• 专利附录
  • 专利说明
  • 权利要求
  • 类似技术
  • 同族专利
  • 引用文献
  • 法律状态
  • 优先权
    • 专利摘要:
    System (1) comprising: - a drone (B) comprising an onboard entity (B1); and a command entity (A) of the drone situated at a distance from the drone (B). The control entity (A) allows an operator to select data (10) to be sent to the onboard entity (B1), the onboard entity (B1) being adapted to execute actions according to the data (10) received. The onboard entity (B1) is arranged to generate a message (20) from the data (10) produced by the control entity (A) and received by the onboard entity (B1) and transmit it to the entity control (A). The control entity (A), via warning means (D), generates an information signal (S) representative of said message (20). Via validation means (E), the operator can control the transmission of an intention message (21) allowing or not the execution of said actions by the drone.
    公开号:FR3052289A1
    申请号:FR1655044
    申请日:2016-06-02
    公开日:2017-12-08
    发明作者:Sebastien Dubrulle
    申请人:Safran Electronics and Defense SAS；
    IPC主号:
    专利说明:

    The invention relates to the field of systems comprising a drone and a control entity of this drone, as well as the field of communication methods between such a drone and this control entity of the drone.
    BACKGROUND OF THE INVENTION
    It is known a system comprising a drone comprising an entity on board said drone, a control entity of the drone located at a distance from the drone. The control entity is connected to a human / machine interface and adapted to allow an operator to select data to be sent from the control entity to the onboard entity. The embedded entity is adapted to receive data sent by the control entity and to execute actions based on the data thus received by the onboard entity.
    It has been found that in some cases the drone can perform catastrophic actions for its safety as well as for the safety of its environment.
    In order to secure the system, elements / components of the system can be certified according to criticality standards. These certification operations are useful but expensive.
    OBJECT OF THE INVENTION
    An object of the present invention is to provide a communication system and method of the aforementioned type for addressing at least some of the aforementioned problems.
    SUMMARY OF THE INVENTION For this purpose, according to the invention, there is provided a system comprising a drone comprising an entity on board said drone, a control entity of the drone located at a distance from the drone, the control entity being connected a man / machine interface adapted to allow an operator to select data to be sent from the control entity to the onboard entity. The embedded entity is adapted to receive data sent by the control entity (this sent data is at least partly representative of the data selected by the operator) and to execute actions according to the data thus received by the entity board.
    The system according to the invention is essentially characterized in that: the embedded entity is arranged to generate a message from the data received by the onboard entity and transmit this message to the control entity; - The control entity is arranged to control the alert means the generation of an information signal representative of said message transmitted by the onboard entity and received by the control entity; the system further comprising validation means connected to the control entity, the control entity being further arranged for, depending on an action of the operator on said validation means intervened after the generation of said signal d information, transmit to the embedded entity a message of intent; the onboard entity being arranged to condition, according to said intention message, the execution of said actions.
    For the understanding of the invention, the term "connected" used in the present application implies a link allowing the transfer of data, signals, messages, so this connection is not necessarily mechanical via a transmission cable, but it can also to be wireless for example via a radio link.
    In the event of a failure of the man / machine interface, or in the event of a selection error by the operator, there is a risk that the selected data may be corrupted or erroneous, which may lead to the transmission of corrupted data. erroneous to the embedded entity. There would be a risk of malfunction of the drone if the onboard entity performed actions resulting from corrupted or erroneous data.
    Thanks to the invention, a message is generated by the embedded entity from the data it has received from the control entity. This message is then transmitted to the control entity which controls the generation of an information signal representative of the message, that is to say representative of the content of this message.
    According to this information signal, the operator is informed and can then act on validation means which are connected to the control entity.
    Based on this action of the operator on the validation means, the control entity generates and transmits an intention message which is transmitted to the onboard entity. This intention message is representative of the intention of the operator as to whether or not he wishes the actions corresponding to the information message to be executed. The embedded entity, upon receipt of this intention message, conditions the execution of the actions.
    The system according to the invention, in the same way as the method according to the invention can transmit instructions / data selected · by the operator to a drone while limiting the risk, that this drone does not perform inconsistent actions or erroneous since the user has the ability to validate these actions if he considers that the information signal he receives is consistent with the data he had previously selected.
    The reception of this intention message allows, as the case may be, to validate or cancel the instructions / data previously transmitted to the drone, which amounts to using the intention message to condition the execution of the corresponding actions.
    In the absence of reception of this intention message the embedded entity does not authorize the execution of the actions. The system is thus secure.
