CROSS-REFERENCE TO RELATED APPLICATION(S)

[0001] This application claims priority to U.S. Provisional Application No. 62/337,227, filed May 16, 2016, claims priority to U.S. Provisional Application No. 62/337,225, filed May 16, 2016, claims priority to U.S. Provisional Application No. 62/337,228, filed May 16, 2016, and claims priority to U.S. Non-provisional application 15/595,650, filed May 15, 2017, to the extent allowed by law and the contents of which are incorporated herein by reference in their entireties.

TECHNICAL FIELD

[0002] This disclosure relates to equipment used in high value assets and particularly, to realtime data acquisition and recording systems used in high value mobile assets.

BACKGROUND

[0003] High value mobile assets such as locomotives, aircraft, mass transit systems, mining equipment, transportable medical equipment, cargo, marine vessels, and military vessels typically employ onboard data acquisition and recording "black box" systems and/or "event recorder" systems. These data acquisition and recording systems, such as event data recorders or flight data recorders, log a variety of system parameters used for incident investigation, crew performance evaluation, fuel efficiency analysis, maintenance planning, and predictive diagnostics. A typical data acquisition and recording system comprises digital and analog inputs, as well as pressure switches and pressure transducers, which record data from various onboard sensor devices. Recorded data may include such parameters as speed, distance traveled, location, fuel level, engine revolution per minute (RPM), fluid levels, operator controls, pressures, current and forecasted weather conditions and ambient conditions. In addition to the basic event and operational data, video and audio event/data recording capabilities are also deployed on many of these same mobile assets. Typically, data is extracted from data recorders, after an incident has occurred involving an asset and investigation is required, once the data recorder has been recovered. Certain situations may arise where the data recorder cannot be recovered or the data is otherwise unavailable. In these situations, the data, such as event and operational data, video data, and audio data, acquired by the data acquisition and recording system is needed promptly regardless of whether physical access to the data acquisition and recording system or the data is available.

SUMMARY

[0004] This disclosure relates generally to real-time data acquisition and recording systems used in high value mobile assets. The teachings herein can provide real-time, or near real-time, access to data, such as event and operational data, video data, and audio data, recorded by a realtime data acquisition and recording system on a high value mobile asset. One implementation of a method for processing, storing, and transmitting data from a mobile asset described herein includes receiving, using a data recorder onboard the mobile asset, data based on at least one data signal from at least one of: at least one data source onboard the mobile asset; and at least one data source remote from the mobile asset; encoding, using a data encoder of the data recorder, a record comprising a bit stream based on the data; appending, using an onboard data manager of the data recorder, the record to a record block; and storing, using the onboard data manager, the record block at a configurable first predetermined rate in at least one local memory component of the data recorder and a queueing repository of the data recorder.

[0005] Another implementation of a method for processing, storing, and transmitting data from a mobile asset described herein includes receiving data signals from at least one input sensor onboard the mobile asset; encoding a record comprising a bit stream based on the data signals; appending the record to a record block comprising a plurality of records; storing the record block to at least one local memory component onboard the mobile asset; and storing the record block to a remote memory component on a condition that the plurality of records comprises a predetermined amount of data.

[0006] One implementation of a real-time data acquisition and recording system described herein includes a data recorder onboard the mobile asset comprising at least one local memory component, a data encoder, an onboard data manager, and a queueing repository, the data recorder configured to receive data based on at least one data signal from at least one of: at least one data source onboard the mobile asset; and at least one data source remote from the mobile asset; the data encoder configured to encode a record comprising a bit stream based on the data; the onboard data manager configured to: append the record to a record block; and store the record block at a configurable first predetermined rate in the at least one local memory component and the queueing repository.

[0007] Another implementation of a system for processing, storing, and transmitting data from a mobile asset described herein includes a data encoder configured to receive data signals from at least one input sensor onboard the mobile asset and compress the data signals into a record comprising a bit stream; and an onboard data manager configured to: append the record to a record block comprising a plurality of records; store the record block in a crash hardened memory component onboard the mobile asset; and store the record block to a remote memory component on a condition that the plurality of records comprises a predetermined amount of data.

