Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778009
Evan Dill, S. Young, K. Hayhurst
As demands increase to use unmanned aircraft systems (UAS) for a broad spectrum of commercial applications, regulatory authorities are examining how to safely integrate them without loss of safety or major disruption to existing airspace operations. This work addresses the development of the Safeguard system as an assured safety net technology for UAS. The Safeguard system monitors and enforces conformance to a set of rules defined prior to flight (e.g., geospatial stay-out or stay-in regions, speed limits, altitude limits). Safeguard operates independently of the UAS autopilot and is strategically designed in a way that can be realized by a small set of verifiable functions to simplify compliance with regulatory standards for commercial aircraft. A framework is described that decouples the system from any other devices on the UAS as well as introduces complementary positioning source(s) for applications that require integrity and availability beyond what the Global Positioning System (GPS) can provide. Additionally, the high level logic embedded within the software is presented, as well as the steps being taken toward verification and validation (V&V) of proper functionality. Next, an initial prototype implementation of the described system is disclosed. Lastly, future work including development, testing, and system V&V is summarized.
{"title":"SAFEGUARD: An assured safety net technology for UAS","authors":"Evan Dill, S. Young, K. Hayhurst","doi":"10.1109/DASC.2016.7778009","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778009","url":null,"abstract":"As demands increase to use unmanned aircraft systems (UAS) for a broad spectrum of commercial applications, regulatory authorities are examining how to safely integrate them without loss of safety or major disruption to existing airspace operations. This work addresses the development of the Safeguard system as an assured safety net technology for UAS. The Safeguard system monitors and enforces conformance to a set of rules defined prior to flight (e.g., geospatial stay-out or stay-in regions, speed limits, altitude limits). Safeguard operates independently of the UAS autopilot and is strategically designed in a way that can be realized by a small set of verifiable functions to simplify compliance with regulatory standards for commercial aircraft. A framework is described that decouples the system from any other devices on the UAS as well as introduces complementary positioning source(s) for applications that require integrity and availability beyond what the Global Positioning System (GPS) can provide. Additionally, the high level logic embedded within the software is presented, as well as the steps being taken toward verification and validation (V&V) of proper functionality. Next, an initial prototype implementation of the described system is disclosed. Lastly, future work including development, testing, and system V&V is summarized.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"123 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134606599","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778074
X. Jean, L. Mutuel, V. Brindejonc
In recent years, the use of multi-core processors in avionics systems has supported the increase in performance and level of integration of safety-critical functions. However, multi-core processors stretch the current hardware and software assurance processes, which are the foundations of safe design process for airworthiness. The main concern with the use of multi-core processors in the aerospace safety-critical domain is their lack of predictability, which makes safety assessment at component level impractical. We propose thereafter a system level approach wherein the need for determinism is considered for each function implemented on the multi-core processor. This paper details the use of a top-down safety method to isolate high-level sources of non-determinism. This isolation substantiates limiting the scope of the complementary and conventional bottom-up safety assessment. Specific attention is paid to interferences through the proposed interference-aware safety analysis that identifies interference paths, analyzes each path for its effect on the required demonstration of determinism, and justifies mitigation strategies. The result is the mitigation of the shortcomings in the current guidance on multi-core processors, using an approach to safe design and safety methods particularly adapted to complex computational systems with high integration levels.
{"title":"Assurance methods for COTS multi-cores in avionics","authors":"X. Jean, L. Mutuel, V. Brindejonc","doi":"10.1109/DASC.2016.7778074","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778074","url":null,"abstract":"In recent years, the use of multi-core processors in avionics systems has supported the increase in performance and level of integration of safety-critical functions. However, multi-core processors stretch the current hardware and software assurance processes, which are the foundations of safe design process for airworthiness. The main concern with the use of multi-core processors in the aerospace safety-critical domain is their lack of predictability, which makes safety assessment at component level impractical. We propose thereafter a system level approach wherein the need for determinism is considered for each function implemented on the multi-core processor. This paper details the use of a top-down safety method to isolate high-level sources of non-determinism. This isolation substantiates limiting the scope of the complementary and conventional bottom-up safety assessment. Specific attention is paid to interferences through the proposed interference-aware safety analysis that identifies interference paths, analyzes each path for its effect on the required demonstration of determinism, and justifies mitigation strategies. The result is the mitigation of the shortcomings in the current guidance on multi-core processors, using an approach to safe design and safety methods particularly adapted to complex computational systems with high integration levels.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133804496","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778048
C. Wargo, Corey Snipes, A. Roy, R. Kerczewski
A key requirement in preparing for a growing UAS industry and for the integration of unmanned vehicles into the US national airspace, is a method for clear and specific forecasting. We must know what types of operations are being performed, where they will occur, and what types of vehicles will be used. Current demand forecast models are not tightly coupled to the real purpose of the mission requirements (e.g. in terms the real locations of physical structures such as windmills to inspect, farms to survey, pipelines to patrol, etc.). To this end, Mosaic ATM under NASA guidance, is developing a crowd-sourced demand forecast engine for commercial and government organizational users to draw upon and share vetted and accurate projection data, and extend that data to evaluate associated impacts. The UAS Demand Generator for Discrete Airspace Density (UAXPAN) project combines forecast data from disparate sources in a common data format, and uses these to present a solid basis for demand forecasts. This specific, data-driven forecasting is crucial to understanding the impacts of a growing UAS industry on regional infrastructure, environment, and economy.
