MOBILE HYDROGEN FUELING SYSTEM FOR AIRCRAFT

Abstract

A mobile hydrogen fueling system that is configured to provide hydrogen fuel to a hydrogen storage tank of an aircraft includes a mobile hydrogen storage tank, a robotic arm connected to the mobile hydrogen storage tank having a nozzle configured to interconnect with a corresponding receptacle on the hydrogen storage tank of the aircraft and an autonomous vehicle configured to locate the mobile hydrogen storage tank in a position near the aircraft to allow the robotic arm to interconnect the nozzle to the corresponding receptacle. A method of providing hydrogen fueling to a hydrogen storage tank of an aircraft is also presented.

Claims

1. A mobile hydrogen fueling system configured to provide hydrogen fuel to a hydrogen storage tank of an aircraft, comprising: a mobile hydrogen storage tank; a robotic arm connected to the mobile hydrogen storage tank having a nozzle configured to interconnect with a corresponding receptacle on the hydrogen storage tank of the aircraft; and an autonomous vehicle configured to locate the mobile hydrogen storage tank in a position near the aircraft to allow the robotic arm to interconnect the nozzle to the corresponding receptacle.

2. The mobile hydrogen fueling system in accordance with claim 1, further comprising a communication system configured to transmit data between the aircraft and the mobile hydrogen fueling system during a transfer of hydrogen fuel.

3. The mobile hydrogen fueling system in accordance with claim 2, further comprising a second redundant communication system configured to transmit data between the aircraft and the mobile hydrogen fueling system during a transfer of hydrogen fuel.

4. The mobile hydrogen fueling system in accordance with claim 1, wherein a breakaway connection is configured to automatically disconnect the mobile hydrogen storage tank from the aircraft and stop a hydrogen fuel flow when a force exceeding a disconnect force threshold is applied to the breakaway connection.

5. The mobile hydrogen fueling system in accordance with claim 1, further comprising an array of sensors configured to detect conditions selected from a list consisting of hydrogen gas, heat, smoke, and flame sensors.

6. The mobile hydrogen fueling system in accordance with claim 5, further comprising an emergency shut down system connected to the array of sensors and configured to automatically disconnect the nozzle from the receptacle and stop a hydrogen fuel flow if the array of sensors detects conditions exceeding a predetermined threshold.

7. The mobile hydrogen fueling system in accordance with claim 5, further comprising a fire suppression system connected to the array of sensors and configured to automatically release a fire suppressant if the array of sensors detects conditions exceeding a predetermined threshold.

8. The mobile hydrogen fueling system in accordance with claim 1, further comprising a hydrogen compressor.

9. The mobile hydrogen fueling system in accordance with claim 8, further comprising a hydrogen chiller.

10. The mobile hydrogen fueling system in accordance with claim 1, further comprising a second automated robotic arm having a second nozzle configured to remove hydrogen gas from the aircraft.

11. The mobile hydrogen fueling system in accordance with claim 10, further comprising a compressor connected to the second nozzle and a buffer tank downstream from the compressor configured to store the hydrogen gas removed from the aircraft.

12. The mobile hydrogen fueling system in accordance with claim 10, wherein the mobile hydrogen fueling system is configured to fill-up the hydrogen storage tank of the aircraft within a time required by an airline operator.

13. The mobile hydrogen fueling system in accordance with claim 1, further comprising a plurality of nozzle configurations, wherein the mobile hydrogen fueling system is configured to select one fueling nozzle configuration from the plurality of nozzle configurations based on aircraft type and/or receptacle type.

14. A mobile hydrogen fueling positioning system, comprising: the mobile hydrogen fueling system in accordance with claim 1; and an array of sensors configured to detect the location of corresponding receptacle on the aircraft selected from a list consisting of optical, magnetic, and ultrasonic sensors.

15. A method of providing hydrogen fueling to a hydrogen storage tank of an aircraft, comprising: positioning a mobile hydrogen storage tank in a position near the aircraft using an autonomous vehicle; detecting a location of a corresponding receptacle of the hydrogen storage tank; and connecting a nozzle in communication with the mobile hydrogen storage tank to the corresponding receptacle using a robotic arm.

16. The method in accordance with claim 15, further comprising transmitting data regarding hydrogen fuel pressure and hydrogen fuel pressure within the hydrogen storage tank of the aircraft during a transfer of hydrogen fuel.

17. The method in accordance with claim 15, further comprising automatically disconnecting the nozzle from the receptacle and stopping a hydrogen fuel flow when a force exceeding a disconnect force threshold is applied to the nozzle.

18. The method in accordance with claim 15, further comprising automatically disconnecting the nozzle from the receptacle and stopping a hydrogen fuel flow if an array of sensors detect conditions exceeding a predetermined threshold, wherein the array of sensors is configured to detect conditions selected from a list consisting of hydrogen gas, heat, smoke, and flame sensors.

19. The method in accordance with claim 15, further comprising automatically releasing a fire suppressant if an array of sensors detect conditions exceeding a predetermined threshold, wherein the array of sensors is configured to detect conditions selected from a list consisting of hydrogen gas, heat, smoke, and flame sensors.

20. The method in accordance with claim 15, further comprising compressing gaseous hydrogen from the mobile hydrogen storage tank using a hydrogen compressor.

21. The method in accordance with claim 20, further comprising cooling compressed gaseous hydrogen using a hydrogen chiller.

22. The method in accordance with claim 15, further comprising removing hydrogen gas from the hydrogen storage tank of the aircraft through a second nozzle connected to a second receptacle on the hydrogen storage tank of the aircraft.

23. The method in accordance with claim 22, further comprising compressing the hydrogen gas removed from the aircraft and storing it in a buffer tank.

24. The method in accordance with claim 15, further comprising filling the hydrogen storage tank of the aircraft within the time required by an airline operator.

25. The method in accordance with claim 15, further comprising selecting one fueling nozzle configuration from a plurality of nozzle configurations based on aircraft type and/or receptacle type.

Description

[0006] The present invention is described, by way of example with reference to the accompanying drawings, in which:

[0007] FIG. 1 is a schematic diagram of a side view of an aircraft having tail and wing mounted liquid hydrogen storage tanks according to some embodiments;

[0008] FIG. 2 is a schematic diagram of a side view of an aircraft having tail and wing mounted gaseous hydrogen storage tanks according to some embodiments;

[0009] FIG. 3 is a schematic diagram of a side view of an aircraft having tail and wing mounted cryocompressed hydrogen storage tanks according to some embodiments;

[0010] FIG. 4 is a schematic diagram of a mobile hydrogen fueling system, according to some embodiments;

[0011] FIG. 5 is a schematic diagram of a mobile hydrogen fueling system configured for use with gaseous hydrogen fuel, according to some embodiments;

[0012] FIG. 6 is a schematic diagram of a mobile hydrogen fueling system configured for use with liquid hydrogen fuel, according to some embodiments;

[0013] FIG. 7 is a schematic diagram of a mobile hydrogen fueling system configured for use with cryogenically compressed hydrogen fuel, according to some embodiments;

[0014] FIG. 8 is a schematic diagram of another mobile hydrogen fueling system configured for use with cryogenically compressed hydrogen fuel, according to some embodiments;

[0015] FIG. 9 illustrates a fueling communication system, according to some embodiments;

[0016] FIGS. 10A, 10B, and 10C illustrate a hydrogen fueling communication system, according to some embodiments;

[0017] FIGS. 11A and 11B illustrate a hydrogen fueling communication system, according to some embodiments;

[0018] FIG. 12 illustrates a hydrogen fueling communication system, according to some embodiments;

[0019] FIG. 13 illustrates a hydrogen fueling communication system, according to some embodiments;

[0020] FIG. 14 illustrates NFC components utilized in connection with fueling operations, according to some embodiments;

[0021] FIG. 15 illustrates a method for fueling a hydrogen aircraft, according to some embodiments;

[0022] FIG. 16 illustrates a method for fueling a hydrogen aircraft, according to some embodiments;

[0023] FIG. 17 illustrates a method for NFC communication associated with operation of a hydrogen aircraft, according to some embodiments;

[0024] FIG. 18 illustrates a method for Tarmac Automated Positioning System (TAPS) associated with positioning of the nozzle to the receptacle, maintaining proper distance, monitoring of safety and performance (also through wireless communications) as well as disconnection of fueling; and

[0025] FIG. 19 illustrates a bidirectional communication and warning system between the TAPS and the aircraft being fueled.

DETAILED DESCRIPTION

[0026] This patent application describes a mobile hydrogen fueling system, hereafter referred to as the mobile system, which is usable for diverse types of aircraft using a variety of hydrogen fuels, e.g., gaseous hydrogen, liquid hydrogen, and cryogenically compressed hydrogen.

[0027] The aircraft's hydrogen storage tank(s) are preferably located in an aft section of the aircraft as shown in FIGS. 1 and 2 to allow fueling access without interrupting other airport operations such as passenger loading/unloading or baggage handling. In alternative embodiments, the aircraft's hydrogen storage tank(s) may be mounted on masts or pylons extending from the fuselage or wings. In some embodiments, the mast may be configured to move the aircraft's hydrogen storage tank, separately or in coordination with robotic arm, in order to align the receptacle with the nozzle before fueling is initiated. In other embodiments, in case of an in-flight emergency involving an aircraft's hydrogen storage tank, the tank may be jettisoned by releasing it from the mast and allowing it to fall away from the aircraft.

[0028] As shown in the nonlimiting example of FIG. 3, the mobile system includes an autonomous vehicle that is configured to automatically position the mobile a mobile hydrogen storage tank in such a position in a position near the aircraft so that a connection between the mobile hydrogen storage tank and the aircraft's hydrogen storage tank may be established. The mobile hydrogen storage tank may be integrated into the autonomous vehicle, or it may be incorporated into a trailer towed by the autonomous vehicle.

[0029] The mobile system may be dedicated to dispensing one particular hydrogen fuel type, e.g., gaseous hydrogen only, or may be configured to dispose several types, e.g., liquid and cryogenically compressed hydrogen. The mobile system is preferably propelled by an electric motor that receives electrical power from a hydrogen fuel cell. The hydrogen fuel for the fuel cell may be drawn from the mobile hydrogen stored tank or from another dedicated hydrogen source. The fuel cell may further provide electrical power to other components of the mobile system, such as compressors, pumps, and cooling systems. The fuel cell system in the mobile system may also be used to supply auxiliary power to the aircraft during the fueling process, e.g., for aircraft cabin heating. The compressors, pumps, and cooling systems, etc. of the mobile system may be alternatively electrically powered by other means external to the mobile system such as external fuel cell, battery, gas turbine, internal combustion engine, the electrical power grid, or an airport microgrid.

[0030] The mobile system also includes an automated/robotic arm that is configured to locate the aircraft's hydrogen fueling receptacle and move the hydrogen fueling nozzle of the mobile system to engage the aircraft's hydrogen fueling receptacle using the Tarmac Automated Positioning System (TAPS) with a variety of sensors, e.g., camera, optical, laser, radar, ultrasonic, or magnetic sensors, under the control of a 3D automated detection and movement control system and/or a human operator. The vehicle communication is also to enable additional positioning (use of suspension and steering, braking, etc.) Attachment and detachment of the nozzle as well as the monitoring of the hydrogen fuel transfer to the aircraft may be automated by computer control and/or manually controlled.

[0031] A communication link between the aircraft and the mobile system is preferably established wirelessly using existing wireless communication protocols, e.g., Near Field Communication (NFC) (International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) standard 18092) or Wi-Fi (Institute of Electrical and Electronics Engineers (IEEE) standard 802.11) as shown in FIGS. 4 to 6. The communication link may communicate between the aircraft and the mobile system while initiating fueling to determine the aircraft's fueling configuration and parameters and may further be used during the fueling process to ensure that important fueling process parameters, e.g., hydrogen fuel pressure and/or hydrogen fuel temperature in the aircraft hydrogen storage tank, hydrogen fuel flow rate, etc., stay within safe limits. Preferably, the communications links are redundant in order to increase communication robustness and provide more reliable and safe control of the refueling process. In an alternative embodiment, a wired communication link may be utilized to provide redundancy during the fueling process. These redundant communication systems lower overall risk and increase functional safety.

[0032] The aircraft hydrogen storage tank preferably includes hydrogen pressure and hydrogen temperature sensors as shown in FIGS. 4-6. During the fueling process, the hydrogen fuel pressure and hydrogen fuel temperature in the aircraft hydrogen storage tank are transmitted to the mobile system via the redundant communication link and fueling parameters are controlled to maintain the hydrogen fuel pressure and temperature in the aircraft hydrogen storage tank within certain pressure and temperature limits. The lower pressure and temperature limits arc preferably set at a pressure and temperature that will minimize hydrogen boil-off and be close to the hydrogen vapor pressure for the temperature and pressure conditions within the aircraft hydrogen storage tank.

[0033] As shown in FIGS. 4 to 6, a breakaway connection is provided to provide a safe disconnection in case the mobile system or the aircraft are inadvertently moved while the nozzle is connected to the receptacle. The breakaway connection is designed to safely disconnect when a force is limit exceeded and seal the nozzle and receptable to prevent an accidental discharge of hydrogen fuel from either side of the connection.

[0034] The mobile system further includes hydrogen sensors, infrared sensors, ultraviolet sensors, and other fire and smoke sensors, etc., that monitor for hydrogen leaks and/or sources of ignition, hydrogen flames, etc. These sensors may be integrated with an automated and/or manual emergency shut down system that interrupts the fueling and/or connection processes if a hazard is detected. The mobile system may additionally include a manual and/or automated fire suppression system using an inert gas, such as nitrogen, or a fire suppressant foam to suppress a potential fire and/or extinguish an existing fire. The nitrogen gas may be preferably stored as liquid nitrogen. The fire suppression system may also be used to reduce the potential for ignition, hydrogen flame, or deflagration (e.g., within an aircraft hangar), etc.

[0035] The mobile system described herein may be configured for use with gaseous hydrogen fuel, liquid hydrogen fuel, and/or cryocompressed hydrogen fuel. The higher flow rates required for quick hydrogen fueling of aircraft require larger fueling nozzles and hoses. The size and weight of the fueling nozzle and hose are addressed by the robotic arm.

