System and method for aircraft incident mitigation

Abstract

In response to determining that a panic situation exists, an aircraft panic component can at least partially disable various systems of an aircraft, such as a navigation system (e.g., flight plans), an operational system (e.g., aircraft controls), or other suitable systems. For example, elements of a navigation and/or operational system of the aircraft may be disabled to disable local (e.g., pilot or cockpit) control of those system and/or to at least partially disable local operational systems of the aircraft (e.g., hydraulic or pneumatic flight control mechanisms, etc.). The navigation system can be updated with a new flight plan and the aircraft can have its autopilot engaged to pilot the aircraft according to the new flight plan such as to direct the aircraft to a certain altitude and/or heading. A remote terminal can be notified of the panic situation and control of the navigation system and/or operational systems can be turned over, potentially exclusively, to the remote terminal.

What is claimed is: 
     
         1 . A system, comprising:
 a navigation component that interfaces with a navigation system of an aircraft, wherein the navigation system is programmed according to a first flight plan;   a panic component that determines the aircraft is subject to a panic situation; and   a safety component that, in response to the aircraft being subject to the panic situation:
 reprograms the navigation system from the first flight plan to a second flight plan, wherein the second flight plan is determined by the safety component based on an incident mitigation protocol, and 
 instructs the navigation system to refuse changes to the second flight plan. 
   
     
     
         2 . The system of  claim 1 , wherein the safety component activates an autopilot component, wherein the autopilot component automatically manipulates a control system of the aircraft according to the second flight plan. 
     
     
         3 . The system of  claim 2 , wherein the safety component instructs the control system to deactivate responses to manual input to elements of the control system. 
     
     
         4 . The system of  claim 1 , wherein the second flight plan directs the aircraft to a specified destination determined by the safety component based on a state of the aircraft. 
     
     
         5 . The system of  claim 4 , wherein the second flight plan directs the aircraft to a specified altitude that is determined by the safety component to be restricted airspace. 
     
     
         6 . The system of  claim 4 , wherein the second flight plan directs the aircraft to the specified destination according to heading data determined by the safety component. 
     
     
         7 . The system of  claim 4 , wherein the safety component determines the heading data based on a determination of an amount of remaining fuel. 
     
     
         8 . The system of  claim 1 , wherein the safety component transmits panic data representative of the panic situation to a remote terminal that is remote from the aircraft. 
     
     
         9 . The system of  claim 8 , wherein the safety component instructs the navigation system to allow changes to the second flight plan in response to the changes being received from the remote terminal. 
     
     
         10 . The system of  claim 8 , wherein the safety component instructs a control system of the aircraft to be responsive to remote input from the remote terminal. 
     
     
         11 . The system of  claim 8 , wherein the safety component instructs the navigation system to permit changes to the second flight plan in response to the panic component determining the aircraft is no longer subject to the panic situation and an authorized signal from the remote terminal that verifies the aircraft is no longer subject to the panic situation. 
     
     
         12 . The system of  claim 11 , wherein the safety component instructs a control system of the aircraft to reactivate responses to manual input to elements of the control system. 
     
     
         13 . A system, comprising:
 a navigation component that interfaces with a navigation system of a vehicle, wherein the navigation system is programmed according to a first travel plan;   a panic component that determines the vehicle is subject to a panic situation; and   a safety component that, in response to the vehicle being subject to the panic situation:
 reprograms the navigation system from the first travel plan to a second travel plan, wherein the second travel plan is determined by the safety component based on an incident mitigation protocol, and 
 instructs the navigation system to refuse changes to the second travel plan. 
   
     
     
         14 . The system of  claim 13 , wherein the safety component activates an autopilot component, wherein the autopilot component automatically manipulates a control system of the vehicle according to the second travel plan. 
     
     
         15 . The system of  claim 14 , wherein the safety component instructs the control system to deactivate responses to manual input to elements of the control system. 
     
     
         16 . The system of  claim 15 , wherein the safety component instructs the navigation system to permit changes to the second flight plan in response to conditions being satisfied, wherein the conditions comprise:
 the panic component determines the vehicle is no longer subject to the panic situation, and   an authorized signal from a remote terminal that is remote from the vehicle verifies the vehicle is no longer subject to the panic situation.   
     
     
         17 . A method, comprising:
 determining that an aircraft is subject to a panic situation;   reprogramming a navigation system of the aircraft from a previous flight plan to a panic flight plan;   instructing the navigation system to refuse changes to the panic flight plan in response to the changes being input via a local navigation interface situated in the aircraft;   engaging an autopilot component that automatically manipulates elements of a control system of the aircraft according to the panic flight plan; and   instructing the control system to be unresponsive to input to the control system via a local control interface situated in the aircraft.   
     
     
         18 . The method of  claim 17 , further comprising communicating panic data indicative of the panic situation to a remote terminal that is remote from the aircraft. 
     
     
         19 . The method of  claim 18 , further comprising instructing the navigation system to permit changes to the panic flight plan in response to the changes being received from the remote terminal. 
     
     
         20 . The method of  claim 18 , further comprising instructing the control system to be responsive to input to the control system that is received from the remote terminal.