{"title":"UAS industry growth: Forecasting impact on regional infrastructure, environment, and economy","authors":"C. Wargo, Corey Snipes, A. Roy, R. Kerczewski","doi":"10.1109/DASC.2016.7778048","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778048","url":null,"abstract":"A key requirement in preparing for a growing UAS industry and for the integration of unmanned vehicles into the US national airspace, is a method for clear and specific forecasting. We must know what types of operations are being performed, where they will occur, and what types of vehicles will be used. Current demand forecast models are not tightly coupled to the real purpose of the mission requirements (e.g. in terms the real locations of physical structures such as windmills to inspect, farms to survey, pipelines to patrol, etc.). To this end, Mosaic ATM under NASA guidance, is developing a crowd-sourced demand forecast engine for commercial and government organizational users to draw upon and share vetted and accurate projection data, and extend that data to evaluate associated impacts. The UAS Demand Generator for Discrete Airspace Density (UAXPAN) project combines forecast data from disparate sources in a common data format, and uses these to present a solid basis for demand forecasts. This specific, data-driven forecasting is crucial to understanding the impacts of a growing UAS industry on regional infrastructure, environment, and economy.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"44 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115233842","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7777977
J. Mercer, S. Espinosa, Nancy Bienert, Sean Laraway
A Human-In-The-Loop simulation was conducted in January of 2013 in the Airspace Operations Laboratory at NASA's Ames Research Center. The simulation airspace included two en route sectors feeding the northwest corner of Atlanta's Terminal Radar Approach Control. The focus of this paper is on how uncertainties in the study's trajectory predictions impacted the controllers' ability to perform their duties. Of particular interest is how the controllers interacted with the delay information displayed in the meter list and data block while managing the arrival flows. Due to wind forecasts with 30-knot over-predictions and 30-knot under-predictions, delay value computations included errors of similar magnitude, albeit in opposite directions. However, when performing their duties in the presence of these errors, did the controllers issue clearances of similar magnitude, albeit in opposite directions? This paper describes the use of a novel technique (Interrupted Time Series) to examine the controller response data.
{"title":"Differing air traffic controller responses to similar trajectory prediction errors: An interrupted time-series analysis of controller behavior","authors":"J. Mercer, S. Espinosa, Nancy Bienert, Sean Laraway","doi":"10.1109/DASC.2016.7777977","DOIUrl":"https://doi.org/10.1109/DASC.2016.7777977","url":null,"abstract":"A Human-In-The-Loop simulation was conducted in January of 2013 in the Airspace Operations Laboratory at NASA's Ames Research Center. The simulation airspace included two en route sectors feeding the northwest corner of Atlanta's Terminal Radar Approach Control. The focus of this paper is on how uncertainties in the study's trajectory predictions impacted the controllers' ability to perform their duties. Of particular interest is how the controllers interacted with the delay information displayed in the meter list and data block while managing the arrival flows. Due to wind forecasts with 30-knot over-predictions and 30-knot under-predictions, delay value computations included errors of similar magnitude, albeit in opposite directions. However, when performing their duties in the presence of these errors, did the controllers issue clearances of similar magnitude, albeit in opposite directions? This paper describes the use of a novel technique (Interrupted Time Series) to examine the controller response data.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115018203","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7777969
B. Haindl, M. Lindner
This paper provides an IPv6 mobility and multi-link solution proposed in SESAR project P15.02.04. It is based on the Locator/Identifier Separation Protocol with the goal to minimize the complexity in the aircraft and the overhead in the A/G datalinks. This solution is a ground based network solution, where all the routing and mobility functionalities are necessary only in network equipment on ground, fully transparent for all end systems. The scope of the ground based LISP solution is the global mobility management, i.e. it covers the vertical handover between different A/G data links and handovers between different mobility service providers.
