Electronic platform, and associated aircraft, data correlation method and computer program

Abstract

The invention relates to an electronic platform (40) for an aircraft (5), the aircraft (5) comprising an electronic system (10) divided into a critical domain (12) and an open domain (14), the electronic system comprising a plurality of critical avionics systems (20) belonging to the critical domain and a plurality of electronic devices (24) belonging to the open domain, the critical avionics systems comprising avionics sensors (32), and the electronic devices comprising non-avionics sensors (34). The electronic platform (40) is included in the open domain and comprises a receiving module (42) configured to receive avionics data representative of quantities measured by the avionics sensors and non-avionics data representative of quantities measured by the non-avionics sensors; and a correlation module (44) configured to correlate the avionics data with the non-avionics data in order to convert them into correlated data and to detect an event in the aircraft.

Description

[0001] DESCRIPTION

[0002] TITLE: Electronic platform, aircraft, data correlation method and associated computer program

[0003] The present invention relates to an electronic platform, an aircraft, a data correlation method and a computer program.

[0004] An aircraft includes, as is known, an electronic installation, which is separated into a critical domain and an open domain, external to the critical domain. The critical domain includes a plurality of critical avionics systems, for example a flight management system, also called FMS (from the English Flight Management System), a flight control system, also called FCS (from the English Flight Control System), engine management or monitoring systems, a maintenance system, also called CMS (from the English Centralized Maintenance System), or a passenger cabin management system.

[0005] The open domain includes other systems or equipment, for example cameras located in the cabin or an in-flight entertainment system, also called IFE (from the English In-Flight Entertainment).

[0006] It is known to analyze critical avionics systems, for example, through measurements taken by sensors. Furthermore, it is possible to analyze the cabin of an aircraft, such as a commercial airliner, using cameras and / or sensors, and more generally, to analyze non-avionics equipment. However, existing systems often lack precision, and there is a need to improve their analytical capabilities.

[0007] The aim of the invention is therefore to offer an electronic platform providing enhanced analytical capabilities.

[0008] To this end, the invention relates to an electronic platform intended to be carried on board an aircraft, the aircraft comprising an electronic installation compartmentalized into a critical domain and an open domain, external to the critical domain, the electronic installation comprising a plurality of critical avionics systems belonging to the critical domain and a plurality of electronic devices belonging to the open domain, the plurality of critical avionics systems comprising avionics sensors, and the plurality of electronic devices comprising non-avionics sensors, the electronic platform being intended to be included in the open domain, and comprising:

[0009] - a receiving module configured to receive avionics data representative of quantities measured by avionics sensors and non-avionics data representative of quantities measured by non-avionics sensors;

[0010] - a correlation module, connected to the output of the receiving module and configured to correlate avionics data with non-avionics data in order to convert them into correlated data, in order to detect an event within the aircraft.

[0011] Thanks to the invention, the use of both avionics and non-avionics data makes it possible to detect events, including anomalies, by taking into account all of the aircraft's systems, whether avionics or not. Thus, event detection is more reliable and more precise.

[0012] Furthermore, since the electronic platform is designed to be included in the open domain, avionics data flows only from critical avionics systems in the critical domain to electronic devices in the open domain. No non-avionics data is received by the critical avionics systems. Thus, the security of the critical avionics systems is preserved.

[0013] According to other advantageous aspects of the invention, the electronic platform comprises one or more of the following features, taken individually or in any technically possible combination:

[0014] - the correlation module includes an internal clock, and the correlation module is configured to temporally correlate the data, by timestamping the avionics and non-avionics data received against the internal clock, to synchronize them with the internal clock, in order to date the detected event;

[0015] - the correlation module is configured to spatially correlate the data, determining a location of avionics and non-avionics sensors in the aircraft, from the avionics and non-avionics data received, in order to locate the detected event within the aircraft;

[0016] - the electronic platform further includes a comparison module with a memory configured to record a reference model of the aircraft, the comparison module being further configured to compare the data correlated to the reference model of the aircraft and to detect, via said comparison, an event within the aircraft;

[0017] - the electronic platform further includes a transmission module, configured to send a message to a remote terminal when the comparison module detects an event; - the electronic platform includes a control module, configured to, when the comparison module detects an event corresponding to an anomaly in one of the electronic devices, control the electronic device in order to correct the anomaly.

