METHOD FOR MONITORING THE CONFIGURATION OF AN AIRCRAFT ENGINE AND ASSOCIATED SYSTEM

Description

TECHNICAL FIELD OF THE INVENTION

[0001] The technical field of the invention is that of aircraft engines and more particularly that of aircraft engine configuration monitoring.

[0002] The present invention relates to a method for monitoring the configuration of an aircraft engine. The present invention also relates to an aircraft engine configuration monitoring system, a computer program product, and a recording medium. TECHNOLOGICAL BACKGROUND OF THE INVENTION

[0003] To be authorized to fly an aircraft, an airline must know the configuration of each engine of the aircraft, that is to say the list containing the unique set of identification data, including for example the serial number and the reference called Serial Number and Part Number respectively in English, of each piece of equipment mounted on the engine.

[0004] Since a discrepancy between the certified and actual engine configuration is considered the operator's responsibility, inventory operations to determine an engine's configuration are carried out by a human operator who identifies themselves and signs the inventory report. Because the inventory is performed manually, the operation is lengthy and tedious.

[0005] To overcome this drawback, it is known to place an RFID tag on each component of the engine and automatically read it to generate an engine inventory. This makes it possible to know the engine's configuration in real time and thus better understand its changes, which is particularly useful for planning engine control and maintenance operations.

[0006] However, the information provided by automated scanning can be inaccurate, for example, if an RFID tag from equipment removed from the engine has fallen into the engine, or if equipment with an RFID tag is located near the engine during the scanning process. Therefore, validation by a human operator is required to comply with regulations, which significantly limits the benefits of using automated inventory.

[0007] Therefore, there is a need to reliably know the configuration of an aircraft engine while reducing the time required to complete the engine inventory. SUMMARY OF THE INVENTION

[0008] The invention offers a solution to the problems mentioned above, by allowing the configuration of an aircraft engine to be reliably monitored while limiting the number of steps requiring human operator intervention.

[0009] A first aspect of the invention relates to a method for tracking the configuration of an aircraft engine comprising a plurality of equipment, each piece of equipment having a radio-frequency identification device, the engine being associated with a reference configuration including a date of last update and, for each piece of equipment, a set of reference identification data for the equipment, the method comprising the following steps: Automatic reading of each radio-frequency identification (RFID) device to obtain a configuration including at least one set of identification data read for each piece of equipment and a date of implementation; For each piece of equipment, comparison between the set of identification data read and the reference set of identification data corresponding to the equipment: If for each piece of equipment, the set of identification data read is identical to the reference set of identification data, replacement of the date of last update of the reference configuration with the date of implementation of the obtained configuration;Otherwise, for each piece of equipment for which the read identification data set differs from the reference identification data set: If an equipment replacement operation occurred between the last update date and the implementation date, and the read identification data set corresponds to a replacement identification data set associated with the replacement operation, replace the reference identification data set with the read identification data set; otherwise, generate an alert; if at least one reference identification data set has been replaced, replace the last update date of the reference configuration with the implementation date of the resulting configuration.

[0010] Thanks to the invention, an inventory of an aircraft engine is automatically carried out using radio-identification devices installed on the engine equipment, to obtain an engine configuration.

[0011] The resulting configuration is then compared to a reference engine configuration corresponding to a recent certified engine configuration, i.e., a recent configuration validated by a human operator for the engine.

[0012] If a discrepancy is found between the obtained configuration and the reference configuration—that is, if there is a piece of equipment for which the identification data set read by reading the corresponding identification device differs from the identification data set associated with the equipment in the reference configuration—the list of replacement operations that occurred between the date associated with the reference configuration and the date associated with the obtained configuration for the equipment is consulted. Each replacement operation is certified and associated with an identification data set for the equipment installed during the replacement operation.

[0013] If the identification data set read for the equipment matches the identification data set of the equipment fitted during a replacement operation included in the list, the difference is considered justified and the reference configuration is updated with the identification data set read for the equipment.

[0014] If the discrepancy cannot be explained by a replacement operation, it is considered unjustified and an alert is issued.

