8.3 Design Description
This shall explain how the discrete elements of the system carry out their function (326). At this stage the assessment will ensure that integrity of the data is maintained throughout the system. Such an assessment would cover an appraisal of both the hardware and software design and include;
a) Decomposition of the design from functional description to module level. This ensures the verification of functions (327).
b) An evaluation of hardware reliability (328).
c) An evaluation of failure modes: for example, overload situations, handling of non-specified inputs, etc. (329).
d) description of how design decisions are derived from, or refer to, the Preliminary Hazard Analysis (330).
NOTE: The level of assessment carried out by the CAA will vary, depending on the novelty and complexity of the system. It is likely, however, that all systems will require assessment at the level of the manufacturer’s design documentation.
8.4 Testing Regime
Another aspect of ensuring data integrity is the testing of the system as individual
packages and at various stages of integration. This assessment shall cover:
a) Testing of specified inputs for correct output (331).
b) Testing of correct operation in fault conditions (332).
c) Testing for correct handling of corrupt or non specified data (333).
d) Any testing philosophy used. For example boundary testing, path testing, branch
testing, etc. (334). NOTE: It will normally be necessary to evaluate the testing to the level of what tests were undertaken and assessing the results of such tests. The depth of required assessment will reflect the results of the Hazard Analysis.
9 Site Safeguarding
In the absence of manufacturer’s data, refer to Part B, GEN 02 Technical Safeguarding of Radio Sites - Guidance material section, for appropriate guidance.
10 Post Installation
Prior to entering operational service the Regional Inspector will carry out a site inspection.
11 Flight Trials
Prior to entering operational service, a flight trial is required to confirm that the radar achieves its OR (335).
NOTE: For information on the requirements for a Radar Flight Trial see FLI 03 Flight Trial Requirements for Surveillance Systems.
12 ANO Article 205 Approval
After the above steps, final Approval will be given under Article 205 of the Air Navigation Order. The approved operational purpose will be set out in the approval document.
SUR 03 Surveillance Sensor Engineering Requirements
Part 1 Preliminary Material
1 Introduction
The approved use of any surveillance system depends on various factors, including training, experience, system accuracy and system resolution. This document sets out safety requirements.
2 Scope
The following requirements cover surveillance sensor performance and siting aspects and apply where the sensor is to provide data for Air Traffic Services purposes.
Part 2 Requirements
3 Safety Objective
The surveillance sensor shall provide a complete, accurate and uncorrupted source of surveillance data.
4 SARPs Compliance
4.1 In addition to the requirements below, Secondary Surveillance Radar (SSR) systems, including Mode S and surveillance systems utilising Mode S Extended Squitter shall comply with the Standards and Recommended Practices (SARPs) in ICAO Annex 10, Volume IV Chapters 2, 3 and 5.
中国航空网 www.aero.cn
航空翻译 www.aviation.cn
本文链接地址：CAP 670 Air Traffic Services Safety Requirements 2(81)
