Onboard aircraft landing system, based on a GNSS system, with redundant and dissimilar architecture for high integrity level

摘要

Device for receiving radio-navigation signals, for aiding the piloting of an aircraft, comprising a first master GNSS module and a second slave GNSS module which are dissimilar, the first master GNSS module comprising a first means for processing radio-navigation signals and a first means for computing guidance data (Xg), the second slave GNSS module comprising a second means for processing radio-navigation signals and a second means for computing guidance data (Xg) on the basis of the measurements provided by the said second means for processing signals, each GNSS module furthermore comprising a comparison means for comparing between the outputs Xg1,Xg2 of the said first and second means for computing guidance data, suitable for executing the following integrity test:
|Xg1−Xg2|>Kg·√{square root over (Variance(Xg1−Xg2))}
and for inferring an integrity defect if the said integrity test is satisfied.

主权项

1. Device for receiving radio-navigation signals, for aiding the piloting of an aircraft, comprising a first master GNSS module and a second slave GNSS module which are dissimilar, the first master GNSS module comprising a first computer logic, including a processor, for processing radio-navigation signals and a second computer logic, including a processor, for computing guidance data (Xg) on the basis of the measurements provided by the said first computer logic—for processing the signals, the second slave GNSS module comprising a third computer logic, including a processor, for processing radio-navigation signals and a fourth computer logic, including a processor, for computing guidance data (Xg) on the basis of the measurements provided by the said third computer logic for processing signals, each GNSS module furthermore comprising a comparator for comparing between outputs Xg1,Xg2 of the said second computer logic and fourth computer logic for computing guidance data, configured for executing the following integrity test:
|Xg1−Xg2|>Kg·√{square root over (Variance(Xg1−Xg2))} and for inferring an integrity defect if the said integrity test is satisfied, Kg being a detection threshold predetermined so as to obtain a given probability Pnd of detecting an error impacting one or the other, or both measurements Xg1,Xg2 simultaneously and a given false alarm probability Pfa.