research and safety at airbus ds -...

UPM SUMMER SCHOOL

LISA - Laboratory of ideas for Safety in Aviation. Addressing Aviation and ATM Safety Challenges

La Granja 11th-14th July, 2016

Jose Insenser, Airbus Defence and Space

Research and Safety at Airbus DS

11/07/2016 2

Summary

Airbus at a glance

Safety at Airbus DS Military Aircraft - Overview

Safety and Certification in Research

UAS Statu Quo

Open Innovation

Clean Sky 2

Increasingly Autonomous Systems

11/07/2016 3

Leading commercial aircraft

manufacturer

• Around 74,000 employees

• Since 2000, Airbus commercial

deliveries have increased by

60%

• Backlog more than doubled in

one decade (now equaling

10 years of production)

Fabrice Brégier

(CEO)

Leading helicopter

manufacturer


• Accounts for 1/3 of the global

helicopter fleet

• Delivered about 4,000

helicopters over the past

decade

Guillaume Faury

(CEO)

Europe’s No.1 defence

and space company


• Worldwide, it ranks second

for space and is among the

world’s top ten defence

companies

Dirk Hoke

(CEO)

11/07/2016 4

Military Aircraft

• A400M

• A330 Multi-Role Tanker Transport

• Special Mission Aircraft

• Combat Aircraft

• Unmanned Aerial Systems

• Full In-Service Support

• Launchers

• Telecommunication Satellites

• Earth Observation Satellites

• Navigation Satellites

• Orbital and Space Exploration Infrastructure

• Science Missions

• Earth Observation Satellite-based Geo-Intelligence Services

• Government Satellite Communication

• Command & Control (C5ISR) Systems

• Cybersecurity Solutions and Services

Space Systems CIS

11/07/2016 5

A strong position in every segment.

A400M: the most capable modern transport aircraft

MRTT: the benchmark for new generation tanker aircraft

C295: affordable, reliable and versatile platform

Eurofighter: Effective, Proven, Trusted

At the very top – our Military Aircraft

30%

60%

90%

market share

11/07/2016 6

Product and Flight Safety Organisation

Promote, develop and encourage all aspects of Product and Flight Safety

Scope: the Aircrafts we design (TC, STC, ITC), operate or are operated in our facilities

Support, Advise and Challenge the Functions

Interlocutor to Safety Agencies and Bodies

Methodology for accident investigation

Dissemination and Training related to Flight Safety

11/07/2016 7

Product and Flight Safety Process

All activities for prevention of accidents and incidents, to reduce risks in the operation, through the analysis of events occurred at any stage of the product life

Capture and analysis of all events that may impact on the Flight Safety

Lessons learnt in service, development and future A/C

Process improvement for the prevention of accidents

Multi-disciplinary addressing of issues; recording and traceability

Meeting all requirement by Airworthiness Authorities

11/07/2016 8

STANAG 4703

MTOW < 150Kg

STANAG 4702

Rotary Wing

UAS GCS Safety And Certification - Airworthiness

STANAG 4671

Suitable for Safe Flight

TOW between 150 and 20,000 kg

Operate in non-segregated airspace

Ground Segment Requirements:

Failure Probability

Human Factors

Recording Functions

11/07/2016 9

UAS GCS Safety And Certification - Redundancy

Avoid Single Point of Failure

Critical Functions (HW&SW)

