Easy Access Rules For Airborne Communications Navigation and Surveillance Cs-Acns Issue 3
Easy Access Rules For Airborne Communications Navigation and Surveillance Cs-Acns Issue 3
Easy Access Rules For Airborne Communications Navigation and Surveillance Cs-Acns Issue 3
(Issue 3)
Easy Access Rules for Airborne
Communications, Navigation and
Surveillance (CS-ACNS)
EASA eRules will be a comprehensive, single system for the drafting, sharing and storing of rules. It
will be the single source for all aviation safety rules applicable to European airspace users. It will offer
easy (online) access to all rules and regulations as well as new and innovative applications such as
rulemaking process automation, stakeholder consultation, cross-referencing, and comparison with
ICAO and third countries’ standards.
To achieve these ambitious objectives, the EASA eRules project is structured in ten modules to cover
all aviation rules and innovative functionalities.
The EASA eRules system is developed and implemented in close cooperation with Member States and
aviation industry to ensure that all its capabilities are relevant and effective.
1
The published date represents the date when the consolidated version of the document was generated.
2
Euro-Lex, Important Legal Notice: http://eur-lex.europa.eu/content/legal-notice/legal-notice.html.
DISCLAIMER
This version is issued by the European Union Aviation Safety Agency (referred to as both ‘EASA’ and
‘the Agency’) in order to provide its stakeholders with an updated and easy-to-read publication. It has
been prepared by putting together the officially published regulations with the related acceptable
means of compliance and guidance material (including the amendments) adopted so far and
certification specifications and guidance material. However, this is not an official publication and EASA
accepts no liability for damage of any kind resulting from the risks inherent in the use of this document.
Certification specification
ED decision
Guidance material
ED decision
The units of measurement used in this document are in accordance with the International System of
Units (SI) specified in Annex 5 to the Convention on International Civil Aviation. Non-SI units are shown
in parentheses following the base units. Where two sets of units are quoted, it should not be assumed
that the pairs of values are equal and interchangeable. It may be inferred, however, that an equivalent
level of safety is achieved when either set of units is used exclusively.
The format of this document has been adjusted to make it user-friendly and for reference purposes.
Any comments should be sent to erules@easa.europa.eu.
INCORPORATED AMENDMENTS
CS, AMC & GM (ED DECISIONS)
Incorporated ED Decision CS/AMC Issue No, Amendment No Applicability date
ED Decision 2013/031/R Initial issue 1/1/2014
ED Decision 2019/011/R Issue 2 1/5/2019
ED Decision 2021/008/R Issue 3 30/6/2021
Note: To access the official versions, please click on the hyperlinks provided above.
TABLE OF CONTENTS
Disclaimer ...................................................................................... 3
Note from the editor ...................................................................... 4
Incorporated amendments ............................................................. 5
Table of contents............................................................................ 6
Preamble ..................................................................................... 19
Subpart A — General .................................................................... 20
CS ACNS.A.GEN.001 Applicability ........................................................................................20
CS ACNS.A.GEN.005 Definitions ..........................................................................................20
CS ACNS.A.GEN.010 Instructions for continued airworthiness ............................................26
AMC1 ACNS.A.GEN.010 Instructions for Continued Airworthiness ................................. 26
CS ACNS.A.GEN.015 Aircraft documentation .......................................................................27
AMC1 ACNS.A.GEN.015(a) Aircraft documentation ......................................................... 28
CS ACNS.A.GEN.020 Deviation from equipment standards ..................................................28
APPLICABILITY ........................................................................................................ 88
CS ACNS.C.PBN.601 Applicability ........................................................................................... 88
AMC1 ACNS.C.PBN.601 Applicability ......................................................................................... 88
GM1 ACNS.C.PBN.601 Applicability ........................................................................................... 88
SUPPLEMENTARY SYSTEM QUALIFICATION ........................................................... 89
CS ACNS.C.PBN.605 System performance demonstration ..................................................... 89
AMC1 ACNS.C.PBN.605 System performance demonstration ................................................... 89
GM1 ACNS.C.PBN.605 System performance demonstration ..................................................... 91
CS ACNS.C.PBN.610 Source of horizontal position ................................................................. 91
AMC1 ACNS.C.PBN.610 Source of horizontal position ............................................................... 91
GM1 ACNS.C.PBN.610 Source of horizontal position ................................................................. 91
SUPPLEMENTARY FUNCTIONAL CRITERIA.............................................................. 92
RNP system ............................................................................................................................ 92
CS ACNS.C.PBN.615 Autopilot/Flight director ............................................................................ 92
CS ACNS.C.PBN.620 Reversion ................................................................................................... 92
GM1 ACNS.C.PBN.620 Reversion ................................................................................. 92
CS ACNS.C.PBN.625 Go-around and missed approach ............................................................... 92
GM1 ACNS.C.PBN.625 Go-around and missed approach ............................................. 92
CS ACNS.C.PBN.630 Radius to fix (RF) leg transition .................................................................. 93
AMC1 ACNS.C.PBN.630 Radius to fix (RF) leg transition .............................................. 93
CS ACNS.C.PBN.635 Navigation accuracy for RNP AR operations .............................................. 93
AMC1 ACNS.C.PBN.635 Navigation accuracy for RNP AR operations ........................... 93
CS ACNS.C.PBN.640 RNP AR departures – Functional Requirements......................................... 93
AMC1 ACNS.C.PBN.640 RNP AR departures ................................................................. 94
GM1 ACNS.C.PBN.640 RNP AR departures .................................................................. 94
CS ACNS.C.PBN.645 RNP AR departures – Take off performance Data ...................................... 94
Display of navigation data ...................................................................................................... 95
CS ACNS.C.PBN.650 Display of aircraft track .............................................................................. 95
CS ACNS.C.PBN.655 Lateral deviation display ............................................................................ 95
AMC1 ACNS.C.PBN.655 Lateral deviation display ........................................................ 95
Navigation database .............................................................................................................. 95
CS ACNS.C.PBN.660 Use of a navigation database ..................................................................... 95
AMC1 ACNS.C.PBN.660 Use of a navigation database ................................................. 95
Vertical performance ............................................................................................................. 96
CS ACNS.C.PBN.670 Vertical accuracy ........................................................................................ 96
AMC1 ACNS.C.PBN.670 Vertical accuracy .................................................................... 96
AMC2 ACNS.C.PBN.670 Vertical accuracy .................................................................... 96
SUPPLEMENTARY PERFORMANCE CRITERIA .......................................................... 97
CS ACNS.C.PBN.675 RNP system design — RNP AR integrity ................................................. 97
AMC1 ACNS.C.PBN.675 RNP system design — RNP AR integrity ............................................... 97
CS ACNS.C.PBN.680 RNP system design — RNP AR continuity .............................................. 97
AMC1 ACNS.C.PBN.680 RNP system design — RNP AR continuity............................................. 97
Interoperability............................................................................................................... 260
PREAMBLE
CS-ACNS Issue 3
ED Decision 2021/008/R
CS-ACNS Issue 2
ED Decision 2019/011/R
SUBPART A — GENERAL
CS ACNS.A.GEN.001 Applicability
ED Decision 2019/011/R
These certification specifications are intended to be applicable to aircraft for the purpose of complying
with the communications, navigation and surveillance carriage requirements.
Compliance with the relevant sections of CS-ACNS ensures compliance with the following European
regulations:
(a) Commission Regulation (EU) No 965/2012 of 5 October 2012 laying down technical
requirements and administrative procedures related to air operations pursuant to Regulation
(EC) No 216/2008 of the European Parliament and of the Council;
(b) Commission Implementing Regulation (EU) No 1207/2011 of 22 November 2011 laying down
requirements for the performance and the interoperability for surveillance for the single
European sky;
(c) Commission Implementing Regulation (EU) No 1206/2011 of 22 November 2011 laying down
requirements on aircraft identification for surveillance for the single European sky;
(d) Commission Regulation (EC) No 29/2009 of 16 January 2009 laying down requirements on data
link services for the single European sky;
(e) Commission Implementing Regulation (EU) No 1079/2012 of 16 November 2012 laying down
requirements for voice channels spacing for the single European sky.
[Issue: CS-ACNS/2]
CS ACNS.A.GEN.005 Definitions
ED Decision 2019/011/R
ADS-B transmit unit refers to that part of the ADS-B Out system that resides within the transponder
and transmits 1090 MHz ES ADS-B data, including the data processing within that system.
Advisory alerts refers to the level or category of alert for conditions that require flight crew awareness
and may require subsequent flight crew response.
Advisory vertical navigation (‘Advisory VNAV’) is an area navigation system function guiding the
aircraft on a vertical path calculated by the area navigation system on an approach procedure that has
been designed as a 2D procedure.
Aircraft Identification is an alphanumeric chain that contains information allowing operational
identification of individual flights. It contains either the Aircraft Identification as registered in item 7
of the flight plan or the aircraft registration if no flight plan has been filed.
Airship is a power-driven lighter-than-air aircraft.
Alert is a generic term used to describe a flight deck indication meant to attract the attention of and
identify to the flight crew a non-normal operational or aeroplane system condition. Alerts are
classified at levels or categories corresponding to Warning, Caution, and Advisory. Alert indications
also include non-normal range markings (for example, exceedances on instruments and gauges).
Altimetry system error (ASE) refers to the difference between the altitude indicated by the altimeter
display, assuming a correct altimeter barometric setting, and the pressure altitude corresponding to
the undisturbed ambient pressure.
Area navigation (RNAV) is a method of navigation which permits aircraft operation on any desired
flight path within the coverage of ground or space-based navigation aids or within the limits of the
capability of self-contained aids, or a combination of these.
Aircraft-based augmentation system (ABAS) is an augmentation system that augments and/or
integrates the information obtained from the GNSS core constellation elements with other
information available on board the aircraft.
ATN B1 refers to Aeronautical Telecommunication Network Build 1.
ATS communications management service (ACM) is a service that provides automated assistance to
flight crews and air traffic controllers for conducting the transfer of ATC communications (voice and
data).
ATS clearance and information service (ACL) is a service that provides flight crews and controllers
with the ability to conduct operational exchanges.
ATS microphone check service (AMC) is a service that provides air traffic controllers with the
capability to send an instruction to one or several data link equipped aircraft, at the same time, in
order to instruct flight crew(s) to verify that his/their voice communication equipment is not blocking
a given voice channel.
Aural alert is a discrete sound, tone, or verbal statement used to annunciate a condition, situation, or
event.
Automatic altitude control system is any system that is designed to automatically control the aircraft
to a referenced pressure altitude.
Barometric altitude rate refers to the rate of climb estimated by using the difference of pressure.
Barometric pressure setting is the barometric pressure setting used by the pilot when flying the
aircraft.
