Avionics platform with differentiated activation of resources for the execution of software application(s), associated aircraft

Abstract

The invention relates to an avionics platform (20) which comprises an electronic board for communicating with one or more devices external to the platform; a group of computing electronic board(s) (25), each including resources (40) for executing software application(s); and a board for supplying electric power to the communication and computing boards (25); the boards being interconnected. The group of computing electronic board(s) (25) includes resources that are activated by default, referred to as primary resources (40P), and resources that are deactivated by default, referred to as secondary resources (40S), the secondary resources (40S) being separate from the primary resources (40P), the software application(s) being executable only on the activated resources (40), a predefined available amount of resources (40) for executing software application(s) then corresponding to the primary resources (40P); and in case of unavailability of the primary resources (40P), secondary resources (40S) are activated to at least partially compensate for the unavailability of the primary resources (40P).

Description

[0001] Avionics platform with differentiated activation of resources for the execution of software application(s), associated aircraft

[0002] The present invention relates to an avionics platform intended to be carried on board an aircraft, comprising an electronic communication card configured to communicate with one or more devices external to the platform; a group of electronic computing card(s), each comprising resources and being configured for the execution of software application(s); an electrical power supply card configured to convert electrical energy received from an electrical power supply network carried on board the aircraft into other electrical energy delivered to the electronic communication and computing cards; the electrical power supply and electronic communication and computing cards being interconnected.

[0003] The invention also relates to an aircraft comprising such an avionics platform.

[0004] Document FR 3 094 595 B1 describes an avionics platform of the aforementioned type forming a multimedia server for distributing, via entertainment terminals and to the passengers of the aircraft, multimedia content, for example films, television programs, games or music; or parameters of the flight and its progress; or even announcements from the crew.

[0005] The avionics platform comprises several cards of the same functional title among a network switch card forming an electronic switching card, a power supply card, a data storage card and a computing card. Having several cards of the same functional type makes it possible to improve the reliability and availability of the avionics platform, the cards of the same functional type being redundant with each other.

[0006] The reliability of such an avionics platform can, however, be further improved.

[0007] The aim of the invention is then to propose an avionics platform enabling even better reliability.

[0008] To this end, the invention relates to an avionics platform intended to be carried on board an aircraft, the avionics platform comprising:

[0009] - an electronic communication card configured to communicate with one or more devices external to the platform;

[0010] - a group of electronic computing card(s), each comprising resources and being configured for the execution of software application(s); - a power supply card configured to convert electrical energy received from an electrical power supply network on board the aircraft into other electrical energy delivered to the electronic communication and computing cards; the power supply cards and electronic communication and computing cards being interconnected;the group of electronic computing card(s) comprising resources activated by default, called primary resources, and resources deactivated by default, called secondary resources, the secondary resources being distinct from the primary resources, the software application(s) being executable only on activated resources, a predefined available quantity of resources for the execution of software application(s) then corresponding to the primary resources; and in the event of unavailability of primary resources, secondary resources are activated to at least partially compensate for the unavailability of said primary resources.;

[0011] With the avionics platform according to the invention, only a portion of the resources of the group of electronic computing card(s) is activated by default, these resources activated by default being called primary resources, and other resources of said group of electronic computing card(s) are deactivated by default, and called secondary resources. The software applications are executable only on activated resources, and the primary resources are then provided to correspond to a predefined available quantity of resources necessary for the execution of the software applications. Furthermore, in the event of unavailability of primary resources, in particular during the operation of the avionics platform, i.e. during its implementation, secondary resources are activated to at least partially compensate for said unavailable primary resources.

[0012] Thus, the avionics platform according to the invention makes it possible to further improve reliability, by proposing a resource redundancy process, in addition to the redundancy between cards of the same functional type of the state of the art.

[0013] Advantageously, at least one electronic computing card, and preferably each electronic computing card, comprises both primary resources and secondary resources. This makes it possible to provide an intra-card resource redundancy process.

