Aircraft flight risk measuring system and method of operation

An aircraft flight risk measuring system for analyzing risks related to a flight of an aircraft. A user of the risk measuring system can be a flight dispatcher, an owner/operator, a pilot and other interested parties. The risk measuring system includes a risk management server system computer. The system computer has a two-way communication with a user computer operated by the user. An accident history database is connected to the system computer for providing accident reports related to the aircraft and other accident data. Also, a navigation database is connected to said system computer for providing airspace data, radio navigation aids, preferred routes, elevation data, geographic data and information related to a destination airport. Further, a non-static database is connected to the system computer for providing live information related to weather forecasts and data related to the aircraft's flight. As an option, a two-way communication between said system computer and an aircraft computer on board the aircraft can be included. The two-way communication used for receiving and transmitting encoded data from the aircraft when the flight is in progress.

BACKGROUND OF THE INVENTION

(a) Field of the Invention

This invention relates a system for measuring aviation risks for improved aircraft safety and more particularly, but not by way of limitation, to an aircraft flight measuring system for providing a flight planning aid to a pilot, flight dispatcher and an owner/operator. The new aircraft flight measuring system calculates various risk factors and provides a summary report. The report can be used prior to flight time or during flight to aid in a decision to fly or not or to change a flight destination.

(b) Discussion of Prior Art

Prior to any aircraft flight under Federal Aviation Administration (FAA) regulations, a pilot must create a flight-plan, which identifies the specifics of the intended flight. The process can be performed on paper or using a number of different electronic methods including a microcomputer or the internet, serviced by web browser. This process is intended to ensure that the flight will arrive safely. In some cases, the pilot may elect to provide his or her flight plan to a Flight Service Station (FSS) for entry into the Air Traffic Control (ATC) system. However, for flights in Visual Meteorological Conditions (VMC), this is not mandatory.

In flight planning, an implied risk management function is a weak link due to human factors, which may affect the pilot. For these reasons, the FAA has established a set of regulations in the Code of Federal Regulations (CFR) for commercial flight, which require additional restrictions to be met before a flight can proceed. One of the restrictions includes a use of an independent dispatcher. The dispatcher must be someone not part of the required aircraft crew. The addition of the dispatcher is intended to provide an impartial review of the flight to aid in decision-making and enhance safety. Several non-governmental organizations exist for the purpose of educating the pilot population such as the Airplane Owners and Pilots Association (AOPA) and their sister agency the AOPA Air Safety Foundation. These groups provide free and low-cost seminars, videos and self-education materials to the general public. Several educational materials vendors including King Aviation Schools provide self-education materials, books, video and distance learning. In either case the pilot must already be aware of the risks inherent in flight, or be encouraged to take the courses and attend seminars, participation at these events is entirely voluntary although encouraged by the FAA.

Commercial flight training companies such as Flight Safety International provide continuing education services for fleet operators and air-taxi services. These companies provide type certifications, re-currency and Crew-Resource-Management (CRM). A type-certification is an authorization to act as pilot-in-command of an aircraft, which has been determined by the FAA to require certain aircraft specific knowledge. Pilots are required to maintain “currency”, which is a minimum of recent experience in specified operations such as instrument landings, night time takeoffs and landings. CRM are procedures and methods for multi-pilot cockpit operations, which attempt to reduce potential confusion or inter-personal effects in flight. These services are prohibitively expensive for single pilot-single aircraft operations and are specifically targeted at covering regulatory requirement. Risk management is not typically an explicit goal of these services.

During a flight, the pilot is completely in charge of the safety of the flight up to and including diverging from the CFRs when the pilot feels its necessary. In cases of a multi-person crew, the pilot may request and receive advice. However, only one person can be considered the Pilot-In-Command (PIC). Just as in the case of flight planning, human factors can affect a pilot's decision making. Also, this extends to the crew as well. There is significant anecdotal evidence of multi-pilot operations where all the crew members were unable to make correct decisions. In some cases a telecommunications system is available which allows the pilot to speak with ground personnel, however without in flight information the ground crew can rarely be of substantial timely help in resolving in-flight issues.

Finally, although the CFR's require extensive record keeping for maintenance and pilot proficiency, there is no codified method or procedure for evaluating a pilot's skill for the management of risk. Safety training, recurrent training and other methods of educational instruction for pilots have shown some success in helping good pilots sharpen their skills. But, no training can predetermine all possible situations a pilot may encounter.

