IL308000B2 - Weapon safety device and method - Google Patents

Description

P-627628-IL SAFETY DEVICE AND METHOD FOR WEAPONS FIELD OF THE INVENTION [0001]The present invention relates to the field of weapons, and more particularly, to safety devices and methods for weapons. BACKGROUND OF THE INVENTION [0002]Typical electronic safe and arm device (ESAD) for a weapon processes signals received directly from sensors of the weapon to determine whether or not predetermined conditions (e.g., predetermined safety conditions) are met and/or utilizes an impact fuse and/or a proximity fuse to actuate a detonator of the weapon. However, current weapons may be autonomous (e.g., may be at least partly controlled by software programs such as artificial intelligence algorithms) and/or may be actuated by signals generated by software programs in addition to or instead of the signals received directly from the sensors of the weapon. Therefore, utilization of typical ESADs in such weapons may be insufficient to meet safety and/or reliability requirements. SUMMARY OF THE INVENTION [0003] Some embodiments of the present invention may provide a safety device for a weapon, which may include: a condition determination module configured to: receive data from one or more sensors and determine, based on the received data, whether two or more operating conditions have been met, and receive an operational command and determine, based on the received operational command, whether a mission readiness state should be initiated; a weapon control module configured to receive, from the condition determination module, a plurality of signals and to operate an electronic safe and arm device (ESAD) of the weapon in accordance with the plurality of signals, wherein the plurality of signals includes at least: a first condition fulfilment signal indicating that a first condition has been fulfilled and that a first static switch of the ESAD should be closed, a second condition fulfilment signal indicating that a second condition has been met and that a second static switch of the ESAD should be closed, a mission readiness initiation signal indicating that a mission readiness state has been initiated and that a dynamic switch of the ESAD should be closed; a mission execution signal switch; and a mission control module configured to: receive from the condition determination module a mission execution conditions fulfilment signal P-627628-IL and close the mission execution signal switch and transmit a mission execution signal to the ESAD to actuate a detonator to trigger a payload of the weapon. [0004]In some embodiments, the mission readiness state is time limited, and wherein the dynamic switch automatically reopens upon expiry of the mission readiness state thereby preventing the detonator from being actuated. [0005]In some embodiments, the one or more sensors are configured to obtain data about conditions within the weapon. [0006]In some embodiments, conditions within the weapon include at least one of: inertial forces acting upon the weapon, a temperature of components within the weapon, a remaining amount of fuel. [0007]In some embodiments, the one or more sensors are configured to obtain data about conditions external to the weapon. [0008]In some embodiments, conditions external to the weapon include at least one of: a GPS position of the weapon, environmental conditions proximate to the weapon. [0009]In some embodiments, data received from the sensors is validated using one or more reliability algorithms. [0010]In some embodiments, the two or more predetermined operating conditions include: a geographical position of the weapon, a rate of acceleration of the weapon, a time of flight of the weapon, a distance from an operator, a distance from allied forces. [0011]In some embodiments, the received one or more operational commands and the mission execution command are manually entered and originate from an external operator. [0012]In some embodiments, the received one or more operational commands and the mission execution command originate from the mission control module, and wherein the mission control module is configured to autonomously operate in accordance with data received from the one or more sensors and predefined logic parameters. [0013]In some embodiments, the ESAD is switchable between an unpowered standby state in which at least one switch is open and an activated state in which all three switches are closed. [0014]In some embodiments, the ESAD is configured to transmit an actuation voltage to a detonator of the weapon, and the detonator is configured to trigger the payload upon receipt of the actuation voltage from the ESAD.

P-627628-IL

[0015]Some embodiments of the present invention may provide a weapon, which may include: an electronic safe and arm device (ESAD) comprising a first static switch, a second static switch, and a dynamic switch, wherein the ESAD is switchable between a standby state in which at least one switch is open and an activated state in which all three switches are closed, a payload operably connected to a detonator and the ESAD, wherein the detonator is configured to trigger the payload upon receipt of an actuation voltage from the ESAD; a condition determination module configured to: receive data from one or more sensors and determine, based on the received data, whether two or more operating conditions have been met, and receive an operational command and determine, based on the received operational command, whether a mission readiness state should be initiated; a weapon control module configured to receive, from the condition determination module, a plurality of signals and to operate an electronic safe and arm device (ESAD) of the weapon in accordance with the plurality of signals, wherein the plurality of signals includes at least: a first condition fulfilment signal indicating that a first condition has been fulfilled and that a first static switch of the ESAD should be closed, a second condition fulfilment signal indicating that a second condition has been met and that a second static switch of the ESAD should be closed, a mission readiness initiation signal indicating that a mission readiness state has been initiated and that a dynamic switch of the ESAD should be closed; a mission execution signal switch; and a mission control module configured to: receive from the condition determination module a mission execution conditions fulfilment signal and close the mission execution signal switch, and transmit a mission execution signal to the ESAD to actuate a detonator to trigger a payload of the weapon. [0016]In some embodiments, the mission readiness state is time limited, and wherein the dynamic switch automatically reopens upon expiry of the mission readiness state thereby returning the ESAD to the standby state and preventing the detonator from being actuated. [0017]In some embodiments, the one or more sensors are configured to obtain data about conditions within the weapon. [0018]In some embodiments, conditions within the weapon include at least one of: inertial forces acting upon the weapon, a temperature of components within the weapon, a remaining amount of fuel. [0019]In some embodiments, the one or more sensors are configured to obtain data about conditions external to the weapon.

