Aircraft EWIS safety analysis method and device

Abstract

The invention provides an aircraft EWIS safety analysis method and device, and belongs to the field of aviation aircraft safety design, and the method comprises the steps: carrying out aircraft-level function risk assessment to determine an EWIS related failure state, carrying out physical failure analysis, and obtaining a preliminary design installation guide; providing mitigation measures for the disastrous and dangerous influence levels caused by the physical failure, carrying out confirmation and verification, optimizing the guide, and obtaining a physical failure analysis result; performing function failure analysis, identifying the EWIS line in a failure state causing disasters and dangers, putting forward mitigation measures, and performing confirmation and verification to obtain a function failure analysis result; and obtaining an EWIS security analysis document according to the physical and functional failure analysis results, and updating the aircraft-level FHA and the related SSA by using the EWIS security analysis document so as to complete EWIS security measure formulation. According to the scheme, the design thought is clear and definite, the operation process is simplified, and the application effect is remarkable and efficient.

Description

Technical Field

[0001] This application relates to the field of aircraft safety design technology, and in particular to an aircraft EWIS safety analysis method and apparatus. Background Technology

[0002] During the aircraft design and development process, the EWIS wiring area mainly includes multiple areas such as the forward fuselage, mid-fuselage, tail fuselage, landing gear bay, right wing, left wing, vertical and horizontal stabilizers, and engine nacelles. It affects the safety of multiple areas of the aircraft. In order to meet the requirements of airworthiness clause FAR25.1709, EWIS failure analysis is conducted in each area. Through EWIS safety analysis, the potential hazards of EWIS in operation are identified, the severity and probability of these hazards to personnel injury or equipment damage are estimated, and methods to eliminate or reduce hazards are determined to reduce the degree of harmful effects of accidents.

[0003] It is possible that designers have a vague understanding of the safety analysis elements of aircraft EWIS, and are unable to conduct a complete and comprehensive analysis to obtain an EWIS that meets the required safety standards. Summary of the Invention

[0004] In view of this, embodiments of this application provide a method and apparatus for aircraft EWIS safety analysis. This invention overcomes the challenges posed by the numerous categories and hazards associated with EWIS wiring areas. It addresses how a reasonable EWIS safety analysis can comprehensively and completely determine the potential hazards of EWIS during operation, predict the severity and likelihood of these hazards causing injury to personnel or damage to equipment, and identify methods to eliminate or reduce these hazards.

[0005] In a first aspect, embodiments of this application provide an aircraft EWIS safety analysis method, the method comprising: For EWIS components containing electrical energy, signals, or information data, conduct aircraft-level functional hazard assessments to determine EWIS-related failure states. Based on single-cause and common-cause events or the failure state, physical failure analysis is performed to obtain preliminary design and installation guidelines; First mitigation measures are proposed for events where physical failure leads to catastrophic and dangerous impact levels. The preliminary design installation guidelines were optimized based on the confirmed and verified first mitigation measures, and the physical failure analysis results were obtained. Based on the aforementioned failure states, functional failure analysis is performed to identify EWIS lines with failure states that could lead to disasters or dangers. A second mitigation measure is proposed for events where functional failure of the EWIS line leads to catastrophic and dangerous impact levels. Based on the confirmed and verified second mitigation measures, the functional failure analysis results were obtained; Based on the results of physical failure analysis and functional failure analysis, an EWIS security analysis document was obtained; Based on the EWIS security analysis document, the aircraft-grade FHA and related SSA were updated; EWIS safety measures are developed based on updated aircraft-level and system-level FHA and PASS analysis reports to achieve quality control.

[0006] According to a specific implementation of an embodiment of this application, the step of performing physical failure analysis to obtain a preliminary design and installation guide includes: Perform EWIS characteristic analysis to determine the EWIS installation standards and component characteristics. Based on the definition, the EWIS components that need to be analyzed are identified. Based on digital simulation data, physical simulation data, aircraft data, and historical data, preliminary installation standards are formulated for regional design and installation. The preliminary installation standards are optimized through inspection and analysis to obtain optimized installation standards, which are then used as preliminary design installation guidelines.