[0008] Variations in these and other aspects of the disclosure will be described in additional detail hereafter.

BRIEF DESCRIPTION OF THE DRAWINGS

[0009] The description herein makes reference to the accompanying drawings wherein like reference numerals refer to like parts throughout the several views, and wherein:

[0010] FIG. 1 illustrates a field implementation of a first embodiment of an exemplary realtime data acquisition and recording system in accordance with implementations of this disclosure;

[0011] FIG. 2 illustrates a field implementation of a second embodiment of the exemplary real-time data acquisition and recording system in accordance with implementations of this disclosure;

[0012] FIG. 3 is a flow diagram of a process for recording data and/or information from a mobile asset in accordance with implementations of this disclosure;

[0013] FIG. 4 is a flow diagram of a process for appending data and/or information from the mobile asset after a power outage in accordance with implementations of this disclosure;

[0014] FIG. 5 is a diagram that illustrates exemplary interim record blocks and full record blocks saved to a crash hardened memory module in accordance with implementations of this disclosure; [0015] FIG. 6 is a diagram that illustrates exemplary interim record blocks in the crash hardened memory module prior to a power outage and after restoration of power in accordance with implementations of this disclosure; and

[0016] FIG. 7 is a diagram that illustrates an exemplary record segment in the crash hardened memory module after power has been restored in accordance with implementations of this disclosure.

DETAILED DESCRIPTION

[0017] A real-time data acquisition and recording system described herein provides realtime, or near real-time, access to a wide range of data, such as event and operational data, video data, and audio data, related to a high value asset to remotely located users such as asset owners, operators and investigators. The data acquisition and recording system records data, via a data recorder, relating to the asset and streams the data to a remote data repository and remotely located users prior to, during, and after an incident has occurred. The data is streamed to the remote data repository in real-time, or near real-time, making information available at least up to the time of an incident or emergency situation, thereby virtually eliminating the need to locate and download the "black box" in order to investigate an incident involving the asset and eliminating the need to interact with the data recorder on the asset to request a download of specific data, to locate and transfer files, and to use a custom application to view the data. The system of the present disclosure retains typical recording capability and adds the ability to stream data to a remote data repository and remote end user prior to, during, and after an incident. In the vast majority of situations, the information recorded in the data recorder is redundant and not required as data has already been acquired and stored in the remote data repository.

[0018] Prior to the system of the present disclosure, data was extracted from the "black box" or "event recorder" after an incident had occurred and an investigation was required. Data files containing time segments recorded by the "black box" had to be downloaded and retrieved from the "black box" and then viewed by a user with proprietary software. The user would have to obtain physical or remote access to the asset, select the desired data to be downloaded from the "black box," download the file containing the desired information to a computing device, and locate the appropriate file with the desired data using a custom application that operates on the computing device. The system of the present disclosure has eliminated the need for the user to perform these steps, only requiring the user to use a common web browser to navigate to the desired data.

[0019] A remotely located user, such as an asset owner, operator, and/or investigator, may access a common web browser to navigate to live and/or historic desired data relating to a selected asset to view and analyze the operational efficiency and safety of assets in real-time or near real-time. The ability to view operations in real-time, or near real-time, enables rapid evaluation and adjustment of behavior. During an incident, for example, real-time information and/or data can facilitate triaging the situation and provide valuable information to first responders. During normal operation, for example, real-time information and/or data can be used to audit crew performance and to aid network wide situational awareness.