[0015] Therefore, a human operator will only intervene in the engine inventory process if there is a discrepancy, not justified by a certified replacement operation, between the configuration automatically obtained by radio-frequency identification (RFID) and the certified reference configuration. The number of human interventions is thus considerably reduced without diminishing the reliability of the resulting configuration, since it is verified using only certified data.

[0016] In addition to the characteristics mentioned in the preceding paragraph, the process according to the invention may have one or more additional characteristics from among the following, considered individually or according to all technically possible combinations.

[0017] According to one embodiment, the reference configuration is stored in a configuration database, the method according to the invention further comprising a step of storing the configuration obtained in a buffer database independent of the configuration database.

[0018] Thus, the uncertified data of the obtained configuration is not mixed with the certified data of the reference configuration, which helps to avoid security problems.

[0019] According to a sub-variant of the preceding variant embodiment, the method according to the invention further comprises a step of deleting the configuration obtained from the buffer database.

[0020] Therefore, uncertified data from the obtained configuration is not retained.

[0021] A second aspect of the invention relates to a system for monitoring the configuration of an aircraft engine comprising a plurality of equipment, each piece of equipment having a radio-identification device, the system comprising: A radio reader module configured to automatically read, for each piece of equipment, the corresponding radio identification device to obtain a set of identification data read for the equipment; A configuration database configured to store a reference configuration associated with the motor, the reference configuration including a last update date and, for each piece of equipment, a set of reference identification data for the equipment; A buffer database configured to store a configuration including an implementation date and each set of identification data read obtained using the radio reader module, the buffer database being independent of the configuration database;A processing module configured to, for each piece of equipment, compare the read identification data set and the reference identification data set corresponding to the equipment: If for each piece of equipment, the read identification data set is identical to the reference identification data set, replace the date of the last update of the reference configuration with the date of completion of the configuration;Otherwise, for each piece of equipment for which the read identification data set differs from the reference identification data set: If an equipment replacement operation occurred between the last update date and the completion date, and the read identification data set corresponds to a replacement identification data set associated with the replacement operation, replace the reference identification data set with the read identification data set; otherwise, generate an alert; if at least one reference identification data set has been replaced, replace the last update date of the reference configuration with the configuration completion date.

[0022] According to one embodiment, the configuration database is encrypted and / or features access control by authentication.

[0023] Thus, the configuration database containing certified data is secure.

[0024] According to an embodiment compatible with the previous embodiment, the system according to the invention comprises a telecommunications network configured to allow the exchange of messages between the radio reading module and the buffer database, and between the processing module, the configuration database and the buffer database, via a communication protocol.

[0025] According to a sub-variant of the previous variant of the embodiment, the communication protocol is end-to-end encrypted.

[0026] Thus, communications between the different elements of the system according to the invention are secure.

[0027] According to a sub-embodiment of the preceding embodiment compatible with the preceding embodiment, the telecommunications network comprises at least one telecommunications node, each telecommunications node storing a synchronized copy of a self-executing contract configured to verify the validity of messages transmitted within the telecommunications network.

[0028] Thus, a consensus on each message transmitted is ensured.

[0029] A third aspect of the invention relates to a computer program product comprising instructions which, when the program is executed on a computer, lead the computer to implement the steps of the process according to the invention.

[0030] A fourth aspect of the invention relates to a computer-readable recording medium comprising instructions which, when executed by a computer, cause the computer to carry out the steps of the process according to the invention.

[0031] The invention and its various applications will be better understood by reading the following description and examining the accompanying figures. BRIEF DESCRIPTION OF THE FIGURES

[0032] The figures are presented for illustrative purposes only and are in no way limiting to the invention. There figure 1 is a synoptic diagram illustrating the sequence of steps in a process according to the invention. figure 2 shows a schematic representation of a system according to the invention. DETAILED DESCRIPTION

[0033] Unless otherwise specified, the same element appearing on different figures has a unique reference.

[0034] A first aspect of the invention relates to a method for monitoring the configuration of an aircraft engine on which a plurality of equipment is mounted.

[0035] The term "engine configuration" refers to the list containing a unique set of identification data for each piece of equipment mounted on the engine. This identification data includes, for example, the equipment's serial number, part number, production number, manufacturer, and / or date of manufacture.

