A380 Integrated Modular Avionics: Artist2 - Ima & Adcn

ARTIST2 – IMA & ADCN
Presented by
Jean-Bernard ITIER
STP Manager IMAP
A380 Integrated Modular Avionics

The history, objectives and challenges of the deployment of IMA on A380
ARTIST2 - Integrated Modular Avionics A380

Presentation Topics and Scope
• To explain what IMA is and its background
• To explain how IMA has been deployed on the A380
ADCN
Modules
• The Future of IMA

© AIRBUS UK LTD. All rights reserved. Confidential and proprietary document.
ARTIST2 - Integrated Modular Avionics A380 Page 2

Why IMA?
• Since the A300

Increasing number of software controlled systems
– New functionality for performance
• Flight management systems
• Fuel management systems
– New functionality for improved safety
• Flight envelope protection
• Ground proximity warning
• Traffic collision avoidance
– New functionality for improved maintenance
• Aircraft condition monitoring

– New functionality for improved passenger comfort
• Cabin environment control

Why IMA?
• The Indirect Consequences

Every system = 1 or more computers / controllers
Every aircraft type = new computers
Every computer =
– Airframer development and management costs
• Part number costs
• Documentation
• More wires
• More power
• More sources of unreliability
• Increased obsolescence risk
– Airline impact
• Spares
• Tooling
• Increased fault finding

Why IMA? – Traditional LRU
• This implies that quantities of maintenance spares be

stored for each fleet at different places.
• During the aircraft life cycle, the cost of modifications,
including parts obsolescence mitigation and functional
upgrades, becomes even more significant for the airlines.

Why IMA? – Traditional LRU
• Each computer type is

uniquely designed for
the system and aircraft
Application software
e.g. fuel control
Hardware PCBs
Operating System
• Manufactured by
system supplier
• Dedicated wiring for

each connection
Digital and single wire control
• 100s km cabling per
Information to other computers aircraft
Why IMA?
Historical background for the emergence of IMA
Functionality Number of
(arbitrary log scale) electronic
A380
105 equipment
A340
-600
104
A330
103 100
A320
102 A380
80
A310 with
101 IMA 60
A300B
Concorde
40
20
1970 1975 1980 1985 1990 1995 2000 2005

Why IMA?
• The response
Integrated Modular Avionics
– Concept
– Not a specific set of technologies or components
Integration =
– Multiple systems applications executed on the same computer
– Data communications integrated onto a high speed multiplexed
network
Modularity =
– A set of standard non system specific computers
– Computers that can be configured to provide part of their

resources to a particular system application

What is IMA?
• IMA Variations / Proprietary Solutions ?

Avionics network
– ARINC 429
– ARINC 629
– AFDX
Avionics computers
– Cabinet of modules, backplane, gateways
• Honeywell AIMS
– Cabinet of cards
• Honeywell Primus EPIC
– Independent modules as LRUs

• Honeywell VIA

What is IMA?
• Cabinet of modules
• Functionality split between modules:

Power Supply Modules, Gateways, Processing, IO
• Inter module communications backplane
• ARINC 653 Operating System

• Originally ARINC 629
• Single supplier …. for everything
• Boeing 777

What is IMA?
• Card File
• Semi open architecture – third party hardware

• Processing, IO and gateway cards
• Proprietary DEOS Operating System
• Proprietary backplane
• Business and Regional Jets
Embraer, Raytheon, Dornier

What is IMA?
• Independent Modules as “LRU”
• Derivative of AIMS – repackaging

Provides processing, IO and PSU in one package

What is A380 IMA?
Since mid 80s the former Airbus partners have done research on
IMA for their systems (PACTS, IDEE3, NEVADA, PAMELA,
VICTORIA)
– With the objective to merge different system design approaches and
different procurement approaches
• Closed loop control systems, data management and processing systems
• Safety critical and non safety critical
• Software only functions to full multi-domain systems like fuel
• Complete design in house, integration of components to fully outsourced
Therefore the IMA solution had to:

