US20190179097A1 - System and method for displaying critical aeronautical information on an uncertified display - Google Patents

System and method for displaying critical aeronautical information on an uncertified display Download PDF

Info

Publication number
US20190179097A1
US20190179097A1 US15/915,503 US201815915503A US2019179097A1 US 20190179097 A1 US20190179097 A1 US 20190179097A1 US 201815915503 A US201815915503 A US 201815915503A US 2019179097 A1 US2019179097 A1 US 2019179097A1
Authority
US
United States
Prior art keywords
display
ped
aeronautical information
critical aeronautical
ped display
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
US15/915,503
Other versions
US10338337B1 (en
Inventor
Richard Berckefeldt
Willard R. True
Kalluri R. Sarma
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Honeywell International Inc
Original Assignee
Honeywell International Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Honeywell International Inc filed Critical Honeywell International Inc
Priority to US15/915,503 priority Critical patent/US10338337B1/en
Assigned to HONEYWELL INTERNATIONAL INC. reassignment HONEYWELL INTERNATIONAL INC. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: TRUE, WILLARD R., BERCKEFELDT, Richard, SARMA, KALLURI R.
Priority to CA3026508A priority patent/CA3026508A1/en
Priority to EP18210896.9A priority patent/EP3495778B1/en
Publication of US20190179097A1 publication Critical patent/US20190179097A1/en
Application granted granted Critical
Publication of US10338337B1 publication Critical patent/US10338337B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G02OPTICS
    • G02BOPTICAL ELEMENTS, SYSTEMS OR APPARATUS
    • G02B7/00Mountings, adjusting means, or light-tight connections, for optical elements
    • G02B7/003Alignment of optical elements
    • G02B7/005Motorised alignment
    • GPHYSICS
    • G01MEASURING; TESTING
    • G01CMEASURING DISTANCES, LEVELS OR BEARINGS; SURVEYING; NAVIGATION; GYROSCOPIC INSTRUMENTS; PHOTOGRAMMETRY OR VIDEOGRAMMETRY
    • G01C23/00Combined instruments indicating more than one navigational value, e.g. for aircraft; Combined measuring devices for measuring two or more variables of movement, e.g. distance, speed or acceleration
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B64AIRCRAFT; AVIATION; COSMONAUTICS
    • B64DEQUIPMENT FOR FITTING IN OR TO AIRCRAFT; FLIGHT SUITS; PARACHUTES; ARRANGEMENT OR MOUNTING OF POWER PLANTS OR PROPULSION TRANSMISSIONS IN AIRCRAFT
    • B64D43/00Arrangements or adaptations of instruments
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B64AIRCRAFT; AVIATION; COSMONAUTICS
    • B64DEQUIPMENT FOR FITTING IN OR TO AIRCRAFT; FLIGHT SUITS; PARACHUTES; ARRANGEMENT OR MOUNTING OF POWER PLANTS OR PROPULSION TRANSMISSIONS IN AIRCRAFT
    • B64D43/00Arrangements or adaptations of instruments
    • B64D43/02Arrangements or adaptations of instruments for indicating aircraft speed or stalling conditions
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B64AIRCRAFT; AVIATION; COSMONAUTICS
    • B64DEQUIPMENT FOR FITTING IN OR TO AIRCRAFT; FLIGHT SUITS; PARACHUTES; ARRANGEMENT OR MOUNTING OF POWER PLANTS OR PROPULSION TRANSMISSIONS IN AIRCRAFT
    • B64D47/00Equipment not otherwise provided for
    • B64D47/02Arrangements or adaptations of signal or lighting devices
    • GPHYSICS
    • G02OPTICS
    • G02BOPTICAL ELEMENTS, SYSTEMS OR APPARATUS
    • G02B26/00Optical devices or arrangements for the control of light using movable or deformable optical elements
    • G02B26/001Optical devices or arrangements for the control of light using movable or deformable optical elements based on interference in an adjustable optical cavity
    • GPHYSICS
    • G02OPTICS
    • G02BOPTICAL ELEMENTS, SYSTEMS OR APPARATUS
    • G02B27/00Optical systems or apparatus not provided for by any of the groups G02B1/00 - G02B26/00, G02B30/00
    • G02B27/0012Optical design, e.g. procedures, algorithms, optimisation routines
    • GPHYSICS
    • G02OPTICS
    • G02BOPTICAL ELEMENTS, SYSTEMS OR APPARATUS
    • G02B27/00Optical systems or apparatus not provided for by any of the groups G02B1/00 - G02B26/00, G02B30/00
    • G02B27/0093Optical systems or apparatus not provided for by any of the groups G02B1/00 - G02B26/00, G02B30/00 with means for monitoring data relating to the user, e.g. head-tracking, eye-tracking
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/0703Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
    • G06F11/0751Error or fault detection not based on redundancy
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82Protecting input, output or interconnection devices
    • G06F21/84Protecting input, output or interconnection devices output devices, e.g. displays or monitors
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/14Digital output to display device ; Cooperation and interconnection of the display device with other functional units
    • G06F3/1415Digital output to display device ; Cooperation and interconnection of the display device with other functional units with means for detecting differences between the image stored in the host and the images displayed on the displays
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B64AIRCRAFT; AVIATION; COSMONAUTICS
    • B64DEQUIPMENT FOR FITTING IN OR TO AIRCRAFT; FLIGHT SUITS; PARACHUTES; ARRANGEMENT OR MOUNTING OF POWER PLANTS OR PROPULSION TRANSMISSIONS IN AIRCRAFT
    • B64D45/00Aircraft indicators or protectors not otherwise provided for
    • B64D2045/0075Adaptations for use of electronic flight bags in aircraft; Supports therefor in the cockpit
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/0796Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
    • GPHYSICS
    • G09EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09GARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2300/00Aspects of the constitution of display devices
    • G09G2300/02Composition of display devices
    • G09G2300/023Display panel composed of stacked panels
    • GPHYSICS
    • G09EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09GARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION
    • G09G2380/00Specific applications
    • G09G2380/12Avionics applications

