Security assessment method for integrated modular avionics system

Abstract

The invention belongs to the technical field of comprehensive modular avionics system safety assessment, and particularly relates to a comprehensive modular avionics system safety assessment method. On the basis of links such as aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional risk analysis IMA SFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, component-level fault mode and impact analysis LRM FMEA, integrated modular avionics system safety analysis IMA SSA, aircraft-level safety analysis ASA and the like, the safety analysis of the aircraft-level avionics system is improved. Cascade influence analysis is added, so that the harm caused by physical integration, information fusion and task synthesis of the integrated modular avionics system IMA can be effectively identified, and the harm problem introduced by high comprehensiveness of the integrated modular avionics system IMA can be effectively analyzed.

Description

Technical Field

[0001] The present application belongs to the technical field of safety assessment of integrated modular avionics systems, and specifically relates to a safety assessment method for an integrated modular avionics system. Background Art

[0002] Integrated Modular Avionics System (IMA) is the highest stage of current avionics architecture development.

[0003] At present, the safety assessment of the integrated modular avionics system mainly includes aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, component-level failure mode and effects analysis LRM FMEA, integrated modular avionics system safety analysis IMAssa, aircraft-level safety analysis ASA and other links.

[0004] The integrated modular avionics system (IMA) integrates the system's resources, functions, and tasks. It has the characteristics of high complexity and coupling, and is highly comprehensive. Originally, a single failure state acted on a single device, and the impact range was relatively small. However, the high comprehensiveness of the integrated modular avionics system makes the failure state affect other coupled components and systems, thereby introducing potential hazards in physical integration, information fusion, and task synthesis. In failure analysis, the failure of shared resources will produce more combined failure states.

[0005] It is difficult to effectively analyze the hazards introduced by the high comprehensiveness of the integrated modular avionics system (IMA) by using the current safety assessment method to conduct a safety assessment on the integrated modular avionics system (IMA).

[0006] This application is proposed in view of the above-mentioned technical defects. Summary of the invention

[0007] The purpose of this application is to provide a comprehensive modular avionics system safety assessment method to overcome or alleviate at least one of the known technical deficiencies.

[0008] The technical solution of this application is: A comprehensive modular avionics system safety assessment method, including aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, comprehensive modular avionics system functional hazard analysis IMA SFHA, comprehensive modular avionics system preliminary safety analysis IMA PSSA, component-level failure mode and effect analysis LRM FMEA, comprehensive modular avionics system safety analysis IMASSA, and aircraft-level safety analysis ASA; Cascading impact analysis shall be carried out simultaneously when conducting aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA and integrated modular avionics system preliminary safety analysis IMA PSSA.

[0009] Optionally, in the above-mentioned comprehensive modular avionics system safety assessment method, a special risk analysis PRA analysis is performed after the aircraft-level preliminary safety analysis PASA.

[0010] Optionally, in the above-mentioned integrated modular avionics system safety assessment method, a cascading impact analysis is simultaneously carried out when performing a regional safety analysis ZSA after the integrated modular avionics system functional hazard analysis IMA SFHA.

[0011] Optionally, in the above-mentioned comprehensive modular avionics system safety assessment method, when conducting special risk analysis PRA, Optionally, in the above-mentioned comprehensive modular avionics system safety assessment method, a cascading impact analysis is simultaneously carried out when performing the regional safety analysis ZSA.

[0012] Optionally, in the above-mentioned comprehensive modular avionics system safety assessment method, the cascading impact analysis specifically includes: S1. Determine the initial failure state of the current level, where for the aircraft-level functional safety analysis AFHA, the integrated modular avionics system IMA is taken as a whole and used as an energy system to provide data information to other systems, and the aircraft-level functional failure of the integrated modular avionics system IMA is taken as the initial failure state; for the aircraft-level preliminary safety analysis PASA, the aircraft failure-related scenarios are taken as the initial failure state; for the integrated modular avionics system functional hazard analysis IMASFHA, the functional failure of the integrated modular avionics system IMA is taken as the initial failure state; for the integrated modular avionics system preliminary safety analysis IMAPSSA, the failure of shared or integrated products in the bottom event using the fault tree analysis method FTA or the Markov analysis method MA is taken as the initial failure state; for the special risk analysis PRA analysis, the integrated modular avionics system IMA is taken as a whole and used as an energy system to provide data information to other systems, and the failure of the integrated modular avionics system IMA is taken as the initial failure state; for the regional safety analysis ZSA, the failure combination or fault combination of the integrated modular avionics system IMA function is taken as the initial failure state; S2. Determine the scope of analysis of cascading impacts; S3. Determine cascading impacts.

