Device for loading data into computer processing units from a data source

Abstract

A data loading device for loading data into computer processor units from a data source, the device comprising at least a first connector for connecting to the data source and provided with a PHY component, and a plurality of second connectors for connecting to the computer processor units and each provided with a respective PHY component, the first connector being connected to the second connectors by a first selector module in order to define a single down channel so as to transmit data from the first connector to each of the second connectors individually, and by a second selector module for defining a single up channel so as to transmit data in the opposite direction, the selector modules being arranged to be capable of connecting only one of the second connectors at a time to the first connector and the device including a control unit for controlling the selector modules to select which second connector to connect to the first connector.

Claims

1. A method for loading data into computer processor units of an aircraft from a data source, with a data loading device comprising at least a first connector for connecting to the data source and provided with a PHY component, and a plurality of second connectors for connecting to the computer processor units and each provided with a respective PHY component, the first connector being connected to the second connectors by a first selector module in order to define a single down channel so as to transmit data from the first connector to each of the second connectors individually, and by a second selector module for defining a single up channel so as to transmit data in the opposite direction, the first and second selector modules being arranged to be capable of connecting only one of the second connectors at a time to the first connector and the device including a control unit for controlling the selector modules to select which second connector to connect to the first connector as a function of an identifier of the PHY component to which each connector is connected, the device comprising a chassis having mounted thereon the selector modules, the first connector, and the second connectors, the control unit comprising a local control unit and a remote control unit connected by a cable to the local control unit and provided with a man/machine interface, the remote control unit comprising a housing provided with an external connector directly connected to the first connector of the loading device in order to connect the data source to the first connector via the external connector of the remote control unit and the remote control unit comprising a memory containing a table associating an identifier and a transfer rate of each computer unit connected to one of with the second connectors, the method comprising: when the remote control unit is switched on by an operator, verifying that the aircraft is stationary, and where appropriate, switching on the power to the local control unit in order to load the table in the local control unit, making the remote control unit display a menu proposing updating the computer units with the possibility for the operator of selecting a computer unit for updating, making the remote control unit send an instruction to the local control unit to link the selected computer unit to the data source, making the local control unit return an acknowledgment to the remote control unit and controls the selector units so as to connect the PHY component of the first connector to the PHY component of the second connector corresponding to the selected computer unit in compliance with the content of the table that it has in memory, and set the transfer rate to the value that appears in the table, or if the selected computer unit cannot communicate at that transfer rate, undertake a negotiation in order to determine a lower transfer rate for setting up an up channel and a down channel between the PHY components of the first connector and of the second connector at the stored transfer rate or at the automatically negotiated rate, causing the update data to be transmitted.

2. The method according to claim 1, wherein the remote control unit and the local control unit are programmed respectively to form a master unit and a slave unit.

3. The method according to claim 1, wherein the remote control unit and the local control unit are programmed to communicate with each other by means of IP and UDP protocols, the remote control unit and the local control unit having static IP and MAC addresses.

4. The method according to claim 1, wherein the remote control unit is arranged to switch off the power supply to the local control unit in at least one particular situation.

5. The method according to claim 1, wherein the remote control unit and the local control unit are arranged in such a manner that the local control unit cannot be powered unless the remote control unit is powered.

6. The method according to claim 1, wherein the control unit is arranged to put the PHY components of the second connectors that are not connected to the first connector into an inactive state and to be able to put into an active state only that one of the second connectors that is connected to the first connector.

7. The method according to claim 1, wherein the selector modules are formed by an FPGA circuit having defined therein buses that are compatible with the RMII standard or connecting the selector modules to the first connector.

8. The method according to claim 1, including a test module for testing the links between the first connector and the second connectors.

9. The method according to claim 8, wherein the test module comprises: a multiplexer having an output connected to an input of the first selector module, a first input connected to the first connector, and a second input connected to a signal generator; a demultiplexer having an input connected to an output of the second selector module, a first output connected to a signal analyzer, and a second output connected to a first input of a multiplexer having a second input connected to the signal generator and an output connected to the first connector, the first connector also being connected by its up channel to the signal analyzer.

