energy delivered to the electronic communication and computing cards; the electrical power supply and electronic communication and computing cards being interconnected.

[0002] The invention also relates to an aircraft comprising such an avionics platform.

[0003] Document FR 3 094 595 B1 describes an avionics platform of the aforementioned type forming a multimedia server for distributing, via entertainment terminals and to the passengers of the aircraft, multimedia content, for example films, television programs, games or music; or parameters of the flight and its progress; or even announcements from the crew.

[0004] The avionics platform comprises several cards of the same functional title among a network switch card forming an electronic switching card, a power supply card, a data storage card and a computing card. Having several cards of the same functional type makes it possible to improve the reliability and availability of the avionics platform, the cards of the same functional type being redundant with each other.

[0005] The reliability of such an avionics platform can however be further improved.

[0006] The aim of the invention is then to propose an avionics platform making it possible to offer even better reliability.

[0007] To this end, the invention relates to an avionics platform intended to be carried on board an aircraft, the avionics platform comprising:

[0008] - an electronic communication card configured to communicate with one or several external devices to the platform;

[0009] - a group of electronic computing card(s), each comprising resources and being configured for the execution of software application(s);

[0010] - a power supply board configured to convert electrical energy received from an on-board electrical power supply network on board the aircraft into other electrical energy delivered to the electronic communication and computing cards;

[0011] the electrical power supply and electronic communication and computing cards being interconnected;

[0012] the group of electronic computing card(s) comprising resources activated by default, called primary resources, and resources deactivated by default, called secondary resources, the secondary resources being distinct from the primary resources, the software application(s) being executable only on activated resources, a predefined available quantity of resources for the execution of software application(s) then corresponding to the primary resources; and

[0013] in the event of unavailability of primary resources, secondary resources are activated to at least partially compensate for the unavailability of said primary resources.

[0014] With the avionics platform according to the invention, only a portion of the resources of the group of electronic computing card(s) is activated by default, these resources activated by default being called primary resources, and other resources of said group of electronic computing card(s) are deactivated by default, and called secondary resources. The software applications are executable only on activated resources, and the primary resources are then provided to correspond to a predefined available quantity of resources necessary for the execution of the software applications. Furthermore, in the event of unavailability of primary resources, in particular during the operation of the avionics platform, i.e. during its implementation, secondary resources are activated to at least partially compensate for said unavailable primary resources.

[0015] Thus, the avionics platform according to the invention makes it possible to further improve reliability, by proposing a resource redundancy process, in addition to the redundancy between cards of the same functional type of the state of the art.

[0016] Advantageously, at least one electronic computing card, and preferably each electronic computing card, comprises both primary resources and secondary resources. This makes it possible to provide an intra-card resource redundancy process.

[0017] Advantageously, for each type of resource, at least one electronic computing card, and preferably each electronic computing card, comprises both primary resources and secondary resources. This makes it possible to offer a process of intra-card resource redundancy and for each type of resource.

[0018] According to other advantageous aspects of the invention, the avionics platform includes one or more of the following characteristics, taken individually or in all technically possible combinations:

[0019] - at least one electronic computing card comprises both resources primary and secondary resources;

[0020] each electronic computing card preferably comprising both primary resources and secondary resources;

[0021] - the group of electronic computing card(s) comprises resources of one or several types from the group consisting of: CPU resource, GPU resource, network communication resources, RAM resource and storage memory resource; and the group of computing electronic card(s) then comprises primary and secondary resources for each respective type;

[0022] the group of electronic computing card(s) preferably comprising resources of all types from the aforementioned group;

[0023] - at least one electronic calculation card comprises, for each type of resource, both primary and secondary resources;

[0024] each electronic calculation card preferably comprising, for each type of resource, both primary resources and secondary resources;

[0025] - the group of electronic calculation card(s) comprises N secondary resource(s) of each type to be resistant to N failure(s), N being an integer greater than or equal to 1;

[0026] - the activation, respectively the deactivation, of resources of the group of electronic computing card(s) is implemented in software via a software application(s) software service orchestrator;

[0027] - each electronic calculation card further comprises one or more com resource mutators; and the activation, respectively the deactivation, of resources of the group of electronic computing card(s) is implemented in hardware via the resource switches;

[0028] - the group of electronic calculation cards comprises several electronic cards computing, each including the same type(s) of resources;

[0029] the electronic cards of the group of electronic calculation cards preferably all being identical;

[0030] - each electronic calculation card comprises two half-cards, the two half- cards of a respective electronic computing card being separately activatable from one another, respectively separately deactivatable from one another; and

[0031] - the unavailability of primary resources is an unavailability due to dysfunction operation or unavailability for reduction of electricity consumption.

