Professional Documents
Culture Documents
ED-130A Guidance for the Use of Portable Electronics Devices (PEDs) on Board Aircraft
ED-130A Guidance for the Use of Portable Electronics Devices (PEDs) on Board Aircraft
ED-130A
December 2016
Supersedes ED-130 (2006)
ED-130A
December 2016
Supersedes ED-130 (2006)
© EUROCAE, 2016
i
FOREWORD
© EUROCAE, 2016
ii
EUROCAE
102, rue Etienne Dolet
92240 MALAKOFF
France
Telephone: 33 1 40 92 79 30
Fax: 33 1 46 55 62 65
Email: eurocae@eurocae.net
Website: www.eurocae.net
© EUROCAE, 2016
iii
EXECUTIVE SUMMARY
The United States Federal Aviation Administration (FAA) and the European Aviation
Safety Agency (EASA) requested that RTCA, Inc. and EUROCAE form a special
committee to present an up-to-date evaluation of the use of portable electronic
devices (PEDs) on board civil aircraft with emphasis on intentional transmitters such
as mobile phones, wireless RF network devices, and other wireless-enabled devices
such as personal digital assistants (PDAs).
RTCA Special Committee 234 (SC-234) and EUROCAE Working Group 99 (WG-99)
included representatives from consumer electronic, avionics manufacturers, aircraft
manufacturers, airlines, aircraft operators, regulatory agencies, and related industry
associations.
This report addresses the specific Terms of Reference to address aircraft design to
tolerate operation of PEDs. Previous RTCA reports on aircraft interference from PEDs
have emphasized risk assessments and then recommended restrictions on the use of
PEDs on board the aircraft. This report departs from the earlier RTCA reports, and is
directed to aircraft design recommendations that lead to aircraft tolerance to both
intentional RF transmissions and spurious RF emissions from PEDs.
There are two aspects to the aircraft design recommendations in this report. One
aspect defines aircraft system and equipment RF susceptibility qualification
recommendations that provide tolerance to RF from intentionally transmitting PEDs.
This is commonly referred to as protection from PED back door coupling. The
recommendations closely follow existing practices for aircraft system high intensity
radiated field (HIRF) protection. Acceptable test approaches for verifying the aircraft
system RF susceptibility qualification are defined.
The second aspect defines acceptable interference path loss (IPL) between aircraft
radio receivers and PEDs that emit spurious RF. This is commonly referred to as
protection from PED front door coupling. Extensive analysis of measured PED
spurious emissions was performed previously so that the interference path loss
targets are based on statistics of actual PED emissions rather than regulatory
specifications. Interference path loss test methods are defined.
This report also defines recommended approaches for demonstrating tolerance with
aircraft design to meet regulatory requirements including aspects of aircraft alteration
and continued airworthiness.
This report is intended to supersede previous applicable guideline documents RTCA
DO-294 and EUROCAE ED-130. All propositions define are intended to be in line with
the Revision of RTCA DO-307A/ED-239.
© EUROCAE, 2016
ii
TABLE OF CONTENTS
© EUROCAE, 2016
iii
© EUROCAE, 2016
iv
CHAPTER 8 MEMBERSHIP...................................................................................................................78
© EUROCAE, 2016
v
TABLE OF TABLES
Table 1-1: Appendix Cross Reference .......................................................................................................... 2
Table 3-1: FAA PED Regulations and Guidance ........................................................................................ 11
Table 3-2: EASA PED Regulations and Guidance ...................................................................................... 11
Table 3-3: Back Door Demonstration Methods ........................................................................................... 16
Table 3-4: Example of Equipment/System Additions For PED Tolerant Aircraft ........................................ 17
Table 3-5: FAA Amendment Levels ............................................................................................................ 17
Table 3-6: EASA CS Amendment Levels .................................................................................................... 18
Table 6-1: Back-Door Coupling Paths ......................................................................................................... 37
Table 6-2: Detailed Explanations to Figure 6-1 ........................................................................................... 40
Table 6-3: Example Output from Aircraft Safety Assessment ..................................................................... 45
Table 6-4: Frequency ranges for full PED tolerant aircraft .......................................................................... 52
Table 6-5: CW test signal power for full PED tolerant aircraft ..................................................................... 52
Table 6-6: Pulse Test Signal Power for Full PED Tolerant Aircraft ............................................................. 52
Table 6-7: Example RF exposure limits ...................................................................................................... 57
Table 7-1: Detailed Explanations to Figure 7-2 ........................................................................................... 64
Table 7-2: Detailed Explanations to Figure 7-3 ........................................................................................... 67
Table A-1: Front Door Risk Assessment ................................................................................................. A-12
Table E-1: Evaluated wireless communication standards ......................................................................... E-1
Table E-2: Pulse, amplitude modulated standards ................................................................................... E-5
Table E-3: Radiated power and resulting waveforms for pulse, amp, modulated standards .................... E-6
Table E-4: Radiated power and resulting waveforms for pulse, amp. modulated standards
(continuation) ................................................................................................................... E-7
Table E-5: FDMA/CDMA (CW-like) standards ........................................................................................ E-11
Table E-6: Radiated power and waveforms for FDMA/CDMA (CW-like) standard ................................. E-12
Table E-7: Radiated power and waveforms for FDMA/CDMA (CW-like) standard (continuation) .......... E-13
Table E-8: Frequency ranges for full PED tolerant aircraft ..................................................................... E-24
Table E-9: CW test signal power for full PED tolerant aircraft ................................................................ E-24
Table E-10: Pulse test signal power for full PED tolerant aircraft ........................................................... E-24
Table F-1: MEF / dB according to number of sources and minimal distance d between them,
12 dB is covering all scenarios. ....................................................................................... F-2
TABLE OF FIGURES
Figure 1-1: Document Overview .................................................................................................................... 1
Figure 3-1: Section Overview ...................................................................................................................... 10
Figure 3-2: General Overview Of Front Door PED Tolerance ..................................................................... 13
Figure 3-3: General Overview Of Back Door PED Tolernace ..................................................................... 14
Figure 3-4: Example Of FAA TCDS Showing Initial TC Date ...................................................................... 19
Figure 3-5: Example Of FAA Partial Tolerant Aircraft ................................................................................. 19
Figure 3-6: Example Of FAA SC Tolerant Aircraft....................................................................................... 19
Figure 5-1: Establishing Front Door Tolerance ........................................................................................... 31
Figure 6-1: Process Overview for Aircraft Backdoor Compatiblity Assessment ......................................... 39
Figure 6-2: Backdoor Coupling Assessment Flow Chart ............................................................................ 42
Figure 6-3: Final Risk Assessment Process ................................................................................................ 48
Figure 6-4: Aircraft Backdoor Test Options ................................................................................................. 51
Figure 6-5: Example for Test Setup ............................................................................................................ 55
Figure 7-1: High Level Flow Chart Overview of Section 7 .......................................................................... 60
Figure 7-2: Maintaining Front Door Coupling PED Tolerance ..................................................................... 64
Figure 7-3: Maintaining Back Door Coupling PED Tolerance ..................................................................... 67
Figure A-1: Flight Phases ........................................................................................................................ A-11
Figure E-1: Test waveform for standards using TDMA or CSMA/FHSS schemes ................................... E-9
Figure E-2: CW-waveform for standards providing no pulse modulation ................................................ E-14
Figure E-3: Field strength levels onto EUT for worst-case scenario for pulse-modulated T-PED
signals including 6dB margin ......................................................................................... E-16
Figure E-4: Field strength levels onto EUT for CW-like T-PED signals including 6dB margin ............... E-17
Figure E-5: Power levels at a 0.1 m distance between test antenna and EUT for pulse
modulated (TDMA) T-PED signals including 6dB margin ............................................. E-18
© EUROCAE, 2016
vi
Figure E-6: Power levels at a 0.1 m distance between test antenna and EUT for CW-like
(FDMA) T-PED signals including 6dB margin ............................................................... E-19
Figure E-7: Derived radiated field strength levels for pulse-modulated (TDMA) T-PED signals
including 6 dB margins for laboratory equipment qualification ...................................... E-20
Figure E-8: Derived radiated field strength for CW like (FDMA) T-PED signals including 6 Db
margins for laboratory equipment qualification ............................................................. E-21
Figure E-9: Derived radiated power levels for 0.1m distance between test antenna and EUT
for pulse-modulated (TDMA) T-PED signals including 6 dB margins for
laboratory equipment qualification ................................................................................. E-22
Figure E-10: Derived radiated power levels for 0.1m distance between test antenna and EUT
for CW-like (FDMA) T-PED signals including 6 dB margins for laboratory
equipment qualification .................................................................................................. E-23
© EUROCAE, 2016
1
CHAPTER 1
INTRODUCTION
1.1 INTRODUCTION
The PED ARC (Aviation Rulemaking Committee) established in 2013 made
recommendations to clarify and provide guidance on allowing PEDs usage from gate
to gate without compromising the continued safe operation of the aircraft. This lead to
the creation of the FAA operation guidance, see Appendix C. On EASA side, specific
acceptable means of tolerance and guidance material to allow PED operation gate-to-
gate can be found in TABLE 3-2. The guidance contained in these FAA and EASA
references are only intended for operational approval, they do not cover methods
acceptable for aircraft certification.
This report includes some of the ARC’s recommendations for allowing additional PED
usage on airplanes as well as expanding on the operational guidance. It also provides
additional methods for demonstrating PED tolerance. This document supplements
existing guidance provided in DO-307 (and later revisions) / ED-239 (and later
revisions), updates the previous ED-130 and supersedes DO-294. An overview of the
document is provided in FIGURE 1-1.
(Section 2) Background
Demonstrate Demonstrate
(Section 5) Front Door Back Door (Section 6)
Compliance Compliance
© EUROCAE, 2016
2
The existing guidance from DO-307 (and later revisions)/ED-239 (and later revisions),
DO-294 and previous ED-130 have been referenced several times within this report.
These references have to be recognized in two different manners. First, in a historical
context referencing to documents in place at the time of issuance of this report and
second as a link to this report when activities could result from this reference.
The ED-130A document will have Appendices that match the DO-363. The
Appendices are formatted differently from ED-130 and TABLE 1-1 provides cross
reference between ED-130 and the new ED-130A / DO-363. Information of Annex’s
not listed are given in the main report is considered to be outdated.
ED-130 ED-130A/DO-363
1.2 SCOPE
This report provides specific recommendations for operators as well as certification
applicants performing aircraft Type Certificate (TC), Supplemental Type Certificate
(STC) and Amended Type Certificate (ATC) to show how aircraft avionics and
electrical system can be tolerant to the use of portable electronic devices (PEDs)
throughout various phases of flight. The aircraft design guidance meeting regulatory
requirements address any kind of PEDs, including transmitting PEDs Although
throughout this document the word Applicant is used, the guidance in this document is
applicable to STC/TC/ATC applicants and Operators. It is acknowledged that per the
regulation in TABLE 3-1 & TABLE 3-2 that no CFR 14 Part 23/25/27/29 and EU
Regulation 965/2012 regulatory approval is required for in-flight use of PEDs.
The report recommends specific RF immunity requirements for aircraft systems that
are exposed to PED intentional RF transmissions (back door coupling) and specific
Interference Path Loss requirement for those radio systems that can be vulnerable to
PED spurious emissions through antennas (front door coupling). The front door
coupling is essentially unchanged from previous guidance produced in DO-307, with
additional guidance provide for similarity. Additional guidance is provided related to
meeting regulatory requirements is discussed in section CHAPTER 3 that needs to be
considered when complying with aircraft PED tolerance. For aircraft that successfully
meet the requirements in chapters 5, 6 and 7 of this report, aircraft operators will have
high assurance that the aircraft electrical and avionics systems will have and maintain
aircraft PED tolerance even in critical phases of flight.
© EUROCAE, 2016
3
This guidance, nor current FAA/EASA policy, recommend mandatory requirements for
aircraft PED interference tolerance. It does provide standard methods to demonstrate
aircraft PED tolerance. It is highly recommended that PED tolerance is demonstrated
for aircraft that are intended to be operated as air carriers (e.g. FAA Part 121).
When the recommendation of this document is followed, it provides control of
interference to avionics and electrical system from the operation of PEDs. The EMC
tolerance aspect for a new wireless system installation that enables transmitting PEDs
should be certified on an aircraft under a TC/STC/ATC. Methods from aircraft level
testing from section CHAPTER 6 can supplement EMC demonstration for the installed
wireless service.
When demonstrating aircraft PED tolerance, the following items are considered to be
out of scope for this document:
1. Operational aspects of PED use that are related to crew procedures and
stowage Guidance for this can be found in, FAA InFO 13010 and InFO
13010SUP, EASA Annex to Decision 2014/029/R, Part-CAT AMC/GM Issue 2,
Amendment 1 and ICAO Circular 340 AN/198 for example.
2. Interference to terrestrial communication networks and spectrum licensing is not
addressed. Similarly, health concerns are not a subject of this document.
3. Country specific telecommunication regulations that disallow the use of PEDs
on aircraft (e.g. the case of FCC with cell phones).
4. Country or region specific telecommunication regulation and certification
requirements for Short Range Devices (SRDs) in terms of used frequencies,
radiated power and operational modes.
1.3 DEFINITION AND ABBREVIATION
The terms defined in this section are important terms used in this document.
ACSTC—Aircraft Supplemental Type Certificate
Amended Type Certificate (ATC)—A type certificate which has received FAA approval
to modify the aircraft design from its original design. An ATC approves not only the
modification, but also how that modification affects the original design.
Approved Aircraft Configuration –The aircraft configuration, including modifications, an
authority has approved design and substantiation data as part of a certification
process. PEDs are not included in the Approved Aircraft Configuration.
Back Door Coupling—PED radio frequency transmissions that are radiated within the
aircraft and received by aircraft electronic systems through their interconnecting wires
or electronic equipment enclosures.
Cargo Tracking Device—PEDs that are designed for use on aircraft in locations
inaccessible to the flight crew during flight.
CFR—Code of Federal Regulations
Certification Review Item (CRI)—EASA documentation that is used to track and record
the resolution of a certification subject which requires clarification or interpretation or
represents a major technical or administrative issue.
CMM—Component Maintenance Manual
Controlled Portable Electronic—A controlled PED (C-PED) is a PED subject to
administrative control by the operator using it. This will include, inter alia, tracking the
allocation of the devices to specific aircraft or persons and ensuring that no
unauthorized changes are made to the hardware, software or databases. A controlled
PED will also be subject to procedures to ensure that it is maintained to the latest
amendment state. CPEDs can be assigned to the category of non-intentional
transmitters (PEDs) or intentional transmitters (T-PEDs).
CRC—Crew Rest Compartment. In the CRC PEDs can be use by the crew (flight crew
and/or cabin crew)
© EUROCAE, 2016
4
© EUROCAE, 2016
5
© EUROCAE, 2016
6
PED-Tolerant Equipment List—A list which identifies the aircraft equipment (at a part
number or system level) that has been determined to be PED tolerant. As defined in
section 3.8.1.
RFID—Radio Frequency Identification
Shall—The use of this term indicates a requirement.
Should—The use of this term indicates a characteristic that is highly recommended
but is not required.
SMS—Safety Management System
STC—Supplemental Type Certificate. This is an amendment to the type certificate of
an aircraft that is usually by a certification applicant other than the original
manufacturer of the aircraft.
Spurious Emissions—(also: unintentional or non-intentional emissions / radiation)
Emissions that are non-intentionally emitted, and result from the internal electrical
operation of the devices. These emissions represent energy that is wasted from the
devices. All PEDs radiate low-level spurious emissions as a consequence of their
internal electrical operation.
TC—Type Certificate
TSO—Technical Standard Order
Tracking Devices—Wireless devices used to monitor the cargo being transported on
board the aircraft. Examples of these devices include RF ID, data loggers and
electronic bag tags.
Type Certificate Data Sheets (TCDS)—A formal description of the aircraft, engine or
propeller. It lists limitations and information required for type certification including
airspeed limits, weight limits, thrust limitations, etc. It provides the certification basis
for each aircraft model listed on the TCDS.
TCDS can be viewed on EASA website https://easa.europa.eu/document-library/type-
certificates for example and FAA website
http://rgl.faa.gov/Regulatory_and_Guidance_Library/rgTSO.nsf/MainFrame?OpenFra
meset
UMTS—Universal Mobile Telecommunications Systems. Mobile cellular system for
networks based on GSM.
Zonal Testing—Testing performed to illuminate aircraft zones and cover all parts
installed within the zones. Typical zones include the cockpit/flight deck, cargo areas,
avionics bays and cabin sections.
© EUROCAE, 2016
7
CHAPTER 2
BACKGROUND
© EUROCAE, 2016
8
RTCA Special Committee SC-234 and EUROCAE Working Group WG-99 were
tasked to publish a more up to date aviation industry accepted guidance and best
practices to ensure aircraft is PED tolerant for the life of the aircraft and to streamline
the process to help some of the challenges mentioned above.
The members of the SC-234 and WG-99 have taken into consideration the following
aspects in particular to develop such guidance:
1. Industry experience with expanded passenger PED use and with in-flight
wireless services and their integration from an EMC point-of-view.
2. Improved/increased knowledge about the functioning of wireless-radio
transmission technologies, including realistic and probabilistic evaluation
approaches.
3. Advancements in avionics systems with respect to electromagnetic compatibility
(EMC).
4. Existing regulatory authorities’ policy documents on expanding passenger PED
use on aircraft.
5. Harmonization by publishing technically equivalent RTCA and EUROCAE
documents.
