Avionics & Navigation Interview Questions

Avionics (aviation electronics) encompass all electronic systems used in aircraft, spacecraft, and satellites. Key systems include: Flight instruments (attitude, altitude, airspeed, heading), Navigation systems (GPS, INS, VOR, ILS), Communication systems (VHF, HF, SATCOM), Flight management systems (FMS), Autopilot and flight control computers, Radar and weather systems, Collision avoidance (TCAS, EGPWS), and Display systems (glass cockpit). Avionics typically represent 30-40% of aircraft cost and are critical for safety and operational capability.

The pitot-static system measures air pressure to provide flight data. The pitot tube faces forward to measure total (stagnation) pressure, while static ports on the fuselage measure static (ambient) pressure. The difference is dynamic pressure, proportional to airspeed squared. This system feeds: Airspeed indicator (uses dynamic pressure), Altimeter (uses static pressure with ISA calibration), Vertical speed indicator (rate of static pressure change), and Air data computer. Blockage from ice or debris causes erroneous readings, so aircraft have redundant systems, pitot heat, and alternate static sources.

GPS (Global Positioning System) uses signals from a constellation of 24+ satellites to determine position through trilateration. Receivers measure time delay from multiple satellites (minimum 4 for 3D position plus time correction) and calculate position. Standard GPS accuracy is approximately 5-10 meters horizontally. Aviation applications use: WAAS (Wide Area Augmentation System) for 3-meter accuracy, enabling precision approaches; and GBAS (Ground Based Augmentation) for CAT II/III approaches. GPS provides position, velocity, and time, enabling RNAV (area navigation) independent of ground-based navaids.

A glass cockpit uses electronic displays (LCD/LED) instead of mechanical instruments to present flight information. Primary components include: Primary Flight Display (PFD) showing attitude, airspeed, altitude, and heading; Multi-Function Display (MFD) for navigation, systems, and weather; and Engine Indication and Crew Alerting System (EICAS/ECAM). Advantages include: Improved situational awareness through integrated information, Easier scanning with consolidated displays, Configurable formats, Reduced weight and improved reliability, Easier updates, and Enhanced warning systems. Modern aircraft universally use glass cockpits (Boeing 777, A320 and later).

VHF (Very High Frequency) communication uses frequencies from 118.000-136.975 MHz for voice communication between aircraft and ground stations (ATC, airlines). Characteristics include: Line-of-sight propagation (limited by curvature of Earth, range depends on altitude), Amplitude modulation (AM) for analog voice (legacy), and Digital voice (VDL) for modern applications. Range is approximately 200 nm at cruise altitude. VHF is the primary communication means in continental airspace. Aircraft carry multiple VHF radios for redundancy. Frequency congestion in busy airspace is addressed through 8.33 kHz channel spacing in Europe.

An INS determines position, velocity, and attitude by measuring accelerations and rotation rates using inertial sensors (accelerometers and gyroscopes) and integrating them over time. Modern systems use ring laser gyros (RLG) or fiber optic gyros (FOG) instead of mechanical gyros. INS advantages: Completely self-contained (no external signals needed), Provides attitude reference, Not susceptible to jamming. Disadvantages: Errors accumulate over time (drift), Requires initialization (alignment), and More expensive than GPS. INS is typically combined with GPS in Inertial Reference Systems (IRS) for complementary benefits - INS provides short-term accuracy and attitude, GPS corrects long-term drift.

TCAS (Traffic Collision Avoidance System) is an independent safety system that warns pilots of nearby aircraft and provides avoidance guidance. It works by: Interrogating transponders on other aircraft, Calculating range, closure rate, and relative altitude, and Issuing traffic advisories (TA) and resolution advisories (RA). TAs alert pilots to nearby traffic; RAs command vertical maneuvers (climb/descend) coordinated between aircraft to ensure separation. TCAS II provides vertical RAs and is mandatory for aircraft over 5,700 kg or 19 passengers. Pilots must follow RAs even if contradicting ATC instructions. TCAS has prevented numerous collisions since its introduction.

The FMS is an integrated computer system that assists pilots in navigation, flight planning, and aircraft control. Key functions include: Navigation database management (airways, waypoints, procedures), Flight plan entry and modification, Performance calculations (fuel, time, speeds, optimal altitude), Lateral navigation (LNAV - horizontal guidance), Vertical navigation (VNAV - altitude, speed profile), Autopilot and autothrottle coupling, and Display management. The FMS integrates inputs from multiple sensors (GPS, INS, DME, VOR) for optimal position estimate. CDU (Control Display Unit) or touchscreen provides pilot interface. Modern FMS enables precision RNAV approaches and efficient flight profiles.

