Patent ID: 12222717

DETAILED DESCRIPTION

The invention can be implemented in numerous ways, including as a process; an apparatus; a system; a composition of matter; a computer program product embodied on a computer readable storage medium; and/or a processor, such as a processor configured to execute instructions stored on and/or provided by a memory coupled to the processor. In this specification, these implementations, or any other form that the invention may take, may be referred to as techniques. In general, the order of the steps of disclosed processes may be altered within the scope of the invention. Unless stated otherwise, a component such as a processor or a memory described as being configured to perform a task may be implemented as a general component that is temporarily configured to perform the task at a given time or a specific component that is manufactured to perform the task. As used herein, the term ‘processor’ refers to one or more devices, circuits, and/or processing cores configured to process data, such as computer program instructions.

A detailed description of one or more embodiments of the invention is provided below along with accompanying figures that illustrate the principles of the invention. The invention is described in connection with such embodiments, but the invention is not limited to any embodiment. The scope of the invention is limited only by the claims and the invention encompasses numerous alternatives, modifications and equivalents. Numerous specific details are set forth in the following description in order to provide a thorough understanding of the invention. These details are provided for the purpose of example and the invention may be practiced according to the claims without some or all of these specific details. For the purpose of clarity, technical material that is known in the technical fields related to the invention has not been described in detail so that the invention is not unnecessarily obscured.

An automated aircraft recovery system is disclosed. The automated aircraft recovery system includes an interface configured to receive sensor data. It also includes a control mechanism configured to automatically perform a recovery action that is determined based at least in part on the sensor data.

In some embodiments, the automated aircraft recovery system receives information on the aircraft and its surrounding environmental conditions from sensors on the aircraft. The system may determine a best course of recovery actions using the parachutes, rockets, or other recovery mechanisms the aircraft is equipped with in combination with maneuvering the aircraft itself.

FIG.1is a diagram illustrating an embodiment of an aircraft comprising a multi-rocket parachute deployment system before deployment. In some embodiments, the system is used to recover an aircraft and the parachute is attached to the aircraft. The aircraft may be manned or unmanned. The aircraft may be a multicopter. The first projectile and the second projectile may be attached to the aircraft or stored on the aircraft. In the example shown, aircraft100includes rocket_1102, parachute104, and rocket_2106. In the example shown, rocket_1102, parachute104, and rocket_2106are stored inside aircraft100towards the tail end of aircraft100. Parachute104, rocket_1102, and rocket_2106may be positioned towards the tail end of aircraft100such that the parachute is deployed towards the tail end, dropping the aircraft in a nose-down configuration. A nose-down configuration may load the landing gear consecutively or allow for a gentle landing. In some embodiments, the nose-down configuration allows landing gear of the aircraft to collapse and absorb energy from the fall. The rockets and parachute may be stored in a container such as a box. The rockets and parachute may be stored near a window at the top of the aircraft, attached to the outside of the aircraft, stored at a center of gravity of the aircraft, attached at an optimal parachute deployment location, or arranged in any other appropriate position on the aircraft.

FIG.2is a diagram illustrating an embodiment of a multi-rocket parachute deployment system before deployment. In some embodiments, the example shown is an expansion of the multi-rocket parachute deployment components shown inFIG.1. In the example shown, rocket_1200is connected to parachute202via tether210. Tether210may be attached to a cover or casing of parachute202. Parachute202may be stored inside a flexible sock-like cover. Parachute202may be contained in a canister, wherein tether210is attached to a cover of the canister. In some embodiments, a riser of the parachute runs through a mechanism that allows the riser to be pulled through the mechanism in one direction but not in an opposite direction. In the example shown, riser212is connected to the parachute and runs through cam cleat204. Cam cleat204is a device that allows riser212to be pulled through it from the left to the right, but does not allow riser212to be pulled through in the opposite direction. In some embodiments, riser212is in a cleat. When riser212ceases to be pulled through the cleat towards the right, the tension of the riser may cause the cams to rotate inward. The riser may be pinned between the cams and be prevented from running through in the reverse direction. In some embodiments, a riser of the parachute runs through a mechanism that redirects the riser with minimal friction. In various embodiments, the mechanism comprises one of the following: a pulley, a running block, a ring, or a low friction system. The mechanism chosen may depend on how quickly the riser needs to be able to be brought through, strength needs, weight requirements, or any other appropriate factor. The mechanism may be used to prevent snagging of the riser. In some embodiments, the second projectile of the system is attached to a riser of the parachute running through a mechanism that redirects the riser with minimal friction or running through a mechanism that allows the riser to be pulled through the mechanism in one direction but not in an opposite direction. In the example shown, riser212travels through cam cleat204, though pulley206, and is attached to rocket_2208.

