Aircraft seat control unit

Abstract

The invention relates to an aircraft seat control unit for an aircraft seat (10), comprising a functional circuit unit (14) having at least one functional circuit (16, 18, 20, 22) for controlling the aircraft seat (10), and a communication circuit unit (24), the communication circuit unit (24) has at least one communication circuit (28) and is designed to communicate with at least one external control unit (26). According to the invention, the communication circuit unit (24) is designed at least separately from the functional circuit unit (14) in terms of software technology, and the functional circuit unit (14) is designed to monitor the communication circuit unit (24).

Description

Technical Field

[0001] The invention relates to an aircraft seat control unit according to the preamble of claim 1 . Background Art

[0002] An aircraft seat control unit for an aircraft seat has been proposed, which has a function circuit unit having at least one function circuit for controlling the aircraft seat and a communication circuit unit having at least one communication circuit and being provided for communicating with at least one external control unit. Summary of the invention

[0003] In particular, the object of the invention is to provide a universal device with improved properties in terms of safety. This object is achieved according to the invention by the features of claim 1, while advantageous embodiments and developments of the invention can be derived from the dependent claims.

[0004] The invention relates to an aircraft seat control unit for an aircraft seat, comprising a functional circuit unit having at least one functional circuit for controlling the aircraft seat and a communication circuit unit having at least one communication circuit and being configured to communicate with at least one external control unit.

[0005] It is proposed that the communication circuit unit is at least software-technically separated from the functional circuit unit, and the functional circuit unit is configured to monitor the communication circuit unit. An "aircraft seat control unit" should be understood as a control unit that is configured to control an aircraft seat, wherein the input for controlling the aircraft seat can be performed by a passenger or a staff member. The "control of an aircraft seat" should preferably be understood as the control and actuation of electrical and / or electronic components of an aircraft seat, such as actuators, screens, or other components that are considered reasonable by a person skilled in the art. The "control of an aircraft seat" should be understood, for example, as the control of the lighting of an aircraft seat, the control of a massage unit of an aircraft seat, the control of the seat heating of an aircraft seat, the control of the door lock of a door separating the seat area of ​​an aircraft seat from the aisle of the cabin, the control of a privacy protection element, and / or the movement, control, and / or monitoring of other seat components. Here, an "aircraft seat" should be understood as a seat, especially an aircraft passenger seat, which is arranged in an aircraft cabin and in this case preferably stands upright on the cabin floor of the aircraft cabin. An aircraft seat provides a seat for a passenger during flight. A "functional circuit unit" is preferably understood to mean a unit having at least one electronic functional circuit, wherein each functional circuit of the functional circuit unit preferably has a specific function, wherein in principle a function can also be assigned to a plurality of functional circuits. Here, a "functional circuit" is particularly understood to mean a circuit that is provided for controlling a specific function or a specific range of functions of an aircraft seat. The functional circuits each have at least one computer chip. The functional circuit unit is provided to execute an operating program that is provided for controlling an aircraft seat. An operating program for controlling an aircraft seat is operated on the functional circuit unit or on the functional circuit, which outputs corresponding control signals to the elements of the aircraft seat to be controlled. A "communication circuit unit" is understood to mean a circuit unit that has at least one communication circuit that is provided to accept a connection to an external control unit, receive control signals and forward them to the functional circuit unit. At least one communication circuit of the communication circuit unit is preferably provided for wireless communication and wired communication with an external control unit.

