Patent Description:
Legacy aircraft cockpits include many electromechanical pushbutton switches that are user-activated and provide feedback through illumination and/or switch position. These switches may be momentary or alternate action and can control the operation state of one or more. Each switch has an electrical contact that may interface with a variety of aircraft systems. In order to enable optionally piloted vehicle (OPV) capabilities or workload reductions necessary for single pilot operation (SPO), there is a need for automating the operation of most or all of these switches by a vehicle management system.

Conventional automation methods for aircraft pushbutton switches utilize a fly-by-wire configuration approach, where the pilot operated switches interface with a computer that directly manages the electrical switch states of the aircraft systems. These configurations require invasive modification to the aircraft subsystem schematics, necessitating extensive functional and safety analysis of each change to the affected systems.

Modern fleets of aircraft cockpits are being converted to include autonomous features that often require highly invasive systems, new switches, new wiring, and data converters. The work involved with replacing legacy cockpits can make conversion and retrofitting cost prohibitive and cumbersome.

Furthermore, with the conversion, a pilot would be able to manually override the automated state of the switch. In order for rapid integration of OPV or SPO kits onto legacy aircraft cockpit designs, a need exists for a method of automating switches that is agnostic to the aircraft systems managed by each switch. Therefore, a need exists for automating switches that does not allow for the introduction of new failure modes within the aircraft systems.

<CIT> discloses a drive circuit interposed between a battery of a vehicle and a load of the vehicle and configured to make an on/off drive of a latching relay latched to an on-state and an off-state, respectively, by biasing and turning on a set coil energizing switch and a reset coil energizing switch by a set control signal or a reset control signal which are outputted from a controller. The drive circuit comprises set coil bias circuit configured to generate, from a switch signal observed when an ignition switch of the vehicle is in an on-state, a first alternative bias signal replacing the set control signal and to bias the set coil energizing switch by the first alternative bias signal and a reset coil bias circuit configured to generate, from the switch signal observed when the ignition switch is in an off-state, a second alternative bias signal replacing the reset control signal, the second alternative bias signal having an inverted signal level of the first alternative bias signal replacing the set control signal, and to bias the reset coil energizing switch by the second alternative bias signal.

The present invention relates to a cockpit switch device and method according to the appended claims.

According to at least one aspect, a cockpit switch device includes a pushbutton switch, a bi-stable relay and a toggle component. The pushbutton switch is configured to be manually actuated by a user into a command state. The bi-stable relay is controlled by input commands from the pushbutton switch and input commands from a processor, and is configured to control operation of one or more systems of an a aircraft. The toggle component is connected to the pushbutton switch, the processor and the bi-stable relay. The toggle component receives an input command signal from at least one of the pushbutton switch or the processor, and causes a state of the bi-stable relay to be flipped responsive to the input command signal from the at least one of the pushbutton switch or the processor.

In some implementations, the pushbutton switch can be a momentary pushbutton switch. The pushbutton switch can include a mechanical switch structured to: switch to a closed position when the pushbutton switch is actuated by the user, and switch back to an open position when the pushbutton switch is released by the user.

The bi-stable relay is a first bi-stable relay and the toggle component includes a non-latching relay and a second bi-stable relay. The non-latching relay can receive the input command signal from the at least one of the pushbutton switch or the processor, and cause a state of the second bi-stable relay to be flipped responsive to the input command signal from the at least one of the pushbutton switch or the processor. The second bi-stable relay can include one or more inductors. The non-latching relay can cause the state of the second bi-stable relay to be flipped by energizing the one or more inductors of the second bi-stable relay. The command signal can be a first command signal and the first bi-stable relay can include a pair of inductors. The second bi-stable relay can cause the state of the first bi-stable relay to be flipped by energizing a first inductor of the first bi-stable relay that is different than a second inductor of the first bi-stable relay that was previously energized responsive to a second command signal preceding the first command signal. The state of the second bi-stable relay does not change responsive to a failure or a power loss.

In some implementations, the state of the bi-stable relay does not change responsive to a failure or a power loss. The bi-stable relay can include a four-pole double throw switch. The bi-stable relay can transmit a feedback signal indicative of the state of the bi-stable relay to the processor.

According to at least one aspect, a method is described in claim <NUM>.

