Method and system for detecting pilot incapacitation based on the trajectory phase of an aircraft.
The method and system address pilot incapacitation detection challenges by using phase-dependent timers and monitored controls to minimize disruptions and false positives, ensuring safe automatic system takeover.
Patent Information
- Application Number
- FR2024003335
- Authority / Receiving Office
- FR · FR
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2024-03-29
- Publication Date
- 2025-10-03
AI Technical Summary
Existing pilot incapacitation detection systems in commercial aircraft face challenges such as crew disruptions during high workload phases, potential interruptions of short operational tasks, and high false positive rates, especially when operating with two pilots.
A method and system using timers and monitored cockpit controls to detect pilot incapacitation by determining flight phases and activating 'suspected' and 'confirmed' incapacitation statuses based on pilot actions, with specific timer values and controls associated with each phase, and allowing cancellation through pilot interaction.
The system effectively detects pilot incapacitation while minimizing crew disruption and false positives, ensuring safety by transferring control to automatic systems when necessary.
Smart Images

Figure 00000000_0000_ABST
Abstract
Description
Title of the invention: Method and system for detecting pilot incapacity based on the trajectory phase of an aircraft. Domain
[0001] The present invention relates to a method and system for detecting aircraft pilot incapacitation, and more particularly to a method and system with a permanent capability during a flight to detect pilot incapacitation by using a timer to establish the suspicion of incapacitation which depends on the phase of flight, associated with a wide range of monitored controls in the cockpit. Context
[0002] In the world of transport, automatic monitoring techniques to ensure that the driver / pilot is present and conscious at his or her position have been developed at all times. In the aviation sector, developments have been stimulated in particular by work on the prospects of operating commercial aircraft with a single pilot on board, for example the work "Extended Minimum Crew Operations-Single Pilot Operations, eMCO-SiPO" by the EASA, European Union Aviation Safety Agency, for example in the document "EMCO SIPO EASA 2022.C17 D-1.2 Report on baseline risk framework for EM COS".
[0003] The limits of these developments are in particular: - cause crew disruptions in flight phases / operational contexts with high workload; - potentially interrupt certain short operational tasks in time; and / or - having too high a false positive rate of incapacitation detections, whereas from the crew's perception point of view, certain events are acceptable if they occur when the operational context is calm.
[0004] New developments are therefore necessary, which find application even when commercial aircraft are operated with two pilots on board.
[0005] The techniques discussed in this section should not be presumed to be prior art simply because they are mentioned. Similarly, a problem mentioned in this same section should not be presumed to have been previously identified in the prior art simply because it is mentioned. Summary
[0006] Embodiments of the present invention have been developed based on the developers' understanding of the shortcomings associated with the prior art. The present invention thus comprises, in various embodiments, a method for detecting of the incapacity of an aircraft pilot, including the steps: - determine at least one Phase X of an aircraft trajectory; - associate with each determined Phase X, a value TlPhaseX of a Timer 1, and at least one Monitored Command lPhaseX; and, when the aircraft enters Phase X: - start Timer 1; - monitor a pilot action on one of the associated PhaseX Monitored Command(s); and - if the pilot does not activate at least one Monitored Command lPhaseX before the value of Timer 1 reaches TlPhaseX: - activate a “suspected incapacity” status; - start a Timer2; - monitor a pilot action on at least one Monitored Command!; and - if the pilot does not activate at least one Monitored Command! before the Timer! value reaches a value T!: activate a “confirmed incapacity” status.
[0007] In various embodiments, the method further comprises the steps: - if the pilot activates a Presence Button: deactivate the activated statuses among the “suspected incapacity” and “confirmed incapacity” statuses.
[0008] In various embodiments of the method, the value T! depends on the Phase X of the aircraft trajectory during which the “suspected incapacity” status is triggered.
[0009] In various embodiments, the method further comprises the step: - display the status “suspected incapacity” to warn the pilot that action is expected from him.
[0010] In various embodiments, the method further comprises the step: - do not display the “suspected incapacity” status if, and as long as the pilot: - is in radio communication; - operates a side stick; or - operates a landing gear or flap lever.
