METHOD FOR INTERFACING PASSENGER ELECTRONIC DEVICES WITH PASSENGER CONTROLLABLE FUNCTIONS AND AIRCRAFT CABIN NETWORK

A method for interfacing passenger electronic devices with passenger controllable functions involves transmitting, by a PED, a seat-based identification token to a cabin server of a passenger aircraft; requesting, by the cabin server in response to the transmission of the seat-based identification token, completion of a challenge presented by the cabin server by the user of the PED; upon successfully responding to the challenge, admitting, by the cabin server, access for the user of the PED to passenger controllable functions belonging to the passenger seat associated with the seat-based identification token transmitted by the PED; and accessing, by the user of the PED, the passenger controllable functions via remote control of the PED.

CROSS-REFERENCES TO RELATED APPLICATIONS

This application claims the benefit of the European patent application No. 23158976.3 filed on Feb. 28, 2023, the entire disclosures of which are incorporated herein by way of reference.

FIELD OF THE INVENTION

The invention relates to methods for interfacing passenger electronic devices (PEDs) with passenger controllable functions, an aircraft cabin network for providing access of PEDs to passenger controllable functions and a passenger aircraft having such an aircraft cabin network.

BACKGROUND OF THE INVENTION

Personal electronic devices (PEDs) are nowadays ubiquitous. These PEDs are normally carried by the user wherever he travels, even on board aircraft. Considering the manifold communication interfaces of such PEDs it is desirable to provide passengers on board an aircraft with access to multiple services, for example an in-flight entertainment (IFE) system or a control network for controlling electronic passenger seat functions or passenger service units (PSU) including reading lights control, loudspeaker control, assistance call control and/or air condition vent control via the central wireless backbone.

Mobile content distribution networks on board of aircraft allow extending comfort amenities and services such as internet access, on-board shopping opportunities and access to in-flight entertainment (IFE) systems. In general, aircraft cabin networks enable a passenger to interface with passenger accessible cabin functions, increasing the comfort and content for the passenger, thereby adding a lot of value for an airline. For example, the document God, R; Hintze, H.: “Drahtlose Kommunikation in der Flugzeugkabine für effiziente Arbeitsabläufe und Passagierdienstleistungen”, MKWI 2010 Multikonferenz Wirtschaftsinformatik, Göttingen, February 23-25, 2010, p. 2361-2374 discloses the use of non-contact aircraft cabin interfaces for network access of electronic devices employing smart card, RFID and near field communication (NFC) technology.

One of the challenges associated with managing network access to networks on board an aircraft pertains to the wide range of PEDs requesting access which are a priori not always known to the network. A network access control system therefore needs to employ elaborate access control schemes to be able to reliably identify and authenticate PEDs in order to selectively authorize and approve operations of the PEDs in the network and hold the authenticated user of the PEDs accountable for such operations.

Common measures for identification and authentication of an electronic device re-questing access to a network element involve the exchange of authentication codes between the device and the network element and the subsequent validation of the presented codes. Such codes may, for example, include knowledge-based passphrases (for example passwords, PIN codes or pre-assigned user information such as ticket or customer numbers), pre-validated information inherently tied to the device or tokens and fobs physically located in the vicinity of the device (for example a MAC address of the device or a digital authenticity certificate for the device), or inherent user-based coded parameters (for example, biometric user identification information such as fingerprints, retina patterns, DNA information or behavioral characteristics).

Several different approaches for access control procedures of electronic devices to network elements of vehicles are known in the prior art: Document DE 10 2012 203 032 A1 discloses an authentication method for an electronic device of an aircraft passenger based on flight specific pre-assigned authentication data. Document US 2014/0187149 A1 discloses the use of dynamically created uniform resources identifiers to redirect an electronic device to a remote authentication system for verifying access credentials of the electronic device to access a network element of a vehicle. Document WO 2015/163774 A1 discloses a multi-factor authentication scheme for access control of a user to a system based on acoustically convolved audio pass-phrases of different origin. EP 3 296 205 B1 discloses methods for controlling and connecting to cabin services within an aircraft, particularly passenger cabin services. EP 3 182 667 A1 discloses methods for wireless network access control on the basis of acoustic challenges in an aircraft.

SUMMARY OF THE INVENTION

One of the objects of the invention is to find solutions for more reliably providing connectivity of passengers' personal electronic devices to passenger accessible control functions in a passenger aircraft.

