FR2819083A1 - Device for recording parameters of aircraft, seagoing or land vehicle has control unit that produces control signal for ejection in response to given event and fall speed reduction device is used to reduce speed of fall of tape recorder - Google Patents

Abstract

A parameters tape recorder (4) may be accommodated in a compartment (24). A device (38) may eject the tape recorder (4) out of the compartment. A control unit (28) may produce control signal for ejection in response to a given event. A device (35) is used to reduce the speed of fall of the tape recorder (4) after ejection. An Independent claim is included for: (a) a system for recording data on board of a vehicle

Description

<Desc / Clms Page number 1>

 The invention relates to on-board devices for recording vehicle parameters. It could be any type of vehicle, whether air (for example plane, helicopter), sea or land (train, automobile, trucks, etc ...).

 In planes, these devices include the famous black boxes which, moreover, are orange in color to facilitate their visual identification with a view to their recovery after an accident.

 More specifically, in France, Civil Aviation regulations require the installation of a parameter recording system for any aircraft carrying more than nine passengers. Similar regulations exist in many other countries and internationally. Such a device includes at least: - an on-board parameter acquisition unit (Flight Data Acquisition Unit, or FDAU); - a parameter recorder box (Solid State Flight Digital Recorder or SSFDR). It is the first black box which is intended not to be searchable; and - a cabin voice recorder unit (Solid State Cockpit Voice Recorder or SSCVR), also called the second black box.

 Most often, there is also a parameter recording box for the sole purpose of post-flight maintenance (Aircraft Condition Monitoring System or ACMS).

 Such a device, despite the advantages it provides, has some drawbacks.

 First of all, it sometimes happens that, in the event of an accident, the conditions are such that the recorder is not found, for example when the aircraft is immersed at great depth. And the recovery of black boxes generally requires very significant resources and a lot of time.

<Desc / Clms Page number 2>

 It also happens that the recorder, although recovered, cannot be used and cannot be read because it has been damaged, for example during an explosion at altitude. And this, although the recorders are designed to withstand severe conditions (resistance to fire, impact, immersion, crushing, etc.).

 Furthermore, from a given total volume of the recorder, the expected resistance of the recorder obliges the designers in return to reduce the useful volume and in particular the memory capacity. A compromise is therefore made between the resistance to environmental conditions and the number or quantity of the data that can be recorded.

 However, this compromise cannot continue on the same basis. Indeed, the regulations now require longer fire resistance. (We go from 30 minutes to 1 hour). At the same time, it should be possible to consider providing the recorders with an autonomous battery allowing them to continue recording data after the accident.

In addition, we will soon increase the number of parameters to acquire. Better quality of the recorded sound will be required. Finally, it will one day be envisaged to record video images of the dashboard and of the exterior of the aircraft (in particular engines and landing gear), which will require a very large capacity memory.

 An object of the invention is to provide a device for recording parameters which can easily have a very large recording capacity by not necessarily incorporating means of protection under crash conditions while facilitating the collection of data after a accident.

 With a view to achieving this aim, an on-board device for recording on-board parameters for a vehicle is provided according to the invention, comprising a parameter recorder capable of being received in a housing, and means capable of releasing the recorder. outside the accommodation.

<Desc / Clms Page number 3>

 Thus, the device being intended to be released, typically before the accident, it may be provided to withstand relatively mild environmental conditions in comparison with a device intended to remain on board. In return, the internal useful volume of the device could be increased to a very large extent, for example to accommodate an autonomous battery and / or a large capacity memory. In addition, after dropping, the device will be recoverable and usable more easily than if it remains on board the vehicle and is likely to undergo a significant shock, an explosion, or a deep immersion. This device therefore solves many problems at the same time (recovery, design cost, memory volume, etc.).

 The invention thus offers an alternative or complementary solution to the current data backup devices in the event of a crash by ensuring that the memories are no longer subject to the extreme environmental conditions linked to the crash thanks to the prior release.

 It will be advantageous to use simultaneously in the same vehicle a conventional recording device and the device of the invention to increase the probability of recovering the data after an accident. Advantageously, the device according to the invention will therefore be provided in addition to the conventional device intended to remain on board. The vehicle is therefore provided with black boxes capable of having different respective spells (dropping or presence on board) in the event of a vehicle accident.

