A380 Integrated Modular Avionics

Transcription

ARTIST2 – IMA & ADCN
Presented by
Jean-Bernard ITIER
STP Manager IMAP
A380 Integrated Modular Avionics
The history, objectives and challenges of the deployment of IMA on A380
ARTIST2 - Integrated Modular Avionics A380
Presentation Topics and Scope
• To explain what IMA is and its background
• To explain how IMA has been deployed on the A380
ADCN
Modules
© AIRBUS UK LTD. All rights reserved. Confidential and proprietary document.
• The Future of IMA
Page 2
Why IMA?
• Since the A300
Increasing
number of software controlled systems
– New functionality for performance
• Flight management systems
• Fuel management systems
– New functionality for improved safety
• Flight envelope protection
• Ground proximity warning
• Traffic collision avoidance
– New functionality for improved maintenance
• Aircraft condition monitoring
– New functionality for improved passenger comfort
• Cabin environment control
Page 3
Why IMA?
• The Indirect Consequences
Every
system = 1 or more computers / controllers
Every aircraft type = new computers
Every computer =
– Airframer development and management costs
•
•
•
•
•
•
Part number costs
Documentation
More wires
More power
More sources of unreliability
Increased obsolescence risk
– Airline impact
• Spares
• Tooling
• Increased fault finding
Page 4
Why IMA? – Traditional LRU
• This implies that quantities of maintenance spares be
stored for each fleet at different places.
• During the aircraft life cycle, the cost of modifications,
including parts obsolescence mitigation and functional
upgrades, becomes even more significant for the airlines.
Page 5
Why IMA? – Traditional LRU
• Each computer type is
uniquely designed for
the system and aircraft
Application
software
e.g. fuel control
Hardware PCBs
Operating System
• Manufactured by
system supplier
• Dedicated wiring for
Digital and single wire control
Information to other computers
each connection
• 100s km cabling per
aircraft
Page 6
Why IMA?
Historical background for the emergence of IMA
(arbitrary log scale)
A340
-600
105
A330
104
A380
with
IMA
Concorde
101
A300B
A310
102
Number of
electronic
equipment
100
A320
103
A380
Functionality
80
60
40
20
1970
1975 1980 1985
1990
1995
2000 2005
Page 7
Why IMA?
• The response
Integrated
Modular Avionics
– Concept
– Not a specific set of technologies or components
Integration
=
– Multiple systems applications executed on the same computer
– Data communications integrated onto a high speed multiplexed
network
Modularity
=
– A set of standard non system specific computers
– Computers that can be configured to provide part of their
resources to a particular system application
Page 8
What is IMA?
• IMA Variations / Proprietary Solutions ?
Avionics
network
– ARINC 429
– ARINC 629
– AFDX
Avionics
computers
– Cabinet of modules, backplane, gateways
• Honeywell AIMS
– Cabinet of cards
• Honeywell Primus EPIC
– Independent modules as LRUs
• Honeywell VIA
Page 9
What is IMA?
• Cabinet of modules
• Functionality split between modules:
Power
•
•
•
•
•
Supply Modules, Gateways, Processing, IO
Inter module communications backplane
ARINC 653 Operating System
Originally ARINC 629
Single supplier …. for everything
Boeing 777
Page 10
What is IMA?
• Card File
• Semi open architecture – third party hardware
• Processing, IO and gateway cards
• Proprietary DEOS Operating System
• Proprietary backplane
• Business and Regional Jets
Embraer,
Raytheon, Dornier
Page 11
What is IMA?
• Independent Modules as “LRU”
• Derivative of AIMS – repackaging
Provides
processing, IO and PSU in one package
Page 12
What is A380 IMA?
Since
mid 80s the former Airbus partners have done research on
IMA for their systems (PACTS, IDEE3, NEVADA, PAMELA,
VICTORIA)
– With the objective to merge different system design approaches and
different procurement approaches
•
•
•
•
Closed loop control systems, data management and processing systems
