An integrated avionic system architecture

Abstract

The present invention relates to multiple electronic boards (2) which perform avionic functions that provide flight management and control in air and / or space vehicles, multiple processor units (3) on each electronic board (2), which process graphical and arithmetical data obtained by providing data input from the physical environment to the electronic board (2), at least one hardware-based processor unit (4) on each electronic board (2), which processes the data from the physical environment and provides output, transfers the processed data from the processor unit (3) for output, and thus sending commands that perform avionic functions, multiple memory units (5) which are located in connection with the hardware- based processor unit (4), enable the storage of the data processed in the processor unit (3) and the data transmitted by the hardware-based processor unit (4), and enable the storage of the data processed by the hardware-based processor unit (4), a supervisor board (6) which is located in connection with the hardware-based processor units (4) and provides configuration by means of the hardware-based processor units (4) to the electronic boards (2) for which health status is decided as a result of comparison of the threshold value data defined by the user for the processing load level on each electronic board (2) with the processing load levels.

Description

AN INTEGRATED AVIONIC SYSTEM ARCHITECTURE 5 The present invention relates to an avionic system architecture which enables the regular operation of functional and operational requirements for flight management and control of air and / or space vehicles. Communication, navigation, indicator, recording, control operations in air and / or space 10 vehicles are sub-functions performed by an avionic system. In avionic system architectures, each avionic function is performed on different types of software / hardware units that are independent from each other. Interfaces which provide communication between platforms in the air and / or space vehicles and the physical environment are very diverse while the type and number of parts used are very high. In order to add capability to the air and / or 15 space vehicles in said avionic architectures, the system design is re-made and subjected to testing and certification processes. In the French patent document no. FR2946769, which is included in the known state of the art, there is disclosed a method which automatically performs reconfiguration and 20 maintenance operations in an integrated modular avionic architecture. Said method comprises defining a configuration between modules in case of a failure in any of the modules that make up the avionic architecture, and running the application, which is in a faulty module, in another module. 25 With the avionic architecture developed according to aspects and embodiments of the present invention, since there is no need for re-design and test processes to add additional new capabilities to air and / or space vehicles, a long-lasting, lightweight and highly reliable system may be obtained, which provides flexibility and cost savings. 30 According to an aspect of the invention, there is provided an avionic architecture comprising multiple electronic boards which perform avionic functions that provide flight management and control in air and / or space vehicles, multiple processor units on each electronic board, which process graphical and arithmetical data obtained by providing data input from the physical environment to the electronic board, at least one hardware-based processor unit 35 on each electronic board, which processes the data from the physical environment and provides output, transfers the processed data from the processor unit for providing output, 2020414291   31 Aug 2026 and thus sending commands that perform avionic functions, multiple memory units which are located in connection with the hardware-based processor unit, enable the storage of the data processed in the processor unit and the data transmitted by the hardware-based processor unit, and enable the storage of the data processed by the hardware-based 5 processor unit, a supervisor board which is located in connection with the hardware-based processor units and provides configuration by means of the hardware-based processor units to the electronic boards for which health status is decided as a result of comparison of the threshold value data defined by the user for the processing load level on each electronic board with the processing load levels, wherein a supervisor board which is 10 deactivated when the processing load is above the threshold value according to the threshold value data defined by the user for the processing load level thereon, and transfers its authorities to any of the multiple electronic boards whose processing load is below the threshold value. 15 The avionic architecture defined in the first claim and the other claims dependent thereon, consists of multiple electronic boards on which avionic functions providing flight management and control such as communication, indicator, navigation in air and / or space vehicles are performed. It comprises at least one processor unit which is located on the electronic board and enables the incoming data to be processed after data input is provided 20 between platforms in air and / or space vehicle and the physical environment, and a hardware-based processor unit which produces outputs by processing data from the processor unit and / or from the outside world, wherein at least one hardware-based processor unit is provided on each electronic board. The data processed in the processor unit are transmitted to a memory unit via the hardware-based processor unit for storage. 