According to a first aspect of the invention, a method for interfacing passenger electronic devices (PEDs) with passenger controllable functions includes transmitting, by a PED, a seat-based identification token to a cabin server of a passenger aircraft; requesting, by the cabin server in response to the transmission of the seat-based identification token, completion of a challenge presented by the cabin server by the user of the PED; upon successfully responding to the challenge, admitting, by the cabin server, access for the user of the PED to passenger controllable functions belonging to the passenger seat associated with the seat-based identification token transmitted by the PED; and accessing, by the user of the PED, the passenger controllable functions via remote control of the PED.

According to a second aspect of the invention, an aircraft cabin network comprises a cabin server configured to, in response to the transmission of a seat-based identification token by a personal electronic device, PED, of a passenger of the passenger aircraft, request completion of a challenge presented by the cabin server by the user of the PED, to check whether the user of the PED successfully responded to the challenge and to, upon successfully responding to the challenge, admit access for the user of the PED to one of the plurality of passenger controllable functions belonging to the passenger seat associated with the seat-based identification token transmitted by the PED.

According to a third aspect of the invention, a passenger aircraft comprises a plurality of passenger seats uniquely identifiable via seat-based identification tokens, such as for example barcodes, QR codes, pictographic or alphanumeric identification representations, or invisible codes or patterns embedded in smart fabrics or dyes, and an aircraft cabin network according to the second aspect of the invention.

An important idea of the invention involves introducing a multi-factor authentication mechanism that enables an aircraft cabin network to uniquely and more reliably identify electronic devices of individual passengers who want to interact with aircraft cabin core systems in order to gain remote access to passenger controllable functions, for example passenger seat control functions. The passenger may connect with his/her own device to the respective aircraft systems using either native application software on the device or web-based application programming interfaces (APIs) that provide publicly exposed web endpoints to a pre-defined request-response messaging system.

One of the advantages of using multi-factor authentication over single-factor authentication is that the risk of maliciously motivated or unintended faulty pairing and therefore unwarranted remote controlling of aircraft cabin systems by unauthorized devices may be significantly reduced.

According to some embodiments of the first aspect of the invention, the method may further include determining, by the cabin server, whether the response of the PED has been successful on the basis of verification information retrieved by the cabin server from a ground-based server. In several embodiments thereof, the verification information includes at least one of a passenger name, a QR code bound to the boarding pass, a barcode bound to the boarding pass, a challenge code from an e-ticket, and a code sent via short messaging system to the PED. Such verification information may be transmitted by the ground-based server to the cabin server prior to boarding of the passenger aircraft of the user of the PED.

According to some further embodiments of the first aspect of the invention, the seat-based identification token may include at least one of a printed barcode, a QR code, pictographic or alphanumeric identification representations, or invisible codes or patterns embedded in smart fabrics or dyes.

According to some further embodiments of the first aspect of the invention, the challenge presented by the cabin server may include at least one of an individual code displayed on a passenger service unit associated with the passenger seat, an individual code provided via a near-field communication interface at the passenger seat, and an individual code displayed on an in-seat display of the passenger seat.

According to some further embodiments of the first aspect of the invention, the passenger controllable functions may include at least one of wireless local area network access points, in-flight entertainment system components such as a media display, loudspeakers and headphone interfaces, electric power supply components such as USB ports and power outlet sockets, seat control components for controlling electronic passenger seat functions such as electrical actuators for changing the seat configuration, and overhead passenger service units, PSU, including reading lights control, loudspeaker control, assistance call control and/or air condition vent control.

According to some further embodiments of the first aspect of the invention, the step of accessing, by the user of the PED, the passenger controllable functions may be performed using a web application or a native application, for example being connected to one of a plurality of web sockets for interfacing with the web applications of the PEDs of a web server implemented in the cabin server.

According to some embodiments of the second aspect of the invention, the cabin server may further be configured to determine whether the response of the PED has been successful on the basis of verification information retrieved by the cabin server from a ground-based server. In several embodiments thereof, the verification information includes at least one of a passenger name, a QR code bound to the boarding pass, a barcode bound to the boarding pass, a challenge code from an e-ticket, and a code sent via short messaging system to the PED.

