A study of flight-critical computer system recovery from spaceradiation-induced error

It is well known that space radiation, containing energetic particles such as protons and ions, can cause anomalies in digital avionics onboard satellites, spacecraft, and aerial vehicles flying at high altitude. Semiconductor devices embedded in these applications become more sensitive to space radiation as the features shrink in size. One of the adverse effects of space radiation on avionics is a transient error known as single event upset (SEU). Given that it is caused by bit-flips in computer memory, SEU does not result in a damaged device. However, the SEU induced data error propagates through the run-time operational flight program, causing erroneous outputs from a flight-critical computer system. This study was motivated by a need for a cost-effective solution to keep flight-critical computers functioning after SEU occurs. The result of the study presents an approach to recover flight-critical computer systems from SEU induced error by using an identity observer array. The identity observers replicate the state data of the controller in distinct data partitions. The faulty controller can be recovered by replacing data image of the faulty data partition with that of the healthy data partition. The methodology of applying such an approach from the fault tolerant control perspective is presented. The approach is currently being tested via computer simulation     

PAVE PACE: system avionics for the 21st century

The PAVE PACE Initiative has been established to validate system avionics concepts for advanced military aircraft. The author presents the rationale of why the advanced architecture established by the PAVE PILLAR program should be continued under PAVE PACE to achieve: practical and affordable airborne versions of modular parallel processing network architectures for many applications currently beyond real-time implementation, readily available avionics for use in all avionics and, greatly improved techniques to reduce the cost of software development and support. An approach to the overall design structure for future avionics is also presented that entails: the use of CAD (computer-aided design) tools to assist in the development of system, hardware and software requirements, the use of replicated hardware modules (some at the wafer level), the use of reuseable software modules and the use of CAD tools to tailor hardware/software modules for specific application requirements. Continued use of the PAVE PILLAR high-speed data bus and operating system is recommended as the means to integrate and control the data input and output of physically and functionally separate parallel networks     

Switched Ethernet testing for avionics applications

Switched Ethernet is being implemented as an avionics communication architecture. A commercial standard (ARINC-664) and an aircraft vendor-specific implementation known as avionics full duplex switched Ethernet (AFDX) have been developed that defines the topology and use of switched Ethernet in an avionics application. In avionics applications, the movement of data between devices must take place in a deterministic fashion and must be delivered reliably. All aircraft flight hardware must be tested to be sure that it will communicate information properly in the switched Ethernet network. The airframe manufacture must test the integrated network to verify that all flight hardware is communicating properly. Testing and maintenance testing is required to perform data communication level testing of switched Ethernet architectures for avionics applications to insure that all communication is deterministic and reliable. This paper provides an overview of a switched Ethernet avionics network and identifies the testing challenges associated with a switched Ethernet avionics application. A practical implementation performing the required tests is discussed.     

Optical interconnection and packaging technologies for advancedavionics systems

An optical backplane developed to demonstrate the advantages of high-performance optical interconnections and supporting technologies and designed to be compatible with standard avionics racks is described. The hardware demonstrates the three basic components of optical interconnects: optical sources, an optical signal distribution network, and optical receivers. Results from characterization and environmental tests, including a demonstration of the reliable transmission of serial data at a 1 Gb/s, are reported     

Designing to MIL-STD-2165: Testability

The V-22 avionic hardware is the first to be designed under MIL-STD-2165 testability program requirements. This paper presents an overview of the avionics design-for-testability approach and lessons learned to date relative to the application of MIL-STD-2165. The paper will discuss incorporation of testability requirements up front in the avionics design which will drive the supportability philosophy at both the Organizational and Depot levels of maintenance. The paper will compare previous avionics hardware testability requirements versus those applied to the V-22 avionics and highlight areas of improvement. A discussion of testability design impacts on reduced level of testing (i.e. WRA/SRA/System) will be included. In addition, the paper discusses an innovative approach to meeting the user requirements for a man-portable forward deployed maintenance capability that forms the basis for a two level support scenario (Organizational and Depot). The innovation comes from the fact that the on-board Central Integrated Checkout system will provide data as well as fault isolation and will use this data as a mechanism to reduce the size and complexity of the stimulus and measurement hardware at either the Organizational or Depot level depending on the deployment requirements.     