Comm-B refers to a 112-bit Mode S reply containing a 56-bit MB message field containing the
extracted transponder register.
Caution refers to the level or category of alert for conditions that require immediate flight crew
awareness and a less urgent subsequent flight crew response than a warning alert.
Continuity of function refers, in the context of PBN operations, to the capability of the system to
perform its intended function without unscheduled interruptions.
Continuity (system continuity) is the probability that a system will perform its required function
without unscheduled interruption, assuming that the system is available at the initiation of the
intended operation.
Controlled flight into terrain (CFIT) is an accident or incident in which an aircraft, under the full control
of the pilot, is flown into terrain, obstacles, or water.
CPDLC is the ICAO standardised procedure for Controller-Pilot Data Link Communications. CPDLC takes
the form of an application, present on both aircraft and ground-based ATC centres that provides
support for the Data Link Communications Initiation Capability (DLIC), ATS communications
management service (ACM), ATS Clearance and Information service (ACL) and ATS microphone check
service (AMC).
Data link is a communication technology where ‘Data Link’ equipped aircraft communicate with ‘Data
Link’ capable ground units to exchange digital information (bi-directional exchange).
Data link communications initiation capability (DLIC) is a service that enables the exchange of the
necessary information for the establishment of data link communications between the ground and
aircraft data link systems.
Data quality indicator refers to integrity and/or accuracy quality metrics that are associated with
some of the ADS-B Out surveillance data, in particular with the horizontal position.
Defined path is the output of the path definition function of the RNP System.
Desired path is the path that the flight crew and air traffic control can expect the aircraft to fly, given
a particular route leg or transition.
Distance-measuring equipment (DME) refers to a ground–airborne positioning system based on
interrogations from an airborne interrogator and replies from a ground-based transponder, that
allows the aircraft to measure its slant range from the position of the ground-based DME transponder.
Downlink is a transfer of information, generated by an aircraft (not necessarily airborne) and sent to
the ground for further processing by an ATC Centre.
Emergency indicators refers to specific Mode A Code values: 7500 unlawful interference, 7600 radio
failure, 7700 general emergency.
Failure condition terms are defined in AMC 25.1309, FAA AC 23.1309-1( ), AC 27-1B or AC 29-2C.
FANS 1/A refers to Future Air Navigation System 1 or Future Air Navigation System A.
False alert is an incorrect or spurious alert caused by a failure of the alerting system including the
sensor.
Field of view refers to either the optimum or maximum vertical and horizontal visual fields from the
design eye reference point that can be accommodated with eye rotation only, as described in the
figure below.
Flight plan is, in the context of PBN operations, a set of route segments and flight procedures defined
and activated by the flight crew in the RNP system, relative to an intended flight or portion of a flight
of an aircraft.
FMS selected altitude refers to the level altitude used by the FMS to manage the vertical profile of
the aircraft.
Forward looking terrain avoidance (FLTA) looks ahead of the aeroplane along and below the
aeroplane’s lateral and vertical flight path and provides suitable alerts if a potential CFIT exists.
Global navigation satellite system (GNSS) refers to a worldwide position and time determination
system that includes one or more satellite constellations, aircraft receivers and system integrity
monitoring.
Ground Comm-B refers to a protocol which allows the interrogator to extract Comm-B replies
containing data from a defined source.
Ground speed is the speed of an aircraft relative to the surface, or relative to a horizontal plane at
present position.
Group aircraft is a group of aircraft with similar altitude keeping equipment configurations and
performance characteristics that are combined together for the purposes of statistical generic
performance evaluation. Typically group aircraft refers to aircraft constructed to the same Type
Certificate, Service Bulletin or Supplementary Type Certificate.
Hazard refers to a state or set of conditions that together with other conditions in the environment
can lead to an accident.
Holding is a predetermined manoeuvre which keeps an aircraft within a specified airspace.
Horizontal velocity refers to the ground speed vector information.
ICAO 24-bit aircraft address is a technical address used by Mode S protocols to identify the
transponder on the 1030/1090 MHz RF network. Each aircraft uses a unique 24-bit aircraft address
allocated by their state of registry. This address may also be used by other types of avionics equipment
for other purpose.
Inertial navigation system/inertial reference unit (INS/IRU) is an aircraft position sensor relying on
accelerometers and gyroscopes to estimate position, direction and velocity.
Inertial vertical velocity is the rate of climb measure along the axis estimated using different sources
including inertial reference.
Instrument landing system (ILS) is a system using ground-based transmitters and airborne receivers
to provide lateral (‘localiser’) and vertical (’glide slope’) guidance to the runway.
Integrity (system integrity) is measured as the probability per operating hour of an undetected failure
of a functional element that results in corrupted (erroneous) data, or a failure in the processing as
specified, leading to the (partial) loss of otherwise available data.
Lateral navigation (LNAV) refers to area navigation in the horizontal plane.
Magnetic Heading is the angle between the aircraft centreline and magnetic North (angle between
the direction to which the aircraft nose is pointing and the magnetic North).
MCP/FCU Selected Altitude is the level selected by the flight crew on the MCP or FCU of the aircraft.
This altitude constitutes the level-off target input to the auto-pilot.
Mean sea level (MSL) is a reference for measuring and specifying altitudes in aeronautical
information.
Mode S elementary surveillance refers to the use of Mode S surveillance data to downlink aircraft
information from airborne installations.
Mode S enhanced surveillance refers to the use of other airborne information in addition to data used
for Elementary Surveillance.
Navigation aid refers to a space- or ground-based facility that transmits signals that the aircraft’s
navigation system may use to determine its position or its bearing.
Navigation functionality is the detailed capability of the navigation system required to meet the needs
of the proposed operations in the airspace.
Navigation specification is a set of aircraft and aircrew requirements needed to support performance-
based navigation operations within a defined airspace.
Non-group aircraft refers to an aircraft that is not a group aircraft but which is submitted for
airworthiness approval on the characteristics of the unique airframe
Nuisance alert is an alert generated by a system that is functioning as designed but which is
inappropriate or unnecessary for the particular condition.
Performance-based navigation (PBN) is area navigation based on performance requirements for
aircraft operating along an ATS route, on an instrument approach procedure or in designated airspace.
Qualitative probability terms are defined in AMC 25.1309, FAA AC 23.1309-1( ), AC 27-1B or AC 29-
2C.
Required obstacle clearance (ROC) refers to the required vertical clearance expressed in ft between
an aircraft and an obstruction.
Required Terrain Clearance (RTC) is a terrain awareness and warning system (TAWS) FLTA mode that
alerts when the aeroplane is above the terrain in the aeroplane’s projected flight path, but the
projected amount of terrain clearance is considered unsafe for the particular phase of flight.
RNAV (X) specification refers to a navigation specification based on area navigation that does not
include the requirement for on-board performance monitoring and alerting, designated by the prefix
RNAV, where ‘X’ refers to the lateral navigation accuracy in nautical miles.
RNP (X) specification refers to a navigation specification based on area navigation that includes the
requirement for on-board performance monitoring and alerting, designated by the prefix RNP, where
‘X’ refers to the lateral navigation accuracy in nautical miles or the operation type.
RNP system is a system that supports area navigation operations by integrating information from one
or more positioning sensors and providing flight crew with the means to define a desired flight path.
Roll angle is the angle of wings compared to horizon representing the angle of rotation around the
roll axis going along the centreline of the aircraft.
RVSM flight envelope may be considered to be in two parts; the basic RVSM flight envelope and the
full RVSM flight envelope. The basic envelope includes those ranges of Mach numbers and gross
weights at which the aircraft can most frequently be expected to operate at RVSM levels (i.e. FL 290
to FL 410 (or maximum attainable altitude)). The full envelope refers to the entire range of Mach
numbers, gross weights and altitude values that the aircraft can be operated in RVSM airspace.
RVSM operational flight envelope is the Mach number, W/, and altitude ranges over which an
aircraft can be operated in cruising flight within the RVSM airspace.
Satellite-based augmentation system (SBAS) is a wide coverage augmentation system which
monitors the GNSS core constellation(s) and provides the user with augmentation information
through a satellite-based transmitter.
Search volume is a volume of airspace around the aeroplane’s current and projected path that is used
to define a TAWS alert condition.
Static source error (SSE) is the difference between the pressure sensed by the static system at the
static port and the undisturbed ambient pressure.
Static source error correction (SSEC) is the correction for the residual static error to ensure
compliance with performance requirements.
Terrain cell is a grid of terrain provided by the TAWS database which identifies the highest terrain
elevation within a defined geographical area. Terrain cell dimensions and resolution can vary
depending on the needs of the TAWS system and availability of data. If a supplier desires, obstacle
height can be included in the terrain elevation.
Track is the projection on the earth’s surface of the path of an aircraft, the direction of which is usually
expressed in degrees from north (true, magnetic or grid).
Track angle rate is the rate of change of the track angle.
Transmit refers to the provision of surveillance data by the transponder.
Transponder is a device that transmits airborne surveillance data spontaneously or when requested.
The transmissions are performed on 1090 MHz RF band and the interrogations are received on 1030
MHz RF band using SSR/Mode S protocols. It is also named Secondary Surveillance Radar transponder.
Transponder level is an indication of which Mode S data-link protocols are supported by a
transponder. There are 5 transponder levels defined by ICAO.
Transponder register is a transponder data buffer containing different pieces of information. It has 56
bits which are split in different fields. The definition of the transponder registers can be found in ICAO
Doc 9871 edition 2 and in transponder MOPS ED-73E with the ICAO document being the reference
document in case of conflict. Transponder registers are numbered in hexadecimal (00hex to FFhex).
The register number is also known as the BDS code (Comm-B data selector). In this documentation a
register is named: register XY16 or register addressed by BDS code X,Y. Outside this document, it is also
often referenced as just BDS X,Y.
True track angle is the angle between the track (course over ground or path) of the aircraft and true
north.
Uplink is a transfer of information, issued from any ground-based entity (typically: the ATC Centre
under which the aircraft is under responsibility) to an aircraft (not necessarily airborne).
Vertical navigation (VNAV) refers to a method of navigation based on a computed vertical path.
VHF omnidirectional range (VOR) is a ground–airborne positioning system based on signals in space
transmitted by the VOR ground station to the aircraft VOR receiver to measure its angular position
from the ground station.
Warning refers to the level or category of alert for conditions that require immediate flight crew
awareness and immediate flight crew response.
Worst case avionics is a combination of tolerance values, specified by the aircraft constructor for the
altimetry fit into the aircraft, which gives the largest combined absolute value for residual SSE plus
avionics errors.
[Issue: CS-ACNS/2]
and test duration. Also inform them of the altitude(s) at which you will be testing, your
intended Aircraft Identification (Flight Id) and your intended Mode A code.