6. The FAA PED Aviation Rulemaking Committee (ARC) Report (9/30/13).
© EUROCAE, 2016
9
CHAPTER 3
3.1 INTRODUCTION
This section outlines guidance for aircraft that will allow use of PEDs throughout
various phases of flight, refer to FIGURE 3-1. The current FAA and EASA regulatory
requirements for the control of PED interference is contained within the operating
rules, such as those identified in section 3.2. While the operators are primarily
responsible for meeting PED tolerance, the STCs and TCs can also use this guidance
and establish PED tolerant aircraft as part of the TC or STC that would support
operator tolerance. The necessary equipment/system qualifications (for back door
coupling) as well as aircraft assessment of radio receiver’s immunity to spurious
emissions (front door coupling) can all be achieved as part of the STC or TC process
under 2X.1309 (a).
When the TC/ATC/STC certification applicant is installing a new wireless system then
the certification applicant is responsible to make sure the installed system does not
interfere with aircraft avionics and electrical systems (electromagnetic compatibility). In
addition to this per the current FAA policy statement (at the time of release of this
document) and per EASA project specific Certification Review Item (CRI) the
certification applicant is required to meet aircraft back door tolerance also for
transmitting PEDs intended for use with the installed wireless system. The necessary
aircraft front door tolerance for transmitting PEDs that will be communicating with the
installed wireless service is the responsibility of the operator under the rules identified
in TABLE 3-1 & TABLE 3-2. The front and back door PED (includes both intentional
and unintentional) tolerance can be achieved by the use of the guidance in this
document. Furthermore, front door PED tolerance can also be achieved by restricting
the use of transmitting PEDs during critical phases of flight. The restriction can be
requiring transmitting PEDs to be in airplane mode or by turning them off. No
restriction is necessary in regards to back door effects for unintentional transmitting
PEDs.
Electromagnetic compatibility between installed wireless systems and other aircraft
systems, as required by 14 CFR Part 23.1431, 25.1353, 25.1431, 27.1351, 29.1353 &
29.1431 is not within the scope of this guidance. Methods from aircraft level testing
from section CHAPTER 6 can supplement EMC demonstration for the installed
wireless service
The guidance is limited to PED tolerance and does not deal with the operational
aspect required for things such as stowage, PED identification, and any other crew
operating requirements.
Equipment and systems that have failure modes that are classified as Major,
Hazardous or Catastrophic, and Flight Data Recorder and Cockpit Voice Recorder are
candidates for needing to be PED tolerant. Equipment that have failure conditions that
are classified as Minor and lower does not need to meet the PED tolerance
requirement. The failure classifications should be derived from the safety assessment
performed for the aircraft. The PED tolerance should be to intentional transmitters for
backdoor coupling and spurious emissions via front door coupling of radio receivers
depending on the use of PEDs during critical phases of flight.
When the aircraft has demonstrated PED tolerance by meeting requirements
DO-307A/ED-239 for backdoor and front door coupling requirements the aircraft is
considered to be PED tolerant for all types of PEDs. In some cases, only specific
PED technology will be demonstrated (e.g. only Wi-Fi) and the aircraft will then be
considered as PED tolerant for that specific technology. There may be other reasons
for airliners restricting the use of PEDs as a result of operational/local regulatory
requirements. These considerations fall into other operational aspect of PED tolerance
and is considered to be outside the scope of this document.
© EUROCAE, 2016
10
The primary method for PED tolerance is meeting the backdoor and front door
coupling requirements described in this document. In addition, continued airworthiness
needs to be considered for continuing to meet PED tolerance for the service life of the
aircraft. Sustained PED tolerance is applicable to both new equipment being installed
as well as the impact to existing PED tolerant equipment.
(Section 3.3)
Front Door Back Door
DO-307()/ DO307()/ YES
YES ED-239() ED-239()
Tolerant A/C and/or full
& HIRF & No
No Change Change
to A/C Sustain Aircraft
Sustain Aircraft
PED Tolerance PED Tolerance
Section 7 NO NO Section 7
© EUROCAE, 2016
11
© EUROCAE, 2016
12
© EUROCAE, 2016
13
Equipment that are already tolerant to ED-130 / DO-307 for back door or front door
coupling do not require further analysis if:
i) The front and back door coupling are not impacted by design changes from any
modification made to the aircraft; OR
ii) A design change increases the criticality of existing equipment/system. E.g. a
system that is currently minor is now being used to support Major or higher
functions on the aircraft, through software or hardware changes.
More details can be found in section CHAPTER 5 and section CHAPTER 6 for
tolerance methods.
Front Door
Assessment
Aircraft DO-307
NO
YES Front Door Compliant
Any Design
Pursue Front Door
YES Changes being YES
Compliance
Made
Perform Front
Front Door Door Coupling
Compliant Assessment
Section 3.5
Sustaining A/C
PED Tolerance
See Sec 7.0
© EUROCAE, 2016
14
Back Door
Assessment
YES
Adding Wireless
service
NO
NO
YES
© EUROCAE, 2016
15
© EUROCAE, 2016
16
© EUROCAE, 2016
17
Tracking Notes
CAT Include part number on the Test and analysis per TABLE 3-3.
PED Tolerant Equipment List
CAT Include all systems part No additional testing/analysis required. CAT systems
numbers on the PED will be levied with HIRF requirement and therefore PED
Tolerant Equipment List tolerance is automatically met via HIRF Rule/Special
condition.
Amd 57 (Sep 2007) Amd 122 (Sep 2007) Amd 42(Sep 2007) Amd 49 (Sep 2007)
NOTE: If Part (d) of the above rule is used then it may be limited to CAT functions only,
similar to the FAA Special Condition.
© EUROCAE, 2016
18
European certified aircraft after 1987 to the JAA Special Conditions or the EASA CRIs
are considered HIRF tolerant. EASA CS Amendment levels that include HIRF
requirements:
CS 23.1308 CS 25.1317
FAA HIRF Special Condition that was applied to only systems performing CAT
function was introduced 1987.
3.6.1.1 Full HIRF Tolerant Aircraft.
This is an aircraft that met the FAA/EASA HIRF rule or EASA CRI/JAA Special
Condition, or similar regulatory requirement from other certification authorities, at its’
initial TC. The significance of “initial” is that all the systems and equipment were
considered for HIRF certification. Any changes to the aircraft by OEM or STC would
require the change to meet the certification basis of the initial TC which would include
HIRF. Examples of the HIRF regulations met at initial TC would be FAA 14CFR
2X.1317/23.1308 or EASA CS 2X.1317/23.1308 or HIRF Certification Review Item
(CRI) or JAA HIRF Special Condition.
Aircraft that meet the Full HIRF requirements will have cockpit voice and flight data
recorders that either meet the ED-239 / DO-307A TABLE 3-1 requirements, are
located in areas of the aircraft where transmitting PEDs cannot be operated, or are not
susceptible to PEDs due to impervious construction and durability. For these full HIRF
compliant aircraft no further action is required for CVR and FDR equipment.
To verify Full HIRF status all models listed in the TCDS must either have the
FAA/EASA HIRF rule or EASA CRI/JAA Special Condition listed in the cert basis.
Using this assessment process the following aircraft have been determined to be Full
HIRF tolerant: A320, A330, A340, A350, A380, B777, B787, CS100, EMB-145,
ERJ-170, and ERJ-190 series.
3.6.1.2 Partial or Non HIRF Tolerant Aircraft.
3.6.1.2.1 Partial HIRF Tolerant Aircraft
A partial tolerant aircraft is one where initial TC may not have included HIRF
certification basis however various upgrade of electrical and avionics systems may
have picked up HIRF regulations or Special Conditions (SC) / Certification Review
Items (CRI). The FAA SC only applies to equipment with catastrophic failure
conditions. The HIRF rule, JAA SC and EASA CRIs all apply to equipment with
catastrophic/hazardous/ major failure conditions. The rest of the equipment are
sometimes referred to as being grandfathered and they retain their original certification
basis, which does not include HIRF and so they do not meet the HIRF requirement.
When demonstrating aircraft PED tolerance, the determination of HIRF certification
basis for the aircraft may need to look at prior certification basis to understand HIRF
certification basis of all equipment. The TCDS will identify HIRF certification basis via
regulations (to be determined via amendment level of certification basis) or Special
conditions. The initial TC date is often shown on the TCDS, that can also be used to
help determine whether the HIRF basis was likely or not at initial TC, based on when
HIRF certification requirements were introduced, ref section 3.6.1.1.
In FIGURE 3-4 the first aircraft was introduced in 1969 and HIRF requirements were
not introduced until 1987 If the aircraft is still in-service, the aircraft would be
considered partially HIRF tolerant if there were some system modifications that are
HIRF tolerant, or the aircraft is considered non HIRF tolerant if no such HIRF tolerant
modifications have taken place.
© EUROCAE, 2016
19
FIGURE 3-6 shows FAA HIRF Special Conditions (sometimes also referred to as
“Radio Frequency Energy Protection”), applicable to limited avionics equipment. One
has to review the SC to understand the equipment applicability.
© EUROCAE, 2016
20
© EUROCAE, 2016
21
If the certification applicant chooses to demonstrate aircraft PED tolerance, then the
applicant should provide documentation and any amendments to support airline
operation and maintenance/repair processes. Note that per the current FAA policy
statement (at the time of release of this document) and the EASA project specific
CRIs, the certification applicant is required to meet aircraft back door tolerance for
transmitting PEDs intended for use with the installed wireless system, while the
Operator is required to meet front door tolerance.
The aircraft PED tolerance should be documented in an appropriate form and
maintained to include the guidance references to which the aircraft PED tolerance has
been achieved (e.g. RTCA DO-307 or DO-363 or ED-130A, etc.). Any modification on
an aircraft that impacts PED tolerance should result in an update of the documentation
to whether the PED tolerance is maintained or if there are any limitations. Revised
information should be distributed by the responsible design organization to the
operator.
Any instructions for sustaining aircraft PED tolerance should be specified in the
instructions for continued airworthiness and be documented by the certification
applicant in an appropriate form to the operator (see section 5.7 of ED-239 /
DO-307A).
In section 3.8.1 a distinction is made between standard and aircraft documentation
(e.g. IPC), additional documentation and supplemental documentation.
3.8.1 Supporting Documentation
3.8.1.1 Standard Documentation:
Illustrated Parts Catalogue (IPC) is a list of components and parts approved for the
installation on accordant aircraft (type and/or serial number). It provides parts
information for both preferred parts and those interchange parts for replacement
cases. The responsibility for the validity of the IPC as such remains vested with the
airframe OEM.
PED tolerance information as part of the IPC is not considered common practice.
However, airframe OEMs shall offer the opportunity to add PED tolerance flag notes
or highlighting to their IPC. PED tolerance information as part of the IPC for all post-
delivery alterations should be processed through the airframe OEM. However, the
aircraft operator remains responsible for always keeping the PED tolerance
information up-to-date.
If the IPC is to remain untouched but PED tolerance is still to be documented, then
additional documentation providing equipment PED-tolerance information should
supplement the IPC.
3.8.1.2 Additional Documentation:
Additional documentation can be an OEM Tolerance Letter/Memo, a Service
Letter/Service Information Letter/In-Service Information, or a document of similar
quality bearing technical and/or operational statements regarding the status of aircraft
PED tolerance.
Tolerance Letter/Memo: Aircraft OEMs may issue tolerance letters that
communicate the status of their aircraft PED tolerance. Such communications
act as an official statement to show tolerance of an aircraft or its equipment (in
the context of this document to e.g. PED tolerance). An example is provided in
Appendix D.
Service Letter (SL): A service letter can be a technical and/or operational
OEM statement in regards to aircraft PED tolerance and for safe aircraft
operation, usually related to a specific system or process. This document can
be issued by the OEM upon request by the operator, or at the OEM discretion
based on new or additional cognitions.
© EUROCAE, 2016
22
© EUROCAE, 2016
23
Additionally, the nature of a PED tolerant equipment list bears an increased effort to
establish and manage PED tolerance data due to the increased number of parts
compared to the non-PED tolerant equipment list approach. The list would comprise of
a list of Hazardous and Major systems (see section 6.2 #1 for system definition)
including cockpit and flight data recorder shown to be PED tolerant. It would also
contain a list of equipment part numbers performing Catastrophic functions. In
addition, the list should also identify the type of PED technologies that have been
assessed, if a technology specific demonstration was made. If all the frequencies per
section 6.3.2 and test methodologies per section 6.2.5.2 or if equipment qualification
testing is used to meet backdoor tolerance, then no technology specific limitations
needs to be listed.
These two guidance options for additional documentation should be used during
maintenance or repair to ensure all equipment installed is proven PED tolerant. This
documentation should be referenced as part of a standard maintenance/repair
process.
In lieu of the above a single equipment list that shows which equipment are PED
tolerant and which equipment are not PED tolerant would also be acceptable.
© EUROCAE, 2016
24
CHAPTER 4
The aircraft safety assessment process should be planned and managed to provide
the necessary assurance that all relevant failure conditions have been identified and
that all significant combinations of failures which could cause catastrophic,
hazardous and major failure conditions have been considered. The aircraft safety
assessment should be done ahead of testing if the plan is to use equipment
qualification to meet backdoor PED requirements. For front door coupling radio
systems that have failure conditions that are classified as Major and higher are
required to be assessed for front door coupling. If the guidance provided in Appendix
A can be applicable to the aircraft being considered, then most of the radio systems
can be sufficiently mitigated such that the only system that need to be considered is
those used for instrument landing systems.
There are two approaches that can be taken to perform the aircraft safety
assessment:
1. Functional Hazard Assessment (section 4.1)
2. Safety Management System (SMS) (section 4.2) – Only for Front Door.
4.1 FUNCTIONAL HAZARD ASSESSMENT
A system level Functional Hazard Assessment (FHA) is a qualitative assessment. It
considers a failure or combination of system failures and their effect on the aircraft.
The various classification of failure conditions is based on crew workload, reduction in
safety margins or functional capabilities as well as potential for injury to occupants.
These classifications are further discussed in Appendix B. There is guidance in
AC23.1309 (Appendix 1), AC25.1309, AC25-11, SAE ARP4761 that provides
guidance on developing functional hazard assessments also. Individual systems may
also have FAA or EASA advisory material that may also provide system safety
requirements, e.g. AC20-151B (TCAS II) or AC20-138D (Navigations Systems).
It is important to note that this document is not presenting guidance suggesting the
applicant perform a complete hazard assessment of the aircraft, but instead provide
sufficient assessment by a knowledgeable person. The assessment can determine the
highest classification for the system and broadly apply to all parts of the system,
reducing the need to produce detailed failure conditions. Additional analysis can be
performed if additional mitigations is required. The applicant shall produce a
consolidated list of systems under test, the considered functions of that system, the
failure classification of those functions and any mitigation as proposed by this
document.
When performing the safety assessment, the following should be considered:
1) The components that make up the system are as follows:
a. Fault trees produced as part of 2X.1309 safety assessment, if available,
can be examined to help determine which equipment can contribute to
the failure conditions.
b. The fault tree will often have multiple redundant systems and their
associated failure modes feed into an AND gate for a given specific
failure condition hazard.
c. For PED safety assessment it is not necessary for all these redundant
systems to be PED tolerant. Consideration should be given to whether
the aircraft will maintain PED tolerance if the aircraft is allowed to
dispatch with equipment inoperative.
© EUROCAE, 2016
25
2) There may be multiple failure conditions for any given box with different failure
classifications. If there is upset during the test, then the upset can be analyzed
to determine the classification of the failure condition. This may reveal that the
classification is MIN and therefore no remedy for the upset is required or that
the classification is lower than what the system was originally classified to. In
the latter case this may reduce laboratory test levels required per TABLE 3-1 of
ED-239 / DO-307A.
3) Can the component of the system be susceptible to PED? Switches,
electromechanical relays are example of electrical components that are not
susceptible to PED interference.
4) Random failures do not need to be combined with PED environment.
5) Digital signals that have error detection would be prone to loss of data rather
than misleading data. As an example the GPS signal to the antenna, for front
door consideration, would likely result in loss of data rather than misleading
data in the presence of PED spurious emissions.
For front door it is recommended that the format and guidance shown in Appendix A
be followed. An example backdoor FHA is shown in Appendix B.
The identification of failure conditions and their classifications is not considered to be
within the scope of this document since they can be aircraft specific. Some typical
examples of catastrophic failure conditions and systems/equipment (that might be
involved in the failure) for the aircraft a shown below. These should not be considered
as the complete list.
Failure conditions that can be catastrophic for the aircraft:
1. Misleading display of vertical and lateral guidance during Instrument Landing –
ILS system
2. Non-restorable loss of display of all navigation information coupled with a total
loss of communication functions – NAV and COM systems
3. Loss or HMI of primary flight display information such as attitude/heading/
airspeed/altitude – Displays, AHRS/IRS, ADC Computer/Smart Probes.
4. Loss or erroneous operation of flight control (pitch, roll, yaw) systems.
1. The loss is for fly-by-wire
2. Erroneous operations for both fly-by-wire and non-fly-by-wire (e.g. hardovers).
5. Slow or rapid loss of pressurization - Pressurization control/monitor
6. Loss of Thrust control (FADEC, Auto-throttle)
7. Loss of or misleading primary engine parameters – Displays, Engine
computers.
8. Inadvertent or loss of fly-by-wire braking or nose wheel steering.
9. Loss of Anti-ice
10. Loss of or erroneous operation of Hydraulic functions (landing gear control
surfaces)
11. Loss of fuel to engines - Fuel system monitor/control
© EUROCAE, 2016
26
1 FAA Advisory Circular (AC) 25.1309-1A - System Design and Analysis / EASA AMC 25.1309
© EUROCAE, 2016
27
© EUROCAE, 2016
28
© EUROCAE, 2016
29
4.3 SYSTEMS AND EQUIPMENT TO MEET FRONT & BACK DOOR COUPLING
The failure conditions identified under the safety assessment are examined to
determine the systems and components that can cause the failure condition identified.
