A method for monitoring and emergency handling of pilot abnormal operation

Abstract

The application discloses a kind of pilot abnormal operation monitoring and emergency disposal method, with great advantage and potential in the field of aircraft system design.The method of the application is used to monitor aircraft system and pilot operation data, and to determine pilot abnormal operation according to the relationship between aircraft flight state and pilot input control, so as to monitor pilot from operation rationality.When the algorithm determines that the pilot is performing abnormal operation, the integrity of the aircraft system will be automatically analyzed, and an abnormal early warning message will be automatically sent to the ground control through the "controller-pilot data communication link", thereby providing the ground control personnel with accident warning and real-time data of the aircraft.Meanwhile, when the method detects abnormal operation, it will automatically disconnect the pilot's abnormal operation instruction, and according to the availability analysis result of the aircraft system, it will evaluate and select the autonomous homing mode, or control the aircraft to return through the ground remote control.

Description

TECHNICAL FIELD

[0001] The present application belongs to the field of aircraft design and aircraft system design, and particularly relates to a pilot abnormal operation monitoring and emergency handling method. BACKGROUND

[0002] The operation safety of civil aviation aircraft has always been the focus of the world. Once a safety accident occurs, it will affect the safety of hundreds of people. Since the industry was born, various methods and measures have been sought by countries around the world to improve flight safety. So far, these methods and measures are almost all formulated for the reliability of aircraft hardware or software system operation; and the pilot, as the most core element of flight safety, has always been considered "absolutely reliable". However, major aviation accidents still occur.

[0003] It has become an indisputable fact that the behavior and rights of pilots, as the most core element of controlling the safety of the whole aircraft, need to be monitored and restricted. Airlines have also proposed response means, including: ground investigation and guidance of pilot psychology; three-person crew during flight; and no single pilot left in the cockpit. The above measures can to some extent avoid abnormal operation due to pilot disability and pilot psychological disease, thereby avoiding flight safety accidents caused by pilot factors. However, these measures also have their deficiencies and limitations:

[0004] 1. The three-person crew will significantly increase the operating cost of the airline. In the past, the three-person crew was mainly used because the aircraft itself was low in reliability and complicated to operate, and the three-person crew could better operate the aircraft. However, the reliability, safety and operation convenience of modern aircraft are already very high, and restoring the three-person crew cannot reduce the pilot's operating burden, and will greatly increase the operating cost. In the current aviation industry, the three-person crew solution will have an adverse effect on airline operations and crew treatment, and will have a counterproductive effect on protecting the health of pilots.

[0005] 2. Some airlines require that at any time, there is at least one pilot and cabin crew in the cockpit. However, historical accidents have shown that as long as there is a fight in the cockpit, it is easy to cause a flight accident. In addition, flight operations are extremely professional, and cabin crew are difficult to determine whether the pilot is normal operation or indeed encounters an emergency, and whether the pilot should be stopped.

[0006] 3. Some aviation accidents are caused by the pilot himself, and there is currently a lack of methods that can clearly prove the abnormal operation of the pilot and means to restrict the operation authority of the pilot. It is difficult to effectively avoid accidents through mutual restraint between the crew. Therefore, after an aviation accident occurs, due to the lack of effective evidence, it is difficult for the existing various methods to effectively define the root cause and responsibility of the accident. SUMMARY

[0007] In view of the above problems, the present application provides a pilot abnormal operation monitoring and emergency handling method, which monitors the aircraft system state and pilot operation input, and determines in real time whether the pilot operation is abnormal during flight. When abnormal operation symptoms or abnormal operation have occurred, the abnormal operation data is sent to the ground control center, and the pilot's operation is restricted in authority, and even the aircraft is taken over, so as to ensure flight safety.

[0008] A pilot abnormal operation monitoring and emergency handling method, the specific steps are as follows:

[0009] Step 1: Monitor the aircraft system and pilot operation data during the flight of the aircraft. The aircraft system includes an atmospheric data system, an inertial navigation system, an engine system, a fire alarm system, a flight control system, an automatic flight system, an integrated monitoring system, and a power supply system. The pilot operation includes main flight operation input, auxiliary flight operation input, and engine operation.