Note: Certain altitudes may not be possible due to over flying aircraft.
(3) Set the Mode A code to 7776 (or other Mode A code agreed with Air Traffic Control Unit).
Note: The Mode A code 7776 is reserved for SSR ground transponder monitoring. This
code may be used for transponder testing after having received agreement from the Air
Traffic Control Unit.
(4) Set the Aircraft Identification (Flight Id) with the first 8 characters of the company name.
This is the name of the company conducting the tests.
(5) Set the on-the-ground status for all Mode S replies, except when an airborne reply is
required (e.g. for altitude testing).
(6) Where possible, perform the testing inside a hangar to take advantage of any shielding
properties it may provide.
(7) As a precaution, use antenna transmission covers whether or not testing is performed
inside or outside.
(8) When testing the altitude (Mode C or S) parameter, radiate directly into the ramp test
set via the prescribed attenuator.
(9) In between testing, i.e., to transition from one altitude to another, select the transponder
to ‘standby’ mode.
(10) If testing transponder parameters other than ‘altitude‘, set altitude to minus 300 m
(minus 1 000 feet) or over 18 250 m (60 000 feet). This will minimise the possibility of
ACAS warning to airfield and overflying aircraft.
(11) When testing is complete, select the transponder(s) to ‘OFF‘ or ‘Standby’.
(b) Reduced Vertical Separation Minima
When developing the instructions for continued airworthiness, attention should be given to the
following items:
(1) All RVSM equipment should be maintained in accordance with the component
manufacturers' maintenance instructions and the performance criteria of the RVSM
approval data package.
(2) Any repairs, not covered by approved maintenance documents, that may affect the
integrity and accuracy of the altimeter system, e.g. those affecting the alignment of
pitot/static probes, repairs to dents or deformation around static plates should be subject
to a design review which is acceptable to the competent authority.
(3) Airframe geometry or skin waviness checks should be performed following repairs or
alterations which have an effect on airframe surface and airflow.
(4) The maintenance and inspection programme for the autopilot should ensure continued
accuracy and integrity of the automatic altitude control system.
(a) The aircraft flight manual (AFM), or similar documentation approved by EASA, provides the list
of aircraft capabilities for which the aircraft is certified in accordance with this CS.
(b) If there are deviations from this CS which result in limitation(s), they are to be clearly stated in
the AFM or similar documentation approved by EASA.
[Issue: CS-ACNS/2]
An acceptable means of compliance in the case of aircraft PBN capabilities is to specify in the
documentation which of the following navigation specifications and functionalities the aircraft is
certified for:
(a) RNAV 10,
(b) RNAV 5,
(c) RNAV 2,
(d) RNAV 1,
(e) RNP 4,
(f) RNP 2,
(g) RNP 1,
(h) RNP 0.3,
(i) A-RNP,
(j) RNP APCH,
(k) RNP AR (for approach and/or departures),
(l) RF (specify the associated navigation specifications),
(m) FRT,
(n) parallel offset.
[Issue: CS-ACNS/2]
Any deviations from the ETSO referenced in this CS and associated AMC are to be evaluated to ensure
compliance with the CS requirements.
[Issue: CS-ACNS/2]
GENERAL
CS ACNS.B.VCS.001 Applicability
ED Decision 2013/031/R
The section provides standards for aircraft voice communication systems operating in the band
117,975-137 MHz.
The VCS equipment composing of the system should be approved in accordance with ETSO-2C37e,
ETSO-2C38e or ETSO-2C169a.
For the 25 kHz channel spacing off-set carrier frequency operations the equipment composing the
system should conform with the requirements of EUROCAE document ED-23C
In airspace where 8.33 kHz channel spacing communication equipment is mandatory and the carriage
of two radios is required, both radios should be 8.33 kHz capable (as opposed to one 8.33 kHz system
and one 25 kHz system).
The voice communication systems conforms to the performance requirements of the following
sections of ICAO Annex 10, Volume III, Part 2 (Second Edition — July 2007 incorporating Amendment
No 90) Chapter 2 ‘Aeronautical Mobile Service’:
(a) Section 2.1 ‘Air-ground VHF communication system characteristics’.
(b) Section 2.2 ‘System characteristics of the ground installations’.
CS ACNS.B.VCS.025 Integrity
ED Decision 2013/031/R
The voice communication systems is designed commensurate with a ‘major’ failure condition.
CS ACNS.B.VCS.030 Continuity
ED Decision 2019/011/R1/R
For aircraft that are foreseen to be operated within airspace where continuous air-ground voice
communications is required, the continuity of the voice communication system is designed to an
allowable qualitative probability of ‘remote’, except for
(a) Class I aircraft, as defined in FAA AC 23-1309-1E, certified to a CS-23 amendment prior to 5, and;
(b) aircraft with type code 1SRXXXXX or 2SRXXXXX as defined in ASTM International Standards
F3061/F3061M – 17 and certified to CS-23 Amendment 5 or subsequent amendments
where the continuity of the voice communication system may be designed to an allowable qualitative
probability of ‘probable’.
[Issue: CS-ACNS/2]
INSTALLATION REQUIREMENTS
Flight Crew control and display of communication frequencies information should be consistent with
the overall crew flight deck design philosophy.
GENERAL
CS ACNS.B.DLS.B1.001 Applicability
ED Decision 2013/031/R
GM1.ACNS.B.DLS.B1.001 Applicability
ED Decision 2013/031/R
Controller pilot communications through data link is used in different airspaces worldwide. Different
technologies are used, and this CS is intended to provide the airworthiness standard for such
installations. Additionally, controller pilot communications over ATN B1 data link technology has been
mandated in Europe, through the Regulation (EC) No 29/2009. Installations intended to operate within
EU Airspace defined in mentioned regulation, should fully comply with all requirements of ‘DATA LINK
SERVICES’ section, in its entirety.
Installations not intended to operate within EU Airspace, are not required to comply with mentioned
section.
Note: Requirements CS ACNS.B.DLS.B1.010 and 015 are also applicable for CPDLC installations where,
additionally to ATN B1 over VDL M2, other means of communications and other services are also
provided.
(b) A means is provided to prohibit the deletion, confirmation, or clearance of a message until the
entire message is displayed.
Flight crew control and display of data link related information (connectivity status, outstanding
messages, etc.) should be consistent with the overall crew flight deck design philosophy.
Flight crew control and display of data link messages should satisfy integrity and interface design
criteria appropriate for the intended purpose. Reference to the applicable CS xx.1309 requirements
should be observed.
If a direct interface exists between the data link application and other on board systems, (e.g. flight
planning and navigation), a means may be provided for the flight crew to initiate the use of the data
contained in the message by the other on board system. The means provided should be separate from
that used to respond to a message.
Flight deck annunciations should be compatible with the overall alerting scheme of the aircraft.
Audible and visual indications should be given by the data link system for each uplinked ATS message,
including those messages not displayed immediately because of lack of crew response to an earlier
ATS message. Visual alerts alone may be used for non-ATS messages.
Annunciation of the receipt of a message during critical flight phases should be inhibited until after
the critical flight phase. The criteria that define critical flight phases should be consistent with the
particular flight deck philosophy and the particular data link services supported.
Means should be provided for the flight crew to list, select, and retrieve the most recent ATS messages
received and sent by the flight crew during the flight segment. The status of each message, the time
it was received or sent, should be accessible.
When CPDLC messages are displayed:
(a) such location should be in the Primary Field of View.
(b) messages should be provided in a dedicated display (or in a dedicated window of a display).
Shared use of CPDLC and other applications in a common display (or in the same window of a
display) should be avoided.
Note 1: (a) and (b) are intended for future extension of CPDLC use beyond en-route flight phase.
Installations not in accordance with these recommendations are liable to be limited for CPDLC
operations in the en-route or prior departure flight phase.
Note 2: Where data link messages are displayed on a shared display or on a shared display area,
selection of another display format or function should not result in the loss of uplinked messages
which are waiting for a response. In case the pilot is working on another task and a message is
uplinked, the uplinked message should not interrupt the current work, nor result in the loss of
any uplinked message and/or data entered while accomplishing the other task.
(c) messages from the ATS should remain displayed until responded, cleared or the flight crew
selects another message.
(d) means should be provided for the flight crew to clear uplinked messages from the display.
However, this capability should be protected against inadvertent deletion.
Means should be provided for the flight crew to create, store, retrieve, edit, delete, and send data link
messages.
The data link system should indicate when message storage and/or printing is not available.
A flight deck printer could be used as a means of storing data communications messages received or
sent during flight.
If a message intended for visual display is greater than the available display area and only part of the
message is displayed, a visual indication shall be provided to the pilot to indicate the presence of
remaining message.
Data link messages from the ATS should be displayed and remain displayed until responded, cleared
or the flight crew selects another message.
The status of each message (i.e. source, time sent, open/closed) should be displayed together with
the message.
Note: A Dual stack system is either a bilingual system capable of automatically selecting the data link
network or a dual system that use manual selection with an interlock system.
The data link system should comply with ED-154A, interoperability requirements IR-207, IR-209, IR-
210, IR-211, IR-212, IR-214, and IR-215 to ensure seamless transition between two adjacent ATSUs,
one using FANS 1/A+ and the other using ATN B1.
The data link system should demonstrate common accessibility to the FANS 1/A and ATN B1 CPDLC
applications. Accessibility demonstration should include common controls (i.e. line select keys) or,
where different, the potential to introduce confusion or unacceptable flight crew workload should be
evaluated.
The data link system should demonstrate common control and input procedures for retrieving and
responding to FANS 1/A and ATN B1 uplink messages.
The data link system should demonstrate common control and input procedures for composing and
sending FANS 1/A and ATN B1 downlink messages.
The data link system should demonstrate common flight deck indications for incoming FANS 1/A and
ATN B1 messages. Where common alerting is not demonstrable, the alerting scheme evaluate to
ensure that neither confusion nor unnecessary flight crew workload is introduced.
Annunciations and indications should be clear, unambiguous, timely, and consistent with the flight
deck philosophy.
FANS 1/A differentiates messages alerting between normal and Urgent. Upon receipt of a high alert
CPDLC message, the data link system should indicate it to the flight crew.
Note: FANS 1/A standard (ED-100A) identifies the term ‘IMMEDIATELY’, within the phraseology
standardised for CPDLC communications. This term is to be understood within the required
communications performance scope (RCP), which for oceanic and remote operations is either 240
seconds or 400 seconds. The use of these terms ‘IMMEDIATELY’ and ‘EXPEDITE’ are not to be confused
with the terminology used in material related to CS 25.1322. However, annunciations and indications
should allow flight crews to easily identify these messages (associated with Urgent and Distress
urgency attribute) among the normal messages.