P-627628-IL

[0020]In some embodiments, conditions external to the weapon include at least one of: a GPS position of the weapon, environmental conditions proximate to the weapon. [0021]In some embodiments, data received from the sensors is validated using one or more reliability algorithms. [0022]In some embodiments, the two or more predetermined operating conditions include: a geographical position of the weapon, a rate of acceleration of the weapon, a time of flight of the weapon. [0023]In some embodiments, the received one or more operational commands and the mission execution command are manually entered and originate from an external operator. [0024]In some embodiments, the received one or more operational commands and the mission execution command originate from the mission control module, and wherein the mission control module is configured to autonomously operate in accordance with data received from the one or more sensors and predefined logic parameters. BRIEF DESCRIPTION OF THE DRAWINGS [0025]For a better understanding of embodiments of the invention and to show how the same can be carried into effect, reference will now be made, purely by way of example, to the accompanying drawings in which like numerals designate corresponding elements or sections throughout. In the accompanying drawings: [0026]Fig. 1 is a block diagram of a safety device and of a weapon, according to some embodiments of the invention; [0027]Fig. 2 is a block diagram of the safety device including at least partly autonomous mission control, and of the weapon, according to some embodiments of the invention; [0028]Fig. 3 is a block diagram of a weapon including the safety device, according to some embodiments of the invention; [0029]Fig. 4 is a block diagram of a weapon including components of the safety device, according to some embodiments of the invention; and [0030]Fig. 5 is a block diagram of an exemplary computing device which may be used with embodiments of the present invention. [0031]It will be appreciated that, for simplicity and clarity of illustration, elements shown in the figures have not necessarily been drawn to scale. For example, the dimensions of some of the P-627628-IL elements may be exaggerated relative to other elements for clarity. Further, where considered appropriate, reference numerals may be repeated among the figures to indicate corresponding or analogous elements. DETAILED DESCRIPTION OF THE INVENTION [0032]In the following detailed description, numerous specific details are set forth in order to provide a thorough understanding of the invention. However, it will be understood by those skilled in the art that the present invention can be practiced without these specific details. In other instances, well-known methods, procedures, and components, modules, units and/or circuits have not been described in detail so as not to obscure the invention. [0033]Embodiments of the present invention may provide a safety device for a weapon that may improve the safety and/or the reliability of the weapon. The safety device may be used in at least partly autonomous weapons such as weapons that are at least partly controlled by software programs such as artificial intelligence algorithms. In operation, the safety device may determine, based on data from one or more sensors, whether or not two or more conditions (e.g., predetermined conditions) are met; if it is determined that the two or more conditions are met, set a period of time in which a mission may be executed; and control an electronic safe and arm device (EASD) of the weapon to actuate a detonator of the weapon to execute the mission within that period of time. [0034]Embodiments of the present invention may provide a safety device for a weapon, which includes: a condition determination module configured to: receive data from one or more sensors and determine, based on the received data, whether two or more operating conditions have been met, and receive an operational command and determine, based on the received operational command, whether a mission readiness state should be initiated; a weapon control module configured to receive, from the condition determination module, a plurality of signals and to operate an electronic safe and arm device (ESAD) of the weapon in accordance with the plurality of signals, wherein the plurality of signals includes at least: a first condition fulfilment signal indicating that a first condition has been fulfilled and that a first static switch of the ESAD should be closed, a second condition fulfilment signal indicating that a second condition has been met and that a second static switch of the ESAD should be closed, a mission readiness initiation signal indicating that a mission readiness state has been initiated and that a dynamic switch of the ESAD should be closed; a mission execution signal switch; and a mission control module configured to: P-627628-IL receive from the condition determination module a mission execution conditions fulfilment signal and close the mission execution signal switch, and transmit a mission execution signal to the ESAD to actuate a detonator to trigger a payload of the weapon. [0035]According to some embodiments of the present invention, the mission readiness state may be time limited, and wherein the dynamic switch automatically reopens upon expiry of the mission readiness state thereby preventing the detonator from being actuated. [0036]According to some embodiments of the present invention, the conditions external to the weapon may include at least one of: a Global Positioning System (GPS) position of the weapon, environmental conditions proximate to the weapon. [0037]According to some embodiments of the present invention, the received one or more operational commands and the mission execution command originate from the mission control module, and wherein the mission control module may be configured to autonomously operate in accordance with data received from the one or more sensors and predefined logic parameters. [0038]According to some embodiments of the present invention, the ESAD may be switchable between an unpowered standby state in which at least one switch is open and an activated state in which all three switches are closed. [0039]Reference is made to Fig. 1, which is a block diagram of a safety device 100 and of a weapon 90, according to some embodiments of the invention. [0040]Reference is also made to Fig. 2, which is a block diagram of safety device 100 including at least partly autonomous mission control module 130, and of a weapon 90, according to some embodiments of the invention. [0041]Reference is made to Fig. 3, which is a block diagram of a weapon 200 including safety device 100, according to some embodiments of the invention. [0042]Reference is also made to Fig. 4, which is a block diagram of a weapon 300 including components of safety device 100, according to some embodiments of the invention. [0043]Weapon 90 may be a drone, a quadcopter, a robot and/or any other suitable machine that can be controlled (e.g., autonomously and/or remotely by an operator 80) to perform a series of operations to perform a mission. Weapon 90 may be a lethal weapon. Weapon 90 may include an ESAD 92, a detonator 94 and payload 94. ESAD 92 may be a commercial off-the-shelf (COTS) arrangement and may be inexpensively retrofitted/adapted to implement the present invention.