[0036] [ Fig. 2 ] There figure 2 shows a schematic representation of a 300 aircraft engine.

[0037] On the figure 2 , the aircraft is an airplane comprising two 300 engines on which a plurality of equipment 301 is mounted.

[0038] Engine 300 is associated with a reference configuration corresponding to the configuration obtained during a previous inventory operation of engine 300.

[0039] The reference configuration includes a last update date corresponding, for example, to the date of the previous inventory operation and a set of reference identification data for each 301 piece of equipment in engine 300.

[0040] The reference configuration, for example, was certified by a human operator.

[0041] The reference configuration is, for example, stored in a 201 configuration database.

[0042] Each piece of equipment 301 of the engine 300 has a radio-identification device 3010.

[0043] The 3010 radio identification device is, for example, a radio identification chip or tag or RFID for "Radio Frequency Identification" in English.

[0044] [ Fig. 1 ] There figure 1 is a synoptic diagram illustrating the sequence of steps of process 100 according to the invention.

[0045] A first step 101 of the process 100 according to the invention consists of obtaining a configuration by automatically reading each radio-identification device 3010 of the engine 300.

[0046] The configuration includes each set of identification data obtained by reading the corresponding radio identification device 3010, and therefore at least one set of identification data read for each piece of equipment 301 of the engine 300.

[0047] In the nominal case, a 301 piece of equipment from the 300 engine is associated with a unique set of identification data in the configuration.

[0048] However, a 301 piece of equipment from the 300 engine can be associated with a plurality of identification data sets, for example, in the case where a radio identification device 3010 from a previous version of the equipment now removed from the 300 engine has fallen into the 300 engine.

[0049] The configuration also includes a completion date corresponding, for example, to the date of completion of the automatic reading.

[0050] The method 100 according to the invention may include a second step 102 consisting of storing the configuration obtained in the first step 101 in a buffer database 2020.

[0051] The buffer database 2020 is then independent of the configuration database 201 in which the reference configuration associated with engine 300 is stored.

[0052] A third step 103 of the process 100 according to the invention consists, for each piece of equipment 301 of the engine 300, in comparing the read identification data set obtained in the first step 101 for the equipment 301 and the reference identification data set corresponding to the equipment 301 in the reference configuration.

[0053] If a first condition C1 is verified, a fourth step 104 of the process 100 according to the invention is carried out.

[0054] The first condition C1 is verified if for each piece of equipment 301 of the engine 300, the identification data set read obtained in the first step 101 for the equipment 301 is identical to the reference identification data set corresponding to the equipment 301 in the reference configuration.

[0055] The fourth step 104 of the process 100 according to the invention consists of replacing the date of last update of the reference configuration with the date of realization of the configuration obtained in the first step 101.

[0056] The first condition C1 is not verified if there is at least one equipment 301 of the engine 300 for which the read identification data set obtained in the first step 101 for the equipment 301 is different from the reference identification data set corresponding to the equipment 301 in the reference configuration.

[0057] This is particularly the case if a 301 piece of equipment from engine 300 is associated with a plurality of identification data sets in the configuration obtained in the first step 101.

[0058] For each piece of equipment 301 of the engine 300 for which the read identification data set obtained in the first step 101 for the equipment 301 is different from the reference identification data set corresponding to the equipment 301 in the reference configuration, a fifth step 105 of the process 100 according to the invention is carried out if a second condition C2 is verified for the equipment 301.

[0059] The second condition C2 is verified for equipment 301 if a replacement operation of equipment 301 took place between the date of last update included in the reference configuration and the date of completion of the configuration obtained in the first step 101, and that the identification data set read obtained in the first step 101 for equipment 301 corresponds to a replacement identification data set associated with the replacement operation.

[0060] The term "equipment replacement operation" refers to an operation consisting of replacing equipment installed on the engine with new equipment.

[0061] The replacement identification data set associated with the replacement operation then corresponds, for example, to the identification data set of the new equipment.

[0062] Such a replacement operation is certified by a human operator and has, for example, taken place as part of a service request or a maintenance request.

[0063] The fifth step 105 of the process 100 according to the invention consists of replacing the reference identification data set corresponding to the equipment 301 in the reference configuration with the read identification data set obtained in the first step 101 for the equipment 301.

