運輸類飛機安全性評估過程教學(xué)文案

1、運輸類飛機安全性評估過程一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n1. 第第25.1309 條設(shè)備、系統(tǒng)及安裝條設(shè)備、系統(tǒng)及安裝q(a) 凡航空器適航標(biāo)準(zhǔn)對其功能有要求的設(shè)備、系統(tǒng)及安裝，其設(shè)計必須保證在各種可預(yù)期的運行條件下能完成預(yù)定功能。q(b) 飛機系統(tǒng)與有關(guān)部件的設(shè)計，在單獨考慮以及與其它系統(tǒng)一同考慮的情況下，必須符合下列規(guī)定：n(1) 發(fā)生任何妨礙飛機繼續(xù)安全飛行與著陸的失效狀態(tài)的概率為極不可能（ extremely improbable）；n(2) 發(fā)生任何降低飛機能力或機組處理不利運行條件能力的其它失效狀態(tài)的概率為不可能（ improbable） 。一、一、25.

2、130925.1309的主要內(nèi)容的主要內(nèi)容n 1. 第第25.1309 條設(shè)備、系統(tǒng)及安裝條設(shè)備、系統(tǒng)及安裝（續(xù)）（續(xù)）q(c) 必須提供警告信息，向機組指出系統(tǒng)的不安全工作情況并能使機組采取適當(dāng)?shù)募m正動作。系統(tǒng)、控制器件和有關(guān)的監(jiān)控與警告裝置的設(shè)計必須盡量減少可能增加危險的機組失誤。q(d) 必須通過分析，必要時通過適當(dāng)?shù)牡孛?、飛行或模擬器試驗，來表明符合本條（b）的規(guī)定。這種分析必須考慮下列情況：n(1) 可能的失效模式，包括外界原因造成的故障和損壞；n(2) 多重失效和失效未被檢測出的概率；n(3) 在各個飛行階段和各種運行條件下，對飛機和乘員造成的后果；n(4) 對機組的警告信號，所需

3、的糾正動作，以及對故障的檢測能力。一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n1. 第第25.1309 條設(shè)備、系統(tǒng)及安裝條設(shè)備、系統(tǒng)及安裝（續(xù)）（續(xù)）q(e) 在表明電氣系統(tǒng)和設(shè)備的設(shè)計與安裝符合本條(a)和(b)的規(guī)定時，必須考慮臨界的環(huán)境條件。中國民用航空規(guī)章規(guī)定具備的或要求使用的發(fā)電、配電和用電設(shè)備，在可預(yù)期的環(huán)境條件下能否連續(xù)安全使用，可由環(huán)境試驗、設(shè)計分析或參考其它飛機已有的類似使用經(jīng)驗來表明，但適航當(dāng)局認(rèn)可的技術(shù)標(biāo)準(zhǔn)中含有環(huán)境試驗程序的設(shè)備除外。q(f) 必須按照25.1709 條的要求對電氣線路互聯(lián)系統(tǒng)(EWIS)進行評估。一、一、25.130925.1309的主

4、要內(nèi)容的主要內(nèi)容n1. 第第25.1309 條設(shè)備、系統(tǒng)及安裝條設(shè)備、系統(tǒng)及安裝（續(xù)）（續(xù)）q25.1709系統(tǒng)安全：EWISn每個EWIS 的設(shè)計和安裝必須使得：q(a) 災(zāi)難性失效狀態(tài)(1) 是極不可能的，和(2) 不會因單個失效而引起。q(b) 每個危險失效狀況是極小的。一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n2. 14 CFR25.1309 Equipment, systems, and installations.q(a) The equipment, systems, and installations whose functioning is required

5、by this subchapter, must be designed to ensure that they perform their intended functions under any foreseeable operating condition.q(b) The airplane systems and associated components, considered separately and in relation to other systems, must be designed so that-n(1) The occurrence of any failure

6、 condition which would prevent the continued safe flight and landing of the airplane is extremely improbable, andn(2) The occurrence of any other failure condition which would reduce the capability of the airplane or the ability of the crew to cope with adverse operating conditions is improbable.一、一

7、、25.130925.1309的主要內(nèi)容的主要內(nèi)容n2. 14 CFR25.1309 Equipment, systems, and installations.q(c) Warning information must be provided to alert the crew to unsafe system operating conditions, and to enable them to take appropriate corrective action. Systems, controls, and associated monitoring and warning means

8、 must be designed to minimize crew errors which could create additional hazards.一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n2. 14 CFR25.1309 Equipment, systems, and installations.q(d) Compliance with the requirements of paragraph (b) of this section must be shown by analysis, and where necessary, by appropriate gr

9、ound, flight, or simulator tests. The analysis must consider-n(1) Possible modes of failure, including malfunctions and damage from external sources.n(2) The probability of multiple failures and undetected failures.n(3) The resulting effects on the airplane and occupants, considering the stage of fl

