to

It)0:

JUL 0 1 1986•DTI

""• LEAR SIEGLER, INC.INSTRUMENT DIVISION

S~~Appioced IOT public 19e9leAge ..

C-A,

D tI3J!P8flo, 0J•"tw.S.-

- c .\.,. .q

OPERATING AND SUPPORT HAZARD ANALYSIS

FORSELF-CONTAINED NAVIGATION SYSTEM

LSI MODEL 6216A, B, & CGROUP "B"

Report No. 6216-019

30 May 1986Contract No .,o96oW-85-C-1224@!., LECT •

Data Item 0211 JLE CT EE'9•i ikl JUL 0 1 18

Prepared by: Approved by.Date: X 0- 76 Date: l-sAn',,-)

SUBMIED FORCUSTOMER AFRIIL 2

Approved foy p ibb ' i,(.':'lDintTl lition Unlii:,itod

JAA WIGIA. IN

NGR4IN DIISO

Report No. 6216-019Revision

SUMMARY

Review of the drawings, sketches and documentation available as of thiswriting reveal no serious Category I or II hazards with the exception of twoitems. One involves the DVS installation and removal related to dropping.

If the TO.s are followed and proper equipment used, this concern is miui-

mized. The other concern is of overheat damage to the ICDU in event of fanC.failure. Recommendations are provided for resolving the concern and anopen action item exists to assure follow-up. *,-4

"K •Further analysis will be performed as drawings are completed. Changes

and updates will be included in future edition of this document.

S 4.I.

IN ' R M NT W S IO N -- -1 - '

.. . .. . . .... . . . .. . . . . . ... .. ... .... . .., . .4 4. . , . . . . . .. .. ." , . . . .+

Report No. 6216-019Revision

W.,

TABLE OF CONTENTS

SECTION TITLE PAGE NO. K

1.0 GENERAL .................. .................... 31.1 PURPOSE . . . . . . . . . . . . . . . . . . . . . 31.2 SCOPE .................. ...................... 32,0 APPLICABLE DOCUMENTS ......... .............. 32.1 GOVERNMENT DOCUMENTS ......... .............. 32.2 NON-GOVERNMENT DOCUMENTS ........ ............ 43.0 SYSTEM DESCRIPTION ...... ............... . .. 43.1 GENERAL DESCRIPTION .......... ............... 43.2 MAJOR COMPONENTS ........... ................ 4

, 3.2.1 ICDS.. .................. ................... 73.2.2 INS ................ ....................... 73.2.3 DVS .................. ....................... 73.3 SYSTEM FUNCTIONS ............ ............ ....... 73.3.1 MAJOR FUNCTIONS IN........ ......................... 73.3.2 SECONDARY FUNCTIONS .......... ............... 74,0 SAFETY CRITERIA ............................. 84.1 SYSTEM SAFETY PRECEDENCE ...... ...... ...... 84.2 HAZARD LEVEL CATEGORIES ......... ............. 84.2.1 HAZARD SEVERITY ............ ................. 84.2.2 HAZARD PROBABILITY ........... ............... 94.2.3 DVS HAZARD CATEGORIES ..... ......... ........ 95.0 OPERATING AND SUPPORT HAZARD ANALYSIS .... ...... 105.1 ICDU AND BICU ANALYSIS ................ .... 105.1.1 ICDU ................... ...................... 115.1.2 BICU ................... ..................... 115.2 DVS ANALYSIS ............... .................. 11

NTIS CRA& Y .

'l"IC 7A E3.'MUIn~Mec) J,,d I (w

Distribt i / ..

,k /Aji d o

• LEAFn SIEOLER. INCINSTRUMENT DIVISION -2-

.r4 4 i 44 A NII L '. I 4114AN 4I PAIN$!; Ml 494)Ai

LSI 41.1-188 1/86

_____Report No. 6216-019Revision "_

1.0 GENERAL - This document constitutes the Operating and SupportHazard Analysis (O&SHA) for the C-130 Self-Contained Naviga-tion System (SCNS) Groupý"B'"LRUs. It provides a hazardassessment of use and maintenance of the individual LRUsprovided by LSI.

1.1 PURPOSE - lAW MIL-STD-882A, the purpose of an O&SHA is toidentify and control hazards to personnel and to the system,or related to production, installation, maintenance, test,operation, etc. This O&SHA is limited to design of theGroup •"B" LRUs as the design affects operational use andmaintenance safety of personnel working in or around theequipment, including ground and flight crews.