These components are then subject to the appropriate back door and front door
testing and analysis.
4.4 CONCLUSION
This safety assessment for the two types of PED interference coupling mechanisms
can be addressed to provide an acceptable level of safety for expanded PED use. For
back-door interference (as discussed in section 3.6), system protection is provided in
several ways including meeting certain HIRF and wireless system installation design
requirements. For front door interference (as discussed in section 3.5), there are
several mitigations available.
1. PED Tolerance – The best mitigation for front door interference is to obtain data
to show the system meets the interference path loss requirements for
interference as shown in ED-130A / DO-363 or ED-239 / DO-307A have been
met. This is a requirement for systems that have a Major and higher failure
condition.
2. Operational Mitigations – For systems that have major failure conditions, the
mitigations are handled as part of standard practices or operating procedures.
Hazardous effects require additional aircraft systems to be used as a cross
check of independent systems. This may involve additional crew training to
heighten the awareness of these requirements.
3. Operational Limitations – If an operator opts to not perform a function described
in the safety assessment, then that function does not have to be considered as
part of their safety assessment so long as appropriate PED limitation is in place
when the untested function is operational.
4. PED use prohibition – If an operator chooses to use this mitigation, they must
assess their current PED crew and passenger instructions and make necessary
changes to convey the appropriate information.
© EUROCAE, 2016
30
CHAPTER 5
5.1 PURPOSE
This section of the document is intended to be an aid for operators wanting to
demonstrate tolerance to front door coupling, as detailed in ED-239 / DO-307A.
5.2 OVERVIEW
Front Door Tolerance is demonstrated through test and analysis. This testing is not a
test of avionics system susceptibility to RF energy, but rather it tests whether a signal
from a PED located inside an aircraft could have enough RF energy for that energy to
travel from the source, to outside the aircraft, through the avionics system’s receiving
antenna and cable, to the receiver interface where the avionics component (e.g.,
receiver) plugs into the cable. The RF path loss, is also known as Interference Path
Loss (IPL), see ED-239 / DO-307A, section CHAPTER 4. A high Interference Path
Loss (IPL) is desirable.
The intentional emissions from PEDs occur in licensed frequency bands, allocated by
the international and national telecommunication authorities. The aeronautical radio
navigation and communication frequencies are internationally harmonized and the
telecommunication authorities ensure that no other RF service is assigned within
these bands; these are protected bands. Therefore, there is a separation between the
frequency bands used for aeronautical radio navigation and communication and those
used by any intentional PED not intended for aeronautical purpose. Since aircraft
receivers possess a high immunity level against signals outside their operating
frequency ranges, the potential for front-door interference caused by intentional
radiated emissions is negligible.
A “front door” effect is when the disturbing signal is emitted by the PEDs or the
TPEDs, received by the aircraft antennas and disturbs the aircraft RF receivers. Since
no PED should be intentionally transmitting in the aviation frequency band. Only the
Spurious radiation from PEDS will be considered. Spurious radiation from PEDS
have the possibility of coupling through apertures in the fuselage to antennas thus
causing the interference with the navigation, communication, and surveillance
receivers.
The purpose of this section is to clarify ED-239 / DO-307Aas to:
1. Overall flow of establishing Front Door Tolerance to ED-239 / DO-307A.
2. What types of mitigation to IPL measurements could be used
3. What changes would impact Front Door Tolerance
4. IPL and Front Door assessment to similar aircraft
5.3 APPLICABILITY AND SCOPE
This Aid to Operators is applicable to Title 14 of the Code of Federal Regulations (14
CFR) part 119 certificate holders and 91 subpart K (91K) program managers.
When followed, it provides an acceptable method of tolerance for 14 CFR part 91.21,
part 121.306, part 125.204, or part 135.144, as applicable, when allowing expanded
use of PEDs various phases of flight.
The use of the terms “aircraft operator(s)” and “operator” throughout this document is
applicable to operations conducted under 14 CFR parts 91K, 121, 125 and 135.
Reference section 0 for more information.
Portions of FAA publications InFO13010 and InFO13030SUP, as well as, ED-239 /
DO-307A and EASA AMC guidance material have been used in the creation of this
section. Reference Appendix C for more information.
© EUROCAE, 2016
31
Front Door
Compliance
Approach
(2)
Test to DO- (6)
307A/ED-239 SMS, analysis,
Criteria. Refer similarity
to DO-307 rationale will
Section 4 and be used
Appendix B
No
(3)
Does the IPL meet the
DO-307A/ED-239
Table 407 IPL? (7)
Mitigation and
Control Acceptable
per Appendix A?
Yes
(4)
Update
No
documentation.
(8)
(5) Done. Front Door
Done. Front Door compliance not achieved.
compliance Restrict Usage of PEDs or
achieved consider testing IPL
Consider Testing
© EUROCAE, 2016
32
© EUROCAE, 2016
33
© EUROCAE, 2016
34
© EUROCAE, 2016
35
Front Door similarity from the measured aircraft to the target aircraft can be claimed if:
1. Fuselage is the same or greater size than the measured aircraft and similarly
constructed
a. Similarly, constructed aircraft implies same geometric size of the
fuselage, fuselage material, number and size of
windows/apertures/doors, location of the antennas, and similar avionics
receiver systems.
2. Distance of antenna(s) from major aperture is equal or greater
a. Apertures are similar, that is, number of windows doors, etc. are similar
b. Distance from major aperture to antenna is the same or greater;
therefore, IPL is the same or greater
3. The initial aircraft IPL measurements were performed on an empty aircraft.
a. Although not required, this allows for a “worse case” IPL measurement to
be used for a comparison to other aircraft. IPL measurements performed
in an empty aircraft are assumed to be more severe than measurements
performed in a full completed aircraft. That is, if the initial measurements
of the IPL were performed on an “empty” aircraft (e.g., no seats, carpet,
etc.), adding absorptive material will only improve the IPL.
Based on the paragraphs above, data collected on one airplane can be used to show
Front Door Tolerance to other airplanes provided the aircraft have similar construction,
apertures, antenna locations, and avionics receivers.
NOTE: If one criterion of the paragraph 5.4.1 is affected the similarity approach
may be compromised. A thorough analysis, comparison, and
investigation of each difference needs to be performed.
As always, if a similarity analysis is attempted, early coordination and discussions
between the applicant and the regulatory authority is highly encouraged.
5.5 Supporting Documentation
The type certification applicant may demonstrate aircraft PED tolerance to intentional
transmissions (section 3 of ED-239 / DO-307A), spurious emissions (section 4 of
ED-239 / DO-307A), or both. The Airplane/Rotorcraft Flight Manual (or Supplement)
should provide appropriate instructions regarding the PED tolerance approval of the
aircraft (see section 5 of ED-239 / DO-307A). Any maintenance activities instructions
required to maintain the level of tolerance should be specified in the instructions for
continuing airworthiness (see section 5 of ED-239 / DO-307A). Section CHAPTER 3
provides further information on documentation required to show PED tolerance. Also,
once the Front Door Tolerance assessment has been accomplished maintenance
activities aspects (Section CHAPTER 7) needs to be considered.
5.6 ED-239 / DO-307A IPL TEST METHOD LESSONS LEARNED
ED-239 / DO-307A section 4 and Appendix B provide the methodology for establishing
the IPL measurements and comparing the results to the target IPL. The following
bullets provide some information on finding the initial IPL in aircraft. They are not
prioritized and do not encompass all lessons learned. It is highly encouraged that
experienced RF engineers be involved in the IPL measurements.
1. When using polarized transmit antennas, both horizontal and vertical
measurements should be obtained at every position measured,
2. In accordance with ED-239 / DO-307A Appendix B, the lowest IPL should be
used since this will give the worst case IPL data,
3. Ensure that the measurement is at least 6-10dB above the noise floor of the
Spectrum Analyzer or Network Analyzer,
4. Ensure that the bandwidth of the Spectrum Analyzer or Network Analyzer can
measure the entire test signal transmitted,
5. Do not modulate the transmitted signal,
6. Depending on the transmitted power, do not use the receive antenna for
transmitting as this may damage the Avionics antenna,
© EUROCAE, 2016
36
© EUROCAE, 2016
37
CHAPTER 6
6.1 INTRODUCTION
Back-door coupling includes the IRU, IRC, NIRU, NIRC, CEI, and CCT coupling paths
defined in table below. The table was adapted from ED-118 and ED-239 / DO-307A.
Directly conducted RF susceptibility, that is, IRC, NIRC, CEI and CCT, which could
result from RF emissions conducted from a PED through an in-seat power supply or
data port should be controlled by the in-seat power supply or data port certification
requirements. Per Section 2.2.4 from ED-239 / DO-307A, back-door interference from
spurious PED radiated RF emission (NIRU, NIRC) is unlikely, and does not need to be
addressed for aircraft PED tolerance or system compatibility. Therefore, IRU
(intentional radiated emission direct coupling to equipment units) is the only back-door
coupling susceptibility that needs to be evaluated for PED tolerance.
© EUROCAE, 2016
38
© EUROCAE, 2016
39
1 2 3 4 5 6
Perform A/C HIRF Assess existing
Start Pre-Test Identify Systems Perform Aircraft Prepare for Test Perform A/C Testing
and Technology Risk analysis or test data
Analysis Requiring Evaluation Safety Assessment (if applicable) (if applicable)
Assessment (if applicable)
7 8 9 10 11
Analyze Assess Risk for Establish Continued Implement
Start Post-Test Develop
Interferences Hazardous and Airworthiness Monitoring and End
Analysis Documentation
(if applicable) Major Systems Requirements Control Program
© EUROCAE, 2016
40
© EUROCAE, 2016
41
The safety risk associated with transmitting PEDs is understood throughout the
aviation industry. The committee involved with the publication of this specification has
considerable experience performing PED tests across multiple different aircraft type.
Results have been collected for 4,000 parts with very limited number of observed
interferences. The reason for the limited number of observed interferences is likely
due to the low probability of signals radiating at an affecting frequency, power level,
and illuminating the equipment to its vulnerable side. There are a lot of factors that
have to be lined up to result in equipment upset since the PEDs are not intentionally
radiating the aircraft systems. The types of failures resulting from the interferences
shown during tests are typically not above the Major category. Major failures on an
aircraft are an accepted risk under the system safety process and allow a reduced
safety margin when compared to catastrophic failures. Pilots are well within their
capabilities to handle major failure conditions and still able to land the aircraft safely.
Several of the systems with observed interferences have cross checks and post
appropriate annunciations to warn the pilot for system malfunctions. Furthermore, in-
service experience shows very few PED related incidents over the last 15 years,
despite the proliferation of passenger devices and connectivity system installations
and is further helped by electronic component miniaturization consuming less power.
Even though the safety risk for transmitting PEDs is low it still must be assessed on an
aircraft basis. However, assessing the level of severity and applying a reduction in
requirements is a practical way to address the risk. This tiered approach has been
used in other areas such as HIRF and Lightning as well as damage tolerance and
fatigue evaluation of structure. Catastrophic failures will not be compromised and
therefore require more rigor in the testing and analysis procedures. A reduced set of
requirements can apply to equipment performing functions leading to Hazardous and
Major failures, as well as cockpit voice and flight data recorders. Leveraging previous
applicant experience, in-service history, and operational mitigations can lower the
safety risk for this equipment. To this end, all equipment performing catastrophic
functions must have a detailed assessment involving dedicated analysis and/or test.
Equipment involved with Hazardous or Major failures can be analyzed or tested at the
system level. See following definitions below:
1. System Level Analysis & Testing: This is required for systems and equipment
with Hazardous or Major failure conditions along with cockpit voice recorders
and flight data recorders. Analysis or testing is accomplished at a system level
irrespective of the specific part numbers used in the system. Part number
configuration control is not required. As an example an applicant may
demonstrate PED tolerance for a TCAS system by performing an on-aircraft
test. If the TCAS system does not exhibit interference the TCAS system on that
particular aircraft type can be established as PED tolerant. The applicant or
operator does not need to track the specific part numbers associated with the
various interchangeable parts for systems with Hazardous or Major failure
conditions along with cockpit voice and flight data recorders. The PED risk is
mitigated by performing a system level assessment as well as leveraging
applicant experience, in-service history, RF shielding/protections inherent within
avionic system designs, and taking credit for common design philosophies used
throughout a particular fleet.
2. Part Level Analysis & Testing: This is required for systems and equipment with
Catastrophic failure conditions. Analysis or testing is accomplished at a part
number level. Part configuration control is required. An applicant
demonstrating PED tolerance for a system with Catastrophic failure conditions
would need to collect analysis or test results for each LRU within the system
that have functional failures that could lead to catastrophic failures. Because of
the severity of the risk, it must be mitigated by dedicated test or analysis for all
equipment performing functions that could lead to catastrophic failures.
© EUROCAE, 2016
42
In order to demonstrate PED backdoor coupling tolerance, the following criteria must
be met via test or analysis:
100% of systems supporting functions with Major and/or Hazardous failure
conditions along with cockpit voice and data recorders. When the system can
consist of multiple alternative part numbers then analysis and testing shall be
accomplished for at least one set of components/parts that make up a system.
100% of part numbers supporting functions with Catastrophic failure conditions.
Analysis and testing must be accomplished for each component or part installed
on the aircraft.
See flow chart in FIGURE 6-2 for Backdoor Coupling Assessment Process.
Start
Yes
Full HIRF
Done
Aircraft?
No
Yes
Low Risk
Technology?
No
Implement
Identify Systems
Monitoring and
Requiring Test
Control Program
Yes
Perform Analysis
100% Systems and 100%
and Assess Existing
CAT Parts covered?
Results
No
© EUROCAE, 2016
43
© EUROCAE, 2016
44
© EUROCAE, 2016
45
Catastrophic Failure
System Failure
Function Classification Mitigation
Description Classification
Justification
Loss of HF voice
Aircraft utilize HF
communications would System must be
High Frequency communications when
Hazardous/ increase crew workload assessed. Part
(HF) VHF (Line of Sight)
Major but would not prevent number control is
Transceiver communications is not
continued safe flight and not required.
sufficient.
landing.
Monitors the airspace Operational mitigations
System must be
Traffic collision around an aircraft for are available for TCAS
Hazardous/ assessed. Part
avoidance other aircraft equipped failures; MMEL allows
Major number control is
system (TCAS) with a corresponding dispatch with TCAS
not required.
active transponder inoperative.
Performs flight safety
Provides air data All part numbers
critical functions related
Air Data Inertial (airspeed, angle of including the
to aircraft speed,
Reference attack and altitude) interchangeable
Catastrophic orientation, and position.
System and inertial reference parts must be
Loss of this information
(ADIRS) (position and attitude) assessed and
would prevent continued
information controlled.
safe flight and landing.
Performs flight safety
critical functions by All part numbers
displaying attitude, including the
Electronic Flight Provide Flight Critical heading, airspeed, interchangeable
Catastrophic
Displays Performance Data altitude. Loss of this parts must be
information would prevent assessed and
continued safe flight and controlled.
landing.
© EUROCAE, 2016
46
© EUROCAE, 2016
47
© EUROCAE, 2016
48
© EUROCAE, 2016
49
© EUROCAE, 2016
50
© EUROCAE, 2016
51
© EUROCAE, 2016
52
TABLE 6-5: CW TEST SIGNAL POWER FOR FULL PED TOLERANT AIRCRAFT
EIRP for Zonal EIRP for Zonal EIRP for Local Alternative Field
Test in dBm Test in dBm Test in dBm Strength for
(cabin/cargo) (cockpit) Local Test in V/m
0.00 - 8.00 42 36 36 Refer to ED-239 /
GHz DO-307A
TABLE 3-1
above 8GHz Test not necessary
TABLE 6-6: PULSE TEST SIGNAL POWER FOR FULL PED TOLERANT AIRCRAFT
EIRP for Zonal EIRP for Zonal EIRP for Local Alternative Field
Test in dBm Test in dBm Test in dBm Strength for
(cabin/cargo) (cockpit) Local Test in V/m
0.00 - 8.00 42 36 36 Refer to ED-239 /
GHz DO-307A
TABLE 3-1
above 8GHz Test not necessary
© EUROCAE, 2016
53
Frequency stepping:
After necessary frequency ranges have been determined, the actual test frequencies
have to be defined. Constrains beyond the control of a test engineer may have to be
respected e.g. available test licenses. Ideally the frequency range is divided into test
frequencies analogue to ED-14 / DO-160 with 100 frequencies per decade roughly
logarithmically spaced. This is equivalent to a frequency stepping of 2.3%.
If external constraints prevent this ideal frequency stepping, the test frequencies can
be arranged so that every frequency in the range under test is not more than 2.3%
away from an initially foreseen test frequency. In this case the overall number of test
frequencies shall still be at least 100 per decade. If this is still not possible, other
means of compensation should be considered.
6.3.3 Systems under Test
All aircraft systems relevant for testing shall be completely installed and fully
operational. Their functional tests shall be successfully completed. Also, existing in-
flight entertainment system and other non-essential equipment (e.g. galley equipment)
should be operational. The aircraft should be in a configuration that represents the
conditions during a typical flight.