[0006] An "external control unit" should be understood as a unit separated from the aircraft seat, such as a tablet computer, a smart phone or other input device, which is configured separately from the aircraft seat, wherein the external control unit can also be part of the aircraft cabin or the aircraft seat area. The external control unit should preferably also be understood as a control or input device, which is part of the aircraft cabin or the aircraft seat area, such as an input device for the personnel on board, or an input device for the in-flight entertainment system (IFE), which also includes a touch screen arranged in the aircraft seat area. "Separated in software technology" should be understood as different operating programs being operated on separately configured circuit units. On two circuit units configured separately in software technology, operating programs that are independent of each other are executed during one operation. The circuit units configured separately in software technology are arranged to operate independent and independent operating programs on them. Functional circuit monitoring of the communication circuit should be understood as whether the functional circuit monitors the operating program running on the communication circuit without error. In particular, the functional circuit is arranged to detect tampering and / or errors in the operating program running on the communication circuit. "Tampering" should preferably be understood as an unauthorized access attempt from an external device or by malware running on a communication circuit. The operating program operated on the functional circuit unit is preferably constituted as a trusted ("trusted") operating program for approval requirements (e.g., EASA CS-25), which represents a safe area and is fully monitored. The operating program operated on the functional circuit unit is preferably authenticated according to DAL D corresponding to the specification RTCA DO 178. The operating program operated on the communication circuit unit is preferably constituted as an untrusted ("untrusted") operating program for approval requirements (e.g., EASA CS-25), which represents an area that is not necessarily monitored, wherein the operating program may contain unapproved elements. An untrusted ("untrusted") operating program can be advantageously upgraded cost-effectively because it is not approved. The operating program operated on the communication circuit unit is preferably authenticated according to DAL E corresponding to the specification RTCA DO 178. "Setting" should be particularly understood as special programming, design and / or equipment. Setting an object for a specific function should be understood in particular to mean that the object realizes and / or performs the specific function in at least one application and / or operating state. By means of the design according to the invention, a safe and easily updateable aircraft seat control unit for communicating with external devices can be advantageously provided. Preferably, the communication circuit unit can be designed in particular such that it can be easily and quickly updated without having to update the functional circuits of the functional circuit unit, thereby advantageously reducing the certification effort.By means of the embodiment according to the present invention, low certification costs and shorter project run times can be advantageously achieved when certifying operating programs executed on corresponding circuits.

[0007] Furthermore, it is proposed that the functional circuit unit is arranged to monitor a communication interface between the functional circuit unit and the communication circuit unit. A "communication interface" is preferably to be understood as an interface between the functional circuit unit and the communication circuit unit, via which data is exchanged. The communication interface can be designed, for example, as a bus interface, i.e. as a data bus. In principle, it is also conceivable that the communication interface is formed by a serial interface or a binary pin. Monitoring the communication interface by the functional circuit unit is to be understood as meaning that the functional circuit unit monitors data sent via the communication interface, in particular from the communication circuit unit to the functional circuit unit, and checks for errors and manipulations. As a result, manipulation attempts at the aircraft seat control can be particularly easily detected.

[0008] Furthermore, it is proposed that the functional circuit unit is arranged to at least partially disconnect the communication circuit unit and / or prohibit data exchange between the communication circuit unit and the functional circuit unit via the interface when tampering with the communication circuit unit or the communication interface is detected. "Detection of tampering" should preferably be understood as recognition of tampering by monitoring the communication circuit unit or the communication interface, such as tampering by unauthorized external devices or malicious software without permission. "At least partially disconnecting" should be understood as prohibiting at least one access possibility, in particular data transmission from an external device to the communication circuit unit. In principle, it is also conceivable to completely deactivate the communication circuit unit. In this way, unauthorized access or tampering with the seat control can be advantageously prevented.

[0009] Furthermore, it is proposed that the communication circuit unit is configured as a printed circuit board that is configured separately from the functional circuit unit, and the printed circuit board is directly connected to the functional circuit unit via a bus. The interface can be formed, for example, by a bus interface, a serial interface, or other interfaces that are considered reasonable by a person skilled in the art. Thus, the communication circuit unit can be configured particularly easily.

[0010] In addition, it is proposed that the communication circuit unit has at least one transmitting and / or receiving module, which is arranged for wireless communication and / or wired communication. "Transmitting and / or receiving module" should preferably be understood as such a module, which has at least one transmitting and receiving unit for wireless communication, such as an antenna, and the transmitting and receiving unit is arranged to transmit and receive signals according to the 1EEE standard 802.15.4. The transmitting and / or receiving module is preferably configured as a Bluetooth module, a W-LAN module or a Zigbee module. Preferably, the transmitting and / or receiving module has a transmitting and receiving unit for wired communication, and the transmitting and receiving unit has at least one interface configured as a plug connector, through which the corresponding cable for wireless communication can be connected. It should be understood that the transmitting and / or receiving module is arranged for wired and / or wireless communication, and the transmitting and / or receiving module can not only have a transmitting and receiving unit for wireless communication and a transmitting and receiving unit for wired communication, but also can each have only one of the two transmitting and receiving units. Thus, the communication circuit unit can be particularly advantageously configured for wireless communication.