[0020] Data may include, but is not limited to, analog and frequency parameters such as speed, pressure, temperature, current, voltage, and acceleration which originate from the asset and/or nearby assets, Boolean data such as switch positions, actuator position, warning light illumination, and actuator commands, global positioning system (GPS) data and/or geographic information system (GIS) data such as position, speed, and altitude, internally generated information such as the regulatory speed limit for an asset given its current position, video and image information from cameras located at various locations in, on or in the vicinity of the asset, audio information from microphones located at various locations in, on or in vicinity of the asset, information about the operational plan for the asset that is sent to the asset from a data center such as route, schedule, and cargo manifest information, information about the environmental conditions, including current and forecasted weather conditions, of the area in which the asset is currently operating in or is planned to operate in, asset control status and operational data generated by systems such as positive train control (PTC) in locomotives, and data derived from a combination from any of the above including, but not limited to, additional data, video, and audio analysis and analytics.

[0021] FIGS. 1 and 2 illustrate a field implementation of a first embodiment and a second embodiment, respectively, of an exemplary real-time data acquisition and recording system (DARS) 100, 200 in which aspects of the disclosure can be implemented. DARS 100, 200 is a system that delivers real time information to remotely located end users from a data recording device. DARS 100, 200 includes a data recorder 154, 254 that is installed on a vehicle or mobile asset 148, 248 and communicates with any number of various information sources through any combination of onboard wired and/or wireless data links 170, 270, such as a wireless gateway/router, or off board information sources via a data center 150, 250 of DARS 100, 200 via data links such as wireless data links 146. Data recorder 154, 254 comprises an onboard data manager 120, 220, a data encoder 122, 222, a vehicle event detector 156, 256, a queueing repository 158, 258, and a wireless gateway/router 172, 272. Additionally, in this

implementation, data recorder 154, 254 can include a crash hardened memory module 118, 218 and/or an Ethernet switch 162, 262 with or without power over Ethernet (POE). An exemplary hardened memory module 118, 218 can be, for example, a crashworthy event recorder memory module that complies with the Code of Federal Regulations and the Federal Railroad

Administration regulations, a crash survivable memory unit that complies with the Code of Federal Regulations and the Federal Aviation Administration regulations, a crash hardened memory module in compliance with any applicable Code of Federal Regulations, or any other suitable hardened memory device as is known in the art. In the second embodiment, shown in FIG. 2, the data recorder 254 can further include an optional non-crash hardened removable storage device 219.

[0022] The wired and/or wireless data links 170, 270 can include any one of or combination of discrete signal inputs, standard or proprietary Ethernet, serial connections, and wireless connections. Ethernet connected devices may utilize the data recorder's 154, 254 Ethernet switch 162, 262 and can utilize POE. Ethernet switch 162, 262 may be internal or external and may support POE. Additionally, data from remote data sources, such as a map component 164, 264, a route/crew manifest component 124, 224, and a weather component 126, 226 in the

implementation of FIGS. 1 and 2, is available to the onboard data manager 120, 220 and the vehicle event detector 156, 256 from the data center 150, 250 through the wireless data link 146, 246 and the wireless gateway/router 172, 272.

[0023] Data recorder 154, 254 gathers data or information from a wide variety of sources, which can vary widely based on the asset's configuration, through onboard data links 170, 270. The data encoder 122, 222 encodes at least a minimum set of data that is typically defined by a regulatory agency. In this implementation, the data encoder 122, 222 receives data from a wide variety of asset 148, 248 sources and data center 150, 250 sources. Information sources can include any number of components in the asset 148, 248, such as any of analog inputs 102, 202, digital inputs 104, 204, I/O module 106, 206, vehicle controller 108, 208, engine controller 110, 210, inertial sensors 112, 212, global positioning system (GPS) 114, 214, cameras 116, 216, positive train control (PTC)/signal data 166, 266, fuel data 168, 268, cellular transmission detectors (not shown), internally driven data and any additional data signals, and any of number of components in the data center 150, 250, such as any of the route/crew manifest component 124, 224, the weather component 126, 226, the map component 164, 264, and any additional data signals. The data encoder 122, 222 compresses or encodes the data and time synchronizes the data in order to facilitate efficient real-time transmission and replication to a remote data repository 130, 230. The data encoder 122, 222 transmits the encoded data to the onboard data manager 120, 220 which then saves the encoded data in the crash hardened memory module 118, 218 and the queuing repository 158, 258 for replication to the remote data repository 130, 230 via a remote data manager 132, 232 located in the data center 150, 250. Optionally, the onboard data manager 120, 220 can save a tertiary copy of the encoded data in the non-crash hardened removable storage device 219 of the second embodiment shown in FIG. 2. The onboard data manager 120, 220 and the remote data manager 132, 232 work in unison to manage the data replication process. A single remote data manager 132, 232 in the data center 150, 250 can manage the replication of data from a plurality of assets 148, 248.