In some implementations, the method can further include switching, by the pushbutton switch, to a closed position when the pushbutton switch is actuated by a user, and switching back, by the pushbutton switch, to an open position when the pushbutton switch is released by the user.

The second bi-stable relay can include one or more inductors and causing the state of the second bi-stable relay to be flipped can include energizing the one or more inductors of the second bi-stable relay.

In some implementations, the command signal can be a first command signal and the first bi-stable relay can include a pair of inductors. Causing the state of the first bi-stable relay to be flipped includes energizing a first inductor of the first bi-stable relay that is different from a second inductor of the first bi-stable relay that was previously energized responsive to a second command signal preceding the first command signal. The state of the second bi-stable relay does not change responsive to a failure or a power loss.

In some implementations, the state of the bi-stable relay does not change responsive to a failure or a power loss. The bi-stable relay can include a four-pole double throw switch. The method can further include transmitting, by the bi-stable relay, a feedback signal indicative of the state of the bi-stable relay to the processor.

A detailed description of one or more embodiments of the disclosed systems, devices and methods for automation of aircraft switches is presented herein by way of exemplification and not limitation with reference to the Figures.

Referring to <FIG>, a block diagram illustrating a conventional cockpit pushbutton-based switching system <NUM> of an aircraft is shown. The pushbutton-based switching system <NUM> (also referred to hereinafter as a switch panel <NUM>) can include a pushbutton switch device <NUM>. In the example shown of <FIG>, the pushbutton switch device <NUM> includes a pushbutton <NUM> and a four-pole double-throw switch <NUM>. The four-pole double-throw switch <NUM> includes four poles 18a-18d, which are referred to hereinafter, either individually or collectively as pole(s) <NUM>. The poles 18a-18d are elctromechanical latch switches. With a four-pole double throw switch <NUM>, four independent circuits can be switched on or off with each throw of the pushbutton switch device <NUM>. In general, the switch <NUM> can include any number and/or any variety of poles <NUM>. The pushbutton <NUM> can include one or more lamps <NUM> to indicate the state of the switch <NUM>.

The switch panel <NUM> can be connected to external systems <NUM> of the aircraft. The external systems <NUM> can depend on the one or more pushbutton switch devices <NUM> to function. For instance, the pushbutton switch device <NUM> can be employed to enable or disable functions, operations and/or circuits of the external systems <NUM>. The switch panel <NUM> may be connected to the external systems <NUM> via a connector (not shown in <FIG>). In some implementations, the switch panel <NUM> can include a plurality of pushbutton switch devices <NUM>, toggle switches, diode blocks and/or other components that are interconnected and that are also connected to the external systems <NUM>. In other words, the switch panel <NUM> can be more complicated than the example shown in <FIG> in terms of the various switches and/or components that may form the switch panel <NUM> and in terms of the wiring or connections between such switches and/or components.

Retrofitting cockpits calls for aircraft or cockpit switches that allow for automatic as well as manual actuation. However, such retrofit may be costly and may introduce new failure modes of aircraft systems. In the current disclosure, systems and methods for automated or hybrid switches allow for automatic and manual actuation of aircraft or cockpit switches without introducing new failure modes. Also the systems and methods described herein allow for automated or hybrid switch devices that can be integrated in existing cockpit or aircraft switch panels without significant changes in the panels.

Referring now to <FIG>, a block diagram of an automated switch device <NUM> is shown, according to example embodiments. The automated switch device <NUM> can be used for the automation of cockpit switches. In brief overview, the automated switch device <NUM> can be an electro-mechanical assembly that comprises a momentary pushbutton switch <NUM>, a primary bi-stable relay <NUM> and a toggle component <NUM>. The automated switch device <NUM> can include an OR (or accumulator) component <NUM> configured to combine the output <NUM> of the momentary pushbutton switch <NUM> and a command signal <NUM> from a mission processor <NUM> (also referred to as a vehicle management computer). In other words, the primary or bi-stable relay <NUM> and the toggle component <NUM> can be controlled by the discrete command <NUM> from the mission processor <NUM> or by a manual operation (or the corresponding manual command signal <NUM> output by the momentary pushbutton switch <NUM>) that is applied by a pilot to the momentary pushbutton switch <NUM>. The automated switch device <NUM> can be viewed as hybrid switch device since it allows both manual and automatic actuation of the primary or bi-stable relay <NUM> and the toggle component <NUM>.