P-627628-IL Alternatively, ESAD 92 may be tailor made to have the features necessary for implementing the present invention. [0044]ESAD 92 of weapon 90 may include a first static (e.g., time independent) switch 92a, a second static (e.g., time independent) switch 92b and a dynamic (e.g., time dependent) switch 92c. The first static switch 92a and the second static switch 92b may be embodied as a mechanical force-of-gravity sensitive switch (G-switch) and/or a mechanical barrier. The dynamic switch 92c may be embodied as an impact sensitive switch, an altitude sensitive switch, or any other suitable sensing device. ESAD 92 may include a controller 92d that may receive signals and based on the received signals control each of first static switch 92a and second static switch 92b to close or open, and control dynamic switch 92c to close. Once closed, each of first static switch 92a and second static switch 92b may remain closed until an open command is transmitted to the respective switch by controller 92d. Once closed, dynamic switch 92c may remain closed for a selected period of time and open once the selected period of time has passed. The selected period of time may be predetermined. The selected period of time may be determined during operation of weapon and/or of safe device 100, for example by components of safety device 100 and/or by operator 80. [0045]ESAD 92 may include high voltage interface circuitry 92e. High voltage interface circuitry 92e may be powered by safety device 100 (e.g., as described hereinbelow). High voltage interface circuitry 92e may be powered by safety device 100 only if first static switch 92a, second static switch 92b and dynamic switch 92c are closed. If at least one of first static switch 92a, second static switch 92b and dynamic switch 92c is open, safety device 100 cannot power high voltage interface circuitry 92e. ESAD 92 may include a high voltage switch 92f. When closed, high voltage switch 92f may allow high voltage interface circuitry 92e to power detonator 94. When open, high voltage switch 92f may prevent high voltage interface circuitry 92e from powering detonator 94. ESAD may include mission execution signal interface circuitry 92g. Mission execution signal interface circuitry 92g may receive a mission execution signal and control high voltage switch 92f to close and allow high voltage interface circuitry 92e to power detonator 94. Once powered with high voltage, detonator 94 may detonate payload 96. A “high” voltage in the context of the present invention should be understood to be a level/magnitude suitably far removed from ordinary operational voltages and/or static electricity build up to preclude accidental/unintended detonation of the payload. This may, for example, be a voltage in excess of 1500 volts.

