運(yùn)輸類飛機(jī)安全性評(píng)估過程

第六講運(yùn)輸類飛機(jī)安全性評(píng)估過程

——25.1309的符合性驗(yàn)證本章主要內(nèi)容一、25.1309的主要內(nèi)容二、相關(guān)咨詢材料三、安全性評(píng)估過程四、研制保證等級(jí)分配過程一、25.1309的主要內(nèi)容1.第25.1309條設(shè)備、系統(tǒng)及安裝(a)凡航空器適航標(biāo)準(zhǔn)對(duì)其功能有要求的設(shè)備、系統(tǒng)及安裝，其設(shè)計(jì)必須保證在各種可預(yù)期的運(yùn)行條件下能完成預(yù)定功能。(b)飛機(jī)系統(tǒng)與有關(guān)部件的設(shè)計(jì)，在單獨(dú)考慮以及與其它系統(tǒng)一同考慮的情況下，必須符合下列規(guī)定：(1)發(fā)生任何妨礙飛機(jī)繼續(xù)安全飛行與著陸的失效狀態(tài)的概率為極不可能（

extremelyimprobable）；(2)發(fā)生任何降低飛機(jī)能力或機(jī)組處理不利運(yùn)行條件能力的其它失效狀態(tài)的概率為不可能（

improbable）。一、25.1309的主要內(nèi)容1.第25.1309條設(shè)備、系統(tǒng)及安裝（續(xù)）(c)必須提供警告信息，向機(jī)組指出系統(tǒng)的不安全工作情況并能使機(jī)組采取適當(dāng)?shù)募m正動(dòng)作。系統(tǒng)、控制器件和有關(guān)的監(jiān)控與警告裝置的設(shè)計(jì)必須盡量減少可能增加危險(xiǎn)的機(jī)組失誤。(d)必須通過分析，必要時(shí)通過適當(dāng)?shù)牡孛?、飛行或模擬器試驗(yàn)，來表明符合本條（b）的規(guī)定。這種分析必須考慮下列情況：(1)可能的失效模式，包括外界原因造成的故障和損壞；(2)多重失效和失效未被檢測(cè)出的概率；(3)在各個(gè)飛行階段和各種運(yùn)行條件下，對(duì)飛機(jī)和乘員造成的后果；(4)對(duì)機(jī)組的警告信號(hào)，所需的糾正動(dòng)作，以及對(duì)故障的檢測(cè)能力。一、25.1309的主要內(nèi)容1.第25.1309條設(shè)備、系統(tǒng)及安裝（續(xù)）(e)在表明電氣系統(tǒng)和設(shè)備的設(shè)計(jì)與安裝符合本條(a)和(b)的規(guī)定時(shí)，必須考慮臨界的環(huán)境條件。中國(guó)民用航空規(guī)章規(guī)定具備的或要求使用的發(fā)電、配電和用電設(shè)備，在可預(yù)期的環(huán)境條件下能否連續(xù)安全使用，可由環(huán)境試驗(yàn)、設(shè)計(jì)分析或參考其它飛機(jī)已有的類似使用經(jīng)驗(yàn)來表明，但適航當(dāng)局認(rèn)可的技術(shù)標(biāo)準(zhǔn)中含有環(huán)境試驗(yàn)程序的設(shè)備除外。(f)必須按照25.1709條的要求對(duì)電氣線路互聯(lián)系統(tǒng)(EWIS)進(jìn)行評(píng)估。一、25.1309的主要內(nèi)容1.第25.1309條設(shè)備、系統(tǒng)及安裝（續(xù)）25.1709系統(tǒng)安全：EWIS每個(gè)EWIS的設(shè)計(jì)和安裝必須使得：(a)災(zāi)難性失效狀態(tài)(1)是極不可能的，和(2)不會(huì)因單個(gè)失效而引起。(b)每個(gè)危險(xiǎn)失效狀況是極小的。一、25.1309的主要內(nèi)容2.14CFR§25.1309Equipment,systems,andinstallations.(a)Theequipment,systems,andinstallationswhosefunctioningisrequiredbythissubchapter,mustbedesignedtoensurethattheyperformtheirintendedfunctionsunderanyforeseeableoperatingcondition.(b)Theairplanesystemsandassociatedcomponents,consideredseparatelyandinrelationtoothersystems,mustbedesignedsothat--(1)Theoccurrenceofanyfailureconditionwhichwouldpreventthecontinuedsafeflightandlandingoftheairplaneisextremelyimprobable,and(2)Theoccurrenceofanyotherfailureconditionwhichwouldreducethecapabilityoftheairplaneortheabilityofthecrewtocopewithadverseoperatingconditionsisimprobable.一、25.1309的主要內(nèi)容2.14CFR§25.1309Equipment,systems,andinstallations.(c)Warninginformationmustbeprovidedtoalertthecrewtounsafesystemoperatingconditions,andtoenablethemtotakeappropriatecorrectiveaction.Systems,controls,andassociatedmonitoringandwarningmeansmustbedesignedtominimizecrewerrorswhichcouldcreateadditionalhazards.一、25.1309的主要內(nèi)容2.14CFR§25.1309Equipment,systems,andinstallations.(d)Compliancewiththerequirementsofparagraph(b)ofthissectionmustbeshownbyanalysis,andwherenecessary,byappropriateground,flight,orsimulatortests.Theanalysismustconsider--(1)Possiblemodesoffailure,includingmalfunctionsanddamagefromexternalsources.(2)Theprobabilityofmultiplefailuresandundetectedfailures.(3)Theresultingeffectsontheairplaneandoccupants,consideringthestageofflightandoperatingconditions,and(4)Thecrewwarningcues,correctiveactionrequired,andthecapabilityofdetectingfaults.一、25.1309的主要內(nèi)容2.14CFR§25.1309Equipment,systems,andinstallations.[(e)Inshowingcompliancewithparagraphs(a)and(b)ofthissectionwithregardtotheelectricalsystemandequipmentdesignandinstallation,criticalenvironmentalconditionsmustbeconsidered.Forelectricalgeneration,distribution,andutilizationequipmentrequiredbyorusedincomplyingwiththischapter,exceptequipmentcoveredbyTechnicalStandardOrderscontainingenvironmentaltestprocedures,theabilitytoprovidecontinuous,safeserviceunderforeseeableenvironmentalconditionsmaybeshownbyenvironmentaltests,designanalysis,orreferencetopreviouscomparableserviceexperienceonotheraircraft.][(f)EWISmustbeassessedinaccordancewiththerequirementsofSec.25.1709.]一、25.1309的主要內(nèi)容3.CS25.1309Equipment,systemsandinstallationsTherequirementsofthisparagraph,exceptasidentifiedbelow,areapplicable,inadditiontospecificdesignrequirementsofCS-25,toanyequipmentorsystemasinstalledintheaeroplane.AlthoughthisparagraphdoesnotapplytotheperformanceandflightcharacteristicrequirementsofSubpartBandthestructuralrequirementsofSubpartsCandD,itdoesapplytoanysystemonwhichcompliancewithanyofthoserequirementsisdependent.CertainsinglefailuresorjamscoveredbyCS25.671(c)(1)andCS25.671(c)(3)areexceptedfromtherequirementsofCS25.1309(b)(1)(ii).CertainsinglefailurescoveredbyCS25.735(b)areexceptedfromtherequirementsofCS25.1309(b).ThefailureeffectscoveredbyCS25.810(a)(1)(v)andCS25.812areexceptedfromtherequirementsofCS25.1309(b).TherequirementsofCS25.1309(b)applytopowerplantinstallationsasspecifiedinCS25.901(c).一、25.1309的主要內(nèi)容3.CS25.1309Equipment,systemsandinstallations

