Fault tolerant flight control architecture

1. A flight control system for an aircraft, comprising:

a flight control computer (FCC) configured for:

providing at least a first flight function and a second flight function;

sending, to one or more effectors of the aircraft, first command signals based at least in part on the first flight function and the second flight function, wherein the one or more effectors are associated with control of flight characteristics of the aircraft; and

a second computer, configured for:

providing, as a primary function, one or more non-flight critical functions associated with operation of the aircraft, wherein the one or more non-flight critical functions are different from the first flight function and the second flight function;

monitoring operation of the FCC;

determining whether the FCC has failed; and

providing a fail-safe mode for at least the first flight function in response to determining that the FCC has failed, wherein the providing the fail-safe mode comprises:

providing one or more critical flight functions, wherein the first flight function is a critical flight function of the one or more critical flight functions; and

sending, to the one or more effectors, second command signals based at least in part on the one or more critical flight functions, wherein the second command signals replace at least one first command signal that is associated with the first flight function.

2. The flight control system of claim 1 , wherein the first flight function is one of a flight stabilization function or a rate feedback augmentation, wherein the second flight function is one of a guidance or tracking task, and wherein the one or more non-flight critical functions are associated with determining vehicle mission routing.

3. The flight control system of claim 1 , wherein the monitoring operation of the FCC comprises monitoring messages sent by the FCC.

4. The flight control system of claim 3 , wherein the determining whether the FCC has failed comprises determining that the FCC has failed in response to the FCC failing to send a message within a predetermined time.

5. The flight control system of claim 3 , wherein the determining whether the FCC has failed comprises determining that the FCC has failed in response to detecting that the FCC has transmitted one or more invalid messages.

6. The flight control system of claim 1 , wherein the determining whether the FCC has failed comprises:

sending a flight function takeover message to the FCC; and

performing at least one of:

determining that the FCC has failed in response to one of the FCC failing to respond to the flight function takeover message, or the FCC responding with a response other than a flight function takeover rejection message; or

determining that the FCC has not failed in response to one of the FCC responding with a flight function takeover rejection message.

7. The flight control system of claim 1 , wherein the providing one or more critical flight functions comprises starting the critical flight functions and assigning the critical flight functions a higher priority for processing or resources than a priority assigned to the one or more non-flight critical functions.

8. The flight control system of claim 1 , wherein the providing one or more critical flight functions comprises providing a first critical flight function that is analogous to the first flight function, and further comprises omitting performance of the second flight function; and

wherein the providing the fail-safe mode further comprises reducing processing of the one or more non-flight critical functions.

9. A system, comprising:

at least one processor; and

at least one non-transitory computer readable medium storing thereon computer program code for performing as a backup system for a flight control computer (FCC) in a flight control system of an aircraft, wherein the computer program code includes instructions for:

providing, as a primary function, one or more non-flight critical functions associated with operation of the aircraft, wherein the one or more non-flight critical functions are different from a first flight function and a second flight function provided by the FCC, wherein the first flight function is one of a flight stabilization function or a rate feedback augmentation, and wherein the second flight function is one of a guidance or tracking task;

monitoring operation of the FCC;

determining whether the FCC has failed; and

performing, in response to determining that the FCC has failed, at least:

providing one or more critical flight functions, wherein providing the one or more critical flight functions comprises providing a first critical flight function that is analogous to the first flight function, and further comprises omitting performance of the second flight function; and

sending, to one or more effectors of the aircraft, second command signals based at least in part on the one or more critical flight functions, wherein the second command signals replace at least one first command signal that is sent by the FCC and that is associated with the first flight function.

10. The system of claim 9 , wherein the instructions for monitoring operation of the FCC include instructions for monitoring messages sent by the FCC.

11. The system of claim 10 , wherein the instructions for determining whether the FCC has failed include instructions for determining that the FCC has failed in response to the FCC failing to send a message within a predetermined time.

12. The system of claim 10 , wherein the instructions for determining whether the FCC has failed include instructions for determining that the FCC has failed in response to determining that the FCC has transmitted one or more invalid messages.

13. The system of claim 9 , wherein the instructions for determining whether the FCC has failed include instructions for:

sending a flight function takeover message to the FCC; and

performing at least one of:

determining that the FCC has failed in response to one of the FCC failing to respond to the flight function takeover message, or the FCC responding with a response other than a flight function takeover rejection message; or

determining that the FCC has not failed in response to one of the FCC responding with a flight function takeover rejection message.

14. The system of claim 9 , wherein the instructions for providing one or more critical flight functions include instructions for starting the critical flight functions and assigning the critical flight functions a higher priority for processing or resources than a priority assigned to the one or more non-flight critical functions; and

wherein the computer program code further includes instructions for reducing processing of the one or more non-flight critical functions.

15. A method, comprising:

providing, by a second computer acting as a backup system for a flight control computer (FCC) of a flight control system for an aircraft, and as a primary function, one or more non-flight critical functions associated with operation of the aircraft, wherein the one or more non-flight critical functions are different from a first flight function and a second flight function provided by the FCC, wherein the first flight function is one of a flight stabilization function or a rate feedback augmentation, and wherein the second flight function is one of a guidance or tracking task;

monitoring operation of the FCC;

determining whether the FCC has failed; and

performing, in response to determining that the FCC has failed, at least:

providing one or more critical flight functions, wherein providing the one or more critical flight functions comprises providing a first critical flight function that is analogous to the first flight function, and further comprises omitting performance of the second flight function; and

sending, to one or more effectors of the aircraft, second command signals based at least in part on the one or more critical flight functions, wherein the second command signals replace at least one first command signal that is sent by the FCC and that is associated with the first flight function.

16. The method of claim 15 , wherein the monitoring operation of the FCC comprises monitoring messages sent by the FCC.

17. The method of claim 16 , wherein the determining whether the FCC has failed comprises determining that the FCC has failed in response to the FCC failing to send a message within a predetermined time.

18. The method of claim 16 , wherein the determining whether the FCC has failed comprises determining that the FCC has failed in response to determining that the FCC has transmitted one or more invalid messages.

19. The method of claim 15 , wherein the determining whether the FCC has failed comprises:

sending a flight function takeover message to the FCC; and

performing at least one of:

determining that the FCC has failed in response to one of the FCC failing to respond to the flight function takeover message, or the FCC responding with a response other than a flight function takeover rejection message; or

determining that the FCC has not failed in response to one of the FCC responding with a flight function takeover rejection message.

20. The method of claim 15 , wherein the providing one or more critical flight functions comprises starting the critical flight functions and assigning the critical flight functions a higher priority for processing or resources than a priority assigned to the one or more non-flight critical functions.