APPENDIX 4. RELATED REFERENCES The following references are related to this AC:
A4-1. Related Regulations in 14 CFR. Sections 23.901, 23.903, 23.909, 23.1309, 25.901,
25.903, 25.939, 25.1181, 25.1309, 27.901, 27.903, 27.1309, 29.901, 29.903, 29.1309, 33.4, 33.5,
33.17, 33.19, 33.27, 33.29, 33.35, 33.49, 33.53, 33.65, 33.66, 33.67, 33.69, 33.73, 33.75, 33.91, and Appendix A of part 33.
A4-2. FAA ACs, Orders, & Policy. Use latest revision available.
AC 20-115C, RTCA, Inc. Document RTCA/DO-178C, July 19, 2013.
AC 20-136B, Protection of Aircraft Electrical/Electronic Systems Against the Indirect Effects of Lightning, September 7, 2011.
AC 20-152, RTCA, Inc., Document RTCA/DO-254, Design Assurance Guidance for Airborne Electronic Hardware, June 30, 2005.
AC 20-158, The Certification of Aircraft Electrical and Electronic Systems for Operation in the High-Intensity Radiated Fields (HIRF) Environment, July 30, 2007.
AC 20-174, Development of Civil Aircraft and Systems, September 30, 2011.
AC 21-16G, RTCA, Inc. Document RTCA/DO-160 versions D, E, F, and G, Environmental Conditions and Test Procedures for Airborne Equipment, June 22, 2011.
AC 33-2B Aircraft Engine Type Certification Handbook, June 30, 1993.
AC 33.4-3, Instructions For Continued Airworthiness; Aircraft Engine High Intensity Radiated Fields (HIRF) And Lightning Protection Features, September 16, 2005.
AC 33.17-1A, Engine Fire Protection § 33.17, August 3, 2009.
AC 33.91-1, Engine System and Component Tests, December 9, 2010.
AC 20-171, Alternatives to RTCA/DO-178B for Software in Airborne Systems and Equipment, January 19. 2011.
A4-3. The following Orders and Policy are referenced for completeness and are not requirements for the applicants showing of compliance.
a. FAA Orders and Policy
Order 8110.49 CHG 1, Software Approval Guidelines, September 28, 2011.
A5-1
Order 8110.105 CHG 1, Simple and Complex Electronic Hardware Approval Guidance, September 23, 2008.
Policy Memorandum, PS-ANE100-2001-1993-33.28TLD-R1, Policy for Time Limited Dispatch (TLD) of Engines Fitted with Full Authority Digital Engine Controls (FADEC) Systems, June 29, 2001.
Policy Letter PL-45, Time Limited Dispatch (TLD) Authorization for Full Authority Digital Electronic Control (FADEC) Engines, Rev 2, March 4, 2004 (available at http://www.opspecs.com/).
Policy Memorandum, PS-ACE100-2004-10024, Installation of Electronic Engine Control for Reciprocating Engine, November 18, 2004.
b. European Aviation Safety Agency (EASA) Orders and Policy.
Advisory, AMC 20-115B, General Acceptable Means of Compliance for Airworthiness of Products, Parts and Appliances, Recognition of Eurocae ED-12B/RTCA/DO-178B, November 5, 2003.
A4-4 Industry Documents .
a. International Electrotechnical Commission (IEC) Documents.
IEC/TS 62239-1, Process Management for Avionics – Preparation of an Electronic Components Management Plan, 2012-07.
IEC/TR 62240-1, Process Management for Avionics – Use of Semiconductor Devices Outside Manufacturers’ Specified Temperature Ranges, First edition 2005-06.
b. RTCA Documents.
RTCA/DO-178A, Software Considerations in Airborne Systems and Equipment Certification, March 22, 1985.
RTCA/DO-178B/EUROCAE ED-12B, Software Considerations in Airborne Systems and Equipment Certification, December 1992.
RTCA/DO-178C/EUROCAE ED-12C, Software Considerations in Airborne Systems and Equipment Certification, December 13, 2011.
RTCA DO-330, Software Tool Qualification Considerations, December 13, 2011.
RTCA DO-331, Model-Based Development and Verification Supplement to DO 178C and DO-278A, December 13, 2011.
A5-2
RTCA DO-332, Object-Oriented Technology and Related Techniques Supplement to DO-178C and DO-278A, December 13, 2011.
RTCA DO-333, Formal Methods Supplement to DO-178C and DO-278A, December 13, 2011.
RTCA/DO-254/EUROCAE ED-80, Design Assurance Guidance for Airborne Electronic Hardware, April 19, 2000/April 2000.
