梓枙: RNAV AIRBORNE SYSTEM AIRWORTHINESS REGULATION AND CERTIFICATION ISSUES [湖荂掛珜] 釬氪: 瑤諾蹦抭 奀潔: 2011-8-29 14:58:30 梓枙: RNAV AIRBORNE SYSTEM AIRWORTHINESS REGULATION AND CERTIFICATION ISSUES
釬氪: 瑤諾蹦抭 奀潔: 2011-8-29 14:58:48
10-11-12-13 September 2002-Morocco ARAB INSTRUMENT PROCEDURE DESIGN SEMINAR 1 RNAV AIRBORNE SYSTEM AIRWORTHINESS REGULATION AND CERTIFICATION ISSUES B. RABILLER / French DGAC SFACT/ Aircraft Certification Office RNP 5 LNAV/VNAV RNP 0.3 PRNAV RNP 10 BRNAV RNP-RNAV RNAV IS A COMPLEX WORLD ! INTRODUCTION GPS DME-DME INS VOR/DME INTRODUCTION TO DESCRIBE THE AIRCRAFT CERTIFICATION PROCESS TO DESCRIBE RNAV IMPLEMENTATION TROUGH TWO EXAMPLES FROM AN AIRCRAFT POINT OF VIEW • BRNAV FOR ENROUTE CONTINENTAL • PRNAV FOR TERMINAL AREA TO TALK A LITTLE BIT ABOUT RNP CONCEPT INTRODUCTION RNAV SYSTEMFOR GENERAL AVIATION (EXAMPLE) HSI (Horizontal Situation Indicator) GPS Receiver Aircraft interfaces (Power, Altitude,..). NAV WPT GPS antenna GNSS MSG APPR External annunciator INTRODUCTION RNAV SYSTEMFOR AIR TRANSPORT AIRCRAFT (EXAMPLE) HSI Aircraft interfaces (Altitude,..). GPS antenna FMS Computer (Flight Management System) GPS Sensor Others sensor : IRS, VOR,DME,.. ADI MCDU NAV WPT FMS MSG APPR Via Autopilot External annunciator 10-11-12-13 September 2002-Morocco ARAB INSTRUMENT PROCEDURE DESIGN SEMINAR 6 AIRCRAFT CERTIFICATION PROCESS Airworthiness general Approval Process A process permitting to issue a Certificate of Airworthiness for an aircraft. Is my aircraft airworthy? Aircraft manufacturer Authority (JAA,FAA,...) Compliance with Airworthiness regulation C of A Yes A SAFETY Issue Airworthiness general Approval Process Type Certificate (TC) 每 For a new aircraft Model. 每 A dedicated certification team at Authority level. 每 Certification basis issued for this aircraft. 每 Multidiscipline program (engine, structure, cabin safety, avionics, electricity,...) 每 At the End TC is issued with a C of A and an aircraft flight manual is approved 每 This is not an operational approval! Airworthiness general Approval Process Aircraft modification 每 Check if initial aircraft certification basis need to be revised. 每 Authority team is reduced and includes only relevant specialist ( avionics, powerplant,#). 每 C of A is « extended » for this modification. 每 Aircraft Flight Manual may be amended or a supplement may be issued depending on aircraft modification. 每 Applicant may be either the airframer or an approved design organisation. Airworthiness general Approval Process Certification basis and compliance 每 JAR and FAR airworthiness regulation » JAR/FAR 25 for aircraft > 5.7 t » JAR/FAR 23 for aircraft < 5.7 t 每 Special condition and Interpretative material » Due to aircraft technology (electrical flight control system, very large transport aircraft,...) » Due to system fitted (Aircraft digital bus, Enhanced Ground Proximity Warning System, predictive windshear,.) » Due to lack of «consolidated» regulation or material (JAA leaflet, AC,..) for this technology/system. Airworthiness general Approval Process Certification basis and compliance (Cont*d) Compliance with requirement material 每 Means of compliance » Analysis (safety, design robustness,...) » Laboratory test (integration) » Ground test » Flight test » Equipment qualification (environmental, software, minimum operational performance) 每 Compliance check-list at the end for final airworthiness assessment. Airworthiness general Approval Process Aircraft modification RNAV example NO Aircraft XXX JAR 25 Change 13 RNAV multisensor system installation (GPS/DME). Applicant proposes a Certification plan APPLICANT AUTHORITY APPROVAL Cert basis need to be revised due to RNAV system installation? Verification of applicable regulation paragraph and interpretative material (AMJ, ACJ,AC). Validation of certification plan Validation of different document and plan Document and AFM approval. Modification