[0036] In order to minimize the aircraft weight, different classes of aircraft may have different hydrogen fueling receptacles. The mobile system may have several different nozzles available, depending on the classes of aircraft that it is configured to fuel. The mobile system may communicate with the aircraft to determine which fueling nozzle is required and the robotic arm will select the appropriate nozzle for fueling.

[0037] A non-limiting example of a mobile system that is configured to dispense gaseous hydrogen fuel is illustrated in FIG. 4. The mobile system includes a compressor that draws gaseous hydrogen from the mobile hydrogen storage tank and delivers the gaseous hydrogen fuel to the aircraft's hydrogen storage tank though the robotic arm. The mobile system preferably also includes a hydrogen chiller arranged downstream from the compressor that is configured to remove the heat of compression from the gaseous hydrogen fuel.

[0038] A non-limiting example of a mobile system that is configured to dispense liquid hydrogen fuel is illustrated in FIG. 5. A non-limiting example of a mobile system that is configured to dispense cryocompressed hydrogen fuel hydrogen fuel is illustrated in FIG. 6. The mobile system may include a cryopump that is integrated with the mobile hydrogen storage tank.

[0039] Fire safety is addressed by the layout and positioning of the array of sensors that are integrated with the emergency shut down system and the fire suppression system as shown in FIG. 5. The fire suppression system is connected to an array of strategically placed sensors. When a potentially dangerous condition is sensed, the emergency shut down system will shut-down the fueling process and disengage the fueling nozzle. The fire safety system may manually or automatically release an inert gas, such as nitrogen gas stored in as liquid nitrogen, or a foam material to form a fire protectant blanket around the mobile system and the aircraft.

[0040] The mobile system may be configured to have a human operator monitoring the operation of the mobile system. As shown in FIGS. 3-6, the human operator may be positioned in a location that provides a view of the robotic arm, nozzle, receptacle, and aircraft. The mobile system may further include a visual display to show a view from the camera and/or graphical representations of output from any of the other sensors to facilitate manual connection of the nozzle to the receptacle. The operator may override the automated systems as necessary to establish a reliable and safe connection between the nozzle and receptacle, to manually initiate an emergency shutdown, or to activate the fire suppression system.

[0041] Liquid and cryogenically compressed hydrogen may gasify within the aircraft hydrogen storage tank, due to warming of the hydrogen fuel in the aircraft hydrogen storage tank, e.g., an increase of the temperature of liquid hydrogen from 253 C. to the ambient temperature within the aircraft hydrogen storage tank. Venting this hydrogen gas into the atmosphere during the fueling process may be undesirable for safety, environmental, and cost reasons. Therefore, the mobile system may remove the gaseous hydrogen from the aircraft's hydrogen storage tank and capture the hydrogen gas through an additional connector on aircraft's hydrogen storage tank, preferably located at an end of the storage tank opposite the hydrogen fuel receptacle. Each phase of hydrogen is sealed off and separated from the other phase, e.g., liquid hydrogen going into the tank and gaseous hydrogen gas being evacuated from the tank. The removed hydrogen gas may be routed to a hydrogen compressor that compresses it into a buffer tank in order to capture this gaseous hydrogen so it can be recycled into liquid or cryogenically compressed hydrogen fuel.

[0042] In order to further reduce boil-off during the fueling process the mobile system may also include a hydrogen cooling system to minimize the temperature of the hydrogen fuel in the hydrogen storage tank of the mobile system and in the robotic arm. The cooling system may be powered by electrical power from the fuel cell in the mobile system.

[0043] Reducing the thermal mass of the hydrogen piping in the robotic arm beneficially reduces the amount of heating experienced by the hydrogen fuel during transfer to the aircraft, thereby reducing boil-off. Therefore, it is desirable to minimize the length of hydrogen piping in the robotic arm to the shortest length necessary to accommodate the fueling process. It is also desirable to insulate the hydrogen piping in the robotic arm to reduce boil-off. However, flexible piping in the robotic arm also requires flexible insulation which is seldom the most thermally efficient insulation. Therefore, an embodiment of the mobile system may be envisioned having a robotic arm that is formed with rigid piping. The robotic arm may include swiveling couplers to provide the necessary freedom of movement for the arm. Alternatively, the autonomous vehicle may be used to properly position the arm in the lateral and longitudinal directions while the vehicle or trailer is raised or lowered to position the arm in the proper vertical location.

[0044] Typical approaches for fueling hydrogen surface vehicle and aircraft with gaseous or liquid hydrogen operate under safety standards set by SAE International, which standards include, for example SAE Standard J2601 and SAE J2799 StandardHydrogen Surface Vehicle to Station Communications Hardware and Software. Under such standards, data concerning the fueling operation (e.g., temperature and pressure within and volume of an aircraft fuel tank) is typically provided to a hydrogen fueling station from a vehicle or aircraft being fueled via a unidirectional communication approach utilizing an Infrared Data Association protocol (IrDA protocol). However, approaches using the IrDA protocol fail to satisfy meaningful risk classification levels on the mobile system side under, for example, the Safety Integrity Level (SIL) or the Aerospace Design Assurance Level (DSL) and Functional Design Assurance Level (FDSL) described in ARP4754 Aerospace Recommended Practice (ARP) ARP4754AGuidelines For Development Of Civil Aircraft and Systems, FAA in AC 20-174 and EUROCAE ED79.and should not, therefore, be relied upon in assessing risk for hydrogen fueling.

[0045] With reference now to FIG. 7, a system 100 employing a two-stage communication hardware methodology and associated software and hardware components is disclosed. In various embodiments, system 100 enables bidirectional communication between an aircraft 102 having an aircraft safety system 104 and a mobile hydrogen fueling system, hereafter referred to as the mobile system 106 having a mobile system safety system 108 for fueling (e.g., gaseous or liquid and/or liquid hydrogen fueling) as well as for general communication (e.g., financial payment, aircraft identification, personal identification, authorization, and/or the like) between aircraft 102 and the mobile system 106. In various embodiments, communication between aircraft 102 and mobile system 106 occurs via at least two communication systems. The first communication system includes an aircraft to Infrastructure (A2I) system or an aircraft to Network (V2N) system or the like, either or both of which may be referred to herein as a A2X (Aircraft to Everything) system. A2X systems may comprise, for example, 4G (i.e., IMT-Advanced standard or the like), 5G (i.e., IMT-2020 standard, 5G New Radio standard, or the like), IEEE 802.11 (i.e., Wi-Fi or the like) or similar systems or protocols, whether existing or future developed. A2X systems typically comprise a communication methodology utilizable for multiple applications, including, for example, communication between aircraft and infrastructure (e.g., uploads or downloads of data or software), automated payment, truck platooning, remote navigation, flashing of aircraft components, remote health monitoring or diagnostics, and/or the like. The second communication system includes a Near Field Communication (NFC) system, which typically relies on a short-distance wireless communication system that, in various embodiments, may include encryption. As used herein, NFC includes methods and hardware compatible with, or utilizing principles similar to, those set forth in (i) ISO/IEC 18092/ECMA-340Near Field Communication Interface and Protocol-1 (NFCIP-1), (ii) ISO/IEC 21481/ECMA-352Near Field Communication Interface and Protocol-2 (NFCIP-2), and/or (iii) any other existing or future-developed radio frequency protocol and/or hardware intended for communication over a limited distance, for example 20 centimeters or less. NFC systems typically comprise a communication methodology, for example for contactless payment systems similar to those used in credit cards or electronic tickets, authorization or authentication, identification, access control, and/or the like. This combined A2X+NFC communication system, referred to herein as A2XN, enables, among other things: increased safety during fueling operations via a bidirectional communication system; higher overall safety ratings (e.g., SIL or FDAL ratings); redundancy in the event one of the communication systems fails during fueling; downloading or uploading of large data files; improved aircraft security and privacy; improved fleet management; and/or the like. These and other advantages and benefits of the systems and methods disclosed herein are described in more detail below.

[0046] In various embodiments, system 100 includes an aircraft electronic control unit 110. Among other components, aircraft electronic control unit 110 may comprise or be connected with an aircraft EX (explosion protection) barrier 112 and a protocol converter 114 (i.e., an aircraft protocol converter). In various embodiments, an aircraft bus 111, such as, for example, a PROFIBUS 113 (Process Field Bus) or a controller area network 115 (CAN) may be used to connect aircraft safety system 104 to aircraft electronic control unit 110. However, any suitable coupling components, protocols, and/or techniques may be utilized. In various embodiments, data communication between aircraft bus 111 and aircraft safety system 104 (e.g., that portion of the system identified as Section A in FIG. 7) may be compatible with or otherwise conform to the principles or the protocols set forth in: (i) IEC standard 61508 entitled Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems, (ii) the International Organization for Standardization (ISO) standard 26262, entitled Road Vehicles-Functional Safety, or (iii) any similar in-process or future developed protocol or standard. Aircraft electronic control unit 110 may be housed within a box 116 configured to protect the electronic components within the aircraft electronic control unit 110 from the elements, e.g., dust, humidity, smog, or the like. An aircraft power supply 118 (e.g., a 12V, 24V, or other suitable voltage power supply) may be used to power aircraft electronic control unit 110.

[0047] With continued reference to FIG. 7, in various embodiments system 100 includes a mobile system electronic control unit 120. Among other components, mobile system electronic control unit 120 may comprise or be connected with a mobile system EX barrier 122 and a protocol converter 124 (i.e., a mobile system protocol converter). In various embodiments, a mobile system bus 121, for example a PROFIBUS 123, may be used to connect mobile system safety system 108 to mobile system electronic control unit 120. However, any suitable coupling components and/or protocols may be utilized, as desired. In various embodiments, data communication between mobile system bus 121 and mobile system safety system 108 (e.g., that portion of the system identified as Section B in FIG. 7) may be compatible with or otherwise conform to the principles or the protocols set forth in (i) the International Electrotechnical Commission (IEC) standard 61508, (ii) the IEC standard 61511 entitled Functional SafetySafety Instrumented Systems for the Process Industry Sector, or (iii) any similar in-process or future developed protocol or standard. Mobile system electronic control unit 120 may be housed within a box 126 configured to protect the electronic components within the mobile system electronic control unit 120 from environmental contaminants, e.g., water, dirt, lubricants, etc. A mobile system power supply 128 (e.g., a 12V, 24V, or any suitable voltage DC power supply) may be used to power the mobile system electronic control unit 120.

[0048] Still referring to FIG. 7, aircraft electronic control unit 110 and mobile system electronic control unit 120 are configured to wirelessly communicate with each other over NFC link 130 within a classified area 132. As used herein, a classified area is generally defined as a protected area where the dangers of gaseous or liquid fueling are recognized and appropriate safety measures are implemented. In various embodiments, the NFC link 130 is enabled, on an aircraft 102 side, via an aircraft NFC transceiver 134, which may comprise an aircraft NFC antenna 136 and an aircraft NFC antenna amplifier 138, or any other suitable NFC component or components. NFC components of aircraft 102 may be located in a suitable location, for example on or in a door or covering of an aircraft fueling receptacle, on or in a receptacle housing, and/or the like. In various embodiments, the NFC link 130 is further enabled, on a mobile system 106 side, via a mobile system NFC transceiver 144, which may comprise a mobile system NFC antenna 146 and a mobile system NFC antenna amplifier 148, or any other suitable NFC component or components. Data to and from aircraft electronic control unit 110 is provided to NFC link 130 via an aircraft radio frequency signal 131, sent and/or received between aircraft electronic control unit 110 and aircraft NFC antenna amplifier 138. Similarly, data to and from mobile system electronic control unit 120 is provided to the NFC link 130 via a mobile system radio frequency signal 141, sent and/or received between mobile system electronic control unit 120 and mobile system NFC antenna amplifier 148. In this manner, NFC link 130 may comprise a portion of the Near Field Communication (NFC) system described above. Moreover, in various embodiments, data communication across NFC link 130 and between the aircraft safety system 104 and the mobile system safety system 108 (e.g., that portion of the system identified as Section C in FIG. 7) may be compatible with or otherwise conform to the principles or the protocols set forth in (i) the IEC standard 61784, entitled Industrial Communication NetworksProfiles, or (ii) any similar in-process or future developed protocol or standard.

[0049] With still further reference to FIG. 7, aircraft electronic control unit 110 and mobile system electronic control unit 120 are also configured to wirelessly communicate with each other over a A2X link 150, which, in various embodiments, comprises a wireless link established between aircraft electronic control unit 110 and mobile system electronic control unit 120 via, for example, a 4G link, a 5G link, or an 802.11 link as discussed hereinbelow. In various embodiments, A2X link 150 is enabled, on an aircraft 102 side, via an aircraft A2X transceiver 135, which may comprise an aircraft A2X antenna 137 and an aircraft A2X antenna amplifier 139, or other suitable A2X components. In various embodiments, A2X link 150 is further provided, on a mobile system 106 side, via a mobile system A2X transceiver 145, which may comprise a mobile system A2X antenna 147 and a mobile system A2X antenna amplifier 149, or other suitable A2X components. Data from aircraft electronic control unit 110 may be provided to mobile system electronic control unit 120 via an aircraft wireless signal 133 sent via A2X link 150. Additionally, data from mobile system electronic control unit 120 may be provided to aircraft electronic control unit 110 via a mobile system wireless signal 143 sent via A2X link 150. In this manner, A2X link 150 may comprise a portion of the Aircraft-to-Infrastructure (A2I) system or the Aircraft-to-Network (V2N) system described above.