P-627628-IL

[0046]According to some embodiment, safety device 100 may include a condition determination module 110, a weapon control module 120, a mission control module 130 and a mission execution signal switch 140. Each of condition determination module 110, weapon control module 120 and mission control module 130 may include one or more computing devices such as computing device 500 described hereinbelow. Mission execution signal switch 140 may be embodied as a fire command button/switch which may be triggered/pressed to activate a detonator 94. [0047]Condition determination module 110 may receive data from one or more sensors 105. One or more sensors 105 may include one or more sensors 105a of safety device 100 and/or one or more external sensors 105b such as sensors of weapon 90. One or more sensors 105 may obtain data about parameters related to weapon 90 and/or to proximity of weapon 90. For example, one or more sensors 105 may obtain data about inertial forces acting on weapon 90, a temperature of components acting within weapon 90, a remaining amount of power (e.g., battery or fuel) in weapon 90, a geolocation of weapon 90, environmental conditions proximate to weapon 90 and/or any other suitable parameters related to weapon 90 or the proximity of weapon 90. In some embodiments, condition determination module 110 may validate the data received from one or more sensors 105 using one or more reliability algorithms. The reliability algorithms may be operable to compare/cross-reference the outputs from different sensors and/or algorithms and therefrom ascertain whether the results/data are reliable or unreliable. The reliability algorithms may include a redundant algorithm block arrangement wherein the same algorithm is run on two entirely separate processing units and compared. The output from the two separately executed algorithms should be the same otherwise the result may be deemed unreliable. The reliability algorithms may include a depended algorithm block arrangement wherein a result from a first algorithm is used to drive a second algorithm. In this arrangement, the second algorithm is not run until such a time as the output from the first algorithm is deemed to have fulfilled one or more requirements. The reliability algorithms may include an independent algorithm block arrangement wherein two algorithms are run on two entirely separate processing units and are not compared or connected in any way. In this arrangement, there is no cross-contamination or interference between the algorithms and their respective outputs. [0048]Based on the data from one or more sensors (not shown), condition determination module 110 may determine whether or not two or more conditions are fulfilled (e.g., met). Each of the two or more conditions must be fulfilled in order to allow weapon 90 to execute (e.g., safely execute) P-627628-IL a mission. Each of the two or more conditions may be predetermined. Each of the two or more conditions may be determined during operation of safety device 100 and/or weapon 90, for example by operator 80. For example, each of the two or more conditions may include a geolocation of weapon 90, an acceleration rate of weapon 90, a time of flight of weapon 90, a distance of weapon from operator 80, a distance of weapon 90 from allied forces, a time left for executing the mission and/or any other suitable condition that must be fulfilled in order to allow weapon 90 to execute (e.g., safely execute) the mission. [0049]Based on determinations of whether or not the two or more conditions are fulfilled, condition determination module 110 may transmit a plurality of signals to weapon control module 120 and/or mission control module 130 (e.g., as described hereinbelow). [0050]Weapon control module 120 may include a controller 122, power supply circuitry 124 and high voltage supply circuitry 126. Controller 122 may receive the signals from condition determination module 110. Based on the signals received from condition determination module 110, controller 122 may control ESAD 92 of weapon 90 and/or mission execution signal switch 140 (e.g., as described hereinbelow). Controller 122 may control power supply circuitry 124 to power controller 92d of ESAD 92 (e.g., as described hereinbelow). Controller 122 may control high voltage supply circuitry 126 to power high voltage interface circuitry 92e of ESAD 92 (e.g., as described hereinbelow). [0051]Mission control module 130 may include a first static (e.g., time independent) switch 132a, a second static (e.g., time independent) switch 132b and a dynamic switch 132c. First static switch 132a, second static switch 132b and dynamic switch 132c may be controlled by the signals received from condition determination module 110 (e.g., as described hereinbelow) or responsive to an input from operator 80 (e.g., a manual input command). Once closed, each of first static switch 132a and second static switch 132b may remain closed until an open command is transmitted to the respective switch by condition determination module 110. Once closed, dynamic switch 132c may remain closed for the selected period of time, and open once the selected period of time has passed. [0052]Mission control module 130 may transmit a mission execution signal to ESAD 92 of weapon 90 to cause ESAD 92 to actuate detonator 94 to detonate payload 96 so as to execute the mission (e.g., as described hereinbelow). The mission execution signal may be transmitted to ESAD 92 only if first static switch 132a, second static switch 132b and dynamic switch 132c of mission control module 130 and mission execution signal switch 140 are closed. If at least one of P-627628-IL first static switch 132a, second static switch 132b, dynamic switch 132c and mission execution signal switch 140 is open, the mission execution signal cannot be transmitted to ESAD 92. [0053]In the example of Fig. 1, the mission execution signal may originate from operator 80. The operator-originated mission execution signal may be manually entered into mission control module 130. Mission control module 130 may include one or more switches 136. One or more switches 136 (e.g., switches 136 and/or any other suitable number of switches) may be controlled by operator to provide operator 80 access to mission control module 130 when one or more switches 1are closed and prevent operator 80 from accessing mission control module 130 when at least one of one or more switches 136 is open. [0054]In the example of Fig. 2, the mission execution signal may originate from mission control module 130. Mission control module 130 may include a controller 134 (e.g., as shown in Fig. 2) that may operate autonomously (or at least partly autonomously) based on the data from one or more sensors 105. Controller 134 may operate autonomously (or at least partly autonomously) based on logic parameters. The logic parameters may be stored in a memory of controller 134. Controller 134 may operate autonomously (or at least partly autonomously) by executing one or more software programs such as one or more artificial intelligence algorithms. Mission control module 130 may include a plurality of input switches 136 (e.g., as shown in Fig. 2). [0055]In standby state, ESAD 92 of weapon 90 is not powered; first static switch 92a, second static switch 92b, dynamic switch 92c and high voltage switch 92f of ESAD 92 are open. In standby state, first static switch 132a, second static switch 132b, dynamic switch 132c and input switches 136 of mission control module 130, as well as mission execution signal switch 140 are open. [0056]In operation, condition determination module 110 may determine based on the data from one or more sensors 105 whether or not a first condition of the two or more conditions is fulfilled. If it is determined that the first condition is fulfilled, condition determination module 110 may transmit a first condition fulfilment signal to controller 122 of weapon control module 120 and/or to mission control module 130. Upon receipt of the first condition fulfilment signal (e.g., indicative of fulfilment of the first condition), controller 122 may control power supply circuitry 124 of weapon control module 120 to power controller 92d of ESAD 92 and/or cause controller 92d to close first static switch 92a of ESAD 92. The first condition fulfilment signal transmitted by condition determination module 110 may cause first static switch 132a of mission control module 130 to close.

