Integrated Avionics Design PDF

ARTIST2 IMA & ADCN
Presented by
Jean-Bernard ITIER
STP Manager IMAP
A380 Integrated Modular Avionics

The history, objectives and challenges of the deployment of IMA on A380
ARTIST2 - Integrated Modular Avionics A380

Presentation Topics and Scope
To explain what IMA is and its background
To explain how IMA has been deployed on the A380
ADCN
Modules
The Future of IMA

AIRBUS UK LTD. All rights reserved. Confidential and proprietary document.
ARTIST2 - Integrated Modular Avionics A380 Page 2

Why IMA?
Since the A300

Increasing number of software controlled systems
New functionality for performance
Flight management systems
Fuel management systems
New functionality for improved safety
Flight envelope protection
Ground proximity warning
Traffic collision avoidance
New functionality for improved maintenance
Aircraft condition monitoring

New functionality for improved passenger comfort
Cabin environment control

Why IMA?
The Indirect Consequences

Every system = 1 or more computers / controllers
Every aircraft type = new computers
Every computer =
Airframer development and management costs
Part number costs
Documentation
More wires
More power
More sources of unreliability
Increased obsolescence risk
Airline impact
Spares
Tooling
Increased fault finding

Why IMA? Traditional LRU
This implies that quantities of maintenance spares be

stored for each fleet at different places.
During the aircraft life cycle, the cost of modifications,
including parts obsolescence mitigation and functional
upgrades, becomes even more significant for the airlines.

Why IMA? Traditional LRU
Each computer type is

uniquely designed for
the system and aircraft
Application software
e.g. fuel control
Hardware PCBs
Operating System
Manufactured by
system supplier
Dedicated wiring for

each connection
Digital and single wire control
100s km cabling per
Information to other computers aircraft
Why IMA?
Historical background for the emergence of IMA
Functionality Number of
(arbitrary log scale) electronic
A380
105 equipment
A340
-600
104
A330
103 100
A320
102 A380
80
A310 with
101 IMA 60
A300B
Concorde
40
20
1970 1975 1980 1985 1990 1995 2000 2005

Why IMA?
The response
Integrated Modular Avionics
Concept
Not a specific set of technologies or components
Integration =
Multiple systems applications executed on the same computer
Data communications integrated onto a high speed multiplexed
network
Modularity =
A set of standard non system specific computers
Computers that can be configured to provide part of their

resources to a particular system application

What is IMA?
IMA Variations / Proprietary Solutions ?

Avionics network
ARINC 429
ARINC 629
AFDX
Avionics computers
Cabinet of modules, backplane, gateways
Honeywell AIMS
Cabinet of cards
Honeywell Primus EPIC
Independent modules as LRUs

Honeywell VIA

What is IMA?
Cabinet of modules
Functionality split between modules:

Power Supply Modules, Gateways, Processing, IO
Inter module communications backplane
ARINC 653 Operating System

Originally ARINC 629
Single supplier . for everything
Boeing 777

What is IMA?
Card File
Semi open architecture third party hardware

Processing, IO and gateway cards
Proprietary DEOS Operating System
Proprietary backplane
Business and Regional Jets
Embraer, Raytheon, Dornier

What is IMA?
Independent Modules as LRU
Derivative of AIMS repackaging

Provides processing, IO and PSU in one package

What is A380 IMA?
Since mid 80s the former Airbus partners have done research on
IMA for their systems (PACTS, IDEE3, NEVADA, PAMELA,
VICTORIA)
With the objective to merge different system design approaches and
different procurement approaches
Closed loop control systems, data management and processing systems
Safety critical and non safety critical
Software only functions to full multi-domain systems like fuel
Complete design in house, integration of components to fully outsourced
Therefore the IMA solution had to:

Be suitable for different types of systems (I/O needs / Performances /
Safety )
Be suitable for a large number of systems and their suppliers to allow
real competition
Compartmentalised to allow parallel developments to be managed

What is A380 IMA?
PRIM3 FM3 ADIRU3 CMV
FCGU3BFCGU3A SEC3 ECB
PRIM1 PRIM2
SFCC1 SEC1 FCGU1AFCGU1B FCGU2BFCGU2A SEC2 SFCC2
Integrated Modular IOM 1