[0050] With reference now to FIGS. 10A, 10B and 10C, a system 200 employing a two-stage communication hardware methodology and associated software and/or hardware components is disclosed, with specific reference to a gaseous or liquid hydrogen fueling mobile system and an aircraft undergoing a gaseous or liquid hydrogen fueling operation. In various embodiments, system 200 is similar to system 100 described above with reference to FIG. 7 and enables bidirectional communication between an aircraft 202 having an aircraft safety system 204 and mobile hydrogen fueling system, hereafter referred to as the mobile system 206 having a mobile system safety system 208, for example for gaseous or liquid hydrogen fueling as well as for general communication (e.g., financial payment, aircraft identification, authentication, access control, and/or the like) between aircraft 202 and mobile system 206. In addition to the components of system 100 described above with reference to FIG. 7, system 200 may include additional components comprising aircraft 202 and/or mobile system 206. For example, aircraft 202 may include one or more aircraft tanks for storage of gaseous or liquid hydrogen, for example a first hydrogen storage tank 257-1, a second hydrogen storage tank 257-2, and a third hydrogen storage tank 257-3. Each of the one or more hydrogen storage tanks 257 may include a temperature sensor 251, a pressure sensor 252, and a primary valve 253. Temperature sensor 251 and pressure sensor 252 may be connected to aircraft safety system 204 via one or more aircraft data buses 254 or other wired or wireless communication links. The primary valve 253 on each tank 257 is connected to a receptacle 255 via an aircraft conduit 256, the aircraft conduit 256 configured to deliver gaseous or liquid hydrogen fuel from receptacle 255 to the primary valve 253 on each of the tanks 257. Each of the tanks 257 include hydrogen temperature and pressure sensors 258. Temperature and pressure data collected by the sensors 258 from each of the tanks 257 is transmitted to the mobile system 206 via the across NFC link 230 and/or A2X link 250. Mobile system 206, on the other hand, further includes a hydrogen storage tank 260 fluidly coupled to a nozzle 270 configured for removable engagement with the receptacle 255 on the aircraft 202. Intermediate the hydrogen storage tank 260 and the nozzle 270 may be disposed a flow rate control valve 261 downstream of the hydrogen storage tank 260, a cut-off valve 262, and a dispenser 263 (and/or an operator input device), each of which are fluidly coupled between hydrogen storage tank 260 and nozzle 270 via a mobile system conduit 264. A pressure sensor 265, a temperature sensor 266, and a cut-off valve 262 may be configured to provide data reflecting hydrogen flow conditions within mobile system conduit 264 to mobile system safety system 208 via one or more mobile system data buses 267 or other suitable wired or wireless links. Mobile system safety system 208 may also include a vent 268 configured to release hydrogen gas from the mobile system conduit 264, for example in response to an overpressure event, an unexpected depressurization, a command or protocol to flush or purge an area of hydrogen gas, and/or the like.

[0051] Similar to system 100 described above with reference to FIG. 7, in various embodiments, system 200 includes an aircraft electronic control unit 210. Among other components, aircraft electronic control unit 210 may comprise or be connected with an aircraft EX barrier 212 and a protocol converter 214. In various embodiments, an aircraft bus 211, for example, a PROFIBUS 213 or a CAN 215 may be used to connect aircraft safety system 204 to aircraft electronic control unit 210. In various embodiments, data communication in that portion of the system identified as Section A in FIG. 10A may operate similarly to that portion of the system identified as Section A in FIG. 7. Aircraft electronic control unit 210, aircraft box 216, and aircraft power supply 218 may likewise correspond.

[0052] In various embodiments, system 200 includes a mobile system electronic control unit 220 similar to unit 120 in FIG. 7 and having similar components thereto, and data communication in that portion of the system identified as Section B in FIG. 10A may operate similarly to that portion of the system identified as Section B in FIG. 7. Mobile system box 226 and power supply 228 may likewise correspond. Moreover, continuing to reference FIG. 10A, components and protocols in that portion of the system identified as Section C may operate similarly to that portion of the system identified as Section C in FIG. 7.

[0053] Referring now to FIGS. 10B and 10C, and with continued reference to FIG. 10A, a data transfer or communication process during a fueling operation is described, in accordance with various embodiments. For data transfer from aircraft 202 to mobile system 206 (and vice-versa), it is desirable to accurately identify aircraft 202 while located in proximity of mobile system 206. In various embodiments, receptacle 255 communicates with nozzle 270 across NFC link 230. At this point, data concerning aircraft 202 may be transferred to mobile system 206. For example, aircraft 202 may transmit one or more of a unique aircraft identification number, authentication information, encryption information, handshake information, token information, aircraft and/or passenger information, aircraft diagnostic information, and/or static information concerning tanks 257. The static information may include, for example: the volume of the one or more tanks 257 (e.g., 100 liters, 400 liters, 800 liters, 2100 liters, and/or the like); a pressure rating of one or more tanks 257; the tank 257 type (e.g., Type 1, 2, 3, 4, or the like); the number of tanks 257 (e.g., 1, 2, 3, 4, 8, 10, or more tanks); dimensional information for tanks 257 (e.g., length, diameter, wall thickness, etc.); materials used to construct tanks 257; a service date or dates for tanks 257; serial numbers of tanks 257; and/or other pertinent manufacturing, servicing, or use data for tanks 257. In various embodiments, NFC link 230 from aircraft 202 to mobile system 206 typically satisfies SIL 2 on the mobile system side and FDAL C/D on the aircraft side. In various embodiments, data communication across NFC link 230 is operative at 13.56 MHz on an ISO/IEC 18000-3 air interface and at rates ranging from 106 kbits/s to 424 kbit/s. However, any suitable frequency, data rate, transmission protocol, and/or the like may be utilized. Once initial data from aircraft 202 is provided to mobile system 206, bidirectional links across NFC link 230 and A2X link 250 may be established. For example, the initial data from aircraft 202 may specify a list of compatible protocols, identifying addresses or identifiers (i.e., IP addresses, media access control (MAC) addresses, and/or the like), and/or networks that may be utilized for A2X link 250. Mobile system 206 may evaluate the options for initiating and/or selecting A2X link 250 and direct communication to aircraft 202 thereby, for example based on an estimated or theoretical maximum speed of data transmission, network congestion, applicable security protocol, and/or the like. Moreover, network and/or other information for A2X link 250 may be stored in mobile system 206 and utilized responsive to establishment of NFC link 230; stated another way, aircraft 202 and mobile system 206 may have agreed in advance and/or otherwise defined a suitable approach for establishment of and communication over A2X link 250 (for example, communication via a common software application that are routed over a global packet-switched network such as the internet).

[0054] Alternatively, mobile system 206 may provide initial data to aircraft 202 via NFC link 230; moreover, initial data to and/or from aircraft 202 and/or mobile system 206 may be transferred via A2X link 250 prior to data being transmitted across NFC link 230 (for example, data may be transferred as aircraft 202 approaches mobile system 206 but prior to aircraft 202 reaching mobile system 206). In this manner, improved fueling process flows may be achieved, for example by directing aircraft 202 to approach a particular fueling location best suited to fuel aircraft 202 (for example, due to mobile system space constraints, fueling spot availability or queue management, anticipated fueling demands from aircraft(s) ahead of and/or behind aircraft 202, estimated or measured data rates between mobile system 206 and aircraft(s) disposed at a particular location, and/or the like).

[0055] With continued reference to FIGS. 10A, 10B, and 10C, various steps of a fueling operation are described in accordance with various embodiments. In a first step, aircraft identification data is communicated to mobile system 206 via a handshake over NFC link 230. This step commences once the receptacle 255 and the nozzle 270 come within proximity to one another or establish contact with one another. For example, when nozzle 270 is connected to receptacle 255, unidirectional communication across NFC link 230 from aircraft 202 to mobile system 206 occurs. During this communication, unique aircraft identification information (e.g., VIN) and static information about aircraft 202 hydrogen storage system(s) and/or components may be provided to mobile system 206. Additional information may be transmitted as discussed above. This may occur, in various embodiments, in a manner similar to a cell phone performing an automated payment operation with a transceiver on aircraft 202. Safety information, for example a watchdog timer, may also be relayed across NFC link 230. As described above, the information may be transmitted and received over the air between nozzle 270 and receptacle 255 and the various components associated therewith. The VIN may be used to identify, select, and/or establish A2X link 250 between aircraft 202 and mobile system 206. At this point (e.g., once the handshake is complete), NFC link 230 may also be established as bidirectional, enabling mobile system 206 to send data to aircraft 202 as well as receive data from aircraft 202 across NFC link 230. In various embodiments, bidirectional communication across either or both of NFC link 230 and A2X link 250 enables aircraft 202 to transmit or receive substantial amounts of high-speed data, for example, aircraft data, fueling operation data (e.g., the dynamic information described below), updated software and/or firmware for aircraft 202 components, media files. Additionally, operational information, including autonomous driving information, route information, diagnostic information, fuel cell health or performance information, or any other suitable or desirable information may also be transferred between aircraft 202 and mobile system 206 via A2X link 250 and/or NFC link 230.

[0056] In a second step, mobile system 206 controls the fueling operation of aircraft 202 or, more particularly, a hydrogen storage system associated therewith or disposed thereon. When fueling is initiated from dispenser 263, NFC link 230 is used to transmit data from aircraft 202 to mobile system 206, for example as illustrated in FIG. 10C. The data may consist of fueling communication commands, the static information described above, dynamic information regarding the hydrogen storage system of aircraft 202, and/or the like. In various embodiments, the dynamic information may include, for example, fueling commands (e.g., start, stop, halt, abort, flow rate increase, flow rate decrease, tank change commands, etc.), real-time measurements of pressure and/or temperature within a tank 257 (including fluctuations of temperature and/or pressure within tank 257 which may be indicative of leakage and/or impending failure), ambient temperature outside tanks 257, a real-time measurement of the flow rate of hydrogen gas into tanks 257, and/or the like. Pertinent static and dynamic information may be used by mobile system 206 (e.g., processed by mobile system electronic control unit 220) to control fueling of hydrogen gas in one or more tanks 257. In this manner, system 200 ensures tanks 257 within aircraft 202 are filled relatively quickly and with up to 100% fill without compromising the safety limits of the tanks 257 (e.g., the temperature, pressure, or gas density limits set by the manufacturer or by various applicable standards). In various embodiments, one or both of NFC link 230 and A2X link 250 may also be used for transfer of other data from aircraft 202 to mobile system 206, including, for example, encrypted data for payment and/or data confirming successful payment received by mobile system 206.

[0057] In a third step, a fueling operation may be terminated, for example either automatically via one of mobile system electronic control unit 220 or aircraft electronic control unit 210, or manually by a user at dispenser 263 (e.g., once 100% fill or another fueling threshold is reached). Once a fueling operation is terminated, the user may disengage nozzle 270 from receptacle 255. NFC link 230 will stop communicating data when a physical distance between nozzle 270 and receptacle 255 becomes greater than a threshold distance. Likewise, A2X link 250 may also stop transmitting data responsive to cessation of data communication across NFC link 230. Alternatively, communication across A2X link 250 may continue after communication across NFC link 230 are terminated, for example in order to complete transmission of software or other desirable data between aircraft 202 and mobile system 206. Yet further, in some exemplary embodiments, communication across A2X link 250 may terminate prior to communication across NFC link 230 being terminated, for example when a fueling operation has been completed but before nozzle 270 is removed from receptacle 255.

[0058] In various embodiments, exemplary systems and methods disclosed herein implement various approaches for preserving security and safety, for example in connection with gaseous or liquid fueling, and/or the like. For example, NFC link 230 is designed to transmit data from aircraft 202 to mobile system 206, and vice versa. An exemplary system has a safety integrity level on mobile system side 206 of a minimum SIL 2, and on aircraft 202 side of a minimum of FDAL C/D, for example designed in accordance with IEC 61508 and ISO 26262. Compliance with exemplary current or future standards ensures safe fueling of aircraft 202 by transmitting the static information and the dynamic information described above over one or both of NFC link 230 and A2X link 250. Further, redundant configurations where, for example, NFC link 230 is rated at FDAL C/D and A2X link 250 is rated at FDAL C may result in an overall safety rating yielding a higher safety level than either of the individual safety levels by virtue of the redundant configuration, for example an overall safety rating of FDAL A.

[0059] Still referring to FIGS. 10A, 10B and 10C, various further embodiments, benefits and advantages of the system 200 are described. For example, in various embodiments, NFC link 230 utilizes wireless communication, and may be restricted to operation within a separation distance (or a maximum separation distance) of about 20 centimeters (or other suitable distance, such as between about 1 centimeter and about 4 centimeters) between nozzle 270 and receptacle 255 to avoid data manipulation or interference from other aircraft(s). The separation distance may be used as a safety barrier to limit manipulation of or interference with communication between aircraft 202 and mobile system 206, for example by other aircraft, hand-held electronics, malicious actors (e.g., individuals attempting to breach the security of such communication). In various exemplary embodiments, communication between nozzle 270 and receptacle 255 is operable within a separation distance of about 2 centimeters, or about 3.5 centimeters, or about 5 centimeters, or about 10 centimeters, or about 15 centimeters, or about 20 centimeters. However, any suitable separation distance is contemplated or may be utilized, for example depending on the NFC hardware utilized, the requirements of a particular NFC protocol or protocols, and/or the like.

[0060] In various embodiments, system 200 is configured for operation in an ambient temperature of about 40 C. to about +60 C. and in a humidity range of 0-100% (e.g., as will be appreciated, an aircraft fueling environment may often be dusty or rainy, and an aircraft may have organic or inorganic debris or contaminants disposed thereon, such as insect residue, oil-based compounds from asphalt roads, small tire particles, and/or the like). Moreover, system 200 is configured to manage vibration at aircraft 202. System 200 may, in various embodiments, include the same or similar equipment on both aircraft 202 side and mobile system 206 side, for example similar NFC components; alternatively, equipment associated with aircraft 202 may differ in configuration, make, or capability from equipment associated with mobile system 206. In various embodiments, aircraft NFC antenna 236 and aircraft electronic control unit 210 may be disposed on aircraft 202 near receptacle 255. Similarly, mobile system NFC antenna 246 may be placed at or near nozzle 270. In various embodiments, components of system 200 may be configured with or exhibit the same or a similar physical size as an IrDA (Infrared Data Association) unidirectional communication system associated with a prior nozzle and receptacle. Moreover, mobile system electronic control unit 220 may be mounted on a standard DIN (Deutsches Institut fr Normung) rail at the mobile system 206 side. On the aircraft 202 side, any suitable on-aircraft mounting bracket or other coupling or mounting components may be used. Moreover, the distance from nozzle 270, where mobile system NFC antenna 246 is disposed, to mobile system box 226, where mobile system electronic control unit 220 is disposed, may be any suitable distance, for example up to and including about eight meters. During a fueling operation, hydrogen gas may be present in a vicinity outside the nozzle 270 and the receptacle 255 due to leaks. Accordingly, system 200 and components thereof may be configured and designed for use within classified area 232 (Zone 1), within a second classified area (Zone 2), and within a third classified area (Zone 3), for example in accordance with IEC 60079-10. In various embodiments, mobile system box 226 may be located outside the second classified area (Zone 2) and aircraft box 216 may be located outside the third classified area (Zone 3).