    Moreover, as will be explained below, this system according to the invention is advantageous in that it limits the cost of certification of the system. Indeed, thanks to the invention, the man / machine interface and the alerting means can be non-certified elements according to a criticality standard, which limits the cost of developing and manufacturing the system by reducing the number and the complexity of the elements of the system to be certified. For example, the warning means may comprise an audio headset and / or IP voice generation means and / or a visual display device allowing, for example, to display a text constituting the text-type information signal. According to the embodiment chosen, the warning means may or may not be certified.
    According to another aspect, the invention also relates to a method of communication between a control entity of a drone situated at a distance from the drone and an entity on board said drone, the control entity being connected to a man / machine interface. to allow an operator to select data to be sent from the control entity to the onboard entity, the entity on board the drone being adapted to receive data sent by the control entity (this data sent to the less partially representative of the data selected by the operator) and to perform actions based on the data thus received by the onboard entity.
    The method according to the invention is essentially characterized in that prior to the execution of said actions: the onboard entity transmits a message to the control entity, this message being generated from the data received by the onboard entity ; then - the control entity, controls the alerting means, the generation of an information signal for the attention of the operator, this information signal being representative of said message transmitted by the onboard entity and received by the command entity; then - according to an action of the operator on validation means connected to the control entity, the control entity transmits to the onboard entity an intention message; then - according to said intention message, the embedded entity conditions the execution of said actions functions of said data previously received by the embedded entity.
    The method according to the invention has the same advantages as those mentioned above with reference to the system according to the invention.
    In a particular embodiment of the communication method according to the invention, the human / machine interface comprises: selection means chosen from tactile selection means or voice-activated selection means; and - at least one display means for displaying the selected data using the man / machine interface; and the warning means comprise at least one loudspeaker for delivering said information signal to the attention of the operator, this information signal being a text or audio type signal.
    As will be detailed hereinafter, having a visual display means for displaying the selected data and on the other hand alerting means for delivering the text and / or audio information signal representative of data contained in the message received by the embedded entity allows the operator to compare the displayed data (that is to say the data he has selected) with the data of the information signal that he reads via the visual text display or heard via the loudspeaker (the text or audio type information signal is representative of the data received and interpreted at the level of the onboard entity).
    This facilitates the detection of possible data corruption between selection and interpretation by the onboard entity. It is also possible that the information signal is both text and audio type. The visual text display may be dedicated solely to the display of the information signal or, if necessary, to be integrated in the display means of the man / machine interface which will be described below in the "detailed description of the invention ".
    According to another embodiment, the communication method according to the invention, the control entity, the onboard entity and the validation means are chosen to be certified in accordance with at least one criticality standard and the human interface. and the warning means are not certified according to this at least one criticality standard.
    This mode is advantageous because it limits the costs and efforts to be deployed to certify the system without compromising the function of detecting any data corruption in the system. Indeed, it is not necessary here to certify the man / machine interface or alerting means that can therefore be standard economic elements.
    BRIEF DESCRIPTION OF THE DRAWINGS The invention will be better understood in the light of the following description of the invention, with reference to the appended figures in which: FIG. 1 describes the system according to the invention with a drone and a control entity which communicate with each other via preferentially wireless signals; FIG. 2a illustrates a first step of the communication method between the control entity and the drone in which the control entity transmits data to the drone that is representative of data previously selected by an operator using a man / machine interface; FIG. 2b illustrates a second step of the communication method according to the invention in which the entity on board the drone transmits a message to the control entity, in response and as a function of the data previously received by the onboard entity. and from the control entity; FIG. 2c illustrates a third step of the method according to the invention in which, after having read the text-type signal and / or heard, a signal of audio type representative of the message previously transmitted by the onboard entity and after validation by the operator, the control entity transmits an intention message to the onboard entity that will validate the execution of actions, by drone actuators and the flight control system (Flight Control System). DETAILED DESCRIPTION OF THE INVENTION As indicated above, the invention essentially relates to a system 1 illustrated in FIG. 1 and comprising: a drone B comprising an onboard entity B1 on board said drone B; and a command entity A of the drone situated at a distance from the drone B. The control entity A and the onboard entity B1 of the drone B communicate with each other via a data transfer system G illustrated by a data transfer line . This data transfer system may comprise a communication card belonging to the control entity A, a communication card belonging to the onboard entity B1 and a data transfer cable interconnecting these communication cards. Alternatively, in an embodiment without a data transfer cable, these communication cards can be configured to communicate with each other via electromagnetic waves. The control entity A being connected to a man / machine interface C,
    Preferably, the man / machine interface C comprises: selection means C1 chosen from tactile selection means such as a keyboard or a pointing device for a computer or voice-controlled selection means; and at least one display means C2 such as a display screen for displaying the selected data using the man / machine interface C.
