• Journal of IKEEE
• /
• v.19 no.3
• /
• pp.415-423
• /
• 2015

The DO-178C guide, which is referenced as the software development guide when a certification of the airworthiness in the commercial airplane is acquired by FAA in US, is recently referenced for the local military aircraft airworthiness. This indicates that when the auditor of the military aircraft airworthiness looks over the software development documents, the auditor reviews if all of the documents are verified in accordance with the DO-178C guide. However, when we developed the military aircraft intercom, We developed its control software in accordance with the CMMI level 3, since there were no requirements for the compliance of the DO-178C guide. Therefore, When we consider the airworthiness of this intercomm system, The analysis for how much the software development based on the CMMI level 3 is different from the DO-178C guide is needed to prepare the essential software documents additionally. Thus, This study analyzes the differences between CMMI level 3 and DO-178C guide and provides that which data on the CMMI level 3 is necessary for the compliance of the aircraft airworthiness comparing with the DO-178C. The analyzed result can be applied at the software development of the other military aircraft avionics equipment based on the CMMI model environment considering the compliance of the military aircraft airworthiness.

• Journal of the Korean Society of Systems Engineering
• /
• v.13 no.1
• /
• pp.57-65
• /
• 2017

Recently, the ratio of electrical part and embedded software has grown in automotive industry. ISO 26262, 'Road Vehicles - Functional Safety', was published to guide development of automotive electrical and electronic part in 2011. This paper describes definition of functional safety and analyzes ISO 26262. The comparison of ISO 26262 and DO-178C is made, then difference between them is identified. DO-178C provides guidance for the production of software for airborne system and equipment. The core of DO-178C is a relatively minor update to the previous DO-178B, however, the big changes are captured in the supplemented documents such as DO-331, 'Model-Based Development and Verification Supplement to DO-178C and DO-278A'. Model-based design is important to develop automotive and aircraft meeting the guidelines of ISO 26262 and DO-178C. In this paper, the sample case of applying MBSE(Model-Based Systems Engineering) to AVCS(Active Vibration Control System) software development is discussed.

• Journal of Aerospace System Engineering
• /
• v.14 no.spc
• /
• pp.13-21
• /
• 2020

RTCA DO-178C is a development guideline to ensure aircraft system airworthiness. However, there is an opinion that the application of DO-178C to the development of UAV of more than MTOW 150 kg is over regulated because the severity of the risk from UAV is lower than that of normal aircraft. To address issue, EASA and FAA have been working on the Re-Engineering and Streamlining the Standards for Avionics Certification(RESSAC) project since 2016 with the goal of establishing a new certification scheme that simplifies existing aircraft certification procedures and standards. This paper analyzes the current DO-178C certification process and presents advantages by comparing and analyzing the new RESSAC certification process, which simplifies processes and outputs in comparing with the DO-178C certification process, while it ensures flight safety of the vehicle.

• Journal of Aerospace System Engineering
• /
• v.17 no.6
• /
• pp.108-117
• /
• 2023

Thus far, a mission software component of the KT-1 military fixed-wing aircraft for overseas export has been developed through international joint development with foreign companies. The reliability of the software component could be certified by complying with the development environment and procedures of foreign companies based on DO-178B. However, recently, DO-178C certification is required for overseas exports, and reliability tests to comply with the weapon system software development guidelines are required for domestic military forces. In this paper, we describe the problems in obtaining domestic airworthiness certification in the international joint development of a previously developed KT-1 export-typed aircraft system integration project. To this end, we find a solution to comply with both DO-178C and the Weapon System Software Development and Management Manual and provide the optimal software reliability test method.

• Journal of Aerospace System Engineering
• /
• v.15 no.3
• /
• pp.71-78
• /
• 2021

Since most functions of modern aircraft are controlled by software, software errors are directly related to aircraft safety. The criterion in Chapter 15 of the MIL-HDBK-516C addresses safe development and verification of military aircraft software. As the U.S. Air Force repeatedly experienced non-compliance with Chapter 15 criterion of the MIL-HDBK-516C, it published an Airworthiness Circular (AC-17-01) as a guide to meeting the criterion. In this paper, Chapter 15 of MIL-HDBK-516C, AC-17-01 and the SW Qualification Guideline (DO-178C) as applied by the Federal Aviation Administration are compared and analyzed. For the analysis, a matching ratio formula between the MIL-HDBK-516C criteria specified in AC-17-01 and the DO-178C specified in MIL-HDBK-516C criteria is defined. The sections that satisfy MIL-HDBK-516C criterion are derived when AC-17-01 or DO-178C matches. Based on the analysis results, the aircraft software development process is established and examples of application of Chapter 15 of MIL-HDBK-516C are addressed.