[0011] The present invention also comprises, in different embodiments, a medium readable by a processor, comprising instructions for executing the preceding method. [001!] The present invention also comprises, in different embodiments, a system for detecting incapacity of an aircraft pilot configured to: - receive the determination of a Phase X of an aircraft trajectory; - associate with each determined Phase X, a value TlPhaseX of a Timerl, and at least one Monitored Command lPhaseX; and, when the aircraft enters Phase X: - start the Timer; - monitor a pilot action on one of the Monitored Phase Command(s) x associated; and - if the pilot does not activate at least one Monitored Command lPhaseX before the value of Timer 1 reaches TlPhaseX: - activate a “suspected incapacity” status; - start a Timer2; - monitor a pilot action on at least one Monitored Command!; and - if the pilot does not activate at least one Monitored Command! before the Timer! value reaches a value T!: activate a “confirmed incapacity” status.
[0013] In various embodiments, the system is also configured to: - activate an emergency aircraft diversion mode in the event of activation of the “confirmed incapacity” status.
[0014] In various embodiments, the system is also configured to: - display, if activated, the status “suspected incapacity” on a dashboard display to warn the pilot that action is expected from him.
[0015] In various embodiments, the system is also configured to: - display, if activated, the status “confirmed incapacity” on an instrument panel display to warn the pilot that the aircraft’s emergency diversion mode is activated.
[0016] In various embodiments, the system is also configured to display, when activated, the status "incapacitated confirmed" on a display dedicated to the cabin crew to request assistance for the incapacitated pilot.
[0017] In various embodiments, the system is also configured to alert, in the event of activation of the "confirmed incapacitation" status, at least one second pilot present in a rest room of the aircraft.
[0018] In various embodiments, the system is also configured to, upon activation of the "confirmed incapacity" status: - carry out a transfer of authority on at least one of the calculators: - Configuration; - Brakes; - Procedure; and - Communications; from Dashboard Commands to Automatic Emergency Diversion Navigation Management.
[0019] The present invention also comprises, in different embodiments, an aircraft comprising the preceding system. [00!0] For the purposes of this description, unless expressly provided otherwise, a “processor” may refer to, but is not limited to, any type of “computer system”, “electronic device”, “computerized system”, “control unit ", "monitoring device", "server" and / or any combinations thereof appropriate to the task concerned, in relation to the reception, storage, processing and / or transmission of data.
[0021] In the context of the present description, the expression "FPGA" is intended to include Field Programmable Gate Array (FPGA) type systems, available on the market at the time of filing of the present patent application, such as the Xilinx VU9P, or Intel Stratix V, and all subsequent equivalent inventions that have become available, whatever their name, consisting of computer system hardware programmable with software.
[0022] As used herein, a "processor" may include a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared. A "processor" may be a general-purpose processor, such as a central processing unit (CPU), a processor dedicated to a specific purpose, or a processor implemented in an FPGA. Other hardware and software, conventional and / or custom, may also be included in a "processor."
[0023] In the context of the present description, a “computer” indifferently represents one or more processors capable of reading instructions in order to execute a function, and / or a function carried out by the execution of instructions by one or more processors.
[0024] For the purposes of this specification, unless expressly provided otherwise, the term "memory" includes random access storage systems, commercially available at the time of filing of this patent application, and all subsequent equivalent inventions becoming available, regardless of their name, consisting of computer system media for storing digital information. An example of such memory may be static random access memory (SRAM).
[0025] Within the scope of the present description, the functional steps shown in the figures can be provided through the use of dedicated hardware, as well as hardware capable of executing appropriate software.
[0026] In the context of this description, unless expressly provided otherwise, the words "first", "second", "third", etc. have been used as adjectives only for the purpose of distinguishing the nouns they accompany from one another, and not for the purpose of describing a particular relationship between these nouns.
[0027] Implementations of the present invention each have at least one of the objects and / or aspects mentioned above, but do not necessarily have all of them.