According to some further embodiments of the second aspect of the invention, the seat-based identification token may include at least one of a printed barcode, a QR code, pictographic or alphanumeric identification representations, or invisible codes or patterns embedded in smart fabrics or dyes.

According to some further embodiments of the second aspect of the invention, the aircraft cabin network further comprises a number of passenger controllable functions belonging to a plurality of passenger seats in a passenger aircraft each. The passenger controllable functions may include at least one of wireless local area network access points, in-flight entertainment system components such as a media display, loudspeakers and headphone interfaces, electric power supply components such as USB ports and power outlet sockets, seat control components for controlling electronic passenger seat functions such as electrical actuators for changing the seat configuration, and overhead passenger service units, PSU, including reading lights control, loudspeaker control, assistance call control and/or air condition vent control.

The above configurations and developments can be combined with one another in any desired manner, if useful. Further possible configurations, developments and implementations of the invention also comprise combinations, not explicitly mentioned, of features of the invention described above or below with respect to the exemplary embodiments. In particular, in this case, a person skilled in the art will also add individual aspects as improvements or additions to the respective basic form of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

The accompanying figures are intended to impart a further understanding of the embodiments of the invention. They illustrate embodiments and are used, in conjunction with the description, to explain principles and concepts of the invention. Other embodiments and many of the advantages mentioned are evident in view of the drawings. The elements in the drawings are not necessarily shown in a manner true to scale with respect to one another. Direction-indicating terminology, for instance “at the top”, “at the bottom”, “on the left”, “on the right”, “above”, “below”, “horizontal”, “vertical”, “at the front”, “at the rear” and similar statements are used merely for explanatory purposes and are not used to restrict the generality to specific configurations as shown in the figures.

In the figures of the drawing, identical, functionally identical and identically acting elements, features and components are each provided with the same reference signs, unless stated otherwise.

Personal electronic devices (PEDs) in the sense of this invention comprise all electronic devices which can be used for entertainment, communication and/or office purposes. For example, PEDs may comprise all types of terminals such as laptops, mobile telephones, smartphones, handheld devices, palmtops, tablet PCs, GPS devices, navigation devices, audio devices such as MP3players, portable DVD or Bluray® players or digital cameras.

FIG.1schematically illustrates a functional diagram of an aircraft cabin network10. The aircraft network cabin10may be installed in an aircraft, for example a passenger aircraft20as illustrated inFIG.3. The aircraft cabin network10may, for example, be a microprocessor controlled data bus system for the control and operation of cabin core functions. The aircraft cabin network10may include components that allow a passenger to interface with cabin core functions such as, for example, in-flight entertainment (IFE) system components such as a media display, loudspeakers and headphone interfaces, electric power supply components such as USB ports and power outlet sockets, seat control components for controlling electronic passenger seat functions such as electrical actuators for changing the seat configuration, or overhead passenger service units (PSU) including reading lights control, loudspeaker control, assistance call control and/or air condition vent control via a central wireless backbone.

The passenger seats17may be installed in a passenger aircraft, for instance the aircraft20schematically illustrated inFIG.3. In this case, a passenger aircraft A may comprise different passenger seat assemblies including various passenger seats17, which passenger seat assemblies are fixedly or permanently installed in a passenger cabin, for example, using one or more seat fastening rails running in the passenger cabin floor.

The passenger seats17may have, for example, a seating surface and a backrest hinged to the seating surface. In this case, the passenger seats may be arranged beside one another, for example, that is to say, with seating surfaces adjoining one another laterally, with the result that a plurality of passengers may simultaneously each occupy one passenger seat17in a passenger seat assembly.

Each passenger seat17is equipped with or otherwise tied to one or more cabin control function modules12, for example in-flight entertainment (IFE) system components such as a media display, loudspeakers and headphone interfaces, electric power supply components such as USB ports and power outlet sockets, seat control components for controlling electronic passenger seat functions such as electrical actuators for changing the seat configuration, or overhead passenger service units (PSU) including reading lights control, loudspeaker control, assistance call control and/or air condition vent control. The cabin control function modules12may be integrated into a single physical module such as a PSU or may be dispersed in the vicinity of the passenger seat, only collectively to be referred to as cabin control function modules12.