[0032] The invention also relates to an aircraft comprising an avionics platform as defined above.

[0033] These characteristics and advantages of the invention will appear more clearly on reading the description which follows, given solely by way of non-limiting example, and made with reference to the appended drawings, in which:

[0034] [Fig-1] [Fig.l] is a schematic view of an aircraft comprising a platform avionics comprising resources for the execution of software application(s) software services; an electronic box forming the avionics platform, the box comprising a backplane card and several electronic cards connected to the backplane card;

[0035] [Fig.2] [Fig.2] is a schematic representation of a hardware architecture and electronic card software of the box of [Fig.l]; and

[0036] [Fig.3] [Fig.3] is a schematic view of the avionics platform of [Fig.l], with representation of resources activated by default, called human resources, and other resources deactivated by default, called secondary resources, as well as a process of activating secondary resources to compensate for the unavailability of certain primary resources.

[0037] In the description, as well as in the claims, the terms " / s" or " / x" following the name of an object mean that this designates one or more objects of this name, and these terms are identical to the terms " / s" or "(x)", and may be replaced by them if necessary, without this changing the content of the invention. For example, the expression "software application / s" then means "of one or more software applications", the expression "resistance to failure / s" means "resistance to one or more failures", and the expression "to the service / s" means "to the service or services".

[0038] In [Fig.l], an aircraft 10 comprises an avionics platform 20, generally forming an on-board data server (from the English on-board data center), in order to offer different types of services on board the aircraft 10.

[0039] The avionics platform 20 is for example configured to offer cockpit services for a crew of the aircraft 10 and / or maintenance services for the ground and / or entertainment services for passengers on board the aircraft 10.

[0040] The avionics platform 20 forms, for example, a multimedia server configured to broadcast, via entertainment terminals not shown, multimedia content to the passengers of the aircraft 10, in particular during the flight (for example films, TV shows, games or music), and / or information on the progress of the flight (altitude, speed, current position, progress, etc.). As an optional addition, the multimedia server, formed by the avionics platform 20, is configured to broadcast practical information concerning for example the arrival airport, for example via announcements in sound and / or video form.

[0041] Each entertainment terminal is known in itself, and is connected to the server multimedia via a local network, not shown, on board the respective aircraft 10.

[0042] Each entertainment terminal is for example fixed or integrated into the passenger seat itself, or is fixed or integrated into the back of the seat located in front of the passenger seat. The seats are typically arranged in rows within the aircraft 10.

[0043] The avionics platform 20 comprises at least one electronic communication card 22, a group of electronic computing card(s) 25, at least one power supply card 28, the power supply cards 28 and electronic communication cards 22 and computing cards 25 being interconnected with each other, for example via a backplane card 30, as shown in [Fig.l]. The avionics platform 20 is for example produced in the form of an electronic box 32 comprising the backplane card 30, one or more electronic communication cards 22, one or more electronic computing cards 25 and one or more power supply cards 28. Each electronic communication card 22, each electronic computing card 25, respectively each power supply card 28, is connected to the backplane card 30 via a respective backplane connector 34, as shown in [Fig.l].The electronic box 32 further comprises a protective casing 36 inside which are housed the backplane card 30 and the plurality of electronic communication cards 22 and calculation cards 25 and power supply card(s) 28; as well as external connectors 38 arranged on the periphery of the box 36. The external connectors 38 are in particular intended to allow the connection of the avionics platform 20 to the local network, as well as to a power supply network, not shown and on board the aircraft 10.

[0044] Advantageously, the avionics platform 20 comprises several cards 22, 25, 28 of the same type, namely several electronic communication cards 22, several electronic calculation cards 25 and several electrical power supply cards 28.