[0028] Additional and / or alternative features, aspects and advantages of the implementations of the present invention will become apparent from the following description, drawings attached and appended claims. Brief description of the drawings
[0029] For a better understanding of the present invention, reference is made to the following description which should be used in conjunction with the accompanying drawings, where: Fig.l
[0030] [Fig.l] represents an example of an aircraft trajectory divided into contiguous phases; Fig.2
[0031] [Fig.2] details an example of steps in the pilot incapacity detection method of the present invention, depending on the phase in the trajectory of the aircraft; Fig.3
[0032] [Fig.3] presents a schematic version of an example of cal implementation controllers and interfaces on board an aircraft in accordance with the invention; Fig.4
[0033] [Fig.4] illustrates an aircraft instrument panel; Fig.5
[0034] [Fig.5] illustrates a computer system that may be used in the present invention, for example to produce the computers visible in [Fig.3], or the method steps in accordance with [Fig.2]; and Fig.6
[0035] [Fig.6] represents an aircraft equipped with the present invention. It should be noted that, unless explicitly stated otherwise, drawings are not to scale. Finally, identical elements from one drawing to another bear the same numerical reference. Description of the embodiments
[0036] The examples and associated conditions detailed herein are primarily intended to assist the reader in understanding the principles of the present invention and not to limit its scope to these specific examples and conditions. It will be understood that those skilled in the art can devise various arrangements which, although not explicitly described or shown herein, nevertheless embody the principles of the present invention and are included within its spirit and scope.
[0037] Further, for ease of understanding, the following description may describe relatively simplified implementations of the present invention. As those skilled in the art will understand, other implementations of the present invention may be of greater complexity.
[0038] In some instances, examples of modifications of the present invention may also be presented. This is done merely as an aid to understanding, and, again, not to define the scope or establish the limits of the present invention. These modifications are not an exhaustive list, and those skilled in the art may make other modifications while remaining within the scope of the present invention.
[0039] Furthermore, all statements hereinafter relating to the principles, aspects, and implementations of the present invention, as well as specific examples thereof, are intended to encompass both structural and functional equivalents thereof, whether presently known or developed in the future. Thus, for example, it will be understood by those skilled in the art that all block diagrams represent conceptual views of exemplary circuits incorporating the principles of the present invention. Likewise, it will be well understood that all flowcharts, state transition diagrams, pseudocode, and the like, represent various processes that may be implemented on computer-readable media, and thus be executed by a computer or processor, whether such a computer or processor is shown in the figures or not.
[0040] The functions of the various elements shown in the figures, including any functional block, may be provided by the use of dedicated hardware as well as hardware capable of executing appropriate software. They may also be executed by a processor. Other hardware, conventional and / or customized, may also be used.
[0041] Software modules, or modules assumed to be software, may be represented herein as a combination of flowchart elements, or other elements indicating the execution of steps in a process, and / or as a textual description. Such modules may be executed by hardware that is expressly shown or not. In addition, it is to be understood that "module" may include, for example, but not limited to, computer program logic, computer program instructions, software, a software stack, firmware, hardware circuitry, or a combination thereof that provides the required capabilities.
[0042] This being stated, we will now consider some non-limiting examples to illustrate various implementations of the present invention.
[0043] In one example, a trajectory 100 of an aircraft taking off and then landing is shown diagrammatically [Fig. 1]. This trajectory is divided into contiguous phases 101 to 108, as follows: - 101: rolling; - 102: takeoff; - 103: initial ascent; the maximum altitude of this portion of the trajectory can, for example, be set at 1500 feet above the terrain; - 104: final ascent and cruise; - 105: descent; the minimum altitude of this portion of the trajectory can, for example, be set at 5000 feet; - 106: approach; - 107: landing; and - 108: rolling.
[0044] The division of the trajectory 100 may be different, both in the number of phases, in the duration of each of them, and / or in the minimum and maximum altitudes involved. Each phase is characterized in particular by the frequency of the actions required by the personnel in the cockpit, and the activation or not of the automatic pilot by the crew.
[0045] [Fig. 2] details an example of steps of the method for detecting pilot incapacitation of the present invention, as a function of the phase in the trajectory of the aircraft, also called flight phase. The method thus offers a permanent capacity to detect pilot incapacitation by using a timer to establish the suspicion of incapacitation which depends on the trajectory phase of the aircraft, associated with a range of controls monitored in the cockpit which also depends on the trajectory phase of the aircraft. The solution of the invention notably involves monitoring of the cockpit controls, interpreted as proof that the crew is not totally incapacitated.