25 The data processed in the hardware-based processor unit is transmitted and stored directly to the memory unit to which it is connected. The processing load on electronic board is measured and compared with a threshold value determined for the processing loads, so that health status of the electronic board is determined. By deciding that electronic boards with processing load above the threshold value are running in an unhealthy state, 30 reconfiguration is provided by a supervisor board among electronic boards running in a healthy state, by means of hardware-based processor units in the electronic boards. The avionic architecture according to aspects and embodiments of the invention compares a threshold value determined as a reference by the user with a dynamically measured 35 processing load level. It comprises a supervisor board which decides that the boards are running in an unhealthy state if the processing load is above the threshold value as a result 2020414291   31 Aug 2026 of the comparison, and transfers its authorities to any electronic board running in a healthy state and deactivates itself with the command issued by itself. In an embodiment of the invention, the avionic architecture comprises a health management 5 unit which enables detection of an electronic board and / or a supervisor board that is defective, produces incorrect data or is risky by reporting health and status information of electronic boards to each other and / or to the supervisor board and comparing the calculated processing load level for each electronic board and the supervisor board with the processing load threshold value determined by the user. 10 In an embodiment of the invention, the avionic architecture comprises a supervisor board which, when the processing load performed on any of the electronic boards and / or the supervisor board is outside a user-determined tolerance value for the difference between the defined threshold value and the processing load level, reduces the processing load by 15 ceasing the non-critical flight functions carried out on the electronic board and / or the supervisor board close to the threshold value in order to prevent possible damage to the electronic board and / or supervisor board and / or provides safe operation by deactivating the electronic board and / or supervisor board (graceful degregation) and transferring the flight-critical functions to the electronic board and / or supervisor board that is in a healthy state. 20 In an embodiment of the invention, the avionic architecture comprises a supervisor board which, when any of the electronic boards and / or supervisor boards malfunction, enables the electronic board and / or the supervisor board in a healthy state to take over the data by transferring the data contained in the malfunctioning electronic board and / or supervisor 25 board to the avionic architecture according to the data transmitted by the health management unit, and enables the electronic board and / or the supervisor board producing faulty data to be isolated from the avionic architecture (fault tolerant). In an embodiment of the invention, the avionic architecture comprises a health management 30 unit which enables health information of electronic boards and / or supervisor board to be evaluated in the hardware-based processor unit such that they are isolated from the processor unit. In an embodiment of the invention, the avionic architecture comprises an electronic board 35 to which software of the avionic function required according to the change of avionic 2020414291   31 Aug 2026 functions that are required by air and / or space vehicles is installed, wherein the electronic board may be incorporated into and removed again from the avionic architecture if desired. In an embodiment of the invention, the avionic architecture comprises a processor unit 5 comprising at least one CPU which processes data and executes software commands, and at least one GPU which processes and displays graphics. In an embodiment of the invention, the avionic architecture comprises a health management unit which performs health status assessment for electronic boards and the supervisor 10 board for the configuration provided between the electronic boards and the supervisor board, compares the threshold values for user-determined processing load with dynamically measured processing load by considering the parameters of each electronic board and the supervisor board such as processing capacity, functional density etc., transmits the information of unhealthy running state if the processing load exceeds the threshold value, 15 transmits the information of critical healthy running state if the processing load is within tolerance values close to the threshold value, and transmits the information of healthy running state if the processing load is below the threshold value. The avionic architecture realized to achieve the object of the present invention is illustrated 20 in the attached drawings, in which: Figure 1 is a block diagram of an electronic board. Figure 2 is a block diagram of multiple electronic boards and a supervisor board in an avionic architecture. 