11/21/2013 Appendix D Appendix D Related Documents And How To Get Them.
1. Copies of 14 CFR parts are available from the Superintendent of Documents, Government Printing Office, P.O. Box 979050, St. Louis MO 63197. Telephone (202) 512-1800, fax (202) 512-2250. You can also order copics online at www.access.gpo.gov. Select "Online Bookstore." Then select "Code of Federal Regulations."
2. The following ACs are available from the FAA website at http://www.faa.gov/regulations_policies/advisory_circulars/.
1) AC 20-88, Guidelines on the Marking of Aircraft Powerplant Instruments (Displays).
2) AC 20-115, RTCA. Inc. Document RTCA/DO-178B.
3) AC 20-136А, Protection of Aircraft Electrical/Electronic Systems Against the Indirect Effects of Lightning.
4) AC 20-148, Reusable Software Components.
5) AC 20-152, RTCA. Inc. Document RTCA/DO-254. Design Assurance Guidance for Airborne Electronic Hardware.
6) AC 20-156, Aviation Databus Assurance.
7) AC 20-158, The Certification of Aircraft Electrical and Electronic Systems for Operation in the High-Intensity Radiated Fields (IRF) Environment.
8) AC 20-174. Development of Civil Aircraft and Systems.
9) AC 21-16. RTCA. Inc. Document RTCA/DO-160F.
10) AC 23.1309-1, System Safery Analysis and Assessment for Part 23 Airplanes.
11) AC 23.1311-1B, Installation of Electronic Displays in Part 23 Airplanes.
12) AC 25-11A. Electronic Flight Deck Displays.
13) AC 25.1309-1. System Design and Analysis.
15) AC 25.1701-1, Certification of Electrical Wiring Interconnection Systems on Transport Category Airplanes.
15) AC 27-1, Certification of Normal Category Rotorcrafi.
16) AC 29-2. Certification of Transport Category Rotorcraft.
D-1
11/21/2013 Appendix D
17) AC 33.28-1, Compliance Criteria For 14 C'FR § 33.28, Aircraft Engines, Electrical And Electronic Engine Control Systems.
18) AC 33.28-2, Guidance Material For 14 CFR § 33.28. Reciprocating Engines, Electrical and Electronic Engine Control Systems.
19) AC 33.75-1, Guidance Material for 14 CFR 33.75, Safety Analysis.
20) AC 120-64. Operational Use and Modification of Electronic Checklists.
21) AC 120-76A, Guidelines for the Certification, Airworthiness, and Operational Approval of Electronic Flight Bag Computing Devices.
3. The following FAA policy statements are available from the FAA website at http://www.faa.gov/regulations_policies.
1) FAA Policy Memo ANM-01-03. Factors to Consider When Reviewing an Applicant's Proposed Human Factors Methods of Compliance for Flight Deck Certification.
2) FAA Policy Memo ANM-99-2, Guidance for Reviewing Certification Plans to Address Human Factors for Certification of Transport Airplane Flight Decks.
3) FAA Policy Memo PS-ACE100-2001-004, Guidance for Reviewing Certification Plans to Address Human Factors for Certification of Part 23 Airplanes.
4. Order RTCA documents from RTCA. Inc., 1150 18th Street NW, Suite 910, Washington, D.C. 20036. You can also order copies online at www.rtca.org. We referenced the following RICA documents:
1) RTCA/DO-160F. Environmental Conditions and Test Procedures for Airborne Equipment.
2) RTCA/DO-178B, Software Considerations in Airborne Systems and Equipment Certification.
3) RTCA/DO-254. Design Assurance Guidance for Airborne Electronic Hardware.
4) RTCA/DO-257A, Minimum Performance Standards for the Depiction of Navigational Information on Electronic Maps.
5) RTCA/DO-297. Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations.
D-2
11/21/2013 Appendix D
5. Order SAE documents from SAE International, 400 Commonwcalth Drive, Warrendale, PA 15096-0001. You can also order copies on-line at www.sae.org. We referenced the following SAE documents:
1) ARP4754 Rev A. Guidelines for Development of Civil Aircraft and Systems.
2) ARP4761, Guidelines and Methods for Conducting the Safety Assessment Process on Civil Airborne Systems and Equipment.
D-3
10/20/10 Appendix E Appendix E Glossary Acceptance FAA acknowledgement that the module, application, or system meets defined requirements.
