TECHNICAL STANDARD ORDERS (TSO) CERTIFICATION CONSIDERATION IN CHINA FOR INTEGRATED MODULAR AVIONICS (IMA) HARDWARE ELEMENTS Presented By: Frank(Fei) Xiao, AVIAGE SYSTEMS Date: April 21, 2016 ABOUT AVIAGE SYSTEMS PRODUCTS/SERVICE • Power of GE – AVIC 50/50 Joint Venture • Global Civil Avionics Business • Tie-One supplier in COMAC C919 program • Global Headquarter: Shanghai, China VISION Be the global civil avionics leader that elevates the future of flight by unleashing and integrating world-class talent, cutting-edge innovation, and powerful partnership. o Integrated Modular Avionics (IMA) o Display Systems (DS) o Flight Management Systems (FMS) o Onboard Maintenance Systems (OMS) o Flight Recording Systems (FRS) System and product level design, integration, verification, certification, and aftermarket support service. ABOUT SPEAKER Frank (Fei) Xiao Certification Engineer with AVIAGE SYSTEMS Responsible for driving and conducting TSO certification activities and assurance of electronic hardware compliance with DO-254. Began the aviation career at COMAC in 2008, and have over 8 years of experience in airworthiness certification, flight operation, and project management. Master’s Degree in Aircraft Engineering from Beijing University of Aeronautics and Astronautics (BUAA). Project Management Professional (PMP) certified by Project Management Institute (PMI). 3 4/27/2016 ABOUT TOPICS o Topic 1: Overview of the Chinese Technical Standard Order (CTSO) and its related regulations and guidelines issued by Civil Aviation Administration of China(CAAC), and the current bilateral airworthiness agreement on TSO articles between China /U.S and China/ E.U. o Topic 2: Consideration on use of TSO authorized components in IMA system development and certification process to meet the requirements of DO-297. o Topic 3: Practice and experience of the first CTSO-C153 certification program in China for IMA hardware elements. Note: The content of this presentation is based on the authors’ understanding and practice experience in relation to the CAAC regulations and guidance, which has not been endorsed or authorized by CAAC. 4 4/27/2016 TOPIC 1 Overview of Chinese Technical Standard Order (CTSO) 5 4/27/2016 CTSO & CTSOA AND GUIDELINES o A Chinese Technical Standard Order (CTSO) is a minimum performance standard issued by CAAC for specified material, parts, or appliances used on civil aircraft, as defined in CCAR-21-R3. And each CTSO is considered as part of CCAR-37. o A CTSO Authorization (CTSOA) is a CAAC design and production approval issued to a manufacturer of an article that has been found to meet a specific CTSO. CTSOA does not mean installation approval. o CAAC issued the following Administration Procedures (APs) which provide the guidance on design and production certification procedure : AP-21-06-R3 Certification Procedure for Civil Aviation Material, Part and Onboard Equipment AP-21-04-R3 Certification and Surveillance Procedure of Production Approval 6 4/27/2016 SUMMARY OF CTSO AUTHORIZED ARTICLES By Feb 16, 2015, CAAC has totally published 79 CTSOs, and issued 81 CTSOA certificates to 57 manufacturers for 226 types of appliances. Categories Distribution of CTSO Articles Approved by CAAC Data Source: CAAC AC-21-AA-2015-10R14 List of Approved Aviation Product and Part by CAAC 7 4/27/2016 AGREEMENT BETWEEN CAAC AND FAA ON TSO ARTICLES Oct 14, 1991 Mar 23, 1995 Oct 23, 2005 • Bilateral • Schedule of • Bilateral Aviation Airworthiness Implementation Safety Agreement Agreement (BAA) Procedures (SIP) (BASA) CAAC FAA DESIGN APPROVAL DESIGN APPROVAL • Validation of Design Approval (VDA) • Letter of Design Approval (LODA) • AP-21-AA-2009-19 • AC 21-46, Order 8150.1B Accept TSO articles imported from U.S. with: • FAA Export Certificates of Airworthiness • FAA Form 8130-3 Note: CAAC VDA is required when first time imported into China Accept CTSO articles imported from China with: • CAAC Export Certificates of Airworthiness for 6 types TSO articles: {TSO-C62d, C13f, C90c, C85A, C175, C127a} • CAAC Form AAC-038 8 4/27/2016 AGREEMENT BETWEEN CAAC AND EASA ON TSO ARTICLES April 6, 2010 • Working Agreement Between