[0045] Those skilled in the art will then understand that having several cards 22, 25, 28 of the same type makes it possible to improve the reliability and availability of the platform 20, the cards of the same type being redundant with each other. Furthermore, having a high number of cards 22, 25, 28, in particular electronic calculation cards 25, makes it possible to reduce the “granularity” of each card 22, 25, 28 within the electronic box 32, and thus to reduce the cost and the need in terms of resources 40 to achieve satisfactory redundancy of the cards 22, 25, 28.

[0046] In the example of [Fig.l], the avionics platform 20 comprises two electronic communication cards 22, six electronic calculation cards 25 and a power supply card 28. Alternatively, the avionics platform 20 comprises two electronic communication cards 22, six electronic calculation cards 25 and two power supply cards 28, in order to have redundancy for each type of card.

[0047] Each electronic communication card 22 is configured to communicate with one or more devices, not shown, external to the platform 20. Each electronic communication card 22 is also called an input-output card, and also noted I / O (from the English Input / Output) in [Fig. 1].

[0048] Each electronic computing card 25, also denoted C in [Fig. 1], comprises resources 40 and is configured for the execution of software application(s). The resources 40, also called hardware resources, are physical or logical elements suitable for being made available to the software application(s).

[0049] The resources 40 are, for example, divided into the following categories visible in [Fig.2]:

[0050] - 40A resources of the CPU type (from the English Central Processing Unit);

[0051] - 40B resources of GPU type (from the English Graphics Processing Unit);

[0052] - 40C resources of network communication type, such as resource of type Ethernet, noted ETH in [Fig.2], to communicate with the on-board local network on the one hand, and with a communication network external to the aircraft 10 on the other hand,

[0053] - 40D resources of the random access memory type, i.e. of the RAM type (from the English Random Access Memory); and

[0054] - 40E resources of storage memory type, i.e. of storage memory type mass (from the English mass memory), such as SSD (from the English Solid State Drive) resources.

[0055] Those skilled in the art will understand that the CPU 40A type and GPU 40B type resources are computational resources, i.e. capable of performing computation operations, the GPU 40B type resources being more dedicated to graphical computation and those of the CPU 40A type to general computation.The person skilled in the art will also understand that these resources of the CPU 40A type and of the GPU 40B type, as well as the other resources of the network communication 40C type, of the RAM 40D type and of the storage memory 40E type, are produced in the form of at least one electronic component that can be integrated on a printed circuit board, and for example in the form of an integrated circuit, such as an ASIC (Application Specific Integrated Circuit), or in the form of a programmable logic component, such as an FPGA (Field Programmable Gate Array), or in the form of a microcontroller, or even in the form of a specific processor, such as a processor specialized in signal processing or DSP (Digital Signal Processor). The type of electronic component to be used preferably to produce each type of resource among the aforementioned types of resources is known to the person skilled in the art, and. is then not described in more detail.

[0056] Advantageously, the group of electronic computing card(s) 25 comprises resources 40 of all types from the aforementioned group. In the example of [Fig. 3], each electronic computing card 25 comprises resources 40 of all types from the aforementioned group. In other words, in this example, each electronic computing card 25 comprises both CPU-type resources 40A, GPU-type resources 40B, network communication-type resources 40C, RAM-type resources 40D and storage memory-type resources 40E.

[0057] The group of electronic calculation card(s) 25 comprises several electronic calculation cards 25, each including the same type(s) of resource(s) 40.

[0058] Advantageously, the electronic cards of the group of electronic computing cards 25 are all identical, that is to say they all include the same resources 40A, 40B, 40C, 40D and 40E, as in the example of [Fig. 3]. In this example of [Fig. 3], each electronic computing card 25 comprises in particular two resources 40A of the CPU type, one resource 40B of the GPU type, two resources 40C of the network communication type, four resources 40D of the RAM type, and two resources 40E of the storage memory type.

[0059] In [Fig.2], each electronic computing card 25 comprises a hardware layer 42 (from the English hardware), a low-level software layer 44 (from the English low-level software), a middle-level software layer 46 (from the English middleware) and a high-level software layer 48 (from the English high-level software), these four layers 42, 44, 46 and 48 being superimposed.

[0060] When advantageously all the electronic calculation cards 25 are materially analogous, or even materially identical, they then all have the same material layer 42.