[0018] The invention also relates to an aircraft comprising an electronic installation compartmentalized into a critical domain and an open domain, external to the critical domain, the electronic installation comprising a plurality of critical avionics systems belonging to the critical domain and a plurality of electronic devices belonging to the open domain, the plurality of critical avionics systems comprising avionics sensors, and the plurality of electronic devices comprising non-avionics sensors, the aircraft further comprising an electronic platform included in the open domain, the platform being as described above.

[0019] According to another advantageous aspect of the invention, the aircraft comprises the following feature:

[0020] - the open domain includes an in-flight entertainment system, and the platform is included in the in-flight entertainment system.

[0021] The invention also relates to a data correlation method, implemented by a platform as defined above, the method comprising the following steps:

[0022] - reception, by the receiving module, of avionics and non-avionics data, representative of quantities measured by the avionics and non-avionics sensors respectively; and

[0023] - correlation, by the correlation module, of avionics and non-avionics data to convert them into correlated data, in order to detect an event within the aircraft.

[0024] The invention also relates to a computer program comprising software instructions which, when executed by a computer, implement a process as defined above.

[0025] The invention will become clearer upon reading the following description, given solely by way of non-limiting example, and made with reference to the drawings in which:

[0026] [Fig. 1] Figure 1 is a diagram of an aircraft comprising an electronic platform according to the invention; and

[0027] [Fig. 2] Figure 2 is a flowchart of a data correlation method according to the invention, implemented by the platform of Figure 1. Figure 1 represents an aircraft 5, which includes an electronic installation 10, compartmentalized into a critical domain 12 and an open domain 14. The open domain 14 is external to the critical domain 12.

[0028] The electronic installation 10 includes a plurality of critical avionics systems 20 belonging to the critical domain 12, as well as one or more electronic devices 24, external to the critical domain 12 and belonging to the open domain 14. In the example of Figure 1, the electronic installation 10 includes several electronic devices 24, each belonging to the open domain 14.

[0029] Critical domain 12 is a domain corresponding to the highest level of safety on board aircraft 5, in particular the highest required level of safety of the aircraft 5's electronic installation 10. Critical domain 12 includes critical avionics systems 20. Critical domain 12 is also called aircraft control domain 5, or ACD (from the English Aircraft Control Domain).

[0030] Open domain 14 is a domain which corresponds to a lower level of security than the level of security of critical domain 12. Open domain 14 includes electronic device(s) 24. Open domain 14 includes for example an Airline Information Services Domain, or AISD; and a Passenger Information and Entertainment Services Domain, or PIESD.

[0031] Each critical avionics system 20 is carried on board aircraft 5 and belongs to critical domain 12. Each critical avionics system 20 is known in itself, also called an avionics computer, and is configured to implement one or more respective avionics functions.

[0032] Each critical avionics system 20 is, for example, chosen from the group consisting of: a flight management system, also called FMS (Flight Management System); a guidance system, or FG (Flight Guidance); a flight control system, or FCS (Flight Control System); a GNSS (Global Navigation Satellite System) satellite positioning system, such as a GPS (Global Positioning System); an inertial reference system, also called an IRS (Inertial Reference System); an ILS (Instrument Landing System) or an MLS (Microwave Landing System); an active runway overrun prevention system, also called a ROPS (Runway Overrun Prevention System); a radio altimeter, also denoted RA (Radio Altimeter); a cargo management system;a cabin management system;

[0033] The plurality of critical avionics systems 20 further includes avionics sensors 32. These avionics sensors 32 are, for example, integrated into the critical avionics systems listed previously. Alternatively, or in addition, these avionics sensors 32 are supplementary sensors to those already present in the critical avionics systems 20. The avionics sensors 32 thus belong to the critical domain 12. These avionics sensors 32 are configured to measure quantities and output avionics data representative of these quantities. Such avionics data include, for example, altitude, engine temperature, cabin air pressure, and the status of the aircraft cabin doors 5 and / or the doors of an aircraft cargo bay 5.