– Be suitable for different types of systems (I/O needs / Performances /
Safety )
– Be suitable for a large number of systems and their suppliers to allow
real competition
– Compartmentalised to allow parallel developments to be managed

What is A380 IMA?
PRIM3 FM3 ADIRU3 CMV
FCGU3BFCGU3A SEC3 ECB
PRIM1 PRIM2
SFCC1 SEC1 FCGU1AFCGU1B FCGU2BFCGU2A SEC2 SFCC2
Integrated Modular IOM 1

IOM 3
SW-11
SW-1
18+2FT 18+2FT
SW-12
SW-2
IOM 2
IOM 4
13+1FT
Avionics ADIRU1 SW-19 ADIRU2

SW-9
FM1 FM2
CDS CDS CDS CDS CDS

L1 L2 C1 R2 R1
EEC2 A A EEC1
B CDS CDS CDS B
L3 C2 R3
EEC4 A A EEC3
B B
SCI
CPIOM-C1
CPIOM-C2
CPIOM-D1
CABINET
SW-13 SW-14
ACR 1
SW-3 SW-4
AESU 1
AESU 2
IOM 5 16+2FT 15+2FT IOM6
IOM 7
IOM 8
CPIOM-F1 CPIOM-F2
CDAM
CPIOM-F3 CPIOM-F4
display CIDS1
SDS1
CIDS1
SDS1
SW-15 SW-16
15+2FT
actuators CPIOM-A2
18+2FT SW-5
CPIOM-A1
18+2FT
SW-17
CPIOM-G1
SW-6
CPIOM-G2
SW-7
CPIOM-A3 CPIOM-A4 CPIOM-G4
CPIOM-G3
CPIOM-B2 CPIOM-B1
« Federated A629 CPIOM-B3 CPIOM-B4
OSCU
CPIOM-E1
architectures »
CPIOM-E2
SPDB 1
SPDB 6
Multi-transmitter SPDB 3
SPDB 8
sensors SEPDC1
SEPDC2
bus network SPDB 5

SPDB 7 DSMS
SPDB 2
SPDB 4
LRUs
disp LRU
lay sensors
MODULE
actuators
AFDX NETWORK
LRU « black box »
CONCEPTS & TECHNOLOGIES EVOLUTIONS

What is A380 IMA? - Airbus Concept
• IMA shared resources are:
the avionics communications network: the solution selected is AFDX
(Avionics Full Duplex Ethernet), fully compatible with Ethernet network
of Open World and based on common switch modules
Modules, i.e. Core Processing & Input / Output Modules or CPIOM,
Input/ Output Modules or IOM, ,...) for hosting of several applications
and signal acquisition/transmission
Other
systems
or equip t
A429,
discretes ,
CPIOM analog
SW
SW
applic
applic IOM IOM
Other
systems
O/S or equip t
AFDX network
28VDC network (Norm / Ess )

What is A380 IMA? Airbus Concept
• The AIRBUS IMA concept is based on “shared Modules”. A module-
focused approached has been preferred compared with the previous
concept of “Cabinet”. Its key features are:
ARINC 600 IMA Module packaging connected to AFDX network
Robust partitioning in computing resource & communications
Determinism of application execution & data exchanges
Standardised Application Programming Interface (API) to avoid
obsolescence impacts on applications
Conventional equipment’s mixable
• Resource sharing has a direct impact on the way to design and

implement systems since it creates new dependencies between them,
both from a technical and a process point of view.
• This concept has been selected as the baseline for systems design on
Cockpit, Utility, Energy and Cabin domains and extended globally on
all the domains.

