VansAirForceForums  
Home > VansAirForceForums

- POSTING RULES
- Donate yearly (please).
- Advertise in here!

- Today's Posts | Insert Pics


Go Back   VAF Forums > Avionics / Interiors / Fiberglass > Glass Cockpit
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #11  
Old 02-09-2015, 03:54 PM
Brantel's Avatar
Brantel Brantel is offline
 
Join Date: Mar 2006
Location: Newport, TN
Posts: 7,496
Default

I had a triple screen G3X system with dual AHRS units and still had a totally standalone separate backup EFIS (TT Gemini then a Dynon D6). The latest version of my panel swapped the triple screens for one 10" Touch but kept the backup EFIS. I eventually plan to add the 7" Touch to the co-pilot side but I will keep the backup EFIS.

I totally agree with TeamX's position on this subject!
__________________
Brantel (Brian Chesteen),
Check out my RV-10 builder's BLOG
RV-10, #41942, N?????, Project Sold
---------------------------------------------------------------------
RV-7/TU, #72823, N159SB
Lyc. O-360 carbed, HARTZELL BA CS Prop, Dual P-MAGs, Dual Garmin G3X Touch
Track N159SB (KK4LIF)
Like EAA Chapter 1494 on Facebook

Last edited by Brantel : 02-09-2015 at 04:02 PM.
Reply With Quote
  #12  
Old 02-09-2015, 11:01 PM
RV7A Flyer's Avatar
RV7A Flyer RV7A Flyer is offline
 
Join Date: Jul 2013
Location: US
Posts: 2,251
Default

Quote:
Originally Posted by avionicsr View Post
Absolutely YES, you need an independent backup Attitude, Altitude and Airspeed. ...The reason is, even with two AHRS and an independent backup battery there is still the very, very slim potential for a common software problem to cause all displays and/or AHRS to reset.
Although there is nothing wrong with having redundant devices/systems from different manufacturers, it is not necessarily true that it eliminates common-mode software errors. Experiments done by software safety researchers (ref. Leveson, et al.) demonstrate that n-version programming quite often results in the same "errors" in design and implementation by completely independent teams (given the same requirements). This is quite a controversial result, but it appears to be the case based on research into software systems safety.
Reply With Quote
  #13  
Old 02-10-2015, 01:12 PM
avionicsr's Avatar
avionicsr avionicsr is offline
 
Join Date: Oct 2014
Location: Port Orange, FL
Posts: 54
Default

Quote:
Originally Posted by RV7A Flyer View Post
Although there is nothing wrong with having redundant devices/systems from different manufacturers, it is not necessarily true that it eliminates common-mode software errors. Experiments done by software safety researchers (ref. Leveson, et al.) demonstrate that n-version programming quite often results in the same "errors" in design and implementation by completely independent teams (given the same requirements). This is quite a controversial result, but it appears to be the case based on research into software systems safety.
As we all know, nothing in aviation is an absolute guarantee, but the likelihood of two independent systems suffering a failure that causes a reset at the exact same time is significantly lower than that of a single system resetting.

Rather than getting wrapped up in the miniscule details of software, research, and hardware, the point being made here is:
Due diligence in providing a safe, IFR platform means following the part 23 guidelines and providing an independent Attitude, Altitude, and Airspeed powered by an independent power source (independent backup battery is acceptable).

I personally, will not put myself or my family in a glass panel aircraft in IFR conditions, either certified or experimental, without a panel mount backup basic flight instruments with an independent power supply. Whether that backup power supply is an internal backup battery or pneumatic and vacuum makes no difference, as long as it's independent.
__________________
Pahan Ranasingha
Spruce Creek Airport 7FL6
Port Orange, FL

RV-7A N705RV (Sold)
Lancair IV-P N530P
RV-14A (Under Construction)
Reply With Quote
  #14  
Old 02-10-2015, 10:39 PM
RV7A Flyer's Avatar
RV7A Flyer RV7A Flyer is offline
 
Join Date: Jul 2013
Location: US
Posts: 2,251
Default

I'm not arguing that point. I have a backup EFIS myself, and both primary and backup have backup batteries, plus one is on the E-buss, primary has external ADAHRS, backup has internal/external, etc. (Skyview primary, D6 backup).

I was only pointing out that the na?ve approach of insisting on different manufacturers on the basis of n-version programming isn't necessarily grounded in facts, based on research into safety-critical software development.
Reply With Quote
  #15  
Old 02-13-2015, 02:07 PM
dutchroll dutchroll is offline
 
Join Date: Jun 2010
Location: Sydney, Australia
Posts: 123
Default

I look at redundant same-brand EFIS screens as simply a convenience in the case of something like a display failure. Likewise, electrical bus faults do happen and so some sort of backup power supply is a given.

However I agree that a totally independent standby attitude source, if you fly lots of IFR, is a very good idea.

From a risk assessment perspective, the chance of a common fault causing multiple display failure in IMC is certainly rare. However the consequences are extreme if there isn't an independent source!
__________________
Mike
Down Under
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -6. The time now is 11:56 PM.


The VAFForums come to you courtesy Delta Romeo, LLC. By viewing and participating in them you agree to build your plane using standardized methods and practices and to fly it safely and in accordance with the laws governing the country you are located in.