EP2549455B1 - Method for reconfiguring a device for monitoring the surroundings of an aircraft - Google Patents

Description

The invention relates to monitoring the environment of an aircraft.

The term "monitoring" refers to the crew's knowledge and management of information relating to the environment in which the aircraft operates, such as weather conditions, terrain and traffic.

In general, each type of information is provided by a dedicated monitoring system (radar, warning system, etc.). The collected information is returned to the crew through a display and / or audio system.

An aircraft on-board monitoring system with various levels of redundancy is known to US 6012001 .

On some devices, these monitoring units are advantageously grouped together in a single environmental monitoring system of an aircraft commonly called "Aircraft Environment Surveillance System" (AESS) according to the English terminology.

To ensure the availability and reliability of the system, each monitoring set is at least split. An AESS thus groups together at least two electronic systems, called "Aircraft Environment Surveillance Unit" (AESU) in English terminology, each grouping together a plurality of redundant monitoring assemblies.

For the sake of simplicity, a master / slave architecture is chosen to manage the transfer of information to the rendering devices (display, audio system ... etc.). Thus, during normal operation, only the information from the monitoring systems of the master system is returned to the crew.

In case of unavailability of a monitoring system of the master system, a centralized electronic monitoring procedure of the aircraft named "Electronic Centralized Aircraft Monitoring" in English terminology (ECAM) invites pilots to act on a control panel provided for this purpose to reconfigure the systems and, thus, confer the status of master to the previously slave system in order to remove all the information.

This method, however, has disadvantages, in particular, in case of cross-failure of two sets. Here, cross-failure means the simultaneous unavailability of a monitoring set of a first system and a non-redundant monitoring set (not having the same type of information) of a second system.

Indeed, in this case, the crew has to choose between the data of the first system and those of the second system. For example, if both the terrain monitoring set of the first system and the weather monitoring set of the second system are down, the crew must choose between field data or weather alerts.

While this choice is easy in most cases, some situations, such as an approach or take-off in bad weather on mountainous terrain, make it more difficult.

The invention proposes to remedy this disadvantage.

• détection d'indisponibilité simultanée d'au moins un ensemble de surveillance dudit premier système et d'au moins un ensemble de surveillance d'un deuxième système ;
• dans le cas où lesdits au moins deux ensembles indisponibles sont non redondants entre eux, sélection automatique des informations issues, d'une part, des ensembles de surveillance disponibles dudit premier système, et, d'autre part, du ou des ensembles de surveillance redondants du deuxième système et qui correspondent à l'ensemble ou aux ensembles de surveillance indisponible(s) du premier système.

The invention therefore relates to a method for reconfiguring an aircraft environmental monitoring device comprising at least two redundant electronic systems, each system comprising at least two monitoring assemblies able to provide information relating to the environment. of the aircraft,
characterized in that it comprises the following steps:

• detecting the simultaneous unavailability of at least one monitoring set of said first system and at least one monitoring set of a second system;
• in the case where said at least two unavailable assemblies are non-redundant with each other, automatic selection of the information derived, on the one hand, from the available monitoring sets of said first system, and, on the other hand, from the redundant monitoring set (s) of the second system and corresponding to the unavailable surveillance set (s) of the first system.

With such a method, even in case of cross-failure, if there remains at least one set of monitoring of a given type of information, the latter will be made available to the crew.

In this case, it will no longer be necessary for the crew to make a choice or even to perform a reconfiguration because it is done automatically.

It will be noted that the method does not exclude manual intervention by a crew member, for example in the event of a simple failure of a single monitoring unit, for which the switchover from one system to the other. other remains possible. The invention also covers automatic reconfiguration in this case.

According to a possible characteristic of the invention, the redundant electronic systems each comprise at least one set of monitoring of the meteorological conditions and at least one set of monitoring of the surrounding terrain.

These sets are commonly considered to be the most common on aircraft. Other monitoring assemblies that may be relevant to other information relating to the aircraft environment may also be considered, in particular a traffic avoidance and collision avoidance system (TCAS). English terminology) and an XPDR-type transponder.

Advantageously, each system comprises at least one so-called autonomous monitoring set, an autonomous monitoring set including an internal database so that it can operate without requiring input from another set of the system considered. .

Thus, a monitoring set that usually depends on another set belonging to the same system to correct or confirm its information becomes independent of that other set to function properly.

According to an advantageous characteristic, the weather monitoring assembly is an autonomous unit.