Flight Deck Display of Messages from either FANS 1/A or ATN B1 CPDLC Applications:
A common flight deck display should be capable of displaying messages with the same
operational intent resulting from same message elements that may be implemented differently
between FANS 1/A and ATN B1 CPDLC applications. The common format to display FANS 1/A
messages may be in accordance with the preferred format denoted in Annex A of ED 122, which
is consistent with Doc 4444, 15th Ed, and ATN B1 message formats.
Dual Stack ATS Data Link System Status Indication:
The system should provide the flight crew with a means to clearly identify the status of different
modes of the data link system that affect significant operational capability. Examples of
different modes of data link may include situations when downlink messages are available in
one airspace, but not the other; or messages that may or may not be loadable depending on
system status, i.e., ATN B1 or FANS 1/A.
ATSU Connections and Handoffs:
The system should be capable of the following functions:
(1) Proper connection and termination for FANS 1/A ATSU.
(2) Proper connection and termination for ATN B1 ATSU.
(3) Transfer to next data authority (e.g., FANS 1/A ATSU to ATN B1 ATSU), in both directions.
This should include proper connection, maintenance of connection and connection
termination protocol to ensure that aircraft does not hold two simultaneous active CPDLC
connections.
(4) Ability for flight crew to manually terminate existing connection and establish new
connection, initiate a DLIC ‘logon’ in both directions (i.e., FANS 1/A-to-ATN B1 and ATN
B1-to-FANS 1/A).
(5) Ability for flight crew to verify current and next facility designation or name.
Note: FAA AC 20-140A provides adequate guidance related to the application interoperability, sub-
networks and performance designators. (refer to Tables 5.1 and 5.2).
When the aircraft has no CPDLC Current Data Authority, the data link aircraft equipment should
provide crew members entering an airspace of a data link equipped ATS unit with the capability to
initiate a DLIC ‘Logon’ function (e.g. send a CMLogonRequest message) with the applicable ATS unit,
in order to identify the aircraft and initiate the use of data link services.
Community Specification EN 303 214 ‘Data Link Services (DLS) System’ provides a set of test scenarios
that demonstrated using verified ground data link system or ground data link system simulator.
The AMC service provides CPDLC ATC instructions to flight crew(s) requesting him/them to
verify the status of his/their voice communication equipment
The data link system should comply with the following applicable ATN Baseline 1 standards:
— ICAO Document 9705 (Edition 2) for ICS (Sub-Volume V), ULCS (Sub-Volume IV), CM CPDLC (Sub-
Volume II) ASE requirements;
— EUROCAE Document ED-110B;
— ICAO Document 9776 and ARINC 631-6 for VDL Mode 2 multi-frequency operations.
The data link aircraft equipment should provide support for the CPDLC application message integrity
check mechanism , with support for ‘default checksum algorithm’ only.
Where ARINC 631-6 identifies a specific deviation from ICAO Doc 9776 (Manual on VDL Mode 2), the
provisions of the former should take precedence.
ARINC 631-6 also references ARINC 750 for definition of Signal Quality Parameter (SQP) levels.
Measurements of SQP levels may be passed over the air-ground link as parameters in the XID
exchanges.
EUROCAE Document ED-110B sections 3.3.5.1 and 3.3.6 mentions an ‘ATN Message Checksum
Algorithm’ (or ‘Application Message Integrity Check (AMIC)’) that does not exist in ICAO Document
9705 Edition 2. These terms are correctly referenced in ICAO Doc 9705 PDR M60050001.
Both ICAO Document 9705 and EUROCAE Document ED-110B include requirements for the support of
FIS and ADS-C applications. These two applications are not mandated for operations in European
airspace. Data link aircraft implementations are free to support these applications and should notify
their application availability in the DLIC logon function.
CS ACNS.B.DLS.B1.030 Integrity
ED Decision 2013/031/R
The data link system integrity is designed commensurate with a ‘major’ failure condition.
CS ACNS.DLS.B1.035 Continuity
ED Decision 2013/031/R
The data link system continuity is designed to an allowable qualitative probability of ‘probable’.
TIME
A Global Navigation Satellite System (GNSS) sensor provides an acceptable source of synchronised
UTC time.
Time synchronisation is required by ICAO Annex II, chapter 3, section 3.5 as referred by EUROCAE
Document ED-110B, section 3.3.2. It is also identified as a safety requirement in EUROCAE Document
ED-120 (e.g. SR-ACL-15).
Data link aircraft equipment should comply with ICAO Doc 9705 (Edition 2), section 2.1.4 and
EUROCAE Document ED-110B, section 2.2.1.
Data link aircraft equipment should comply with ICAO Doc 9705 (Edition 2), section 2.1.4 and
EUROCAE Document ED-110B, section 2.2.1.
When the data link system is in the ‘CPDLC inhibited’ state, DLIC Contact Request is processed but the
system is remaining in the ‘CPDLC inhibited’ state.
CPDLC MESSAGES
The data link system is capable of receiving and processing the following message elements:
UM160 NEXT DATA AUTHORITY [facility]
UM227 LOGICAL ACKNOWLEDGEMENT
The data link system should comply with EUROCAE Document ED-110B section 2.2.3 and comply with
the CPDLC message syntax ICAO Doc 9705 (Edition 2), section 2.1.4.
For the sole exception of UM117, the data link system should prepare the appropriate response
downlink message to a received uplink message in compliance with EUROCAE Document ED-110B,
section 2.2.3.3 Table 2-4. Received uplink messages with response type ‘A/N’ as indicated in the
‘Response’ column should be responded with either DM4 (AFFIRM) or DM5 (NEGATIVE). Received
uplink messages with response type ‘R’ as indicated in the ‘Response’ column should be responded
with DM3 (ROGER) or with DM1 (UNABLE). When UM117 CONTACT is received, no DM89
MONITORING message should be sent.
The data link aircraft system should also handle unsupported messages (i.e. uplink message not
referenced in CS ACNS.B.DLS.B1.050) as specified in EUROCAE Document ED-110B, section 3.3.7.6.
EUROCAE Document ED-110B requires (in Table 4-3, item 6a) aircraft to send the DM89 (MONITORING
[unitname] [frequency]) CPDLC message upon receipt of a UM117 (CONTACT) or UM120 (MONITOR)
CPDLC message. The sending of DM89 could manually prepared and sent by the flight crew in response
to UM120 but not for UM117.
The following table associates uplink CPDLC messages to the data link services.
The above ACL messages correspond to the common subset of ACL messages defined in EUROCAE
Document ED-120 section 5.2.1.1.5 as required by Regulation (EC) No 29/2009.
DM1 UNABLE
DM2 STANDBY
DM3 ROGER
DM4 AFFIRM
DM5 NEGATIVE
DM6 REQUEST [level]
DM18 REQUEST [speed]
DM22 REQUEST DIRECT TO [position]
DM32 PRESENT LEVEL [level]
DM62 ERROR [errorInformation]
DM63 NOT CURRENT DATA AUTHORITY
DM65 DUE TO WEATHER
DM66 DUE TO AIRCRAFT PERFORMANCE
DM81 WE CAN ACCEPT [level] AT [time]
DM82 WE CANNOT ACCEPT [level]
DM89 MONITORING [unitname] [frequency]
DM98 [freetext]
DM99 CURRENT DATA AUTHORITY
DM100 LOGICAL ACKNOWLEDGEMENT
DM106 PREFERRED LEVEL [level]
DM107 NOT AUTHORIZED NEXT DATA AUTHORITY
DM109 TOP OF DESCENT [time]
The data link system should comply with EUROCAE Document ED-110B section 2.2.3 and comply with
the CPDLC message syntax ICAO Doc 9705 (Edition 2), section 2.1.4.
For the sole exception of UM117, data link aircraft equipment should prepare the appropriate
response downlink message to a received uplink message in compliance with EUROCAE Document ED-
110B, section 2.2.3.3 Table 2-4. When UM117 CONTACT is received, no DM89 MONITORING message
should be sent.
The following table associates downlink messages to the data link services.
The above ACL messages correspond to the common subset of ACL messages defined in EUROCAE
Document ED-120 section 5.2.1.1.5 as required by Regulation (EC) No 29/2009.
The data link system may also allow the sending the following ACL messages defined in EUROCAE
Document ED-120 section 5.2.1.1.5. The message syntax should also comply with ICAO Doc 9705
(Edition 2), section 2.3.4.
ID Message
DM9 REQUEST CLIMB TO [level]
DM10 REQUEST DESCENT TO [level]
DM27 REQUEST WEATHER DEVIATION UP TO
[specifiedDistance] [direction] OF ROUTE
Note: To prevent costly retrofitting, implementation of the above optional messages is highly
recommended.
(a) The data link aircraft equipment DLIC logon function should comply with the aircraft system PR-
DLIC-Init-ETRCTP and PR-DLIC-Init-TT performance values, respectively 6 seconds and 4 seconds,
as specified in EUROCAE Document ED-120 Table A-3.
(b) The data link aircraft equipment DLIC contact function should comply with the aircraft system
PR-DLIC-Cont-ETRCTP and PR-DLIC-Cont-TT performance values, respectively 12 seconds and 8
seconds, as specified in EUROCAE Document ED-120 Table A-3.
(c) The data link system should:
(1) not permit data link services when there are incompatible DLIC version numbers;
(2) reinitiate the service with the applicable ATSUs when any of the application or flight
information changes;
(3) insert the relevant initiation data in the initiation messages;
(4) not affect the intent of the DLIC message during processing (data entry/encoding/
transmitting/decoding/displaying).
The Performance Tables in the main body of EUROCAE Document ED-120 for DLIC (Table 4-8 and
Table 4-9), ACM (Table 5-21) and ACL (Table 5-31 and Table 5-32) provide the allocated values for the
required transaction performance.
A detailed allocation for Aircraft delays is provided in EUROCAE Document ED-120 Annex A Table A-3.
The data link system for ACM conforms with section 5.1.1, 5.1.2.3 (excluding requirements relating to
downstream clearance) and 5.1.3.2 of EUROCAE Document ED-120 Safety and Performance
Requirements Standard For Initial Air Traffic Data Link Services In Continental Airspace, including
change 1 and change 2.
The data link system for ACM service should comply with the aircraft system PR-ACM-ETRCTP and PR-
ACM-TT performance values, respectively 6 seconds and 4 seconds, as specified in EUROCAE
Document ED-120 Annex A Table A-3.
The Performance Tables in the main body of EUROCAE Document ED-120 for DLIC (Table 4-8 and
Table 4-9), ACM (Table 5-21) and ACL (Table 5-31 and Table 5-32) provide the allocated values for the
required transaction performance.