[0024] The data from the various input components and data from an in-cab audio/graphic user interface (GUI) 160, 260 are sent to a vehicle event detector 156, 256. The vehicle event detector 156, 256 processes the data to determine whether an event, incident or other predefined situation involving the asset 148, 248 has occurred. When the vehicle event detector 156, 256 detects signals that indicate a predefined event occurred, the vehicle event detector 156, 256 sends the processed data that a predefined event occurred along with supporting data surrounding the predefined event to the onboard data manager 120, 220. The vehicle event detector 156, 256 detects events based on data from a wide variety of sources, such as the analog inputs 102, 202, the digital inputs 104, 204, the I/O module 106, 206, the vehicle controller 108, 208, the engine controller 110, 210, the inertial sensors 112, 212, the GPS 114, 214, the cameras 116, 216, the route/crew manifest component 124, 224, the weather component 126, 226, the map component 164, 264, the PTC/signal data 166, 266, and the fuel data 168, 268, which can vary based on the asset's configuration. When the vehicle event detector 156, 256 detects an event, the detected asset event information is stored in a queuing repository 158, 258 and can optionally be presented to the crew of the asset 148, 248 via the in-cab audio/graphical user interface (GUI) 160, 260.

[0025] The onboard data manager 120, 220 also sends data to the queuing repository 158. In near real-time mode, the onboard data manager 120, 220 stores the encoded data received from the data encoder 122, 222 and any event information in the crash hardened memory module 118, 218 and in the queueing repository 158, 258. In the second embodiment of FIG. 2, the onboard data manager 220 can optionally store the encoded data in the non-crash hardened removable storage device 219. After five minutes of encoded data has accumulated in the queuing repository 158, 258, the onboard data manager 120, 220 stores the five minutes of encoded data to the remote data repository 130, 230 via the remote data manager 132, 232 in the data center 150, 250 over the wireless data link 146, 256 accessed through the wireless gateway/router 172, 272. In real-time mode, the onboard data manager 120, 220 stores the encoded data received from the data encoder 122, 222 and any event information to the crash hardened memory module 118, 218, and optionally in the non-crash hardened removable storage device 219 of FIG. 2, and to the remote data repository 130, 230 via the remote data manager 132, 232 in the data center 150, 250 over the wireless data link 146, 246 accessed through the wireless gateway/router 172, 272. The onboard data manager 120, 220 and the remote data manager 132, 232 can

communicate over a variety of wireless communications links, such as Wi-Fi, cellular, satellite, and private wireless systems utilizing the wireless gateway/router 172, 272. Wireless data link 146, 246 can be, for example, a wireless local area network (WLAN), wireless metropolitan area network (WMAN), wireless wide area network (WW AN), a private wireless system, a cellular telephone network or any other means of transferring data from the data recorder 154, 254 of DARS 100, 200 to, in this example, the remote data manager 130, 230 of DARS 100, 200. When a wireless data connection is not available, the data is stored in memory and queued in queueing repository 158, 258 until wireless connectivity is restored and the data replication process can resume.