What is A380 IMA? - ADCN Network & Topology
FCSC1
COM MON
FCGC1
COM MON
Flight COMFCGC2
MON COM
FCSC2
MON
SFCC2
AFDX Network:
SFCC1
COM MON Control
FCGC3
FCSC3 TBC
COM MON
• 100 Mbits
COM MON
COM MON
S_1 S_1
IOM _1 _2 IOM
ADIRU1 FM1 S_1

SW13
_3
FM2 ADIRU2 • Redundant Network (A&B)
Cockpit
EEC1 A
ADIRU3 FM3
B EEC3 with independent
Engines B
L1 L2 C1 R2 R1
A
EEC2 B ACR1 ATC1 L3 C2 R3 ACR2 opt

ATC2 A EEC4 alimentation
A B
FW1
FCDC1 FW2
FCDC2
• AFDX switches = 2 x 8
AESU1 S_2 S_2
AESU2
_1 _2
IOM
SCI
ELM
CBM
CDAM ELM
CBM SCI
IOM • NB of ports (connections)
SB24 HSM HSM SB24
Fuel
LG,TP&BS COM MON
AIC?
Energy
AIC?
COM MON
Fuel
LG,TP&BS
possible on each switch (20-
Fuel&LG
COM MON
S_3
ECB ext lights
ctrl
COM MON
24)
S_3
_1 _2
CIDS CIDS
IRDC
VSC
PWCU IPCU
PESC
IPCU
IRDC • MTBF of the switch is very
S_4 S_4 high (100 000 hours
_1
Cabin _2 SPDB
expected)
SPDB
DSMC1&2 DSMC3
CPIOM-A-1&2CPIOM-B-1&2
CPIOM-A-3&4 CPIOM-B-
3&4
• Up 80 AFDX subscriber

AFDX - Generality
• Freedom of choice for data format (harmonized at aircraft level)
• Integration of LRU, IOM (Input Output Module) & CPIOM (Core Processing
Input Output Module)
• Technology based on COTS standards
LRU CPIOM IOM LRU
Appli Appli
Appli Appli
B C
B D
partition 1 partition 2 partition 3
1 partition
E/S E/S E/S
ADCN E/S
Switching table defined through

configuration
•ARINC 600: 2 MCU

Trafficpolicing (enforcement of
allocated bandwidth) QUADRAX Connectors
AFDX technology – Addressing : MAC,IP,UDP
Appli
B
Appli
A 1 partition
1
1 partition 1 8 2 E/S
2 9
1 3 10
E/S 2 4 11
Appli Appli D Appli E
5 12
6
7
13
14
C
partition 1 partition 2
(RAM ; CPU) (RAM ; CPU)
1
2 E/S
• Avionics communications are based on multicast:
one transmitter
one or several receivers

• Asynchrony individual clocks
• NO reconfiguration capability in the AFDX network
Alt = 10 000 ft UDP SRC / UDP DEST IP SRC / IP DEST MAC SRC / MAC DEST

AFDX: Performances
• Does AFDX sustain expected real time performance:

Yes: real time performances were really challenging, both on the
ES and the switch (ES wire speed reception ie 200 Mbits/s ; switch
wire speed switching, with only bottleneck on output buffer).
• Packet loss percentage:

0 % in the switch by definition (a configuration where the switch
cannot guarantee that no frames are lost is not “schedulable” and
thus not produced)
Nevertheless frame may be lost due to
– Bit error rate (target 10-8)

– Failures

What is A380 IMA ? - AFDX Network use
• Switches Configuration process:

System Team
NCD : VL & Paths
Data base
Confcheck → determinism OK
Confgen → Create configuration
Loads
Switches Datalaoding

What is A380 IMA?
• Impact on the system development process = Risks

At the component level:
– IMA developed before system > requirements mismatch
– Maturity of IMA components > impacts multiple systems
– Technical capability > impacts multiple systems
At the Industrial level:
– Management > Dedicated trans-national IMA team
– Procurement >
• Arbitration process,
• Contractual resources,
• Change in supplier business model

– Development > User Groups, Hot Lines, Bi-laterals
– Certification
– Support Process > Airbus