A detailed allocation for Aircraft delays is provided in EUROCAE Document ED-120 Annex A/Table A-3.
The data link system for ACL service should comply with the aircraft system PR-ACL-ETRCTP and PR-ACL-
TT performance values, respectively 6 seconds and 4 seconds, as specified in EUROCAE Document ED-
120 Annex A Table A-3.
The Performance Tables in the main body of EUROCAE Document ED-120 for DLIC (Table 4-8 and
Table 4-9), ACM (Table 5-21) and ACL (Table 5-31 and Table 5-32) provide the allocated values for the
required transaction performance.
A detailed allocation for Aircraft delays is provided in EUROCAE Document ED-120 Annex A Table A-3.
The data link system for AMC conforms with section 5.3.1, 5.3.2.3 and 5.3.3.2 of EUROCAE Document
ED-120 Safety and Performance Requirements Standard For Initial Air Traffic Data Link Services In
Continental Airspace, including change 1 and change 2.
INTEROPERABILITY REQUIREMENTS
The ATN Router should comply with ICAO Document 9705 (Edition 2), sections 5.2.4.1, 5.2.4.3 with an
IDRP Hold Time value of 900 seconds.
Compression Schemes
Airborne ATN Router may implement several distinct, yet complementary, compression schemes.
Airborne ATN Routers should support the CLNP Header Compression (also known as ‘LREF
Compression’). Other compression schemes in ICS are optional.
In addition to the CLNP Header Compression, data link ATN Routers that claims support for optional
DEFLATE compression should also support ICAO PDU M0070002 (‘Interoperability impact when
deflate compression is used. Non-compliance with Zlib’).
The ATN End System of the data link aircraft equipment should comply with the Transport Protocol
Class 4 specified in ICAO Document 9705 (Edition 2), Sub-volume V, section 5.5.2.
The data link aircraft equipment should implement Transport Protocol Class 4 parameter settings in
accordance with the following table:
Scope Parameter Definition Value
Inactivity Inactivity time (I) A bound for the time after which a transport 360 sec
entity will, if it does not receive a Transport
Protocol Data Unit (TPDU), initiate the release
procedure to terminate the transport
connection.
Re-transmission Retransmission A bound for the maximum time the transport Initial value
time (T1) entity will wait for acknowledgement before re- 30 sec
transmitting a TPDU.
The retransmission time is adaptive.
Maximum Maximum number of TPDU retransmissions. 7
Retransmission
(N)
Window Window time (W) A bound for the maximum time a transport 120 sec
entity will wait before retransmitting up-to-
date window information.
Flow Control Local A bound for the maximum time which can 1 sec
Acknowledgement elapse between the receipt of a TPDU by the
delay (Al) local transport entity from the network layer
and the transmission of the corresponding
acknowledgement.
(a) The ATN End System of the data link aircraft equipment should support a Session Protocol as
specified in ICAO Doc 9705 (Edition 2), Sub-Volume IV, section 4.4 including the ISO/IEC 8327
Technical Corrigendum 1 (2002), listed in the following table.
(b) The ATN End System Session Protocol of the data link system should make use of the value ‘E3’
to encode the Short Refuse (SRF) SPDU.
(a) The ATN End System of the data link aircraft equipment should support a Presentation Protocol
as specified in ICAO Doc 9705 (Edition 2), Sub-Volume IV, section 4.5, and listed in the following
table:
Value (Hex) Abbreviation Full PPDU Name
02 SHORT-CP Short Presentation Connect, unaligned PER
02 SHORT-CPA Short Presentation Connect Accept, unaligned PER
x2 SHORT-CPR Short Presentation Connect Reject
Where x = reason code:
02: presentation-user
12: reason not specified (transient)
22: temporary congestion (transient)
32: local limit exceeded (transient)
42: called presentation address unknown (permanent)
52: protocol version not supported (permanent)
62: default context not supported (permanent)
72: user data not readable (permanent)
(b) The ATN End System Presentation Protocol of the data link aircraft equipment should make use
of the value ‘02’ to encode the SHORT-CPR PPDU.
(a) The ATN End System of the data link system should support an ATN Convergence Function
compliant with ICAO Doc 9705 (Edition 2), Sub-volume IV, section 4.3.
(b) The ATN End System of the data link system should support an ATN Association Control Service
Element (ACSE) compliant with ICAO Doc 9705 (Edition 2), Sub-volume IV, section 4.6.
From an OSI perspective, the ATN Application layer is composed of three distinct parts:
— Layer 7a, that includes all application-independent services (Convergence Function + ACSE).
— Layer 7b, that includes all application-dependent service elements (such as the CPDLC-ASE).
— Layer 7c, that includes applications (such as the CPDLC application, that uses CPDLC-ASE for its
communications with ground-based systems).
CS ACNS.B.DLS.B1.125 Database
ED Decision 2013/031/R
The Network Service Access Point (NSAP) address database is capable of being updated.
APPENDICES
(a) General
This appendix provides additional references, background information, and guidance for
maintenance testing, as appropriate to Voice Communication System installations.
(b) Related References
(1) EASA
i. ETSO-2C37e, VHF Radio Communication Transmitting Equipment Operating Within
the Radio Frequency Range 117.975–137 Megahertz
ii. ETSO-2C38e,VHF Radio Communication Receiving Equipment Operating Within the
Radio Frequency Range 117.975–137 Megahertz
iii. ETSO-2C169a VHF Radio Communications Transceiver Equipment Operating
Within the Radio Frequency Range 117.975 To 137 Megahertz.
(2) ICAO
ICAO Annex 10, Volume III, Part II, Voice Communication Systems, Chapter 2 Aeronautical
Mobile Service — Second Edition including amendment 85.
(3) EUROCAE
ED-23C June 2009 MOPS for airborne VHF Receiver-Transmitter operating in the
frequency range 117.975 – 137.000 MHz.
(a) General
This appendix provides additional references, background information, and guidance for
maintenance testing, as appropriate to Data Link System installations.
(b) Related References
(1) ICAO
i. ICAO Doc 4444 Air Traffic Management 15th Ed 2007
ii. ICAO Doc 9705 MANUAL OF TECHNICAL PROVISIONS FOR THE AERONAUTICAL
TELECOMMUNICATION NETWORK (ATN) 2nd Ed 1999
iii. ICAO Doc 9776 Manual on VHF Digital Link (VDL) Mode 2 1st Ed 2001.
(2) ARINC
Specification 631-6 Guidelines for Design Approval of Aircraft Data Link Communication
Systems Supporting Air Traffic Services (ATS) dated 11/2010
(3) FAA
AC 20-140B Guidelines for Design Approval of Aircraft Data Link Communication Systems
Supporting Air Traffic Services (ATS) dated 27/09/2012
(4) EUROCONTROL
i. LINK2000+/ATC DATA LINK OPERATIONAL GUIDANCE, Version 6.0, Date: 17
December 2012.
ii. LINK 2000+ Guidance to Airborne Implementers, Version 1.1, Date: 09 December
2009.
iii. LINK2000+/FLIGHT CREW DATA LINK OPERATIONAL GUIDANCE Version 5.0, Date:
17 December 2012.
iv. LINK2000+ Programme, Generic Interop Test Plan for Avionics - Part 1, Upper
Layers and CM/CPDLC applications, Version 2.3, Date: 15th June 2010.
(5) ISO/IEC
i. Document 8073 Information technology -- Open Systems Interconnection --
Protocol for providing the connection-mode transport service Edition 4,0 including
amendment 1 dated 09/1998
ii. Document 8602 Information technology -- Protocol for providing the OSI
connectionless-mode transport service Edition 2,0 including amendment 1 dated
12/1996
iii. ISO/IEC 8327-1:1996 Information technology — Open Systems Interconnection —
Connection-oriented Session protocol: Protocol specification TECHNICAL
CORRIGENDUM 1 Published 15/05/2002
(6) EUROCAE
i. ED-110B December 2007 Interoperability Requirements Standard for Aeronautical
Telecommunication Network Baseline 1 (Interop ATN B1),
ii. ED-120 May 2004 Safety and Performance Requirements Standard For Initial Air
Traffic Data Link Services In Continental Airspace (SPR IC) including change 1 and
change 2.
iii. ED-122 February 2011 Safety and Performance Standard for Air Traffic Data Link
Services in Oceanic and Remote Airspace (Oceanic SPR Standard)
iv. ED-154A March 2012 Future Air Navigation System 1/A (FANS 1/A) - Aeronautical
Telecommunications Network (ATN) Interoperability Standard
CS ACNS.C.PBN.101 Applicability
ED Decision 2019/011/R
(a) Table 1 indicates the applicable airworthiness requirements to be met by the airborne RNP
system installation in order to obtain airworthiness approval for the RNP specifications
addressed in this CS. Applicants should select the target PBN specification from the left column
and then follow the respective row to the right.
(b) Subsection 2 provides also certification criteria for RNAV 10, RNAV 5, RNAV 2 and RNAV 1.
(c) The RNP 0.3 specification is applicable to helicopters.
LPV minima, which are supported by SBAS VNAV only. An applicant may opt to apply for
approval of the RNP system to conduct operations to LNAV/VNAV minima, LPV minima
or both.
Subsection 6: Supplementary specifications for RNP authorisation required (AR)
Subsection 6 includes criteria for RNP AR APCH and RNP AR departures. An applicant may
opt to only apply for approval for RNP AR APCH.
Subsection 7: Supplementary specifications for applications for advanced RNP (A-RNP)
Subsection 8: Supplementary specifications supporting radius to fix (RF)
Subsection 9: Supplementary specifications supporting fixed radius transition (FRT)
Subsection 10: Supplementary specifications supporting parallel offset
[Issue: CS-ACNS/2]
Subpart C of CS-ACNS provides certification criteria for performance-based navigation. EASA has
considered the current and future aircraft equipment and has assumed that most, if not all, aircraft
are equipped with one or more GNSS receivers. Subpart C, therefore, considers GNSS equipped
aircraft and focuses on compliance with RNP navigation specifications. Compliance with Subsection 2,
however, also assures compliance with the RNAV 10, RNAV 5, RNAV 2, and RNAV 1 navigation
specifications.
Where the term ‘Required’ is used in Table 1, it refers to compliance with the navigation specification.
It should be noted that for multi-sensor RNP systems, loss of RNP capability does not imply loss of
RNAV capability if an inertial or DME navigation source(s) is(are) still operable.
It should be noted that this Subpart does not address communication and surveillance considerations
that are, in some cases, related to the implementation of a navigation specification (e.g. controller-
pilot data link communications (CPDLC) and automatic dependent surveillance — contract (ADS-C) for
RNP 4) within a particular airspace.
