Re: How does DO-178 treat OEM modules (with software)?




"Thomas Magma" <somewhere@xxxxxxxxxxxxxxxxxx> wrote in message
news:3XROh.86851$DN.28461@xxxxxxxxxxxx
A while back we had a short seminar on DO-178 and I asked the 'experts' how
DO-178 dealt with the software in modules from a third party (I used GPS as
an example). They said that as long as our software treated the GPS module
as a black box or a slave, that we didn't have to ensure that the GPS
module's software was DO-178. Is this true or still true? What about
modules in general? I have the standard but can't find the answer anywhere
in it.

Thomas Magma


There are allowances in DO-178B for using commercial-off-the-shelf (COTS)
software in a certified product, but only at safety level D. This
essentially would be for a avionics product could not result in the loss of
the aircraft. Higher levels of safety, i.e., Levels A, B and C can not use
untested software, either as part of an application or in a module that is
used in the application.

DO-178B software levels (A, B, etc.) are based on the potential of the
software to cause safety-related failures identified in the system safety
assessment. DO-178B has five levels of certification:
Level A: Software whose failure would cause or contribute to a catastrophic
failure of the aircraft.
Level B: Software whose failure would cause or contribute to a
hazardous/severe failure condition.
Level C: Software whose failure would cause or contribute to a major failure
condition.
Level D: Software whose failure would cause or contribute to a minor failure
condition.
Level E: Software whose failure would have no effect on the aircraft or on
pilot workload.

Scott
Validated Software


.



Relevant Pages

  • Re: The libntp resumee...
    ... Ie, put up a GPS receiver with a PPS and use that as your time source, and ... a single GPS with PPS line to all boxes? ... where one failure will make the whole system fail. ...
    (comp.protocols.time.ntp)
  • Re: GNS430 on the Airway
    ... Is that because of the physics and architecture of the GPS/WAAS system or is it because the system is still new and not yet proven through enough testing and actual flight experience? ... It's because the known failure rate is considerably higher than with either VOR or ILS. ... The original point was that the chance of a failure of GPS is not a rationale for preferring ground based navaids because ground based navaids can fail as well. ...
    (rec.aviation.ifr)
  • Re: VOR Check question
    ... of the satellite constellation. ... Although the likely hood is very small, GPS is more likely to run into ... a wide area failure than VORs. ... it addresses the failure of a VOR and the failure of a GPS satellite. ...
    (rec.aviation.ifr)
  • Re: GNS430 on the Airway
    ... criteria presumes a failure of GPS during a terrain-critical phase ... testing and actual flight experience? ... a failure of GPS is not a rationale for preferring ground based navaids ... because ground based navaids can fail as well. ...
    (rec.aviation.ifr)
  • Re: This road pricing scam
    ... to the car, but also a status reporting transponder. ... If the car repeatedly reported GPS failure the driver could be ordered to submit the car/device for an examination. ... could be held responsible to fix it. ... The actual definition of failure that needed investigation would be more complicated based on failure to receive a GPS position, failure to store information, failure to connect to a wireless cell network. ...
    (uk.legal)