This paper presents a study of the most suitable ground test equipment for the Airbus A400M aircraft aimed at optimizing a design that combines portability, flexibility, and configurability. The study is based on current trends in the configuration of the different parts that are involved in the process of designing Aircraft Interface Modules (AIMs). Researches have been conducted facing the real problems of data acquisition and control in the assembly, maintenance, and repair processes of aircraft. In this sense, the number of signals used simultaneously in historical tests has been determined to be a parameter that plays an important role in the analysis. This work is within the framework of a project that our working group of the Department of Electronic Technology has carried out together with the company Airbus Defense and Space (Airbus DS). Thus, all the analyses and researches for the different configurations of the test equipment have been validated for the company. Some state-of-the-art systems have been considered in the process of designing the structure of the test system while analyzing the main advantages and drawbacks. Every hardware or software component was identified and justified according to its importance with respect to the use case. A comparison of how every approach meets the requirements was taken into account to define a methodology for designing a portable and configurable ground testing system. Thus, the conclusions of our study are being used by Airbus DS for the design of a prototype for the next generation of AIMs in A400M.
Airbus Defense and Space (Airbus DS) is a company belonging to the Airbus Group that is dedicated to four main lines of business: military aerial systems, space systems, electronics and communications, and intelligence and security.
Currently, Airbus DS has several centers in Spain; specifically, there are three plants in Seville: Tablada, San Pablo Norte, and San Pablo Sur. The last is known as the FAL (Final Assembly Line—final assembly plant) and is where several models of aircraft are assembled, such as the A400M, C-295, CN-235, and C-212.
In the case of the A400M, a military transport aircraft, the assembly procedure at the FAL is based on a structure of different stations. Each station is dedicated to a specific purpose. For example, there is a station dedicated to the assembly of the wings, another one dedicated to motors, etc. There is a specific station that is the main plant dedicated for ground tests and is where all the equipment, systems, wires, etc. are tested. In this station, the aircraft must undergo a series of verification tests of its assembly before commissioning [
These tests must be carried out in accordance with a set of established procedures, either by the specific regulations of each country, the scope of application, or the client’s requirements. The tests depend both on the application to which the aircraft is dedicated to or on its characteristics. There are huge differences in the tests given to various types of aircraft, such as civil, military, light, and heavy.
In addition, the tests of each subsystem of a particular aircraft require the reading of various parameters, such as temperature, pressure, vibration, voltage, current, linear speed, and rotation speed. Therefore, contrary to tests in other areas of application, in many companies in the aeronautical sector, the tests are mainly carried out manually [
In this sense, Airbus has recently partnered with the Department of Electronic Technology at the University of Seville to develop the project “AI2X: Sistema Integral Avanzado de Verificaciones Aeronáuticas.” AI2X is a collaboration among Airbus DS, various companies, and our research organization. The objective of this paper is to research, compare, and study the most suitable ground test equipment according to certain design requirements. Specifically, the work studies the procedure of configuring a generic and portable ground testing system for the A400M aircraft. After all, this system constitutes a generic and flexible AIM (Aircraft Interface Module). This AIM must combine a series of features aimed at facilitating its use by maintenance technicians. These features are as follows:
The paper is organized as follows. Section
Current needs in the design of hardware products in engineering have promoted a new generation of verification or test systems focused on reducing costs and development time. Among these, we highlight the model-based verification methodology [
Thanks to this method, different UUTs can be evaluated independently and in parallel allowing, for example, the design of motor control systems without the need of having real motors. This model-based point of view represents an advantage since it permits developing ground tests while considering motors but without having the real device connected to the test system.
The levels of abstraction that are normally considered in model-based verification are the following:
Several authors have focused their researches in this approach, e.g., in [ Based on this point of view, [
Verification paradigm.
SIL verification paradigm.
PIL verification paradigm.
HIL verification paradigm.
Therefore, HIL systems are useful both in the initial stages of design and verification and in the maintenance and repair of complete systems in production. In these cases, the concept of CIL (Component in the Loop) systems is used, where the interfaces are connected to the ECU of the system to be monitored and placed inside the complete equipment.