The momentary pushbutton switch <NUM> can include a mechanical switch <NUM> and one or more lamps <NUM> to indicate a state of the automated switch device <NUM> (or of the primary or bi-stable relay <NUM>). The momentary pushbutton switch <NUM> can be structured to be actuated or engaged by a user or a pilot into a command state. When the pilot or user presses or pushes the pushbutton of the momentary pushbutton switch <NUM>, the mechanical switch <NUM> goes into a closed state (or normally closed (NC) position). The term momentary means that the command state of the momentary pushbutton switch <NUM>, or that the mechanical switch <NUM> is in NC position, only when the pushbutton is pressed or pushed. As soon as the pushbutton is released, the mechanical switch <NUM> goes back to an open state (also referred to as normally open (NO) position). The momentary pushbutton switch <NUM> can output a manual command signal <NUM> when the mechanical switch <NUM> is in close position or when the pushbutton of the momentary pushbutton switch <NUM> is being pushed.

The mission processor <NUM> can generate command signals (e.g., pulses) <NUM> to control or change the state of the automated switch device <NUM> (or of the bi-stable relay <NUM>). The pushbutton switch <NUM> can also generate a command signal (e.g., a pulse) responsive to a manual operation (e.g., pushing a corresponding pushbutton by the user or pilot) to change or flip a state of the automated switch device <NUM> (or of the bi-stable relay <NUM>). The OR component <NUM> may not necessarily be an OR gate. The OR (or accumulator) component <NUM> can be any component designed to combine the command signal <NUM> generated by the pushbutton switch <NUM> and the command signal <NUM> generated by the mission processor <NUM>.

The automated (or hybrid) switch device <NUM> can include a primary or bi-stable relay <NUM> configured to control the operation of one or more systems <NUM> of the aircraft. The primary or bi-stable relay <NUM> replaces the four-pole double throw switch <NUM> of <FIG>. However, while the four-pole double throw switch <NUM> is a manually controlled switch, the primary or bi-stable relay <NUM> can be controlled manually via the pushbutton switch <NUM> and/or automatically by the mission processor <NUM>. Each new command from the pushbutton switch <NUM> and/or from the mission processor <NUM> causes the state of the primary or bi-stable relay <NUM> to flip. The primary or bi-stable relay <NUM> can then maintain its state until the next command (or command signal <NUM> and/or <NUM>) from the pushbutton switch <NUM> and/or the mission processor <NUM>. The state of the primary or bi-stable relay <NUM> would not change even in the case of a failure or power loss. The state of the primary or bi-stable relay <NUM> will change, however, responsive to a new command from the pushbutton switch <NUM> and/or the mission processor <NUM>.

The primary or bi-stable relay <NUM> can include a four-pole double throw switch. When the state of the primary or bi-stable relay <NUM> is flipped, the positions of all four poles of the four-pole double throw switch change at once. The automated switch device <NUM> or the primary or bi-stable relay <NUM> can transmit a feedback signal <NUM> to the mission processor <NUM> each time the state of the primary or bi-stable relay <NUM> flips. The feedback signal <NUM> allows the mission processor <NUM> to keep track of or maintain an indication of the current state of the automated switch device <NUM> or of the primary or bi-stable relay <NUM>. The mission processor <NUM> can check the current state of the primary or bi-stable relay <NUM> (or of the automated switch device <NUM>) before sending the command signal <NUM> to the toggle component <NUM>.

The toggle component <NUM> can be connected to the pushbutton switch <NUM>, the mission processor <NUM> and the bi-stable relay <NUM>. The toggle component <NUM> can receive the input command signal <NUM> and/or <NUM> from at least one of the pushbutton switch <NUM> or the mission processor <NUM>. Specifically, the toggle component <NUM> can receive an input signal that is a combination of both the command signal <NUM> and the command signal <NUM>. The toggle component <NUM> can cause a state of the primary or bi-stable relay <NUM> to be flipped responsive to the input command signal from the at least one of the pushbutton switch <NUM> or the mission processor <NUM>. As discussed in further detail below, the toggle component <NUM> can include a non-latching relay and a second bi-stable relay.

