Abstract: A system and method for integrity monitoring generates primary control output via a primary module. The primary control output is configured to be used to control an autonomous vehicle (AV). The system and method receive situational data comprising AV data and environmental data. The system and method generate, using a monitor module configured to monitor the AV, a set of fallback actions based on at least the situational data. The system and method generate, using the monitor module, a fallback status based on at least the set of fallback actions, where the fallback status is configured to correspond to a determination of whether to override the primary control output.

Abstract: A hierarchical modular arbitration architecture for a mobile platform guidance system is disclosed. In embodiments, the architecture comprises a hierarchy of arbitration layers, each arbitration layer narrower in scope than the layer above (e.g., mission objective arbitrators, route arbitrators, path arbitrators). Each arbitration layer includes one or more objective-based arbitrators in communication with one or more applications or modes. Each arbitrator receives control input (e.g., from the pilot, from aircraft sensors) and control signals from the level above, selecting a mode to make active based on decision agents within the arbitrator layer which control mode priorities and sequencing (e.g., some flight objectives may involve multiple arbitrators and their subject applications coordinating in sequence).

Abstract: A system and method for integrity monitoring acquire one or more boundaries, each boundary of the one or more boundaries based on at least one fallback action of one or more fallback actions. The system and method receive situational data comprising at least one of environmental data or autonomous vehicle data. The system and method generate, using a monitor module configured to monitor an autonomous vehicle, one or more boundary violation determinations. The system and method generate a fallback status based on at least the one or more boundary violation determinations. The fallback status being configured to correspond to a determination of whether to override a primary control output.

Abstract: A system for automated formation flight is disclosed. The system may include a formation commander sub-system including a task-based interface configured to receive a sequence of one or more task-based commands along with one or more sets of task-based options for each of the one or more task-based commands from an operator using one or more task-based selectable buttons of the task-based interface. The system may further include a formation manger sub-system communicatively coupled to the formation commander sub-system. Each vehicle of one or more vehicles within one or more teams may be configured to employ the formation manager sub-system. The formation manager sub-system may be configured to receive the one or more task-based commands along with the one or more sets of task-based options for each vehicle to perform.

Abstract: A system and method for integrity monitoring generates primary control output via a primary module. The primary control output is configured to be used to control an autonomous vehicle (AV). The system and method receive situational data comprising AV data and environmental data. The system and method generate, using a monitor module configured to monitor the AV, a set of fallback actions based on at least the situational data. The system and method generate, using the monitor module, a fallback status based on at least the set of fallback actions, where the fallback status is configured to correspond to a determination of whether to override the primary control output.

Abstract: A mission system for autonomous vehicle (AV) team coordination and a method of using the same are disclosed. A controller included on an AV shares mission data between two or more AVs, and in response to communication denial, generates estimated navigation trajectories for teammate AVs. A simulation outputs estimated navigation states for the teammate AVs. The estimated navigation states are identical or substantially identical to navigation states otherwise generated by controllers included on the teammate AVs. The estimated navigation trajectories are generated based on the estimated navigation states.

Abstract: A system and method for multi-asset collaborative operations by a team of autonomous vehicles (AV) implements a multi-level hierarchical mission planning and autonomy stack aboard each member AV of the team. Mission-level and team-level layers of the stack, either independently or in collaboration with other members of the AV team. receive high-level mission goals, spawn mission objectives for the fulfillment of received goals, and assign the mission objectives to specific member AVs or sub-teams thereof. Asset-level action planning modules translate the assigned mission objectives into default trajectories including component action and payload sequences for execution by the AV. An asset-level guidance playbook executes the default trajectories via high-rate control commands directly to vehicle and payload control systems.

Abstract: A system and method for formation flying includes a primary asset accompanied by a plurality of secondary assets. The secondary assets fly around the primary asset in a predetermined formation to achieve a desired degree to range and scanning. The secondary assets are not mission critical such that if some or all are lost to attrition, the primary asset may continue the mission or abort with a high probability of survival. The primary asset may include a high value payload, either in terms of equipment expense or mission criticality. Furthermore, the secondary assets may autonomously reposition and reorient according to mission priorities or the loss of one or more of the secondary assets. The primary asset and secondary assets implement algorithms and software functions to allow the primary asset to navigate through airspace without being harmed by any known or yet to be known lethal threats.

Abstract: A system and method for automated vertical takeoff and landing (VTOL) aircraft emergency landing is disclosed. The system receives a plurality of inputs from onboard modules including aircraft state, vehicle health, acceptable landing zone (LZ), emergency landing path, and 3D world model to prepare an emergency landing procedure when necessary. If functional onboard an unmanned VTOL aircraft, the vehicle health module determines an emergency landing requirement, the system commands a damage tolerant autopilot to perform the emergency procedure and automatically control the VTOL aircraft. If functional onboard a manned VTOL aircraft, an operator or the vehicle health module initiates the emergency landing.

Abstract: A hierarchical high integrity system is disclosed. The system may include one or more operator input interfaces configured to receive one or more operator commands from an operator. The system may further include a hierarchy of a plurality of functional layers configured to perform one or more functions in response to the one or more operator commands. The hierarchy of the plurality of functional layers may include one or more upper functional layers and one or more lower functional layers. The one or more upper functional layers may configured to provide a greater level of automation than the one or more lower functional layers. Each functional layer may include a plurality of applications; an arbitrator configured to dynamically select the appropriate input source; an application selector configured to dynamically select an application; and a default safe fallback module configured to selectively provide a substantially safe operation for each functional layer.

Abstract: A system for automated formation flight is disclosed. The system may include a formation commander sub-system including a task-based interface configured to receive a sequence of one or more task-based commands along with one or more sets of task-based options for each of the one or more task-based commands from an operator using one or more task-based selectable buttons of the task-based interface. The system may further include a formation manger sub-system communicatively coupled to the formation commander sub-system. Each vehicle of one or more vehicles within one or more teams may be configured to employ the formation manager sub-system. The formation manager sub-system may be configured to receive the one or more task-based commands along with the one or more sets of task-based options for each vehicle to perform.

Abstract: A system and method for automated vertical takeoff and landing (VTOL) aircraft emergency landing is disclosed. The system receives a plurality of inputs from onboard modules including aircraft state, vehicle health, acceptable landing zone (LZ), emergency landing path, and 3D world model to prepare an emergency landing procedure when necessary. If functional onboard an unmanned VTOL aircraft, the vehicle health module determines an emergency landing requirement, the system commands a damage tolerant autopilot to perform the emergency procedure and automatically control the VTOL aircraft. If functional onboard a manned VTOL aircraft, an operator or the vehicle health module initiates the emergency landing.

Abstract: An avionics computing device of an aircraft including a rotor may include a non-transitory computer-readable medium and a processor communicatively coupled to the non-transitory computer-readable medium. Upon an occurrence of a condition indicative of a requirement to perform an autorotation maneuver, the processor may be configured to generate autorotation guidance commands based on a generated feasible three-dimensional autorotation trajectory. The generated feasible three-dimensional autorotation trajectory may be for the autorotation maneuver of an aircraft including a rotor. The generated autorotation guidance commands may be configured to guide a pilot of the aircraft to perform the autorotation maneuver of the aircraft along the generated feasible three-dimensional autorotation trajectory. The processor may further be configured to output data associated with the generated autorotation guidance commands to an input/output device for presentation to the pilot.