[0010] Step 2: Determine the abnormal operation by receiving the data in step 1 in real time, according to the flight state of the aircraft, and combining the abnormal maneuver in a smooth flight environment, ignoring the alarm information, abnormal closing of the engine, abnormal disconnecting of the communication system, and abnormal disconnecting of the flight recording system.

[0011] Step 3: System integrity analysis and abnormal early warning.

[0012] When the abnormal operation is detected in step 2, further monitor the power supply state and working state of the aircraft system in step 1 in real time, evaluate the integrity and availability of the aircraft system, and determine whether the aircraft can perform autonomous homing. Further, automatically send an abnormal early warning message to the ground control through the controller-pilot data communication link.

[0013] Step 4: Emergency handling control instruction switching; according to the abnormal determination result and early warning state of steps 2 and 3, automatically disconnect the abnormal operation instruction of the pilot, and according to the evaluation result of the availability of the aircraft system, determine the emergency handling control instruction as the autonomous homing mode or the ground remote control aircraft return mode.

[0014] The present application has the following advantages:

[0015] 1. The pilot abnormal operation monitoring and emergency handling method of the present application monitors flight environment data, aircraft system status, and pilot operation input, and when abnormal operation or abnormal operation symptoms occur, automatically issues a pre-warning to ground control and saves the corresponding operation evidence.

[0016] 2. The pilot abnormal operation monitoring and emergency handling method of the present application uses on-board online judgment, and only when it is determined that the pilot has abnormal operation, the data is transmitted to the ground control, which can meet the needs of ground control monitoring and saving abnormal operation data, and does not need to occupy the air-ground data link bandwidth for a long time and in a large range.

[0017] 3. The pilot abnormal operation monitoring and emergency handling method of the present application, when abnormal operation is determined, the system automatically restricts the pilot's authority, and the system enters an automatic driving state or performs ground remote manual takeover to ensure flight safety.

[0018] 4. The pilot abnormal operation monitoring and emergency handling method of the present application, when abnormal operation symptoms occur but do not cause consequences, the accident evidence data can be used to timely find the problem pilot and perform psychological counseling and flight control to avoid further expansion of the problem.

[0019] 5. The pilot abnormal operation monitoring and emergency handling method of the present application, for accidents that cannot be recovered, since the relevant accident evidence is retained, it is convenient for subsequent responsibility definition; and since the accident responsibility can be accurately defined, it is a kind of deterrent to the pilot who has such dangerous ideas, thereby avoiding his dangerous actions that endanger flight safety.

[0020] BRIEF DESCRIPTION OF DRAWINGS

[0021] Figure 1 is a flow chart of the pilot abnormal operation monitoring and emergency handling method of the present application;

[0022] Figure 2 is an emergency handling control instruction switching logic diagram. DETAILED DESCRIPTION

[0023] The present application will be further described in detail below in conjunction with the drawings.

[0024] The pilot abnormal operation monitoring and emergency handling method of the present application, as shown in Figure 1 , includes a flight data monitoring part, a flight abnormality judgment part, and a flight abnormality warning part, which are integrated in an abnormality monitoring system and automatically run after the aircraft takes off. On the aircraft, the abnormality monitoring system does not have any displayed operation interface, and the pilot cannot manually turn off the system.

[0025] ​The flight data monitoring part mainly monitors the aircraft system and pilot operation data during the flight of the aircraft, and the specific monitoring data are as follows:

[0026] A. The aircraft systems and data to be monitored include:

[0027] a1. The atmospheric data system, and the monitored data include: wind speed, wind direction, static temperature, total temperature, barometric altitude, static pressure, dynamic pressure and climb rate.

[0028] a2. The inertial navigation system, and the monitored data include: aircraft position, inertial altitude, three-axis attitude angle and angular rate, three-axis acceleration, heading and track.