is approved by authority Applicant issue documentation, test plan (i.e. ground, flight) and system safety assessment Applicant proceed to relevant test and issue final compliance statement General approval process Operational approval An airline may operate an aircraft if: An AOC has been issued by the authority ( Airline Operational Certificate) Compliance with OPS regulation has been demonstrated (i.e. JAR OPS 1 for transport aircraft category in JAA states) For certain operation (i.e. CAT III approach, RNP 10##), a dedicated operational approval should be issued by the authority ( for a specific aircraft type, consideration for dedicated crew training and/or maintenance, ...). General approval process AIRWORTHINESS APPROVAL C of A OPERATIONAL APPROVAL AOC AIRCRAFT MAINTENANCE 10-11-12-13 September 2002-Morocco ARAB INSTRUMENT PROCEDURE DESIGN SEMINAR 15 BRNAV Overview of BRNAV certification criteria CONTENT Generality Accuracy Availability and Integrity Required functions for BRNAV Recommended functions for BRNAV Aircraft Flight Manual (AFM) Limitation on the use of navigation systems Operational criteria for use of GPS Stand-alone equipment BRNAV Certification issues Overview of BRNAV certification criteria Generality Airworthiness criteria defined in a European document (JAA Leaflet 2) An RNAV system based on navigation sensor. 每 Sensor may be either VOR/DME, DME/DME, INS/IRS or GPS. 每 May be a single sensor or multi sensor BRNAV is sometimes called RNP 5 which may be misleading in certain cases. Overview of BRNAV certification criteria Accuracy Track keeping accuracy of 5NM for 95% of the flight time including : 每 Signal source error (signal transmission error) 每 Airborne receiver source error 每 Display system error 每 Flight technical error 5 NM 5 NM 95% 95% Overview of BRNAV certification criteria Availability and Integrity Total loss of navigation must be improbable (occurrence less than 10-5/per flight hour) Erroneous displayed information must be improbable (occurrence less than 10-5/ per flight hour) during Enroute operation Single RNAV system acceptable 每 Other traditional navigation system installed 每 System monitored by flight crew criteria Availability and Integrity : FAR/JAR 1309 Classification Effect Failure Classification Quantitative Probability MINOR Probable 10-3/ Flight Hour MAJOR Improbable (Remote) 10-5/ Flight Hour HAZARDOUS Improbable (Extremely Remote) 10-7/ Flight Hour CATASTROPHIC Extremely Improbable 10-9/ Flight Hour Overview of BRNAV certification criteria Required functions for BRNAV Continuous indication of aircraft position relative to track on a navigation display situated in pilot primary field of view Display of distance and bearing to the active waypoint Display of ground speed or time to the active waypoint Storage of waypoints; minimum of 4 每 Navigation Data Base is not required Appropriate failure indication of the RNAV system, including sensors. Basic BRNAV functions ow complexity RNAV system with small capacity. Overview of BRNAV certification criteria Required functions for BRNAV (example) TO TO TOU Dis 14 NM GS 195 Kts Stored Wpt: AGN; SAU, TAN FLAG TOU 1.25 NM 14 NM SAU AGN TAN 195 Kts INDICATOR (i.e CDI) RNAV Control Display Unit (i.e CDU) Overview of BRNAV certification criteria Recommended functions for BRNAV Autopilot and/or Flight director coupling Display of present position in terms of latitude and longitude Direct TO function 每 From present position to a selected waypoint Indication of navigation accuracy 每 Quality factor, estimated position error,... Overview of BRNAV certification criteria Recommended functions for BRNAV Navigation Data Base Automatic leg sequencing and associated turn anticipation 每 Notion of flight plan and transition path Automatic channel selection of radio navaid 每 Only for BRNAV systems based on VOR or DME A BRNAV system with recommended function