[0007] According to a specific implementation of an embodiment of this application, the inspection and analysis include: first article inspection, design review, area inspection, specific risk analysis, area safety analysis, and common model analysis.

[0008] According to a specific implementation of an embodiment of this application, when optimizing the initial installation standards, known problems identified in service history and usage data are comprehensively considered.

[0009] According to a specific implementation of an embodiment of this application, determining the definition of EWIS installation standards and component characteristics includes: Based on the results of FHA, preliminary system safety assessment, common cause analysis, and system safety assessment, the definitions of EWIS installation standards and component characteristics are determined.

[0010] According to a specific implementation of an embodiment of this application, the first mitigation measure for events resulting in catastrophic and dangerous impact levels due to physical failure includes: Physical failure analysis of EWIS components that pose a hazard to surrounding systems, structural components, and personnel; Determine the impact and severity of physical failure on the aircraft. First mitigation measures are proposed for events where physical failure leads to catastrophic and dangerous impact levels.

[0011] According to a specific implementation of an embodiment of this application, the confirmation and verification of the first mitigation measure includes: The dangerous failure state is extremely minor; Catastrophic failures are extremely unlikely and cannot be caused by a single common-cause event or a single common-cause failure. The first mitigation measure will not trigger a new failure state.

[0012] According to a specific implementation of an embodiment of this application, the physical failure analysis results include: The identified physical failure, the impact of the physical failure, and the initial mitigation measures developed.

[0013] According to a specific implementation of an embodiment of this application, the confirmation and verification of the second mitigation measure includes: Confirm whether the initial goal has been fully achieved; Verify that the second mitigation measure is compatible with current installation and setup guidelines.

[0014] Secondly, embodiments of this application also provide an aircraft EWIS safety analysis apparatus for implementing the aircraft EWIS safety analysis method as described in any embodiment of the first aspect, the apparatus comprising: Aircraft-grade FHA modules are used to conduct aircraft-grade functional hazard assessments for EWIS components that have electrical energy, signals, or information data, in order to determine the failure states related to EWIS. The physical failure analysis module is used to perform physical failure analysis based on single-cause and common-cause events or the failure state to obtain a preliminary design and installation guide. The first mitigation measure setting module is used to propose first mitigation measures for events where physical failures result in catastrophic and dangerous impact levels. The physical failure analysis results acquisition module is used to optimize the preliminary design installation guidelines based on the first mitigation measures after confirmation and verification, and to obtain physical failure analysis results. The functional failure analysis module is used to perform functional failure analysis based on the failure state and identify EWIS lines with failure states that lead to disasters and dangers. The second mitigation measures setting module is used to propose second mitigation measures for events where functional failure of the EWIS line results in catastrophic and dangerous impact levels. The Functional Failure Analysis Result Acquisition Module is used to obtain functional failure analysis results based on the confirmed and verified second mitigation measures; The EWIS security analysis document generation module is used to obtain EWIS security analysis documents based on the results of physical failure analysis and functional failure analysis. The update module is used to update the aircraft-level FHA and related SSAs based on the EWIS security analysis document; The EWIS safety measure development module is used to develop EWIS safety measures based on updated aircraft-level and system-level FHA and PASS analysis reports to achieve quality control.

[0015] Beneficial effects: The aircraft EWIS safety analysis method and apparatus in this application mainly include two aspects: physical failure analysis and functional failure analysis. For functional failure analysis, EWIS first performs a functional hazard analysis assessment of the aircraft to obtain the failure states identified in the aircraft-level functional hazard analysis. The catastrophic failure states are statistically summarized to obtain a table of catastrophic and hazardous failure states. Then, a safety assessment is performed on the EWIS to be analyzed. Simultaneously, physical failure analysis, such as area safety analysis, common cause analysis, and special risk analysis, is used to assess the safety impact of EWIS, forming an EWIS safety document. Combining the EWIS safety assessment and the EWIS safety analysis document, the aircraft and system-level FHA and PASS analysis reports are updated and improved. Finally, based on the improved aircraft and system-level FHA and PASS analysis reports, EWIS safety measures are formulated. Requirements and statistical analysis of the functions, characteristics, and safety elements of important EWIS are performed for quality control, ultimately meeting the safety design objectives. This analysis method is clear, simple to operate, and effective. Attached Figure Description

[0016] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0017] Figure 1 This is a flowchart of an aircraft EWIS safety analysis method according to an embodiment of the present invention. Detailed Implementation

[0018] The embodiments of this application will now be described in detail with reference to the accompanying drawings.