[0011] Furthermore, it is proposed that the communication circuit unit and the functional circuit unit are accommodated in a common housing. A "common housing" is preferably understood to mean a housing which at least substantially, preferably completely, encloses both the functional circuit unit and the communication circuit unit and protects the functional circuit unit and the communication circuit unit from external manipulation. As a result, the aircraft seat control unit can be designed to be particularly compact and tamper-proof.

[0012] Furthermore, it is proposed that the operating program running on the communication circuit unit is designed as an untrusted operating program and is certified in particular according to DALE. An "untrusted operating program" is preferably to be understood as an operating program which is considered untrusted with respect to approval requirements (e.g. EASA CS-25) because it may contain unapproved program elements. An untrusted operating program represents an area that is not necessarily monitored. Certification according to "DALE" is to be understood as certification of an operating program according to specification RTCA DO 178. As a result, the operating program for the communication circuit unit can be updated particularly easily and without extensive certification work.

[0013] A method for operating an aircraft seat control unit using an operating program for controlling an aircraft seat running on a functional circuit unit and using an operating program for external communication running on a communication circuit unit is also proposed, wherein the operating program running on the functional circuit unit has a monitoring function, which monitors the communication operating program running on the communication circuit unit and / or the communication between the functional circuit unit and the communication circuit unit. A "monitoring function" is preferably understood to be a function performed by the operating program of the functional circuit unit, which monitors the communication operating program for irregularities, errors and tampering. As a result, the communication circuit unit can be monitored particularly easily and the aircraft seat control unit can be protected from tampering from external sources.

[0014] Furthermore, it is proposed that the operating program running on the functional circuit unit is configured to terminate the communication operating program running on the communication circuit unit or terminate the communication between the functional circuit unit and the communication circuit unit when an error is detected or when tampering is detected. Thus, the functional circuit unit can be operated particularly advantageously.

[0015] Furthermore, a computer program is proposed, which comprises instructions which, when the program is executed by a computer, cause the computer to carry out the method / the steps of the method.

[0016] In this context, the aircraft seat control unit according to the invention should not be limited to the applications and embodiments described above. In particular, the aircraft seat control unit according to the invention may have a number of different elements, components and units than those mentioned herein to perform the functions described herein. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Further advantages result from the following description of the drawings. An embodiment of the invention is shown in the drawings. The drawings, the description and the claims contain many combined features. It is also appropriate for a person skilled in the art to consider these features individually and to combine them into meaningful further combinations. In the drawings:

[0018] Figure 1 An aircraft seat with an aircraft seat control unit is shown schematically;

[0019] Figure 2 A schematic diagram of an aircraft seat control unit according to the present invention is shown, the aircraft seat control unit having a functional circuit unit and a communication circuit unit in a common housing;

[0020] Figure 3 A schematic diagram showing an aircraft seat control unit according to the invention in a second embodiment, the aircraft seat control unit having a functional circuit unit and a communication circuit unit; and

[0021] Figure 4A schematically illustrated flow chart showing the operating procedure of a functional circuit unit is shown. DETAILED DESCRIPTION

[0022] exist Figures 1 to 4 An aircraft seat control unit for an aircraft seat 10 according to the invention is shown in FIG. Figure 1 An aircraft seat 10 is shown. Figure 1 The aircraft seat 10 shown here is only schematically shown and is shown as an example of an aircraft seat. In principle, it is also conceivable here that the aircraft seat 10 has different designs that appear reasonable to a person skilled in the art. The aircraft seat 10 is designed as a business class or first class aircraft seat. In principle, it is of course also conceivable that the aircraft seat 10 is designed as an economy class aircraft seat. The aircraft seat 10 is upright in an aircraft that is not shown in detail. For this purpose, the aircraft seat 10 has an upright unit, by means of which the aircraft seat 10 is firmly connected to the cabin floor of the aircraft. The aircraft comprises an aircraft electronics 12. The aircraft electronics 12 comprises a universal power supply for the electrical and / or electronic components of the aircraft.