For sustaining aircraft PED tolerance, it is necessary to record the part numbers of the
aircraft systems under test (major components). The purpose of this is to establish the
aircraft at the time of test and the results of this test which may be applicable for
similar considerations for follow-on installations on other aircrafts. For this application,
major components are defined as the major data processing and data displaying
components, such as those found in the flight deck, equipment bays and equipment
racks. Relays, switches, or other similar devices that typically are not affected by
electromagnetic fields from the established aviation environment are not necessary to
be recorded.
6.3.4 Test Locations
Test locations are those locations where the test antenna is placed in the aircraft.
Define all test locations with position and approximate antenna height above floor
level.
6.3.5 Zonal Test
Place test antennas inside the aircraft as required by the PED zones as indicated
below. If only a limited number of systems require testing and a zonal approach is
chosen, the number of required test positions can be reduced to only the PED zones
containing the systems to be tested, accordingly.
The antenna positions are selected from the following possibilities.
1. Cockpit / Flight Deck
One antenna position about 1m aft of center instruments and 1m above floor is
sufficient to illuminate the full cockpit/flight deck
2. Cabin
In large aircraft, several antenna positions in the cabin are needed to illuminate
the cabin area. It is recommended to select positions in the cabin center aisle
and additional in positions in between as required (approx. every 8m). In
aircraft layouts with two aisles the antenna can be positioned in either of those
aisles or in the middle of both.
In small aircraft one antenna position in the middle of the cabin is sufficient.
Larger cabin sections that are separated by attenuating installations, e.g. by
monuments or walls, shall be tested individually.
In general lavatories and galleys are covered by the cabin test positions.
Repetitive installation of equipment throughout the aircraft length does not
require multiple test positions.
© EUROCAE, 2016
54
3. Cargo Area
Since an empty cargo bay is a highly reflective environment, one antenna test
position in each cargo bay is sufficient to illuminate the whole bay. The center of
the cargo bay should be chosen.
4. Other locations (e.g. crew rest areas)
Testing in crew rest areas should also be considered if they are extra rooms as
well as all other overhead or underfloor facilities.
6.3.6 Local Test
For Local Test the test antenna is placed in a close distance of approximately 10 to
20 cm distance to equipment or system. Out of PED zones 1 meter may also be
considered valid, because the equipment is located outside of the PED zones (see
6.2.3). It may be for example located behind walls or linings, while the test antenna is
placed in the same distance to the wall or lining. It is sufficient to place the test
antenna in PED zones.
6.3.7 Test Equipment
The test setup typically comprises the following equipment:
1. A Signal Generator for creating the test signals determined in section 6.3.2
2. A Power Amplifier for amplifying the test signals to the required level
3. A Power Splitter/Coupler for dividing the signal generator or power amplifier
output into a branch to the test antenna and a branch for the test signal control
and monitoring loop
4. A Test Receiver, generally a spectrum analyzer, for monitoring the test signal
and checking the power level
5. A Test Antenna for radiating the test signal
6. An Electric Field Meter/Probe for monitoring the field strength generated by the
test setup
7. Cables to connect the different components of the test setup
In addition to the setup’s internal signal control and monitoring loop, an electrical field
meter should be used to verify on a sample basis that the field strength generated by
the test setup stays within the correct limits.
Ideally, the antenna types to be used are mono-cone or bi-cone antennas because of
their broadband characteristics exhibited over the required frequency range. Dipole-
type antennas are not recommended because of their narrowband characteristics.
Additionally, low or no directivity is important to approximate an isotropic radiator
scenario.
All transmit power given in this section is the EIRP radiated by the test antenna. EIRP
can be obtained from the forward power compensated by antenna cable loss; antenna
gain of low directivity antennas may be disregarded (i.e. assumed to be 0 dBi),
provided the calibrated gain is within a range of -1 to +4 dBi. The gain simplification is
justified by near-field effects and will mostly provide to an increase of the safety
margin.
If the transmitted power is calibrated in free space conditions in advance, the test can
be performed open loop. FIGURE 6-5 displays an example setup.
© EUROCAE, 2016
55
© EUROCAE, 2016
56
© EUROCAE, 2016
57
© EUROCAE, 2016
58
Any customer requirements may be included in the PASS/FAIL criteria but are not
relevant for showing tolerance on wireless standard immunity.
Alternatively, it is also acceptable to document the findings and assess them within a
post-test safety analysis.
6.3.13.2 Troubleshooting and Mitigations
The output of the aircraft susceptibility testing may produce results which cause some
level of interference displayed by the system under test. Any interferences witnessed
during testing may provide information indicating that a problem could exist under
certain conditions. A safety analysis should be conducted whereby the identified
hazards are analyzed for their likelihood and consequence of occurrence, and
appropriate mitigation is determined. Additionally, the applicant is encouraged to
identify the threshold in which the interference presents itself and determine if the
power level is a realistic situation which might occur onboard the aircraft.
This document depicts a similar decision-making process flow to what was described
in DO-294, beginning with the comprehensive list of interferences discovered in the
testing process, and ends with mitigation of all safety risks, as well as selected
acceptable risks. The process has three outcomes. After assessing the risks and the
effects and evaluating the mitigations, the risk assessment can conclude:
1. The risks are significant and cannot be mitigated, therefore, use of the PED
technology (or technologies) under consideration cannot be allowed on the
subject aircraft.
2. The risks are significant but can be mitigated by specific documented actions,
therefore use of the PED technology (or technologies) under consideration may
be allowed on the subject aircraft, contingent on implementation of the
mitigation actions.
3. There are no significant risks, therefore, use of the PED technology (or
technologies) under consideration may be allowed without further restriction
other than those used for the control of PEDs (in general) on the subject aircraft.
Interference effects apply to the potential failure of a function provided by the aircraft
system(s) that is (are) required for type certification or by operating rules, such that the
consequence of improper functioning would reduce safety margins. The organization
seeking to allow use of PEDs should have, or develop, a process that serves to
identify the outcome(s) of electromagnetic interference with affected system.
The safety analysis step is to assess the risk(s) of the identified failure mode on the
operation of the aircraft. This crucial step involves anticipating what operational
outcomes can be anticipated as a result of an identified EMI interference. The
organization seeking allowance should formulate as extensive a list of potential failure
modes and effects as possible.
It is important to note that multiple potential safety effect outcomes are possible for
any potential emitter-path-victim scenario. Each should be assessed separately. For
example, a single emitter-path-victim interference scenario could produce a warning
light indication and also an un-commanded flight control event. These two effects then
might subdivide to:
1. The level of automation used by the flight deck crew to control the aircraft in
view of a warning signal from the automatic systems
2. Flight path control
3. Crew attention interruption with a corresponding increase in crew workload.
Another variable in assessing risk for an effect is the phase of flight in which it occurs.
The phase of flight information developed in earlier process steps should be used for
this purpose. For example, suppose that the victim in an emitter-path-victim scenario
is the glide slope receiver. This system is critical during the approach phase, but not in
cruise. For this reason, there would be good reason to stipulate this finding as a safety
risk below the sterile cockpit altitude but not above that level. A mitigation of this
unacceptable risk could be to prohibit use of the PED technology below the sterile
cockpit altitude, for example.
© EUROCAE, 2016
59
In some cases two or more mitigating actions will be necessary to fully diminish a
safety issue as indicated by the, notation to “consider mitigations singly and in
combination” for each of the three mitigating paths portrayed. For example, a
hardening action may considerably reduce the risk of interference to a relatively low
probability but not eliminate it from consideration. A companion procedural mitigation
may be required to isolate the effect by phase of flight or by a crew workaround
contained in procedural documentation.
6.3.13.3 Risk Assessment Validation Criteria
Once all testing and analysis options have been executed for a platform the
certification applicant should review the complete data distribution now available to
them. If all systems and required parts have been tested without interference no
further risk classification is required, but if an interference has been found on a
catastrophic failure condition system that cannot be mitigated via section 6.3.8.2, then
the part number must be excluded from the list of acceptable part numbers and
reported to the operator as such. The same applies if an interference is found on a
hazardous/major failure condition system or voice/data recorders, the certification
applicant must blacklist the part and report the information to the operator. All non-
compatible parts with unmitigated interferences must be tracked. If a possibility exists
that the unmitigated interference cannot be isolated to a given manufacture or
application, all part numbers which might be utilized for that system should be
assessed.
6.4 DELIVERABLES
Once the PED backdoor coupling tolerance evaluation described in the previous
sections has been completed, a detailed Tolerance Report should be provided to the
aircraft certification authorities or the approving organization. This report should
contain all the information relevant to the PED tolerance evaluation, including details
of any testing performed, risk assessments included in the evaluation, mitigation
steps, etc. The report should clearly state the technical approval of either a
technology specific demonstration (see section 6.3.1), or a statement of PED
tolerance (see section 6.3.2), as well as any instructions for continued airworthiness
that will be communicated to the operator (see section 7), flight manual modifications,
or modifications to established maintenance practices, such as limitations on aircraft
equipment interchangeability.
© EUROCAE, 2016
60
CHAPTER 7
7.1 INTRODUCTION
The preceding sections of this document provided guidance on methods to
demonstrate that an aircraft is Portable Electronic Device (PED) tolerant through
testing and/or analysis of the front door and back door radio frequency (RF) coupling
effects of PEDs. Consequentially after having demonstrated aircraft PED tolerance,
this section focuses on the definition of guidelines and considerations that operators
should take into account in order to sustain that aircraft PED tolerance. A general
overview on the content of this Sustaining Aircraft PED Tolerance section and the
structure of guidelines provided herein is shown in FIGURE 7-1.
© EUROCAE, 2016
61
© EUROCAE, 2016
62
Section 7.3 and 7.4 of this document addresses in more detail General Maintenance
and Configuration Management considerations.
7.1.4 PED Tolerance and Continued Airworthiness
Airworthiness is restricted to aircraft systems, parts, equipment, etc. installed on an
aircraft and therefore part of the certification. This is independent from PED tolerance
per definition. PED tolerance does not affect the general aircraft airworthiness, which
is considering the aircraft itself, and this aircraft airworthiness is unaffected by PED
radiation exposure from devices brought in by passengers or crew. Therefore, the
audience for the processes described herein (maintenance personnel, crew/flight
crew/flight ops) differs from that of FIGURE 3-2 and FIGURE 3-3 (engineering).
7.1.5 Impact on Configuration Management
The existence of a Configuration-Management System and Process is essential to
ensure the approved configuration for all specific serial-number airframe.
In day-to-day operations it is desirable to the personnel performing aircraft
maintenance or repair tasks to not have to involve their engineering staff and/or
technical decision makers. To achieve this, personnel performing aircraft
maintenance or repair tasks are required to use standard and fail-safe methods to
determine:
That the equipment (and their function as intended), parts and materials are
approved for the aircraft (including, but not limited to PED tolerance
information).
The approved processes and documentation to implement repairs.
The approved processes and documentation to perform maintenance on the
aircraft (including, but not limited to replacement/exchange of equipment,
according to IPC).
Section 7.4 (Configuration Management) of this document addresses this in more
detail.
7.2 ALTERATION CONSIDERATIONS
Continued airworthiness solely addresses the requirements and guidance for
maintaining the aircraft in an approved configuration. This means that any action to
the aircraft leading to a deviation from its current approved configuration would be
considered an alteration. This requires an assessment according to the processes
defined in FIGURE 3-2 or FIGURE 3-3 for the effects the alteration may have in both
front door and back door coupling and is not subject of this section.
The impact on the PED tolerance of an aircraft due to alterations to that aircraft though
will be different for HIRF certified aircraft (as defined in Section 3) than on aircraft that
have partial HIRF certification or non-HIRF certified aircraft (as defined in Section 3).
7.2.1 Additional Alteration Considerations
The following need to be taken into account when considering aircraft alterations and
continued aircraft PED tolerance.
The operator’s aircraft design/system department is responsible to ensure the
availability of valid design approvals and maintenance procedures (the latter
resulting from those approvals) to maintain continued PED tolerance of the
aircraft.
The initial engineering evaluation for the aircraft PED tolerance as covered in
FIGURE 3-2 and FIGURE 3-3.
Operators and their (post holding) maintenance department should use
Section 7 guidance for sustaining aircraft PED tolerance, without the need for
(technical) decision making by maintenance personnel.
© EUROCAE, 2016
63
© EUROCAE, 2016
64
Option 1
During initial front door coupling PED tolerance testing and analysis per
FIGURE 3-2, take into account all parts that are approved for installation on
the aircraft and that may affect the front door test or analysis results. The goal
is to ensure that no approved maintenance procedures or approved parts
could cause the aircraft to no longer be front door coupling PED tolerant.
Option 2
Indicate in the approved aircraft maintenance documents the actions or parts
that have not been determined through testing or analysis to show they do not
negatively impact front door coupling PED tolerance. Performing such
maintenance actions or installing such parts should be followed by steps to
ensure the aircraft is operated with procedures consistent with non-PED
tolerant aircraft.
© EUROCAE, 2016
65
Examples:
• Replacing a door or window seal with an interchangeable seal that has not
been assessed for impact on front door coupling PED tolerance (if special
seals were installed in order to achieve IPL levels).
• Replacing a radio receiver line replaceable unit (LRU)-to-antenna coax
with an interchangeable coax that has not been assessed for impact on
front door coupling PED tolerance.
• Replacing windows, which include flight deck, doors, and passenger cabin
widows with interchangeable windows that have not been assessed for
impact on front door coupling PED tolerance (if special windows were
installed in order to achieve IPL levels).
The operator may need to take into account any subsequent design type
actions and the impact of incorporating such designs could have on the aircraft
PED tolerance. Thus, any subsequent design documentation (Service
Bulletin, Engineering Bulletin, etc.) should support sustained PED tolerance
per se.
When subsequent design documentation is received, the operator should have
established an internal review process to determine the impact this change
may have on aircraft front door coupling PED tolerance. As an alternative, the
operator may request the author of the subsequent design documentation to
perform an assessment and provide a conclusion in their subsequent design
documentation of its impact to aircraft front door PED tolerance.
If a part that can negatively affect the front door coupling path loss has been
changed, then proceed to step 3.
If a part that can negatively affect the front door coupling path loss has not
been changed, then proceed to step 2.
2 If it has been determined that there have been no changes to the aircraft that
could affect the front door coupling path loss, then the aircraft PED tolerance
front door coupling PED tolerance has been maintained.
© EUROCAE, 2016
66
An example is;
Initiate new crew procedures to have PEDs turned off during certain flight
conditions. [ref FAA InFO 13010SUP]
5 If it has been determined that there could be changes to the aircraft that could
negatively affect the front door coupling path loss and unrestricted PED usage
is still desired, then the guidelines defined in FIGURE 3-2 for establishing front
door coupling PED tolerance must be followed.
The type of activity that may need to be performed as defined in FIGURE 3-2
could include:
• An Aircraft Safety Assessment
• An Aircraft Analysis
• An Aircraft Test
© EUROCAE, 2016
67
© EUROCAE, 2016
68
If the full tolerance to the HIRF regulations or Special Conditions are part of
the type certification of the aircraft, including an assessment of the Cockpit
Voice Recorder (CVR) & Flight Data Recorder equipment (FDR), then proceed
to step 2.
If the full HIRF regulations or Special Conditions are not part of the certification
of the aircraft, then proceed to step 4.
2 If the full HIRF regulations or Special Conditions are part of the certification of
the aircraft for the relevant systems with a Major, Hazardous, or Catastrophic
failure conditions, including the CVR and FDR equipment, the requirement to
maintain this protection is established at the time of type certification and is
part of the continued airworthiness of the aircraft.
Therefore, the Operator must maintain the aircraft’s full HIRF certification basis
in order to provide a readily acceptable means for maintaining back door
coupling PED tolerance.
3 If PED tolerance is maintained to FAA and/or JAA/EASA full HIRF regulations
or special conditions, or if it has been determined that there have been no
changes to the aircraft that could affect the back door coupling PED tolerance,
then the aircraft PED tolerance back door coupling PED tolerance has been
maintained.
For partial or non-HIRF certified aircraft, after the initial aircraft PED tolerance
evaluation during a new connectivity system installation or other separate
action, only that equipment that showed unacceptable adverse effects to PEDs
or systems with a Catastrophic failure condition that are not HIRF certified
need to be assessed and tracked.
Option 1
During initial PED back door tolerance testing and analysis, take into account
all parts that are approved for installation on the aircraft and that may affect the
back door test or analysis results. The goal is to ensure that no approved
maintenance procedures or approved parts could cause the aircraft to no
longer be longer back door coupling PED tolerant.
Option 2
Indicate in the approved aircraft maintenance documents, actions or parts that
have not been determined through testing or analysis to show that they do not
negatively impact back door coupling PED tolerance. Performing maintenance
actions or installing such parts must be followed by steps to ensure the aircraft
is operated with procedures consistent with non-PED tolerant aircraft.
With Option 2 some aircraft maintenance actions could negatively impact the
back door coupling PED tolerance. Although some examples below may be
considered aircraft alterations, they are none the less shown for illustrative
purposes.
© EUROCAE, 2016
69
Examples:
• Replacing aircraft equipment that have a Catastrophic failure condition with
an alternate part number (replacement of PED-relevant parts).
• A change to the installation design of the aircraft equipment with a
Catastrophic failure condition (change of PED-relevant system).
• A location change of the aircraft equipment with a Catastrophic failure
condition (relocation of PED-relevant part).
The operator may need to take into account any subsequent design type
actions and the impact of incorporating such designs could have on the aircraft
PED tolerance. Thus, any subsequent design documentation (Service
Bulletin, Engineering Bulletin, etc.) should support sustained PED tolerance
per se. When subsequent design documentation is received, the operator
should have established an internal review process to determine the impact
this change may have on aircraft back door PED tolerance. As an alternative,
the operator may request the author of the subsequent design documentation
to perform an assessment and provide a conclusion in their subsequent design
documentation of its impact to aircraft back door PED tolerance.