Definitions

  • the present disclosure generally relates to display systems, and more particularly relates to display systems for displaying critical information on uncertified displays.
  • mission critical information may need to be certified that they can provide adequate integrity, continuity, and availability (ICA) for the mission critical information to be displayed thereon.
  • ICA integrity, continuity, and availability
  • the certification process may be costly and time-consuming and, therefore, may deter the implementation of new applications, such as new applications that use personal electronic devices (PEDs) to display mission critical information.
  • PEDs personal electronic devices
  • low-cost PEDs such as tablet computers and smartphones
  • non-critical applications such as charts and maps applications and weight and balance calculators.
  • Operators may also want to have the freedom to display aeronautical information, such as airport moving maps, air traffic (Cockpit Display of Traffic Information or CDTI), advanced weather radar information, and others, on tablet computers instead of having to make costly modifications and upgrades to their existing avionics displays.
  • CDTI Code Division Display of Traffic Information
  • ICA integrity, continuity, and availability
  • a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information includes a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information.
  • the mounting adapter further includes a surface with an actuatable covering that is configured to be overlaid on the PED display and an actuation source configured to actuate the covering.
  • the display system further includes an application server.
  • the application server includes one or more processors and is configured to execute one or more modules that generate critical aeronautical information, transmit the generated critical aeronautical information to the PED for display on the PED display, determine whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display.
  • a computer-implemented method in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information includes transmitting, by a computing device in the aircraft, critical aeronautical information to a personal electronic device (PED) mounted in an aircraft cockpit for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface.
  • PED personal electronic device
  • the method further includes determining, by the computing device, whether a problem exists with the image displayed on the PED display; and enabling, by the computing device, an actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display when it is determined that a problem exists.
  • a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information
  • a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information.
  • the mounting adapter includes a film configured to be overlaid on the PED display and that includes a coating that is optically active in the presence of an excitation source.
  • the mounting adapter further includes an excitation source configured to activate the coating and a camera configured to take an image of the PED display.
  • the display system further includes an application server mounted in the aircraft remotely from the aircraft cockpit wherein the application server includes one or more processors, is configured to execute one or more modules that generate critical aeronautical information, and configured to transmit the generated critical aeronautical information to the PED for display on the PED display.
  • the application server is configured to monitor the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display using the camera image and to enable the excitation source to activate the coating when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected. Activation of the coating results in the annunciation of the loss of ICA on the film overlaid on the PED display.
  • ICA integrity, continuity, and availability
  • FIG. 1 is a block diagram depicting an example display system in an aircraft that allows uncertified display systems such as commercial PEDs to meet typical avionics requirements for the monitoring of ICA, in accordance with various embodiments;
  • FIG. 2 is a block diagram depicting an example display monitoring module in an example server, in accordance with various embodiments
  • FIG. 3 is a simplified perspective view of an example PED mounting adapter, in accordance with various embodiments.
  • FIG. 4 is a block diagram depicting an example adapter controller in an example PED mounting adapter, in accordance with various embodiments
  • FIG. 5 is a process flow chart depicting a computer-implemented process in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, in accordance with various embodiments;
  • FIG. 6 is a process flow chart depicting another computer-implemented process in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, in accordance with various embodiments.
  • module refers to any hardware, software, firmware, electronic control component, processing logic, and/or processor device, individually or in any combination, including without limitation: application specific integrated circuit (ASIC), a field-programmable gate-array (FPGA), an electronic circuit, a processor (shared, dedicated, or group) and memory that executes one or more software or firmware programs, a combinational logic circuit, and/or other suitable components that provide the described functionality.
  • ASIC application specific integrated circuit
  • FPGA field-programmable gate-array
  • FPGA field-programmable gate-array
  • an electronic circuit a processor (shared, dedicated, or group) and memory that executes one or more software or firmware programs, a combinational logic circuit, and/or other suitable components that provide the described functionality.
  • Embodiments of the present disclosure may be described herein in terms of functional and/or logical block components and various processing steps. It should be appreciated that such block components may be realized by any number of hardware, software, and/or firmware components configured to perform the specified functions. For example, an embodiment of the present disclosure may employ various integrated circuit components, e.g., memory elements, digital signal processing elements, logic elements, look-up tables, or the like, which may carry out a variety of functions under the control of one or more microprocessors or other control devices. In addition, those skilled in the art will appreciate that embodiments of the present disclosure may be practiced in conjunction with any number of systems, and that the systems described herein are merely exemplary embodiments of the present disclosure.
  • Apparatus, systems, methods, techniques and articles are described for providing assurance that an uncertified display, such as a display on a personal electronic device (PED) (e.g., a tablet computer, a smartphone, or some other device), that is used to display mission critical data (e.g., critical aeronautical information) accurately conveys the mission critical data.
  • PED personal electronic device
  • mission critical data e.g., critical aeronautical information
  • the apparatus, systems, methods, techniques and articles described herein may provide assurances that an uncertified display accurately conveys mission critical data by verifying the integrity, continuity, and availability (ICA) of the mission critical data displayed on the uncertified display. Loss of accuracy or ICA can be annunciated to operators (e.g., a flight crew) of the uncertified display without reliance on the uncertified display to self-report the loss when displaying the mission critical data.
  • ICA integrity, continuity, and availability
  • the apparatus, systems, methods, techniques and articles described herein may allow operators to use a PED to display critical aeronautical information. This may allow for a more affordable and quicker adoption of new avionics functionality.
  • the described apparatus, systems, methods, techniques and articles may allow for mission critical data such as that generated by multiple high integrity applications (e.g. airborne situational awareness (AIRB) and various other CNS-ATM (Communications Navigation and Surveillance-Air Traffic Management) applications such as flight deck interval management (FIM) or air traffic control controller/pilot data link communication (CPDLC), SURF (Surface Surveillance application that includes an airport moving map with traffic superimposed), and others) to be displayed on uncertified displays.
  • the described apparatus, systems, methods, techniques and articles can allow data from lower integrity applications, such as maps and charts, to be displayed on the uncertified displays without changes to the applications or equipment installation.
  • FIG. 1 is a block diagram depicting an example system 100 that allows an uncertified display system, such as a PED, to meet typical avionics requirements for the monitoring of ICA.
  • the example system 100 includes an application server 102 and a mounting adapter 104 configured to mount a PED 106 (having a PED display) in an aircraft flight deck or cockpit.
  • the example application server 102 includes at least one processor and a computer-readable storage device or media encoded with programming instructions for configuring the at least one processor.
  • the example application server 102 is positioned in an aircraft remotely from the aircraft cockpit.
  • the example application server 102 is a fully certified avionics box that hosts and executes one or more high integrity avionics application modules 108 .
  • the high integrity avionics application modules 108 are configured to generate mission critical data (e.g., critical aeronautical information) for display on a cockpit display.
  • the example application server 102 is configured to transmit the generated critical aeronautical information to an uncertified cockpit display (e.g., the PED 106 ) for display (e.g., on the PED display).
  • the example application server 102 also includes a display monitoring module 112 that is configured to monitor the image displayed on an uncertified cockpit display when critical aeronautical information is transmitted from a high integrity avionics application module 108 to the uncertified cockpit display device (e.g., PED 106 ) to determine whether a problem exists with the display of the mission critical data on the uncertified display device.
  • the example display monitoring module 112 is configured to determine whether a problem exists with the display of the mission critical data on the uncertified display device 106 by verifying the integrity, continuity, and availability (ICA) of the mission critical data displayed on the uncertified display device 106 .
  • the example display monitoring module 112 is also configured to cause the annunciation of a message indicating that a problem exists with the display of mission critical data on the uncertified display device 106 , when it determines that a problem indeed exists.
  • the mounting adapter 104 is configured to mount an uncertified display device 106 in an aircraft cockpit for use by a flight crew so that the uncertified display device 106 may display critical or non-critical aeronautical information to the flight crew.
  • the mounting adapter 104 may include a clamshell shape to fully enclose the tablet computer 106 .
  • the example uncertified display device 106 may comprise a PED (such as a tablet computer, a smartphone, or some other device), which includes at least one processor and computer readable media, and is configured to host and execute one or more application programs such as a specialized avionics display application 110 .
  • the example specialized avionics display application 110 is configured to display critical aeronautical information received by the PED 106 from the application server 102 .
  • the example mounting adapter 104 further includes an adapter controller 114 .
  • the example controller 114 includes at least one processor and computer readable media. In other embodiments, the adapter controller 114 may not include a processor.
  • the example controller 114 is configured (for example by programming instructions) to transmit images of the display on the uncertified display device 106 to the display monitoring module 112 and to activate the annunciation of a message indicating that a problem exists with the display of mission critical data on the uncertified display device 106 , when the display monitoring module 112 determines that a problem exists.
  • FIG. 2 is a block diagram depicting an example display monitoring module 202 in a server 200 wherein the example display monitoring module provides a way to display critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information.
  • the example display monitoring module includes an integrity checking module 204 and an interface module 206 . All or parts of the example display monitoring module may be incorporated in an application module (e.g., application module 108 from FIG. 1 ) or separate from the application module.
  • the integrity checking module 204 is configured to compare source data 201 (e.g., critical aeronautical information) received by the display monitoring module 202 from a high integrity avionics application (e.g., high integrity avionics application module 108 from FIG. 1 ) to validation data 203 (which includes image information from the PED display) received by the display monitoring module 202 from a monitoring adapter (e.g., mounting adapter 104 from FIG. 1 ).
  • the integrity checking module 204 is configured to compare the source data 201 to the validation data 203 to determine whether a problem exists with the display of mission critical data on the uncertified display device (e.g., PED 106 from FIG. 1 ).
  • the example integrity checking module 204 is configured to determine whether a problem exists with the display of mission critical data on the uncertified display device (e.g., PED 106 ) by verifying the ICA of the mission critical data displayed on the uncertified display device (e.g., PED 106 ).
  • the interface module 206 is configured to communicate an annunciation message 205 (e.g. a loss of ICA) to the mounting adapter (e.g., mounting adapter 104 from FIG. 1 ) that instructs the mounting adapter to annunciate a message indicating that a problem exists with the display of mission critical data on the uncertified display device, when the integrity checking module 204 determines that a problem does exist with the display of the mission critical data.
  • an annunciation message 205 e.g. a loss of ICA
  • the mounting adapter e.g., mounting adapter 104 from FIG. 1
  • the integrity checking module 204 determines that a problem does exist with the display of the mission critical data.
  • FIG. 3 is a simplified perspective view of an example mounting adapter 304 .
  • the example mounting adapter 304 incorporates a clamshell design configured for a PED/tablet 306 to be situated in a base 314 of the mounting adapter 304 .
  • the example mounting adapter 304 is also configured with a hinged lid 316 that may be closed over the top of the tablet 306 to fully encloses the tablet 306 within the mounting adapter 304 .
  • the base 314 accommodates the tablet 306 and may have threaded mounting bosses on its back to facilitate installation of the mounting adapter 304 in the aircraft.
  • the example lid 316 includes a bezel 318 , a surface 320 (e.g., an optically and capacitively transparent film), an imaging device 322 (e.g., a camera), and an actuation source 324 (e.g., optically emissive devices).
  • a surface 320 e.g., an optically and capacitively transparent film
  • an imaging device 322 e.g., a camera
  • an actuation source 324 e.g., optically emissive devices
  • the example bezel 318 is attached to the base 314 by hinges (not shown) and closes around the tablet 306 to mechanically capture the tablet 306 .
  • the example bezel 318 also hosts the optically and capacitively transparent film 320 , the imaging device 322 , and the optically emissive devices 324 .
  • the example optically and capacitively transparent film 320 is attached to the bezel 318 in a way that provides it physical contact with the tablet display when the lid 316 is closed to allow for normal touch-gesture control and display action of the tablet 306 .
  • the example film 320 has an actuatable covering 328 (e.g., a special coating) applied which is optically active in the presence of an excitation source such as electrical voltage or current or coincident optical or near-optical radiation (such as ultraviolet light).
  • an excitation source such as electrical voltage or current or coincident optical or near-optical radiation (such as ultraviolet light).
  • the covering 328 changes state from normally optically transparent to optically emissive or opaque in a way that is easily visible to an operator in multiple lighting conditions encountered on a flight deck.
  • An imaging device 322 such as a small camera (e.g., a camera similar to one that might be included in a smart phone), is attached to the example bezel 318 and aimed in a manner to provide a view of the tablet display. More than one imaging device 322 may be required or a corrective lens (not shown) may be applied to compensate for the extremely oblique viewing angle the imaging device 322 may have with the tablet's display.
  • An actuation source 324 such as optically emissive devices (e.g., LEDs (light-emitting diodes) operating in a non-visible light band) may be located on the bezel and trained on the cover film 320 to illuminate the film's coating and activate its optical qualities.
  • the LEDs in some embodiments, may produce light in the UV-A band (320-400 nm) and, in some embodiments, may produce light at 385 nm for the color red. If the coating can be activated by an electrical signal, then the optically emissive devices 324 would not be needed in the bezel.