Aircraft transponders respond to ground radar interrogations with identification and altitude data. Modes include: Mode A - transmits 4-digit squawk code for identification; Mode C - adds pressure altitude (in 100 ft increments); Mode S - adds unique 24-bit aircraft address, selective addressing, and data link capability for enhanced data exchange; and ADS-B (Automatic Dependent Surveillance-Broadcast) - continuously broadcasts GPS position, altitude, velocity, and ID without interrogation. ADS-B Out is now mandatory in most controlled airspace. Mode S and ADS-B enable collision avoidance (TCAS) and improved ATC surveillance.

The attitude indicator (artificial horizon) displays aircraft pitch and roll relative to the horizon. Traditional mechanical versions use a gyroscope that maintains a fixed reference in space; the aircraft rotates around it, indicating attitude. Modern systems use AHRS (Attitude and Heading Reference System) with solid-state sensors (MEMS accelerometers and gyros) and algorithms to compute attitude. The display shows a miniature aircraft symbol against a horizon line, with pitch marks and bank angle indication. Attitude is the most critical flight instrument, essential for flying in clouds or at night. Redundant systems (typically 3 IRS/AHRS) ensure availability.

ILS provides precision guidance for landing in low visibility. It consists of: Localizer - VHF transmitter at runway end providing lateral guidance (left/right of centerline); Glideslope - UHF transmitter beside runway providing vertical guidance (typically 3-degree descent path); and Marker beacons - indicate distance from runway. Aircraft receivers display deviation from correct path. ILS categories: CAT I (200 ft decision height, 550m visibility), CAT II (100 ft, 350m), CAT III (lower or no limits with autoland). ILS has been the standard precision approach system for decades; it is being supplemented by GPS-based approaches (GLS).

Weather radar transmits pulses of electromagnetic energy (typically X-band, 9.3 GHz) and analyzes returns from precipitation. It measures: Reflectivity (precipitation intensity, displayed in color from green/light to red/severe), Range to weather cells, and Doppler shift (in modern radars) for wind shear detection. Features include: Tilt control for scanning different altitudes, Ground clutter suppression, Turbulence detection through spectral width analysis, and Predictive windshear alerting. Weather radar helps pilots avoid severe weather, hail, and turbulence. Modern systems (WXR-2100, RDR-4000) include 3D volumetric scanning and threat assessment. Range is typically 320 nm.

DO-178C (Software Considerations in Airborne Systems and Equipment Certification) is the standard for developing safety-critical avionics software. It defines processes and evidence required for certification based on Design Assurance Level (DAL): DAL A - Catastrophic failure condition (most stringent), DAL B - Hazardous, DAL C - Major, DAL D - Minor, and DAL E - No effect (minimal requirements). Key activities include: Requirements development, Design documentation, Coding standards, Testing coverage (structural, requirements-based), Configuration management, and Quality assurance. Higher DAL requires more rigorous verification and more independence between development and verification. DO-178C compliance is required for FAA/EASA certification.

ARINC 429 is the predominant data bus standard in commercial aviation for communication between avionics equipment. Characteristics include: Unidirectional transmission (one transmitter, multiple receivers), Twisted pair wiring (simple, reliable), Data rates of 12.5 or 100 kbit/s, 32-bit word format (8-bit label, 2-bit source ID, 19-bit data, 1 parity bit), and Point-to-point or broadcast architecture. Each data type has a defined label (e.g., airspeed, altitude). ARINC 429's simplicity and reliability make it widespread, though ARINC 664 (AFDX) provides higher bandwidth for modern integrated avionics. ARINC 429 remains in use for many legacy and new systems due to proven reliability.

EGPWS (Enhanced Ground Proximity Warning System) prevents CFIT (Controlled Flight Into Terrain) accidents by alerting pilots to terrain and obstacle hazards. It uses: GPS position, Terrain/obstacle database, Radio altimeter, and Aircraft configuration data. Functions include: Terrain awareness display showing terrain relative to aircraft, Predictive look-ahead alerting (terrain, obstacles), Standard GPWS modes (excessive descent rate, terrain closure, altitude callouts, glideslope deviation, windshear), and Escape guidance. Alerts progress from caution to warning with increasing urgency. EGPWS (Honeywell) and TAWS (generic term) have dramatically reduced CFIT accidents since introduction. Mandatory for commercial aircraft.

