Search Results

Cloud phase discrimination, coupled with measurements of liquid water content (LWC) and ice water content (IWC) as well as the detection and discrimination of supercooled large droplets (SLD), are of primary importance in aviation safety due to several high-profile incidents over the past two decades. The UTC Aerospace Systems Optical Ice Detector (OID) is a prototype laser sensor intended to discriminate cloud phase, to quantify LWC and IWC, and to detect SLD and differentiate SLD conditions from those of Appendix C. Phase discrimination is achieved through depolarization scattering measurements of a circularly polarized laser beam transmitted into the cloud. Optical extinction measurements indicate the liquid and ice water contents, while the differential backscatter from two distinct probe laser wavelengths implies an effective droplet size. The OID is designed to be flush-mounted with the aircraft skin and to sample the air stream beyond the boundary layer of the aircraft.

This paper presents an overview of a project called “Modelling and Simulation Tools for Systems Integration on Aircraft (MISSION)”. This is a collaborative project being developed under the European Union Clean Sky 2 Program, a public-private partnership bringing together aeronautics industrial leaders and public research organizations based in Europe. The provision of integrated modeling, simulation, and optimization tools to effectively support all stages of aircraft design remains a critical challenge in the Aerospace industry. In particular the high level of system integration that is characteristic of new aircraft designs is dramatically increasing the complexity of both design and verification. Simultaneously, the multi-physics interactions between structural, electrical, thermal, and hydraulic components have become more significant as the systems become increasingly interconnected.

Modern aircraft systems employ numerous processors to achieve system functionality. In particular, engine controls and power distribution subsystems rely heavily on software to provide safety-critical functionality, and are expected to move toward multicore architectures. The computing hardware-layer of avionic systems must be able to execute many concurrent workloads under tight deterministic execution guarantees to meet the safety standards. Single-chip multicores are attractive for safety-critical embedded systems due to their lightweight form factor. However, multicores aggressively share hardware resources, leading to interference that in turn creates non-deterministic execution for multiple concurrent workloads. We propose an approach to remove on-chip interference via a set of methods to spatio-temporally partition shared multicore resources.

The complexity of software development is increasing unprecedentedly with every next generation of aircraft systems. This requires to adopt new techniques of software design and verification that could optimize the time and cost of software development. At the same time these techniques need to ensure high quality of software design and safety compliance to regulatory guidelines like DO-178C [1] and its supplements DO-330[2] and DO-331[3]. To arrive at new technologies one has to evaluate the alternate methods available for software design by developing models, integration of models, auto-code generation, auto test generation and also the performance parameters like time, effort, reuse and presentation needs to be evaluated. We have made an attempt to present summary of alternate design concept study, and edge of MBD over other design techniques.

Automation on Validation and Verification (V&V) leveraging Formal Methods, and in particular Model Checking, is seeing an increasing use in the Aerospace domain. In recent years, Formal Methods have been used to verify systems and software and its correctness as a way to augment traditional methods relying on simulation and testing. Recent updates to the relevant Aerospace regulations (e.g. DO178C, DO331 and DO333) now have explicit provisions for utilization of models and formal methods. In a previous paper a compositional methodology for the verification of Aerospace Systems has been described with application to Electrical Power Generation and Distribution Systems. In this paper we present an expansion of the previous work in two directions. First, we describe the application of the methodology to the validation of Proximity Sensing Systems (PSS) requirements showing the effectiveness of the method to a new aerospace domain.

The Environmental Control System (ECS) of an aircraft provides thermal and pressure control of the engine bleed air for comfort of the crew members and passengers onboard. For safe and reliable operation of the ECS under complex operating environments, it is critical to detect and diagnose performance degradations in the system during early phases of fault evolution. One of the critical components of the ECS is the heat exchanger, which ensures proper cooling of the engine bleed air. This paper presents a wavelet-based fouling diagnosis approach for the heat exchanger.

Multi core platforms offer high performance at low power and have been deemed as future of size, weight and power constrained applications like avionics safety critical applications. Multi core platforms are widely used in non-real time systems where the average case performance is desired like in consumer electronics, telecom domains. Despite these advantages, multi core platforms (hardware and software) pose significant certification challenges for safety critical applications and hence there has been limited usage in avionics and other safety critical applications. Many multicore platform solutions which can be certified to DO-254 & DO 178B Level A are commercially available. There is a need to evaluate these platforms w.r.t certification requirements before deploying them in the safety critical systems thereby reducing the program risks. This paper discusses the advantages of multi core platforms in terms of performance, power consumption and weight/size.

Aircraft icing has been a focus of the aviation industry for many years. While regulations existed for the certification of aircraft and engine ice protection systems (IPS), no FAA or EASA regulations pertaining to certification of ice detection systems existed for much of this time. Interim policy on ice detection systems has been issued through the form of AC 20-73A as well as FAA Issue Papers and EASA Certification Review Items to deal mainly with Primary Ice Detection Systems. A few years ago, the FAA released an update to 14 CFR 25.1419 through Amendment 25-129 which provided the framework for the usage of ice detection systems on aircraft. As a result of the ATR-72 crash in Roselawn, Indiana due to Supercooled Large Droplets (SLD) along with the Air France Flight 447 accident and numerous engine flame-outs due to ice crystals, both the FAA and EASA have developed new regulations to address these concerns.

Formal Methods, and in particular Model Checking, are seeing an increasing use in the Aerospace domain. In recent years, Formal Methods are now commonly used to verify systems and software and its correctness as a way to augment traditional methods relying on simulation and testing. Recent updates to the relevant Aerospace regulations (e.g. DO178C, DO331 and DO333) now have explicit provisions for utilization of models and formal methods. At the system level, Model Checking has seen more limited uses due to the complexity and abstractions needed. In this paper we propose several methods to increase the capability of applying Model Checking to complex Aerospace Systems. An aircraft electrical power system is used to highlight the methodology. Automated model-based methods such as Cone of Influence and Timer Abstractions are described. Results of those simplifications, in combination with traditional Assume-Guarantee approaches will be shown for the Electric Power System application.

Avionics industry is moving towards fly-by wire aircrafts with less reliance on mechanical systems leading to increase in the complexity of in-flight hardware elements. RTCA/DO-254 and EUROCAE ED-80 plays a vital role in the design assurance of airborne electronic hardware. RTCA/ DO-254 and EUROCAE ED-80 are the industry standards for Design Assurance Guidance for Airborne Electronic Hardware. The two different agencies FAA and EU regulate and apply this design assurance guidance to the regulatory law in CFR and EASA CS respectively. This paper discusses the need for DO-254 /ED-80 certification in Aerospace industry, the advantages and benefits to the avionics manufacturers. The paper presents the study made on similarities and differences between DO-254/ED-80.