[0034] Advantageously, the electronic installation 10 further includes an electronic communication gateway 30 connected between the electronic device(s) 24 and the critical avionics systems 20. The electronic communication gateway 30 is advantageously included in the critical domain 12 and is advantageously configured on the one hand to transmit, and where appropriate filter, a data message issued from the open domain 14 to the critical domain 12, and on the other hand to transmit a data message from the critical domain 12 to the open domain 14.

[0035] The open domain 14 advantageously includes an in-flight entertainment system, also called IFE (In Flight Entertainment). For example, the IFE consists of one or more electronic devices 24.

[0036] The plurality of electronic devices 24 includes sensors 34, which are also called non-avionics sensors, as opposed to avionics sensors 32, included in critical avionics systems 20. Non-avionics sensors 34 belong to the open domain 14. Non-avionics sensors 34 include, for example, cameras, presence sensors, light sensors, etc., arranged, for example, in the aircraft cabin 5. Advantageously, one or more non-avionics sensors 34 are mobile, for example, cameras worn by crew members.

[0037] The non-avionics sensors 34 are configured to measure quantities and output non-avionics data representative of these quantities. Examples of such data include whether a passenger is seated, seatbelts are fastened, and cabin lighting levels. In the case of cameras, the data consists of images, for example, of the cabin. Alternatively, the data may relate to transported goods, such as data on the locking of a transported container, any detected movement, etc. The aircraft 5 also includes an electronic platform 40, which is included in the open domain 14. Specifically, the electronic platform 40 is integrated into the aircraft 5. Advantageously, the electronic platform 40 is included in the IFE (In-Flight Entertainment) system.

[0038] The electronic platform 40 includes a receiving module 42, a correlation module 44, connected to the output of the receiving module 42. Advantageously, the electronic platform 40 includes a comparison module 46, connected to the correlation module 44, as well as a transmitting module 48 and a control module 49, connected to the comparison module 46.

[0039] According to an unrepresented variant, the electronic platform 40 includes an information processing unit formed for example of a memory and a processor associated with the memory.

[0040] The receiver module 42 and the correlation module 44, as well as the optional comparison module 46, the transmission module 48, and the control module 49, are each implemented as a software program, or a software component, executable by the processor. The memory of the electronic platform 40 is then capable of storing receiver software and correlation software, as well as optionally comparison software, transmission software, and control software. The processor is then capable of executing each of the following software programs: the receiver software and the correlation software, as well as optionally the comparison software, the transmission software, and the control software.

[0041] In an alternative not shown, the receiving module 42 and the correlation module 44, as well as the optional comparison module 46, the transmitting module 48 and the control module 49, are each implemented as a programmable logic component, such as an FPGA (Field Programmable Gate Array), or as an integrated circuit, such as an ASIC (Application Specific Integrated Circuit).

[0042] When the electronic platform 40 is implemented as one or more software programs, that is, as a computer program, also called a computer program product, it is also capable of being stored on a computer-readable medium, not shown here. A computer-readable medium is, for example, a medium capable of storing electronic instructions and being connected to a bus of a computer system. Examples of such a readable medium include an optical disc, a magneto-optical disc, ROM, RAM, any type of non-volatile memory (e.g., FLASH or NVRAM), or a magnetic card. A computer program comprising software instructions is then stored on the readable medium.

[0043] The receiver module 42 is configured to receive avionics and non-avionics data. For this purpose, the receiver module 42 is advantageously connected to all the electronic devices 24 and to the electronic communication gateway 30. Advantageously, such a connection is made via a data bus 50, such as an Ethernet bus, connected to the electronic communication gateway 30, the electronic devices 24, and the electronic platform 40.

[0044] The correlation module 44 is configured to correlate avionics data with non-avionics data, converting them into correlated data. Correlation refers to the synchronization of data with respect to a reference frame, or in other words, the matching or correspondence of data within that frame. The data may be of various types, possibly in different formats, originating from sensors 32 and 34 located at different points in the aircraft 5, and / or data received at different times. The correlation can be spatial, meaning that the correlation module 44 is configured to determine the location of the sensors 32 and 34 that provided data to the receiving module 42 relative to the same reference frame; that is, it is configured to locate these sensors 32 and 34 within the same location or positioning frame.Alternatively, or in addition, the correlation is temporal, meaning that the data are uniquely time-stamped, rather than individually by each sensor 32, 34, in order to order them chronologically. For temporal correlation, the correlation module 44 is then configured to determine a date, i.e., a timestamp, for each data point relative to the same reference frame, that is, within the same temporal frame of reference.