In U.S. Pat. No. 6,538,581 to Cowie and U.S. Pat. No. 6,043,758 to Snyder, multiple methods for monitoring a flight in progress for collision risk are disclosed. In general, these disclosures are primarily focused on alerting a pilot, a ground controller or owner/operator of a flight in-progress and an impending collision with traffic or terrain. This information is not used to assess pre-flight risk factors or risk factors during flight. In U.S. Pat. No. 5,710,559 to Krogmann, a systemic monitoring device and method is described. This system is focused on alerting a crew of the aircraft to an impending in-flight issue and no pre-flight functions are provided. In U.S. Pat. No. 6,223,143 to Weinstock, general risk management methodologies with software are described. The patent discloses the calculation of failure modes and associated risks using various computational algorithms. These algorithms are based on engineering analysis of possible point failures in the system and mission analyzed. The underlying vehicle specific failure information is static and can be reused. But, for each mission the user of the system must manually create a detailed analysis of the route and other relevant mission specific data. By contrast, the subject invention is intended to gather failure probabilities from historical accident data and uses existing flight-planning information to computationally create a mission data report used for risk factor analysis.

None of the above-mentioned prior art patents specifically disclose the unique features, combination of components and function of the subject aircraft flight risk measuring system and method of operation as described herein.

SUMMARY OF THE INVENTION

In view of the foregoing, it is a primary objective of the subject invention to provide a pre-flight data report or an in-flight data report for an assessment of risk level associated with a particular flight segment. The report is used to assess data prior to flight or between take-off and landing. The information from the report can be used by a pilot, a flight dispatcher, an owner/operator or other interested party in making a better decision for overall flight planning.

Another object of the invention is to provide an impartial second opinion when flight safety can be improved. The report can also function as a monitor for the in-flight aircraft to allow a ground based dispatcher or other interested party to take preventative action when needed.

Yet another object of the new aviation risk measuring system is to gather failure probabilities from historical accident data with existing flight-planning information for creating a flight mission data summary report. The summary report provides a risk factor analysis to a user.

The subject invention provides a system and method of operation using an analysis of risk related to the flight of an aircraft. The system includes a source of flight planning data, a source of real-time aircraft data, historical flight information data, navigation and geographic data and a risk management server system computer to analyze the collected data. The method of operation uses the available data to generate a summary report of the level of risk associated with a planned flight or a current flight activity if real-time data is available.

These and other objects of the present invention will become apparent to those familiar with various systems and methods of measuring aircraft flight risks when reviewing the following detailed description, showing novel construction, combination, and elements as herein described, and more particularly defined by the claims, it being understood that changes in the various embodiments of invention are meant to be included as coming within the scope of the claims, except insofar as they may be precluded by the prior art.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

InFIG. 1, the aircraft flight measuring system is shown having general reference numeral10. The system10broadly includes a Risk Management Computer Server System (RMSS) computer200with access to an accident history database210, access to flight navigation database220and access to a non-static database230. The RMSS computer200has a two-way communication120with a user's computer100, which provides an interface for a user110to access the system's computer200. Also, the RMSS computer200provides for two-way communication240with an aircraft230prior to flight time and during flight. During flight, the aircraft230can communicate flight progress and various situation data to the RMSS computer200.

The RMSS computer200can be any computer, which can run software and algorithms specific to the system10as described herein. The RMSS computer200can include one or more general purpose microcomputers with an operating system configured to run software which handles queries from the user110and has access to the databases210,220and230. Also, the computer200has access to various articles, training material and other information sources for risk management education when reports are presented. The system is also programmed to identify and input material that is relevant to a proposed flight.

The accident history database210or also called a quantized risk factor database is constructed from accident reports from NTSB records, indexed and stored in a manner which allows for arbitrary searches of the records. Also, additional databases can be included from summaries of accident data such as that provided by the AOPA Air Safety Foundation Nall Report, or data from non-government and international accident investigation agencies.

The navigation database220consists of geographical information, particularly terrain elevation data, ground cover and other landform data which may have risk implications, airspace data, radio navigation aids, waypoints and preferred routes. Also, the database220includes information about airports including types and quality of instrument approaches as well as field services available and other relevant data points which have risk implications.

The non-static database230provides live information of primary importance such as weather data with high reliability forecasts covering a time period during the flight of the aircraft230. Additional data may include current traffic flow information in and around the flight of the aircraft230from the National Airspace System (NAS) and any other data, which may change rapidly and may effect the flight of aircraft230.

The user110can access the RMSS computer200through his or her computer100or another data communication terminal, which can include a cell phone, a Personal Digital Assistant (PDA) or the Internet. The RMSS computer200also runs software which provides a text or graphical user interface and allows the user110to input flight planning data and to receive human readable summary reports. The computer200can also be more than one device, with a fixed ground based terminal used for primary pre-flight operations and a secondary terminal provided by a portable device and/or devices mounted in the aircraft230for use before or during flight.