Passengers on an aircraft may bring personal electronic devices (PEDs) on board of the aircraft. Exemplarily, two PEDs1are shown inFIG.1, however, any number of PEDs1may be used in conjunction with the aircraft cabin network10, depending on the number of passengers, the type of aircraft and the corresponding number of passengers seats17in the respective aircraft. Those PEDs1may be used as main interface to aircraft cabin systems for remote control of passenger controllable functions. As the specific PEDs are in most cases not known to the aircraft cabin network10in advance, the PEDs1usually need to be connected to the aircraft cabin network10after boarding of the passengers.

A single information item, such as, for example, the seat number, may easily be spoofed by a passenger passing by a seat that is not attributed to him/her on this particular flight. Alternatively, passengers may mistakenly use wrong seat information items while trying to connect the aircraft cabin network10. Thus, remote control of passenger seat control functions may be erroneously assigned to unauthorized PEDs which may cause annoyance to other passengers and may lower the reputation of the airline. Additionally, unauthorized or erroneous remote control of assistance calls may lead to additional workload for the aircraft crew members and potential safety issues. Thus, the implementation of a multi-factor authentication mechanism reduces the probability of information spoofing and erroneous or unintended faulty device pairing to passenger seats.

FIG.2shows a schematic signal flow diagram S of a procedure for granting access of a passenger's personal electronic device (PED) to components of an aircraft cabin network, such as, for example, the aircraft cabin network10as depicted in and explained in conjunction withFIG.1. The procedure may be employed to identify and authenticate a PED of a passenger who requests access to an aircraft cabin network in order to be able to interface with seat-specific control functions at or in the vicinity of his/her passenger seat, for example in a passenger aircraft20as depicted in and explained in conjunction withFIG.3. The signal flow diagram S may be, in particular, a possible basis for the steps of the method M as depicted in and explained in conjunction withFIG.4.

A number of PEDs1—of which two are exemplarily depicted inFIG.1—having a processing unit2, a wireless communication module3and an application software4, such as a native application or a web application, are trying to gain access to seat-specific control functions, such as, for example, the passenger seat control functions12illustrated inFIG.1. The user of a PED1first gathers information Tl from a seat-based identification token associated with a passenger seat17which he is assigned to in the passenger aircraft20. The seat-based identification token may, for example, include at least one of a printed barcode, a QR code, pictographic or alphanumeric identification representation, or invisible codes or patterns embedded in smart fabrics or dyes used for the parts of the seats or decorative elements in the vicinity of the seats. Such seat-based identification tokens may be static information attached to a label plate or printed on a part of the passenger seat17.

Referring back toFIG.2, in a signal flow S1, the PED1transmits the seat-based identification token to the cabin server14via a wireless communication channel W. In response thereto, the cabin server14requests in a signal flow S2the completion of a challenge from the user of the PED1. Such a challenge may involve requesting providing a passenger name, a QR code bound to the boarding pass, a barcode bound to the boarding pass, a challenge code from an e-ticket, or a code sent via short messaging system to the PED1. Alternatively, the challenge presented by the cabin server14may include displaying an individual code on a passenger service unit associated with the passenger seat17for the user of the PED1to read and transmit back to the cabin server14. In other cases, an individual code may be provided via a near-field communication (NFC) interface19at the passenger seat17so that the user of the PED1may initiate a seat-specific pairing event T2with the NFC function of his/her PED1. Finally, the cabin server14may instruct an in-flight entertainment system of the aircraft cabin network10to display an individual code on an in-seat display of the respective passenger seat17for the user of the PED1to read and transmit back to the cabin server14.

The response to the challenge is sent by the PED1back to the cabin server14in a signal flow S3. In a connected mode for the PED1, the completion of the challenge may be double-checked by the cabin server14using verification information R2retrieved by the cabin server14from a ground-based server18. The ground-based server18may be outside the aircraft area A and may be located on the ground G, for example at an airline facility or at an airport. To that end, the cabin server14may poll the ground-based server18in a signal flow S3awhich returns a signal flow S3bsignaling to the cabin server14whether the response of the PED1has been successful. Alternatively to the polling steps S3aand S3b,the verification information may already have been transmitted by the ground-based server18to the cabin server14prior to boarding of the passenger aircraft20of the user of the PED1, for example in a batch including all passengers that are to be boarding the particular passenger aircraft20.

If the cabin server14is not able to double-check the response to the challenge with externally verified verification information, the PED1may be put in a local mode. The local mode may have more severe restrictions in the access to the passenger controllable functions12than the connected mode. In any case, the status R1of the PED1is set in the cabin server14as verified.