Operators

Data buses

Power Supply

Air Conditioning

11/07/2016 10

Health monitoring panels

CLEAR

ABORT ATOL

NAV LIGHT ON

NAV OFF

COLL LIGHT ON

COLL LIGHT OFF

DE-ICE

LAND

LEFT HOLDING

RESUME NORMAL FLIGHT

ACTIVE FP

EMERGENCY STOP

EMERGENCY RECOVERY

PDL RESET SDL RESETRIGHT

HOLDING

AUDIO FREQ

855 Hz

AUTOMATIC

SEMI AUTOMATIC

PDL ON

PDL OFF

SDL ON

SDL OFF

DOWN-LINK PDL

DOWN-LINK SDL

DL ACTIVE

DL SILENT

ALTITUDE

2580 ft

SPEED

147 kts

HEADING

147 º

GO WP

8

PDL CHANNEL

16

SDL CHANNEL

8

CLEAR ATOL

IFF ON

IFF OFF

MODE

1,2,3,4

IFF CODE

xxx

CONFIRM

HEADING

CANCEL

HEADING

0

1

4

7

2 3

5 6

8 9

HEADING: 18_ º

+10

-10

+1

-1

BANK ANGLE

5 º

QNH

1005 mbar

DIM ON

DIM OFF

Command panels

Commands and health monitoring computers

Mission Planning and Monitoring workstations

Servers

Mission Planning and Monitoring panels

Critical Part

RT HW Architecture (VME/VPX) ARINC 653 RTOS

DO-178B DAL D/A SW Redundant IP networks

Redundant hardware

Non-Critical Part PC x86 Architecture General Purpose OS Independent network Workstations + Servers

Health monitoring panels

CLEARABORT ATOL NAV LIGHT ONNAV OFFCOLL LIGHT ONCOLL LIGHT OFFDE-ICELANDLEFT HOLDINGRESUME NORMAL FLIGHT ACTIVE FPEMERGENCY STOPEMERGENCY RECOVERY PDL RESET SDL RESETRIGHTHOLDING AUDIO FREQ855 HzAUTOMATICSEMI AUTOMATIC PDL ONPDL OFF SDL ONSDL OFF DOWN-LINK PDLDOWN-LINK SDLDL ACTIVEDL SILENTALTITUDE2580 ft SPEED147 ktsHEADING147 º GO WP8 PDL CHANNEL16 SDL CHANNEL8CLEAR ATOL IFF ONIFF OFF MODE1,2,3,4IFF CODExxxCONFIRMHEADING CANCELHEADING0147 2 35 68 9HEADING: 18_ º +10-10+1-1BANK ANGLE5 º QNH1005 mbarDIM ONDIM OFF

Command panels

Commands and health monitoring computers

Mission Planning and Monitoring workstations

Servers

Mission Planning and Monitoring panels

Critical Part

RT HW Architecture (VME/VPX) ARINC 653 RTOS

DO-178B DAL D/A SW Redundant IP networks

Redundant hardware

Non-Critical Part PC x86 Architecture General Purpose OS Independent network Workstations + Servers

UAS GCS Safety And Certification - Segregation

11/07/2016 11

UAS GCS – Human Factors

Human Centered Design Human Errors: Incorrect actions / reactions

“Human errors effects should be minimized”

Tasks Analysis Warnings and related actions

Multi-Vehicle Control

Operators per vehicle

Data Analysis

Workload vs. automation

Ergonomy Field of View

Accessibility

11 9 de julio de 2014

11/07/2016 12

UAS GCS – Security

TEMPEST Protection against leaking emissions

RED/BLACK segregation

Common Criteria for ITSec Evaluation Information security

Standardised evaluation and certification procedures

Different Assurance Levels (EALs)

Challenges Security vs. operation

Security vs. safety

12 9 de julio de 2014

11/07/2016 13

UAS GCS Open Innovation

Air To Air Refueling

Integration in NSA

Embedded Training

Situational Awareness

Stress Management

Automated Mission Planning

Secure GCS

Decision Support

11/07/2016 14

UAS GCS Open Innovation

• Speech Recognition

• Stress assessment

• Gesture control

• Augmented reality

• Multi-UAV control

• Multimedia interfaces / VR

• Minimum time search

• Multiagent mission

planning

• Pattern detection for

training

• Automatic AAR

• Health Monitoring

• Security

• Integration in NSA

Research Program

Customer View

Research Demonstrator

SAR EO/IR MTI / ESM

TUAV MALE

Vision

CONOPS

Design

R&T GCS (GREPS)

Partner

components

SAVIER goal: an Open Innovation Research Program and a parallel Research Demonstrator to validate and integrate the state-of-the-art technological components from the research,

for the future Airbus D&S UAS Family GCS

11/07/2016 15

UAS GCS Open Innovation (2/12: UAS in ATM & Cyber) TD07 - Innovative Authentication,

