Avionics Server Integrity Checking for Uncertified Cockpit Displays
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In safety-critical industries, the high cost and time-consuming certification process for display systems hinders the implementation of new applications on uncertified displays, such as personal electronic devices, which are not approved for displaying mission-critical aeronautical information due to concerns over integrity, continuity, and availability.
Innovation Solution
A server system with processors configured to interface with aeronautical systems, generate critical aeronautical information, and transmit it to uncertified cockpit displays, while using an integrity checking module to verify the accuracy and integrity of the displayed data through image sensors, ensuring compliance with certification standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If uncertified displays are used to display critical aeronautical information, then cost and implementation time are reduced, but integrity and reliability of the displayed information cannot be assured
Solution Approach 1:
The system separates the display device from the certification requirement by dividing the display system into two independent parts: the uncertified display device (PED) and the certified server system. The certification is applied only to the server system that generates and verifies the data, while the display device remains uncertified. This segmentation allows the use of low-cost PEDs without compromising the integrity assurance of critical aeronautical information.
Solution Approach 2:
The server system acts as an intermediary between the aeronautical information sources and the uncertified display device. It retrieves critical aeronautical information, verifies its integrity through multiple independent sources, and only displays it after confirmation of accuracy. This intermediary role ensures that the uncertified display device does not directly handle unverified data, thereby maintaining reliability.
2Reliability
If certification process is implemented for display systems, then integrity and reliability are improved, but cost and time consumption increase significantly
Solution Approach 1:
The certification requirement is segmented and applied only to the server system rather than the entire display chain. The server system undergoes certification to ensure it properly retrieves and verifies critical aeronautical information, while the display device (PED) remains uncertified. This selective segmentation reduces the scope and cost of certification while maintaining integrity assurance.
Solution Approach 2:
The system changes the verification parameter from device certification to data verification. Instead of certifying the display device's hardware and software, the system verifies the integrity of the aeronautical information through multiple independent sources and cross-checking mechanisms. This parameter change allows use of uncertified devices while maintaining information integrity.
3Adaptability or versatility
If existing avionics displays are modified to support new applications, then functionality is improved, but cost and system complexity increase
Solution Approach 1:
The server system is designed to be universal and support multiple different aeronautical applications through software rather than hardware modifications. It can retrieve and display various types of critical aeronautical information (weather, traffic, navigation) on different uncertified display devices without requiring changes to the display hardware. This universality achieves high adaptability while keeping system complexity low.
Solution Approach 2:
Instead of modifying existing avionics displays, the system creates a separate parallel display path using uncertified PEDs. The server system generates and verifies the display data, then transmits it to the PED for display. This copying approach allows new applications to be implemented on inexpensive PEDs without modifying or complicating the existing certified avionics display systems.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A server system on an aircraft is provided. The server system is configured to allow critical aeronautical information to be displayed on a cockpit display that is not certified for displaying critical aeronautical information. The server system includes an aircraft interface device configured to interface with one or more aeronautical systems on the aircraft to retrieve critical aeronautical information; an application module configured to generate application data for display on the cockpit display wherein the application data includes at least some of the critical aeronautical information; an interface module configured to transmit the application data to the cockpit display for display; and an integrity checking module configured to retrieve image data from an image sensor trained on a display device in the cockpit display and configured to perform an integrity check on the image data from the image sensor.