Method, device and system for distributing data between devices

Abstract

A method of copying data from a first device to a second device is disclosed, each device including a wireless communication interface having a maximum range. The first device is separated from the second device by a distance greater than the maximum range. The method includes: transmitting the data by the first device to a third device located within the maximum range of the first device; receiving the data at the third device and storing the data in a memory of the third device; moving the third device to a physical location within the maximum range of the second device; and transmitting the data by the third device to the second device.

Description

Technical Field

[0001] The present disclosure relates to tire monitoring systems and methods of operating the same. In an example, the present disclosure relates to an aircraft tire monitoring system, such as an aircraft tire pressure monitoring system. Background Art

[0002] Checking tire pressure is an important part of vehicle maintenance. Tire pressure should be maintained at a predetermined pressure to ensure that the tire performs as the manufacturer intended. Incorrect tire pressure can lead to tire failure, possibly bursting and causing damage to the vehicle and / or loss of control. Because tires on aircraft landing gear experience high speeds, pressure is checked regularly, perhaps once a day or more frequently. Manual checking of tire pressure takes time, and reducing this time is beneficial.

[0003] It has been proposed to automate tire pressure measurement by including a sensing device in the wheel, which can then be wirelessly interrogated to provide a measurement of the tire pressure. This can reduce the time required compared to manual readings, but it is still time consuming due to the need to travel from wheel to wheel to measure pressure.

[0004] It would be desirable to provide a tire pressure measurement system that addresses some or all of these points. Summary of the invention

[0005] According to a first example, a method of copying data from a first device to a second device is provided, the first device and the second device each including a wireless communication interface having a maximum range, wherein the first device and the second device are separated by a distance greater than the maximum range. The method includes: transmitting the data by the first device to a third device located within the maximum range of the first device; receiving the data at the third device and storing the data in a memory of the third device; moving the third device to a physical location within the maximum range of the second device; and transmitting the data by the third device to the second device.

[0006] Optionally, the data is copied to one or more additional devices, and the method includes: for each of the one or more additional devices, moving the third device to a physical location within the maximum range of the corresponding additional device, and transmitting the data to the corresponding additional device by the third device using a wireless communication interface.

[0007] Optionally, the maximum range is less than 30 cm.

[0008] Optionally, the method comprises: after said transmitting to the second device, rendering the data in the memory of the third device unreadable. Rendering the data unreadable may be in response to shutting down the third device. Rendering the data unreadable may be in response to determining that a predetermined time period has passed since the third device received the data.

[0009] Optionally, the data comprises configuration information. The configuration data may comprise at least one of: reference tire pressure data, a vehicle identifier, compatibility data, and wheel position data. The first device may receive the configuration information from the fourth device.

[0010] Optionally, the data includes an encryption key. The method may include: generating the encryption key by the first device after receiving the configuration data from the fourth device. The method may include: generating the encryption key by the first device in response to a command received from the fourth device.

[0011] Optionally, communication between the first device and the third device uses a first wireless communication interface, and communication between the first device and the fourth device uses a second wireless communication interface, the second wireless communication interface having a greater maximum range than the first wireless communication interface.

[0012] Optionally, the method includes: providing an instruction by the fourth device to guide the third device to move from the first device to the second device after the first device transmits the cryptographic key. The instruction may be provided through a display of the fourth device.

[0013] In another example, a system includes a first device, a second device, and a third device, each of which includes a wireless communication interface and a processor, wherein the system is configured to implement the method described above. The system may also include a fourth device, which includes a wireless communication interface and a processor, wherein the system is configured to implement the method described above with reference to the features of the fourth device.

[0014] In another example, a method for distributing data between a plurality of tire monitoring devices is provided, each of the tire monitoring devices including a wireless communication interface having a maximum transmission range, wherein the plurality of tire monitoring devices are spaced apart from each other by a distance greater than the maximum transmission range. The method includes, at a control device: causing a first tire monitoring device to transmit data to be distributed to an intermediate device using the wireless communication interface; directing the intermediate device to move within the maximum transmission range of a second wireless device; and in response to the intermediate device having moved within the maximum transmission range of the second tire monitoring device, causing data to be transmitted from the intermediate device to the second tire monitoring device.

[0015] In another example, a control device for a tire monitoring system includes: a wireless communication interface; a display; and a processor, which is configured to implement the above-described method.

[0016] In another example, a method for distributing data between multiple tire monitoring devices using an intermediate device is provided, wherein the tire monitoring device and the intermediate device each include a wireless communication interface having a maximum transmission range, wherein the multiple tire monitoring devices are spaced apart from each other by a distance greater than the maximum transmission range. The method includes: at the intermediate device: receiving data from a first tire monitoring device using the wireless communication interface at the intermediate device; storing the data in a memory of the intermediate device through the intermediate device; moving the intermediate device within the maximum transmission range of a second tire monitoring device; transmitting the data to the second tire monitoring device through the intermediate device; and after transmitting the data to the second tire monitoring device, erasing the data from the memory of the intermediate device.

[0017] In another example, an intermediate device for a tire monitoring system is provided. The intermediate device includes: a wireless communication interface; and a processor configured to implement the method described above.

[0018] In yet another example, a method of distributing a cryptographic key from a first device to a second device is provided. The method includes: transmitting, by the first device, a cryptographic key for communication between the first device and the second device to a third device using a wireless communication interface having a transmission range of less than 30 cm; receiving the cryptographic key at the third device and storing the cryptographic key in a memory of the third device; transmitting, by the third device, the cryptographic key to the second device using a wireless communication interface having a transmission range of less than 30 cm; and after the transmission to the second device, erasing, by the third device, the cryptographic key from the memory of the third device.

[0019] Other features and advantages of the present invention will become apparent from the following description of preferred examples of the invention given by way of example only, with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 A schematic diagram of a tire monitoring system according to a first example of the present invention is shown.

[0021] Figure 2 Shown for Figure 1 Schematic diagram of a tire monitoring device used in an example.

[0022] Figure 3 Shown for Figure 1 Schematic diagram of the control device used in the example.

[0023] Figure 4 Shown for Figure 1 Schematic diagram of the configuration device used in the examples.

[0024] Figure 5A schematic diagram of a tire pressure sensor network installed in an aircraft is shown.

[0025] Figure 6 Shows that it can be Figure 1 An example is used together with a flow chart of a tire pressure checking process.

[0026] Figure 7 It shows that it can be Figure 2 Flow chart of a tire pressure checking process used by a tire monitoring device.

[0027] Figure 8 It shows that it can be Figure 2 A flow chart of a process for controlling the flow of configuration data used by a tire monitoring device for use with a tire monitoring device.

[0028] Fig. 9 It shows that it can be Figure 1 Flowchart of an example data distribution process used by a tire monitoring system.

[0029] Fig.10 shows that the control device can be Fig. 9 Flowchart of the process used during data distribution.

