Patent Description:
A traditional toggle switch may be guarded by a "red guard" spring loaded to remain in each of a covered position enclosing the toggle switch and an open position once opened. A traditional press button switch may also be similarly guarded by a hinged cover removable by the pilot. Some hinged covers may be clear for visualization of the switch underneath while some covers remain opaque.

As flight deck technology evolves to include a reduced number of physical switches and more touchscreen-based functionality, the risk of inadvertent activation has the potential to increase. Without protection, an unguarded touchscreen switch may be easily actuated. Additionally, a human factors consideration may include guarded switches typically used during abnormal or emergency situations. In these emergency situations, familiarity, speed, and ease of operation may be highly desired.

Therefore, a need remains for a system and related method which may overcome these limitations and provide a novel solution to presenting a virtual guarded switch (VGS) via touchscreen enabling pilot action to remove the virtual guard and actuate a system associated with the VGS. <CIT> describes methods and systems using a touch screen. <CIT> describes a method for making secure a control on a visualization device with a tactile surface. <CIT> describes three state icons for operation. <CIT> describes a system and method for guarding emergency and critical touch targets. <CIT> describes a system and method for reducing the probability of accidental activation of control functions of a touch screen.

In one aspect, embodiments of the inventive concepts disclosed herein are directed to a system for actuation of an aircraft system via a virtual guarded switch (VGS) according to independent claim <NUM>.

A further embodiment of the inventive concepts disclosed herein may include a method for actuation of a system via a virtual guarded switch (VGS) according to claim <NUM>.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not necessarily restrictive of the inventive concepts as claimed. The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments of the inventive concepts and together with the general description, serve to explain the principles of the inventive concepts disclosed herein.

Implementations of the inventive concepts disclosed herein may be better understood when consideration is given to the following detailed description, which is given by way of example only, thereof. In the drawings:.

This is done merely for convenience and to give a general sense of the inventive concepts, thus "a" and "an" are intended to include one or at least one and the singular also includes the plural unless it is obvious that it is meant otherwise.

Broadly, embodiments of the inventive concepts disclosed herein are directed to a system and method for actuating a critical aircraft system via a virtual guarded switch includes a touchscreen-based Virtual Guarded Switch (VGS) used to replace physical guarded switches. Aircraft systems display the VGS on traditional touch screen displays either via pilot selection or automatically as a result of an abnormal condition. The VGS maintains protection against inadvertent touchscreen activation while remaining familiar, quick, and easy to understand and use.

Referring now to <FIG>, a diagram of a system for actuation of an aircraft system via a virtual guarded switch (VGS) in accordance with an embodiment of the inventive concepts disclosed herein is shown. Generally, the system for actuation of an aircraft system via a VGS <NUM> may comprise an aircraft flight deck touch screen display <NUM> onboard an aircraft with a controller <NUM> operatively coupled with the aircraft flight deck touch screen display <NUM>. In some configurations, a display manager <NUM> may function to format commands between the controller <NUM> and the display <NUM> for proper operation.

In one embodiment of the inventive concepts disclosed herein, the aircraft flight deck touch screen display <NUM> (hereinafter "the display") may include a display within a forward instrument panel, a pedestal, and an overhead panel selectable by a crewmember (e.g., a pilot, a copilot, a cabin crew, weapons system officer, etc.). Here, a multi-function display (MFD), an interactive flight management system (FMS) display, and an interactive engine indicating and crew alerting system EICAS display may function as the display <NUM>.

The system <NUM> may also include a tangible, non-transitory memory <NUM> configured to communicate with the controller <NUM>, the tangible, non-transitory memory <NUM> may include instructions stored therein that, in response to execution by the controller, cause the controller to carry out the steps to provide one or more functions of the system <NUM>.

The controller <NUM> may command a presentation of a VGS <NUM> on the display <NUM>. In response to the controller <NUM> receiving a command to display the VGS <NUM> from another source, the controller <NUM> may display the VGS <NUM> on a conspicuous display available to the flight crew. The VGS <NUM> may maintain a function associated with one or more aircraft systems <NUM> onboard the aircraft. In some configurations, a system manager <NUM> may function between the controller <NUM> and the aircraft system <NUM>. The system manager <NUM> may format a specific command from the controller <NUM> for each individual system.

In one embodiment of the inventive concepts disclosed herein, the controller <NUM> may include a flight control computer (FCC), a mission computer (MC), and a processor configured for operation of the aircraft system.

Referring now to <FIG>, diagrams of an exemplary VGS sequence in accordance with an embodiment of the inventive concepts disclosed herein are shown. The VGS sequence <NUM> may indicate exemplary user action and associated system response.

