Aircraft Data Update Router for Safety-Critical Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data updating processes for aircraft computing devices require an operator's presence in the cockpit, increasing costs and delaying updates, as some devices pose safety risks during maintenance, necessitating unnecessary human intervention for all updates.
Innovation Solution
A system and method that differentiate between safety-critical and non-safety-critical computing devices, using a data loading device connected to a router, which transfers updates only upon operator command, allowing remote and expedited updates for non-safety-critical devices without cockpit presence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an operator is present in the cockpit for all computing device updates, then safety risks are controlled, but updating costs increase and update speed decreases
Solution Approach 1:
The system segments computing devices into two distinct groups: safety-critical devices (first group) and non-safety-critical devices (second group). This segmentation allows differential update procedures - automated updates for non-safety-critical devices without operator presence, and controlled updates for safety-critical devices with operator presence. The segmentation resolves the contradiction by applying safety controls only where necessary while enabling rapid automated updates elsewhere.
Solution Approach 2:
The system applies different update qualities and control levels to different computing devices based on their safety characteristics. Non-safety-critical devices receive automated, unattended updates, while safety-critical devices receive updates with operator supervision. This local differentiation of update quality and control intensity resolves the contradiction by optimizing each device's update process according to its specific safety requirements.
2Reliability
If an operator is present in the cockpit for all computing device updates, then safety risks are controlled, but human resource costs increase
Solution Approach 1:
By segmenting computing devices into safety-critical and non-safety-critical groups, the system eliminates the need for operator presence during updates of non-safety-critical devices. This reduces human resource consumption from a uniform high level to a differentiated level where operators are only required for safety-critical device updates.
Solution Approach 2:
Non-safety-critical computing devices perform self-updates through automated processes without requiring operator intervention. The data loading device automatically transfers update data to these devices, enabling them to service themselves and eliminating human resource costs for their updates.
3Productivity
If automated updates are performed without operator presence, then update speed increases, but safety risks may arise from uncontrolled device movements
Solution Approach 1:
The system segments computing devices based on their safety impact characteristics. Non-safety-critical devices that cannot cause harmful effects during updates are updated automatically at high speed, while safety-critical devices that could cause harmful effects (such as rudder movements) require operator presence for controlled updates.
Solution Approach 2:
The system converts the potential harm of automated updates into benefit by using the same automated infrastructure to rapidly update non-safety-critical devices while directing operator attention only to safety-critical devices. The harm potential becomes the basis for intelligent routing - devices are automatically classified and routed to appropriate update modes based on their safety characteristics.
Data Source
AI summary
A data updating system for computing devices included in an aircraft, wherein one computing device in a first group of computing devices is, and one other computing device in a second group of computing devices is not, when the data of the computing device is updated, liable to affect the safety of the operator carrying out the maintenance on the aircraft. The system includes a data loading device, a connection connecting the data loading device with the computing device in the second group, and a data router connected to the data loading device, the data router transferring updating data to the computing devices in the first group only when a command by an operator in the cockpit of the aircraft is detected.