Browse Topic: Certification
Aircraft verification and certification entail a variety of testing tasks and require coordination among numerous stakeholders across different disciplines to ensure alignment on requirements. Historically, certification strategies have relied on both physical testing and high-fidelity simulation. The integration of these complementary approaches is essential to address their respective blind spots and to support credible certification evidence. A key challenge lies in the rigorous correlation of simulation models with physical test data. Flutter verification, for instance, is a critical component in defining the aircraft’s flight envelope and plays a foundational role in certifying safe operational boundaries. In this work, the process of freedom from flutter verification is demonstrated. This work introduces a novel approach to combining simulation and test data with the aim to accelerate and streamline the verification process leading to more efficient and cost-effective aircraft
Patching vulnerabilities in safety-critical domains such as automotive and aerospace is costly and complex. A small code modification can trigger a complete rebuild, producing a binary with widespread changes. This inflates patch size, complicates regression testing, and makes over-the-air (OTA) updates inefficient, as traditional binary patches often replace large portions of the executable. We present a binary rewriting–based experiment that shows the feasibility of a patch that updates only the affected bytes by computing the impact of a code change at the binary level. This produces minimal, localized patches rather than regenerated executables. The preliminary experiment shows that a single source change, which leads to thousands of modified bytes after recompilation, can be captured with only a few bytes using our method. For automotive and aerospace systems, this technique reduces patch size, conserves bandwidth, and minimizes disruption to certified software, offering a
Military and aerospace applications have become increasingly complex real-time systems. Multi-core SoCs improve performance but create new challenges in maintaining and verifying deterministic behavior. Connected systems require exceptional security to protect code from external cyberattacks. Evolving functional safety and reliability standards that keep raising the bar mean developers need to begin comprehensive testing sooner if they are going to meet tighter design schedules. Finally, certifying these complex systems has become even more difficult. To help OEMs meet these challenges, the RISC-V architecture has been designed with unique capabilities that support reliability and security in the development of safety-critical applications. With its open instruction set architecture, modularity, and extensibility, RISC-V accelerates the design of functionally safe systems while reducing the complexity, cost, and risk associated with certification to standards like DO-178C and ISO 26262
This SAE Aerospace Recommended Practice (ARP) defines lightning strike zones and provides guidelines for locating them on particular aircraft, together with examples. The zone definitions and location guidelines described herein are applicable to Parts 23, 25, 27, and 29 aircraft. The zone location guidelines and examples are representative of in-flight lightning exposures.
Treat foundational AV safety like seatbelts - make it non-proprietary and universal. An open safety stack, shared scenarios, benchmarks, and core validation tools can speed certification, reduce duplicated V&V and build public trust while preserving vendor differentiation. The bottleneck isn't compute - it's verification. Autonomous features are shipping in more vehicles and markets, but the gating factor is no longer raw compute. It's whether developers and regulators can verify systems against requirements and validate them against real-world operating design domains (ODDs) with confidence and repeatability. Today, many safety-critical components, from scenario libraries to pass/fail criteria, live in proprietary silos. That fragmentation slows regression testing, complicates regulator audits across regions, and duplicates effort across the industry. The result is an expensive, bespoke path to certification for every program and geography.
How engineers can ensure safety, reliability and quality in aerospace systems. Courbevoie, Île-de-France In an industry where failure is not an option and precision is paramount, aerospace manufacturers and suppliers are constantly seeking components and system solutions that deliver trusted reliability, performance, and compliance. Industry standards are a key part of achieving these high expectations, bringing together global leaders in the mobility industries to create defined, repeatable methods and consistent processes. One of these aerospace standards is AS1895 developed by SAE International - a critical standard due to the need for durable components that can withstand extreme conditions and offer high performance: high-temperature resistance, pressure sealing, and long service life with a cost-effective installation method. Leading aerospace companies such as Eaton and Honeywell have been manufacturing components that meet this standard for a long period of time.
Researchers from the National University of Singapore (NUS) have developed a novel triple-junction perovskite/Si tandem solar cell that can achieve a certified world-record power conversion efficiency of 27.1 percent across a solar energy absorption area of 1 sq cm, representing the best-performing triple-junction perovskite/Si tandem solar cell thus far. To achieve this, the team engineered a new cyanate-integrated perovskite solar cell that is stable and energy efficient.