[0045] This allows for the detection of an event within aircraft 5. The event is, for example, an anomaly, such as a malfunction of at least one component among the critical avionics systems 20 and electronic devices 24, or an abnormal situation given the overall context of aircraft 5. An abnormal situation given the overall context of aircraft 5 is, for example, a passenger standing during takeoff or landing, or a seatbelt unfastened during turbulence, etc. Alternatively, the event is a situation of interest, for example, when cleaning is completed on board aircraft 5, or when passenger catering service is completed on board aircraft 5.

[0046] The correlation module 44 advantageously includes an internal clock 51, and is advantageously configured to time-stamp received avionics and non-avionics data.

[0047] The comparison module 46 advantageously includes a memory 52 and is configured to store a reference model of the aircraft 5. The transmission module 48 is advantageously connected to a remote terminal 54, for example via a satellite or internet connection. The remote terminal 54 is, for example, located on the ground. Alternatively or in addition, the transmission module 48 is advantageously connected to several remote terminals 54, at least one of which is located on the ground, and the other(s) being terminals on board the aircraft 5, for example, an aircraft instrument console 5, for use by the pilot and / or crew.

[0048] Advantageously, the control module 49 is connected, via a wired or wireless link, to the electronic devices 24 in order to control them. The control module 49 is not connected to the critical avionics systems 20, to avoid safety risks related to an element belonging to the open domain 14 being connected to a system belonging to the critical domain 12.

[0049] An operation of the electronic platform 40, in particular a data correlation process, is now described, with reference to Figure 2. The data correlation process is implemented by the platform 40.

[0050] During a reception step S102, the receiving module 42 receives avionics and non-avionics data transmitted respectively by the avionics 32 and non-avionics 34 sensors. The avionics and non-avionics data are potentially disparate: they typically have different formats, for example, some are images, others are temperature, pressure measurements, etc. Furthermore, they originate from different systems and equipment, potentially located in different places on the aircraft 5. Finally, the data is advantageously received continuously, for example, in real time. However, depending on the nature of the sensor 32, 34, the sensor's measurement frequency, and therefore the data reception frequency by the receiving module 42, is different.

[0051] The data received during the S102 reception stage is advantageously recorded, for example in a memory included in the electronic platform 40.

[0052] The correlation module 44 correlates avionics data with non-avionics data in order to convert them into correlated data, during a correlation step S104, subsequent to the reception step S102.

[0053] Advantageously, during the S104 correlation step, the correlation module 44 performs a temporal correlation of the data. To do this, the correlation module 44 timestamps both the received avionics data and the received non-avionics data using its internal clock 51. This synchronizes all received data within a single temporal reference frame, which in this case is that of the internal clock 51 of the correlation module 44. In other words, the received data is synchronized with the internal clock 51. Advantageously, during the S104 correlation step, the correlation module 44 also performs a spatial correlation of the data. To do this, the correlation module 44 determines the location of sensors 32 and 34 within the aircraft 5, based on the received data. For example, the data emitted by a given sensor 32, 34 contains information on the location of the sensor 32, 34, which is read by the correlation module 44.Alternatively, the correlation module 44 uses data from several sensors 34, for example from several cameras with a fixed position, to determine the location within the aircraft 5 of a mobile sensor 34, such as a mobile camera. The spatial reference frame is, for example, a reference frame linked to the aircraft 5.

[0054] Advantageously, other data processing is carried out as a variant or complement, such as filtering, converting data into a different format, or into a different formalism using specific libraries.

[0055] Converting avionics and non-avionics data into correlated data allows for the detection of an event within aircraft 5.

[0056] Advantageously, in order to detect a respective event within aircraft 5, the method includes a comparison step S106, during which the comparison module 46 compares the correlated data to the reference model of aircraft 5.

[0057] The reference model of aircraft 5 is, according to an example, recorded in memory 52 of the comparison module 46.

[0058] Alternatively, several models are pre-recorded in memory 52, and the reference model is then selected by the comparison module 46 using received data, particularly avionics data. Indeed, avionics data provides contextual information, for example on the phase or flight conditions, which allows the appropriate reference model to be chosen for the situation.