If a part that can negatively affect the back door coupling PED tolerance has
been changed, then proceed to step 5.
If a part that can negatively affect the back door coupling PED tolerance has
not been changed, then proceed to step 3.
5 If it has been determined that a maintenance change to the aircraft does
indeed affect the aircraft’s back door coupling PED tolerance, it should be
decided if unrestricted PED usage is still desired.
© EUROCAE, 2016
70
The type of activity that may need to be performed as defined in FIGURE 3-3
could include:
• An Aircraft Safety Assessment
• An Aircraft Analysis
• An Aircraft Test
© EUROCAE, 2016
71
© EUROCAE, 2016
72
© EUROCAE, 2016
73
© EUROCAE, 2016
74
© EUROCAE, 2016
75
© EUROCAE, 2016
76
© EUROCAE, 2016
77
© EUROCAE, 2016
78
CHAPTER 8
MEMBERSHIP
Co-Chairs Organization
Secretary Organization
Nuria RIERA TriaGnoSys GmbH
Members Organization
Mike Airey LSA Electromagnetics
Jamal Aldabbas Etihad Airways
Maqbool Aliani Ligado Networks
Livanna Anderson Federal Aviation Administration
Susan Beard Rockwell Collins, Inc.
Patrick Bloodworth Rosen Aviation
Sven Bogner EuroAvionics Navigationssysteme GmbH & Co. KG
© EUROCAE, 2016
79
© EUROCAE, 2016
80
© EUROCAE, 2016
Appendix A
A-1
APPENDIX A
SMS EXAMPLES
© EUROCAE, 2016
Appendix A
A-2
With special authorization, the localizer system can be also used for low visibility take-
off guidance. Operators may be authorized takeoff minimums with a visibility of 300
feet runway visual range (RVR). For these operations, the airport ground localizer
equipment must meet stringent requirements. The airport facility must also have
certain equipment installed and operating. These include taxiway lead-on lights
serving the takeoff runway; at least two RVR sensors and High Intensity Runway
Lights (HIRL).
NOTE: This assessment does not address low visibility localizer take-off operations. If an
operator chooses to allow PED use during these operations, they must assess the
associated risks. The failure modes for the localizer function remain the same as in
this assessment, however the hazard levels for the failures were not available when
this assessment was completed and must be determined.
Glide Slope3 – The ILS glide slope provides a vertical flight path (nominally 3-degree
descent angle) to a point in the landing zone of the runway. The vertical coverage is
approximately 0.7 degrees on either side of the vertical reference path. The GS data is
displayed to the crew on the primary flight displays. The GS signal is transmitted on a
carrier frequency using a technique similar to that for the localizer. The center of the
glide slope signal is arranged to define a glide path of approximately 3° above
horizontal (ground level). The beam is 1.4° deep (0.7° below the glide-path center and
0.7° above).
The ILS glide slope is produced by a ground-based UHF radio transmitter and
antenna system, operating at a range of 329.30 MHz to 335.00 MHz and is also
modulated with 90 Hz and 150 Hz tones, with a 50 kHz spacing between each
channel. The transmitter is located 750 to 1,250 feet (ft.) down the runway from the
threshold, offset 400 to 600 ft. from the runway centerline.
The pilot (or the autopilot) controls the aircraft so that the glide slope indicator remains
centered on the display to ensure the aircraft is following the glide path to remain
above obstructions and reach the runway at the proper touchdown point (i.e., it
provides vertical guidance).
EMI Failure Modes – Because of the type of signal transmitted by the ILS, the
applicable failure modes are denial of service, degradation of service and misleading
information. The operation of the ILS system usually requires the antennas for
redundant systems (when installed) to be located in close proximity. Due to antenna
placement, it is possible that redundant ILS systems may suffer simultaneous
interference events (common mode failures).
Denial of service is similar to an inoperative localizer ground station. The interfering
PED(s) would prevent the aircraft system from receiving the desired signal. The
aircraft system would indicate or “flag” this failure to include blanking of the ILS
indication of the displays.
Degradation of service is very similar to denial of service. The ILS system may or may
not indicate a failure flag, and may appear as though the reference signal is too weak
to be received (i.e. out of range). A momentary flag, or brief needle deflections, or
both, may occur. This is similar to when obstructions or other aircraft pass between
the transmitting antenna and the receiving aircraft.
Misleading information is when the aircraft system is affected by PED interference in
such a way that the system displays the incorrect information. The ILS data is used
by the flight director displays and autopilot to guide the aircraft on final approach.
When used for a coupled autopilot approach, ILS signals autonomously control the
flight path of the airplane. EMI induced dithering of ILS position data during coupled
approach operations could cause erratic aircraft motion and/or the aircraft to be
improperly positioned during the approach.
3 RTCA/DO-192, Minimum Operational Performance Standards for Airborne ILS Glide Slope
Receiving Equipment Operating within the Radio Frequency Range of 328.6 – 335.4 MHz,
Prepared by SC-153, July 19, 1986
© EUROCAE, 2016
Appendix A
A-3
The localizer and glide slope receivers are susceptible to noise-like interference and to
single-frequency continuous wave (CW) interference from PED emissions. The
localizer and glide slope receivers detect signals in 90 and 150 Hz sidebands around
the carrier frequency and provide guidance signals based on the amplitude ratio for
the 90 and 150 Hz sidebands. Noise-like interference and CW interference result in
errors in the indicated guidance signals. CW interference can also result in the
receiver locking on to the interfering signal instead of the intended carrier signal, again
resulting in indicated guidance signal errors.
EMI Failure Effects – The failure effects associated with ILS systems are listed in
Appendix 2, table reference number 1.00. The failure condition classification (defined
in section 4 of this document) of the ILS systems functions range minor effects to
catastrophic effects depending on the usage and level of integration with other
systems.
A.1.4 VHF Omnirange4 (VOR)
A VOR is a ground-based electronic navaid transmitting 360° azimuth signals on
assigned carrier frequencies ranging from 108.0 to 117.9 MHz. The VOR uses a
reference signal and a variable signal to transmit the bearing information.
The reference signal is a 30 Hz signal radiated omnidirectionally in 360 degrees of
azimuth with a constant phase. The variable signal is also a 30 Hz signal which
rotates around the ground station at a set speed (varies depending on type of VOR)
and the signal phase varies with respect to direction of transmission.
In the composite VOR signal, the carrier is transmitted from one antenna and the
sidebands are transmitted from a separate antenna. In space these two signals will
produce an amplitude modulated signal. A 9960 Hz sub-carrier frequency is deviated
by + or – 480 Hz at a 30Hz rate. Then the frequency modulated sub-carrier is
amplitude modulated on the carrier. Radial information is derived from the difference
in time between the two signals. The resulting phase difference is used by the
airborne equipment.
The VOR function and display varies. An Omni-Bearing Indicator (OBI) is the
traditional VOR indicator used in general aviation. It consists of a knob to rotate an
"Omni Bearing Selector" (OBS), and the OBS scale around the outside of the
instrument, used to set the desired course. The display’s “course deviation indicator"
(CDI) is centered when the aircraft is on the selected course, or gives left/right
steering commands to return to the course. A TO-FROM indicator shows whether
following the selected course would take the aircraft to, or away from the station. On
electronic displays, the Horizontal Situation Indicator (HSI) combines heading
information with the navigation display.
In addition to traditional enroute and approach navigational functions provided by
direct use of VOR, its use has also been incorporated into various flight management
systems (FMS) as a method to update the position accuracy of these systems. The
FMS Area Navigation (RNAV) function provides navigation display based on the
system’s navigation database. Typically, position updates from at least two VOR
stations, or one VOR/DME station is required by these systems to indicate the aircraft
position on a moving map, or display course deviation relative to a waypoint (virtual
VOR station).
EMI Failure Modes – Because of the type of signal transmitted by the VOR, the
applicable failure modes are denial of service, degradation of service and misleading
information. The operation of the VOR system usually requires the antennas for
redundant systems (when installed) to be located in close proximity. Due to antenna
placement, common mode failures for this system are possible.
© EUROCAE, 2016
Appendix A
A-4
© EUROCAE, 2016
Appendix A
A-5
A VDL Mode 2 CSMA transmitter uses feedback from the receiver to determine
whether another transmission is in progress before initiating a transmission. If a
carrier is sensed, the station waits for the transmission in progress to finish before
initiating its own transmission. The VDL Mode 2 uses a 25 kHz spaced VHF channel
of a modulation scheme called Digital 8-Phase Shift Keying (D8PSK) providing a data
rate of 31.5 kilobit/second. This is the highest data rate that can be achieved in a 25
kHz channel with a maximum range of 200 nautical miles. This required the
implementation of VHF digital radios.
VDL Mode 3 uses the D8PSK modulation scheme and the TDMA media access
control scheme. VDL Mode 3 allows for functionally simultaneous voice and data link.
EMI Failure Modes – Because of the type of signal transmitted by the VHF Comm,
the applicable failure modes are denial of service and degradation of service.
Misleading information is not considered a viable failure mode. The VHF antennas are
installed at various locations on the aircraft, typically not in close proximity. This
significantly decreases the likelihood of common mode failures.
Denial of service for VHF Comm can occur in basically two ways. For voice
communications, EMI can cause audible tone interference at a high enough level that
desired communication voice reception may become completely unintelligible. For
voice and data communications, the interfering signal can also block the receipt of the
tuned channel.
Degradation of service is very similar to denial of service. For voice communications,
EMI induced audible tone interference occurs at a lower level or intermittently at a
higher level, rendering desired voice communication reception difficult. For data
communications, the interfering signal can also block or corrupt the receipt of
messages.
Misleading information is not considered a viable failure mode. VHF Comm voice and
data services provide audible and visual data to the pilots. EMI interference cannot
introduce audible or data communications that are contrary to what is intended. While
it may be argued that loss of individual parts of a voice string or blockage of individual
data messages could result in misunderstanding of the desired communication, these
faults are caused by denial or degradation of the receipt of the intended signal, not as
a result of introduction of misleading information.
EMI Failure Effects – The failure effects associated with VHF Comm systems are
listed in Appendix 2, table reference 3.00. The failure condition classification (defined
in section 4 of this document) of the VHF Comm systems functions range from minor
effects to major effects depending on the number of communication systems are
affected and the ability of the crew to select and use another communications system.
A.1.6 Distance Measuring Equipment (DME)
DME is a radio aid for short and medium-distance navigation. It is a secondary type of
radar that allows several aircraft to simultaneously measure their distance from a
ground reference (DME transponder). The distance is determined by measuring the
propagation delay of a radio frequency (RF) pulse that is emitted by the aircraft
transmitter and returned at a different frequency by the ground station.
The DME provides distance to a runway when the DME is collocated with an ILS
station. En route or terminal area distance information is provided when a DME is
collocated with a VOR.
DME equipped aircraft transmit encoded interrogating pulse pairs on the beacon's
receiving channel. The beacon replies with encoded pulse pairs on the airborne
equipment’s receiving channel, which is 63 MHz apart from the beacon’s channel.
The DME transmits and receives in the range 962-1213 MHz. The transmitted pulses
are paired 12 μsec apart, each pulse lasting 3.5 μsec. The pulse-pair repetition rate
ranges from 5 to 150 pulse pairs per second.
The interval between the interrogation emission and the reply reception provides the
aircraft with the slant range information from the ground station; this information
displays on the cockpit indicator.
© EUROCAE, 2016
Appendix A
A-6
The aircraft’s receiver receives and decodes the transponder’s reply. Then it
measures the lapse between the interrogation and reply and converts this
measurement into electrical output signals. The beacon introduces a fixed delay,
called the reply delay, between the reception of each encoded interrogating pulse pair
and the transmission of the corresponding reply.
The transponder periodically transmits special identification pulse groups that are
interwoven with the reply and squitter pulses; the aircraft decodes these special
pulses as Morse tones keyed with the beacon code identification.
EMI Failure Modes – Because of the type of signal transmitted by the DME system,
the applicable failure modes are denial of service and degradation of service.
Misleading is not considered as a viable failure mode. The DME systems may be
susceptible to both broad and narrow band PED interference emissions. The
antennas for redundant systems (when installed) are usually located in close
proximity. Due to antenna placement, common mode failures for this system are
possible.
Denial of service is similar to an inoperative DME system. The interfering PED(s)
would prevent the aircraft system from receiving the desired signal. The aircraft
system would lose the distance indication and may or may not indicate or “flag” this
failure.
Degradation of service shares some of the same failures denial of service. The DME
system would experience data dropout and no replies to a portion of the
interrogations. The PED interference may cause individual data dropouts caused by
disruption to the received pulse signals. The system may or may not indicate an
intermittent failure flag.
Misleading information is not considered a viable failure mode. The information used
by DME systems consist of pulsed pairs that vary in both time and frequency. The
aircraft’s receiver uses a stroboscopic technique to recognize the replies to its own
interrogations among the many other pulses transmitted by the beacon. Each reply to
a DME interrogation is offset in time by 50ms. The distance to the station is then
derived by determining the signal in space transmission time between the
interrogation and the reply paired pulses. In order for a PED EMI to cause misleading
information, it would have to introduce a random combination of pulses that are the
same shape and frequency of the intended signal. The introduced pulse then would
have to be timed with the receipt of the interrogation replay. Finally, the timing of the
pulsed paired separation would have to correlate with the specific equation that would
cause the system to indicate consistent distance information. The probability for this
type of failure to occur is so extremely low that this failure mode is not considered
viable.
EMI Failure Effects – The failure effects associated with DME systems are listed in
Appendix A TABLE A-1. The failure condition classification (defined in section 4 of
this document) of the DME systems functions are minor effects.
A.1.7 Transponder Systems
The avionics transponder systems include Mode A/C Transponder Receiver; Mode S
Transponder Receiver systems; Universal Access Transceiver (UAT) and Automatic
Dependent Surveillance Broadcast (ADS-B)
Mode A/C Transponder – The Mode A/C Air Traffic Control Radar Beacon System
(ATCRBS), is a secondary surveillance radar system developed for use within the air
traffic control system for more precise position reporting of planes. It is used in
conjunction with the primary radar, to determine the presence of planes in the
airspace. ATCRBS supplements this positional information with positive identification
and altitude information, allowing controllers to track each plane more precisely and
efficiently.
© EUROCAE, 2016
Appendix A
A-7
© EUROCAE, 2016
Appendix A
A-8
Degradation of service is very similar denial of service. The transponder system may
or may not indicate a failure flag, The PED interference may cause individual data
dropouts caused by disruption to the received pulse signals.
Misleading information is not considered a viable failure mode. The information used
by transponder systems consist of digital framing pulses. Each reply to a transponder
consisted of a framing pulse, some combination of the possible data pulses, and
another framing pulse. The typical pulse transmit duration is approximately 20ms. In
order for a PED EMI to cause misleading information, it would have to introduce a
random combination of pulses, synchronized in time with the receipt of the
interrogation reply, that is formatted with the exact pulse amplitude and duration that
correlates with the transponder desired information. The probability for this type of
failure to occur is so extremely low that this failure mode is not considered viable.
EMI Failure Effects – The failure effects associated with ILS systems are listed in
Appendix 2, table reference 4.00. The failure condition classification (defined in
section 4 of this document) of the transponder systems functions are major effects.
A.1.8 Traffic Alert and Collision Avoidance System (TCAS) Interrogator Receiver
TCAS is a system that is designed to alert a flight crew to the potential of conflicts with
other aircraft within the area. The system uses the existing ATCRBS system and the
capabilities of Mode S transponders to coordinate with other TCAS equipped aircraft.
TCAS II provides two types of advisories to the flight crew; a traffic advisory which
informs the flight crew that there are other aircraft in the vicinity, and a resolution
advisory that advises the flight crew a corrective or preventative action is required to
avoid an intruder aircraft.
TCAS system processes used to accomplish this function are organized into several
elements. First, the system surveillance sensors collect information about the intruder
aircraft (e.g., its relative position and velocity) and pass the information to the
computer to determine whether a collision threat exists. If a threat is identified, the
system threat-resolution computations determine an appropriate response. If the
intruder aircraft also has TCAS, the response is coordinated through a data link to
ensure that each aircraft maneuvers in a compatible direction.
Collision avoidance maneuvers generated and displayed by TCAS are treated as
advisories to flight crews, who then take manual control of the aircraft and maneuver
accordingly. Pilots are trained to follow TCAS advisories unless doing so would
jeopardize safety.
Surveillance of the air traffic environment is based on air-to-air interrogations
broadcast once per second from antennae on the TCAS aircraft using the same
frequency (1030 MHz) and waveform as ground-based air traffic control sensors.
Transponders on nearby intruder aircraft receive these interrogations and send replies
at 1090 MHz. Two types of transponders are currently in use: Mode S transponders,
which have a Mode S address, and older ATCRBS transponders, which do not have
unique addressing capability. To track ATCRBS intruders, TCAS transmits “ATCRBS-
only all-call” interrogations once per second; all ATCRBS aircraft in a region around
the TCAS aircraft reply. In contrast, Mode S–equipped intruders are tracked with a
selective interrogation once per second directed at that specific intruder; only that one
aircraft replies.
The antennas used by TCAS include a directional antenna that is mounted on the top
of the aircraft and either an omnidirectional or a directional antenna mounted on the
bottom of the aircraft. Most installations use the optional directional antenna on the
bottom of the aircraft. In addition to the two TCAS antennas, two antennas are also
required for the Mode S transponder. One antenna is mounted on the top of the
aircraft while the other is mounted on the bottom. These antennas enable the Mode S
transponder to receive interrogations at 1030 MHz and reply to the received
interrogations at 1090 MHz.