Celebrating its 35th year, the National Aerospace Defense Contractors Accreditation Program (Nadcap) continues to advance quality assurance and regulatory compliance for aviation, defense, and space OEMs and suppliers. This article summarizes how Nadcap accreditation works, its benefits for manufacturers, and its role in expanding additive manufacturing through industry-wide consensus. The Nadcap program was first established in 1990 by a small group of aerospace and defense OEMs. Their goal was to create an accreditation initiative that provides a common approach to auditing the manufacturing and production processes used by companies supplying parts, components, structures, and services to major aerospace and defense OEMs. This foundation set the stage for Nadcap's continued focus on quality assurance and regulatory compliance in the industry.
Wind Tunnels are complex and cost-intensive test facilities. Thus, increasing the test efficiency is an important aspect. At the same time, active aerodynamic elements gain importance for the efficiency of modern cars. For homologation, such active aero-components pose an extra level of test complexity as their control strategies, the relevant drive cycles and their aerodynamics in different positions must be considered for homologation-relevant data. Often, active components have to be manually adjusted between test runs, which is a time-consuming process because the vehicle is not integrated into the test automation. Even if so, designing a test sequence stepping through the individual settings for each component of a vehicle is a tedious task in the test session. Thus, a sophisticated integration of the wind tunnel control system with a test management system, supporting the full homologation process is one aspect of a solution. The other is the integration of the vehicle’s active
This paper outlines observations from an FAA-sponsored research project that examined aviation Fly-By-Wire (FBW) accidents. The goal was to identify risk areas that will help guide a focus for FAA certification testing. Part of this study specifically focused on current powered-lift tiltrotors, identifying six general categories of causal factors for accidents, which will be discussed in detail regarding how they influenced flight control designs. The results of this survey, along with extrapolation to current designs, will be discussed and will illustrate why manufacturers are moving toward state-based flight control designs. In a state-based flight control scheme, the pilot does not have direct control over aircraft attitudes and motor tilt angles. Instead, the pilot requests a speed and or flight path with inceptor input, and the commanded attitudes and motor tilts are scheduled by the flight control computer. Additionally, recent lessons learned from electric Vertical Takeoff and
This paper demonstrates the training, optimisation, and predictive capabilities of Machine Learning (ML) for helicopter-ship certification. The work focuses on the development of a Linear Discriminant Analysis (LDA) model, trained specifically on pilot control activity data recorded during the hover phase of a recovery to a ship, to determine an operational boundary driven by pilot workload. The certification process currently relies heavily on embarked trials and the subjective workload assessment of test pilots. Modelling and Simulation (M&S), however, offers a potentially more efficient approach to addressing the high costs, resource-intensive nature, and inherent dangers associated with traditional clearance methods. By providing a relatively large amount of data for analysis, this approach creates an opportunity to bridge the gap between subjective and objective measures, enabling the prediction of workload limitations. An LDA model was trained using cross-validation on pilot
Ever-increasing modeling and simulation capabilities and the desire to use simulations in support of system qualification, regulatory compliance, and other critical decision-making roles, raises the bar on the need for rigorous V&V of all aspects of the models used to create the simulation data. US Department of Defense Directives and Instructions, and emerging regulatory and industry standards on Modeling and Simulation in a Digital Engineering context require rigorous M&S Verification, Validation, and Accreditation (M&S VV&A). These specifications aim to create trusted and credible simulation data that can be used in critical decision-making roles on complex systems. Implementing a well-defined, structured, model-based and standards-based M&S VV&A Process early in the program lifecycle facilitates collaboration and documented buy-in on M&S VV&A for program with customers and/or regulatory agencies. This collaboration increases acceptance throughout the program and product lifecycles
Full-scale static test (FSST) is a key test program for the certification of new helicopter airframe. The strength and deformation requirements in airframe certification are substantiated by full-scale tests of the airframe structures. It provides experimental evidence that the structure is able to support limit loads without detrimental permanent deformation and carry ultimate loads for at least three seconds. In design stage, the total number of flight and ground limit load conditions is around 500. In FSST, the number of test load cases should be remarkably reduced. However, the selected load scenarios should cover all of the critical design load scenarios. In this paper, test load generation procedures in FSST of a light utility helicopter is explained. The comparison of design load envelope and static test load envelopes are provided.
In the last years, new rotorcraft configurations have increased the attention among industries, through which the tiltrotor one due to its capability of combining both rotorcraft and aircraft advantages. However, there are situations where the vertical take-off mode could be enhanced in hard environmental and flight conditions. Therefore, to address this challenge, this work aims to develop a methodology to characterize a roll take-off model for a general tiltrotor configuration in such situations. By combining the integration of the equation of motion and geometrical assumptions, the runway distance is determined for an acceptable range of nacelle tilting angles. The process is developed by meeting the requirements defined by the regulations, combining the aircraft certification standards (CS23 and CS25) with the available tiltrotor certification basis from the FAA project #TC3419RC-R. Following the Nominal application, a sensitivity analysis is carried out, which studies the main
In this paper, we describe an innovative V&V approach using the SCADE product, enabling significant reduction of effort while preserving compliance with DO-178C/DO-331. This new approach relies on a unique capability: automatic generation of Low-Level Tests. Details about savings will be provided to show how we can reduce costs, speed up certifications, and bring products to the market faster. We will conclude by summarizing the actual benefits and describing ongoing work to bring other savings in the future.
