Feedback on IMA certification and on-going regulatory …

1 Feedback on IMA certification and on- going regulatory work in Europe C dric Chevrel System & IMA Referent certification Expert Airworthiness certification Directorate Thales Avionics 30th october 2012. THALES Avionics International IMA Conference Moscou 2012. 2 / IMA System certification Manager Life of a System certification Manager before IMA .. Life of a System certification Manager with IMA .. 3 / Content IMA perimeter in Avionics System certification Process Incremental certification Lessons Learned On- going regulatory work in Europe Avionics System IMA perimeter Thales Avionics 30th october 2012. International IMA Conference Moscou 2012. 5 / Avionics System Perimeter Cockpit Localisation Surveillance Navigation Flight Recording Management Avionics System Flight Guidance Integrated Modular Avionics Display and Warning & Envelope Communication Utilities / Cabin Maintenance A trend : from Equipment, to Subsystem and Open Avionics System Package 6 / Integrated Modular Avionics (IMA).

2 Before Now with IMA. Platform composed by a set of non system specific and highly configurable computers Multiple systems applications are executed on the same platform and network 1 function = 1 computer ARINC 429. Allowing highly integrated architecture, IMA permits recurrent, development and maintenance cost savings optimizing industrial business model 7 / IMA business model Platform / Module supplier : Production, Supply chain, component obsolescence management and capacity to F3 design in the future In Service Experience on COTS hardware component ( certification constraint). RT Operating System (such as A653) skills Robust Partitioning demonstration (Partitioning) skills Sub-System Designers / Application Suppliers Functional domain (Flight Management, Fuel, ) skills Functional oriented Software engineering skills IMA system integrator Complex integration (mixing software and functional aspects) skills Incremental Integration & Acceptance IMA objective : Select the best supplier for each task taking into each specificity Integrated Modular Avionics certification Process Thales Avionics 30th october 2012.

3 THALES Avionics International IMA Conference Moscou 2012. 9 / certification Actors Type certification TSO installation Airworthiness Aircraft Manufacturer Authority Country A (IAC-AR). Contract System Development & TC Validation Type certification Contribution Agreements TSO Equipment Arrangements between AAs Airworthiness Authority Avionics System Country C (ex:FAA). Supplier (Thales). Airworthiness Suppliers Technical Standard Order Authority Sub-contractors (TSO) Authorization Country B (EASA). 10 / certification basis flow-down A/C Manufacturer AUTHORITY. Aircraft Determination of certification Basis Aircraft Aircraft certification certification Basis: - CS 25/AP25/FAR 25. Basis - Special Conditions, CRI F-xx/IP S-xx Exemptions, ESF.

4 AMC (generic). System IM (specific CRI / IP) System System ARP4761. Qualification . ARP4754 Basis IMA. System Supplier DO-297. Equipment HW. Standards DO-254. SW Equipment DO-178B Qualification . Environmental Basis Equipment Supplier DO-160. 11 /. IMA FAA/EASA regulatory materials FAA : 2002 : TSO C153 IMA hardware elements . 2003 : AC20-145 about TSO C153 (obsolete with AC20-170). 2004 : AC20-148 about reusable software component (RSC) . 2010 : AC20-170 making the link between TSO C153, AC20-148 "reusable software component" and DO-297. 2012 : PS-ANM-25-08 provides criteria to determine if the guidance in AC. 20 170 is applicable (Am I an IMA ?). EASA : CRI-Fxx : Interpretative Materials for Integrated Modular Avionics System CRI-Fxx : Interpretative Materials for Incremental certification These regulatory materials are calling on industrial standards as means of compliance 12 / System/Hardware/Software Industrial Standards Aircraft & System Development Process (ARP-4754 / ED-79).

5 Guidelines for Integrated Modular Avionics (DO-297/ED-124). ARP4754A. DO297. Electronic Hardware Software Development Process Development Process (DO254 / ED-80) (DO178 / ED-12). ARP4754 (+ARP4761) and more recently DO297 are structuring IMA. system development and certification processes 13 / IMA definitions According to DO-297 : Aircraft functions Generic Perimeter =. Platform independent from Avionics functions DO297 shall be used to structure IMA definitions in order to avoir misleading interpretation at the beginning of the certification program 14 / Authority Involvement Manufacturer requirements certification basis SOI4. SYSTEM / SUB-SYSTEM / EQUIPMENT Development cycle certification Review PLAN Accomplishment PHASE Status to the Plan SOI1.

