Certification Considerations for Adaptive Systems

Advanced capabilities planned for the next generation of aircraft, including those that will operate within the Next Generation Air Transportation System (NextGen), will necessarily include complex new algorithms and non-traditional software elements. These aircraft will likely incorporate adaptive control algorithms that will provide enhanced safety, autonomy, and robustness during adverse conditions. Unmanned aircraft will operate alongside manned aircraft in the National Airspace (NAS), with intelligent software performing the high-level decision-making functions normally performed by human pilots. Even human-piloted aircraft will necessarily include more autonomy. However, there are serious barriers to the deployment of new capabilities, especially for those based upon software including adaptive control (AC) and artificial intelligence (AI) algorithms. Current civil aviation certification processes are based on the idea that the correct behavior of a system must be completely specified and verified prior to operation. This report by Rockwell Collins and SIFT documents our comprehensive study of the state of the art in intelligent and adaptive algorithms for the civil aviation domain, categorizing the approaches used and identifying gaps and challenges associated with certification of each approach

Architecture and Information Requirements to Assess and Predict Flight Safety Risks During Highly Autonomous Urban Flight Operations

As aviation adopts new and increasingly complex operational paradigms, vehicle types, and technologies to broaden airspace capability and efficiency, maintaining a safe system will require recognition and timely mitigation of new safety issues as they emerge and before significant consequences occur. A shift toward a more predictive risk mitigation capability becomes critical to meet this challenge. In-time safety assurance comprises monitoring, assessment, and mitigation functions that proactively reduce risk in complex operational environments where the interplay of hazards may not be known (and therefore not accounted for) during design. These functions can also help to understand and predict emergent effects caused by the increased use of automation or autonomous functions that may exhibit unexpected non-deterministic behaviors. The envisioned monitoring and assessment functions can look for precursors, anomalies, and trends (PATs) by applying model-based and data-driven methods. Outputs would then drive downstream mitigation(s) if needed to reduce risk. These mitigations may be accomplished using traditional design revision processes or via operational (and sometimes automated) mechanisms. The latter refers to the in-time aspect of the system concept. This report comprises architecture and information requirements and considerations toward enabling such a capability within the domain of low altitude highly autonomous urban flight operations. This domain may span, for example, public-use surveillance missions flown by small unmanned aircraft (e.g., infrastructure inspection, facility management, emergency response, law enforcement, and/or security) to transportation missions flown by larger aircraft that may carry passengers or deliver products. Caveat: Any stated requirements in this report should be considered initial requirements that are intended to drive research and development (R&D). These initial requirements are likely to evolve based on R&D findings, refinement of operational concepts, industry advances, and new industry or regulatory policies or standards related to safety assurance

Share the Sky: Concepts and Technologies That Will Shape Future Airspace Use

The airspace challenge for the United States is to protect national sovereignty and ensure the safety and security of those on the ground and in the air, while at the same time ensuring the efficiency of flight, reducing the costs involved, protecting the environment, and protecting the freedom of access to the airspace. Many visions of the future NAS hold a relatively near-term perspective, focusing on existing uses of the airspace and assuming that new uses will make up a small fraction of total use. In the longer term, the skies will be filled with diverse and amazing new air vehicles filling our societal needs. Anticipated new vehicles include autonomous air vehicles acting both independently and in coordinated groups, unpiloted cargo carriers, and large numbers of personal air vehicles and small-scale point-to-point transports. These vehicles will enable new capabilities that have the potential to increase societal mobility, transport freight at lower cost and with lower environmental impact, improve the study of the Earth s atmosphere and ecosystem, and increase societal safety and security by improving or drastically lowering the cost of critical services such as firefighting, emergency medical evacuation, search and rescue, border and neighborhood surveillance, and the inspection of our infrastructure. To ensure that uses of the airspace can continue to grow for the benefit of all, a new paradigm for operations is needed: equitably and safely sharing the airspace. This paper is an examination of such a vision, concentrating on the operations of all types of air vehicles and future uses of the National Airspace. Attributes of a long-term future airspace system are provided, emerging operations technologies are described, and initial steps in research and development are recommended

Unmanned Aerial Vehicle Domain: Areas of Research

Unmanned aerial vehicles (UAVs) domain has seen rapid developments in recent years. As the number of UAVs increases and as the missions involving UAVs vary, new research issues surface. An overview of the existing research areas in the UAV domain has been presented including the nature of the work categorised under different groups. These research areas are divided into two main streams: Technological and operational research areas. The research areas in technology are divided into onboard and ground technologies. The research areas in operations are divided into organization level, brigade level, user level, standards and certifications, regulations and legal, moral, and ethical issues. This overview is intended to serve as a starting point for fellow researchers new to the domain, to help researchers in positioning their research, identifying related research areas, and focusing on the right issues.Defence Science Journal, Vol. 65, No. 4, July 2015, pp. 319-329, DOI: http://dx.doi.org/10.14429/dsj.65.863