10. The method of claim 1, wherein the selector modules are controlled to select which second connector to connect to the first connector without using any MAC address of the computer processor units.

11. The method of claim 1, wherein update data to be transmitted are routed without decoding and recoding them.

12. The method of claim 1, wherein the update data to be transmitted are copied unchanged from one PHY component to another.

13. The method of claim 1, wherein each PHY component has a corresponding identifier, and the control unit controls the selector modules by transmitting to the identifier of the PHY component provided to one of the second connectors to be connected to the first connector to the selector modules.

14. A method for loading data into computer processor units of an aircraft from a data source, with a data loading device comprising at least a first connector for connecting to the data source and provided with a PHY component, and a plurality of second connectors for connecting to the computer processor units and each provided with a respective PHY component, the first connector being connected to the second connectors by a first selector module in order to define a single down channel so as to transmit data from the first connector to each of the second connectors individually, and by a second selector module for defining a single up channel so as to transmit data in the opposite direction, the first and second selector modules being arranged to be capable of connecting only one of the second connectors at a time to the first connector and the device including a control unit for controlling the selector modules to select which second connector to connect to the first connector as a function of an identifier of the PHY component to which each connector is connected, the control unit including a test module comprises: a multiplexer having an output connected to an input of the first selector module, a first input connected to the first connector, and a second input connected to a signal generator; a demultiplexer having an input connected to an output of the second selector module, a first output connected to a signal analyzer, and a second output connected to a first input of a multiplexer having a second input connected to the signal generator and an output connected to the first connector, the first connector also being connected by its up channel to the signal analyzer, the method comprising: on being switched on, making the local control unit cause a test procedure to be executed, said procedure comprising: a stage of verifying the link between the test module and each of the second connectors, comprising the steps of: controlling the selector modules so as to connect the test module to one of the second connectors; controlling the PHY component of the second connector in order to form a loop inside the loading device; causing a signal to be issued by the signal generator; and verifying in the signal analyzer that a signal corresponding to the signal as issued is indeed received within a nominal period and issuing a warning, if not, these steps being restarted for each of the second connectors; a stage of verifying the links between the test module and the first connector comprising the steps of: controlling the selector modules so as to prevent a signal from passing to the second connectors and the third connector; controlling the PHY component of the first connector to form a loop inside the loading device; causing the signal generator to issue a signal; and using the signal analyzer to verify that a signal corresponding to the signal as issued is indeed received within a nominal time period, and issuing a warning, if not.

Description

SUMMARY OF THE FIGURES

(1) Reference is made to the accompanying drawings, in which:

(2) FIG. 1 is a diagram showing a device of the invention connected to a data source and to computer units;

(3) FIG. 2 is a diagram analogous to the diagram of FIG. 1, showing the data streams in a nominal mode of operation;

(4) FIG. 3 is a diagram analogous to the diagram of FIG. 1, showing the data streams in a test mode of operation;

(5) FIG. 4 is a diagram of a variant embodiment of the remote control unit; and

(6) FIG. 5 is a diagram showing a device making it possible to avoid a plurality of PHY components of the second connectors being in their activation state simultaneously.

DETAILED DESCRIPTION OF THE INVENTION

(7) With reference to FIGS. 1 to 3, the data loading device of the invention is described herein with reference to updating computer units 100 of an aircraft, and more particularly in this example of an airliner. The computer units 100 comprise in particular computers involved in the operation of the aircraft, e.g. flight computers and navigation computers, and computer units that are dedicated to entertaining the passengers of the aircraft, and for example video-on-demand servers. The data that is updated may comprise, by way of example: a new version of a program; a correcting “patch”; updated values for parameters; There are N computer units 100 (with only three being shown in the figures) and they are referenced 100.sub.i in order to distinguish them from one another, where i varies over the range 1 to N.

