AC 20-152

Last updated
Development Assurance for Airborne Electronic Hardware
US-FederalAviationAdmin-Seal.svg
FAA Publication
AbbreviationAC 20-152
Year started2005
Latest versionA
2022 (2022)
Organization Federal Aviation Administration
Domain Aviation safety
Website FAA

The Advisory Circular AC 20-152A, Development Assurance for Airborne Electronic Hardware, identifies the RTCA-published standard DO-254 as defining "an acceptable means, but not the only means" to secure FAA approval of electronic hardware for use within the airspace subject to FAA authority. With the 2022 release of Revision A (effectively a complete rewrite and remarkable expansion) this Advisory Circular becomes a very important instrument for completing and updating some DO-245 guidance and providing applicants with clarifications and additional information on that standard. [1]

Contents

Initially, the DO-254 was commonly interpreted as applying only to complex custom micro-coded components within aircraft systems with Item Design Assurance Levels (IDAL) of A, B, or C. [2] [3] DO-254 guidance on simple electronic hardware and other topics needed some clarification. However, Revision A of this AC clarifies that AC 20-152() and DO-254 apply to the type certification of all electronic hardware aspects of airborne systems, including all simple electronic hardware, although at greatly reduced effort.

Revision A also defines 29 objectives additional to those identified in DO-254. Applicants choosing to follow DO-254 under the authority of AC 20-152A must also accomplish all of these additional objectives that apply to their particular hardware. [4]

Specifically excluding COTS microcontrollers [5] (see AC 20-115()/DO-178C), complex custom micro-coded components include field programmable gate arrays (FPGA), programmable logic devices (PLD), and application-specific integrated circuits (ASIC), particularly in cases where correctness and safety can not be verified through testing alone, necessitating methodical design assurance. [6] Simple devices are those that are verifiable with testing alone, such that the FAA may agree that methodical design assurance is unnecessary.

For DAL D hardware, as long as the applicant follows DO-254, the applicant does not need to apply this advisory circular since the FAA does not expect to examine the life cycle data. [3] [5] However, if the applicant chooses to follow other design practices for DAL D hardware (as permitted by this AC) the FAA will review the data. [7]

Cetain of the new objectives in AC 20-152A explicitly state DO-254's application to circuit board assemblies (CBA). [8]

Relationship to FAA Order 8110.105

With the release of the expanded AC 20-152A and its companion AC 00-72, Best Practices for Airborne Electronic Hardware Design Assurance Using EUROCAE ED-80() and RTCA DO-254(), chapters 3 through 6 of FAA Order 8110.105A were removed in a Revision B released in 2024 to eliminate any duplication or conflict with the new ACs. The removed sections had been published as an expedient solution the concerns of authorities and applicants, but the FAA wished ultimately to not provide applicants with guidance and clarifications in its orders to certification workers. Where this pair of new ACs replace material in Order 8110.105, AC 20-152A provides new guidance to close gaps in DO-254 and AC 00-72 provides "additional information" on some of the new objectives in AC 20-152A. [9] [1]

Revision History

Revision History of AC 20-152
RevisionYearTitle
AC 20-15230 Jun 2005Design Assurance Guidance for Airborne Electronic Hardware
AC 20-152A07 Oct 2022Development Assurance for Airborne Electronic Hardware

Related Research Articles

DO-178B, Software Considerations in Airborne Systems and Equipment Certification is a guideline dealing with the safety of safety-critical software used in certain airborne systems. It was jointly developed by the safety-critical working group RTCA SC-167 of the Radio Technical Commission for Aeronautics (RTCA) and WG-12 of the European Organisation for Civil Aviation Equipment (EUROCAE). RTCA published the document as RTCA/DO-178B, while EUROCAE published the document as ED-12B. Although technically a guideline, it was a de facto standard for developing avionics software systems until it was replaced in 2012 by DO-178C.

A hazard analysis is one of many methods that may be used to assess risk. At its core, the process entails describing a system object that intends to conduct some activity. During the performance of that activity, an adverse event may be encountered that could cause or contribute to an occurrence. Finally, that occurrence will result in some outcome that may be measured in terms of the degree of loss or harm. This outcome may be measured on a continuous scale, such as an amount of monetary loss, or the outcomes may be categorized into various levels of severity.

<span class="mw-page-title-main">ARP4754</span> Aerospace Practice

ARP4754 , Aerospace Recommended Practice (ARP) Guidelines for Development of Civil Aircraft and Systems, is a published standard from SAE International, dealing with the development processes which support certification of Aircraft systems, addressing "the complete aircraft development cycle, from systems requirements through systems verification." Since their joint release in 2002, compliance with the guidelines and methods described within ARP4754 and its companion ARP4761 have become mandatory for effectively all civil aviation world-wide.