EMI Failure Modes – Because of the type of signal transmitted and received by the
TCAS system, the applicable failure modes systems are denial of service and
degradation of service. Misleading is not considered as a viable failure mode. The
TCAS uses antennas installed on the top and the bottom of the aircraft fuselage.
However, since it is a single system, common mode failure is not relevant in this case.
© EUROCAE, 2016
Appendix A
A-9
© EUROCAE, 2016
Appendix A
A-10
© EUROCAE, 2016
Appendix A
A-11
1 2 3 4 5 6 7 8
NOTE: The tables in Appendix A has been formatted for electronic viewing and
may also be printed on 11" x 17" paper.
© EUROCAE, 2016
Appendix A
A-12
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.02 Loss of ILS function during non-precision XS/DS The crew would take manual control of the aircraft MIN 6, 7 No additional mitigation required due to classification of Acceptable:
approach. Coupled to autopilot. Flight and transition to a visual approach or execute a failure. Pilot will follow appropriate procedures. No additional controls required due to classification of
director flags appear and autopilot missed approach procedure. This would result in a failure. Pilot will follow appropriate procedures.
disengages. slight increase in crew workload as they plan for
an alternate approach procedure
1.03 Misleading information during non- ML This could cause the crew to transition to visual a MIN 6, 7 No additional mitigation required due to classification of Acceptable:
precision approach. Not coupled to approach or execute a missed approach failure. Pilot will follow appropriate procedures. No additional controls required due to classification of
autopilot. procedure. This would result in a slight increase in failure. Pilot will follow appropriate procedures.
crew workload as they plan for an alternate
approach procedure
1.04 Misleading information during non- ML The crew would take manual control of the aircraft MIN 6, 7 No additional mitigation required due to classification of Acceptable:
precision approach. Coupled to autopilot. and transition to a visual approach or execute a failure. Pilot will follow appropriate procedures. No additional controls required due to classification of
routine missed approach procedure. This would failure. Pilot will follow appropriate procedures.
result in a slight increase in crew workload as they
plan for an alternate approach procedure
(continued)
© EUROCAE, 2016
Appendix A
A-13
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.00 ILS (continued) 4.3.4.3 4.3.4.3.3 4.3.4.3.4
1.05 Loss of ILS function during CAT I precision XS/DS This would cause the crew to execute a routine MAJ 6, 7 Option 1. Acceptable: Adoption of the mitigations
approach. Not coupled to autopilot and missed approach procedure. This would result in Front door path loss must be assessed to ensure the (Green) provide an acceptable level of
flight director flags appear. an increase in crew workload. system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. risk for allowing operation of
and GS systems. PEDs during this operation.
The mitigations for denial of
Option 2. Acceptable with mitigation: service, degradation of
Do not allow the use of PEDs during these approaches. (Yellow) service and misleading
Operator procedures to have passengers shut off information are driven to the
devices. most severe hazard
Option 3. Acceptable with mitigation: classification for that
operation.
Aircraft system and pilot function, such as: (Yellow)
A. Crew cross checks using the radio altimeter and Operator has procedures and equipment to assess
altimeter validates that the aircraft height at the final aircraft position along course of approach.
approach fix is correct.
B. Use of TAWS (EGPWS) based alerting would alert the
pilots to terrain and obstacles (as equipped).
C. Crew cross checks using a FMS and/or GPS display of
the desired track (lateral position) for the aircraft.
Improper function of an ILS system would result in the
aircraft not being on course, and the FMS and/or GPS
display would show the discrepancy.
D. Crew cross checks using VOR radial to cross check
lateral position on approach.
E. Monitoring other information sources, including but
not limited to, marker beacon, DME, timing from fixes, etc.
to validate position on approach.
Option 4. Acceptable:
Do not allow CAT I approaches. (Green)
Remove CAT I operation from OPS Spec.
(continued)
© EUROCAE, 2016
Appendix A
A-14
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.00 ILS (continued) 4.3.4.3 4.3.4.3.3 4.3.4.3.4
1.06 Loss of ILS function during CAT I precision XS/DS The crew would assume manual control of the MAJ 6, 7 Option 1. Acceptable: Adoption of the mitigations
approach. Flight director flags appear and aircraft and execute a routine missed approach Front door path loss must be assessed to ensure the (Green) provide an acceptable level of
autopilot disengages. procedure. This would result in an increase in crew system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. risk for allowing operation of
workload. and GS systems. PEDs during this operation.
The mitigations for denial of
Option 2. Acceptable with mitigation: service, degradation of
Do not allow the use of PEDs during these approaches. (Yellow) service and misleading
Operator procedures to have passengers shut off information are driven the
devices. most severe hazard
classification for that
Option 3. Acceptable with mitigation:
operation.
Aircraft system and pilot function, such as: (Yellow)
A. Crew cross checks using the radio altimeter and Operator has procedures and equipment to assess
altimeter validates that the aircraft height at the final position along course of approach.
approach fix is correct.
B. Use of TAWS (EGPWS) based alerting would alert the
pilots to terrain and obstacles (as equipped).
C. Crew cross checks using a FMS and/or GPS display of
the desired track (lateral position) for the aircraft.
Improper function of an ILS system would result in the
aircraft not being on course, and the FMS and/or GPS
display would show the discrepancy.
D. Crew cross checks using VOR radial to cross check
lateral position on approach.
E. Monitoring other information sources, including but
not limited to, marker beacon, DME, timing from fixes, etc.
to validate position on approach.
Option 4. Acceptable:
Do not allow CAT I approaches. (Green)
Remove CAT I operation from OPS Spec.
(continued)
© EUROCAE, 2016
Appendix A
A-15
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.00 ILS (continued) 4.3.4.3 4.3.4.3.3 4.3.4.3.4
1.07 Misleading information during CAT I ML May result in no action taken by the crew until MAJ 6, 7 Option 1. Acceptable: Adoption of the mitigations
precision approach. Not coupled to visual conditions were obtained. This would Front door path loss must be assessed to ensure the (Green) provide an acceptable level of
autopilot. require crew to initiate a go-around procedure. system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. risk for allowing operation of
This would result in an increase in crew workload and GS systems. PEDs during this operation.
and a reduction in safety margin. The mitigations for denial of
Option 2. Acceptable with mitigation: service, degradation of
Do not allow the use of PEDs during these approaches. (Yellow) service and misleading
Operator procedures to have passengers shut off information are driven to the
devices. most severe hazard
classification for that
Option 3. Acceptable with mitigation: operation.
Aircraft system and pilot function, such as: (Yellow)
A. Crew cross checks using the radio altimeter and Operator has procedures and equipment to assess
altimeter validates that the aircraft height at the final position along course of approach.
approach fix is correct.
B. Use of TAWS (EGPWS) based alerting would alert the
pilots to terrain and obstacles (as equipped).
C. Crew cross checks using a FMS and/or GPS display of
the desired track (lateral position) for the aircraft.
Improper function of an ILS system would result in the
aircraft not being on course, and the FMS and/or GPS
display would show the discrepancy.
D. Crew cross checks using VOR radial to cross check
lateral position on approach.
E. Monitoring other information sources, including but
not limited to, marker beacon, DME, timing from fixes, etc.
to validate position on approach.
Option 4. Acceptable:
Do not allow CAT I approaches. (Green)
Remove CAT I operation from OPS Spec.
(continued)
© EUROCAE, 2016
Appendix A
A-16
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.00 ILS (continued) 4.3.4.3 4.3.4.3.3 4.3.4.3.4
1.08 Misleading information during CAT I ML May result in no action taken by the crew until HAZ 6, 7 Option 1. Acceptable: Adoption of the mitigations
precision approach. Coupled to autopilot. visual conditions were obtained. The crew would Front door path loss must be assessed to ensure the (Green) provide an acceptable level of
assume manual control of the aircraft and initiate system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. risk for allowing operation of
a go-around procedure (or initiate an auto-pilot and GS systems. PEDs during this operation.
TO/GA). This would result in an increase in crew The mitigations for denial of
workload and a reduction in safety margin. Option 2. Acceptable with mitigation: service, degradation of
Do not allow the use of PEDs during these approaches. (Yellow) service and misleading
Operator procedures to have passengers shut off information are driven to the
devices. most severe hazard
classification for that
Option 3. Acceptable with mitigation: operation.
Aircraft system and pilot function, such as: (Yellow)
A. Crew cross checks using the radio altimeter and Operator has procedures and equipment to assess
altimeter validates that the aircraft height at the final position along course of approach.
approach fix is correct.
B. Use of TAWS (EGPWS) based alerting would alert the
pilots to terrain and obstacles (as equipped).
C. Crew cross checks using a FMS and/or GPS display of
the desired track (lateral position) for the aircraft.
Improper function of an ILS system would result in the
aircraft not being on course, and the FMS and/or GPS
display would show the discrepancy.
D. Crew cross checks using VOR radial to cross check
lateral position on approach.
E. Monitoring other information sources, including but
not limited to, marker beacon, DME, timing from fixes, etc.
to validate position on approach.
Option 4. Acceptable:
Do not allow CAT I approaches. (Green)
Remove CAT I operation from OPS Spec.
(continued)
© EUROCAE, 2016
Appendix A
A-17
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.00 ILS (continued) 4.3.4.3 4.3.4.3.3 4.3.4.3.4
1.09 Loss of ILS function during CAT II/III XS/DS This would cause the crew to execute go-around MAJ 6, 7 Option 1. Acceptable: (See remarks) The mitigations for denial of
precision approach. Not coupled to procedure. This would result in an significant Front door path loss must be assessed to ensure the (Green) service, degradation of
autopilot and flight director flags appear. increase in crew workload and decrease in safety system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. service and misleading
margin. and GS systems. information are driven to the
most severe hazard
Option 2. Acceptable with mitigation: (See remarks) classification for that
Do not allow the use of PEDs during these approaches. (Yellow) operation.
Operator procedures to have passengers shut off (See table reference numbers
devices. 1.11 and 1.12)
Option 3. Acceptable: (See remarks)
Do not allow CAT II/III approaches. (Green)
Remove CAT II/III operation from OPS Spec.
1.10 Loss of ILS function during CAT II/III XS/DS The crew would assume manual control of the MAJ 6, 7 Option 1. Acceptable: (See remarks) The mitigations for denial of
precision approach. Flight director flags aircraft and execute a go-around procedure. This Front door path loss must be assessed to ensure the (Green) service, degradation of
appear and autopilot disengages. would result in an significant increase in crew system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. service and misleading
workload and decrease in safety margin. and GS systems. information are driven to the
most severe hazard
Option 2. Acceptable with mitigation: (See remarks) classification for that
Do not allow the use of PEDs during these approaches. (Yellow) operation.
Operator procedures to have passengers shut off (See table reference numbers
devices. 1.11 and 1.12)
Option 3. Acceptable: (See remarks)
Do not allow CAT II/III approaches. (Green)
Remove CAT II/III operation from OPS Spec.
(continued)
© EUROCAE, 2016
Appendix A
A-18
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
1.00 ILS (continued) 4.3.4.3 4.3.4.3.3 4.3.4.3.4
1.11 Misleading information during CAT II/III ML May result in no action taken by the crew until CAT 6, 7 Option 1. Acceptable with only the listed mitigations: The mitigations for denial of
precision approach. Not coupled to visual conditions were obtained. This may not Front door path loss must be assessed to ensure the (Green) service, degradation of
autopilot. provide the crew sufficient time to initiate a go- system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. service and misleading
around or cause the aircraft to blunder in its and GS systems. information are driven to the
approach. This would result in an significant most severe hazard
increase in crew workload and significant Option 2. Acceptable with only the listed mitigations: classification for that
decrease in safety margin. Do not allow the use of PEDs during these approaches. (Yellow) operation.
Operator procedures to have passengers shut off
devices.
1.12 Misleading information during ML May result in no action taken by the crew until CAT 6, 7 Option 1. Acceptable with only the listed mitigations: The mitigations for denial of
CAT II/III precision approach. Coupled to visual conditions were obtained. The crew could Front door path loss must be assessed to ensure the (Green) service, degradation of
autopilot. emergency disconnect the autopilot, assume system meets requirements of DO-294/DO-307 for the LOC Possess data that shows system compliance. service and misleading
manual control of the aircraft (or initiate an auto- and GS systems. information are driven to the
pilot TO/GA) and may not provide the crew most severe hazard
sufficient time to initiate a go-around or cause the Option 2. Acceptable with only the listed mitigations: classification for that
aircraft to blunder in its approach. This would Do not allow the use of PEDs during these approaches. (Yellow) operation.
result in an significant increase in crew workload Operator procedures to have passengers shut off
and decrease in safety margin. This would result in devices.
an significant increase in crew workload and Option 3. Acceptable with only the listed mitigations:
significant decrease in safety margin. Do not allow CAT II/III approaches. (Green)
Remove CAT II/III operation from OPS Spec.
(continued)
© EUROCAE, 2016
Appendix A
A-19
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
2.02 Display of hazardously misleading VOR ML During non-precision VOR approach, crew could HAZ 3, 4, 6, Option 1 Acceptable with mitigation:
radio navigation information to both pilots. unknowingly lose accurate information relevant to 7 - Hazardous system classification is only applicable to (Yellow) Operator procedures to have passengers shut
the aircraft’s location and flight path. This could aircraft that use VOR as primary navigation source and off devices.
result in disorientation near the ground and cause possess no other navigation reference.
a considerable workload increase for the crew. - Front door path loss may be assessed to ensure the (Green) Possess data that shows system compliance
system meets requirements of DO-294/DO-307 for the LOC
and GS systems.
3.00 VHF Voice Comm, VDL Modes 2&3 4.3.4.5. 4.3.4.5.2 4.3.4.5.3.
3.01 XS/DS- Loss of primary communications XS/DS Communications must be transferred through an MIN 2, 3, 4, No additional mitigation required due to classification of Acceptable:
radio, with secondary VHF COM functioning alternate radio that uses a different antenna 6, 7, 8 failure. Pilot will follow appropriate procedures. No additional controls required due to classification of
properly location. The crew workload may slightly increase failure. Pilot will follow appropriate procedures.
until the problem is solved.
3.02 Loss of all primary communications radios XS/DS When the flight crew realizes communication has MAJ 2, 3, 4, Pilot will follow appropriate procedures. No additional Acceptable with mitigation:
been lost, the appropriate procedure will be 6, 7, 8 mitigation required due effect of failure. Pilot will follow appropriate procedures. No additional
followed to a safe landing. This would result in a controls required due effect of failure.
significant increase in workload to the crew.
3.03 Loss of data linked communications XS/DS Crew obtains data via voice or other comm MIN 2, 3, 4, No additional mitigation required due to classification of Acceptable:
methods. Slight increase in crew workload. 6, 7, 8 failure. Pilot will follow appropriate procedures. No additional controls required due to classification of
failure. Pilot will follow appropriate procedures.
3.04 Loss of Controller-Pilot Data Link XS/DS Loss of CPDLC capability would result in use of MIN 2, 3, 4, No additional mitigation required due to classification of Acceptable:
Communications (CPDLC) contingency procedures established in the 6, 7, 8 failure. Pilot will follow appropriate procedures. No additional controls required due to classification of
applicable geographic region. Slight increase in failure. Pilot will follow appropriate procedures.
flight crew workload due to reversion to voice
communication.
(continued)
© EUROCAE, 2016
Appendix A
A-20
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
(continued)
© EUROCAE, 2016
Appendix A
A-21
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
(continued)
© EUROCAE, 2016
Appendix A
A-22
XS = Denial of service
(As certificated)
Phase of flight
DS = Degradation of signal
ML = Misleading information
Hazard Class
Failure Residual Risk: (See section 8.0)
Table Mode and
Ref. Avionics System Function Codes Effect of PED interference on aircraft operation Mitigations Recommended Controls Remarks
© EUROCAE, 2016
Appendix B
B-1
APPENDIX B
2X.1309
6 This AC was used to expand the failure condition categories to include “hazardous” failures.
FAA Advisory Circular (AC) 25.1309-1A - System Design and Analysis may also be used.
© EUROCAE, 2016
Appendix C
C-1
APPENDIX C
The following tables provide a step by step process of during which phases of flight
the T-PED can or cannot be used for existing aircraft that want to expand the use of
PEDs. If a new wireless service is installed then it must meet ED-239 / DO-307A, ref
sections 3.5.
C.1 FAA Operator Guidance
This aid to operators is applicable to Title 14 of the Code of Federal Regulations
(14 CFR) part 119 certificate holders and 91 subpart K (91K) program managers.
When followed, it provides an acceptable method of tolerance for 14 CFR part 91
section (§) 91.21, part 121 § 121.306, part 125 § 125.204, or part 135 § 135.144, as
applicable, when allowing expanded use of PEDs for various phases of flight. The use
of the terms “aircraft operator(s)” and “operator” throughout this document is
applicable to operations conducted under 14 CFR parts 91K, 121, 125 and 135.
C.1.1 Back Door Interference Assessment Summary
© EUROCAE, 2016
Appendix C
C-2
© EUROCAE, 2016
Appendix C
C-1
1. Find the type certificate data sheet (TCDS)1 for the make and model aircraft being assessed.
2. Check the Type Certification basis for your aircraft make and model. Does it include Amendment Nos. 23–57,
25–122, 27–42, or 29–49 (by aircraft certification part as applicable)? Is the associated amendment number
captured in a “through” statement? (e.g., 25-109 through 25-124) (See example 1, next page)
a. YES - The aircraft has incorporated the necessary HIRF certification levels. No further review necessary.