[0014] Advantageously, for each type of resource, at least one electronic computing card, and preferably each electronic computing card, comprises both primary resources and secondary resources. This makes it possible to provide a process of intra-card resource redundancy and for each type of resource. According to other advantageous aspects of the invention, the avionics platform comprises one or more of the following characteristics, taken individually or in all technically possible combinations:

[0015] - at least one electronic computing card comprises both primary resources and secondary resources; each electronic computing card preferably comprises both primary resources and secondary resources;

[0016] - the group of electronic computing card(s) comprises resources of one or more types from the group consisting of: CPU resource, network communication resources, RAM resource and storage memory resource; and the group of electronic computing card(s) then comprises primary and secondary resources for each respective type; the group of electronic computing card(s) preferably comprising resources of all types from the aforementioned group;

[0017] - at least one electronic calculation card comprises, for each type of resource, both primary resources and secondary resources; each electronic calculation card preferably comprises, for each type of resource, both primary resources and secondary resources;

[0018] - the group of electronic calculation card(s) comprises N secondary resource(s) of each type to be resistant to N failure(s), N being an integer greater than or equal to 1;

[0019] - the activation, respectively the deactivation, of resources of the group of electronic computing card(s) is implemented in software via a software application(s) software service orchestrator;

[0020] - each electronic computing card further comprises one or more resource switches; and the activation, respectively the deactivation, of resources of the group of electronic computing card(s) is implemented in hardware via the resource switches;

[0021] - the group of electronic calculation cards comprises several electronic calculation cards, each including the same type(s) of resources; the electronic cards of the group of electronic calculation cards preferably all being identical;

[0022] - each electronic computing card comprises two half-cards, the two half-cards of a respective electronic computing card being able to be activated separately from each other, respectively deactivated separately from each other; and - the unavailability of primary resources is an unavailability due to malfunction or an unavailability due to reduction of electrical consumption.

[0023] The invention also relates to an aircraft comprising an avionics platform as defined above.

[0024] These characteristics and advantages of the invention will appear more clearly on reading the description which follows, given solely by way of non-limiting example, and made with reference to the appended drawings, in which:

[0025] - Figure 1 is a schematic view of an aircraft comprising an avionics platform comprising resources for the execution of software application(s) software services; an electronic box forming the avionics platform, the box comprising a backplane card and several electronic cards connected to the backplane card;

[0026] - Figure 2 is a schematic representation of a hardware and software architecture of electronic cards of the box of Figure 1; and

[0027] - Figure 3 is a schematic view of the avionics platform of Figure 1, with representation of resources activated by default, called human resources, and other resources deactivated by default, called secondary resources, as well as a process of activating secondary resources to compensate for the unavailability of certain primary resources.

[0028] In the description, as well as in the claims, the terms " / s" or " / x" following the name of an object mean that this designates one or more objects of this name, and these terms are identical to the terms " / s" or "(x)", and may be replaced by them if necessary, without this changing the content of the invention. For example, the expression "of software application(s)" then means "of one or more software applications", the expression "resistance to failure / s" means "resistance to one or more failures", and the expression "to the service / s" means "to the service or services".

[0029] In Figure 1, an aircraft 10 comprises an avionics platform 20, generally forming an on-board data server (from the English 'on-board data center'), in order to offer different types of services on board the aircraft 10.

[0030] The avionics platform 20 is for example configured to offer cockpit services for a crew of the aircraft 10 and / or maintenance services for the ground and / or entertainment services for passengers on board the aircraft 10.

[0031] The avionics platform 20 forms, for example, a multimedia server configured to broadcast, via entertainment terminals not shown, multimedia content to the passengers of the aircraft 10, in particular during the flight (for example films, TV shows, games or music), and / or information on the progress of the flight (altitude, speed, current position, progress, etc.). As an optional addition, the multimedia server, formed by the avionics platform 20, is configured to broadcast practical information concerning for example the arrival airport, for example via announcements in sound and / or video form.