[0061] In various exemplary embodiments, system 200 is configured to permit exchange and/or replacement of certain components, for example components of nozzle 270 in the event such components fail or become damaged, without changing the entirety of nozzle 270.

[0062] In various embodiments, system 200 may be utilized to transmit both static and dynamic data from aircraft 202 to mobile system 206. It will be appreciated that there is no requirement for bidirectional communication to occur between mobile system 206 and aircraft 202; however, bidirectional communication has various advantages as described herein. In various embodiments, data regarding a fueling operation (e.g., the static data and the dynamic data) is communicated and transferred at a suitable interval, including, for example, 200 millisecond (ms) intervals, 100 ms intervals, 50 ms intervals, 20 ms intervals, 10 ms intervals, or even more frequently and/or in real-time or near real-time, in order to allow system 200 to respond to or otherwise react to data regarding a fueling operation and thus more effectively and safely manage that fueling operation.

[0063] In various embodiments, system 200 utilizes an open design, unencumbered by any existing hydrogen fueling mobile system communication standards (e.g., SAEJ2799 or SAEJ2601-1). However, it will be appreciated that system 200 may be utilized, if desired, in connection with any suitable existing or future protocol for hydrogen fueling, aircraft communication, and/or the like (for example, preliminary proposed fueling protocol ISO 19880-x). Moreover, communication components and/or protocols used in the system 200 may include the controller area network 215 for aircraft bus 211 on the aircraft 202 side and the PROFIBUS 223 (e.g., PROFIsafeProfinet Slave) for the aircraft bus 211 on the mobile system 206 side. Moreover, a communication channel or channels between aircraft 202 and mobile system 206 may, in various embodiments, comply with the specifications of IEC 61784-3 to enable safe communication. Yet further, NFC link 230 and A2X link 250 may be configured for approval and permitted for use on an aircraft and a hydrogen fueling mobile system in the United States, the European Union, and/or other countries and locations around the world.

[0064] In various embodiments, a method for hydrogen fueling is contemplated for use with one or two types of communication links, used individually or in tandem. The method is implemented using a minimum rating for NFC link 230, where the minimum rating provides a system considered safe (e.g., a rating having a likelihood of failure of minimum SIL 2 and FDAL C). In a tandem approach, NFC link 230 may be used primarily to identify aircraft 202 in connection with a communication handshake before fueling, and also to identify a particular wireless network wherewith to establish communication over A2X link 250. However, it will be appreciated that, in various embodiments, NFC link 230 and A2X link 250 may be utilized in a redundant fashion, as desired, in order to transfer the same (or similar) information between aircraft 202 and mobile system 206.

[0065] Further, in various embodiments and as discussed above, safety ratings for both NFC link 230 and A2X link 250 may be combined or added together in order to achieve a higher overall SIL rating for system 200 or a subpart thereof. For example, if NFC link 230 exhibits an FDAL C rating and A2X link 250 exhibits an FDAL C rating, then, when combined, the overall rating for system 200 or a subpart thereof may be established as an FDAL A rating. Under an FDAL A rating, an exemplary fueling protocol may rely on the combined communication links for safety functions, such as custom fueling protocols. The communication links may be redundant such that if one communication link fails, there still remains a communication link for sending information between aircraft 202 and mobile system 206, thereby maintaining communication between aircraft 202 and mobile system 206.

[0066] In various embodiments, NFC link 230 may be configured to transfer specific commands and feedback from dispenser 263 during a fueling operation. The design of NFC link 230 may include suitable approaches, such as bidirectional communication, handshaking, watchdog signals, and/or black channel approaches to achieve a desired safely rating. Moreover, an exemplary communication protocol may include or utilize specific fueling data as dynamic values, such as pressure and temperature values within hydrogen components of aircraft 202 for safe fueling. Moreover, for optimized fueling, static values of a hydrogen storage system may include specific volume, type of tanks, number of tanks, geometry, numbers of fueling, an abort signal or the like.

[0067] In various exemplary embodiments, if a communication link fails, either before a fueling operation commences or during the fueling operation, the fueling operation may continue for a period of time, for example based on the static values or previously received dynamic values. In this manner, rather than being required to immediately abort a fueling operation responsive to a communication failure, system 200 enables a fueling operation to run to completion (or at least partway to completion) after a partial or total communication failure. For example, if prior to a communication failure dynamic values indicated a particular tank 257 was 50% full, system 200 may elect to continue a fueling operation in a manner anticipated to fill tank 257 to a level of 80% full, potentially providing aircraft 202 with sufficient range to reach a desired location, such as a final destination or a service center for further evaluation.

[0068] Information regarding the storage tanks in the aircraft, various fueling process parameters and the status (e.g., total estimated time to fill, time elapsed, time remaining, percentage of fill completed, volume/weight of fuel to complete fill, and/or the like), payment for fueling, software and firmware updates, and so forth may then be transferred bidirectionally between the mobile system and the aircraft via one or both of NFC link 230 and A2X link 250. In this manner, an optimized fueling for the aircraft may be achieved. Additionally, in this manner improved control and/or monitoring of the aircraft may be enabled.

[0069] Turning now to FIGS. 11A, 11B, 10, and 11, various additional methods, systems, and components for safe and reliable fueling approaches are described in accordance with the principles of the present disclosure. In various embodiments, exemplary systems and methods facilitate fueling a generic fleet of aircraft with variable tank sizes, for example in compliance with the SAE J2601-1 standard used for fueling of aircraft. Referring to FIGS. 11A and 11B, a system 300 employing a safe communication hardware methodology and associated software and hardware components is disclosed with specific reference to a gaseous or liquid hydrogen fueling mobile system and an aircraft undergoing a gaseous or liquid hydrogen fueling operation. In various embodiments, system 300 enables unidirectional or bidirectional communication between an aircraft 302 having a tank 357 (e.g., a hydrogen storage tank) and an aircraft data unit 310 and a mobile system 306 having a mobile system control module 312 for gaseous or liquid hydrogen fueling as well as for general communication (e.g., financial payment, authentication, aircraft identification, or the like) between aircraft 302 and mobile system 306. A data communication channel 314 is configured for transfer of data between aircraft data unit 310 and mobile system control module 312.

[0070] In various embodiments, data communicated via data communication channel 314 is considered sufficiently reliable to trust during the control of the fueling operation-e.g., a fueling operation may proceed without the need for monitoring various tank parameters. Exemplary tank parameters may include specific tank type, tank size, real-time temperature or pressure in the aircraft tank, and so forth. Accordingly, by application of the principles of the present disclosure, system 300 obtains various advantages of a so-called fueling with communication approach (e.g., operation of system 200 described above with reference to FIGS. 10A-10C) while executing a so-called non-communication fueling approach. This is possible as tank specification data (e.g., the tank data ultimately transmitted from aircraft 302 to mobile system 306) of tank 357 to be fueled is received by mobile system 306 according to an exemplary embodiment.

[0071] Advantages provided via transfer of tank 357 data include that a fueling may be optimized by making the fueling faster, safer, with a higher chance of achieving 100% SoC, and/or with more efficient use of a hydrogen storage and compressor facility within mobile system 306. This can result in a less expensive mobile system compared to mobile systems using a generic protocol (such as, for example, SAE J2601-1) that does not implement safe data communication. Further, via principles of the present disclosure, the likelihood of incidents and potential hazardous situations where the tank 357 is overfilled (e.g., filled to a higher pressure, temperature, or fill density than rated) is reduced. This is because relevant data is communicated safely, and thus mobile system control module 312 is able to take appropriate action before a situation evolves based on trusted information regarding the tank 357.

[0072] In various embodiments, to achieve the above advantages, it is desirable to safely communicate data (or at least verify the data received from aircraft 302 by mobile system 306 is valid or trustworthy). In an exemplary embodiment, characteristics of tank 357 are determined and communicated in a safe manner via data communication channel 314 to mobile system 306. It is desirable to use hardware and/or software components that are designed and approved for use in a safety instrumented system. This means the design of such software or hardware preferably will comply with IEC 61508 or similar standards, and data communication preferably will comply with IEC 61784-3 or similar standards. Each hardware or software subsystem or component related to fueling of tank 357, therefore, preferably complies with IEC 61508 or the equivalent and obtains a SIL rating of at least 2. However, any suitable hardware or software may be utilized. In an analogous manner, data communication channel 314 may be implemented using a white channel or a black channel (with the so-called PROFIsafe or EtherCAT communication protocol as examples). See, e.g., IEC 61784-3. Preferably, as an alternative or in combination hereto, communication between mobile system 306 and aircraft 302 may at least partly include a communication loop. Such communication loop may serve at least two purposes, namely: (i) verifying if a connection between mobile system 306 and aircraft 302 is established; and (ii) providing validation of data received from aircraft 302. In one exemplary embodiment, system 300 may be implemented as a standard TCP/IP communication system, on top of which an appropriate safety protocol is added to comply with, for example, SIL 2 requirements. EtherCAT Safety (a/k/a FSoE or Fail Safety over EtherCAT) and PROFIsafe are examples of standards for safe communication adding appropriate safety. Moreover, use of PROFIsafe is advantageous in that no requirements to hardware are added to implement fail safe data communication within system 300. However, any suitable safety additions or protocols may be utilized.

[0073] In various embodiments, data communication channel 314 may include an infrared (IR) transmitter or receiver, thereby facilitating infrared communication at a data communication interface between mobile system 306 and aircraft 302. In this way, data exchanged over an infrared link may be used as part of a safe data transmission between mobile system 306 and aircraft 302. In an exemplary embodiment, one way of transmitting the data is by using an existing unidirectional IR communication via a nozzle 370 to identify aircraft 302. Bidirectional IR communication may also be used to facilitate the data exchange, provided nozzle 370 is equipped with appropriate bidirectional communication hardware.

[0074] In various embodiments, data communication channel 314 may be safely implemented via an industrial wireless local area network (for example, compatible with IEEE 802.11) or via a physical cable connecting mobile system 306 and aircraft 302. Wireless communication utilizes wireless access points at both the mobile system 306 and the aircraft 302. An advantage of using a physical cable is mobile system 306 is directly connected and may thus verify a specific aircraft 302 for fueling. Moreover, combinations of the mentioned wireless (including infrared, RFID, Bluetooth, Wi-Fi, or other techniques) and wired communication channels may also be used. If the data communication channel 314 is wireless, at least one access point may be implemented in relation to or as part of a sensor 313 measuring relevant dynamic information of tank 357. As mentioned, principles of the present disclosure are advantageous in that mobile system 306 is enabled to perform a fast and high-density fueling without being updated with or relying on dynamic data. Moreover, separate data communication hardware, such as a tank identification device 318 or other hardware (e.g., an interface (10) module) is preferred for communicating static tank data; using such data, mobile system 306 may perform a fueling.

[0075] Referring specifically to FIG. 11A, an exemplary embodiment is illustrated, where mobile system control module 312 communicates with aircraft data unit 310 located in aircraft 302. The mobile system control module 312 is configured for communicating with aircraft data unit 310 via data communication channel 314. If aircraft data unit 310 does not facilitate data communication to mobile system 306, an interface module may be used to facilitate this communication. The tank 357 receives hydrogen from a hydrogen storage tank 360 via a dispenser (not illustrated) and a fuel hose 320 with nozzle 370 attached thereto. The fueling operation may be controlled by mobile system control module 312 and/or may be informed by aircraft data unit 310. The main component of mobile system control module 312 is a programmable logic controller (PLC), but data storage or other exemplary computational or communication components may be used, as suitable.

[0076] In various embodiments, data communication channel 314 may be implemented as a physical cable enabling a mobile system data communication channel 322 and an aircraft data communication channel 324. The mobile system data communication channel 322 and the aircraft data communication channel 324 are configured to communicate via a mobile system data interface 326 and an aircraft data interface 328. Hence, when connected, data communication channel 314 between mobile system control module 312 and aircraft data unit 310 is established, facilitating communication (e.g., via PROFIsafe or the like). The mobile system data interface 326 and aircraft data interface 328 may be implemented as a plug and socket electric connection, as optical transceivers, as magnetically coupled connections, via a Universal Serial Bus-compatible connection, and/or as any other suitable alternatives. If data communication channel 314 is implemented by a physical cable, the cable preferably comprises at least two electric conductors, but may be a multi-conductor cable, an optical cable, or the like. The cable is preferably robust and able to comply with the environment near and/or around mobile system 306 with respect to temperature, humidity, rain or snow, and so forth. In exemplary embodiments where mobile system data interface 326 and aircraft data interface 328 comprise a plug and a socket, a connection may be made at aircraft 302 (e.g., adjacent to and/or nearby where nozzle 370 is attached to a receptacle 355). An appropriate connection type for a physical cable is robust and easy to connect. Preferably, it should be colored (e.g., red) to identify it is part of a hydrogen fuel dispenser and facilitate the use of the PROFIsafe communication technique. Preferably, the physical cable may be connected to aircraft 302 with a safe distance established between the cable and nozzle 370 and receptacle 355 of aircraft 302. In an alternative embodiment, the mobile system data interface 326 and the aircraft data interface 328 are optoelectronic, preferably facilitating infrared and/or radio frequency data transmission utilizing mobile system data communication channel 322 and the aircraft data communication channel 324. When optical communication is utilized, both mobile system data interface 326 and aircraft data interface 328 facilitate transforming an electrical signal to and from an optical signal via appropriate hardware and communication protocols.