[0061] Advantageously, all the electronic calculation cards 25 have the same software layers, that is to say respectively the same low-level layer 44, the same middle-level layer 46 and the same high-level layer 48. In other words, the low-level layer 44 is unique for the group of electronic calculation cards 25, while being stored separately on each of the electronic calculation cards 25. Similarly, the middle-level layer 46 is unique for the group of electronic calculation cards 25, while being stored separately on each of the electronic calculation cards 25. The high-level layer 48 is also unique for the group of electronic calculation cards 25, while being stored separately on each of the electronic calculation cards 25.

[0062] Advantageously, these low-level 44, mid-level 46 and high-level 48 layers are further assembled into a single software cluster aggregating all of these software resources.

[0063] Each power supply card 28, also denoted P in [Fig. 1], is configured to convert electrical energy received, via one or more respective external connectors 38, from the onboard electrical power supply network on board the aircraft 10 into another electrical energy delivered to the electronic communication cards 22 and computing cards 25. The electrical energy delivered to the electronic cards 22, 25 is typically direct electrical energy or DC energy (from the English Direct Currenf), and each power supply card 28 then comprises an alternating-direct converter, or AC-DC converter (AC from the English Alternative Current), when the electrical energy received from the onboard electrical power supply network is alternating electrical energy, or a direct-direct converter, or DC-DC converter, when said received electrical energy is direct energy.

[0064] The hardware layer 42 of each electronic computing card 25 comprises the resources 40, and typically the resources 40A of the CPU type, the resources 40B of the GPU type, the resources 40C of the network communication type, the resources 40D of the RAM type, and the resources 40E of the storage memory type.

[0065] The low-level software layer 44 comprises a unit 50 for loading a bootloader program, and a unit 52 for providing low-level services comprising, for example, a kernel, such as a Linux kernel, and one or more software drivers.

[0066] The mid-level software layer 46 comprises an orchestrator 60, a computer container manager 62, a file manager 64 and a set 66 of configuration files, the orchestrator 60, also called an orchestration device or management device, being able to control one or more software services 70, also called unitary software services, i.e. to manage the execution of such software services 70. The computer container manager 62 of each electronic computing card 25 is in particular configured to obtain a list of the computer containers, i.e. software resources, present on the respective electronic computing card 25, so that the orchestrator 60 can then control their execution.Furthermore, the computer container manager 62 of one of the electronic computing cards 25 is designated as master manager among the managers 62 of the different electronic computing cards 25, each manager 62 of the other electronic computing card(s) 25 then being a slave. The master computer container manager 62 is then further configured to obtain, via each slave manager 62, a list of the computer containers of each other computing card 25, then to generate a list of the computer containers of all the electronic computing cards 25, that is to say a list of all the software resources forming the software cluster described previously.

[0067] The high-level software layer 48 comprises said software services 70.

[0068] When the avionics platform 20 forms a cockpit services server, the software services 70 correspond for example to a non-avionics system service of the electronic flight bag or EFB type, remotely accessible by a pilot through a simple web browser, or to a service aggregating meteorological data to propose alternative trajectories that generate less condensation trails.

[0069] When the avionics platform 20 forms a maintenance services server, the software services 70 correspond for example to an on-board predictive maintenance service, or to “health monitoring” services making it possible to detect critical thresholds in the operation of the avionics systems.

[0070] When the avionics platform 20 forms an entertainment services server, i.e. the multimedia server, the software services 70 correspond, for example, to the services offered to the passengers of the aircraft 10: video on demand or VOD (from the English Video On Demand), audio on demand or AOD (from the English Audio On Demand), games, flight parameters (altitude, speed, etc.) and its progress (for example using a “moving map”), audio and / or video announcements from the crew, etc.

[0071] According to the invention, the group of electronic computing card(s) 25 comprises resources 40 activated by default, called primary resources 40P, and resources 40 deactivated by default, called secondary resources 40S, the secondary resources 40S being distinct from the primary resources 40P, as shown in [Fig. 3]. In [Fig. 3], the primary resources 40P are shown with a different type of line from that used for the secondary resources 40S, to illustrate the fact that the secondary resources 40S are distinct and separate from the primary resources 40P. In the example of [Fig. 3], the primary resources 40P, activated by default, are shown in bold, i.e. thick, lines; and the secondary resources 40S, deactivated by default, are shown in thin lines, for example dotted lines.