    This man / machine interface C is adapted to allow the operator to select data 10 to send from the control entity A to the onboard entity B1.
    The data selected by the operator may be data influencing a change of position or trajectory of the drone or critical data for different flight functions of the drone. Among these data we can for example find a position to be reached by the drone such as an altitude or a coordinate in space, or a trajectory to be followed by the drone. These data can also be of another type.
    These data are critical in that if they were executed by the onboard entity without being validated by the operator, they could lead to a catastrophic action for the drone.
    This data is sent using the data transfer system G. This data can be critical data such as a movement order of the drone to a given point and / or a trajectory to follow. Critical data means data that may endanger the drone or its environment if these data are executed by actuators F of the drone B. The onboard entity B1 of the drone is adapted to receiving at least some of said data 10 sent by the control entity and to execute actions according to the data 10 thus received by the onboard entity B1. Such actions may be a displacement of control surfaces or blades or wheels making it possible to move all or part of the drone. From the data transmitted by the control entity A and received by the onboard entity B1, the onboard entity B1 generates and transmits a message to the control entity A. This message is transmitted using of said data transfer system G. The control entity A controls, to alerting means D to which it is connected, the generation of an information signal S representative of said message transmitted by the onboard entity B 1 and received by the controlling entity A.
    This information signal S is brought to the attention of the operator and by means of validation means E which are also connected to the control entity A, the operator can interact with the control entity by function of the information signal S that he has just listened to.
    According to an action of the operator on said validation means E intervened after the generation of said information signal S, the control entity A transmits to the onboard entity B1 an intention message 21 of the operator , which is here a validation message. In the same way as above, this message 2.1 is transmitted via the data transfer system G.
    According to another particular embodiment, according to another action of the operator on said validation means or on the man / machine interface C, the control entity A can send an intention message 21 which is a cancellation message to the onboard entity B1. The onboard entity B1 is arranged to condition, according to this intention message 21, the execution of the actions by the actuators F of the drone. These actions are the result of the execution by the actuators F of at least some of the data previously selected by the operator and then sent to the onboard entity B1 by the control entity A.
    The fact that the operator validates or not the execution of the actions by the actuators F of the drone is advantageous because it allows him to ensure that the actions to be performed have been interpreted at the drone and that there There was no error in data selection or corruption of this data between the selection and the interpretation by the onboard entity B1.
    Preferably, the alerting means D comprise at least one loudspeaker D1 for delivering to the operator said information signal S representative of said message 20, this information signal S being here an audio type signal.
    The fact that the man / machine interface C comprises a display C2 for displaying the selected data 10 while the alerting means comprise at least one loudspeaker D1 for delivering the audio information signal S allows the operator to At the same time, it has a display image of its selection and a sound signal S indicating to it an interpretation result, by the onboard entity B1, of the data 10 selected at the control entity A. This facilitates the comparison. / data consistency check for the operator who can focus his visual attention on the data selection actions 10 and his auditory attention on the sole question of validation or cancellation of the data interpreted at the embedded entity level Bl.
    The alerting means D may comprise a textual display for delivering to the operator said signal S representative of said message 20, this information signal S being here a text-type signal.
    Since the message transmitted by the onboard entity B1 is in a format separate from the signal S, of audio type and / or of text type delivered to the operator, this implies a change of format between the message 20 and the signal of information S issued. If the data is corrupted the information signal S delivered is either incomprehensible or absent. The operator can easily detect corrupted data and can decide not to validate the execution of the corresponding actions.
    The risk of misinterpretation by the operator is reduced. It would be difficult for the operator to perceive two display zones of different natures and presenting the same data, which is not the case by combining the display of the data 10 and the broadcasting of the audio-type signal S and / or of type text.
    Ideally, the control entity A comprises an interpretation device arranged to interpret the message generated by the onboard entity B1 and to deliver to the alert means D an interpreted signal Si, for example of the text type. The information signal S representative of the message transmitted by the onboard entity B1 is a signal of the text type (in the form of text) and / or of the voice audio type. This information signal S results on the one hand from the interpretation of the message 20 by the interpretation device 13 and on the other hand from an interpretation by the alerting means of the interpreted signal Si,.
    The system according to the invention may also comprise a voice synthesis device, preferably implanted at the level of the warning means D, for starting from the interpreted signal Si of text type, to synthesize the audio information signal S. This signal of information S is then a voice audio message.
    The information signal S is composed of words forming a message (text and / or audio) representative of the data 10 selected by the operator and interpreted by the onboard entity B1. This message indicates, for example, a position to be reached by the drone. , or a trajectory to be followed by the drone or an action to be executed.