[0023] An aircraft seat control unit is provided for controlling an aircraft seat 10. The aircraft seat control unit has a function circuit unit 14 for control. The function circuit unit 14 comprises a plurality of function circuits 16, 18, 20, 22. In the present embodiment, the function circuit unit 14 has exactly four function circuits 16, 18, 20, 22. In principle, it is also conceivable that the function circuit unit 14 has a different number of function circuits 16, 18, 20, 22. The first three function circuits 16, 18, 20 are here only considered as examples of embodiments of the function circuit unit 14 of the aircraft seat control unit. The first function circuit 16 is designed as a seat control circuit. The function circuit 16 designed as a seat control circuit 16 is provided to take over the control of the aircraft seat 10. Here, the first function circuit 16 designed as a seat control circuit calculates the control of the aircraft seat 10 as a function of different input signals. The second function circuit 18 is designed as a light control circuit. The second function circuit 18 designed as a light control circuit is provided for controlling light elements on and around the aircraft seat 10. The third function circuit 20 is designed as a sensor and / or actuator interface circuit. The third functional circuit 20, which is designed as a sensor and / or actuator interface circuit, is provided for controlling the actuators of the aircraft seat 10 and for processing and evaluating sensor signals provided by the sensors of the aircraft seat 10. Here, the third functional circuit 20, which is designed as a sensor and / or actuator interface circuit, controls the actuators of the aircraft seat 10 based on an input of an operator or based on the evaluated sensor signals. Furthermore, the third functional circuit 20, which is designed as a sensor and / or actuator interface circuit, processes and evaluates the sensor signals output by the sensors of the aircraft seat 10 and outputs corresponding output signals. The first three functional circuits 16, 18, 20 are provided for controlling the aircraft seat 10.

[0024] The fourth functional circuit 22 is designed as a service circuit. The functional circuit 22 designed as a service circuit is provided for communication of the functional circuits 16, 18, 20 of the functional circuit unit 14. The functional circuit 22 designed as a service circuit is preferably also provided for supplying electrical energy to the functional circuit unit 14. The functional circuit 22 designed as a service circuit is provided for monitoring the functional circuit unit 14. The four functional circuits 16, 18, 20, 22 are preferably each applied on a separate printed circuit board. The individual printed circuit boards, each of which has one of the functional circuits 16, 18, 20, 22 applied thereto, are preferably connected to one another via an interface circuit. The functional circuits 16, 18, 20, 22 are each connected to one another via the interface circuit via an internal connection. The functional circuits 16, 18, 20, 22 are preferably connected to one another via an internal bus.

[0025] The function circuit unit 14, in particular the function circuits 16, 18, 20, 22, is configured to execute an operating program for controlling the aircraft seat 10. The operating program for controlling the aircraft seat 10 is stored on the function circuit unit 14, in particular on the function circuits 16, 18, 20, 22. The operating program for controlling the aircraft seat 10 is executed on the function circuit unit 14 during operation. The operating program for controlling the aircraft seat 10 executed on the function circuit unit 14 is designed as control software. The operating program designed as control software is configured to receive and process input signals and then output corresponding control signals to the aircraft seat 10. The operating program of the function circuit unit 14 is designed as a trusted ("trusted") operating program. The operating program of the function circuit unit 14 for controlling the aircraft seat 10 is authenticated according to the DAL D.