IRS (Inertial Reference System) alignment determines initial position and establishes the navigation reference frame. Process: Aircraft must be stationary, Accelerometers measure Earth's gravity vector, Gyros measure Earth rotation rate, Position is entered manually or via GPS. These allow computation of local vertical and true north. Alignment time depends on: Latitude (longer near equator where Earth rotation rate horizontal component is zero), Required accuracy, Sensor quality, and Temperature stability. Typical alignment takes 5-15 minutes. Fast alignment modes using GPS can reduce time. Alignment errors become navigation errors; accuracy of 0.1 deg heading is typical. In-flight alignment is possible with GPS aiding.

The ADC processes pitot-static inputs to compute: Calibrated airspeed (CAS), True airspeed (TAS) with temperature correction, Mach number (from total/static pressure ratio), Pressure altitude, Density altitude, Vertical speed, and Static air temperature/Total air temperature. Calculations involve: ISA atmosphere model, Compressibility corrections for high speed, Angle of attack integration for advanced ADCs, and Sensor error compensation. Modern Air Data Inertial Reference Units (ADIRU) integrate ADC with IRS functions. Outputs feed displays, FMS, autopilot, flight control, and DFDR. Redundancy (typically 3 ADCs) with voting logic protects against sensor failures. DO-178C Level A software certification required.

GPS integrity ensures position errors don't exceed tolerable limits for the operation. Monitoring methods: RAIM (Receiver Autonomous Integrity Monitoring) - uses redundant satellite measurements to detect and exclude faulty satellites (requires 5 satellites for detection, 6 for exclusion); WAAS/SBAS - ground stations monitor satellites and broadcast corrections with integrity data; GBAS - local ground monitoring for precision approach; and ARAIM (Advanced RAIM) - uses dual-frequency/multi-constellation for improved availability. Integrity requirements define: Alert limit (maximum allowable error), Time-to-alert (how quickly fault must be detected), and Integrity risk (probability of undetected error). LPV approaches require 99.999% integrity level.

The FMS navigation database contains: Waypoints (coordinates, names), Airways (routes between waypoints), Airports (runways, frequencies, procedures), Navaids (VOR, NDB, ILS parameters), Standard procedures (SIDs, STARs, approaches), Holding patterns, Company routes, and Performance data. Database format follows ARINC 424 specification. Updates occur on 28-day AIRAC cycle to match published changes. Validation includes: Data integrity checks, Procedure flyability verification, and Operational approval testing. Loading via data loader or network connection. Database accuracy is critical - errors can cause navigation errors or violations of terrain/airspace. Configuration management ensures correct database installed.

Aviation SATCOM provides communication beyond VHF range, especially over oceans. Systems include: Inmarsat - geostationary satellites covering most latitudes, Classic Aero (voice, low-rate data) and SwiftBroadband (IP data); Iridium - LEO constellation with global coverage including poles, voice and ACARS data; and Future LEO constellations for high-speed connectivity. SATCOM enables: ATC voice and data communication (CPDLC), Airline operational data (AOC), Passenger connectivity, and Real-time flight tracking. Datalink modes include ACARS, ATN, and IP. SATCOM antennas range from low-gain patches to high-gain steerable arrays. Cost per minute/kb drives operational usage decisions.

AFDX (Avionics Full-Duplex Switched Ethernet) per ARINC 664 Part 7 is a high-speed, bidirectional data network for modern avionics. Improvements over ARINC 429: 100 Mbps bandwidth (1000x faster), Full-duplex switched architecture, Multiple virtual links over single network, Deterministic latency through traffic shaping, Reduced wiring weight (shared network vs point-to-point). Features: Virtual Link concept providing guaranteed bandwidth, Redundant networks (A/B) for fault tolerance, and Standard Ethernet frames with bandwidth allocation gap control. Used extensively on A380, A350, Boeing 787. Enables Integrated Modular Avionics (IMA) with shared computing resources. Requires careful network design for determinism.