    Since the warning means deliver a signal S of the text type and / or of the voice audio type resulting from the interpretation device, there is a signal consisting of distinct words which has a semantic richness. This semantic richness makes it possible to eliminate the need for certification of the warning signal since the richness of speech is such that it is not possible to corrupt a word with a meaning so as to create another word having another meaning. It is therefore extremely advantageous to use such an interpretation device to increase the overall safety of the system.
    Advantageously, the voice synthesis device can also be used to give information on the current state of the drone, from current status messages delivered by the onboard entity to the control entity. In this case, the alerting means are used to inform the operator: on the one hand, of actions remaining to be executed if they validate them, these actions being based on the data previously selected by the operator; and on the other hand the current state of the drone, such as its current position or its current trajectory or its target destination. The operator can thus check the consistency with a state displayed on the human-machine interface C (he can for example check the coherence between the current state of the drone and the actions to come) and he can either validate the actions to come by acting on validation means, either triggering a specific procedure (for example selecting new data by acting on the man / machine interface C).
    Preferably, the control entities A, the onboard entity B1 and the validation means E are certified (C) in accordance with at least one criticality standard and the man / machine interface C and the alerting means D are not certified according to this at least one criticality standard.
    In the field of aeronautics, certain elements of a system may be considered as critical elements that may present a catastrophic risk.
    To ensure a minimum level of safety, critical elements are developed and tested to be certified according to standards such as international standards.
    In the present case, said at least one criticality standard comprises: - the DO-178 standard which sets the safety conditions applicable to critical avionics software in commercial aviation and general aviation; and the DO-254 standard which specifies, in particular, the development constraints related to obtaining the certification of an avionics electronic equipment.
    The standardization of an element is particularly long and expensive. The certified elements are identified in the figures by the mention (C) and the elements not certified by the mention (NC). By non-certified, we mean non-certified at the catastrophic level.
    As indicated above, the invention is particularly advantageous in that it allows the operator to decide whether or not he validates the data previously received by the onboard entity B1 which reduces the criticality of the man / machine interface. . Consequently, this man / machine interface C may not be certified or not be certified at the catastrophic level (DAL A or DAL B or DAL C according to the authorities' specifications and the context of use), which then makes it possible to reduce cost come back and technical complexity.
    Thanks to the invention, it is possible to use a man / machine interface C which is not certified (NC) and therefore of lower cost.
    It is the same for the alerting means D which are not critical (NC) for the security of the system 1. Indeed, in the event of a malfunctioning of the alerting means D, the message generated by the entity embedded B1 will not be received by the operator. The operator will not perform a validation action and no intention message will be transmitted. The embedded entity B1 will not allow the execution of the actions that correspond to the data previously selected by the operator.
    Thus the risk of executing an erroneous or incoherent action is always reduced.
    Furthermore, if the operator finds that the alert means does not generate an S signal in response to a prior selection of data, it will deduce that one of the uncertified elements of the system is defective. He can replace it cheaply.
    Since the system according to the invention makes it possible, before validating its execution, to verify that the selected critical data have not been corrupted, it reduces the critical risks for the drone. The system can thus be certified at a catastrophic level even if some of its elements are not (human / machine interface C or the warning means D).
    Preferably, the control entity A further comprises a verification device 15 arranged to check the digital and semantic integrity of the data selected by the operator using the man / machine interface. The digital integrity check can be done via a checksum function and the semantic check can be done via a semantic consistency check using semantic rules. Preferably, the onboard entity B1 further comprises a verification device 11 arranged to verify the digital and semantic integrity of the data received by the onboard entity B1. Here, the verification of the data is carried out by the verification device 11 which is embedded in the embedded entity Bl This check detects a message corruption that could have occurred for example during the transmission of data.
    Ideally, the onboard entity B1 comprises means 12 for storing data received and sent by the control entity A. These data are stored by means of the storage means 12 awaiting validation by actuating the validation means E. .
    The operation of the system according to the invention will now be presented, this operation being in accordance with the communication method according to the invention.
    As seen in particular in FIGS. 2a, 2b, 2c, the data is selected by the operator using the honme / machine interface C.
    Ideally, the selected data is verified using the verification device 15 which belongs to the control entity A.
    Optionally, the verification of the data by the verifier 15 may be accompanied by a data format change to ensure that the data has been verified at the control entity A. The data passes here from a first format to a second format.
    In case of failure of this verification by the verification device 15, this data 10 is not transmitted and a failure message can be generated via the warning means D and / or the man / machine interface C.