The cabin server14then instructs a cabin control system11in a signal flow S4to provide remote access of the PED1to passenger controllable functions12. The cabin control system11, in turn, transmits a signal flow S5to the respective passenger seat control module which turns its status R3to access-ready for the respective PED1. The cabin server14then notifies the PED1in a signal flow S6of the access-ready status R4so that the user of the PED1is then able to access the passenger controllable functions12via remote control of the PED1in one or more signal flows S7.

FIG.4shows a flowchart of method steps of a method M for interfacing passenger electronic devices (PEDs) with passenger controllable functions in a passenger aircraft, for example the passenger aircraft20ofFIG.3. The method M may be carried out as explained and shown in connection with the aircraft cabin network10ofFIG.1and the concomitant signal flow diagram S ofFIG.2.

In a first step M1, a PED1transmits a seat-based identification token to a cabin server14of a passenger aircraft20. The seat-based identification token may, for example, include at least one of a printed barcode, a QR code, a pictographic or alphanumeric identification representation, or invisible codes or patterns embedded in smart fabrics or dyes. Such seat-based identification tokens may be static information attached to a label plate or printed on a part of the passenger seat17.

In a second step M2, the cabin server14requests from the user of the PED1, in response to the transmission of the seat-based identification token, the completion of a challenge. Such a challenge may involve requesting providing a passenger name, a QR code bound to the boarding pass, a barcode bound to the boarding pass, a challenge code from an e-ticket, of a code sent via short messaging system to the PED1. In a connected mode for the PED1, the completion of the challenge may be double-checked by the cabin server14using verification information retrieved by the cabin server14from a ground-based server18. This optional third step M3involves determining, by the cabin server14, whether the response of the PED1has been successful on the basis of the verification information retrieved by the cabin server14from a ground-based server18. The verification information may, in particular, be transmitted by the ground-based server18to the cabin server14prior to boarding of the passenger aircraft20of the user of the PED1.

Alternatively, the PED1may be put in a local mode, in which the cabin server14is not able to double-check the response to the challenge with externally verified verification information. The local mode may have more severe restrictions in the access to the passenger controllable functions12than the connected mode. For example, the challenge presented by the cabin server14may include displaying an individual code on a passenger service unit associated with the passenger seat17for the user of the PED1to read and transmit back to the cabin server14. In other cases, an individual code may be provided via a near-field communication (NFC) interface at the passenger seat17so that the user of the PED1may initiate a seat-specific pairing event with the NFC function of his/her PED1. Finally, the cabin server14may instruct an in-flight entertainment system of the aircraft cabin network10to display an individual code on an in-seat display of the respective passenger seat17for the user of the PED1to read and transmit back to the cabin server14.

Upon successfully responding to the challenge, the cabin server14admits, in a fourth step M4, access for the user of the PED1to passenger seat control functions12belonging to the passenger seat17associated with the seat-based identification token transmitted by the PED1. The user of the PED1is then able, in a fifth step M5to access the passenger controllable functions12via remote control of the PED1, for example using a native application or a web application that interfaces with one of a plurality of web sockets16of a web server15implemented in the cabin server14. The passenger controllable functions12that the user of the PED1is able to access may include in-flight entertainment system components such as a media display, loudspeakers and headphone interfaces, electric power supply components such as USB ports and power outlet sockets, seat control components for controlling electronic passenger seat functions such as electrical actuators for changing the seat configuration, and overhead passenger service units, PSU, including reading lights control, loudspeaker control, assistance call control and/or air condition vent control via a central wireless backbone.

In the detailed description above, various features have been combined in one or more examples in order to improve the rigorousness of the illustration. However, it should be clear in this case that the above description is of a merely illustrative but in no way restrictive nature. It is used to cover all alternatives, modifications and equivalents of the various features and exemplary embodiments. Many other examples will be immediately and directly clear to a person skilled in the art on the basis of his technical knowledge in view of the above description.

The exemplary embodiments were selected and described in order to be able to present the principles on which the invention is based and their possible uses in practice in the best possible manner. As a result, experts can optimally modify and use the invention and its various exemplary embodiments with regard to the intended purpose. In the claims and the description, the terms “containing” and “having” are used as neutral linguistic concepts for the corresponding term “comprising”.