运输类飞机安全性评估过程

第六讲运输类飞机安全性评估过程

——25.1309的符合性验证本章主要内容一、25.1309的主要内容二、相关咨询材料三、安全性评估过程四、研制保证等级分配过程一、25.1309的主要内容1.第25.1309条设备、系统及安装(a)凡航空器适航标准对其功能有要求的设备、系统及安装，其设计必须保证在各种可预期的运行条件下能完成预定功能。(b)飞机系统与有关部件的设计，在单独考虑以及与其它系统一同考虑的情况下，必须符合下列规定：(1)发生任何妨碍飞机继续安全飞行与着陆的失效状态的概率为极不可能（

extremelyimprobable）；(2)发生任何降低飞机能力或机组处理不利运行条件能力的其它失效状态的概率为不可能（

improbable）。一、25.1309的主要内容1.第25.1309条设备、系统及安装（续）(c)必须提供警告信息，向机组指出系统的不安全工作情况并能使机组采取适当的纠正动作。系统、控制器件和有关的监控与警告装置的设计必须尽量减少可能增加危险的机组失误。(d)必须通过分析，必要时通过适当的地面、飞行或模拟器试验，来表明符合本条（b）的规定。这种分析必须考虑下列情况：(1)可能的失效模式，包括外界原因造成的故障和损坏；(2)多重失效和失效未被检测出的概率；(3)在各个飞行阶段和各种运行条件下，对飞机和乘员造成的后果；(4)对机组的警告信号，所需的纠正动作，以及对故障的检测能力。一、25.1309的主要内容1.第25.1309条设备、系统及安装（续）(e)在表明电气系统和设备的设计与安装符合本条(a)和(b)的规定时，必须考虑临界的环境条件。中国民用航空规章规定具备的或要求使用的发电、配电和用电设备，在可预期的环境条件下能否连续安全使用，可由环境试验、设计分析或参考其它飞机已有的类似使用经验来表明，但适航当局认可的技术标准中含有环境试验程序的设备除外。(f)必须按照25.1709条的要求对电气线路互联系统(EWIS)进行评估。一、25.1309的主要内容1.第25.1309条设备、系统及安装（续）25.1709系统安全：EWIS每个EWIS的设计和安装必须使得：(a)灾难性失效状态(1)是极不可能的，和(2)不会因单个失效而引起。(b)每个危险失效状况是极小的。一、25.1309的主要内容2.14CFR§25.1309Equipment,systems,andinstallations.(a)Theequipment,systems,andinstallationswhosefunctioningisrequiredbythissubchapter,mustbedesignedtoensurethattheyperformtheirintendedfunctionsunderanyforeseeableoperatingcondition.(b)Theairplanesystemsandassociatedcomponents,consideredseparatelyandinrelationtoothersystems,mustbedesignedsothat--(1)Theoccurrenceofanyfailureconditionwhichwouldpreventthecontinuedsafeflightandlandingoftheairplaneisextremelyimprobable,and(2)Theoccurrenceofanyotherfailureconditionwhichwouldreducethecapabilityoftheairplaneortheabilityofthecrewtocopewithadverseoperatingconditionsisimprobable.一、25.1309的主要内容2.14CFR§25.1309Equipment,systems,andinstallations.(c)Warninginformationmustbeprovidedtoalertthecrewtounsafesystemoperatingconditions,andtoenablethemtotakeappropriatecorrectiveaction.Systems,controls,andassociatedmonitoringandwarningmeansmustbedesignedtominimizecrewerrorswhichcouldcreateadditionalhazards.一、25.1309的主要内容2.14CFR§25.1309Equipment,systems,andinstallations.(d)Compliancewiththerequirementsofparagraph(b)ofthissectionmustbeshownbyanalysis,andwherenecessary,byappropriateground,flight,orsimulatortests.Theanalysismustconsider--(1)Possiblemodesoffailure,includingmalfunctionsanddamagefromexternalsources.(2)Theprobabilityofmultiplefailuresandundetectedfailures.(3)Theresultingeffectsontheairplaneandoccupants,consideringthestageofflightandoperatingconditions,and(4)Thecrewwarningcues,correctiveactionrequired,andthecapabilityofdetectingfaults.一、25.1309的主要内容2.14CFR§25.1309Equipment,systems,andinstallations.[(e)Inshowingcompliancewithparagraphs(a)and(b)ofthissectionwithregardtotheelectricalsystemandequipmentdesignandinstallation,criticalenvironmentalconditionsmustbeconsidered.Forelectricalgeneration,distribution,andutilizationequipmentrequiredbyorusedincomplyingwiththischapter,exceptequipmentcoveredbyTechnicalStandardOrderscontainingenvironmentaltestprocedures,theabilitytoprovidecontinuous,safeserviceunderforeseeableenvironmentalconditionsmaybeshownbyenvironmentaltests,designanalysis,orreferencetopreviouscomparableserviceexperienceonotheraircraft.][(f)EWISmustbeassessedinaccordancewiththerequirementsofSec.25.1709.]一、25.1309的主要内容3.CS25.1309Equipment,systemsandinstallationsTherequirementsofthisparagraph,exceptasidentifiedbelow,areapplicable,inadditiontospecificdesignrequirementsofCS-25,toanyequipmentorsystemasinstalledintheaeroplane.AlthoughthisparagraphdoesnotapplytotheperformanceandflightcharacteristicrequirementsofSubpartBandthestructuralrequirementsofSubpartsCandD,itdoesapplytoanysystemonwhichcompliancewithanyofthoserequirementsisdependent.CertainsinglefailuresorjamscoveredbyCS25.671(c)(1)andCS25.671(c)(3)areexceptedfromtherequirementsofCS25.1309(b)(1)(ii).CertainsinglefailurescoveredbyCS25.735(b)areexceptedfromtherequirementsofCS25.1309(b).ThefailureeffectscoveredbyCS25.810(a)(1)(v)andCS25.812areexceptedfromtherequirementsofCS25.1309(b).TherequirementsofCS25.1309(b)applytopowerplantinstallationsasspecifiedinCS25.901(c).一、25.1309的主要内容3.CS25.1309Equipment,systemsandinstallations