[0046] Thus: in step 200, a trajectory phase called “Phase X” is determined, for example as one of the phases 101 to 108 illustrated in [Fig.l]. The determination of the trajectory phase can for example, as explained below in relation to [Fig.3], be communicated by certain computers on board the aircraft. In step 201, a Timerl is set to 0, and a “suspected incapacity” status is also set to 0, and in step 202, the Timerl is incremented and counts the time that passes.
[0047] In step 203, a test is carried out to determine whether the value of Timer 1 has reached a value TlPhase X which depends on Phase X: - if this value is reached, then in step 205, the “suspected incapacity” status is set to 1 or activated, in step 206 a Timer2 is set to 0, and a “confirmed incapacity” status also set to 0, and in step 207, Timer2 is incremented and counts the time that passes; - if this value is not reached, then in step 204, a test is carried out to determine whether an action by the pilot has occurred on at least one of one or more Monitored Commands 1 which depend on Phase X (called Monitored Commands 1 Phase x)* - if an action has occurred, then a connection is made to step 201 (Timer reset to 0); - if no action has taken place, then a connection is made at step 202 (Timer 1 incremented).
[0048] In step 208, a test is performed to determine whether the value of Timer2 has reached a value T2: - if this value is reached, then in step 210, the “confirmed incapacity” status is set to 1 or activated; - if this value is not reached, then at step 209, a test is carried out to determine whether an action by the pilot has occurred on at least one of one or more Monitored Commands2: - if an action has occurred, then a connection is made to step 201 (Timer reset to 0); - if no action has taken place, then a connection is made to step 207 (Timer2 incremented).
[0049] The “suspected incapacity” status set to 1 or activated in step 205 makes it possible, as explained below in relation to [Fig. 3], to alert the pilot that the pilot incapacity detection system has detected a suspicious absence of pilot activity. The “suspected incapacity” status, or any other equivalent alert message, may be displayed on a Dashboard Display 307 ([Fig. 3]) in order to warn the pilot that action on his part is expected. The pilot may cancel the suspicion of incapacity by acting on a Monitored Control2 or on a Presence Button 306 ([Fig. 3]) according to an implementation option of the invention described below.
[0050] The “confirmed incapacity” status set to 1 or activated in step 210 makes it possible, as explained below in relation to [Fig. 3], to alert certain computers on board the aircraft, and to take certain safety actions in accordance with the invention. The “confirmed incapacity” status, or any other equivalent alert message, may be displayed on the instrument panel display 307 ([Fig. 3]) in order to warn the pilot that an emergency diversion mode (for example, a mode known by the English term “AUTO EMER OPS”) is activated.
[0051] [Fig.3] presents a schematic version of an example of implementation 300 of cal controllers and interfaces on board an aircraft in accordance with the invention.
[0052] A central computer 301 comprises at least two computers: - a Human Monitoring Application (HMA) Incapacity Detector (ID) calculator 302 in which, for example, the steps indicated [Fig. 2] of the method according to the invention can be executed; and - an automatic emergency diversion navigation management calculator 304 (“Flight Management System Contingency Trajectory”, “FMS CT” in English).
[0053] The central computer 301 receives at least the following information as input: - activation of the dashboard commands 308; - activation of a Sidestick 314; - a Flight Warning System (FWS) calculator; and - optionally, in one embodiment of the invention: activation of the Presence Button 306.
[0054] The central computer 301 controls in particular the dashboard display 307.
[0055] The Flight Warning calculator 305 is composed of several components which work together to ensure effective monitoring and warning capabilities, relating in particular to the operational parameters of the aircraft, and to possible system failures. These capabilities are guaranteed on the basis in particular of large quantities of data received from the various sensors and systems of the aircraft (not shown). The warnings are visual on the instrument panel of the aircraft, and / or audio. The Flight Warning calculator 305 thus controls in particular the Instrument Panel Display 307. The instrument panel of the aircraft advantageously includes displays which are dedicated to the warning information provided by the Flight Warning calculator 305.
