EP2335150A1

EP2335150A1 - Assembly for an aircraft for managing and storing data relating to onboard equipment

Info

Publication number: EP2335150A1
Application number: EP09741382A
Authority: EP
Inventors: Olivier Bastien
Original assignee: Airbus Operations SAS
Current assignee: Airbus Operations SAS
Priority date: 2008-09-10
Filing date: 2009-09-08
Publication date: 2011-06-22
Also published as: FR2935861B1; US20110167420A1; CN102209954B; WO2010029250A8; CN102209954A; FR2935861A1; WO2010029250A1

Abstract

The invention relates to an onboard assembly (10) for an aircraft that includes: an updating device (28) dedicated to the aircraft and capable of sending data relating to onboard equipment (16) to a data storage medium (26); and a data loading device (14) that can be connected to the onboard equipment (16) and that can receive data from the storage medium (26).

Description

ASSEMBLY FOR AN AIRCRAFT FOR THE MANAGEMENT AND STORAGE OF DATA RELATING TO ON-BOARD EQUIPMENT

The invention relates to aircraft and more particularly to the management of downloadable data relating to on-board equipment.

Today, many aircraft equipment includes computer programs. It has become common practice to load such programs aboard the aircraft during its period of use.

This loading has indeed different advantages. Software can easily be corrected by loading a modified version of this software on board, without physically changing the installation using this program. Similarly, updating the software makes it possible to upgrade the on-board systems without replacing the latter. Finally, we can reuse the same equipment for the construction of different types of aircraft to the extent that it is then sufficient to customize the software loaded in this equipment. This concept is often called "Field Loadable Software".

This technology assumes that there is a data loading device on board the aircraft. It is also necessary to provide a data storage device constituting a backup storage of all these software in the event that it would be necessary to load software again in one of the equipment. This may be the case for example when a flight equipment has been exchanged following a failure on board.

On the Airbus aircraft called A320, A330 and A340, the software is delivered on a particular support. Each of these media is kept on board as a backup in a box called "floppy box". It follows that the onboard loading device must have a reader compatible with each of these media stored on board.

On board the aircraft of the Airbus company called A380, there is provided a storage device in electronic form that makes it unnecessary to keep onboard media software. This storage device is physically attached to the loading device and constitutes a backup storage in electronic form (a bit like in a file system). However, in the event that the loading device is removed or replaced, it is necessary to fully recharge the storage device, which takes a lot of time.

We therefore want to improve the management of software on board aircraft. However, there are several obligations to this end. 1) First of all, the on-board data loading device must not give rise to an anomaly during which software is inadvertently or involuntarily loaded into equipment (in English "untimely inadvertent uploading of avionics LRU"). This anomaly is to be avoided, especially because many equipment including software that can be loaded by this technology, have an impact on security.

(2) It is also imperative that an operator be on board for any loading of software into a piece of equipment so that the operator starts the loading on board and verifies after the loading has completed that the selected configuration has been properly loaded in the equipment.

3) Finally, it is preferable that the loading device allows a fast update of the data storage device in case of complete reloading of the latter. This is the case for example when the storage device or the equipment that contains it is removed from the aircraft following a failure. To take account of the first constraint, when the storage device on board is not used, two possibilities are possible. Or it is permanently connected to the data loading device. In this case, the configuration of the storage device must correspond exactly to the configuration of the loaded software to ensure that in the event of untimely tripping on the ground, the equipment targeted by the loading performed will remain in the same certified configuration. Or, on the contrary, the storage device is physically disconnected from the loading device. In this case, the storage device may have a configuration different from that of the software used in the equipment.

The second constraint implies that the storage device is accessible on board for the operator and that it permanently contains the configuration to be loaded as a backup.

Faced with the third constraint, there are two possibilities. Either the on-board storage device is updated using a very high transfer rate from physical media, but this possibility is often limited by the technologies that can be used on board. Either redundancy of edge storage devices is provided to improve data availability, but this increases the complexity of the whole, which affects the operational reliability of the storage device.

In addition, there is a demand from users for more flexible management of storage devices. Thus, it is desired that the edge storage device can be updated remotely from the ground by means of a wireless link (Gatelink type, SATCOM, ACARS, etc.). In addition, it is desirable that the Onboard storage can be pre-loaded with future versions of software or databases so that an update of the on-board equipment can be triggered at a later date. Finally, it is desired to store in this device several versions of the same software function. Because of the first constraint (prohibition of an unwanted or unintentional loading), it is not possible to meet such wishes by means of a storage device permanently connected to the loading device (and consequently equipment on board).

