面向机载软件适航审查的软件计划阶段的证据模型  

Evidence Model Oriented to Airborne Software Airworthiness Review of Software Planning Stage

作　　者：袁巍 吴际[1] 刘超[1] 杨海燕[1] YUAN Wei;WU Ji;LIU Chao;YANG Hai-yan(School of Computer Science and Engineering,Beihang University,Beijing 100191,China)

机构地区：[1]北京航空航天大学计算机学院,北京100191

出　　处：《计算机科学》2018年第9期52-59,共8页Computer Science

基　　金：民用飞机专项科研项目(MJ-S-2013-10)资助

摘　　要：适航认证对机载软件至关重要,178C标准是重要的适航认证安全标准。Order8110.49指南提出了介入审查的适航认证方法,但是目前还未有对介入审查中软件计划阶段的178C目标符合性证据的研究。文中基于软件计划阶段需要审查的目标和DO-178C标准中针对目标的特征描述,提出了3种模型(标准证据模型、项目制品模型、项目相关证据模型),并通过项目相关证据模型向项目证据数据模型的转换生成证据信息检查单,确定了证据信息的来源。建立证据模型的审查方法为软件计划阶段的审查提供了证据收集的指导,减少了证据收集过程对审定方审定人员的依赖,提高了审查效率。最后,通过一个机载飞行显示器软件的案例说明了提出的证据模型具有可用性与有效性。Airworthiness certification is essential for airborne software.The 178C standard is an important safety certification standard for airworthiness.Order 8110.49 guideline sets out the method of airworthiness certification,but there is no research on the 178C target compliance evidence of the software planning phase involved in the review.Based on the objectives of the software planning phase and the feature description of the DO-178C standard,three models were proposed:standard evidence model,project-artifact model and project-related evidence model.And evidence information checklist is generated by converting the project-related evidence model to the project-related evidence data model to determine the source of the evidence information.The review method for establishing the evidence model provides gui-dance for the collection of evidence for the review of the software planning phase,reducing the reliance on the auditor’s review process and improving the efficiency of the review.And the availability and validity of the proposed evidence model were llustrated by an Airborn e-Flight-Display software.

关 键 词：机载软件 适航审查 证据模型 DO-178C Order8110.49 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]