Where possible the RMSS computer200receives encoded data from the flight in progress of aircraft230via the two-way data communication240. This feature enables the RMSS computer230to track the real operation of the aircraft230for comparison against the estimated flight plan, which was presented prior to flight. While this feature is important, it is optional and is not required for all implementations of the present invention. But, it is useful for extending the capabilities and quality of aircraft flight risk management. When the aircraft230is equipped with the necessary hardware and software, it can generate and deliver a stream of data or a series of discrete reports to the RMSS computer200, with the status and progress of the flight in real-time.

InFIG. 2, a logic diagram shows a user interaction process for requesting and utilizing the risk management reports from the RMSS computer200. When a pilot of the aircraft230or the user110is preparing for a flight, the computer200, with accompanying software, is started at start300and a flight plan310is submitted. An enter flight plan320is encoded into the system and a send to RMSS330is sent to the RMSS computer200. Obviously, the user will use the two-way data communication120and the pilot will use the two-way data communication240. When the flight plan is received by the RMSS computer200, it can be optionally stored or save profile390in a persistent database called a watch profiles400. The data in the watch profiles can be used later during the actual flight of the aircraft230.

The user110or pilot of the aircraft230can then query the RMSS computer200for a report generated from the data provided. A retrieve risk report350is now generated. The user or the pilot can then make a determination based on available data, including but not limited to the retrieve risk report350on whether the flight is acceptable360or not. If the risk report350is unacceptable because the calculated risk is too high, the user or pilot may elect to modify the flight plan380and submit a new plan for analysis. The process described above is then repeated. If the user or pilot is satisfied with the proposed flight, the process is completed and done370.

InFIG. 3, a logic diagram illustrates a process by which the RMSS computer200can be used to monitor flights in progress for changes in risk factors. This is an optional feature and is not necessary for basic operation of the system10. When the aircraft230is equipped as described above with the two-way communication240and the flight begins410, the RMSS computer200is activated and the flight plan previously entered into the system is accessed. A signal from the aircraft causes the RMSS computer to start a new program510, load software and/or any other actions required to perform the necessary calculations.

The first action or find profile520is taken to find the stored flight plan in the watch profiles400. The records in this database contain the details of the flight plan as entered, calculated risk factors from the original flight plan, and references to any non static data used for the calculation such as weather reports.

With the watch profiles400located, the server computer200begins a monitoring function. When a report or a continuous stream of data is received from the monitored aircraft230, the computer200compares a compare profile530of the real-time flight data against the watch profiles400for any discrepancies, changes in the risk factors and changes in the non-static data. If there is sufficient a differential between the compare profile530and the flight data420received the computer200recalculates risk change540. If the risk change540calculation is sufficiently different from an exceed threshold550, the computer200sends an issue alert560signal to the user's computer100or the aircraft230.

Once the issue alert560signal exists, the RMSS computer updates the watch profiles400records with a set new threshold570for future comparisons. The watch profiles400now retains the original risk calculation. Also user preferences may be set to request alerts at any time where the current risk calculation exceeds a threshold over the last risk calculation or the original calculation. In certain cases as requested by the user110, the original threshold may be retained and the system will differentiate between risk calculates that exceed the new threshold570and the original threshold. Once the risk calculations are complete, the computer200checks for an end of flight condition or flight ended580. If the flight is completed, the process is now stopped590and is recorded. If the flight is still in progress, the process repeats itself and the compare profile530is started again.

InFIG. 4, a logic diagram is shown describing a process by which the RMSS computer200creates a risk report from a flight plan when a request is received from the user's computer100. When flight plan data910is received, the RMSS computer200creates an execution thread, loads software and performs other actions to begin a process start900. The first action is to provide a hash flight plan data920. Hashing operations are a well known computer science strategy wherein a piece of data is converted into a smaller, quickly searchable value for retrieving a record marked with a hash key. The program software can then hash the request data and find a matching entry in the database. In this case, the hashing function is an operation which converts the raw flight plan data into a single alphanumeric ‘hash key’ which is also used to index the records in the accident database440. The accident database440processes which records are matched by the hash-key and share common risk factors. The actual algorithm used for this process is generated by processes described below in this disclosure. One flight plan may generate one or more hash keys depending on the algorithm used and the optimal function of the RMSS computer200system. This hash is then used to search for a sampling of matching accident reports, which are selected into a randomized list. From this list, a number of reports are selected based on user preference for later display.

Once the hash key has been generated, the program creates a list of quantized risk match categories930, which match the flight plan. Each match category930describes a closed set of historical accidents based on a common searchable and identifiable factor, with quantized risk data970. The risk data970is based on historical accident information. The algorithm, which generates the match category930, is generated by a process described below.