[0026] In parallel with data recording, data recorder 154, 254 continuously and

autonomously replicates data to the remote data repository 130, 230. The replication process has two modes, a real-time mode and a near real-time mode. In real-time mode, the data is replicated to the remote data repository 130, 230 every second. In near real-time mode, the data is replicated to the remote data repository 130, 230 every five minutes. The rate used for near real- time mode is configurable and the rate used for real-time mode can be adjusted to support high resolution data by replicating data to the remote data repository 130, 230 every 0.10 seconds. When the DARS 100, 200 is in near real-time mode, the onboard data manager 120, 220 queues data in the queuing repository 158, 258 before replicating the data to the remote data manager 132, 232. The onboard data manager 120, 220 also replicates the vehicle event detector information queued in the queueing repository 158, 258 to the remote data manager 132, 232. Near real-time mode is used during normal operation, under most conditions, in order to improve the efficiency of the data replication process.

[0027] Real-time mode can be initiated based on events occurring and detected by the vehicle event detector 156, 256 onboard the asset 148, 248 or by a request initiated from the data center 150, 250. A typical data center 150, 250 initiated request for real-time mode is initiated when a remotely located user 152, 252 has requested real-time information from a web client 142, 242. A typical reason for real-time mode to originate onboard the asset 148, 248 is the detection of an event or incident by the vehicle event detector 156, 256 such as an operator initiating an emergency stop request, emergency braking activity, rapid acceleration or deceleration in any axis, or loss of input power to the data recorder 154, 254. When transitioning from near real-time mode to real-time mode, all data not yet replicated to the remote data repository 130, 230 is replicated and stored in the remote data repository 130, 230 and then live replication is initiated. The transition between near real-time mode and real-time mode typically occurs in less than five seconds. After a predetermined amount of time has passed since the event or incident, a predetermined amount of time of inactivity, or when the user 152, 252 no longer desires real-time information from the asset 148, 248, the data recorder 154, 254 reverts to near real-time mode. The predetermined amount of time required to initiate the transition is configurable and is typically set to ten minutes.

[0028] When the data recorder 154, 254 is in real-time mode, the onboard data manager 120, 220 attempts to continuously empty its queue to the remote data manager 132, 232, storing the data to the crash hardened memory module 118, 218, and optionally to the non-crash hardened removable storage device 219 of FIG. 2, and sending the data to the remote data manager 132, 232 simultaneously. The onboard data manager 120, 220 also sends the detected vehicle information queued in the queuing repository 158, 258 to the remote data manager 132, 232. [0029] Upon receiving data to be replicated from the data recorder 154, 254, along with data from the map component 164, 264, the route/crew manifest component 124, 224, and the weather component 126, 226, the remote data manager 132, 232 stores the compressed data to the remote data repository 130, 230 in the data center 150, 250 of DARS 100, 200. The remote data repository 130, 230 can be, for example, cloud-based data storage or any other suitable remote data storage. When data is received, a process is initiated that causes a data decoder 136, 236 to decode the recently replicated data for/from the remote data repository 130, 230 and send the decoded data to a remote event detector 134, 234. The remote data manager 132, 232 stores vehicle event information in the remote data repository 130, 230. When the remote event detector 134, 234 receives the decoded data, it processes the decoded data to determine if an event of interest is found in the decoded data. The decoded information is then used by the remote event detector 134, 234 to detect events, incidents, or other predefined situations, in the data occurring with the asset 148, 248. Upon detecting an event of interest from the decoded data, the remote event detector 134, 234 stores the event information and supporting data in the remote data repository 130, 230. When the remote data manager 132, 232 receives remote event detector 134, 234 information, the remote data manager 132, 232 stores the information in the remote data repository 130, 230.

[0030] The remotely located user 152, 252 can access information, including vehicle event detector information, relating to the specific asset 148, 248, or a plurality of assets, using the standard web client 142, 242, such as a web browser, or a virtual reality device (not shown) which, in this implementation, can display thumbnail images from selected cameras. The web client 142, 242 communicates the user's 152, 252 request for information to a web server 140, 240 through a network 144, 244 using common web standards, protocols, and techniques.