10、ight and operating conditions, andn(4) The crew warning cues, corrective action required, and the capability of detecting faults.一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n2. 14 CFR25.1309 Equipment, systems, and installations.q (e) In showing compliance with paragraphs (a) and (b) of this section with regard to

11、the electrical system and equipment design and installation, critical environmental conditions must be considered. For electrical generation, distribution, and utilization equipment required by or used in complying with this chapter, except equipment covered by Technical Standard Orders containing e

12、nvironmental test procedures, the ability to provide continuous, safe service under foreseeable environmental conditions may be shown by environmental tests, design analysis, or reference to previous comparable service experience on other aircraft.q (f) EWIS must be assessed in accordance with the r

13、equirements of Sec. 25.1709.一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n3. CS 25.1309 Equipment, systems and installationsqThe requirements of this paragraph, except as identified below, are applicable, in addition to specific design requirements of CS-25, to any equipment or system as installed in the aeroplane.

14、Although this paragraph does not apply to the performance and flight characteristic requirements of Subpart B and the structural requirements of Subparts C and D, it does apply to any system on which compliance with any of those requirements is dependent. Certain single failures or jams covered by C

15、S 25.671(c)(1) and CS 25.671(c)(3) are excepted from the requirements of CS 25.1309(b)(1)(ii). Certain single failures covered by CS 25.735(b) are excepted from the requirements of CS 25.1309(b). The failure effects covered by CS 25.810(a)(1)(v) and CS 25.812 are excepted from the requirements of CS

16、 25.1309(b). The requirements of CS 25.1309(b) apply to powerplant installations as specified in CS 25.901(c).一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n3. CS 25.1309 Equipment, systems and installationsq (a) The aeroplane equipment and systems must be designed and installed so that:n(1) Those required for type c

17、ertification or by operating rules, or whose improper functioning would reduce safety, perform as intended under the aeroplane operating and environmental conditions.n(2) Other equipment and systems are not a source of danger in themselves and do not adversely affect the proper functioning of those

18、covered by sub-paragraph (a)(1) of this paragraph.一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n3. CS 25.1309 Equipment, systems and installationsq (b) The aeroplane systems and associated components, considered separately and in relation to other systems, must be designed so that -n(1) Any catastrophic failure cond

19、ition (i) is extremely improbable; and (ii) does not result from a single failure; andn(2) Any hazardous failure condition is extremely remote; andn(3) Any major failure condition is remote.一、一、25.130925.1309的主要內(nèi)容的主要內(nèi)容n3. CS 25.1309 Equipment, systems and installationsq (c) Information concerning un

20、safe system operating conditions must be provided to the crew to enable them to take appropriate corrective action. A warning indication must be provided if immediate corrective action is required. Systems and controls, including indications and annunciations must be designed to minimise crew errors

21、, which could create additional hazards.q(d) Electrical wiring interconnection systems must be assessed in accordance with the requirements of CS 25.1709.二、相關(guān)咨詢材料二、相關(guān)咨詢材料n1、AC25.1309-1A System Design and Analysis (1988)q1）目的q2）取消q3）適用性q4）背景q5）fail-safe設(shè)計概念q6）定義q7）討論q8）接受的技術(shù)q9）定量評估q10）定性評估二、相關(guān)咨詢材料二、相

22、關(guān)咨詢材料n1、AC25.1309-1A System Design and Analysis (1988)q11）運行與維修考慮q12）分析步驟二、相關(guān)咨詢材料二、相關(guān)咨詢材料n2、AMC 25.1309 System Design and Analysisq引用標(biāo)準(zhǔn)nSAE ARP4754nSAE ARP4761nRTCA DO-178nRTCA DO-160二、相關(guān)咨詢材料二、相關(guān)咨詢材料n2、AMC 25.1309 System Design and Analysisq1）目的q2）修訂q3）相關(guān)文檔q4）CS25.1309的適用性q5）定義q6）背景q7）失效狀態(tài)分類與概率術(shù)語q8）

23、安全性目標(biāo)q9）CS25.1309的符合性二、相關(guān)咨詢材料二、相關(guān)咨詢材料n2、AMC 25.1309 System Design and Analysisq10）失效狀態(tài)識別及識別器影響時的考慮q11）失效狀態(tài)概率評估及分析考慮q12）運行與維修考慮q13）設(shè)計修改的評估q附錄1：評估方法q附錄2：安全性評估過程概覽q附錄3：每飛行小時評估概率的計算q附錄3：允許的概率三、安全性評估過程三、安全性評估過程n1、安全性評估的四個部分、安全性評估的四個部分三、安全性評估過程三、安全性評估過程n1、安全性評估的四個部分、安全性評估的四個部分q1）功能危險性評估（FHA）：n檢查分析飛機及系統(tǒng)功能，以確定潛在的功能失效，并根據(jù)具體的失效狀態(tài)對功