[0032] Each entertainment terminal is known per se, and is connected to the multimedia server via a local network, not shown, on board the respective aircraft 10.

[0033] Each entertainment terminal is, for example, attached or integrated into the passenger seat itself, or is attached or integrated into the back of the seat in front of the passenger seat. The seats are typically arranged in rows within the aircraft 10.

[0034] The avionics platform 20 comprises at least one electronic communication card 22, a group of electronic computing card(s) 25, at least one power supply card 28, the power supply cards 28 and electronic communication cards 22 and computing cards 25 being interconnected with each other, for example via a backplane card 30, as shown in FIG. 1. The avionics platform 20 is for example produced in the form of an electronic box 32 comprising the backplane card 30, one or more electronic communication cards 22, one or more electronic computing cards 25 and one or more power supply cards 28. Each electronic communication card 22, each electronic computing card 25, respectively each power supply card 28, is connected to the backplane card 30 via a respective backplane connector 34, as shown in FIG. 1.The electronic box 32 further comprises a protective casing 36 inside which are housed the backplane card 30 and the plurality of electronic communication cards 22 and calculation cards 25 and power supply card(s) 28; as well as external connectors 38 arranged on the periphery of the box 36. The external connectors 38 are in particular intended to allow the connection of the avionics platform 20 to the local network, as well as to a power supply network, not shown and on board the aircraft 10.

[0035] Advantageously, the avionics platform 20 comprises several cards 22, 25, 28 of the same type, namely several electronic communication cards 22, several electronic calculation cards 25 and several electrical power supply cards 28.

[0036] The person skilled in the art will then understand that having several cards 22, 25, 28 of the same type makes it possible to improve the reliability and availability of the platform 20, the cards of the same type being redundant with each other. Furthermore, having a high number of cards 22, 25, 28, in particular electronic computing cards 25, makes it possible to reduce the “granularity” of each card 22, 25, 28 within the electronic box 32, and thus to reduce the cost and the need in terms of resources 40 to achieve satisfactory redundancy of the cards 22, 25, 28.

[0037] In the example of Figure 1, the avionics platform 20 comprises two electronic communication cards 22, six electronic calculation cards 25 and one power supply card 28. Alternatively, the avionics platform 20 comprises two electronic communication cards 22, six electronic calculation cards 25 and two power supply cards 28, in order to have redundancy for each type of card.

[0038] Each electronic communication card 22 is configured to communicate with one or more devices, not shown, external to the platform 20. Each electronic communication card 22 is also called an input-output card, and also noted I / O (from the English Input / Output) in figure 1.

[0039] Each electronic computing card 25, also denoted C in FIG. 1, comprises resources 40 and is configured for the execution of software application(s). The resources 40, also called hardware resources, are physical or logical elements suitable for being made available to the software application(s).

[0040] The 40 resources are, for example, divided into the following categories visible in Figure 2:

[0041] - 40A resources of the CPU type (from the English Central Processing Unit);

[0042] - 40B resources of GPU type (from the English Graphics Processing Unit);

[0043] - network communication type resources 40C, such as Ethernet type resources, noted ETH in figure 2, to communicate with the on-board local network on the one hand, and with a communication network external to the aircraft 10 on the other hand,

[0044] - 40D resources of the RAM type, i.e. of the RAM type (from the English Random Access Memory); and

[0045] - 40E resources of storage memory type, i.e. mass memory type, such as SSD resources (Solid State Drive).