[0059] Alternatively, the reference model is regularly adapted, for example in real time, from contextual information obtained from avionics data, in order to obtain a reference model that is as accurate as possible, and which takes into account, for example, changes in the operation of critical avionics systems 20. Temporal correlation, which advantageously allows avionics and non-avionics data to be dated according to a single temporal reference, then makes it possible to obtain ordered and relevant contextual information.

[0060] The reference model includes data indicating all expected states of the critical avionics systems 20, the electronic devices 24, and more generally, of the aircraft 5, or alternatively, states associated only with the aircraft cabin 5. For example, during a takeoff phase, the reference model includes data indicating that all cabin seats should be upright. As another example, during a turbulent phase, the reference model includes data indicating that all passengers should be seated.

[0061] Advantageously, the comparison module 46 generates a real model of aircraft 5 from the correlated data. The real model includes data, which are either the correlated data or data generated from the correlated data, indicating all the states of aircraft 5, or alternatively, states associated only with the cabin of aircraft 5.

[0062] During the S106 comparison step, the comparison module 46 compares the correlated data to the reference model. For example, the comparison module 46 compares the actual model to the reference model. The comparison module 46 then detects a corresponding event, such as an anomaly, in aircraft 5 if, following their comparison, the correlated data and the reference model do not match. For example, the correlated data and the reference model do not match if their values ​​differ by more than a predefined threshold. The threshold is advantageously variable depending on the type of data being compared and / or the reference model used. Alternatively, the correlated data and the reference model do not match if a ratio of their values ​​exceeds a predefined threshold.

[0063] For example, the real-world model includes data, such as images acquired by cameras, showing a standing passenger. The real-world model also includes data indicating that aircraft 5 is passing through an area of ​​turbulence. The reference model, adapted to account for aircraft 5 passing through an area of ​​turbulence, includes data indicating that passengers should be seated. In this case, the comparison module 46 detects an event, in this case, an anomaly.

[0064] Conversely, if the data indicates that aircraft 5 is not passing through an area of ​​turbulence, the reference model indicates that passengers can move around inside the aircraft. In this case, even if the image acquired by one of the cameras shows a standing passenger, the comparison module 46 does not detect an event.

[0065] Advantageously, the spatial correlation of the data performed during the correlation step S104 makes it possible to locate the event within aircraft 5, if an event is detected in the comparison step S106. Similarly, the temporal correlation of the data, performed during the correlation step S104, makes it possible to date the event detected in the comparison step S106. Advantageously, in the case of event detection using data from images, the comparison module 46 performs, for example, an object localization process to determine the location within aircraft 5 of an object visible in the image, this object being the origin of the event.

[0066] Advantageously, if an event is detected during the comparison step S106, a transmission step S108 is performed, during which the transmission module sends a message to the remote terminal 54. For example, the message is an alert message for ground personnel, indicating, for instance, a malfunctioning electronic device 24 or critical avionics system 20. Alternatively, the message is sent to the crew, enabling them to take corrective action, particularly in the case of an anomaly. For example, if a passenger is standing during turbulence, the crew receives the message to be informed and request the passenger to sit down.

[0067] Advantageously, the message also includes data determined by comparison module 46 to be abnormal.

[0068] If, during the comparison step S106, an anomaly is detected in one of the electronic devices 24, then, as an alternative or in addition to the emission step S108, a correction step S109 is advantageously carried out. During the correction step S109, the control module 49 advantageously commands the electronic device 34 that caused the anomaly to correct the anomaly.

[0069] For example, in the case where a seat is detected as not raised during the takeoff phase of aircraft 5, the control module 49 advantageously commands the seat to raise it, or commands a signal, visual or audible, to ask the passenger to raise their seat.

[0070] Advantageously, the platform 40 is configured to take into account data from various sensors 32, 34, without the user predetermining a specific type or number of sensors 32, 34. Thus, it is possible to modify the sensors 32, 34, particularly the non-avionics sensors 34, by removing or adding them without requiring any changes to the operation of the electronic platform 40.

[0071] Event detection is thus improved thanks to the electronic platform 40. In particular, taking into account avionics data to determine if an event is present in aircraft 5 makes it possible to take into account the overall situation of aircraft 5, for example its phase of flight.