[0072] By "by default" in the expressions "resources activated by default", and respectively "resources deactivated by default", is meant before a new implementation of the avionics platform 20, for example on leaving the factory following the manufacture of the avionics platform 20, or after a software reconfiguration of the avionics platform 20, i.e. after a change in the software configuration of the avionics platform 20, i.e. after loading new software application(s) onto the avionics platform 20. A minimum set of resources, comprising a CPU 40A and a RAM slot 40D, is part of the resources activated by default to be able to act on a reconfiguration of the avionics platform 20, in particular in order to be able to execute the information container manager. matics 62. In other words, the primary resources 40P of each electronic computing card 25 typically comprises at least one CPU type resource 40A and at least one RAM type resource 40D.

[0073] The software application(s) are executable only on activated resources 40, and a predefined available quantity of resources 40 for the execution of software application(s) then corresponds to the primary resources 40P.

[0074] In the event of unavailability of primary resources 40P, secondary resources 40S are then activated to compensate at least partially, and preferably fully, i.e. totally, for the unavailability of said primary resources 40P.

[0075] In the example of [Fig. 3], an electronic computing card 25 (namely the fourth computing card 25 from the left) is completely faulty, i.e. out of service, and represented in the form crossed out by a cross. All the resources 40 of this computing card 25 are then unavailable, in particular its primary resources 40P activated by default.

[0076] In this example of [Fig. 3], secondary resources 40S of other electronic computing cards 25 are then activated to compensate for this unavailability of the primary resources 40P of the faulty computing card 25, as represented on the one hand by the arrow RI to illustrate the activation of the secondary resources 40S of the GPU memory type on the third electronic computing card 25 starting from the left compensating for the unavailability of the primary resources 40P of the GPU type of the faulty card, and on the other hand by the arrow R2 to illustrate the activation of the secondary resources 40S of the CPU and RAM type on the fifth computing card 25 starting from the left compensating for the unavailability of the primary resources 40P of the CPU and RAM type of the faulty card. In this example of [Fig.3], the activation of the secondary resources according to the arrows RI and R2 then fully compensates for the unavailability of the primary resources 40P of the faulty computing card 25, namely of the fourth computing card 25 from the left. Those skilled in the art will understand that the secondary resources 40S selected and then activated, such as those pointed to by the arrows RI and R2 in the example of [Fig. 3], then become, after activation, primary resources 40P.

[0077] In other words, generally speaking, the activation of secondary resources 40S to compensate for an unavailability of primary resources 40P transforms said activated secondary resources 40S into primary resources 40P, these resources deactivated by default becoming activated.

[0078] The unavailability of primary resources 40P is typically an unavailability due to a malfunction of these primary resources 40P. Alternatively, the unavailability of primary resources 40P is an unavailability due to a reduction in electrical consumption, this reduction being voluntary (in order to reduce then the electrical consumption of the avionics platform 20 overall) or involuntary (for example following a partial malfunction of the electrical power supply board 28, or even a drop in voltage on the on-board electrical power supply network).

[0079] As an optional addition, at least one electronic computing card 25 comprises both primary resources 40P and secondary resources 40S.

[0080] In the example of [Fig.3], all the electronic computing cards 25, with the exception of the third electronic computing card 25 from the left, comprise both primary resources 40P and secondary resources 40S.

[0081] Advantageously, each of the electronic calculation cards 25 comprises both primary resources 40P and secondary resources 40S.

[0082] As an optional addition, at least one electronic calculation card 25 comprises, for several types of resource 40, both primary resources 40P and secondary resources 40S.

[0083] In the example of [Fig. 3], all the electronic computing cards 25, with the exception of the third electronic computing card 25 from the left, comprise, for several types of resource 40, both primary resources 40P and secondary resources 40S. The types of resources for which each of these five electronic cards of [Fig. 3] comprises both primary resources 40P and secondary resources 40S are the CPU type (resources 40A) and the RAM type (resources 40D).

[0084] Advantageously, each electronic calculation card 25 comprises, for several types of resource 40, both primary resources 40P and secondary resources 40S.

[0085] As an optional addition, at least one electronic calculation card 25 comprises, for each type of resource 40, both primary resources 40P and secondary resources 40S.

[0086] Advantageously, each electronic calculation card 25 comprises, for each type of resource 40, both primary resources 40P and secondary resources 40S.