    If this verification is successful, this data is sent by the control entity A to the onboard entity B1 of the drone B. This sending is carried out via the data transfer system G, on receipt of this data 10 by On the onboard entity B1, these data 10 can be, on the one hand verified by the verification device 11 and on the other hand stored by the storage means 12 data 10 belonging to the onboard entity B1.
    This memorization can possibly be conditioned by the preliminary success of the verification by the verification device 11.
    In case of verification of the data by the on-board verification device 11, this verification may be accompanied by a change in the format of the data 10 to ensure that the data have been verified.
    At the embedded entity B1, the data 10 changes from the second format to a third format. Note that it is possible to have only one check at the level of the checking device 15 of the control entity B1 or alternatively at the level of the verification device 11 of the onboard entity B1.
    As illustrated in FIG. 2b, the onboard entity B1 generates the message 20 from the data it has received. In the particular case where a verification and / or a format change is carried out at the embedded entity B1, this message can be generated from the previously verified data and converted into a new format at the level of the embedded entity B1. This message 20 is then transmitted from: the onboard entity B1 to the control entity A via the transfer system G,
    This message 20 is received by the control entity A and can be checked there by means of a possible second checking device belonging to the control entity A.
    If this check fails, a failure message can be generated via the warning means D and / or via the man / machine interface C.
    If this verification is successful, the message 20 is sent to the interpretation device 13 which interprets it and transforms it into words constituting the interpreted signal Si. The speech synthesis device implanted at the level of the warning device D synthesizes vocally the interpreted signal Si and delivers a voice audio signal S via the loudspeaker DI. Note that in a particular embodiment, when checking the message 20 by the second verifier, the message format 20 can be changed. This message 20 can also be recorded in at least one of these formats at a memory implanted in the control entity A and / or connected to this control entity, for example implanted at the level of the human interface. / machine C.
    The interpreting device interprets the converted message into the new format, called the fourth format. The interpreted signal Si by the interpretation device 13 is then transmitted to the warning means D which generate the information signal S composed of several words in the language of the operator. For this, the warning means D may comprise a text display for displaying the information signal 5 in the form of text and / or may comprise a voice synthesis device for synthesizing, from the interpreted signal Si, the signal S voice audio form and broadcast it via the DI loudspeaker.
    Alternatively, it is also possible to use no second verification device at the control entity A. In this case, the message 20 can be transmitted such that, or possibly undergo a format conversion to a fourth format and to be sent to the interpretation device 13. The interpretation device 13 then interprets this message 20, possibly converted into the fourth format, and generates the interpreted signal Si which is transmitted to the warning means D. The warning means D then generate said information signal S which comprises words representative of the data contained in the message 20.
    As illustrated in FIGS. 2a, 2b, 2c, the current critical data 10c, that is to say current and likely to be executed using drone F actuators without requiring prior approval of the operator , can be stored in a current memory 14 belonging to the onboard entity B1.
    These current critical data items 10c are likely to be changed / replaced when the user decides to select new data to be sent to the control entity A. As the case may be, these current data items 10c may be in the receive format of data by the onboard entity or preferably in the third format generated during the verification carried out at the onboard entity B1.
    As illustrated in FIG. 2c, in response to the information signal S, the operator may or may not act on the validation means E which are preferably means certified according to a criticality standard and which are connected to the entity of command A.
    A means 16 for generating an intention message 21 implanted at the control entity A is then actuated by the action of the operator on the validation means E. This intention message 21 and / or the data validated messages corresponding to this message 21 may be stored at a memory implanted in the control entity A and / or at a peripheral connected to this control entity A, for example a peripheral of the human interface / machine C. The digital integrity of the message 21 or the data contained in this message 21 can be verified, for example by the generation means 16 of the intention message. This digital integrity check can be done via a checksum function. In addition to this integrity check, the means for generating the message 16 may also be arranged for encryption and / or 1a. signing and / or dating of this message 21 data. This message 21 data or this encrypted message 21 can then be stored in a memory of the human-machine entity C and / or in a memory of the entity. A. An advantageous use of this recording of the message 21 will be presented later.
    Preferably, the encryption is such that only (s) the control entity A and possibly the embedded entity B1 can decrypt and reuse these data without the need for additional validation.
    This intention message 21 generated by the means 16 is transmitted from the control entity A to the on-board entity B1. On receipt of this intention message 21, if this message is a validation message, the embedded entity Bl commands the modification or replacement of the current data 10c by the data previously memorized at the level of the storage means 12.
    The corresponding actions can then be executed and the drone can for example follow a new trajectory or move to a new position. On the other hand, if the operator considers that the information signal S represents data that are distinct from the data he has previously selected, he then deduces that there has been data corruption and he does not carry out the action. of confirmation. In the case. where the intention message 21 is a validation message, this validation message will not be generated and the current critical data 10c will not be modified at the level of the current memory 14.
