Abstract: A dual redundant computer safety relay box system includes first and second fail-safe computing systems (FSCs) individually mounted to first and second printed circuit boards. Each FSC includes two computing modules (CPUs) designated as a first CPU and a second CPU. The first and second FSC's are both connected to a safety relay box. The printed circuit boards are isolable from each other permitting maintenance on one of the printed circuit boards while operation of the FSC of the other printed circuit board is maintained. In each FSC a health signal generated from the first and second printed circuit boards of the first and second CPUs defines a multi-level dynamic pulse signal. Presence of the dynamic pulse signal produces an output identified as each of a first and a second healthy indication signal from each of the CPUs of one of the first or second FSCs.

Abstract: A system includes a first application that writes a first plurality of tasks to a first memory buffer; a second memory buffer that receives a copy of the first plurality of tasks; a second application that writes a second plurality of tasks to a third memory buffer; and a fourth memory buffer that receives a copy of the second plurality of tasks. The system further includes a first comparison module that generates a first voting signal based on a first comparison between a first task and a second task. The system further includes a second comparison module that generates a second voting signal based on a second comparison between the first task and the second task. The system further includes a first central processing unit (CPU) that selectively determines whether to de-assert a module health signal based on the first voting signal and the second voting signal.

Abstract: A system includes a safety relevant component that generates a data packet in response to receiving a request to perform a task and that communicates the data packet. The system further includes a first fail-safe chassis (FSC) that continuously generates a first chassis health signal, that determines whether the data packet is valid, and that selectively determines whether to de-assert the first chassis health signal based on the determination. The system also includes a second FSC that continuously generates a second chassis health signal, that determines whether a copy of the data packet is valid, and that selectively determines whether to de-assert the second chassis health signal based on the determination. The system further includes a safety relay box module that determines whether to instruct the first FSC to operate in a predetermined mode based on the first chassis health signal and the second chassis health signal.

Abstract: A data processing system for automating the process of managing flight data and generating reports based on that data. The system accesses flight data transmitted on an airborne databus, where the data represents sensor readings indicative of various flight parameters. The accessed flight data is sampled, filtered, decoded, encrypted, and subjected to an adaptive compression process prior to being stored on a portable, self-protected secure memory device. After the flight ends, the portable, self-protected secure memory device is transferred to ground personnel. The data stored on the memory device is then accessed by authorized personnel, decompressed and decrypted. The flight data is analyzed and used to evaluate pilot performance and monitor the operation of the aircraft through the generation of flight reports. Various data analysis techniques, including artificial intelligence based algorithms and expert systems may be used to examine the flight data and determine its significance.