[0077] Referring more specifically to FIG. 11B, in another exemplary embodiment, mobile system control module 312 communicates with aircraft data unit 310 implemented as tank identification device 318. In various embodiments, tank identification device 318 comprises a first input module 330 (facilitating communication of static data) and/or a second input module 332 (facilitating communication of either or both of static data and dynamic data). In various embodiments, first input module 330 may be a hardware unit configured to store static data related to tank 357. Based on this data, mobile system control module 312 may determine a fueling protocol. The configuration may be done by adjusting switches, resistors, circuits, capacitors or the like, so that on request the static datum or data based on which static data may be derived (e.g., a binary number or current level) is communicated to mobile system 306. The request for data may be made by or upon connecting mobile system data interface 326 and aircraft data interface 328 (e.g., by a digital signal, applying a voltage, or the like). In various exemplary embodiments, the static data includes information from which the aircraft tank(s) 357 may be identified (e.g., tank specification data including, for example, volume, material, and the like). This static data is constant with respect to a particular tank 357 and, therefore, the first input module 330 may be configured at an appropriate time, for example during manufacturing of aircraft 302 when the tank 357 type is determined. Or when a particular tank 357 of aircraft 302 is replaced with another tank 357 which may differ in one or more aspects. The second input module 332, which is preferably a safety analog module, may be connected to sensor 313 (or to a plurality of sensors, including a temperature sensor and a pressure sensor) of aircraft 302. The second input module 332 facilitates communication of, for example, real-time values of tank temperature and pressure to mobile system 306. The second input module 332 may communicate wirelessly or by cable with sensor 313 of tank 357.

[0078] The first input module 330 and the second input module 332 may be connected to aircraft data interface 328. Thereby, when aircraft data interface 328 is connected with mobile system data interface 326, data communication channel 314 from sensor 313 to mobile system control module 312 is established. The aircraft data interface 328 may be implemented as a simple connector adapted to receive a cable or wireless communication from mobile system 306, creating data communication channel 314 between mobile system control module 312 and aircraft data unit 310. In various embodiments, aircraft data interface 328 and aircraft data unit 310 may be integrated, forming a single unit (which may be referred to as a communication node), or connected by aircraft data communication channel 324.

[0079] As described above, in various exemplary embodiments, if aircraft data unit 310 is implemented as a tank identification device 318, it may be a passive unit. This is advantageous in that the aircraft portion of an exemplary embodiment may be less expensive and easier to service and maintain. However, if tank 357 is replaced by a tank having different static data, the tank identification device 318 should be updated to reflect the characteristics of the new tank 357. Preferably, however, aircraft data unit 310 is an active device, such as, for example, a PLC in which the static data is stored, and which communicates with sensor 313. Preferably, mobile system control module 312 is continuously polling for data from aircraft data unit 310 at a given frequency and/or interval, examples of which include 10 Hz, 50 Hz, 100 Hz, 200 Hz, and so forth; moreover, interrupt-based and/or real-time or near real-time communication approaches may be utilized, as appropriate, in order to allow mobile system 306 and/or aircraft 302 to predict, react to, and/or control events and actions associated with fueling of aircraft 302.

[0080] According to an exemplary embodiment, mobile system control module 312 determines a fueling protocol specific to tank 357 from which data is received. This is done based on the received data and verified by the inherent verification included in the safe data communication protocol (e.g., a property of the PROFIsafe protocol used for communication of data over data communication channel 314). However, any suitable verification protocol or approach may be utilized. The verification may be made by mobile system control module 312 returning the received data to aircraft data unit 310, which then verifies and communicates the result of the verification back to mobile system control module 312. In the configuration where aircraft data unit 310 is passive, the mere existence of a continuous voltage or a current may be translated to the needed data, for example by a look up in a data storage based thereon or indexed thereto. A verification that data communication channel 314 exists is obtained as long as the voltage or current is present. Alternatively, the data may be obtained by a unique identification from aircraft 302 to mobile system control module 312.

[0081] When at least the static data is received and verified, a fueling protocol may be determined. Below is a list of exemplary data that may be received by the mobile system control module 312 from the aircraft data unit 310. Whether data communication channel 314 is established by a cable or wireless, data related to tank 357, also referred to as tank specification data, desirably includes the following static data: the tank volume (e.g., between 400 liters and 2100 liters, or any suitable size); a pressure rating associated with the tank; the tank type (e.g., Type 1, 2, 3, 4. . . ) ; the number of tanks (e.g., 1, 2, 3. . . ) ; the geometric dimensions of a tank or the tanks (e.g., length, diameter, etc.); the materials used to construct the tank(s); manufacturing data of the tank(s); the last service date of the tank(s); and the serial number of the tank(s) and the like. In addition, the following dynamic data is also desirable to receive from the aircraft data unit 310 to improve the establishing of the fueling protocol: a fueling command (e.g., dynamic, start, halt, abort, etc.); a real-time measurement of pressure within the tank(s); a real-time measurement of temperature within the tank; the ambient temperature; a software version identifier; a protocol relating to a last fueling; the number of vessels in the aircraft; a pressure drop measurement; the vessel geometry; a heat capacity of the tank, and the like. According to an exemplary embodiment, the static data and verification thereof is utilized for the fueling operation to commence and to ensure that the mobile system control module 312 establishes an optimal fueling protocol for fueling the tank 357. The dynamic information is optional according to this exemplary embodiment and, if available, it may be used to optimize or inform about the fueling operation.

[0082] In some embodiments, a fueling operation for the aircraft 302 proceeds as follows: When aircraft 302 arrives at mobile system 306, the person or apparatus fueling tank 357 initiates the fueling operation by activating a dispenser or attaching nozzle 370 attached to fuel hose 320 to receptacle 355. Thereby, a fueling channel is created from hydrogen storage tank 360 to tank 357. The dispenser may be integrated into a mobile system central module. Even though the principles of the present disclosure are suitable on any type of aircraft, they may be especially advantageous when buses or other larger aircraft are fueled, for example in the scenario where buses or heavy-duty trucks (such as class 8 trucks) are equipped with tanks of Type 4, where the temperature gradient is lower than tanks of Types 2 and 3 as an example; thus, the temperature rise of such tanks during fueling may be slower than the temperature rise of a typical tank for a passenger automobile. The data communication of exemplary embodiments facilitates or ensures that tank 357 is not overfilled, and it leads to a faster fueling operation, a higher end pressure, and a higher density.

[0083] If a wireless communication is used, data communication channel 314 is preferably automatically established, and if a physical cable is used, it should be physically connected to aircraft 302. Based on a communicated signal through either a wireless link or a cable, a signal from aircraft 302 is sent to mobile system 306. The signal may contain a unique ID (based on static data), or static data or dynamic data as mentioned above linked to tank 357 or aircraft 302. Preferably, data linked to the aircraft tank volume and type is utilized, as this information is sufficient to determine an appropriate fueling protocol for some embodiments.

[0084] According to an exemplary embodiment, a unique ID may be a binary number, or a current value depending on the configuration of first input module 330 of aircraft data unit 310. A plurality of fueling protocols or parameters is preferably stored in a database or a table at mobile system 306, or optionally remote thereto if networked data communication to mobile system 306 is available. Based on the data received, a fueling protocol matching (or suitable for) tank 357 to be fueled is established from among the plurality of fueling protocols or parameters. Alternatively, rather than determining a new protocol, parameters of a generic protocol may also be used and, if considered necessary, changed based on the received tank 357 related data. If no data is received, or if data regarding tank 357 cannot be verified as correct, a conservative fueling protocol may be chosen, leading to a slow fueling and ending with a low density in the tank 357. Hence, by use of the exemplary principles of the present disclosure, mobile system 306 may be configured to use an individual fueling protocol tailored specifically to the tank 357, enabling a fueling operation having the above-mentioned advantages. A fueling protocol in this context may be defined as needed, for example, by the target pressure and the ramp rate of the filling.

[0085] In accordance with various exemplary embodiments, when dynamic values are not available to the fueling mobile system controller, a suitable protocol for fueling may be established based on only the static values of aircraft 302. If some or all dynamic data is available, the fueling protocol is preferably dynamic in response to changes in the received data. As mentioned above, the verification or acknowledgement from aircraft 302 that the data received in the first place is correct is desirable. The verification is preferably done by the safe data communication protocol used to communicate data via data communication channel 314. As also mentioned above, the verification may be an inherent part of a safe data communication protocol and may therefore not be an individual or separate step. After the data received from aircraft 302 is verified, mobile system 306 permits or initiates a flow of hydrogen from mobile system 306 to tank 357.

[0086] In various exemplary embodiments, a default protocol or protocols are preferably made or established prior to the commissioning of mobile system 306 or at least prior to a fueling operation. Hence, in an exemplary embodiment, no calculations are needed during fueling; rather, only pressure of the hydrogen provided to aircraft 302 is measured. This is to verify that the pressure stays within the upper and lower limits of the established fueling protocol. Further, principles of the present disclosure are advantageous in that, in various exemplary embodiments, aircraft 302 does not need additional safety transmitter components or controllers, as temperature and pressure measurements from aircraft 302 are not mandatory for establishing a fueling protocol. The only data an aircraft 302 may send is a unique ID identifying tank 357 of the aircraft 302, or the above-mentioned static data linked to the tank 357.

[0087] In various exemplary embodiments, the fueling protocol may be further optimized if at least some of the dynamic data is provided to mobile system 306, such as, for example, the real-time pressure and temperature measurements. A database or table may include fueling protocols for use both with and without the dynamic data. The temperature of the tank 357 may be established, for example, by simulation of hot soak and cold soak assumptions (e.g., tank temperature estimations based on measured ambient temperature). Hence, static data and dynamic data such as tank temperature, may be used to establish the fueling protocol.

[0088] If an aircraft 302, which is new to mobile system 306 (e.g., having an unknown tank 357-N or tank system) is to be fueled by mobile system 306, a simulation including data of the new tank 357-N volume and type, among other variables, may be conducted prior to the first fueling of new aircraft 302. This approach may be utilized to establish a fueling protocol which, when followed, ensures or is intended to ensure the temperature and/or pressure stays within the range limits of the newly-presented tank 357-N. Accordingly, a desirable way of establishing a fueling protocol is to simulate a plurality of fueling operations to determine an optimal protocol during which the temperature and/or pressure is kept within the limits of tank 357-N. When established, the fueling protocol may be made and uploaded to mobile system 306 and used when the new aircraft 302 with the new tank 357-N is to be fueled. The selection of such new fueling protocol may then be made as described above based on received and preferably also acknowledged and verified aircraft or tank ID or static data. Alternatively, a fueling of a new tank 357-N for which a protocol has not yet been established may be made based on measured temperature and pressure according to conventional fueling methods. Before such new fueling protocol is used in a fueling, however, an aircraft 302 with an unknown tank 357-N may be fueled according to a conservative fueling protocol. If a custom fueling protocol cannot be established, a safe mode fueling or conservative fueling such as the fueling described in SAE J2601 may be used.

[0089] Referring now to FIG. 12, a system 400 employing a safe communication hardware methodology and associated software and hardware components is disclosed with specific reference to a gaseous or liquid hydrogen fueling mobile system and an aircraft undergoing a gaseous or liquid hydrogen fueling operation. In various embodiments, system 400 enables unidirectional or bidirectional communication between a first aircraft 402 having a first aircraft tank 457 (e.g., a first hydrogen storage tank) and a first aircraft data unit 410 and a mobile system 406 having a mobile system control module 412 for gaseous or liquid hydrogen fueling as well as for general communication (e.g., financial payment, authentication, aircraft identification, and so forth) between first aircraft 402 and mobile system 406. A first data communication channel 414 is configured to transfer data between first aircraft data unit 410 and mobile system control module 412. In various embodiments, system 400 also enables unidirectional or bidirectional communication between a second aircraft 403 having a second aircraft tank 458 (e.g., a second hydrogen storage tank) and a second aircraft data unit 411. Similar communication take place between the second aircraft 403 and mobile system 406. A second data communication channel 415 is configured for transfer of data between second aircraft data unit 411 and mobile system control module 412. Both first aircraft 402 and second aircraft 403 may include a sensor 413 (or a plurality of sensors configured to detect, for example, real-time values of temperature or pressure within the corresponding aircraft tanks), a first input module 430 (facilitating communication of static data) and/or a second input module 432 (facilitating communication of either or both of static data and dynamic data).

[0090] In various embodiments, data communicated by first data communication channel 414 and second data communication channel 415 is considered sufficiently reliable to trust during the control of the fueling operation-e.g., a fueling operation for tanks 457, 458 may proceed without the need for monitoring various tank parameters as disclosed above.

[0091] FIG. 12 illustrates, in accordance with an exemplary embodiment, mobile system 406 comprising a center module 407 and a first dispenser 463 (or an external dispenser located external to the center module 407) and a second dispenser 464 (or an internal dispenser located internal to the center module 407). Moreover, in various embodiments, both first dispenser 463 and second dispenser 464 may be internal or external to center module 407. In various embodiments, the first dispenser 463 is located remote from mobile system 406, from which both first data communication channel 414 and a fluid path between a hydrogen storage tank 460 and the first aircraft tank 457 is established. The fueling may be controlled from mobile system control module 412 connected to a first dispenser controller 470 located at first dispenser 463. If the fueling is controlled from first dispenser controller 470 in first dispenser 463, the need for first data communication channel 414 between center module 407 and first dispenser 463 depends on the configuration of the systeme.g., whether or not first dispenser 463 is required to communicate with mobile system control module 412. In various embodiments, where a PLC is located in center module 407 and, for example, first dispenser controller 470 is located at first dispenser 463, it is preferred that first data communication channel 414 also facilitates communication via a safe data communication protocol.

[0092] According to an exemplary embodiment, first data communication channel 414 uses a safe data communication protocol with built-in verification and acknowledgement of the data transmitted between mobile system 406 and first dispenser 463 and between first dispenser 463 and first aircraft 402. In various embodiments, first data communication channel 414 may comprise a simple wired current loop. In various exemplary embodiments, the wires comprising first data communication channel 414 are connected to one or more electronic components, such as, for example, one or more resistors located within first aircraft data unit 410. When a voltage is applied, a current may be measured or drawn from the resistors. The current drawn may be linked to information of the static tank specification data which then is sent via first data communication channel 414 to mobile system 406 where a fueling protocol is determined for the first aircraft tank 457. As illustrated, a mobile system data interface 426 and an aircraft data interface 428 may also, in an exemplary embodiment, facilitate the connection. Moreover, the electronic components may be integrated in aircraft data interface 428.