Synthetic Vision Systems (SVS) display computer-generated 3D terrain, obstacles, and flight path on the PFD based on aircraft position and terrain database. Benefits: Enhanced situational awareness in IMC and night, Terrain and obstacle awareness at a glance, Intuitive flight path visualization, and Reduced spatial disorientation risk. Components: GPS position, Terrain database, 3D rendering engine, and Accurate attitude reference. Combined Vision Systems (CVS) overlay enhanced vision (EVS from infrared sensors) on synthetic terrain. SVS is particularly valuable for terrain avoidance in mountainous areas. Not approved as sole reference for navigation but excellent backup. Systems like Garmin G1000 and Collins Pro Line Fusion include SVS.

CAT III autoland enables landing in very low or zero visibility. Requirements include: System redundancy (fail-operational capability, typically triple redundant), Automatic rollout and guidance to taxi, ILS ground equipment to CAT III standards, Aircraft autopilot/flight director meeting accuracy requirements, and Alerting for system degradation. Categories: IIIA (50 ft DH, 200m RVR), IIIB (lower DH, 75m RVR), IIIC (no DH, no RVR limit). Certification per FAR 25.1309/CS 25 requires: Failure analysis (fault trees, FMEA), Simulation testing of fault cases, Flight test demonstration, and Maintenance programs for reliability. Airports must have CAT III lighting and ground equipment. Pilot training and currency requirements apply.

Flight Data Recorders (FDRs) capture aircraft state for accident investigation and safety monitoring. Required parameters (per FAR 121.344/EUOPS): Time, altitude, airspeed, heading, vertical acceleration, pitch and roll attitude, control positions, thrust, flap/slat position, and autopilot modes - minimum 88 parameters for new aircraft. Requirements: 25-hour recording duration, Crash survivability (3400g impact, 1100C fire), Underwater locator beacon (30-day battery), Annual inspection and readout. Modern FDRs use solid-state memory. Quick Access Recorders (QARs) provide routine data download for flight operations quality assurance (FOQA). New requirements include cockpit image recorders. Data frame layout per ARINC 717/767.

HUD projects flight information onto a transparent combiner glass at the pilot's eye level, allowing simultaneous view of instruments and outside world. Components: Display unit (high-brightness CRT or DLP), Combiner glass (holographic or curved), Computer unit for symbol generation, and Overhead unit containing optics. Displayed information includes: Flight path vector, Velocity vector, Altitude/airspeed, Guidance cues, and Synthetic vision or enhanced vision imagery. Benefits: Reduced heads-down time, Immediate scan transition inside/outside, Enhanced low-visibility operations, and Potential for reduced landing minima (HUD-to-runway operations). EVS-equipped HUD enables lower approach minima (100 ft for CAT I equivalent). Widely used in military; increasingly common in commercial aviation.

FBW flight control computers (FCCs) use multiple strategies for safety: Redundancy - typically 3-4 computers with independent channels, voting logic, and automated fault detection; Dissimilarity - different processor types, software teams, or algorithms to prevent common-mode failures; Partitioning - separation of functions with defined interfaces per DO-297 (IMA); Monitoring - Built-In Test (BIT), watchdog timers, self-checking pairs; Reversionary modes - graceful degradation maintaining control with failures. Architecture example (A320): 3 primary flight control computers (PRIM), 2 secondary computers (SEC), independent hydraulic actuators. Software certified to DO-178C DAL A. Extensive failure analysis, simulation testing, and flight test validation required for certification.

VOR (VHF Omnidirectional Range) provides bearing to/from a ground station; DME (Distance Measuring Equipment) provides distance (slant range). VOR operation: Transmits 30 Hz variable signal rotating in azimuth plus reference signal; aircraft receiver compares phase difference to determine bearing. DME operation: Aircraft transmits interrogation pulses; ground station replies; aircraft measures round-trip time to calculate distance. Together they provide rho-theta position fix. Limitations: VOR only provides bearing (2D), DME is slant range (not ground distance), and Line-of-sight range. VOR accuracy ~2 degrees, DME ~0.2 nm. Being replaced by GPS-based navigation but remains backup. TACAN provides military equivalent with bearing and range.

CPDLC (Controller-Pilot Data Link Communications) provides text-based communication between pilots and ATC, complementing voice. Benefits: Reduced voice congestion, Clear unambiguous messages, Message verification and logging, and Enables oceanic/remote area communication. Message types: Clearances, Instructions, Requests, and Information. Architecture: Aircraft CMU/ATSU connects to ground ATSP via VHF or SATCOM datalink. Part of ATN (Aeronautical Telecommunication Network) or FANS (Future Air Navigation System). Implementation: FANS 1/A (Boeing/Airbus) for oceanic, ATN B1/B2 for continental. Message formats per ICAO/RTCA standards. CPDLC mandatory for North Atlantic and increasingly required in high-density airspace. Crew training addresses human factors of mixed voice/data environment.