[0064] If the second condition C2 is not verified for equipment 301, i.e. if no equipment 301 replacement operation has taken place between the date of last update included in the reference configuration and the date of realization of the configuration obtained in the first step 101, or if an equipment 301 replacement operation has taken place between the date of last update and the date of realization but the read identification data set obtained in the first step 101 for equipment 301 does not correspond to the replacement identification data set associated with the replacement operation, a sixth step 106 of the method 100 according to the invention is carried out.

[0065] The sixth step, 106, involves generating an alert.

[0066] The generation of an alert may, for example, lead to an inventory operation, i.e. a verification of the configuration of the 300 engine, by a human operator as in the prior art.

[0067] The method 100 according to the invention includes a seventh step 107 if at least one set of reference identification data has been replaced in the reference configuration, i.e. if the fifth step 105 has been carried out for at least one piece of equipment 301 of the engine 300.

[0068] The seventh step 107 consists of replacing the date of the last update of the reference configuration with the date of completion of the configuration obtained in the first step 101.

[0069] In the case where the process 100 according to the invention includes the second step 102, the process 100 according to the invention may include a final eighth step 108 consisting of deleting the configuration obtained in the first step 101 from the buffer database 2020.

[0070] A second aspect of the invention relates to a system 200 for monitoring the configuration of the engine 300 adapted to the implementation of the method 100 according to the invention.

[0071] As illustrated on the figure 2 The system 200 according to the invention comprises: the configuration database 201; the buffer database 2020; a radio reading module 202 configured to implement the first step 101 of the process 100 according to the invention; a processing module 203 configured to implement all the steps of the process 100 according to the invention except the first step 101.

[0072] The processing module 203, for example, includes at least one processor and one memory.

[0073] The 201 configuration database, for example, also stores a history of the configurations of the 300 engine, that is to say, all the equipment that has been mounted on the 300 engine.

[0074] The configuration database 201 is encrypted, for example by strong encryption, for example by AES-256 bit encryption.

[0075] The 201 configuration database, for example, features access control via authentication.

[0076] The configuration database 201 and the buffer database 2020 can be two separate databases as shown in the figure 2 , or two independent parts of the same database.

[0077] The 2020 buffer database can, for example, be included in the 202 radio reading module.

[0078] The system 200 according to the invention further comprises a telecommunications network configured to ensure communications within the system 200, that is to say to allow the exchange of messages within the system 200. For this purpose, the telecommunications network uses a communication protocol.

[0079] As illustrated on the figure 2 The telecommunications network allows, for example, communication between the radio reading module 202 and the buffer database 2020, communication between the processing module 203 and the buffer database 2020, and communication between the processing module 203 and the configuration database 201.

[0080] The telecommunications network can be a wired network or a wireless network.

[0081] The telecommunications network can be the Internet network and may include a computer cloud or "cloud".

[0082] The 201 configuration database can be hosted in the cloud.

[0083] The communication protocol is, for example, end-to-end encrypted, for example with double authentication keys.

[0084] The exchanged messages are transmitted, for example, in the form of frames. Each frame contains, in addition to the message content, information such as the recipient's address, including a public key, the communication standard used, a message identifier, a timestamp, and a verifiable electronic signature of the sender generated, for example, by a private key.

[0085] Each frame can be encrypted, for example in the form of a hash code, for example via a Merkel tree.

[0086] The communication protocol may implement a consensus method, for example by notary and trusted third party, by proof of stakes or by proof of work.

[0087] The communication protocol ensures, for example, the distribution, synchronization, replication and verification of messages transmitted within the telecommunications network so that the transmission of messages is transactional and non-repudiable.

[0088] The telecommunications network includes at least one telecommunications node.

[0089] Each telecommunications node can be hosted within the system 200 according to the invention, for example behind firewalls or on the radio reading module 202, or on the computer cloud.

[0090] Each telecommunications node, for example, stores a synchronized copy of a self-executing contract, otherwise known as a smart contract, shared by the telecommunications network.

[0091] The self-executing contract is configured, for example, to verify the validity of messages transmitted within the telecommunications network, that is, to verify their conformity in order to reach a consensus.