[0013] Optionally, in the above-mentioned comprehensive modular avionics system safety assessment method, determining the cascading impact in the cascading impact analysis specifically includes: S31. Capture direct impacts at the current level of failure; S32, pass the direct impact downward and capture the indirect impact; S33. Pass the indirect impact downward and continue to capture the indirect impact until the boundary of the cascading impact analysis range is reached.

[0014] Optionally, in the above-mentioned integrated modular avionics system safety assessment method, in the special risk analysis PRA analysis, the integrated modular avionics system IMA is analyzed as an energy system, and the cascade impact in the lightning and high-energy radiation field analysis is analyzed.

[0015] Optionally, in the above-mentioned integrated modular avionics system safety assessment method, during the aircraft-level functional safety analysis AFHA, the integrated modular avionics system IMA function is defined in the aircraft-level function.

[0016] Optionally, in the above-mentioned integrated modular avionics system safety assessment method, the failure level allocation of the integrated modular avionics system IMA is confirmed according to the impact of the integrated modular avionics system IMA on the user system. If the impact level is uncertain, the highest failure level is selected.

[0017] This application has at least the following beneficial technical effects: The invention provides a safety assessment method for an integrated modular avionics system. On the basis of aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, component-level preliminary safety analysis LRM PSSA, component-level failure mode and effects analysis LRMFMEA, component-level safety analysis LRM SSA, integrated modular avionics system safety analysis IMASSA and aircraft-level safety analysis ASA, a cascade impact analysis is added, which can effectively identify the hazards brought by physical integration, information fusion and task synthesis of the integrated modular avionics system IMA, and further effectively analyze the hazard problems introduced by the high comprehensiveness of the integrated modular avionics system IMA. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 is a schematic diagram of a comprehensive modular avionics system safety assessment method provided by an embodiment of the present application; Figure 2 is a schematic diagram of cascading impact analysis provided by an embodiment of the present application; Figure 3It is a schematic diagram of determining cascading impact in the cascading impact analysis provided in an embodiment of the present application.

[0019] In order to better illustrate the present embodiment, some contents of the drawings may be omitted, which is only used for illustrative purposes and should not be construed as limiting the present application. DETAILED DESCRIPTION

[0020] In order to make the technical solution and advantages of the present application clearer, the technical solution of the present application will be described in further detail in detail and in detail with reference to the accompanying drawings. It can be understood that the specific embodiments described here are only partial embodiments of the present application, which are only used to explain the present application, not to limit the present application. It should be noted that, for the convenience of description, only the parts related to the present application are shown in the accompanying drawings, and other related parts can refer to the general design.

[0021] In addition, unless otherwise defined, the technical terms or scientific terms used in the description of this application should be the common meanings understood by those skilled in the art in the field to which this application belongs. The term "comprising" used in the description of this application means that the elements appearing before the term include the elements listed after the term, but do not exclude other elements.

[0022] A safety assessment method for an integrated modular avionics system, such as Figure 1 As shown, it includes aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMASFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, component-level failure mode and effects analysis LRMFMEA, integrated modular avionics system safety analysis IMASSA, and aircraft-level safety analysis ASA.

[0023] The aircraft-level preliminary safety analysis PASA is followed by a special risk analysis PRA, and the integrated modular avionics system functional hazard analysis IMA SFHA is followed by a zone safety analysis ZSA.

[0024] Cascading impact analysis shall be carried out simultaneously when conducting aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, special risk analysis PRA and regional safety analysis ZSA.

[0025] Cascading impact analysis is a bottom-up analysis method and a qualitative analysis method. The scope of analysis is all systems directly or indirectly affected by the initial failure state. Cascading impact failure analysis is an iterative process. The early cascading failure analysis mainly considers the function. The later cascading impact analysis is refined and requires analysis of the signal link. The input of the later analysis is the signal transmission link. The module is used as the smallest analysis unit, and the content inside the module is not further analyzed.

[0026] Cascading effects analysis iteratively identifies direct or indirect effects from the propagation of initial conditions due to dependencies between systems, considering all systems directly or indirectly affected by the initial conditions. It is well suited for evaluating initial conditions, such as failure conditions, failure modes, or combinations of failure modes, and capturing the full impact of initial conditions on the aircraft.