[0056] A function for calculating the trajectory phase of the aircraft may also be included in the Flight Warning calculator 305, in an exemplary implementation, which informs the Central Computer 301 of the trajectory phase “Phase X” in which the aircraft is located (step 200 in [Fig.2]): this information is used to deduce in particular the value of the Timer 1, and the range of the Controls monitored 1. This trajectory phase information may also be calculated in a calculator other than the Flight Warning calculator 305, if it is not available on the aircraft or if the trajectory phase calculation is not done in the Flight Warning calculator 305, but for example in a central alert calculator.
[0057] In the example presented, five other computers equip the aircraft: - an Autopilot 309, which in particular allows the automation of the guidance of the aircraft on a trajectory and the thrust of the engines; - at least one Configuration 310 computer, which in particular allows control of the aircraft's high-lift engines, slats, flaps, landing gear and air brakes; - a 311 Brakes calculator, which in particular allows control of the aircraft brakes; - at least one Procedure 312 calculator, which in particular allows procedures to be automatically executed in place of the pilot; and - a Communications 313 computer which allows communications between the aircraft and the outside world (other aircraft, control towers, etc.).
[0058] The last four computers mentioned 310-313 are controlled by the pilot through the Instrument Panel Controls 308 (by the signal 308a), the Side Stick 314, or by the Automatic Emergency Diversion Navigation Management 304 (by the signal 304a) in the event of a transfer of authority carried out by the Incapacity Detector 302 (communicated by the signal 302a). This transfer of authority depends on the detection of the pilot's incapacity, and the "confirmed incapacity" status when it is set to 1 or activated in accordance with step 210 in [Fig.2].
[0059] The Autopilot 309 automatically guides the aircraft on a trajectory calculated by a Primary Navigation Management computer 303 (and communicated by a signal 303a) (“Flight Management System Primary”, “FMS-primary” in English) under the responsibility of the pilot, or by the Emergency Diversion Automatic Navigation Management computer 304 (and communicated by a signal 304a) in the event of a transfer of authority carried out by the Incapacity Detector 302 (transfer of authority communicated by a signal 302a). This transfer of authority depends on the detection of the incapacity of the pilot.
[0060] [Fig. 4] illustrates an aircraft instrument panel. An Instrument Panel 400 includes the Instrument Panel Controls 308, the Side Stick 314, the Instrument Panel Display 307, and optionally the Presence Button 306, when implemented in an embodiment of the invention, positioned at a visually privileged location in the pilot's field of vision, and easily accessible for rapid activation by the pilot.
[0061] The method and system of the invention must both ensure the responsiveness required to guarantee the safety of the aircraft in the event of pilot incapacitation, and minimize the intrusive nature of monitoring incapacitation, and the risk of excessive disruption to the crew. To do this, the solution provided involves in particular monitoring enough instrument panel controls (Monitored Controls 1, Monitored Controls 2, chosen from the Instrument Panel Controls 308, the Side Stick 314, and the Presence Button 306 when it is present in an implementation mode of the invention) so that the crew can always act normally on at least one of them in the accomplishment of its tasks before the expiration of a time allocated by the timer per trajectory phase.
[0062] Thus, to define the different trajectory phases, and the timer duration, as associated monitored cockpit commands, data analysis can be performed based on a large number of flights. This ensures a pilot incapacitation detection method and system that is both effective and acceptable from the pilot's point of view, given the operational disruptions potentially introduced.