In some embodiments, rocket_1200and rocket_2208are attached to a canister containing parachute202. In some embodiments, cam cleat204and pulley206are attached to a shared mounting plate. Rocket_1200, parachute200, cam cleat204, pulley206, and rocket_2208may be arranged in any appropriate position that maintains the orientations of tether210and riser212in connecting the system elements.

FIG.3is a diagram illustrating an embodiment of an aircraft comprising a multi-rocket parachute deployment system after deployment of a first rocket. In the example shown, rocket_1316is deployed from aircraft300. In the event that the rocket is stored inside the aircraft, deploying the aircraft may break a window or create a hole in a surface of the aircraft. The rocket may be stored in a location such that breaking the surface of the aircraft is not detrimental to the aircraft. For example, the rocket or other recovery components may be stored in an isolated container such that a rocket deployment does not cause air to leak into the entire cabin of the aircraft. A window or panel of the aircraft may be designed to fall off in one piece when the rocket is deployed. In some embodiments, propelling the first projectile pulls a cover off the parachute. In the example shown, rocket_1316is propelled vertically and is attached to parachute cover312via tether314. Parachute310is deployed, but is not fully inflated. Parachute310may be wrinkled, partially collapsed, or folded. Riser308of parachute310runs through cam cleat302and pulley304. The end of riser308not attached to parachute310is attached to rocket_2306. Cam cleat302, pulley304, and rocket_2306remain in aircraft300after the deployment of rocket_1316.

FIG.4is a diagram illustrating an embodiment of a multi-rocket parachute deployment system after deployment of a second rocket. Riser404runs through cam cleat400and pulley402. Riser404is attached to rocket_2406. In the example shown, rocket_2406is propelled at a roughly 45 degree angle from the horizontal. Pulley402allows riser404to be pulled with minimal friction in a new direction.

FIG.5is a diagram illustrating an embodiment of an aircraft comprising a multi-rocket parachute deployment system after deployment of a second rocket. In the example shown, the first projectile that deployed parachute502has been propelled away from aircraft500along with the parachute cover. In some embodiments, the first direction that the first projectile is propelled in and the second direction that the second projectile is propelled in form an acute angle. In the example shown, rocket_2510is propelled vertically and towards the tail end of aircraft500. Rocket_2510pulls riser504through cam cleat506and pulley508, causing parachute502to be tugged downwards. In some embodiments, the second projectile causes the parachute to rapidly fill with air. Rocket_2510may be propelled at a high speed that causes parachute502to move towards ground faster than it would fall otherwise. Propelling the second projectile may cause the parachute to experience a load similar to a full load of an aircraft. For example, a force that rocket_2510exerts on parachute502by pulling the riser may be the same force that parachute502would experience when fully inflated and carrying the aircraft's full weight. The deployment of rocket_2510may cause parachute502to fully inflate. The deployment of the second projectile may cause an initial large load on the parachute as the projectile yanks the parachute down, and then the parachute slowly takes on the entire load of the airplane as it slowly inflates to its full capacity. Cam cleat506may allow rocket_2510to pull riser504through it while preventing riser504from being pulled through it in the opposite direction. Cam cleat506may force the parachute to be pulled down and inflate by preventing riser504from being pulled through. In some embodiments, a stopping feature in riser504prevents it from being pulled too far through cam cleat506, preventing the parachute from being pulled too close to the aircraft. The stopper may be a knot or another obstacle in the riser that prevents the riser from being pulled through the cam cleat past a certain point.

In some embodiments of typical parachute deployment systems, the parachute does not fully inflate until the aircraft has fallen a distance three times a diameter of the parachute. In some aircraft emergency situations, allowing the aircraft to fall for that distance is not feasible. For example, the aircraft may be close to the ground already and allowing the aircraft to accelerate downwards for that time without a full inflation of the parachute may cause the aircraft to be damaged upon landing. The multi-rocket deployment system may cause the parachute to be extracted in a shorter fall distance and a shorter time. A typical “stack up” time from a recognition of an emergency to the aircraft being steadily caught by an inflated parachute may be in the order of four to five seconds. Decreasing the “stack up” time using a multi-rocket deployment system may greatly impact damage done to the aircraft or a passenger of the aircraft.