Network 144, 244 can be, for example, the Internet. Network 144, 244 can also be a local area network (LAN), metropolitan area network (MAN), wide area network (WAN), virtual private network (VPN), a cellular telephone network or any other means of transferring data from the web server 140, 240 to, in this example, the web client 142, 242. The web server 140, 240 requests the desired data from the data decoder 136, 236. The data decoder 136, 236 obtains the requested data relating to the specific asset 148, 248, or a plurality of assets, from the remote data repository 130, 230 upon request from the web server 140, 240. The data decoder 136, 236 decodes the requested data and sends the decoded data to a localizer 138, 238. Localization is the process of converting data to formats desired by the end user, such as converting the data to the user's preferred language and units of measure. The localizer 138, 238 identifies the profile settings set by user 152, 252 by accessing the web client 142, 242 and uses the profile settings to prepare the information being sent to the web client 142, 242 for presentation to the user 152, 252, as the raw encoded data and detected event information is saved to the remote data repository 130, 230 using coordinated universal time (UTC) and international system of units (SI units). The localizer 138, 238 converts the decoded data into a format desired by the user 152, 252, such as the user's 152, 252 preferred language and units of measure. The localizer 138, 238 sends the localized data in the user's 152, 252 preferred format to the web server 140, 240 as requested. The web server 140, 240 then sends the localized data of the asset, or plurality of assets, to the web client 142, 242 for viewing and analysis, providing playback and real-time display of standard video and 360 degree video. The web client 142, 242 can display and the user 152, 252 can view the data, video, and audio for a single asset or simultaneously view the data, video, and audio for a plurality of assets. The web client 142, 242 can also provide synchronous playback and real-time display of data along with the plurality of video and audio data from both standard and 360 degree video sources on, in, or in the vicinity of the asset, nearby assets, and/or remotely located sites.

[0031] FIG. 3 is a flow diagram showing a process 300 for recording data and/or information from the asset 148, 248 in accordance with an implementation of this disclosure. Data recorder 154, 254 receives data signals from various input components that include physical or calculated data elements from the asset 148, 248 and data center 150, 250, such as speed, latitude coordinates, longitude coordinates, horn detection, throttle position, weather data, map data, or crew data 302. Data encoder 122, 222 creates a record that includes a structured series of bits used to configure and record the data signal information 304. The encoded record is then sent to the onboard data manager 120, 220 that sequentially combines a series of records in

chronological order into record blocks that include up to five minutes of data 306. An interim record block includes less than five minutes of data while a full record block includes a full five minutes of data. Each record block includes all the data required to fully decode the included signals, including a data integrity check. At a minimum, a record block must start with a start record and end with an end record. [0032] In order to ensure that all of the encoded signal data is saved to the crash hardened memory module 118, and optionally to the non-crash hardened removable storage device 219 of FIG. 2, should the data recorder 154, 254 lose power or be subjected to extreme temperatures or mechanical stresses due to a collision or other catastrophic event, the onboard data manager 120, 220 stores interim record blocks in the crash hardened memory module 118 at a predetermined rate 308, and optionally in the non-crash hardened removable storage device 219 of FIG. 2, where the predetermined rate is configurable and/or variable, as shown in FIG. 5 in an exemplary representation. Interim record blocks are saved at least once per second but can also be saved as frequently as once every tenth of a second. The rate at which interim record blocks are saved depends on the sampling rates of each signal. Every interim record block includes the full set of records since the last full record block. Data recorder 154, 254 can alternate between two temporary storage locations in the crash hardened memory module 118, 218, and optionally in the non-crash hardened removable storage device 219 of FIG. 2, when recording each interim record block to prevent the corruption or loss of more than one second of data when the data recorder 154, 254 loses power while storing data to the crash hardened memory module 118, 218 or the optional non-crash hardened removable storage device 219 of the data recorder 254 of FIG. 2. Each time a new interim record block is saved to a temporary crash hardened memory location it will overwrite the existing previously stored interim record block in that location.

