Abstract: A simplex Flight Control Computer (FCC), usable in conjunction with a neighboring FCC, includes an input providing module for receiving sensor, system and neighboring FCC data; a processing unit for executing a command partition and a monitor partition, the processing unit receives the sensor, system data and neighboring FCC data; the monitor partition monitors the neighboring FCC data and provides a monitoring indicative signal to the neighboring FCC, and the command partition generates command signals; a hardware monitoring module provides a validity signal indicating FCC health; an output cutoff module receiving the FCC validity signal and enable signals generated by each monitor partition; the output cutoff module providing an enable signal based on a predetermined enabling strategy; and an enable switch connected with the output cutoff module and the processing unit and providing a received signal from the command partition according to the enable signal.

Abstract: A programmable electronic computer embedded in an avionics environment on board an aircraft for implementing at least one critical function and associated electronic device, method and computer program are disclosed. In one aspect, the electronic computer includes at least one control module configured to implement a respective critical function and configured to deliver at least one output data item associated with the critical function, and at least one monitoring module of a control module of another electronic computer. Each monitoring module configured to implement the same respective critical function as the one implemented by the monitored control module.

Abstract: A backup actuation control unit for controlling an actuator dedicated to a given surface. The backup actuation control unit comprises a processing unit operatively connected to one of a flight control computer and a backup flight control computer, to an actuator used for actuating a given surface and to at least one primary actuation control unit, each of the at least one primary actuation control unit for controlling a corresponding actuator used for actuating the given surface, wherein the processing unit receives a surface position command signal from one of the flight control computer and the backup flight control computer and an actuator position signal received from the actuator and provides a corresponding command signal to the actuator if an engagement signal is received from the flight control computer or the backup flight control computer and from the at least one primary actuation control unit.

Abstract: A backup actuation control unit for controlling an actuator dedicated to a given surface. The backup actuation control unit comprises a processing unit operatively connected to one of a flight control computer and a backup flight control computer, to an actuator used for actuating a given surface and to at least one primary actuation control unit, each of the at least one primary actuation control unit for controlling a corresponding actuator used for actuating the given surface, wherein the processing unit receives a surface position command signal from one of the flight control computer and the backup flight control computer and an actuator position signal received from the actuator and provides a corresponding command signal to the actuator if an engagement signal is received from the flight control computer or the backup flight control computer and from the at least one primary actuation control unit.

Abstract: A programmable electronic computer embedded in an avionics environment on board an aircraft for implementing at least one critical function and associated electronic device, method and computer program are disclosed. In one aspect, the electronic computer includes at least one control module configured to implement a respective critical function and configured to deliver at least one output data item associated with the critical function, and at least one monitoring module of a control module of another electronic computer. Each monitoring module configured to implement the same respective critical function as the one implemented by the monitored control module.

Abstract: An aircraft air data probe contamination monitor includes at least two air data sensor probes, a first probe located on one side of the aircraft, a second probe located on an opposite side of the aircraft, each probe being operable to generate a parameter value from an airflow passing the in-flight aircraft. The monitor also includes a processor operable to compare the generated parameter value from the first probe to the generated parameter value from the second probe to determine if one of the first probe and the second probe is contaminated.

Abstract: A system and a method are disclosed for managing a plurality of critical functions in an aircraft, the system comprising at least one data providing unit for providing digital signals, wherein at least one digital signal is associated with a given critical function of the plurality of critical functions; at least one transmission path coupled to the at least one providing unit; a memory unit for storing an operating system and a plurality of critical applications managing the plurality of critical functions; and a processing unit operatively coupled to the memory unit and configured to receive the digital signals along the at least one transmission path, the processing unit for executing the operating system and the plurality of critical applications, wherein the execution of the plurality of critical applications is managed by the operating system to accommodate fast loops and to ensure independence of the plurality of critical applications.

Abstract: An aircraft air data probe contamination monitor includes at least two air data sensor probes, a first probe located on one side of the aircraft, a second probe located on an opposite side of the aircraft, each probe being operable to generate a parameter value from an airflow passing the in-flight aircraft. The monitor also includes a processor operable to compare the generated parameter value from the first probe to the generated parameter value from the second probe to determine if one of the first probe and the second probe is contaminated.