{"title":"Ground based lisp for multilink operation in ATN/IPS communication infrastructure","authors":"B. Haindl, M. Lindner","doi":"10.1109/DASC.2016.7777969","DOIUrl":"https://doi.org/10.1109/DASC.2016.7777969","url":null,"abstract":"This paper provides an IPv6 mobility and multi-link solution proposed in SESAR project P15.02.04. It is based on the Locator/Identifier Separation Protocol with the goal to minimize the complexity in the aircraft and the overhead in the A/G datalinks. This solution is a ground based network solution, where all the routing and mobility functionalities are necessary only in network equipment on ground, fully transparent for all end systems. The scope of the ground based LISP solution is the global mobility management, i.e. it covers the vertical handover between different A/G data links and handovers between different mobility service providers.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"207 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115042879","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778096
B. Parke, C. Mohlenbrink, Connie L. Brasil, Constantine Speridakos, Hyo-sang Yoo, Faisal Omar, Nathan Buckley, Conrad Gabriel, A. Belfield, Paul U. Lee, N. Smith
There is a checkbox in the Time-Based Flow Management (TBFM) scheduling window which, when checked by a Traffic Management Coordinator (TMC), makes room for a departure to fit into a crowded airborne stream. The checkbox ON algorithm accomplishes this by delaying the Scheduled Times of Arrivals (STAs) of the airborne flights upstream of the TBFM freeze horizons and compressing these flights to their minimum required spacing, thereby creating a full departure slot. Hence, having the checkbox ON can reduce the frequent ground delays of aircraft departing near high volume airports but can increase delays for airborne arrivals. A Human-in-the-Loop (HITL) simulation compared arrival and departure delays to Newark Airport (EWR) with the checkbox ON vs. OFF as the default position. Three other conditions in this HITL involved various National Airspace System (NAS)-wide approaches for timely delivery of aircraft to the TBFM region. These conditions were: Baseline, using current Mile-in-Trail (MIT) spacing restrictions; Integrated Demand Management (IDM), where all aircraft were given departure times (Expect Departure Clearance Times, or EDCTs), ultimately based on the EWR Airport Arrival Rate; and IDM plus Required Time of Arrival (RTA), a flight deck tool which allowed some aircraft to meet a controlled time of arrival to the TBFM area more precisely. Results showed that the checkbox tool was powerful: with the checkbox ON, departure delays decreased and airborne delays increased, as predicted. However, assuming that the cost ratio of a minute of airborne delay to a minute of departure delay is in the range of 1.2 to 3, as commonly indicated by the literature, checkbox ON and checkbox OFF conditions showed approximately equal total delay costs, i.e., the cost of delays in the air balanced the cost of the delay on the ground. The three scheduling conditions also had approximately equal total delay costs, although a simulation artifact may have reduced the delays in the Baseline condition. In the debrief following the simulation, the TMCs concluded that the checkbox should be used flexibly depending on the current delay situation, and suggested modifications to the checkbox tool which would help them use it in this way, along with enhanced training. The relatively similar total cost of both checkbox default options in this simulation indicates that this might be a fruitful approach, and replace the necessity to have the checkbox rigidly set to either ON or OFF.