An object of the invention is therefore to make the management of software on board more flexible. For this purpose, it is provided according to the invention an edge assembly for an aircraft, which comprises:

an updating device dedicated to the aircraft and able to send data relating to on-board equipment to a data storage medium; and

a data loading device able to be connected to the on-board equipment and to receive the data from the storage medium.

The data will most often be programs used for example for the control of equipment (operational software, configuration file, etc.).

Thus, the update function of the storage medium is distinct from the function of loading the data from this same medium. It is therefore possible to intervene on the update device and manage software within it without interfering with the operation of the data loading device and therefore with the on-board equipment.

Preferably, the updating device is devoid of connection with the loading device. Thus, it prevents the occurrence of the aforementioned anomaly inadvertent or involuntary loading. One can also intervene on the updating device, for example to add a program or delete one, without influencing the loading device and equipment connected to the latter.

Preferably, the loading device and / or the updating device have a predetermined location for the removable reception of the data storage medium.

Thanks to the location of the loading device, in the event of damage to one of the equipment, the data relating to it are available on board without requiring a complex architecture of the storage medium. It is sufficient to put the support on the location of the loading device to load the software corresponding to the equipment concerned. Moreover, when the support is not used, it can be separated from -A- loading device and kept on board. This avoids the occurrence of an anomaly of unwanted loading software. The storage medium can be disembarked from the aircraft to be managed on the ground and for example updated, and can be immediately replaced on board with a support prepared in advance. This reduces the grounding time of the aircraft. In addition, it is possible to multiply the versions of the same software present on board in the storage medium, in particular when it is physically disconnected from the loading device. This architecture also reduces the period necessary for reloading the storage medium when the updating device has been exchanged after a failure. It suffices to remove the storage medium from the deposited update device and reinsert it into the installed one. It therefore offers great flexibility for the management of the storage medium by the airline company responsible for the aircraft, whether this management is carried out on board or on the ground by means of dedicated equipment.

Advantageously, the loading device is able to send other data relating to the equipment to the storage medium.

Advantageously, the set comprises the data storage medium. The invention also provides an aircraft comprising an assembly according to the invention.

Preferably, the updating device is able to receive data relating to equipment from outside the aircraft by wireless link.

Thus, it is possible to remotely update the storage medium via the updating device, whether the aircraft is on the ground or in flight. This update is also without risk of interference with the loading device and on-board equipment, especially when the updating and loading devices are physically disconnected. By this means and more generally, it is the data management of the storage medium that can be done remotely.

The invention also provides a method for loading data on board an aircraft in which, on board the aircraft:

an updating device dedicated to the aircraft sends data storage medium relating to equipment of the aircraft to a data storage medium; and

the storage medium sends the data to a data loading device connected to the equipment.

Preferably, the storage medium is moved from a reception position in which it is able to receive the data of the updating device to a transmission position in which it is able to transmit the data to the loading device. Advantageously, the data loading device sends other data relating to the equipment to the storage medium.

Also provided according to the invention is a program which comprises instructions able to control the execution of at least one of the steps of the method according to the invention in the context of the implementation of this method when this program is executed on a computer.

Finally, according to the invention, there is provided a data recording medium which comprises in recorded form such a program, and a method which comprises a step of making such a program available on a telecommunication network for the purpose of downloading it.

Other features and advantages of the invention will become apparent in the following description of an embodiment given by way of non-limiting example with reference to the accompanying drawings in which:

FIG. 1 is a perspective view of an aircraft according to the invention; FIG. 2 is a schematic view of an assembly according to the invention located on board the aircraft of FIG. 1; and

FIGS. 3, 4, 5 and 6 are views similar to FIG. 2 illustrating different steps of the method of the invention implemented by means of the assembly of FIG. 2.

FIG. 1 illustrates an aircraft according to the invention, which in this case is an airplane. The aircraft 2 comprises a fuselage 4, two wings 6 and two reactors 7 carried by the respective wings.

Referring to Figure 2, there is illustrated a system 8 comprising on the one hand a set 10 located on board the aircraft and on the other hand a device 12 located outside the aircraft and arranged in a fixed or mobile way at ground, for example at the main base of the airline operating the aircraft. The assembly 10 is part of the facilities specific to the aircraft and necessary for its proper operation.

The assembly 10 comprises a device 14 for loading data. This data includes computer programs making it possible in particular to control aircraft equipment such as the equipment 16 illustrated in FIG. 2. It may be equipment relating to the piloting, the conditions of the life on board, etc. Each of them comprises a computer comprising a central unit, memory means capable of recording one or more programs used by the equipment, etc. The data loading device 14 is here hosted within a host platform 18 shared or not with other maintenance applications. However, it is not mandatory to host the device 14 within such a platform. The platform 18 includes a conventional data carrier reader. Such a conventional medium may be a CD or DVD disc, a device having a USB connection, a PCMCIA type card, etc. This reading is done by previously performing an authentication function by a module 22 of the reader. The loading device 14 comprises in the present example a location

24, such as a housing, for the removable reception of a data storage medium 26 of a predetermined type. The loading device 14 and the support 26 will for example be configured such that, when the support is received in the housing 24 in a predetermined receiving position, here called transmission position, it is automatically connected to the loading device 14 in order to be able to transmit data to the latter and to be able to receive it.