In a HIL/CIL test system, the model of the remaining systems needed for the UUT test is executed on the acquisition hardware platform, complying with the real-time restrictions.
There are many proposals that use this kind of schemes in aviation; e.g., [
The traceability in these verification systems (Figure
Test equipment.
At all levels of abstraction from the PIL level, an acquisition hardware platform is required to interconnect the UUT to the rest of the system models. As a rule, this platform consists of acquisition cards, with appropriate interfaces to communicate to the UUT, connected to a real-time system (real-time computing (RTC)), which is responsible for determining the stimuli that are generated by the acquisition cards and that are recorded and analyzed according to the answers obtained by the UUT. The RTC is also in charge of executing the necessary models to carry out the tests in the HIL/SIL levels.
These HIL/CIL system acquisition hardware platforms are the components that, according to the needs expressed in the introduction, will be developed in this article to increase their standardization, versatility, portability, robustness, modularity, and capacity of interconnection in conducting aviation tests.
In general, the verification systems for the PIL and HIL tests in aviation have a structure that could be described according to what is shown in Figure
General scheme for avionic verification equipment.
The following subsystems are distinguished:
The signal conditioning systems are usually either cards designed to measure signals for a specific application or devices designed for a DIN rail. However, there are certain SCUs designed to be connected directly to the instrumentation buses. Most of them are designed for the verification of radio frequency systems
Although this structure is quite general, each UUT requires different input modules in different quantities. Thus, for example, the test of a certain UUT may require a CAN connection [
For this reason, the great complexity and heterogeneity of the different UUTs of an aircraft have traditionally led to the development of a hardware acquisition platform for the verification of each UUT per aircraft type (or even for each system to be tested within the same UUT). Consequently, the designed tests have generally been carried out by manual procedures. Although these procedures allow the development of robust test systems with good connectivity, they do not meet the requirements of standardization, versatility, modularity, and size desired in this research, since they are, as a rule, neither portable equipment nor easily reconfigurable for the realization of various tests. In addition, having different test devices increases significantly the cost of the ground test equipment [
This problem is not unique to the aviation sector. It also appears frequently in other sectors such as automotive industry or in industrial automation. Therefore, various solutions have been proposed in the design of more flexible verification equipment. In order to design a platform that best fits the specified requirements, a detailed analysis of these solutions is carried out in the following section. As it will be seen, all of these solutions are based on modifying the general structure depicted in Figure
To verify the requirements that the acquisition hardware of the test verification system must meet, it is necessary to know the number of signals that the system should be able to control simultaneously. In order to fulfil this aim, a signal analysis on the aircraft simulation database has been carried out with the purpose of determining the number of inputs and outputs that are needed simultaneously on every test execution over the aircraft under study (A400M).
In this analysis, a data collection of simultaneous executions was carried out.
Figures
Analog signal analysis (simulated data) used in different ground verification test orders for this project. Number of signals (
Digital signal analysis (simulated data) used in different ground verification test orders for this project. Number of signals (
Therefore, it has been possible to specify which constraints are required by the system of acquisition of the ground verification system. To fully execute all of the ground tests, the system has had to simultaneously control over 57 analog input signals, 48 analog output signals, 202 digital input signals, and 162 digital output signals.
Considering the special requirements of the aviation sector, technological solutions based on HIL/CIL verification equipment are the most suitable. In this sense, three approaches could be considered. The following sections describe each of them.
The most common reprogrammable hardware used in verification equipment is based on the use of FPGAs (Field-Programmable Gate Arrays). Verification equipment using this approach implements an architecture such as the one shown in Figure
Verification equipment with reconfigurable hardware.
These systems take advantage of their feature to reconfigure the FPGA hardware for the design of I/O systems and have the possibility to control and convert signals at a low level. This allows the system, on the one hand, to reduce to a certain extent the capacity of the required SCUs and, on the other hand, to integrate, in a single configurable device, multiple systems of interconnection to several fieldbuses without requiring additional modules.