[0046] Those skilled in the art will understand that the CPU 40A and GPU 40B type resources are computational resources, i.e. capable of performing computational operations, the GPU 40B type resources being more dedicated to graphical computation and those of the CPU 40A type to general computation.The person skilled in the art will also understand that these resources of the CPU 40A type and of the GPU 40B type, as well as the other resources of the network communication 40C type, of the RAM 40D type and of the storage memory 40E type, are produced in the form of at least one electronic component that can be integrated on a printed circuit board, and for example in the form of an integrated circuit, such as an ASIC (Application Specific Integrated Circuit), or in the form of a programmable logic component, such as an FPGA (Field Programmable Gate Array), or in the form of a microcontroller, or even in the form of a specific processor, such as a processor specialized in signal processing or DSP (Digital Signal Processor). The type of electronic component to be used preferably to produce each type of resource among the aforementioned types of resources is known to the person skilled in the art, and is then not described in more detail.

[0047] Advantageously, the group of electronic computing card(s) 25 comprises resources 40 of all types from the aforementioned group. In the example of FIG. 3, each electronic computing card 25 comprises resources 40 of all types from the aforementioned group. In other words, in this example, each electronic computing card 25 comprises both CPU-type resources 40A, GPU-type resources 40B, network communication-type resources 40C, RAM-type resources 40D and storage memory-type resources 40E.

[0048] Advantageously, the group of electronic computing card(s) 25 comprises resources 40 of all types from the group consisting of: CPU-type resources 40A, network communication-type resources 40C, RAM-type resources 40D and storage memory-type resources 40E. In other words, each electronic computing card 25 comprises CPU-type resources 40A, network communication-type resources 40C, RAM-type resources 40D and storage memory-type resources 40E.

[0049] The group of electronic calculation cards 25 comprises several electronic calculation cards 25, each including the same type(s) of resources 40.

[0050] Advantageously, the electronic cards of the group of electronic computing cards 25 are all identical, for example all include the same resources 40A, 40B, 40C, 40D and 40E, as in the example of FIG. 3. In this example of FIG. 3, each electronic computing card 25 comprises in particular two resources 40A of the CPU type, one resource 40B of the GPU type, two resources 40C of the network communication type, four resources 40D of the RAM type, and two resources 40E of the storage memory type.

[0051] In Figure 2, each electronic computing card 25 comprises a hardware layer 42 (from the English hardware), a low-level software layer 44 (from the English low-level software), a middle-level software layer 46 (from the English middleware) and a high-level software layer 48 (from the English high-level software), these four layers 42, 44, 46 and 48 being superimposed. When advantageously all the electronic computing cards 25 are materially analogous, or even materially identical, they then all have the same hardware layer 42.

[0052] Advantageously, all the electronic computing cards 25 have the same software layers, that is to say respectively the same low-level layer 44, the same middle-level layer 46 and the same high-level layer 48. In other words, the low-level layer 44 is unique for the group of electronic computing cards 25, while being stored separately on each of the electronic computing cards 25. Similarly, the middle-level layer 46 is unique for the group of electronic computing cards 25, while being stored separately on each of the electronic computing cards 25. The high-level layer 48 is also unique for the group of electronic computing cards 25, while being stored separately on each of the electronic computing cards 25.

[0053] Advantageously, these low-level 44, mid-level 46 and high-level 48 layers are further assembled into a single software cluster aggregating all of these software resources.

[0054] Each power supply card 28, also denoted P in FIG. 1, is configured to convert electrical energy received, via one or more respective external connectors 38, from the onboard electrical power supply network on board the aircraft 10 into another electrical energy delivered to the electronic communication cards 22 and computing cards 25. The electrical energy delivered to the electronic cards 22, 25 is typically direct electrical energy or DC energy (from the English Direct Current), and each power supply card 28 then comprises an alternating-direct converter, or AC-DC converter (AC from the English Alternative Current), when the electrical energy received from the onboard electrical power supply network is alternating electrical energy, or a direct-direct converter, or DC-DC converter, when said received electrical energy is direct energy.

[0055] The hardware layer 42 of each electronic computing card 25 comprises the resources 40, and typically the CPU type resources 40A, the GPU type resources 40B, the network communication type resources 40C, the RAM type resources 40D, and the storage memory type resources 40E.

