Nationaal Lucht- en Ruimtevaartlaboratorium National Aerospace Laboratory NLR

Transcription

1 Java Flying high some TALIS observations Total Information Sharing for Pilot Situational Awareness Enhanced by Intelligent Systems EC-DG-IS IST-2000/28744 By Ernst Kesseler

2 Overview Need for change Air Traffic Management concepts TALIS approach Java issues Conclusions

3 Need for change uropean Air Traffic Management shows need for change More responsive More cost-effective (lead times of decades) (delays cost billions of Euro / year) While retaining or increasing current level-of-safety ir transport business characteristics Business pressure leads to faster, better, cheaper paradigm move from proprietary solutions to open systems and COTS

4 Java Flying high Air Traffic Management concepts Flight Events Planned Flight Data Day Prior Day of Operation Request Start-Up Take-Off Cruise Level Parameter from Destination Landing ATM Phase Strategic Planning Pre-Tactical Planning Tactical Planning Ground Movement Climb-Out En-Route Arrival Post-Arrival Profile Data link Services Units and Facilities Involved IFPS CFMU IFPS CFMU ATM FMPs AMCs IFPS CFMU FMPs TWR APP ACC IFPS FMPs APP ACC(s) IFPS FMPs ACM ACL CAP DCL DSC PPD FLIPCY DYNAV D-FIS COTRAC SAP ATSAW COSEP AUTOPS ACC(s) IFPS FMPs ACC(s) APP TWR EUROCONTROL COOPATS concept Cooperative Air Traffic Services

5 Java Flying high Air Traffic Management concepts Flight crew Pilot Co-pilot Distribution of information Flight planner Distribution of responsibility of: -Flowrateconformance -Trajectoryinformation - Separation assurance Air Traffic controller Dispatcher Aeronautical Operational Control (AOC) Air Traffic Server Provider (ATSP) Traffic Flow Manager FAA DAG-TM concept Distributed Air-Ground Traffic Managemenmt

6 TALIS approach Concepts COOPATS DAG - TM User needs -Airborneseparationassurance - Air traffic situational awareness - Co-operative separation assurance -Autonomousflightoperations -Departureclearances - System wide information management Intelligent pushback & taxing -Freemanoeuvringforuserpreferred -departures - separation assurance - traffic flow management -trajectoryconformance - Collaboration for user preferred arrival metering -... TALIS Fueling Service Passenge r Service Traffic Information Service Weather Service... COTS Navigation: VOR / DME ILS MLS GPS GLONASS Galileo LAAS / WAAS Communication: ACARS SSR Mode S VDL Mode 2/4 Gatelink ATN Satellite IP

7 TALIS approach

8 TALIS approach TALIS requirements support variety of location / flight phase dependant applications support variety of applications which evolve over time support mix of hardware and software platforms realistic time-to-market for new TALIS applications accommodate air transport concerns real-time safety / certifiability security Note these concerns are application dependant

9 TALIS approach DO-178B Safety classification ( including FAR/JAR-25 frequency definition) level A: Catastrophic failure extremely improbable < 1x10-9 per Flight Hour Level B: Hazardous/Severe-Major extremely remote 1x10-9 < hazardous failure < 1x10-7 Level C: Major failure remote 1x10-7 < major failure < 1x10-5 Level D: Minor failure probable minor failure > 1x10-5 Level E: No Effect undetermined DO-278 uses 6 Assurance Levels AL1 - AL6 IEC uses Safety Integrity Levels SIL1 - SIL4 Eurocontrol for ECAC area will probably use 6 Assurance Levels AL1 - AL6

10 TALIS approach TALIS Applications TALIS Service Concept TALIS Services TALIS Applications TALIS TALIS Service Layer Services Jini Java Virtual Machine (JVM) (Real-Time) Operating Serv i ce Implementation Java Support e.g. embedded Linux, proprietary operating system (Aeronautica l)telecommunication Network Serv i ce IP, gateling, satellite, VDL mode 2/4 1

11 TALIS approach Java advantages Open, i.e. Vendor independent COTS, capitalise on huge commercial investment and concentrate on air transport added value Java allows easier integration into existing business systems (i.e. Enterprise Application Integration) Java / Jini allows easy update of application software and even install new applications 1

12 Java issues real-time TALIS supports mix of soft real-time and non real-time applications running concurrently run time addition of new TALIS applications safety / certifiability airborne part DO-178B mix of airborne applications levels from E up to B/C running concurrently (no (Preliminary)System Safety Assessment available yet (P)SSA ) ground part standard being completed, DO-278 (FAA, extension DO-178B, March 2002) or dedicated Eurocontrol standard varying mix of ground applications levels running concurrently 1

13 Java issues security TALIS application may not obtain unauthorised data of other applications e.g. All passengers on board is valid exchange, passenger X on board is unauthorised protection of critical applications needed (e.g. authentication for aircraft clearances) mix of applications running concurrently on same platform 1

14 Conclusions For TALIS Java with its many COTS developments seems appropriate choice Open issues are real-time (work is being done in RTJ group) safety / certifiability security TALIS starts with low level applications, increasing to more critical applications as technology matures and experience is gained 1