IOM 3
SW-11
SW-1
18+2FT 18+2FT
SW-12
SW-2
IOM 2
IOM 4
13+1FT
Avionics ADIRU1 SW-19 ADIRU2

SW-9
FM1 FM2
CDS CDS CDS CDS CDS

L1 L2 C1 R2 R1
EEC2 A A EEC1
B CDS CDS CDS B
L3 C2 R3
EEC4 A A EEC3
B B
SCI
CPIOM-C1
CPIOM-C2
CPIOM-D1
CABINET
SW-13 SW-14
ACR 1
SW-3 SW-4
AESU 1
AESU 2
IOM 5 16+2FT 15+2FT IOM6
IOM 7
IOM 8
CPIOM-F1 CPIOM-F2
CDAM
CPIOM-F3 CPIOM-F4
display CIDS1
SDS1
CIDS1
SDS1
SW-15 SW-16
15+2FT
actuators CPIOM-A2
18+2FT SW-5
CPIOM-A1
18+2FT
SW-17
CPIOM-G1
SW-6
CPIOM-G2
SW-7
CPIOM-A3 CPIOM-A4 CPIOM-G4
CPIOM-G3
CPIOM-B2 CPIOM-B1
Federated A629 CPIOM-B3 CPIOM-B4
OSCU
CPIOM-E1
architectures
CPIOM-E2
SPDB 1
SPDB 6
Multi-transmitter SPDB 3
SPDB 8
sensors SEPDC1
SEPDC2
bus network SPDB 5

SPDB 7 DSMS
SPDB 2
SPDB 4
LRUs
disp LRU
lay sensors
MODULE
actuators
AFDX NETWORK
LRU black box
CONCEPTS & TECHNOLOGIES EVOLUTIONS

What is A380 IMA? - Airbus Concept
IMA shared resources are:
the avionics communications network: the solution selected is AFDX
(Avionics Full Duplex Ethernet), fully compatible with Ethernet network
of Open World and based on common switch modules
Modules, i.e. Core Processing & Input / Output Modules or CPIOM,
Input/ Output Modules or IOM, ,...) for hosting of several applications
and signal acquisition/transmission
Other
systems
or equip t
A429,
discretes ,
CPIOM analog
SW
SW
applic
applic IOM IOM
Other
systems
O/S or equip t
AFDX network
28VDC network (Norm / Ess )

What is A380 IMA? Airbus Concept
The AIRBUS IMA concept is based on shared Modules. A module-
focused approached has been preferred compared with the previous
concept of Cabinet. Its key features are:
ARINC 600 IMA Module packaging connected to AFDX network
Robust partitioning in computing resource & communications
Determinism of application execution & data exchanges
Standardised Application Programming Interface (API) to avoid
obsolescence impacts on applications
Conventional equipments mixable
Resource sharing has a direct impact on the way to design and

implement systems since it creates new dependencies between them,
both from a technical and a process point of view.
This concept has been selected as the baseline for systems design on
Cockpit, Utility, Energy and Cabin domains and extended globally on
all the domains.

What is A380 IMA? - ADCN Network & Topology
FCSC1
COM MON
FCGC1
COM MON
Flight COMFCGC2
MON COM
FCSC2
MON
SFCC2
AFDX Network:
SFCC1
COM MON Control
FCGC3
FCSC3 TBC
COM MON
100 Mbits
COM MON
COM MON
S_1 S_1
IOM _1 _2 IOM
ADIRU1 FM1 S_1

SW13
_3
FM2 ADIRU2 Redundant Network (A&B)
Cockpit
EEC1 A
ADIRU3 FM3
B EEC3 with independent
Engines B
L1 L2 C1 R2 R1
A
EEC2 B ACR1 ATC1 L3 C2 R3 ACR2 opt

ATC2 A EEC4 alimentation
A B
FW1
FCDC1 FW2
FCDC2
AFDX switches = 2 x 8
AESU1 S_2 S_2
AESU2
_1 _2
IOM
SCI
ELM
CBM
CDAM ELM
CBM SCI
IOM NB of ports (connections)
SB24 HSM HSM SB24
Fuel
LG,TP&BS COM MON
AIC?
Energy
AIC?
COM MON
Fuel
LG,TP&BS
possible on each switch (20-
Fuel&LG
COM MON
S_3
ECB ext lights
ctrl
COM MON
24)
S_3
_1 _2
CIDS CIDS
IRDC
VSC
PWCU IPCU
PESC
IPCU
IRDC MTBF of the switch is very
S_4 S_4 high (100 000 hours
_1
Cabin _2 SPDB
expected)
SPDB
DSMC1&2 DSMC3
CPIOM-A-1&2CPIOM-B-1&2
CPIOM-A-3&4 CPIOM-B-
3&4
Up 80 AFDX subscriber