1.2 SCOPE - The scope of this analysis is limited to the new SCNS"B" components, the Integrated Control Display Unit (ICDU),the Bus Integrated Computer Unit (BICU) and vendor data onthe Doppler Velocity Sensor (DVS). The analysis is limited toLRU level safety concerns affecting their use and maintenance,shipping and storage.

S2.0 APPLICABLE DOCUMENTS

2.1 GOVERNMENT DOCUMENTS - The following documents of the exactissue shown are used in the preparation of this analysis andreport.

MIL-STD-882A System Safety Program Requirements(paragraph 5.5.1.4).

DI-H-7048 System Safety Hazard AnalysisReport (paragraph 10.2.4)

DH1'-6 (Edition 5) System Safety Design Handbook

84-MMSRE-005-DVS Doppler Velocity Sensor (DVS),C-130 Self-Contained NavigationSystem SCNS, Specification for

by.84-MMSRE-006-ICDS Integration, Computation and

Display System (LCDS) Self-Contained Navigation System SCNSControl, Specification for

84-MMSRE-009-C-130 Self-Contained Navigation System(SCNS) Integrition, F;b;LcaLiun,Installation and lest of, C-130Aircraft

4 " LEAAM SIEGLER INCINSTRUMENT DIVISION -3-

L I- ,IA' II I I I t I IANO IIAI'111r; MI 4g'Oltl

LSI 4.6-18 1/'"J6

Report No. 6216-019Revision_ _

It.

2.2 NON-GOVERNMENT DOCUMENTS

Report No. Novigatiun Set, Radar AN/APN-218TRE/SDIO1766C-2 Operating Hazard Analysis for

C.-130 Production (originallysubmitted to ASD/ENAMD under

S[ Contract No. F33657-77-C-0098Data Item 20OZ)

3.0 SYSTEM DESCRIPTION

3.1 GENERAL DESCRIPTION - The SCNS is comprised of a DopplerVelocity Sensor (DVS), Inertial Navigation System (INS),Integration Computation and Display System (ICDS), and theassociated installation Group A kit to provide doppler aidedINS navigation, INS only, Doppler only and TAS/HDG naviga-tion modes, and control of the various C-130 communication/ 4navigation (comm/nav) systems. The SCNS ICDS consists ofthree Integrated Control Display Units (ICDU) and one BusIntegration Computer Unit (BICU) for all C-130 aircraftexcept that the HC'-130H will have an additiona.l ICDU for theradio control..-,A block diagram is shown in figure 1.

In conjunction with the SCNS installation, the followingsystems/components will be removed from the various C-130configurations.

AN/APN-147 DopplerAN/ASN-35 Doppler ComputerARN-131 OmegaAN/ASN-24 or PINS (C-130E AWADS only)

Radio controls for

AN/ARC-164 UHF (one control retained)AN/ARC-186 VHF 4.

AN/ARC-190 HFAN/ARN-118 TACANAN/ARN-127 VOR/ILSUSAF Standard VOR/ILS

The communication and navigation radio control functionswill be assumed by the ICDUs except during an emergency aseof a UHF backup manual control head.

"3.2 MAJOR COMPONENTS - A list of major components is provided intable I.

• L LEAR SIEGLER. INC,M INSTAUMENI DIVISION -4-AIIA' 4 II AV-. i N1V 1 Q ', 0 AN!' IAVW&'q MI 4'IO•

"LS1 41.5-188 1/86

"4* 4..•_•_ t,., A\.'y..x,,'•v,••' ''L,'% '•=%'.N. ,*. .,..t.... .... .. " - ''.- , . " " " .' '- .'"*"#."**-,."* '- t ,*' .. '

___________________________________________ Report No. 6216-019

Revision______

, Y It

ORAIL.STD*15 Bus 8 ZN02 O/IS

Pio' Figre1. CN Bork Coiagram

K=A SIcLEM INCU

J WEINSTUM~T DIISIO -5

U *'r*. Gyro_9 ,*24h 1111 k o sC pio'

. . . . . . . . . . . . .. .

__Report No. 6216-019Revision

Table 1. Major Component List

GROUPMODEL NO. DESCRIPTION LOCATION

A B

LSI-2580F 4 Integrated Control Left side forward on"Display Unit center console for

pilot. Right side for-ward for co-pilot. Nay

K panel for navigator.Radio operator's panelfor HC-130.

