动态重构综合模块化航空电子系统适航安全性评估方法研究

The dynamically reconfigurable feature has been integrated to the next-generation integrated modular avionics. The traditional "V"-shaped safety assessment method, which based on the safety parameter assignment and validation, has been unable to cope with the highly flexibility and the configuration state space explosion brought by the dynamically reconfigurable feature. This issue has attracted the concerns from the national aviation research organization, airworthiness authorities, while has not yet been practical solved. In this study, firstly the the architecture of IMA system is analyzed and the flexible safety requirements of the dynamic reconfiguration are proposed. Secondly, the safety model of the IMA is constructed using the formal language and extended to achieve safety integration among multiple configurations, the ambiguous issues of the safety level of the IMA system with multiple reconfigurations which have overlapped resources is solved. Finally, the safety assessment framework of the dynamically reconfigurable IMA is established with the consideration of the actual restrict. This study can provide technical support for airworthiness authorities to deal with the emerging avionics technology which will improve the capacity of the authorities of the airworthiness review. Meanwhile, it can provide safety assessment guideline for avionics system development, system integration unit.

综合模块化航空电子系统的资源共享和功能组件综合为动态重构提供了可能，传统的以安全参数分配和验证为核心的“V”型安全性评估方法已无法应对动态重构带来的系统构型高度灵活和动态重构空间爆炸等问题，已成为制约大型客机航电发展的技术难题。本研究首先通过研究动态重构IMA系统的体系结构，分析动态重构特性引入的柔性安全性需求；采用形式化语言构建系统安全模型，以模型扩展方式实现多重配置方案间的安全参数融合，解决多重配置间资源重叠带来的系统安全性等级模糊的问题；最后综合实际航电系统约束，完成动态重构IMA系统构安全性评估。本项目的研究成果可以为我国适航当局应对新兴航电技术提供技术支持，同时给我国航电系统研制、集成单位提供系统安全性设计和评估理论指导。

综合模块化航电系统的动态重构特性在降低硬件资源冗余提高系统性能的同时，也存在系统构型高度灵活、动态重构空间爆炸、故障传播形式复杂等问题，使得传统的安全性评估方法难以满足系统的安全性评估需求，成为制约大型客机航电发展的技术难题。本项目针对动态重构综合航电系统的安全性评估展开研究，首先研究动态重构IMA系统的体系结构特点，建立了系统资源与功能服务要素的映射关系，构建了动态重构综合航电系统层次化模型，解决了潜在重构方案在资源层面交叉耦合的不确定性；基于Safety Case理论完成了IMA系统动态重构需求分解与验证，建立了IMA系统服务能力量化判定方法；针对不同的应用场景建立了面向任务和面向安全的重构策略，并构建了重构优化模型，给出了基于粒子群算法的求解方法；针对IMA系统动态重构特性建立了基于联合k/n(G)的系统可靠性模型，并提出了一种面向风险均衡的动态IMA系统任务规划算法；利用AltaRica形式化建模方法建立了带有安全属性的IMA系统形式化模型，以驻留于动态重构综合航电系统中的显示系统失效为例，进行了基于AltaRica模型自动转化的故障树模型与直接构建故障树的对比分析，其结果表明了提出方法的正确性。