After deployment, rocket_2510may fall and hang off aircraft500upon running out of fuel. Rocket_2510may be lightweight and cause negligible negative effects while remaining attached to riser504. Rocket_2510may be attached to riser504via a connection that releases after a predetermined amount of time or after being propelled a predetermined distance. Rocket_2510may be detached after the predetermined time or distance and fall away from aircraft500. In some embodiments, the rocket is detached via an element in the line that breaks away with a predetermined amount of force. For example, a section of the line tethered to the rocket may be thinner than the sections of line surrounding it. The thin section of line may break when the rocket reaches the end of the line or exerts a certain force on the line, releasing the rocket.

FIG.6is a diagram illustrating an embodiment of an aircraft comprising a multi-rocket parachute deployment system after a breakaway. In some embodiments, the mechanism that allows the riser to be pulled through the mechanism in one direction but not in an opposite direction detaches from an aircraft upon experiencing a load of a predetermined threshold. The predetermined threshold may be the upward force exerted by the parachute when fully inflated. For example, as the parachute becomes fully or mostly inflated, the parachute exerts an upward force that slows down the aircraft's fall. The upward force from the parachute may cause the mechanism to break off of the aircraft. The mechanism may be originally attached to the aircraft and a bridle of the parachute. In some embodiments, the mechanism is configured to detach from the aircraft such that the load of the parachute is transferred to the bridle of the parachute. The bridle may be a harness attached to the aircraft. The bridle may be attached to the aircraft at critical load bearing points. The bridle may be attached to a frame of the aircraft. In some embodiments, the bridle controls the orientation of the aircraft as the aircraft falls, suspended below the parachute. The bridle by its design may control how the structure of the aircraft is loaded by the parachute as the parachute fills with air.

In some embodiments, the mechanism that allows one-way movement of a line through it and the friction-minimizing redirecting mechanism are attached to a shared surface. In the example shown, cam cleat610and pulley612are attached to shared surface606. Shared surface606may allow cam cleat610to break off from aircraft600while maintaining its orientation in regards to pulley612and preventing damage to aircraft600. Rocket_2614pulls riser604, causing parachute602to fully inflate. Upon full inflation of parachute602, surface606breaks off of aircraft600. Shared surface606is attached to bridle608. Parachute602slows down aircraft600via bridle608, allowing the upward force of the parachute to be spread across the aircraft.

FIG.7is a diagram illustrating an embodiment of an aircraft comprising a multi-rocket parachute deployment system after deployment of a second rocket towards ground. In some embodiments, the second direction that the second projectile is propelled in is towards ground. The second projectile may be propelled through a hole in an aircraft. The hole may be at the underside of the aircraft. Propelling the second projectile towards ground may prevent the need for a redirecting device. Propelling the second projectile towards ground may prevent load and friction from being created in contrast to the configuration ofFIG.5. A device that allows the riser to run through in one direction but not the reverse is required to prevent the parachute from pulling the riser back up. In the example shown, a first projectile may have caused parachute702to deploy. Rocket_2708is deployed downwards, pulling riser704through cam cleat706. Rocket_2708deployed through aircraft700. Rocket_2708yanks parachute702down, causing the parachute to quickly fill. Parachute702fills because riser704cannot be pulled back up through cam cleat706.

FIG.8is a diagram illustrating an embodiment of an aircraft comprising a multi-rocket parachute deployment system after a breakaway. In some embodiments,FIG.8followsFIG.7in a series of deployment events. In the example shown, rocket_2812has deployed, causing parachute802to become fully inflated. As parachute802exerts an upward force on cam cleat806, cam cleat806detaches from aircraft800upon experiencing a predetermined threshold of force. In the example shown, cam cleat806is mounted on plate808. Plate808is attached to bridle810. In some embodiments, bridle810is directly attached to cam cleat806.

FIG.9is a block diagram illustrating an embodiment of a multi-rocket parachute deployment system. In the example shown, aircraft900includes recovery system902and sensor908. Recovery system902includes interface904and deployment controller906. In some embodiments, sensor908receives sensor data regarding wind, an aircraft speed, weather, visibility, or any other appropriate information. Sensor data may be received by interface904of recovery system902. The sensor data may be used by deployment controller906to automatically deploy the first or second projectiles. Deployment controller906may comprise a processor. Recovery system902may be entirely mechanical. For example, sensor data mechanically triggers one or more projectiles to deploy. The recovery system may be triggered by a pilot of the aircraft.