  • the example mounting adapter 304 further includes an adapter controller (not shown).
  • the adapter controller is configured to transmit images from the display on the PED 306 to an application server (e.g., server 102 from FIG. 1 ), receive messages from the server indicating that a problem exists with the display of mission critical data on the tablet display (e.g. a loss of ICA), and cause the actuation source 324 to actuate the covering 328 to annunciate a message indicating that a problem exists with the display of mission critical data on the tablet display, when the server determines that a problem exists with the display of the mission critical data.
  • an application server e.g., server 102 from FIG. 1
  • receive messages from the server indicating that a problem exists with the display of mission critical data on the tablet display e.g. a loss of ICA
  • the actuation source 324 to actuate the covering 328 to annunciate a message indicating that a problem exists with the display of mission critical data on the tablet display, when the
  • FIG. 4 is a block diagram depicting an example adapter controller 402 in a mounting adapter 400 .
  • the example adapter controller includes an image transmitter module 404 and an actuation source enabler 406 .
  • the example adapter controller 402 includes at least one processor and a computer-readable storage device or media encoded with programming instructions for configuring the controller.
  • the processor may be any custom-made or commercially available processor, a central processing unit (CPU), a graphics processing unit (GPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), an auxiliary processor among several processors associated with the controller, a semiconductor-based microprocessor (in the form of a microchip or chip set), any combination thereof, or generally any device for executing instructions.
  • the computer readable storage device or media may include volatile and nonvolatile storage in read-only memory (ROM), random-access memory (RAM), and keep-alive memory (KAM), for example.
  • KAM is a persistent or non-volatile memory that may be used to store various operating variables while the processor is powered down.
  • the computer-readable storage device or media may be implemented using any of a number of known memory devices such as PROMs (programmable read-only memory), EPROMs (electrically PROM), EEPROMs (electrically erasable PROM), flash memory, or any other electric, magnetic, optical, or combination memory devices capable of storing data, some of which represent executable programming instructions, used by the controller.
  • the adapter controller 114 may not include a processor.
  • the example image transmitter module 404 is configured to retrieve an image 401 of the PED display from an imaging sensor (e.g., imaging sensor from imaging device 322 from FIG. 3 ) and transmit the validation 403 (which includes image information from the PED display) to an application server (e.g., server 102 from FIG. 1 ).
  • the example actuation source enabler 406 is configured to receive an annunciation message 405 from the server indicating that a problem exists with the display of mission critical data on the PED display (e.g. a loss of ICA), and cause an actuation source (e.g., actuation source 324 from FIG. 3 ) to actuate the covering 328 to annunciate a message indicating that a problem exists with the display of mission critical data on the PED display, when the server determines that a problem exists with the display of the mission critical data.
  • an actuation source e.g., actuation source 324 from FIG. 3
  • the example system 100 may function as follows.
  • An avionics application 108 such as a CDTI may execute on the server 102 while an avionics display application 110 executes on the tablet 106 or 306 .
  • the tablet 106 or 306 is enclosed in the mounting adapter 104 or 304 which is mounted on the flight deck in a suitable location (e.g., on the outboard side of the crew's seats).
  • the mounting adapter 104 or 304 may be connected to the remote server 102 by several bus wires, such as a bi-directional data bus which allows for information exchanges between the tablet 106 or 306 and the server 102 (and perhaps supplies power to the tablet), a bus to carry video information from the imaging device 322 to the remote server 102 , and a signal or power bus from the remote server 102 to the actuation source 324 .
  • bus wires such as a bi-directional data bus which allows for information exchanges between the tablet 106 or 306 and the server 102 (and perhaps supplies power to the tablet), a bus to carry video information from the imaging device 322 to the remote server 102 , and a signal or power bus from the remote server 102 to the actuation source 324 .
  • the example system 100 can allow uncertified displays such as PEDs/tablets 106 or 306 to display critical aeronautical information by performing two functions: ICA monitoring and providing crew annunciation of non-nominal ICA status.
  • ICA monitoring may be accomplished in two layers as follows.
  • the avionics application 108 executing on the server will determine what information/images need to be displayed on the tablet 106 and will encode (e.g., using HTML5) and transmit that information to the avionics display application 110 executing on the tablet 106 or 306 .
  • the avionics display application 110 will decode the information to be displayed and re-encode it in a dis-similar protocol and “echo back” the information to the remote server 102 , which will compare the echo-back information with the information originally sent.
  • This first layer provides for monitoring the ICA to the avionics display application 110 but does not provide for monitoring the link between the avionics display application 110 and the physical display.
  • the system will monitor the actual information displayed on the screen via the imaging device 322 mounted on the bezel 318 .
  • monitoring may include monitoring all aspects of the display (color and location of every pixel) or using a sampling scheme where the probability of detecting loss of ICA is equivalent or better to the requirements of the Hazard Classification of the application.
  • the monitoring rigor can be tailored to the criticality of the application. Sampling schemes could be further simplified by using specific patterns like QR codes which are displayed for a few milliseconds (faster than the time it takes for the human eye to perceive) on the display and may be customized for optimal recognizability by the imaging device 322 (e.g., a keystone shape).
  • the codes could be randomly changed in content, location, and timing to add robustness to the sampling scheme.
  • the optical information imaged by the imaging device 322 is sent back to the server 102 to enable the software application 108 to compare the image detected to what it expected to see based on what it sent to the tablet 106 or 306 for display. If a loss of ICA is detected, the server 102 /application 108 would activate the appropriate annunciation.
  • the server 102 /application 108 can activate an annunciation by asserting the appropriate electrical signal on the output bus to activate the coating on the cover film 320 of the tablet mounting adapter 104 .
  • the annunciation might simply put a red ‘X’ 332 over the display if a failure was detected.
  • An ‘X’ character could be coated onto the cover film 320 .
  • Other more sophisticated (but fixed) imagery or text could (also or alternatively) be coated onto the cover film including one or more textual failure messages.
  • a fail-condition may also result in the sending of display information to an alternate location such as a different tablet.
  • FIG. 5 is a process flow chart depicting an example computer-implemented process 500 in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information.
  • the process can be scheduled to run based on one or more predetermined events, and/or can run continuously during operation of the aircraft.
  • the example process 500 includes transmitting critical aeronautical information to a PED mounted in an aircraft cockpit (operation 502 ).
  • the critical aeronautical information is transmitted for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface.
  • ICA integrity, continuity, and availability
  • the example process 500 also includes enabling an actuation source to cause the actuatable covering on the surface that overlays the PED display to annunciate a message indicating that a problem exists with the image displayed on the PED display when that a problem exists (operation 506 ).
  • Enabling the actuation source may include enabling the actuation source to actuate the covering to annunciate, on the surface overlaid on the PED display, a message indicating that a problem exists when the loss of ICA is detected.
  • the annunciation may include a symbol such as an ‘X’ character or a textual message being displayed over the PED display.
  • the surface with an actuatable covering may include a film that is overlaid on the PED display wherein the film includes a coating that is optically active in the presence of an excitation source.
  • the actuation source may include an excitation source that is configured to activate the optically active coating.
  • FIG. 6 is a process flow chart depicting another example computer-implemented process 600 in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information.
  • the process can be scheduled to run based on one or more predetermined events, and/or can run continuously during operation of the aircraft.
  • the example process 600 includes transmitting critical aeronautical information to a PED mounted in an aircraft cockpit (operation 602 ).
  • the critical aeronautical information is transmitted for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface.
  • the example process 600 further includes reviewing an image of the PED display generated by an imaging device to assess the ICA of the critical aeronautical information displayed on the PED display (operation 604 ).
  • the example process 600 also includes enabling an actuation source to actuate the covering when a loss of ICA of the critical aeronautical information displayed on the PED display is detected to annunciate the loss of ICA on the surface overlaid on the PED display (operation 606 ).
  • a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information.
  • the display system comprises a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information.
  • the mounting adapter further comprises a surface with an actuatable covering that is configured to be overlaid on the PED display and an actuation source configured to actuate the covering.
  • the display system further comprises an application server comprising one or more processors and that is configured to execute one or more modules that generate critical aeronautical information, transmit the generated critical aeronautical information to the PED for display on the PED display, determine whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display.
  • an application server comprising one or more processors and that is configured to execute one or more modules that generate critical aeronautical information, transmit the generated critical aeronautical information to the PED for display on the PED display, determine whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display.
  • the mounting adapter may further comprise an imaging device configured to capture an image of the PED display; the mounting adapter may be further configured to transmit the image of the PED display to the application server; and the application server may be further configured to review the image from the PED display to determine whether a problem exists with the image displayed on the PED display.
  • the imaging device may comprise a camera.
  • the surface with an actuatable covering may comprise a film that is configured to be overlaid on the PED display wherein the film includes a coating that is optically active in the presence of an excitation source.
  • the actuation source may comprise an excitation source that is configured to activate the optically active coating.
  • the coating when activated may be configured to display a visible symbol that indicates that a problem exists with the image displayed on the PED display.
  • the coating when activated may be configured to display the visible symbol in a color that indicates that a problem exists with the image displayed on the PED display. The color may be red and the symbol may be an X.
  • the coating when activated may be configured to display text that indicates that a problem exists with the image displayed on the PED display.
  • the excitation source may comprise an optically emissive device.
  • the optically emissive device may comprise an LED (light-emitting diode) operating in a non-visible light band and configured to illuminate the coating on the film and activate optical qualities of the film.
  • the excitation source may comprise an electrical source configured to deliver an electrical signal to the coating on the film to activate optical qualities of the film.
  • the application server may be configured to review the image from the PED display to assess the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display.
  • the application server may be further configured to enable the actuation source to actuate the covering when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected wherein the activation of the covering results in the annunciation of the loss of ICA on the surface overlaid on the PED display.
  • the PED may comprise a general-purpose tablet computer or a smartphone.
  • a computer-implemented method in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information comprises transmitting, by a computing device in the aircraft, critical aeronautical information to a personal electronic device (PED) mounted in an aircraft cockpit for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface.
  • PED personal electronic device
  • the method further comprises determining, by the computing device, whether a problem exists with the image displayed on the PED display; and enabling, by the computing device, an actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display when it is determined that a problem exists.
  • Determining whether a problem exists with the image displayed on the PED display may comprise reviewing an imaging device generated image of the PED display to determine whether a problem exists with the image displayed on the PED display.
  • ICA integrity, continuity, and availability
  • the surface with an actuatable covering may comprise a film configured to be overlaid on the PED display wherein the film includes a coating that is optically active in the presence of an excitation source; the actuation source may comprise an excitation source that is configured to activate the optically active coating; the excitation source may comprise an optically emissive device; and enabling an actuation source to cause the covering to annunciate a message may comprise enabling the optically emissive device to cause the optically active coating to annunciate a message that indicates that a problem exists with the image displayed on the PED display.
  • a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information.
  • the display system comprises a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information.
  • the mounting adapter includes a film configured to be overlaid on the PED display and that includes a coating that is optically active in the presence of an excitation source.
  • the mounting adapter further comprises an excitation source configured to activate the coating and a camera configured to take an image of the PED display.
  • the display system further comprises an application server that is mounted in the aircraft and comprises one or more processors.
  • the application server is configured to execute one or more modules that generate critical aeronautical information and is configured to transmit the generated critical aeronautical information to the PED for display on the PED display.
  • the application server is configured to monitor the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display using the camera image and to enable the excitation source to activate the coating when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected. Activation of the coating results in the annunciation of the loss of ICA on the film overlaid on the PED display.
  • ICA integrity, continuity, and availability
  • Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
  • an embodiment of a system or a component may employ various integrated circuit components, e.g., memory elements, digital signal processing elements, logic elements, look-up tables, or the like, which may carry out a variety of functions under the control of one or more microprocessors or other control devices.
  • integrated circuit components e.g., memory elements, digital signal processing elements, logic elements, look-up tables, or the like, which may carry out a variety of functions under the control of one or more microprocessors or other control devices.
  • DSP digital signal processor
  • ASIC application specific integrated circuit
  • FPGA field programmable gate array
  • a general-purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine.
  • a processor may also be implemented as a combination of computing devices, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration.
  • a software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
  • An exemplary storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium.
  • the storage medium may be integral to the processor.
  • the processor and the storage medium may reside in an ASIC.
  • the ASIC may reside in a user terminal.
  • the processor and the storage medium may reside as discrete components in a user terminal.