[0030] Fig.11 shows that the configuration device can be Fig. 9 Flowchart of the process used during data distribution.

[0031] Fig.12 is a pictorial representation of a configuration device having a plurality of indicators according to an example. DETAILED DESCRIPTION

[0032] In the following description, for the purpose of illustration, many specific details of certain examples are set forth. References to "example" or similar language in the specification mean that a particular feature, structure, or characteristic described in conjunction with the example is included in at least one example, but not necessarily in other examples.

[0033] Certain methods and systems described herein relate to the operation of a sensor network in an aircraft, such as a network of tire monitoring devices. In the examples described herein, reference to an "aircraft" includes all types of aircraft, for example, fixed-wing aircraft such as military or commercial aircraft or unmanned aerial vehicles (UAVs), and rotary-wing aircraft such as helicopters.

[0034] According to the examples herein, data distribution can be performed using a relatively short-range wireless communication interface. The distance between the two devices is greater than the wireless communication range of the wireless communication interface, and a third device, i.e., an intermediate device, is used to transmit data between them. Since the short distance makes the communication difficult to be intercepted, security is improved. This is beneficial for sensitive data such as configuration data and encryption keys.

[0035] According to other examples herein, the configuration device has two different visual indicators that can be seen from different viewing angles. The different indicators improve the visibility of the indication when the configuration device is positioned so that it may be difficult to observe, such as very close to the tire monitoring device.

[0036] Example Tire Monitoring System

[0037] Figure 1 A schematic diagram of a tire monitoring system is shown, which in this case is a pressure sensor system according to a first example. The system comprises a plurality of tire monitoring devices 10, a control device 12 and a configuration device 14, all of which are arranged to communicate via wireless communication. A tire monitoring device is mounted on each wheel of a vehicle, which in this case is an aircraft (as described below with reference to Figure 5 1 . The control device 12 is separate from the tire pressure sensor 10 and may be a dedicated control device that functions only in the tire pressure sensor system, or may be a computing device that may be used for other purposes in addition to the tire pressure sensor system. Example computing devices include mobile devices such as laptop computers, tablet computers, cellular phones, and wireless communication devices.

[0038] Figure 1 Wireless communications in the tire pressure sensor system may use a local area network or a personal area network, and may have any suitable topology including centralized systems and mesh wireless systems. In a centralized system, a single device may be designated as a master device to coordinate communications, or one or more additional wireless access points, gateways, or controllers (not shown) may be used. In some examples, the tire monitoring device 10, the control device 12, and the configuration device 14 may all communicate using the same wireless technology and form a single network. In other examples, one or more of the tire monitoring device 10, the control device 12, and the configuration device 14 may be separated from other elements in the system. Such separation may be provided in software, for example by providing a suitable firewall and / or using different network IDs and encryption keys. Such separation may also be provided by hardware, for example by different wireless communication technologies. Both hardware separation and software separation may be combined. For example, in Figure 1In the system, the control device communicates with the tire sensing device using a wireless communication technology different from this configuration, which can improve the safety of the system.

[0039] Figure 2 Shown for Figure 1 Schematic diagram of a tire monitoring device 10 used in a tire pressure sensor system of FIG. The tire monitoring device 10 is configured to be mounted on a wheel, for example, by a mechanical connection to an opening on the wheel, the opening providing access to the tire. The tire monitoring device 10 includes a processor 200, a wireless communication interface 202, an indicator 204, a power supply 206, and a pressure sensor 208, a temperature sensor 209, a first storage device 210, and a second storage device 211.

[0040] The processor 200 may be any suitable processing device including a microprocessor having one or more processing cores. In use, the processor 200 coordinates and controls the other components and is operable to read computer program instructions and data from and / or write computer program instructions and data to the storage devices 210, 211. In some examples, the processor may be optimized for low power operation or have at least one processing core optimized for low power operation.

[0041] The wireless communication interface 202 is connected to the processor 200 and is used to transmit and receive data from other devices in the tire pressure sensor system. In this example, the wireless communication interface includes two transceivers 212 and 214, and the transceivers 212 and 214 use different wireless technologies. The first transceiver 212 is provided for relatively long-distance communication up to about 50m or about 100m. For example, the first transceiver can use a communication standard suitable for mobile devices or a wireless avionics device internal communication (WAIC) standard, such as IEEE 802.11 (Wi-Fi), IEEE 802.15.1, IEEE 802.15.4 on the 2.4GHz or 5GHz industrial science and medical (ISM) band. The first transceiver also includes an encryption module, which is used to encrypt the transmitted data and decrypt the received data, for example, according to the advanced encryption standard (AES) using a pre-shared key. The second transceiver 214 is provided for relatively short-distance communication. For example, the second transceiver 214 can use a standard according to IEEE 802.15, such as IEEE 802.15.4, RFID or near field communication (NFC). The second transceiver can operate within a range of less than 5m, less than 3m, less than 1m, less than 50cm, less than 25cm, less than 10cm, less than 5cm, less than 1cm, or requiring contact between devices. Similar to the first transceiver 212, the second transceiver 214 also includes an encryption module for encrypting the transmitted data and decrypting the received data.

[0042] In some examples, a single wireless transceiver may be provided in the wireless communication interface. In this case, the single transceiver may use relatively short-range or relatively long-range communications, or adjust the range as needed (e.g., by controlling the transmission power).

[0043] Indicator 204 is connected to processor 200 and controlled by processor 200 to provide indication to the user of tire pressure sensor system. In this example, the indicator is an LED, but in other examples, the indicator is another form of light, a display such as an LCD or an electronic ink display, or any other form of visual indication. In other examples, the indicator is an auditory indicator, such as a buzzer, a pager, a speaker, or any other sound generating component. In other examples, the indicator may include both an auditory indication component and a visual indication component. The indicator provides at least a first indication and a second indication, such as an emitted light of a first color and an emitted light of a second color. Other indications such as continuous or flashing light may also be provided. The tire monitoring device has a housing (not shown), and indicator 204 may provide indications outside the housing, such as an LED may be mounted outside the housing or visible through the housing, or may be able to emit a sound from inside the housing.

[0044] The power source 206 provides power to the elements in the sensing device. The power source 206 can be a battery, such as a lithium battery. In this example, the power source is a lithium battery with enough power to operate the sensor for about 2 to 3 years under normal operation. In other examples, the power source can include, for example, a power harvesting system that collects vibrations and / or electromagnetic radiation to charge a capacitor or battery, which is then used to power the device.

[0045] In use, the wireless sensing device can be in a "sleep" or low power mode for most of its operating life, in which most components except the processor and the wireless communication interface are powered off. This can save battery life. For example, a tire monitoring device can be in a low power mode by default, listening for commands to measure or report tire pressure. Since tire pressure readings may be required relatively rarely, perhaps as little as once every 10 days, once every 5 days, once every 3 days, or once a day, this can provide useful power savings. In other examples, pressure can be sensed more frequently, such as every 10 minutes, every 15 minutes, every 20 minutes, every 30 minutes, every 1 hour, or every 2 hours, and the pressure can be stored for use in trend monitoring.