What is A380 IMA?
• Pre launch
Partner activity to review available solutions and proposals
– Many suppliers example Smiths, Honeywell, Rockwell Collins, Thales, Diehl,
BAe Systems
– Front runner - Cabinet / rack + ARINC 629
• Joint launch team to define the avionics solution
Architecture,
scope, key technologies, supplier pre-selection
AFDX as the network
– ARINC 629 future growth, cost ?
IMA computers as dedicated LRUs – The “Open Architecture” solution
– Multiple system suppliers
– Scalable
– Multiple IMA suppliers including Airbus make policy for key technology
– System suppliers able to develop and integrate separately
– Minimise the management and co-ordination activities to be performed by
Airbus – focus on systems

What is A380 IMA? - IMA integration perimeter
Function on A380 Energy

Electrical Load Management,
Cockpit Circuit Breaker Monitoring,
Flight Warning, ATA 24 BITE
FCU Back-Up,
Weight & Balance Back-Up Computation Utility
Flight Control Data Concentrator Fuel Measurement &
Air Traffic Communication Management

Braking,
Cabin Steering,
Bleed, Extension/Retraction,
Overheat Detection, Others (Tyre pressure,
Supplemental Cooling etc.)
Cabin Pressure & Ventilation Control,
Air Conditioning
IMA – Modules
• 8 different part numbers / 30 modules of

CPIOM per chipset developed by 2 suppliers
AIRBUS (EYY):
Thales Avionics, associated with Diehl
Avionik System:
•They host 21 avionics functions developed by

10 suppliers
•1 single part number of IOM called “IOM-A”

•All modules are ARINC600, 3 MCU box, around

4.2 kg, with 50 000 hours MTBF objectives

What is A380 IMA ?
• What makes IMA different ?

Standardised Software Environment
ARINC 653 Operating System
– Application software is independent from the hardware
• Like Windows
• No direct access to I/O
• Internal process control services
• Health Monitoring services
– Enables Obsolescence protection for system software
• Software – largest NRC element of systems

• Production life = 20 years, Aircraft life = 50 years

What is A380 IMA? - CPIOM
UTIL. - NVM Managt
RessourceBITE
Dataload A615A
Module Managt
Instrumentation
SNMP-MIB
PARTITION
PARTITION
AVIONIC
AVIONIC
AIRBUS API AIRBUS API + Extensions

A 653 Operating System Drivers
IO SW
Boot BASIC SOFTWARE
Power CPU MPC755 DSP

Supply RAM
TMS320C33
Flash Partitioning + internal
Control Ram
NVM PCI Intra LRM Communication
USB Interface AUDIO
DSI / DSO Interface USB Flash

DSI / DSO /DGO
DSI/DSO
CPU Board AFDX DGI
DSI / DSO IO_DSP Board

IO_Ext Board
What is A380 IMA ?
• What makes IMA different?

Partitioning
– The performance of each system must be unaffected by any
other
• To allow systems to be developed, tested and verified separately
• To allow system faults to be contained
• To allow new systems to be added post certification

What is A380 IMA ?
Partitioning
Application Application
Software1 Software 2
Resources with
performances
Health Memory Processor Health

I/O I/O Memory Processor
Monitors RAM Time Monitors
RAM Time
Partition environment © AIRBUS UK LTD

What is A380 IMA ?
Partitioning
– Timing
• Strict allocation to each system application –
Periodic fixed scheduling at application level
No prioritisation at application level
Application 1 Application 3 Application 1
Application 3
Application 2
12.5 ms Time
© AIRBUS UK LTD
25 ms
5 ms 15 ms

What is A380 IMA ?
Partitioning
– Timing
Application 3
Application 2
12.5 ms Time
© AIRBUS UK LTD
25 ms
5 ms 15 ms

What is A380 IMA ?
Partitioning
– Timing
• Overruns are prevented partition is suspended
Application 3
Application 2
12.5 ms Time
© AIRBUS UK LTD
25 ms
5 ms 15 ms

What is A380 IMA ?
Partitioning
– Memory
• Segregated allocation to each application
• Configuration is linked to design I.e. application accesses only the memory
configured for it
• Violations detected and prevented by MMU
Application
Software 1
Module
MMU
Configuration
© AIRBUS UK LTD

