Search

Regarding for the issues of failure mode and associated preventive correction actions of partition software when designing and an integrated modular avionics (IMA) system or partition software, this paper identified the failure mode specific to partition software based on the analysis of interaction between partition software and IMA platform. Besides the normal software failure mode, the specific failure mode introduced by partition mechanism included fail to execute interaction, error during interaction ,interaction timeout, and other specific failure. It proposed the preventive and corrective solution based on the health monitor functionality defined in ARINC 653. After a case study of ATC partition software, it5 s concluded that the risks introduced by the partition software characteristics can be reduced effectively with a separated health management function, which improved the reliability of partition software and avionics functions. The conclusion of failure mode analysis and the preventive actions are applicable to other safety critical system and applications design. [ABSTRACT FROM AUTHOR]