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Optics & Photonics (AREA)
  • Aviation & Aerospace Engineering (AREA)
  • Radar, Positioning & Navigation (AREA)
  • Remote Sensing (AREA)
  • Human Computer Interaction (AREA)
  • Quality & Reliability (AREA)
  • Spectroscopy & Molecular Physics (AREA)
  • Controls And Circuits For Display Device (AREA)

Abstract

A display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information comprises a mounting adapter and an application server. The mounting adapter is configured to mount, in an aircraft cockpit, a personal electronic device (PED) wherein the PED is not certified to display critical aeronautical information. The mounting adapter further comprises a surface with an actuatable covering that is configured to be overlaid on a PED display and an actuation source configured to actuate the covering. The application server is configured to execute a module that generates critical aeronautical information, transmit the generated critical aeronautical information to the PED for display, determine whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating a problem with the image displayed on the PED display.

Description

    CROSS-REFERENCE TO RELATED APPLICATION
  • This application claims priority to U.S. Provisional Application No. 62/595,623 filed Dec. 7, 2017. This application incorporates the provisional application into the present application by reference.
  • TECHNICAL FIELD
  • The present disclosure generally relates to display systems, and more particularly relates to display systems for displaying critical information on uncertified displays.
  • BACKGROUND
  • In many safety critical and/or regulated industries, such as avionics, maritime, rail, medical devices, nuclear, and others, display systems that display mission critical information may need to be certified that they can provide adequate integrity, continuity, and availability (ICA) for the mission critical information to be displayed thereon. The certification process may be costly and time-consuming and, therefore, may deter the implementation of new applications, such as new applications that use personal electronic devices (PEDs) to display mission critical information.
  • In the avionics industry, low-cost PEDs, such as tablet computers and smartphones, are being used for non-critical applications, such as charts and maps applications and weight and balance calculators. Operators may also want to have the freedom to display aeronautical information, such as airport moving maps, air traffic (Cockpit Display of Traffic Information or CDTI), advanced weather radar information, and others, on tablet computers instead of having to make costly modifications and upgrades to their existing avionics displays. Long-standing regulatory policy prohibits the display of critical aeronautical information during flight on uncertified displays because adequate integrity, continuity, and availability (ICA) cannot be assured.
  • Accordingly, it is desirable to provide a certifiable system for displaying critical information on uncertified displays or displays not approved for the display of data requiring high ICA. Furthermore, other desirable features and characteristics will become apparent from the subsequent detailed description, taken in conjunction with the accompanying drawings and the foregoing technical field and background.
  • SUMMARY
  • Systems and method are provided for allowing the use of uncertified displays to display mission critical information. In one embodiment, a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information includes a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information. The mounting adapter further includes a surface with an actuatable covering that is configured to be overlaid on the PED display and an actuation source configured to actuate the covering. The display system further includes an application server. The application server includes one or more processors and is configured to execute one or more modules that generate critical aeronautical information, transmit the generated critical aeronautical information to the PED for display on the PED display, determine whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display.
  • In another embodiment, a computer-implemented method in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information is provided. The method includes transmitting, by a computing device in the aircraft, critical aeronautical information to a personal electronic device (PED) mounted in an aircraft cockpit for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface. The method further includes determining, by the computing device, whether a problem exists with the image displayed on the PED display; and enabling, by the computing device, an actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display when it is determined that a problem exists.
  • In another embodiment, a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information includes a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information. The mounting adapter includes a film configured to be overlaid on the PED display and that includes a coating that is optically active in the presence of an excitation source. The mounting adapter further includes an excitation source configured to activate the coating and a camera configured to take an image of the PED display. The display system further includes an application server mounted in the aircraft remotely from the aircraft cockpit wherein the application server includes one or more processors, is configured to execute one or more modules that generate critical aeronautical information, and configured to transmit the generated critical aeronautical information to the PED for display on the PED display. The application server is configured to monitor the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display using the camera image and to enable the excitation source to activate the coating when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected. Activation of the coating results in the annunciation of the loss of ICA on the film overlaid on the PED display.
  • Furthermore, other desirable features and characteristics will become apparent from the subsequent detailed description and the appended claims, taken in conjunction with the accompanying drawings and the preceding background.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • The exemplary embodiments will hereinafter be described in conjunction with the following drawing figures, wherein like numerals denote like elements, and wherein:
  • FIG. 1 is a block diagram depicting an example display system in an aircraft that allows uncertified display systems such as commercial PEDs to meet typical avionics requirements for the monitoring of ICA, in accordance with various embodiments;
  • FIG. 2 is a block diagram depicting an example display monitoring module in an example server, in accordance with various embodiments;
  • FIG. 3 is a simplified perspective view of an example PED mounting adapter, in accordance with various embodiments;
  • FIG. 4 is a block diagram depicting an example adapter controller in an example PED mounting adapter, in accordance with various embodiments;
  • FIG. 5 is a process flow chart depicting a computer-implemented process in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, in accordance with various embodiments; and
  • FIG. 6 is a process flow chart depicting another computer-implemented process in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, in accordance with various embodiments.
  • DETAILED DESCRIPTION
  • The following detailed description is merely exemplary in nature and is not intended to limit the application and uses. References to aeronautical and/or aviation specific terms such as but not limited to “cockpit”, “flight deck”, “certification”, or “aircraft” are for simplifying the description and are not intended to limit the application and uses to the aviation or aeronautical industry. Furthermore, there is no intention to be bound by any expressed or implied theory presented in the preceding technical field, background, summary, or the following detailed description. As used herein, the term “module” refers to any hardware, software, firmware, electronic control component, processing logic, and/or processor device, individually or in any combination, including without limitation: application specific integrated circuit (ASIC), a field-programmable gate-array (FPGA), an electronic circuit, a processor (shared, dedicated, or group) and memory that executes one or more software or firmware programs, a combinational logic circuit, and/or other suitable components that provide the described functionality.
  • Embodiments of the present disclosure may be described herein in terms of functional and/or logical block components and various processing steps. It should be appreciated that such block components may be realized by any number of hardware, software, and/or firmware components configured to perform the specified functions. For example, an embodiment of the present disclosure may employ various integrated circuit components, e.g., memory elements, digital signal processing elements, logic elements, look-up tables, or the like, which may carry out a variety of functions under the control of one or more microprocessors or other control devices. In addition, those skilled in the art will appreciate that embodiments of the present disclosure may be practiced in conjunction with any number of systems, and that the systems described herein are merely exemplary embodiments of the present disclosure.
  • For the sake of brevity, conventional techniques related to signal processing, data transmission, signaling, control, and other functional aspects of the systems (and the individual operating components of the systems) may not be described in detail herein. Furthermore, the connecting lines shown in the various figures contained herein are intended to represent example functional relationships and/or physical couplings between the various elements. It should be noted that many alternative or additional functional relationships or physical connections may be present in an embodiment of the present disclosure.
  • Apparatus, systems, methods, techniques and articles are described for providing assurance that an uncertified display, such as a display on a personal electronic device (PED) (e.g., a tablet computer, a smartphone, or some other device), that is used to display mission critical data (e.g., critical aeronautical information) accurately conveys the mission critical data. The apparatus, systems, methods, techniques and articles described herein may provide assurances that an uncertified display accurately conveys mission critical data by verifying the integrity, continuity, and availability (ICA) of the mission critical data displayed on the uncertified display. Loss of accuracy or ICA can be annunciated to operators (e.g., a flight crew) of the uncertified display without reliance on the uncertified display to self-report the loss when displaying the mission critical data.
  • In the case of aeronautical applications, the apparatus, systems, methods, techniques and articles described herein may allow operators to use a PED to display critical aeronautical information. This may allow for a more affordable and quicker adoption of new avionics functionality. The described apparatus, systems, methods, techniques and articles may allow for mission critical data such as that generated by multiple high integrity applications (e.g. airborne situational awareness (AIRB) and various other CNS-ATM (Communications Navigation and Surveillance-Air Traffic Management) applications such as flight deck interval management (FIM) or air traffic control controller/pilot data link communication (CPDLC), SURF (Surface Surveillance application that includes an airport moving map with traffic superimposed), and others) to be displayed on uncertified displays. At the same time, the described apparatus, systems, methods, techniques and articles can allow data from lower integrity applications, such as maps and charts, to be displayed on the uncertified displays without changes to the applications or equipment installation.
  • FIG. 1 is a block diagram depicting an example system 100 that allows an uncertified display system, such as a PED, to meet typical avionics requirements for the monitoring of ICA. The example system 100 includes an application server 102 and a mounting adapter 104 configured to mount a PED 106 (having a PED display) in an aircraft flight deck or cockpit.
  • The example application server 102 includes at least one processor and a computer-readable storage device or media encoded with programming instructions for configuring the at least one processor. The example application server 102 is positioned in an aircraft remotely from the aircraft cockpit. The example application server 102 is a fully certified avionics box that hosts and executes one or more high integrity avionics application modules 108. The high integrity avionics application modules 108 are configured to generate mission critical data (e.g., critical aeronautical information) for display on a cockpit display. The example application server 102 is configured to transmit the generated critical aeronautical information to an uncertified cockpit display (e.g., the PED 106) for display (e.g., on the PED display).
  • The example application server 102 also includes a display monitoring module 112 that is configured to monitor the image displayed on an uncertified cockpit display when critical aeronautical information is transmitted from a high integrity avionics application module 108 to the uncertified cockpit display device (e.g., PED 106) to determine whether a problem exists with the display of the mission critical data on the uncertified display device. The example display monitoring module 112 is configured to determine whether a problem exists with the display of the mission critical data on the uncertified display device 106 by verifying the integrity, continuity, and availability (ICA) of the mission critical data displayed on the uncertified display device 106. The example display monitoring module 112 is also configured to cause the annunciation of a message indicating that a problem exists with the display of mission critical data on the uncertified display device 106, when it determines that a problem indeed exists.