CAAC and EASA on ETSO and CTSO articles CAAC EASA APPROVAL per APPROVAL per • AP-21-06R3 for Design Approval - Should be CTSOA - CAAC VDA is not applicable • AP-21-04R3 for Production Approval Accept ETSO articles imported from • ETSOAP(Issue 2) for ETSOA procedure • POAP(Issue 1) for Production Approval • EASA Alternative Procedures to DOA Accept CTSO articles imported from EASA with: • Form AAC-038 issued by CAAC China with: • Form 1 issued by EASA 9 4/27/2016 TOPIC 2 Use of TSO Authorized Components in IMA System 1 0 4/27/2016 CONCEPT OF IMA IMA is a shared set of flexible, reusable, and interoperable hardware and software resources that, when integrated, form a platform that provides services, designed and verified to a defined set of safety and performance requirements, to host applications performing aircraft functions.[Section 1.2, DO-297] Relationship of IMA design terms (Figure Source: DO-297) 11 4/27/2016 IMA RELATED CERTIFICATION GUIDELINES FAA TSO-C153 2002 FAA AC 20-145 2003 RTCA DO-297 2005 CAAC MD-AA-2011-003 2011 FAA AC 20-170 2010 CAAC CTSO-C153 (2016) CAAC Issue Paper EE-9 2014 • DO-297 takes the concept of “incremental acceptance”, which divides the acceptance into six “certification tasks” in the certification program. • FAA AC 20-170 recognizes DO-297 as an acceptable means of compliance and provides explanations for IMA certification and approval in according with DO-297 as well as TSO-C153. • CAAC issued MD-AA-2011-003 and Issue Paper EE-9 to recognize AC 20-170 and DO-297 as acceptable guidance and means of compliance in C919 program. • Proposed CTSO-C153 is documented by reference to FAA TSO-C153, and it’s expected that CAAC will issue it in first half year of 2016. 12 4/27/2016 TSO-C153 VS FUNCTIONAL TSO FAA AC 20-170 specifies two types of TSO authorized components in IMA system: TSO-C153 • TSO-C153 applies for Functional TSOs • Functional TSOs are ones with the defined aircraft functionality, which are traditionally implemented by separate LRUs. • Not normally used except in the context of IMA systems. Generic hardware modules Cabinets/racks that host hardware modules Software that enables electronic part marking and/or future loading of functional software DO-297 Tasks Concept Task 4: Aircraft Integration of IMA System Task 3: IMA System Acceptance Task 2:Hosted Application Acceptance Task 1:Module Acceptance · Field Loaded Platform Components Task 1:Module Acceptance · Factory Loaded Boot Software(Firmware) Task 1:Module Acceptance · Hardware Elements TSO-C153 & FTSOs Concept IMA System Certification Under TC/STC Program via APR4754a(Including Installation Approval of TSO Authorization Articles) Functional TSOs Authorization: · Applications Hosted in IMA System · Field Loaded Platform Components TSO-C153 Authorization: · Hardware Elements · Factory Loaded Boot Software(Firmware) 13 4/27/2016 DO-297 ACCEPTANCE VERSUS TSO – FTSO • A non-TSO function is one that: o Is not covered by a TSO-approved minimum performance standard (MPS) o Does not support or affect the hosting article’s TSO function(s) o • Could technically be implemented outside of the TSO article. Functions and subfunctions contained in IMA system Is the function covered by TSO MPS? Y N So far, CAAC has not issued any related regulations or guidance on the definition of non-TSO functions and how to approve them in a CTSO program. Does the function Support or affect TSO functions (e.g. OS, Config) Y N Functional TSO + Supporting Functions N Could the function be implemented outside of the TSO article? Non-TSO Functions Y Definition of TSO/Non-TSO functions based on FAA Order 8110.4C 14 4/27/2016 TOPIC 3: CTSO-C153 Certification Consideration 1 5 4/27/2016 MINIMUM PERFORMANCE STANDARD (MPS) CTSO-C153 does not call out any industry standards as well as FAA TSO-C153. To obtain CTSO-C153 authorization, applicants must : Develop and submit an MPS for each individual hardware element in according to the criteria and guidance in Appendix A. Demonstrate the compliance to the requirements specified in the MPS. In the MPS, applicants should specify : All minimum performance requirements stated in measurable