The assembly 10 also comprises a device 28 for updating the support 26. The updating device is, in the present example, devoid of any connection with the platform 18 and in particular with the loading device 14, as well as 16. Although this feature is not mandatory, it is particularly advantageous as will be seen later. This updating device comprises means 30 enabling it to receive and send data remotely via a wireless radio link from outside the aircraft and for example from the ground or to the ground. Like the loading device 14, the device 28 has a location 32 for the removable reception of the support 26. Once the support received in the receiving position in the housing thus formed, it is able to receive data from the setting device. day and forward it to the latter. It is provided here that the support 26 is received in this position in the updating device 28 when the loading device 14 is not used. This is the so-called waiting position.

On the ground, the system 8 includes a device for updating the ground 34 located for example in the facilities of the airline. It can be provided that this device has an interface with a data storage member of the airline. This device 34 also includes a location 36 for the removable reception of the support 26 in order to be able to transmit data to the latter and to receive it when it is received in the reception position in the location. Although it is advantageous to have the device 34, it is not mandatory to provide it in the context of the implementation of the invention.

The devices 14, 28 and 34 each comprise a computer comprising a central unit, memory means, etc. The data carrier 26 will be of a predetermined type, distinct from the conventional supports 40, and preferably specific to the type of assemblies used on board the aircraft.

We will now present the operation of the system 8 and the implementation of the method of the invention.

With reference to FIG. 3, we will first present the step of remotely updating the support 26, a step that can take place whether the aircraft is in flight or on the ground.

When the aircraft is in flight or on the ground and the loading device 14 is not used, it is expected that the support 26 is received in the location 34 of the update device 28, in the waiting position as indicated above. The support 26 is then physically deprived of any connection with the onboard network and in particular with the loading device 14 and the equipment 16.

It is then possible to remotely access from the ground to the support 26 to manage its configuration. It is thus possible to delete a software from the support, to add software to it, or to request the support of a support report concerning its configuration, and this without risk with regard to the on-board equipment. This possibility of remote intervention on the support which can to be done when the aircraft is not at its main base, for example when it is in flight, offers great flexibility to the airline to manage the contents of the support 26. Moreover, since the support 26 is physically disconnected of the loading device 14 and the equipment 16, the airline company can store within the support 26 several versions of the same software function, for example in the form of a pre-loading in the support before implementation in the equipment 16.

Referring to Figure 4, we will now present the data loading step.

It is assumed that, as described with reference to FIG. 3, the support 26 has been updated by the addition of at least one software or a new version of a software. It is assumed that the aircraft is on the ground. An operator 38 goes aboard to load the software. For this, the operator first extracts the support 26 from its housing 32 and inserts it into the receiving position in the housing 24 of the loading device 14. Once received at the location 24, it controls the support 26 for sending the necessary data to the device 14, for example the new version of a software of one of the equipment 16. The device 14 then loads the data concerned from the medium 26. It then transmits the data to the equipment 16 concerned. It is now assumed that the task is to load data from a conventional data medium 40. As before, the operator has extracted the medium 26 from replacement 32 to place it in location 24. The operator places the medium 40 in the reader 20. The medium 40 is authenticated therein. Then the loading device 14 loads the data present on the support 40 and transmits them to the equipment 16 concerned and to the support 26 present at the location 24. A backup version of these data is now in the support. edge storage 26 and it is not necessary to keep on board the conventional support 40.

In each of these two cases, when the loading operation is completed, the operator 38 extracts the medium 26 from the location 24 and puts it back into the waiting position in its location 32 within the updating device. Similarly, FIG. 5 illustrates the case in which the wireless link to the updating device 28 is not available, for example because of the location of the aircraft. The presence of the reader 20 however makes it possible to update the support 26. As previously, the operator 38 goes aboard to update the support 26. It first extracts the latter from the device 28 and placed in the location 24 of the loading device 14. From the conventional support 40 placed in the reader 20, it loads the necessary data in the loading device 14, then transfers them by means of the device 14 into the support 26 The latter is thus updated. The operator then extracts the support 26 from the location 24 and places it in the location 32 in the waiting position. Finally, FIG. 6 illustrates the case in which a massive update of the content of the medium 26 has to be carried out. It is assumed here that the wireless link is available but that its bandwidth does not allow updating sufficiently. fast. It is also assumed that it is not possible to immobilize the aircraft on the ground for too long to perform this update according to a known method. The architecture of the system 8 allows an operator 38 to extract the support 26 from the location 24 or 32 in which it was and to disembark from the aircraft. The operator places the support in the location 36 of the device on the ground 34 where it undergoes its direct update. This massive update can be done quickly on this occasion. Once the update is completed, the operator extracts the support 26 from the location 36 and embeds it on board the aircraft to replace it at the location 32.