  • The mounting adapter 104 is configured to mount an uncertified display device 106 in an aircraft cockpit for use by a flight crew so that the uncertified display device 106 may display critical or non-critical aeronautical information to the flight crew. When the uncertified display device 106 comprises a tablet computer, the mounting adapter 104 may include a clamshell shape to fully enclose the tablet computer 106.
  • The example uncertified display device 106 may comprise a PED (such as a tablet computer, a smartphone, or some other device), which includes at least one processor and computer readable media, and is configured to host and execute one or more application programs such as a specialized avionics display application 110. The example specialized avionics display application 110 is configured to display critical aeronautical information received by the PED 106 from the application server 102.
  • The example mounting adapter 104 further includes an adapter controller 114. The example controller 114 includes at least one processor and computer readable media. In other embodiments, the adapter controller 114 may not include a processor. The example controller 114 is configured (for example by programming instructions) to transmit images of the display on the uncertified display device 106 to the display monitoring module 112 and to activate the annunciation of a message indicating that a problem exists with the display of mission critical data on the uncertified display device 106, when the display monitoring module 112 determines that a problem exists.
  • FIG. 2 is a block diagram depicting an example display monitoring module 202 in a server 200 wherein the example display monitoring module provides a way to display critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information. The example display monitoring module includes an integrity checking module 204 and an interface module 206. All or parts of the example display monitoring module may be incorporated in an application module (e.g., application module 108 from FIG. 1) or separate from the application module.
  • The integrity checking module 204 is configured to compare source data 201 (e.g., critical aeronautical information) received by the display monitoring module 202 from a high integrity avionics application (e.g., high integrity avionics application module 108 from FIG. 1) to validation data 203 (which includes image information from the PED display) received by the display monitoring module 202 from a monitoring adapter (e.g., mounting adapter 104 from FIG. 1). The integrity checking module 204 is configured to compare the source data 201 to the validation data 203 to determine whether a problem exists with the display of mission critical data on the uncertified display device (e.g., PED 106 from FIG. 1). The example integrity checking module 204 is configured to determine whether a problem exists with the display of mission critical data on the uncertified display device (e.g., PED 106) by verifying the ICA of the mission critical data displayed on the uncertified display device (e.g., PED 106).
  • The interface module 206 is configured to communicate an annunciation message 205 (e.g. a loss of ICA) to the mounting adapter (e.g., mounting adapter 104 from FIG. 1) that instructs the mounting adapter to annunciate a message indicating that a problem exists with the display of mission critical data on the uncertified display device, when the integrity checking module 204 determines that a problem does exist with the display of the mission critical data.
  • FIG. 3 is a simplified perspective view of an example mounting adapter 304. The example mounting adapter 304 incorporates a clamshell design configured for a PED/tablet 306 to be situated in a base 314 of the mounting adapter 304. The example mounting adapter 304 is also configured with a hinged lid 316 that may be closed over the top of the tablet 306 to fully encloses the tablet 306 within the mounting adapter 304. The base 314 accommodates the tablet 306 and may have threaded mounting bosses on its back to facilitate installation of the mounting adapter 304 in the aircraft. The example lid 316 includes a bezel 318, a surface 320 (e.g., an optically and capacitively transparent film), an imaging device 322 (e.g., a camera), and an actuation source 324 (e.g., optically emissive devices).
  • The example bezel 318 is attached to the base 314 by hinges (not shown) and closes around the tablet 306 to mechanically capture the tablet 306. The example bezel 318 also hosts the optically and capacitively transparent film 320, the imaging device 322, and the optically emissive devices 324.
  • The example optically and capacitively transparent film 320 is attached to the bezel 318 in a way that provides it physical contact with the tablet display when the lid 316 is closed to allow for normal touch-gesture control and display action of the tablet 306. Further, the example film 320 has an actuatable covering 328 (e.g., a special coating) applied which is optically active in the presence of an excitation source such as electrical voltage or current or coincident optical or near-optical radiation (such as ultraviolet light). Upon application of the appropriate excitation signal, the covering 328 changes state from normally optically transparent to optically emissive or opaque in a way that is easily visible to an operator in multiple lighting conditions encountered on a flight deck.
  • An imaging device 322, such as a small camera (e.g., a camera similar to one that might be included in a smart phone), is attached to the example bezel 318 and aimed in a manner to provide a view of the tablet display. More than one imaging device 322 may be required or a corrective lens (not shown) may be applied to compensate for the extremely oblique viewing angle the imaging device 322 may have with the tablet's display.
  • An actuation source 324, such as optically emissive devices (e.g., LEDs (light-emitting diodes) operating in a non-visible light band) may be located on the bezel and trained on the cover film 320 to illuminate the film's coating and activate its optical qualities. The LEDs, in some embodiments, may produce light in the UV-A band (320-400 nm) and, in some embodiments, may produce light at 385 nm for the color red. If the coating can be activated by an electrical signal, then the optically emissive devices 324 would not be needed in the bezel.
  • The example mounting adapter 304 further includes an adapter controller (not shown). The adapter controller is configured to transmit images from the display on the PED 306 to an application server (e.g., server 102 from FIG. 1), receive messages from the server indicating that a problem exists with the display of mission critical data on the tablet display (e.g. a loss of ICA), and cause the actuation source 324 to actuate the covering 328 to annunciate a message indicating that a problem exists with the display of mission critical data on the tablet display, when the server determines that a problem exists with the display of the mission critical data.
  • FIG. 4 is a block diagram depicting an example adapter controller 402 in a mounting adapter 400. The example adapter controller includes an image transmitter module 404 and an actuation source enabler 406. The example adapter controller 402 includes at least one processor and a computer-readable storage device or media encoded with programming instructions for configuring the controller. The processor may be any custom-made or commercially available processor, a central processing unit (CPU), a graphics processing unit (GPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), an auxiliary processor among several processors associated with the controller, a semiconductor-based microprocessor (in the form of a microchip or chip set), any combination thereof, or generally any device for executing instructions. The computer readable storage device or media may include volatile and nonvolatile storage in read-only memory (ROM), random-access memory (RAM), and keep-alive memory (KAM), for example. KAM is a persistent or non-volatile memory that may be used to store various operating variables while the processor is powered down. The computer-readable storage device or media may be implemented using any of a number of known memory devices such as PROMs (programmable read-only memory), EPROMs (electrically PROM), EEPROMs (electrically erasable PROM), flash memory, or any other electric, magnetic, optical, or combination memory devices capable of storing data, some of which represent executable programming instructions, used by the controller. In other embodiments, the adapter controller 114 may not include a processor.
  • The example image transmitter module 404 is configured to retrieve an image 401 of the PED display from an imaging sensor (e.g., imaging sensor from imaging device 322 from FIG. 3) and transmit the validation 403 (which includes image information from the PED display) to an application server (e.g., server 102 from FIG. 1). The example actuation source enabler 406 is configured to receive an annunciation message 405 from the server indicating that a problem exists with the display of mission critical data on the PED display (e.g. a loss of ICA), and cause an actuation source (e.g., actuation source 324 from FIG. 3) to actuate the covering 328 to annunciate a message indicating that a problem exists with the display of mission critical data on the PED display, when the server determines that a problem exists with the display of the mission critical data.
  • Referring again to FIGS. 1 and 3, the example system 100 may function as follows. An avionics application 108 such as a CDTI may execute on the server 102 while an avionics display application 110 executes on the tablet 106 or 306. The tablet 106 or 306 is enclosed in the mounting adapter 104 or 304 which is mounted on the flight deck in a suitable location (e.g., on the outboard side of the crew's seats). The mounting adapter 104 or 304 may be connected to the remote server 102 by several bus wires, such as a bi-directional data bus which allows for information exchanges between the tablet 106 or 306 and the server 102 (and perhaps supplies power to the tablet), a bus to carry video information from the imaging device 322 to the remote server 102, and a signal or power bus from the remote server 102 to the actuation source 324.
  • The example system 100 can allow uncertified displays such as PEDs/ tablets 106 or 306 to display critical aeronautical information by performing two functions: ICA monitoring and providing crew annunciation of non-nominal ICA status.
  • ICA monitoring may be accomplished in two layers as follows. The avionics application 108 executing on the server will determine what information/images need to be displayed on the tablet 106 and will encode (e.g., using HTML5) and transmit that information to the avionics display application 110 executing on the tablet 106 or 306. In the first layer, prior to displaying any of this information, the avionics display application 110 will decode the information to be displayed and re-encode it in a dis-similar protocol and “echo back” the information to the remote server 102, which will compare the echo-back information with the information originally sent. Matching information will result in an “ack” (acknowledgement) from the server to the tablet while a mismatch would generate a “no-ack” and a crew annunciation. This first layer provides for monitoring the ICA to the avionics display application 110 but does not provide for monitoring the link between the avionics display application 110 and the physical display.
  • In the second layer, the system will monitor the actual information displayed on the screen via the imaging device 322 mounted on the bezel 318. As an example, monitoring may include monitoring all aspects of the display (color and location of every pixel) or using a sampling scheme where the probability of detecting loss of ICA is equivalent or better to the requirements of the Hazard Classification of the application. Thus, the monitoring rigor can be tailored to the criticality of the application. Sampling schemes could be further simplified by using specific patterns like QR codes which are displayed for a few milliseconds (faster than the time it takes for the human eye to perceive) on the display and may be customized for optimal recognizability by the imaging device 322 (e.g., a keystone shape). The codes could be randomly changed in content, location, and timing to add robustness to the sampling scheme. In any case, the optical information imaged by the imaging device 322 is sent back to the server 102 to enable the software application 108 to compare the image detected to what it expected to see based on what it sent to the tablet 106 or 306 for display. If a loss of ICA is detected, the server 102/application 108 would activate the appropriate annunciation.
  • If the server 102/application 108 determines that there has been a loss of ICA, it can activate an annunciation by asserting the appropriate electrical signal on the output bus to activate the coating on the cover film 320 of the tablet mounting adapter 104. As an example, the annunciation might simply put a red ‘X’ 332 over the display if a failure was detected. An ‘X’ character could be coated onto the cover film 320. Other more sophisticated (but fixed) imagery or text could (also or alternatively) be coated onto the cover film including one or more textual failure messages. In addition, a fail-condition may also result in the sending of display information to an alternate location such as a different tablet.