 The device according to the invention may also have at least one of the following characteristics: - it comprises a control unit capable of controlling the dropping in response to at least one predetermined event; - The means for dropping the recorder comprises means for ejecting the recorder;

<Desc / Clms Page number 4>

 - The device comprises means for limiting the speed of fall of the recorder after release; and - the device comprises means for ensuring the buoyancy of the recorder.

 Advantageously, the device comprises means for transmitting a radio signal.

 Thus, for example when conditions corresponding to a threat of an incident or accident are detected, calculated, or reported, the device triggers the emission of the signal. On-board parameters can thus be collected outside the vehicle, for example on board another vehicle or at a ground station. Obtaining these parameters is therefore facilitated.

In addition, their analysis can begin as soon as possible in order to investigate the causes of the incident or accident. And it becomes less important to design the device so that it can withstand severe conditions. In return, the various organs of the device (memories, ...) can occupy more space and be more efficient.

 The device according to the invention may also have at least one of the following characteristics: - the transmission means are capable of transmitting the signal continuously; - the signal represents parameters recorded by the recorder; - the signal is arranged to allow the location of the recorder; - The recorder is capable of transmitting the signal before dropping in response to at least one predetermined event; - The recorder is able to transmit the signal after release, preferably automatically; - It includes means for placing the transmission means in a range of predetermined positions favorable to transmission when the recorder rests on the ground;

<Desc / Clms Page number 5>

- il comprend une unité de commande apte à commander l'émission en réponse à au moins un événement prédéterminé ; et - l'unité de commande fait partie de l'enregistreur.

- It comprises a control unit able to control the transmission in response to at least one predetermined event; and - the control unit is part of the recorder.

 According to the invention, an assembly is also provided for recording vehicle parameters on board, comprising an on-board device according to the invention.

 Advantageously, the assembly includes an on-board detector connected to the control unit and capable of detecting at least one of the following situations: - immersion of the vehicle; - the fact that an on-board temperature exceeds a predetermined threshold; - the fact that a deceleration of the vehicle exceeds a predetermined threshold; and - the fact that an altitude of the vehicle relative to the ground crosses a predetermined threshold.

 Advantageously, the assembly comprises an on-board control member connected to the control unit and arranged to be actuable by an occupant of the vehicle.

 Advantageously, the assembly includes a radio receiver capable of receiving a command sent by an element independent of the vehicle and of transmitting it to the control unit. For example, the element is a ground station.

 Advantageously, the assembly comprises a control member intended to form part of the station and capable of being actuated by an occupant of the station.

 Other characteristics and advantages of the invention will appear in the following description of three preferred embodiments given by way of nonlimiting examples. In the accompanying drawings:

<Desc / Clms Page number 6>

 - Figure 1 is a flowchart showing an assembly according to a first embodiment of the invention; - Figure 2 is an elevational view of the recorder incorporated in the assembly of Figure 1 and illustrates its cooperation with external elements; - Figure 3 is a flowchart illustrating the control of the recorder of Figure 2; and - Figures 4 and 5 are flow charts similar to Figure 1 and illustrating second and third embodiments of the invention.

 FIGS. 1 to 3 illustrate the first embodiment of an assembly 2 according to the invention for the management, transmission and recording of on-board data, associated with an aircraft such as an airplane.

 An essential element of this set 2 is the ejectable on-board data recorder 4 forming one of the black boxes.

 Before describing the structure and functions of this recorder, we will list the elements with which it can interact and most of which are known in themselves.

 Set 2 includes a cockpit sound recorder 6 (Cockpit Voice Recorder or CVR), recording in particular the voices in the cockpit.

 The assembly 2 comprises members 8, 10 receiving on-board parameters such as altitude, speed, temperatures, action of the controls, etc., parameters which are in practice in very large numbers as those skilled in the art know. One of these bodies is a Flight Data Acquisition Unit (FDAU) 8.

This unit, playing the role of a data concentrator, is connected to a solid state digital flight recorder 12 (Solid State Flight Digital Recorder) to exchange data with the latter. It's one of the black boxes. The other organ 10 is the

<Desc / Clms Page number 7>

 conditions on board the aircraft (Aircraft Condition Monitoring System or ACMS) used for maintenance. It is connected in a manner known per se to a quick access recorder 14 (Quick Access Recorder or QAR / DAR).