With the list of categories compiled by the RMSS computer200a tally risk category data940is generated. This step provides a list of the risk factors. For each risk factor identified, a corresponding risk score stored in the quantized risk data970is read and used to rank each risk factor. An array is generated to hold and sort the risk factors. An education database980is then searched from get document references950. The references may be various documents, hyperlinks, or other educational materials which are specific to an identified risk factor. The number of materials selected is based on user preference and may reflect a history of materials viewed by the user110.

With the accident reports, risk categories, risk score and educational material, an encode report960is rendered as a computerized summary report. The report may be a human readable text document, a HTML document or XML encoded data which can rendered by a data-terminal. The report contains the summarized total risk score, and detailed categories presented by rank, accident reports and educational materials. The report is then downloaded to save profile390and watch profiles400. The program is then completed or done990.

InFIG. 5, a “boot-strap” process is generated to verify one or more algorithms used for a categorization of accident data and flight plans. The process is built progressively using human input to automated categorization of records. The first step requires human input and verification of the operation of the algorithm. The process begins with start1100and a selection of a statistically select subset A1110from the accident history database440. This data is then presented to the operator to create categorize records1120. Each record is categorized to provide a basis for training and/or selecting algorithms. Once this is complete the categorized records are used to generate candidate algorithm1130. This phase involves method steps described in logic diagramFIG. 6. Once a candidate algorithm1130has been selected, a second statistically valid subset of the accident data or select subset B1140is created. This subset is selected and executed to create an output set which is reviewed by the operator to check for validity. If the candidate algorithm is not an acceptable result1150then a new candidate is generated using the step of generate candidate1130. If the algorithm is acceptable, the process is complete and done1160.

InFIG. 6, two preferred methods are logic diagrammed for generating candidate algorithms. It should be mentioned that those skilled in the art of creating algorithms of this type will understand that there are other methodologies for creating or selecting an algorithm to perform the categorization of accident data as described herein.

The first method for generating a categorization algorithm is shown as Process A. This process uses a neural-network filtering function. For a neural network to operate it must be ‘trained’ by the presentation of inputs and expected outputs. While this system refers to the neural net in a manner consistent with a software calculated implementation, it should be understand that a neural net may be embodied through fixed hardware, programmable logic, software algorithms or other methods as required for speed, flexibility and other implementation considerations. The neural network is designed to accept the flight plan data, and output a list of applicable categories that match the flight plan.

When accident data is available for use in the training process, the RMSS computer200is engaged and the program starts with start600. The program selects a record from the set of data presented and processes the record into an input/output pair610, which is suitable for the structure of the neural net. The set of input/output610is presented to a set input/output on neural net620and then a training function is engaged to capture neural net changes630, which are then stored for servicing user requests. If more accident data is available for training then the process is repeated for more reports640. When all of the data has been applied, the process is completed and stops650.

A second method is illustrated as Process B. This method is for preparing the system10utilizing a genetic algorithm process to create a non-linear filtering algorithm. The process uses selection and recombination operations to progressively improve an arbitrarily coded algorithm until it meets some threshold of acceptability, with a single algorithm being selected from a pool of algorithms. Each of the algorithms is encoded as a ‘vector’, and each vector is executed to produce a result.

The selection process begins when a set of data is selected to be applied and the software loaded at start700. A set of pseudo-random vectors is generated to populate the initial vector space710. Each vector is executed with the step of calculate vector results720from the data set and produce a result set. The result set is examined to select best vectors730. If any vector meets the acceptable result750, then the process is complete or done760. If no vector is suitable, the best vectors are sent to recombine and mutate vectors740. This step produces a new pool of vectors and the process begins executing again at calculate vector results720.

InFIG. 7, a logic diagram is shown illustrating the process steps to create the quantized risk data970used for generating flight plan reports. The process begins at start1000. A set of historical accident data from accident database440is run initially and each time new accident data is added to the database as it becomes available. For each record, the system10uses one or more categorization record1010algorithms, as described above. The quantized risk data970is generated from build quantized entries1020. The records that contain the total number of accidents are selected by this category and the relationship between incidents, injuries and fatalities are compared. Also, records are compared that contain the total number of hours, operations, flights and operational data. From this data, a summary report with a percentage of chance risk of an accident per hour of flight operation is generated. The report is then completed and done1030.

While the invention has been particularly shown, described and illustrated in detail with reference to the preferred embodiments and modifications thereof, it should be understood by those skilled in the art that equivalent changes in form and detail may be made therein without departing from the true spirit and scope of the invention as claimed except as precluded by the prior art.