RNAV (Area Navigation) enables aircraft to fly any desired path using navigation aids or autonomous systems, not limited to direct routes between ground stations. RNP (Required Navigation Performance) adds integrity and monitoring requirements to RNAV. Key differences: RNP requires onboard performance monitoring and alerting (RNP APCH, AR approaches), RNP specifies lateral accuracy requirement in nm (e.g., RNP 0.3 = 0.3 nm 95% of time), and RNP includes containment (2x accuracy defines containment). Approach types: LNAV (lateral guidance), LNAV/VNAV (adds vertical), LPV (GPS precision similar to ILS), and RNP AR (special approval required, curved paths possible). RNP enables approaches to runways without ground-based navaids.

Radar altimeter measures absolute height above terrain by transmitting radio waves downward and measuring return time. Types: FMCW (Frequency Modulated Continuous Wave) - measures frequency difference between transmitted and returned signal, dominant technology; and Pulse - measures round-trip time. Operating frequency typically 4.2-4.4 GHz. Accuracy ~1% or 1-2 ft at low altitude. Applications: Ground proximity warning (EGPWS inputs), Autoland (flare guidance), Decision height callouts, and Terrain clearance for helicopter operations. Range typically 0-2500 ft. Critical for low-visibility approaches. Interference concerns with new 5G networks near airports prompted protective measures. Dual-redundant systems for critical applications.

IMA uses standardized, shared computing platforms instead of dedicated computers for each function. Key concepts: Common computing modules (Line Replaceable Modules) host multiple applications, Resources (processor, memory, I/O) partitioned and time/space isolated, ARINC 653 RTOS provides partitioning and scheduling, and Applications from different suppliers run on common hardware. Benefits: Reduced weight, power, and cooling requirements, Easier upgrades (software changes vs hardware replacement), Improved reliability through common spare modules, and Lower lifecycle costs. Challenges: Certification complexity for shared resources, Timing analysis across partitions, and Integration responsibility. Used on Boeing 787 (Common Core System), A380/A350, and military aircraft. DO-297/DO-178C guides IMA certification.

Stall warning alerts pilots before aerodynamic stall. Components: Angle of Attack (AOA) vanes or probes measuring local flow angle, Air data for configuration and speed corrections, Stick shaker motors that vibrate the control column, Stick pusher (some aircraft) that applies nose-down force. Logic: Warning activates at specified margin before stall AOA (typically 5-7 degrees), adjusted for configuration (flaps, gear), weight, and ice accretion. Aural warnings accompany stick shaker. Multiple AOA sensors with monitoring for validity. Integration with flight control laws (FBW) may include AOA limiting. System must be reliable (failure rate <10^-5 per flight hour) and nuisance-free. Testing validates margins across flight envelope.

MIL-STD-1553 is the standard data bus for military avionics, defining electrical, protocol, and data characteristics. Features: 1 MHz data rate (dual redundant buses), Command/response protocol with single bus controller, Up to 31 remote terminals per bus, Deterministic timing, and High reliability through transformer coupling. Message structure: Command word, data words (up to 32), status word. The bus controller schedules all transactions. Widely used in fighter aircraft, helicopters, missiles, and space systems. Mature, reliable technology but bandwidth limited. Newer systems use higher-speed networks (Fibre Channel, Ethernet) while 1553 remains for legacy systems and where reliability is paramount. Test equipment and standards well established.

ACAS X (Airborne Collision Avoidance System X) is the next-generation collision avoidance standard. Improvements: Probabilistic model using dynamic programming (optimizes resolution advisories against encounter model), Reduced unnecessary alerts while maintaining safety, Better coordination with ATC procedures, Extensible to new surveillance sources (ADS-B), and Variants for different operations (Xa for large aircraft, Xo for unmanned). ACAS Xa uses existing Mode S transponders but with improved logic. Expected benefits: 25% reduction in operational impact (fewer RAs), Maintained or improved safety margin, and Better compatibility with new procedures (parallel approaches). Currently in validation; deployment expected to replace TCAS II over coming decade.