terms. [Table 1, Appendix 1, CTSO-C153 ] Requirements of environmental qualification tests per RTCA/DO-160D (change 2) [Table 1, Appendix 1, CTSO-C153] Test procedure to verify that the element performs its intended functions both over standard conditions and environmental condition. When to obtain functional TSO authorization with CTSO-C153 authorization together, the functions which assure that the hardware element correctly executes the functional software should be addressed in the MPS. 16 4/27/2016 TEST CONFIGURATION Test configuration should be specified in MPS or the separate test procedure documents. CTSO-C153 provides the minimum test configuration requirements of the hardware elements. o For cabinet or rack, the test configuration should include (as a minimum): Cabinet or rack with all integrated cooling and power supplies Power supply modules (if not integrated into the cabinet or rack) o For a module to be tested, the test configuration should include (as a minimum): Cabinet or rack Power supply modules (if required by the module to function) Processing modules (if required by the module to function) Processing modules Data communication modules (if not integrated into the cabinet or rack) Data communication (if required by the module to function) Appropriate covers or position fillers installed in all unused positions of cabinet/rack (if applicable). Appropriate covers or position fillers installed in all unused positions of cabinet/rack (if applicable). 17 4/27/2016 TEST CONFIGURATION WHEN to use the special purpose test software or functional software for demonstrating the operation of the hardware element functions, APPLICANTS must verify, validate, and control the configuration of the software to ensure the validity of the testing. WHEN to apply CTSO-C153 authorization for several separate IMA modules in the meantime, APPLICANTS may elect the approach of testing the related modules together installed in a cabinet or rack. 18 4/27/2016 ENVIRONMENTAL QUALIFICATION TEST (EQT) Applicants should perform the EQT per the environmental conditions specified in the MPS. Certain D0-160 EQT items are excluded from CTSO-C153 as specified in Table 2 of Appendix 1, as they can only be appropriately performed WITH: The configured IMA system specified for the applicable aircraft under TC/ STC. The functional software(s) installed and operating. Per Appendix A of AC 20-170, applicants may elect the applicable environmental qualification tests to meet the requirements of the customers and expected installation environment. Applicants may use Category X on any environmental test procedure to indicate that the compliance with the MPS has not been demonstrated under CTSO-C153 tests. 19 4/27/2016 MARKING LABEL CTSO MARKING DOES NOT MEAN CTSO MARKING MEANS • • The article deign meets the CAAC CTSO for which it is marked, The article conforms to the approved design since it was produced under an approved quality systems. General Requirement for CTSO articles: [CCAR §21.312] • Manufacturer’s name and address • Article’s name • Module Number/Part number • Serious number(or manufacture date) • CTSO number • • The article is approved for installation or, The article’s design meets airworthiness regulations for a particular product (aircraft, engine or propeller). Additional consideration for C153 Articles: [CTSO-C153] • “CTSO authorization for cabinet (rack) only” • Separate part numbers for hardware and software • Electronic TSO nameplate 20 4/27/2016 SUMMARY RTCA/DO-297 and FAA AC 20-170 provide the means of compliance of IMA certification and approval, and also provide the guidance on how to use the TSO certified components in IMA certification approval, which are followed in CAAC certification program. Applicants of CTSOA should consider the scope and requirements for CTSOC153 and Functional TSO as well as non-TSO functions. Applicants for CTSO-C153 authorization should develop and submit MPS for each individual hardware element, which should meet the specific requirements of CTSO-C153 and AC 20-170 (e.g. test configuration, DO-160 test items, marking label.) 21 4/27/2016 THE END 22 4/27/2016