Autopilot Switchover Logic for Reduced-Crew Failure Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Autopilot system failures in aircraft can lead to increased workload and stress for single pilots, particularly in reduced crew operations, as existing systems do not provide adequate redundancy for automatic engagement of a secondary autopilot.
Innovation Solution
A system comprising two or more autopilots with interconnected controllers and sensors that continuously monitor for disconnect factors, allowing for automatic engagement of a secondary autopilot based on a determined hierarchy in case of a failure, with visual and auditory alerts for pilot notification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single autopilot system is used in reduced crew operations, then device complexity is reduced, but reliability deteriorates due to lack of redundancy
Solution Approach 1:
The autopilot system is segmented into multiple independent autopilot units (first autopilot, second autopilot, third autopilot) that can operate autonomously. Each autopilot has its own controller and can independently manipulate flight control surfaces, allowing the system to maintain reliability through redundancy while keeping each individual unit relatively simple.
Solution Approach 2:
The system changes the operational parameter of autopilot availability from single-unit to multi-unit configuration. By implementing a hierarchy where multiple autopilots can be engaged based on system state, the reliability parameter is improved without requiring all autopilots to operate simultaneously, thus managing complexity.
2Reliability
If automatic autopilot disconnection is implemented upon system failure, then safety is improved by preventing faulty control, but workload increases for single pilots who must manually engage backup autopilot
Solution Approach 1:
The system performs preliminary actions by pre-configuring a hierarchy of backup autopilots that are ready to engage automatically upon failure detection. The cross-talk communication channels are established in advance, and the selection logic is pre-programmed, so that when a failure occurs, the backup autopilot can engage immediately without requiring manual pilot intervention.
Solution Approach 2:
The autopilot system provides self-service by automatically detecting failures through sensor monitoring and autonomously engaging the appropriate backup autopilot from the hierarchy. The system monitors its own operational status and performs self-reconfiguration without external intervention, thereby maintaining safety while reducing pilot workload.
3Reliability
If multiple autopilots with cross-talk communication are implemented, then reliability is improved through automatic failure detection and backup engagement, but device complexity increases
Solution Approach 1:
The control system is segmented into discrete autopilot units with standardized interfaces. Each autopilot controller is a separate module that communicates through defined cross-talk channels, making the system modular and easier to manage despite having multiple units. This segmentation allows for systematic failure isolation and simplified maintenance.
Data Source
AI summary
A system and related method operates to receive autopilot selection and monitor aircraft systems to control which autopilot is actively flying the aircraft. During certain flight operations in which a single autopilot is in use, the system reverts to the next available autopilot should the active and selected autopilot disconnect for any reason (e.g., faults and/or failures). The system maintains a redundant ability for pilot use of each pilot selectable mode of each autopilot channel including altitude hold, speed hold, heading hold, etc. For an indication to a pilot or remote operator that the system has reverted to a second autopilot, the system commands a momentary aural warning and a visual message/lights. For failures resulting in timely but necessary maneuver requirements, the system maintains autopilot control laws, control authority and roll authority.