P-627628-IL

[0057]Further in operation, condition determination module 110 may determine based on the data from one or more sensors 105 whether or not a second condition of the two or more conditions is fulfilled. If it is determined that the second condition is fulfilled, condition determination module 110 may transmit a second condition fulfilment signal to controller 122 of weapon control module 120 and/or to mission control module 130. Upon receipt of the second condition fulfilment signal (e.g., indicative of fulfilment of the second condition), controller 122 may cause controller 92d of ESAD 92 to close second static switch 92b of ESAD 92. The second condition fulfilment signal transmitted by condition determination module 110 may cause second static switch 132b of mission control module 130 to close. [0058]Further in operation, if it is decided, for example by operator 80, that a mission readiness state should be initiated, condition determination module 110 may transmit a mission readiness initiation signal to controller 122 of weapon control module 120 and/or to mission control module 130. Upon receipt of the mission readiness initiation signal (e.g., indicative of initiation of the mission readiness state), controller 122 may cause controller 92d of ESAD 92 to close dynamic switch 92c of ESAD 92. The mission readiness initiation signal transmitted by condition determination module 110 may cause dynamic switch 132c of mission control module 130 to close. The mission readiness state may be time dependent. For example, dynamic switch 92c of ESAD and/or dynamic switch 132c of mission control module 130 may remain open for the specified period of time upon receipt of the mission readiness initiation signal, wherein the mission may be executed during that specified period of time. [0059]Further in operation, condition determination module 110 may determine based on the data from one or more sensors 105 whether or not one or more mission execution conditions is fulfilled. If it is determined that the one or more mission execution conditions is fulfilled, condition determination module 110 may transmit a mission execution conditions fulfilment signal to controller 122 of weapon control module 120 and/or to mission execution signal switch 140. Upon receipt of the mission execution conditions fulfilment signal (e.g., indicative of fulfilment of the one or more mission execution conditions), controller 122 may cause high voltage supply circuitry 126 to power high voltage interface circuitry 92e. The mission execution conditions fulfilment signal may cause mission execution signal switch 140 to close. [0060]Further in operation, the mission execution signal (e.g., originated from operator 80 and/or from controller 134 of mission control module 130 as described hereinabove) may be transmitted P-627628-IL by mission control module 130 to mission execution signal interface circuitry 92g of ESAD 92. Upon receipt of the mission execution signal, mission execution signal interface circuitry 92g may cause high voltage switch 92f to close to allow high voltage interface circuitry 92e of ESAD (powered by high voltage supply circuitry 126 of weapon control module 120) to power detonator to detonate payload 96 to execute the mission. [0061]The mission may be executed only if (i) first static switch 92a, second static switch 92b, dynamic switch 92c and high voltage switch 92f of ESAD 92 are closed and if (ii) first static switch 132a, second static switch 132b, dynamic switch 132c and mission execution signal switch 140 are closed. If at least one of (i) first static switch 92a, second static switch 92b, dynamic switch 92c and high voltage switch 92f of ESAD 92 and (ii) first static switch 132a, second static switch 132b, dynamic switch 132c and mission execution signal switch 140 is open, the mission cannot be executed. [0062]For example, if at least one of first static switch 92a, second static switch 92b and dynamic switch 92c of ESAD 92 is open, high voltage interface circuitry 92e of ESAD 92 cannot be powered by high voltage supply circuitry 124 of weapon control module 120. In this case, even if high voltage switch 92f is closed (e.g., by the mission execution signal, as described hereinabove), detonator 94 cannot be powered and cannot detonate payload 96. [0063]In another example, if at least one of first static switch 132a, second static switch 132b, dynamic switch 132c and mission execution signal switch 140 is open, the mission execution signal cannot be transmitted from mission control module 130 to mission execution signal interface circuitry 92g of ESAD 92. In this case, high voltage switch 92f cannot be closed, detonator cannot be powered and cannot detonate payload 96 even if high voltage interface circuitry 92e of ESAD 92 is powered by high voltage supply circuitry 124 of weapon control module 120. [0064]In operation, if it is determined by condition determination module 110 based on the data from one or more sensors 105 that the first condition is not fulfilled, condition determination module 110 may transmit a first condition non-fulfilment signal to controller 122 of weapon control module 120 and/or to mission control module 130. Upon receipt of the first condition non-fulfilment signal (e.g., indicative of non-fulfilment of the first condition), controller 122 may cause controller 92d to open first static switch 92a of ESAD 92. The first condition non-fulfilment signal transmitted to mission control module 130 by condition determination module 110 may cause first static switch 132a of mission control module 130 to open.