 The assembly 2 also includes an element 16 known by the name ACARS (Aircraft Communication Addressing Report System). The latter is in radio link with the ground by satellite or direct VHF link.

 The assembly 2 also includes video cameras 18, for example two in number, one of which films the cockpit with the cockpit and the other films the exterior of the aircraft. The latter is for example arranged at the rear of the aircraft to have in its field of vision the landing gear and the engines. The cameras send their images to the recorder 4.

 The recorder 4 also receives, like the CVR 6, audio data giving an account of the sound environment in the cockpit from microphones 20.

 The recorder also receives air traffic data (Air Trafic Control or ATC).

 Among these elements, the FDAU 8, ACMS 10, QAR 14, ACARS 16, CVR 6 and SSFDR 12 are already known in themselves.

 Referring to Figure 2, the recorder 4 here comprises a housing 22 of generally cylindrical shape with a circular cross section, received in a housing 24 of the same shape formed in the cabin. The recorder 4 remains contiguous with an outer face 26 of the fuselage. Inside the housing 22, the recorder comprises different members, arranged for example in the form of superimposed cylindrical wafers: - a central unit 28 associated with acquisition means; - memories 30; - accumulators 32 capable of supplying the recorder autonomously with electric current for a predetermined period;

<Desc / Clms Page number 8>

 means 34 for transmitting and receiving radio signals; - A compartment 35 comprising means for slowing down the fall of the recorder such as a parachute, as well as a flotation device (for example comprising an inflatable enclosure).

 These elements follow one another from the inside to the outside of the housing.

 The housing 22 is closed off by an antenna 36 extending outside the cabin, projecting from the face 26 and connected to the transmission-reception means 34.

 At the internal end of the housing 24, the recorder 4 comprises release means comprising here an ejector 38 extending between the bottom of the housing 24 and the end of the housing 22. The recorder is connected to the other elements of the 'assembly 2 through the bottom of the housing and a central opening 40 of the ejector 38. The ejector is for example an air ejector capable of propelling the recorder 4 out of the housing 24 to send it at a great distance from the 'plane. The recorder can be ejected using a compressed air capsule from the ejector. In another version, the ejector will include, for example, a device capable of generating in a few hundredths of a second a large amount of gas in order to eject the housing, similar to those found in vehicle airbag devices automobile.

 The central unit 28 includes an event manager which analyzes multiple information originating in particular from the aforementioned various elements of the assembly 2 and decides, depending on the case, to trigger (or not to trigger) the dropping of the recorder. Thus the ejector 38 is capable of being controlled by the central unit 28 when the recorder is in the presence of a predetermined event.

<Desc / Clms Page number 9>

 The information received by the event manager 28 may have different origins and different causes, that is to say represent different events.

 Thus, information can be received by the manager from a body such as ACMS or L'SCARS when a flight parameter crosses a predetermined threshold. This will be the case for example when the actual altitude of the airplane relative to the ground falls below a predetermined threshold (for example 200 m or 100 m). This function will, for example, implement a ground proximity proximity detection system or Ground Proximity Warning System (GPWS). Likewise, this parameter could be the temperature of a part of the aircraft which exceeds a predetermined threshold, which in certain cases corresponds to the detection of an explosion or a fire.

This parameter could be a deceleration of the aircraft which exceeds a predetermined threshold, thus revealing that the aircraft is in a collision situation against an obstacle. Knowing that an airliner requires about half a second to fold (crash) during a frontal impact, for example against a mountain, the detection of the sudden deceleration leaves the time necessary for the ejection of the recorder. In this regard, the recorder should preferably be positioned at the rear of the fuselage, below for ejection downwards or above for ejection upwards. Of course, it may be envisaged that the ejection is triggered following the evolution of other on-board parameters.

 Referring to Figure 3, the assembly 2 may include sensors or detectors 44 capable of sending a signal towards the event manager 28. It may be for example an immersion sensor or even a fire sensor.

 A control member 46 may be provided on board, which allows a crew member or a passenger to control the ejection of

<Desc / Clms Page number 10>

 the recorder by action on this organ, through the event manager.