    In the case where the intention message 21 is a cancellation message, upon receipt of this message 21, the embedded entity Bl prohibits the modification of the current critical data 10c at the current memory 14 or commands the execution of an emergency procedure previously recorded at the level of the onboard entity B1.
    Such an emergency procedure recorded at the level of the onboard entity B1 can be implemented in the event of absence of intention message21 beyond a predetermined duration. The countdown of this predetermined time can be achieved using a clock of the onboard entity. This count can be activated from the receipt of data by the onboard entity B1 or from the transmission of the message 20 from the onboard entity to the control entity.
    This countdown is interrupted and reset upon receipt of an intention message21.
    It should be noted that in the absence of data reception transmitted by the control unit, the onboard entity B1 can, after a predetermined time, initiate said emergency procedure.
    The emergency procedure may consist of loading a trajectory to be followed in urgency or loading a position of destination of the drone in case of emergency.
    It should be noted that means for triggering the emergency procedure (not shown) can be connected to the control entity to enable the operator to activate them for example via the man / machine interface and / or via said validation means E.
    It should be noted that the validation means E may comprise a button certified according to the criticality standard.
    The frequency of pressing this button or the duration of the support can determine the activation of the triggering means of the emergency procedure.
    Alternatively, a button specific to the activation of the emergency procedure can be connected to the triggering means of this emergency procedure. Ideally, this specific means will also be certified according to the criticality standard.
    In a particular embodiment, the man-machine interface C can be arranged so that the saved copy of the message 21 previously encrypted, dated and signed at the control entity A, can be sent to the onboard entity B1 on the orders of the operator expressed via the human-machine interface C, in this case, the control entity A, on the order of the human-machine interface C, transmits this message 21 to the onboard entity B1. described above, the onboard entity Bl controls the modification or replacement of the current data 10c by the data 10 previously stored at the storage means 12 and which correspond to this message 21 sent by order of the Human Machine Interface C. Thus, the actions corresponding to this message 21 transmitted on the order of the human-machine interface C are directly executed at the level of the drone B, without having to be validated again via the validation means E.
    Indeed, since this message 21 had been the subject of a prior validation via the validation means E, the embedded entity B1 considers this message 21 as if it had been transmitted directly by the control entity A, without that there has been an execution order of the message 21 passed via the human-machine interface C. The actions are thus executed directly without requiring additional validation and this even if the order comes from the human interface. Machine C.
    权利要求:
    Claims (2)
    [1" id="c-fr-0001]
    1) System (1) comprising a drone (B) comprising an onboard entity (B1) on board said drone (B), a control entity (A) of the drone situated at a distance from the drone (B), the command (A) being connected to a man / machine interface (C) adapted to allow an operator to select data (10) to be sent from the control entity (A) to the onboard entity (B1), embedded entity (B1) being adapted to receive data (10) sent by the control entity (A) and to execute actions according to the data (10) thus received by the onboard entity, characterized in that: the on-board entity (B1) is arranged to generate a message (20) from the data (10) received by the on-board entity (B1) and to transmit this message (20) to the control entity (A); the control entity (A) is arranged to command warning means (D) for generating an information signal (S) representative of said message (20) transmitted by the onboard entity (B1) and received by the control entity (A); the system (1) further comprising validation means (E) connected to the control entity (A), the control entity (A) being further arranged for, depending on an action of the operator on said validation means (E) occurring after the generation of said information signal (S), transmitting to the onboard entity (B1) an intention message (21); the onboard entity (B1) being arranged to condition, as a function of said intention message (21), the execution of said actions. 2) System (1) according to claim 1, wherein the man / machine interface (C) comprises: - selection means (C1) selected from touch selection means or voice-activated selection means; and - at least one display means (C2) for displaying the selected data (10) using the man / machine interface (C); and the warning means (D) comprise a loudspeaker (D1) for delivering said information signal (S) representative of said message (20), this information signal (S) then being an audio type signal and or a visual display for displaying the information signal (S), this information signal (S) then being of text type. 3) System according to the preceding claim, wherein the control entity (A) comprises an interpretation device (13) arranged to interpret the message generated by the onboard entity (B1) and to deliver to the alert means ( D) an interpreted signal (Si) of text type, said alerting means (D) included a voice synthesis device, said information signal (S) representative of the message transmitted by the onboard entity (B1) being a signal voice audio synthesized by the speech synthesis device from said interpreted (Si) text-type signal. 4) System (1) according to any one of the preceding claims, wherein the data selected by the operator are data influencing a change of position or trajectory of the drone or are critical data for different flight functions of the drone. 5) System (1) according to any one of the preceding claims, wherein the control entity (A) further comprises a verification device (15) arranged to check the digital and semantic integrity of the data selected by the operator using the man / machine interface. 6) System (1) according to any one of the preceding claims, wherein the onboard entity (B1) further comprises a verification device (11) arranged to check the digital and semantic integrity of the data received by the entity. embedded (Bl).