(a)Theaeroplaneequipmentandsystemsmustbedesignedandinstalledsothat:(1)Thoserequiredfortypecertificationorbyoperatingrules,orwhoseimproperfunctioningwouldreducesafety,performasintendedundertheaeroplaneoperatingandenvironmentalconditions.(2)Otherequipmentandsystemsarenotasourceofdangerinthemselvesanddonotadverselyaffecttheproperfunctioningofthosecoveredbysub-paragraph(a)(1)ofthisparagraph.一、25.1309的主要内容3.CS25.1309Equipment,systemsandinstallations

(b)Theaeroplanesystemsandassociatedcomponents,consideredseparatelyandinrelationtoothersystems,mustbedesignedsothat-(1)Anycatastrophicfailurecondition(i)isextremelyimprobable;and(ii)doesnotresultfromasinglefailure;and(2)Anyhazardousfailureconditionisextremelyremote;and(3)Anymajorfailureconditionisremote.一、25.1309的主要内容3.CS25.1309Equipment,systemsandinstallations

(c)Informationconcerningunsafesystemoperatingconditionsmustbeprovidedtothecrewtoenablethemtotakeappropriatecorrectiveaction.Awarningindicationmustbeprovidedifimmediatecorrectiveactionisrequired.Systemsandcontrols,includingindicationsandannunciationsmustbedesignedtominimisecrewerrors,whichcouldcreateadditionalhazards.(d)ElectricalwiringinterconnectionsystemsmustbeassessedinaccordancewiththerequirementsofCS25.1709.二、相关咨询材料1、AC25.1309-1ASystemDesignandAnalysis(1988)1）目的2）取消3）适用性4）背景5）fail-safe设计概念6）定义7）讨论8）接受的技术9）定量评估10）定性评估二、相关咨询材料1、AC25.1309-1ASystemDesignandAnalysis(1988)11）运行与维修考虑12）分析步骤二、相关咨询材料2、AMC25.1309SystemDesignandAnalysis引用标准SAEARP4754SAEARP4761RTCADO-178RTCADO-160二、相关咨询材料2、AMC25.1309SystemDesignandAnalysis1）目的2）修订3）相关文档4）CS25.1309的适用性5）定义6）背景7）失效状态分类与概率术语8）安全性目标9）CS25.1309的符合性二、相关咨询材料2、AMC25.1309SystemDesignandAnalysis10）失效状态识别及识别器影响时的考虑11）失效状态概率评估及分析考虑12）运行与维修考虑13）设计修改的评估附录1：评估方法附录2：