[0029] a3. The engine system, and the monitored data include: engine operating state, engine speed, exhaust temperature, oil temperature, oil quantity, oil pressure and engine vibration.

[0030] a4. The fire alarm system, and the monitored data include: engine, APU, cockpit, cargo compartment and wheel compartment fire alarm states.

[0031] a5. The flight control system, and the monitored data include: elevator, rudder, aileron, high-lift, spoiler and other aerodynamic surface positions.

[0032] a6. The automatic flight system, and the monitored data include: flight guidance instructions, automatic pilot working mode, automatic pilot instructions;

[0033] a7. The integrated monitoring system, and the monitored data include: traffic warning information, terrain warning information, weather radar system wind shear and turbulence information.

[0034] a8. The power supply system, and the monitored data include: flight recorder system, communication system, air conditioning system, navigation system, engine system, anti-icing system power supply and circuit breaker state.

[0035] B. The pilot operation and data to be monitored include:

[0036] b1. The main flight operation input, and the monitored data include: the positions of the primary and secondary pilots' pitch, roll and rudder operation mechanisms.

[0037] b2. The auxiliary flight operation input, and the monitored data include: the positions of the flap, trim switch, landing gear and spoiler operation mechanisms.

[0038] b3. Engine operation, and the monitored data include: the positions of the thrust supply handle and the thrust handle.

[0039] Based on the real-time monitoring of the aircraft system data by the flight data monitoring part in combination with the pilot operation data, the flight abnormality determination part determines whether the pilot has performed abnormal operation.

[0040] Abnormal operation situations are divided into the following categories:

[0041] (1) Abnormal maneuver in smooth flight environment.

[0042] When the monitoring data meets the following conditions at the same time, it is determined that the abnormal maneuver in smooth flight environment occurs:

[0043] 101. The air data system data shows that the wind speed and direction remain smooth;

[0044] 102. The weather radar system does not show wind shear or turbulence information;

[0045] 103. The flight control system shows that the positions of the elevator, rudder, aileron, high-lift, spoiler, etc. aerodynamic surfaces are in normal state;

[0046] 104. In the non-autopilot stage, the main flight control input shows that the pilot has input instructions exceeding the normal control threshold required to control the aircraft, and the instruction direction has not controlled the aircraft to recover smooth flight;

[0047] 105. In the non-autopilot stage, the aircraft attitude deviates from the flight control computer's flight guidance instructions, and the monitored flight operation data shows that the pilot has not made corrections;

[0048] (2) Ignoring warning information for operation.

[0049] When the monitoring data meets the following conditions at the same time, it is determined that the pilot ignores the warning information for operation:

[0050] 201. The monitoring data shows that the aircraft engine is working normally, and all operating surfaces are working normally;

[0051] 202. When the near-ground warning prompt appears, the pilot does not perform the pull-up operation;

[0052] 203. When the near-ground warning prompt appears, the pilot still controls the aircraft to descend;

[0053] 204. The monitoring data shows that the pilot's input operation makes the near-ground warning prompt level heavier.

[0054] (3) Abnormal engine shutdown

[0055] When the monitoring data meets the following conditions at the same time, it is determined that the pilot may abnormally shut down the engine:

[0056] 301. The aircraft is in the air, and the engine high-pressure rotor and low-pressure rotor speed, exhaust temperature, engine vibration value, and oil parameter are within the normal range;

[0057] 302. No fire warning for the engine;

[0058] 303, the oil supply handle is turned off.

[0059] (4) Abnormal disconnecting communication system

[0060] When the monitored data meets the following conditions at the same time, the pilot is determined to have possibly disconnected the communication device abnormally:

[0061] 401, the aircraft is in the air;

[0062] 402, the communication device circuit breaker is pulled out and not reinserted within a specified time.

[0063] (5) Abnormal disconnecting flight recording system.