The automated switch device <NUM>, while illustrated in <FIG> to include a four-pole double throw switch, the primary or bi-stable relay <NUM> of the automated or hybrid switch device <NUM> can be equally adaptable to a <NUM>-pole double throw wherein three independent circuits are switched on or off with each throw (or flip of the state of) primary or bi-stable relay <NUM>. The automated switch module <NUM> is also equally adaptable to a <NUM>-pole double throw switch wherein two independent circuits can be switched on or off with each throw of the <NUM>-pole double throw switch, or a single-pole double throw wherein one circuit is switched with each throw of the single-pole double throw switch. In general, the automated switch module <NUM> is adaptable to an N-pole double throw switch where N independent circuits are switched with each throw of the N-pole double throw switch and where N is an integer.

Referring now to <FIG>, an example circuit implementation of the automated or hybrid switch device <NUM> is shown, in accordance with example embodiments. When the pushbutton of the momentary pushbutton switch <NUM> is activated (e.g., pressed) by the user or pilot, the mechanical switch <NUM> switches to a closed position to connect to the ground (e.g., at port <NUM> of the connector). While the pushbutton is activated, the mechanical switch <NUM> stays in closed position and switches back to the open position when the pushbutton is released. The mechanical switch <NUM> can have a single pole.

The node <NUM> represents an example implementation of the OR (or accumulator) component <NUM> of <FIG>. Specifically, at node <NUM>, the output link of the pushbutton switch <NUM> (e.g., carrying the output command signal <NUM>) and the link carrying the command signal <NUM> from the mission processor <NUM> are joined so that the command signal <NUM> represents a combination of the command signal <NUM>, if any, output by the pushbutton switch <NUM> and the command signal <NUM>, if any, output by the mission processor <NUM>. The command signal <NUM> can be fed as input to the toggle component <NUM>. The toggle component <NUM> can include a second bi-stable relay <NUM> and a non-latching switch <NUM>. The command signal <NUM> can be fed as input to both the non-latching switch <NUM> and the second bi-stable relay <NUM>. The non-latching relay <NUM> is also referred to herein as a pulsed relay <NUM>, and the second bi-stable relay <NUM> is referred to herein as a toggle relay <NUM>. While the relay <NUM> is non-latching (e.g., to goes back to a predefined position or state once the command is released), both relays <NUM> and <NUM> are latching relays (e.g., bi-stable) and they maintain their new state or position until a next input command signal is received.

The non-latching relay <NUM> can include an inductor <NUM> and one or more switches <NUM>. The command signal <NUM> can be fed to the inductor <NUM>. When the command (e.g., a command from the mission processor <NUM> or the push button switch <NUM>) is active, the inductor <NUM> causes the one or more switches <NUM> to be in open state (or open position). The one or more switches <NUM> return back to a closed state (or closed position) once the command is released. In other words, the one or more one or more switches <NUM> switch back to the closed state immediately after the command signal <NUM> is received.

The second bi-stable relay <NUM> can include one or more inductors <NUM> connected to the one or more switches <NUM> of the non-latching relay <NUM>, and a switch <NUM>. When the one or more switches <NUM> of the non-latching relay <NUM> are in closed state (or closed position), they cause the one or more inductors <NUM> of the second bi-stable relay <NUM> to be energized, which causes the switch <NUM> of the second bi-stable relay <NUM> to change its position or its state. The switch <NUM> of the second bi-stable relay <NUM> will maintain its state or position till the next command signal <NUM> is received from the pushbutton switch <NUM> or the mission processor <NUM>. The state of the second bi-stable relay will not change even in the case of a failure or power loss. The second bi-stable relay <NUM> can include a two-pole double throw switch, a single-pole double throw or an N-pole double throw switch.

The primary or bi-stable relay <NUM> can include a pair of inductor 134a and 134b and a four-pole double throw switch <NUM>. The primary or bi-stable relay <NUM> may include a single-pole double throw switch, a two-pole double throw switch, a three-pole double throw switch or an N-pole double throw switch. The inductors 134a and 134b can be connected to the switch <NUM> of the second bi-stable relay <NUM>. The command signal <NUM> can cause one of the inductors (e.g., inductor 134a) to be energized and cause the switch <NUM> of the second bi-stable relay <NUM> to flip its state or position so that when the next command signal is received it causes the other inductor (e.g., inductor 134b) of the primary or bi-stable relay <NUM> to be energized. In other words, the flipping of the position or state of the switch <NUM> of the second bi-stable relay <NUM> leads to alternation between the inductors 134a and 134b so that with each new command signal <NUM> a different inductor is energized compared to the one energized with the last command signal. If a last command signal <NUM> received resulted in energizing the inductor 134a, a new command signal <NUM> will energize the inductor 134b, and next command signal <NUM> that comes after the new signal will energize the inductor 134a and so on and so forth.