[0087] As an optional addition, the group of electronic computing card(s) 25 comprises N secondary resource(s) 40S of each type to be resistant to N failure(s), N being an integer greater than or equal to 1. According to this addition, the value N of the number of failure(s) is the sum of the number of faulty resource(s) of each type, with in addition a dependency relationship with respect to the CPU 40A type resources. The dependency relationship is that if all the CPU 40A type resources of a respective electronic computing card 25 are faulty, then said electronic computing card 25 is considered to be globally faulty, and all the other resources of the GPU type 40B, of the network communication type 40C, of ​​the RAM type 40D, and of the storage memory type 40E of this card 25 are therefore counted as faulty.

[0088] The activation, respectively the deactivation, of resources 40 of the group of electronic computing card(s) 25 is for example carried out in software manner, typically via the orchestrator 60 of software services 70 of software application(s).

[0089] As a variant, not shown, each electronic computing card 25 further comprises one or more resource switches, not shown. According to this variant, the activation, respectively the deactivation, of resources 40 of the group of electronic computing card(s) 25 is then carried out in hardware, in particular via said resource switches and an electronic orchestration device, not shown.

[0090] For the activation, respectively the deactivation, of resources 40 of the group of electronic computing card(s) 25, the orchestrator 60 or the electronic orchestration device is configured to access a list of current primary resources 40P and secondary resources 40S, in order to know which secondary resources 40S are available following the detection of unavailability of certain primary resources 40P. then to select secondary resources 40S to be activated from among those available, in particular according to the type of primary resources 40P detected as unavailable, and finally to update the list of primary resources 40P and secondary resources 40S by removing the primary resources 40P detected as unavailable and modifying the secondary resources 40S selected then activated into primary resources 40P.The list of current 40P primary resources and 40S secondary resources is, for example, in the form of a computer file, stored in mass memory.

[0091] In the example of [Fig.2], the orchestrator 60 of each electronic computing card 25 is for example configured to manage the list of primary resources 40P and secondary resources 40S of the respective electronic computing card 25 on which it is hosted. Furthermore, the orchestrator 60 of one of the electronic computing cards 25 is designated as master orchestrator among the orchestrators 60 of the different electronic computing cards 25, each orchestrator 60 of the other electronic computing card(s) 25 then being slave.The master orchestrator 60 is then further configured to obtain, via each slave orchestrator 60, a list of the primary resources 40P and the secondary resources 40S of each other computing card 25, then to manage a global list of the primary resources 40P and the secondary resources 40S of all the electronic computing cards 25, with in addition a distribution by card 25 of said primary resources 40P and secondary resources 40S. Furthermore, if the master orchestrator 60 is hosted on an electronic computing card 25. which becomes unavailable, such as the faulty computing card 25 in the example of [Fig.3], namely the fourth card from the left in this figure, then a new orchestrator 60 is elected as master orchestrator among the slave orchestrators 60, in order to continue managing the execution of the software applications, as well as managing the global list of primary resources 40P and secondary resources 40S of all the available computing electronic cards 25, i.e. which are not faulty.

[0092] Alternatively, the management of the execution of the software applications, as well as the management of the global list of primary resources 40P and secondary resources 40S of the electronic calculation cards 25, is carried out by an electronic orchestration device which is external to the electronic calculation cards 25.

[0093] In addition, if the unavailability of the primary resources 40P is temporary and if the primary resources 40P removed from the list of primary resources 40P and secondary resources 40S subsequently become available again, then the orchestrator 60 or the electronic orchestration device is further configured to, following this new availability of the primary resources 40P previously removed, modify the list of primary resources 40P and secondary resources 40S by including these primary resources 40P previously removed as new secondary resources 40S.

[0094] As an optional addition, not shown, each electronic computing card 25 comprises two half-cards, the two half-cards of a respective electronic computing card 25 being separately activatable from one another, respectively separately deactivatable from one another. The two half-cards of an electronic computing card 25 are functionally isolated from one another, with separate conductive tracks, resulting from distinct routings, while being arranged on the same substrate, i.e. the same mechanical support, and then being mechanically linked to one another. Advantageously, the resources are of the same type from one half-card to the other, and preferably identical from one half-card to the other, for the two half-cards of the same electronic computing card 25.