AFDX - Generality
Freedom of choice for data format (harmonized at aircraft level)
Integration of LRU, IOM (Input Output Module) & CPIOM (Core Processing
Input Output Module)
Technology based on COTS standards
LRU CPIOM IOM LRU
Appli Appli
Appli Appli
B C
B D
partition 1 partition 2 partition 3
1 partition
E/S E/S E/S
ADCN E/S
Switching table defined through

configuration
ARINC 600: 2 MCU

Trafficpolicing (enforcement of
allocated bandwidth) QUADRAX Connectors
AFDX technology Addressing : MAC,IP,UDP
Appli
B
Appli
A 1 partition
1
1 partition 1 8 2 E/S
2 9
1 3 10
E/S 2 4 11
Appli Appli D Appli E
5 12
6
7
13
14
C
partition 1 partition 2
(RAM ; CPU) (RAM ; CPU)
1
2 E/S
Avionics communications are based on multicast:
one transmitter
one or several receivers

Asynchrony individual clocks
NO reconfiguration capability in the AFDX network
Alt = 10 000 ft UDP SRC / UDP DEST IP SRC / IP DEST MAC SRC / MAC DEST

AFDX: Performances
Does AFDX sustain expected real time performance:

Yes: real time performances were really challenging, both on the
ES and the switch (ES wire speed reception ie 200 Mbits/s ; switch
wire speed switching, with only bottleneck on output buffer).
Packet loss percentage:

0 % in the switch by definition (a configuration where the switch
cannot guarantee that no frames are lost is not schedulable and
thus not produced)
Nevertheless frame may be lost due to
Bit error rate (target 10-8)

Failures

What is A380 IMA ? - AFDX Network use
Switches Configuration process:

System Team
NCD : VL & Paths
Data base
Confcheck determinism OK
Confgen Create configuration
Loads
Switches Datalaoding

What is A380 IMA?
Impact on the system development process = Risks

At the component level:
IMA developed before system > requirements mismatch
Maturity of IMA components > impacts multiple systems
Technical capability > impacts multiple systems
At the Industrial level:
Management > Dedicated trans-national IMA team
Procurement >
Arbitration process,
Contractual resources,
Change in supplier business model

Development > User Groups, Hot Lines, Bi-laterals
Certification
Support Process > Airbus

What is A380 IMA?
Pre launch
Partner activity to review available solutions and proposals
Many suppliers example Smiths, Honeywell, Rockwell Collins, Thales, Diehl,
BAe Systems
Front runner - Cabinet / rack + ARINC 629
Joint launch team to define the avionics solution
Architecture,
scope, key technologies, supplier pre-selection
AFDX as the network
ARINC 629 future growth, cost ?
IMA computers as dedicated LRUs The Open Architecture solution
Multiple system suppliers
Scalable
Multiple IMA suppliers including Airbus make policy for key technology
System suppliers able to develop and integrate separately
Minimise the management and co-ordination activities to be performed by
Airbus focus on systems

What is A380 IMA? - IMA integration perimeter
Function on A380 Energy

Electrical Load Management,
Cockpit Circuit Breaker Monitoring,
Flight Warning, ATA 24 BITE
FCU Back-Up,
Weight & Balance Back-Up Computation Utility
Flight Control Data Concentrator Fuel Measurement &
Air Traffic Communication Management

Braking,
Cabin Steering,
Bleed, Extension/Retraction,
Overheat Detection, Others (Tyre pressure,
Supplemental Cooling etc.)
Cabin Pressure & Ventilation Control,
Air Conditioning
IMA Modules
8 different part numbers / 30 modules of

CPIOM per chipset developed by 2 suppliers
AIRBUS (EYY):
Thales Avionics, associated with Diehl
Avionik System:
They host 21 avionics functions developed by

10 suppliers
1 single part number of IOM called IOM-A

All modules are ARINC600, 3 MCU box, around

4.2 kg, with 50 000 hours MTBF objectives

What is A380 IMA ?
What makes IMA different ?

Standardised Software Environment
ARINC 653 Operating System
Application software is independent from the hardware
Like Windows
No direct access to I/O
Internal process control services
Health Monitoring services
Enables Obsolescence protection for system software
Software largest NRC element of systems

Production life = 20 years, Aircraft life = 50 years

What is A380 IMA? - CPIOM
UTIL. - NVM Managt
RessourceBITE
Dataload A615A
Module Managt
Instrumentation
SNMP-MIB
PARTITION
PARTITION
AVIONIC
AVIONIC
AIRBUS API AIRBUS API + Extensions

A 653 Operating System Drivers
IO SW
Boot BASIC SOFTWARE
Power CPU MPC755 DSP

Supply RAM
TMS320C33
Flash Partitioning + internal
Control Ram
NVM PCI Intra LRM Communication
USB Interface AUDIO
DSI / DSO Interface USB Flash

DSI / DSO /DGO
DSI/DSO
CPU Board AFDX DGI
DSI / DSO IO_DSP Board

IO_Ext Board
What is A380 IMA ?
What makes IMA different?