[0046] The pressure sensor 208 is connected to the processor 200 and may be any suitable sensor for measuring pressure, such as a capacitive sensor. Similarly, the temperature sensor 209 is connected to the processor 200 and may be any suitable sensor for measuring temperature, such as a thermocouple. The temperature sensor 209 may be arranged to measure the temperature of the wheel or directly measure the temperature of the gas inside the tire. In the case where the temperature sensor 209 measures the temperature of the wheel, the temperature of the wheel may be processed to determine the temperature of the gas in the tire. For example, an algorithm or a lookup table may be used.

[0047] The connection of the pressure sensor 208 and the temperature sensor 209 to the processor 200 may be digital, providing a digital representation of the measured pressure and / or temperature from an analog-to-digital converter (ADC) in the sensor itself, or the connection may be analog, in which case the processor may include an ADC to sample the received signal. Including both a pressure sensor and a temperature sensor may help determine a temperature-compensated pressure value. Although this example includes a pressure sensor and a temperature sensor, other examples may include only a pressure sensor, or may include other sensors.

[0048] This example includes two storage device elements 210 and 211. In this example, the storage device 210 is a non-volatile rewritable storage device such as flash memory that can retain data without the need for applied power. Other examples may include a volatile storage device that is maintained by power supply or a combination of a read-only storage device and a rewritable storage device. The storage device 210 is connected to the processor 200 and is used to store both computer program instructions for execution by the processor and data, such as data from the pressure sensor 208 or data received through the wireless communication interface 202. In some examples, the storage device 210 can store a history of pressure readings sensed by the pressure sensor 208 and / or temperature readings sensed by the temperature sensor 209. For example, the readings of the previous ten days can be stored, wherein once the storage device is full, the oldest data is replaced with the latest data.

[0049] The storage device 211 is a secure storage device with limited write and / or read access, for example, accessible only by certain processes running on the processor 200. Configuration data, such as wireless encryption keys, may be stored in the storage device 211. In other examples, a single storage device may be provided, or the storage devices 210 and 211 may be provided in a single physical device with a logical division between the storage device 210 and the storage device 211.

[0050] Figure 3 Shown is the Figure 1 Schematic diagram of control device 12 used in an example of . Control device 12 includes processor 300, display 302, input system 304, power supply 306, wireless interface 308, storage device 310, and wired communication interface 312. In this example, the control device is a mobile device such as a cellular phone or a tablet computer.

[0051] Processor 300 is any suitable processing device that may include one or more processing cores, such as a multi-purpose microprocessor, a system on a chip, or a system in a package. Processor 300 is connected to a display 302 such as an LCD, OLED, or e-ink display to display information to a user of the control device.

[0052] In this example, the input system 304 includes a touch screen interface, so that the user can interact with the control device by touching the user interface elements on the screen. In addition to the touch screen, the input system 304 may also include one or more buttons and other input devices such as a microphone for voice recognition and a camera for image input. Other examples may not include a touch screen interface.

[0053] The control device is powered by a power supply 306, which in this example is a rechargeable lithium-ion battery. Other examples may use alternative power sources, such as other battery technologies, mains power or energy harvesting such as solar energy.

[0054] Wireless interface 308 is included for control device 12 to communicate with other devices in the tire pressure sensor system. In this example, a single wireless interface 308 is provided, which is configured to communicate with tire monitoring device 10. For example, relatively long-range wireless communication technology may be used, such as wireless communication technology that complies with IEEE 802.15.1, IEEE 802.15.4, or IEEE 802.11. This enables control device 12 to interact with tire monitoring devices from relatively long distances.

[0055] In other examples, the control device may be provided with multiple wireless communication interfaces or transceivers that operate using different wireless technologies such as at least two of IEEE 802.15.1, IEEE 802.15.4, IEEE 802.11 (Wi-Fi___33), WAIC, RFID, and NFC. For example, the control device may have two transceivers, one of which has a longer communication range than the other transceiver.

[0056] The storage device 310 includes non-volatile elements such as flash memory and volatile elements such as RAM. The non-volatile elements are used to store operating system software and application software. In this example, the control device runs standard operating system software and is loaded with application software for interacting with the tire pressure sensor system. In order to limit access to the tire pressure sensor network, the application software can be provided from a secure source and not available to the public, and / or require credentials to be entered before operation.

[0057] A wired communication interface 312 is provided for connection to a computing system. The wired communication interface 312 may be, for example, a serial data connection such as a universal serial bus (USB), a parallel data connection, or a network connection such as Ethernet. The wired communication interface 312 may enable the control device to transmit values ​​read from the tire monitoring device and / or other status information to the computing system to, for example, store long-term trends and assist in fleet management. Alternatively or additionally, a wireless communication interface 308 may be used to communicate with a computing system. In some examples, the control device may not include a wired communication interface.

[0058] Figure 4 Shown is the Figure 1Schematic diagram of configuration device 14 used in an example of. Configuration device 14 generally includes the same elements as control device 12: processor 400, display 402, input system 404, power supply 406, wireless interface 408, storage device 410, and wired communication interface 412, and unless otherwise described below, these elements are generally the same as described above with respect to the control device. In this example, the configuration device is a mobile device, but is limited to operate only with a tire monitoring system. For example, the configuration device can be a computing device or tablet computer that is only capable of running software for interacting with a tire monitoring system.

[0059] In this example, the wireless communication interface 408 in the configuration device is a relatively short-range communication system, such as IEEE802.15.1, IEEE 802.15.4, NFC or RFID. This enables the configuration device to act as an additional authentication factor when configuring the tire monitoring device, for example, the tire monitoring device can only respond to the configuration command received from the configuration device or only respond to the configuration command received from the control device after receiving the command from the configuration device.

[0060] In other examples, the configuration device may include multiple wireless communication interfaces or transceivers. For example, the configuration device may include a transceiver for relatively short-range communications as discussed above and a transceiver for relatively long-range communications, such as a transceiver compliant with IEEE 802.11.

[0061] The wired communication interface 412 in the configuration device may be used to provide information to the configuration device in a secure manner, for example enabling some encryption keys to be updated over a wired interface such as a serial data connection rather than a wireless interface.

[0062] In some examples, the configuration device 14 may be omitted and replaced by the control device 12. The control device 12 may include a short-range wireless communication interface, such as one compliant with IEEE 802.15.1, IEEE 802.15.4, RFID or NFC. Application software may be loaded onto the control device in such a way that the control device can also be used as an additional authentication factor: it is possible to control the operation of the short-range wireless communication interface for the transmission of configuration commands by maintaining a cryptographic key that can only be accessed with appropriate credentials. In these examples, a separate application software may be provided on the control device, which application software can be executed to enable the control device to function as the configuration device.