25          Figure 3 is a health management unit algorithm executed in a hardware-based processor unit. All the parts illustrated in figures are individually assigned a reference numeral and the corresponding terms of these numbers are listed below: 30 1. Avionic Architecture 2. Electronic Board 35 3. Processor Unit 4. Hardware-based Processor Unit 5. Memory Unit 6. Supervisor Board 2020414291   31 Aug 2026 7. Health management unit 8. CPU 9. GPU 5 The avionic architecture (1) comprises multiple electronic boards (2) which perform avionic functions that provide flight management and control in air and / or space vehicles, multiple processor units (3) on each electronic board (2), which process graphical and arithmetical data obtained by providing data input from the physical environment to the electronic board (2), at least one hardware-based processor unit (4) on each electronic board (2), which 10 processes the data from the physical environment and provides output, transfers the processed data from the processor unit (3) for providing output, and thus sending commands that perform avionic functions, multiple memory units (5) which are located in connection with the hardware-based processor unit (4), enable the storage of the data processed in the processor unit (3) and the data transmitted by the hardware-based 15 processor unit (4), and enable the storage of the data processed by the hardware-based processor unit (4), a supervisor board (6) which is located in connection with the hardwarebased processor units (4) and provides configuration by means of the hardware-based processor units (4) to the electronic boards (2) for which health status is decided as a result of comparison of the threshold value data defined by the user for the processing load level 20 on each electronic board (2) with the processing load levels. (Figure-1). The avionic architecture (1) of the invention comprises a supervisor board (6) which is deactivated when the processing load is above the threshold value according to the threshold value data defined by the user for the processing load level thereon, and transfers 25 its authorities to any of the multiple electronic boards (2) whose processing load is below the threshold value (Figure-2). Multiple electronic boards (2) forming the avionic architecture (1) are designed to perform operations that provide flight management and control such as communication, navigation, 30 indicator, recording, control in air and / or space vehicles. The numerical data obtained by the data input provided to each electronic board (2) are processed in the processor unit (3) and the software commands are executed. The hardware-based processor unit (4), which is provided such that there is at least one hardware-based processor unit (4) on each electronic board (2), provides output on the electronic boards (2). It transmits the processed 35 data from the processor unit (3) and the data processed by itself. Thus, the outputs required to perform flight functions are obtained. Data can be processed by sending them directly to 2020414291   31 Aug 2026 the processor unit (3) or to the hardware-based processor unit (4) according to the blueprint in the configuration file. Therefore, since the processor unit (3) processes the correct data at the correct time, the processor unit (3) does not operate unnecessarily, processing load of the processor unit (3) decreases, the processor unit (3) does not heat up and the energy 5 requirement decreases as it does not require additional cooling equipment, the electricity power consumption decreases and the electromagnetic emission value (EMI / EMC) is decreased. This directly affects calculation of the processing load. The hardware-based processor unit (4) enables the processed data from the processor unit (3) to be transmitted to the memory unit (5) and stored thereon, and transmits the data processed by itself to the 10 memory unit (5) to store them. At least one hardware-based processor unit (4) located on each electronic board (2) is located in connection with the supervisor board (6). By comparing the threshold value levels of the processing load determined for each electronic board (2) with the processing loads, health status of each electronic board (2) is learned and reported to the supervisor board (6) by the hardware-based processor units (4) on each 15 electronic board (2). The supervisor board (6) provides a configuration for the electronic boards (2) which are in a healthy state, and thus, an optimum configuration is provided to perform avionic functions. A configuration file is installed on any of the hardware-based processor units (4) located in 20 each electronic board (2), and when the avionic architecture (1) is run for the first time, their statuses are assigned to the boards as predefined by the user in the configuration file. According to the configuration file, one electronic board (2) functions as a supervisor board (6), one electronic board (2) functions as master and other electronic boards (2) each function as slave. By calculating the processing load level on multiple electronic boards (2) 25 with the data such as the temperature of the processor unit (3), the amount of current on the processor unit (3), the instantaneous processing capability of the electronic board (2), etc., the processing load determined by the user for the electronic