Dassault Aviation

Jérôme Cappelle

Serge Bruillot

Patrick Dignimont

François Pineau

William Faysse

A secure transfer system for digital aircraft data includes a data producer system configured to generate a data capsule at each data production and a data consumer system. The consumer system is configured to retrieve each capsule to extract an identifier, a refresh indicator, a functional data packet, and an integrity control result. It is configured to check the integrity of the data in the capsule by establishing a new integrity check result from the identifier, the refresh indicator, and the functional data packet retrieved from the capsule and comparing the new integrity check result to the integrity check result of the capsule. The data capsule is in an integrity state when the new integrity check result matches the integrity check result retrieved from the capsule.

Secure transfer system for digital aircraft data, data producer system, data consumer system, and related transfer method

A system for piloting an aircraft includes a throttle, a flight parameter sensor system, and an engine calculator controlling thrust parameters of an engine of the aircraft. The piloting system includes a flight control unit connected to the engine calculator, the sensors and the throttle. The flight control unit generates a thrust control vector from a flight control law and sends a digital signal including the generated thrust control vector to the engine calculator. The engine calculator controlling said thrust parameters of the engine depending on the generated thrust control vector received.

System for piloting an aircraft, associated aircraft and method

A system for secure transfer of digital aircraft data comprising redundant data producer systems includes a first data producer, capable of producing first data, at successive moments, and a second data producer, redundant to the first system. The second data producer is capable of producing an integrity check result relating at least to second data which it produces in a manner redundant to the first data, the integrity check result being transmitted to a data consumer. The data consumer is capable of retrieving the first data and the integrity check result produced by the second system, to produce a new integrity check result from the first data and compare the new integrity check result with the integrity check result produced by the second system.

Growing community of inventors

SAINT CLOUD, France

Jérôme Cappelle