  • FIG. 5 is a process flow chart depicting an example computer-implemented process 500 in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information. In various embodiments, the process can be scheduled to run based on one or more predetermined events, and/or can run continuously during operation of the aircraft.
  • The example process 500 includes transmitting critical aeronautical information to a PED mounted in an aircraft cockpit (operation 502). The critical aeronautical information is transmitted for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface.
  • The example process 500 includes determining whether a problem exists with the image displayed on the PED display (operation 504). Determining whether a problem exists with the image displayed on the PED display may include reviewing an image of the PED display generated by an imaging device to determine whether a problem exists with the image displayed on the PED display. Reviewing an image of the PED display generated by an imaging device may include reviewing the image of the PED display generated by an imaging device to assess the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display.
  • The example process 500 also includes enabling an actuation source to cause the actuatable covering on the surface that overlays the PED display to annunciate a message indicating that a problem exists with the image displayed on the PED display when that a problem exists (operation 506). Enabling the actuation source may include enabling the actuation source to actuate the covering to annunciate, on the surface overlaid on the PED display, a message indicating that a problem exists when the loss of ICA is detected. The annunciation may include a symbol such as an ‘X’ character or a textual message being displayed over the PED display.
  • The surface with an actuatable covering may include a film that is overlaid on the PED display wherein the film includes a coating that is optically active in the presence of an excitation source. The actuation source may include an excitation source that is configured to activate the optically active coating. The excitation source may include an optically emissive device. Enabling the actuation source to cause the covering to annunciate a message may include enabling the optically emissive device to cause the optically active coating to annunciate a message that indicates that a problem exists with the image displayed on the PED display.
  • FIG. 6 is a process flow chart depicting another example computer-implemented process 600 in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information. In various embodiments, the process can be scheduled to run based on one or more predetermined events, and/or can run continuously during operation of the aircraft.
  • The example process 600 includes transmitting critical aeronautical information to a PED mounted in an aircraft cockpit (operation 602). The critical aeronautical information is transmitted for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface.
  • The example process 600 further includes reviewing an image of the PED display generated by an imaging device to assess the ICA of the critical aeronautical information displayed on the PED display (operation 604). The example process 600 also includes enabling an actuation source to actuate the covering when a loss of ICA of the critical aeronautical information displayed on the PED display is detected to annunciate the loss of ICA on the surface overlaid on the PED display (operation 606).
  • In one embodiment, a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information is provided. The display system comprises a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information. The mounting adapter further comprises a surface with an actuatable covering that is configured to be overlaid on the PED display and an actuation source configured to actuate the covering. The display system further comprises an application server comprising one or more processors and that is configured to execute one or more modules that generate critical aeronautical information, transmit the generated critical aeronautical information to the PED for display on the PED display, determine whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display.
  • These aspects and other embodiments may include one or more of the following features. The mounting adapter may further comprise an imaging device configured to capture an image of the PED display; the mounting adapter may be further configured to transmit the image of the PED display to the application server; and the application server may be further configured to review the image from the PED display to determine whether a problem exists with the image displayed on the PED display. The imaging device may comprise a camera. The surface with an actuatable covering may comprise a film that is configured to be overlaid on the PED display wherein the film includes a coating that is optically active in the presence of an excitation source. The actuation source may comprise an excitation source that is configured to activate the optically active coating. The coating when activated may be configured to display a visible symbol that indicates that a problem exists with the image displayed on the PED display. The coating when activated may be configured to display the visible symbol in a color that indicates that a problem exists with the image displayed on the PED display. The color may be red and the symbol may be an X. The coating when activated may be configured to display text that indicates that a problem exists with the image displayed on the PED display. The excitation source may comprise an optically emissive device. The optically emissive device may comprise an LED (light-emitting diode) operating in a non-visible light band and configured to illuminate the coating on the film and activate optical qualities of the film. The excitation source may comprise an electrical source configured to deliver an electrical signal to the coating on the film to activate optical qualities of the film. The application server may be configured to review the image from the PED display to assess the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display. The application server may be further configured to enable the actuation source to actuate the covering when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected wherein the activation of the covering results in the annunciation of the loss of ICA on the surface overlaid on the PED display. The PED may comprise a general-purpose tablet computer or a smartphone.
  • In another embodiment, a computer-implemented method in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information is provided. The method comprises transmitting, by a computing device in the aircraft, critical aeronautical information to a personal electronic device (PED) mounted in an aircraft cockpit for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information and wherein the PED display is overlaid with a surface having an actuatable covering on the surface. The method further comprises determining, by the computing device, whether a problem exists with the image displayed on the PED display; and enabling, by the computing device, an actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display when it is determined that a problem exists.
  • These aspects and other embodiments may include one or more of the following features. Determining whether a problem exists with the image displayed on the PED display may comprise reviewing an imaging device generated image of the PED display to determine whether a problem exists with the image displayed on the PED display. Reviewing an imaging device generated image of the PED display may comprise reviewing the imaging device generated image of the PED display to assess the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display; and enabling the actuation source may comprise enabling the actuation source to actuate the covering when a loss of ICA of the critical aeronautical information displayed on the PED display is detected to annunciate the loss of ICA on the surface overlaid on the PED display. The surface with an actuatable covering may comprise a film configured to be overlaid on the PED display wherein the film includes a coating that is optically active in the presence of an excitation source; the actuation source may comprise an excitation source that is configured to activate the optically active coating; the excitation source may comprise an optically emissive device; and enabling an actuation source to cause the covering to annunciate a message may comprise enabling the optically emissive device to cause the optically active coating to annunciate a message that indicates that a problem exists with the image displayed on the PED display.
  • In another embodiment, a display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information is disclosed. The display system comprises a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information. The mounting adapter includes a film configured to be overlaid on the PED display and that includes a coating that is optically active in the presence of an excitation source. The mounting adapter further comprises an excitation source configured to activate the coating and a camera configured to take an image of the PED display. The display system further comprises an application server that is mounted in the aircraft and comprises one or more processors. The application server is configured to execute one or more modules that generate critical aeronautical information and is configured to transmit the generated critical aeronautical information to the PED for display on the PED display. The application server is configured to monitor the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display using the camera image and to enable the excitation source to activate the coating when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected. Activation of the coating results in the annunciation of the loss of ICA on the film overlaid on the PED display.
  • Those of skill in the art will appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, computer software, or combinations of both. Some of the embodiments and implementations are described above in terms of functional and/or logical block components (or modules) and various processing steps. However, it should be appreciated that such block components (or modules) may be realized by any number of hardware, software, and/or firmware components configured to perform the specified functions. To clearly illustrate this interchangeability of hardware and software, various illustrative components, blocks, modules, circuits, and steps have been described above generally in terms of their functionality. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the overall system. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention. For example, an embodiment of a system or a component may employ various integrated circuit components, e.g., memory elements, digital signal processing elements, logic elements, look-up tables, or the like, which may carry out a variety of functions under the control of one or more microprocessors or other control devices. In addition, those skilled in the art will appreciate that embodiments described herein are merely exemplary implementations.
  • The various illustrative logical blocks, modules, and circuits described in connection with the embodiments disclosed herein may be implemented or performed with a general purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general-purpose processor may be a microprocessor, but in the alternative, the processor may be any conventional processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices, e.g., a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration.
  • The steps of a method or algorithm described in connection with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of the two. A software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor such that the processor can read information from, and write information to, the storage medium. In the alternative, the storage medium may be integral to the processor. The processor and the storage medium may reside in an ASIC. The ASIC may reside in a user terminal. In the alternative, the processor and the storage medium may reside as discrete components in a user terminal.
  • In this document, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Numerical ordinals such as “first,” “second,” “third,” etc. simply denote different singles of a plurality and do not imply any order or sequence unless specifically defined by the claim language. The sequence of the text in any of the claims does not imply that process steps must be performed in a temporal or logical order according to such sequence unless it is specifically defined by the language of the claim. The process steps may be interchanged in any order without departing from the scope of the invention as long as such an interchange does not contradict the claim language and is not logically nonsensical.
  • Furthermore, depending on the context, words such as “connect” or “coupled to” used in describing a relationship between different elements do not imply that a direct physical connection must be made between these elements. For example, two elements may be connected to each other physically, electronically, logically, or in any other manner, through one or more additional elements.
  • While at least one exemplary embodiment has been presented in the foregoing detailed description of the invention, it should be appreciated that a vast number of variations exist. It should also be appreciated that the exemplary embodiment or exemplary embodiments are only examples, and are not intended to limit the scope, applicability, or configuration of the invention in any way. Rather, the foregoing detailed description will provide those skilled in the art with a convenient road map for implementing an exemplary embodiment of the invention. It is understood that various changes may be made in the function and arrangement of elements described in an exemplary embodiment without departing from the scope of the invention as set forth in the appended claims.