[0027] In the safety analysis of the integrated modular avionics system IMA, two types of functional requirements need to be considered: user functions and resident functions. Resource systems can provide energy or information to other systems. Providing energy or information is a primary system of energy, such as the electrical system, hydraulic system, air data system, network system, or secondary functions, such as the power system providing flowing air, the landing gear system providing wheel load weight signals, and the flight control system providing reconsideration position signals. User functions refer to the input that the system needs to obtain from the resource system to run the target function of the system. The user system can be the system itself or a user system. The resident function refers to the aircraft function running on the hardware of the integrated modular avionics system IMA. The integrated modular avionics system IMA is a typical energy system that needs to provide data and power to other platforms. It is necessary to analyze the capabilities of the integrated modular avionics system IMA.

[0028] Cascading impact analysis Figure 2 As shown, including: S1. Determine the initial failure state of the current level, where for the aircraft-level functional safety analysis AFHA, the integrated modular avionics system IMA is taken as a whole and used as an energy system to provide data information to other systems, and the aircraft-level functional failure of the integrated modular avionics system IMA is taken as the initial failure state; for the aircraft-level preliminary safety analysis PASA, the aircraft failure-related scenarios are taken as the initial failure state; for the integrated modular avionics system functional hazard analysis IMASFHA, the functional failure of the integrated modular avionics system IMA is taken as the initial failure state; for the integrated modular avionics system preliminary safety analysis IMAPSSA, the failure of shared or integrated products in the bottom event using the fault tree analysis method FTA or the Markov analysis method MA is taken as the initial failure state; for the special risk analysis PRA analysis, the integrated modular avionics system IMA is taken as a whole and used as an energy system to provide data information to other systems, and the failure of the integrated modular avionics system IMA is taken as the initial failure state; for the regional safety analysis ZSA, the failure combination or fault combination of the integrated modular avionics system IMA function is taken as the initial failure state; S2. Determine the scope of the cascading impact analysis, that is, analyze and determine the key important systems that may be directly or indirectly affected by the failure status of the current level; S3. Determine the cascading impact and analyze the new failure state.

[0029] Cascading impact analysis determines cascading impacts, including direct impacts and indirect impacts, such as Figure 3 As shown, including: S31. Under the failure state at the current level, capture the direct impact, that is, capture the impact on the system directly associated with the failure state; S32. Pass the direct impact downward and capture the indirect impact, that is, capture the impact on the system indirectly associated with the failure state; S33. Pass the indirect impact downward and continue to capture the indirect impact until the boundary of the cascading impact analysis range is reached.

[0030] In the special risk analysis PRA analysis, the integrated modular avionics system IMA is analyzed as an energy system, and the cascading effects in the lightning and high-energy radiation field analysis are analyzed.

[0031] During the aircraft-level functional safety analysis AFHA, the integrated modular avionics system IMA function is defined in the aircraft-level function. The failure level allocation of the integrated modular avionics system IMA is confirmed according to the impact of the integrated modular avionics system IMA on the user system. If the impact level is uncertain, the highest failure level is selected, which can generally be defined as Class I impact, that is, catastrophic impact.

[0032] The user system needs to use the resources of the integrated modular avionics system IMA, and the integrated modular avionics system IMA is a typical common mode source in safety analysis. A large number of common modules, RDIU and SWITCH are used in the integrated modular avionics system IMA. These modules have similar designs and have common mode risks themselves. When it comes to the safety analysis SSA of the user system, the integrated modular avionics system IMA is analyzed. The quantitative analysis in the cascade impact analysis needs to analyze the complete link of the initial state action level and the indirect impact level function realization.

[0033] The IMA SFHA, an integrated modular avionics system functional hazard analysis, undertakes the independence requirements of the aircraft-level preliminary safety analysis PASA, and can only consider the functions of the IMA platform of the integrated modular avionics system, without considering the impact of the user system. The functions of transmission, calculation, conversion, etc. in the IMA of the integrated modular avionics system are supporting functions for other systems, while configuration management and maintenance monitoring belong to the functions of the IMA of the integrated modular avionics system itself, and need to be considered in the functional hazard analysis SFHA.

[0034] The integrated modular avionics system preliminary safety analysis IMA PSSA can be decomposed according to the traditional method, decomposing the requirements to equipment and components, and decomposing the quantitative and qualitative requirements to the underlying modules. When the user system evaluates the functional hazard analysis SFHA, the impact of the integrated modular avionics system IMA on it is not considered. For example, when considering the loss of flight control roll, the impact of the integrated modular avionics system IMA on the function does not need to be considered, but it needs to be considered in the user system's preliminary safety analysis PSSA, because the top-level requirements need to be decomposed downward.