[0064] When the recorded data meets the following conditions at the same time, the pilot is determined to have possibly disconnected the flight recorder abnormally:

[0065] 501, the aircraft is in the air;

[0066] 502, the flight recorder circuit breaker is pulled out and not reinserted within a specified time.

[0067] When the flight abnormality detection part detects abnormal operation, the flight abnormality warning system also monitors the state of the power circuit breaker of each system according to the flight data monitoring part, evaluates the integrity and availability of the aircraft system, i.e. whether each system is in a powered state, generates a report on the integrity and availability of the aircraft system, and determines whether the aircraft can perform autonomous homing; further, the flight abnormality warning part automatically sends an abnormal warning message to the ground control through the "controller-pilot data communication link".

[0068] The warning message contains 3 parts:

[0069] ① Abnormal operation type, i.e. the type of abnormal operation determined by the flight abnormality determination part.

[0070] ② Abnormal operation data, i.e. the flight state data and pilot operation input data recorded in step 1 are sent to the ground for data monitoring and backup by ground control personnel until the aircraft lands.

[0071] ③ Aircraft system integrity and availability report, providing the current available systems of the aircraft and whether it can perform autonomous homing.

[0072] The determination of whether the aircraft can perform autonomous homing requires that the monitored data meet the following conditions at the same time, otherwise it is determined that the aircraft cannot perform autonomous homing.

[0073] A, the aircraft control system data is normal;

[0074] B, the aircraft engine system data is normal;

[0075] C. Automatic flight system data is normal;

[0076] D. Inertial navigation system data is normal

[0077] E. Integrated monitoring system data is normal

[0078] The above system data is normal, i.e., does not exceed the limits of the standard flight manual.

[0079] When the aircraft is flying normally, the aircraft flight control computer can simultaneously receive pilot control instructions, automatic pilot instructions and emergency handling instructions sent remotely from the ground, and switch between the instructions through the "manual / automatic / emergency instruction module" (integrated in the flight control system). If the automatic pilot is not connected, the "manual / automatic / emergency instruction module" switches the control instructions to the pilot control instructions, and outputs the pilot control lever, throttle table and other control mechanism instruction data to the aircraft control system actuator to control the aircraft manual flight. After the automatic pilot is connected, the "manual / automatic / emergency instruction module" switches the control instructions to the automatic pilot instructions, and outputs the automatic pilot instructions of the automatic pilot system to the aircraft control system actuator to control the aircraft flight. When the ground control receives an abnormal early warning message, it sends an emergency handling control instruction to the aircraft flight control computer, and the "manual / automatic / emergency instruction module" switches the control instructions to the emergency handling control instructions, cuts off the pilot's manual input, and controls the aircraft to return by executing the emergency handling control instructions.

[0080] As shown in Figure 2 , the emergency handling control instructions include automatic pilot homing instructions and ground remote control instructions; both instructions are judged by the ground control according to the early warning message received in step 3, and are converted according to the judgment result, as follows:

[0081] If the ground control determines that the aircraft can perform autonomous homing in the early warning message, the emergency handling control instruction at this time is the homing instruction, which is output to the automatic pilot system, which calculates the closest landing airport from the current position and controls the aircraft to return. If the ground control determines that the aircraft cannot perform autonomous homing in the early warning message, the emergency handling control instruction will be converted to a ground remote control instruction, and the ground control personnel can remotely control the aircraft to return in a manner similar to controlling a drone.

