Method and device for encapsulating applications in a computer system for an aircraft

摘要

The object of the invention is in particular a device for execution of applications (510) in an aircraft information-processing system (500), permitting the simultaneous execution of at least two distinct applications, the said information-processing system comprising shared calculation and storage resources. The device comprises software segregation means capable of creating at least two distinct information-processing environments (505), a partition of the said calculation and storage resources being allocated to each of the said at least two environments in such a way that the execution of one of the said at least two applications in one of the said at least two environments does not have any effect on the execution of the other of the said at least two applications executed in the other of the said at least two environments. Another object of the invention is a method for employing such a device.

主权项

1. An information-processing system for execution of applications in an aircraft system that includes at least an avionics domain, which includes a closed network and includes functions related to piloting of the aircraft, and a services domain which includes a private network and includes applications installed by an airline company which do not interfere directly with the piloting of the aircraft, the information-processing system being part of the services domain and permitting execution of at least two distinct applications, the information-processing system comprising:
shared calculation and storage resources; a software segregation unit that creates at least two distinct information-processing environments each having its own operating system and at least one of the two information-processing environments having a plurality of applications, a partition of the said calculation and storage resources being allocated to each of the at least two environments in such a way that the execution of one of the at least two applications in one of the at least two information-processing environments is independent of the execution of the other of the at least two applications executed in the other of the at least two environments; a fault detecting unit that detects a fault of at least one of the at least two information-processing environments and of at least one of the at least two applications; an exchanging unit that exchanges data with a second information-processing system, which is also in the services domain and is distinct from the information-processing system in order to employ at least one information-processing environment of the second information-processing system and to execute at least one application of the second information-processing system; and a managing unit configured to manage a priority of applications when a fault is detected in the second information-processing system, in such a way that the applications, in the services domain, having the highest priority levels of the information-processing system and the second information-processing system are executed in the information-processing system based on the type of fault and a phase of flight of the aircraft such that when a high-priority application exists on the second information-processing system and a low-priority application exists on the information processing environment, management of information processing environments is performed in which an information processing environment on the information-processing system which has the low-priority application is stopped and is replaced by an information-processing environment that permits the high-priority application of the second information-processing system to be executed, wherein the management of the information processing environments is transparent to any executed applications.