What is A380 IMA ?
Partitioning Application Application
Software 1 Software 2
– I/O Write sampling port( xx, value)
• Segregated allocation to
each system application
• Some shared input data
e.g. ARINC 429
• All access is through OS
calls
CPIOM GLOBAL ARINC 653 Operating System
CONFIGURATION
TABLE xx = A429
Discretes ARINC 429 AFDX
© AIRBUS UK LTD

What is A380 IMA ?
• Partitioning enables:
System independence
– Systems of different DAL(A,B,C) level can be developed at their
DAL level
– Systems can be integrated and tested to separately
Incremental Qualification
– Modifications to one application have no effect on other
applications
• Qualification activities following a modification are limited
• Configuration Parameters Partitioning and Configuration
IMA must be configurable

– Resources – Time, Memory and I/O
– Implemented with Configuration Tables - loadable
Two groups of tables:
– Tables managed by Airbus – have a global effect
– Tables managed by the Function Supplier – only have a local partition
What is A380 IMA?
Qualification of the module within a usage domain represented by

the set of configuration parameter ranges
Usage Domain
– Represents guarantees on
• Functionality
• Performance – e.g. service call times
– For the range of configurations the module can be used in

What is A380 IMA ? - IMA Modules Qualification
• Qualification and system certification are major parts of IMA
The objective of the qualification approach is to give System
Suppliers “credit” to be used as part of their system certification
Based on credit
– The function / system supplier takes “credit” from the qualification
activities of Module Manager and Module Supplier
– Does not have to prove functionality, performance and behaviour of the
module.
System
Supplier
Certification
Configuration
Qualification
Module Qualification

What is A380 IMA?
• New Industrial Roles - the biggest change with IMA

Introduce a new role in system development
– IMA Manager
• Control the use of module resources
Provides resources against user system requirements
Maintain spares margins
Support the prediction and verification of resources
• Provide resource configuration tables

Develop configuration tables
• Perform confidence testing on the Integrated Module

• Perform qualification activities for the module configuration

What is A380 IMA ? - Avionics Functions
• Integration:
integration tests are performed
– on HBOSS
– again on HBOSS with instrumented code for structural
coverage analysis
– then on TBOSS for target compatibility verification and for
providing certification evidences
Additional unit tests may be identified to achieve all
coverage objectives
The whole process is automated to ease non-regression
testing between HBOSS and TBOSS
HBOSS TBOSS BIL

Software testing on Software testing on Function Verification
host stations representative target on Real Module

The future
ARTIST2 - Integrated Modular Avionics A380

The future of IMA
• A380 IMA reused on A400M/A350 :

Mature avionics hardware available immediately
NRCs, risks minimised
• Next Aircraft – IMA2G:

Extend the scope of IMA
– Flight controls, Open world
Increase the flexibility of IMA – “Generic Secure Platform”
– Optimise the IMA architecture
• Decentralised I/O / Smart sensors
• Reconfiguration
– Enable more systems to be integrated within IMA
• High Critical to Low Critical
– Enable greater levels of integration on single IMA units

The future of IMA
• Change in technologies:
AFDX :
– greater bandwidth solutions,
– low cost solutions
– greater integration
– All protocols supported
IMA
– Cabinet, Card File ? all have advantages
– Faster processors – Multi-processor – inevitable
– New OS – possibly, parallel for Open World
– New Fields buses technologies ?
Tools - greater integration & Industrialisation

• Platform Architecture definition
• Avionics configuration
• Application development, validation and verification
• Fast ramp up – Technologies choice for Resources industrialisation
• Fast FAL Integration – Auto test

The future of IMA
Historical background for the emergence of IMA
Functionality Number of
(arbitrary log scale) electronic
A380
105 equipment
A340
-600
104
A330
103 100
A320
102 A380 80
A310 with
101 IMA 60
A300B
Concorde
40
Future
A/C 20
1970 1975 1980 1985 1990 1995 2000 2005