The ICAO PBN Manual (Doc 9613) contains 11 navigation specifications, each of them addressing
specific operations by flight phase:
(a) RNAV 10, historically referred to as RNP 10, is applied for oceanic and remote continental
navigation operations;
(b) RNAV 5, RNAV 2 and RNAV 1 are applied for continental en-route and terminal navigation
operations;
(c) RNP 4 and RNP 2 and A-RNP are applied for oceanic and remote continental navigation
operations;
(d) RNP 2 and A-RNP are applied for continental en-route navigation operations;
(e) RNP 1 and A-RNP are applied for terminal navigation operations;
(f) A-RNP, RNP APCH, and RNP AR APCH are applied for initial, intermediate, final, and missed
approach navigation operations, and may include requirements for vertical navigation (VNAV);
(g) RNP 0.3 was specifically written to facilitate (low-level) en-route operations with rotorcraft.
Subpart C on performance-based navigation contains basic and supplemental certification criteria. The
basic criteria must always be complied with, regardless of the navigation specification, and ensure
compliance with the navigational requirements of the RNAV 10, RNAV 5, RNAV 2, RNAV 1, RNP 2, RNP
1 and RNP 0.3 criteria.
Some navigation specifications require compliance with supplemental criteria, e.g. compliance with
Subsection 10 for parallel offsets for RNP 4.
The criteria for navigation specifications that include approach, i.e. A-RNP, RNP APCH and RNP AR, are
more specific. Subsection 3 (‘LNAV in final approach’) and Subsection 5 (‘VNAV in final approach’)
apply to these operations. In addition, both RNP AR and A-RNP have their own specific criteria that
need to be met, as described in Subsection 6 for RNP AR and Subsection 7 for A-RNP.
Subsection 4 addresses vertical navigation (VNAV) outside the final approach part of the flight. It
contains criteria for compliance with altitude constraints considered in Commission Implementing
Regulation (EU) 2018/1048.
In addition to the criteria for RNP APCH approaches, Subsection 5 also contains optional requirements
for advisory VNAV, which apply to the final approach segment (FAS) only.
Subsections 8, 9, and 10 contain criteria for specific functions. These functions (radius to fix, fixed
radius transition, and parallel offset) are required for some applications and are optional for some
others.
In some instances, the CS requirements deviate from the ICAO navigation specification, for example
by requiring VNAV for RNP APCH. This is based on recent certification experience, the fact that CS-
ACNS is a forward-looking document that is based on the latest ICAO and industry standards, and it is
also a consequence of the way Section 1 has been structured. Where applicants intent to strictly apply
the criteria of the ICAO navigation specification, they are invited to consult EASA (e.g. an applicant
applying for RNP APCH without VNAV down to LNAV minima or LP minima only).
Applicants intending to apply strictly for RNAV navigation specifications predicated on conventional
ground navigation aids, i.e. non-GNSS-based navigation, are also invited to consult EASA.
With the publication of CS-ACNS, AMC 20-4A, AMC 20-5, AMC 20-12, AMC 20-26, AMC 20-27A, AMC
20-28, JAA TGL-10 and CM-AS-002 Issue 2 have become obsolete. This, however, does not invalidate
existing approvals to these references.
Changes to aircraft/systems that were approved to the above AMC-20 references or TGL will be
handled as follows:
— Where the change remains within the original scope of the AMC or TGL, i.e. no new functionality
is added, the applicant may continue to use the criteria of the AMC or TGL as the certification
basis for the change.
— Where the change is outside the original scope of the AMC or TGL, i.e. a new functionality is
added, the corresponding certification criteria in CS-ACNS are to be applied. Given the
differences in the set-up of the AMC/TGL compared to CS-ACNS, an applicant may, within
reason, claim credit for items already demonstrated to an AMC or TGL that are similar to the
requirements in CS-ACNS.
Examples:
1) An aircraft has been approved to perform RNP AR operations to the criteria of AMC 20-26. The
applicant is updating the software of the flight management system, but no additional
functionality is being added. In that case, the criteria of AMC 20-26 continue to be applicable.
2) An aircraft has been approved to conduct RNP APCH operations to LNAV or LNAV/VNAV using
barometric VNAV in accordance with AMC 20-27A. The applicant is replacing the GNSS receiver
with one that can receive differential correction signals from a satellite based augmentation
system (SBAS) and adds the capability to operate on RNP APCH approach procedures to LP or
LPV minima. This capability was not within the original scope of AMC 20-27A. The applicant
should, therefore, apply the criteria of the new CS-ACNS. Credit may be claimed for items
already demonstrated as part of the compliance demonstration to AMC 20-27A, where these
may be considered to be reasonably similar and applicable.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.201 Applicability
ED Decision 2019/011/R
Subsection 2 provides the functional and performance criteria that are common to all PBN
specifications for lateral navigation.
[Issue: CS-ACNS/2]
(3) DME/DME horizontal position source based on a DME interrogator that has been granted
an ETSO authorisation against ETSO-2C66b;
(4) barometric altimeter: ETSO-C106 Amendment 1.
(c) with reference to CS ACNS.A.GEN.020, any deviations from the ETSOs should be evaluated
against the relevant sections of EUROCAE ED-75D Minimum Aviation System Performance
Standard (MASPS).
(d) noting that there is no equipment standard for INS/IRU horizontal position source, this
equipment should comply with the functionality and performance that is detailed in Appendix
B.
[Issue: CS-ACNS/2]
For compliance with the RNP 0.3 navigation specification, the RNP system is supported by an SBAS
capable GNSS position source, i.e. one that has been authorised against ETSO-C145c (operational Class
3) or ETSO-C146c (operational Class 3).
[Issue: CS-ACNS/2]
Where AMC to Section 1 of Subpart C contain a reference to the criteria of EUROCAE Document ED-
75D, these criteria are considered to be means to comply with the related CSs. Therefore, these
criteria may be applied instead of installing ETSO-authorised equipment.
Where AMC to Section 1 of Subpart C contain a reference to a specific amendment to an ETSO, it
indicates the minimum acceptable standard, so any subsequent amendments are also considered to
be acceptable.
[Issue: CS-ACNS/2]
Subpart C of CS-ACNS is based on EUROCAE ED-75D (RTCA DO-236C and Change 1), except for RNP AR,
and on the ICAO PBN Manual (Doc 9613).
The AMC to Subpart C requirements encourage the installation of ETSO-authorised equipment,
recognising the fact that many of the EUROCAE ED-75D requirements are covered through compliance
with ETSO requirements. Recognition of ETSO authorisation generally limits the burden on the
applicant that demonstrates compliance with the CS requirements.
[Issue: CS-ACNS/2]
Integrated GNSS/INS position solutions reduce the rate of degradation after loss of position updating.
For ‘tightly coupled’ GNSS/IRUs, RTCA Document DO-229D, Appendix R, and RTCA Document DO-316,
Appendix R, provide additional guidance on ‘tightly coupled’ GNSS/IRUs.
[Issue: CS-ACNS/2]
If other horizontal position sources are available, they may be used to complement the GNSS-
computed position, provided that the output position continues to meet the required performance.
If the position is no longer available from a GNSS position source and if additional sources are
available, the system should revert to the best available source (e.g. the source that can provide the
best computed position in terms of accuracy and integrity).
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirement.
[Reference: ED-75D § 3.7.3.1.2]
[Issue: CS-ACNS/2]
FUNCTIONAL CRITERIA
RNP system
The estimated lateral position accuracy is a measure that is based on a defined scale, in nautical miles,
which conveys the current position estimation performance. The lateral position accuracy can be
related to the required navigation performance (RNP) value.
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirement.
[Reference: ED-75D § 3.7.3.1]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirement.
[Reference: ED-75D § 3.7.3.1.1]
[Issue: CS-ACNS/2]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d and ETSO-C146c satisfies
the requirement.
[Reference: ED-75D § 3.7.2.1.4]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirement.
The installation of equipment with an ETSO authorisation against ETSO-C146c satisfies the CS
requirement, provided that the applicant ensures that speed constraints are extracted from the
database.
[Reference: ED-75D § 3.7.2.1.1.1]
[Issue: CS-ACNS/2]
(1) direct to fix (DF), track to a fix (TF), initial fix (IF), fix to an altitude (FA), and course to a fix
(CF);
(2) heading to an altitude (VA), heading to a manual termination (VM), and heading to an
intercept (VI);
(3) course to an altitude (CA), and from a fix to a manual termination (FM).
(c) The RNP system has the capability to execute fly-by turns.
(d) Unless otherwise specified in the on-board navigation database, the RNP system constructs the
flight path between waypoints in the same manner as a TF leg.
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirements.
Installation of equipment with an ETSO authorisation against ETSO-C146e satisfies the requirements.
Installation of equipment with an ETSO authorisation against ETSO-C146c satisfies the requirements
of (a), (b)(1), (c) and (d).
Subject to EASA’s agreement, where the RNP system does not support the execution of VA, VM, and
VI path terminators, the applicant may demonstrate that the aircraft and flight systems allow the flight
crew to manually fly the aircraft on a heading to intercept a course or to go direct to another fix after
reaching a procedure-specified altitude. The manual execution of VA, VM and VI terminators should
be supported by a flight crew workload assessment.
Subject to EASA’s agreement, where the RNP system does not support the execution of CA and FM
path terminators, the applicant may demonstrate that the RNP system allows the flight crew to readily
designate a waypoint and select a desired course to or from a designated waypoint. The manual
execution of CA and FM terminators should be supported by a flight crew workload assessment.
[References: ED-75D § 3.2.1.2 and ED-75D § 3.2.5.4]
[Issue: CS-ACNS/2]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c satisfies the
requirement.
[Reference: ED-75D § 3.2.4.2]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c satisfies the
requirement of (a) and (b).
[Reference: ED-75D § 3.2.5.2]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirement,
provided that the equipment meets the criteria defined in RTCA DO-283B § 2.2.1.2.6.
Installation of equipment with an ETSO authorisation against ETSO-C146c satisfies the requirement.
[Reference: ED-75D § 3.7.2.2.3.1]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c satisfies the
requirement.
[References: ED-75D § 3.7.2.1.2.1 & ED-75D § 3.7.2.1.2.2]
[Issue: CS-ACNS/2]
User-defined fixes are usually defined via the entry of latitude/longitude, place/along-track,
place/bearing-place/bearing, and place/bearing/distance.
[Issue: CS-ACNS/2]
(b) When an aircraft flies an RNP route or procedure and the RNP value changes to a lower value,
the RNP completes the change no later than reaching the leg with the lower RNP value.