[0019] The following specific examples illustrate the implementation of this application. Those skilled in the art can easily understand other advantages and effects of this application from the content disclosed in this specification. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. This application can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of this application. It should be noted that, in the absence of conflict, the following embodiments and features in the embodiments can be combined with each other. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0020] It should be noted that various aspects of embodiments within the scope of the appended claims are described below. It will be apparent that the aspects described herein can be embodied in a wide variety of forms, and any particular structure and / or function described herein is merely illustrative. Based on this application, those skilled in the art will understand that one aspect described herein can be implemented independently of any other aspect, and two or more of these aspects can be combined in various ways. For example, any number of aspects set forth herein can be used to implement the device and / or practice the method. Additionally, this device and / or method can be implemented using structures and / or functionalities other than one or more of the aspects set forth herein.

[0021] It should also be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of this application. The illustrations only show the components related to this application and are not drawn according to the number, shape and size of the components in actual implementation. In actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0022] Furthermore, specific details are provided in the following description to facilitate a thorough understanding of the examples. However, those skilled in the art will understand that the described aspects can be practiced without these specific details.

[0023] Firstly, embodiments of this application provide an aircraft EWIS safety analysis method. Through EWIS (Electrical Wiring Interconnection System) safety analysis, the method identifies potential hazards of the EWIS during operation, predicts the severity and likelihood of these hazards causing personal injury or equipment damage, and determines methods to eliminate or reduce these hazards, thereby mitigating the degree of harmful impact from accidents. The method specifically includes the following steps: For EWIS components containing electrical energy, signals, or information data, conduct aircraft-level functional hazard assessments to determine EWIS-related failure states. Based on single-cause and common-cause events or the failure state, physical failure analysis is performed to obtain preliminary design and installation guidelines; First mitigation measures are proposed for events where physical failure leads to catastrophic and dangerous impact levels. The preliminary design installation guidelines were optimized based on the confirmed and verified first mitigation measures, and the physical failure analysis results were obtained. Based on the aforementioned failure states, functional failure analysis is performed to identify EWIS lines with failure states that could lead to disasters or dangers. A second mitigation measure is proposed for events where functional failure of the EWIS line leads to catastrophic and dangerous impact levels. Based on the confirmed and verified second mitigation measures, the functional failure analysis results were obtained; Based on the results of physical failure analysis and functional failure analysis, an EWIS security analysis document was obtained; Based on the EWIS safety analysis documents, the aircraft-level FHA (Functional Hazard Assessment) and related SSA (System Safety Assessment) are updated; EWIS security measures were developed based on updated aircraft-level and system-level FHA and PASS (Passenger Address System) analysis reports to achieve quality control.