[0063] Figure 5A schematic diagram of a tire pressure sensor network installed in an aircraft is shown. Aircraft 500 includes a fuselage 510, a wing 520, a main landing gear 530, and a front landing gear 540. According to an example, aircraft 500 includes a sensor network according to any of the examples described herein. Aircraft 500 can be used in combination with any of the methods described herein. According to an example, multiple wireless nodes are distributed at various locations around aircraft 500. For example, in landing gears 530, 540 and wing 520 and in fuselage 510. A tire monitoring device is installed on each wheel of the main landing gear 530 and the front landing gear 540.

[0064] In examples, the tire monitoring device 10 also communicates with the cockpit system to provide tire pressure information to the pilot on the cockpit. In these examples, the cockpit console can also play the role of the control device.

[0065] Example Tire Pressure Check Procedure

[0066] Figure 6 Shows that it can be Figure 1 Flow chart of the tire pressure check process used with the example of . First, at box 602, the user starts the tire monitoring control application on the control device 12. During the initialization of the application, it is checked on the control device whether the wireless communication interface 308 for communicating with the monitoring device is active, and the user is prompted to activate if the wireless communication interface 308 is not active.

[0067] Next, at box 604, the control device scans for tire monitoring devices within range. For example, the control device can send a probe signal (probe) through the wireless communication interface, which causes any tire monitoring device in range to respond with an indication of their vehicle identifier, such as the tail identifier of the aircraft to which the tire monitoring device is attached. Scanning can include establishing direct point-to-point contact with each tire monitoring device, or establishing contact through a network of tire monitoring devices, such as through an access point, a master device, or any device in a mesh network. Scanning can include waking up the tire monitoring device from a low power mode. Scanning can include communicating with the sensor network using a secure network key.

[0068] Depending on the communication range and location, a tire monitoring device associated with more than one vehicle may be detected. For example, several aircraft may be located in the same hanger within the range of the control device. Next, at box 606, a determination is made as to whether the identifier should be automatically selected without the use of input. For example, the application may store a configuration option for whether the identifier should be automatically selected. If automatic selection is not required, the process continues to box 608. If automatic selection is required, the process continues to box 612. In some examples, box 606 is not included. In these examples, the process may continue by manual selection or automatic selection as described below.

[0069] For manual selection, the control device displays the detected identifier of the vehicle at block 608. At block 610, input of a selected identifier is received, such as based on a user's selection of a desired identifier.

[0070] For automatic selection, at box 612, a vehicle identifier is automatically selected from the identifiers indicated in the received response. This can be achieved in a variety of ways. For example, in the case where each tire monitoring device within the range responds to the control device individually, at least two responses can come from tire monitoring devices associated with the same vehicle identifier. In that case, the vehicle identifier associated with the largest number of responses can be automatically selected because that is likely to be the vehicle closest to the control device that needs to have its pressure measured. In another example, the vehicle identifier of the tire monitoring device closest to the control device can be selected, such as the response with the largest received signal strength indication (RSSI). In yet another example, all detected tire monitoring devices may be associated with the same vehicle identifier, in which case the vehicle identifier is selected.

[0071] Next, at box 614, commands are sent to the tire monitoring devices corresponding to the selected identifiers to cause them to read the pressure and report to the control device, for example, they may perform the following reference to Figure 7 Describe the process.

[0072] Responses are received from the tire monitoring device at box 616 and displayed on the control device at box 618. The display of pressure may include one or both of a numerical value and a status indication such as "OK" or "low pressure".

[0073] At block 620, the received data may be cross-checked to ensure data consistency. The process then ends.

[0074] exist Figure 6Throughout the process, the communication between the control device and the sensor device can be secure, for example, by network key encryption. The network key used for communication with the control device can be different from the network key used for communication between the sensor devices to enhance the security of the system.

[0075] When exchanging security keys, security can be increased by using wireless communication techniques with limited transmission range, such as the 802.11 (Wi-Fi) standard which allows transmission over distances of 50 meters or more in clear space. Because physical proximity is required to intercept communications, this alone may be sufficient to provide increased security. In some examples, security can be increased by reducing the transmission power when transmitting the encryption key compared to the transmission of the encrypted data itself, which requires closer proximity for the initial key exchange process.

[0076] Figure 7 It shows that it can be Figure 2 A flowchart of a tire pressure check process used by a tire monitoring device of a system. The process is provided to provide additional assurance and fault tolerance in pressure measurements from the system, such as to prevent damaged operation or errors in the control device. Through the process, the monitoring device uses its indicator to provide an indication of the tire pressure status independently of the control device. In some examples, the indication of the tire pressure status by the monitoring device may have a higher Development Assurance Level (DAL) than the indication provided on the control device. For example, although the control device can be used to initiate tire pressure measurements and provide a convenient device for the user to understand the measurement results, it may not have DAL certification, while the operation of the monitoring device to provide an indication using an indicator on the monitoring device may be certified as Development Assurance Level B. This can enable the system to operate with a variety of control devices because, although those devices are not required to be certified for DAL, it can still ensure that the system as a whole meets the required safety standards. Similarly, in some examples, the monitoring device may have a higher Security Assurance Level (SAL) than the control device.

[0077] First, at box 702, the tire monitoring device receives a command for checking pressure from the control device via the wireless communication interface. In response, at box 704, the processor measures the pressure in the tire using a pressure sensor. Then in box 706, the measured pressure is compared with the reference pressure to determine whether the tire has low pressure. In this example, low pressure occurs if the pressure sensed by the pressure sensor is less than 89% of the reference pressure. Other examples can determine low pressure when the measured pressure is less than 95% of the reference pressure, less than 90% of the reference pressure, or less than 85% of the reference pressure. Other examples can determine low pressure when the measured pressure is at least about 207kPa (about 30psi) less than the reference pressure. Other examples can determine low pressure when the measured pressure is at least about 138kPa (about 20psi) or about 69kPa (about 10psi) less than the reference pressure. If low pressure is detected, execution proceeds to box 708, otherwise execution proceeds to box 712.

[0078] At box 708, the processor uses an indicator to indicate a fault condition, such as by providing a continuous red light for a predetermined period of time. For example, the predetermined period of time may be 5 minutes, 2 minutes, 1 minute, or 30 seconds. At box 712, the processor also broadcasts the fault indication to other tire monitoring devices, again using the wireless communication interface.

[0079] At box 712, the processor checks to see if any fault messages have been received from other tire monitoring devices via the wireless communication interface. Such fault messages may be received directly via the other tire monitoring devices or through a hub or access point. In this example, such fault messages are received without first being requested after the command is received in box 704. In other examples, fault messages may be received in response to a status query sent by the tire monitoring device to the other tire monitoring devices. If any fault messages are received, execution proceeds to box 714, where the processor uses an indicator to display the fault condition. For example, the fault indication may be the same as the fault indication used in box 708. In other examples, the fault indication may be different from the fault indication used in box 708, such as a second fault indication that flashes a red light for a predetermined period of time. By using the second fault indication, the tire monitoring device can indicate a fault in another tire, but signal that its own measured pressure is not low.