[0026] The aircraft seat control unit has a communication circuit unit 24. The communication circuit unit 24 is provided for communication with an external control unit 26. The communication circuit unit 24 is provided for wireless and wired communication with the external control unit 26. The communication circuit unit 24 is provided for communication with one of the external control units, which are, for example, electronic devices, such as smartphones or tablet computers, or control devices of the aircraft cabin. In principle, it is also conceivable that the communication circuit unit 24 is only provided for wired communication with the external control unit 26. In principle, it is also conceivable that the communication circuit unit 24 is only provided for wireless communication with the external control unit 26. The communication circuit unit 24 has a communication circuit 28. The communication circuit 28 is provided for processing and forwarding received signals. The communication circuit unit 24 has a transmitting and receiving module 30, which is provided for wireless communication. The transmitting and receiving module 30 is designed as a wireless transmitting and receiving module. The transmitting and receiving module 30 is provided for wireless communication according to IEEE standard 802.15.4. The transmitting and receiving module 30 is provided for Bluetooth connection. The transmitting and receiving module 30 includes a Bluetooth antenna to provide a Bluetooth connection. In addition, the transmitting and receiving module is provided for W-LAN connection. The transmitting and receiving module 30 includes a W-LAN antenna to provide a W-LAN connection. In principle, it is also conceivable that the transmitting and receiving module 30 is provided for other wireless connection types and has a corresponding antenna for this purpose. The communication circuit unit 24 has a second transmitting and receiving module 40, which is provided for wired communication. The second transmitting and receiving module 40 is configured as a wired transmitting and receiving module. The wired transmitting and receiving module has a plug unit. The plug unit of the wired transmitting and receiving module 40 is configured as an interface, through which a cable can be attached to the communication circuit unit 24. The aircraft electronic device or other external control unit can be attached to the communication circuit unit 24 through the interface of the wired transmitting and receiving module 40. The communication circuit unit 24 is configured separately from the functional circuit unit 14 in terms of software technology. The communication circuit unit 24 is configured to execute an operating program for communicating with an external control unit 26. An operating program for wireless or wired communication is stored on the communication circuit unit 24, especially on the communication circuit 28. The operating program for communication is executed on the communication circuit unit 24 during operation. The operating program for communication executed on the communication circuit unit 24 is configured as communication software. The operating program configured as communication software, which is operated on the communication circuit unit 24, is configured separately from the operating program configured as control software, which is operated on the functional circuit unit 14. The operating program configured as communication software of the communication circuit unit 24 is configured as an independent operating program. The operating program configured as communication software of the communication circuit unit 24 is configured as an untrusted (“untrusted”) operating program.An operating program that is classified as untrustworthy and constitutes communication software may have uncertified program elements. When a program element is modified, the uncertified program element does not need to be recertified by the corresponding certification authority of the airline or aircraft manufacturer when the modification is made. The operating program of the communication circuit unit 24 for communicating with the external control unit is certified according to DALE.

[0027] The functional circuit unit 14 is configured to monitor the communication circuit unit 24. The operating program configured as control software operated on the functional circuit unit 14 is configured to monitor the operating program configured as communication software operated on the communication circuit unit 24. The operating program configured as control software of the functional circuit unit 14 monitors whether the operating program configured as communication software of the communication circuit unit 24 operates normally under specified parameters. The operating program configured as control software of the functional circuit unit 14 is configured to identify errors, unauthorized access, and tampering of the operating program operated on the communication circuit unit 24.

[0028] The aircraft seat control unit has a communication interface 32. The communication interface 32 is arranged between the functional circuit unit 14 and the communication circuit unit 24. The communication interface 32 constitutes a data exchange interface between the functional circuit unit 14 and the communication circuit unit 24. The communication interface 32 is configured as a bus interface. In principle, it is also conceivable that the communication interface 32 is configured as another interface for data exchange. The functional circuit unit 14 and the communication circuit unit 24 exchange corresponding data via the communication interface 32. The functional circuit unit 14 is configured to monitor the communication interface 32 between the functional circuit unit 14 and the communication circuit unit 24. The operating program running on the functional circuit unit 14 monitors the data transmitted from the communication circuit unit 24 to the functional circuit unit 14. The functional circuit unit 14 is configured to check whether the data transmitted from the communication circuit unit 24 to the functional circuit unit 14 is tampered with, error and malware. The functional circuit unit 14 is configured to check the data transmitted from the communication circuit unit 24 to the functional circuit unit 14. The operating program running on the functional circuit unit 14 is configured to identify tampering, errors, and malware in data to be transmitted from the communication circuit unit 24 to the functional circuit unit 14 via the communication interface 32 .

