【精品文档】SAE AIR 5120 Engine Monitoring System Reliability and Validity.doc

SAE WEB ADDRESS:http:/www.sae.orgAEROSPACE INFORMATION REPORTAIR5120Issued2006-11Engine Monitoring System Reliability and ValidityRATIONALEThis guide was developed to assist program managers, designers, developers, and customers with the development and verification of a highly reliable engine monitoring system.TABLE OF CONTENTS1.SCOPE. 31.1Purpose . 31.2Introduction . 32.REFERENCES. 32.1Applicable Documents . 32.1.1SAE Publications. 42.2Definition of Terms . 43.GENERAL CONSIDERATIONS . 53.1Overview . 53.2General Validity and Reliability Requirements. 64.DESIGN AND DEVELOPMENT ACTIVITIES.6 4.1System Specification. 64.2Hardware. 74.2.1Electronics. 84.2.2Sensors . 94.2.3Cabling/Connectors . 94.3Software . 104.3.1Design . 104.3.2Data Validation . 114.3.3EMS Algorithms . 114.4EMS BIT . 124.5Human Element Factors . 134.5.1Introduction . 134.5.2Non Physical Factors . 134.5.3Physical Factors. 154.5.4Training Impacts. 164.6Operational Design Considerations for Introduction and Support of the EMS . 174.6.1Documentation . 184.6.2Data Flow . 204.7Development and Technology Insertion . 215.VERIFICATION ACTIVITIES . 225.1Strategy and Approach . 225.2Simulation Tests. 235.3Manufacturers Systems Rig/Bench Testing. 235.4Airframe Systems Integration Laboratory Environment/Iron Bird (Static Aircraft) Facility . 245.5Engine Test (Sea Level Static & Altitude) . 245.6Flight Testing. 24SAE Technical Standards Board Rules provide that: “This report is published by SAE to advance the state of technical and engineering sciences. The use of this report is entirely voluntary, and its applicability and suitability for any particular use, including any patent infringement arising therefrom, is the sole responsibility of the user.”SAE reviews each technical report at least every five years at which time it may be reaffirmed, revised, or cancelled. SAE invites your written comments and suggestions. Copyright © 2006 SAE InternationalAll rights reserved. No part of this publication may be reproduced, stored in a retrieval system or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of SAE.TO PLACE A DOCUMENT ORDER:Tel:877-606-7323 (inside USA and Canada) Tel:724-776-4970 (outside USA)Fax:724-776-0790Email: CustomerServicesae.orgSAE AIR5120 - 28 -6.ENTRY INTO SERVICE . 256.1Feedback . 266.1.1Application Specific Feedback - Adapting the System to a Specific Application. 266.1.2Global Feedback - Improving the Product for all Applications. 267.SUPPORT AND MATURATION . 26TABLE 1 - PARTIAL EXAMPLE OF EMS VERIFICATION MATRIX. 221. SCOPE1.1PurposeFor Engine Monitoring Systems to meet their potential for improved safety and reduced operation and support costs, significant attention must be focused on their reliability and validity throughout the life cycle. This AIR will provide program managers, designers, developers and customers a concise reference of the activities, approaches and considerations for the development and verification of a highly reliable engine monitoring system.When applying the guidelines of this AIR it should be noted that engine monitoring systems physically or functionally integrated with the engine control system and/or performing functions that affect engine safety or are used to effect continued operation or return to service decisions shall be subject to the Type Investigation of the product in which they'll be incorporated and have to show compliance with the applicable airworthiness requirements as defined by the responsible Aviation Authority. This is not limited to but includes the application of software levels consistent with the criticality of the performed functions. For instance, low cycle fatigue (LCF) cycle counters for Engine Critical Parts would be included in the Type Investigation but most trend monitors and devices providing information for maintenance would not.1.2IntroductionAn Engine Monitoring System (EMS) adds value by providing real time or near real time information on the functional and physical condition of gas turbine engines. This information is used to alert operators to conditions that could impact safe operation, schedule inspections and repairs to improve functional performance, forecast spares requirements, and manage warranties.The elements that comprise an EMS are discussed in ARP1587. When discussing the reliability and validity of an EMS, the entire system needs to be considered, (i.e., design philosophy, software, hardware, sensors, operating procedures, training, service introduction and field support). The reliability and validity of the