[0024] In this embodiment, aircraft-level functional hazard assessment can accurately determine the failure states related to EWIS, laying the foundation for subsequent analysis. When conducting physical failure analysis, the physical characteristics of EWIS are analyzed based on single-cause and common-cause events or identified failure states to clarify its installation standards and component characteristic definitions, and to identify the EWIS components to be analyzed. Using various data, preliminary regional design and installation standards are formulated, and then optimized through inspection and analysis to obtain optimized installation standards as preliminary design installation guidelines. Known issues are considered during optimization to ensure scientific validity and rationality. For events with catastrophic or hazardous impact levels due to physical failure, physical failure analysis is performed on the relevant EWIS components to determine their impact and level on the aircraft level, and to propose first mitigation measures. The first mitigation measures are confirmed and verified to ensure that the possibility of hazardous and catastrophic failure states is extremely small and not caused by a single common-cause event or failure, nor to induce new failure states. These measures are used to optimize the preliminary design installation guidelines, obtaining physical failure analysis results that include identified physical failures, impacts, and first mitigation measures. Functional failure analysis (FFA) is performed based on identified failure states to identify EWIS circuits leading to catastrophic and hazardous failure states. Secondary mitigation measures are proposed for events with catastrophic and hazardous impact levels due to functional failure. The secondary mitigation measures are validated and verified to ensure the initial objectives are achieved and that they are compatible with installation and guidelines, thus obtaining the FFA results. An EWIS safety analysis document is generated based on the physical and functional failure analysis results. This document is used to update the aircraft-level FHA and relevant SSAs, making the assessment more accurate and comprehensive. Finally, based on the updated analysis report, EWIS safety measures are developed to achieve multi-level quality control and ensure that the aircraft's EWIS safety meets design objectives. In one embodiment, the physical failure analysis to obtain preliminary design and installation guidelines includes: Perform EWIS characteristic analysis to determine the EWIS installation standards and component characteristics. Based on the definition, the EWIS components that need to be analyzed are identified. Based on digital simulation data, physical simulation data, aircraft data, and historical data, preliminary installation standards are formulated for regional design and installation. The preliminary installation standards are optimized through inspection and analysis to obtain optimized installation standards, which are then used as preliminary design installation guidelines.

[0025] Furthermore, the inspections and analyses include: first article inspection, design review, area inspection, specific risk analysis, area safety analysis, and common model analysis.

[0026] Furthermore, when optimizing the initial installation standards, known problems identified in service history and usage data are taken into account.

[0027] In this embodiment, a preliminary design installation guideline was developed. Through comprehensive and detailed EWIS characteristic analysis, installation standards and component characteristic definitions were accurately determined, laying a solid foundation for subsequent work. Based on this definition, components requiring analysis were identified, and installation standards were initially formulated using various data. Further multi-dimensional checks, analyses, and optimizations fully considered various potential factors, ensuring the scientific validity and rationality of the preliminary design installation guideline. Simultaneously, the optimization process comprehensively considered known issues from service history and usage data, effectively avoiding the recurrence of past problems, improving the practicality and effectiveness of the installation guideline, and thus providing stronger assurance for the safety of aircraft EWIS.

[0028] In one embodiment, defining the EWIS installation standards and component characteristics includes: Based on the results of FHA, preliminary system safety assessment, common cause analysis, and system safety assessment, the definitions of EWIS installation standards and component characteristics are determined.

[0029] In one embodiment, the first mitigation measure proposed for an event resulting in a catastrophic and dangerous level of impact due to physical failure includes: Physical failure analysis of EWIS components that pose a hazard to surrounding systems, structural components, and personnel; Determine the impact and severity of physical failure on the aircraft. First mitigation measures are proposed for events where physical failure leads to catastrophic and dangerous impact levels.

[0030] Furthermore, the confirmation and verification of the first mitigation measure includes: The dangerous failure state is extremely minor; Catastrophic failures are extremely unlikely and cannot be caused by a single common-cause event or a single common-cause failure. The first mitigation measure will not trigger a new failure state.

[0031] In this embodiment, mitigation measures were identified and validated for physical failures and their adverse effects. First, a detailed physical failure analysis was conducted on EWIS components that could pose a hazard to surrounding systems, structural components, and personnel. This allowed for the precise identification of potential risk points, providing a solid basis for developing targeted mitigation measures. Second, determining the specific impact and level of physical failures on the aircraft level helped to comprehensively assess the severity and urgency of the risks, thereby enabling the rational allocation of resources and prioritizing high-risk events. Furthermore, the proposed first mitigation measure underwent rigorous validation and verification, ensuring that the probability of a dangerous failure state is extremely low, and that a catastrophic failure state is almost impossible to be caused by a single common-cause event or failure. It also prevents the initiation of new failure states, effectively improving the safety and reliability of the aircraft's EWIS. The implementation of these measures can significantly reduce the likelihood of accidents, mitigate the severity of accident consequences, and provide strong protection for the safe operation of the aircraft.