An environment for the integration and test of the Space Stationdistributed avionics systems

An approach is described to supplying an environment for the integration and test of the Space Station distributed avionics systems. Background is included on the development of this concept including the lessons learned from Space Shuttle experience. The environment's relationship to the process flow of the Space-Station verification, from systems development to on-orbit verification, is presented. The uses of the environment's hardware implementation, called Data Management System (DMS) kits, are covered. It is explained how these DMS kits provide a development version of the Space-Station operational environment and how this environment allows system developers to verify their systems performance, fault detection, and recovery capability. Conclusions on how the use of the DMS kits, in support of this concept, will ensure adequate on-orbit test capability are included     

Open systems avionics network to replace MIL-STD-1553

This paper is a proposal for a future method of avionics data communication. The need for this proposal results from the shortcomings in the current avionics architecture, video distribution network, and in the MIL-STD-1553 data communication system. The separately wired video and data communication systems can be combined to save weight, which is especially critical for rotorcraft. Aircraft, once fielded, have limited capacity for modification and improvement due to fixed computer throughput and processing performance, network bandwidth, and space available in the avionics equipment bays. The changes proposed by this paper are to be made in conjunction with the replacement of the redundant computer boxes with open system avionics functions on industry standard circuit cards. This open architecture approach was developed over the last ten years and is now being implemented in many aircraft applications including the F-22 and the RAH-66 programs. The V-22 rotorcraft, which although just entering production, is being modified for joint service customers where modern computer performance and expanded data network bandwidth is needed. The changes of this proposal will fill this need, reduce the weight of upcoming production models, and provide growth or spare capability so that additional video and data components can be added with minimal effect on existing components. This paper examines the current V-22 avionics video and data communication hardware and wiring and propose a new implementation of open system architecture standards with integrated digital video and data communication based on ANSI standard copper fibre channel     

Technology roll lessons learned on embedded avionics platforms

Open system architectures based on commercial off-the-shelf (COTS) building block components offer the ability to leverage the latest technology into fielded products while minimizing the impact to the operational flight software, typically the most costly component of an avionics development or upgrade. Our team has developed a layered hardware and software approach based on industry standard hardware and software interfaces to abstract the application (operational) software developers from the underlying technology rolls to the hardware and operating system software that naturally occur as part of the commercial marketplace, A technology roll is defined as the replacement of a current product with a subsequent generation of a product from the same product family. In this article, we describe the components and the layered architecture of our open system architecture approach. We discuss specific system, hardware, and software technology insertions that incorporate the latest available technology and how these changes have been abstracted from the application software. The article concludes by discussing lessons Learned from the use of these common components and corresponding technology rolls across various platforms     

A formal approach using SysML for capturing functional requirements in avionics domain

In this work, a Model-Based Systems Engineering approach based on SysML is proposed. This approach is used for the capture and the definition of functional requirements in avionics domain. The motivation of this work is triple: guide the capture of functional requirements, validate these functional requirements through functional simulation, and verify efficiently the consistency of these functional requirements. The proposed approach is decomposed into several steps that are detailed to go from conceptual model of avionics domain to a formal functional model that can be simulated in its operating context. To achieve this work, a subset of SysML has been used as an intermediate modelling language to ensure progressive transformation that can be understood and agreed by system stakeholders. Formal concepts are introduced to ensure theoretical consistency of the approach. In addition, transformation rules are defined and the mappings between concepts of ARP4754A civil aircraft guidelines and SysML are formalized through meta-model. The resulting formalization enables engineers to perform functional simulation of the top-level functional architecture extracted from operational scenarios. Finally, the approach has been tested on an industrial avionics system called the Onboard Maintenance System.     