[0056] The low-level software layer 44 comprises a unit 50 for loading a bootloader program, and a unit 52 for providing low-level services comprising, for example, a kernel, such as a Linux kernel, and one or more software drivers. The mid-level software layer 46 comprises an orchestrator 60, a computer container manager 62, a file manager 64 and a set 66 of configuration files, the orchestrator 60, also called an orchestration device or management device, being capable of controlling one or more software services 70, also called unitary software services, i.e. of managing the execution of such software services 70.The computer container manager 62 of each electronic computing card 25 is notably configured to obtain a list of the computer containers, i.e. software resources, present on the respective electronic computing card 25, so that the orchestrator 60 can then control their execution. Furthermore, the computer container manager 62 of one of the electronic computing cards 25 is designated as master manager among the managers 62 of the different electronic computing cards 25, each manager 62 of the other electronic computing card(s) 25 then being slave.The master computer container manager 62 is then further configured to obtain, via each slave manager 62, a list of the computer containers of each other computing card 25, then to generate a list of the computer containers of all the electronic computing cards 25, that is to say a list of all the software resources forming the software cluster described previously.

[0057] The high-level software layer 48 comprises said software services 70.

[0058] When the avionics platform 20 forms a cockpit services server, the software services 70 correspond, for example, to a non-avionics system service of the electronic flight bag or EFB (Electronic Flight Bag) type, remotely accessible by a pilot via a simple web browser, or even to a service aggregating meteorological data to propose alternative trajectories that generate less condensation trails.

[0059] When the avionics platform 20 forms a maintenance services server, the software services 70 correspond for example to an on-board predictive maintenance service, or to “health monitoring” services making it possible to detect critical thresholds in the operation of the avionics systems.

[0060] When the avionics platform 20 forms an entertainment services server, i.e. the multimedia server, the software services 70 correspond, for example, to the services offered to the passengers of the aircraft 10: video on demand or VOD (from the English Video On Demand), audio on demand or AOD (from the English Audio On Demand), games, parameters of the flight (altitude, speed, etc.) and its progress (for example using a “moving map”), audio and / or video announcements from the crew, etc. According to the invention, the group of electronic calculation map(s) 25 comprises resources 40 activated by default, called primary resources 40P, and resources 40 deactivated by default, called secondary resources 40S, the secondary resources 40S being distinct from the primary resources 40P, as shown in FIG.In Figure 3, the primary resources 40P are represented with a different type of line than that used for the secondary resources 40S, to illustrate the fact that the secondary resources 40S are distinct and separate from the primary resources 40P. In the example of Figure 3, the primary resources 40P, activated by default, are represented in bold, i.e. thick line; and the secondary resources 40S, deactivated by default, are represented in thin line, for example in dotted line.

[0061] By "by default" in the expressions "resources activated by default", and respectively "resources deactivated by default", is meant before a new implementation of the avionics platform 20, for example on leaving the factory following the manufacture of the avionics platform 20, or after a software reconfiguration of the avionics platform 20, i.e. after a change in the software configuration of the avionics platform 20, i.e. after loading new software application(s) onto the avionics platform 20. A minimum set of resources, comprising a CPU 40A and a RAM slot 40D, is part of the resources activated by default to be able to act on a reconfiguration of the avionics platform 20, in particular in order to be able to execute the computer container manager 62.In other words, the primary resources 40P of each electronic computing card 25 typically comprise at least one CPU type resource 40A and at least one RAM type resource 40D.

[0062] The software application(s) are executable only on activated resources 40, and a predefined available quantity of resources 40 for the execution of software application(s) then corresponds to the primary resources 40P.

[0063] In the event of unavailability of primary resources 40P, secondary resources 40S are then activated to compensate at least partially, and preferably fully, i.e. totally, for the unavailability of said primary resources 40P.

