Abstract: A projected recovery trajectory for an aircraft autopilot system is precomputed by providing a stored set of predefined recovery mode segments, including: a mode 1 segment that models the aircraft coasting; a mode 2 segment that models the aircraft executing a nose high recovery; a mode 3 segment that models the aircraft executing a nose low recovery; a mode 4 segment that models the aircraft executing a throttle only recovery; and a mode 5 segment that models the aircraft executing a terrain avoidance recovery. A processor generates at least one projected recovery trajectory based on a current state of the aircraft, where the processor selectively concatenates selected ones of the predefined recovery mode segments into a sequence and uses that sequence to generate the projected trajectory.

Abstract: A projected recovery trajectory for an aircraft autopilot system is precomputed by providing a stored set of predefined recovery mode segments, including: a mode 1 segment that models the aircraft coasting; a mode 2 segment that models the aircraft executing a nose high recovery; a mode 3 segment that models the aircraft executing a nose low recovery; a mode 4 segment that models the aircraft executing a throttle only recovery; and a mode 5 segment that models the aircraft executing a terrain avoidance recovery. A processor generates at least one projected recovery trajectory based on a current state of the aircraft, where the processor selectively concatenates selected ones of the predefined recovery mode segments into a sequence and uses that sequence to generate the projected trajectory.

Abstract: The aircraft threat envelope protection system employs a threat envelope data structure in a computer-readable medium that stores at least one trigger condition for each of a plurality of different types of threats associated with the aircraft, and modeled using a common schema. A processor computes plural different projected trajectories representing different possible aircraft paths through spacetime. The processor associates at least some of the plurality of the threats to specific trigger points in spacetime along each of the projected trajectories. The processor will deprecate ones of the projected trajectories when they are deemed not viable to recover from a threat. The processor initiates an aircraft protective response when all projected trajectories but one have been deprecated and the aircraft is within a predetermined proximity to the closest trigger point in spacetime along the non-deprecated trajectory.

Abstract: The aircraft threat envelope protection system employs a threat envelope data structure in a computer-readable medium that stores at least one trigger condition for each of a plurality of different types of threats associated with the aircraft, and modeled using a common schema. A processor computes plural different projected trajectories representing different possible aircraft paths through spacetime. The processor associates at least some of the plurality of the threats to specific trigger points in spacetime along each of the projected trajectories. The processor will deprecate ones of the projected trajectories when they are deemed not viable to recover from a threat. The processor initiates an aircraft protective response when all projected trajectories but one have been deprecated and the aircraft is within a predetermined proximity to the closest trigger point in spacetime along the non-deprecated trajectory.

Abstract: The aircraft threat envelope protection system employs a threat envelope data structure in a computer-readable medium that stores at least one trigger condition for each of a plurality of different types of threats associated with the aircraft, and modeled using a common schema. A processor computes plural different projected trajectories representing different possible aircraft paths through spacetime. The processor associates at least some of the plurality of the threats to specific trigger points in spacetime along each of the projected trajectories. The processor will deprecate ones of the projected trajectories when they are deemed not viable to recover from a threat. The processor initiates an aircraft protective response when all projected trajectories but one have been deprecated and the aircraft is within a predetermined proximity to the closest trigger point in spacetime along the non-deprecated trajectory.

Abstract: The processor supplies flight commands to the flight control system by selectively blending pilot input with control signals from the autopilot. The processor generates a projected recovery trajectory through successive iterations, each beginning at the current aircraft location and using a recovery constraint selectable by the processor to influences a degree of flight aggressiveness. A detection system that identifies and invokes a state of threat existence if a threat exists along the projected recovery trajectory. The processor during threat existence in a first iteration commands an initial soft recovery, with permitted blended pilot input. If the threat exists on subsequent iteration, the processor commands a more aggressive recovery while attenuating blended pilot input.

Abstract: An avionics system for an aircraft includes a threat data structure and a processor. The threat data structure stores an alert threshold and a margin threshold. The processor is programmed to: predict an aircraft state at a plurality of positions along a potential future trajectory; calculate a margin value at each of the plurality of positions as a difference between the predicted future condition and the threat value at each respective one of the plurality of positions; calculate a margin rate of change at each of the plurality of positions based on a change in the margin value along the potential future trajectory; estimate a time to go value based on a minimum calculated margin value and a maximum calculated margin rate of change among the plurality of positions; and command an indicator to alert the pilot in response to the time to go value reaching the alert threshold.

Abstract: The processor supplies flight commands to the flight control system by selectively blending pilot input with control signals from the autopilot. The processor generates a projected recovery trajectory through successive iterations, each beginning at the current aircraft location and using a recovery constraint selectable by the processor to influences a degree of flight aggressiveness. A detection system that identifies and invokes a state of threat existence if a threat exists along the projected recovery trajectory. The processor during threat existence in a first iteration commands an initial soft recovery, with permitted blended pilot input. If the threat exists on subsequent iteration, the processor commands a more aggressive recovery while attenuating blended pilot input.

Abstract: A projected recovery trajectory for an aircraft autopilot system is precomputed by providing a stored set of predefined recovery mode segments, including: a mode 1 segment that models the aircraft coasting; a mode 2 segment that models the aircraft executing a nose high recovery; a mode 3 segment that models the aircraft executing a nose low recovery; a mode 4 segment that models the aircraft executing a throttle only recovery; and a mode 5 segment that models the aircraft executing a terrain avoidance recovery. A processor generates at least one projected recovery trajectory based on a current state of the aircraft, where the processor selectively concatenates selected ones of the predefined recovery mode segments into a sequence and uses that sequence to generate the projected trajectory.

Abstract: The aircraft threat envelope protection system employs a threat envelope data structure in a computer-readable medium that stores at least one trigger condition for each of a plurality of different types of threats associated with the aircraft, and modeled using a common schema. A processor computes plural different projected trajectories representing different possible aircraft paths through spacetime. The processor associates at least some of the plurality of the threats to specific trigger points in spacetime along each of the projected trajectories. The processor will deprecate ones of the projected trajectories when they are deemed not viable to recover from a threat. The processor initiates an aircraft protective response when all projected trajectories but one have been deprecated and the aircraft is within a predetermined proximity to the closest trigger point in spacetime along the non-deprecated trajectory.

Abstract: The processor supplies flight commands to the flight control system by selectively blending pilot input with control signals from the autopilot. The processor generates a projected recovery trajectory through successive iterations, each beginning at the current aircraft location and using a recovery constraint selectable by the processor to influences a degree of flight aggressiveness. A detection system that identifies and invokes a state of threat existence if a threat exists along the projected recovery trajectory. The processor during threat existence in a first iteration commands an initial soft recovery, with permitted blended pilot input. If the threat exists on subsequent iteration, the processor commands a more aggressive recovery while attenuating blended pilot input.

Abstract: An avionics system for an aircraft includes a threat data structure and a processor. The threat data structure stores an alert threshold and a margin threshold. The processor is programmed to: predict an aircraft state at a plurality of positions along a potential future trajectory; calculate a margin value at each of the plurality of positions as a difference between the predicted future condition and the threat value at each respective one of the plurality of positions; calculate a margin rate of change at each of the plurality of positions based on a change in the margin value along the potential future trajectory; estimate a time to go value based on a minimum calculated margin value and a maximum calculated margin rate of change among the plurality of positions; and command an indicator to alert the pilot in response to the time to go value reaching the alert threshold.