Abstract: A command generating and monitoring system includes a command processor configured to determine a command data set from a command input. A monitoring processor is coupled to the command processor and is configured to generate an authentication key by comparing the command data set received from the command processor to a comparison command data set generated by the monitoring processor. A data bus is coupled to the command processor and the monitoring processor. The data bus is configured to receive the command data set and the authentication key for retrieval by a consuming device.

Abstract: Methods and systems are provided for redundancy management of a fly-by-wire avionics system. A control module for producing a control signal is provided comprising a common processing partition for receiving a flight input signal and at least one first mode input signal, a first processing partition coupled to the common processing partition and configured to receive the first mode input signals and flight input signal from the common processing partition, and a second processing partition coupled to the common processing partition. The first processing partition produces a first mode output signal in response to one of the first mode input signals and flight input signal. The second processing partition generates a second mode signal in response to the flight input signal when the first processing partition fails. The common processing partition produces the control signal in response to one of the first mode output signal and second mode signal.

Abstract: A fly-by-wire (FBW) system (104) is coupled to cockpit controls (102) of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) (108) is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector (110) is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out (306) a transfer of partial control of the aircraft from the cockpit controls to the FBW system and the AFCS, in response to a predetermined event.

Abstract: A fly-by-wire (FBW) system (104) is coupled to cockpit controls (102) of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) (108) is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector (110) is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out (306) a transfer of control of the FBW system from the cockpit controls to the AFCS, in response to a predetermined event.

Abstract: A command generating and monitoring system includes a command processor configured to determine a command data set from a command input. A monitoring processor is coupled to the command processor and is configured to generate an authentication key by comparing the command data set received from the command processor to a comparison command data set generated by the monitoring processor. A data bus is coupled to the command processor and the monitoring processor. The data bus is configured to receive the command data set and the authentication key for retrieval by a consuming device.

Abstract: A fly-by-wire (FBW) system (104) is coupled to cockpit controls (102) of an aircraft for controlling the aircraft, and an automatic flight control system (AFCS) (108) is coupled to the FBW system for maintaining the aircraft in stable flight. An unauthorized-flight detector (110) is coupled to the FBW system and coupled to the AFCS, and is arranged to carry out (306) a transfer of control of the FBW system from the cockpit controls to the AFCS, in response to a predetermined event.

Abstract: The present invention provides apparatus, systems and methods for fail passive servo controllers. In accordance with an exemplary embodiment of the present invention, servo controller is used with an ALS to control an aircraft during landing procedures. In accordance with one aspect of this exemplary embodiment, upon a failure (e.g., of one of the components of ALS) servo controller fails passively rather than actively. In an exemplary embodiment, the fail passive nature of the servo unit is accomplished by providing at least two independent signal and drive current paths for controlling the servo motor. As such, the servo motor will not generate torque unless the two independent signal lanes agree. For example, when a component such as processor, difference amplifier, or PWM fails or otherwise ceases to function properly, servo motor will not runaway, but rather will fail with only minor transient movement, or alternatively, servo unit will lock at its current position.

Abstract: The present invention provides apparatus, systems and methods for fail passive servo controllers. In accordance with an exemplary embodiment of the present invention, servo controller is used with an ALS to control an aircraft during landing procedures. In accordance with one aspect of this exemplary embodiment, upon a failure (e.g., of one of the components of ALS) servo controller fails passively rather than actively. In an exemplary embodiment, the fail passive nature of the servo unit is accomplished by providing at least two independent signal and drive current paths for controlling the servo motor. As such, the servo motor will not generate torque unless the two independent signal lanes agree. For example, when a component such as processor, difference amplifier, or PWM fails or otherwise ceases to function properly, servo motor will not runaway, but rather will fail with only minor transient movement, or alternatively, servo unit will lock at its current position.

Abstract: A method provides an error detection of periodic aircraft data transmitted between a sending unit and a receiving unit. A keyword is sent as the last word of the data being transmitted. The receiving unit receives the data and performs an error detection on data with keywords thus sued for synchronization.