Energizing the inductor 134a causes the four-pole double throw switch <NUM> to flip to a corresponding position or state (e.g., closed position) and stay at that state or position until the next command signal <NUM> is received, while energizing the inductor 134b causes the four-pole double throw switch <NUM> to flip to a different position or state (e.g., open position) and stay at that state or position until the following command signal <NUM> is received. Therefore, the state of the switch <NUM> changes with each new command signal and is maintained until the next command signal <NUM> is received. The state or position of the switch <NUM> is maintained and does not change even in the case of failure or power loss. The bi-stable relay <NUM> can change state on the rising edge of the input command signal <NUM> (discrete command <NUM> or pilot input). The input command signal can be toggled by the additional relays <NUM> and <NUM> such that only one inductor of the bi-stable relay <NUM> is energized at any given time and the energized inductor is alternated between command signal inputs.

It is to be note that the implementations of the automated (or hybrid) switch device <NUM> shown in and discussed in relation to <FIG> is shown for illustrative purposes and should not be interpreted as limiting. For example, the number of inductors and or the number of switches in each of the relays <NUM>, <NUM> and/or <NUM> can be different than what's shown in <FIG>. Also, other implementations may employ, for example, capacitors instead of inductors or can make use of a combination of inductors and capacitors. In some implementations, the toggle component <NUM> may be designed and manufactured as a single component or a single circuit.

Referring now to <FIG> and <FIG>, a prototype of an automated (or hybrid) switch device <NUM> and a prototype of a switch panel <NUM> integrating the automated (or hybrid) switch device <NUM> are shown, according to example embodiments. <FIG> shows a prototype of the automated (or hybrid) switch device <NUM>. The relays <NUM>, <NUM> and <NUM> can be manufactured as separate components that are connected to the pushbutton switch <NUM>. The pushbutton switch <NUM> can be manually actuated via the pushbutton <NUM>.

<FIG> shows a prototype of a switch panel <NUM> integrating the automated (or hybrid) switch device <NUM>. The switch panel <NUM> can include a plurality of switches integrated therein. The switch panel <NUM> can include a plurality of pushbuttons <NUM> to manually activate the plurality of switches integrated in the switch panel <NUM>.

The relays <NUM>, <NUM>, <NUM> may be installed in a compact modular assembly along with or in close proximity to the pushbutton <NUM>, as seen in <FIG> and <FIG>, for example. This allows for installation within a similar physical volume occupied by the conventional pushbutton switch <NUM> shown in <FIG>. During installation, contacts from the pushbutton switch <NUM> can be connected to the relays <NUM> and <NUM>, which are connected to the primary or bi-stable relay <NUM>. The prototypes shown in <FIG> and <FIG>, depict an efficient upgrade and automation of existing manual cockpit switches that does not require modification to cockpit switch panels.

The modification of existing manual aircraft switch devices <NUM> to the automated (or hybrid) switch device <NUM> can occurs at the location of the pushbutton switch <NUM> behind a panel switch <NUM>, for example, as seen in <FIG>. With this configuration, once the panel switch <NUM> has been retrofit to include the automated or hybrid switch device <NUM>, the resulting appearance is aesthetically consistent with a existing systems. As seen in <FIG>, the automation-enabling components, e.g., the relays <NUM>, <NUM> and <NUM>, are installed on the side of the pushbutton switch <NUM> having the most available space. For this retrofitting, the aircraft wire harness from a conventional pushbutton switch (as shown in <FIG>) is transferred to the primary bi-stable relay (as shown in <FIG> and <FIG>) having identical switch contact specifications.

