Flight management system for an aircraft and method of securing open world data using such a system

A method of securing open world data using an aircraft flight management system, the aircraft flight management system comprising:

• at least two flight management computers, of which a first computer termed active at a current time forms part of an active guidance subsystem configured to supply data for guiding an aircraft at the current time, and a second computer is termed inactive at the current time;
• a validation subsystem comprising the second, inactive flight management computer and a validation unit connected to the first and second flight management computers;
• the validation unit comprising a display unit and at least one display screen, wherein the validation unit is configured to display at least a computed value of a parameter on the at least one display screen;
• the display unit comprising a validation device enabling an operator to declare valid open world data used to compute the displayed value of the parameter;
• and
• wherein the validation subsystem is independent of the active guidance subsystem and configured to allow a validation of open world data and to transmit at least to the first, active flight management computer data that is validated during the validation;
• the method comprising a sequence of validation steps executed after reception by the flight management system of open world data to be validated by an operator and comprising:
• a desynchronization step comprising using a validation unit to desynchronize the two flight management computers;
• a data processing step comprising loading the data to be validated into a flight plan termed secondary of the inactive flight management computer and the inactive flight management computer calculating the value of at least one corresponding parameter using the data;
• a display step executed by a display unit and comprising displaying results of the computation on at least one display screen of the display unit for validation;
• a validation step executed by an operator acting on the validation device and comprising validating the data or not validating the data by the operator;
• a subsequent step comprising, in case of validation of the data, transferring the validated data to the active flight management computer, deleting the secondary flight plan from the inactive flight management computer after transferring the data and resynchronizing the first and second flight management computers so that the inactive flight management computer is initialized to at least one flight plan of the active flight management computer.

An aircraft comprising an aircraft flight management system, the aircraft flight management system comprising:

• at least two flight management computers, of which a first computer termed active at a current time forms part of an active guidance subsystem configured to supply data for guiding the aircraft at the current time, and a second computer is termed inactive at the current time;
• a validation subsystem comprising the second, inactive flight management computer and a validation unit connected to the first and second flight management computers;
• the validation unit comprising a display unit and at least one display screen, wherein the validation unit is configured to display at least a computed value of a parameter on at least one display screen;
• the display unit comprising a validation device enabling an operator to declare valid open world data used to compute the displayed value of the parameter;
• and
• wherein the validation subsystem is independent of the active guidance subsystem and configured to allow a validation of open world data and to transmit at least to the first, active flight management computer data that is validated during the validation.

An aircraft flight management system comprising:

• at least two flight management computers, of which a first computer termed active at a current time forms part of an active guidance subsystem configured to supply data for guiding an aircraft at the current time, and a second computer is termed inactive at the current time;
• and
• a validation subsystem comprising the second, inactive flight management computer and a validation unit connected to the first and second flight management computers;
• the validation unit comprising:
• at least one display screen, wherein the validation unit is configured to display at least a computed value of a parameter on the at least one display screen;
• and
• a validation device enabling an operator to declare valid open world data used to compute the displayed value of the parameter;
• wherein the validation subsystem is configured to allow validation of open world data and to transmit at least to the first, active flight management computer data that is validated during the validation.

A method of securing open world data using an aircraft flight management system, the aircraft flight management system comprising:

• at least two flight management computers, of which a first computer termed active at a current time forms part of an active guidance subsystem configured to supply data for guiding an aircraft at the current time, and a second computer is termed inactive at the current time;
• and
• a validation subsystem comprising the second, inactive flight management computer and a validation unit connected to the first and second flight management computers;
• the validation unit comprising:
• at least one display screen, wherein the validation unit is configured to display at least a computed value of a parameter on the at least one display screen;
• and
• a validation device enabling an operator to declare valid open world data used to compute the displayed value of the parameter;
• wherein the validation subsystem is configured to allow a validation of open world data and to transmit at least to the first, active flight management computer data that is validated during the validation;
• the method comprising, after reception by the flight management system of open world data:
• executing a desynchronization step comprising using the validation unit to desynchronize the two flight management computers;
• executing a data processing step comprising loading the data to be validated into a flight plan termed secondary of the inactive flight management computer and the inactive flight management computer calculating the value of at least one corresponding parameter using the data;
• executing a display step, by the validation unit, comprising displaying results of the computation on at least one display screen of the validation unit for validation;
• executing a validation step, on the validation device, comprising validating the data or not validating the data by the validation device;
• and
• executing a subsequent step comprising, in case of validation of the data, transferring the validated data to the active flight management computer, deleting the secondary flight plan from the inactive flight management computer after transferring the data and resynchronizing the first and second flight management computers so that the inactive flight management computer is initialized to at least one flight plan of the active flight management computer.