P-627628-IL

[0065]Further in operation, if it is determined by condition determination module 110 based on the data from one or more sensors 105 that the second condition is not fulfilled, condition determination module 110 may transmit a second condition non-fulfilment signal to controller 1of weapon control module 120 and/or to mission control module 130. Upon receipt of the second condition non-fulfilment signal (e.g., indicative of non-fulfilment of the second condition), controller 122 may cause controller 92d to open second static switch 92a of ESAD 92. The second condition non-fulfilment signal transmitted to mission control module 130 by condition determination module 110 may cause second static switch 132a of mission control module 130 to open. [0066]Further in operation, if the specified period of time since dynamic switch 92c of ESAD and since dynamic switch 132c of mission control module 130 has passed, dynamic switch 92c of ESAD 92 and since dynamic switch 132c of mission control module 130 may open. [0067]One example of a mission may include terminating a target disposed in a specific building located in a specific geographic area. In this example, the first condition of the two or more conditions may include entrance of weapon 90 into the specific geographic area. If it is determined by condition determination module 110 based on the data from a geolocation sensor and/or an inertial sensor of sensors 105 that weapon 90 has entered the specific geographic area, condition determination module 110 may transmit the first condition fulfilment signal (i) to weapon control module 120 to cause first static switch 92a of ESAD 92 and (ii) to mission control module 130 to cause first static switch 132a of mission control module 130 to close (e.g., as described hereinabove). [0068]In the same example, the second condition of the two or more conditions may include entrance of weapon 90 into the specific building. If it is determined by condition determination module 110 based on the data from the geolocation sensor and/or the inertial sensor of sensors 1that weapon 90 has entered the specific building, condition determination module 110 may transmit the second condition fulfilment signal (i) to weapon control module 120 to cause second static switch 92b of ESAD 92 to close and (ii) to mission control module 130 to cause second static switch 132b of mission control module 130 to close (e.g., as described hereinabove). [0069]In the same example, if it is decided by operator 80 that a mission readiness state should be initiated, condition determination module 110 may transmit the mission readiness initiation signal to weapon control module 120 to cause dynamic switch 92c of ESAD 92 to close and to mission P-627628-IL control module 130 to cause dynamic switch 132c of mission control module 130 to close (e.g., as described hereinabove). Dynamic switch 92c of ESAD 92 and dynamic switch 132c of mission control module 130 may remain closed for the specified period of time (e.g., as described hereinabove). [0070]In the same example, the one or more mission execution conditions may include detection of the target, a distance to the target and/or any other suitable condition. If it is determined by condition determination module 110 based on the data from an optical sensor and/or a proximity sensor of sensors 105 that the target is detected, condition determination module 110 may transmit the mission execution conditions fulfilment signal (i) to weapon control module 120 to cause high voltage supply circuitry 126 of weapon control module 120 to power high voltage interface circuitry 92e of ESAD 92 and (ii) to mission execution signal switch 140 to cause mission execution signal switch 140 to close (e.g., as described hereinabove). [0071]In the same example, the mission execution signal (e.g., originated from operator 80 and/or from controller 134 of mission control module 130 as described hereinabove) may be transmitted by mission control module 130 to mission execution signal interface circuitry 92g of ESAD 92 to cause high voltage switch 92f to close to allow high voltage interface circuitry 92e of ESAD 90 to power detonator 94 to detonate payload 96 to execute the mission. [0072]While Figs. 1 and 2 show mission control module 130 with three switches 132a, 132b, 132c, in various embodiments, mission control module 130 may include any other suitable number of switches. For example, in the case of operator-controlled system, mission control module 130 may have only one or more switches 136 and none of switches 132a, 132b, 132c. In another example, in the case of partly autonomous system, mission control module 130 may have one or more switches 136 and/or at least a portion of switches 132a, 132b, 132c. In another example, in the case of fully autonomous system, mission control module 130 may have all three switches 132a, 132b, 132c (e.g., without one or more switches 136). [0073]Some embodiments of the present invention may provide a weapon 200 (e.g., as shown in Fig. 3). Weapon 200 may include safety device 100, ESAD 92, detonator 94 and payload 96 as described hereinabove. [0074]Some embodiments of the present invention may provide a weapon 300 (e.g., as shown in Fig. 4). Weapon 300 may include at least one component of safety device 100 described above P-627628-IL with respect to Figs. 1-2. For example, weapon control module 120 may be part of weapon 300 and not part of safety device 100. [0075]Reference is now made to Fig. 5, which is a block diagram of an exemplary computing device which may be used with embodiments of the present invention. [0076]Computing device 500 may include a controller or processor 505 that may be, for example, a central processing unit processor (CPU), a chip or any suitable computing or computational device, an operating system 515, a memory 520, a storage 530, input devices 535 and output devices 540. [0077]Operating system 515 may be or may include any code segment designed and/or configured to perform tasks involving coordination, scheduling, arbitration, supervising, controlling or otherwise managing operation of computing device 500, for example, scheduling execution of programs. Memory 520 may be or may include, for example, a Random Access Memory (RAM), a read only memory (ROM), a Dynamic RAM (DRAM), a Synchronous DRAM (SD-RAM), a double data rate (DDR) memory chip, a Flash memory, a volatile memory, a non-volatile memory, a cache memory, a buffer, a short term memory unit, a long term memory unit, or other suitable memory units or storage units. Memory 520 may be or may include a plurality of, possibly different, memory units. Memory 520 may store for example, instructions to carry out a method (e.g., code 525), and/or data such as user responses, interruptions, etc. [0078]Executable code 525 may be any executable code, e.g., an application, a program, a process, task or script. Executable code 525 may be executed by controller 505 possibly under control of operating system 515. In some embodiments, more than one computing device 500 or components of device 100 may be used for multiple functions described herein. For the various modules and functions described herein, one or more computing devices 100 or components of computing device 500 may be used. Devices that include components similar or different to those included in computing device 500 may be used, and may be connected to a network and used as a system. One or more processor(s) 505 may be configured to carry out embodiments of the present invention by for example executing software or code. Storage 530 may be or may include, for example, a hard disk drive, a floppy disk drive, a Compact Disk (CD) drive, a CD-Recordable (CD-R) drive, a universal serial bus (USB) device or other suitable removable and/or fixed storage unit. In some embodiments, some of the components shown in Fig. 5 may be omitted.