FIG.10is a diagram illustrating an embodiment of a relationship between airspeed and a height above ground for an aircraft. The graph may be referred to as the “coffin corner” or “dead man's curve” by helicopter pilots. Areas1000and1002may include unsafe modes of operation. Areas1000and1002may be areas that the aircraft is desired to be recovered and a recovery system is activated. Areas1000and1002may be areas from which a typical recovery system cannot recover an aircraft. Area1000includes conditions of a low airspeed and a low distance from ground. A multi-rocket deployment system allows the aircraft to deploy a parachute quickly, allowing for recovery even at a low airspeed. In some embodiments, the system allows the aircraft to be recovered in “zero-zero” conditions wherein the aircraft is close to the ground and traveling at a low speed. Area1002includes high airspeed and low altitude conditions. In some embodiments, deploying different parachutes based on conditions allows the aircraft to avoid danger zones1000and1002. In some embodiments, a system that allows for automatic recovery actions helps the aircraft avoid areas1000and1002or helps the aircraft to return to more favorable airspeeds and altitudes.

FIG.11is a flow diagram illustrating an embodiment of a multi-rocket parachute deployment system process. In1100, an indication to launch a first projectile is received. The indication to launch the first projectile may be a human action. For example, a pilot may press a button, hit a trigger, or a pull a lever that indicates an emergency has occurred. A human may indicate solely to launch the first projectile. In1102, the first projectile is launched. In1104, an indication to launch a second projectile is received. The indication to launch the second projectile may be a human action. A processor may control projectile deployments and provide an instruction to the second projectile to be launched. The second projectile may launch automatically after the first rocket. For example, the second projectile may have a mechanical fuse, wherein the fuse is longer than a mechanical fuse of the first projectile. The second projectile may be launched after a predetermined delay from the launch of the first projectile. In1106, the second projectile is launched.

FIG.12is a diagram illustrating an embodiment of an aircraft comprising a multimodal aircraft recovery system before deployment. In some embodiments, the first parachute and the second parachute are attached to or stored on an aircraft. The aircraft may be a multicopter. Multicopters may be more likely than other aircraft to fly at altitude and speed combinations that cause them to be difficult to recover. A multicopter may fly at low altitude, low speed “coffin corner” conditions. A multicopter may not have large enough rotors to use the rotors' interia to slow its fall. A recovery system may be a critical component of a multicopter. In the example shown, aircraft1200includes parachute_11202and parachute_21204. Parachute_11202and parachute_21204may be optimized for different conditions.

The first parachute and the second parachute may be deployed based on one or more determined conditions. The one or more determined conditions are determined based on sensor data collected by a sensor on an aircraft. The one or more determined conditions may comprise one or more of the following: an altitude, a global positioning system (GPS) data, a speed, an acceleration, or a directionality. The multimodal recovery system may include two, six, sixteen, or any appropriate number of parachutes.

FIG.13Ais a diagram illustrating an embodiment of an aircraft comprising a multimodal aircraft recovery system after deployment of a first parachute. In the example shown, aircraft300is flying at a high distance from ground. Aircraft300may be traveling at a high altitude and a high speed. First parachute1302is deployed. First parachute1302may be optimized for a first set of conditions comprising a high speed and a high altitude. The first parachute may be smaller, more robust, more heavyweight, or able to withstand a greater load than the second parachute. In the example shown, second parachute1304is not extracted. First parachute1302may be deployed as an initial slowing action. First parachute1302may be made of a thick, strong material that can withstand the high speed at which aircraft1300is falling. First parachute1302may be a small parachute because a large parachute made with thick, strong material creates a weight restraint on the aircraft.

FIG.13Bis a diagram illustrating an embodiment of an aircraft comprising a multimodal aircraft recovery system after deployment of a second parachute. In the example shown,FIG.13Bis a continuation ofFIG.13Ain a series of actions performed by the multimodal recovery system. Aircraft1300may be traveling at a low speed and a low altitude. Aircraft1300may be traveling at a low speed due to the effect of first parachute1302initially slowing the aircraft down. Since the deployment of first parachute1302, the aircraft may have fallen closer to ground. The second parachute may be optimized for a second set of conditions comprising a low speed and a low altitude. The second parachute may be faster to deploy, lighter, or larger than the first parachute. In the example shown, second parachute1304is deployed. Second parachute1304may be a large parachute that captures a large amount of air, slowing down aircraft1300and preparing it for touching down on ground. The large size of second parachute1304may allow it to take on a full load of the aircraft. Second parachute1304may be thin due to weight restraints due to its size. The thin material of second parachute1304may have prevented it from being released initially when the aircraft was experiencing a high speed drop, because the material would easily rip.

In some embodiments, the parachutes has multiple possible states of deployment. For example, a parachute may be deployed with a riser ring such that the parachute cannot instantly inflate. The riser ring may decrease the force the parachute experiences upon deployment. As the aircraft falls, the parachute may slowly fill with air, causing the riser ring to passively retract down the riser. A parachute may be deployed in stages at a high speed in order to slowly increase the load on the parachute and minimize chances of the parachute ripping. Deploying in stages may allow for greater range on a single parachute. The multimodal system may include an option to deploy a parachute in stages.