    [2" id="c-fr-0002]
    7. System (1) according to any one of the preceding claims, wherein the onboard entity (B1) comprises means for storing (12) the data received and sent by the control entity (A). 8) Method of communication between a control entity (A) of a drone (B) situated at a distance from the drone and an onboard entity (Bl) aboard said drone, the control entity being connected to a man / machine interface (C) to allow an operator to select data to be sent from the control entity (A) to the onboard entity (B1), the onboard entity (B1) on board the drone (B) being adapted to receive data sent by the control entity (A) and executing actions according to the data (10) thus received by the onboard entity (B1), characterized in that prior to the execution of said actions: - the embedded entity (B1) transmits a message (20) to the control entity (A), this message (20) being generated from the data (10) received by the onboard entity (B1); then the control entity (A), controls to alert means (D), generating an information signal (S) to the attention of the operator, this information signal (S ) being representative of said message (20) transmitted by the onboard entity (B1) and received by the controlling entity (A); then - according to an action of the operator on validation means (E) connected to the control entity (A), the command entity (A) transmits to the onboard entity (B1) a message of intention (21); then - according to said intention message (21), the onboard entity (Bl) conditions the execution of said actions functions of said data previously received by the onboard entity (Bl). 9) Method of communication according to the preceding claim, wherein the man / machine interface (C) comprises: - selection means (C1) selected from touch selection means or voice-activated selection means; and - at least one display means (C2) for displaying the selected data (10) using the man / machine interface (C); and the warning means (D) comprise a loudspeaker (D1) for delivering said information signal (S) to the operator, this information signal (S) then being a signal of the type audio and / or a visual display for displaying the information signal (S), this information signal (S) then being of text type.
    类似技术:
    公开号 | 公开日 | 专利标题
    EP3465649B1|2020-02-19|Systems comprising a drone and an entity for controlling this drone
    FR2926692A1|2009-07-24|METHODS AND DEVICES FOR IMPROVING COMMUNICATION RELIABILITY BETWEEN AN AIRCRAFT AND A REMOTE SYSTEM
    EP2366237B1|2013-01-16|Secure avionics equipment and associated method of making secure
    FR2936071A1|2010-03-19|METHOD AND DEVICE FOR AUTOMATING EQUIPMENT VERIFICATION PROCEDURES IN AN AIRCRAFT.
    US10351058B2|2019-07-16|Managing alerts for a wearable device in a vehicle
    FR2931329A1|2009-11-20|METHOD OF TRANSMITTING DATA BETWEEN AT LEAST ONE DISPLAY SCREEN OF A STEERING STATION AND AT LEAST ONE REMOTE CLIENT ASSEMBLY
    CN107592369A|2018-01-16|The management method and device that file uploads in cloud computing system
    EP3317819B1|2020-12-02|Electronic entity and method implemented in an electronic entity
    FR2960680A1|2011-12-02|ON-BOARD AIRCRAFT SYSTEM
    EP3173924A1|2017-05-31|Method for using an aircraft human-machine interface device having a speech recognition unit
    FR2822009A1|2002-09-13|SYSTEM AND METHOD FOR PROVIDING CUSTOMER SUPPORT
    US10580288B2|2020-03-03|Alert fault detection system and method
    EP3317800B1|2020-05-13|Method of managing profiles in a secure element
    EP3340565A1|2018-06-27|Unit for the identification, sharing and management of data comprising critical and non-critical data
    FR2991073A1|2013-11-29|Data e.g. video, displaying method for maintenance of aircraft, involves receiving data by display system via routes, where data received via routes is displayed in alternation so as to start alarm when data presents difference
    FR2992086A1|2013-12-20|Image composition device for use in information system of nuclear power plant, has generation module to aggregate priority video stream and non-priority video streams to obtain combined video stream to be displayed on shared display screen
    EP3454246B1|2020-01-29|Method for transmitting and verifying the validity of configuration data in an electronic system, associated electronic system and computer program product
