Presented by

Gert DÖHMEN
AIRBUS Germany
Processes and Methods for
Integrated Modular Avionics

Presentation at USA - EU Workshop

Paris, July 7th 2005
 Integrated Modular Avionics (IMA)

LRU A
A

B Airborne
LRU B
Functions

LRU C
C
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

Conventional Integrated
Avionics Avionics

LRM 1
LRM 2

Identical Hardware & Kernel Software used for different

Airborne Functions in Flight Control & Utility Functions
Page 2
 Targeted IMA Advantages

• Reduction of Weight / Volume / Power consumption of

the Avionics
• Reduction of material stocks within Airline Maintenance
Centers
• Reduction of cost for Versions-Upgrades (core HW &
SW)
• Reduction of cost for functional enhancements
• Reduction of cost through the emerging market of open
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

standards

Page 3
 IMA Concept - LRU / LRM based Architecture

ARINC 429 world LRU IMA world LRM

module
AFDX E/S
LRU7
IOM
LRU1 AFDX Switch

LRU
LRU6
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

LRU2
CPIOM

LRU5

LRU4 CPIOM AFDX Switch

ARINC 429 interface ARINC 429 link AFDX interface AFDX link

Static cabling configuration

1 new link = 1 new cable 1 new link = AFDX switch configuration
table update
Page 4
 ADCN Network Architecture - Functional Domains
WARNING: old obsolete architecture for functional domain description only!

FCSC1 FCGC1 FCGC2 FCSC2

SFCC1
COM MON COM MON Flight COM MON COM MON
SFCC2
COM MON Control
FCGC3
FCSC3 TBC
COM MON
COM MON
COM MON

S_1 S_1
IOM _1 _2 IOM

FM1
S_1
SW13 FM2
ADIRU1 ADIRU2
_3
Cockpit ADIRU3 FM3
EEC1 A B EEC3
Engines B
L1 L2 C1 R2 R1
A

EEC2 B ACR1 ATC2 A EEC4

A
ATC1 L3 C2 R3 ACR2 opt
B

FW1
FCDC1 FW2
FCDC2
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

AESU1 S_2 S_2

_1 _2 AESU2
IOM CDAM ELM IOM
ELM CBM
SCI CBM SCI
SB24 HSM SB24
HSM
Fuel AIC? AIC? Fuel
LG,TP&BS
COM MON
COM MON Energy COM MON LG,TP&BS
COM MON
ECB ext lights
Fuel&LG S_3 ctrl
S_3
_1
CIDS CIDS _2
IPCU
IRDC IPCU
IRDC
PWCU PESC
VSC
S_4 S_4
_1 _2
SPDB Cabin SPDB
DSMC1&2 DSMC3
CPIOM-A-1&2 CPIOM-B-1&2
CPIOM-A-3&4CPIOM-B-3&4

Page 5
 Flow Separation Concept
The Virtual Link Concept
End-System 1

Appl. 1
VL1
VL3
Appl. 2 Physical Link
Physical
Logical VL2 Link
Appl. 3 representation
of a Virtual Link
Virtual Links
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

System

System

System
End-System 2

End-

End-

End-
Ethernet

3
controller
TX RX TX RX TX RX
VL2
End-System 1 End-System 3
TX Transmit MAC
RX Receive MAC

End-System 4 RX TX RX TX RX TX

Switching Fabric
SWITCH

Page 6
 LRM / CPIOM Hardware

• ARINC 600, 3 MCU

• Approximately 4 kg
• Powered by 28VDC (some on ESS bus)
• ARINC 600 conn., 368 pins + 2 QUADRAX
• Hardware pin programming identifies domain, location,
side, aircraft (MAC and IP addressing on Aircraft Data
Communication Network (ADCN))
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

ARINC 600 SIZE 2

Connector

Four electronic boards :

- One CPU board
- One Power supply and I/O board
- Two I/O boards

Backplane

PCI interconection
board

SIS module connector

Page 7
 Building blocks of an Integrated CPIOM

Instrumentation Service

Resource BITE
User System User System User System

MIB - SNMP
Dataloading

Monitoring
Application 1 Application 2 Application n

Application Programming Interface

Operating System
Configuration y Memory Management
Table y Scheduling
y Data I/O, Communication
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

Hardware

...
AFDX Communication
ARINC Communication
CAN Communication
Analogue Signals
Discrete Signals

Page 8
 IMA Configuration Process Aspects

• Classification of Configuration Parameter (Module, Global, Local).