FIG.14is a block diagram illustrating an embodiment of a multimodal aircraft recovery system. In the example shown, aircraft1400includes recovery system1406, sensor1408, first parachute controller1410, and second parachute controller1412. Recovery system1406includes interface1402and deployment controller1404. Sensor1408sends sensor data to interface1402. In some embodiments, the sensor data contains information on a speed or height above ground of the aircraft. The speed may be relative to wind. Deployment controller1404may be a processor. Recovery system1406may be entirely mechanical. Deployment controller1404sends instructions to first parachute controller1410and second parachute controller1412. In the event that deployment controller1404determines from sensor data that the aircraft is experiencing a first condition, for example, a high speed and high altitude, deployment controller1404may send an instruction to first parachute controller1410to deploy the first parachute. One or more parachutes may be deployed simultaneously. The parachutes may be deployed mechanically, automatically, or based on a pilot indication.

FIG.15is a flow diagram illustrating an embodiment of a multimodal aircraft recovery system process. In1500, it is determined whether the first parachute is triggered. In the event the first parachute is triggered, the first parachute is deployed in1502. Following deployment or in the event that the first parachute was not triggered, it is determined whether the second parachute is triggered. In the event that the second parachute is triggered, in1506the second parachute is deployed. In the event that the second parachute is not triggered, the process returns to1500. The parachutes may be triggered via an indication from a human. For example, a pilot may decide which parachute is to be deployed, whether the parachute is to be deployed in stages or not, when the parachute is to be deployed, or any other factors regarding the parachute's deployment. The second parachute may be triggered based on a time delay since the deployment of the first parachute. The parachutes may be triggered mechanically or by a processor.

FIG.16is a flow diagram illustrating an embodiment of a multimodal aircraft recovery system parachute triggering process. Parachute deployment may be triggered based on sensor data conveying a condition. In1600, deployment condition definitions are received. For example, a deployment condition definition may specify that at a predetermined altitude, a certain parachute should be deployed. A deployment condition definition may specify that a parachute deployment should be at a certain state based on a specific condition. A deployment condition definition may be based on an altitude, a speed, an environmental character, or any combination of sensor data. The deployment condition definitions may be stored in a computer memory. The deployment condition definitions may be worked into the mechanics of the system such that the desired deployment is triggered mechanically when the condition is reached. In some embodiments, mechanical triggering of deployment is enacted by a pilot of the aircraft via a mechanical igniter. The pilot may operate a physical pull-cord or handle to trigger deployment. In an automated aircraft recovery system, a processor may use an electrical rocket igniter to trigger the system. In1602, sensor data is received. In some embodiments, sensor data is received via accelerometers, global positioning systems, odometers, cameras, or any appropriate sensor. In1604, it is determined whether the sensor data matches a deployment condition definition. In the event that the sensor data does match a deployment condition definition, in1606a respective parachute is triggered and the process returns to1602. In the event that the sensor data does not match a deployment condition definition, in1608it is determined whether the aircraft is in flight. In the event that the aircraft is in flight, the process returns to1602. In the event that the aircraft is not in flight, the process is finished. The multimodal recovery system may continuously check whether sensor data matches a deployment condition definition as long as the aircraft is in flight.

FIG.17is a flow diagram illustrating an embodiment of a multimodal aircraft recovery system automatic deployment process. In some embodiments, aircrafts have many types of parachutes configured for varying conditions.FIG.17illustrates an embodiment in which the aircraft is equipped with two types of parachutes. The embodiment may describe an aircraft that is equipped with one or more parachutes optimized for a high altitude or high speed, and one parachute optimized for a low altitude or a low speed.

In1700, sensor data is received. In1702, it is determined whether the sensor data indicates a need for aircraft recovery. The need for aircraft recovery may be based on predetermined deployment definitions. The multimodal recovery system may include both manual and automatic modes. In the event that the multimodal recovery system is in manual mode, the indication of a need for aircraft recovery may consist of a designating the system as automatic because the steps following1702are automatically carried out by the recovery system. In the event that automatic mode is already established, determining a need for aircraft recovery may be contingent on an expected state of the aircraft. For example, during take-off, the conditions may meet a parachute deployment condition without an indication of a need for aircraft recovery. The need for aircraft recovery may be based on an indication from a pilot. The pilot may press a multimodal recovery system enable or disable switch. The aircraft may have an emergency recovery button for the pilot to press.

