White Paper

Building in flight-safety certification into secure, high-performance, mission-critical processing subsystems

Issue link: https://read.uberflip.com/i/1173436

Contents of this Issue

Navigation

Page 2 of 4

3 EGNOS V3 topology The EGNOS common computing platform (ECCP) is the core of EGNOS V3's compute capability and is used by all the real-time processing subsystems. The ECCP system provides the following global capabilities: • System startup • Auto-control configuration (BIT) • Data processing • Monitor operating conditions • Control health conditions • Schedule partitions • Drive external interfaces • Synchronization with external time-base reference • Update configuration (maintenance) ECCPs are high-reliability, deterministic computers, built around the latest generation of processors deployed in multiple commercial avionic applications. The architecture uses, interoperable, common processing and I/O modules for scalability. Leveraging certifiable COTS with ROCK2 Mercury supplied BuiltSAFE ROCK2 engineering development chassis during the early stages of the V3 program. The same plug-in modules used in development chassis are used in the production, qualified units with no software migration required. For reliability through dissimilarity, two real-time operating systems (RTOS) and ARINC 653 are included. In addition, an optimized LINUX version is supplied with enhanced security features. BuiltSAFE - Mercury processing solutions with BuiltSAFE capabilities bring the highest level of flight-safety assurance to aerospace and defense applications. Our proven, reusable Design Assurance Level (DAL) certified artifacts for mis- sion computing, avionics, networking and datalink comms processing save time and cost while decreasing risk. The RTOS software (board support package and middleware) and hardware are designed to DAL C or DAL B depending on the specific subsystem function. Each subsystem supports many advanced features detailed below including deterministic Ethernet (ACE), time synchronization and secure boot. BuiltSAFE ROCK2 mission computer for the highest levels of flight- safety certification ECCP processing subsystems leverage similar hardware with single or quad-core processor architectures. Each BuiltSAFE ROCK2 chassis hosts four conduction-cooled 3U OpenVPX modules. All modules are interconnected with "point-to-point" PCIe links. No PCIe switch is used in this "full-mesh" architecture enabling deterministic traffic control for highly safety-critical communication. Each chassis slot can accept a processing unit composed of an I/O carrier board and MFCC- 8559 (multi-function computing core) mezzanine. The SBC is part of Mercury's BuiltSAFE ecosystem for high safety-critical computing all the way up to DAL-A, the highest available. Each SBC has built-in test equipment (BITE) that detects abnormal running conditions, compute errors and other RTOS capabilities. Its generated heartbeat output signal enables system monitoring from with external equipment. EGNOS common computing platform (ECCP) - Front Each processing subsystem supports an independent software application running over a commercial-off-the-shelf (COTS) operating system (OS). The operating system can be an ARINC-653 time and space partitioned or a secure Linux solution. Mercury provides transparent communication mechanisms between processing units via inter- processor communication (IPC) software. ACE - Deterministic Ethernet Mercury has developed a safety-critical Gigabit Ethernet-compatible communication device that is compliant with the ARINC 664 part 3 standard for Ethernet avionics. This Avionics Certifiable Ethernet (ACE) is demonstrable to the highest design assurance level (DAL), including DAL-A. EGNOS common computing platform (ECCP) - Back

Articles in this issue

view archives of White Paper - Building in flight-safety certification into secure, high-performance, mission-critical processing subsystems