[0032] Furthermore, the physical failure analysis results include: The identified physical failure, the impact of the physical failure, and the initial mitigation measures developed.

[0033] In one embodiment, the confirmation and verification of the second mitigation measure includes: Confirm whether the initial goal has been fully achieved; Verify that the second mitigation measure is compatible with current installation and setup guidelines.

[0034] The aircraft EWIS safety analysis method of this application will be described in detail below with reference to a specific embodiment. Figure 1 Specifically, it includes the following: 1. EWIS Security Analysis Process The EWIS security analysis process is as follows: Figure 1 It primarily includes physical failure and functional failure analysis. EWIS safety analysis begins with an aircraft-level functional hazard assessment to identify catastrophic and hazardous failure states related to EWIS.

[0035] 1.1 Aircraft functional hazard assessment (corresponding to) Figure 1 Step A) The EWIS safety analysis process begins with an aircraft functional hazard assessment. Functional failure assessments assume that the wiring loads electrical energy, signals, or data. EWIS occurring under these conditions can cause degradation of aircraft system functionality. The functional hazard assessment (FHA) illustrated in this diagram is not a proprietary document specifically designed to demonstrate compliance with CCAR 25.1709, but rather an FHA determined by the applicant in accordance with CCAR 25.1709.

[0036] After the aircraft functional hazard assessment is completed, the EWIS safety analysis process is then divided into two aspects for evaluation: physical failure analysis and functional failure analysis.

[0037] 1.2 Physical Failure Analysis Physical failure analysis includes the following two aspects: a) Physical failure analysis only considers single-cause common-cause events or failures, and does not need to consider multi-cause common-cause events or failures.

[0038] (b) When considering physical effects, it should be assumed that the conductors are loaded with electrical energy, and that this energy, directly or in combination with other factors (such as fuel, oxygen, hydraulic fluid, or passenger sabotage), can lead to dangerous or catastrophic effects. These failures could cause fires, smoke, toxic gas releases, damage to systems and structures installed in the same area, or injury to personnel. This analysis considers all EWIS (autopilot, autothrottle, passenger announcement system, in-flight entertainment system, etc.) across all systems, regardless of their system hazard level. Mitigation in the diagram refers to completely eliminating the hazard or minimizing its severity and probability to an acceptable level. In FAR 25.1709, EWIS failures must be mitigated to the point where the probability of a dangerous failure is extremely small and the probability of a catastrophic failure is extremely improbable.

[0039] 1.2.1 EWIS Feature Analysis (corresponding to) Figure 1 (Step B) The results of FHA, preliminary system safety assessment, common cause analysis, and system safety assessment are used to determine the definitions of EWIS, installation standards, and component characteristics. The results of step B are then fed back to the preliminary system safety assessment and system safety assessment in step J.

[0040] 1.2.2 Confirmation and verification of installation standards (corresponding) Figure 1 (Steps C, D, E) Ensure that the specifications of EWIS components meet design requirements, and select, install, and use components in accordance with their specifications and the aircraft limitations of their location.

[0041] Utilizing available information (digital simulation, physical simulation, aircraft data, and historical data), preliminary installation standards are established for the area design and installation, and these standards are optimized through inspection and analysis. Such inspections and analyses may include first-article inspection, design review, specific risk analysis, area safety analysis, area inspection, and common-mode analysis, which determine the correct application of the design and installation standards. Simultaneously, when optimizing preliminary installation standards, known issues identified in service history and usage data should be comprehensively considered, such as arcing, smoke, loose clamps, friction, arc tracking, interference with other systems, and cables with frequent bending requirements, such as those near doors and exits. Any single arc failure should be assumed for any power conductor, and the intensity, consequences, and mitigation measures of the arc should be verified. In all cases, FAR 25.1703(b) (airworthiness provisions) requires that conductor selection must consider known characteristics associated with each installation and application to minimize the risk of conductor damage (including any arcing phenomena). The installation of conductors should be set according to the airworthiness provisions.