[0072] The electronic platform 40 advantageously allows corrective measures to be taken, via the control module 49 which controls electronic devices 24. This also makes it easier for the crew to work, without compromising the safety of the aircraft, since only the electronic devices 24, from the open world 14 and independent of the critical avionics systems 20, can be controlled directly by the platform 40.

Claims

DEMANDS 1. Aircraft electronic installation (10) compartmentalized into a critical domain (12) and an open domain (14), external to the critical domain (12), the electronic installation (10) comprising a plurality of critical avionics systems (20) belonging to the critical domain (12) and a plurality of electronic devices (24) belonging to the open domain (14), the plurality of critical avionics systems (20) comprising avionics sensors (32), and the plurality of electronic devices (24) comprising non-avionics sensors (34), characterized in that said electrical installation incorporates an electronic platform (40) included in the open domain (14), the electronic platform (10) comprising: - a receiving module (42) configured to receive avionics data representative of quantities measured by avionics sensors (32) and non-avionics data representative of quantities measured by non-avionics sensors (34); - a correlation module (44), connected at the output of the receiving module (42) and configured to correlate avionics data with non-avionics data in order to convert them into correlated data, in order to detect an event within the aircraft (5), the correlation module (44) including an internal clock (51), and the correlation module (44) is configured to temporally correlate the data, by timestamping the received avionics and non-avionics data with respect to the internal clock (51), to synchronize them with the internal clock (51), in order to date the detected event.

2. Electronic installation (10) according to claim 1, wherein the correlation module (44) is configured to spatially correlate the data, determining a location of the avionics sensors (32) and non-avionics sensors (34) in the aircraft (5), from the avionics and non-avionics data received, in order to locate the detected event within the aircraft (5).

3. Electronic installation (10) according to claim 1 or 2, further comprising a comparison module (46) having a memory (52) configured to record a reference model of the aircraft (5), the comparison module (46) being further configured to compare the data correlated to the reference model of the aircraft (5) and to detect, via said comparison, an event within the aircraft (5).

4. Installation (10) according to claim 3, further comprising a transmission module (48), configured to transmit a message to a remote terminal (54) when the comparison module (46) detects an event.

5. Installation (10), according to claim 3 or 4, comprising a control module (49), configured to, when the comparison module (46) detects an event corresponding to an anomaly of one of the electronic devices (24), control the electronic device (24) in order to correct the anomaly.

6. Aircraft (5), comprising an electronic installation (10) compartmentalized into a critical domain (12) and an open domain (14), external to the critical domain (12), the electronic installation (10) comprising a plurality of critical avionics systems (20) belonging to the critical domain (12) and a plurality of electronic devices (24) belonging to the open domain (14), the plurality of critical avionics systems (20) comprising avionics sensors (32), and the plurality of electronic devices (24) comprising non-avionics sensors (34), the aircraft (5) further comprising an electronic platform (40) included in the open domain (14), said electronic installation being according to any one of the preceding claims.

7. Aircraft (5) according to the preceding claim, wherein the open area (14) comprises an in-flight entertainment system, and the platform (40) is included in the in-flight entertainment system (24).

8. A data correlation method, implemented by a platform (40) embedded within an electronic installation (10) compartmentalized into a critical domain (12) and an open domain (14), external to the critical domain (12), the electronic installation (10) comprising a plurality of critical avionics systems (20) belonging to the critical domain (12) and a plurality of electronic devices (24) belonging to the open domain (14), the plurality of critical avionics systems (20) comprising avionics sensors (32), and the plurality of electronic devices (24) comprising non-avionics sensors (34), the electronic installation (10) further comprising an electronic platform (40) included in the open domain (14), the method comprising the following steps: - reception (S102), by the receiving module (42), of avionics and non-avionics data, representative of quantities measured by the avionics (32) and non-avionics (34) sensors respectively; and 15 - correlation (S104), by the correlation module (44), of avionics and non-avionics data to convert them into correlated data, in order to detect an event within the aircraft (5), said correlation including a temporal correlation of the data, via an internal clock of said correlation module, by timestamping the avionics and non-avionics data received with respect to the internal clock, to synchronize them with the internal clock, in order to date the detected event.

9. Computer program comprising software instructions which, when executed by a computer, implement a method according to the preceding claim.

Images