Serious Gaming for Building a Basis of Certification via Trust and Trustworthiness of Autonomous Systems

Autonomous systems governed by a variety of adaptive and nondeterministic algorithms are being planned for inclusion into safety-critical environments, such as unmanned aircraft and space systems in both civilian and military applications. However, until autonomous systems are proven and perceived to be capable and resilient in the face of unanticipated conditions, humans will be reluctant or unable to delegate authority, remaining in control aided by machine-based information and decision support. Proving capability, or trustworthiness, is a necessary component of certification. Perceived capability is a component of trust. Trustworthiness is an attribute of a cyber-physical system that requires context-driven metrics to prove and certify. Trust is an attribute of the agents participating in the system and is gained over time and multiple interactions through trustworthy behavior and transparency. Historically, artificial intelligence and machine learning systems provide answers without explanation - without a rationale or insight into the machine thinking. In order to function as trusted teammates, machines must be able to explain their decisions and actions. This transparency is a product of both content and communication. NASAs Autonomy Teaming & TRAjectories for Complex Trusted Operational Reliability (ATTRACTOR) project seeks to build a basis for certification of autonomous systems via establishing metrics for trustworthiness and trust in multi-agent team interactions, using AI (Artificial Intelligence) explainability and persistent modeling and simulation, in the context of mission planning and execution, with analyzable trajectories. Inspired by Massively Multiplayer Online Role Playing Games (MMORPG) and Serious Gaming, the proposed ATTRACTOR modeling and simulation environment is similar to online gaming environments in which player (aka agent) participants interact with each other, affect their environment, and expect the simulation to persist and change regardless of any individual agents active participation. This persistent simulation environment will accommodate individual agents, groups of self-organizing agents, and large-scale infrastructure behavior. The effects of the emerging adaptation and coevolution can be observed and measured to building a basis of measurable trustworthiness and trust, toward certification of safety-critical autonomous systems

SWS High-Level Overview

No abstract availabl

Architectural Design of a Safe Mission Manager for Unmanned Aircraft Systems

[EN] Civil Aviation Authorities are elaborating a new regulatory framework for the safe operation of Unmanned Aircraft Systems (UAS). Current proposals are based on the analysis of the specific risks of the operation as well as on the definition of some risk mitigation measures. In order to achieve the target level of safety, we propose increasing the level of automation by providing the on-board system with Automated Contingency Management functions. The aim of the resulting Safe Mission Manager System is to autonomously adapt to contingency events while still achieving mission objectives through the degradation of mission performance. In this paper, we discuss some of the architectural issues in designing this system. The resulting architecture makes a conceptual differentiation between event monitoring, decision-making on a policy for dealing with contingencies and the execution of the corresponding policy. We also discuss how to allocate the different Safe Mission Manager components to a partitioned, Integrated Modular Avionics architecture. Finally, determinism and predictability are key aspects in contingency management due to their overall impact on safety. For this reason, we model and verify the correctness of a contingency management policy using formal methods.This work was supported by the Spanish Regional Government "Generalitat Valenciana" under contract ACIF/2016/197.Usach Molina, H.; Vila Carbó, JA.; Torens, C.; Adolf, FM. (2018). Architectural Design of a Safe Mission Manager for Unmanned Aircraft Systems. Journal of Systems Architecture. 90:94-108. https://doi.org/10.1016/j.sysarc.2018.09.003S941089

UAS Collision Avoidance Algorithm that Minimizes the Impact on Route Surveillance

A collision avoidance algorithm is developed and implemented that is applicable to different types of unmanned aerial systems ranging from a single platform with the ability to perform all collision avoidance functions independently to multiple vehicles performing functions as a cooperative group with collision avoidance commands computed at a ground station. The collision avoidance system is exercised and tested using operational hardware and platforms and is demonstrated in representative missions similar to those planned for operational systems. The results presented are the first known flight tests of a global, three-dimensional, geometric collision avoidance system on an unmanned aircraft system. Novel developments using an aggregated collision cone approach allows each unmanned aircraft to detect and avoid collisions with two or more other aircraft simultaneously. The collision avoidance system is implemented using a miniature unmanned aircraft with an onboard autopilot. Various test cases are used to demonstrate the algorithms robustness to different collision encounters. Two-ship encounters at various engagement angles are flight tested. The flight test results are compared with ideal, software-in-the-loop, and hardware-in-the-loop tests

An Innovative Human Machine Interface for UAS Flight Management System

The thesis is relative to the development of an innovative Human Machine Interface for UAS Flight Management System. In particular, touchscreena have been selected as data entry interface. The thesis has been done together at Alenia Aermacch