LSI-2905A 4 Bus Interface Computer New equipment rack.• • ~Unit"'

LSI-2905B 4 Bus Interface Computer New equipment rack.

Unit with Added RadarInterface Card (AWADS)

LSI-2590A 4 Doppler Velocity Sensor Belly of aircraftAPN-218SNU 84-1 GFE Inertial Navigation Aircraft floor below

Sensor new equipment rack

-'4 Electrical A-Kit Several variations

- - 4 Mechanical A-Kit Several variations

- 4 Flight Director Mode Instrument PanelSelect panel modifica- (also a panel on thetions pedestal for C-130B) A

- 4 SCNS Control Panel Nay Station

"- 4 INU Battery Battery Compartment

I-gc

LEAR SIEGLEA. INCINSTRUMENT -VISION6

.7,1*: L~ Wv II. PANLIHA*ID'Ii MI 4008I)

LS 41.5-1W8 1/86

A' ' *,,v v .. .. '•,,'".. i. .. ,.'*.'**,'"-,%. ..'4 ,, .- , v k.".•.- , '. *,..' .,' , I.*' . . . . . . . . . ... : % "• , " ,h ''. ,•. . ," . " ,

._____Report No. 6216-019Revision

3.2.1 ICDS - The ICDS consists of two major components: the Inte-grated Control Display Unit (ICDU) and the Bus IntegrationComputer Unit (BICU). All aircraft configurations utilizefully interchangeable ICDUs: pilot's, co-pilot's, navigator'sand radio operator's (HC-130H). Jumper wires in the aircraftinstallation indicate its particular station location toeach ICDU. One basic BICU design is utilized in all SCNSconfigurations with the exception of the BICU for the AWADSaircraft. It adds a third circular connector and SRUs forthe radar interface. Connector jumper wires indicate to theBICU into which aircraft model it is installed.

3.2.2 INS - The Inertial Navigation System (INS) consists of threemajor components: the Inertial Navigation Unit (INU), theINU mount, and the SCNS battery subsystem. The SCNS INU Vconforms to requirements of the F3 SNU 84-1 and SNU 84-3specifications and is GFE.

3.2.3 DVS - The Doppler Velocity Sensor (DVS) consists of theAPN-218 Air Force Standard Doppler. The DVS provides basicnavigation inputs for SCNS independent doppler navigationcapability and for integrated INS/Doppler capability. It iscontractor supplied.

3.3 SYSTEM FUNCTIONS - The SCNS primary function is to providehighly accurate and reliable self-contained navigationcapability for the MAC C-130 Tactical Airlift Operations.These missions and operations are defined in MACR 55-130,Military Airlift Command Regulation.

3.3.1 MAJOR FUNCTIONS - The SCNS provides the following majorfunctions.

o Navigation modes and position update capability.

o Integrated control and display of navigation, commun-ication, guidance, and steering functions.

cl Aircraft guidance and steering - including flight plan,"time of arrival, CARP, SAR, and rendezvous.

S3.3.2 SECONDARY FUNCTIONS - Additional features are provided to "improve performance, reduce crew workload, and minimizeaircraft maintenance time. Specifically, these are:

'..''I

aI TACAN mixing to improve navigation accuracy.

L.EAR IIIIECLER. INCINSIMUMI. TEVINION

414 [A I A vTI '.1ý M -I I, flANDO + IA { IAs 50, 6

-LS 41.5-18 1/86

__Report No. 6216-019

Revision

0 CARP capability that will reduce crew workload andincrease mission flexibility.

S0 Simple, accurate, and quick magnetic compass calibrationprocedures.

4.0 SAFETY CRITERIA - Certain safety criteria IAW MIL-STD-882Aare followed in this O&SHA.

4.1 SYSTEM SAFETY PRECEDENCE - Any items detected as fittinginto hazardous categories are treated in the following order:

a. Redesign to eliminate the hazard, if possible.

b. Change operating procedure to eliminate or reduceoccurrence.

c. Provide training recommendations to allow personnel tosafely work in the presence of the hazard.

a., Label or placard hazards and provide inputs to manuals.

4.2 HAZARD LEVEL CATEGORIES - (criticality definitions) For thepurpose of the hazard analysis, the hazards will be definedand categorized IAW the criticality definitions set forthbelow (ref. MIL-STD-882A, para. 5.4.3.1).