If, for example, the verification equipment requires an ANRIC 429 bus controller, instead of using a specific I/O card, an FPGA and its GPIOs can be used. From a functional point of view, once the FPGA is programmed, it can be seen as another module that handles all of the tasks related to the medium access (demodulation, management of the lower layers of the communication protocols, etc.). This is very similar to how a specific card would act. It is even possible to implement microprocessors inside the FPGA, which makes them highly flexible systems [
FPGAs have generic output ports that can read and write at high speeds. Therefore, these ports can be used both as direct discrete signals and for the implementation of fieldbus controllers or system emulation, although they will generally require an external SCU, since an FPGA usually works with very low voltage levels. For this reason, the use of FPGA has been proposed for the design of various HIL/SIL verification equipment.
Its use has also been proposed for the design of flexible aviation test equipment, which can be seen in the following researches:
In [ To solve this, the authors propose generating catalogs of solutions for each subsystem, each typified by their characteristics (fundamentally, FPGA resource requirements and necessary execution time) so that the system will automatically choose the optimal implementations of each subsystem, depending on the requirements demanded by each test and on the number of subsystems to be implemented The proposed solution has been successfully tested for the design of CIL verification equipment for the Eurocopter helicopters of the Airbus company, demonstrating that this technology allows increasing the flexibility of avionic verification systems In [ For the design of the HIL system, the authors have opted for the design of a system that integrates the following modules:
The proposed system and the code of the verification tests, developed with LabVIEW, have been tested with a simulation, showing that the platform, despite being economic, is very flexible and allows us to develop, in a fast way, different tests on the system.
This great versatility means that modules with FPGAs can easily be found on the market for their connection to the most instrumentation buses used in verification equipment.
Although these FPGAs can solve problems of adaptations of digital signals, to be used in the processing of analog signals, they require either external ADCs (Analog-to-Digital Converters) or the use of FPGAs with analogical interfaces AFE (Analog Front Ends), which are present in a few commercial models.
In these devices, it is possible to perform complete signal processing since the AFE provides some analog processing capacity, while the FPGA allows for the synthesis of digital filters or demodulators. Although it could be an appropriate technology, there are currently no commercial I/O modules for instrumentation buses that use this type of FPGA.
Furthermore, there is a growing tendency nowadays to research in the design of reconfigurable analog systems, such as the FPAA (Field-Programmable Analog Array), an analog counterpart of the FPGAs, where the digital blocks have been replaced by analog units formed by operational amplifiers and passive components so that the interconnections of these complex analog circuits can be implemented with adders, integrators, filters, etc. In any case, at the present time, there are few commercial solutions that implement this technology, beyond the devices offered by Anadigm [
Anadigm FPAA evaluation module.
In conclusion, reconfigurable hardware modules have a series of advantages, which are explained as follows:
Increasing the flexibility of the system, especially for the treatment of digital signals Reducing dependency on I/O modules, above all, for the management of fieldbuses A higher accessibility, as there are modules with FPGA for most of the current instrumentation buses
However, they also have the following disadvantages, which must be taken into account depending on the application to be developed:
They require SCUs. In general, they still depend on certain external electronics to adapt the levels of the input signals to the thresholds admitted by the reprogrammable electronic modules They are not designed for analog signal processing. Although there are technological solutions for the processing of these signals using reconfigurable hardware, they are not widespread or are in the research phase The cost is higher. Although prices have become considerably cheaper, reconfigurable hardware is still generally expensive Development times are initially increased. The increase in flexibility using these devices comes from their reprogramming capacity, but this also has the disadvantage that it is necessary to have software modules for each of the functionalities to be implemented. For example, if an ARINC bus interface is needed, it is first necessary to have the code of this module duly verified. Thanks to the reusability presented by these modules, this increase only occurs if the modules have not been previously developed for another test or aircraft They require an inventory of needs for each test. Within an FPGA, multiple modules can be loaded, which would work in parallel for the management of the different signals to be treated, but each of them uses certain resources to be managed. Depending on the requirements of each module, some tests are not feasible because they require more resources than available They require specific training requirements. It is important to keep in mind that although there are alternatives for synthesizing FPGAs that use common programming languages such as C, they are not very efficient, and it is recommended to use more task-specific languages such as VHDL or Verilog, which require the use of trained personnel in these areas
Because the amount of I/O ports required in automation strongly impacts the cost of the facilities, various solutions have been developed to increase the number of inputs and outputs available without needing to buy additional modules.