EFBs are electronic devices hosting software for flight operations, replacing paper documents. Classes: Type A/B (portable tablets, limited integration), Type C (installed, higher integration level). Functions: Document display (charts, manuals, MEL), Performance calculations (takeoff/landing, weight and balance), Moving map/terrain awareness, Approach briefings, Electronic checklists, and Maintenance access. Certification levels: Hardware (DO-160 environmental), Software (DO-178C for flight-critical functions), and Applications (specific approval based on function criticality). Benefits: Reduced paper weight, Real-time updates, Enhanced efficiency, and Improved situational awareness. iPad EFBs widespread (with DO-311A mounts); installed systems on 787, A380. FAA AC 120-76 provides guidance.

System Safety Assessment follows ARP 4761 methodology: 1) Functional Hazard Assessment (FHA) identifies failure conditions and classifies severity (Catastrophic, Hazardous, Major, Minor, No Safety Effect). 2) Preliminary System Safety Assessment (PSSA) allocates safety requirements to functions using fault tree analysis (FTA) from top-level failures. 3) During design, Common Cause Analysis (CCA) examines Particular Risks, Common Mode Analysis, and Zonal Safety Analysis. 4) System Safety Assessment (SSA) validates achieved safety levels using Failure Modes and Effects Analysis (FMEA), Markov analysis for complex redundancy, and test/flight data. Quantitative requirements: Catastrophic <10^-9/FH, Hazardous <10^-7/FH, Major <10^-5/FH. Documentation supports certification per FAR 25.1309.

GPS/INS integration exploits complementary characteristics: INS provides high-rate, smooth, autonomous navigation but drifts; GPS provides absolute position with noise. Integration approaches: Loosely coupled - GPS position/velocity updates INS through Kalman filter, simple but suboptimal; Tightly coupled - GPS pseudoranges/Doppler directly integrated, better in degraded GPS (fewer satellites); Ultra-tight/Deep integration - GPS tracking loops aided by INS, enables operation in jamming/dynamics. Kalman filter states include position, velocity, attitude errors, sensor biases, and GPS errors. Design considerations: Filter tuning (process noise, measurement noise), Fault detection and isolation, Integrity monitoring (solution separation), and Reversion modes when GPS unavailable. Typical INS drift without GPS ~1 nm/hour; with GPS <10m continuous.

DO-254 (Design Assurance Guidance for Airborne Electronic Hardware) applies to programmable logic. Challenges for complex FPGAs: Tool qualification - synthesis, place-and-route tools must be qualified or their outputs verified; this is difficult for proprietary FPGA tools. Design verification - achieving full coverage (branch, condition, MC/DC) for HDL requires extensive simulation; timing closure verification across corners. Independent verification for DAL A/B requires separate verification team, which is costly. Configuration management of IP cores, FPGA vendor libraries, and tool versions. Testing complete FPGA in system context vs standalone. Strategies: Use of high-level synthesis with verification-friendly output, formal verification tools, and RTCA DO-254 supplements. Alternative: Simple PLDs at higher DAL, complex FPGAs at lower DAL with system-level mitigation.

Flight control law design achieves desired handling qualities while ensuring stability and protection. Process: Define handling qualities requirements (MIL-STD-1797, Cooper-Harper ratings), Develop mathematical model of aircraft dynamics, Design control laws using classical (PID), modern (H-infinity, LQR), or robust control methods, Implement envelope protections (AOA limiting, load factor, speed). Modes: Normal law (full protection), Alternate law (reduced protection), and Direct law (basic control). Validation: Piloted simulation (handling qualities assessment), Non-real-time simulation (coverage of flight envelope), Robustness analysis (stability margins across uncertainties), and Flight test (envelope expansion, pilot evaluation). Certification requires demonstrating stability, controllability, and protection throughout flight envelope with single/multiple failures. Extensive failure mode testing in simulation and flight.

DO-160G Section 20-22 defines EMI/EMC requirements. Design strategies: Conducted emissions - filtering power inputs (common-mode chokes, differential filters), proper grounding (single-point or hybrid), and shielded cables for sensitive signals. Radiated emissions - metal enclosures with proper sealing at seams, filtered/shielded connectors, and controlled cable routing. Susceptibility - adequate shielding effectiveness, filtering of all I/O lines, and software tolerance of transients. Specific concerns: HIRF (High Intensity Radiated Fields) from radar, lightning-induced transients, and switching power supply harmonics. Design practices: Use of multi-layer PCBs with ground/power planes, decoupling capacitors at ICs, controlled impedance traces, and proper grounding strategy (star, hybrid). Testing early in development; pre-compliance testing identifies issues. Layout and cable harness design are as critical as circuit design.