Partitioning
The performance of each system must be unaffected by any
other
To allow systems to be developed, tested and verified separately
To allow system faults to be contained
To allow new systems to be added post certification

What is A380 IMA ?
Partitioning
Application Application
Software1 Software 2
Resources with
performances
Health Memory Processor Health

I/O I/O Memory Processor
Monitors RAM Time Monitors
RAM Time
Partition environment AIRBUS UK LTD

What is A380 IMA ?
Partitioning
Timing
Strict allocation to each system application
Periodic fixed scheduling at application level
No prioritisation at application level
Application 1 Application 3 Application 1
Application 3
Application 2
12.5 ms Time
AIRBUS UK LTD
25 ms
5 ms 15 ms

What is A380 IMA ?
Partitioning
Timing
Application 3
Application 2
12.5 ms Time
AIRBUS UK LTD
25 ms
5 ms 15 ms

What is A380 IMA ?
Partitioning
Timing
Overruns are prevented partition is suspended
Application 3
Application 2
12.5 ms Time
AIRBUS UK LTD
25 ms
5 ms 15 ms

What is A380 IMA ?
Partitioning
Memory
Segregated allocation to each application
Configuration is linked to design I.e. application accesses only the memory
configured for it
Violations detected and prevented by MMU
Application
Software 1
Module
MMU
Configuration
AIRBUS UK LTD

What is A380 IMA ?
Partitioning Application Application
Software 1 Software 2
I/O Write sampling port( xx, value)
Segregated allocation to
each system application
Some shared input data
e.g. ARINC 429
All access is through OS
calls
CPIOM GLOBAL ARINC 653 Operating System
CONFIGURATION
TABLE xx = A429
Discretes ARINC 429 AFDX
AIRBUS UK LTD

What is A380 IMA ?
Partitioning enables:
System independence
Systems of different DAL(A,B,C) level can be developed at their
DAL level
Systems can be integrated and tested to separately
Incremental Qualification
Modifications to one application have no effect on other
applications
Qualification activities following a modification are limited
Configuration Parameters Partitioning and Configuration
IMA must be configurable

Resources Time, Memory and I/O
Implemented with Configuration Tables - loadable
Two groups of tables:
Tables managed by Airbus have a global effect
Tables managed by the Function Supplier only have a local partition
What is A380 IMA?
Qualification of the module within a usage domain represented by

the set of configuration parameter ranges
Usage Domain
Represents guarantees on
Functionality
Performance e.g. service call times
For the range of configurations the module can be used in

What is A380 IMA ? - IMA Modules Qualification
Qualification and system certification are major parts of IMA
The objective of the qualification approach is to give System
Suppliers credit to be used as part of their system certification
Based on credit
The function / system supplier takes credit from the qualification
activities of Module Manager and Module Supplier
Does not have to prove functionality, performance and behaviour of the
module.
System
Supplier
Certification
Configuration
Qualification
Module Qualification

What is A380 IMA?
New Industrial Roles - the biggest change with IMA

Introduce a new role in system development
IMA Manager
Control the use of module resources
Provides resources against user system requirements
Maintain spares margins
Support the prediction and verification of resources
Provide resource configuration tables

Develop configuration tables
Perform confidence testing on the Integrated Module

Perform qualification activities for the module configuration

What is A380 IMA ? - Avionics Functions
Integration:
integration tests are performed
on HBOSS
again on HBOSS with instrumented code for structural
coverage analysis
then on TBOSS for target compatibility verification and for
providing certification evidences
Additional unit tests may be identified to achieve all
coverage objectives
The whole process is automated to ease non-regression
testing between HBOSS and TBOSS
HBOSS TBOSS BIL

Software testing on Software testing on Function Verification
host stations representative target on Real Module

The future
ARTIST2 - Integrated Modular Avionics A380

The future of IMA
A380 IMA reused on A400M/A350 :

Mature avionics hardware available immediately
NRCs, risks minimised
Next Aircraft IMA2G:

Extend the scope of IMA
Flight controls, Open world
Increase the flexibility of IMA Generic Secure Platform
Optimise the IMA architecture
Decentralised I/O / Smart sensors
Reconfiguration
Enable more systems to be integrated within IMA
High Critical to Low Critical
Enable greater levels of integration on single IMA units