A VGS <NUM> in the guarded state may display a traditional switch likeness protected by a virtual guard <NUM>. The virtual guard <NUM> may be a visually distinct cover plainly indicating to the crewmember the switch under the virtual guard <NUM> is covered. In one embodiment, the virtual guard may be a semi-transparent cover as well as an opaque cover configured to inhibit an actuation indication and function of the VGS <NUM>. A VGS label <NUM> may indicate to the user the function of the VGS <NUM>. Here, the VGS label <NUM> may indicate a right shut off valve (R SOV) as the function of the VGS <NUM> to close the right shut off valve associated with an aircraft hydraulic system.

In one embodiment of the inventive concepts disclosed herein, the controller <NUM> may present the VGS <NUM> in a likeness of any of a plurality of traditional switch types including a multi-position toggle switch, a knob, a slider, a handle, a square push button, a multi-state switch, etc. The virtual guard <NUM> may also be presented in a familiar shape and color representative of a traditional guard over a traditional switch. The virtual guard <NUM>, in a closed position as shown in <FIG>, may function to indicate to the user the VGS <NUM> is protected and will not respond to touch screen interaction until the virtual guard <NUM> is removed. As the virtual guard <NUM> may be semi-transparent, the user may be able to see a status of the VGS <NUM> without needing to open the virtual guard <NUM>.

In the guarded state with the virtual guard <NUM> in the closed position, shown in <FIG>, a user may touch the VGS <NUM> on the display <NUM> without consequence to ensure an actuation of an aircraft system <NUM> critical to flight safety as well as a portion of a system <NUM> may not be inadvertently manipulated. The user touch of the VGS <NUM> may indicate to the controller <NUM> a depress indication of the virtual guard <NUM>. Without continuous user pressure on the VGS <NUM>, the controller <NUM> may command the virtual guard <NUM> to remain in the closed position covering the VGS <NUM>.

In one embodiment of the inventive concepts disclosed herein, the controller <NUM> may present the VGS <NUM> based on a user command to present the VGS <NUM> as well as based on a controller command to present the VGS based on a current status of the system <NUM>.

However, if the user wishes to actuate the VGS <NUM>, the user may perform a specific action to remove the virtual guard <NUM>. The specific action may provide a design assurance required to enhance a security of the system performance. In a traditional guarded switch, removing the guard typically involves flipping the protective cover up, revealing the switch underneath. In one embodiment of the inventive concepts disclosed herein, the user may press and hold the VGS <NUM> for a period sending the depress indication to the controller <NUM> to eventually remove the virtual guard <NUM>. <FIG> may indicate an open delay timer <NUM> which may indicate to the user a) the press-and-hold operation has been registered and is in progress, and b) how much longer the press-and-hold operation needs to be maintained before the cover will open.

For display <NUM> devices which may incorporate haptic feedback, rumbling or similar effects may be used in addition to the open delay timer as a way to further communicate to the user the state of the cover activation state.

Here, the user may touch and hold the VGS <NUM> on the display <NUM> to enable the open delay time to begin. Contemplated herein, additional gestures may provide an input to the controller <NUM> to ensure accurate gesture interpretation and begin the open delay timer. For example, a user sliding or rotating one or more fingers across the display <NUM> may indicate to the controller the user desires to begin the open delay timer.

The open delay timer <NUM> may function to indicate to the user a time remaining until the controller <NUM> may change the virtual guard <NUM> from the closed position to an open position. Here, a circular open delay timer <NUM> may increase from a zero position at an exemplary <NUM> o'clock to a time out position after a <NUM>-degree clockwise swing back to the <NUM> o'clock position.

In one embodiment of the inventive concepts disclosed herein, the open delay timer <NUM> may be presented to the user in additional graphical formats including a circular timer (e.g., clock), a vertical timer (e.g., hourglass), and additional time related graphics for ease of user recognition.

In one embodiment of the inventive concepts disclosed herein, the open delay timer <NUM> may function as a delay preventing inadvertent actuation of the VGS <NUM>. The magnitude of the open delay time may be proportional to the criticality of the system to which the VGS <NUM> is associated. For example, a routine hydraulic shut off valve may require an exemplary one second open delay time before the controller <NUM> commands the virtual guard <NUM> from the closed position to the open position. However, a highly critical engine cut off switch may require a more lengthy exemplary five second open delay time based on the critical nature of securing an engine.

Contemplated herein, a weight on wheels (WOW) status may function as an additional input for the controller <NUM> to determine the open delay time. For example, with weight on wheels, the controller <NUM> may set the open delay time for all VGS <NUM> to one second to enable an aircrew to quickly secure an engine on the ground. Additionally, a mission status may also provide an input to the controller <NUM> to set the open delay time. For example, a single seat fighter aircraft flying a combat mission may require less of an open delay time while a multi-crew transport category aircraft using crew resource management techniques may require a longer open delay time to accomplish crew coordination and verification of correct VGS <NUM> selection and actuation.