Safety critical and non safety critical
Software only functions to full multi-domain systems like fuel
Complete design in house, integration of components to fully outsourced
Therefore
the IMA solution had to:
– Be suitable for different types of systems (I/O needs / Performances /
Safety )
– Be suitable for a large number of systems and their suppliers to allow
real competition
– Compartmentalised to allow parallel developments to be managed
Page 13
What is A380 IMA?
PRIM3
FCGU3BFCGU3A SEC3
SFCC1
Integrated Modular
Avionics
FM3 ADIRU3 CMV
ECB
PRIM1
SEC1 FCGU1AFCGU1B
IOM 1
SW-11
IOM 3
PRIM2
FCGU2BFCGU2A SEC2
18+2FT
18+2FT
SW-1
SFCC2
IOM 2
SW-12
IOM 4
SW-2
13+1FT
ADIRU1
SW-19
ADIRU2
SW-9
FM1
FM2
CDS
L1
EEC2
A
B
EEC4
A
B
CDS
L2
CDS
C1
CDS
L3
CDS
R2
CDS
C2
CDS
R1
CDS
R3
A
B
EEC1
A
B
EEC3
SCI
CPIOM-C1
CABINET
CPIOM-C2
CPIOM-D1
SW-13
ACR 1
SW-14
SW-3
AESU 1
SW-4
AESU 2
16+2FT
IOM 5
15+2FT
IOM 7
CPIOM-F1
disp
lay
CIDS1
SDS1
18+2FT
SW-15
SW-16
SW-5
CPIOM-A2
A629
CPIOM-A3
CPIOM-A1
CPIOM-A4
CPIOM-B2
CPIOM-B1
CPIOM-B3
CPIOM-B4
CPIOM-E1
Multi-transmitter
bus network
sensors
LRUs
CPIOM-F4
CIDS1
SDS1
actuators
« Federated
architectures »
CPIOM-F2
CDAM
CPIOM-F3
display
IOM6
IOM 8
18+2FT
SW-17
SW-7
SW-6
15+2FT
CPIOM-G1
CPIOM-G2
CPIOM-G3
CPIOM-G4
OSCU
CPIOM-E2
SPDB 1
SPDB 6
SPDB 3
SPDB 8
SEPDC1
SEPDC2
SPDB 5
SPDB 2
SPDB 7
SPDB 4
DSMS
LRU
sensors
MODULE
AFDX NETWORK
actuators
LRU « black box »
CONCEPTS & TECHNOLOGIES EVOLUTIONS
Page 14
What is A380 IMA? - Airbus Concept
• IMA shared resources are:
the
avionics communications network: the solution selected is AFDX
(Avionics Full Duplex Ethernet), fully compatible with Ethernet network
of Open World and based on common switch modules
Modules, i.e. Core Processing & Input / Output Modules or CPIOM,
Input/ Output Modules or IOM, ,...) for hosting of several applications
and signal acquisition/transmission
Other
systems
or equip t
A429,
discretes ,
analog
CPIOM
SW
SW
applic
applic
O/S
IOM
IOM
Other
systems
or equip t
AFDX network
28VDC network (Norm / Ess )
Page 15
What is A380 IMA? Airbus Concept
• The AIRBUS IMA concept is based on “shared Modules”. A modulefocused approached has been preferred compared with the previous
concept of “Cabinet”. Its key features are:
ARINC 600 IMA Module packaging connected to AFDX network
Robust partitioning in computing resource & communications
Determinism of application execution & data exchanges
Standardised Application Programming Interface (API) to avoid
obsolescence impacts on applications
Conventional equipment’s mixable
• Resource sharing has a direct impact on the way to design and
implement systems since it creates new dependencies between them,
both from a technical and a process point of view.
• This concept has been selected as the baseline for systems design on
Cockpit, Utility, Energy and Cabin domains and extended globally on
all the domains.
Page 16
What is A380 IMA? - ADCN Network & Topology
FCSC1
COM
SFCC1
COM
Flight COMFCGC2
MON
Control
FCGC3
FCSC3 TBC
COM
MON
MON
COM
IOM
EEC1 A
Engines
ADIRU3
A
FW1
FCDC1
AESU1
Fuel
LG,TP&BS COM MON
MON
Fuel&LG
S_3
_1
IRDC
VSC
SPDB
PWCU
ADIRU2
B EEC3
A
ATC2
ACR2 opt
A EEC4
B
CDAM
Energy
ECB
CIDS
DSMC1&2
CPIOM-A-1&2CPIOM-B-1&2
SCI
IOM
Fuel
COM
ext lights
ctrl
MON
IPCU
MON
IRDC
PESC
Cabin
LG,TP&BS
COM
S_3
_2
CIDS
IPCU
S_4
_1
ELM
CBM
HSM SB24
AIC?
S_4
_2
SPDB
DSMC3
CPIOM-A-3&4 CPIOM-B3&4
• Redundant Network (A&B)
with independent
alimentation
• AFDX switches = 2 x 8
FW2
FCDC2
AESU2
S_2
_2
ELM
CBM
SB24 HSM
AIC?
SCI
MON
IOM
R2 R1
L3 C2 R3
ATC1
AFDX Network:
• 100 Mbits
FM3
S_2
_1
IOM
SFCC2
MON
FM2
C1
L1 L2
ACR1
MON
COM
S_1
SW13
_3
Cockpit
EEC2 B
COM
COM
S_1
_2
FM1
B
COM
MON
S_1
_1
ADIRU1
FCSC2
FCGC1
MON
• NB of ports (connections)
possible on each switch (2024)
• MTBF of the switch is very
high (100 000 hours
expected)
• Up 80 AFDX subscriber
Page 17
AFDX - Generality