boards (2) is dynamically compared with the threshold value levels, and any electronic board (2) decided to be in a healthy state when the processing load is below the threshold value can take over the 30 authorities of supervisor board (6) running in an unhealthy state. Functional problems are prevented by updating functions between the electronic boards (2) that are in a healthy state by means of the configuration provided by the supervisor board (6). Configuration takes place as a result of the hardware-based processor units (4), which are provided such that there is at least one hardware-based processor unit (4) on each electronic board (2), 35 reporting the health status of the electronic boards (2) to the supervisor board (6). However, when the supervisor board (6) runs in an unhealthy state, the supervisor board (6) becomes 2020414291   31 Aug 2026 deactivated by transferring its authorities to any of the electronic boards (2) that are in a healthy state, in order to ensure continuity of the re-configuration between the electronic boards (2). The data in the memory unit (5) of the supervisor board (6) is transferred by the hardware-based processor (4) unit on any electronic board (2) in a healthy state and 5 assigned as the new supervisor board (6), and functional problems are prevented by dynamically updating the supervisor board (6). In an embodiment of the invention, the avionic architecture (1) comprises a health management unit (7) which compares dynamically measured processing load levels with 10 the threshold value defined by the user for each electronic board (2) and / or supervisor board (6), and enables the electronic board (2) and / or the supervisor board (6), which is defective, faulty or under risk, to be detected as a result of the comparison. The health management unit (7) performs the health status determination of each electronic board (2) and supervisor board (6) by comparing the threshold value defined by the user in the configuration file with 15 the instantly measured processing load level. The threshold value is defined for each electronic board (2) and supervisor board (6) according to the function it performs. By detecting the electronic board (2) and / or supervisor board (6) which is defective, faulty and risky by the health management unit (7), the interruption of data flow within the avionic architecture (1) is prevented and hardware deficiencies are prevented (Figure -3). 20 In an embodiment of the invention, the avionic architecture (1) comprises a supervisor board (6) which, when the difference between the processing load and the threshold value in any of the multiple electronic boards (2) and / or supervisor board (6) is less than the user-determined tolerance value, deactivates non-critical flight functions by reducing (graceful 25 degradation) the processing load for the electronic board (2) and / or supervisor board (6) within the tolerance range in order to prevent damage to the electronic board (2) and / or supervisor board (6) or enables the functions required for flight to be performed by the healthy electronic board (2) and / or supervisor board (6) by deactivating the critical healthy electronic board (2) and / or supervisor board (6). When a processing load level is detected 30 within the safe operating range limit defined in the configuration file, an overheating problem is encountered in the electronic board (2) and / or the supervisor board (6) running with a high processing load. In order to prevent the damage that may occur as a result of overheating, non-critical flight functions are deactivated, the processing load of the electronic board (2) and / or the supervisor bard (6) with a high level of processing load is 35 reduced or the electronic board (2) and / or supervisor board (6) are deactivated and their 2020414291   31 Aug 2026 functions are assigned to the electronic board (2) and / or supervisor board (6) whose functions are running in a healthy state. In an embodiment of the invention, the avionic architecture (1) comprises a supervisor board 5   (6) which, if any of the electronic boards (2) and / or supervisor boards (6) malfunction, enables the data belonging to the unhealthy electronic board (2) and / or supervisor board (6) to be transferred to any healthy electronic board (2) according to the data sent by the health management unit (7), and provides isolation of the defective electronic board (2) and / or the supervisor board (6) (fault tolerant). In order for each electronic board (2) to 10 perform its functions safely even if there is an error or malfunction in any of the multiple electronic boards (2) in the avionic architecture (1), the function is performed in the electronic board (2) with the appropriate processor load level without any loss of service by transferring the data of the faulty or defective electronic board (2) and / or the supervisor board (6) to the avionic architecture (1) by means of the supervisor board (6). 