is a more complex RNAV system which is more in accordance with today*s ATC environment Overview of BRNAV certification criteria Required and recommended functions for BRNAV (example) TO TO TOU EPE 0.15 NM Dis 14 NM GS 195 Kts PPOS N 43 32 59 E 001 35 18 Flight Plan: TOU -->AGN --> SAU --> TAN FLAG TOU 1.25 NM 14 NM SAU AGN TAN 195 Kts RNAV Control Display Unit (i.e CDU) ADI CDI Overview of BRNAV certification criteria Aircraft FlightManual (AFM) AFM includes 每 Certification basis (i.e Leaflet 2 , AC 20-138) 每 RNAV system limitation (ex BRNAV limited to 2 hrs in case of pure INS navigation, limitation due to GPS constellation) 每 RNAV system operating procedure ( An extract of pilot*s guide in order to highlight important operating procedures) 每 RNAV system abnormal procedure (ex Procedure in case of BRNAV system failure, in case of special navigation messages, ....) Overview of BRNAV certification criteria Limitation on the use of navigation systems Inertial Navigation Systems (INS) limited to 2 Hours without automatic radio update function. GPS should be approved in accordance with TSO C129. 每 Computed position Integrity should be provided by RAIM (Receiver Autonomous Integrity Monitoring) or equivalent (Alternate Integrity Monitoring including comparison with INS or radio). 每 In addition to TSO C 129 GPS should include: Pseudorange step detection and health word checking » An equipment compliant with TSO C 129a already includes these two additional functions Overview of BRNAV criteria Operational criteria for use of GPS Standalone equipment Flight crew should receive appropriate training and be aware of: Normal procedures 每 RAIM availability should be confirm in case of degraded GPS constellation (i.e less than 23 satellites) 每 Nav data base validity (when installed) should be checked 每 Traditional navigation equipment tuned for cross-check or in case of loss of GPS capability Abnormal procedures in case of loss of GPS navigation capability 每 Loss of the integrity function (RAIM unavailable) 每 Exceedance of the alarm limit (RAIM position Error), revert to an alternate means of navigation Overview of BRNAV certification criteria BRNAV Certification issues Low integration at cockpit level (stand-alone installation) RNAV system HMI (CDU complexity, colour, associated crew workload,#) Autopilot coupling problem which may induce erroneous guidance (compatibility pb between PA and RNAV system) RNAV system functional problem for other operational use (SID, STAR, approaches): Nav data base problem, flight plan construction, . 10-11-12-13 September 2002-Morocco ARAB INSTRUMENT PROCEDURE DESIGN SEMINAR 30 PRNAV Overview of PRNAV certification criteria CONTENT Generality Accuracy Availability and Integrity Required functions for PRNAV Recommended functions for PRNAV Sensor limitation Navigation data base integrity Operational criteria PRNAV issues Overview of PRNAV certification criteria Generality Reference material is JAA Leaflet 10 Lot of discussion during development of this leaflet, more than 500 comments received Takes into account problems encountered during BRNAV certification process It accommodates many RNAV system already fitted onboard transport aeroplane category PRNAV is sometimes called RNP 1 which may be misleading in certain cases. Overview of PRNAV certification criteria Generality/ System description Lateral navigation 每 Flight plan and navigation data base 每 PRNAV candidate sensors: DME/DME, VOR/DME, GNSS and INS with automatic radio updating 每 Display of navigation parameters and desired path Vertical navigation 每 No requirement in this leaflet Overview of PRNAV certification criteria Accuracy Lateral track keeping accuracy of 1NM for 95% of the flight time including : 每 Navigation system error (path definition error, position estimation error and display error) 每 Flight technical error Accuracy definition of