• Journal of Advanced Navigation Technology
• /
• v.24 no.1
• /
• pp.28-36
• /
• 2020

Korea augmentation satellite system (KASS) is the Korean satellite based augmentation system (SBAS) developed by ministry of land, infrastructure, and transport (MOLIT) since 2014. Since KASS is the safety critical system that can affect to the safety of airplane, the software of KASS is developed according to the DO178B software level induced from safety analysis. In case of KASS control station (KCS), most of the software of KCS get assigned software level E in DO178B. In that case, ECSS-Q-ST-80C category D is assigned as a software product assurance standard. In this paper, the software related standard ECSS-E-ST-40C, ECSS-Q-HB-80-04A are analyzed to satisfy ECSS-Q-ST-80C and as a result the software product assurance activities regarding software life cycle and the software quality model, metric is proposed for the product assurance of the KCS software.

• Journal of Aerospace System Engineering
• /
• v.17 no.1
• /
• pp.33-41
• /
• 2023

As seen in the case of the Boeing 737 Max accident, the proportion of aircraft software is rapidly increasing. However, it is vulnerable to safety issues. In case of domestic aircraft software, to operate a Light Unmanned Aerial Vehicle (LUAV) less than an empty weight of 150 kg, safety certification is required for an Ultra-Light Vehicle (ULV). However, software certification procedure is not included. Since the use of LUAVs has increased recently, software verification is required. This paper proposed a checklist of LUAV software that could be applied to LUAV referring DO-178C, an aviation software certification standard. A case study of applying the proposed checklist to the Model-based Development-based Helicopter Flight Control Computer (FCC) project currently used by domestic and foreign advanced companies and institutions was conducted.

• Journal of the Korea Convergence Society
• /
• v.12 no.11
• /
• pp.285-289
• /
• 2021

This paper identifies the development trend of aviation software certification regulation and introduces the certification regulation optimized for aviation for the application of augmented reality and virtual reality software to aviation maintenance industry. This regulation is expected to provide stability and reliability of augmented reality and virtual reality software applied to aviation maintenance industry by applying strict certification regulations to augmented reality and virtual reality software applied to aviation maintenance industry.We would like to present certification regulations that take into account problems that are difficult to define previously used DO-178B, and DO-178C.

• Journal of the Korean Society for Aeronautical & Space Sciences
• /
• v.37 no.4
• /
• pp.359-366
• /
• 2009

MATLAB Autocode generation is a feature that converts a block diagram model in Simulink to a c program. Utilizing this function makes MATLAB/Simulink an integrated developing environment, from controller design to implementation. It can reduce development cost and time significantly. However, this automated process requires high reliability on the software, especially the original Simulink block diagram model. And thus, the verification of the codes becomes important. In this study, a UAV flight program which is generated with Simulink is validated and modified according to DO-178B. As a result of applying the procedures, the final program not only satisfied the functional requirement but is also verified with structural point of view with Decision Coverage 93%, Condition Coverage 95% and MC/DC 90%.

• Journal of the Korean Society for Aeronautical & Space Sciences
• /
• v.46 no.1
• /
• pp.86-94
• /
• 2018

As the use of software is increasing in aircraft system, an exposure to the threat of safety and security also continues to grow. Although certification criteria for software safety such as DO-178C have already been established, specific certification criteria for software security have not yet been included. Recently DO-326A, DO-356 and DO-355 have been published separately for aircraft and system airworthiness security certification criteria. However, to comply individual certification criteria and procedures, it requires the additional cost and effort. Therefore, this paper proposes the efficient integrated certification criteria saving cost, effort and time by combining the certification criteria for software safety and security.