15 In an embodiment of the invention, the avionic architecture (1) comprises a health management unit (7) which evaluates the health statuses of multiple electronic boards (2) and / or supervisor board (6) in the hardware-based processor unit (4), independently from the processor unit (3). The health management unit (7) is operated independently from the 20 processor unit (3) in the hardware-based processing unit (4). Thus, the health information of each electronic board (2) and / or supervisor board (6) is evaluated on a hardware basis. The hardware-based processor unit (4) is more stable than the processor unit (3). The high stability reduces the possibility of generating erroneous data compared to running at the processor unit (3) level by enabling that the processed data is known to be correct, which 25 is the reason for the certification processes required in aviation. In an embodiment of the present invention, the avionic architecture (1) comprises detachable electronic boards (2), each of which is installed with software that performs at least one hardware function according to the avionic capability requirements of air and / or 30 space vehicles. Sub-functions required for air and / or space vehicles are installed separately on each electronic board (2) such that at least one sub-function is defined. Thus, the detachable electronic board (2) provides a flexible structure to the avionic architecture (1), and the process of adding and removing functions according to avionic capability requirements is accelerated. Since each electronic board (2) is identical, it is sufficient to 35 indicate the delta differences for the electronic board (2) inserted in the idle slot (testing the function of the added electronic board (2) by the test flight, conducting preliminary tests 2020414291   31 Aug 2026 such as EMI test and environmental impact test). Software of the avionic architecture (1) is not required to be rewritten and redesign certification is not required since redesign is not performed. 5 In an embodiment of the invention, the avionic architecture (1) comprises a processor unit (3) comprising at least one CPU (8) which is capable of performing arithmetical and logical operations and at least one GPU (9) which is capable of processing graphical data. The type of processor unit (3) used varies according to the type of data. Visually-intensive data are processed in the GPU (9). Data requiring long mathematical operations are processed 10 in the CPU (8). In an embodiment of the invention, the avionic architecture (1) comprises a health management unit (7) which compares the threshold values of each electronic board (2) and supervisor board (6) defined by the user in the configuration file with the processing load 15 levels dynamically measured over each electronic board (2) and supervisor board (6) so that it decides a healthy running state when the processing load for each electronic board (2) and supervisor board (6) is lower than the threshold value, decides a critical healthy state if the processing load is within or equal to user-determined tolerance ranges for the threshold, and decides an unhealthy state if the processing load is above the threshold 20 value. In order to protect against any malfunction, erroneous data generation or riskcreating situations that may occur in any electronic board (2) and / or supervisor board (6) in avionic architecture (1) and to create a safe system, the defective, faulty or risky electronic board (2) and / or supervisor board (6) must be detected and assignment of duties between each other must be made immediately. Defective, faulty and risky electronic board (2) and 25 supervisor board (6) can be detected by reporting the health status of the electronic boards (2) and the supervisor board (6), whose health status is reported to them by the health management unit (7), to the supervisor board (6). Health status information is obtained by comparing the processing load threshold values defined by the user with the temperature of the processor unit (3) of the certain electronic boards (2) and supervisor board (6), the 30 amount of current on the processor unit (3), the instantaneous processing capability of the electronic board (2), etc., by the health management unit (7). The electronic board (2) is assumed to run in an unhealthy state when the threshold value level determined by the user for each electronic board (2) remains below the dynamically measured processing load level. When the processing load is below the threshold value, it is considered to run in a 35 healthy state. When the processing load is between the limit values determined by the user around the threshold value, it is considered to run in a critical healthy state. By reconfiguring 2020414291   31 Aug 2026 the task descriptions of multiple electronic boards (2) and the supervisor board (6) according to the processing load level, the source, electronic board (2) or the supervisor board (6) performing the function can be changed statically by an order determined by the user or by a decision that is made dynamically according to the processing load level. 5 Throughout this specification and the claims which follow, unless the context requires otherwise, the word "comprise", and variations such as "comprises" and "comprising", will be understood to imply the inclusion of a stated integer or step or group of integers or steps but not the exclusion of any other integer or step or group of integers or steps. 10 The reference in this specification to any prior publication (or information derived from it), or to any matter which is known, is not, and should not be taken as an acknowledgment or admission or any form of suggestion that that prior publication (or information derived from it) or known matter forms part of the common general knowledge in the field of endeavour 15 to which this specification relates.