RTCA DO-254 / EUROCAE ED-80, Design Assurance Guidance for Airborne Electronic Hardware is a document providing guidance for the development of airborne electronic hardware, published by RTCA, Incorporated and EUROCAE. Initially released in 2000, the DO-254/ED-80 standard was not necessarily considered policy until recognized by the FAA in 2005 through AC 20-152 as a means of compliance for the design assurance of electronic hardware in airborne systems. The guidance in this document is applicable, but not limited, to such electronic hardware items as

<span class="mw-page-title-main">Electronic flight bag</span> Flight Information management device

An electronic flight bag (EFB) is an electronic information management device that helps flight crews perform flight management tasks more easily and efficiently with less paper providing the reference material often found in the pilot's carry-on flight bag, including the flight-crew operating manual, navigational charts, etc. In addition, the EFB can host purpose-built software applications to automate other functions normally conducted by hand, such as take-off performance calculations. The EFB gets its name from the traditional pilot's flight bag, which is typically a heavy documents bag that pilots carry to the cockpit.

Parts Manufacturer Approval (PMA) is an approval granted by the United States Federal Aviation Administration (FAA) to a manufacturer of aircraft parts.

DO-178C, Software Considerations in Airborne Systems and Equipment Certification is the primary document by which the certification authorities such as FAA, EASA and Transport Canada approve all commercial software-based aerospace systems. The document is published by RTCA, Incorporated, in a joint effort with EUROC and replaces DO-178B. The new document is called DO-178C/ED-12C and was completed in November 2011 and approved by the RTCA in December 2011. It became available for sale and use in January 2012.

<span class="mw-page-title-main">Advisory circular</span> Publication offered by the Federal Aviation Administration

Advisory circular (AC) refers to a type of publication offered by the Federal Aviation Administration (FAA) to "provide a single, uniform, agency-wide system … to deliver advisory (non-regulatory) material to the aviation community." Advisory circulars are now harmonized with soft law Acceptable Means of Compliance (AMC) publications of EASA, which are nearly identical in content. The FAA's Advisory Circular System is defined in FAA Order 1320.46D.

<span class="mw-page-title-main">AC 25.1309-1</span> American aviation regulatory document

AC 25.1309–1 is an FAA Advisory Circular (AC) that identifies acceptable means for showing compliance with the airworthiness requirements of § 25.1309 of the Federal Aviation Regulations, which requires that civil aviation equipment, systems, and installations "perform their intended function under foreseeable operating conditions." The present Revision B was released in August 2024. AC 25.1309–1 establishes the principle that the more severe the hazard resulting from a system or equipment failure, the less likely that failure must be. Catastrophic failures must be extremely improbable.

<span class="mw-page-title-main">FAA Order 8130.34</span>

FAA Order 8130.34D, Airworthiness Certification of Unmanned Aircraft Systems, establishes procedures for issuing either special airworthiness certificates in the experimental category or special flight permits to unmanned aircraft systems (UAS), optionally piloted aircraft (OPA), and aircraft intended to be flown as either a UAS or an OPA.

<span class="mw-page-title-main">AC 20-115</span>

The Advisory Circular AC 20-115( ), Airborne Software Development Assurance Using EUROCAE ED-12( ) and RTCA DO-178( ), recognizes the RTCA published standard DO-178 as defining a suitable means for demonstrating compliance for the use of software within aircraft systems. The present revision D of the circular identifies ED-12/DO-178 Revision C as the active revision of that standard and particularly acknowledges the synchronization of ED-12 and DO-178 at that revision.

<span class="mw-page-title-main">FAA Order 8110.105</span> American regulatory order

FAA Order 8110.105B, Airborne Electronic Hardware Approval Guidelines is an explanation of how Federal Aviation Administration (FAA) personnel can use and apply the publication

DO-248C, Supporting Information for DO-178C and DO-278A, published by RTCA, Incorporated, is a collection of Frequently Asked Questions and Discussion Papers addressing applications of DO-178C and DO-278A in the safety assurance of software for aircraft and software for CNS/ATM systems, respectively. Like DO-178C and DO-278A, it is a joint RTCA undertaking with EUROCAE and the document is also published as ED-94C, Supporting Information for ED-12C and ED-109A. The publication does not provide any guidance additional to DO-178C or DO-278A; rather, it only provides clarification for the guidance established in those standards. The present revision is also expanded to include the "Rationale for DO-178C/DO-278A" section to document items that were considered when developing DO-178B and then DO-178C, DO-278A, and DO-330, as well as the supplements that accompany those publications.

CAST-32A, Multi-core Processors is a position paper, by the Certification Authorities Software Team (CAST). It is not official guidance, but is considered informational by certification authorities such as the FAA and EASA. A key point is that Multi-core processor "interference can affect execution timing behavior, including worst case execution time (WCET)."

DO-297, Integrated Modular Avionics (IMA) Development Guidance and Certification Considerations is one of the primary document by which certification authorities such as the FAA and EASA approve Integrated Modular Avionics (IMA) systems for flight. The FAA Advisory Circular (AC) 20-170 refers to DO-297.