P-627628-IL

[0079]Input devices 535 may be or may include a mouse, a keyboard, a touch screen or pad or any suitable input device. It will be recognized that any suitable number of input devices may be operatively connected to computing device 500 as shown by input devices 535. Output devices 5may include one or more displays, speakers and/or any other suitable output devices. It will be recognized that any suitable number of output devices may be operatively connected to computing device 500 as shown by output devices 540. Any applicable input/output (I/O) devices may be connected to computing device 500, for example, a wired or wireless network interface card (NIC), a modem, printer or facsimile machine, a universal serial bus (USB) device or external hard drive may be included in input devices 535 and/or output devices 540. [0080]Embodiments of the invention may include one or more article(s) (e.g., memory 520 or storage 530) such as a computer or processor non-transitory readable medium, or a computer or processor non-transitory storage medium, such as for example a memory, a disk drive, or a USB flash memory, encoding, including or storing instructions, e.g., computer-executable instructions, which, when executed by a processor or controller, carry out methods disclosed herein. [0081]One skilled in the art will realize the invention may be embodied in other specific forms without departing from the spirit or essential characteristics thereof. The foregoing embodiments are therefore to be considered in all respects illustrative rather than limiting of the invention described herein. Scope of the invention is thus indicated by the appended claims, rather than by the foregoing description, and all changes that come within the meaning and range of equivalency of the claims are therefore intended to be embraced therein. [0082]In the foregoing detailed description, numerous specific details are set forth in order to provide an understanding of the invention. However, it will be understood by those skilled in the art that the invention can be practiced without these specific details. In other instances, well-known methods, procedures, and components, modules, units and/or circuits have not been described in detail so as not to obscure the invention. Some features or elements described with respect to one embodiment can be combined with features or elements described with respect to other embodiments. [0083]Although embodiments of the invention are not limited in this regard, discussions utilizing terms such as, for example, “processing,” “computing,” “calculating,” “determining,” “establishing”, “analyzing”, “checking”, or the like, can refer to operation(s) and/or process(es) of a computer, a computing platform, a computing system, or other electronic computing device, that P-627628-IL manipulates and/or transforms data represented as physical (e.g., electronic) quantities within the computer’s registers and/or memories into other data similarly represented as physical quantities within the computer’s registers and/or memories or other information non-transitory storage medium that can store instructions to perform operations and/or processes. [0084]Although embodiments of the invention are not limited in this regard, the terms “plurality” and “a plurality” as used herein can include, for example, “multiple” or “two or more”. The terms “plurality” or “a plurality” can be used throughout the specification to describe two or more components, devices, elements, units, parameters, or the like. The term set when used herein can include one or more items. Unless explicitly stated, the method embodiments described herein are not constrained to a particular order or sequence. Additionally, some of the described method embodiments or elements thereof can occur or be performed simultaneously, at the same point in time, or concurrently.

Claims (22)