(a)Theaeroplaneequipmentandsystemsmustbedesignedandinstalledsothat:(1)Thoserequiredfortypecertificationorbyoperatingrules,orwhoseimproperfunctioningwouldreducesafety,performasintendedundertheaeroplaneoperatingandenvironmentalconditions.(2)Otherequipmentandsystemsarenotasourceofdangerinthemselvesanddonotadverselyaffecttheproperfunctioningofthosecoveredbysub-paragraph(a)(1)ofthisparagraph.一、25.1309的主要內(nèi)容3.CS25.1309Equipment,systemsandinstallations

(b)Theaeroplanesystemsandassociatedcomponents,consideredseparatelyandinrelationtoothersystems,mustbedesignedsothat-(1)Anycatastrophicfailurecondition(i)isextremelyimprobable;and(ii)doesnotresultfromasinglefailure;and(2)Anyhazardousfailureconditionisextremelyremote;and(3)Anymajorfailureconditionisremote.一、25.1309的主要內(nèi)容3.CS25.1309Equipment,systemsandinstallations

(c)Informationconcerningunsafesystemoperatingconditionsmustbeprovidedtothecrewtoenablethemtotakeappropriatecorrectiveaction.Awarningindicationmustbeprovidedifimmediatecorrectiveactionisrequired.Systemsandcontrols,includingindicationsandannunciationsmustbedesignedtominimisecrewerrors,whichcouldcreateadditionalhazards.(d)ElectricalwiringinterconnectionsystemsmustbeassessedinaccordancewiththerequirementsofCS25.1709.二、相關(guān)咨詢材料1、AC25.1309-1ASystemDesignandAnalysis(1988)1）目的2）取消3）適用性4）背景5）fail-safe設(shè)計(jì)概念6）定義7）討論8）接受的技術(shù)9）定量評(píng)估10）定性評(píng)估二、相關(guān)咨詢材料1、AC25.1309-1ASystemDesignandAnalysis(1988)11）運(yùn)行與維修考慮12）分析步驟二、相關(guān)咨詢材料2、AMC25.1309SystemDesignandAnalysis引用標(biāo)準(zhǔn)SAEARP4754SAEARP4761RTCADO-178RTCADO-160二、相關(guān)咨詢材料2、AMC25.1309SystemDesignandAnalysis1）目的2）修訂3）相關(guān)文檔4）CS25.1309的適用性5）定義6）背景7）失效狀態(tài)分類與概率術(shù)語8）安全性目標(biāo)9）CS25.1309的符合性二、相關(guān)咨詢材料2、AMC25.1309SystemDesignandAnalysis10）失效狀態(tài)識(shí)別及識(shí)別器影響時(shí)的考慮11）失效狀態(tài)概率評(píng)估及分析考慮12）運(yùn)行與維修考慮13）設(shè)計(jì)修改的評(píng)估附錄1：評(píng)估方法附錄2：