 In the above cases, the transmission of information to the event manager 28 and / or the transmission of the ejection command from the latter to the ejector 38 can be done by electric current or by radio waves.

 It can also be provided that the ejection can take place, via the event manager, under the effect of a command represented by a signal 42 and triggered from a station 43 independent of the aircraft, for example from the ground or another plane. The command is then transmitted by suitable radio means and implements a telephone, satellite 49 link, etc.

 The event handler of the recorder, capable of receiving this various information, evaluates the situation itself according to certain predetermined models triggers the ejection in certain cases only. More specifically, certain events (for example the actuation of the on-board control 46) will obligatorily generate the ejection order. Other events will first be evaluated in comparison with certain models before the manager decides to eject.

 It can therefore be seen that the recorder 4 can be ejected on an order prepared either manually by a member of the crew or automatically by an on-board computer connected to sensors for detecting critical conditions such as impacts before crash, temperature, immersion, etc. either remotely by radio.

 More specifically, the predetermined events reported to the event manager and likely to cause the ejection of the recorder through it may be of multiple origins, including:

<Desc / Clms Page number 11>

- une commande manuelle 46 mise à disposition des membres d'équipage ; - une commande contenue dans un signal radio 42 reçu directement par l'enregistreur, transmis depuis une station au sol 43 et éventuellement relayée par des moyens complémentaires 49 faisant partie d'un réseau de télécommunication ; - une commande reçue par L'SCARS ou tout autre moyen de télécommunication installé à bord du véhicule ; et - des informations relatives à des paramètres de bord transmises à l'enregistreur par des équipements de bord tels que l'ACMS, l'altimètre, etc. ou par des capteurs spécifiques.

a manual control 46 made available to the crew members; a command contained in a radio signal 42 received directly by the recorder, transmitted from a ground station 43 and possibly relayed by complementary means 49 forming part of a telecommunication network; - an order received by L'SCARS or any other means of telecommunications installed on board the vehicle; and - information relating to on-board parameters transmitted to the recorder by on-board equipment such as the ACMS, the altimeter, etc. or by specific sensors.

 After ejection, the central unit 28 triggers the opening of the parachute 35 and, if necessary or automatically, the triggering of the flotation device. The ejection system will allow the recorder to be very quickly removed a few seconds before the aircraft hits the ground or at sea and before the recorder suffers impact damage and is subjected to extremely severe conditions appearing after the accident (violent shock, fire, immersion in sea water, kerosene ...). The speed of descent of the recorder 4 being limited by the parachute, it will make a soft landing or ditching to avoid deterioration of the internal elements (memory, calculator ...).

 The recorder will preferably have a configuration, in particular a distribution of mass and an arrangement of the antenna, making so that, during the impact of the recorder on the ground and preferably also during the previous fall, the The antenna is oriented upwards and preferably occupies one position from a range of positions at the top of the recorder. This is to maximize the probability that the recorder will land so that the antenna remains operational. Through

<Desc / Clms Page number 12>

 example, we will make sure that the antenna extends in the upper part if the recorder is in water or in mud. This in order to favor the possibility of transmitting radio signals as we will see below.

 Indeed, as illustrated in FIG. 2, the recorder 4 is provided for transmitting, preferably continuously, radio signals 45 for several hours after its ejection. These signals can be of different natures according to their functions. Thus, the recorder can emit a beacon signal facilitating the location of the recorder after the accident. For example, the recorder, once ejected, will be able to allow positioning by GPS (Global Positioning System or global positioning system). It can also emit a signal transmitting the data of all kinds recorded in the recorder 4, so that this data can start to be collected and analyzed even before the recovery of the recorder. These signals 45 will be transmitted to a ground station 43 which may be a re-emission station in the direction of a relay such as a satellite 49 and participating in a network with global coverage. Thus, the assembly according to the invention will preferably be part of a more complete system comprising ground elements such as: - station 43 for receiving data; - interface station to the public telecommunications network; - decryption and analysis station for incident / accident data; and - aircraft flight assistance station.