[0064] In the example of Figure 3, an electronic computing card 25 (namely the fourth computing card 25 from the left) is completely faulty, i.e. out of service, and represented in the form of a cross. All the resources 40 of this computing card 25 are then unavailable, in particular its primary resources 40P activated by default.

[0065] In this example of Figure 3, secondary resources 40S of other electronic computing cards 25 are then activated to compensate for this unavailability of the primary resources 40P of the faulty computing card 25, as represented on the one hand by the arrow R1 to illustrate the activation of the secondary resources 40S of the GPU memory type on the third electronic computing card 25 starting from the left compensating for the unavailability of the primary resources 40P of the GPU type of the faulty card, and on the other hand by the arrow R2 to illustrate the activation of the secondary resources 40S of the CPU and RAM type on the fifth computing card 25 starting from the left compensating for the unavailability of the primary resources 40P of the CPU and RAM type of the faulty card.In this example of Figure 3, the activation of the secondary resources according to the arrows R1 and R2 then fully compensates for the unavailability of the primary resources 40P of the faulty computing card 25, namely of the fourth computing card 25 from the left. Those skilled in the art will understand that the secondary resources 40S selected and then activated, such as those pointed to by the arrows R1 and R2 in the example of Figure 3, then become, after activation, primary resources 40P.

[0066] In other words, generally speaking, the activation of secondary resources 40S to compensate for the unavailability of primary resources 40P transforms said activated secondary resources 40S into primary resources 40P, these resources deactivated by default becoming activated.

[0067] The unavailability of primary resources 40P is typically an unavailability due to a malfunction of these primary resources 40P. Alternatively, the unavailability of primary resources 40P is an unavailability due to a reduction in electrical consumption, this reduction being voluntary (in order to then reduce the electrical consumption of the avionics platform 20 overall) or involuntary (for example following a partial malfunction of the power supply board 28, or even a drop in voltage on the on-board electrical supply network).

[0068] As an optional addition, at least one electronic calculation card 25 includes both primary resources 40P and secondary resources 40S.

[0069] In the example of Figure 3, all the electronic computing cards 25, with the exception of the third electronic computing card 25 from the left, have both primary resources 40P and secondary resources 40S.

[0070] Advantageously, each of the electronic calculation cards 25 comprises both primary resources 40P and secondary resources 40S.

[0071] As an optional addition, at least one electronic computing card 25 comprises, for several types of resource 40, both primary resources 40P and secondary resources 40S. In the example of FIG. 3, all the electronic computing cards 25, with the exception of the third electronic computing card 25 from the left, comprise, for several types of resource 40, both primary resources 40P and secondary resources 40S. The types of resources for which each of these five electronic cards of FIG. 3 comprises both primary resources 40P and secondary resources 40S are the CPU type (resources 40A) and the RAM type (resources 40D).

[0072] Advantageously, each electronic calculation card 25 comprises, for several types of resource 40, both primary resources 40P and secondary resources 40S.

[0073] As an optional addition, at least one electronic calculation card 25 comprises, for each type of resource 40, both primary resources 40P and secondary resources 40S.

[0074] Advantageously, each electronic calculation card 25 comprises, for each type of resource 40, both primary resources 40P and secondary resources 40S.

[0075] As an optional addition, the group of electronic computing card(s) 25 comprises N secondary resource(s) 40S of each type to be resistant to N failure(s), N being an integer greater than or equal to 1. According to this addition, the value N of the number of failure(s) is the sum of the number of failed resource(s) of each type, with in addition a dependency relationship with respect to the CPU 40A type resources. The dependency relationship is that if all the CPU 40A type resources of a respective electronic computing card 25 are failed, then said electronic computing card 25 is considered to be globally failed, and all the other GPU 40B type resources, network communication 40C type resources, RAM 40D type resources, and storage memory 40E type resources of this card 25 are therefore counted as failed.

[0076] The activation, respectively the deactivation, of resources 40 of the group of electronic computing card(s) 25 is for example carried out in software, typically via the orchestrator 60 of software services 70 of software application(s).