[0042] The deviations identified in the installation and component selection criteria during these activities should be assessed, their acceptability should be judged, and different mitigation measures should be taken as needed.

[0043] 1.2.3. Formulation and confirmation of mitigation measures (corresponding to...) Figure 1 (Steps F and G) Address the mitigation measures identified in steps D and E regarding the physical failures and their adverse effects. The validation and verification of these mitigation measures should ensure that: a) The dangerous failure state is extremely minor; (b) Catastrophic failures are highly unlikely and cannot be caused by a single common-cause event or a single common-cause failure. c) The mitigation measures will not trigger a new failure state.

[0044] 1.2.4 Implementation of mitigation measures (corresponding to) Figure 1 (Middle step H) The newly formulated mitigation measures (corresponding to) Figure 1 Step F) is incorporated into the guidelines (Step B) to further design and review the analysis process.

[0045] 1.2.5, Physical Failure Analysis Results (corresponding to) Figure 1 (Step I) The results of the EWIS physical failure analysis were summarized, including the following: a) Determined physical failure; b) The effects of physical failure; c) The mitigation measures developed.

[0046] 1.2.6. Create a document (corresponding to) Figure 1 (Middle step P) The results of the physical failure analysis are incorporated into the final analysis document.

[0047] 1.3 Functional Failure Analysis 1.3.1 System security assessment (corresponding to) Figure 1 (middle step J) Use the assessment results from the aircraft-level FHA (Step A) to guide the system-level FHA, PSSA, CCA (Common Cause Analysis), and SSA (Step J). Embed the EWIS failures identified in FAR 25.1709 into the aircraft-level and system-level FHAs, and, as needed, into the preliminary system safety assessment, common cause analysis, and system safety assessment. These analyses should meet the requirements of FAR 25.1309. Update the EWIS definition using these analysis results (Step B).

[0048] 1.3.2 Hazardous and catastrophic failure states (corresponding to) Figure 1 (Middle steps K, L and M) Using the J-frame analysis, determine whether the EWIS associated with the system is wholly or partially the cause of hazardous and catastrophic failure states. Develop quantitative requirements and determine if mitigation measures are needed for EWIS failures. If necessary, develop, validate, and verify mitigation measures; if not, complete an appropriate safety assessment according to FAR 25.1309, FAR 25.671, etc.

[0049] 1.3.3, Formulation and confirmation of mitigation measures (corresponding to) Figure 1 (Middle steps N, O) Mitigation measures should be determined for the functional failure and adverse effects of J-frame recognition. The confirmation and verification of mitigation measures should include: a) Determine whether the initial objective has been fully achieved; b) Verify that this mitigation measure is compatible with current installation and setup guidelines.

[0050] It is important to note that if EWIS is the cause of the failure, subsequent mitigation measures may introduce new adverse effects. Examine for new adverse effects and update the aircraft-level FHA and other system-level FHAs.

[0051] 1.3.4, EWIS security analysis result file (corresponding) Figure 1 (Middle step P) After the mitigation measures are confirmed and verified, the analysis results of FAR25.1709 will be documented. Aircraft-level FHAs and relevant SSAs will be updated as needed.

[0052] EWIS safety analysis demonstrates that the aircraft development process complies with airworthiness provisions related to EWIS safety. Through EWIS safety analysis, potential hazards of EWIS during operation are identified, the severity and likelihood of these hazards causing personal injury or equipment damage are anticipated, and methods to eliminate or reduce these hazards are determined to mitigate the harmful effects of accidents.