[0063] In one embodiment of the invention, the retained values of Minuteurl and of the associated lPhaseX Monitored Command(s), are the following, relative to the trajectory phases given in [Fig.l]: [Tables 1] Phase X Timer 1 Monitored Controls lPhasex 101 3min Automatic Flight Management System (FMS) interaction keypad, radio controls, rudder pedals, throttle levers, nose wheel orientation lever 102 1min Landing gear retraction controls, high lift retraction controls, throttle levers, side stick lever, autopilot controls (FCU, or “Flight Control Unit”) 103 1min Autopilot controls, display controls, warning system management controls, radio controls, side stick lever, throttle levers, Automatic Flight Management System (FMS) interaction keypad 104 9min Autopilot controls, display controls, warning system management controls, radio controls, side stick lever, throttle levers, Automatic Flight Management System (FMS) interaction keypad 105 5 min Autopilot controls,display controls, alarm system management controls, radio controls, side stick lever, throttle levers, FMS interaction keypad 106 1min Autopilot controls, display controls, alarm system management controls, radio controls, side stick lever, throttle levers, FMS interaction keypad 107 2min FMS interaction keypad, radio controls, rudder pedals, throttle levers, nose wheel orientation lever 108 3min FMS interaction keypad, flight automation (FMS), radio controls, rudder pedals, throttles, aircraft nose wheel orientation lever
[0064] The value of Timer2 may for example be 30s. The Monitored Commands! may for example be one or more of the set of Monitored Commands 1 indicated in Table 1 above.
[0065] In an implementation mode not shown, the duration of the Timer!, or of at least one Monitored Command!, may also depend on the Phase X of the trajectory of the aircraft.
[0066] The method and system of the invention may also advantageously introduce conditions under which the detection of the suspected incapacitation will not be notified to the cockpit. For example, these may be operational tasks that must never be interrupted, for example: - radio communication in progress from the aircraft; - pilot actions on the Side Stick (314); and / or - pilot actions on the landing gear or flap lever, etc.
[0067] [Fig. 5] illustrates a computer system that may be used in the present invention, for example to implement the computers shown in [Fig. 3], or the method steps in accordance with [Fig. 1]. As will be understood by those skilled in the art, such a computer system may be implemented in any other suitable hardware, software and / or firmware, or a combination thereof, and may be a single physical entity, or several separate physical entities with distributed functionality.
[0068] The computer system 500 may include various hardware components, including one or more single or multi-core processors collectively represented by a processor 501, a memory 503, and an input / output interface 504. In this context, the processor 501 may or may not be included in an FPGA. The computer system 500 may be a generic "off-the-shelf" computer system. The computer system 500 may also be distributed among multiple systems. The computer system 500 may also be specifically dedicated to implementing the present invention. As one skilled in the art of the present invention may understand, multiple variations as to how the computer system 500 is implemented may be contemplated.
[0069] Communication between the various components of the computer system 500 may be enabled by one or more internal and / or external buses 505 (e.g., a PCI bus, a universal serial bus, an IEEE 1394 "Firewire" bus, a SCSI bus, a Serial-ATA bus, an ARINC bus, etc.), to which the various hardware components are coupled. electronically.
[0070] The input / output interface 504 may enable networking capabilities such as wired or wireless access. By way of example, the input / output interface 504 may include a network interface such as, but not limited to, a network port, a network jack, a network interface controller, and the like. Multiple examples of how the networking interface may be implemented will become apparent to those skilled in the art of the present invention.
[0071] The memory 503 may store code instructions 508, such as those forming part of, for example, a library, an application, etc. that can be loaded into the memory 503 and executed by the processor 501 to, for example, implement the steps of the method according to the present invention. The memory 503 may also store a database 509. Those skilled in the art will understand that the database 509, the code instructions 508 and generally the memory 503 may also physically reside outside the computer system 500, still within the scope of the present invention.
[0072] The input / output interface 504 may allow the computer system 500 to be put into communication with other processors via a connection 510. This may be the case, for example, if the above calibration step is implemented in the computer system 500, while the above correlation step is implemented in a processor outside the computer system 500, for example on the aircraft.
[0073] The aircraft 600 shown in [Fig.6] comprises an example of implementation 300 of computers and interfaces, allowing in particular the implementation of the steps of the method of [Fig.2] in accordance with the invention.
[0074] Although the implementations described above have been described and shown with reference to particular steps performed in a particular order, it will be understood that these steps may be combined, subdivided, or reordered without departing from the teachings of the present disclosure. At least some of the steps may be performed in parallel or in series. Therefore, the order and grouping of the steps does not constitute a limitation of the present invention.