The Advisory Circular AC 00-69, Best Practices for Airborne Software Development Assurance Using EUROCAE ED-12( ) and RTCA DO-178( ), initially issued in 2017, supports application of the active revisions of ED-12C/DO-178C and AC 20-115. The AC does not state FAA guidance, but rather provides information in the form of "best practices" complementary to the objectives of ED-12C/DO-178C.

<span class="mw-page-title-main">CAST-31</span> Certified Authorities Software Team position paper

CAST-31, Technical Clarifications Identified for RTCA DO-254 / EUROCAE ED-80 is a Certification Authorities Software Team (CAST) Position Paper. It is an FAA publication that "does not constitute official policy or guidance from any of the authorities", but is provided for educational and informational purposes only for applicants for software and hardware certification.

The Certification Authorities Software Team (CAST) is an international group of aviation certification and regulatory authority representatives. The organization of has been a means of coordination among representatives from certification authorities in North and South America, Europe, and Asia, in particular, the FAA and EASA. The focus of the organization has been harmonization of Certification Authorities activities in part though clarification and improvement of the guidance provided by DO-178C and DO-254.

<span class="mw-page-title-main">CAST-15</span>

CAST-15, Merging High-Level and Low-Level Requirements is a Certification Authorities Software Team (CAST) Position Paper. It is an FAA publication that "does not constitute official policy or guidance from any of the authorities", but is provided to applicants for software and hardware certification for educational and informational purposes only.

<span class="mw-page-title-main">FAA Order 8110.37</span> FAA Order 8110.37 defines the FAAs system of DERs. DERs issue signed FAA Form 8110-3 approvals.

FAA Order 8110.37 , Designated Engineering Representative (DER) Handbook, is a handbook of procedures, technical guidelines, limitations of authority, tools, and resources for Designated Engineering Representatives (DERs), who are appointees of the Federal Aviation Administration. Both DERs and the FAA offices managing them have individual and mutual roles and responsibilities in the certifications of safety of aircraft and aviation systems. This handbook provides a better understanding of these roles. Although intended for the roles of DERs, this order may be useful to ODA engineering Unit Members, who are effectively DERs managed by aviation manufacturers rather than by the FAA.

References

  1. 1 2 Tammy Reeve (May 14, 2024). "Order 8110.105B (and the Evolution of Guidance Surrounding DO-254)". Airworthiness Certification Services. Retrieved 2024-10-23. Then on 10/7/2022, the FAA set forth two new and very important documents: AC 20-152A and AC 00-72. These documents helped to close some of the most important gaps and make a number of much-needed clarifications.
  2. AC 20-152, FAA, Office AIR-100, 2007.
  3. 1 2 Cary Spitzer; Uma Ferrell; Thomas Ferrell, eds. (2015). Digital Avionics Handbook, Avionics, Development and Implementation (3rd ed.). Boca Raton, FL: CRC Press. p. 14-6. ISBN   978-1138076983. DAL D electronic hardware may use DO-254 or applicable in-house design assurance processes.
  4. Tammy Reeve (May 14, 2024). "Order 8110.105B (and the Evolution of Guidance Surrounding DO-254)". Airworthiness Certification Services. Retrieved 2024-10-23. AC 20-152A did such things as clarify the classification of Simple vs. Complex, the difference between the validation and verification processes, what was expected with respect to robustness, HDL code coverage, tool assessment, and previously developed hardware. In this context, it created 12 new objectives that applicants needed to address. It also covered the larger topics of the use of COTS IP and COTS devices, creating 7 and 8 new objectives, for each respectively. It also tackled the issue of applying DO-254 at the board level, since previously DO-254 was almost exclusively applied at the chip level.
  5. 1 2 AC 20-152, FAA, Office AIR-100, page 2, 2007.
  6. "Simple Electronic Hardware and RTCA Document DO-254 and EUROCAE Document ED-80, Design Assurance Guidance for Airborne Electronic Hardware" (PDF). Certification Authorities Software Team Position (CAST-30). FAA. August 2007. Retrieved 2019-09-30.
  7. ORDER 8110.105A "Simple and Complex Electronic Hardware Approval Guidance" (PDF). FAA. p. 1-1.
  8. Tammy Reeve (May 14, 2024). "Order 8110.105B (and the Evolution of Guidance Surrounding DO-254)". Airworthiness Certification Services. Retrieved 2024-10-23. It also tackled the issue of applying DO-254 at the board level, since previously DO-254 was almost exclusively applied at the chip level.
  9. Tammy Reeve (May 14, 2024). "Order 8110.105B (and the Evolution of Guidance Surrounding DO-254)". Airworthiness Certification Services. Retrieved 2024-10-23. Order 8110.105A added a number of topics that needed some urgent clarifications. Order 8110.105B replaces Order 8110.105A, which had some conflicts with the newer documents AC 20-152A and AC 00-72, that covered and expanded upon much of the content of 8110.105A with more informed and thorough approaches.