3 Ekman Saab
3 Ekman Saab
3 Ekman Saab
Mats Ekman
101104
KTH, INCOSE
Saab Aeronautics
Federated Architectures
Swedish approach, Integrated Federated
IMA, Integrated Modular Avionics
DIMA, Distributed IMA
Design Process
Requirements
Design Constraints
Design Flow
Federated Architectures
Saab 37 Viggen
Sweden
Multi-role
Span: 10.6 m
Length: 16.3 m
Engine: P&W JT8D-22
SFA RM8A / 6700kp/
11800 w Afterburner
Max speed: Mach 2.0+
Max alt: 18000 m
Armament 2 x 30 mm guns, missiles
or 16 x 120 kg bombs
Number: 287 (all versions)
In service: 1971
JA 37 Elektroniksystem
Saab 39 Gripen
Saab 39 Gripen
Sweden
Multi-role supersonic combat aircraft
Span: 8.4 m
Length: 14.1 m
Engine: Volvo Aero Corporation RM12
Max speed: Supersonic at all altitudes
Range: 800 km
Number: 200+
In service: 1997
ACS execution strategy
The main application function characteristics of the Aircraft Computer System are:
The first case is the most demanding as to computer resource and has thus set the
total execution strategy, periodic sampling. Periodic sampling is required with a
complete spectrum of sampling frequencies (bandwidths) from 60 Hz to background
execution.
Key strategies:
Periodic execution with consecutively halved (harmonic) process frequencies (60, 30,
15 Hz) and a low priority background process.
Process priorities (monotonically) rising with frequency (Harmonic Rate Monotonic
Scheduling).
For each sub function the lowest sufficient execution frequency is selected.
Data bus traffic and data processing are arranged non-overlapping for corresponding
frequency.
Execution architecture GRIPEN
Synchronization between subsystems. Data Delay.
Text hide
PRIMARY SENSOR
SYSTEMS COMPUTER
Display Computer
COMMON TIME
Swedish approach, Integrated Federated
Synchronized system
Simplified information sharing and data fusion
High resource utilization of computing resources
Small and deterministic delays
Data integrity requires attention
Sensitive to singel faults
Changes are not contained
One level of criticality
Special purpose h/w and s/w
Long development cycles
IMA Goals
(Defined by University of York)
Technology Transparency
The underlying hardware should not have any impact on an
application either during development nor execution
Scheduled Maintenance
The system should have in built capability to operate in the presence
of failures so that Maintenance Free Operating Periods (MFOPS) can
be achieved
Incremental update
The system should be designed such that applications can be
inserted/altered with minimum impact on other applications and on
the supporting safety case
Features of IMA
(Defined by University of York)
Layered architecture
Reconfiguration of applications on the module
Protection mechanisms (Partitioning)
Flexible scheduling to meet the deadlines of all the
applications, for each viable configuration and when
system is upgraded
Code reuse and portability
An operating system to manage the applications
Physical integration of networks, modules and I/O devices
Designed for growth and change
Integrated Modular Avionics, IMA
Civil aviation:
Several partions (functions) in same CPU, mixed criticallity
P2
Time separation
Memory separation
60 Hz
time
P2 P1 P2 P1 P2
ARINC 653
Partition Management
Process Management
Time Management
Memory Management
Interpartition Communication
Intrapartition Communication
Health Monitoring
ARINC-661 Intelligent Display
Fx
HMI
661-data
Level D
Fy
HMI
Level A
IMA 1G
Military alternative
ASAAC (Allied Standard Avionics Architecture Council)
Applications
Resources
Blueprints
EU project SCARLETT Partners
THALES AVIONICS SAGEM DEFENSE SECURITE
ARTTIC SKYSOFT PORTUGAL, SOFTWARE E TECNOLOGIAS DE INFORMAO S.A.
AIRBUS FRANCE SYDERAL SA
AIRBUS DEUTSCHLAND GMBH THALES AVIONICS ELECTRICAL SYSTEMS SA
TTTECH COMPUTERTECHNIK AG
AIRBUS UK
UNIS
DIEHL AEROSPACE UNIVERSITY OF BREMEN E (TZI)
GE Aviation Systems TECHNICAL UNIVERSITY HAMBURG-HARBURG
ACQ INDUCOM RZESZOW UNIVERSITY OF TECHNOLOGY
ALENIA AERONAUTICA S.P.A. YAMAR ELECTRONICS LTD.
TELETEL TELECOMMUNICATIONS & INFORMATION TECHNOLOGY SA
ARION.FR UNIVERSITY OF NOTTINGHAM
BARCO N.V. THALES RESEARCH & TECHNOLOGY
DASSAULT AVIATION AOA APPARATEBAU GAUTING GMBH
EADS GERMANY INNOVATION WORKS GMBH UNIVERSITY OF BRISTOL, SAFETY SYSTEMS RESEARCH CENTRE
Airbus Operations SAS
SELEX GALILEO S.P.A.
FEDERAL STATE UNITARY ENTERPRISE STATE
RESEARCH INSTITUTE OF AVIATION SYSTEMS
HELLENIC AEROSPACE INDUSTRY SA
INSTITUTO DE SOLDADURA E QUALIDADE
MESSIER BUGATTI
NATUREN LTD.
NATIONAL AEROSPACE LABORATORY (NLR)
SYSGO AG
OFFICE NATIONAL DETUDES ET DE
RECHERCHES AEROSPATIALES
QINETIQ
SAAB AB
IMA 2G, EU project SCARLETT
System oriented
DMEs (Distributed Module Electronics)
CPM, RDC, RPC, REU
Advanced processes and tools for application development
and application integration into system
Common DME supporting wide range of avionic
applications
Common DME supporting wide range of aircraft types
Fault tolerance and reconfiguration involves several DMEs
More independece application/hardware by thicker
middleware layer
High Level Requirements
The Customer High Level Requirements may consist of
Concept of Operations
Operational Requirements
Functional Requirements
Safety Requirements
Reliability Requirements
Design Constraints
The design of the avionic system is influenced by e.g.:
System Safety
System Availability, fault tolerance, HW redundancy, FM, BIT
Environmental conditions, Temperature/Vibrations/Accelerations
Limitations in equipment, Weight/Volume/Power/Cooling/Connectors
Number of Units to be manufactured
Use of COTS equipment
The length of time the system shall be operational
Growth Potential
Available computer capacity
Flexibility, scalability
Communication needs
Time delay, end-to-end
Allowed execution time
Single pilot, multiple tasks (coordinate display and maneuver
functions, Data fusion))
System Safety Requirements
Rules of Military Aviation (Sw: RML Regler fr Militr Luftfart)
General requirements
No single catastrophic faults or occurrence
Independence between normal and back up system
Built In Test, maintenance
Robustness, safe and sound handling
Max accident rate
Design Criteria, (882C)
Implementation modelling
Display modelling
New issues with IMA
Time management
Strict allocation of time to partitions
Load balancing, Late binding
The S/W applications and their interfaces must be chosen
carefully in order to reduce the system complexity,
latencies and minimize data couplings.
Co-Location of applications into Partitions, Redundancy
separation
Partition restart vs Computer restart
Incremental Verification