{"title":"Reducing departure delays for adjacent center airports using time-based flow management scheduler: Checkbox ON or OFF?","authors":"B. Parke, C. Mohlenbrink, Connie L. Brasil, Constantine Speridakos, Hyo-sang Yoo, Faisal Omar, Nathan Buckley, Conrad Gabriel, A. Belfield, Paul U. Lee, N. Smith","doi":"10.1109/DASC.2016.7778096","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778096","url":null,"abstract":"There is a checkbox in the Time-Based Flow Management (TBFM) scheduling window which, when checked by a Traffic Management Coordinator (TMC), makes room for a departure to fit into a crowded airborne stream. The checkbox ON algorithm accomplishes this by delaying the Scheduled Times of Arrivals (STAs) of the airborne flights upstream of the TBFM freeze horizons and compressing these flights to their minimum required spacing, thereby creating a full departure slot. Hence, having the checkbox ON can reduce the frequent ground delays of aircraft departing near high volume airports but can increase delays for airborne arrivals. A Human-in-the-Loop (HITL) simulation compared arrival and departure delays to Newark Airport (EWR) with the checkbox ON vs. OFF as the default position. Three other conditions in this HITL involved various National Airspace System (NAS)-wide approaches for timely delivery of aircraft to the TBFM region. These conditions were: Baseline, using current Mile-in-Trail (MIT) spacing restrictions; Integrated Demand Management (IDM), where all aircraft were given departure times (Expect Departure Clearance Times, or EDCTs), ultimately based on the EWR Airport Arrival Rate; and IDM plus Required Time of Arrival (RTA), a flight deck tool which allowed some aircraft to meet a controlled time of arrival to the TBFM area more precisely. Results showed that the checkbox tool was powerful: with the checkbox ON, departure delays decreased and airborne delays increased, as predicted. However, assuming that the cost ratio of a minute of airborne delay to a minute of departure delay is in the range of 1.2 to 3, as commonly indicated by the literature, checkbox ON and checkbox OFF conditions showed approximately equal total delay costs, i.e., the cost of delays in the air balanced the cost of the delay on the ground. The three scheduling conditions also had approximately equal total delay costs, although a simulation artifact may have reduced the delays in the Baseline condition. In the debrief following the simulation, the TMCs concluded that the checkbox should be used flexibly depending on the current delay situation, and suggested modifications to the checkbox tool which would help them use it in this way, along with enhanced training. The relatively similar total cost of both checkbox default options in this simulation indicates that this might be a fruitful approach, and replace the necessity to have the checkbox rigidly set to either ON or OFF.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116294758","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778093
Michael B. Dillard, U. Orhan, E. Letsu-Dake
Cognitive abilities are diminished when individuals are deprived of sleep. Due to the safety risks posed while flying fatigued, the effectiveness of a nonintrusive pilot fatigue monitoring system was evaluated by classifying yoke inputs. An AUC value of 0.9 was achieved. Critically, the system remained unobtrusive to the pilots by passively observing yoke behavior.
{"title":"Nonintrusive pilot fatigue monitoring","authors":"Michael B. Dillard, U. Orhan, E. Letsu-Dake","doi":"10.1109/DASC.2016.7778093","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778093","url":null,"abstract":"Cognitive abilities are diminished when individuals are deprived of sleep. Due to the safety risks posed while flying fatigued, the effectiveness of a nonintrusive pilot fatigue monitoring system was evaluated by classifying yoke inputs. An AUC value of 0.9 was achieved. Critically, the system remained unobtrusive to the pilots by passively observing yoke behavior.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"62 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128645418","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778079
David J. Rinehart, Philip J. Smith, M. Peters, A. Spencer
For the past several years, our team has developed and experimented with a novel method to support the verification and validation (V&V) of autonomous systems. This method, entitled Expert-Guided Scenarios for Autonomy Validation (EGS-AV), combines an extensible, database-oriented information model for operational scenarios with a systematic process for eliciting validation information from subject matter experts (SMEs). EGS-AV fills a critical V&V need, providing a standard information model for operational scenarios and a comprehensive process for eliciting the highest-priority content of such scenarios. EGS-AV is designed to support V&V activities throughout the system development lifecycle and is especially valuable for finding flaws and weaknesses in the pre-prototype stage of complex, autonomous systems. In this paper, we describe the experimental application of EGS-AV to a ground control station (GCS) for multiple sUAS (small unmanned aircraft systems) in a future commercial services context. The GCS design, called Fleet HQ, was developed to the level of preliminary functions, architecture, and operational characteristics. The Fleet HQ design was then run through the EGS-AV method which identified and documented critical scenarios collaboratively with SMEs having a range of relevant expertise (piloting, design, operations management, testing, etc.). Outcomes of EGS-AV in this application included the targeted scenarios (most significant off-nominal factors and potential accident sequences) and recommended design considerations. Typically EGS-AV analysis products translate to design improvements or further V&V analysis, simulation, and/or testing. In this paper, we describe the Fleet HQ EGS-AV analysis activities and outcomes. We also draw conclusions based on this analysis for both the Fleet HQ design and the nascent EGS-AV method.