RNP-1 RNAV 1 NM 1 NM 95% 95% FTE NSE TSE Path definition error Desired path Defined path Estimated position Actual position Overview of PRNAV certification criteria Integrity Probability of displaying Hazardously Misleading navigational or positional information simultaneously to both pilot shall be improbable (occurrence less than 10-5 per flight hour) This is a clear alleviation of existing rule due to: 每 mitigation means based on current Air traffic Services practises 每 PAN-OPS and PAN-RAC criteria account for and accommodate this system integrity in current airspace Overview of PRNAV certification criteria Continuity of Function Probability of loss of all navigation information should be improbable ( occurrence less than 10-5 per flight hour). At least one PRNAV system is required if traditional navigation system(VOR,DME,..) are fitted Air traffic Services may imposed dual PRNAV equipage (i.e. procedure below Minimum obstacle clearance altitude, radar coverage inadequate,#) Overview of PRNAV certification criteria Required functions for PRNAV (1/2) Display indicator with course selector automatically slaved to the RNAV computed path Navigation data base (including complete PRNAV procedure) Display of the active navigation sensor type Display of the active (TO) waypoint Display of distance and bearing to the active (TO) waypoint Display of ground speed or time to the active (TO) waypoint Automatic tuning of VOR and DME navigation aids with capability to inhibit individual navaids(When relevant) Capability for the « Direct To » function Overview of PRNAV certification criteria Required functions for PRNAV (2/2) Capability to execute transition database procedures (Fly-over and Fly-by turns) Capability to execute leg transitions and maintain tracks consistent with the following path terminators: 每 Initial Fix (I.F); Track between two Fixes (T.F); Course to a Fix (C.F), Course from a Fix to an altitude (F.A) and Direct to a Fix (D.F) Appropriate failure indication of the PRNAV system, including sensors Display of the active navigation sensor type with a means of determining navigation system performance Basic PRNAV function : Today's existing FMS lateral navigation function installed on many transport airplane category. Overview of PRNAV certification criteria Recommended functions for PRNAV Capability to fly parallel route (Offset function) Coupling to Flight director and/or automatic pilot Capability for vertical navigation based upon barometric inputs Means for automatic runway position update at the start of the take-off (RNAV system using DME/DME updating supported by IRS) Capability to execute following leg transitions: 每 Holding pattern (Hx including HM, HA et HF) 每 Constant radius to a Fix (RF) Overview of PRNAV certification criteria Required and recommended functions for PRNAV (example) TO ACT RTE1 LEGS 270∼ 3.2 Nm TOU 300-320 306∼ 23 Nm AGN FL 350 227∼ 46 Nm TBO THEN ••••• ----ROUTE DISCONTINUITY--- LFBO LEGS ETA FLAG ADI HSI 90 ∼ 180∼ 270∼ 00∼ 306∼ Multipurpose Control Display Unit (i.e MCDU) Overview of PRNAV certification criteria Sensor Limitation GPS 每 Same limitation than BRNAV (i.e. step detector plus health word monitoring, ...) 每 FDE (Fault Detection and Exclusion) function is recommended for availability purposes INS 每 PRNAV use in pure INS following a failure of the radio nav update system should be limited in time. 