4.2.1 HAZARD SEVERITY - Hazard severity categories are defined to"provide a qualitative measure of the worst potential conse- Iquences resulting from personnel error, environmental condi-

.p tions, design inadequacies, procedural deficiencies, system,subsystem or component failure or malfunction as follows:

a. Category I - Catastrophic - May cause death or systemloss.

b. Category II - Critical - May cause severe injury, severeoccupational illness, or major system damage.

c. Category III - Marginal - May cause minor injury, minoroccupational illness, or minor system damage,

d. Category IV - Negligible - Will not result in injury,occupational illness, or system damage.

"" ,LEAR SIEGLER, N -I-NINSTRUMENT DIVISION

LS1 41.S-Il8 1/"6

Report No. 6216-019Revision ,_.

4.2.2 HAZARD PROBABILITY - The probability of the defined hazardoccurring is based on a qualitative judgment for the purposeof this hazard analysis. The probability levels quoted here I.

4171 are from MIL-STD-882A, Para. 5.4.3.2.

DESCRIPTIVE LEVEL SPECIFIC JNDIVIDUAL FLEET OR

WORD ITEM INVENTORY

" Frequent A Likely to occur frequently Continuously experienced

Reasonably B Will occur several times in Will occur frequentlyProbable life of an item

Occasional C Likely to occur sometime in Will occur several timeslife of an item

Remote D So unlikely, it can be Unlikely to occur butassumed that this hazard possiblewill not be experienced

K Extremely E Probability of occurrence So unlikely, it can be VImprobable cannot be distinguished from assumed that this hazard

zero. will not be experienced.

Impossible F Physically impossible to Physically impossible tooccur occur

4.2.3 DVS HAZARD CATEGORY LEVELS - It should be noted that thereferenced Teledyne Ryan Electronic (TRE) DVS Operating"Hazard Analysis uses the older MIL-STD-882 Hazard Categoryand probability rating system whereas this document usescategories prescribed in MIL-STD-882A.

LEAP SIEGLER. INCINBTMUMENT DIVISION

L 1IN Av NI 'I. 1 4A I ' IIA PI D 8 VI 4"06

LS1 41.5-IBS 4/86

.~*,. ~. ~ .. . .~ .- ~ -%* N *-'

__Report No. 6216-019Revision__ __

5.0 OPERATING AND SUPPORT HAZARD ANALYSIS - The Hazard Analysisis comprised of the following sections.

O3 Integrated Control Display Unit (ICDU)

[ Bus Integration Computer Unit (BICU)

0 Doppler Velocity Sensor (DVS)

The ICDU and BICU analyses are done as follows:

13 Available mechanical drawings and sketches are reviewedand analyzed for safety critical items. Examples are

.mounting and removal methods, weights, handles, sharpedges, case of damage, temperatures, connector accessand high voltage location.

,0 Available schematics and sketches are reviewed for highvoltage hazards, relative location of voltages, signalsand grounds in connectors and wiring and possiblecascading failures.

The intent is to assure that operation and use of the ICDUand BICU do not create or. cause hazardous conditions to

airplane or crew when inst~iled and -in use or to the mainte-nance personnel during installation, removal, test and"repair.

The DVS analysis is limited to a review of the Operating ,.

Hazard analysis received from the vendor and attached hereto.U5.1 ICDU AND BICU ANALYSIS - Tables II and III respectively list

the available ICDU and BICU drawings, their status as ofthis analysis and an item reference number for use wherecross indexing with text or matrix sheets may be useful.These listed drawings are both schematic and assembly draw-ings. Some are sketches. They will be reviewed again uponindividual completion and again upon formal release. Theresults of these later reviews and analyses will be includedin a later edition of this Safety Report.

SLEAR SIEGLER, INCNIPUMENT DIVISION -10-

LS1 41.4-182 1/A8

RevisionReport No. 6216-019Revision______

5.1.1 ICDU - Initial analysis does not indicate any Category I orII hazards in or out of the aircraft. High voltages used bythe CRT portion of the ICDU are a, quately protected, andrequired warning and caution pla ds are being provided. Noproblems in removal or installati., that could prove hazardoushave been found. The CRT appears to be safe from explosionhazards. There is some concern for the ultimate internaltemperature in event of fan failure. This is presentlyconsidered more of a reliability problem than a safetyproblem and is the subject of an action item to be resolved.Weight and handling are not a problem.