(8) In conventional manner, each computer unit 100.sub.i comprises at least one memory and a processor for executing a program contained in the memory in order to process data stored in the memory and/or data coming from members, such as sensors, that are connected to the computer unit. In conventional manner, each computer unit 100.sub.i includes a connector 101 provided with a PHY component. It should be recalled that a PHY component is an analog-to-digital converter and it forms part of the physical layer of the OSI model.

(9) The data for updating the computer units 100.sub.i is stored in a data source, which, in this example, is constituted by a computer unit 200 that comprises in conventional manner at least one memory containing the update data and a processor for executing a program for loading data contained in the memory in order to enable the update data to be loaded into the computer units 100.sub.i for which said update data is intended. In conventional manner, the computer unit 200 includes a computer provided with a PHY component 201. The functions of the computer unit 200 can be taken to be equivalent to those of the PSLs of conventional systems for updating aircraft computers.

(10) The computer units 100.sub.i are connected to the computer unit 200 via a data loading device of the invention. The functions of the data loading device can be considered to be equivalent to those of the data loading routing boxes (DLRBs) of conventional updating systems for aircraft computers.

(11) This loading device, given overall reference 1, comprises: a first connector 10 provided with a PHY component; a plurality of second connectors 20.sub.i, where i lies in the range 1 to N, each provided with a respective PHY component; a third connector 30 provided with a PHY component; a first selector module 40 for selecting a down channel between the first connector 10 and one of the second connectors 20.sub.i; and a second selector module 50 for selecting an up channel between the first connector 10 and one of the second connectors 20.sub.i.

(12) The selector module 40 has an input connected to a first RMII bus 61 and N+2 outputs referenced 0 to N and X. The outputs 1 to N are each connected to the PHY component of a respective one of the second connectors 20.sub.i by a respective line 41; the output 0 is not connected; and the output X is connected to the PHY component of the third connector 30 by a line 42.

(13) The selector module 50 has an output connected to a second RMII bus 62 and N+2 inputs referenced 0 to N and X. The inputs 1 to N are each connected to the PHY component of a respective one of the second connectors 20.sub.i by a respective line 51; the input 0 is not connected; and the input X is connected to the PHY component of the third connector 30 by a line 52.

(14) The selector module 40 is arranged to define a single down channel so as to transmit data from the first connector 10 to each of the second connectors 20.sub.i individually, and the selector module 50 is arranged to define a single up channel so as to transmit data in the opposite direction. The selector modules 40 and 50 are arranged so as to be capable of connecting the first connector 10 to only one of the second connectors 20.sub.i at a time.

(15) The lines 41 are distinct from the lines 51; and the line 42 is distinct from the line 52.

(16) The RMII buses 61 and 62 are distinct from each other and they are connected to a test module given overall reference 70. More precisely, the first RMII bus 61 is connected to the output of a multiplexer 71 having a first input connected to the first connector 10 and a second input connected to a signal generator 72. The second RMII bus 62 is connected to an input of a demultiplexer 73 having a first output connected to a signal analyzer 74 and a second output connected to a first input of a multiplexer 75 having a second input connected to the signal generator 72 and an output connected to the first connector 10. The first connector 10 is also connected by its up channel to the signal analyzer 74.

(17) The selector modules 40 and 50 and the RMII buses 61 and 62 are formed on a field programmable gate array (FPGA) circuit.

(18) The selector modules 40 and 50 have a control input connected to the control output of a local control unit 80 arranged to control the selector modules 40 and 50 in order to select the second connector 20.sub.i for connecting to the first connector 10.

(19) For this purpose, and in conventional manner, the local control unit 80 comprises at least one memory and a processor for executing a program contained in the memory and arranged: to control the selector modules 40 and 50 in order to select the second connector 20.sub.i for connecting to the first connector 10; to put the PHY components of the second connectors 20.sub.i that are not connected to the first connector 10 into an inactive state; to be able to put into an active state only that one of the second connectors 20.sub.i that is connected to the first connector 10; and to perform a test procedure on starting the local control unit 80.

(20) In this example, the selector modules 40 and 50, the buses 61 and 62, the test module 70, the first connector 10, the second connectors 20.sub.i, the third connector 30, and the local control unit are all mounted on a common chassis.

