Beruflich Dokumente
Kultur Dokumente
es
Manned Aircraft Vehicle Mgmt
om
Off-board On-board
Mission Mgmt e c
” b e Pilot is Integrator and
n ss u Contingency Manager;
Flight Mgmt io
FMS is mostly advisory.
t
c &V i
n
u V
Unmanned Aircraft Off-board On-boardF
t d Vehicle Mgmt
Situational awareness? i lo an
“ PMgmtgn
, si
FMS and VMS
Mission
s
V de
provide
Integration and
U A e
Contingency
Mgmt;
r g Flight Mgmt
Fo hu
Operator
manages at
high-level.
VACC Technical Paper Nr. VAO-04-288. Cleared for Public Release on 11 Aug 04. AFRL-WS 04-0578
Background:
V&V Requirements
Mission Critical Flight Critical
Processors
How can we separate the mission and flight critical
functionality as to guarantee safety?
A
B SOA: Middleware that provides time/space
X partitioning (ARINC 653).
A Issue:
X
Serial bus
Issue:
Dot Move Towards Assigned Position
Delta Y dot
Maintain a Minimum Distance
Delta Z
• Adaptive systems
• Huge test space
• Perfect Input data
• Learning systems
• Environmental stimuli
• Lost memory
• Multi-modal systems
• Mode transition stability
• Mode synchronization
• Recovery mode
Answer may reside in bounding the function in run-
time to known safe behavior.
VACC Technical Paper Nr. VAO-04-288. Cleared for Public Release on 11 Aug 04. AFRL-WS 04-0578
Mixed Initiative Challenge
AF Poster Child: How can man and autonomy safely
Auto-Aerial Refueling (AAR)
interact?
SOA: Human operator always get
authority!
Issue:
Human operator may not have all the
information or be able to comprehend
situation in real-time:
• Situational Awareness versus Response
Time
• Assessment of UAV mode/state/health
• Assessment of surrounding environment
• “Consequence of mishap” is a factor
• Complete system health is a factor
• Workload is a factor
Answer may reside in a authority management specification that would
allow the correct party to have decision authority.
VACC Technical Paper Nr. VAO-04-288. Cleared for Public Release on 11 Aug 04. AFRL-WS 04-0578
Multi-Entity Challenge
How can trust systems with multiple players
to safely perform cooperative functions?
Issue:
Entities participating in the coordinated
function may not be part of individual V&V
testing:
• Linked Interface Control Documents?
• Entities with different manufacturers?
• System Configuration Management?
• Mission-specific programming?
Answer may reside in a specification for contingency
management, based on system degradation
VACC Technical Paper Nr. VAO-04-288. Cleared for Public Release on 11 Aug 04. AFRL-WS 04-0578
High Confidence Sensing Challenge
How can we trust visual/radar systems for
flight critical functions?
Issue:
Mission-style sensors don’t have acceptable
real-time methods for FDIR…
• Sensors will likely be multi-function!
• Redundant HW may not be answer, redundant
information?
• Built-in-test may not provide good real-time
coverage.
• Reliable signal processing/sensor fusion software