EMS is only as strong as its weakest sub- element.Prior to the advent of EMS, engine operational information was obtained from flight crew and maintenance personnel observations gathered during operation or inspection. While there is no known quantification by a regulatory authority of the reliability and validity of these manually based approaches, they have evolved into the procedures and regulations that are currently considered the reliability baseline. Today, most EMS automate and enhance some or all of the manual processes to increase equipment safety and reduce operating cost.Many early attempts to introduce EMS have lacked total success for a number of reasons. One of the major factors was a general lack of reliability. This reliability shortfall has come, in part, from the inherent unreliability of the system hardware elements. More importantly, however, reduced reliability was often due to the unreliability of the information provided by the system. History is replete with examples of false alarms, ranging from false chip detector lights to more sophisticated systems producing many false fault codes per flight. The inability of early EMS to provide reliable information has caused many to be extremely cautious in deciding how or when to implement a system.2. REFERENCES2.1Applicable DocumentsThe following publications form a part of this document to the extent specified herein. The latest issue of SAE publications shall apply. The applicable issue of other publications shall be the issue in effect on the date of the purchase order. In the event of conflict between the text of this document and references cited herein, the text of this document takes precedence. Nothing in this document, however, supersedes applicable laws and regulations unless a specific exemption has been obtained.2.1.1SAE PublicationsAvailable from SAE International, 400 Commonwealth Drive, Warrendale, PA 15096-0001, Tel: 877-606-7323 (insideUSA and Canada) or 724-776-4970 (outside USA), www.sae.org. ARP1587Aircraft Gas Turbine Engine Monitoring System GuideAIR4985A Methodology for Quantifying the Performance of an Engine Monitoring System2.2Definition of TermsDetailed definitions of some of the terms below are given in AIR4985. BIT: Built in TestEIS: Entry into ServiceFALSE ALARM: The indication by the EMS that a problem condition exists when no problem is present. MISSED DETECTION: The non-indication by the EMS of a problem condition that it was designed to detect. CORRECT DETECT: The correct indication by the EMS that a problem exists.EMS RELIABILITY:Total Indications - False Alarms - Missed DetectionsTotal Indications 100FIR:No. of faults isolatedNo. of faults indicated 100ENGINE MONITORING SYSTEM (EMS): An EMS is defined as the complete system involved in the monitoring and indication of engine health.Included are the component level and subsystem level health status indications. Such indications are obtained through the use of sensor input, data collection, data processing, data analysis, and the human decision process. A complete system approach consists of an integrated set of hardware, software and logistical process. It can be manual, computer aided or fully automated.COULD NOT DUPLICATE (CND): The inability to duplicate a problem detected by an EMS during subsequent testing. CNDs can be classified in two ways and can be difficult to separate:1. A problem does not exist (False Alarm)2. A problem does exist but is not detectable during the current test, i.e., no fault found, NFF. The principle cause of CNDs is the absence of a failure mode symptom during test conditions. In such cases, maintenance and operations personnel should take the appropriate action based on their experience. The suspected cause can be addressed by replacing components or the system can be returned to service with no maintenance action to see if the indicated fault returns.LIFE CYCLE COST (LCC): LCC refers to the cost of the engine system of which the EMS is an integrated part. One of the main drivers behind most EMS is a reduction in engine system LCC. Included in the LCC is the cost of the EMS system and all additional hardware and software. The reduction in the LCC achieved as a result of the benefits derived from the EMS should be greater than the added cost of the EMS. From a general perspective the following gives the LCC Return on Investment (ROI).Life Cycle Cost =Cost of EMS + Cost of Engine System + Cost of Operation Over LifeROI = Benefit of EMS ($)/Cost of EMS x 100Where Benefit of an EMS can be defined asCost of Operation without EMS - Cost of Operation with EMS =