• Freedom of choice for data format (harmonized at aircraft level)
• Integration of LRU, IOM (Input Output Module) & CPIOM (Core Processing
Input Output Module)
• Technology based on COTS standards
LRU
Appli
B
1 partition
Appli
B
partition 1
E/S
IOM
CPIOM
Switching
table defined through
configuration
Appli
C
partition 2
LRU
Appli
D
partition 3
E/S
E/S
E/S
ADCN
•ARINC 600: 2 MCU
Traffic
policing (enforcement of
allocated bandwidth)
QUADRAX Connectors
Page 18
AFDX technology – Addressing : MAC,IP,UDP
Appli
B
Appli
A
1 partition
1
1
8
2
9
1
3
10
2
4
11
5
12
6
13
7
14
1 partition
E/S
2
E/S
Appli
C
Appli D Appli E
partition 1
partition 2
(RAM ; CPU)
(RAM ; CPU)
1
2
E/S
• Avionics communications are based on multicast:
one
transmitter
one or several receivers
• Asynchrony individual clocks
• NO reconfiguration capability in the AFDX network
Alt = 10 000 ft
UDP SRC / UDP DEST IP SRC / IP DEST MAC SRC / MAC DEST
Page 19
AFDX: Performances
• Does AFDX sustain expected real time performance:
Yes:
real time performances were really challenging, both on the
ES and the switch (ES wire speed reception ie 200 Mbits/s ; switch
wire speed switching, with only bottleneck on output buffer).
• Packet loss percentage:
0
% in the switch by definition (a configuration where the switch
cannot guarantee that no frames are lost is not “schedulable” and
thus not produced)
Nevertheless frame may be lost due to
– Bit error rate (target 10-8)
– Failures
Page 20
What is A380 IMA ? - AFDX Network use
• Switches Configuration process:
System Team
NCD : VL & Paths
Data base
Confcheck → determinism OK
Confgen → Create configuration
Loads
Switches Datalaoding
Page 21
What is A380 IMA?
• Impact on the system development process = Risks
At
the component level:
– IMA developed before system > requirements mismatch
– Maturity of IMA components > impacts multiple systems
– Technical capability > impacts multiple systems
At
the Industrial level:
– Management > Dedicated trans-national IMA team
– Procurement >
• Arbitration process,
• Contractual resources,
• Change in supplier business model
– Development > User Groups, Hot Lines, Bi-laterals
– Certification
– Support Process > Airbus
Page 22
What is A380 IMA?
• Pre launch
Partner
activity to review available solutions and proposals
– Many suppliers example Smiths, Honeywell, Rockwell Collins, Thales, Diehl,
BAe Systems
– Front runner - Cabinet / rack + ARINC 629
• Joint launch team to define the avionics solution
Architecture,
scope, key technologies, supplier pre-selection
AFDX as the network
– ARINC 629 future growth, cost ?
IMA
–
–
–
–
–
computers as dedicated LRUs – The “Open Architecture” solution
Multiple system suppliers
Scalable
Multiple IMA suppliers including Airbus make policy for key technology
System suppliers able to develop and integrate separately
Minimise the management and co-ordination activities to be performed by
Airbus – focus on systems
Page 23
What is A380 IMA? - IMA integration perimeter
Energy
Function on A380
Electrical Load Management,
Circuit Breaker Monitoring,
ATA 24 BITE
Cockpit
Flight Warning,
FCU Back-Up,
Weight & Balance Back-Up Computation
Flight Control Data Concentrator
Air Traffic Communication
Cabin
Bleed,
Overheat Detection,
Supplemental Cooling
Cabin Pressure & Ventilation Control,
Air Conditioning
Utility
Fuel Measurement &
Management
Braking,
Steering,
Extension/Retraction,
Others (Tyre pressure,
etc.)
Page 24
IMA – Modules
• 8 different part numbers / 30 modules of
CPIOM per chipset developed by 2 suppliers
AIRBUS (EYY):
Thales Avionics, associated with Diehl
Avionik System:
•They host 21 avionics functions developed by
10 suppliers
•1 single part number of IOM called “IOM-A”
•All modules are ARINC600, 3 MCU box, around
4.2 kg, with 50 000 hours MTBF objectives
Page 25
What is A380 IMA ?
• What makes IMA different ?
Standardised
ARINC
Software Environment
653 Operating System
