Control system for an aircraft

An aircraft comprising a control system for at least one controlled device of the aircraft, the control system being embedded onboard the aircraft and comprising:

• at least two distinct communication networks;
• and
• at least one control unit associated with this at least one controlled device, this control unit being connected to at least one of the said communication networks,
• the control system being configured to determine and provide control commands to the controlled device, the determination of the control commands corresponding to a first function of the aircraft having a DAL-A quality assurance level requirement,
• the control system further comprising:
• a set of at least three physical units each comprising an electrical power supply and a network interface device connected to at least one of the communication networks of the aircraft, in which:
• the electrical power supplies of the various physical units being of at least three different types;
• the network interface devices of the various physical units being of at least three different types;
• each of the physical units comprising at least two computers each comprising an operating system;
• the various computers of the various units being of at least two different types;
• the operating systems of the various computers being of at least two different types;
• at least six of the computers being configured to independently determine control commands for the said controlled device, these control commands corresponding to the said first function;
• the various computers each having at least one of a DAL-C, DAL-D or DAL-E hardware and software quality assurance level;
• and
• a selection logic unit whose hardware and software quality assurance level is DAL-A, the selection logic unit being connected to the at least two communication networks and being configured to select valid control commands from among the control commands determined by the computers,
• the control unit associated with the said controlled device being configured to control the controlled device as a function of the valid control commands selected by the selection logic unit.