Browse Topic: Safety critical systems
Time-Sensitive Networking (TSN) is an emerging technology that has garnered popularity among the US DoD and others for its deterministic properties while using flexible, ubiquitous Ethernet as its core. However, individual TSN devices will support the TSN features of only some of the vast array of amendments and extensions that make up the full IEEE 802 TSN standards. This functional and modular approach offers great flexibility, but it also increases the complexity of network planning, analysis, verification, etc. as well as potentially leading to unexpected emergent behavior that must be addressed before a TSN network can be truly said to be qualified for use with safety-critical systems. Using industry experience gained certifying other deterministic networks to DO-254 and DO-178C Design Assurance Level A (DAL-A) and applying it to the analysis, testing, and validation of a deterministic TSN Ethernet digital backbone offers a roadmap for overcoming these challenges. Such an approach
Modern aircraft have an established need for a high-performance, open standards solution to interconnect increasing number of digital components including sensors, actuators, controllers, processors, displays and data concentrators. The aircraft can be envisioned as a distributed system requiring highly available, reliable, and deterministic communication network - often termed as digital backbone - for safe operation. This paper introduces a new zonal architecture for aerospace onboard networks using Time-Sensitive Networking (TSN). TSN is an open standard based deterministic Ethernet solution for mission and safety critical networks in aerospace industry that truly meets the Modular Open Standards Approach (MOSA) requirements. This paper also presents a reference implementation of the proposed digital backbone architecture using commercial-off-the-shelf hardware from multiple vendors. Experimental data from laboratory evaluation shows stability, performance, and reliability that
To this point in aviation history, a typical aircraft type certification program has focused on the constituent systems that make up the aircraft, decomposing them further and further down until reaching their elemental parts and how they interact. This approach has traditionally treated the actual communication technology as only an interface, with technology and implementation based on a decision between multiple stakeholders via an ICD and high-level requirements. This has been necessary to ensure the accurate and on-time delivery of safety-critical data between nodes. When using legacy point-to-point or bus-based data communication technologies like ARINC 429 or MIL-STD-1553, this approach has worked well enough as these technologies are relatively straightforward and proven technologies. However, as onboard bandwidth needs for safety-critical data increase, these legacy technologies are increasingly no longer capable of meeting the needs of system integrators. Ubiquitous, high
The paper deals with the status of development and qualification/certification of electromechanical actuation for Helicopters and VTOL applications with the focus on aspects relevant to the Fault-Tolerance. In particular a linear Electromechanical Actuator (EMA) architecture is presented, derived from a fault tolerant ballscrew-based differential (speed-summing arrangement) actuation system patented by UMBRAGROUP S.p.A. The focus is on safety-critical and high reliability/availability requirements for electromechanical actuation certification. The main characteristic is the use of two independent mechanical actuation channels in the same envelope driven by independent Motor Control Electronics (MCEs). At the state of the art, the presented fault-tolerant architecture is under development in flight-critical swashplate application for eVTOL platform and under feasibility study in flight-critical swashplate application for CS27 platform.
This document is not a standard, it is a candidate for a standard being submitted to SAE for their consideration as a comment to SAE J2735. The term SAE J2735 SE candidate is used within this document to refer to this submission. This document specifies dialogs, messages, and the data frames and data elements that make up the messages specifically for use by applications intended to utilize the 5.9 GHz Dedicated Short Range Communications for Wireless Access in Vehicular Environments (DSRC/WAVE, referenced in this document simply as “DSRC"), communications systems. Although the scope of this Standard is focused on DSRC, these dialogs, messages, data frames and data elements have been designed, to the extent possible, to be of use for applications that may be deployed in conjunction with other wireless communications technologies. This standard therefore specifies the definitive message structure and provides sufficient background information to allow readers to properly interpret the
The security of connected health technology is often assumed to exist when it does not, or considered to be prohibitively expensive or complex, or, worst of all, relegated to an afterthought. This is dangerous thinking, especially as the industry increasingly moves to a smartphone-based command-and-control model for these safety-critical applications.
As the complexities of avionic systems increase, our system-level verification methods have remained stagnant. New requirements are added with each iteration of design, impacting the level of testing needed for full test coverage, while hardware or software updates require verification testing that transcends its predecessors. At Triumph Integrated Systems, (Triumph), DO-178 B/C level A formal qualification testing requires several engineer reviewers to verify a system works as intended. Generally, it takes a week or less to execute a test and gather data, but several weeks to evaluate said test. There is opportunity for improvement in this system. This paper describes how Triumph Engine Control Systems' Automated Criteria Evaluation (ACE) takes the test case review process time and reduces it effectively. ACE is intended to replace one human reviewer using MathWorks® based programing, which breaks down natural criteria language for interpretation and evaluation. ACE aims to increase
Items per page:
50
1 – 50 of 394