Avionics cost of ownership

The cost of ownership of avionics includes not only the development and acquisition cost, but also the yearly operating and support (O and S) (maintenance) cost of hardware, software, and support equipment. This paper presents an avionics cost of ownership methodology developed for USAF, its data sources, and business metrics computed for USAF decision makers as we move toward operating avionics as a business. The business model is used to determine which existing avionics are candidates for replacement with new technology and to prioritize the replacements. These avionics are often used on multiple aircraft types which necessitates analysis of the causes of the high cost of ownership on each type. Databases are used to document the processing functions, data flow, and constraints of the item being analyzed. These constraints include physical, environmental, electrical, and data interfaces. Databases containing alternatives are evaluated against standard mission scenarios for aircraft utilizing these high cost avionics to determine their impact on performance, O and S costs, and mission effectiveness. The results of the foregoing analyses steps are then used in life cycle cost analyses which consider different retrofit scenarios for each alternative for each aircraft type against the avionics being analyzed for replacement. The alternatives are prioritized and a risk analysis performed considering technical, schedule, and cost growth risks. The avionics cost of ownership methodology described in this paper processes data from USAF maintenance organizations. This has revealed the very large expenditures being made to support highly unreliable avionics. These methods can be applied to all military and commercial aircraft systems to determine not only the cost of ownership of existing systems, but also the cost of ownership of new systems when they are retrofit     

Design for testability for future digital avionics systems

The authors describe an integrated testing approach called the Maintenance and Diagnostic System (MADS), which was developed for digital avionics systems using VHSIC and semicustom devices. Mission/operational requirements dictate high availability with capability to detect 98% of all faults and isolate 90% of these faults to a line replacement module (LRM) or 95% of the faults to two LRMs. MADS achieves these goals by defining a module maintenance node (MMN) chip set for each LRM in the system and the design for testability concepts for hardware. The MMN aids parallel, high-speed testing of LRMs, isolating the fault(s) to a module/chip level while incurring less than 10% overhead. It uses the concepts of scan set design, pseudorandom test vector generation, output response compression, and separate scan set loops to test the SSI-MSI logic on the LRM. It also stores interim test results and run-time fault information to isolate the hard-to-reproduce failures and performs verification of interchip and intermodule wiring     

Airborne platform capability assessment

It is expected that the multimode weapons systems of the future will be highly fault tolerant, possessing the ability to perform tactical missions with both full or degraded functional capabilities. The fault-tolerant system characteristics will allow systems with less than the fully specified functional capabilities to be engaging in combat. This design feature will present the operators of these weapons system with the operational challenge of selecting and/or assigning weapons platforms with degraded capabilities to carry out tactical missions. An in-system assessment process is proposed to evaluate the operability for these weapons platforms on the basis of current functional status, the reliability of the hardware resources within the system's avionics, and the resources required by the various application modes to accomplish mission tasks     

A multi-formalisms approach for codesign in the development ofavionics

This paper presents a new approach in the development of avionics at AEROSPATIALE. The approach is based on a selective use of specification languages. Its aim is to compose partial avionics specifications in a unified format which is used for later concurrent hardware/software design steps. A demonstrator of the approach is currently in progress. It deals with the re-design of an avionics on-board system that belongs to the family of AIRBUS A340. The multi-languages specification is achieved through three graphical specification languages: Harel's StateCharts, SDL and SAO. The status of work and future perspectives are outlined     

Multipurpose visualization system

This deals with the design and architecture of the low-cost Multipurpose Flight Visualization System (MFVS). The MFVS system was originally developed as a passive IFR approach system for small general aviation planes. A relatively high adaptability is one of the main advantages. It can be easily used with many types of avionics devices. The GPSIINS system is used as the primary data source. The data from the GPSIINS system are pre-processed by proprietary neural network units that feed the 3-D visualization system. The neural network unit is responsible for adaptation of this system and can eliminate problems caused by data delays and data drop-outs. The 3D visualization unit processes data from the neural network unit and eventually from the 6DOF tracker that is placed on the pilot's Head Mounted Display (HMD). The unit then generates a 3D view of the surrounding environment that is similar to the 3D environment the pilot knows from flight simulators. The source of environment data is the terrain and object/obstacle database. The image output can be displayed on HIUD, MED, or HMD.     