The future of IMA
Change in technologies:
AFDX :
greater bandwidth solutions,
low cost solutions
greater integration
All protocols supported
IMA
Cabinet, Card File ? all have advantages
Faster processors Multi-processor inevitable
New OS possibly, parallel for Open World
New Fields buses technologies ?
Tools - greater integration & Industrialisation

Platform Architecture definition
Avionics configuration
Application development, validation and verification
Fast ramp up Technologies choice for Resources industrialisation
Fast FAL Integration Auto test

The future of IMA
Historical background for the emergence of IMA
Functionality Number of
(arbitrary log scale) electronic
A380
105 equipment
A340
-600
104
A330
103 100
A320
102 A380 80
A310 with
101 IMA 60
A300B
Concorde
40
Future
A/C 20
1970 1975 1980 1985 1990 1995 2000 2005

Thank you for your attention

AIRBUS S.A.S. All rights reserved. Confidential and
proprietary document.
This document and all information contained herein is the sole
property of AIRBUS S.A.S.. No intellectual property rights are
granted by the delivery of this document or the disclosure of
its content. This document shall not be reproduced or
disclosed to a third party without the express written consent
of AIRBUS S.A.S. This document and its content shall not be
used for any purpose other than that for which it is supplied.
The statements made herein do not constitute an offer. They
are based on the mentioned assumptions and are expressed
in good faith. Where the supporting grounds for these
statements are not shown, AIRBUS S.A.S. will be pleased to
explain the basis thereof.
AIRBUS, its logo, A300, A310, A318, A319, A320, A321,
A330, A340, A350, A380, A400M are registered trademarks.

Integrated Avionics Design PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Integrated Avionics Design PDF

Uploaded by

Copyright:

Available Formats

ARTIST2 IMA & ADCN

A380 Integrated Modular Avionics

ARTIST2 - Integrated Modular Avionics A380

To explain what IMA is and its background

To explain how IMA has been deployed on the A380

The Future of IMA

ARTIST2 - Integrated Modular Avionics A380 Page 2

Since the A300

Aircraft condition monitoring

ARTIST2 - Integrated Modular Avionics A380 Page 3

The Indirect Consequences

ARTIST2 - Integrated Modular Avionics A380 Page 4

This implies that quantities of maintenance spares be

ARTIST2 - Integrated Modular Avionics A380 Page 5

Each computer type is

Dedicated wiring for

1970 1975 1980 1985 1990 1995 2000 2005

ARTIST2 - Integrated Modular Avionics A380 Page 7

Computers that can be configured to provide part of their

ARTIST2 - Integrated Modular Avionics A380 Page 8

IMA Variations / Proprietary Solutions ?

Independent modules as LRUs

ARTIST2 - Integrated Modular Avionics A380 Page 9

Functionality split between modules:

ARINC 653 Operating System

ARTIST2 - Integrated Modular Avionics A380 Page 10

Semi open architecture third party hardware

ARTIST2 - Integrated Modular Avionics A380 Page 11

Independent Modules as LRU

Derivative of AIMS repackaging

Provides processing, IO and PSU in one package

ARTIST2 - Integrated Modular Avionics A380 Page 12

Therefore the IMA solution had to:

ARTIST2 - Integrated Modular Avionics A380 Page 13

Integrated Modular IOM 1

Avionics ADIRU1 SW-19 ADIRU2

CDS CDS CDS CDS CDS

Federated A629 CPIOM-B3 CPIOM-B4

bus network SPDB 5

LRU black box

CONCEPTS & TECHNOLOGIES EVOLUTIONS

28VDC network (Norm / Ess )

Resource sharing has a direct impact on the way to design and

both from a technical and a process point of view.

ARTIST2 - Integrated Modular Avionics A380 Page 16

ADIRU1 FM1 S_1

EEC2 B ACR1 ATC1 L3 C2 R3 ACR2 opt

ARTIST2 - Integrated Modular Avionics A380 Page 17

E/S E/S E/S

Switching table defined through

ARINC 600: 2 MCU

one or several receivers

ARTIST2 - Integrated Modular Avionics A380 Page 19

Does AFDX sustain expected real time performance:

Packet loss percentage:

Bit error rate (target 10-8)

ARTIST2 - Integrated Modular Avionics A380 Page 20

Switches Configuration process:

NCD : VL & Paths

ARTIST2 - Integrated Modular Avionics A380 Page 21

Impact on the system development process = Risks

Change in supplier business model

ARTIST2 - Integrated Modular Avionics A380 Page 22

Provides processing, IO and PSU in one package

Therefore the IMA solution had to:

Switching table defined through

one or several receivers

IMA must be configurable

Qualification of the module within a usage domain represented by

Tools - greater integration & Industrialisation