RTCA/DO-160G/EUROCAE ED-14G, Environmental Conditions and Test Procedures for Airborne Equipment, December 8, 2010/May 2011.
c. SAE International Documents.
SAE ARP4754A, Guidelines for Development of Civil Aircraft and Systems, December 21, 2010.
SAE ARP4761, Guidelines and Methods for Conducting the Safety Assessment Process on Civil Airborne Systems and Equipment, December 1996.
SAE ARP5107B, Guidelines for Time Limited Dispatch (TLD) Analysis for Electronic Engine Control Systems, November 15, 2006.
SAE ARP5415A, Users Manual for Certification of Aircraft Electrical/Electronic Systems for the Indirect Effects of Lightning, February 16, 2008.
SAE ARP5416A, Aircraft Lightning Test Methods, January 7, 2013.
SAE ARP5583, Guide to Certification of Aircraft in a High Intensity Radiated Field (HIRF) Environment, June 4, 2010.
SAE ARP5757, Guidelines for Engine Component Tests, March 2008.
SAE ARP5890A, Guidelines for Preparing Reliability Assessment Plans for Electronic Engine Controls, February 3, 2011.
A4-5 Military Specifications .
MIL-STD-461E, Requirements for the Control of Electromagnetic Interference Characteristics, August 20, 1999.
MIL-STD-810G, Test Method Standard for Environmental Engineering Considerations and Laboratory Tests, October 31, 2008.
MIL-E-5007D, Engines, Aircraft, Turbojet and Turbofan, General Specification For, December 27, 1995.
A5-3
A4-6. Reference Addresses. The following addresses are provided to aid in accessing some of the reference documents.
EASA: www.easa.eu.int.
FAA: www.faa.gov.
IEC: IEC, Central Office, 3, rue de Varembé, P.O. Box 131, CH - 1211 GENEVA 20, Switzerland. They are also available online at www.iec.org.
RTCA: RTCA, Inc. 1150 18th Street, NW, Suite 910, Washington, DC 20036. Also available online at www.rtca.org.
SAE: SAE World Headquarters, 400 Commonwealth Drive, Warrendale, PA 15096 0001 USA. Also available online at www.rtca.org .
EUROCAE: EUROCAE, 102, rue Etienne Dolet, 92240 Malakoff, France. Also available online at www.eurocae.net.
Military Specifications: Available online at http://dodssp.daps.dla.mil A5-4
APPENDIX 5. DEFINITIONS For the purposes of this AC, the following definitions apply:
Airborne Electronic Hardware (AEH). Examples include line replaceable units, circuit board assemblies, application specific integrated circuits, and programmable logic devices.
Aircraft-supplied Data. Data supplied by or via aircraft systems.
Aircraft-supplied Electrical Power. Any electrical power supplied by or via aircraft systems and used by the engine or propeller control system.
Alternate Mode. Any control mode that is not the primary mode.
Analysis. A specific and detailed qualitative or quantitative evaluation of the engine relative to the requirements of § 33.75 and other applicable requirements of the EECS. Examples include:
fault tree analysis (FTA), failure mode and effects analysis (FMEA), Markov analysis, similarity analysis and loss of thrust control or loss of power control analysis.
Automatic Power Reserve (APR) System. The entire automatic system used only during takeoff, including all devices both mechanical and electrical that sense engine failure, transmit signals, actuate fuel controls or power levers on operating engines, including power sources, to achieve the scheduled power increase and furnish cockpit information on system operation.
Automatic Takeoff Thrust Control System (ATTCS). The entire automatic system used on takeoff, including all devices, both mechanical and electrical, that sense engine failure, transmit signals, actuate fuel controls or power levers, or increase engine power by other means on operating engines to achieve scheduled thrust or power increases and to furnish cockpit information on system operation.
Backup Mode. The backup system control mode. The alternate channel in a dual-channel system with identical channels is not a backup mode. Any additional backup means provided differing from the two channels are backup modes under the definition.
Backup System. A part of the engine or propeller control system where the operating characteristics or capabilities of the engine control are sufficiently different from the primary system that the operating characteristics or capabilities of the aircraft, crew workload, or what constitutes appropriate crew procedures may be significantly impacted or changed.
Control Mode. Each defined operational state of the engine control system in which the crew can exercise satisfactory engine control that may involve evaluation in the aircraft.
Covered Fault. A fault that is detected or accommodated or both.
Demand Control Pump. A fuel pump whose output is variable and not directly proportional to engine rotor speed.
A5-1
Destructive Event. Any malfunction or failure of the EEC system that may result in a condition in which the engine, or any of its components, causes physical damage to the airplane structure or its occupants that may affect continued safe operation of the airplane. Examples include engine separation from its mounts, uncontrolled fire, inability to shutdown the engine, generation of toxic products, or uncontained high-energy debris.