In the following sections, a description of these industrial solutions is provided while considering those best matching the requirements in aviation.
A multiplexer is an electronic device that allows for the redirecting information from various sources to a destination. Its symbolic representation and simplified operating scheme are represented in Figure
Multiplexed verification equipment.
As it can be seen in the figure, a multiplexer has the following ports:
Types of selection signals.
From a generic point of view, a multiplexer can be understood as a set of switches that are connected and disconnected depending on the selection inputs. Therefore, its characteristics are strongly conditioned by the technology used for the design of the multiplexers. The most common ones are the following:
In the case of verification systems, as shown in Figure
Multiplexed verification equipment.
For our verification system, placing the multiplexers after the input channels could be proposed, either with or without the SCU, thus following a connection scheme similar to that described in the example of Figure
Example of use.
As it can be observed in this case, the multiplexers of the example allow us to extend 8 analog input channels for up to a total of 20 signals:
8 direct channels (4 of them multiplexed with the possibility of reading after sequencing) 4 multiplexed with the Ad0 adaptation 4 multiplexed with the Ad1 adaptation 4 multiplexed with the Ad2 adaptation
In this example, we have opted for the use of digital selection inputs, which requires 8 signals. In conclusion, reconfigurable hardware modules have a series of advantages, which are explained as follows:
They increase the flexibility of the system and allow for a software reconfiguration of the verification system They reduce the number of I/O modules, especially in the case of analog inputs, although they can also be used for digital signals They have a lower cost, as multiplexers are significantly cheaper than the I/O modules that they replace They are more robust, as it is an industrial solution commonly used in automation systems
With respect to the drawbacks for the application to be developed, the following ones should be highlighted:
Reconfigurable hardware modules are designed to work with industrial levels. Certain signal levels used in aviation do not coincide with those commonly used for automation. In these cases, the use of additional SCUs to adapt the levels is necessary They have limited redirection capabilities. The multiplexers are intended to, in principle, redirect a series of input signals to a digital analog converter, but the degree of reconfiguration flexibility required for the verification equipment may cause greater required routing flexibility. In these cases, it is preferable to use technologies such as switching matrices (see Section
Communication headers are a widely used solution in industrial automation, and they arise from the automation model DCS (Distributed Control System), which reduces wiring costs through the use of fieldbuses. With this technology, all elements of the installation become elements within a network that share information between themselves.
In these facilities, the headers are autonomous control equipment that allow for the managing of multiple inputs and outputs, both analog and digital. This equipment is designed to minimize the costs of wiring in extensive installations, since they allow placing the headers and, therefore, the necessary inputs and outputs, close to the equipment to be controlled.
The headers are independent PLC (Programmable Logic Controller) systems, which are deterministic and that are designed for real-time operations, with communications through an industrial bus. They could be configured with various modules that incorporate the input or output ports required by the application. That is, the inputs and outputs to be arranged in each header are configurable based on adding the appropriate modules to the equipment.
Normally, the manufacturers have a complete line of headers, all of them with similar characteristics, but they could change the industrial bus to which they can be connected, with Ethernet, Modbus, or CAN headers being the most usual ones.
In a generic scheme, its use for verification equipment is detailed in Figure
Verification equipment with headers.
As it can be seen, these headers allow for reducing the number of I/O modules based on connecting various inputs to them. Although this architecture does not reduce the complexity of the system, it is necessary to consider that the cost of the modules for DCS headers is cheaper than that for the architectures based on instrumentation buses.
As an example, Figure
Example of use.