6 certification Plan, Plan Review certification summary, Syst. FHA, EQTP, SSA, EQTR, SAS, HAS, PSAC, PHAC, PCAC. REQUIREMENT CAS, PAS (IMA). PHASE. Which kind of authority involvement VERIFICATION. PHASE SOI3. Verification and audit reviews with IMA ? Audit Flight/Lab Test ARCHITECTURE procedures PHASE and results DESIGN. PHASE SOI 2. Development/. Specifications and Design Audit Design data SOI : Airworthiness Authority Stage of Involvement Integrated Modular Avionics Incremental certification Thales Avionics 30th october 2012. International IMA Conference Moscou 2012. 16 / Integrated Modular Avionics (IMA) certification Before Now with IMA. One function with Highly Integrated DAL A / DAL D Architecture DO178B Multi-system Open Industrial partitioning definition Integration Workshare IMA system Robust Incremental Partitioning(*).

7 certification (*) DO297/ED124 definition In the frame of each TC , specific CRI/IP (IM) are published considering IMA. architecture as a system. But a system whose certification shall be handled via an incremental process (see DO297). 17 /. What was at stake ? 2 ways are identified to manage resources sharing issues at system level: IMA conventional way (API ARINC 653): Multi system integration on platform V&V activities Sub-System 1 Sub-System 1 Sub-System 1. Platform Sub-System 1. Sub-System n Sub-System n Sub-System n Platform Sub-System n Platform Simu/Aircraft Platform Platform + other systems ! IMA Incremental way (API ARINC 653 + Incremental process): Replacement of multi-system integration by qualification credit based on Usage Domain qualified at platform level Sub-System 1 Sub- System 1.

8 Sub- System n Platform Sub- System 1. Sub- System n Usage Domain &. IMA Process CREDITS. Platform Simu/Aircraft Sub- System n + other systems Platform Platform AA warned about potential difficulties during the compliance demonstration in case of Incremental approch is not followed. This is derived from the complexity of IMA systems . 18 / What is at stake regarding IMA certification ? What is at stake : Performance and safety of integrated module in any operational situation. The IMA architecture (including networks) is considered as a complex system of the aircraft. Independent qualification of some components and credit from some components pre-qualification is needed to simplify final approval. Qualification credits : Credit n 1: Bare Module & Tools pre-qualification : Modules & tool chain properties (partitionning, configurability, performances) is demonstrated and guaranteed in a frame of a Usage Domain.

9 Credit n 2 : A qualified tool chain guarantes that Modules are well configurated compliantly to Usage Domain Credit n 3: Standalone qualification of Avionic applications are expected to be granted in the context of an integrated module with several functions Keys Points : Incremental qualification process shall be defined to master the interactions between the industrial players Incremental qualification taking benefit from Module & Tool properties (partitionning, configurability & usage domain). 19 /. certification program breakdown Module Module Integrator Avionic Application (Function). Audit Domain Audit Domain Audit Domain(s). Bare module Configuration Application and Tools development development Software 1. development Function 3.

10 1 development 3 2 Function 2. Tools Function 1. Credit n 2 Credit n 3. qualification functional qualification qualification performances Module Application Functional Vs acceptation acceptation Qualification 3. IMA system Full incremental Domain certification Approach Usage Domain & Credit n 1 IMA PROCESS Aircraft Partionning SYNTHESIS. Credit n 1 + n 2 + n 3 certification 3 4. x DO297 task Qualified Integrated Module Lesson learnt from recent IMA certification Thales Avionics 30th october 2012. International IMA Conference Moscou 2012. 21 / Lessons Learned (1). A/C certification Basis understanding and good anticipation (Special Conditions, Issue Papers, etc). Including additional requirements from Importing Authorities. Including Interpretative Materials about Integration & Incremental Processes (which credit in which context ?)