10/20/10 Appendix E Integration Gathering a number of separate components to form a single implementation.
Maintainability Attribute of dependability in the ease of performing maintenance. In a quantified way, it is the measure of the interruption of service if a failure appears, the ease of identifying the failure, and performing the correct repair. A useful estimator associated with this measure is the MTTR, or mean time to repair.
Means of compliance Method(s) used by the applicant to satisfy the requirements in the certification basis for an aircraft, engine or propeller.
Module Component or collection of components that may be accepted by themselves or in the context of an IMA system. A module may also comprise other modules. A module may be software, hardware, or a combination of hardware and software, that provides resources to the IMA system's hosted applications.
Non-configured A generic IMA hardware component that has not been configured (such hardware component as being loaded with operational software or enabling specific hardware pin programming) which is required before the component can perform an intended function or functions when installed on an aircraft or engine.
Non-TSO function A non-TSO function:
(a) Is anything that adds a performance capability to the article that is not covered or evaluated by any TSO MPS.
(b) Does not support or must not affect the performance of the article addressed by the TSO MPS.
Note: "Characteristics" or "features" added to enhance performance, usability or integrity of the TSO article, are inherent in the design of the TSO article, and have a direct bearing on the basic TSO operation are evaluated under the TSO approval and are not non-TSO function.
Compliance with the software and hardware considerations in RTCA/DO-178 and RTCA/DO-254, when required by the TSO, provide the basis for approval of these characteristics or features of the article with respect to the RTCA/DO-178 and RTCA/DO-254 requirements. Examples might include: the capability to flip-flop the "active" and "standby" frequencies of a communication or navigation radio, facility information (such as, airport frequencies, runways, airport services available, etc.), built in test (BIT) capability on start-up, and health monitoring to name just a few. These examples are all associated with supporting the MPS of the TSO.
Open architecture Type of computer or software architecture that allows adding, upgrading and swapping components with minimal effect on the remaining system.
E-S
10/20/10 Appendix E Operating system 1) Same as executive software.
2) Software kernel that services only the underlying hardware platform.
3) Software that directs the operations of a computer, resource allocation and data management, controlling and scheduling the execution of computer hosted applications, and managing memory, storage, input/output, and communication resources.
Operational capability Function or group of functions that provides an aircraft capability visible to the flight crew or other personnel.
Partition Allocation of resources whose properties are guaranteed and protected by the platform from adverse interaction or influences from outside the partition.
Partitioning Architectural technique to provide separation and independence of functions or applications. To ensure that only intended coupling occurs.
Robust configuration Capable of performing its intended function without failure under a management wide range of conditions.
Platform Module or group of modules, including core software, that manages resources support at least one application.
Resource Any processor, memory, software, data, or object or component used by a processor, IMA platform, core software, or application. A resource may be shared by multiple applications or dedicated to a specific application. A resource may be physical (a hardware device) or logical (a piece of information).
Re-use Subsequent use of unaffected, previously approved system hardware or software assurance data.
Robust Partitioning Partitioning that provides demonstrable means of containment.
protection and enforcement of the partition boundaries.
Safety Attribute of dependability in non-occurrence of, or recovery from, failures and other conditions that could cause unacceptable, operational events of an aircraft, engine or component.
E-6
10/20/10 Appendix E Simple electronic A subset of simple hardware item; a custom micro-coded component hardware with a comprehensive combination of deterministic tests and analyses appropriate to the design assurance level. Ensures correct functional performance under all foreseeable operating conditions, with no anomalous behavior.
Simple Hardware Item Item with a comprehensive combination of deterministic tests and analyses appropriate to the design assurance level. Ensures correct functional performance under all foreseeable operating conditions, with no anomalous behavior.
Software Computer programs and, possibly, associated documentation and data of a computer system.
Software change Modification in source code, object code, executable object code, or its related documentation from its previous baseline.
Software integration Combining code components.
Software life cycle 1) An ordered collection of processes determined by an organization to produce a software product.
2) Period of time that begins with decision to produce or modify a software product and ends when product is retired from service.
Software product Set of computer programs and associated documentation and data designated for delivery to a user. In this AC, it means software intended for use in an IMA system and its associated software life cycle data.