[0095] Thus, having secondary resources 40S deactivated by default makes it possible to have a redundancy of resources, in addition to a simple redundancy of electronic calculation cards 25, and these secondary resources 40S then form a reserve of resources 40 to compensate at least partially for an unavailability, due to malfunction or energy reduction, of certain primary resources 40P activated by default, and then provided by default to execute the software application(s). This compensation in whole or in part for the unavailability of primary resources via the activation of secondary resources then makes it possible to continue in whole or in part the execution of the software application(s). This redundancy of resources 40 then makes it possible to improve the reliability of the avionics platform 20.

[0096] Advantageously, when at least one electronic computing card, and preferably each electronic computing card, comprises both primary resources and secondary resources, and this preferably for each type of resource, this also offers intra-card resource redundancy, and preferably for each type of resource.

[0097] It is then understood that the avionics platform 20 according to the invention offers even more reliable operation than the platform of the state of the art.

Claims

Claims

1. Avionics platform (20) intended to be carried on board an aircraft (10), the avionics platform (20) comprising: - an electronic communication card (22) configured to communicate with one or more devices external to the platform (20); - a group of electronic computing card(s) (25), each comprising resources (40) and being configured for the execution of software application(s); - a power supply card (28) configured to convert electrical energy received from an electrical power supply network carried on board the aircraft (10) into other electrical energy delivered to the electronic communication (22) and computing (25) cards; the power supply (28) and electronic communication (22) and computing (25) cards being interconnected;characterized in that the group of electronic computing card(s) (25) comprises resources (40) activated by default, called primary resources (40P), and resources (40) deactivated by default, called secondary resources (40S), the secondary resources (40S) being distinct from the primary resources (40P), the software application(s) being executable only on activated resources (40), a predefined available quantity of resources (40) for the execution of software application(s) then corresponding to the primary resources (40P); and in the event of unavailability of primary resources (40P), secondary resources (40S) are activated to at least partially compensate for the unavailability of said primary resources (40P).;

2. Avionics platform (20) according to claim 1, in which at least one electronic computing card (25) comprises both primary resources (40P) and secondary resources (40S); each electronic computing card (25) preferably comprising both primary resources (40P) and secondary resources (40S).

3. Avionics platform (20) according to claim 1 or 2, wherein the group of electronic computing card(s) (25) comprises resources (40) of one or more types from the group consisting of: CPU resource (40A), GPU resource (40B), network communication resources (40C), RAM resource (40D) and storage memory resource (40E); and the group of electronic computing card(s) (25) then comprises primary (40P) and secondary resources for each respective type; the group of electronic computing card(s) (25) preferably comprising resources (40) of all types among the aforementioned group.

4. Avionics platform (20) according to claims 2 and 3, in which at least one electronic computing card (25) comprises, for each type of resource (40), both primary resources (40P) and secondary resources (40S); each electronic computing card (25) preferably comprising, for each type of resource (40), both primary resources (40P) and secondary resources (40S).

5. Avionics platform (20) according to any one of the preceding claims, in which the group of electronic computing card(s) (25) comprises N secondary resource(s) (40S) of each type to be resistant to N failure(s), N being an integer greater than or equal to 1.

6. Avionics platform (20) according to any one of claims 1 to 5, in which the activation, respectively the deactivation, of resources (40) of the group of electronic computing card(s) (25) is implemented in software via an orchestrator (60) of software services (70) of software application(s).

7. Avionics platform (20) according to any one of claims 1 to 5, wherein each electronic computing card (25) further comprises one or more resource switches; and the activation, respectively the deactivation, of resources (40) of the group of electronic computing card(s) (25) is implemented in hardware via the resource switches.

8. Avionics platform (20) according to any one of the preceding claims, in which the group of electronic computing card(s) (25) comprises several electronic computing cards (25), each including the same type(s) of resources (40); the electronic cards of the group of electronic computing cards (25) preferably all being identical.

9. Avionics platform (20) according to any one of the preceding claims, in which each electronic computing card (25) comprises two half-cards, the two half-cards of a respective electronic computing card (25) being separately activatable, one of

10. the other, respectively deactivatable separately from each other. Avionics platform (20) according to any one of the preceding claims, in which the unavailability of primary resources (40P) is an unavailability due to malfunction or an unavailability due to reduction of electrical consumption.

11. Aircraft (10) characterized in that it comprises an avionics platform (20) according to any one of the preceding claims.