Claims

1. A method (100) for monitoring configuration of an aircraft engine (300) comprising a plurality of pieces of equipment (301), each piece of equipment (301) having a radio identification device (3010), the method (100) including a step (101) of automatically reading each radio identification device (3010) to obtain a configuration comprising at least one set of identification data read for each piece of equipment (301) and a date of execution, the engine (300) being associated with a reference configuration comprising a date of last update and, for each piece of equipment (301), a set of reference identification data of the piece of equipment (301), and the method comprising the following steps of: - for each piece of equipment (301), comparing (103) the set of data read and the set of reference identification data corresponding to the piece of equipment (301): ∘ if, for each piece of equipment (301), the set of identification data read is identical to the set of reference identification data (C1), replacing (104) the date of last update of the reference configuration by the date of execution of the configuration obtained; ∘ otherwise, for each piece of equipment (301) for which the set of identification data read is different from the set of reference identification data: ➢ if an operation for replacing the piece of equipment (301) has taken place between the date of last update and the date of execution and the set of identification data read corresponds to a set of replacement identification data associated with the replacement operation (C2), replacing (105) the set of reference identification data by the set of identification data read; ➢ otherwise, generating (106) an alert; ∘ if at least one set of reference identification data has been replaced, replacing (107) the date of last update of the reference configuration by the date of execution of the configuration obtained.

2. The method (100) according to claim 1, wherein the reference configuration is stored in a configuration database (201), the method (100) further comprising a step (102) of storing the configuration obtained in a buffer database (2020) independent of the configuration database (201).

3. The method (100) according to claim 2, further comprising a step (108) of deleting the configuration obtained from the buffer database (2020).

4. A system (200) for monitoring configuration of an aircraft engine (300) comprising a plurality of pieces of equipment (301), each piece of equipment (301) having a radio identification device (3010), the system (200) comprising a radio reading module (202) configured to automatically read, for each piece of equipment (301), the corresponding radio identification device (3010) to obtain a set of identification data read for the piece of equipment (301), the system (200) comprising: - a configuration database (201) configured to store a reference configuration associated with the engine (300), the reference configuration comprising a date of last update and, for each piece of equipment (301), a set of reference identification data of the piece of equipment (301); - a buffer database (2020) configured to store a configuration comprising a date of execution and each set of identification data read using the radio reading module (202), the buffer database (2020) being independent of the configuration database (201); - a processing module (203) configured to, for each piece of equipment (301), compare the set of identification data read and the set of reference identification data corresponding to the piece of equipment (301): ∘ if, for each piece of equipment (301), the set of identification data read is identical to the set of reference identification data, replace the date of last update of the reference configuration by the date of execution of the configuration; ∘ otherwise, for each piece of equipment (301) for which the set of identification data read is different from the set of reference identification data: ➢ if an operation for replacing the piece of equipment (301) has taken place between the date of last update and the date of execution and the set of identification data read corresponds to a set of replacement identification data associated with the replacement operation, replace the set of reference identification data by the set of identification data read; ➢ otherwise, generate an alert; ∘ if at least one set of reference identification data has been replaced, replace the date of last update of the reference configuration by the date of execution of the configuration.

5. The system (200) according to claim 4, wherein the configuration database (201) is encrypted and / or has authentication access control.

6. The system (200) according to any of claims 4 or 5, comprising a telecommunications network configured to allow message exchanges between the radio reading module (202) and the buffer database (2020) and between the processing module (203), the configuration database (201) and the buffer database (2020), via a communication protocol.

7. The system (200) according to claim 6, wherein the communication protocol is end-to-end encrypted.

8. The system (200) according to any of claims 6 or 7, wherein the telecommunications network comprises at least one telecommunications node, each telecommunications node storing a synchronised copy of a self-executing contract configured to verify validity of messages transmitted within the telecommunications network.

9. A computer program product comprising instructions which, when the program is executed on a computer, cause the same to implement the steps of the method (100) according to any of claims 1 to 3.

10. A computer-readable recording medium comprising instructions which, when executed by a computer, cause the same to implement the steps of the method (100) according to any of claims 1 to 3.