As shown in <FIG>, the pushbutton switch <NUM> of the automated (or hybrid) switch device <NUM> is engaged by a single press operation. The automated (or hybrid) switch device <NUM> can cause display of visual feedback to the pilot of the state of the automated (or hybrid) switch device <NUM> via one of the lamps <NUM>. The automated (or hybrid) switch device <NUM> can also cause display of visual feedback to the pilot indicative of the fault status of the automated (or hybrid) switch device <NUM> via another lamp of the lamps <NUM>. The visual feedback displayed by the pushbutton <NUM>, as seen in <FIG>, can be similar to that of displayed by existing pushbutton switch devices <NUM> that the automated (or hybrid) switch device <NUM> is replacing.

The pushbutton switch <NUM> can display via the lamps <NUM> the state of the primary bi-stable relay <NUM> in the cap of pushbutton <NUM>. The pilot is able to manually toggle the state of the primary bi-stable relay <NUM> by engaging the pushbutton <NUM> and lamps <NUM> keep the pilot aware of the current state and any fault of the automated (or hybrid) switch device <NUM>. The switch device <NUM> then transmits electrical commands to the aircraft system to perform the selected operation. In the event of power loss or failure, the automated (or hybrid) switch device <NUM> maintains its last commanded state such that new failure modes are not introduced within the aircraft systems. It is the bi-stable nature of the primary relay <NUM> and the toggle relay <NUM> that causes the automated (or hybrid) switch device <NUM> to remain in the last commanded state. The non-latching relay <NUM> is activated when the pushbutton switch <NUM> is actuated or when the processor <NUM> transmits an automated toggle command <NUM>. With this configuration, the pilot is capable of overriding the automated toggle command <NUM> provided by the processor <NUM> by actuating the pushbutton switch <NUM>. The input toggling components <NUM><NUM> utilize the momentary inputs from the pilot and/or the processor <NUM> in order to toggle the state of the bi-stable relay <NUM>.

<FIG> show the state of the automated (or hybrid) switch device <NUM> in normal pilot operation or when a pilot chooses to override the state of the mission processor selection via a single input. At any time during operation, the pilot may override the command via single press of the momentary pushbutton <NUM>. The automated (or hybrid) switch device <NUM> does not introduce new failure modes because the bi-stable relay contacts can be wired or connected to the external systems <NUM> in a similar manner as the contacts of the pushbutton switch device <NUM> of <FIG> such that the bi-stable relay <NUM> of the automated (or hybrid) switch device <NUM> replaces the operation of the pushbutton switch device <NUM>.

As shown in <FIG>, if the pushbutton <NUM> communicates (e.g., via lamps <NUM>) that the state of the command is "OFF", then the pilot employs a single press to change or toggle the state from "OFF" to "RUN". Similarly, as shown in <FIG>, if the pushbutton <NUM> communicates that the state of the command is "RUN", then the pilot employs a single press to change or toggle the state from "RUN" to "OFF".

The automated (or hybrid) switch device <NUM> is operable by either pilot or the mission processor <NUM>. In the instance where the automated (or hybrid) switch device <NUM> is operated by the mission processor <NUM>, the pilot shall be capable of overriding the processor-commanded state via a single input. The mission processor <NUM> is capable of detecting pilot override and would then accept the command state selected by the pilot.

As seen in <FIG>, the state of the automated (or hybrid) switch device <NUM> is shown in processor control. A momentary electrical pulse is used to enable and toggle the state of the automated (or hybrid) switch device <NUM>. As shown in <FIG>, if the pushbutton <NUM> communicates that the state of the command is "RUN", then the processor <NUM> switch control employs a momentary electrical pulse to toggle the state of the automated (or hybrid) switch device <NUM> from "RUN" to "OFF". Similarly, as shown in <FIG>, if the pushbutton <NUM> communicates that the state of the command is "OFF", then the processor switch control employs a momentary electrical pulse to toggle the electrical state of the automated (or hybrid) switch device <NUM> from "OFF" to "RUN".

In either instance, the same input (e.g., single pilot press) is required for both normal operation (<FIG>) and to override the processor command (<FIG>). In either instance, as the switch panel remains, the pilot can manually operate the pushbutton <NUM>.