Specification Collection of requirements which, when taken together, constitute the criteria that define the functions and attributes of a system, a component thereof, or an interface.
Standard Rule or basis of comparison that provides both guidance in and assessment of the performance of a given activity or the content of a specified data item.
Structure Specified arrangement or interrelation of parts to form a whole.
System Collection of hardware and software components organized to accomplish a specific function or set of functions.
E-7
10/20/10 Appendix E System architecture Interfaces and structure of the hardware and software selected to implement the system requirements.
System safety 1) Systematic, comprehensive evaluation of the proposed system to assessment show that relevant safety-related requirements will be satisfied.
2) A systematic, comprehensive evaluation of the implemented system to show that the relevant safety-related requirements are satisfied.
Task 1 The activity associated with showing compliance to RTCA/DO-297, subsection 4.2, for IMA modules.
Task 2 The activity associated with showing compliance to RTCA/DO-297, subsection 4.3, for IMA applications.
Task 3 The activity associated with showing compliance to RTCA/DO-297, subsection 4.4, for an IMA system.
Task 4 The activity associated with showing compliance to RTCA/DO-297, subsection 4.5, for an IMA installation into an aircraft or engine.
Technical standard Legal recognition by the FAA that a system, equipment, or part order authorization satisfies the TSO requirements and minimum performance specification, and FAA authorization to manufacture that item.
Unintended function Function visible at the aircraft level and is neither intended nor a predicted (foreseeable) fault condition in the preliminary system safety assessment.
Usage domain Declared set of characteristics for which it can be shown that:
1) Module complies with its functional, performance, and safety requirements as defined in the module requirements specification.
2) Module meets all the assertions and guarantees regarding its defined allocatable resources and capabilities.
3) Module performance is fully characterized, including fault and error handling, failure modes, and behavior during adverse environmental effects.
Validation Determining that requirements are both correct and complete. System development may use requirements and derived requirements in system validation.
Verification 1) Evaluation of a requirements implementation to determine that they were met.
2) Evaluation of process results to ensure correctness and consistency of inputs and standards provided.
E-8
10/20/10 Appendix F Appendix F Acronyms AC Advisory circular ACO Aircraft certification office AFCB Arc fault circuit breaker AFM Aircraft flight manual AFMS Aircraft flight manual supplement ARP Aerospace recommended practice ASIC Application specific integrated circuit ASTC Amended supplemental type certificate ATC Amended type certificate CCD Cursor control device CEH Complex electronic hardware CFR Code of Federal Regulations CRM Crew resource management EQT Environmental qualification test(s) EMC Electromagnetic Compatibility EWIS Electrical wiring interconnection system FAA Federal Aviation Administration FLS Field-loadable software FMS Flight management system FPGA Field programmable gate array GPS Global positioning system HIRE High intensity radiated field F-1
10/20/10 Appendix F IMA Integrated modular avionics LODA Letters) of Technical Standard Order (TSO) Design Approval LRU Line replaceable unit MCDU Multi-function control and display unit MMEL Master minimum equipment list MPS Minimum performance standard ODA Organization Designation Authorization PLD Programmable logic device PSCP Project specific certification plan RF Radio Frequency RSC Reusable software component RTCA Formerly, the Radio Technical Commission for Aeronautics SAB SAE International. Formerly, The Society of Automotive Engineers SEH Simple electronic hardware STC Supplemental type certificate TC Type certificate TCAS Traffic alert and collision avoidance system TSO Technical standard order TSOA Technical standard order authorization F-2
10/20/10 Appendix G Appendix G Partial List of Functional TSOs Below is a partial list of the FAA TSOs that might be considered functional TSOs in IMA systems. Applicants may apply for a TSO that does not adequately cover all the functionality in the system. Or, they may apply for multiple TSOs, since no single TSO covers all functions. If applicants apply for multiple TSOs for a single system, that combination of TSOs may result in the system being considered complex or integrated, even though the individual TSOs were not.