Aircraft function Capability of the aircraft provided by the hardware and software of the systems on the aircraft.
Airworthiness Condition of an item (aircraft, aircraft system, or part) in which that item operates in a safe manner to accomplish its intended function.
Applicant Person or organization seeking approval from the FAA.
Application Software and/or application-specific hardware with a defined set of interfaces that, when integrated with a platform(s), performs a function.
Application-specific Hardware dedicated to one application.
hardware Approval Act or instance of giving formal or official acknowledgement of compliance with regulations.
Assumptions Statements, principles, and/or premises offered without proof.
Assurance Planned and systematic actions necessary to provide adequate confidence and evidence that a product or process satisfies given requirements.
Authority Organization or person responsible within the state (country) concerned with applicable requirements. Aircraft, engine, or propeller type certification or equipment approval is normally handled by the certification authority. Matters concerning continuing airworthiness might be handled by (what's referred to as) the airworthiness authority.
Baseline Approved, recorded configuration of one or more configuration items, that serves as the basis for further development. Baseline is changed only through change control procedures.
E-1
10/20/10 Appendix E Cabinet Physical package containing one or more IMA components or modules.
Provides partial protection from environmental effects (shielding).
May enable installation and removal of those component(s) or module(s) from the aircraft without physically altering other aircraft systems or equipment.
Certification Legal recognition by the FAA that a product, service, organization, or person complies with the requirements. Certification comprises the activity of technically checking the product, service, organization, or person and the formal recognition of compliance with the applicable requirements by issuing a certificate, license, approval, or other documents as required by national laws and procedures. In particular, product certification involves: (a) assessing the product design to ensure that it complies with standards applying to that type of product to demonstrate an acceptable level of safety, (b) assessing an individual product to ensure that it conforms with the certified type design, and (c) issuing a certificate required by national laws to declare that compliance or conformity was found with standards according to items
(a) or (b) above.
Certification credit Acceptance by the FAA that a process, product, or demonstration satisfies a certification requirement.
Closed architecture System whose technical specifications are not made public. Such systems restrict third parties from building products that interface with or add enhancements to them.
Complexity Attribute of systems or items that makes their design and/or operation difficult to comprehend.
Complex electronic A subset of a complex hardware item; a custom micro-coded hardware component that is not considered to be simple. (See "simple electronic hardware.") Complex hardware Any hardware item not considered to be simple. (See "simple item hardware item.") Compliance Successful performance of all mandatory activities; agreement between the expected or specified result, and the actual result.
Component Self-contained hardware or software part, database, or combination thereof that is configuration controlled.
Computer Device or group of devices that performs a data processing function.
Configuration control See "change control."
Configuration Process of designating the configuration items in a system and identification recording their characteristics.
E-2
10/20/10 Appendix E Configuration index Approved documentation that defines a configuration item.
Configuration item 1) One or more hardware or software components treated as a unit for configuration management purposes.
2) Software life cycle data treated as a unit for configuration management purposes.
Configuration Discipline applying technical and administrative direction and management surveillance to (a) identify and record the functional and physical characteristics of a configuration item, (b) control changes to those characteristics, and (c) record and report change control processing and implementation status.
Criticality Indication of the hazard level of a function, hardware, software, (and so forth), addressing abnormal behavior of this item alone, or with external events.
Custom micro-coded Component that includes application specific integrated circuits component (ASIC), programmable logic devices (PLD), field programmable gate arrays (FPGA) and other similar electronic components used in the design of aircraft systems and equipment.
Domain Grouping items into areas that share a common interest or characteristics.
Feature (of an article An aircraft or engine function that is not identified in a functional TSO authorized by TSO) minimum performance specification. However, that feature is related to the functionality provided by a function provided by an article authorized by a functional TSO. The feature is also smaller than a complete function (see "non-TSO function), such that the feature can be included in the article authorized by the functional TSO, even though the functional TSO MPS does not specifically mention that functionality. Features are not approved by the functional TSO authorization. They should be approved during the aircraft or engine certification program.
Federated system Aircraft equipment architecture consisting of primarily line replaceable units that perform a specific function, connected by dedicated interfaces or aircraft system data buses.
Function Named capability that performs a specific task.
Functional software Software applications that will be approved as part of a functional TSO authorization or as part of a type certification effort. Sometimes called operational software, application software, or flight software.
Functional TSO TSO with a defined function. Examples of functional TSOs are in appendix G of this AC. TSO-C153 is not a functional TSO, because hardware elements typically do not provide system-level functionality.