 Furthermore, independently of the release of the recorder 4, it is also provided that the recorder is capable of transmitting, preferably continuously, a radio signal such as the aforementioned signal 45, in response to a predetermined event and at the decision of the manager. of events 28. From

<Desc / Clms Page number 13>

 preferably, this signal is emitted as soon as an anomaly or incident is detected and before the ejection is triggered. The signal can even be issued in the event of a minor incident concerning the passenger cabin unrelated to aircraft safety (for example a video screen failure in a passenger seat). This signal transmits to the reception station on the ground 43 a continuous stream comprising the data being recorded and / or already recorded by the recorder. This transmission, thanks to the reception transmission means 34 and to the antenna 36, takes place for example on decision of an on-board computer capable of detecting that the aircraft is in a critical situation which could lead to a major incident or to an accident in an extreme case. The emission can also be triggered after reception of information analogous to that which is used to trigger the ejection and generated by a cause of the same type (command by a member of the crew, crossing of threshold by an on-board parameter, detection by a sensor, etc.). In particular, a critical event detection computer (CDEC) can trigger the transmission of data from the recorder.

 The recorder will thus be able to communicate with the nearest reception station 43. The message will, for example, then be retransmitted to a network of low altitude satellites 49 providing global coverage allowing the data to be routed to their final destination.

 In addition, in the event of non-communication with the ground station, the event manager may use one or more of the radio frequency transmitters / receivers (VHF or SATCOM) installed on board the aircraft to transmit data relating to the accident or at the moments preceding this one.

 Data transmission may have several trigger modes:

<Desc / Clms Page number 14>

 - it can take place automatically depending on the current flight phase. For example, transmission will take place automatically during take-off, approach and landing; - it can be triggered when a threshold is exceeded: exceeding the limits of an engine, turbulence, speed, pitch, roll, etc. ; and / or - it may take place under critical alarm conditions displayed on the alarm display screens. This will, for example, be a moderate fire, a hydraulic failure or an electrical generation failure.

 The data transmission will consist of sequential files, containing the accident parameters from the TO, TO + 1 sec, TO + 2 sec, etc ... and the data before the event TO-1 sec, TO-2 sec, etc ... to allow the analysis of the aircraft situation before the appearance of a critical event. Thus, preferably, the transmission will incorporate data representative of the situation of the aircraft before the incident, that is to say before the initiation of the transmission, in order to better understand the causes of the incident.

The parameters transmitted by the recorder, in particular prior to any release, may be parameters recorded in the recorder or being recorded in it
In the event of a breakdown of the electrical generation on board the aircraft and / or after ejection, the accumulator 32 will allow data transmission to continue for several hours. Finally, the recovery of the recorder itself will make it possible to collect data which has not (or not yet) been transmitted by radio.

 In this embodiment, for regulatory reasons, the proposed system does not in any way modify the current data recording device. It complements the regulatory system.

<Desc / Clms Page number 15>

 The capacity of the mass memory 30 integrated in the recorder 4 will be sufficient to allow additional data such as speech, cockpit video or external video to be recorded. These data are complementary to the regulatory accident data and will allow further investigation by the authorities responsible for discovering the causes of the accident. Given the memory capacity required for recording the cockpit video, it will not be possible to transmit these images via the digital telephone link, given the speed of the link. However, future developments will enable the transmission of images by digital radio frequency link. Advantageously, the recorder will have sufficient memory to record: - data in ACMS / DAR format; - video images (cockpit or outside); and - ATN link data.

 It can therefore be seen that the recorder is capable of transmitting the recorded data by any radio frequency means, regardless of whether it is in normal operation on board the aircraft, or after ejection, on an order prepared either manually by a member of the crew, either automatically by an on-board computer (event manager) linked to sensors for detecting critical conditions such as impacts before crash, temperature, immersion, etc., or remotely by radio.

 FIG. 4 illustrates a second embodiment of the assembly according to the invention in which the aforementioned recorder 4 is integrated into a recording set of the type which should be generalized in the medium term, and notably integrating a combined recorder 50 of the EAFR (Enhanced Airborne Flight Recorder) type in parallel and redundant with the recorder 4. This set provides for the recording of data by the recorder 4 and the EAFR 50, and in particular audio and video data.

<Desc / Clms Page number 16>

 All the functions of the recorder 4 are unchanged, in particular the triggering of the ejection and of the radiofrequency transmission.