[0075] Modifications and improvements to the above-described implementations of the present invention may occur to those skilled in the art. The above description is illustrative by way of examples rather than limiting. The scope of the present invention is therefore limited only by the scope of the claims below.
Claims
Claims
1. Method for detecting the incapacity of an aircraft pilot, comprising the steps: - determining (200) at least one Phase X of a trajectory of the aircraft; - associating with each determined Phase X, a value TlPhasex of a Timerl, and at least one Monitored CommandlPhasex; and, upon entry into Phase X of the aircraft: - starting (201, 202) the Timerl; - monitoring (204) an action of the pilot on one of the associated Monitored CommandlPhaseX; and - if the pilot does not actuate at least one Monitored CommandlPhaseX before the value of Timerl reaches TlPhaseX: - activating (205) a “suspected incapacity” status; - starting (206, 207) a Timer2; - monitoring (209) an action of the pilot on at least one Monitored Command2; and - if the pilot does not activate at least one Monitored Command2 before the value of Timer2 reaches a value T2: activate (210) a “confirmed incapacity” status.
2. Method according to claim 1, further comprising the step: - if the pilot activates a Presence Button (306): deactivating the activated statuses among the statuses “suspected incapacity” and “confirmed incapacity”.
3. Method according to claim 1 or 2, in which the value T2 depends on the Phase X of the trajectory of the aircraft during which the “suspected incapacity” status is activated.
4. Method according to one of claims 1 to 3, further comprising the step: - displaying the status "suspected incapacity" to warn the pilot that an action on his part is expected.
5. Method according to one of claims 1 to 3, further comprising the step: - not notifying the status "suspected incapacitation" if, and as long as the pilot: - is in radio communication; - operates a side stick (314); or - operates a landing gear or flap lever.
6. A processor-readable medium comprising instructions for executing the method according to one of claims 1 to 5.
7. System for detecting incapacity (302) of an aircraft pilot configured to: - receive the determination (200) of a Phase X of a trajectory of the aircraft; - associate with each determined Phase X, a value TlPhaseX of a Timerl, and at least one Monitored CommandlPhaseX; and, upon entry into Phase X of the aircraft: - start (201, 202) the Timerl; - monitor (204) an action of the pilot on one of the Monitored Command(s) lsPhaseX; and - if the pilot does not actuate at least one Monitored CommandlPhaseX before the value of Timerl reaches TlPhaseX: - activate (205) a “suspected incapacity” status; - start (206, 207) a Timer2; - monitor (209) a pilot action on at least one Monitored Command2; and - if the pilot does not operate at least one Monitored Command2 before the value of Timer2 reaches a value T2: activate (210) a “confirmed incapacity” status.
8. System according to claim 7, configured to: - activate an emergency diversion mode of the aircraft in the event of activation of the “confirmed incapacity” status.
9. System according to claim 7 or 8, configured to: - display, in case of activation, the status "suspected incapacity" on a dashboard display (307) to warn the pilot that an action on his part is expected.
10. System according to one of claims 8 to 9, configured to: - display, in the event of activation, the status “confirmed incapacity” on a dashboard display (307) to warn the pilot that the emergency diversion mode of the aircraft is activated.
11. System according to one of claims 7 to 8, configured to: display, in the event of activation, the status “confirmed incapacity” on a display dedicated to the cabin crew to request assistance for the attention of the incapacitated pilot.
12. System according to one of claims 7 to 8, configured to: alert, in the event of activation of the “confirmed incapacity” status, at least one second pilot present in a rest room of the aircraft.
13. System according to one of claims 7 to 12, configured to, in the event of activation of the “confirmed incapacity” status: - carry out a transfer of authority on at least one of the computers: - Configuration (310); - Brakes (311); - Procedure (312); and - Communications (313); of the Dashboard Controls (308), to an Automatic Emergency Diversion Navigation Management (304).
14. An aircraft (600) comprising the system of one of claims 7 to 13.
Citation Information
Patent Citations
Multimodal pilot monitoring methods and systems
EP4246494A1
Emergency control of an aircraft
US20200361595A1
Automatic autoland activation methods and systems
US20220406201A1
Incapacitated pilot detection system
US20230144801A1