E-3
10/20/10 Appendix E Functional TSO Applicant seeking functional TSO authorization.
applicant Guidelines Recommended procedures for complying with regulations.
Hardware Item with a physical being. Generally refers to line replaceable units or modules, circuit cards, power supplies and other line items.
Hardware element Element authorized to TSO-C153. A hardware element (as defined in TSO-C1 53) is (1) a hardware module, or (2) cabinets or racks that host hardware modules. A hardware element with TSO-C153 authorization is not a functional TSO authorization.
Note: This definition may differ from terms in RTCA/DO-254 and other documents.
Hardware/software Embedding the software into the target computer.
integration Integrated modular A letter, signed by the FAA, which is composed of three parts; the IMA avionics Component Component Acceptance Cover Letter, the IMA Component Acceptance Acceptance Letter Letter data sheet and the signed ACceptance Letter. The holder of a valid IMA Component Acceptance Letter may submit this letter as proof of compliance to the applicable requirements, as defined by the IMA Component Acceptance Cover Letter and IMA Component Acceptance Letter data sheet, to the FAA on a future or concurrent certification program for that IMA component.
Integrated modular Shared set of tlexible, reusable, and interoperable hardware and avionics software resources that, when integrated, form a platform that provides services. These services are designed and verified to a defined set of safety and performance requirements, to host applications performing aircraft functions.
IMA developer/system Company or organization responsible for IMA system integration. An integrator IMA system integrator may or may not also develop most of the IMA hardware or software components.
Incremental Process for obtaining credit toward approval and certification by acceptance accepting or finding that an IMA module, application, and/or offaircraft IMA system complies with specific requirements. Credit granted for individual tasks contributes to the overall certification goal.
E-4
10/20/10 Appendix E Integration Gathering a number of separate components to form a single implementation.
Maintainability Attribute of dependability in the ease of performing maintenance. In a quantified way, it is the measure of the interruption of service if a failure appears, the ease of identifying the failure, and performing the correct repair. A useful estimator associated with this measure is the MTTR, or mean time to repair.
Means of compliance Method(s) used by the applicant to satisfy the requirements in the certification basis for an aircraft, engine or propeller.
Module Component or collection of components that may be accepted by themselves or in the context of an IMA system. A module may also comprise other modules. A module may be software, hardware, or a combination of hardware and software, that provides resources to the IMA system's hosted applications.
Non-configured A generic IMA hardware component that has not been configured (such hardware component as being loaded with operational software or enabling specific hardware pin programming) which is required before the component can perform an intended function or functions when installed on an aircraft or engine.
Non-TSO function A non-TSO function:
(a) Is anything that adds a performance capability to the article that is not covered or evaluated by any TSO MPS.
(b) Does not support or must not affect the performance of the article addressed by the TSO MPS.
Note: "Characteristics" or "features" added to enhance performance, usability or integrity of the TSO article, are inherent in the design of the TSO article, and have a direct bearing on the basic TSO operation are evaluated under the TSO approval and are not non-TSO function.
Compliance with the software and hardware considerations in RTCA/DO-178 and RTCA/DO-254, when required by the TSO, provide the basis for approval of these characteristics or features of the article with respect to the RTCA/DO-178 and RTCA/DO-254 requirements. Examples might include: the capability to flip-flop the "active" and "standby" frequencies of a communication or navigation radio, facility information (such as, airport frequencies, runways, airport services available, etc.), built in test (BIT) capability on start-up, and health monitoring to name just a few. These examples are all associated with supporting the MPS of the TSO.
Open architecture Type of computer or software architecture that allows adding, upgrading and swapping components with minimal effect on the remaining system.
E-S
10/20/10 Appendix E Operating system 1) Same as executive software.
2) Software kernel that services only the underlying hardware platform.
3) Software that directs the operations of a computer, resource allocation and data management, controlling and scheduling the execution of computer hosted applications, and managing memory, storage, input/output, and communication resources.
Operational capability Function or group of functions that provides an aircraft capability visible to the flight crew or other personnel.
Partition Allocation of resources whose properties are guaranteed and protected by the platform from adverse interaction or influences from outside the partition.
Partitioning Architectural technique to provide separation and independence of functions or applications. To ensure that only intended coupling occurs.
Robust configuration Capable of performing its intended function without failure under a management wide range of conditions.