每 Time duration in pure INS needs to be determined to continue to fulfil PRNAV requirement Overview of PRNAV certification criteria Navigation Data Base Integrity Shall comply with ED 76/DO 200A or an equivalent approved procedure. An approved supplier who has complied with ED 76 (Standards for processing Aeronautical Data) OR The operator must implement navigation data base integrity checks 每 Appropriate s/w tool or approved manual procedures 每 At least for Waypoints below applicable minimum obstacle clearance altitude Overview of PRNAV criteria Operational criteria Normal procedures 每 Pre-flight planning » availability of navigation infrastructure? » Availability of onboard navigation system (including nav data base) » Availability of dual system when AIP specify it » RAIM availability in case of GPS stand-alone system 每 Departure » Nav data base, a/c position entered, » Active flight plan should be checked (legs, fly-by,#) » user waypoints forbidden for PRNAV operation » Flight progress monitoring (navigational reasonableness, cross check, Overview of PRNAV criteria Operational criteria (Cont *d) Normal procedures 每 Arrival » Verification that correct terminal procedure is loaded and flight plan construction correct » Creation of new waypoints by manual entry is forbidden » Flight progress should be monitored » Notion of route modification in terminal area (radar heading or Dir To clearance) » Any published altitude and speed constraints must be observed Contingency procedures 每 Failure of the RNAV system components, multiple system failures 每 Loss of required navigation capability 每 Loss of PRNAV capability Overview of PRNAV certification criteria PRNAV Issues PRNAV is a transition towards RNP-1-RNAV PRNAV may be requested by some states in the near future Problem of navigation data base integrity should be addressed ATS provider/Designer should take into account alleviation of integrity criteria at aircraft level However many FMS installed on transport aircraft category fulfil airworthiness criteria defined in JAA Leaflet 10 10-11-12-13 September 2002-Morocco ARAB INSTRUMENT PROCEDURE DESIGN SEMINAR 46 BRNAV/PRNAV EXAMPLE Aircraft and BRNAV Aircraft Type Pure INS system Multisensor system INS/VOR/DME Multisensor system INS/VOR/DME with GPS Multisensor system VOR/DME with GPS Pure GPS system (standalone) AIRBUS A 319/20/21 A 330/340 YES (Basic) YES (Option) AIRBUS A 300 FFCC YES (Retrofit) BOEING B 747-400 B 757/767 YES (Basic) YES (Option) BOEING B 737-200 YES (Retrofit) YES (Retrofit) B747-100/200 DC 10 YES (Basic) YES (Retrofit) Aircraft and PRNAV Presently there is no aircraft officialy PRNAV approved Aircraft Type PRNAV multisensor system INS/ DME/DME, VOR/DME PRNAV multisensor system DME/DME, VOR/DME RNP 1 system AIRBUS A 319/20/21 A 330/340 Normally YES (Basic) GPS (option) YES (Option) BOEING B 737-400/500 Normally YES (Basic) GPS (option) YES (Option) BOEING B 747-400 B 757/767 Normally YES (Basic) GPS (option) YES (Option) BOEING/Douglas DC 10 Normally YES (Retrofit) GPS required BOEING/Douglas MD 83 Normally YES (Retrofit) GPS required 10-11-12-13 September 2002-Morocco ARAB INSTRUMENT PROCEDURE DESIGN SEMINAR 49 GENERALITY ON RNP WHAT IS RNP Definition/Generality RNP as defined in ICAO doc 9613 : A statement of the navigation performance accuracy necessary for operation within a defined airspace. RNP as defined in ICAO doc 9650 : A statement of the navigation performance accuracy, integrity, continuity and availability necessary for operation within a defined airspace. RNP from an airborne point of view is defined by the RNP-(x)-RNAV concept described in document ED 75() or DO 236(). These system fully support definition of ICAO doc 9650 (accuracy, integrity and continuity). RNP RNP-RNAV Generality RNP-(x)-RNAV airborne system: RNP Accuracy is defined as the total system error (x) 95% of the flying time. (x) is the RNP value. Containment integrity: Probability that the total system error exceeds the specified containment limit without annunciation. Shall be less than 10-5 per flight hour (99.999%). Containment limit is twice the RNP value (x). Containment continuity : Probability of annunciated loss of RNP RNAV capability shall be less than 10-4 per flight hour (99.99%). RNP RNP-RNAV Generality Accuracy Accuracy Integrity Integrity 99.999% 95% 95% 99.999% Desired route 2 x RNP 2 x RNP 1 x RNP 1 x RNP