[0093] With continued reference to FIG. 12, in various exemplary embodiments second dispenser 464 is located internal to center module 407 and configured for connection (e.g., for communication and for fueling) to second aircraft 403. As illustrated, second data communication channel 415 may be wirelessly established between second dispenser 464 and second aircraft 403, with one or more wireless antenna(s) 417 configured to establish second data communication channel 415 as a wireless link. The second dispenser 464 may be controlled by a second dispenser controller 471 or may be controlled by mobile system control module 412. In the latter case, second dispenser controller 471 may comprise a remote I/O module. In various embodiments, a hardwire link 419 may complete second data communication channel 415 between mobile system control module 412 and second dispenser controller 471. In various embodiments, first dispenser 463 is connected to center module 407 via a first hydrogen supply line 474 and first data communication channel 414. A second hydrogen supply line 475 connects first dispenser 463 to first aircraft tank 457 (e.g., via a nozzle and a receptacle as described above with reference to FIG. 10A). The first dispenser 463 is preferably controlled by mobile system control module 412 with first dispenser controller 470 comprising a remote I/O module located at first dispenser 463. A hydrogen supply line 473 connects second dispenser 464 to second aircraft tank 458 via a nozzle and a receptacle.

[0094] Control of the foregoing embodiments includes the above-mentioned techniques for establishing of a fueling protocol based on static data received from either first aircraft 402 or second aircraft 403 and the subsequent fueling of first aircraft tank 457 and second aircraft tank 458. Hence, in configurations including one or more dispenserse.g., first dispenser 463 and second dispenser 464mobile system control module 412 may be supplemented by dispenser control modulese.g., first dispenser controller 470 and second dispenser controller 471which then act in place of or in conjunction with mobile system control module 412. In a current loop embodiment, data communication between first dispenser controller 470 and second dispenser controller 471 and mobile system control module 412 may not require a safe data communication channel. In various embodiments, dispenser control modules may be slave to, be controlled by, or at least communicate with (e.g., as a remote I/O module) mobile system control module 412. Accordingly, in various embodiments, the receiving of tank specification data, the establishing of the fueling protocol, and the control of the fueling operation may be performed either by mobile system control module 412 located at center module 407 or by dispenser control module-e.g., first dispenser controller 470 or second dispenser controller 471.

[0095] Referring now to FIG. 13, a system 500 employing a safe communication hardware methodology and associated software and hardware components is disclosed with specific reference to a gaseous or liquid hydrogen fueling mobile system and an aircraft undergoing a gaseous or liquid hydrogen fueling operation. In various embodiments, system 500 enables unidirectional or bidirectional communication between an aircraft 502 having an aircraft tank 557 (e.g., a hydrogen storage tank) and an aircraft data unit 510 and a mobile system 506 having a mobile system control module 512 for gaseous or liquid hydrogen fueling as well as for general communication (e.g., financial payment or aircraft identification) between aircraft 502 and mobile system 506. Communications between aircraft 502 and mobile system 506 may be implemented in accordance with various exemplary embodiments disclosed above.

[0096] The mobile system 506 includes a center module 507, which preferably includes a heat exchanger 580 configured to cool gaseous or liquid hydrogen and one or more compressors 581. A dispenser 563 is connected to center module 507. Hydrogen may be communicated via a supply line 574 to the dispenser 563 and data may be communicated between center module 507 and dispenser 563 via a data communication channel 514. Hydrogen is communicated to aircraft 502 via a hose 575 and a nozzle 570 and data is communicated between dispenser 563 and aircraft 502 as discussed herein. A sensor 577 may be configured to monitor one or more of temperature, pressure and mass flow rate within the dispenser 563 or components thereof.

[0097] In an exemplary embodiment, aircraft interface 528 may comprise a first input module 530 (facilitating communication of static data) or a second input module 532 (facilitating communication of either or both of static data and dynamic data). The first input module 530 is not required to be connected to any other aircraft 502 components. Hence, in this exemplary embodiment, aircraft interface 528 may be combined with aircraft data unit 510. It may be implemented as a passive electronic device only responding when queried. Hence, first input module 530 is, in an exemplary embodiment, a passive standalone device located at the aircraft 502 with no connection to other aircraft 502 components. It may be positioned close to the receptacle to which the nozzle 570 is configured to connect, facilitating flow of hydrogen to the aircraft tank 557. In an exemplary embodiment, mobile system interface 526 and nozzle 570 are integrated into a single unit. The first input module 530 and second input module 532 may comprise a single module; however, the dynamic nature of second input module 532, which is optional, indicates that such input module is communicating with sensors, data processors, memories, or the like. Such components include, for example, a sensor 513 (or a plurality of sensors configured to detect, for example, real-time values of temperature or pressure within the aircraft tanks) in communication with the aircraft tank 557.

[0098] A hydrogen fuel storage module 582 may comprise one or more storage tanks 583. A plurality of pressure sensors 584 may be disposed throughout system 500, including within or external to one or more storage tanks 583, for example, and/or at various locations along the various conduits that comprise supply line 574. Each pressure sensor 584 is typically connected to mobile system control module 512. The hydrogen fuel storage module 582 is preferably external to center module 507 (or to an enclosure that houses the center module 507), and the pressures within system 500 may vary from 10 MPa to over 100 MPa. However, in various embodiments, hydrogen fuel storage module 582 may be enclosed in a single housing along with center module 507. Preferably, the plurality of storage tanks 583 within hydrogen fuel storage module 582 contain hydrogen under pressures of between 50 MPa and 100 Mpa, although any suitable pressure of hydrogen in storage tanks 583 is contemplated herein. A hydrogen supply tank 585 is also preferably connected to center module 507. The hydrogen supply tank 585 may be a temporary facility, such as, for example, a tank within a trailer, or a permanent facility. In various embodiments, the pressure within hydrogen supply tank 585 is stored at a lower pressure relative to storage tanks 583 (e.g., below 20 MPa), for example in order to facilitate movement of hydrogen along a downward pressure gradient. The flow of hydrogen from hydrogen supply tank 585 to hydrogen fuel storage module 582 or directly to dispenser 563 is facilitated by the various conduits forming supply line 574. In various embodiments, the length of the conduits from heat exchanger 580 to dispenser 563 is preferably less than sixty meters to be able to maintain the temperature of the hydrogen during a fueling operation at a desired level. The flow of hydrogen is controlled by mobile system control module 512; however, additional controllers dedicated to controlling one or more compressors 581 or dispenser 563 may also be used. The controller(s) control hydrogen flow via one or more valves 586, based at least in part on values of pressure and temperature measured at the various components comprising system 500, including, for example, at the plurality of storage tanks 583, one or more compressors 581, heat exchanger 580 and dispenser 563.

[0099] In various exemplary embodiments, system 500 includes dispenser 563 (internal or external) as the only dispenser. In various embodiments, however, additional dispensers are desirable or advantageous. Accordingly, in various embodiments, system 500 may be configured with and/or retrofitted with a second dispenser 564. The connection of supply line 574 to second dispenser 564 may be made in a manner similar to the connection to dispenser 563. However, if second dispenser 564 is configured or intended to fuel aircraft having large aircraft tanks, such as, for example, a bus or a heavy duty truck (such as a class 8 truck), in accordance with principles of the present disclosure the connection may be accomplished using an auxiliary supply line 587, which is tapped into supply line 574 upstream of heat exchanger 580. In various embodiments, dispenser 563 may be configured similarly. Similar to dispenser 563, second dispenser 564 may include a second dispenser controller 573 and a second sensor 579 configured to monitor one or more of temperature, pressure and mass flow rate within or around second dispenser 564. A second data communication channel 517 is configured for transfer of data between second dispenser 564 and mobile system control module 512.

[0100] Consistent with the foregoing embodiments, either or both of dispenser 563 and second dispenser 564 may operate under a safe communication channel, which may be installed with the dispensers or retrofitted after installation. In this manner, a mobile system 506 may be retrofitted to be capable of determining a fueling protocol based on information received from an aircraft, e.g., the aircraft 502, according to an exemplary embodiment. According to an exemplary embodiment, safe communication is obtained by the bidirectional data exchange such that when the mobile system control module 512 receives data from aircraft 502, the module will send the data back to aircraft 502, at which point aircraft 502 will verify that the data it received from the mobile system control module 512 is the data initially sent. The aircraft will then send to mobile system control module 512 either an OK signal if the data is the same or a not OK signal if the data is not the same. As mentioned, this may be accomplished, for example, via use of a PROFIsafe link between the dispenser 563 and/or second dispenser 564 and mobile system control module 512, or other safe data communication protocols that are configured with inherent check and retransmit of data (if necessary) so that there is an appropriate level of certainty that data entering the safety channel is the same as the data exiting the data channel. One solution is to use a cable; hence, if the cable is not connected, the mobile system control module 512 may determine that something is wrong and can act thereupon.

[0101] Turning now to FIG. 14, in various exemplary embodiments an exemplary system as disclosed herein may utilize a third NFC device 690, in addition to an NFC device in an aircraft and in a mobile system, for example in order to provide additional capabilities, improve system security and/or performance, or the like. As used herein, a third NFC device refers to a device with NFC capabilities, with such device being neither part of an aircraft (e.g., aircraft 202) nor part of a mobile system (e.g., mobile system 206). For example, third NFC device 690 may comprise a smartphone, a tablet, a smartwatch, an access card, a mobile device of a mobile system operator, and/or the like. It will be appreciated that while such NFC device is referred to as a third NFC device 690, in various exemplary embodiments more than three NFC devices may be utilized in connection with a particular fueling protocol or other transaction or communication disclosed herein (for example, a particular fueling protocol and transaction may involve an NFC device on aircraft 202, an NFC device on mobile system 206, an NFC device in a smartphone, and an NFC device in an access card). Additionally, it will be appreciated that, while communication among and between various NFC devices is contemplated, each device (e.g., hydrogen fueling mobile system 206, aircraft 202, third NFC device 690) may also be in wired and/or wireless electronic communication with various other communication networks and/or computing resources, as shown. For example, NFC device 690, in addition to NFC capabilities, may also utilize a 4G cellular connection to the internet or similar global data networks. Moreover, it will be appreciated that, while various embodiments may utilize three or more NFC-capable devices or components, such components are typically in 1:1 communication at any given time (i.e., third NFC device 690 may communicate with an NFC device of aircraft 202 during a given time, and at another time thereafter, third NFC device 690 may communicate with an NFC device of mobile system 206, and at yet another time thereafter, an NFC device of aircraft 202 may communicate with an NFC device of mobile system 206, and so forth).

[0102] In some exemplary embodiments, with reference now to FIG. 15, fueling of aircraft 702 (not shown) may be accomplished in connection with use of a third NFC device 790 comprising a mobile device such as a smartphone. An exemplary method 700 comprises bringing third NFC device 790 into proximity with an NFC device of a fueling mobile system 706 (e.g., an NFC device disposed in or on nozzle 770) (step 710). A payment transaction is completed via communication between fueling mobile system 706 and third NFC device 790, for example utilizing one or more existing or yet to be implemented payment protocols or systems such as Google Pay, Apple Pay, and/or the like (step 720). In various embodiments, the payment transaction may be for a desired mass of hydrogen (for example, 1 kilogram (kg), 2 kg, 10 kg, 20 kg, and/or the like), a desired fill (e.g., 50%, 60%, 80%, 100%, etc.), a desired percent of fill over a current percent of fill (for example, an additional 10%, 20%, 30%, 50%, etc.), a desired amount of additional range for aircraft 702, for example based on a modeled and/or measured rate of fuel utilized by aircraft 702 per unit distance (for example, 100 miles of additional range, 200 miles of additional range, 300 miles of additional range, etc.), and/or the like. Thereafter, nozzle 770 is coupled to receptacle 755 (step 730) and a fueling is conducted according to one or more fueling protocols as disclosed herein (step 740). It will be appreciated that in some alternative embodiments, in method 700 payment steps may be completed after fueling steps. Moreover, in some exemplary embodiments, payments steps of method 700 may also involve and/or utilize cellular or other wireless data connections of third NFC device 790 (for example, information regarding a proposed payment transaction may be transferred between a smartphone 790 and an NFC device of fueling mobile system 706, but authorization and/or payment consummation may take place over a cellular connection of smartphone 790 and via an internet-connected payment processor).

[0103] In other exemplary embodiments, with reference to FIG. 15, fueling of aircraft 802 (not shown) may be accomplished in connection with use of a third NFC device 890 comprising an access chip or card. An exemplary method 800 comprises bringing third NFC device 890 into proximity with an NFC device of a fueling mobile system 806 (e.g., an NFC device disposed in or on nozzle 870) (step 810). Based on one or more authentication or identification aspects of third NFC device 890, one or more transactions or actions may take place, for example: redeeming a voucher to at least partially pay for fueling of aircraft 802; activation of one or more features or capabilities of fueling mobile system 806, such as infotainment resources, special pricing conditions, in-store offers at a retail establishment associated with or in physical proximity to fueling mobile system 806, and/or the like; authentication or authorization for fueling of aircraft 802 to proceed (for example, ensuring an aircraft is fueled only by an authorized person is of heightened importance as aircraft and/or cargo value increases; in the event an aircraft is stolen, a thief would be unable to fuel the aircraft); service of fueling mobile system 806 by an employee; and/or the like (step 820). Thereafter, nozzle 870 is coupled to receptacle 855 (step 830) and a fueling is conducted according to one or more fueling protocols as disclosed herein (step 840). It will be appreciated that in some alternative embodiments, in method 800 payment steps may be completed after fueling steps. Moreover, it will be appreciated that exemplary functions disclosed above associated with third NFC device 890 comprising an access chip or card may also be implemented when third NFC device 890 comprises a smartphone or other suitable computing device, for example when such device is operating utilizing a host card emulation or similar virtual card capability.

[0104] In yet other exemplary embodiments, with reference to FIG. 17, fueling of aircraft 902 (not shown) may be accomplished in connection with use of a third NFC device 990 while simultaneously replacing or digitizing an aircraft logbook or equivalent thereof. An exemplary method 900 comprises coupling nozzle 970 to receptacle 955 (step 910) and a fueling is conducted according to one or more fueling protocols as disclosed herein (step 920). Thereafter, third NFC device 990 (comprising a smartphone of a mobile system operator) is brought into proximity with an NFC device of fueling mobile system 906 (e.g., an NFC device disposed in or on nozzle 970) (step 930). Information regarding the just-completed fueling (e.g., amount of hydrogen, price, location of mobile system 906, and so forth) is transferred via NFC between fueling mobile system 906 and third NFC device 990 (step 940). Third NFC device 990 may store this information in a database configured as an aircraft logbook; alternatively, third NFC device 990 may transmit this information to a remote system where a database configured as an aircraft logbook is stored (step 950), for example to a cloud-based aircraft logbook service, a centralized computing system of an owner of aircraft 902, and/or the like. In this manner, conventional aircraft logbooks may be eliminated and/or made digital. It will be appreciated that in some exemplary embodiments, third NFC device 990 may receive information from fueling mobile system 906 via a method other than NFC, for example via a Wi-Fi connection, via capture of a bar code, QR code, or similar visual data technique displayed on a display of mobile system 906, and/or the like.