• Hardware/OS specific configuration parameter.
• Manual assignment of resources supported by databases.
• Automated tool-chain to produce the load.
Function Supplier 1 Module Supplier

Function Supplier 2 Airbus

© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

Function Supplier 3 System Depart. 1

Module Integrator
System Depart. 2
ADCN & IMA
Information & Data Flow System Depart. 3
for one Module Type

A380: 7 Module types; Up to 4 redundant Modules; 22 Physical Modules

Page 9
 © AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

Visions for IMA

Processes & Methods

Page 10
 Configuration based on System Model

• Configuration bound to System Description Language

• Support of different Layer (e.g. Application, OS, Hardware)
• Decoration of Abstract Syntax Tree with configuration data
• Declaration of dependencies
between parameter on the
same or adjacent layer.
PARTITION A Queuing Com 001 PARTITION B

reset reset

OUT P1 P2 IN
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

M ODULE KERNEL

PARTITION PARTITION
M ANAGEM ENT
SERVICES

0..*

Scheduler
CPIOM

BOOT KERNEL
API

DRV_M GR

AFDX I/O CAN ARINC 429

(discrete,
analog)

Page 11
 Component-based System Development

• Concept of building up the

system architecture from From/by higher
exchangeable (heterogeneous) SL
design layers

components.
• Components are enriched with from
Promised

functional and non-functional neighbors

FL to
aspects as “Heterogeneous Assumed neighbors
Rich Components” (HRC).
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

• Their characteristics can be EL From/by lower

assessed on the basis of those HL design layers

aspects.
• Design-space exploration is used to find a semi-optimal
mapping of applications to LRMs under multi-dimensional
constraints.
Page 12
 Improvement of the Development Process

• Ubiquitous seamless model-based design access

hiding heterogeneity and semantic diversity of
representations and methods, and
providing a design-centric access to all design activities.

• During all design phases, process steps must be guided by

an estimation how far overall requirements (e.g. safety,
costs) are fulfilled. This “speculative” design can be based
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

on HRC analysis methods.

• High flexibility and robustness with respect to late changes

and overlapping design activities.

Page 13
 From Structural to Analytical Redundancy

• Identical Hardware & Kernel Software is the prerequisite for

a flexible allocation (reconfiguration) of applications.
• The amount of Structural Redundancy (and thus number of
LRM) can be reduced by the use of Analytical Redundancy.
• Analytical Redundancy requests design-space exploration
with safety constraints.
• The Analytical Redundancy has to respect certification
aspects.
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

Page 14
 Dieses Dokument und alle darin enthaltenen Informationen
sind das alleinige Eigentum von AIRBUS DEUTSCHLAND
GmbH. Die Zustellung dieses Dokumentes oder die
Offenlegung seines Inhalts begründen keine Rechte am
geistigen Eigentum. Dieses Dokument darf ohne die
ausdrückliche schriftliche Genehmigung von AIRBUS
DEUTSCHLAND GmbH nicht vervielfältigt oder einem Dritten
gegenüber enthüllt werden. Dieses Dokument und sein Inhalt
dürfen nur zu bestimmungsgemäßen Zwecken verwendet
werden.
Die in diesem Dokument gemachten Aussagen stellen kein
Angebot dar. Sie wurden auf der Grundlage der aufgeführten
Annahmen und in gutem Glauben gemacht. Wenn die
zugehörigen Begründungen für diese Aussagen nicht
angegeben sind, ist AIRBUS DEUTSCHLAND GmbH gern
bereit, deren Grundlage zu erläutern.
© AIRBUS DEUTSCHLAND GmbH. Alle Rechte vorbehalten. Vertrauliches und geschütztes Dokument.

Page 15