[0053] The aircraft EWIS safety analysis method proposed in this application has several significant advantages. First, the method is logically clear and its steps are well-defined. Starting with aircraft-level functional hazard assessment, it progressively delves into physical failure analysis and functional failure analysis, forming a complete and systematic analysis process that provides a reliable path for accurately assessing aircraft EWIS safety. Second, during the analysis process, it comprehensively utilizes various data and analytical methods, such as digital simulation data, physical simulation data, aircraft data, historical data, as well as first-article inspection, design review, area inspection, specific risk analysis, area safety analysis, and common-mode analysis, ensuring the scientific validity and accuracy of the analysis results. Third, the confirmation and verification of mitigation measures are rigorous and meticulous, ensuring the effectiveness and compatibility of mitigation measures from different perspectives and preventing the emergence of new failure states. Finally, by creating EWIS safety analysis documents and updating aircraft-level FHA and related SSAs, as well as formulating EWIS safety measures, it achieves full-process coverage from analysis and assessment to quality control, effectively reducing the degree of harmful impact of accidents, meeting the aircraft EWIS safety design objectives, and providing a solid guarantee for the safe operation of the aircraft.

[0054] Secondly, embodiments of this application also provide an aircraft EWIS safety analysis apparatus for implementing the aircraft EWIS safety analysis method as described in any embodiment of the first aspect, the apparatus comprising: Aircraft-grade FHA modules are used to conduct aircraft-grade functional hazard assessments for EWIS components that have electrical energy, signals, or information data, in order to determine the failure states related to EWIS. The physical failure analysis module is used to perform physical failure analysis based on single-cause and common-cause events or the failure state to obtain a preliminary design and installation guide. The first mitigation measure setting module is used to propose first mitigation measures for events where physical failures result in catastrophic and dangerous impact levels. The physical failure analysis results acquisition module is used to optimize the preliminary design installation guidelines based on the first mitigation measures after confirmation and verification, and to obtain physical failure analysis results. The functional failure analysis module is used to perform functional failure analysis based on the failure state and identify EWIS lines with failure states that lead to disasters and dangers. The second mitigation measures setting module is used to propose second mitigation measures for events where functional failure of the EWIS line results in catastrophic and dangerous impact levels. The Functional Failure Analysis Result Acquisition Module is used to obtain functional failure analysis results based on the confirmed and verified second mitigation measures; The EWIS security analysis document generation module is used to obtain EWIS security analysis documents based on the results of physical failure analysis and functional failure analysis. The update module is used to update the aircraft-level FHA and related SSAs based on the EWIS security analysis document; The EWIS safety measure development module is used to develop EWIS safety measures based on updated aircraft-level and system-level FHA and PASS analysis reports to achieve quality control.

[0055] The embodiments provided by this invention mainly include two aspects: physical failure analysis and functional failure analysis. Functional failure analysis: First, the EWIS performs a functional hazard analysis assessment of the aircraft to obtain the failure states identified in the aircraft-level functional hazard analysis. The catastrophic failure states are statistically summarized to obtain a failure state table with catastrophic and hazardous levels. Then, a safety assessment is performed on the EWIS to be analyzed. Simultaneously, physical failure analysis, such as area safety analysis, common cause analysis, and special risk analysis, is used to assess the safety impact of the EWIS, forming an EWIS safety document. Combining the EWIS safety assessment and the EWIS safety analysis document, the aircraft and system-level FHA and PASS analysis reports are updated and improved. Finally, based on the improved aircraft and system-level FHA and PASS analysis reports, safety measures for the EWIS are formulated. Requirements and statistical analyses of the functions, characteristics, and safety elements of important EWIS components are performed for quality control, ultimately meeting the safety design objectives.

[0056] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. An aircraft EWIS safety analysis method, characterized in that, The method includes: For EWIS components containing electrical energy, signals, or information data, conduct aircraft-level functional hazard assessments to determine EWIS-related failure states. Based on single-cause and common-cause events or the failure state, physical failure analysis is performed to obtain preliminary design and installation guidelines; First mitigation measures are proposed for events where physical failure leads to catastrophic and dangerous impact levels. The preliminary design installation guidelines were optimized based on the confirmed and verified first mitigation measures, and the physical failure analysis results were obtained. Based on the aforementioned failure states, functional failure analysis is performed to identify EWIS lines with failure states that could lead to disasters or dangers. A second mitigation measure is proposed for events where functional failure of the EWIS line leads to catastrophic and dangerous impact levels. Based on the confirmed and verified second mitigation measures, the functional failure analysis results were obtained; Based on the results of physical failure analysis and functional failure analysis, an EWIS security analysis document was obtained; Based on the EWIS security analysis document, the aircraft-grade FHA and related SSA were updated; EWIS safety measures are developed based on updated aircraft-level and system-level FHA and PASS analysis reports to achieve quality control.