5.1.2 BICU - Initial analysis does not indi(cate any Category I orII hazards. The highest voltage in the BICU is 115 volts400 Hz primary power. Protection and caution labels willtake care of this potential problem for maintenance personnel.during open box test and repair. Weight and handling are nota problem.

5.2 DVS ANALYSIS - The OHA received from the DVS supplier is

"listed in section 2.2.

Review of this report indicates many equivalent Category Iand II hazards listed. The hazards listed do not exist,however, because the necessary steps have been taken toprevent them. As listed, they are essentially what thehazard could be rather than what it is. The items listedare believed to be only marginal to negligible or CategoryIII and IV IAW MIL-STD-882A.

SAn item not mentioned, relates to the weight and handling

difficulty during removal and installation in the belly ofthe aircraft. The LRU could be easily dropped or bent (ifpartially attached) and be damaged or do injury to personnel.Proper tools and procedures must be tsed thus minimizing anyhandling hazard.

LEAR SIEGLER. INC

LS. * 1/06'a * a s•~*. ** ii. u a.'i

Report No. 6216-019Revision_______

N I

c_ _ m_ H

- N -1 -F4 F- 4 MC 0 I

E--

'.1 00

".4P- -4 4

*1 . -1 co '

P- n w Za 0 '0.

* ~ C M-U 4~ U

0.4 0~' m. 0. C9 ~ 0 f ,q

N F -W -H -r- 4

S0 0) 0 t -

-4. ",__ ____w_

PC~ -4 - __

LSI 41.-l "n0/.86H u

_________________________________________ Report No. 6216-019

Revi s ion_____

4) '

".P1

fG wI4 P9 4

0 4 1-414P4- W

r44

u cl 00 PIa Jaq l( 04 G

CC-4 c0 PC _

m. 41 M ,0G

44 4) 4) 04- u *14 1 u pd

ctý- 00 0 14 I - CPS- 47ý Le

'-4- ý en ý4 -

00 00 U1 40 00-~nG *~Ou2Ga r.4

.W1.

(CLM~~1- P-4 F"C 411C a 411

LEAR 0IGLM INC.~M i ~ h-~~NSTU METWGO - -13-~U~0~ 4 0

A i A ,tfRNAFN tb I5. )HPISM 90

___________________________________________ Report No. 6216-019

Revision______

44

o 4 -- 4- 4E J

V) 14 m

w V5

P4 W.~

0- .4 14 4 14 1.4 14 r4.1 --d1.uf H4 04~ 4 0 4 0 0 Gf 4 u4 O4

'F4 4- -W to -

.0 10..4. 1;

60 en W~ W~ (A W , 1:4 0 0. Col -

4 ~ ~ - P- P- "4 Aj 1-4IN EN l~N F~tN l44O

LSIw 41.-M/S

............................................

Report No. 6216-019Revision______

- , -0 - - -- W-

0

P -

00qUu

44 j w

II0 0

> > 4 .

ai~ n en en n CA

- r'- 00 '.o C

p.' -0 00 c 0 c

p.. -. - - -

SLEAR SINOLIM. INCINGTRUMENTOIVIGION-

* A~414 tAS~rI ANVrFJI G CRANO~ RAPIOS MI CM8O

LSI 41.5188 1/8C

Report No. 6216-019Revision

-"4 0

an aul

.am w *

U ,U S,, ,,

Iý4 IW42'

ad 04

ca~04

a -•

all .4a 4

*ia. 0 0

__ a

S•lu> U>

0 0U3.U0

a

L•(EAR SIEGLER, INC--.-

INSTRUMENT ENVISION4141 EAT N AVENUE( S E GRANID RAPIOS K4149508

Report No. 6216-019Revision______

4' 4

*K A

r -4 4 4-, -

644

Q 4 44

0 444 .44 't4 4

144

~1.4UU .0

14044 4'I5

444444 444

., :1.4 V..14

0.4 4

IITIMNDVGN -17

r.AT'N VIU ý AfAD AI M4 950

LS 415-4 I6

~ ~I4.h4-4 4Jell

____Report No. 6216-019Revision

,:1,

*' t I:

4'~ P4 0 *

400

1.'

INNTRUMINT DIION-

S LSI 41.6-IN 1/86

I.2 &

• ,% , ; . .% "• , . • h' o'.% • "• • ," % ' •, • ' ' *, • .4' "• , "' . % - . , . % - ' ..4. • • , . , % , % • • . .