[0033] Every five minutes, in this implementation, when the data recorder 154, 254 is in near real-time mode, the onboard data manager 120, 220 stores a full record block including the last five minutes of encoded signal data into a record segment in the crash hardened memory module 118, 218, shown in FIG. 7, and sends a copy of the full record block to the remote data manager 132, 232 to be stored in the remote data repository 130, 230 for a predetermined retention period such as two years 310. The crash hardened memory module 118, 218, and/or the optional non- crash hardened removable storage device 219 of the data recorder 254 of FIG. 2, stores a record segment of the most recent record blocks for a mandated storage duration, which in this implementation is the federally mandated duration that the data recorder 154, 254 must store operational or video data in the crash hardened memory module 118, 218 with an additional 24 hour buffer, and is then overwritten.

[0034] FIG. 4 is a flow diagram showing a process 400 for appending data and/or information from the asset 148, 248 after a power outage in accordance with an implementation of this disclosure. Once power is restored, the data recorder 154, 254 identifies the last interim record block that was stored in one of the two temporary crash hardened memory locations 402 and validates the last interim record block using the 32 bit cyclic redundancy check that is included in the end record of every record block 404. The validated interim record block is then appended to the crash hardened memory record segment and that record segment, which can contain up to five minutes of data prior to the power loss, is sent to the remote data manager 132, 232 to be stored for the retention period 406. The encoded signal data is stored to the crash hardened memory module 118, 218, and/or the optional non-crash hardened removable storage device 219 of the data recorder 254 of FIG. 2, in a circular buffer of the mandated storage duration. Since the crash hardened memory record segment is broken up into multiple record blocks, the data recorder 154, 254 removes older record blocks when necessary to free up memory space each time a full record block is saved to crash hardened memory module 118, 218, and/or the optional non-crash hardened removable storage device 219 of the data recorder 254 of FIG. 2.

[0035] FIG. 6 is a diagram that illustrates exemplary interim record blocks prior to a loss of power and after restoration of power to the data recorder 154, 254. When the interim record block stored in temporary location 2 at (2/1/2016 10: 10:08 AM) 602 is valid, that interim record block is appended to the record segment 702 (FIG. 7) in the crash hardened memory module 118, 218, and/or the optional non-crash hardened removable storage device 219 of the data recorder 254 of FIG. 2, as shown in FIG. 7. When the interim record block stored in temporary location 2 at (2/1/2016 10:10:08 AM) is not valid, the interim record block in temporary location 1 at (2/1/2016 10: 10:07 AM) is validated and, if valid, is appended to the record segment in the crash hardened memory module 118, 218, and/or the optional non-crash hardened removable storage device 219 of the data recorder 254 of FIG. 2.

[0036] Whenever any record block needs to be saved in crash hardened memory module 118, 218, and/or the optional non-crash hardened removable storage device 219 of the data recorder 254 of FIG. 2, the record segment is flushed to the disk immediately. Since the data recorder 154, 254 alternates between two different temporary storage locations when saving interim record blocks, there is always one temporary storage location that is not being modified or flushed to crash hardened memory or non-crash hardened removable storage device, thereby ensuring that at least one of the two interim record blocks stored in the temporary storage locations is valid and that the data recorder 154, 254 will not lose more than one second at most of data whenever the data recorder 154, 254 loses power. Similarly, when the data recorder 154, 254 is writing data to the crash hardened memory module 118, 218, and/or the optional non- crash hardened removable storage device 219 of the data recorder 254 of FIG. 2, every tenth of a second, the data recorder 154, 254 will not lose more than one tenth of a second at most of data whenever the data recorder 154, 254 loses power.

[0037] For simplicity of explanation, process 300 and process 400 are depicted and described as a series of steps. However, steps in accordance with this disclosure can occur in various orders and/or concurrently. Additionally, steps in accordance with this disclosure may occur with other steps not presented and described herein. Furthermore, not all illustrated steps may be required to implement a method in accordance with the disclosed subject matter.

[0038] While the present disclosure has been described in connection with certain embodiments, it is to be understood that the disclosure is not to be limited to the disclosed embodiments but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the scope of the appended claims, which scope is to be accorded the broadest interpretation so as to encompass all such modifications and equivalent structures as is permitted under the law.