This applies particularly to the case where such a set includes a weather radar. Indeed, the latter may need to correct echoes that would not come from a meteorological phenomenon, such as those from the ground or high ground.

For this, the radar commonly uses the information of the terrain monitoring system that allows it to remove them in a function known as decluttering or, according to the Anglo-Saxon term, "declutter".

A stand-alone weather monitoring package includes a simplified terrain database that allows it to de-clutter the radar and thus function properly regardless of the state of the terrain monitoring set of the system to which it belongs.

According to a possible characteristic of the invention, the surveillance assemblies comprise subsets of surveillance.

This may particularly be the case for weather monitoring packages and surrounding terrain.

Thus, according to a possible characteristic of the invention, the weather monitoring assembly comprises at least one subset of turbulence monitoring, at least one sub-set of weather display or display of WX reflectivity zones. DISPLAY for "Weather Display" in English terminology) and at least one subset of windshear monitoring ("Windshear" in English terminology).

Likewise, according to a possible characteristic of the invention, the surrounding terrain monitoring assembly comprises at least one subset of terrain proximity alert and at least one subset with a terrain database of which the information can be displayed, as well as an alert system based on this database (TERR SYS for "field system" in English terminology).

According to an advantageous characteristic, the monitoring device integrates at least one category of so-called priority subassemblies, so that in the event of the simultaneous unavailability of a subset of a first surveillance system and a non-redundant subset of a second surveillance system, the selection step includes selecting information from the system including the priority subset.

A priority subset is in particular a subset collecting information considered to be more important than the others or more useful for the crew.

Thus, thanks to the invention, if one of the monitoring sets is only partially unavailable due to the unavailability of one of its subsets, it is possible to maintain the transmission of the most important information. there remains at least one priority subset of available.

As the TERR SYS data are usually considered to be operationally more important for the crew, the at least one subset TERR SYS is a priority subset, particularly with respect to other subsets such as a warning system of ground proximity or Ground Proximity Warning System in English terminology (GPWS).

According to a possible characteristic of the invention, the method further comprises a step of transferring the information to an audio and / or video reproduction device.

The device in question consists in particular of one or more vertical displays ("Vertical Display" in English terminology) or navigation ("Navigation Display" in English terminology) located inside a cockpit d 'aircraft. It can be replaced or supplemented by a sound alert system. The display (s) and / or warning system may or may not be part of the monitoring device.

• des moyens de détection d'indisponibilité simultanée d'au moins un ensemble de surveillance dudit premier système et d'au moins un ensemble de surveillance d'un deuxième système ;
• des moyens de sélection, qui, dans le cas où lesdits au moins deux ensembles indisponibles sont non redondants entre eux, sont aptes à sélectionner les informations issues, d'une part, des ensembles de surveillance disponibles dudit premier système, et, d'autre part, du ou des ensembles de surveillance redondants du deuxième système et qui correspondent à l'ensemble ou aux ensembles de surveillance indisponible(s) du premier système.

The invention also relates to an environment monitoring device for an aircraft comprising at least two redundant electronic systems, each system comprising at least two monitoring assemblies able to provide information relating to the environment of the aircraft, which includes:

• means for detecting simultaneous unavailability of at least one monitoring set of said first system and at least one monitoring set of a second system;
• selection means, which, in the case where said at least two unavailable sets are non-redundant with each other, are able to select the information derived, on the one hand, from the available monitoring sets of said first system, and, on the other hand, the redundant monitoring set (s) of the second system and corresponding to the unavailable surveillance set (s) of the first system.

The device thus comprises means for its reconfiguration in the case referred to below.

This device has the same advantages as those provided by the method briefly described above.

Advantageously, each system of the device comprises at least one so-called autonomous monitoring set, a stand-alone monitoring set including an internal database so that it can operate without requiring input from another set of information. considered system.

According to a particular characteristic, the surveillance assemblies of the monitoring device comprise subsets of surveillance.

According to an advantageous characteristic, the monitoring device comprises a category of so-called priority subassemblies, so that in the event of the simultaneous unavailability of a subset of a first surveillance system and of a non-subset redundant of a second monitoring system, the selection means are able to select the information from the system comprising the priority subset.

According to a particular characteristic, the redundant electronic systems of the monitoring device each comprise at least one set of monitoring of the meteorological conditions and at least one set of monitoring of the surrounding terrain.

Advantageously, the device for monitoring the meteorological conditions of the device is an autonomous unit.