[0080] If no fault message is received at box 712, execution proceeds to box 716 where the processor provides an "OK" indication using the indicator. For example, by providing a continuous green light for a predetermined period of time. For example, the predetermined period of time may be 5 minutes, 2 minutes, 1 minute, or 30 seconds. In this way, an "OK" indication is given only if all tire monitoring devices have determined that the pressure of their associated tires is not low and they have not received a fault indication from other tire monitoring devices.

[0081] Finally, at box 718, in response to the command, the data of the measured tire pressure is transmitted to the control device. The data may include other information, such as stored reference pressures, determined states, and wheel positions. The transmission of additional information may enable verification of the correct operation of the tire monitoring device and a check that the configuration data stored in the storage device has not been changed or has been correctly set. The transmission made in box 718 may be sent directly to the control device 12, to another tire monitoring device 10 for continued routing, or to an access point or other wireless node.

[0082] use Figure 7 In a method, confirmation of the tire pressure status is provided by the tire monitoring device itself. A failure in any sensor causes all sensors to indicate a failure. In this way, the tire monitoring device can be authenticated according to the required DAL and / or SAL using the indication on the tire monitoring device itself without the need for additional authentication by the control device.

[0083] In other examples, instead, all tire monitoring devices may transmit their measured pressures to other tire monitoring devices instead of transmitting a fault indication at block 710. The received pressures may then be independently checked by each individual tire monitoring device to determine if a fault exists. This may prevent a fault in a sensor that does not indicate a low pressure condition, for example, if the stored reference pressure has been corrupted.

[0084] In other examples, the tire monitoring device may transmit a "normal" status notification when it is determined that the tire pressure is not low in block 706. Such an example may provide assurance that all sensors are operating properly because if data is not received from one of the other tire monitoring devices, this indicates that the tire monitoring device is malfunctioning or failing.

[0085] Although the above process describes the use of a general mobile device as the control device, the control device may also be a dedicated device provided only for use with a tire monitoring system or more generally with a vehicle. This may increase safety as greater control is enabled.

[0086] Although the above process describes the use of an indicator as a light, other examples may use other indicators such as a display and / or an audio component. For example, instead of simply displaying a continuous or flashing color, the display may also display information about the measured pressure itself. Where both an audio indicator and a visual indicator are provided, some indications may not use both audio and visual indicators at the same time. For example, a "normal" indication may use only a visual indicator, while an audio indicator is only activated in the event of a fault.

[0087] Controlling the flow of configuration instructions

[0088] Now refer to Figure 8 , publicly configured tire monitoring device such as Figure 2 A method for a tire monitoring device of the present invention. In the method, the tire monitoring device itself controls the flow of configuration data. This provides enhanced security because a malicious device has a shorter time window to inject incorrect configuration data.

[0089] The method begins at box 802, where the tire monitoring device receives a command to enter a configuration mode. In this example, the command is received from the configuration device using a short-range communication protocol, such as a protocol with a transmission range of 30 cm or less, such as NFC. This limits the possibility of the tire monitoring device entering the configuration mode, because the command must be provided nearby, thereby reducing the possibility of malicious or accidental reconfiguration. In addition, since only one tire monitoring device is within the range of the configuration device, the short distance enables the tire monitoring devices of adjacent wheels attached to the same axle to be distinguished. In other examples, the command to enter the configuration mode can be sent by another device such as a control device. If the command to enter the configuration mode is sent by the control device, the command can be sent by a short-range communication protocol such as NFC in the same manner as with respect to the configuration device. Alternatively, although a shorter distance can provide greater security, a longer distance communication protocol, such as a protocol that complies with the IEEE 802.11 or IEEE 802.15 standards, can also be used.

[0090] In other examples, the command to enter the configuration mode may be provided in other ways, such as by pressing a button provided on the tire monitoring device itself, although this may be less secure. The button may be a physical button that moves to register the input, or a capacitive or resistive button that detects a change in capacitance or resistance to register the input.

[0091] At block 804, the tire monitoring device enters a configuration mode. Although entering the configuration mode requires receiving an external command, the configuration or reconfiguration performed in the remaining blocks of the method is controlled by the tire monitoring device itself. Therefore, at block 806, the tire monitoring device transmits a request for configuration data to the second device. The request indicates that the second device should transmit the configuration data to the tire monitoring device. The second device may be Figure 3 control device or Figure 4 Which particular second device is used may depend on the particular circumstances, for example, the control device may provide general configuration data such as reference tire pressures, while the configuration device may provide more security sensitive data such as encryption keys for communicating with other tire monitoring devices. In other examples, all configuration data may be provided by the same device.

[0092] After sending the request for configuration data, the tire monitoring device waits to receive a response. In this example, a timer is started at box 808, which defines a timeout period after which the tire configuration device will exit the configuration mode. The timer can be set to any suitable predetermined time, such as 0.5 seconds, 1 second, 5 seconds, 10 seconds, 20 seconds, 30 seconds, or one minute, depending on the tradeoff between reliable reception of configuration data and minimizing the window for potential malicious or accidental reconfiguration.

[0093] At box 810, the tire monitoring device checks whether any configuration data has been received. If no configuration data has been received, execution proceeds to box 812, otherwise, if data has been received, execution proceeds to box 814.

[0094] At block 812, configuration data has not been received. A check is made to see if the timer started in block 808 has expired, if so, execution ends. Otherwise, execution returns to block 810 to check if configuration data has been received.

[0095] At block 814, the received configuration data is processed and used to configure the device. For example, the configuration data may include one or more of the following: a reference tire pressure (the reference tire pressure may be specified differently for different wheels, such as different reference pressures for the nose and main landing gear on a typical six-wheel aircraft); wheel positions of a tire monitoring device, such as a numeric or alphanumeric identifier that enables the position of the wheel to be determined; a vehicle identifier, such as an aircraft tail identifier; and compatibility data, such as data indicating software versions that are compatible with the configuration data.

[0096] Although Figure 8The method of FIG. 8 shows a single request for configuration data in block 806 and a single response with the configuration data processed in block 814, but in other examples, multiple requests and responses may occur. For example, the tire monitoring device may request each item of configuration data individually, or different items of configuration data may be requested from different devices in multiple transactions or in a single transaction with each different device.

[0097] Once the tire monitoring device is configured, the tire monitoring device provides confirmation to the second device that the configuration data has been received in block 816. This may be, for example, an acknowledgment of the configuration data or a confirmation that the configuration mode has ended. Execution then ends.

[0098] once Figure 8 The execution of the method ends, and the tire monitoring device may ignore, discard, or take no action in response to any configuration data received. This may enhance security and prevent malicious or accidental reconfiguration, because the tire monitoring device cannot be reconfigured unless the tire monitoring device is in configuration mode.