Claims

1. An avionic architecture comprising multiple electronic boards which perform avionic functions that provide flight management and control in air and / or space vehicles, 5          multiple processor units on each electronic board, which process graphical andarithmetical data obtained by providing data input from the physical environment to the electronic board, at least one hardware-based processor unit on each electronic board, which processes the data from the physical environment and provides output, transfers the processed data from the processor unit for providing output, and thus10          sending commands that perform avionic functions, multiple memory units which arelocated in connection with the hardware-based processor unit, enable the storage of the data processed in the processor unit and the data transmitted by the hardware-based processor unit, and enable the storage of the data processed by the hardware-based processor unit, a supervisor board which is located in15          connection with the hardware-based processor units and provides configuration bymeans of the hardware-based processor units to the electronic boards for which health status is decided as a result of comparison of the threshold value data defined by the user for the processing load level on each electronic board with the processing load levels, wherein a supervisor board which is deactivated when the20          processing load is above the threshold value according to the threshold value datadefined by the user for the processing load level thereon, and transfers its authorities to any of the multiple electronic boards whose processing load is below the threshold value.25       2. An avionic architecture according to claim 1, wherein a health management unitwhich compares dynamically measured processing load levels with the threshold value defined by the user for each electronic board and / or supervisor board, and enables the electronic board and / or the supervisor board, which is defective, faulty or under risk, to be detected as a result of the comparison.

303. An avionic architecture according to claim 1 or claim 2, wherein a supervisor board which, when the difference between the processing load and the threshold value in any of the multiple electronic boards and / or supervisor board is less than the user-determined tolerance value, deactivates non-critical flight functions by reducing the35          processing load for the electronic board and / or supervisor board within the tolerancerange in order to prevent damage to the electronic board and / or supervisor board or2020414291   31 Aug 2026enables the functions required for flight to be performed by the healthy electronic board and / or supervisor board by deactivating the critical healthy electronic board and / or supervisor board.5       4. An avionic architecture according to claim 2 or claim 3, wherein a supervisor boardwhich, if any of the electronic boards and / or supervisor boards malfunction, enables the data belonging to the unhealthy electronic board and / or supervisor board to be transferred to any healthy electronic board according to the data sent by the health management unit, and provides isolation of the defective electronic board and / or the 10          supervisor board.

5. An avionic architecture according to any of the claims 2 to 4, wherein a health management unit which evaluates the health statuses of multiple electronic boards and / or supervisor board in the hardware-based processor unit, independently from 15           the processor unit.

6. An avionic architecture according to any of the above claims, wherein detachable electronic boards, each of which is installed with software that performs at least one hardware function according to the avionic capability requirements of air and / or 20          space vehicles.

7. An avionic architecture according to any of the above claims, wherein a processor unit comprising at least one CPU which is capable of performing arithmetical and logical operations and at least one GPU which is capable of processing graphical 25          data.

8. An avionic architecture according to any of the claims 2 to 7, wherein a health management unit which compares the threshold values of each electronic board and supervisor board defined by the user in the configuration file with the processing 30          load levels dynamically measured over each electronic board and supervisor boardso that it decides a healthy running state when the processing load for each electronic board and supervisor board is lower than the threshold value, decides a critical healthy state if the processing load is within or equal to user-determined tolerance ranges for the threshold, and decides an unhealthy state if the processing 35          load is above the threshold value.

Images