Flight-critical distributed systems: design considerations [avionics]

With the proliferation of so-called "smart" components and the availability of small, low-cost, and high-speed data networks, avionics that have traditionally been centralized are becoming distributed. A distributed approach offers many potential benefits, such as reduced development time and cost, simplified system installation, increased flexibility for system expansion or modifications, and greater reuse of proven components. The distributed approach can also reduce the risk associated with design errors by splitting complex hardware and software into more manageable components. However, distributed systems also introduce new challenges in meeting real-time deadlines and providing fault tolerance. This paper examines the many design considerations and identifies the strengths and weaknesses of each. Emerging automotive drive-by-wire alternatives are compared for application to aerospace systems. This paper is based on a Draper Laboratory-sponsored effort to look at flight-critical distributed systems and to evaluate emerging hardware and software for building them.     

Reconfigurable multiport amplifiers for in-orbit use

A highly reliable and economical system design is presented for a multiport amplifier (MPA) system, which has attracted considerable attention for its potential use in multibeam mobile satellite communications. An MPA is composed of multiple input/output ports and an array of multiple high-power amplifier (HPAs). Since the HPAs are shared among multiple beams, this design solves the problems of traffic imbalance among beams, traffic changes due to terminal movement, and changes in propagation conditions, and can efficiently utilize the total transmitting power with maximum flexibility and minimum hardware. The problem is that HPA failures degrade the MPA beam isolation, causing multipath interference in the surrounding area due to leakage through adjacent beams. To address this problem, we investigated the MPA performance and survival probability when HPAs fail, by taking the specific properties of the MPA configuration into account. Based on our analysis, we found that there is an optimum operational HPA on/off mode in the event of HPA failure, and we were able to obtain optimal performance and reliability by reconfiguring the HPA on/off states in orbit upon the occurrence of HPA failures. Our proposed self-redundant, reconfigurable MPA can achieve high reliability without any need for additional redundant units or switches.     

通用的航电系统总线接口仿真平台的设计和应用

针对当前航电系统仿真器的缺点,提出了一种通用的航电系统总线接口仿真平台的设计思想,通过建立仿真数据库,从待仿真的航电系统设备中的接口信息抽象出属性和行为,然后用数据库的方式来描述,实现了仿真软件和仿真对象的分离,从而使该仿真平台具备了通用性和灵活性。该仿真平台已经在某型机航电系统地面联试中得到了应用。     

Optimal flight management system utilization with ATC automation

The requirements and design philosophy for developing ground-based automation planning and control advisory concepts to best serve aircraft with flight management systems (FMS) are defined. Analytical results are presented that are based on the comparison of operational data with the user-preferred trajectories to identify flying-time variabilities in various segments of arriving flights. En route descents, terminal maneuvering areas, and the final approaches are considered to determine the impact of aircraft and environmental factors on flying times essential for traffic planning. Simple time-estimation algorithms based on FMS-defined speed schedules and prevailing winds are presented for estimating flying times during en route descents. Automation, planning and control concepts are developed that utilize flexible route structures and a speed-control strategy to permit the aircraft maximum use of FMS and onboard avionics in all operating conditions     

CCSDS命令与数据获取业务应用分析

针对传统星载数据管理系统应用层与数据访问层耦合度高,应用软件进行设备访问时须了解底层硬件细节、软件复用率低等问题,研究了CCSDS(Consultative Committee for Space Data Systems,空间数据系统咨询委员会)制定的CDAS(Command and Data Acquisition Service,命令与数据获取业务)的功能、特点及其工作原理,结合新一代综合电子系统的硬件模块功能特点,深入分析了如何在综合电子系统中实现CDAS.CDAS已在某预研课题综合电子样机中应用,测试试验表明,CDAS应用于综合电子系统可以为上层应用提供便捷的设备访问服务,为综合电子系统实现任务规划等复杂功能提供有力的技术保障.     

Never make the same mistake twice-using configuration control anderror analysis to improve software quality

To provide a controlled environment, changes to the Space Shuttle primary avionics system software have been grouped into operational increments (OIs) that identify a predefined set of changes and discrepancy corrections (a baseline) for that OI. Two early processes implemented were an automated configuration management database and a prologue in all the code modules. This allows a causal analysis program that permits each problem to be analyzed to determine the change authorization that caused the code modification that results in the problem. This causal analysis provides the information that is used for process improvement and to measure effectiveness