TSO NUMBER DATE TITLE TSO-C2d 6/14/89 Airspeed Instruments (Using Electronic Sensing) TSO-C4c 4/14/89 Bank and Pitch Instruments TSO-C9c 9/15/60 Automatic Pilots TSO-C10b 9/1/59 Altimeter, Pressure Actuated, Sensitive Type TSO-C526 5/30/95 Flight Director Equipment TSO-C92c 3/19/96 Airborne Ground Proximity Warning Equipment TSO-C93 11/26/76 Airborne Interim Standard Microwave Landing System Converter Equipment TSO-C101 2/19/87 Over Speed Warning Instruments TSO-C104 6/22/82 Microwave Landing System (MLS) Airborne Receiving Equipment TSO-C105 6/13/84 Optional Display Equipment for Weather and Ground Mapping Radar Indicators TSO-C106 1/15/88 Air Data Computer TSO-C110a 10/26/88 Airborne Passive Thunderstorm Detection Equipment TSO-C115b 9/30/94 Airborne Area Navigation Equipment Using Multi-Sensor Inputs TSO-C117a 8/1/96 Airborne Windshear Warning and Escape Guidance Systems for Transport Airplanes TSO-C118 8/5/88 Traffic Alert and Collision Avoidance System (TCAS) Airborne Equipment, TCAS I TSO-C119a 4/9/90 Traffic Alert and Collision Avoidance System (TCAS) Airborne G-I
10/20/10 Appendix G Equipment, TCAS II TSO-C123b 6/1/06 Cockpit Voice Recorder Systems TSO-C129a 2/20/96 Airborne Supplemental Navigation Equipment Using Global Positioning System (GPS) TSO-C146c 5/9/08 Stand-Alone Airborne Navigation Equipment Using The Global Positioning System Augmented By The Satellite Based Augmentation System TSO-C147 4/6/98 Traffic Advisory System (TAS) Airborne Equipment TSO-C151b 12/17/02 Terrain Awareness and Warning System Note: TSO revisions may change. This list is for reference only.
Ensure that you use the appropriate TSO.
G-2
11/21/2013 Appendix H Appendix H. SAE ARP 4754 to ARP 4754A Cross-Reference Matrix Below is a cross-reference matrix between the sections and paragraphs of SAE ARP 4754 that are referenced by RTCA/DO-297 and the updated SAF ARP 4754A. Please refer to this matrix in order to determine the correct ARP 4754A paragraph.
RTCA/DO-297 ARP 4754 Reference Corresponding ARP Page # / Para. # (Technical Subject of Discussion) 4754A Reference / Para. # of Technical Subject of Discussion 3 / 1.5 [7] ARP 4754 ARP 4754A 20 / 3.1 ARP 4754 ARP 4754A 56 / 4.5.7.d ARP 4754 ARP 4754A 63 / 5.1 ARP 4754 (Safety Assessment) ARP 4754A / 5.1 65 / 5.1.5.1 Section 6.1 (Functional Hazard Assessment) ARP 4754A / 5.1.1 65 / 5.1.5.2.e Section 6.2 (Preliminary System Safety Assessment) ARP 4754A / 5.1.2 66 / 5.1.5.3.1 Section 6.3 (System Safety Assessment) ARP 4754A / 5.1.3 66 / 5.1.5.4 ARP 4754 (Common Cause Analysis) ARP 4754A / 5.1.4 72/5.3 ARP 4754 (Validation Process) ARP 4754A / 5.4 73 / 5.4 ARP 4754 (Verification Process) ARP 4754A / 5.5 75/5.5 ARP 4754 (Configuration Management Process) ARP 4754A / 5.6 77 / 5.6 ARP 4754 (Quality Assurance Process) ARP 4754A / 5.7 77 / 5.6 - Note ARP 4754 ARP 4754A Note: Some references within RTCA/DO-297 refer to the entire SAF ARP 4754 document. but the discussion in that RTCA/DO-297 paragraph is limited to a specific technical subject. This table provides information on the technical subject being discussed for that RTCA/DO-297 reference and provides the exact paragraph number of ARP 4754A.
We believe that this information is of greater use to the reader than repeating the reference to the entire SAF. ARP 4754A document. See rows 4, 8, 9, 10, 11, and 12.
H-1