In the event that the sensor data does not indicate a need for aircraft recovery, the process returns to1700. The loop between1700and1702may continue as long as the aircraft is airborne. In the event that the sensor data indicates a need for aircraft recovery, in1704it is determined whether the sensor data indicates a high altitude or speed. In the event that the sensor data indicates a high altitude or speed, in1706a parachute optimized for a high altitude or speed is deployed. Following1706or in the event that the sensor data did not indicate a high altitude or speed, in1708it is determined whether the sensor data indicates a low altitude or speed. In the event that the sensor data does not indicate a low altitude or speed, the process returns to1700. In the event that the sensor data does indicate a low altitude or speed, in1710a parachute optimized for a low altitude or speed is deployed. After the parachute optimized for a low altitude or speed is deployed, the process is finished.

The process may cause a first parachute to be deployed when the sensor data indicates a high altitude or speed, and in the event that the sensor data still indicates a high altitude or speed, an additional parachute optimized for the condition is deployed. When the sensor data indicates a low altitude or speed, the aircraft only has one parachute suited for the condition to deploy and the process is finished.

FIG.18is a block diagram illustrating an embodiment of an automated aircraft recovery system. An automated aircraft recovery system may automatically determine and enact a series of actions to recover the aircraft. In some embodiments, the series of actions are determined based on sensor data. The series of actions may be determined based on the recovery options available to the aircraft, such as parachutes optimized for various conditions or parachutes of various deployment methods. The automated aircraft recovery system may be used with off-the-shelf parachutes or specialized parachutes. The series of actions may coordinate parachute deployments with flight maneuvers. The series of actions may consider the state of recovery mechanisms in the aircraft. The series of actions may be determined based on environmental obstacles in addition to altitude and speed.

In the example shown, aircraft1800includes recovery system1802and sensor1808. Recovery system1400includes interface1804and deployment controller1806. Interface1804receives sensor data from sensor1808. In some embodiments, deployment controller1806comprises a processor. In some embodiments, deployment controller1806is mechanical.

In some embodiments, the sensor data comprises one or more of the following: a speed, an altitude, an attitude, or a flight condition. For example, the sensor data may include the aircraft's trajectory, how fast the aircraft is turning, the aircraft's pitch, or any other appropriate factor related to the aircraft's flight. The sensor data may comprise a functionality, health, or state of a control, an electrical component, or a structural component of an aircraft. For example, the sensor may test an integrity of an electrical signal of the aircraft. The sensor may receive periodic pings or “pulses” from a component of the aircraft, wherein a cease in the signals indicates that the component is malfunctioning. The sensor may sense if a parachute casing is compromised. In some embodiments, sensors are used to determine whether obstacles exist that prevent immediate parachute deployment. Sensors may be used to recognize obstacles such as buildings, trees, or water. Obstacles may be determined based on GPS data.

In some embodiments, the sensor data comprises one or more of the following: global positioning system information, a proximity to an obstacle, an obstacle classification, a communication with another aircraft, or environmental information. Information on the aircraft's surroundings may factor into determining the course of recovery. Determining the recovery action may account for nearby hospitals, schools, sensitive buildings, or no-crash zones. For example, an obstacle may be determined to be a tall tree in an uninhabited forest. The obstacle may be classified as a low level of danger because minimal human harm is expected to be caused by landing into the forest. In the event that an obstacle is determined to be a high risk or forbidden zone such as a hospital, the automated aircraft recovery system may direct the aircraft away from the zone before deploying a parachute. The aircraft may be in communication with other aircrafts around it and use sensor information collected by other aircrafts. In the event that bandwidth or timing of communications are limiting, the system may use the information collected from the latest communication to determine a general idea of where other aircrafts are. For example, the system may extrapolate the other aircrafts' trajectories.

FIG.19Ais a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after deployment of a first parachute. In the example shown, aircraft1900has stored parachute1904. Parachute1902has been deployed. In some embodiments, parachute1902is a small, heavy-weight, strong parachute. Parachute1902may have been deployed in response to high altitude, high speed conditions.

FIG.19Bis a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after deployment of a second parachute. In the example shown, parachute1902has developed a rip in its canopy. The rip may have occurred due to experiencing a fall speed greater than the parachute could handle. The rip may have occurred due to the weight of the aircraft. As a result, parachute1902is collapsed and is not aiding in slowing the fall of aircraft1900. In some embodiments, the automated aircraft recovery system senses that parachute1902has been compromised. For example, the aircraft may have an accelerometer that determines the aircraft is falling faster than expected. In response, the automated aircraft recovery system may deploy parachute1904. Parachute1904may not be optimized for the environmental conditions aircraft1900is experiencing, but the collapse of parachute1902created a need for a parachute to be deployed.