Aircraft Certification is a mature and complex bureaucracy that has successfully ensured a very high degree of safety of aircraft design, construction, operation and maintenance. Outside of a very few doing the work, there is a general lack of knowledge of certification details. For novel technologies such as electric power, and innovative configurations such as multi-rotors, the rules are far less mature and still emerging and so also poorly understood. Within the Advanced Air Mobility (AAM) initiative, many new aircraft developments are underway using novel configurations, and the public announcements of regulatory progress toward FAA or EASA Type Certification capitalize on this ignorance by being vague or even misleading. Honeywell conceived the Regulatory Readiness Level (RRL) indicator as an objective measure of certification status to serve the AAM industry and ecosystem, with applicability across aviation. The released RRL Version 1 now enables credible, objective assessment of
This SAE Recommended Practice is intended to establish a procedure to certify the fundamental driving skill levels of professional drivers. This certification can be used by the individual driver to qualify their skills when seeking employment or other professional activity. These certification levels may also be used by test facilities or other organizations when seeking test or professional drivers of various skills. The associated family of documents listed below establish driving skill criteria for various specific categories. SAE J3300: Driving level SAE J3300/1: Low mu/winter driving SAE J3300/2: Trailer towing SAE J3300/3: Automated driving Additional certifications to be added as appropriate. This main document provides: (1) common definitions and general guidance for using this family of documents, (2) directions for obtaining certification through Probitas Authentication®1, and (3) driving level examination requirements.
There is an increasing effort to reduce noise pollution across different industries worldwide. From a transportation standpoint, pass-by regulations aim to achieve this and have been implementing increasingly stricter emissions limits. Testing according to these standards is a requirement for homologation, but does little to help manufacturers understand why their vehicles may be failing to meet limits. Using a developed methodology such as Pass-by Source Path Contribution (SPC, also known as TPA) allows for identification of dominant contributors to the pass-by receivers along with corresponding acoustic source strengths. This approach is commonly used for passenger vehicles, but can be impractical for off-highway applications, where vehicles are often too large for most pass-by-suitable chassis dynamometers. A hybrid approach is thereby needed, where the same techniques and instrumentation used in the indoor test are applied to scenarios in an outdoor environment. This allows for
Demonstrating deadline adherence for real-time tasks is a common requirement in all safety norms. Timing verification has to address two levels: the code level (worst-case execution time) and the scheduling level (worst-case response time). Determining which methodology is suited best depends on the characteristics of the target processor. All contemporary microprocessors try to maximize the instruction-level parallelism by sophisticated performance-enhancing features that make the execution time of a particular instruction dependent on the execution history. On multi-core systems, the execution time additionally is influenced by interference effects on shared resources caused by concurrent activities on the different cores, which are not controlled by the scheduling algorithm. In the avionics domain, the new FAA AC 20-193 / EASA AMC 20-193 guidance documents formalize predictability aspects of multi-core systems and derive adequate measures for timing verification. Timing verification
Airworthiness certification of aircraft requires an Airworthiness Security Process (AWSP) to ensure safe operation under potential unauthorized interactions, particularly in the context of growing cyber threats. Regulatory authorities mandate the consideration of Intentional Unauthorized Electronic Interactions (IUEI) in the development of aircraft, airborne software, and equipment. As the industry increasingly adopts Model-Based Systems Engineering (MBSE) to accelerate development, we aim to enhance this effort by focusing on security scope definitions – a critical step within the AWSP for security risk assessment that establishes the boundaries and extent of security measures. However, our findings indicate that, despite the increasing use of model-based tools in development, these security scope definitions often remain either document-based or, when modeled, are presented at overly abstract levels, both of which limit their utility. Furthermore, we found that these definitions
Performing highly representative tests of aircraft equipment is a critical feature for gaining utmost confidence on their ability to perform flawlessly in flight under the entire spectrum of operating conditions. This can also contribute to accelerate the certification process of a new equipment. A research project (E-LISA) was performed in recent years, as part of the European funded Clean Sky 2 framework, with the objective of building an innovative facility for testing an electrically actuated landing gear and brake for a small air transport. The project eventually led to the development and construction of an Iron Bird able to reproduce in a realistic and comprehensive way a full variety of landing test cases consistent with certification specifications and landing histories available in the repository of the airframer. The Iron Bird that was eventually developed is a multi-functional intelligent and easy reconfigurable facility integrating hardware and software allowing to perform