[0077] As a variant, not shown, each electronic computing card 25 further comprises one or more resource switches, not shown. According to this variant, the activation, respectively the deactivation, of resources 40 of the group of electronic computing card(s) 25 is then carried out in hardware, in particular via said resource switches and an electronic orchestration device, not shown. For the activation, respectively the deactivation, of resources 40 of the group of electronic computing card(s) 25, the orchestrator 60 or the electronic orchestration device is configured to access a list of the current primary resources 40P and secondary resources 40S, in order to know which secondary resources 40S are available following the detection of an unavailability of certain primary resources 40P.then to select secondary resources 40S to be activated from among those available, in particular according to the type of primary resources 40P detected as unavailable, and finally to update the list of primary resources 40P and secondary resources 40S by removing the primary resources 40P detected as unavailable and modifying the secondary resources 40S selected then activated into primary resources 40P. The list of primary resources 40P and current secondary resources 40S is for example in the form of a computer file, stored in mass memory.

[0078] In the example of Figure 2, the orchestrator 60 of each electronic computing card 25 is for example configured to manage the list of primary resources 40P and secondary resources 40S of the respective electronic computing card 25 on which it is hosted. Furthermore, the orchestrator 60 of one of the electronic computing cards 25 is designated as master orchestrator among the orchestrators 60 of the different electronic computing cards 25, each orchestrator 60 of the other electronic computing card(s) 25 then being slave.The master orchestrator 60 is then further configured to obtain, via each slave orchestrator 60, a list of the primary resources 40P and the secondary resources 40S of each other computing card 25, then to manage a global list of the primary resources 40P and the secondary resources 40S of all the electronic computing cards 25, with in addition a distribution by card 25 of said primary resources 40P and secondary resources 40S.Furthermore, if the master orchestrator 60 is hosted on a computing electronic card 25 which becomes unavailable, such as the faulty computing card 25 in the example of FIG. 3, namely the fourth card from the left in this figure, then a new orchestrator 60 is elected as master orchestrator from among the slave orchestrators 60, in order to continue managing the execution of the software applications, as well as managing the overall list of primary resources 40P and secondary resources 40S of all the available computing electronic cards 25, i.e. which are not faulty.

[0079] Alternatively, the management of the execution of the software applications, as well as the management of the overall list of primary resources 40P and secondary resources 40S of the electronic calculation cards 25, is performed by an electronic orchestration device which is external to the electronic calculation cards 25. In addition, if the unavailability of the primary resources 40P is temporary and if the primary resources 40P removed from the list of primary resources 40P and secondary resources 40S subsequently become available again, then the orchestrator 60 or the electronic orchestration device is further configured to, following this new availability of the primary resources 40P previously removed, modify the list of primary resources 40P and secondary resources 40S by including these primary resources 40P previously removed as new secondary resources 40S.

[0080] As an optional addition, not shown, each electronic computing card 25 comprises two half-cards, the two half-cards of a respective electronic computing card 25 being separately activatable from one another, respectively separately deactivatable from one another. The two half-cards of an electronic computing card 25 are functionally isolated from one another, with separate conductive tracks, resulting from distinct routings, while being arranged on the same substrate, i.e. the same mechanical support, and then being mechanically linked to one another. Advantageously, the resources are of the same type from one half-card to the other, and preferably identical from one half-card to the other, for the two half-cards of the same electronic computing card 25.

[0081] Thus, having secondary resources 40S deactivated by default makes it possible to have resource redundancy, in addition to a simple redundancy of electronic calculation cards 25, and these secondary resources 40S then form a reserve of resources 40 to compensate at least partially for unavailability, due to malfunction or energy reduction, of certain primary resources 40P activated by default, and then provided by default to execute the software application(s). This compensation in whole or in part for the unavailability of primary resources via the activation of secondary resources then makes it possible to continue in whole or in part the execution of the software application(s). This redundancy of resources 40 then makes it possible to improve the reliability of the avionics platform 20.