[Issue: CS-ACNS/2]
(a) The RNP value associated with a leg or segment should be assigned in the following order of
precedence:
(1) flight crew manually entered RNP value for the leg or segment;
(2) the RNP value coded in the on-board navigation database for the current leg or segment,
if implemented;
(3) the RNP value coded in the on-board navigation database for the current area, if
implemented; and last
(4) a system default RNP value, if provided by the RNP system.
(b) Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c
satisfies the requirement.
[References: ED-75D § 3.7.2.1.3.1, ED-75D § 3.2.6, ED-75D § 3.2.6.2]
[Issue: CS-ACNS/2]
Display of navigation data
Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c satisfies the
requirement.
[Reference: ED-75D § 3.6.2]
[Issue: CS-ACNS/2]
(a) For defined paths, the RNP system continuously displays, in each flight crew’s optimum field of
view, the computed path and the deviation from that path.
(b) The lateral deviation display is automatically slaved to the RNP system’s computed path.
[Issue: CS-ACNS/2]
When used to conduct a departure procedure off the runway, the RNP system should display lateral
deviations not later than when reaching 50 feet above the departure runway. Installation of
equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c supports this.
[Reference: ED-75D § 3.3.3.1]
[Issue: CS-ACNS/2]
Subject to EASA’s agreement, a lateral deviation display not slaved to the RNP system associated with
adequate operational procedures may be accepted for type-certification application against RNP 2,
RNP 1 or RNP APCH. The applicant should provide a human factor and workload assessment in support
of the application.
Note: The alleviation provided above is intended to address particular concerns on small CS-23, Level
1, 2, and 3 aircraft.
[Issue: CS-ACNS/2]
(b) the distance, estimated time of arrival at, or time-to go to, and bearing to the active (To)
waypoint.
[Issue: CS-ACNS/2]
The installation of equipment with an ETSO authorisation against ETSO-C146c satisfies the CS
requirement, provided that the applicant ensures that both the distance to and the estimated time of
arrival at the active waypoint are available to the flight crew.
[Issue: CS-ACNS/2]
Subject to EASA’s agreement, the display of the data on a page on a multifunction control and display
unit (MCDU), readily accessible to the flight crew, may be accepted for type-certification application
against RNP 4 or RNP 2. EASA’s agreement will be based on a human factor and workload assessment
performed by the applicant.
[Issue: CS-ACNS/2]
The installation of equipment in the flight crew’s maximum field of view with an ETSO authorisation
against ETSO-C146c satisfies the requirement.
Installation of equipment with an ETSO authorisation against ETSO-C115d supports the requirement,
provided that the applicant ensures that the flight deck interface complies with this CS.
[Reference: ED-75D § 3.7.5.2.1]
[Issue: CS-ACNS/2]
Subject to EASA’s agreement, a display of speed constraints outside the maximum field of view with
adequate operational procedures may be accepted. The applicant should provide a human factor and
workload assessment in support of the application.
[Issue: CS-ACNS/2]
The RNP system has the capability to display the frequencies and/or identifiers of the ground
positioning navigation aids selected on a page which is readily available to the flight crew.
[Issue: CS-ACNS/2]
Navigation database
The installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146C satisfies
the CS requirement, provided that the applicant ensures that the database capacity is appropriate for
the intended operation.
[References: ED-75D § 3.8.1, ED -75D § 3.8.2]
[Issue: CS-ACNS/2]
The storage capacity is consistent with the intended use of the aircraft. For example, the database of
a regional aircraft may contain data for a given region only, whereas the database of a long-range
aircraft may contain worldwide data.
[Issue: CS-ACNS/2]
Since database process assurance levels are normally addressed at equipment design level, the
applicant should verify with the equipment manufacturer that the DQRs have been established and
provided to the navigation database provider(s). Formal arrangements should also ensure that
deficiencies and/or errors detected by the DAT provider can be reported to the applicant, whenever
DQRs could be compromised.
Documentation that these data quality requirements are valid at aircraft level must be confirmed
during the airworthiness approval.
[Issue: CS-ACNS/2]
The installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c satisfies
the requirement.
[Reference: ED-75D § 3.8.2]
[Issue: CS-ACNS/2]
The alerting requirement is satisfied by installation of equipment with an ETSO authorisation against
ETSO-C115d or ETSO-C146c, provided that the applicant ensures that the alert is appropriately
indicated in the flight crew’s optimum field of view, and assess any processing delays caused by the
aircraft flight deck alerting system.
Subject to EASA’s agreement, display of the alert in the flight crew’s maximum field of view may be
accepted. The applicant should support the deviation by providing a human factor and workload
assessment.
Note: The alleviation provided above is intended to address particular concerns on smaller aircraft,
for example, CS-23, Level 1, 2, and 3 aircraft.
[Reference: ED-75D § 3.7.6]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the CS criteria,
provided that the applicant ensures that the flight deck interface complies with the CS.
This CS is typically not relevant for equipment with an ETSO authorisation against ETSO-C146c. If this
equipment provides a facility to the flight crew to enter the RNP value, then this alerting mechanism
should be implemented as well.
Note: This functionality is not part of the functionalities specified in RTCA Document DO-229D
(MOPS).
[Reference: ED-75D § 3.7.6.1]
[Issue: CS-ACNS/2]
PERFORMANCE CRITERIA
Lateral performance
Installation of equipment with an ETSO authorisation against ETSO-C115d and ETSO-C146c satisfies
the requirement.
[References ED-75D §1.7.1, §1.7.2 and §2.1.1]
[Issue: CS-ACNS/2]
Guidance on the integrity (provisioning of erroneous output or display of data) of the RNP system
related to lateral position or guidance is provided in Appendix A to Subpart C.
[Issue: CS-ACNS/2]
Guidance on the continuity (loss of the function) of the RNP system to provide lateral position or
guidance is provided in Appendix A to Subpart C.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.301 Applicability
ED Decision 2019/011/R
The lateral navigation capabilities of RNP systems that are required to support initial, intermediate,
and missed approach segments of an approach procedure are described in Subsection 2.
[Issue: CS-ACNS/2]
In addition to the systems referenced in AMC1 ACNS.C.PBN.205, equipment authorised against ETSO-
C146c functional Class Delta (operational Class 4) supports operations to LP and LPV minima.
[Issue: CS-ACNS/2]
The installation of equipment with an ETSO authorisation against ETSO-C146c Class 3 or 4 and ETSO-
C115d Class A satisfies the requirement.
[Reference: ED-75D § 3.2.8.4]
[Issue: CS-ACNS/2]
The capability to intercept the final approach provides the pilot with the ability to capture the
published final approach segment following a period when the aircraft has been flown manually, or in
autopilot/automatic flight control system heading mode, following ATC vectors to support final
approach sequencing.
[Issue: CS-ACNS/2]
Display of navigation data
The requirement is intended to avoid confusion with regard to the type of approach procedure that is
being flown and the line of minima applicable to that approach procedure, e.g. down to LNAV/VNAV
minima. It is not required to actually indicate the value associated with the applicable minima.
[Issue: CS-ACNS/2]
The deviation indicators on the non-numerical lateral display should appear in a timely fashion to
allow the flight crew to intercept the final approach segment.
[Issue: CS-ACNS/2]
(a) When linear lateral deviation is provided, the full-scale deflection of the non-numeric deviation
display should not exceed two times the RNP value.
(b) When angular lateral deviation is provided:
(1) installation of equipment with an ETSO authorisation against ETSO-C146c operational
Class 3 or 4 satisfies the requirement; or
(2) the full-scale deflection of the non-numeric deviation display should allow the aircraft to
remain within the two times RNP value of (a) above
[Issue: CS-ACNS/2]
For approaches to LPV minima, the RNP system continuously displays in the flight crew’s maximum
field of view the distance to the landing threshold point/fictitious threshold point (LTP/FTP) or missed
approach point (MAPt) after passing the final approach fix/final approach point.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.401 Applicability
ED Decision 2019/011/R
(See CS ACNS.C.PBN.401)
The criteria of Subsection 4 are based on the PBN Manual, Volume II, Attachment A, and are intended
to support the definition of vertical paths in airspace where vertical navigation outside the approach
is intended to be applied in environments with high traffic density, traffic complexity, or terrain
features, as for example those defined in the Commission Implementing Regulation (EU) 2018/1048.
[Issue: CS-ACNS/2]
The RNP system has the capability to define a vertical path to a fix.
[Issue: CS-ACNS/2]
[Issue: CS-ACNS/2]
This requirement is intended to prevent potential flight crew errors due to different altimeter settings
in the aircraft altimeter system and RNP system.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.501 Applicability
ED Decision 2019/011/R
Subsection 5 sets out the certification specifications for systems that use either a barometric VNAV
(BARO-VNAV) or a GNSS space-based augmented source of vertical position (SBAS-VNAV) on
procedures where vertical guidance is based on a published vertical path to LNAV/VNAV or LPV
minima respectively.
The vertical performance of systems that comply with CS ACNS.C.PBN.575 is not adequate to support
RNP AR APCH operations, but the requirements contained in CS ACNS.C.PBN.675 should be applied
instead.
[Issue: CS-ACNS/2]
The installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c Class 3
or 4 satisfies the requirement.
[Reference: ED-75D § 3.2.8.4.3]
[Issue: CS-ACNS/2]
This requirement is intended to prevent potential flight crew errors due to different altimeter settings
in the aircraft altimeter system and RNP system.
[Issue: CS-ACNS/2]
The RNP system should allow the glide path to be intercepted at the final approach fix (FAF) using a
fly-by technique with a normal acceleration factor of not less than 0.03 g.
The installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c Class 3
or 4 satisfies the requirement.
[Reference: ED-75D § 3.2.8.5]
The RNP system providing temperature compensation capability for the vertical path should comply
with EUROCAE ED-75D, Appendix H.2.
The capability to provide automatic temperature compensation is an optional function for ETSO
authorisation against ETSO C115d. Consequently, the applicant should ensure that this function has
been implemented into the RNP system.
[Issue: CS-ACNS/2]
Display of navigation data
The RNP system continuously displays, on the non-numeric vertical deviation display located in the
flight crew’s optimum field of view, the deviation from the defined vertical approach path, including
the extended vertical approach path.
[Issue: CS-ACNS/2]
Deviations from the defined path should be displayed in a timely fashion to support the flight crew to
intercept the extended vertical approach path.
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c supports the
requirement, provided that the applicant ensures the display characteristics comply with this CS.
[Reference: ED-75D § 3.7.5.1.2.1 and § 3.7.5.1.4]
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d or ETSO-C146c supports the
requirement of the CS, provided that the applicant ensures that the display characteristics comply
with the CS.
RNP systems that provide fixed vertical scaling should provide a non-numerical vertical deviation
display with a full-scale deflection of ± 150 ft. In addition, the display should provide the flight crew
with an easy way to readily identify a path deviation of 75 ft using the vertical deviation display alone,
i.e. provide clear markings at + 75 ft and at – 75 ft.