 FIG. 5 illustrates a third embodiment of the invention in which the recorder 4 is integrated into an on-board assembly whose architecture implements a concentrator unit 52 of the IDMS (Integrated Data Management System) type, known per se , communicating with the recorder via an Ethernet link.

 It can be seen that the invention, due to the ejection and / or transmission of the data, makes it possible to reduce the volume occupied by the memory protection means and in return to increase its capacity. The invention therefore presents a new concept of incident and accident recorder for aircraft, making it possible to overcome the production difficulties associated with the severe environmental standards imposed on CVFDR, SSFDR or DFDR recorders. The invention overcomes the difficulties of keeping the recorder crash standards regulations.

 Of course, many modifications can be made to the invention without departing from the scope thereof.

 Provision may be made for the housing to be defined in the housing of the recording device, the recorder proper constituting only a part of the latter capable of being ejected from the housing.

 The release may be limited to the release of the memory of the recording device.

 The release may consist only in removing the retention of the recorder 4 in its housing so that the recorder leaves its housing and moves away from the plane by gravity, which supposes that the housing is open downwards.

 The invention may be applied to any other type of aircraft, to a ship or even to a road or rail system, subject to possible adaptations to the specific constraints of these vehicles.

Claims (20)

 1. On-board device for recording on-board parameters for a vehicle, comprising a parameter recorder (4) capable of being received in a housing (24), characterized in that it comprises means (38) able to drop recorder (4) outside the accommodation.  2. Device according to claim 1, characterized in that it comprises a control unit (28) capable of controlling the release in response to at least one predetermined event.  3. Device according to any one of claims 1 to 2, characterized in that the means (38) for dropping the recorder (4) comprise means for ejecting the recorder.  4. Device according to any one of claims 1 to 3, characterized in that the device comprises means (35) for limiting the rate of fall of the recorder (4) after release.  5. Device according to any one of claims 1 to 4, characterized in that the device comprises means (35) for ensuring the buoyancy of the recorder (4).  6. Device according to any one of claims 1 to 5, characterized in that the device comprises means (34,36) for transmitting a radio signal (45).  7. Device according to claim 6, characterized in that the transmission means (34,36) are capable of transmitting the signal (45) continuously.  8. Device according to any one of claims 6 to 7, characterized in that the signal (45) represents parameters recorded by the recorder (4).  9. Device according to any one of claims 6 to 8, characterized in that the signal (45) is arranged to allow the location of the recorder (4). <Desc / Clms Page number 18>

10. Device according to any one of claims 6 to 9, characterized in that the recorder (4) is capable of transmitting the signal (45) before dropping in response to at least one predetermined event.  11. Device according to any one of claims 6 to 10, characterized in that the recorder is capable of transmitting the signal (45) after release, preferably automatically.  12. Device according to any one of claims 6 to 11, characterized in that it comprises means (35) for placing the transmission means (34,36) in a range of predetermined positions favorable to transmission when the recorder rests on the ground.  13. Device according to any one of claims 6 to 12, characterized in that it comprises a control unit (28) capable of controlling the emission in response to at least one predetermined event.  14. Device according to claim 2 or 13, characterized in that the control unit (28) is part of the recorder.  15. An assembly (2) for recording vehicle on-board parameters, comprising an on-board device according to one of claims 1 to 14.  16. An assembly according to claim 15, characterized in that it comprises an on-board detector (44) capable of detecting at least one of the following situations: - an immersion of the vehicle; - the fact that an on-board temperature exceeds a predetermined threshold; - the fact that a deceleration of the vehicle exceeds a predetermined threshold; and - the fact that an altitude of the vehicle relative to the ground crosses a predetermined threshold. <Desc / Clms Page number 19>  17. Assembly according to any one of claims 15 to 16, characterized in that it comprises an on-board control member (46) arranged to be actuable by an occupant of the vehicle.  18. An assembly according to any one of claims 15 to 17, characterized in that it comprises a radio receiver (36) capable of receiving a command sent by an element (43) independent of the vehicle.  19. The assembly of claim 18, characterized in that the element (43) is a ground station.  20. The assembly of claim 19, characterized in that it comprises a control member intended to be part of the station (43) and adapted to be actuated by an occupant of the station.