Honeywell International Inc.

Honeywell G.m.b.h.

Arthur D Beutler

Larry James Yount

Dean R Wilkens

Joseph W Jackson

Karen Brack

Eric Christianson

Dean Wilkens

Larry E Gronhovd

Kevin L Kriebs

Kenneth O'Rourke

Kevin L Krebs

A command generating and monitoring system includes a command processor configured to determine a command data set from a command input. A monitoring processor is coupled to the command processor and is configured to generate an authentication key by comparing the command data set received from the command processor to a comparison command data set generated by the monitoring processor. A data bus is coupled to the command processor and the monitoring processor. The data bus is configured to receive the command data set and the authentication key for retrieval by a consuming device.

Monitor processor authentication key for critical data

Methods and systems are provided for redundancy management of a fly-by-wire avionics system. A control module for producing a control signal is provided comprising a common processing partition for receiving a flight input signal and at least one first mode input signal, a first processing partition coupled to the common processing partition and configured to receive the first mode input signals and flight input signal from the common processing partition, and a second processing partition coupled to the common processing partition. The first processing partition produces a first mode output signal in response to one of the first mode input signals and flight input signal. The second processing partition generates a second mode signal in response to the flight input signal when the first processing partition fails. The common processing partition produces the control signal in response to one of the first mode output signal and second mode signal.

System and method of redundancy management for fault effect mitigation

A fly-by-wire (FBW) system () is coupled to cockpit controls () of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) () is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector () is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out () a transfer of control of the FBW system from the cockpit controls to the AFCS, in response to a predetermined event.

Method and apparatus for preventing an unauthorized flight of an aircraft

The present invention provides apparatus, systems and methods for fail passive servo controllers. In accordance with an exemplary embodiment of the present invention, servo controller is used with an ALS to control an aircraft during landing procedures. In accordance with one aspect of this exemplary embodiment, upon a failure (e.g., of one of the components of ALS) servo controller fails passively rather than actively. In an exemplary embodiment, the fail passive nature of the servo unit is accomplished by providing at least two independent signal and drive current paths for controlling the servo motor. As such, the servo motor will not generate torque unless the two independent signal lanes agree. For example, when a component such as processor, difference amplifier, or PWM fails or otherwise ceases to function properly, servo motor will not runaway, but rather will fail with only minor transient movement, or alternatively, servo unit will lock at its current position. In this manner, servo motor will not generate a deviation from flight path or other significant control inputs until system monitors detect the fault and return control to the pilot.

Fail passive servo controller

A method provides an error detection of periodic aircraft data transmitted between a sending unit and a receiving unit. A keyword is sent as the last word of the data being transmitted. The receiving unit receives the data and performs an error detection on data with keywords thus sued for synchronization.

Growing community of inventors

Phoenix, AZ, United States of America

Arthur D Beutler