{"title":"Structured expert scenario methodology for autonomous system validation applied to a multi- UAS ground control station design","authors":"David J. Rinehart, Philip J. Smith, M. Peters, A. Spencer","doi":"10.1109/DASC.2016.7778079","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778079","url":null,"abstract":"For the past several years, our team has developed and experimented with a novel method to support the verification and validation (V&V) of autonomous systems. This method, entitled Expert-Guided Scenarios for Autonomy Validation (EGS-AV), combines an extensible, database-oriented information model for operational scenarios with a systematic process for eliciting validation information from subject matter experts (SMEs). EGS-AV fills a critical V&V need, providing a standard information model for operational scenarios and a comprehensive process for eliciting the highest-priority content of such scenarios. EGS-AV is designed to support V&V activities throughout the system development lifecycle and is especially valuable for finding flaws and weaknesses in the pre-prototype stage of complex, autonomous systems. In this paper, we describe the experimental application of EGS-AV to a ground control station (GCS) for multiple sUAS (small unmanned aircraft systems) in a future commercial services context. The GCS design, called Fleet HQ, was developed to the level of preliminary functions, architecture, and operational characteristics. The Fleet HQ design was then run through the EGS-AV method which identified and documented critical scenarios collaboratively with SMEs having a range of relevant expertise (piloting, design, operations management, testing, etc.). Outcomes of EGS-AV in this application included the targeted scenarios (most significant off-nominal factors and potential accident sequences) and recommended design considerations. Typically EGS-AV analysis products translate to design improvements or further V&V analysis, simulation, and/or testing. In this paper, we describe the Fleet HQ EGS-AV analysis activities and outcomes. We also draw conclusions based on this analysis for both the Fleet HQ design and the nascent EGS-AV method.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129311162","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7777978
Tom Guillaumet, Aayush Sharma, E. Feron, M. Krishna, R. Narayan, P. Baufreton, Francois Neumann, E. Grolleau
With the onset of multi- and many-core chips, the single-core market is closing down. Those chips constitute a new challenge for aerospace and safety-critical industries in general. Little is known about the certification of software running on these systems. There is therefore a strong need for developing software architectures based on multi-core architectures, yet compliant with safety-criticality constraints. This paper presents a reconfigurable multi-core architecture and the safety-criticality constraints for airborne systems. The last section uses the current certification guidance to explain how the architecture can satisfy these constraints even with dynamic features activated.
{"title":"Using reconfigurable multi-core architectures for safety-critical embedded systems","authors":"Tom Guillaumet, Aayush Sharma, E. Feron, M. Krishna, R. Narayan, P. Baufreton, Francois Neumann, E. Grolleau","doi":"10.1109/DASC.2016.7777978","DOIUrl":"https://doi.org/10.1109/DASC.2016.7777978","url":null,"abstract":"With the onset of multi- and many-core chips, the single-core market is closing down. Those chips constitute a new challenge for aerospace and safety-critical industries in general. Little is known about the certification of software running on these systems. There is therefore a strong need for developing software architectures based on multi-core architectures, yet compliant with safety-criticality constraints. This paper presents a reconfigurable multi-core architecture and the safety-criticality constraints for airborne systems. The last section uses the current certification guidance to explain how the architecture can satisfy these constraints even with dynamic features activated.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129573830","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2016-09-01DOI: 10.1109/DASC.2016.7778029
Suraj Bijjahalli, S. Ramasamy, R. Sabatini
Unmanned Aircraft System (UAS) navigation in urban environments using Global Navigation Satellite System (GNSS) as a primary sensor is limited in terms of accuracy and integrity due to the presence of antenna masking and signal multipath effects. In this paper, a GNSS Aircraft-Based Integrity Augmentation (ABIA) system is presented. This system relies on detailed modeling of signal propagation and multipath effects to produce predictive and reactive alerts (cautions and warnings) in urban environments. The model predictive capability is then used to augment path-planning functionalities in the UAS Traffic Management (UTM) context. The models of the presented system are corroborated by performing simulation case studies in typical urban canyons, wherein positioning integrity is degraded by multipath and masking.
{"title":"Masking and multipath analysis for unmanned aerial vehicles in an urban environment","authors":"Suraj Bijjahalli, S. Ramasamy, R. Sabatini","doi":"10.1109/DASC.2016.7778029","DOIUrl":"https://doi.org/10.1109/DASC.2016.7778029","url":null,"abstract":"Unmanned Aircraft System (UAS) navigation in urban environments using Global Navigation Satellite System (GNSS) as a primary sensor is limited in terms of accuracy and integrity due to the presence of antenna masking and signal multipath effects. In this paper, a GNSS Aircraft-Based Integrity Augmentation (ABIA) system is presented. This system relies on detailed modeling of signal propagation and multipath effects to produce predictive and reactive alerts (cautions and warnings) in urban environments. The model predictive capability is then used to augment path-planning functionalities in the UAS Traffic Management (UTM) context. The models of the presented system are corroborated by performing simulation case studies in typical urban canyons, wherein positioning integrity is degraded by multipath and masking.","PeriodicalId":340472,"journal":{"name":"2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130469966","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}