In the domain of aircraft certification, Development Assurance is what some would call a useful tool to gain confidence in the development of complex systems, and what others would call a necessary evil. But what does it actually do? Why is it necessary for certification of modern aircraft? What, epistemologically, does it bring to the table? This paper aims to show how Development Assurance (DA) activities, at all levels from aircraft to item, close the epistemological holes created when complex systems are chosen for implementation. It will map the different sources and types of uncertainty encountered in system and aircraft verification and explain how each type is dealt with within a certification context, working from simple mechanical systems up to complex and highly integrated systems using software and airborne electronic hardware and beyond. It will show that Development Assurance, far from being an arbitrary set of activities, systematically brings personal and corporate
This Recommended Practice is intended to establish a procedure to certify the trailer towing driving skill levels of professional drivers. This certification can be used by the individual driver to qualify their skills when seeking employment or other professional activity. These certification levels may also be used by test facilities or other organizations when seeking test or professional drivers of various skills. This document provides directions for obtaining certification through Probitas Authentication®1 and associated trailer towing driving skill examination requirements. This document is a supplement to SAE J3300, providing information specific to the trailer towing driving skill certification and clarifying the application of the rules set forth in SAE J3300 to the trailer towing certification. While the references, definitions, rules, and guidelines presented in SAE J3300 Sections 1 through 5 apply to the trailer towing certification, they are not repeated in this document.
Headquartered in San Juan, Puerto Rico, Unusual Machines describes itself as a “classic American technology company born from garage tinkerers and hobbyists, focused on serving the emerging drone industry with unique and innovative products.” The company recently launched a new low-cost flight controller for drones, the Riot Brave F7, that achieved “Blue UAS” certification from the Department of Defense's (DoD) Defense Innovation Unit (DIU) in August. The Riot Brave F7 - just $58 - features a STMF722RET6 processor equipped with Bosch accelerometer and barometer, and has 16Mb of built in Blackbox Memory. While the company developed Riot Brave F7 primarily as a low cost flight controller option for FPV drones, there are broader possibilities for it, including military applications.
On December 13, 2024, the U.S. Food and Drug Administration (FDA) notified the Medical Device Innovation Consortium (MDIC) of their final approval of the MDIC Report on the MedAccred Accreditation and Audit Program for Contract Sterilizers (Final Report). FDA inspections of firms, such as contract sterilizers, are pursuant to Title 21-Food and Drugs, Chapter 9 – Federal Food, Drug, and Devices, Part A-Drugs and Devices, Section 21 USC 360: Registration of producers of drugs or devices, Subsection (h) Inspections.1 The FDA notification is the culmination of a pilot study initiated by the Performance Review Institute (PRI) in 2023 in collaboration with MDIC and the FDA to evaluate PRI’s MedAccred Sterilization Audit and Accreditation Program of contract sterilizers. The agency confirmed that MedAccred is as an acceptable audit approach that may be leveraged for regulatory purposes as well as supplier oversight.
Homologation is an important process in vehicle development and aerodynamics a main data contributor. The process is heavily interconnected: Production planning defines the available assemblies. Construction defines their parts and features. Sales defines the assemblies offered in different markets, where Legislation defines the rules applicable to homologation. Control engineers define the behavior of active, aerodynamically relevant components. Wind tunnels are the main test tool for the homologation, accompanied by surface-area measurement systems. Mechanics support these test operations. The prototype management provides test vehicles, while parts come from various production and prototyping sources and are stored and commissioned by logistics. Several phases of this complex process share the same context: Production timelines for assemblies and parts for each chassis-engine package define which drag coefficients or drag coefficient contributions shall be determined. Absolute and
The extent of automation and autonomy used in general aviation (GA) has been steadily increasing for decades, with the pace of development accelerating recently. This has huge potential benefits for safety given that it is estimated that 75% of the accidents in personal and on-demand GA are due to pilot error. However, an approach to certifying autonomous systems that relies on reversionary modes limits their potential to improve safety. Placing a human pilot in a situation where they are suddenly tasked with flying an airplane in a failed situation, often without sufficient situational awareness, is overly demanding. This consideration, coupled with advancing technology that may not align with a deterministic certification paradigm, creates an opportunity for new approaches to certifying autonomous and highly automated aircraft systems. The new paths must account for the multifaceted aviation approach to risk management which has interlocking requirements for airworthiness and
Items per page:
50
1 – 50 of 1584