Multipath occurs when GPS signals reach the receiver via reflected paths in addition to direct path, causing ranging errors. Mitigation techniques: Antenna design - choke ring antennas attenuate low-elevation signals, pinwheel/helical antennas have controlled gain patterns; Receiver processing - narrow correlator spacing (reduces multipath error envelope), double-delta correlators, multipath estimating delay lock loops (MEDLL), and vision correlator techniques; Signal processing - carrier smoothing of code (dual-frequency benefits), multi-frequency combinations (L1/L5), and RAIM monitoring for gross errors; Site selection - antenna placement to minimize reflections (ground plane, avoid structures). For precision approach, GBAS ground stations characterize local multipath. Future multi-constellation, multi-frequency receivers have inherent multipath resistance through signal combination.

Mode confusion occurs when pilots misunderstand autopilot state, leading to accidents (e.g., AF447). Design principles: Clear mode annunciation - consistent location (typically top of PFD), distinct armed vs engaged indications, and visual hierarchy (active modes prominent). Mode transitions - announce all transitions aurally and visually, highlight unexpected mode changes, and minimize automatic mode reversions. Simplification - limit number of modes, consistent behavior across modes, and logical mode relationships. Alerting - flash annunciations for significant changes, use of amber for unintended states, and enhanced warnings for high-energy situations. Human factors evaluation - pilot-in-loop simulation to identify confusion scenarios. Training integration - realistic mode behavior in simulators. Standards: FAA Human Factors guidance, EASA certification specifications. Post-accident reviews inform best practices (Boeing MCAS lessons).

ARINC 653 provides robust temporal and spatial partitioning for mixed-criticality systems. Spatial partitioning: Each partition has dedicated memory regions, enforced by Memory Management Unit (MMU); one partition cannot corrupt another's memory. Temporal partitioning: Fixed cyclic schedule (major frame divided into time windows); each partition gets guaranteed CPU time regardless of others' behavior. Health monitoring: Partition-level, process-level, and system-level error handlers; faults contained within partition. Inter-partition communication: Sampling and queuing ports with explicit interfaces, validated at integration. Benefits: Independent certification of partitions (different DALs possible), Failure containment, and Common platform for multiple applications. Implementation requires careful scheduling analysis (worst-case execution time), and memory protection hardware. Certification evidence shows partitioning prevents interference. VxWorks 653, LynxOS-178, and PikeOS are certified ARINC 653 RTOS implementations.

Navigation Kalman filter fuses measurements from GPS, INS, air data, and other sensors. Design steps: State vector selection - typically 15+ states (position, velocity, attitude errors, accelerometer biases, gyro biases, possibly GPS errors); Dynamics model - error state propagation based on sensor characteristics and vehicle dynamics; Measurement model - how each sensor relates to states (GPS provides position/velocity, magnetometer provides heading, etc.). Tuning: Process noise (Q) reflects sensor drift and unmodeled dynamics; too low causes filter lag, too high causes noise. Measurement noise (R) reflects sensor accuracy; use Allan variance for inertial sensors. Techniques: Schmidt-Kalman for consider states, adaptive filtering for varying dynamics, fault detection using innovation monitoring. Validation: Monte Carlo simulation across scenarios, covariance analysis for consistency, and flight test data validation. Real-time considerations: Computational load, numerical stability (square-root or UD factorization).

Modern avionics connectivity (EFB, SATCOM, wireless) creates cybersecurity risks per DO-326A/ED-202A. Assessment: Identify entry points and threat vectors, Security Risk Assessment (SARA) analogous to safety assessment, and Threat and vulnerability analysis. Protections: Network architecture - separation of aircraft control domain from information services domain (e.g., Boeing 787 domains), firewalls and data diodes; Authentication and encryption - secure boot, cryptographic authentication of software loads, encrypted communication links; Monitoring - intrusion detection, anomaly monitoring, and audit logging. Certification: Security-specific supplement to safety processes, penetration testing, and ongoing vulnerability management. Challenges: Safety vs security tradeoffs (availability vs confidentiality), legacy system updates, supply chain security, and coordinated disclosure of vulnerabilities. EUROCAE WG-72 and RTCA SC-216 develop standards. Maintenance includes security patches throughout aircraft life.