According to a particular characteristic, the monitoring device for monitoring the meteorological conditions comprises at least one subset of turbulence monitoring, at least one subset of the weather display (WX DISPLAY) and at least one sub-unit. windshear monitoring system.

According to a particular feature of the device, the surrounding terrain monitoring assembly includes at least one terrain proximity alert subassembly and at least one subset with a terrain database whose information can be displayed. , as well as an alert system based on this database or "Terrain System" in English terminology (TERR SYS).

Advantageously, such a subset TERR SYS is a priority subset.

According to particular provisions, the monitoring device according to the invention further comprises means for transferring the information to an audio and / or video reproduction device.

The invention finally relates to an aircraft comprising a device according to the invention as briefly described above.

• la figure 1 est une représentation schématique du dispositif selon l'invention dans un fonctionnement normal ;
• la figure 2 représente le dispositif de la figure 1 en cas d'indisponibilité d'un ensemble de surveillance d'un premier système électronique ;
• la figure 3 représente le dispositif de la figure 1 en cas d'indisponibilité simultanée de deux ensembles de surveillance non redondants de systèmes différents ;
• la figure 4 est un organigramme du procédé selon l'invention ;
• la figure 5 représente le dispositif de la figure 1 en cas d'indisponibilité partielle de deux ensembles de surveillance redondants de deux systèmes différents redondants, les sous-ensembles indisponibles étant eux-mêmes redondants ;
• la figure 6 représente le dispositif de la figure 1 en cas d'indisponibilité simultanée de deux ensembles de surveillance de deux systèmes différents redondants, les sous-ensembles indisponibles étant eux-mêmes non redondants ;

Other features and advantages will become apparent from the following description, given by way of nonlimiting example and with reference to the appended drawings, in which:

• the figure 1 is a schematic representation of the device according to the invention in normal operation;
• the figure 2 represents the device of the figure 1 in the event of unavailability of a monitoring set of a first electronic system;
• the figure 3 represents the device of the figure 1 in the event of the simultaneous unavailability of two non-redundant monitoring sets of different systems;
• the figure 4 is a flowchart of the method according to the invention;
• the figure 5 represents the device of the figure 1 in the event of partial unavailability of two redundant monitoring assemblies of two different redundant systems, the unavailable subsets themselves being redundant;
• the figure 6 represents the device of the figure 1 in the event of the simultaneous unavailability of two monitoring sets of two different redundant systems, the unavailable subsets themselves being non-redundant;

A device for monitoring the environment of the aircraft according to the invention is represented in FIG. figure 1 .

This monitoring device 1, or AESS comprises a plurality of redundant electronic monitoring systems.

In this case, the device 1 comprises a first system 2 and a second system 2 'redundant, or AESU.

Each system (2, 2 ') comprises a plurality of monitoring sets, the number of which depends in particular on the type of information that is to be made available. In order to simplify the denominations of these sets, one will qualify as a first set of monitoring set included in the first monitoring system and second set of monitoring set included in the second monitoring system.

The first and second systems (2, 2 ') here each comprise a weather radar 4,4', a terrain avoidance warning system 6,6 ', a warning system for collision avoidance 8,8' and a transponder 10, 10 '.

Preferably, these monitoring assemblies are respectively of known types: weather radar or "Weather Radar" (WXR), Terrain Avoidance Warning System (TAWS), collision avoidance system and Traffic Avoidance and Collision System (TCAS) and Transponder (XPDR) traffic. These acronyms will subsequently be used to designate different surveillance sets.

In the embodiment of the device 1 presented to the figure 1 , some of these monitoring sets are composed of subsets.

Thus the first and second sets WXR 4,4 'are each composed of three subsets: a system for predicting the shear of the air for Predictive Windshear (PRED W / S) 4a, 4a ', a turbulence monitoring system (TURB) 4b, 4b' and a system for displaying weather conditions or displaying reflectivity zones or "Weather Display" (WX DISPLAY) 4c, 4c '. These will also be named by their acronyms later.

The first and second sets TAWS 6, 6 'are each composed of a system with a field database whose information can be displayed, and a warning system based on this database TERR SYS 6a, 6a 'and the ground proximity warning system GPWS (Ground Proximity Warning System) 6b, 6b'.

Each electronic monitoring system (2, 2 ') furthermore comprises an IOM interface module 12, 12' ("Input Ouput Module") with the audio and / or video reproduction device 14 present in the cockpit. Such a device is known from the prior art and will not be described here, but it will be noted that it may possibly be part of the monitoring device 1.