Claims

1. A method of pilot abnormal operation monitoring and emergency handling, characterized by: The steps are designed as: Step 1: monitoring aircraft system and pilot operation data during the flight of the aircraft, wherein the aircraft system includes an air data system, an inertial navigation system, an engine system, a fire warning system, a flight control system, an automatic flight system, an integrated monitoring system, and a power supply system; the pilot operation includes main flight operation input, auxiliary flight operation input, and engine operation; Step 2: determining abnormal operation by real-time receiving each data in step 1, according to the flight state of the aircraft, combining the abnormal maneuver in the smooth flight environment, ignoring the operation of the warning information, abnormally closing the engine, abnormally disconnecting the communication system, and abnormally disconnecting the flight record system; Step 3: system integrity analysis and abnormal early warning; When the abnormal operation is detected in step 2, further monitoring the power supply state and working state of the aircraft system in step 1 in real time, evaluating the integrity and availability of the aircraft system, and judging whether the aircraft can perform autonomous homing; further automatically sending an abnormal early warning message to the ground control through the controller-pilot data communication link; Step 4: emergency handling control instruction switching; according to the abnormal determination result and the early warning state of steps 2 and 3, automatically disconnecting the abnormal operation instruction of the pilot, and according to the evaluation result of the availability of the aircraft system, determining the emergency handling control instruction as the autonomous homing mode or the ground remote control aircraft return mode.

2. The method of monitoring and emergency handling of abnormal operation of a pilot according to claim 1, characterized in that: In step 2, the abnormal operation and determination method are: (1) When the monitoring data simultaneously meet the following conditions, it is determined that there is an abnormal maneuver in the smooth flight environment:

101. The air data system data shows that the wind speed and direction remain stable; 102. The weather radar system does not prompt wind shear or turbulence information; 103. The flight control system displays that the positions of the elevator, rudder, aileron, high-lift, spoiler, etc. are in normal state; 104. In the non-automatic driving stage, the main flight control input shows that the pilot has input an instruction that exceeds the normal control threshold required for the aircraft, and the instruction direction does not control the aircraft to recover smooth flight; 105. In the non-automatic driving stage, the aircraft attitude deviates from the flight control computer given flight instruction, and the monitoring flight operation data shows that the pilot does not correct it; (2) When the monitoring data simultaneously meet the following conditions, it is determined that the pilot ignores the warning information for operation:

201. The monitoring data show that the aircraft engine is working normally, and each operation surface is working normally; 202. When the near-ground warning prompt appears, the pilot does not perform the pull-up operation; 203. When the near-ground warning prompt appears, the pilot still controls the aircraft to descend; 204. The monitoring data show that the pilot input operation makes the near-ground warning prompt level heavier; (3) When the monitoring data simultaneously meet the following conditions, it is determined that the pilot may abnormally shut down the engine:

301. The aircraft is in the air, the engine high-pressure rotor and low-pressure rotor speed, exhaust temperature, engine vibration value, and oil parameter are in the normal range; 302. There is no engine fire warning; 303. The oil supply handle is turned off; (4) When the monitoring data simultaneously meet the following conditions, it is determined that the pilot may abnormally disconnect the communication equipment:

401. The aircraft is in the air; 402. The communication equipment circuit breaker is pulled out and not reinserted within a specified time; (5) When the recorded data meets the following conditions simultaneously, the algorithm determines that the pilot may have abnormally disconnected the flight recorder:

501. The aircraft is in the air; 502. The flight recorder circuit breaker is pulled out and not reinserted within a specified time.

3. The method of monitoring and emergency handling of abnormal operation of a pilot according to claim 1, characterized in that: The determination method for whether the aircraft can perform self-homing is: The monitoring data meets the following conditions simultaneously, otherwise, it is determined that the aircraft cannot perform self-homing; A. The aircraft control system data is normal; B. The aircraft engine system data is normal; C. The automatic flight system data is normal; D. The inertial navigation system data is normal; E. The integrated monitoring system data is normal.

4. The pilot abnormal operation monitoring and emergency handling method according to claim 1, characterized in that: The early warning message contains three parts, respectively: ① The type of abnormal operation determined by the flight abnormality determination part; ② The flight state data and pilot operation input data recorded in step 1; ③ The aircraft system integrity and availability report.

5. The method of monitoring and emergency handling of abnormal operation of a pilot according to claim 1, characterized in that: When the aircraft is flying normally, the aircraft flight control computer simultaneously receives the pilot control command, the automatic pilot command and the emergency handling command sent by the ground remotely, and switches between the commands through the manual / automatic / emergency command module.

Images