Display latency (time from sensor data to pilot perception) affects control and situational awareness. Latency sources: Sensor sampling and processing, Data bus transmission, Symbol generation and rendering, and Display scan time. Target: <100ms end-to-end for primary flight data, <200ms for enhanced vision. Minimization strategies: High sensor sample rates with extrapolation, Prioritized data routing (AFDX virtual link scheduling), Efficient graphics pipeline (dedicated GPU, optimized drawing), LCD panel selection (response time <10ms, high refresh rate), and Predictive algorithms for display update. Measurement: End-to-end latency measurement with instrumentation, Compliance with DO-331 display requirements. Special considerations: Head-up display latency critical for landing, Enhanced/synthetic vision requires careful registration with outside world, and Touch input latency for pilot interaction.

Terrain databases for safety systems require rigorous validation per DO-200A (Standards for Processing Aeronautical Data). Process: Data sourcing - SRTM, national mapping agencies, and verified survey data; accuracy specification (100m or 30m horizontal, 30m vertical typical); Resolution selection - based on application (coarser for enroute, finer for approach). Validation: Statistical sampling against independent reference data, Complete coverage verification for intended areas, Anomaly detection (spikes, voids, mismatches at tile boundaries), and Water body classification accuracy. EGPWS-specific: Validation against charted obstacle data, Approach path clearance analysis, and Alert algorithm testing with known terrain. Configuration management: Version control, Update process integrity, and Distribution chain security. Type B data quality requirements ensure data integrity. Each aircraft application (EGPWS, SVS) has specific validation requirements documented in system design assurance.

DAA enables unmanned aircraft to maintain safe separation from other aircraft, replacing see-and-avoid. Architecture: Sensors - ADS-B In (cooperative traffic), active radar for non-cooperative traffic, and electro-optical/infrared for terminal operations. Tracking: Multi-sensor fusion for comprehensive air picture, Track initiation, maintenance, and classification, and Uncertainty estimation for decision making. Alerting: Remain Well Clear (self-separation) and Collision Avoidance (last resort) thresholds per RTCA DO-365. Guidance: Maneuver recommendations considering UAS performance, Conflict resolution coordinated with TCAS-equipped traffic, and Pilot-in-loop for manned operations or autonomous for BVLOS. Standards: RTCA DO-365 (MOPS), DO-366 (radar MOPS), and ASTM standards for smaller UAS. Challenges: Non-cooperative traffic detection range/reliability, Latency in command link for piloted response, and Certification of autonomy for collision avoidance.

Achieving 10^-9/FH (one failure per billion flight hours) requires systematic architecture design. Strategies: Redundancy - dual, triple, or quad channels with voting (2-out-of-3, etc.); Active-active or active-standby configurations; and Dissimilarity (different hardware/software) prevents common-mode failures. Monitoring: Self-test and cross-channel comparison, Watchdog timers, and Built-In Test (BIT) for fault detection. Reconfiguration: Automatic fault isolation and reconfiguration, Graceful degradation to reversionary modes, and Pilot alerting for degraded states. Analysis: Fault tree analysis (FTA) calculates system failure probability, Markov analysis for complex repairable systems, Common cause analysis (CCA) per ARP 4754A, and Dependent failure analysis. Practical considerations: Component failure rates from MIL-HDBK-217 or field data, Coverage factors for fault detection, Latent failure exposure time, and Maintenance intervals affect availability. Architecture validated through reliability analysis, simulation, and test.

Flight test validates avionics system performance and certification compliance. Planning: Test objectives derived from certification requirements and design specifications, Test matrix covering flight envelope (altitude, speed, configuration), Build-up from ground test through envelope expansion, and Risk assessment with mitigation measures. Execution: Instrumentation for data recording (flight test equipment), Real-time telemetry for safety-critical tests, Specific test conditions (GPS degraded, sensor failures), and Qualified test pilots with defined procedures. Key areas: Navigation accuracy versus references (DGPS truth), Sensor performance in flight environment, System behavior under induced failures, Human factors evaluation by operational pilots, and EMI/EMC in actual flight environment. Data analysis: Comparison to requirements, Statistical analysis for performance margins, and Identification of anomalies. Documentation: Test reports supporting certification, showing compliance with applicable standards. Flight test insights often drive design refinement.