– Application software is independent from the hardware
•
•
•
•
Like Windows
No direct access to I/O
Internal process control services
Health Monitoring services
– Enables Obsolescence protection for system software
• Software – largest NRC element of systems
• Production life = 20 years, Aircraft life = 50 years
Page 26
AIRBUS API
A 653 Operating System
Instrumentation
Dataload A615A
SNMP-MIB
Drivers
IO SW
BASIC SOFTWARE
CPU MPC755
RAM
NVM
PCI
USB
Interface
DSI / DSO
CPU Board
DSP
TMS320C33
+ internal
Ram
Partitioning
Control
Intra LRM Communication
Flash
RessourceBITE
AIRBUS API + Extensions
Boot
Power
Supply
Module Managt
UTIL. - NVM Managt
PARTITION
AVIONIC
PARTITION
AVIONIC
What is A380 IMA? - CPIOM
Interface
AUDIO
Flash
USB
DSI / DSO /DGO
AFDX
DSI/DSO
DGI
DSI / DSO
IO_DSP Board
IO_Ext Board
Page 27
What is A380 IMA ?
• What makes IMA different?
Partitioning
– The performance of each system must be unaffected by any
other
• To allow systems to be developed, tested and verified separately
• To allow system faults to be contained
• To allow new systems to be added post certification
Page 28
What is A380 IMA ?
Partitioning
Application
Software1
Application
Software 2
Resources with
performances
Health
Monitors
I/O
Memory
RAM
Processor
Time
Partition environment
Health
Monitors
I/O
Memory Processor
RAM
Time
© AIRBUS UK LTD
Page 29
What is A380 IMA ?
Partitioning
– Timing
• Strict allocation to each system application –
Periodic fixed scheduling at application level
No prioritisation at application level
Application 1
Application 3
Application 1
Application 3
Application 2
Time
12.5 ms
25 ms
5 ms
© AIRBUS UK LTD
15 ms
Page 30
What is A380 IMA ?
Partitioning
– Timing
Application 1
Application 3
Application 1
Application 3
Application 2
Time
12.5 ms
25 ms
5 ms
© AIRBUS UK LTD
15 ms
Page 31
What is A380 IMA ?
Partitioning
– Timing
• Overruns are prevented
Application 1
Application 3
Application 1
Application 3
Application 2
partition is suspended
Time
12.5 ms
25 ms
5 ms
© AIRBUS UK LTD
15 ms
Page 32
What is A380 IMA ?
Partitioning
– Memory
• Segregated allocation to each application
• Configuration is linked to design I.e. application accesses only the memory
configured for it
• Violations detected and prevented by MMU
Application
Software 1
MMU
Module
Configuration
© AIRBUS UK LTD
Page 33
What is A380 IMA ?
Partitioning
Application
Software 1
– I/O
Write sampling port( xx, value)
• Segregated allocation to
each system application
• Some shared input data
e.g. ARINC 429
• All access is through OS
calls
Application
Software 2
CPIOM GLOBAL
CONFIGURATION
TABLE
Discretes
ARINC 653 Operating System
xx = A429
ARINC 429
AFDX
© AIRBUS UK LTD
Page 34
What is A380 IMA ?
• Partitioning enables:
System
independence
– Systems of different DAL(A,B,C) level can be developed at their
DAL level
– Systems can be integrated and tested to separately
Incremental
Qualification
– Modifications to one application have no effect on other
applications
• Qualification activities following a modification are limited
• Configuration Parameters Partitioning and Configuration
IMA
must be configurable
– Resources – Time, Memory and I/O
– Implemented with Configuration Tables - loadable
Two
groups of tables:
– Tables managed by Airbus – have a global effect
– Tables managed by the Function Supplier – only have a local partition
Page 35
What is A380 IMA?
Qualification
of the module within a usage domain represented by
the set of configuration parameter ranges
Usage Domain
– Represents guarantees on
• Functionality
• Performance – e.g. service call times
– For the range of configurations the module can be used in
Page 36
What is A380 IMA ? - IMA Modules Qualification
• Qualification and system certification are major parts of IMA
The
objective of the qualification approach is to give System
Suppliers “credit” to be used as part of their system certification
Based on credit