Another possibility is to provide a new copy of the support 26 prepréparé with the necessary update, for example by performing it in advance within the device 34. These operations can be performed advantageously before the aircraft is available or even accessible. Once the access on board possible, the operator only has to extract the old support 26 of the location 32 (or 24) and to deposit in this same location the new support 26 suitably updated. In the latter case, the updated data are therefore very quickly loaded into the aircraft without requiring a long immobilization of the latter.

As seen, the invention makes it possible to meet the new wishes of users in terms of remote access from the ground for updating or managing the configuration of the data carrier. The presence of the removable data medium and the update device on board provides greater flexibility for the user to manage the content of the data medium without jeopardizing the safety of the on-board equipment, particularly with respect to the constraints of loading data.

The absence of a physical connection between the loading device 14 and the support 26, when the latter is not used, provides effective protection against inadvertent or inadvertent loading. The update device 28 allows the medium to receive data wirelessly from outside the aircraft, and whether the aircraft is on the ground or in flight.

This architecture also makes it possible to have configuration differences between the content of the medium 26 and the on-board computers 16. For example, the medium 26 may comprise an n + 1 version of a software while the on-board computer 16 concerned only includes version n of the software in question.

The removable nature of the support 26 makes it possible to reduce the time of reloading of the support in the event of material damage concerning the assembly 10. It is thus enough to disconnect the support of the defective assembly to replace it within the new assembly once this last installed on board. This same removable character makes it possible to avoid complicating the design of the medium 26 in order to ensure the availability of the data.

Thus, it is not necessary to provide redundancy or replication mechanism.

The whole is therefore more reliable. The massive updating of the support 26 can finally be pre-prepared on the ground at the main base of the airline without affecting the downtime on the ground of the aircraft. As we have seen, it is sufficient to replace the old support with the new one on board the aircraft once it is accessible.

The method according to the invention or at least one of its steps can be executed by means of a program which comprises code instructions able to control the implementation of this method or of this step when it is executed on a computer.

This program can be recorded on a data recording medium such as the supports 26 and 40. It will finally be possible to make this program available on a telecommunication network for the purpose of downloading it.

Of course, we can bring to the invention many changes without departing from the scope thereof. It can be provided that the loading device 14 and / or the updating device 28 have no specific location for receiving the support 26 and are able to communicate with the latter, for example by wireless connection or by means of a wire, when the support 26 is placed near these devices. It can be expected that there exists on board several storage media 26.

Claims

An edge assembly (10) for an aircraft, characterized in that it comprises:

an update device (28) dedicated to the aircraft and capable of sending data relating to on-board equipment (16) to a data storage medium (26); and

- A data loading device (14) adapted to be connected to the on-board equipment (16) and to receive the data from the storage medium (26).

2. An assembly according to the preceding claim wherein the updating device (28) is devoid of connection with the loading device (14).

An assembly according to any one of the preceding claims wherein the loading device (14) and / or the updating device (28) have a predetermined location (24, 32) for the removable reception of the storage medium. data (26).

4. Aircraft characterized in that it comprises an assembly (10) according to any one of the preceding claims.

5. Aircraft according to the preceding claim wherein the updating device (28) is adapted to receive data relating to equipment (16) from outside the aircraft by wireless link.

6. A method of loading data on board an aircraft, characterized in that, on board the aircraft:

an update device (28) dedicated to the aircraft sends data storage medium (26) relating to equipment (16) of the aircraft; and

the storage medium (26) sends the data to a data loading device (14) connected to the equipment (16).

7. Method according to the preceding claim wherein the storage medium

(26) is moved from a receiving position in which it is able to receive data from the updating device (28) to a transmission position in which it is able to transmit the data to the loading device (14) .

8. Program characterized in that it comprises instructions able to control the execution of at least one of the steps of a method according to any one of claims 6 or 7 in the context of the implementation of this process when this program is run on a computer.

9. Data recording medium (26; 40) characterized in that it comprises in recorded form a program according to the preceding claim.

10. A method characterized in that it comprises a step of providing a program according to claim 8 on a telecommunication network for download.