[0105] Principles of the present disclosure may be set forth in the following example sets, each of which are presented by way of explanation and not of limitation.

Example Set A

[0106] Example 1: a method for fueling a hydrogen aircraft using near field communication (NFC), the method comprising: providing a first NFC device associated with the hydrogen aircraft, a second NFC device associated with a hydrogen fueling mobile system, and a third NFC device associated with an operator of the hydrogen aircraft; bringing the third NFC device into proximity with the second NFC device to establish a first NFC link therebetween; conducting, using information transmitted via the first NFC link, a payment transaction for fuel for the hydrogen aircraft; coupling a nozzle of the fueling mobile system to a receptacle of the hydrogen aircraft to bring the first NFC device and the second NFC device into proximity to establish a second NFC link therebetween; and conducting a fueling of the hydrogen aircraft pursuant to the payment transaction and utilizing information transmitted over the second NFC link.

[0107] Example 2: the method of example 1, wherein the conducting a fueling is performed utilizing information transmitted over an aircraft to infrastructure (A2X) link between the hydrogen aircraft and the hydrogen fueling mobile system.

Example Set B

[0108] Example 1: a method for fueling a hydrogen aircraft using near field communication (NFC), the method comprising: providing a first NFC device associated with the hydrogen aircraft, a second NFC device associated with a hydrogen fueling mobile system, and a third NFC device associated with an operator of the hydrogen aircraft; bringing the third NFC device into proximity with the second NFC device to establish a first NFC link therebetween; conducting, using information transmitted via the first NFC link, a data transaction associated with the hydrogen aircraft; coupling a nozzle of the fueling mobile system to a receptacle of the hydrogen aircraft to bring the first NFC device and the second NFC device into proximity to establish a second NFC link therebetween; and conducting a fueling of the hydrogen aircraft pursuant to the data transaction.

[0109] Example 2: the method of Example 1, wherein the data transaction comprises at least one of: redeeming a voucher to at least partially pay for fueling of the hydrogen aircraft; activation of one or more features or capabilities of the hydrogen fueling mobile system, such as infotainment resources, special pricing conditions, in-store offers at a retail establishment associated with or in physical proximity to the hydrogen fueling mobile system; authentication or authorization for fueling of the hydrogen aircraft to proceed; or service of the hydrogen fueling mobile system by an employee.

[0110] Example 3: the method of any of examples 1-2, wherein the conducting a fueling is performed utilizing information transmitted over an aircraft to infrastructure (A2X) link between the hydrogen aircraft and the hydrogen fueling mobile system.

Example Set C

[0111] Example 1: a method for fueling a hydrogen aircraft using near field communication (NFC), the method comprising: providing a first NFC device associated with the hydrogen aircraft, a second NFC device associated with a hydrogen fueling mobile system, and a third NFC device associated with an operator of the hydrogen aircraft; coupling a nozzle of the fueling mobile system to a receptacle of the hydrogen aircraft to bring the first NFC device and the second NFC device into proximity to establish a first NFC link therebetween; conducting a fueling of the hydrogen aircraft utilizing information transmitted over the first NFC link; bringing the third NFC device into proximity with the second NFC device to establish a second NFC link therebetween; transmitting, to the third NFC device and over the second NFC link, information regarding the fueling; and transmitting, by the third NFC device and via a cellular network connection, the fueling information to a remote system where a database configured as an aircraft log book is stored.

[0112] Example 2: the method of example 1, wherein the fueling information comprises information regarding an amount of hydrogen transferred to the hydrogen aircraft, a transaction price, and a physical location of the fueling mobile system.

[0113] Example 3: the method of any of examples 1-2, wherein the conducting a fueling is performed utilizing information transmitted over an aircraft to infrastructure (A2X) link between the hydrogen aircraft and the hydrogen fueling mobile system.

Example Set D

[0114] Example 1: A method for communication between a mobile system and an aircraft, the method comprising: disposing a fuel nozzle of the mobile system within a specified distance of a receptacle on the aircraft to establish, via first near field communication (NFC) hardware disposed on the cable and second NFC hardware disposed proximate the receptacle, an NFC link therebetween; communicating to the mobile system, via the NFC link, identifying information for the aircraft; selecting, by the mobile system, an aircraft to infrastructure (A2X) communication network based on the identifying information for the aircraft; establishing, between the mobile system and the aircraft, a A2X communication link via the A2X communication network; and delivering through the nozzle, by the mobile system and to the aircraft via the receptacle, hydrogen fuel to at least partially fill a hydrogen storage tank of the aircraft.

[0115] Example 2: The method of example 1, further comprising monitoring, during the delivering hydrogen fuel and via the A2X link or the NFC link, one or more status indicators for the storage tank of the aircraft.

[0116] Example 3: The method of any of examples 1-2, further comprising stopping, by the mobile system, delivery of hydrogen fuel to the aircraft in response to an indication that an aircraft storage tank condition is out of bounds.

[0117] Example 4: The method of any of examples 1-3, further comprising transmitting to the aircraft, by the mobile system and over the A2X communication link, an update to at least one of: a software application operative on the aircraft; or firmware for an electronic device operative as part of the aircraft.

[0118] Example 5: The method of any of examples 1-4, further comprising exchanging, between the mobile system and the aircraft and over the A2X communication link, payment information and confirmation associated with the delivering the hydrogen fuel to the aircraft.

[0119] Example 6: The method of any of examples 1-5, further comprising downloading from the aircraft to the mobile system and over the A2X communication link, diagnostic information for a component of the aircraft.

[0120] Example 7: The method of any of examples 1-6, wherein a communication protocol of the A2X communication link is at least one of an IEEE 802.11 protocol, a 4G LTE mobile network protocol, or a 5G mobile network protocol.

[0121] Example 8: The method of any of examples 1-7, wherein the specified distance is 20 centimeters or less.

[0122] Principles of the present disclosure may be utilized in connection with various fuel cell electric aircraft, for example as disclosed in (i) U.S. Pat. No. 10,077,084 entitled SYSTEMS, METHODS, AND DEVICES FOR AN AUTOMOBILE DOOR OR WINDOW, (ii) U.S. Patent Application Publication No. 2019-0263455 entitled SYSTEMS, METHODS, AND DEVICES FOR AN AUTOMOBILE DOOR OR WINDOW, and/or (iii) U.S. Pat. No. 10,308,132 entitled ELECTRIC UTILITY TERRAIN AIRCRAFT. The contents of each of the foregoing are hereby incorporated in their entirety for all purposes (except for any subject matter disclaimers or disavowals, and except to the extent of any conflict with the disclosure of the present application, in which case the disclosure of the present application shall control).

[0123] Aircraft communication systems in accordance with the principles of the present disclosure may be configured with any suitable components, structures or elements in order to provide desired functional, communicative, electrical or other related properties. In particular, referring now to the foregoing figures and accompanying disclosure, the process flows and techniques depicted are merely embodiments and are not intended to limit the scope of the disclosure. For example, the steps recited in any of the method or process descriptions may be executed in any suitable order and are not limited to the specific order presented. It will be appreciated that the description makes appropriate references not only to the steps and user interface elements depicted in the figures, but also to the various system components described above. It should be understood at the outset that, although exemplary embodiments are illustrated in the figures and described herein, the principles of the present disclosure may be implemented using any number of suitable techniques and components, whether or not currently known. The present disclosure should, therefore, not be limited to the exemplary implementations and techniques illustrated in the figures and described herein. Unless otherwise specifically noted, components depicted in the figures are not necessarily drawn to scale. Computer programs (also referred to as computer control logic) may be stored in main memory or secondary memory. Computer programs may also be received via a communication interface. Such computer programs, when executed, enable the computer system to perform the features as discussed herein. In particular, the computer programs, when executed, enable the processor to perform the features of various embodiments. Accordingly, such computer programs represent controllers of the computer system. These computer program instructions may be loaded onto a general-purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions that execute on the computer or other programmable data processing apparatus create means for implementing the functions specified in the flowchart block or blocks. These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart block or blocks. The computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks. In various embodiments, software may be stored in a computer program product and loaded into a computer system using a removable storage drive, hard disk drive, flash memory, or communication interface. The control logic (software), when executed by the processor, causes the processor to perform the functions of various embodiments as described herein. In various embodiments, hardware components may take the form of application specific integrated circuits (ASICs). Implementation of the hardware state machine so as to perform the functions described herein will be apparent to persons skilled in the relevant art(s).

[0124] As will be appreciated by one of ordinary skill in the art, certain systems disclosed herein, or components thereof, may be embodied as a customization of an existing system, an add-on product, a processing apparatus executing upgraded software, a stand-alone system, a distributed system, a method, a data processing system, a device for data processing, or a computer program product. Accordingly, any portion of the system or a module may take the form of a processing apparatus executing code, an internet-based embodiment, an entirely hardware embodiment, or an embodiment combining aspects of the internet, software, and hardware. Furthermore, the system may take the form of a computer program product on a computer-readable storage medium having computer-readable program code means embodied in the storage medium. Any suitable computer-readable storage medium may be utilized, including hard disks, integrated circuit storage devices, optical storage devices, magnetic storage devices, or the like.

[0125] In various embodiments, components, modules, or engines of an exemplary system may be implemented as micro-applications or micro-apps. Micro-apps are typically deployed in the context of a mobile operating system, including for example, a Windows mobile operating system, an Android operating system, an Apple iOS operating system, and the like. The micro-app may be configured to leverage the resources of the larger operating system and associated hardware via a set of predetermined rules which govern the operations of various operating systems and hardware resources. For example, where a micro-app desires to communicate with a device or network other than the mobile device or mobile operating system, the micro-app may leverage the communication protocol of the operating system and associated device hardware under the predetermined rules of the mobile operating system. Moreover, where the micro-app desires an input from a user, the micro-app may be configured to request a response from the operating system which monitors various hardware components and then communicates a detected input from the hardware to the micro-app.

[0126] Systems and methods may be described herein in terms of functional block components, screen shots, optional selections, and various processing steps. It should be appreciated that such functional blocks may be realized by any number of hardware or software components configured to perform the specified functions. For example, the system may employ various integrated circuit components, e.g., memory elements, processing elements, logic elements, look-up tables, and the like, which may conduct a variety of functions under the control of one or more microprocessors or other control devices. Similarly, the software elements of the system may be implemented with any programming or scripting language such as C, C++, C #, Java, JavaScript, JavaScript Object Notation (JSON), VB Script, assembly, Perl, php, awk, Python, extensible markup language (XML), or the like with the various algorithms being implemented with any combination of data structures, objects, processes, routines or other programming elements. Further, it should be noted that the system may employ any number of conventional techniques for data transmission, signaling, data processing, network control, and the like. Still further, the system could be used to detect or prevent security issues with a client-side scripting language, such as JAVASCRIPT, VBScript, or the like. For a basic introduction of cryptography and network security, see any of the following references: (1) Applied Cryptography: Protocols, Algorithms, And Source Code In C, by Bruce Schneier, published by John Wiley & Sons (second edition, 1995); (2) JAVA Cryptography by Jonathan Knudson, published by O'Reilly & Associates (1998); (3) Cryptography & Network Security: Principles & Practice by William Stallings, published by Prentice Hall; all of which are hereby incorporated by reference.

[0127] Exemplary systems and methods may be described herein with reference to screen shots, block diagrams and flowchart illustrations of methods, apparatus, and computer program products according to various embodiments. It will be understood that certain functional blocks of the block diagrams and the flowchart illustrations, and combinations of functional blocks in the block diagrams and flowchart illustrations, respectively, can be implemented by computer program instructions. Accordingly, functional blocks of the block diagrams and flowchart illustrations support combinations of means for performing the specified functions, combinations of steps for performing the specified functions, and program instruction means for performing the specified functions. It will also be understood that each functional block of the block diagrams and flowchart illustrations, and combinations of functional blocks in the block diagrams and flowchart illustrations, can be implemented by either special purpose hardware-based computer systems which perform the specified functions or steps, or suitable combinations of special purpose hardware and computer instructions. Further, illustrations of the process flows, and the descriptions thereof may make reference to user applications, webpages, websites, web forms, prompts, etc. Practitioners will appreciate that the illustrated steps described herein may comprise any number of configurations including the use of applications, webpages, web forms, popup applications, prompts, and the like. It should be further appreciated that the multiple steps as illustrated and described may be combined into single webpages or applications but have been expanded for the sake of simplicity. In other cases, steps illustrated and described as single process steps may be separated into multiple webpages or applications but have been combined for simplicity.

[0128] For the sake of brevity, conventional data networking, application development, and other functional aspects of the systems (and components of the individual operating components of the systems) may not be described in detail herein. Furthermore, the connecting lines shown in the various figures contained herein are intended to represent exemplary functional relationships or physical couplings between the various elements. It should be noted that many alternative or additional functional relationships or physical connections may be present in a practical system.

[0129] In various embodiments, the methods described herein are implemented using the various particular machines described herein. The methods described herein may be implemented using the particular machines below, and those hereinafter developed, in any suitable combination, as would be appreciated immediately by one skilled in the art. Further, as is unambiguous from this disclosure, the methods described herein may result in various transformations of certain articles e.g., a hydrogen tank from a less-full state to a more-full state.

[0130] The various system components discussed herein may include one or more of the following: a host server or other computing systems including a processor for processing digital data; a memory coupled to the processor for storing digital data; an input digitizer coupled to the processor for inputting digital data; an application program stored in the memory and accessible by the processor for directing processing of digital data by the processor; a display device coupled to the processor and memory for displaying information derived from digital data processed by the processor; and a plurality of databases. Various databases used herein may include client data; merchant data; financial institution data; or like data useful in the operation of the system. As those skilled in the art will appreciate, a user computer may include an operating system as well as various conventional support software and drivers typically associated with computers.