– The function / system supplier takes “credit” from the qualification
activities of Module Manager and Module Supplier
– Does not have to prove functionality, performance and behaviour of the
module.
System
Supplier
Certification
Configuration
Qualification
Module Qualification
Page 37
What is A380 IMA?
• New Industrial Roles - the biggest change with IMA
Introduce
a new role in system development
– IMA Manager
• Control the use of module resources
Provides resources against user system requirements
Maintain spares margins
Support the prediction and verification of resources
• Provide resource configuration tables
Develop configuration tables
• Perform confidence testing on the Integrated Module
• Perform qualification activities for the module configuration
Page 38
What is A380 IMA ? - Avionics Functions
• Integration:
integration
tests are performed
– on HBOSS
– again on HBOSS with instrumented code for structural
coverage analysis
– then on TBOSS for target compatibility verification and for
providing certification evidences
Additional
unit tests may be identified to achieve all
coverage objectives
The whole process is automated to ease non-regression
testing between HBOSS and TBOSS
HBOSS
TBOSS
BIL
Software testing on
host stations
Software testing on
representative target
Function Verification
on Real Module
Page 39
The future
The future of IMA
• A380 IMA reused on A400M/A350 :
Mature
avionics hardware available immediately
NRCs, risks minimised
• Next Aircraft – IMA2G:
Extend
the scope of IMA
– Flight controls, Open world
Increase
the flexibility of IMA – “Generic Secure Platform”
– Optimise the IMA architecture
• Decentralised I/O / Smart sensors
• Reconfiguration
– Enable more systems to be integrated within IMA
• High Critical to Low Critical
– Enable greater levels of integration on single IMA units
Page 41
The future of IMA
• Change in technologies:
AFDX
:
– greater bandwidth solutions,
– low cost solutions
– greater integration
– All protocols supported
IMA
– Cabinet, Card File ? all have advantages
– Faster processors – Multi-processor – inevitable
– New OS – possibly, parallel for Open World
– New Fields buses technologies ?
Tools
•
•
•
•
•
- greater integration & Industrialisation
Platform Architecture definition
Avionics configuration
Application development, validation and verification
Fast ramp up – Technologies choice for Resources industrialisation
Fast FAL Integration – Auto test
Page 42
The future of IMA
Historical background for the emergence of IMA
(arbitrary log scale)
A340
-600
105
A330
104
100
A320
103
A380
with
IMA
Concorde
101
1970
A300B
A310
102
Number of
electronic
equipment
A380
Functionality
60
40
Future
A/C
1975 1980 1985
80
1990
1995
20
2000 2005
Page 43
Thank you for your attention
Page 44
© AIRBUS S.A.S. All rights reserved. Confidential and
proprietary document.
This document and all information contained herein is the sole
property of AIRBUS S.A.S.. No intellectual property rights are
granted by the delivery of this document or the disclosure of
its content. This document shall not be reproduced or
disclosed to a third party without the express written consent
of AIRBUS S.A.S. This document and its content shall not be
used for any purpose other than that for which it is supplied.
The statements made herein do not constitute an offer. They
are based on the mentioned assumptions and are expressed
in good faith. Where the supporting grounds for these
statements are not shown, AIRBUS S.A.S. will be pleased to
explain the basis thereof.
AIRBUS, its logo, A300, A310, A318, A319, A320, A321,
A330, A340, A350, A380, A400M are registered trademarks.
Page 45

A380 Integrated Modular Avionics

Transcription

Similar documents

IMA2G

Refurbishing a Beaver or Turbo-Beaver?

IMA - MODAPTS.org

IMA January 2012.indd - Long Island Chapter of the Institute of

AVS24 2.4 GHZ Wireless Audio/Video Sender

March 2011