Claims (20)

1. A display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, the display system comprising:
a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information, the mounting adapter comprising a surface with an actuatable covering that is configured to be overlaid on the PED display, wherein the surface with an actuatable covering is optically active in the presence of an excitation source, and an actuation source configured to actuate the covering; and
an application server comprising one or more processors, the application server configured to execute one or more modules that generate critical aeronautical information, transmit the generated critical aeronautical information to the PED for display on the PED display, determine from an image of the PED display captured by an imaging device whether a problem exists with the image displayed on the PED display, and enable the actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display.
2. The system of claim 1, wherein:
the mounting adapter further comprises the imaging device which is configured to capture an image of the PED display;
the mounting adapter is further configured to transmit the image of the PED display to the application server; and
the application server is further configured to review the image from the PED display to determine whether a problem exists with the image displayed on the PED display.
3. The system of claim 2, wherein the imaging device comprises a camera.
4. The system of claim 1, wherein the surface with an actuatable covering comprises a film configured to be overlaid on the PED display wherein the film includes a coating that is optically active in the presence of the excitation source.
5. The system of claim 4, wherein the actuation source comprises the excitation source that is configured to activate the optically active coating.
6. The system of claim 5, wherein the coating when activated is configured to display a visible symbol that indicates that a problem exists with the image displayed on the PED display.
7. The system of claim 6 wherein the coating when activated is configured to display the visible symbol in a color that indicates that a problem exists with the image displayed on the PED display.
8. The system of claim 7, wherein the color is red and the symbol is an X.
9. The system of claim 5, wherein the coating when activated is configured to display text that indicates that a problem exists with the image displayed on the PED display.
10. The system of claim 5, wherein the excitation source comprises an optically emissive device.
11. The system of claim 10 wherein the optically emissive device comprises an LED (light-emitting diode) operating in a non-visible light band and configured to illuminate the coating on the film and activate optical qualities of the film.
12. The system of claim 5, wherein the excitation source comprises an electrical source configured to deliver an electrical signal to the coating on the film to activate optical qualities of the film.
13. The system of claim 2, wherein the application server is configured to review the image from the PED display to assess the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display.
14. The system of claim 13, wherein the application server is further configured to enable the actuation source to actuate the covering when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected, the activation of the covering resulting in the annunciation of the loss of ICA on the surface overlaid on the PED display.
15. The system of claim 1, wherein the PED comprises a general-purpose tablet computer or a smartphone.
16. A computer-implemented method in an aircraft for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, the method comprising:
transmitting, by a computing device in the aircraft, critical aeronautical information to a personal electronic device (PED) mounted in an aircraft cockpit for display on a PED display of the PED, wherein the PED is not certified to display critical aeronautical information, wherein the PED display is overlaid with a surface having an actuatable covering on the surface, and wherein the surface with the actuatable covering is optically active in the presence of an excitation source;
determining, from an image of the PED display captured by an imaging device by the computing device, whether a problem exists with the image displayed on the PED display; and
enabling, by the computing device, an actuation source to cause the covering to annunciate a message indicating that a problem exists with the image displayed on the PED display when it is determined that a problem exists.
17. The method of claim 0, wherein determining whether a problem exists with the image displayed on the PED display comprises reviewing the imaging device generated image of the PED display to determine whether a problem exists with the image displayed on the PED display.
18. The method of claim 17, wherein:
reviewing the imaging device generated image of the PED display comprises reviewing the imaging device generated image of the PED display to assess the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display; and
enabling the actuation source comprises enabling the actuation source to actuate the covering when a loss of ICA of the critical aeronautical information displayed on the PED display is detected to annunciate the loss of ICA on the surface overlaid on the PED display.
19. The method of claim 0, wherein:
the surface with an actuatable covering comprises a film configured to be overlaid on the PED display wherein the film includes a coating that is optically active in the presence of the excitation source;
the actuation source comprises the excitation source that is configured to activate the optically active coating;
the excitation source comprises an optically emissive device; and
enabling an actuation source to cause the covering to annunciate a message comprises enabling the optically emissive device to cause the optically active coating to annunciate a message that indicates that a problem exists with the image displayed on the PED display.
20. A display system configured for displaying critical aeronautical information on an aircraft display that is not certified for displaying critical aeronautical information, the display system comprising:
a mounting adapter configured to mount, in an aircraft cockpit, a personal electronic device (PED) having a PED display wherein the PED is not certified to display critical aeronautical information, the mounting adapter including a film configured to be overlaid on the PED display and that includes a coating that is optically active in the presence of an excitation source, an excitation source configured to activate the coating, and a camera configured to take an image of the PED display; and
an application server mounted in the aircraft and comprising one or more processors, the application server configured to execute one or more modules that generate critical aeronautical information and configured to transmit the generated critical aeronautical information to the PED for display on the PED display, the application server configured to monitor the integrity, continuity, and availability (ICA) of the generated critical aeronautical information displayed on the PED display using the camera image and to enable the excitation source to activate the coating when a loss of ICA of the generated critical aeronautical information displayed on the PED display is detected, the activation of the coating resulting in the annunciation of the loss of ICA on the film overlaid on the PED display.
US15/915,503 2017-12-07 2018-03-08 System and method for displaying critical aeronautical information on an uncertified display Active US10338337B1 (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
US15/915,503 US10338337B1 (en) 2017-12-07 2018-03-08 System and method for displaying critical aeronautical information on an uncertified display
CA3026508A CA3026508A1 (en) 2017-12-07 2018-12-05 System and method for displaying critical aeronautical information on an uncertified display
EP18210896.9A EP3495778B1 (en) 2017-12-07 2018-12-06 System and method for displaying critical aeronautical information on an uncertified display

