[SystemSafety] COTS display certification

[SPRIGGS, John J]

Hi Haim,
I am surprised that it is necessary for the operator to be 100% sure that the symbol is exactly on the correct spot on the display.  In most applications there is an 'annulus of concern' around the 'true' position; if the displayed plot is in the hole in the middle, the error is not enough to matter and, if it is outside the ring, the error is so large that the operator will notice.  It is only on the annulus itself that the position error is large enough to matter, but small enough to be credible to an operator.
Also, in some applications, e.g. where the operator has to maintain separation between things, it is relative accuracy that matters, not absolute.
As for field data, have you consulted industrial process control companies, e.g. a power station?  What displays do they use?  Do they collect data from the operation using a robust process, so that failure rates can be confidently predicted for the displays (in that environment)?

John
http://www.linkedin.com/in/johnspriggs
-----Original Message-----
From: systemsafety [mailto:systemsafety-bounces at lists.techfak.uni-bielefeld.de] On Behalf Of Haim Kuper
Sent: 25 July 2016 17:05
To: systemsafety at lists.techfak.uni-bielefeld.de
Subject: [SystemSafety] COTS display certification

Dear System Safety List Members,

We need to develop and certify a Ground Control Station (GCS) that controls an avionic platform.
The GCS contains an In-house-developed Control Computer (CC) and a COTS Display.
Hazard's analyses of the GCS showed that we need to develop and certify to DAL-B.
Regarding the display:
 1 - It's usually a problem to verify World-coordinates to Display-coordinates conversion results-on-screen so that the operator will be 100% sure that the symbol is exactly on the correct spot (on the world map/screen).
 2 - I've asked some famous companies (Acer, Samsung, HP, LG) for any supporting data, such as service history (as shown in DO-178C section 12.3.4 "Product Service History" )  of failure data, any measured or designed-to reliability figures: IMHO, I'll not get any assistance from them.
 3 - We are checking some safety design mechanisms such as
    a. monitoring using another display
    b. develop some hardware/software/humanware based Built In Tests, and
    c. still looking for a creative idea to tackle this subject

Per your experience, please advise how to certify the COTS display within the GCS development.

Thanks and Regards,
Haim kuper


_______________________________________________
The System Safety Mailing List
systemsafety at TechFak.Uni-Bielefeld.DE<mailto:systemsafety at TechFak.Uni-Bielefeld.DE>

***************************************************************************
If you are not the intended recipient, please notify our Help Desk at Email information.solutions at nats.co.uk
immediately. You should not copy or use this email or attachment(s) for any purpose nor disclose
their contents to any other person.

NATS computer systems may be monitored and communications carried on them recorded, to 
secure the effective operation of the system.

Please note that neither NATS nor the sender accepts any responsibility for viruses or any losses
caused as a result of viruses and it is your responsibility to scan or otherwise check this email
and any attachments.

NATS means NATS (En Route) plc (company number: 4129273), NATS (Services) Ltd 
(company number 4129270), NATSNAV Ltd (company number: 4164590) 
or NATS Ltd (company number 3155567) or NATS Holdings Ltd (company number 4138218). 
All companies are registered in England and their registered office is at 4000 Parkway, 
Whiteley, Fareham, Hampshire, PO15 7FL.

***************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.techfak.uni-bielefeld.de/mailman/private/systemsafety/attachments/20160726/db905d67/attachment.html>