Done.
b. NO – Proceed to step 3
Tip – Use the search function in Adobe to help locate the necessary requirements. We suggest that you look for
key words such as “basis” or (25-122) to locate the text in the document. Once located, check the section’s
applicability to ensure the associated aircraft is addressed.
3. Search the TCDS for HIRF special conditions. Is there one listed for your make and model? (See example 2,
next page)
a. YES – Record the special condition number. Done, verify. Look-up the special condition2. Review the
special condition to ensure it covers electrical and electronic systems.
If not, go to step 5.
b. NO – Proceed to step 4.
Tip –Suggest that you look for key words such as “high” or “lightning” to locate the text in the document. Once
located, check the section to ensure the associated aircraft is addressed.
Tip - Special conditions that cover these systems have also been called “Protection From Lightning and Unwanted
Effects of Radio Frequency (RF) Energy” If a HIRF search fails, try this approach
4. Is there a HIRF Special Condition applicable to aircraft electrical and electronic systems for your make and
model aircraft? (use same search tips)
a. YES - Record the special condition number and return to the TCDS for your make and model. Search the TCDS
to verify that the special condition is listed for your aircraft.
b. NO – Proceed to step 5.
5. Is there a HIRF Special Condition applicable to specific critical electrical or electronic systems on your make and
model aircraft? (use same search tips)
a. YES – record special condition number(s) and the system(s) covered. Proceed to step 6.
b. NO – Proceed to step 7
6. Review your critical aircraft systems to determine if any electrical or electronic systems were certified with a
Hazard Class (failure condition) of ‘catastrophic’. Does a special condition cover your critical system(s)?
a. YES – The critical systems are adequately covered for PED tolerance to back-door interference. Done.
b. No – Proceed to step 7.
Tip – Some special conditions are applicable for a change to the TC when it is revised to include another model
incorporating the same novel or unusual design feature. If your TCDS lists a special condition and the language of
the special condition does not specify your model, look for language in the special condition that applies it to future
changes. (See example 3, page 13)
7. The critical systems for your aircraft cannot be determined to be PED tolerant to back door interference based
on HIRF certification. Testing and analysis for critical systems (those certified with a catastrophic failure effect) to
ensure PED tolerance to back-door interference must be (or have been) accomplished.
Aircraft Make/Model Examples:
Example 1: HIRF as part of standard aircraft certification basis:
TDCS Excerpt, Gulfstream VI. Link3
© EUROCAE, 2016
Appendix C
C-2
NOTE 1: http://rgl.faa.gov/Regulatory_and_Guidance_Library/rgMakeModel.nsf/MainFrame?OpenFrameset
NOTE 2: http://rgl.faa.gov/Regulatory_and_Guidance_Library/rgSC.nsf/MainFrame?OpenFrameset
NOTE 3: http://rgl.faa.gov/Regulatory_and_Guidance_Library/rgMakeModel.nsf/0/92fadb614112af7686257bcf00
57bccd/$FILE/ T00015AT_Rev_4.pdf
NOTE 4: http://rgl.faa.gov/Regulatory_and_Guidance_Library/rgSC.nsf/0/139AA0B66F69B63D86256BE300
69EC41 ?OpenDocument&Highlight=25-anm-132
© EUROCAE, 2016
Appendix C
C-3
STEP 1: Back-Door Tolerance STEP 2: Front Door Tolerance STEP 3. Acceptable Phases
of Flight
Which rows in Section 1.1, Back Which rows in Section 1.2, Front
Door Interference, are checked Door Interference, are checked Tally the results. A ‘YES” in
Yes? Yes? STEP 1 and a “YES” in STEP
A ‘YES’ to any A ‘Yes’ to A ‘YES’ to A ‘Yes’ to 2means that this phase of
of the ONLY Questions 1 or ONLY operations is permitted. See
Questions 1 – Question 5 will 2 results in a Question 3 will notes if your aircraft results in
4 results in a require YES, below: require risk either a ‘NO’ or ‘LIMITED’.
YES, below for additional assessment,
all phases of assessment or and Check permitted phases
operation: testing for mitigations / below:
certain phases controls.
of operation:
Yes Yes Yes Yes Parked: Passenger
boarding and seating to
door close.
© EUROCAE, 2016
Appendix C
C-4
© EUROCAE, 2016
Appendix C
C-5
© EUROCAE, 2016
Appendix C
C-6
© EUROCAE, 2016
Appendix C
C-7
© EUROCAE, 2016
Appendix C
C-8
© EUROCAE, 2016
Appendix C
C-9
© EUROCAE, 2016
Appendix C
C-10
© EUROCAE, 2016
Appendix C
C-11
© EUROCAE, 2016
Appendix C
C-12
© EUROCAE, 2016
Appendix C
C-13
© EUROCAE, 2016
Appendix C
C-14
© EUROCAE, 2016
Appendix C
C-15
© EUROCAE, 2016
Appendix C
C-16
© EUROCAE, 2016
Appendix D
D-1
APPENDIX D
Back Door Coupling and Front Door Coupling requirements comply with [4, 5, 6 of RTCA / EUROCAE
DO-363 / ED-130A and / or Sections 3 and 4 of ED-239 / DO-307A].
[For HIRF tolerant aircraft …]
Back Door Coupling requirements are fulfilled by
[meeting FAA HIRF requirements according to …
[14 CFR 23.1308, Amdt 57 (Sep 2007) /
14 CFR 25.1317, Amdt 122 (Sep 2007) /
14 CFR 27.1317, Amdt 42(Sep 2007) /
14 CFR 29.1317, Amdt 49 (Sep 2007)]
and / or
EASA HIRF Special Condition (SC) according to …
[CS 23.1308, Amdt 23/4 (Jul 2015) /
CS 25.1317, Amdt 25/17 (Jul 2015)]
and / or
EASA Certification Review Item (CRI) [number] assigned to EASA project [number] .
as its initial TC. ]
Therefore, no additional back door coupling consideration is needed by the operator.
© EUROCAE, 2016
Appendix D
D-2
Based on the above PEDs/transmitting PEDs can be used in the flight deck, the cabin and the cargo
area.
[The tolerance of the use of PEDs/transmitting PEDs are declared with the following Notes /
Limitations / Recommendations: …]
The tolerance with the above does not constitute an operational approval. Such authorization must be
obtained by the operator from appropriate authorities.
It is the responsibility of the operator to sustain and operate the aircraft in a configuration that will allow
the continued safe use of (transmitting) PEDs within the operational limitations of the installed wireless
service(s).
For some guidance Section 7 of RTCA / EUROCAE DO-363 / ED-130A can be referred to.
[Name of the Company / Certification Applicant providing this letter to the operator] will also provide
aid to the operator in the form of an approved [Non-PED / PED] tolerant equipment list and through
regular updates of [that Non-PED / PED] tolerant equipment list [and/or the aircraft Illustrated Parts
Catalog / …].
Sincerely,
© EUROCAE, 2016
Appendix D
D-3
Subject: Aircraft PED Tolerance Statement to the installed and certified WiFi service
‘Unlimited Bandwidth’ on Timbuktu Airline’s long-haul fleet B747-400
Based on the above PEDs/transmitting PEDs can be used in the flight deck, the cabin and the cargo
area.
The tolerance of the use of PEDs/transmitting PEDs are declared with the following Notes:
1. In the flight deck and in the corridor of the flight deck privacy area, the use of transmitting
PEDs is restricted to Wi-Fi only (use of GSM, 3G, 4G, and other standards is not permitted in
this area).
The tolerance with the above does not constitute an operational approval. Such authorization must be
obtained by the operator from appropriate authorities.
It is the responsibility of the operator to sustain and operate the aircraft in a configuration that will allow
the continued safe use of (transmitting) PEDs within the operational limitations of the installed wireless
service(s). There is additional guidance in Section 7 of RTCA / EUROCAE DO-363 / ED-130A.
The PED Company will also provide the operator with an approved Non-PED tolerant equipment list.
Any STC updates in the future that affect the Non-PED tolerant equipment list will be made available.
Sincerely,
© EUROCAE, 2016
Appendix E
E-1
APPENDIX E
The appendix E of ED-130A / DO-363 is equivalent to the Annex 2 of the ED-130. Its
purpose is to outline the principle how test levels used in section six of the main
document have been derived.
The use of wireless communication inside the aircraft cabin creates an internal
electro-magnetic, RF environment. This annex evaluates the EMI potential of several
wireless communication signals, including those intentionally emitted by transmitting
personal electronic devices (transmitting PED).
From Specific values general envelopes and maximum needed values are derived for
qualifying non-HIRF aircraft against the impact transmitting PED or using associated
radio standards.
For this purpose, general features of radio communication signals are investigated.
The EMI potential is characterized with the help of EMI threat criteria. They reflect the
time domain representation and further radio signal characteristics such as occupied
frequency spectrum, modulation techniques, number of parallel transmitting portable
mobile devices and transmission power levels. The threat criteria are introduced
before the evaluation of the different radio communication standards starts. The
following communication standards are evaluated:
Professional or
Application
Mobile Phone Data Communication Personal Mobile
Radio
Access Schemes
TDMA (time division GSM, i-DEN, IS-136 IEEE 802.11a, b, g, TETRA
multiple access) DAMPS, PDC, PHS ZigBee
CSMA (carrier (IEEE 802.15.4)
sense multiple
access)
CDMA (code UMTS, NAMPS, MOBITEX II, TETRAPOL, EDACS,
division multiple AMPS, CDMAone, Bluetooth Project25/APCO25,
access) CDMA2000 PMR446, MPT-1327
FDMA (frequency
division multiple
access)
© EUROCAE, 2016
Appendix E
E-2
This appendix also introduces an envelope for the entire frequency range between
300 MHz and 6 GHz, with no gaps, even for frequencies where no T-PED standards
are in use, which applies for laboratory equipment qualification. For field strength
based qualification two levels are proposed for CW-like standards. The first (higher
level) is valid for equipment, which may be located in close proximity (up to 0.1m) to
the T-PED. The lower field strength level is valid for equipment which is located at a
distance greater than 1m to the T-PED. The same applies for the TDMA-like pulse
modulated waveform. In addition, for both test waveforms, the transmitted power
applicable for testing is given.
An additional feature of the internal electromagnetic transmitter environment is that the
worst-case illumination of equipment by T-PEDs is a very local phenomenon, i.e. it’s
effects extend only to the close vicinity of the device, in contrast to the EMI impact of,
for example, the EMI external environment that includes high intensive radiated fields
(HIRF). However, the HIRF qualification of an aircraft is acceptable to identify an
aircraft being tolerant against PED backdoor effects (See ED-239 / DO-307).
E.1 EMI CHARACTERIZATION OF RADIO COMMUNICATION STANDARDS
Every standard allocates frequency bands that may be used by the given technology.
Almost all technologies employ frequency division duplex (FDD) signals, i.e. use
paired bands for uplink and downlink. Some wireless communication standards also
use the time division duplex method (TDD), separating uplink and downlink in
predetermined timeslots. Of primary interests for EMI in avionics from internal sources
is the uplink spectrum because this is the transmission that will be generated within
the aircraft, by the T-PED. The downlink spectrum becomes of interest, if a pico-cell is
to be installed on board the aircraft.
The communication standards result in a set of signal waveforms, which represent
their EMI potential sufficiently and can be separated in groups by modulation
techniques. There are four mainly used access schemes: TDMA, CSMA, FDMA and
CDMA scheme. Of these, the main modulation techniques are FM, Phase Modulation,
AM or pulse modulation.
Transmitting Power and Field Strength
For the given standards, usually either the maximum ERP (effective radiated power)
or the EIRP (effective isotropic radiated power) are specified, the latter being related
to the electric field strength (E) and distance from the antenna (r) in the far field
(distances greater that one wavelength) as:
EIRP 1
E
4 r
Where = 120π Ω is the impedance of free space. This simplification safely covers
worst case levels.
Criteria for Assessment of the EMI Potential of Radio Communication Standards
The different modulation schemes can be categorized into three classes. They
represent different categories of radio signals EMI potential, acknowledging that AM or
FM, or PM signals pose different interference risks to electronic circuitry and
installations. The criteria defined are based on the following assumptions:
The EMI threat s linked with sudden signal amplitude changes, generally increasing
along with the signal amplitude’s time derivative. Signal amplitude changes occur due
to so-called access schemes of a wireless standard. These access schemes can be
separated into TDMA, FDMA or CDMA. TDMA results in PM with fast changes of the
time derivative. FDMA and CDMA do not affect the signal amplitude.
Some amplitude modulations such as QAM or AM cause amplitude changes but still
no pulse modulation, since these changes are less significant than pulse modulation
for the EMI potential.
© EUROCAE, 2016
Appendix E
E-3
© EUROCAE, 2016
Appendix E
E-4
EMI characteristic
For each of the modulations the EMI potential is determined by the pulse modulated
signal structure caused by the TDMA or CSMA/CA access schemes (depending on
the standard), which cause a rapid change of the signal amplitude. Therefore, all
these standards can be characterized by EMI criteria A, B and C. Inside the pulses,
they are all phase modulated, so in a representative test signal for these technologies,
it’s not necessary to implement the modulation type, since it does not affect the EMI
characteristic because it causes no abrupt amplitude changes.In the case that
amplitude modulation is also present along with the access scheme, it is expected for
the access scheme to cover the amplitude modulation.
Radiated power and resulting waveforms
The electric field strength values used in the calculations for the test signal are the
values found at a distance of 0,1m as well as the standard 1m distance for all
standards. A safety margin has been applied for the determination of the levels. For
each modulation an EMI test signal can be represented by a pulse modulated signal
with the corresponding PRF and duty cycle. All these results are summarized.
© EUROCAE, 2016
Appendix E
E-5
TABLE E-3: PULSE, AMPLITUDE MODULATED STANDARDS
TDMA (pulse-, amplitude modulated) Mobile Phone Standards
Downlink Frequency EMI Field strength (r=0.1m) Field strength (r=1m) PRF
Wireless Standard Modulation type Uplink Frequency (MHz) EIRP (W) Duty cycle N. of channels
(MHz) Character (V/m) (V/m) (Hz)
460,4 – 467,6 (GSM400)
450,4 – 457,6 (GSM400) 9 (GSM400)
869 – 894 (GSM850)
824 – 849 (GSM850) 77 (GSM) 7,7 (GSM) 2 (GSM) 32 (GSM850)
GMSK 921 – 960 PM
GSM 876 – 915 (GSM900+E+R) 55 (PCS1900, 5,5 (PCS1900, 1 (PCS1900, 217 12,5% (0,576 ms) 32 (GSM900+E+R)
(EDGE: 8PSK) (GSM900+E+R) (EMI A, B, C)
1710 – 1785 (DCS1800) DCS1800) DCS1800) DCS1800) 94 (GSM1800)
1805 – 1880 (DCS1800)
1850 – 1910 (PCS1900) 75 (GSM1900)
1930 – 1990 (PCS1900)
806 – 825 851 – 870 11,1 16,7%
PM, AM
i-DEN 16QAM 896 – 901 935 – 940 77 (max) 7,7 (max) 2 (max/usual) 22,2 33,3% (15 ms) 40/MHz
(EMI A, B, C)
1453 – 1465 1501 – 1513 33,3 50%
869 – 894 (IS-136 and
IS-136/ 824 – 849 (IS-136 and IS-54) PM 55 (AMPS) 5,5 (AMPS) 1 (AMPS) 16,7% (3,33 ms) 832
/4-DQPSK IS-54) 50
TDMA/DAMPS 1850 – 1910 (IS-136) (EMI A, B, C) 42,4 (TDMA) 4,24 (TDMA) 600mW (TDMA) 33,3% (6,66 ms) 1800
1930 – 1990 (IS-136)
832 – 834
887 - 889
838 – 846 141 (max)
893 – 901 PM 14,1 (max) 6,6 (max) 16,7% (3,33 ms)
PDC DQPSK 860 – 885 55 (usual) 50 1600
915 – 958 (EMI A, B, C) 5,5 (usual) 1 (usual) 33,3% (6,66 ms)
810 – 828
1477 – 1501
1429 – 1453
PM
PHS /4-DQPSK 1895 – 1918 7,8 (max) 0,8 (max) 20 mW (max) 200 12,5% (0,625 ms) 300
(EMI A, B, C)
UMTS TDD
824 - 849, 1850 – 1900 PM 77 (max) 7,8 (max) 2 (max) Up to
(at present not in QPSK 0,66 ms 7
1900 – 1920, 2010 - 2025 (EMI A, B, C) 27 (usual) 2,8 (usual) 0,25 (usual) 750
use)
TABLE E-4: RADIATED POWER AND RESULTING WAVEFORMS FOR PULSE, AMP,
MODULATED STANDARDS
TDMA (pulse-, amplitude modulated) Mobile Phone Standards
Recommended
Wireless EIRP for High- EIRP for Local
Signal waveform
Standards Power Zonal Test Test (W)
(W)
Repetition time = 8*0.576 ms
4 (GSM)
GSM 16 W 4 (PCS1900,
t
DCS1800)
i-DEN 16 W 4
t
3.33 ms or 6.66 ms
IS-136/ 4 (AMPS)
16 W
TDMA/DAMPS t 2,4 (TDMA)
3.33 ms or 6.66 ms
PDC 16 W 4
20 ms time frame
© EUROCAE, 2016
Appendix E
E-7
5 ms = 8 0.625 ms
t 16 W 80 mW
PHS
t
0.625 ms
Up to 1,33 ms
UMTS TDD
(at present not in t
t 16 W 1
use)
0,66 ms
TABLE E-5: RADIATED POWER AND RESULTING WAVEFORMS FOR PULSE, AMP.