The monitoring device also includes a switch 15, which may be of purely software nature and not necessarily a physical switch.

Finally, the monitoring device 1 comprises a control panel intended for an external operator, not shown but also known from the prior art. Indeed, if the method described above allows automatic reconfiguration in case of cross-failure, it does not exclude manual intervention of an operator such as a member of the crew.

Each of the subsystems of surveillance has the role of collecting data from the environmental conditions in which the aircraft operates. This information is grouped together in the monitoring set that the subsets constitute.

Thus the subsets PRED W / S 4a, 4a ', TURB 4b, 4b' and WX DISPLAY 4c, 4c 'collect and / or contain information related to the weather, grouped respectively in the sets WXR 4, 4'. The GPWS subassemblies 6b, 6b 'and the subgroups TERR SYS 6a, 6a' collect and / or contain field information grouped together in the TAWS sets 6,6 'respectively.

Finally, the TCAS 8,8 'and XPDR 10,10' packages collect information from the air traffic situation.

The information collected by the sets of the first system 2 and the second system 2 'are respectively communicated or taken to the first and second interface modules 12, 12' whose function is to ensure their availability and to manage the interface with the rendering device 14.

In addition, the first and second interface modules 12, 12 'provide internal communication ("cross-talk" in English terminology) between the first and second systems 2, 2'. The latter is particularly autonomous and does not require any data external to the device 1. To do this, it is for example based on a bus of known type AFDX.

Internal communication is used to exchange information about the availability of monitoring sets. Thus, for example, if the first set WRX 4 or one of its subsets fails or becomes unavailable for another reason, the first IOM module 12 informs the second IOM 12 'which, in exchange, indicates whether the second set WXR 4 'is available.

In all cases, the information provided to the rendering device 14 is through the switch 15 which determines which of the two systems is the master system. Only the IOM of the master system, in this case the IOM 12 on the Figure 1 transfers data to the rendering device 14. These data come either from the monitoring sets of the master system or the IOM of the slave system, here the IOM 12 'of the system 2'.

The figure 2 illustrates a case of failure or unavailability for another reason of the first TAWS 6 monitoring set.

In such a case, the procedures associated with the prior art monitoring devices cause the crew to use the control panel to switch from the first system 2 to the second system 2 '. The first system 2 thus passes from master to slave status through the switch 15 and the second interface module 12 'communicates to the rendering devices the information only from the second sets.

If subsequently, as illustrated on the figure 3 , the second monitoring unit WXR 4 'also fails or becomes unavailable for another reason, the crew may according to the prior art be continue to obtain the remaining information of the second system 2', ie only those relating to the field through the second set TAWS 6 ', or reverse again the status of the second system 2' and the first system 2 to obtain only the remaining information of the first system 2, ie those relating to the weather from the first set WXR 4.

As explained above, this choice is potentially difficult in some situations.

The process according to the invention, illustrated in figure 4 , fix this problem.

This reconfiguration method 16 comprises a first step of cross-fault detection S1.

If a cross-failure is detected, it triggers a step S2 redundancy test of unavailable monitoring sets.

If this test is negative, a step of selecting the available sets S3 is triggered.

If it is positive, a step S4 detecting unavailable subsets is engaged.

At the end of this step S4, a redundancy test step of the subsets S5 is initiated.

If this new test is negative, a step S6 of subset selection (s) priority (s) is engaged.

If it is positive, an S7 wait step is triggered.

The functions and consequences of these different steps will now be described in more detail in relation to the example of the figure 3 .

The detection step S1 has the function of detecting the simultaneous unavailability of a monitoring system of the first system 2 and a monitoring system of the second system 2 '. This step is notably carried out by availability detection means that are the first and second interface modules 12, 12 '.

Here, the first TAWS monitoring set 6 and the second WXR monitoring set 4 'being simultaneously unavailable, the redundancy test step S2 monitoring sets is triggered.

This step is intended to determine if the two sets whose simultaneous unavailability has been detected are redundant or not, that is to say if they are of the same type and perform the same function within their respective systems. Again this step is performed by the interface modules that are able to determine which sets are inactive.

In this case, in the example of figure 3 the first monitoring unit TAWS 6 and the second monitoring unit WXR 4 'are not redundant, the selection step of the available sets S3 starts.