In addition, the use of multiple headers allows for increasing the rate of data acquisition, which is usually related to the average data rate used in this type of devices communicated by industrial fieldbuses.
The main advantages of DCS headers are summarized as follows:
They increase the flexibility of the system. Each DCS header acts as an autonomous real-time system with its own self-management and programming capabilities. Therefore, the failure in one module does not affect the other equipment in the system They reduce the number of I/O modules, especially in the case of analog inputs, although they can also be used for digital signals The DCS headers are cheaper than the I/O modules for industrial buses they replace They have heterogeneous signals: each header can handle multiple inputs and outputs, both digital and analog They are usually very compact modular devices, facilitating the design of small equipment They are robust, since it is an industrial solution commonly used in automation systems
Their main drawbacks are the following:
They are designed to work with industrial levels. Similar to the case with multiplexers, they constitute equipment designed for automation applications, so certain aviation signals are outside their operating range They have limited bandwidth. The need to establish communications between the RTC and the DCS headers reduces the effective sampling rate of the system. This effect can be alleviated in part thanks to their programming capacity and their autonomy if a registration policy is used in buffers and with the appropriate temporary tables. For example, instead of reading a single piece of information, a number of signals recorded during a certain period of time are read in the communications They have a specific programming structure and languages. In many cases, the programming is based on the IEC 61131 standard, which is common for the programming of industrial PLCs, but not very frequent in aviation. Therefore, additional training for the verification test development teams may be required
In the field of HIL or CIL systems, the need to redirect signals between different devices is very common. Although in cases of low complexity, this can be solved with multiplexers, there are certain applications in which a capacity of total connection between different elements is required, which can be solved with matrix switchers.
These matrices consist of an ordered arrangement of rows, columns, and layers of switches, as shown in Figure
Internal structure of a connection matrix.
In these structures, there are switches arranged in all intersections between rows and columns, so that, if a switch is closed, all of the layers are closed, in a way similar to how all the independent circuits of a relay are closed. The most common is usually a one-layer or two-layer matrix. The latter is especially indicated for cases that need to redirect bipolar signals.
Technologically, these matrices use switches similar to those used for multiplexers, but the need to have a higher degree of connection requires the use of systems that are compact. Therefore, the most used solutions are those based on reed relays or FET.
In addition, as with multiplexers, in the case of systems using reed relays, their lifetimes are limited by the number of commutations. Therefore, manufacturers usually have mechanisms to allow for the replacement of them in case of failure.
According to what it has being seen, the interconnection capacity of the matrices depends on their number of connections (rows, columns, and layers). Therefore, their name is given in terms of these parameters. For example, a
These characteristics make them suitable to increase the flexibility of the HIL/CIL verification systems.
Next, several technological solutions will be proposed that rely on this technology for the design of reconfigurable test systems, as required in the objectives of this research.
As shown in Figure
Verification equipment with a commutation matrix.
This configuration allows the HIL/CIL verification equipment to make the following modifications to adapt to the needs of the test to be performed:
Figure
Example of using a matrix with a discrete SCU.
In the example of the figure, the system has been wired to have two direct channels (Ch2 and Ch3), one channel using the Ad0 converter (Ch0) and one using the Ad1 (Ch1), leaving the Ad2 unused in this case.
Therefore, to summarize, the switching matrices have the following advantages:
They increase the flexibility of the system through the reconfiguration of the routing of the UUT signals and the SCUs towards the I/O modules They reduce the number of I/O modules. Thanks to the capacity of hot reconfiguration, they can dimension the systems to the signals that are actually used simultaneously instead of those required by the test. In the case where FET matrices are used, sequencing would allow us to further reduce the number of input channels required
However, they also present the following drawbacks:
Integrated HIL systems are understood as solutions offered by different manufacturers that seek to integrate configurable I/O SCU modules by bus instrumentation and matrix switchers to increase the flexibility of the systems.
These solutions have an architecture like the one shown in Figure
Integrated HIL verification equipment.
In these systems, each input channel has a configurable SCU, designed according to the final application, generally in automobiles. However, the equipment with these characteristics could be adapted to the verification equipment in aviation.
