Multiple modes of redundancy means that the device is designed with a minimum of two independent means to turn it off completely, turn off the cellular or mobile functions, or a combination of both when airborne. These independent methods should use different sources to identify that the aircraft is in flight, for example, a cargo-tracking device may be designed to sense rapid altitude changes and acceleration to determine when to turn off cellular transmissions. Redundant sources of the same information, such as two vertical accelerometers, should not be considered independent.
The different sensors / detection means should be used in a conservative architecture. This means that the radio suspension should be activated if any of the source/means senses that the aircraft is in flight (logical OR gate). Conversely, the radio suspension should not be deactivated unless all sensors/means identify that the aircraft is on ground (logical AND gate).