[0029] The functional circuit unit 14 is configured to at least partially disconnect the communication circuit unit 24 when tampering of the communication circuit unit 24 or the communication interface 32 is detected. The operating program running on the functional circuit unit 14 at least partially disconnects the communication circuit unit 24 when tampering is detected or when malware is detected. Preferably, at least the transmitting and receiving module 30 is disconnected when tampering is detected or when malware is detected, so that no further data can be transmitted from the external control unit to the communication circuit unit 24 and then to the functional circuit unit 14. In principle, it is also conceivable that only some of the corresponding antennas of the transmitting and receiving module 30 are disconnected, through which the detected tampering or the detected tampering attempt has occurred.

[0030] Alternatively or additionally, the functional circuit unit 14 is configured to prohibit data exchange between the communication circuit unit 34 and the functional circuit unit 14 through the communication interface 32 when tampering of the communication circuit unit 24 or the communication interface 32 is detected. The operating program running on the functional circuit unit 14 prevents data from being transmitted through the communication interface 32 when tampering is detected or when malware is detected. After tampering is detected or when malware is detected, the operating program of the functional circuit unit 14 prohibits data from being transmitted from the communication circuit unit 34 to the functional circuit unit 14, thereby preventing external access to the functional circuit unit 14.

[0031] In the first design, Figure 2 As shown, the communication circuit unit 24 is configured as a printed circuit board configured separately from the functional circuit unit 14. The communication circuit unit 24 is directly connected to the functional circuit unit 14 via a communication interface 32 configured as an internal bus. The communication circuit unit 24 and the functional circuit unit 14 are accommodated in a common housing 34. In principle, according to Figure 3 In another embodiment, it is also conceivable that the communication circuit unit 24 is configured as a unit separated in space from the functional circuit unit 14. Here, the communication circuit unit 24 can be arranged in its own housing at a position different from that of the functional circuit unit 14.

[0032] In the following, a method according to the invention for operating an aircraft seat control unit using an operating program for controlling an aircraft seat 10 running on the function circuit unit 14 and using an operating program 38 provided for external communication running on the communication circuit unit 24 will be briefly described.

[0033] The operating program 36 running on the functional circuit unit 14 has a monitoring function. The monitoring function of the operating program 36 monitors the operating program 38 running on the communication circuit unit 24. The monitoring function of the operating program 36 monitors whether the operating program 38 of the communication circuit unit 24 is running under its normal parameters. The operating program 36 of the functional circuit unit 14 identifies when the operating program 38 of the communication circuit unit 24 is not running under its normal parameters and identifies that a tampering attempt by an external control unit or an erroneous behavior of the external control unit causes an error.

[0034] The monitoring function of the operating program 36 monitors the communication between the functional circuit unit 14 and the communication circuit unit 24. The monitoring function of the operating program 36 monitors the data transmitted from the communication circuit unit 24 to the functional circuit unit 14 via the communication interface 32. The monitoring function of the operating program 36 identifies tampering of the transmitted data, in particular malware, tampered data or erroneous behavior.

[0035] The operating program 36 running on the functional circuit unit 14 is arranged to terminate the operating program 38 running on the communication circuit unit 24 or terminate the communication between the functional circuit unit 14 and the communication circuit unit 24 when an error is recognized or when tampering is recognized. If the monitoring function of the operating program 36, for example, recognizes tampering or malware, the operating program 36 of the functional circuit unit 14 terminates the operating program 38 of the communication circuit unit 24 or puts its operating program 38 in a safe mode that no longer allows access by the external control unit 26. In principle, it is conceivable that the operating program 36 of the functional circuit unit 14 prohibits the transmission of data through the communication interface 32, wherein external access to the communication circuit unit 24 is maintained. Data logging, i.e., the storage of data related to the failure of the operating program of the communication circuit unit 24 is performed by the operating program of the functional circuit unit. Therefore, in particular, data related to errors or tampering, such as time, or the position where the error or tampering occurred in the program code can be stored in an understandable and safe manner and can be retrieved for analysis.