Authorization and Audit for distributed

interoperable GCS architectures

Control of Mobile Information Access,

Database Access , Operating System Access,

C2 Access

TD012 - Future intensive use of UASs for civil

and military applications in non-segregated

airspace

DSS for GCS communication with ATM to

integrate UAVs into SESAR 2020 non

segregated airspace

11/07/2016 16

R&D – Clean Sky 2

11/07/2016 17

R&D – CS2 Next Gen Systems, Cockpit and Avionics Challenge

Increasing complexity of the aircraft / systems (need for performance and vehicle optimization), in particular in abnormal or adverse conditions,

Increasing complexity of the ATS as a whole , and of ATM in particular,

Increasing heterogeneity of crew population and of their operational environment

Ensuring high safety level,

Supporting the growth of fleet and of global traffic

Providing operators with solutions for economic benefits such as to enable flexibility of operations

minimize disruption of service (failure, weather, …),

answers to disruptive “expectations” from low cost operators

connect aircraft to all operations,

reduce time to market with affordable new functionalities,

11/07/2016 18

R&D CS2 Next Gen Systems, Cockpit and Avionics

11/07/2016 19

R&D – CS2 Next Gen Systems, Cockpit and Avionics Disruptive Cockpit

Continuous auto-pilot, reduce pilot workload

Systems management improvement

Aircraft status, pilot health and behaviour monitoring

Mission management systems to support aircraft navigation, e.g. helping to manage diversions

More intuitive interfaces for integration of all commands and displays

Augmented vision system with HUD/HDD

Speech recognition /or head-down displays

Context: SESAR2 ATS, 4D trajectories, highly connected (AOC/ATC)

11/07/2016 20

R&D – CS2 – Next Gen Systems, Cockpit and Avionics

Enhanced Flight Operations Head Worn Display System Failure Cockpit Pilot Monitoring System Voice to System & Multimodality

Aircraft Monitoring Chain Ground support operator to assist pilots in order to ensure safe

operation and maintain the A/C integrated into the ATM infrastructures, Provide the remote operator adequate HMI to an operational

environment where several aircrafts are monitored simultaneously

11/07/2016 21

CS2 – Pilot Workload Reduction Project Simplify pilot interactions in the cockpit considering Human Factors

Develop new ways of improving pilots Situational Awareness and reduce pilots Workload keeping flight safety level and operation effectiveness.

• Five Topics are researched in collaboration with other European Industries and Research Centers with the proposal of:

o Reducing the number of dedicated manual controls and procedures

o Enhancement of displayed information to the pilot

o Monitoring the pilot capacity status (in terms of fatigue, stress, etc.) and provide a ground support under specific situations to ensure safety operation

The main goal is to elevate the maturity level of these technologies in order to introduce the improvements in the next generation of our Transport Aircraft

11/07/2016 22

CS2 – Pilot Workload Reduction Project

Information Relevant to

the task

Reliable Ground-Air data comm.

Light Weight Eye Visor for displaying information that require

imminent actuation.

Voice to Command Speech recognition

technology for reducing crew manual interaction

in the cockpit

Procedure Automation Automate warning response by letting the system to run

checklist & associated actions and A/C

reconfiguration per flight phase

Pilot data acquisition prognosis & diagnosis system

Develop new concept for prognosis & diagnosis techniques for pilot

monitoring using non-intrusive sensors

Aircraft Monitoring Chain for ground support.

Ground support operator to provide assistance under

specific situations to to ensure a safe operation

11/07/2016 23

CS2 – Pilot Workload Reduction Project

On-Ground demostration in a Cockpit Simulator Each individual technology solution will be integrated and evaluated standalone. Finally an operational evaluation will be performed in a second step, including more complete scenarios, with the integration of all technological solution in order to determine how these technologies contribute to the expected operational & Human Factors objectives

In Flight Demonstration Voice to Command Pilot Data Acquisition Prognosis & Diagnosis

11/07/2016 24

CS2 – Pilot Workload Reduction – High Level Objectives

Enhancement Light-Weight Eye Visor • To reduce visual transition in/out the cockpit in critical phases of flight (T/O,

LDG, Approach) in all external light conditions. • To project the visual information in eye line, using Light-Weight Eye device,

not requiring Helmet wearing. • To improve data integration and processing from aircraft systems providing to

the crew the needed information relevant to the tasks. • To help the crew by reducing the time and effort on accessing to the

information with the development of new smart Head-up symbology minimizing cluttering .