FIG.19Cis a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after an aircraft maneuver. In the example shown, parachute1902remains collapsed and parachute1904is filled with air. In the example shown, aircraft1900is flying in a nose up configuration. Flying in a nose up configuration may increase lift of the aircraft, causing a load on parachute1904to be lessened. Flying in a nose up configuration may decrease the chance that parachute1904will rip, which may be critical because parachute1902is torn. In some embodiments, the automated aircraft recovery system recalculates steps in the series of actions as the actions are taken in order to account for unexpected changes, such as a collapsed parachute, a malfunctioning part, a change in weather, or any other appropriate change. In the example shown, the recovery step comprises deploying parachute1904while navigating the aircraft to a new position. In some embodiments, the recovery action comprises changing a flight path of an aircraft to compensate for a limitation of a parachute of the aircraft. For example, a parachute may have suspension lines that catch easily on branches of trees. The recovery system may determine the parachute cannot be deployed until the aircraft is maneuvered away from a risky environment.

In some embodiments, the automated aircraft recovery system utilizes a multimodal recovery system. The various parachutes optimized for various conditions of the multimodal recovery system as utilized and automatically deployed by the automated aircraft recovery system.

FIG.20Ais a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after deployment of parachutes with riser rings. In the example shown, aircraft2000is caught by parachute2002and parachute2004. Parachute2002and parachute2004have been deployed with riser rings. The riser rings prevent the parachutes from fully inflating upon deployment. In some embodiments, the parachutes are deployed with riser rings to protect the parachutes from a sudden large load upon deployment.

FIG.20Bis a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system with fully inflated parachutes. In the example shown, parachute2002and parachute2004are fully inflated. As the parachutes filled with air, the riser rings may have been pushed down on aircraft2000. In some embodiments, parachutes with riser rings are deployed in the event that an aircraft requires recovery while it is flying at a high altitude above ground and is falling or flying at a high speed. Deploying parachutes with riser rings may artificially strengthen the parachute initially while allowing the parachute to catch its full capacity of air after the ring drops down.

FIG.20Cis a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after deployment of an additional parachute. In the example shown, parachute2002and parachute2004are filled with air. Parachute2006has been deployed from aircraft2000. In some embodiments, parachute2006is a parachute optimized for low altitude or low speed conditions. Parachute2006may be lightweight and have a larger diameter than parachute2002and parachute2004. In some embodiments, the automated aircraft recovery system monitored the condition of aircraft2000, and as appropriate for the situation, deployed various parachutes.

FIG.21Ais a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after deployment of a first parachute. In some embodiments, the automated aircraft recovery system considers recovery mechanisms, components, or systems available to it. In the example shown, aircraft2100has stored parachute2104. Parachute2102is deployed. In some embodiments, parachute2102is meant for an initial slowing down of the aircraft but is not configured to slow the aircraft to a speed slow enough for landing.

FIG.21Bis a diagram illustrating an embodiment of an aircraft comprising an automated aircraft recovery system after deployment of a second parachute via a multi-rocket parachute deployment system. In the example shown, parachute2102is filled with air. Parachute2104may be deployed using a multi-rocket parachute deployment system. In the example shown, rocket_22110pulls riser2106through aircraft2100. Cam cleat2108prevents riser2106from being pulled back up towards parachute2104. In some embodiments, an obstacle such as a flock of birds prevented parachute2104from being deployed at a higher altitude above ground. The automated recovery system may have determined to deploy parachute2104at a low altitude because the use of rocket_22110allows parachute2104to be filled with air rapidly. In some embodiments, a parachute may be configured to have a choice of deployment methods. In some embodiments, a parachute has only one predetermined method of deployment.

FIG.22is a flow diagram illustrating an embodiment of an automated aircraft recovery system process. In some embodiments, the system comprises an enabled mode and a disabled mode. For example, a pilot may disable the automated aircraft recovery system in the event the aircraft is being used to perform stunts. The flow ofFIG.22may not be followed in the event that the pilot has disabled the system.

In2200, it is determined whether aircraft recovery is required. In some embodiments, determining whether aircraft recovery is required is carried out by a process described inFIG.23. In the event that aircraft recovery is not required, the process is finished. In some embodiments, in the event that aircraft recovery is not required, the system continues to check whether it is required based on a predetermined time interval. In the event that aircraft recovery is required, in2202it is determined whether parachute(s) are available for deployment. For example, the system may determine whether the one or more parachutes are in good condition. In some embodiments, the parachutes may be required to be replaced regularly (e.g. every few years). In some embodiments, the system may check the last time the parachutes were replaced or the last time a maintenance check was performed on the parachutes in order to determine whether the parachutes are available for deployment. In some embodiments, the system checks that a parachute is in working order or its deployment mechanism is in working order. In the event that parachute(s) are not available for deployment, in2214aircraft maneuver based recovery is executed and the process is finished. In some embodiments, aircraft maneuver based recovery comprises changing the flight path of the aircraft in order to recover the aircraft. For example, the aircraft may be flown out to a body of water where it is able to land safely without any parachutes. The aircraft may enter a steep climb in order to avoid crashing into ground.