[0035] The integrated modular avionics system safety assessment method disclosed in the above embodiment adds cascade impact analysis on the basis of aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, component-level failure mode and effect analysis LRM FMEA, integrated modular avionics system safety analysis IMASSA, aircraft-level safety analysis ASA and other links, and can effectively identify the hazards brought by the physical integration, information fusion, and task synthesis of the integrated modular avionics system IMA, and further effectively analyze the hazard problems introduced by the high comprehensiveness of the integrated modular avionics system IMA.

[0036] The comprehensive modular avionics system safety assessment method disclosed in the above embodiment can be used for both manned aircraft and unmanned aircraft. Its use is not limited by the weight and volume of the aircraft and is universal.

[0037] So far, the technical solution of the present application has been described in conjunction with the preferred embodiments shown in the accompanying drawings. Those skilled in the art should understand that the scope of protection of the present application is obviously not limited to these specific embodiments. Without departing from the principles of the present application, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the scope of protection of the present application.

Claims

1. A comprehensive modular avionics system safety assessment method, characterized in that: Including aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA, integrated modular avionics system preliminary safety analysis IMA PSSA, component-level failure mode and effect analysis LRM FMEA, integrated modular avionics system safety analysis IMA SSA, aircraft-level safety analysis ASA; Cascading impact analysis shall be carried out simultaneously when conducting aircraft-level functional safety analysis AFHA, aircraft-level preliminary safety analysis PASA, integrated modular avionics system functional hazard analysis IMA SFHA and integrated modular avionics system preliminary safety analysis IMA PSSA.

2. The integrated modular avionics system safety assessment method according to claim 1, characterized in that: After the aircraft-level preliminary safety analysis PASA, a special risk analysis PRA is performed.

3. The integrated modular avionics system safety assessment method according to claim 2, characterized in that: After the Integrated Modular Avionics System Functional Hazard Analysis (IMA) (SFHA), a Regional Safety Analysis (ZSA) is performed.

4. The integrated modular avionics system safety assessment method according to claim 3, characterized in that: Cascading impact analysis should be carried out simultaneously with special risk analysis (PRA).

5. The integrated modular avionics system safety assessment method according to claim 4, characterized in that: Cascading impact analysis should be carried out simultaneously with regional safety analysis ZSA.

6. The integrated modular avionics system safety assessment method according to claim 5, characterized in that: Cascading impact analysis specifically includes: S1. Determine the initial failure state of the current level, where for the aircraft-level functional safety analysis AFHA, the integrated modular avionics system IMA is taken as a whole and used as an energy system to provide data information to other systems, and the aircraft-level functional failure of the integrated modular avionics system IMA is taken as the initial failure state; for the aircraft-level preliminary safety analysis PASA, the aircraft failure-related scenarios are taken as the initial failure state; for the integrated modular avionics system functional hazard analysis IMA SFHA, the functional failure of the integrated modular avionics system IMA is taken as the initial failure state; for the integrated modular avionics system preliminary safety analysis IMA PSSA, the failure of the shared or integrated product in the bottom event using the fault tree analysis method FTA or the Markov analysis method MA is taken as the initial failure state; for the special risk analysis PRA analysis, the integrated modular avionics system IMA is taken as a whole and used as an energy system to provide data information to other systems, and the failure of the integrated modular avionics system IMA is taken as the initial failure state; for the regional safety analysis ZSA, the failure combination or fault combination of the integrated modular avionics system IMA function is taken as the initial failure state; S2. Determine the scope of analysis of cascading impacts; S3. Determine cascading impacts.

7. The integrated modular avionics system safety assessment method according to claim 6, characterized in that: Cascading impact analysis determines cascading impacts, including: S31. Capture direct impacts at the current level of failure; S32, pass the direct impact downward and capture the indirect impact; S33. Pass the indirect impact downward and continue to capture the indirect impact until the boundary of the cascading impact analysis range is reached.

8. The integrated modular avionics system safety assessment method according to claim 7, characterized in that: In the special risk analysis PRA analysis, the integrated modular avionics system IMA is analyzed as an energy system, and the cascading effects in the lightning and high-energy radiation field analysis are analyzed.

9. The integrated modular avionics system safety assessment method according to claim 8, characterized in that: During the aircraft-level functional safety analysis AFHA, the integrated modular avionics system IMA function is defined in the aircraft-level function.

10. The integrated modular avionics system safety assessment method according to claim 9, characterized in that: The failure level allocation of the integrated modular avionics system IMA is confirmed according to the impact of the integrated modular avionics system IMA on the user system.

11. The integrated modular avionics system safety assessment method according to claim 10, characterized in that: Failure level allocation of the integrated modular avionics system IMA. If the impact of the integrated modular avionics system IMA on the user system is uncertain, the highest failure level is selected.

Images