[0036] By the software technology separation of the functional circuit unit 14 and the communication circuit unit 24 and the monitoring of the operating program 38 of the communication circuit unit 24 by the operating program 36 of the functional circuit unit 14, the operating program 38 of the communication circuit unit 24 may be untrusted ("untrusted"), for example, authenticated only according to DAL E, while the operating program 36 of the functional circuit unit 14 is trusted ("trusted") and authenticated, for example, according to DAL D. As a result, if a security hole in the operating program 38 of the communication circuit unit 24 is determined, the operating program 38 of the communication circuit unit 24 can be changed and updated particularly easily and without high authentication costs. Advantageously, the separation can prevent additional authentication of the operating program 36 of the functional circuit unit 14 when the operating program 38 of the communication circuit unit 24 is updated.

[0037] Description of reference numerals:

[0038] 10 Airplane seats

[0039] 12 Aircraft Electronics

[0040] 14 Functional circuit units

[0041] 16 Functional Circuit

[0042] 18 Functional Circuit

[0043] 20 Functional Circuit

[0044] 22 Functional Circuit

[0045] 24 Communication circuit unit

[0046] 26 External control unit

[0047] 28 Communication circuit

[0048] 30 Transmitter and receiver modules

[0049] 32 Communication Interface

[0050] 34 Shell

[0051] 36 Operating Procedures

[0052] 38 Operating Procedures

[0053] 40 Transmitter and receiver modules

Claims

1. An aircraft seat control unit for an aircraft seat (10), comprising a functional circuit unit (14) and a communication circuit unit (24), wherein the functional circuit unit (14) has at least one functional circuit (16, 18, 20, 22) for controlling the aircraft seat (10), and the communication circuit unit (24) has at least one communication circuit (28) and is configured to communicate with at least one external control unit (26), characterized in that: The communication circuit unit (24) is designed to be separate from the functional circuit unit (14) at least in terms of software technology, and the functional circuit unit (14) is configured to monitor the communication circuit unit (24).

2. The aircraft seat control unit according to claim 1, characterized in that: The functional circuit unit (14) is configured to monitor a communication interface (32) between the functional circuit unit (14) and the communication circuit unit (24).

3. An aircraft seat control unit according to any one of the preceding claims, characterised in that The functional circuit unit (14) is configured to at least partially disconnect the communication circuit unit (24) and / or prohibit data exchange between the communication circuit unit (24) and the functional circuit unit (14) via the communication interface (32) when tampering of the communication circuit unit (24) or the communication interface (32) is identified.

4. The aircraft seat control unit according to claim 1 or 2, characterized in that: The communication circuit unit (24) is constructed as a printed circuit board that is constructed separately from the functional circuit unit (14), and the printed circuit board is directly connected to the functional circuit unit (14) via a bus.

5. Aircraft seat control unit according to any one of the preceding claims, characterized in that The communication circuit unit (24) has at least one transmitting and / or receiving module (30, 40), and the transmitting and / or receiving module (30, 40) is configured for wireless communication and / or wired communication.

6. Aircraft seat control unit according to any one of the preceding claims, characterized in that The communication circuit unit (24) and the functional circuit unit (14) are accommodated in a common housing (34).

7. An aircraft seat control unit according to any one of the preceding claims, characterised in that The operating program (38) running on the communication circuit unit (24) is designed as an untrusted operating program and is authenticated, in particular, according to DALE.

8. A method for operating an aircraft seat control unit using an operating program for controlling an aircraft seat (10) running on a functional circuit unit (14) and an operating program (38) provided for external communication running on a communication circuit unit (24), characterized in that: The operating program (36) running on the functional circuit unit (14) has a monitoring function, and the monitoring function monitors the operating program (38) running on the communication circuit unit (24) and / or the communication between the functional circuit unit (14) and the communication circuit unit (24).

9. The method for operating an aircraft seat control unit according to claim 8, characterized in that The operating program (36) running on the functional circuit unit (14) is configured to terminate the operating program (38) running on the communication circuit unit (24) or terminate the communication between the functional circuit unit (14) and the communication circuit unit (24) when an error is identified or when tampering is identified.

10. A computer program comprising instructions which, when the program is executed by a computer, cause the computer to perform the method / method steps according to claim 8 or 9.

Images