(21) In conventional manner, the control device also has a remote control unit 90 that comprises at least one memory and a processor for executing a program contained in the memory in order to enable an operator to select the computer units 100.sub.i that are to be updated. The memory contains a table associating an identifier and a transfer rate of a computer unit 100.sub.i with the second connector 20.sub.i to which the computer unit 100.sub.i is connected. The remote control unit 90 is provided with a man/machine interface, specifically a screen 91 and a button 92 for selecting options displayed on the screen 91. The functions of the remote control unit 90 can be considered to be equivalent to those of the DSLU of conventional updating systems for aircraft computers.

(22) The remote control unit 90 is connected by a cable to the third connector 30 and thus to the local control unit 80. The remote control unit 90 and the local control unit 80 are programmed to communicate with each other by means of the IP and UDP protocols, with the remote control unit 90 and the local control unit 80 having static IP and MAC addresses. The remote control unit 90 and the local control unit 80 are programmed to form respectively a master unit and a slave unit.

(23) The program executed by the remote control unit 90 is arranged: when the remote control unit 90 is switched on, to detect whether the aircraft is in flight or stationary on the ground, and if stationary on the ground to allow the local control unit 80 to be powered; when the local control unit 80 is powered, to load the table in the memory of the local control unit; to display a menu on the screen 91 enabling the operator to select the computer units to be updated and to launch a test of the loading devices; and to turn off the local control unit 80 in at least one particular situation, specifically when the aircraft starts to move, and more generally to prevent the local control unit 80 from being powered unless the aircraft is stationary.

(24) It should be observed that the remote control unit and the local control unit are arranged in such a manner that the local control unit cannot be powered when the remote control unit is not powered.

(25) With reference to FIG. 2, there follows a description of an operation for loading data into the computer unit 100.sub.2.

(26) When the remote control unit 90 is switched on by the operator, the remote control unit 90 verifies that the aircraft is stationary, and where appropriate, switches on the power to the local control unit 80 in order to load the table therein. The remote control unit 90 then displays a menu proposing updating the computer units 100.sub.i with the possibility of selecting a computer unit 100.sub.i for updating. By way of example, the operator may use the button 92 to select updating of the computer unit 100.sub.2 and to connect the computer unit 200 to the first connector 10.

(27) The remote control unit 90 then sends an instruction to the local control unit 80 to link the computer unit 200 to the computer unit 100.sub.2. The local control unit 80 returns an acknowledgment to the remote control unit 90 and controls the selector units 40 and 50 so as to connect the PHY component of the first connector 10 to the PHY component of the second connector 20.sub.2 in compliance with the content of the table that it has in memory. The transfer rate is set to the value that appears in the table, or if the computer unit 100.sub.2 cannot communicate at that transfer rate, a negotiation is undertaken in order to determine a lower transfer rate.

(28) The remote control unit 90 can also be put into communication with the computer unit 200 if it sends the corresponding instruction to the local control unit 80.

(29) An up channel and a down channel are set up between the PHY components of the first connector 10 and of the second connector 20.sub.2 at the stored transfer rate or at the automatically negotiated rate.

(30) The program of the computer unit 200 then causes update data to be transmitted.

(31) The data paths are marked in bold in FIG. 2.

(32) At the end of updating the computer unit 100.sub.2, the operator uses the man/machine interface to tell the remote control unit 90 either to stop updating, or else to select a new information unit 100.sub.i.

(33) It should be observed that the loading device has no need to inspect the messages in order to route them.

(34) It should also be observed that no physical connection is set up between the second connectors 20.sub.i.

(35) With reference to FIG. 3, there follows a description of an operation of testing the loading device 1.

(36) On being switched on, the local control unit 80 causes a test procedure to be executed. This procedure seeks to test proper operation of the links between the first connector 10 and the second connectors 20.sub.i. This procedure comprises two stages, namely: verifying the links between the test module 80 and each of the second connectors 20.sub.i in the up direction and in the down direction; and verifying the links between the test module 80 and the first connector 10 in the up direction and in the down direction.