[0099] Figure 8 The method enables a tire monitoring system to operate with enhanced security to prevent accidental or malicious misconfiguration. The tire monitoring device may enter a configuration mode in response to a received command, but the configuration data itself is only processed after entering the configuration mode in response to a request sent by a time monitoring device. In this way, security is improved due to a small window for receiving configuration data.

[0100] In some examples, even when the tire monitoring device is in configuration mode, the tire monitoring device can reject configuration data that is not received in response to a request for configuration data sent by the tire monitoring device itself. For example, configuration data can only be received from the device that is requested to provide configuration data and not from other devices. This can further enhance security.

[0101] Distribute data between devices

[0102] Fig. 9 Describes the Figure 1A method for distributing data between devices used by a tire monitoring system. In this method, data is transmitted using short-range wireless communication, such as short-range wireless communication having a maximum transmission range of 30 cm or less. Other examples may have a maximum transmission range of 20 cm, 10 cm, 5 cm, 1 cm, or less. This provides enhanced security for important or sensitive data because the data cannot be easily intercepted and physical proximity is required for interception. However, this also brings challenges because the short communication distance makes direct device to device communication difficult, especially in situations where individual tire monitoring devices do not have a maximum communication range with each other. Fig. 9 In the method, an intermediate device is used to transmit data from a first device or source device to a second device or destination device. For example, both the source device and the destination device can be tire monitoring devices. Fig. 9 The method is useful for tire monitoring devices that are already mounted on the wheel because they are not easily moved relative to each other to a position closer than each other, such as closer than 30 cm, so that direct short-range communication can be used. Although longer-range communication can be used for communication between devices, this approach is less secure when the data to be transmitted is important or sensitive, such as encryption keys that may be intercepted.

[0103] At block 902, a first device or source device receives data or commands from a fourth device or control device. In this example, the source device is as described above with reference to Figure 2 The tire monitoring device discussed above and the control device are as described above with reference to Figure 3 Control device discussed. At box 904, the command or instruction causes the first device to prepare data for transmission to the destination device. The nature of the data depends on the nature of the command, data or instruction received at box 902. For example, it can be configuration data for transmission to another device, such as reference tire pressure, vehicle identifier, etc. It can also be security data, such as an encryption key for encrypting communications between tire monitoring devices in the system. For example, the command from the fourth device can cause the first device to generate a shared encryption key for use by the tire monitoring device to encrypt communications between them using a symmetric encryption algorithm such as AES.

[0104] At block 906, the first device transmits the data to a third device or an intermediate device. In this example, the third device is as described above with reference to Figure 4 The first device establishes communication with the third device via a short-range wireless communication interface, such as near field communication (NFC or RFID). For example, the wireless communication interface may have a range of 30 cm, 20 cm, 10 cm, 5 cm, 1 cm or less.

[0105] At block 908, the third device receives and stores the data transmitted by the first device. The data may be stored in any suitable storage device, including volatile storage devices and non-volatile storage devices, such as dynamic RAM or solid-state storage devices.

[0106] Next, at block 910, the third device is moved toward the second device, ie, the destination device, from which data is to be received. In this example, the third device is carried by a user, who may be instructed to move the third device close to the second device.

[0107] The third device can determine its location in the vicinity of the second device by successfully establishing wireless communication with the second device using a short-range wireless communication protocol. It then receives a request from the second device to transmit data and responsively transmits the data at box 912. The data has now been transmitted to the second device. At box 914, a check is performed as follows: whether there are any additional destination devices. For example, the same data may need to be distributed to all tire monitoring devices in the tire monitoring system. In that case, the third device is moved between those additional devices as needed, and steps 910 and 912 are repeated until there are no additional devices to which the data is to be distributed.

[0108] In the event that it is determined at box 914 that there are no additional destination devices, execution proceeds to box 916, where the third device erases the data stored in its storage device. This can be performed in any suitable manner, typically by rendering or making the stored data unreadable. For example, volatile memory can be stopped from being refreshed, non-volatile memory can be securely erased, such as by rewriting or changing encryption keys for the storage device, or the data can be marked as deleted, removed from a file allocation table, or otherwise made inaccessible. The exact manner in which the data is deleted will depend on the desired level of security. For example, the encryption key can be erased by overwriting it with new data multiple times or by changing the encryption key or the storage device storing the encryption key. Less sensitive data, such as tire reference pressures, can simply be marked as deleted. The process then ends.

[0109] In this example, after determining at block 914 that no additional destination devices exist, the data is erased in block 916. In other examples, the data may be rendered unreadable in response to shutting down the third device, which may inherently erase data in volatile memory, such as dynamic RAM. In other examples, alternatively or additionally, the data may be rendered unreadable in response to reaching a timeout period, such as 15 minutes, 10 minutes, or 5 minutes. This may ensure that important or sensitive data does not remain in the storage device for a long period of time, thereby minimizing the risk of important or sensitive data being extracted.

[0110] according to Fig. 9 In a method, a third device is used as an intermediary to transmit data between a first device and a second device using a short-range wireless communication protocol that does not enable direct communication between the first device and the second device. Unlike conventional wireless transmissions, the third device is physically moved between the first device and the second device. Data is not routed via intervening devices within the wireless communication range of each other. This further enhances security because the risk of data leakage by any intervening device is reduced. Fig. 9 The method also allows the fourth device or control device to coordinate the transmission of data without having to learn the transmitted data itself, which can provide additional security for the encryption key: the encryption key will only be known to the device that needs to use it and the third device, wherein the third device deletes the encryption key once it has been transmitted to all devices. This is useful in cases where it is desired that the control device is a standard computing device such as a smartphone or tablet, so that security cannot be guaranteed.

[0111] Now refer to Fig.10 , showing that it can be executed by the fourth device or control device to implement the above discussion Fig. 9 The method of the method. Fig.10 In the method, the control device can guide the transfer of data from one device to another without having to learn the data itself. This can enhance security, especially the security of sensitive data such as encryption keys.

[0112] First, at block 1002, the fourth device transmits data and / or commands to the first device or source device. For example, the first device may be as described above with reference to Figure 2 The tire monitoring device discussed above. A wireless communication interface with a relatively long transmission range, such as 100m, may be used to transmit the command. Figure 8 As discussed above, the transmission of data or commands from the fourth device to the first device may be controlled by the tire monitoring device. Fig. 9 As discussed in blocks 904 and 906 of , the data or command causes the first device to prepare data for transmission to the third device or intermediate device and transmit the data to the third device using the short-range wireless communication interface. Once the transmission to the third device is completed, the first device sends an acknowledgment to the fourth device using the long-range wireless communication interface. At block 1004, the fourth device receives the acknowledgment.

[0113] Next, at box 1006, the fourth device guides the third device to move toward the second device or the destination device. Guiding the movement can occur in a variety of ways. In this example, the control device displays text that guides the user to move the third device near the second device. In other examples, alternatively or additionally, relative to the display instructions, the movement can be guided via audio instructions. In the case of multiple possible destination devices, the control device can present options on the display for the user to select which destination device they will move the third device to. In other examples, the control device can automatically select the destination device without user input and guide the user to move the third device near the selected device.