During this step, the information obtained from, on the one hand, the available monitoring sets of the first system 2, that is to say coming from the WXR 4, the TCAS 8 and the XPDR 10, is selected. on the other hand, the redundant monitoring set of the second system 2 'corresponding to the unavailable monitoring set of the first system 2, that is to say the TAWS 6'.

To do this, the IOM module 12 'communicates the data from the TAWS 6' to the IOM module 12 which transfers these data, in addition to those from the available sets of its own system, to the rendering device 14.

In this way, unlike in the prior art, in the event of a cross-failure of surveillance assemblies, the crew need not make a choice between certain types of information because these are all available. The use of the control panel is no longer necessary because the reconfiguration is done automatically.

In addition, unless there is a total failure of a master system, it is no longer necessary to perform master-to-slave system failovers, whether these failovers are manual or automatic.

However, the monitoring device or the display device may be equipped with warning means informing the crew of the unavailability of sets and the reconfiguration that was performed. The crew also retains the ability to perform any manual reconfigurations as for the devices of the prior art.

Finally, according to an advantageous arrangement with respect to the devices and methods of the prior art, the WXR sets 4, 4 'have an internal terrain database which enables them to de-clutter the meteorological radar by suppressing the echoes related to the ground or to the terrain. "Declutter function" without requiring the information from the TAWS set 6,6 'of their system.

The steps resulting from a positive response to the test performed in the redundancy test step of the S2 sets will now be described.

For this, we will refer to figures 5 and 6 which illustrate cases where the first and second TAWS monitoring assemblies 6, 6 'are simultaneously unavailable.

In this case, the failure detection (or unavailability) step of the subsets S4 starts.

Indeed, although a set is considered unavailable when one of its subsets is unavailable, some of its subsets can continue to work.

Thus, during the step of detecting failure of the subsets S4, the IOM modules 12, 12 'detect which subsets of the unavailable sets are unavailable, and in which case, identify them.

Then, the subset redundancy test step S5 starts. The purpose of this step is to determine whether the simultaneously unavailable subsets of the redundant sets themselves are redundant with one another. Again this test is performed by the IOM interface modules 12, 12 'which have the means to identify unavailability and to make this distinction.

If this test is positive as in the example of the figure 5 where the first and second GPWS subsets 6b, 6b 'are simultaneously unavailable, the waiting step S7 is triggered.

This step does not lead to any action on the part of the device, because to perform a reconfiguration of the first system 2 to the second system 2 'or the reconfiguration of some sets would not affect the availability of information.

On the other hand, if the subset redundancy test step S5 concludes with a negative test, as would be the case in the example of the figure 6 where the first subset TERR SYS 6a and the second subset GPWS 6'b non-redundant are simultaneously unavailable, the step of selecting priority subsets S6 is engaged.

By priority subassembly is meant a subassembly whose category of information it emits is considered to be more important operationally for the crew than the others.

During this step, information originating from the system comprising the subset identified as having priority is selected.

In this case, subsets of the type TERR SYS have priority because they are commonly regarded as more useful to the crew. The method 16 therefore selects the information of the second system 2 'whose subset TERR SYS 6'a is still available.

Again, this selection is made by the IOM interface module 12 'which then communicates the selected information to the IOM interface module 12 which itself transfers them to the reproduction device 14.

Note that thanks to the internal database of sets WXR 4, 4 ', even in case of simultaneous unavailability of redundant sets TAWS 6,6' (case not shown), sets WXR can work properly and operate the function of "Declutter".

The process steps 16 described above are executed automatically. However, they do not exclude by a crew intervention on the control panel, which may be required especially in case of failure of a single monitoring unit to exchange status of systems 2,2 '.

It will further be noted that a different number of monitoring systems, monitoring assemblies in each system or even monitoring subassemblies in each set would not alter the principle of the invention which can be adapted accordingly. .

