The contribution of the ATM SATCOM Safety Board (ASSB) Filippo Tomasello Rulemaking Official (EASA) Chair of the ASSB 10 Oct. 2011
Why SESAR needs SATCOM? Controllers need real time information... Past (1950) Procedural Guess Present position and future intentions Today (2010) Radar Know present position and guess future intentions Tomorrow (SESAR) Trajectory Know and coordinate Present position and future intentions Data link essential Timely data/high integrity VHF spectrum congested
EASA and its mission Initial BR Regulation (EC) No Second 1108/2009 extension 2 nd Amendment to EASA Regulation (1108) published & entered into force: 14 Dec 09 Art. 8b applicable from early 2011
Many elements in the SATCOM chain Communication Satellites On board end systems = avionics Ground Earth Station (GES) COM SP Flight Dispatcher Airport OPS Airborne segment civil Ground network (PENS) ACCs TWR military Military Units
Total system approach Clear and simple principles (recital 1 in 1108/2009): Airborne, ground, satellite segments Human, procedure, equipment And complex consequences mainly on boundaries: Common semantics & processes for Risk Assessment & Mitigation The design of total system itself : no single manufacturer delivers it (i.e. role of SESAR JU as overall architect ) Impact on responsibilities of the organisations at the interfaces (including subcontractors) need for coordination between EASA and competent authorities
Safety compliance For safety, total system approach means: Clear allocation of responsibilities to various regulated organisations Risk Assessment & Mitigation (for the total scope in ESARR 4) Inter-organisational Safety Management System Formal arrangements between aerodrome operator and e.g. air operators, ANSPs, ground handlers, etc. (ER Va B1f) Similar for ANSPs (ER Vb 5a(v)) Oversight of subcontractors Apportionment of reliability figures across multiple systems (e.g. air and ground; satellite and terrestrial)
The involved organisations Segment Constituents Operated under responsibility of Airborne Space Ground End systems (avionics) Airborne LAN Radio Transceiver Transponder (satellite) GES Ground Network End system (e.g. ATM automation) End-to-end COM chain Air Operator (supported by avionics and aircraft manufacturers) SATCOM service provider SATCOM/COM Service Provider ATS provider
COM Service in SES communication services means aeronautical fixed & mobile services (ground-to-ground, air-to-ground & air-to-air) for ATC purposes; (Art. 2.16; 549/2004) ATM SATCOM clearly falls into this definition COM providers (= CSP) can be individually certified (Art. 7.3; 550/2004) Business model not constrained; but The entire COM chain (including PENS/SWIM) shall be under managerial control of one or more certified COM SPs Subcontractors under oversight of certified COM SP
The aviation safety regulator. is not responsible for proposing/deciding on: Technical solutions Business cases Procurement or business models Mandatory implementation dates Safety of space missions. it only: Certifies organisations (e.g. ANSPs) Oversees (or certifies) products/systems, based on evidence (e.g. declarations and technical files) produced by organisations
CSs ECSSs ETSOs Eurocae EDs Others Published specifications Applicable specifications Additional Specifications Special conditions agreed by authority Contractual obligations Operational limitations Input: Constituent or system Test methods Etc. BASIS Verification (showing of compliance) Output (certificate or declaration)
ASSB establishment Safety assessment and risk mitigation for the system developed within the Iris programme taking into account the applicable legal requirements EASA (European Aviation Safety Agency) responsible for safety rulemaking as well as for certification and oversight of pan- European systems and service providers ATM SATCOM Safety Board (ASSB) established by ESA in 2009 as a self-standing entity, under the chairmanship of EASA with the mandate to review and assess technical and operational safety-relevant aspects and deliverables of the Iris programme (Phase 2.1), and with the authority for the approval of the related Safety documentation
ASSB membership Organization Name Function EASA Filippo TOMASELLO Chairman ESA Luigi BIANCHI Secretary EUROCONTROL Gary MORTON Member CAA CZ Vítězslav HEZKY Member FR DGAC Louise-Yvette BUARD Member ENAC (Italy) Antonio SPOSITO Member UK CAA Tom PERRY Member SESAR JU Philippe RENAUD Member EASA Maria ALGAR RUIZ Adviser Membership open to any national aviation authority
ASSB support Participation in ANTARES SRR (System Requirements Review) Participation in Workshops (e.g. ANTARES & THAUMAS studies, NLR TN for certification of the avionics etc.) Feedbacks to Operations studies (e.g. OPERA, SIRIO, HERMES) Special meetings (e.g. NLR for UT) Review/endorsement of TN on SWAL
Main ASSB deliverables: TN 2 ATM SATCOM System - Requirements for safety verification and validation (TN2) Consolidation of most relevant safety requirements (SR) for SATCOM (i.e. availability of service provision, continuity and integrity) 76 system SR, developed through a top-down approach, starting from aviation regulatory material applicable in the European Union (EU) Complement to the requirements applicable to the Satellite Communication Service Provider (CSP or SATCOM SP) Technology independent Correlation with ICAO Required Communication Performance (RCP) Manual, ICAO Global Operational data Link Document (GOLD), Eurocae ED 120 (continental airspace) and Eurocae ED 122 (oceanic airspace)
Main ASSB deliverables: TN 3 Requirements for Service Providers (CSP) of aeronautical mobile satellite (en-route) Communications (TN3) Suggestions to develop the parts of the Mission Requirement Document (MRD) relevant for the safety of the SATCOM service Safety Requirements applicable to the future Iris SAT CSP (and to its potential contractors) on the basis of the evolving EU legislation on aviation safety Recommendations for the transition to the operational service, under the responsibility of one pan-european SAT CSP certified by EASA change management procedures to be applied after achievement of initial operational capability, and respective roles of SAT CSP and design/manufacturing industry
ASSB follow-ups Contribute to ICAO draft Manual on SATCOM voice; e.g. clarifying that: specific approval is not normally necessary SATCOM may replace one HF set (if some conditions are satisfied) Competent aviation authorities are already responsible for safety oversight of COM SP under current Annex 10 (and contractors are under oversight through the provider) Submit TN 2 to SESAR JU & NEXUS Support ESA until end of phase 2.1 (mid 2013) Possibly contribute to new edition of ICAO Global Operational Data Link Document (GOLD) Pave the way for certification by EASA of the pan- European SATCOM SP