DO-254 Compliance - NASA

Transcription

DO-254 CompliancePitfalls, Challenges, and SolutionsFor MAPLD2008Michelle LangeDO-254 Program MgrSept 18, 2008

DO-254 BackgroundIn 2005, the FAA* began enforcing a newstandard for HW (PLD/FPGA/ASIC) designThis standard is known as DO-254, “DesignAssurance of Airborne Electronic Hardware”DO-254 is based on a similar SW standard(DO-178B)DO-254 today applies to civil aviation but isspreading to some military projectsDO-254 is a concern because it adds significanttime, risk and cost** to design projects* And other worldwide aviation safety agencies** Compliance can increase project cost by up to 400%!2MEL, DO-254 Overview

What DO-254 Is and Isn’t It’s like a guide that showsyou where you need to beIt does not tell you how toget there— Thatis up to you todetermine It does not tell you what youneed to watch out for— That’sfor you to learn3MEL, DO-254 Overview

DO-254 in the Aircraft Certification ProcessSystem Safety Assessment Criticality of systems determined Design assurance level (DAL) A-E assignedDAL of Component DAL handed down to component Determines DO-254 requirementsType Certificate(ATC/TC/STC) The FPGA/ASIC is approved only as part of an FAAapproved equipment installation TC form describes every item on aircraft Components now “DO-254 certified”FPGA/ASIC Built to DO-254 standardsas reviewed by DERDO-254 Compliance DER form 8110-3 submitted to FAArecommending approval of theASIC/FPGATimeline 2 years4MEL, DO-254 Overview

What is DO-254?A Requirements-Based Design Flow with Strict Process AssuranceSupporting ProcessesDesign FlowDO-254 Process as you’d see it shown in the DO-254 Spec5MEL, DO-254 Overview

MEL, DO-254 OverviewSupporting & Key ProcessesRequirements-Based acturingV&VTool AssessmentCertification LiaisonPHACRequirements ValidationReqs TraceabilityVerificationConfiguration ManagementProcess AssuranceProcess AssuranceSystem ProcessesA Look Inside DO-254HASDO-254 onTransition6

A DO-254 Compliant FPGA FlowEstablish Project Plans(PHAC and others)Capture/ValidateRequirementsGenerate architecturalartifactsEffectively verifyRTL and gatelevel eptConcept DesignDesignVerifyVerify RTLRTLDesignDesignRTLRTL DesignDesignVerifyVerify GateGateLevelLevel DesignDesignSynthesisSynthesisPlacePlace && RouteRouteSafely synthesizedesign, and preparefor P&RTrace requirementsVersion manage allartifacts and docsGenerate review andaudit sitesWrite, generate,reuse, and checkRTL codeProgramProgram DeviceDeviceAssess all ToolsVerify/DebugHardware ItemDebugDebugHardwareHardware7MEL, DO-254 Overview

Common* Issues We are SeeingIssue ResultCompanies are engaging inDO-254 programs without properpreparationCompanies think they can “getaround” DO-254Requirements traceability is areactive processGroups within a company don’ttalk and share informationCompanies don’t consider reuseor future uses of current designCompanies are struggling withverificationTool qualification is difficult Lots of mis-steps and rework,failed audits, costs increasing400%Parts cannot be used (or reused)for in-flight systemsFailed audits, much rework andincreased expenseEach group re-invents the wheel,wasted resourceComply to lowest level, and thenhave to re-certifyLosing bids, avoiding projects,producing poor quality productsMuch time spent on this task* This is not an all inclusive list!8MEL, DO-254 Overview

Let’s Talk about A Few of TheseIssue ResultCompanies are engaging inDO-254 programs without properpreparationCompanies think they can “getaround” DO-254Requirements traceability is areactive processGroups within a company don’ttalk and share informationCompanies are struggling withverificationCompanies don’t consider reuseor future uses of current designTool qualification is difficult Lots of mis-steps and rework,failed audits, costs increasing400%Parts cannot be used (or reused)for in-flight systemsFailed audits, much rework andincreased expenseEach group re-invents the wheel,wasted resourceLosing bids, avoiding projects,producing poor quality productsComply to lowest level, and thenhave to re-certifyMuch time spent on this task9MEL, DO-254 Overview

Before Your First Project Issue ResultCompanies are engaging inDO-254 programs without properpreparation Lots of mis-steps and rework,failed audits, costs increasing400%InsteadHotTip #1 Invest in training (its worth it!)HotWork with your DER early in your project#2TipHotTip #3Consider having methodology assessments—Both for compliance and for methodology efficiency10MEL, DO-254 Overview

Requirements Tracing Issue ResultRequirements traceability is areactive process Failed audits, much rework andincreased expenseInsteadHotTake a proactive approach#1Tip— Plan for requirements management and traceabilityas part of the processHotTip #2 Don’t assign this job to the intern— Value this effort as a key part of the flowHotTip #3Consider automation11MEL, DO-254 Overview

Verification Issue ResultCompanies are struggling withverification Losing bids, avoiding projects,producing poor quality productsInstead#1Hot TipGet a verification methodology assessment#2Hot TipEducate yourself on new methodologies#3Hot TipConsider consulting experts to reduce risk——Understand the benefits and skill sets requiredGet your team trained and project underway quickly12MEL, DO-254 Overview

Tool Assessment and Qualification Issue ResultTool qualification is difficult Much time spent on this taskInsteadHotTip #1 Understand the meaning and purposeHotTip #2 Work with tool vendors who will support youHotWhenever possible, take the “Independent Output#3TipAssessment” approach13MEL, DO-254 Overview

For More Information Visit www.mentor.com/go/do-254— Downloadpublications and information— Register for DO-254 training Next training: Seattle, Sept 23-24Email michelle lange@mentor.com— Questions— Requestproduct information— Arrange a visit or demo Any Questions?14MEL, DO-254 Overview

15MEL, DO-254 Overview15

DO-254 Compliance Pitfalls, Challenges, and Solutions Michelle Lange DO-254 Program Mgr Sept 18, 2008 For MAPLD 2008. MEL, DO-254 Overview 2 DO-254 Background In 2005, the FAA* began enforcing a new standard for HW (PLD/FPGA/ASIC) design ** Compliance can increase project cost by up to 400%! This standard is known as DO-254, “Design Assurance of Airborne Electronic Hardware” DO