    EP3540708A1|2019-09-18|Interface device for radio with digital remote control
    FR3096487A1|2020-11-27|Method and device for automatic management on board an aircraft of air traffic control audio messages
    FR3089375A1|2020-06-05|Method and system for protecting an aircraft against an inconsistent control instruction
    US9262926B2|2016-02-16|Using pass code verification to organize a vehicle caravan
    WO2020193573A1|2020-10-01|Multimedia server intended to be installed on board an aircraft, electronic entertainment system comprising such a server, method for updating such a server and associated computer program
    WO2018229401A1|2018-12-20|System and method for assistance and voice control of an image processing device
    FR2998687A1|2014-05-30|Electronic system i.e. chipset, for use in e.g. smart card of portable smartphone, has memory for storing information associated with user, where confidence operating system, controller and screen adjusts confidence environment for user
    FR2610744A1|1988-08-12|METHOD AND DEVICE FOR LIMITING THE OPERATION OF SOFTWARE
    同族专利:
    公开号 | 公开日
    CN109219837A|2019-01-15|
    US20190135435A1|2019-05-09|
    WO2017207511A1|2017-12-07|
    US10654571B2|2020-05-19|
    IL263319D0|2019-01-06|
    EP3465649A1|2019-04-10|
    CN109219837B|2019-11-26|
    IL263319A|2019-05-30|
    FR3052289B1|2021-05-14|
    EP3465649B1|2020-02-19|
    引用文献:
    公开号 | 申请日 | 公开日 | 申请人 | 专利标题
    US20160117853A1|2014-10-27|2016-04-28|SZ DJI Technology Co., Ltd|Uav flight display|
    CN102073279A|2010-12-30|2011-05-25|清华大学|Composite recognition method for flight dynamics model of unmanned helicopter|
    CN102768518B|2012-07-11|2014-05-21|清华大学|Multiple-unmanned plane platform cooperative control system|
    GB201218963D0|2012-10-22|2012-12-05|Bcb Int Ltd|Micro unmanned aerial vehicle and method of control therefor|
    US9747809B2|2012-12-19|2017-08-29|Elwha Llc|Automated hazard handling routine activation|
    WO2015143615A1|2014-03-24|2015-10-01|深圳市大疆创新科技有限公司|Method and apparatus for correcting aircraft state in real time|
    US9630324B2|2014-03-28|2017-04-25|SKUR, Inc.|Enhanced system and method for control of robotic devices|
    CN106716272B|2014-09-30|2021-03-09|深圳市大疆创新科技有限公司|System and method for flight simulation|
    US9912655B2|2015-03-27|2018-03-06|Amazon Technologies, Inc.|Unmanned vehicle message exchange|
    US9875660B2|2016-03-28|2018-01-23|Cisco Technology, Inc.|Multi-modal UAV certification|US11167682B2|2017-01-11|2021-11-09|Biosphere Aerospace, Llc|Modular container transport systems|
    FR3074347A1|2017-11-24|2019-05-31|Thales|ELECTRONIC DRONES TELE-CONTROL SYSTEM, ASSOCIATED COMPUTER PROGRAM PROCESS|
    FR3104135B1|2019-12-05|2021-11-12|Thales Sa|Electronic control system of an unmanned aircraft on board, associated methods and computer programs|
    FR3111224A1|2020-06-04|2021-12-10|Safran Electronics & Defense|Control system for controlling a remote device in the system.|
    法律状态:
    2017-05-22| PLFP| Fee payment|Year of fee payment: 2 |
    2017-12-08| PLSC| Publication of the preliminary search report|Effective date: 20171208 |
    2018-05-25| PLFP| Fee payment|Year of fee payment: 3 |
    2020-05-20| PLFP| Fee payment|Year of fee payment: 5 |
    2021-05-19| PLFP| Fee payment|Year of fee payment: 6 |
    优先权:
    申请号 | 申请日 | 专利标题
    FR1655044A|FR3052289B1|2016-06-02|2016-06-02|SYSTEMS INCLUDING A DRONE AND A CONTROL ENTITY OF THIS DRONE|FR1655044A| FR3052289B1|2016-06-02|2016-06-02|SYSTEMS INCLUDING A DRONE AND A CONTROL ENTITY OF THIS DRONE|
    US16/306,102| US10654571B2|2016-06-02|2017-05-29|System comprising a drone and an entity for controlling this drone|
    PCT/EP2017/062936| WO2017207511A1|2016-06-02|2017-05-29|Systems comprising a drone and an entity for controlling this drone|
    EP17725982.7A| EP3465649B1|2016-06-02|2017-05-29|Systems comprising a drone and an entity for controlling this drone|
    CN201780034404.4A| CN109219837B|2016-06-02|2017-05-29|The system of entity including unmanned plane and for controlling the unmanned plane|
    IL263319A| IL263319A|2016-06-02|2018-11-27|Systems comprising a drone and an entity for controlling this drone|
    [返回顶部]