2. The aircraft EWIS safety analysis method according to claim 1, characterized in that, The physical failure analysis yields a preliminary design and installation guide, including: Perform EWIS characteristic analysis to determine the EWIS installation standards and component characteristics. Based on the definition, the EWIS components that need to be analyzed are identified. Based on digital simulation data, physical simulation data, aircraft data, and historical data, preliminary installation standards are formulated for regional design and installation. The preliminary installation standards are optimized through inspection and analysis to obtain optimized installation standards, which are then used as preliminary design installation guidelines.

3. The aircraft EWIS safety analysis method according to claim 2, characterized in that, The inspections and analyses include: first article inspection, design review, area inspection, specific risk analysis, area safety analysis, and common model analysis.

4. The aircraft EWIS safety analysis method according to claim 2, characterized in that, When optimizing the initial installation standards, known issues identified in service history and usage data are taken into account.

5. The aircraft EWIS safety analysis method according to claim 2, characterized in that, The definitions of EWIS installation standards and component characteristics include: Based on the results of FHA, preliminary system safety assessment, common cause analysis, and system safety assessment, the definitions of EWIS installation standards and component characteristics are determined.

6. The aircraft EWIS safety analysis method according to claim 1, characterized in that, The proposed first mitigation measures for events with catastrophic and dangerous impact levels due to physical failure include: Physical failure analysis of EWIS components that pose a hazard to surrounding systems, structural components, and personnel; Determine the impact and severity of physical failure on the aircraft. First mitigation measures are proposed for events where physical failure leads to catastrophic and dangerous impact levels.

7. The aircraft EWIS safety analysis method according to claim 1, characterized in that, The confirmation and verification of the first mitigation measure includes: The dangerous failure state is extremely minor; Catastrophic failures are extremely unlikely and cannot be caused by a single common-cause event or a single common-cause failure. The first mitigation measure will not trigger a new failure state.

8. The aircraft EWIS safety analysis method according to claim 1, characterized in that, The physical failure analysis results include: The identified physical failure, the impact of the physical failure, and the initial mitigation measures developed.

9. The aircraft EWIS safety analysis method according to claim 1, characterized in that, The confirmation and verification of the second mitigation measure includes: Confirm whether the initial goal has been fully achieved; Verify that the second mitigation measure is compatible with current installation and setup guidelines.

10. An aircraft EWIS safety analysis apparatus for implementing the aircraft EWIS safety analysis method as described in any one of claims 1-9, the apparatus comprising: Aircraft-grade FHA modules are used to conduct aircraft-grade functional hazard assessments for EWIS components that have electrical energy, signals, or information data, in order to determine the failure states related to EWIS. The physical failure analysis module is used to perform physical failure analysis based on single-cause and common-cause events or the failure state to obtain a preliminary design and installation guide. The first mitigation measure setting module is used to propose first mitigation measures for events where physical failures result in catastrophic and dangerous impact levels. The physical failure analysis results acquisition module is used to optimize the preliminary design installation guidelines based on the first mitigation measures after confirmation and verification, and to obtain physical failure analysis results. The functional failure analysis module is used to perform functional failure analysis based on the failure state and identify EWIS lines with failure states that lead to disasters and dangers. The second mitigation measures setting module is used to propose second mitigation measures for events where functional failure of the EWIS line results in catastrophic and dangerous impact levels. The Functional Failure Analysis Result Acquisition Module is used to obtain functional failure analysis results based on the confirmed and verified second mitigation measures; The EWIS security analysis document generation module is used to obtain EWIS security analysis documents based on the results of physical failure analysis and functional failure analysis. The update module is used to update the aircraft-level FHA and related SSAs based on the EWIS security analysis document; The EWIS safety measure development module is used to develop EWIS safety measures based on updated aircraft-level and system-level FHA and PASS analysis reports to achieve quality control.

Images