MODULATED STANDARDS (CONTINUATION)
CSMA/CA (pulse modulated) Data Communication Standards
Recommended
Wireless EIRP for High- EIRP for Local
Signal waveform
Standards Power Zonal Test Test (W)
(W)
t
4W
IEEE 802.11 a 16 W
© EUROCAE, 2016
Appendix E
E-8
ZigBee
t 16 W 160 mW
(IEEE 802.15.4)
15 ms
400 mW (1)
Bluetooth t 16 W 10 mW (2)
4 mW (3)
89.28 s
TETRA t 16 W 4W
* r = 0,1 m
** r = 1 m
*** The European standard allows a maximum of 100mW transmitted power for the
IEEE 802.11 b,g. On the US market there are a few devices with up to 500mW.
However, these are rare and the testing levels are high enough.
© EUROCAE, 2016
Appendix E
E-9
Repetition time = 5 ms
FIGURE E-1: TEST WAVEFORM FOR STANDARDS USING TDMA OR CSMA/FHSS SCHEMES
EMI characteristic:
Adequate test levels for laboratory equipment qualification depend on both, the
standard and possible distance between device and equipment under test. They are
given in ED-239 / DO-307A, and are to be applied in connection with the test
procedures discussed in section 6 of the document.
E.2-2 FDMA/CDMA and other CW-like Standards
The following table shows all FDMA/CDMA (CW-like) standards classified in three
groups: mobile phone standards, data communication standards and professional
mobile radio standards, as was done in the previous case. For each one of them the
modulation type, uplink and downlink frequencies, EMI character, field strength at
distances of 0,1m and 1m, and EIRP. The number of channels is also listed. This is
useful for deriving a MEF (Multiple equipment factor) as explained in Appendix F. It
refers to the amount of physical channels (i.e. carrier frequencies) since the number of
signals present in the environment is what is important for this calculation. This will be
explained later in more detail. For all standards the number corresponds to
specifications values of each protocol.
© EUROCAE, 2016
Appendix E
E-10
EMI characteristic
For each of the modulations the EMI potential is determined by the level of the
continuous wave-like signal structure caused by the FDMA or CDMA access schemes
(depending on the standard), which are characterized by constant signal amplitude.
Therefore, all these standards can be characterized by EMI criteria B and C. From
the standards analysed here, all are phase or frequency modulated (some CDMA
standards also include amplitude modulation), so in a representative test signal for
these technologies, it’s not necessary to implement the modulation type since it does
not affect the EMI characteristic because it causes no amplitude changes as it was
stated in [9]. A representative test signal should be then a continuous wave signal.
Transmitted power and resulting waveforms
The electric field strength has not been calculated for testing on aircraft. Appropriate
field strength levels can be taken from ED-239 / DO-307A TABLE 3-1. Aircraft testing
in the Zonal/Local Test method can be performed with the help of the transmitted
power values: using the usual values along with a margin.
For each level independent modulation an EMI test signal can be represented by a
continuous wave signal.
© EUROCAE, 2016
Appendix E
E-11
© EUROCAE, 2016
Appendix E
E-12
TABLE E-7: RADIATED POWER AND WAVEFORMS FOR FDMA/CDMA (CW-LIKE) STANDARD
FDMA/CDMA (CW-like) Mobile Phone Standards
Recommended
EIRP for
Wireless EIRP for High-
Signal waveform Local Test
Standards Power Zonal
(W)
Test (W)
CDMA2000 t 16W 4W
t
UMTS FDD 16W 1W
NAMPS/AMPS 16W 4W
t t
CDMAone t
16W 4W
© EUROCAE, 2016
Appendix E
E-13
MOBITEX II 16W 4W
t
t
TABLE E-8: RADIATED POWER AND WAVEFORMS FOR FDMA/CDMA (CW-LIKE) STANDARD
(CONTINUATION)
FDMA (CW-like) Professional Mobile Radios
Recommended
Wireless EIRP for High- EIRP for Local
Signal waveform
Standards Power Zonal Test Test (W)
(W)
PMR446 16W 4W
t t
Project25/
t 16W 4W
APCO25
MPT-1327 16W 4W
t
t
© EUROCAE, 2016
Appendix E
E-14
TETRAPOL 16W 4W
t
t
EDACS 16W 4W
t
t
* r = 0,1 m
** r = 1 m
Test Signal (EMI Character of CDMA/FDMA Mobile Phone Standards)
In order to specify an appropriate waveform for the equipment qualification test
procedure the signal characteristics of CDMA/FDMA standards have been
investigated. The following signal covers a wide class of investigated signal
waveforms presented in TABLE E-7 and TABLE E-8. With the values from these
tables along with the corresponding frequency bands for each standard, the field
strength levels and power levels for non HIRF aircraft qualification (full aircraft testing)
are shown along the frequency spectrum in TABLE E-9 through TABLE E-11. With
these levels, a mask or envelope is then constructed for the field strength and power
levels environment.
For further simplification it is recommended using levels given in section 6 of the main
document. They include sufficient amplification for aircraft testing
EMI characteristic:
The EMI test signal for standards with FDMA or CDMA scheme can be characterized
by EMI criterion B and EMI criterion C.
The CDMA/FDMA standards EMI behaviour is sufficiently represented by the
continuous waveform according to FIGURE E-2.
© EUROCAE, 2016
Appendix E
E-15
© EUROCAE, 2016
Appendix E
E-16
200
Standards covered:
180
IEEE802.11a,
IEEE802.11b,
ZigBee,
160 154 V/m
GSM,
iDEN,
IS-136,
140
PDC,
PHS
Field strength/ V/m
Bluetooth
120
110 V/m
100 98 V/m
80
60
49 V/m
40 35 V/m
22 V/m
20
0
450,2-457,6 MHz
868-868,6 MHz
1453-1501 MHz
1785 MHz
1850 MHz
1710 MHz
1918 MHz
2483,5 MHz
5725 MHz
806 MHz
849 MHz
958 MHz
5825 MHz
5150 MHz
5250 MHz
5358 MHz
2400 MHz
Frequency/ MHz
FIGURE E-3: FIELD STRENGTH LEVELS ONTO EUT FOR WORST-CASE SCENARIO FOR PULSE-MODULATED T-PED SIGNALS INCLUDING 6DB
MARGIN
© EUROCAE, 2016
Appendix E
E-17
200
Standards covered:
180
UMTS
AMPS/NAMPS
160 CDMAone
CDMA2000
140
Field strength/ V/m
120
110 V/m
100
78 V/m
80
60
40
20
0
300 1300 2300 3300 4300 5300 6000
479-484 MHz
776-824 MHz
824-849 MHz
870-925 MHz
1710 MHz
1785 MHz
1850 MHz
1910 MHz
1980 MHz
Frequency/ MHz
FIGURE E-4: FIELD STRENGTH LEVELS ONTO EUT FOR CW-LIKE T-PED SIGNALS INCLUDING 6DB MARGIN
© EUROCAE, 2016
Appendix E
E-18
8W Standards covered:
8
IEEE802.11a
IEEE802.11b
ZigBee
7
GSM
iDEN
IS-136
6 PDC
PHS
Bluetooth
Power / W
4W
4
3,2 W
3
1 800 mW
400 mW
160 mW
0
450,2-457,6 MHz
806 MHz
849 MHz
1453-1501 MHz
1710 MHz
1785 MHz
1850 MHz
1918 MHz
2483,5 MHz
5825 MHz
958 MHz
5725 MHz
2400 MHz
5150 MHz
5250 MHz
5358 MHz
Frequency/ MHz
FIGURE E-5: POWER LEVELS AT A 0.1 M DISTANCE BETWEEN TEST ANTENNA AND EUT FOR PULSE MODULATED (TDMA) T-PED SIGNALS
INCLUDING 6DB MARGIN
© EUROCAE, 2016
Appendix E
E-19
9
Standards covered:
UMTS
8 AMPS/NAMPS
CDMAone
CDMA2000
7
6
Power / W
4W
4
2W
2
0
300 1300 2300 3300 4300 5300 6000
776-824 MHz
824-849 MHz
1710 MHz
1850 MHz
870-925 MHz
1785 MHz
1910 MHz
1980 MHz
479-484 MHz
Frequency/ MHz
FIGURE E-6: POWER LEVELS AT A 0.1 M DISTANCE BETWEEN TEST ANTENNA AND EUT FOR CW-LIKE (FDMA) T-PED SIGNALS INCLUDING 6DB
MARGIN
© EUROCAE, 2016
Appendix E
E-20
IEEE802.11a*,
IEEE802.11b*,
200 ZigBee*,
GSM*,
Close distance to T-PED's
180 IDEN*,
Normal distance to T-PED's
IS-136*,
PDC*,
160
150 V/m
PHS*,
Bluetooth*,
140 TETRA**
Field strength/ V/m
120
110 V/m
100
IEEE802.11 (+),
80
IEEE802.11b (+),
ZigBee (+),
GSM (+),
60 IDEN (+),
50 V/m
IS-136 (+),
40 PDC (+),
PHS (+),
20 V/m Bluetooth(+),
20
TETRA (++)
0
1500 MHz
2000 MHz
5600 MHz
Frequency/ MHz
FIGURE E-7: DERIVED RADIATED FIELD STRENGTH LEVELS FOR PULSE-MODULATED (TDMA) T-PED SIGNALS INCLUDING 6 DB MARGINS FOR
LABORATORY EQUIPMENT QUALIFICATION
200
UMTS FDD*
Close distance to T-PED's AMPS/NAMPS*
180 Normal distance to T-PED's CDMAone*
CDMA2000*
PMR446*
160 Project25/APCO25**
Mobitex II**
EDACS**
140
TETRAPOL**
MPT-1327***
Field strength/ V/m
120
110 V/m
100
Frequency/ MHz
FIGURE E-8: DERIVED RADIATED FIELD STRENGTH FOR CW LIKE (FDMA) T-PED SIGNALS INCLUDING 6 DB MARGINS FOR LABORATORY
EQUIPMENT QUALIFICATION
Standards covered:
8
IEEE802.11a
IEEE802.11b
ZigBee
7 GSM
IDEN
IS-136
6 PDC
PHS
Bluetooth
Power / W
4W
4
1 800 mW
0
300 1300 2300 3300 4300 5300 6000
2000 MHz
1500 MHz
5600 MHz
Frequency/ MHz
FIGURE E-9: DERIVED RADIATED POWER LEVELS FOR 0.1M DISTANCE BETWEEN TEST ANTENNA AND EUT FOR PULSE-MODULATED (TDMA)
T-PED SIGNALS INCLUDING 6 DB MARGINS FOR LABORATORY EQUIPMENT QUALIFICATION
© EUROCAE, 2016
Appendix E
E-23
6
Power / W
4W
4
2W
2
1
400 mW
0
300 1300 2300 3300 4300 5300 6000
850 MHz
2000 MHz
Frequency/ MHz
FIGURE E-10: DERIVED RADIATED POWER LEVELS FOR 0.1M DISTANCE BETWEEN TEST ANTENNA AND EUT FOR CW-LIKE (FDMA) T-PED
SIGNALS INCLUDING 6 DB MARGINS FOR LABORATORY EQUIPMENT QUALIFICATION
© EUROCAE, 2016
Appendix E
E-24
TABLE E-10: CW TEST SIGNAL POWER FOR FULL PED TOLERANT AIRCRAFT
EIRP for Zonal EIRP for Zonal EIRP for Local Alternative Field
Test in dBm Test in dBm Test in dBm Strength for
(cabin/cargo) (cockpit) Local Test in V/m
0.00 - 8.00 42 36 36 Refer to ED-239 /
GHz DO-307A
table 3-01
above 8GHz Test not necessary
TABLE E-11: PULSE TEST SIGNAL POWER FOR FULL PED TOLERANT AIRCRAFT
EIRP for Zonal EIRP for Zonal EIRP for Local Alternative Field
Test in dBm Test in dBm Test in dBm Strength for
(cabin/cargo) (cockpit) Local Test in V/m
0.00 - 8.00 42 36 36 Refer to ED-239 /
GHz DO-307A
table 3-01
above 8GHz Test not necessary
© EUROCAE, 2016
Appendix E
E-25
E.6 CONCLUSION
Usually, aircraft equipment is qualified against both radiated and conducted RF
susceptibility to ensure that abnormal behaviour is not experienced due to interference
effects being caused by the RF environment which covers both the HIRF threat and
also the RF electromagnetic compatibility between the aircraft systems and
equipment. For this purpose, a general test procedure, levels and test signal
waveforms are described in the EUROCAE/RTCA standard ED-14 / DO-160 D or
ED-14 / DO-160 E section 20.
The levels within ED-239 / DO-307A, TABLE 1 are considered satisfactory, to cover
any mobile standards. This includes any current and future wireless standards for
PED, including personal mobile radios.
In practice it has turned out during the past decade that application of CAT R,
ED-14D change 1 / DO-160D change 1 (change notice 1 or later), section 20, is
satisfactory to demonstrate immunity. Lower levels such as CAT T, ED-14D change 1/
DO-160D change 1, section 20, are satisfactory for equipment performing functions of
major criticality.
© EUROCAE, 2016
Appendix F
F-1
APPENDIX F
The appendix F of ED-130A / DO-363 is equivalent to the Annex 5 of the initial edition
ED-130. All procedures that had been introduced here in the initial version of ED-130
have been replaced by section 6. In the previous version of this document there also
had been an introduction how potential constructive superposition of radio signals had
been derived. This part is still contained in this appendix in order to maintain
traceability. Its purpose is to outline how test levels used in section six of the main
document have been derived.
The information described in this appendix has been developed in the initial edition of
ED-130, for the case that re-qualification of the aircraft equipment is not possible and
testing is required e.g. for Non-HIRF aircraft. Today, also the general methods in
sections 6 and levels in tables F-8 through F-9 in appendix F are sufficient to cover all
multiple equipment effects. Therefore, this appendix may be considered for
information.
In the first place, the determination of the EMC environment that will be created by the
use of the T-PED technology in question is necessary. This information may be
obtained based on the T-PED characterization sub process defined in reference [1],
section 3.1
To account for effects caused by simultaneous use of multiple T-PEDs a multiple
equipment factor (MEF) had been introduced in ED-130A and DO-294C. This penalty
factor covers the following aspects:
1. Multiple locations
2. Superposition effects including effects from multiple reflections inside the cabin
and radiation from multiple devices (see MEF)
3. Safety margin
Detailed information about the derivation and assessment of the MEF can be found
here and in [4].
Also, appropriate locations for the transmitting antenna need to be chosen. These
should be representative for locations, where T-PEDs may operate (e.g. cabin, but
also cargo compartment).
Aircraft Testing Preparation (Multiple device risk assessment for aircraft
interaction testing)
Multiple device risk assessment for aircraft interaction testing
Several effects are connected to the simultaneous use of multiple transmitting portable
electronic devices (T-PEDs), which affect the overall field strength level emitted from
T-PED inside the aircraft, i.e.:
1. Spurious emissions from T-PED may accumulate (including intermodulation)
2. Intentional transmission protocol from T-PED
3. The possibility to operate a "fault mode" T-PED increases with respect to the
number of T-PEDs on board the aircraft
All three effects are covered by applying levels out of TABLES 6-5 and 6-6.
Accumulation of spurious emissions
Spurious emissions are safely covered by path loss limits as outlined inside
ED-239 / DO-307A or later issues. Accumulation is included in the IPL values of
ED-239 / DO-307A, section 4.
© EUROCAE, 2016
Appendix F
F-2
This MEF is safely covered by using test levels or equipment qualification as per
Appendix F /Section 6 of this document or application of ED-239 / DO-307A Section 3
TABLE 3-1. Note that 12 dB are suggested for the high power pre-test. It is not
needed, to add an additional multiple equipment amplification factor on top of the
levels given in section CHAPTER 6 since it is already considered in the applicable
tables.
NOTE: The use of actual T-PED devices instead of dedicated test-signal
generators is not adequate, due to poor test reproducibility and possibly
not representative T-PED location inside the aircraft. In addition, the
safety margin cannot be demonstrated
.
© EUROCAE, 2016
Appendix G
G-1
APPENDIX G
© EUROCAE, 2016
Appendix G
G-2
© EUROCAE, 2016
Appendix G
G-3
© EUROCAE, 2016
Appendix G
G-4
© EUROCAE, 2016
Appendix G
G-5
© EUROCAE, 2016
Appendix G
G-6
© EUROCAE, 2016
Appendix G
G-7
© EUROCAE, 2016
Appendix G
G-8
© EUROCAE, 2016
Appendix G
G-9
© EUROCAE, 2016
Appendix G
G-10
© EUROCAE, 2016
Appendix G
G-11
© EUROCAE, 2016
Appendix G
G-12
© EUROCAE, 2016
Appendix G
G-13
© EUROCAE, 2016
Appendix G
G-14
© EUROCAE, 2016
Appendix G
G-15
© EUROCAE, 2016
Appendix G
G-16
© EUROCAE, 2016
Appendix H
H-1
APPENDIX H
INDEX OF DEFINITIONS
© EUROCAE, 2016
Appendix H
H-2
© EUROCAE, 2016
Appendix I
I-1
APPENDIX I
INDEX OF REFERENCES
© EUROCAE, 2016
Appendix I
I-2
© EUROCAE, 2016
IMPROVEMENT SUGGESTION FORM
Name: Company:
Address:
Phone: Fax:
Email:
© EUROCAE, 2016