Platform Module or group of modules, including core software, that manages resources support at least one application.
Resource Any processor, memory, software, data, or object or component used by a processor, IMA platform, core software, or application. A resource may be shared by multiple applications or dedicated to a specific application. A resource may be physical (a hardware device) or logical (a piece of information).
Re-use Subsequent use of unaffected, previously approved system hardware or software assurance data.
Robust Partitioning Partitioning that provides demonstrable means of containment.
protection and enforcement of the partition boundaries.
Safety Attribute of dependability in non-occurrence of, or recovery from, failures and other conditions that could cause unacceptable, operational events of an aircraft, engine or component.
E-6
10/20/10 Appendix E Simple electronic A subset of simple hardware item; a custom micro-coded component hardware with a comprehensive combination of deterministic tests and analyses appropriate to the design assurance level. Ensures correct functional performance under all foreseeable operating conditions, with no anomalous behavior.
Simple Hardware Item Item with a comprehensive combination of deterministic tests and analyses appropriate to the design assurance level. Ensures correct functional performance under all foreseeable operating conditions, with no anomalous behavior.
Software Computer programs and, possibly, associated documentation and data of a computer system.
Software change Modification in source code, object code, executable object code, or its related documentation from its previous baseline.
Software integration Combining code components.
Software life cycle 1) An ordered collection of processes determined by an organization to produce a software product.
2) Period of time that begins with decision to produce or modify a software product and ends when product is retired from service.
Software product Set of computer programs and associated documentation and data designated for delivery to a user. In this AC, it means software intended for use in an IMA system and its associated software life cycle data.
Specification Collection of requirements which, when taken together, constitute the criteria that define the functions and attributes of a system, a component thereof, or an interface.
Standard Rule or basis of comparison that provides both guidance in and assessment of the performance of a given activity or the content of a specified data item.
Structure Specified arrangement or interrelation of parts to form a whole.
System Collection of hardware and software components organized to accomplish a specific function or set of functions.
E-7
10/20/10 Appendix E System architecture Interfaces and structure of the hardware and software selected to implement the system requirements.
System safety 1) Systematic, comprehensive evaluation of the proposed system to assessment show that relevant safety-related requirements will be satisfied.
2) A systematic, comprehensive evaluation of the implemented system to show that the relevant safety-related requirements are satisfied.
Task 1 The activity associated with showing compliance to RTCA/DO-297, subsection 4.2, for IMA modules.
Task 2 The activity associated with showing compliance to RTCA/DO-297, subsection 4.3, for IMA applications.
Task 3 The activity associated with showing compliance to RTCA/DO-297, subsection 4.4, for an IMA system.
Task 4 The activity associated with showing compliance to RTCA/DO-297, subsection 4.5, for an IMA installation into an aircraft or engine.
Technical standard Legal recognition by the FAA that a system, equipment, or part order authorization satisfies the TSO requirements and minimum performance specification, and FAA authorization to manufacture that item.
Unintended function Function visible at the aircraft level and is neither intended nor a predicted (foreseeable) fault condition in the preliminary system safety assessment.
Usage domain Declared set of characteristics for which it can be shown that:
1) Module complies with its functional, performance, and safety requirements as defined in the module requirements specification.
2) Module meets all the assertions and guarantees regarding its defined allocatable resources and capabilities.
3) Module performance is fully characterized, including fault and error handling, failure modes, and behavior during adverse environmental effects.
Validation Determining that requirements are both correct and complete. System development may use requirements and derived requirements in system validation.
Verification 1) Evaluation of a requirements implementation to determine that they were met.
2) Evaluation of process results to ensure correctness and consistency of inputs and standards provided.
E-8
10/20/10 Appendix F Appendix F Acronyms AC Advisory circular ACO Aircraft certification office AFCB Arc fault circuit breaker AFM Aircraft flight manual AFMS Aircraft flight manual supplement ARP Aerospace recommended practice ASIC Application specific integrated circuit ASTC Amended supplemental type certificate ATC Amended type certificate CCD Cursor control device CEH Complex electronic hardware CFR Code of Federal Regulations CRM Crew resource management EQT Environmental qualification test(s) EMC Electromagnetic Compatibility EWIS Electrical wiring interconnection system FAA Federal Aviation Administration FLS Field-loadable software FMS Flight management system FPGA Field programmable gate array GPS Global positioning system HIRE High intensity radiated field F-1