Initial System Integrity Assessment for NextGen: Methods and Results

Bertish, Shane D.; Darr, Stephen; Hemm, Robert; Gawdiak, Yuri

doi:10.2514/6.2013-4365

Cited by 2 publications

(6 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Other definitions refer to graceful degradation specifically within the context of fault tolerant technologies [17]. For the purposes of the current literature review however, a wider definition of graceful degradation as a system-wide outcome is adopted, including elements of technology and human operators, such as the definition by [18] "to gracefully degrade, the system must maintain safety performance requirements in the presence of faults or failures while and until demand is reduced to performance levels commensurate with the degraded capabilities" [p5].…”

Section: Resilience and Graceful Degradationmentioning

confidence: 99%

“…Within TBO, the concept of graceful degradation is critical to providing safe operations. [18] suggest that the number one vulnerability of complex systems is the "lack of graceful degradation" [p5]. In order to design resilient systems that are capable of graceful degradation, it is essential to understand the key causes of system gradation, as well as the possible mitigations to degradation, and applicable recovery mechanisms if the system does degrade.…”

Section: A Graceful Degradation In Tbomentioning

confidence: 99%

“…However, if this enabling automation technology is degraded, there is a critical question of whether the ATCO could safely manually control the number of aircraft in the sector, considering that the number of aircraft could only be safely increased because of the availability of the automation. Emphasizing this point further, [18] suggest that the second most critical vulnerability of a complex system is technological or automation-related elements that exceed human operator capabilities, and asserts that such systems "must not cease operating under conditions that exceed human performance" (p5). [18] provides an example of this vulnerability with a pilot's autopilot, which operates until a situation cannot be processed by the rule based algorithms, and automatically disconnects, "leaving a probably uncontrollable aircraft in the hands of potentially unaware pilots" [p 5].…”

Section: The Importance Of Atcos In Understanding Graceful Degradamentioning

confidence: 99%

“…Technological system-related techniques for the prevention of degradation are numerous, and well documented in the literature. [18] reports a list of preventative solutions and mitigations for technological vulnerabilities. Of the 18 identified mitigations, 14 were related to technology design and regulation (Table 1).…”

Section: A Technological System-related Solutionsmentioning

confidence: 99%

See 3 more Smart Citations

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

Edwards

Lee

2017

17th AIAA Aviation Technology, Integration, and Operations Conference

View full text Add to dashboard Cite

One of the most fundamental changes to the air traffic management system in NextGen is the concept of trajectory based operations (TBO). With the introduction of fundamental change, system safety and resilience is a critical concern, in particular, the ability of systems to 'degrade gracefully'. In order to design graceful degradation into a TBO envrionment, knowledge of the potential causes of degradation and appropriate solutions is required. Previous research has predominantly explored the technological contribution to graceful degradation, frequently neglecting to consider the role of the human operators in an environment in which humans, especially air traffic controllers, play a safety critical role. In addition, the environmental context in which the technological or human breakdowns occur also play a critical role in how well the system can degrade gracefully, which is also neglected in the literature. These oversights are out of step with real-world operations, and potentially limit an ecologically valid understanding of achieving graceful degradation in an air traffic control environment. Therefore, an integration approach to the human-machine system must be applied in order to achieve graceful degradation. The following literature review aims to identify and summarize the literature to date on the potential causes of degradation in air traffic control and the solutions that may be applied within a TBO context, with a specific focus on the contribution of the air traffic controller. A framework of graceful degradation, developed from the literature, is presented. The framework encompasses the potential impact of technology or human operator breakdown, as well as the complexity of the air traffic environment at the time of the breakdown, and categorizes them into different phases of detection and recovery. The aim of the framework is to develop research questions and design solutions to develop a resilient TBO system and procedures using a holistic view of human-machine system integration.

show abstract

Section: Resilience and Graceful Degradationmentioning

confidence: 99%

Section: A Graceful Degradation In Tbomentioning

confidence: 99%

Section: The Importance Of Atcos In Understanding Graceful Degradamentioning

confidence: 99%

Section: A Technological System-related Solutionsmentioning

confidence: 99%

See 2 more Smart Citations

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

Edwards

Lee

2017

17th AIAA Aviation Technology, Integration, and Operations Conference

View full text Add to dashboard Cite

show abstract

“…Examples of the vulnerabilities can be found in a Joint Planning and Development Office (JPDO) safety analysis that was performed to determine the mitigation costs required to ensure safe operations of a heavily automated complex system. 13 The JPDO methodology identified the vulnerabilities and their levels of criticality that applied to the operations of the technology, and, for each vulnerability, identified the least-costly mitigation. Table 4 lists the set of vulnerabilities identified in a JPDO study of NextGen automation technologies.…”

Section: F Automation Vulnerability Issuesmentioning

confidence: 99%

On-Demand Aviation Regulatory Obstacles and Resulting Research Roadmaps

Hemm

Duncan

Stouffer

2016

16th AIAA Aviation Technology, Integration, and Operations Conference

Self Cite

View full text Add to dashboard Cite

In this paper, we discuss the Federal Aviation Administration's (FAA's) procedural and regulatory practices that present challenges to the introduction of on-demand aviation (ODA) and pay particular attention to the impacts of increasingly autonomous piloting practices being pursued under ODA. The concept of ODA discussed in this research is that of a small electric or hybrid-electric air vehicle, with propeller-based propulsion, resulting in a low-greenhouse-gas-emissions footprint and substantially reduced pilot requirements through the use of automation. We outline the structure of the Federal Aviation Regulations, subchapters and parts, examining each subchapter in turn for areas of applicability for ODA certification, both pilot and vehicle. Our examination of reduced pilot roles makes use of the simplified vehicle operations levels that proceed from human pilot roles to full autonomy, as described in NASA research. We discuss risk-assessment options and suggest research to support aircraft and operator certification.

show abstract

Initial System Integrity Assessment for NextGen: Methods and Results

Cited by 2 publications

References 0 publications

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

Towards Designing Graceful Degradation into Trajectory Based Operations: A Human-Machine System Integration Approach

On-Demand Aviation Regulatory Obstacles and Resulting Research Roadmaps

Contact Info

Product

Resources

About