• To be integrated and validated into the Cockpit Simulator –TRL4/TRL5

IOP

Visor

ND

Video Computer

ETCAS

EGPWS

11/07/2016 25


Voice Recognition Command.

• To reduce crew manual interaction in the cockpit in order to increase manual crew spare activity capacity.

• To reduce the number of dedicated mechanical controls in the cockpit by using voice command with better ways other than direct manual activation.

• To increase speech recognition rate and pilot usability in all phases of flight and in different cockpit noise condition.

• Voice command recognition pilot feedback using visual means (Light-Weight Eye Visor) • To be integrated and validated into the Cockpit Simulator –TRL4/TRL5 • If sufficient TRL is reached and it is feasible to adapt the system demonstrator for flight test

It will be tested in flight (FTB2) to reach TRL6

11/07/2016 26


Procedure Automation

• To define a new approach in the pilot action philosophy either during normal operation or after system failure occurrence in order to increase procedure automation during the checklist running.

• To increase pilot mental spare capacity, especially during emergency situations. • To re-orientate pilot task from system management to other tasks that would

request more demand • To provide visual feedback (Light-Weight Eye Visor), in order to maintain pilot in-

the-loop during checklist running • To be integrated and validated into the Cockpit Simulator –TRL4/TRL5

11/07/2016 27


Pilot data acquisition prognosis & diagnosis system.

• To identify the relevant physiologic parameter for stress and fatigue pilot measurement (BPD, GSR, ST, BR, HRV,….)

• To define the pattern for pilot behavioral during complex environment, critical phase of flight or degraded conditions

• To develop and to integrate pilot monitoring system, including new non-intrusive suit of parametric sensors

• To integrate pilot monitoring system in the management system to permit a workload reduction

• To develop new patterns and algorithms for pilots based on machine learning • To explore new concept for prognostic and diagnostic techniques applied to pilot monitoring. • To be integrated and validated into the Cockpit Simulator –TRL4/TRL5 Acronyms:

BPD: Blood Pressure GSR: Galvanic Skun Response ST: Skin Temp. BR: Bread Rate HRV: Heart Rate Variability

Pilot Monitoring FMS ATC

11/07/2016 28


Aircraft Monitoring Chain for Ground Support.

• To allow a Ground support operator(s) to provide the proper assistance to the onboard pilot(s) in order to ensure a safe operation in the most adequate conditions taking into account external information not available to the onboard crew.

• To provide this operator(s) with an adequate HMI to this operational environment where several aircrafts could be monitored simultaneously.

• To perform a detailed analysis of the workload and tasks required to this remote operator(s), in basis of the prototype of the on-ground system to be developed.

• To analyze the needs and necessary means in terms of communication system(s) to ensure the capabilities above mentioned.

• As a practical demonstration of the technical solution developed, the system shall generate a flight plan on the ground segment, which will be uploaded for its acceptance by the onboard pilot(s), by means of the ground-air communication system.

• To be integrated and validated into the Cockpit Simulator –TRL4/TRL5

ATC

11/07/2016 29


Promise safety, reliability, efficiency, affordability and mission capability improvements

Able to perform more complex tasks with less human intervention, remotely, for ATM and other ground-based elements of the ATS

Unanswered questions: how to safely integrate these revolutionary technological advances into a well-established, safe, and efficiently functioning ATS

11/07/2016 30

Increasingly Autonomous Systems – Tech Barriers

Communications and data acquisition

Cyberphysical security

Decision making by adaptive/nondeterministic systems

Diversity of vehicles

Human–machine integration

Sensing, perception, and cognition

System complexity and resilience

Verification and validation (V&V)

11/07/2016 31


Regulation Barriers

Airspace access for unmanned aircraft

Certification process

Equivalent level of safety

Trust in adaptive/nondeterministic IA systems

Additional Barriers

Legal issues and

Social issues

11/07/2016 32

Recommendation

Develop standards and processes for the verification, validation, and certification of IA systems, and determine their implications for design

Develop methodologies for accepting technologies not traditionally used in civil aviation (e.g., open-source software and consumer electronics products) in IA systems

Safety and Efficiency. Determine how IA systems could enhance the safety and efficiency of civil aviation

11/07/2016 33

research and safety at airbus ds -...

Documents