(37) Verifying the link between the test module 80 and each of the second connectors 20.sub.i comprises the steps of: controlling the selector modules 40 and 50 so as to connect the test module 70 to one of the second connectors 20.sub.i (the local control unit 80 selects the output N on the selector module 40 and the input N on the selector module 50 in order to connect the second connector 20.sub.N in FIG. 3); controlling the PHY component of the second connector 20.sub.N in order to form a loop inside the loading device 1; causing a signal to be issued by the signal generator 72 (the looped path of the signal from the test module 70 to the second connector 20.sub.N is marked bold in FIG. 3); and verifying in the signal analyzer 74 that a signal corresponding to the signal as issued is indeed received within a nominal period and issuing a warning, if not.

(38) These steps are restarted for each of the second connectors 20.sub.i.

(39) Verifying the links between the test module 80 and the first connector 10 comprises the steps of: controlling the selector modules 40 and 50 so as to prevent a signal from passing to the second connectors 20.sub.i and the third connector 30 (the local control unit 80 selects the output 0 on the selector module 40 and the input 0 on the selector module 50); controlling the PHY component of the first connector 10 to form a loop inside the loading device 1; causing the signal generator 72 to issue a signal (the looped path of the signal from the test module 70 to the first connector 10 is marked bold in FIG. 3); and using the signal analyzer 74 to verify that a signal corresponding to the signal as issued is indeed received within a nominal time period, and issuing a warning, if not.

(40) FIG. 4 shows a variant embodiment of the remote control unit 90.

(41) In this variant, the remote control unit 90 comprises a housing provided with a connector 93 that is connected directly to the first connector 10 of the loading device 1.

(42) The computer unit 200 is no longer directly connected to the first connector 10 but is connected to the connector 93 so that the computer unit 200 is connected to the first connector 10 via the connector 93 of the remote control unit 90.

(43) A device is advantageously provided to ensure that a plurality of PHY components of the second connectors cannot be in their activation state simultaneously.

(44) In a first possibility, the local control unit 80 is arranged to detect the states of the PHY components of the second connectors 20.sub.i and to allow only one of them to be activated providing the PHY components of the other second connectors 20.sub.i are in their inactivated state.

(45) In a second possibility, the local control unit 80 is arranged to detect the states of the PHY components of the second connectors 20.sub.i and to deactivate all of the active PHY components of the second connectors 20.sub.i if a plurality of them are detected as being in the activated state.

(46) FIG. 5 shows that the PHY component of each second connector 20.sub.i is activated by a signal PWREN coming from an AND gate 45.sub.i having a first input connected to an output of a member (which output corresponds to the second connector 20.sub.i in question) and a second input connected to an OR gate 46.sub.i (or a NOR gate) having inputs connected to the outputs of the member (which outputs correspond to the other second connectors 20.sub.i not including the second connector 20.sub.i in question). The member 47 also has an input set to 1 and a selection input i.

(47) Thus, a PHY component of a second connector 20.sub.i can be in its activated state only if no other second connector has its PHY component activated.

(48) Naturally, the invention is not limited to the embodiment described and covers any variant coming within the ambit of the invention as defined by the claims.

(49) In particular, the structure of the loading device may be different from that described. Thus: the loading device need not have a test module 70; the number of second connectors may be different; the remote control unit need not have a connector 93 or the remote control unit may be arranged to co-operate with data sources of the integrated circuit card type; the remote control unit and the local control unit may communicate via some other communication protocol; and the loading device need not include a remote control unit, and a local control unit may be distinct from the remainder of the loading device; . . . .

(50) The loading device may optionally include an additional safety function seeking to make the PHY components inactive when two PHY components are detected as being in the active state simultaneously. The control unit may optionally be arranged to detect the states of the PHY components of the second connectors and to issue a warning if it detects that two PHY components of the second connectors are active simultaneously. By way of example, this warning may lead to at least one of said PHY components being inactivated, or both of them, to a failure being stored in a failure log, to loading operations being stopped while waiting for human intervention, . . . .