[0082] Advantageously, when at least one electronic computing card, and preferably each electronic computing card, comprises both primary resources and secondary resources, and this preferably for each type of resource, this also offers intra-card resource redundancy, and preferably for each type of resource.

[0083] It is then understood that the avionics platform 20 according to the invention offers even more reliable operation than the platform of the state of the art.

Claims

DEMANDS 1. Avionics platform (20) intended to be installed on board an aircraft (10), the avionics platform (20) comprising: - an electronic communication card (22) configured to communicate with one or more pieces of equipment external to the platform (20); - a group of electronic computing card(s) (25), each containing resources (40) and configured for the execution of software application(s); - a power supply card (28) configured to convert electrical energy received from an onboard electrical power supply network on board the aircraft (10) into another electrical energy delivered to the electronic communication (22) and computing (25) cards; the power supply (28) and electronic communication (22) and computing (25) cards being interconnected; characterized in that the group of electronic computing card(s) (25) comprises resources (40) that are activated by default, called primary resources (40P), and resources (40) that are deactivated by default, called secondary resources (40S), the secondary resources (40S) being distinct from the primary resources (40P), the software application(s) being executable only on activated resources (40), a predefined available quantity of resources (40) for the execution of the software application(s) then corresponding to the primary resources (40P);and in the event of unavailability of primary resources (40P), secondary resources (40S) are activated to at least partially compensate for the unavailability of said primary resources (40P).

2. Avionics platform (20) according to claim 1, wherein at least one computing electronic card (25) comprises both primary resources (40P) and secondary resources (40S); each computing electronic card (25) preferably comprising both primary resources (40P) and secondary resources (40S).

3. Avionics platform (20) according to claim 1 or 2, wherein the group of electronic computing card(s) (25) comprises resources (40) of one or more types from the group consisting of: CPU resource (40A), network communication resources (40C), RAM resource (40D) and storage memory resource (40E); and the group of electronic computing card(s) (25) then includes primary (40P) and secondary resources for each respective type; the group of electronic computing card(s) (25) preferably includes resources (40) of all types from the aforementioned group.

4. Avionics platform (20) according to claims 2 and 3, wherein at least one electronic computing card (25) comprises, for each type of resource (40), both primary resources (40P) and secondary resources (40S); each electronic computing card (25) preferably comprising, for each type of resource (40), both primary resources (40P) and secondary resources (40S).

5. Avionics platform (20) according to any one of the preceding claims, wherein the group of electronic computing card(s) (25) comprises N secondary resource(s) (40S) of each type to be resistant to N failure(s), N being an integer greater than or equal to 1.

6. Avionics platform (20) according to any one of claims 1 to 5, wherein the activation, respectively the deactivation, of resources (40) of the group of electronic computing card(s) (25) is implemented in a software manner via an orchestrator (60) of software services (70) of software application(s).

7. Avionics platform (20) according to any one of claims 1 to 5, wherein each computing electronic card (25) further comprises one or more resource switch(s); and the activation, respectively the deactivation, of resources (40) of the computing electronic card group(s) (25) is implemented in hardware via the resource switch(s).

8. Avionics platform (20) according to any one of the preceding claims, wherein the group of computing electronic boards (25) comprises several computing electronic boards (25), each including the same type or types of resources (40); the electronic boards of the group of computing electronic boards (25) preferably all being identical.

9. Avionics platform (20) according to any one of the preceding claims, wherein each electronic computing card (25) comprises two half-cards, the two half-cards of a respective electronic computing card (25) being activatable separately from each other, respectively deactivatable separately from each other.

10. Avionics platform (20) according to any one of the preceding claims, wherein the unavailability of primary resources (40P) is an unavailability due to malfunction or an unavailability due to reduced power consumption.

11. Aircraft (10) characterized in that it comprises an avionics platform (20) according to any one of the preceding claims.

Images