Referring now to <FIG>, a flowchart illustrating an automated (or hybrid) switching method <NUM> is shown, in accordance with example embodiments. The method <NUM> can include receiving, by a toggle component connected to a pushbutton switch, a processor and a bi-stable relay, an input command signal from at least one of the pushbutton switch or the processor (STEP <NUM>). As discussed above with regard to <FIG> and <FIG>, the toggle component <NUM> can receive a command signal either from the pushbutton switch <NUM> or from the mission processor <NUM> to toggle the state of the automated or hybrid switch device <NUM>.

The method <NUM> can include causing, by the toggle component <NUM>, a state of the bi-stable relay <NUM> to be flipped responsive to the input command signal from the at least one of the pushbutton switch or the processor (STEP <NUM>). As discussed above with regard to <FIG> and <FIG>, the input command signal <NUM> (which represents a command <NUM> signal from the pushbutton switch <NUM> or a command signal <NUM> from the mission processor <NUM>) can cause a state of the toggle component <NUM> (e.g., a state of the toggle relay <NUM>) to flip, which in turn causes a flip in the state of the primary or bi-stable relay <NUM>. For instance, the toggle component <NUM> can include the non-latching relay <NUM> and the second bi-stable relay <NUM>. The method <NUM> can include receiving, by the non-latching switch <NUM>, the input command signal <NUM> from the at least one of the pushbutton switch <NUM> or the processor <NUM>, and causing, by the non-latching switch <NUM>, a state of the second bi-stable relay to be flipped responsive to the input command signal <NUM> from the at least one of the pushbutton switch or the processor. Causing the state of the second bi-stable relay to be flipped can include energizing the one or more inductors <NUM> of the second bi-stable relay <NUM>.

Causing the state of the first bi-stable relay <NUM> to be flipped can include energizing a first inductor (e.g., inductor 134a) of the bi-stable relay <NUM> that is different from a second inductor (e.g., inductor 134b) of the bi-stable relay <NUM> that was previously energized responsive to a second command signal preceding the first command signal. The state of the second bi-stable relay <NUM> does not change responsive to a failure or a power loss and is maintained until the next command signal is received. The change in the state of the second bi-stable relay <NUM> with each new command signal results in alternately energizing a different inductor of the bi-stable relay <NUM> with each new command. Each inductor 134a or 134b of the bi-stable relay <NUM> when energized flips the state of the bi-stable relay <NUM>.

The method <NUM> can include maintaining, by the bi-stable relay <NUM>, the state of the bi-stable relay until a subsequent input command signal is received by the toggle component <NUM> from the at least one of the pushbutton switch <NUM> or the processor <NUM> (STEP <NUM>). The energized inductor 134a or 134b of the bi-stable array <NUM> can cause the new state of the bi-stable array <NUM> to be maintained until the next command signal is received. The bi-stable relay can be connected to and can control operation of one or more systems of an aircraft.

In some implementations, the pushbutton switch <NUM> can be a momentary pushbutton switch and the method <NUM> can further include switching, by the pushbutton switch <NUM>, to a closed position when the pushbutton switch is actuated by a user, and switching back, by the pushbutton switch <NUM>, to an open position when the pushbutton switch is released by the user. In some implementations, the state of the bi-stable relay does not change responsive to a failure or a power loss. The bi-stable relay <NUM> can include a four-pole double throw switch. The method <NUM> can further include transmitting, by the bi-stable relay <NUM>, a feedback signal <NUM> indicative of the state of the bi-stable relay <NUM> to the processor <NUM>.

Claim 1:
A cockpit switch device comprising:
a pushbutton switch (<NUM>) configured to be manually actuated by a user into a command state;
a bi-stable relay (<NUM>) controlled by input commands from the pushbutton switch and input commands from a processor (<NUM>) the bi-stable relay configured to control operation of one or more aircraft systems; and
a toggle component (<NUM>) connected to the pushbutton switch, the processor and the bi-stable relay, the toggle component configured to:
receive an input command signal from at least one of the pushbutton switch or the processor; and
cause a state of the bi-stable relay to be flipped responsive to the input command signal from the at least one of the pushbutton switch or the processor,
wherein the bi-stable relay is a first bi-stable relay and the toggle component includes a non-latching relay and a second bi-stable relay (<NUM>), wherein the non-latching relay is configured to:
receive the input command signal from the at least one of the pushbutton switch or the processor; and
cause a state of the second bi-stable relay to be flipped responsive to the input command signal from the at least one of the pushbutton switch or the processor.