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US201762595623P 2017-12-07 2017-12-07
US15/915,503 US10338337B1 (en) 2017-12-07 2018-03-08 System and method for displaying critical aeronautical information on an uncertified display

Publications (2)

Publication Number Publication Date
US20190179097A1 true US20190179097A1 (en) 2019-06-13
US10338337B1 US10338337B1 (en) 2019-07-02

Family

ID=64650320

Family Applications (1)

Application Number Title Priority Date Filing Date
US15/915,503 Active US10338337B1 (en) 2017-12-07 2018-03-08 System and method for displaying critical aeronautical information on an uncertified display

Country Status (3)

Country Link
US (1) US10338337B1 (en)
EP (1) EP3495778B1 (en)
CA (1) CA3026508A1 (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111091770A (en) * 2019-12-17 2020-05-01 广州飞机维修工程有限公司 Drive testing arrangement of air passenger A320 display module
US20200348148A1 (en) * 2019-04-30 2020-11-05 Honeywell International Inc. System and method for rendering dynamic data and controlling the visual form of the data on a cockpit display without altering the certified software
US20220144446A1 (en) * 2020-11-11 2022-05-12 Honeywell International Inc. Mounting device adapter and method in a system for displaying mission critical information on an uncertified display
EP4223646A1 (en) * 2022-02-07 2023-08-09 Hamilton Sundstrand Corporation Artificial intelligence and/or machine learning (ai/ml) monitor systems

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11526390B2 (en) 2020-11-24 2022-12-13 Honeywell International Inc. System and method for mission critical screen validation on commercial displays
FR3122491B1 (en) * 2021-04-30 2023-06-02 Safran Electronics & Defense Critical and non-critical information display system

Family Cites Families (31)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020075210A1 (en) 1998-08-05 2002-06-20 Microvision, Inc. Low light viewer with image simulation
US6700482B2 (en) 2000-09-29 2004-03-02 Honeywell International Inc. Alerting and notification system
US7025274B2 (en) 2002-05-31 2006-04-11 Hewlett-Packard Development Company, L.P. Tablet computer protective display cover and system and method incorporating same
FR2855887B1 (en) 2003-06-04 2005-08-05 Airbus France METHOD AND SYSTEM FOR TRANSMITTING INFORMATION ON AN AIRCRAFT
US7239080B2 (en) 2004-03-11 2007-07-03 Avago Technologies Ecbu Ip (Singapore) Pte. Ltd LED display with overlay
US20060221022A1 (en) 2005-04-01 2006-10-05 Roger Hajjar Laser vector scanner systems with display screens having optical fluorescent materials
US7791561B2 (en) 2005-04-01 2010-09-07 Prysm, Inc. Display systems having screens with optical fluorescent materials
US20070281734A1 (en) 2006-05-25 2007-12-06 Yoram Mizrachi Method, system and apparatus for handset screen analysis
US20090058682A1 (en) 2007-08-27 2009-03-05 Honeywell International Inc. Aircraft data network access for personal electronic devices
US20100097293A1 (en) 2008-10-16 2010-04-22 Mcmahon Roy P Overlay Display Device
US20100110657A1 (en) 2008-11-05 2010-05-06 Visteon Global Technologies, Inc. Instrument Panel And Gauge With Ultraviolet Indicia
US8319665B2 (en) 2009-02-20 2012-11-27 Appareo Systems, Llc Adaptive instrument and operator control recognition
FR2948472B1 (en) 2009-07-21 2012-02-10 Alstom Transport Sa DEVICE FOR VERIFYING THE INTEGRITY OF A DATA DISPLAYED AND ASSOCIATED METHOD
US9341843B2 (en) 2010-02-28 2016-05-17 Microsoft Technology Licensing, Llc See-through near-eye display glasses with a small scale image source
US20120140125A1 (en) 2010-12-03 2012-06-07 Honeywell International Inc. Aircraft cockpit visor display
EP2734905B1 (en) 2011-07-22 2019-07-17 Aspen Avionics, Inc. Avionics gateway interface, systems and methods
WO2013106474A1 (en) 2012-01-10 2013-07-18 The Joy Factory, Inc. Protective casing providing impact absorption and water resistance for portable electronic devices
US20130305391A1 (en) 2012-05-14 2013-11-14 Rosemount Aerospace, Inc. Common Computing Apparatus Providing Distinct Non-Certified And Certified Computing Platforms
US20130334545A1 (en) 2012-06-13 2013-12-19 Shenzhen China Star Optoelectronics Technology Co., Ltd. Surface light source and display device
US9337953B1 (en) 2012-09-24 2016-05-10 Rockwell Collins, Inc. Smart device for controlling avionics data transfer apparatus and method
GB2521077B (en) 2012-10-03 2018-04-18 Prysm Inc Seamless emission tile quilt
CN107099283A (en) 2013-03-14 2017-08-29 纳米技术有限公司 The quantum dot pearl of multilayer coating structure
US20140262847A1 (en) 2013-03-15 2014-09-18 The Joy Factory, Inc. Case structures for portable electronic devices
TWI474101B (en) 2013-07-24 2015-02-21 Coretronic Corp Portable display device
US9714081B1 (en) 2013-08-29 2017-07-25 Rockwell Collins, Inc. System and method for avionics integrity and protection
US9158115B1 (en) 2013-09-16 2015-10-13 Amazon Technologies, Inc. Touch control for immersion in a tablet goggles accessory
US9260182B2 (en) 2013-10-30 2016-02-16 Westjet Airlines Ltd. Integrated communication and application system for aircraft
US10268334B2 (en) * 2014-02-21 2019-04-23 Astronautics Corporation Of America System for communicating avionics information through portable electronic devices
FR3029619B1 (en) 2014-12-05 2017-10-06 Airbus Operations Sas MANAGEMENT SYSTEM, ESPECIALLY FLIGHT MANAGEMENT SYSTEM, FOR AN AIRCRAFT.
US10009585B2 (en) 2016-01-04 2018-06-26 Microvision, Inc. MEMS scan controlled keystone and distortion correction
US9980298B2 (en) * 2016-02-26 2018-05-22 The Boeing Company Method and system for integration of portable devices with flight deck displays

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20200348148A1 (en) * 2019-04-30 2020-11-05 Honeywell International Inc. System and method for rendering dynamic data and controlling the visual form of the data on a cockpit display without altering the certified software
CN111091770A (en) * 2019-12-17 2020-05-01 广州飞机维修工程有限公司 Drive testing arrangement of air passenger A320 display module
US20220144446A1 (en) * 2020-11-11 2022-05-12 Honeywell International Inc. Mounting device adapter and method in a system for displaying mission critical information on an uncertified display
EP4223646A1 (en) * 2022-02-07 2023-08-09 Hamilton Sundstrand Corporation Artificial intelligence and/or machine learning (ai/ml) monitor systems
US20230249845A1 (en) * 2022-02-07 2023-08-10 Hamilton Sundstrand Corporation Artificial intelligence and/or machine learning (ai/ml) monitor systems

Also Published As

Publication number Publication date
EP3495778B1 (en) 2020-04-15
EP3495778A1 (en) 2019-06-12
CA3026508A1 (en) 2019-06-07
US10338337B1 (en) 2019-07-02

Similar Documents

Publication Publication Date Title
US10338337B1 (en) System and method for displaying critical aeronautical information on an uncertified display
EP3742120B1 (en) Protocol for high integrity personal electronic device applications
US10273020B1 (en) Mounting device adapter and method in a system for displaying mission critical information on an uncertified display
EP3495774B1 (en) Avionics server for high integrity tablet applications
US11524889B2 (en) Addressable display system for ICA monitoring and annunciation for certified applications running on a personal electronic device
CN112135775A (en) Method and system for preventing and detecting danger misleading information on safety-critical displays
CN105966634B (en) Method and display device for jointly representing safety-critical and non-safety-critical information
EP3495779A1 (en) Display integrity system for ica monitoring and annunciation for certified aeronautical applications running on a commercial device
EP1763864B1 (en) Picture freeze detector
US20220144446A1 (en) Mounting device adapter and method in a system for displaying mission critical information on an uncertified display
EP4001847B1 (en) Mounting device adapter and method in a system for displaying mission critical information on an uncertified display
US11526390B2 (en) System and method for mission critical screen validation on commercial displays
US11407523B2 (en) System and method for building a link between an aircraft alert message and an electronic checklist on an off board device
CN112135087A (en) Screen information monitoring method and device, network camera and storage medium
JP2003026079A (en) Sonar buoy setting information confirming method

Legal Events

Date Code Title Description
AS Assignment

Owner name: HONEYWELL INTERNATIONAL INC., NEW JERSEY

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BERCKEFELDT, RICHARD;TRUE, WILLARD R.;SARMA, KALLURI R.;SIGNING DATES FROM 20180306 TO 20180307;REEL/FRAME:045145/0124

FEPP Fee payment procedure

Free format text: ENTITY STATUS SET TO UNDISCOUNTED (ORIGINAL EVENT CODE: BIG.); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

STCF Information on status: patent grant

Free format text: PATENTED CASE

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 4