To summarize, these solutions have the following advantages:
Their most important disadvantages are the following:
Initially, it can be assumed that there is no generic solution for the hardware/software design of the architecture of the test equipment that best matches all of the sets of ground tests, especially considering the Airbus A400M aircraft. However, in order to select the best approach, the following stages in ground verification tests must be considered:
At an initial design stage, high flexibility in the definition of number and types of signals is needed: analog, digital, voltage and intensity ranges, etc. At a verification stage, real interconnections with the UUT are convenient in order to match the requirements as closer to reality as possible. In a model-based scheme, the uncertainties of the model could derive in significant errors that could be important in the in-flight performance of the aircraft At maintenance and repairing stages of the complete verification system, it could be necessary to replace, to readapt, or to increase the number of interconnections The tests to be developed could be required to be executed in real time (RTC)
Based on these considerations, the best approach should be based on HIL/CIL systems.
According to this approach, it is estimated that the most appropriate solution for the addressed problem is a hybrid configurable verification test system that can consider the different solutions presented in this paper. In this sense, the main contribution of the paper can be synthesized in a methodology to design ground test equipment focused on the specified requirements (size and portability, robustness, modularity, connectivity, standardization, versatility, and ease of configuration). Therefore, our proposal suggests the following methodology based on the four steps:
First, the configuration of the AIM must consider the use of DCS headers in those cases where signals require high flexibility of voltage and intensity range and high data acquisition rate Second, the number of switching matrices has to be estimated according to the desired scalability. The use of this component enables the increase in the effective number of signals of the I/O modules (with sequencing where possible) and the signal routing flexibility among the DUT, the SCUs, and I/O modules Third, to increase the flexibility of the system, the use of reconfigurable and modular SCUs has to be dimensioned in order to enhance the flexibility of the ground test equipment hardware Fourth, the final design should also take into account the costs and supply capacity of the manufacturers for the design of the final system, especially in the case of using very novel solutions or recent appearance in the market
The study developed in this paper has considered several approaches for developing a new generation of ground testing equipment with the aim of meeting the requirements specified in modern aviation. These requirements include portability, flexibility, and configurability for the AIMs that connect to the aircraft. The described work has been carried out in cooperation with the Airbus DS Company, and it has been focused specifically on the A400M aircraft.
A conceptual review of traditional design in aircraft test systems has been developed. The results of this analysis have allowed us to identify the necessity of an abstraction methodology in ground test systems. This strategy implies the need of implementing appropriate hardware platforms that best perform the interconnection among the UUT and the rest of the system models. These platforms are constituted by customized electronic components (acquisition cards, routing devices, signal conditioning units, etc.) that can perform real-time computing, being responsible for generating the stimuli for every test and being responsible for registering the answers of the UUT.
During the execution of the project, several real ground tests over the Airbus A400M aircraft have been carried out. This analysis has allowed us to determine the number and type of signals that are needed during ground tests. Based on the obtained results, we have been able to propose the use of a HIL/CIL approach for the verification ground test platform because they are appropriate both in the initial stages of design and verification and in the maintenance and repair of complete systems. Furthermore, they can develop tests in real time (RTC).
Airbus has taken into account the above recommendations for the proposal of new ground test equipment. Following the methodology proposed in this paper, Airbus is currently designing a new prototype for the next generation of AIMs in the A400M aircraft. The synthetized methodology has been proven to meet the specified requirements. Due to the confidentiality agreement, the authors cannot give further details about the obtained results.
No data were used to support this study.
The authors declare that they have no conflicts of interest.
This work was carried out as part of the project “AI2X: Sistema Integral Avanzado de Pruebas Aeronáuticas,” funded by CDTI (Centre for Industrial Technological Development) under the FEDER-INNTERCONECTA Program. The authors thank the Airbus DS staff for the collaboration provided, as well as for the facilities at the time of publishing this work. Specifically, we would like to thank Antonio García as well as José Alberto Murillo for their invaluable work and collaboration throughout the research process.