[0114] Once the user moves the third device near the second device or the destination device, short-range wireless communication is established between the second device and the third device. As a result of establishing this communication, the second device sends a confirmation received at block 1008 to the fourth device or the control device using long-range wireless communication. Next, in response to receiving the confirmation, the control device sends a command or data to the second device to cause the second device to load the data stored in the third device. Then, at block 1010, the command causes the third device to transfer the data to the second device. When the transfer is complete, the second device sends a confirmation received at block 1012 to the control device using the long-range communication interface.

[0115] Next, at block 1014, a determination is made as to whether there are any additional destination devices. If there are additional destination devices, execution returns to block 1006 to direct the third device to move to the next destination device. Otherwise, execution ends.

[0116] Now refer to Fig.11 , showing that it can be Fig. 9 Flowchart of a process for a third device or an intermediate device used in the process of. In this example, the third device is as described above with reference to Figure 4 Configuration device discussed.

[0117] First, at block 1102, a third device or intermediate device establishes communication with a first device or source device. Fig. 9 As discussed, the communication is established via a short-range wireless communication interface. After the wireless communication is established, at block 1104, the third device receives and stores data from the first device. The data may be stored in a volatile storage device or a non-volatile storage device.

[0118] The third device now waits for it to be moved to a new location that is close to the second device or the destination device. At block 1106, with short-range wireless communication established with the second device, it is determined that the third device has moved to a new location. Next, at block 1108, the third device receives a request for data from the second device. In response, at block 1110, the third device transmits data to the second device. The data transfer from the first device to the second device is now complete.

[0119] At block 1112, it is determined whether there is another destination device to which data should be transmitted. If there is another destination device to which data should be transmitted, the process returns to block 1106, where communication is established with the destination device if the third device has moved into the short-range wireless communication range of the other destination device. Otherwise, the process continues to block 1114. In some examples, block 1112 may not be able to determine with certainty whether there is another destination device, and instead, a timeout may be implemented. For example, if a preset time period has passed without establishing communication with the other destination device, the third device may conclude that there is no other destination device. The preset time period may be, for example, 5 minutes, 4 minutes, 3 minutes, 2 minutes, 1 minute, or 30 seconds.

[0120] At block 1114, there is no longer a device to which the data is to be transferred, so the third device renders the data stored in its storage device unreadable. For example, the data may be deleted, erased, or rendered unreadable in any suitable manner, such as described above with reference to Fig. 9 The process then ends as discussed in block 916 of FIG.

[0121] Improved visibility of instructions on configuration devices

[0122] In execution Fig. 9 During the process, as mentioned above Figure 4 The described configuration device acts as a third device or intermediate device and moves between tire monitoring devices to transfer data between them. By their nature, tire monitoring devices may be located in relatively inaccessible locations, such as close to the ground or at least partially obscured from view depending on the wheel rotational position. Fig.12 An example of a configuration device 1200 is depicted that includes two visual indicators such that at least one visual indicator can be seen in most orientations of the device. This enhances the usability of using the configuration device in locations that are difficult to access.

[0123] Configuration device 1200 includes a button 1202 for powering on the device. In some examples, button 1202 can toggle between a power-off state and a power-on state. The configuration device can also automatically power off from the power-on state after a predetermined period of time, such as 5 minutes, 10 minutes, or 15 minutes. In the event that the configuration device enters the power-off state, any sensitive data, such as encryption keys and configuration data for transmission to the tire monitoring device, can be deleted or otherwise rendered unreadable or inaccessible.

[0124] The housing 1204 is provided with a first visual indicator 1206 having a primary viewing direction 1210 and a second visual indicator 1208 having a different primary viewing direction 1212 .

[0125] The first visual indicator 1206 is a screen, such as an LCD or LED display. The screen may provide a message or other information to the user, such as "Security Key is being transmitted - Do not move", or provide a visual indication of the data to be transmitted, such as the value of the reference pressure to be transmitted and the position identifier of the wheel to which the tire monitoring device is attached. In other examples, the current measurement values ​​from the tire monitoring device are indicated, such as the currently measured pressure and temperature. The first visual indicator 1206 is disposed on the first side of the housing. Depending on the location of the tire monitoring device, this visual indicator 1206 may not always be visible, because the short range of the wireless communication interface (30 cm or less) means that the configuration device must be located close to the tire monitoring device. In order to increase the likelihood that the user can observe the visual indication, a second visual indicator 1208 is provided on a different side of the tire monitoring device. The second visual indicator 1208 has a different viewing angle and can be visible when the first visual indicator 1206 is not visible.

[0126] The second visual indicator 1208 is a light, such as an LED. The second visual indicator can indicate a status, such as data transfer in progress, do not move, etc., by one or more of different colors, different intensities, and different flashing patterns. To help explain this, a legend or description can be provided on one side of the configuration device adjacent to the second visual indicator 1208, so that the legend or description can usually be seen at the same time as the second visual indicator 1208.

[0127] By providing two visual indicators with different viewing angles, a user of the configuration device can more easily determine feedback from the indicator even if one of the two visual indicators is obscured. Figures 9 to 11 This may be beneficial in the case of transferring data as discussed. In that case, the two indicators may be important to guide the user to keep the configuration device in contact with the tire monitoring device so that data transfer can occur.

[0128] Although referenced Fig.12 Two visual indicators are described, but other configurations may include more visual indicators as other visual indicators, such as additional visual indicators on additional sides of the housing 1204 or at different locations on the same side of the housing.

[0129] Although Fig.12 The example of has one visual indicator as a display and one visual indicator as a light, but other examples may have two screens or two lights. In the case where there are more than two visual indicators, any combination of lights and screens may be provided.

[0130] Another example may provide an indicator with an articulated screen that can be adjusted to a position that a user can view. For example, the screen may include an articulated mechanism with one degree of freedom (e.g., rotation about one axis) or two degrees of freedom (e.g., rotation about two perpendicular axes). Such an articulated screen may be used as the first visual indication 1206. Other examples may provide an articulated screen as a single visual indicator, wherein improved visibility is achieved by the range of movement of the articulated screen to different viewing angles.

[0131] Additional examples are defined in the following clauses:

[0132] Feature 1: A configuration device for a tire monitoring system, comprising:

[0133] Wireless communication interface;

[0134] a first visual indicator; and

[0135] A second visual indicator is positioned spaced apart from the first visual indicator such that the second visual indicator is visible from at least one viewing angle from which the first visual indicator is obstructed.

[0136] Feature 2: The configuration device of feature 1, wherein the second visual indicator is positioned on a different side of the configuration device than the first visual indicator.

[0137] Feature 3: The configuration device of feature 1 or 2, wherein the first visual indicator is oriented in a first direction and the second visual indicator is oriented in a second direction different from the first direction.