In the event that parachute(s) are available for deployment, in2204it is determined whether the parachute(s) can be deployed. In some embodiments, the process to determine whether the parachute(s) can be deployed is described inFIG.24. In the event that the parachute(s) can be deployed, in2212the parachute(s) are deployed and the process is finished. In the event that the parachute(s) cannot be deployed, in2206it is determined whether the aircraft can be maneuvered to where the parachute(s) can be deployed. In the event that they can be maneuvered to where the parachute(s) can be deployed, in2208an aircraft maneuver is executed and the process returns to2204.

In the event that the aircraft cannot be maneuvered to where the parachute(s) can be deployed, an indication of error or needed action is sent in2210. In some embodiments, the system provides instruction to a pilot of an aircraft. For example, the pilot may receive a message that the automated aircraft recovery system is unable to stabilize flight. The pilot may manually stabilize the aircraft, causing the aircraft to reach a position that the automated aircraft recovery system is able to continue recovery efforts. The automated aircraft recovery system may not be able to carry out a highly complex aircraft maneuver without manual input from a pilot. After sending the indication of error or needed action in2210, the system determines whether the parachute(s) can be deployed in2204. In some embodiments, the pilot's actions corrected the error and the parachute(s) are able to be deployed or the automated aircraft recovery system is able to maneuver to where the parachute(s) can be deployed.

FIG.23is a flow diagram illustrating an embodiment of an automated aircraft recovery system recovery need determination process. In some embodiments, the control mechanism of the automated aircraft recovery system determines an expected state of an aircraft, determines whether a state of the aircraft matches the expected state, and in the event the state of the aircraft does not match the expected state, performs the recovery action. The time that passes between a moment of emergency to when the aircraft is fully caught by the parachute may be critical in recovering the aircraft. In some typical recovery systems, waiting for a human indication to trigger recovery takes roughly half of the time between the moment of emergency and when the aircraft is fully caught. In some embodiments, the automated aircraft recovery system increases chances of aircraft recover by automatically recognizing the need for recovery and determining an optimal mode of action. In some typical recovery systems, a human may choose to perform a recovery action that is not optimal based on the conditions, causing the aircraft to become unrecoverable.

In2300, sensor data is received. In2302, it is determined whether aircraft components required for flight are functioning. For example, the system may perform a check on structural, electrical, mechanical, or any appropriate component of the aircraft. The system may recognize a lack of a repeated signal intended to be received from a component. In the event that aircraft components required for flight are not functioning, in2308it is indicated that recovery is required and the process is finished. In some embodiments, having a component that is critical to flight malfunctioning causes a need to trigger a series of emergency recovery actions.

In the event that the components are functioning, in2304an expected state of the aircraft is determined. In2306, it is determined whether sensor data indicates the aircraft state is the expected state. For example, experiencing a steep climb is expected in the event of a take-off but is cause for an emergency response if it occurs in the middle of the flight. In the event that the aircraft state is not the expected state, in2308it is indicated that recovery is required and the process is finished. In the event that the aircraft state is the expected state, the process returns to2300. In some embodiments, the process ofFIG.23is carried out as long as the aircraft remains airborne.

FIG.24is a flow diagram illustrating an embodiment of an automated aircraft recovery system parachute deployment determination process. The process may determine whether a parachute can be deployed. In2400, it is determined whether environmental conditions impede deployment. In the event that environmental conditions impede deployment, in2408it is indicated that the parachute(s) cannot be deployed. This information may be used by the system to maneuver the aircraft to a better position. In the event that environment conditions do not impede deployment, in2402it is determined whether a delay is required. In some embodiments, no obstacles are in the path of the aircraft, but it is preferred to launch the parachute when the aircraft is closer to the ground. For example, launching the parachute high may result in the aircraft landing far from where it is desired to land. In the event that a delay is required, in2404the system delays and the process continues to2406. In the event a delay is not required, the process continues to2406. In2406, it is indicated that parachute(s) can be deployed and the process is finished.

Although the foregoing embodiments have been described in some detail for purposes of clarity of understanding, the invention is not limited to the details provided. There are many alternative ways of implementing the invention. The disclosed embodiments are illustrative and not restrictive.