Claims (15)

1. Method for reconfiguring a device for monitoring the surroundings of an aircraft comprising at least two redundant electronic systems (2, 2'), each system comprising at least two monitoring assemblies (4-10, 4'-10') capable of supplying information related to the surroundings of the aircraft,
   characterized in that it comprises the following steps:

   - detection of the simultaneous unavailability (S1, S4) of at least one monitoring assembly (4-10) of said first system (2) and of at least one monitoring assembly (4'-10') of a second system (2');

   - in the case where said at least two unavailable assemblies (4-10, 4'-10') are not mutually redundant, automatic selection (S3, S6) of the information output, on the one hand, by the available monitoring assemblies (4-10) of said first system (2), and, on the other hand, by the redundant monitoring assembly or assemblies (4'-10') of the second system (2') which correspond to the unavailable monitoring assembly or assemblies (4-10) of the first system (2).
2. Reconfiguration method according to Claim 1, characterized in that each system (2, 2') comprises at least one so-called autonomous monitoring assembly, an autonomous monitoring assembly comprising an internal database so that it can operate without requiring a contribution of information originating from another assembly (4-10, 4'-10') of the system (2, 2') under consideration.
3. Reconfiguration method according to one of Claims 1 or 2, characterized in that the redundant electronic systems (2, 2') each comprise at least one assembly for monitoring the meteorological conditions (4, 4') and at least one assembly for monitoring the surrounding terrain (6, 6').
4. Reconfiguration method according to Claims 2 and 3, characterized in that an assembly for monitoring the meteorological conditions (4, 4') is an autonomous assembly.
5. Reconfiguration method according to one of Claims 1 to 4, characterized in that the monitoring assemblies (4-10, 4'-10') include monitoring sub-assemblies (4a-4c, 6a-6b, 4'a-c, 6'a-6'c).
6. Reconfiguration method according to Claims 3 and 5, characterized in that the assembly for monitoring the meteorological conditions (4, 4') comprises at least one sub-assembly for monitoring turbulence (4b, 4'b), at least one sub-assembly for displaying the meteorological conditions (4c, 4'c) and at least one sub-assembly for monitoring wind shear (4a, 4'a).
7. Reconfiguration method according to Claims 3 and 5, characterized in that the assembly for monitoring the surrounding terrain (6, 6') comprises at least one ground proximity warning sub-assembly (6b, 6'b) and at least one sub-assembly equipped with a terrain database and an associated warning system (6a, 6'a).
8. Reconfiguration method according to one of Claims 5 to 7, characterized in that the monitoring device comprises at least one category of so-called priority sub-assemblies, so that in the event of simultaneous unavailability of a sub-assembly of a first monitoring system (4a-4c, 6a-6b) and of a non-redundant sub-assembly of a second monitoring system (4'a-4'c, 6'a-6'b), the selection step (S6) provides for selecting the information output by the system comprising the priority sub-assembly.
9. Reconfiguration method according to Claims 7 and 8, characterized in that said at least one sub-assembly equipped with a terrain database and an associated warning system (6a, 6'a) is a priority sub-assembly.
10. Reconfiguration method according to one of Claims 1 to 9, characterized in that it moreover comprises a step of transferring information to an audio and/or video reproduction device (14).
11. Device for monitoring the surroundings of an aircraft comprising at least two redundant electronic systems (2, 2'), each system comprising at least two monitoring assemblies (4-10, 4'-10') capable of supplying information related to the surroundings of the aircraft,
    characterized in that it comprises:

    - means (12, 12') for detecting the simultaneous unavailability of at least one monitoring assembly of said first system (4-10) and of at least one monitoring assembly of a second system (4'-10');

    - means (12, 12') for automatic selection, which, in the case where said at least two unavailable assemblies (4-10, 4'-10') are not mutually redundant, are capable of selecting the information output, on the one hand, from the available monitoring assemblies (4-10) of said first system (2), and, on the other hand, of the redundant monitoring assembly or assemblies (4'-10') of the second system (2') which correspond to the unavailable monitoring assembly or assemblies (4-10) of the first system (2).
12. Monitoring device according to Claim 11, characterized in that each system (2, 2') comprises at least one so-called autonomous monitoring assembly, an autonomous monitoring assembly comprising an internal database so that it can operate without requiring a contribution of information originating from another assembly (4-10, 4'-10') of the system (2, 2') under consideration.
13. Monitoring device according to one of Claims 11 to 12, characterized in that the monitoring assemblies (4-10, 4'-10') include monitoring sub-assemblies (4a-4c, 6a-6b, 4'a-c, 6'a-6'c).
14. Monitoring device according to Claim 13, characterized in that it incorporates at least one category of so-called priority sub-assemblies, so that in the event of simultaneous unavailability of a sub-assembly of a first monitoring system (4a-4c, 6a-6b) and of a non-redundant sub-assembly of a second monitoring system (4'a-4'c, 6'a-6'c), the selection means (12, 12') are capable of selecting the information output by the system comprising the priority sub-assembly.
15. Aircraft comprising a device according to one of Claims 11 to 14.

Images