14
Your systems. Working as one. Safety-Certifiable Connectivity David Barnett

Managing Avionics Safety Certification for Unmanned Aircraft

Embed Size (px)

Citation preview

Page 1: Managing Avionics Safety Certification for Unmanned Aircraft

Your systems. Working as one.

Safety-Certifiable ConnectivityDavid Barnett

Page 2: Managing Avionics Safety Certification for Unmanned Aircraft

System System of Systems

Mapping

WeaponControl UI

MissionPlanning

VehicleComms

WeaponController

How Do Things Communicate?

Page 3: Managing Avionics Safety Certification for Unmanned Aircraft

Connext DDS Connectivity PlatformData Distribution Service (DDS) Compliant

RTI Connext DDS

Sensors Actuators

Streaming Analytics &

ControlHMI/UI

System of Systems

Connectivity

Page 4: Managing Avionics Safety Certification for Unmanned Aircraft

Publish/Subscribe for Loose CouplingReduces Lifecycle Costs

RTI Connext DDS

Sens

or D

ata

Control App

Com

man

ds

Stat

usSensor

Sens

or D

ata

Actuator

Com

man

ds

Stat

us

Sensor

Sens

or D

ata

Display App

Sens

or D

ata

Stat

us

Page 5: Managing Avionics Safety Certification for Unmanned Aircraft

Use with New and Existing Apps

Embedded library for new and updated apps

Adapter for existing, unmodified apps and

(sub)systems

DDS Interoperability Protocol

DDS App

Connext DDS Library

DDS App

Connext DDS Library

OS & Transport OS & Transport

DDSAPI

Non-DDSApp

RTI Routing Service

Adapter

Non-DDSApp

RTI Routing Service

Adapter

OS & Transport OS & Transport

PhysicalNetwork

Page 6: Managing Avionics Safety Certification for Unmanned Aircraft

DDS wire protocol compliant:

interoperable with non-FACE DDS apps

Supports FACEFuture Airborne Capability Environment

Page 7: Managing Avionics Safety Certification for Unmanned Aircraft

RTI DDS

CORBA

Sockets

POSIX Queue

s

Shared memo

ry

Queuing

ports

Sampling

ports

Proximity Intra-partition ● ● ● ● ● ● ●Inter-partition ● ● ● ● ●Inter-node ● ● ●Multiple concurrently ●

Distribution One-to-one ● ● ● ● ● ● ●One-to-many ● ● ● ● ●Many-to-one ● ● ●Many-to-many ● ●

● Unreliable only

Flexible CommunicationApplication Transparent, Configured at Integration Time

Page 8: Managing Avionics Safety Certification for Unmanned Aircraft

Supports Mission-Critical Real-Time Systems

• Low latency– As low as 10s microseconds– Missed deadline notifications

• High throughput– Millions or more updates/second

• Resilient– No single point of failure or failover– Support for redundant networks– Automatic failover between redundant

publishers– Live upgrades

• Autonomous– No run-time system administration– Self-forming and self-healing

Page 9: Managing Avionics Safety Certification for Unmanned Aircraft

Proven in 850+ Critical SystemsU.S. Aerospace/DefenseBoeing – AWACS, B-1BGeneral Atomics – GCSLockheed Martin – AegisNorthrop Grumman – CLIPRaytheon – DDG 1000, SSDS

NASALaunch control for OrionHuman Robotic SystemsRobonaut

ScienceESO – TelescopeMax Planck – nuclear fusionSchilling – UUV

SimulationUS Army – Apache + othersCAE – flight simulatorForce Technology – tugboat

MedicalBK Medical – ultrasoundDLR – surgical roboticsDocBox – patient monitoringGE – CT, across productsMevion – radio therapy

Industrial / MachineryJoy Mining MachineryNikon – semi mfgSchneider – PLCs

EnergyGrand Coulee Dam (USACE)LocalGridSiemens Wind Power

ITParemus – cloud platformPIMCO – bond tradingXuenn – sports betting

International A&DCassidian – GCSEmbraer – KC-130QinetiQ – T&E, vetronicsRheinmetall – camp protectionSaab – naval CMSSamsung Thales – naval CMSUltra Electronics – OA platform

TransportationCity of Tokyo – HighwayNAV CANADA – ATMWi-Tronix – asset tracking

TelecomHarmonic – videoIPC – VoIP

AutomotiveAudi – testVW – driver safety

Page 10: Managing Avionics Safety Certification for Unmanned Aircraft

Connext DDS Cert:DO-178C Level A Certifiable

• Full certification package available in 2015• Certifiable subset of DDS standard• C and C++ APIs• Interoperable with standard DDS apps

• Plan for Software Aspects of Certification (PSAC)

• Software Development Plan (SDP)– Requirements standards– Design standards– Code standards

• Software Verification Plan (SVP)• Software Configuration

Management Plan (SCM)• Software Quality Assurance Plan

• Software Requirements Data• Design Description• Traceability• SQA Records• SCM Records• Software Configuration Index• Software Verification Cases and

Procedures• Software Verification Results• Software Accomplishment

Summary

Page 11: Managing Avionics Safety Certification for Unmanned Aircraft

Application Software

Reduced Application and Integration Logic

• Sockets & addressing (hosts, ports)• Discovery, configuration• Bridging across nets, transports• State management and consistency• Startup order dependencies• Reliability over multicast, DIL nets• Disconnections & reconnections• Failover• Bandwidth optimization,

accommodation• Heterogeneous interoperability• Timing control and visibility

Operating System& Network Stack

Roll

Your

Ow

n

Proprietary protocol, limited debugging

Application Software

write(topic, data) read(topic, data)

Connext DDS

Operating System& Network Stack

Rich debugging, monitoring, visualization

Page 12: Managing Avionics Safety Certification for Unmanned Aircraft

Example: US Army Asset Tracking System

Legacy Capability:• 500K lines of code• 8 yrs to develop• 21 servers• Achieved: 20K tracked

updates/sec, reliability and uptime challenges

With Connext DDS:• 50K lines of code—order

of magnitude less• 1 yr to develop—8x less• 1 laptop—20x less• Achieved: 250K+ tracked

updates/sec, no single point of failure

“This would not have been possible with any other known technology.”—Network Ops Center Technical Lead

Page 13: Managing Avionics Safety Certification for Unmanned Aircraft

Significant Potential Cost SavingsCertification Cost Savings Based on

Lines of Code Saved with Connext DDS30,000 ELOC 20,000 ELOC 10,000 ELOC

Level A $3,000,000 $2,000,000 $1,000,000

Level B $2,550,000 $1,700,000 $850,000

Level C $1,800,000 $1,200,000 $600,000

• Connext DDS certification evidence available at fraction of cost

• Availability at start of project also reduces risk

Page 14: Managing Avionics Safety Certification for Unmanned Aircraft