Further, an indication of an abnormal situation may cause the controller <NUM> to alter the open delay time or wholly remove the open delay time. The controller <NUM> may present the VGS <NUM> on the selected display and open the virtual guard <NUM> to the open position as a result of an automated checklist generated by a crew alerting system. For example, the controller <NUM> may sense an abnormal situation requiring prompt aircrew action and present a VGS <NUM> with the virtual guard <NUM> in the open position based on an EICAS input of an abnormal checklist. In this manner, the aircrew may promptly execute steps of an abnormal checklist without waiting for the open delay time.

Under normal conditions, once a user may press and hold the VGS <NUM> for the duration of the open delay time, the controller <NUM> may present the virtual guard <NUM> opening from the closed position to the open position.

Once the opening transition is complete, the controller <NUM> may present the VGS <NUM> with an open virtual guard <NUM> indicating to the user an unguarded VGS <NUM> is ready for actuation.

Once the virtual guard <NUM> is in the open position, the controller <NUM> may begin a guard auto close timer. The controller <NUM> may command separate guard auto close timers depending on whether the user interacted with the unguarded VGS <NUM> or not. As an unguarded VGS <NUM> may present an opportunity for inadvertent action, the controller may move the virtual guard back to the closed position if the user does not actuate the unguarded VGS <NUM> within the guard auto close timer. One exemplary guard auto close timer magnitude may be five seconds.

In one embodiment of the inventive concepts disclosed herein, the controller <NUM> may present the unguarded VGS <NUM> as an alternate color or shade from that of the guarded VGS <NUM>. For example, the controller <NUM> may present a guarded VGS <NUM> as white while presenting the unguarded VGS <NUM> as green.

In one embodiment of the inventive concepts disclosed herein, to ensure accurate selection of the unguarded VGS <NUM>, the controller <NUM> may require the user to perform a three step process to actuate the function of the VGS <NUM>: via <NUM>) the press and hold sending a depress indication to start the open delay timer, <NUM>) once the open delay timer has elapsed, remove the touch from the display <NUM> sending a removal indication, and <NUM>) sending an actuation indication by a reapplication of the touch to actuate the unguarded VGS <NUM>.

Once the user has actuated the unguarded VGS <NUM>, the controller <NUM> may present an actuated VGS <NUM> as well as a VGS status <NUM> indicating that the VGS <NUM> has been properly actuated and the system status of the associated system. Here, the VGS status <NUM> may indicate "CLOSED" as a status of the R SOV in the hydraulic system.

In one embodiment of the inventive concepts disclosed herein, the controller <NUM> may present the actuated VGS <NUM> in a different color from the unguarded VGS <NUM>. For example, the controller <NUM> may present a green unguarded VGS <NUM> and once actuated, present a red actuated VGS <NUM>.

After actuation, the controller <NUM> may present an actuated and guarded VGS <NUM>. As above, the guard auto close timer may begin once the controller presents the unguarded VGS <NUM>, should the user actuate the unguarded VGS <NUM> the controller <NUM> may command the guard auto close timer to an exemplary one second to close the virtual guard <NUM> and make safe the VGS <NUM>.

Referring now to <FIG>, a diagram of an exemplary logic flow <NUM> for a system for actuation of an aircraft system via a virtual guarded switch in accordance with an embodiment of the inventive concepts disclosed herein is shown. The controller <NUM> presents a selected display at a step <NUM>. For example, a selected display may be selected by the user or automatically presented based on an EICAS input. The selected display may include a checklist, a standard system display, and a maintenance display on the aircraft flight deck touch screen display onboard the aircraft.

The controller <NUM> may receive a command to present the VGS <NUM> on the selected display and, at a step <NUM> presents the VGS <NUM>. The VGS <NUM> includes the virtual guard <NUM> in the closed position inhibiting function of the VGS <NUM>. The VGS <NUM> function is associated with at least one aircraft system onboard the aircraft.

The logic may pass to a query <NUM> to determine if the user has pressed the VGS <NUM> sending a depress indication to the controller <NUM>. If the result of query <NUM> is negative the logic may return to the step <NUM>. Should the result of query <NUM> be positive, the logic passes to a step <NUM> with a presentation of the open delay timer <NUM> proximally with the VGS <NUM>.

A query <NUM> determines if the VGS has remained depressed and the controller <NUM> has received the depress indication during the open delay timer. If a result of query <NUM> is positive, the logic passes to a step <NUM> with a presentation of the opening graphic moving the virtual guard from the closed position to the open position. Should the result of query <NUM> be negative, the logic may return to the step <NUM> with continuing the presentation of the VGS <NUM>. Once the opening graphic is complete, the logic passes to a step <NUM> to present the unguarded VGS <NUM> as well as, at a step <NUM>, to start the guard auto close timer.