[0138] Feature 4: The configuration device of feature 1, 2 or 3, wherein the first visual indicator and the second visual indicator are configured to provide at least:

[0139] a first indication that the configuration device should maintain a position within a predetermined distance of the tire monitoring device; and

[0140] The configuration device may be removed to a second indication of a position beyond the predetermined distance.

[0141] Feature 5: The configuration device according to feature 4, wherein the predetermined distance is a maximum range of the wireless communication interface.

[0142] Feature 6: A configuration device according to Feature 5, wherein the maximum range is less than 30 cm.

[0143] Feature 7: The configuration device according to any of the preceding features, wherein at least one of the first visual indicator and the second visual indicator comprises a display screen.

[0144] Feature 8: The configuration device according to any of the preceding features, wherein at least one of the first visual indicator and the second visual indicator comprises a light.

[0145] Feature 9: The configuration device according to any of the preceding features, wherein at least one of the first visual indicator and the second visual indicator comprises an articulated display screen.

[0146] Feature 10: A configuration device for a tire monitoring system, comprising:

[0147] wireless communication interface; and

[0148] An articulated display screen having at least one degree of freedom such that the articulated display screen can be positioned such that a primary viewing angle of the display screen is adjustable.

[0149] It should be noted that the term "or" used herein should be interpreted as meaning "and / or" unless explicitly stated otherwise.

[0150] The above examples should be understood as illustrative examples of the present invention. It should be understood that any feature described with respect to any one example can be used alone or in combination with other features described, and can also be used in combination with one or more features of any combination of any other example in the example or any other example in the example. In addition, without departing from the scope of the present invention as defined by the appended claims, equivalents and modifications not described above may also be adopted.

Claims

1. A method for use by an aircraft tire monitoring system to copy data from a first tire monitoring device to a second tire monitoring device, the first tire monitoring device and the second tire monitoring device each including a wireless communication interface having a maximum range, wherein: The distance between the first tire monitoring device and the second tire monitoring device is greater than the maximum range, and the method includes: transmitting, by the first tire monitoring device, the data to an intermediate device positioned within a maximum range of the first tire monitoring device; receiving the data at the intermediate device and storing the data in a memory of the intermediate device; moving the intermediate device to a physical location within maximum range of the second tire monitoring device; and The data is transmitted by the intermediate device to the second tire monitoring device.

2. The method according to claim 1, wherein: The data is copied to one or more further devices, the method comprising: For each of the one or more further devices, the intermediate device is moved to a physical location within a maximum range of the corresponding further device, and the data is transmitted by the intermediate device to the corresponding further device using a wireless communication interface.

3. The method according to claim 1 or 2, wherein: The maximum range is less than 30 cm.

4. The method according to claim 1, comprising: After the transmitting to the second tire monitoring device, the data in the memory of the intermediate device is rendered unreadable.

5. The method according to claim 4, wherein: Rendering the data unreadable is responsive to shutting down the intermediary device.

6. The method according to claim 4, wherein: Rendering the data unreadable is responsive to determining that a predetermined period of time has elapsed since the data was received by the intermediary device.

7. The method according to claim 1 or 2, wherein: The data includes configuration information.

8. The method according to claim 1 or 2, wherein: The data includes an encryption key.

9. The method according to claim 7, wherein: The configuration information is received by the first tire monitoring device from a fourth device.

10. The method according to claim 8, wherein: The method comprises: The encryption key is generated by the first tire monitoring device after receiving the configuration data from the fourth device.

11. The method according to claim 8, wherein: The method comprises: The encryption key is generated by the first tire monitoring device in response to a command received from a fourth device.

12. The method according to claim 9, 10 or 11, wherein: Communications between the first tire monitoring device and the intermediate device use a first wireless communication interface, and communications between the first tire monitoring device and the fourth device use a second wireless communication interface having a greater maximum range than the first wireless communication interface.

13. The method according to claim 10 or 11, comprising: The fourth device provides instructions to direct the intermediate device to move from the first tire monitoring device to the second tire monitoring device after the first tire monitoring device transmits the encryption key.

14. An aircraft tire monitoring system, comprising a first tire monitoring device, a second tire monitoring device, and an intermediate device, wherein the first tire monitoring device, the second tire monitoring device, and the intermediate device each comprise a wireless communication interface and a processor, wherein: The system is configured to implement the method of any one of claims 1 to 8.

15. The aircraft tire monitoring system according to claim 14, further comprising a fourth device, the fourth device comprising a wireless communication interface and a processor, wherein: The system is configured to implement the method of any one of claims 9 to 13.

16. A method for distributing data among a plurality of tire monitoring devices for use by an aircraft tire monitoring system, each tire monitoring device including a wireless communication interface having a maximum transmission range, wherein: The plurality of tire monitoring devices are spaced apart from each other by a distance greater than the maximum transmission range, and the method comprises, at a control device: causing the first tire monitoring device to transmit the data to be distributed to the intermediate device using the wireless communication interface; directing the intermediate device to move within a maximum transmission range of a second tire monitoring device; as well as In response to the intermediate device having moved into a maximum transmission range of the second tire monitoring device, the data is caused to be transmitted from the intermediate device to the second tire monitoring device.

17. A control device for an aircraft tire monitoring system, the control device comprising: Wireless communication interface; monitor; as well as A processor configured to implement the method of claim 16.

18. A method for use by an aircraft tire monitoring system to distribute data among a plurality of tire monitoring devices using an intermediate device, the tire monitoring devices and the intermediate device each comprising a wireless communication interface having a maximum transmission range, wherein: The plurality of tire monitoring devices are spaced apart from each other by a distance greater than the maximum transmission range, the method comprising, at an intermediate device: receiving, at the intermediate device, data from the first tire monitoring device using a wireless communication interface; storing the data in a memory of the intermediate device through the intermediate device; moving the intermediate device into a maximum transmission range of a second tire monitoring device; transmitting the data to the second tire monitoring device via the intermediate device; as well as After transmitting the data to the second tire monitoring device, the data is erased from the memory of the intermediate device.

19. An intermediate device for an aircraft tire monitoring system, the intermediate device comprising: Wireless communication interface; as well as A processor configured to implement the method of claim 16.

20. A method for use by an aircraft tire monitoring system for distributing a cryptographic key from a first tire monitoring device to a second tire monitoring device, the method comprising: transmitting, by the first tire monitoring device, a cryptographic key for communication between the first tire monitoring device and the second tire monitoring device to an intermediate device using a wireless communication interface having a transmission range of less than 30 cm; receiving the cryptographic key at the intermediate device and storing the cryptographic key in a memory of the intermediate device; transmitting, by the intermediate device, the cryptographic key to the second tire monitoring device using a wireless communication interface having a transmission range of less than 30 cm; as well as After the transmitting to the second tire monitoring device, the cryptographic key is erased from a memory of the intermediate device by the intermediate device.

Images