[0131] The present system or certain part(s) or function(s) thereof may be implemented using hardware, software, or a combination thereof and may be implemented in one or more computer systems or other processing systems. However, the manipulations performed by embodiments may be referred to in terms, such as matching or selecting, which are commonly associated with mental operations performed by a human operator. No such capability of a human operator is necessary, or desirable in most cases, in any of the operations described herein. Rather, the operations may be machine operations or any of the operations may be conducted or enhanced by artificial intelligence (AI) or machine learning. Artificial intelligence may refer generally to the study of agents (e.g., machines, computer-based systems, etc.) that perceive the world around them, form plans, and make decisions to achieve their goals. Foundations of AI include mathematics, logic, philosophy, probability, linguistics, neuroscience, and decision theory. Many fields fall under the umbrella of AI, such as computer vision, robotics, machine learning, and natural language processing. Useful machines for performing the various embodiments include general purpose digital computers or similar devices.

[0132] In various embodiments, the embodiments are directed toward one or more computer systems capable of conducting the functionalities described herein. The computer system includes one or more processors. The processor is connected to a communication infrastructure (e.g., a communication bus, cross-over bar, network, etc.). Various software embodiments are described in terms of this exemplary computer system. After reading this description, it will become apparent to a person skilled in the relevant art(s) how to implement various embodiments using other computer systems or architectures. The computer system can include a display interface that forwards graphics, text, and other data from the communication infrastructure (or from a frame buffer not shown) for display on a display unit.

[0133] The computer system also includes a main memory, such as random access memory (RAM), and may also include a secondary memory. The secondary memory may include, for example, a hard disk drive, a solid-state drive, or a removable storage drive. The removable storage drive reads from or writes to a removable storage unit in a well-known manner. As will be appreciated, the removable storage unit includes a computer usable storage medium having stored therein computer software or data.

[0134] In various embodiments, secondary memory may include other similar devices for allowing computer programs or other instructions to be loaded into a computer system. Such devices may include, for example, a removable storage unit and an interface. Examples of such may include a program cartridge and cartridge interface (such as that found in video game devices), a removable memory chip (such as an erasable programmable read only memory (EPROM), programmable read only memory (PROM)) and associated socket, or other removable storage units and interfaces, which allow software and data to be transferred from the removable storage unit to a computer system.

[0135] The terms computer program medium, computer usable medium, and computer readable medium are used to generally refer to media such as flash memory, hard drives, and the like. These computer program products provide software for a computer system. The computer system may also include a communication interface. A communication interface allows software and data to be transferred between the computer system and external devices. Examples of communication interface may include a modem, a network interface (such as an Ethernet card), a communication port, a Personal Computer Memory Card International Association (PCMCIA) slot and card, etc. Software and data transferred via the communication interface are in the form of signals which may be electronic, electromagnetic, optical, or other signals capable of being received by a communication interface. These signals are provided to the communication interface via a communication path (e.g., a channel). This channel carries signals and may be implemented using wire, cable, fiber optics, a telephone line, a radio frequency (RF) link, wireless and other suitable communication channels.

[0136] Any databases discussed herein may include relational, hierarchical, graphical, blockchain, object-oriented structure, or any other database configurations. Additionally, transactions and/or data exchanges disclosed herein may utilize blockchain, distributed ledger, and/or similar approaches, for example for verification, validation, and/or data integrity purposes. Moreover, any database may also include a flat file structure wherein data may be stored in a single file in the form of rows and columns, with no structure for indexing and no structural relationships between records. For example, a flat file structure may include a delimited text file, a CSV (comma-separated values) file, or any other suitable flat file structure. Common database products that may be used to implement the databases include DB2 by IBM (Armonk, N.Y.), various database products available from ORACLE Corporation (Redwood Shores, Calif.), MICROSOFT ACCESS or MICROSOFT SQL SERVER by MICROSOFT Corporation (Redmond, Wash.), MYSQL by MySQL AB (Uppsala, Sweden), MONGODB, Redis, Apache Cassandra, HBASE by APACHE, MapR-DB by the MAPR corporation, or any other suitable database product. Moreover, any database may be organized in any suitable manner, for example, as data tables or lookup tables. Each record may be a single file, a series of files, a linked series of data fields, or any other data structure.

[0137] Association of certain data may be accomplished through any desired data association technique such as those known or practiced in the art. For example, the association may be accomplished either manually or automatically. Automatic association techniques may include, for example, a database search, a database merge, GREP, AGREP, SQL, using a key field in the tables to speed searches, sequential searches through all the tables and files, sorting records in the file according to a known order to simplify lookup, or the like. The association step may be accomplished by a database merge function, for example, using a key field in pre-selected databases or data sectors. Various database tuning steps are contemplated to optimize database performance. For example, frequently used files such as indexes may be placed on separate file systems to reduce In/Out (I/O) bottlenecks.

[0138] More particularly, a key field partitions the database according to the high-level class of objects defined by the key field. For example, certain types of data may be designated as a key field in a plurality of related data tables and the data tables may then be linked on the basis of the type of data in the key field. The data corresponding to the key field in each of the linked data tables is preferably the same or of the same type. However, data tables having similar, though not identical, data in the key fields may also be linked by using AGREP, for example. In accordance with one embodiment, any suitable data storage technique may be utilized to store data without a standard format. Data sets may be stored using any suitable technique, including, for example, storing individual files using an ISO/IEC 7816-4 file structure; implementing a domain whereby a dedicated file is selected that exposes one or more elementary files containing one or more data sets; using data sets stored in individual files using a hierarchical filing system; data sets stored as records in a single file (including compression, SQL accessible, hashed via one or more keys, numeric, alphabetical by first tuple, etc.); data stored as Binary Large Object (BLOB); data stored as ungrouped data elements encoded using ISO/IEC 7816-6 data elements; data stored as ungrouped data elements encoded using ISO/IEC Abstract Syntax Notation (ASN.1) as in ISO/IEC 8824 and 8825; other proprietary techniques that may include fractal compression methods, image compression methods, etc.

[0139] In various embodiments, the ability to store a wide variety of information in different formats is facilitated by storing the information as a BLOB. Thus, any binary information can be stored in a storage space associated with a data set. As discussed above, the binary information may be stored in association with the system or external to but affiliated with the system. The BLOB method may store data sets as ungrouped data elements formatted as a block of binary via a fixed memory offset using either fixed storage allocation, circular queue techniques, or best practices with respect to memory management (e.g., paged memory, least recently used, etc.). By using BLOB methods, the ability to store various data sets that have different formats facilitates the storage of data, in the database or associated with the system, by multiple and unrelated owners of the data sets. For example, a first data set which may be stored may be provided by a first party, a second data set which may be stored may be provided by an unrelated second party, and yet a third data set which may be stored, may be provided by a third party unrelated to the first or second party. Each of these three exemplary data sets may contain different information that is stored using different data storage formats or techniques. Further, each data set may contain subsets of data that also may be distinct from other subsets.

[0140] FIG. 18 shows a method for Tarmac Automated Positioning System (TAPS) associated with positioning of the nozzle to the receptacle, maintaining proper distance, monitoring of safety and performance (also through wireless communications), as well as disconnection of fueling.

[0141] The TAPS system first communicates with the aircraft from a safe distance via a longer range wireless communication system, such as Wi-Fi, to receive aircraft data such as aircraft identification, fuel type, fueling configuration, and status.

[0142] The TAPS system then visually targets the aircraft under automatic control based on sensor input or under manual control of a human operator.

[0143] The TAPS system then guides the fueling vehicle to the aircraft and the steering and/or suspension height can be automatically or manually adjusted to conform with the aircraft specifications.

[0144] The fueling nozzle is then initially rotationally and/or translationally aligned with the aircraft receptacle using short range telemetry such as lasers, cameras, magnetic or ultrasonic proximity sensors, etc.

[0145] The TAPS then performs a visual check of the nozzle alignment with the receptacle. If not properly aligned, the fueling vehicle retreats to a safe distance and reinitiates the process. If the nozzle is properly aligned, the fueling vehicle initiates handshake communication with the aircraft through a short range communication system, such as NFC.

[0146] The fueling nozzle is then engaged with the aircraft receptacle and fueling of the aircraft starts. The aircraft fueling parameters, such as fuel tank pressure and temperature are monitored. If the parameters are out of specification, the fueling vehicle may temporarily halt fueling to allow the parameters to return to specified conditions and resume fueling. If the parameters remain out of specification, the fueling vehicle may abort fueling and move to a safe location. If conditions indicating a potential fire are detected, the fueling vehicle may activate a fire suppression system.

[0147] Once the aircraft fuel tanks are properly filled, the fueling vehicle disconnects the nozzle, negotiates electronic payment with the aircraft, and drive away from the aircraft.

[0148] FIG. 19 shows a bi-directional communication system between the TAPS and the aircraft that is used to transmit system status and/or warning data. The TAPS ECU and the aircraft ECU communicate with each other over a longer range wireless communication system, such as Wi-Fi. The TAPS ECU is connected to a suite of sensors on the fueling vehicle, such infrared, ultraviolet, hydrogen, and visual sensors that may be used to detect potential fire conditions. If the TAPS ECU detects a potential fire condition, it can send a warning to the aircraft over the wireless link to shut down the aircraft systems and/or evacuate the aircraft. The aircraft ECU is also connected to hydrogen and fire sensors in the aircraft. If the aircraft ECU detects a potential fire condition, it can send a warning to the fueling vehicle over the wireless link to avoid approaching the aircraft, disconnect and move away, and/or activate the fire suppression system on the fueling vehicle.

[0149] Benefits, other advantages, and solutions to problems have been described herein with regard to specific embodiments. Furthermore, the connecting lines shown in the various figures contained herein are intended to represent exemplary functional relationships and/or physical couplings between the various elements. It should be noted that many alternative or additional functional relationships or physical connections may be present in a practical system. However, the benefits, advantages, solutions to problems, and any elements that may cause any benefit, advantage, or solution to occur or become more pronounced are not to be construed as critical, required, or essential features or elements of the disclosure. The scope of the disclosure is accordingly to be limited by nothing other than the appended claims, in which reference to an element in the singular is not intended to mean one and only one unless explicitly so stated, but rather one or more. Moreover, where a phrase similar to at least one of A, B, or C is used in the claims, it is intended that the phrase be interpreted to mean that A alone may be present in an embodiment, B alone may be present in an embodiment, C alone may be present in an embodiment, or that any combination of the elements A, B and C may be present in a single embodiment; for example, A and B, A and C, B and C, or A and B and C. Different cross-hatching is used throughout the figures to denote different parts but not necessarily to denote the same or different materials.

[0150] Systems, methods and apparatus are provided herein. In the detailed description herein, references to one embodiment, an embodiment, various embodiments, etc., indicate that the embodiment described may include a particular feature, structure, or characteristic, but every embodiment may not necessarily include the particular feature, structure, or characteristic. Moreover, such phrases do not necessarily refer to the same embodiment. Further, when a particular feature, structure, or characteristic is described in connection with an embodiment, it is submitted that it is within the knowledge of one skilled in the art to affect such feature, structure, or characteristic in connection with other embodiments whether or not explicitly described. After reading the description, it will be apparent to one skilled in the relevant art(s) how to implement the disclosure in alternative embodiments.

[0151] Numbers, percentages, or other values stated herein are intended to include that value, and also other values that are about or approximately equal to the stated value, as would be appreciated by one of ordinary skill in the art encompassed by various embodiments of the present disclosure. A stated value should therefore be interpreted broadly enough to encompass values that are at least close enough to the stated value to perform a desired function or achieve a desired result. The stated values include at least the variation to be expected in a suitable industrial process, and may include values that are within 10%, within 5%, within 1%, within 0.1%, or within 0.01% of a stated value. Additionally, the terms substantially, about or approximately as used herein represent an amount close to the stated amount that still performs a desired function or achieves a desired result. For example, the term substantially, about or approximately may refer to an amount that is within 10% of, within 5% of, within 1% of, within 0.1% of, and within 0.01% of a stated amount or value. Yet further, as used herein, the term proximate, proximity, or the like may refer to a distance between objects being 20 centimeters or less, or 15 centimeters or less, or 10 centimeters or less, or 5 centimeters or less.

[0152] While this invention has been described in terms of the preferred embodiments thereof, it is not intended to be so limited, but rather only to the extent set forth in the claims that follow. For example, the above-described embodiments (and/or aspects thereof) may be used in combination with each other. In addition, many modifications may be made to configure a particular situation or material to the teachings of the invention without departing from its scope. Dimensions, types of materials, orientations of the various components, and the number and positions of the various components described herein are intended to define parameters of certain embodiments and arc by no means limiting and are merely prototypical embodiments.

[0153] Many other embodiments and modifications within the spirit and scope of the claims will be apparent to those of skill in the art upon reviewing the above description. The scope of the invention should, therefore, be determined with reference to the following claims, along with the full scope of equivalents to which such claims are entitled.

[0154] As used herein, one or more includes a function being performed by one element, a function being performed by more than one element, e.g., in a distributed fashion, several functions being performed by one element, several functions being performed by several elements, or any combination of the above.

[0155] It will also be understood that, although the terms first, second, etc. are, in some instances, used herein to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another. For example, a first contact could be termed a second contact, and, similarly, a second contact could be termed a first contact, without departing from the scope of the various described embodiments. The first contact and the second contact are both contacts, but they are not the same contact.

[0156] The terminology used in the description of the various described embodiments herein is for the purpose of describing particular embodiments only and is not intended to be limiting. As used in the description of the various described embodiments and the appended claims, the singular forms a, an, and the are intended to include the plural forms as well, unless the context clearly indicates otherwise. It will also be understood that the term and/or as used herein refers to and encompasses all possible combinations of one or more of the associated listed items. It will be further understood that the terms includes, including, comprises, and/or comprising, when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof.

[0157] As used herein, the term if is, optionally, construed to mean when or upon or in response to determining or in response to detecting, depending on the context. Similarly, the phrase if it is determined or if [a stated condition or event] is detected is, optionally, construed to mean upon determining or in response to determining or upon detecting [the stated condition or event] or in response to detecting [the stated condition or event], depending on the context.

[0158] Additionally, while terms of ordinance or orientation may be used herein these elements should not be limited by these terms. All terms of ordinance or orientation, unless stated otherwise, are used for purposes distinguishing one element from another, and do not denote any particular order, order of operations, direction or orientation unless stated otherwise.