To continue the logic a step <NUM> includes receiving removal indication should the user remove a touch from the display <NUM> sending a discontinuation of the depress indication on the aircraft flight deck touch screen display to the controller <NUM>. A query <NUM> determines if the unguarded VGS <NUM> was actuated and the controller <NUM> received an actuation indication during the guard auto close timer. Should a result of query <NUM> be negative, the logic passes to a step <NUM> to close the virtual guard <NUM> on an unactuated VGS <NUM> and reset of the VGS <NUM> to an initial guarded presentation. However, should the controller <NUM> receive an actuation indication the logic passes to a step <NUM> to actuate the system function and, at a step <NUM>, to present the actuated status indication on the actuated VGS <NUM>. In one embodiment, the controller <NUM> may receive the actuated status feedback from the aircraft system before presenting the actuated status of the actuated VGS <NUM>. Once the system has been actuated, the controller <NUM> presents, at a step <NUM>, the virtual guard <NUM> in the closed position over the actuated VGS <NUM>.

Referring now to <FIG>, a diagram of a method flow <NUM> exemplary of one embodiment of the inventive concepts disclosed herein is shown. A method for actuation of a system via a virtual guarded switch (VGS) may comprise, at a step <NUM>, receiving a command to present the VGS, the VGS including a virtual guard in a closed position covering the VGS and at a step <NUM>, presenting the VGS on a selected display. A step <NUM> may include receiving a depress indication of the virtual guard while a step <NUM> may include presenting an open delay timer proximal with the VGS during an open delay time.

A step <NUM> may include opening the virtual guard to an open position if the depress indication continued during the open delay time while a step <NUM> may include starting a guard auto close timer when the virtual guard reaches the open position. Should the user remove the touch from the display, a step <NUM> may include receiving a removal indication while a step <NUM> may include receiving an actuation indication if the VGS is depressed while the virtual guard is in the open position. A step <NUM> may include actuating a system associated with a function of the VGS upon receipt of the actuation indication. In embodiments, the controller <NUM> may command a system manager to perform a system function associated with the system.

A step <NUM> may include presenting an actuated status on the VGS upon a confirmation the aircraft system has actuated while a step <NUM> may include closing the virtual guard to the closed position after presenting the actuated indication. Should the user fail to touch the display during the guard auto close timer, a step <NUM> may include closing the virtual guard to the closed position over an unactuated VGS upon an expiration of the guard auto close timer with no receipt of the actuation indication.

As will be appreciated from the above description, embodiments of the inventive concepts disclosed herein may provide a novel solution to presenting a virtual guarded switch (VGS) via touchscreen enabling pilot action to remove the virtual guard and actuate a system associated with the VGS.

Claim 1:
A system (<NUM>) for actuation of an aircraft system via a virtual guarded switch, VGS (<NUM>), comprising:
an aircraft flight deck touch screen display (<NUM>) onboard an aircraft;
a controller (<NUM>) operatively coupled with the aircraft flight deck touch screen display;
a tangible, non-transitory memory (<NUM>) configured to communicate with the controller, the tangible, non-transitory memory having instructions stored therein that, in response to execution by the controller, cause the controller to:
receive a command to present the VGS, the VGS including a virtual guard (<NUM>) in a closed position inhibiting a function of the VGS, the VGS function associated with at least one aircraft system (<NUM>) onboard the aircraft;
present (<NUM>) the VGS on the aircraft flight deck touch screen display; receive (<NUM>) a depress indication of the VGS; and characterized by causing the controller to present (<NUM>) an open delay timer (<NUM>) proximal with the VGS during the depress indication and during an open delay time; a magnitude of an open delay time associated with the open delay timer is proportional to a criticality of the at least one aircraft system, the open delay timer indicating a time remaining until the VGS changes from the closed position to an open position, the weight on wheels (WOW) indication and a mission status of the aircraft functioning as additional inputs for the controller to determine the open delay time;
open (<NUM>, <NUM>) the virtual guard to the open position if the depress indication continued during the open delay time;
start (<NUM>) a guard auto close timer when the virtual guard reaches the open position receive (<NUM>) a removal indication;
receive (<NUM>) an actuation indication if the VGS is depressed before an expiration of the guard auto close timer;
actuate (<NUM>) the function of the at least one aircraft system upon receipt of the actuation indication;
present (<NUM>) an actuated status on the VGS upon a confirmation the aircraft system has actuated;
close (<NUM>) the virtual guard (<NUM>) to the closed position after presenting the actuated indication and
close (<NUM>) the virtual guard to the closed position over an unactuated VGS upon an expiration of the guard auto close timer with no receipt of the actuation indication.