Dispatchable Configuration. All control system configurations approved for flight dispatch.
Electronic Engine Control System (EECS). An engine control system in which the primary functions are provided using electronics. It includes all the components (e.g. electrical, electronic, hydromechanical and pneumatic) necessary for the control of the engine and may incorporate other control functions where desired. Components of the system provided by the installer may be considered part of the system.
Engine Control System (ECS). Any system or device that controls, limits, or monitors active engine operation.
Engine Dedicated Power Source. An electric power source providing electrical power generated and supplied solely for use by a single engine control system.
Engine/Propeller Control System (ECS/PCS). Any system that is an integrated engine and propeller control system. The system then contains elements of both ECS and PCS.
Erroneous data. Data that appears to be valid, but is incorrect.
Error. An omission or incorrect action by a person, a mistake in requirements, in design, or in implementation. An error may result in a failure, but an error is not a failure in and of itself.
Failure. An occurrence that affects the operation of a component, part, or element such that it can no longer function as intended (this includes both loss of function and malfunction). Note:
errors may cause failures, but are not considered to be failures.
Failure Condition. A condition with a direct, consequential engine-level effect caused or contributed to by one or more failures. Examples include any unwanted limitation of thrust to idle or total loss of a signal.
Failure Mode. The cause of the failure or the manner in which an item or function can fail.
Examples include failures due to corrosion or fatigue, opens and shorts in circuits, and malfunctions of electronic components.
Fault. A manifestation of an error in a component, part, element, or system that may lead to a failure.
Fault (or) Failure Accommodation. The capability to mitigate, either wholly or in part, the effects of a fault or failure.
A5-2
Full Authority Digital Engine Control (FADEC). An engine control system in which the primary functions are provided using digital electronics and in which the electronic engine control (EEC) unit has full-range authority over the engine power or thrust.
Full-up Configuration. An EECS that has no known faults or failures present that affect the loss of thrust (or power) control rate.
Local Events. Failures of aircraft systems and components, other than the EECS, that may affect the installed environment of the EEC unit.
Loss of Power Control (LOPC). A ECS failure event resulting in the inability to attain at least 85% of rated power or to modulate power under normal operating conditions.
Loss of Thrust Control (LOTC). An ECS failure event on a turbine engine that results in the inability to attain at least 90% of rated thrust or to modulate thrust under normal operating conditions.
Minor Power Loss (MPL). A reciprocating engine ECS failure event resulting in the ability to attain less than 95%, but still greater than 85%, of rated power.
Primary Mode. The mode for controlling the engine under normal operation; often referred to as the ‘normal mode.
Primary System. The part of the ECS/PCS normally used for controlling the engine/propeller operation.
Programmable Logic Device (PLD). An electronic component that is altered to perform an installation specific function. PLDs include, but are not limited to, Programmable Array Logic (PAL) components, General Array Logic (GAL) components, Field Programmable Gate Array (FPGA) components, and Erasable Programmable Logic Devices (EPLDs). These devices are a subset of AEH.
Propeller Control System (PCS). Any system or device that is part of the propeller type design that controls, limits, or monitors propeller operation.
Redundancy. Multiple independent methods incorporated within a system to accomplish a given function.
Time-Limited Operations (TLO). The duration of reciprocating engine flight operations permitted with the EEC system in a degraded condition.
Uncovered Fault. A fault or failure for which either no detection mechanism exists or, if detected, no accommodation exists.
Unsafe Condition. For the purposes of this AC, any malfunction or failure of a reciprocating engine EECS that could result in a destructive event or EECS LOPC and MPL rate in excess of A5-3
those specified in Tables A3-1 and A3-2 of this AC. This definition is intended to apply to reciprocating engine EECS.
A5-4
J Advbory ~r Feedback Information If you have eemments or recommendations tbr improving this advisory cmmlar (AC). or suggestions for new items or subjects to be added. or if you find an error, you may Jet us know abOUl by using this page as a template. and I) emailing it to 9-A WA-AVS-AIR.SOO-Coord@faa.gov or 2) ming it to the attention of the AIR I>ireetives Management Officer at 202-267-3933.
Subject: (insert AC number and title) Date: (insert date) Pa.mgraph _______ _ Page -- Type of error (check all that iq>ply): Editorial:--- Proeeduml Conceptual __ Description/Comnients!'-------------------- In a future change to this advisory ciroular, please include coverage on the following subject:
(briefly describe what you want added attaching separate sheets if necessary) Name: _________ _ AC 33.28-3 5/23/14
A6-1