1. P-627628-IL
2. CLAIMS 1. A safety device for a weapon, comprising: a condition determination module configured to: receive data from one or more sensors and determine, based on the received data, whether two or more operating conditions have been met, and receive an operational command and determine, based on the received operational command, whether a mission readiness state should be initiated; a weapon control module configured to receive, from the condition determination module, a plurality of signals and to operate an electronic safe and arm device (ESAD) of the weapon in accordance with the plurality of signals, wherein the plurality of signals includes at least: a first condition fulfilment signal indicating that a first condition has been fulfilled and that a first static switch of the ESAD should be closed, a second condition fulfilment signal indicating that a second condition has been met and that a second static switch of the ESAD should be closed, a mission readiness initiation signal indicating that a mission readiness state has been initiated and that a dynamic switch of the ESAD should be closed; a mission execution signal switch; and a mission control module configured to: receive from the condition determination module a mission execution conditions fulfilment signal and close the mission execution signal switch, and transmit a mission execution signal to the ESAD to actuate a detonator to trigger a payload of the weapon. 2. The safety device according to claim 1, wherein the mission readiness state is time limited, and wherein the dynamic switch automatically reopens upon expiry of the mission readiness state thereby preventing the detonator from being actuated. 3. The safety device according to any one of claims 1-2, wherein the one or more sensors are configured to obtain data about conditions within the weapon.
3. P-627628-IL
4. 4. The safety device according to claim 3, wherein conditions within the weapon include at least one of: inertial forces acting upon the weapon, a temperature of components within the weapon, a remaining amount of fuel.
5. 5. The safety device according to any one of claims 1-4, wherein the one or more sensors are configured to obtain data about conditions external to the weapon.
6. 6. The safety device according to claim 5, wherein conditions external to the weapon include at least one of: a GPS position of the weapon, environmental conditions proximate to the weapon.
7. 7. The safety device according to any one of claims 1-6, wherein data received from the sensors is validated using one or more reliability algorithms.
8. 8. The safety device according to any one of claims 1-7, wherein the two or more operating conditions include: a geographical position of the weapon, a rate of acceleration of the weapon, a time of flight of the weapon, a distance from an operator, a distance from allied forces.
9. 9. The safety device according to any one of claims 1-8, wherein the received one or more operational commands and the mission execution command are manually entered and originate from an external operator.
10. 10. The safety device according to any one of claims 1-8, wherein the received one or more operational commands and the mission execution command originate from the mission control module, and wherein the mission control module is configured to autonomously operate in accordance with data received from the one or more sensors and predefined logic parameters.
11. 11. The safety device according to any one of claims 1-10, wherein the ESAD is switchable between an unpowered standby state in which at least one switch is open and an activated state in which all three switches are closed. P-627628-IL
12. 12. The safety device according to any one of claims 1-11, wherein the ESAD is configured to transmit an actuation voltage to a detonator of the weapon, and the detonator is configured to trigger the payload upon receipt of the actuation voltage from the ESAD. 13. A weapon comprising: an electronic safe and arm device (ESAD) comprising a first static switch, a second static switch, and a dynamic switch, wherein the ESAD is switchable between a standby state in which at least one switch is open and an activated state in which all three switches are closed, a payload operably connected to a detonator and the ESAD, wherein the detonator is configured to trigger the payload upon receipt of an actuation voltage from the ESAD; a condition determination module configured to: receive data from one or more sensors and determine, based on the received data, whether two or more operating conditions have been met, and receive an operational command and determine, based on the received operational command, whether a mission readiness state should be initiated; a weapon control module configured to receive, from the condition determination module, a plurality of signals and to operate an electronic safe and arm device (ESAD) of the weapon in accordance with the plurality of signals, wherein the plurality of signals includes at least: a first condition fulfilment signal indicating that a first condition has been fulfilled and that a first static switch of the ESAD should be closed, a second condition fulfilment signal indicating that a second condition has been met and that a second static switch of the ESAD should be closed, a mission readiness initiation signal indicating that a mission readiness state has been initiated and that a dynamic switch of the ESAD should be closed; a mission execution signal switch; and a mission control module configured to: receive from the condition determination module a mission execution conditions fulfilment signal and close the mission execution signal switch, and transmit a mission execution signal to the ESAD to actuate a detonator to trigger a payload of the weapon.
13. P-627628-IL
14. 14. The weapon according to claim 13, wherein the mission readiness state is time limited, and wherein the dynamic switch automatically reopens upon expiry of the mission readiness state thereby returning the ESAD to the standby state and preventing the detonator from being actuated.
15. 15. The weapon according to any one of claims 13-14, wherein the one or more sensors are configured to obtain data about conditions within the weapon.
16. 16. The weapon according to claim 15, wherein conditions within the weapon include at least one of: inertial forces acting upon the weapon, a temperature of components within the weapon, a remaining amount of fuel.
17. 17. The weapon according to any one of claims 13-16, wherein the one or more sensors are configured to obtain data about conditions external to the weapon.
18. 18. The weapon according to claim 17, wherein conditions external to the weapon include at least one of: a GPS position of the weapon, environmental conditions proximate to the weapon.
19. 19. The weapon according to any one of claims 13-18, wherein data received from the sensors is validated using one or more reliability algorithms.
20. 20. The weapon according to any one of claims 13-19, wherein the two or more operating conditions include: a geographical position of the weapon, a rate of acceleration of the weapon, a time of flight of the weapon.
21. 21. The weapon according to any one of claims 13-20, wherein the received one or more operational commands and the mission execution command are manually entered and originate from an external operator.
22. 22. The weapon according to any one of claims 13-20, wherein the received one or more operational commands and the mission execution command originate from the mission control P-627628-IL module, and wherein the mission control module is configured to autonomously operate in accordance with data received from the one or more sensors and predefined logic parameters.