Thank you for your attention

© AIRBUS S.A.S. All rights reserved. Confidential and
proprietary document.
This document and all information contained herein is the sole
property of AIRBUS S.A.S.. No intellectual property rights are
granted by the delivery of this document or the disclosure of
its content. This document shall not be reproduced or
disclosed to a third party without the express written consent
of AIRBUS S.A.S. This document and its content shall not be
used for any purpose other than that for which it is supplied.
The statements made herein do not constitute an offer. They
are based on the mentioned assumptions and are expressed
in good faith. Where the supporting grounds for these
statements are not shown, AIRBUS S.A.S. will be pleased to
explain the basis thereof.
AIRBUS, its logo, A300, A310, A318, A319, A320, A321,
A330, A340, A350, A380, A400M are registered trademarks.

A380 Integrated Modular Avionics: Artist2 - Ima & Adcn

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

A380 Integrated Modular Avionics: Artist2 - Ima & Adcn

Uploaded by

Copyright:

Available Formats

ARTIST2 – IMA & ADCN

A380 Integrated Modular Avionics

ARTIST2 - Integrated Modular Avionics A380

• To explain what IMA is and its background

• To explain how IMA has been deployed on the A380

• The Future of IMA

ARTIST2 - Integrated Modular Avionics A380 Page 2

• Since the A300

• Aircraft condition monitoring

ARTIST2 - Integrated Modular Avionics A380 Page 3

• The Indirect Consequences

ARTIST2 - Integrated Modular Avionics A380 Page 4

• This implies that quantities of maintenance spares be

ARTIST2 - Integrated Modular Avionics A380 Page 5

• Each computer type is

• Dedicated wiring for

1970 1975 1980 1985 1990 1995 2000 2005

ARTIST2 - Integrated Modular Avionics A380 Page 7

– Computers that can be configured to provide part of their

ARTIST2 - Integrated Modular Avionics A380 Page 8

• IMA Variations / Proprietary Solutions ?

– Independent modules as LRUs

ARTIST2 - Integrated Modular Avionics A380 Page 9

• Functionality split between modules:

• ARINC 653 Operating System

ARTIST2 - Integrated Modular Avionics A380 Page 10

• Semi open architecture – third party hardware

ARTIST2 - Integrated Modular Avionics A380 Page 11

• Independent Modules as “LRU”

• Derivative of AIMS – repackaging

Provides processing, IO and PSU in one package

ARTIST2 - Integrated Modular Avionics A380 Page 12

Therefore the IMA solution had to:

ARTIST2 - Integrated Modular Avionics A380 Page 13

Integrated Modular IOM 1

Avionics ADIRU1 SW-19 ADIRU2

CDS CDS CDS CDS CDS

« Federated A629 CPIOM-B3 CPIOM-B4

bus network SPDB 5

LRU « black box »

CONCEPTS & TECHNOLOGIES EVOLUTIONS

28VDC network (Norm / Ess )

• Resource sharing has a direct impact on the way to design and

both from a technical and a process point of view.

ARTIST2 - Integrated Modular Avionics A380 Page 16

ADIRU1 FM1 S_1

EEC2 B ACR1 ATC1 L3 C2 R3 ACR2 opt

ARTIST2 - Integrated Modular Avionics A380 Page 17

E/S E/S E/S

Switching table defined through

•ARINC 600: 2 MCU

one or several receivers

ARTIST2 - Integrated Modular Avionics A380 Page 19

• Does AFDX sustain expected real time performance:

• Packet loss percentage:

– Bit error rate (target 10-8)

ARTIST2 - Integrated Modular Avionics A380 Page 20

• Switches Configuration process:

NCD : VL & Paths

ARTIST2 - Integrated Modular Avionics A380 Page 21

• Impact on the system development process = Risks

• Change in supplier business model

ARTIST2 - Integrated Modular Avionics A380 Page 22

Provides processing, IO and PSU in one package

Therefore the IMA solution had to:

Switching table defined through

one or several receivers

IMA must be configurable

Qualification of the module within a usage domain represented by

Tools - greater integration & Industrialisation