Note: Subject to EASA’s agreement, the use of a scale of other than ± 150ft may be accepted, provided
that the scaling is suitable to control the aircraft on the intended path and the 75-ft deviation can be
easily identified by the flight crew. The applicant should provide a human factor and workload
assessment as well as relevant operating procedures that ensure that the aircraft’s deviation from the
path can be monitored and bounded within the ± 75-ft interval, supporting this deviation.
Systems that use angular vertical scaling should meet the following:
(a) The deviation scaling suitably supports the flight technical error (FTE) monitoring and bounding
(75-ft deviation);
(b) The deviation limits are equivalent to the operational limits for glideslope deviations during an
ILS approach.
In order to meet the primary safety objective of not exceeding an FTE of 75 ft below path to maintain
obstacle clearance, it may be required to put a limitation on the length of the approach that the RNP
system is able to support.
A vertical situation display is not considered to satisfy the requirements.
[Issue: CS-ACNS/2]
Vertical deviation displays that rely on the flight crew to assess the deviation based on whether or not
the pointer still touches a marker are not considered acceptable. Neither does EASA consider solutions
requiring the flight crew to verify the vertical deviation on a (multifunction) control display unit
((M)CDU) acceptable.
[Issue: CS-ACNS/2]
When the approach is supported by barometric VNAV, the aircraft displays the barometric altitude
from two independent altimetry sources:
(a) one in each of the flight crew’s optimum field of view, if the required minimum flight crew is
two; or
(b) one in the flight crew’s optimum field of view and the other visible from the flight crew’s normal
position, if the required minimum flight crew is one.
[Issue: CS-ACNS/2]
If the RNP system provides both barometric VNAV and SBAS/GNSS VNAV, an unambiguous indication
is provided in the flight crew’s maximum field of view that enables the flight crew to identify the active
source for the VNAV, barometric altitude or SBAS/GNSS geometric altitude.
[Issue: CS-ACNS/2]
Monitoring and alerting
For approaches to LPV minima, aircraft equipped with a Class A TAWS provide an alert for excessive
deviation below the glide path.
[Issue: CS-ACNS/2]
When supporting VNAV, the vertical total system error (TSEZ), taking into account all the errors in the
aircraft processing chain of the vertical guidance, should be lower than or equal to the values specified
in the table below.
Altitude bands Level flight segments & Flight along specified vertical
climb/descent intercept of descent profile
clearance altitudes
TSEZ should be calculated as the combination of the altimetry system error (ASE), the vertical path
steering error (PSEZ), the vertical path definition error (PDEZ) and the horizontal coupling error (HCE)
— see the figure below. Vertical navigation accuracy (TSEZ) is expected to be achieved for at least
99.7 % of the flight time. Assuming that these four errors are Gaussian and independent, the
distribution of TSEz is also Gaussian with a standard deviation equal to the root sum square (RSS) of
the standard deviations of the ASE, PSEZ, PDEZ, and HCE.
Vertical errors
the flight director and/or autopilot should be unambiguously displayed in the flight crew’s
primary field of view. This should also be documented in the AFM.
[Issue: CS-ACNS/2]
The vertical total system error (TSEZ) is dependent on the navigation system error (NSE), the path
definition error (PDEZ) and the flight technical error (FTEZ).
(a) Navigation system error (NSE)
The NSE should be within the accuracy requirements of ICAO Annex 10, Volume 1 to the Chicago
Convention with respect to signal-in-space performance. These NSE requirements are
considered to be fulfilled without any demonstration if the equipment has been granted an
ETSO authorisation against ETSO-C145c, operational Class 3 or ETSO-C146c, operational Class 3
or 4.
(b) Flight technical error (FTEZ)
FTEZ is considered to be equivalent to the ILS approach if the angular deviations are displayed
to the flight crew on the existing or comparable display, and the system meets the integration
criteria of paragraph 7(a) of Appendix C to Subpart C of CS-ACNS and the SBAS/GNSS receiver
has been granted an ETSO authorisation against ETSO-C145c, operational Class 3 or ETSO-
C146c, operational Class 3 or 4.
For flight guidance systems, the FTEZ performance is considered acceptable if it meets the
criteria of paragraph 7(a) of Appendix C to Subpart C of CS-ACNS and the SBAS/GNSS receiver
has been granted an ETSO authorisation against ETSO-C145c, operational Class 3 or ETSO-
C146c, operational Class 3 or 4.
(c) Path definition error (PDEZ)
For approaches to LPV minima, there are no performance or demonstration requirements for
PDEZ. PDEZ is considered negligible based on the requirements for the FAS data block generation
process.
For approaches to LNAV/VNAV minima, the applicant may assume that the PDEZ is negligible,
provided that the RNP system’s internal resolution is equal to or better than the resolution
provided for the path definition.
[Issue: CS-ACNS/2]
The lateral and vertical full-scale deflection requirements detailed in RTCA DO-229D, which is the basis
for ETSO-C145c (operational Class 3) and ETSO-C146c (operational Class 3 or 4), ensure an ILS
‘lookalike’ presentation. The deflection may be fully angular with no limitation or angular but bounded
at a certain value (e.g. bounded at ± 1 NM laterally and ± 150 m vertically).
[Issue: CS-ACNS/2]
CS ACNS.C.PBN.565 Transitions
ED Decision 2019/011/R
Transitions from one source of VNAV to another should not cause discontinuities or transients that
have the potential to destabilise the aircraft on final or missed approach. Aspects to consider when
transitioning from one source to the other include:
(a) temperature errors, particularly if operating outside the allowable BARO-VNAV temperature
range;
(b) MSL versus WGS-84 ellipsoid for path definition;
(c) curved BARO-VNAV path versus straight SBAS/GNSS path; and
(d) linear BARO-VNAV guidance versus angular SBAS/GNSS guidance.
[Issue: CS-ACNS/2]
With reference to (a)(2), the indication should be plain and easy to interpret to avoid confusion. The
use of typographic characters (e.g. ‘+’ or ‘/’) as the only means to distinguish whether the vertical
guidance is advisory or is referenced to a published procedure is not considered adequate.
The use of the function should be documented in AFM, pilot operating handbook (POH) or similar
documents and supplements to these documents and should contain a statement to inform the flight
crew that, when advisory VNAV is provided, the primary barometric altimeter should be used as the
primary reference for compliance with all altitude restrictions that are associated with the instrument
approach procedure, including compliance with step-down fixes.
[Issue: CS-ACNS/2]
Guidance on the integrity (provisioning of erroneous output or display of data) by the RNP system
related to vertical position or guidance is provided in Appendix A to Subpart C.
[Issue: CS-ACNS/2]
[Issue: CS-ACNS/2]
Guidance on the continuity (loss of the function) of the RNP system to provide vertical position or
guidance is provided in Appendix A to Subpart C.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.601 Applicability
ED Decision 2019/011/R
Subsection 6 provides the supplementary functional and performance criteria that are applicable to
obtain certification for RNP AR APCH. Criteria for RNP AR departures (RNP AR DP) are provided
consistently with the draft ICAO Navigation Specification for RNP AR departures.
The criteria of Subsection 6 only apply to operations on RNP AR procedures designed in accordance
with the requirements of ICAO Doc 9905 ‘Required Navigation Performance Authorization Required
(RNP AR) Procedure Design Manual.
[Issue: CS-ACNS/2]
Compliance with the criteria of CS-ACNS for RNP AR operations ensure that the probability of the
aircraft exiting the lateral or vertical extent of the obstacle clearance volume of the procedure (i.e. 2
x RNP and – 75 ft.) does not exceed 10-7 per procedure; in the case of RNP AR APCH, this includes the
missed approach.
Applicants who deviate from the criteria in Subsection 6 should demonstrate that they meet the
aforementioned objective.
[Issue: CS-ACNS/2]
Compliance demonstration of aircraft eligibility for RNP AR approval is often a long and very
demanding process. It requires full and unrestricted access to the aircraft’s safety (i.e. the data used
to support compliance with CS XX.1309), aerodynamics and performance data. Furthermore, the
applicant should have, as a minimum, access to a representative simulator for prolonged periods of
time. Occasionally, access to the aircraft for flight testing will be required.
More stringent criteria may apply to aircraft that operate with special or proprietary procedures which
are not designed to conform to ICAO Doc 9905.
Applicants who intend to apply for RNP AR approval are encouraged to contact EASA at the earliest
opportunity to discuss the technical details of the compliance demonstration.
[Issue: CS-ACNS/2]
The applicant should demonstrate the aircraft capability in terms of performance under design limit
operational conditions (e.g. tailwinds and crosswinds, centre-of-gravity (CG) limits, temperature
limits), and on representative procedures that include RF legs of varying radii. The applicant should
also assess the effects of configuration changes (e.g. gear and flap extension and retraction).
The applicant should conduct a safety impact assessment based on the aircraft’s system safety
assessments (SSAs) and identify any failure conditions that could potentially impact on performance.
The functional hazard assessment (FHA) and SSA of all the aircraft’s systems that support RNP AR
operations (RNAV systems, flight controls systems, flight guidance systems, displays, etc.) should,
therefore, be revisited to identify these failures. System failures should include latent failures
(‘integrity’) and detected failures (‘continuity’). For the detected failures, the monitor limit of the alert,
the time to alert, the flight crew reaction time, and the aircraft response should all be taken into
account and verified to ensure that the aircraft does not exit the obstacle clearance volume.
The intent of this requirement is to ensure robustness of the aircraft and its systems to failure
conditions. Consequently, performing a safe extraction contingency procedure, i.e. initiating a missed
approach, is not an acceptable means of demonstrating compliance against the criteria of CS
ACNS.C.PBN.605(a), (b), and (c). These demonstrations may rely on crew action to intervene and place
the aircraft back on the target track even if, in an operational environment, the crew is expected to
initiate a missed approach procedure when the lateral or vertical criteria are exceeded. For
compliance demonstration purposes, however, executing a safe extraction is not considered
appropriate for demonstration of compliance with these criteria.
(a) With reference to CS ACNS.C.PBN.605(a), any failure that is classified as ‘probable’ and supports
the RNP AR operation should be assessed. Those failures that would require the flight crew to
act or intervene should be assessed in a representative environment and design limit
operational conditions by the applicant’s flight test pilots. The impact of the failure and the
flight crew intervention should be such that the aircraft can be maintained within the 1 × RNP
value and within – 75 ft altitude deviation.
(b) With reference to CS ACNS.C.PBN.605(b), the same requirements apply for the case of an engine
failure. If the engine failure would require the flight crew to act or intervene, then this should
be assessed in a representative environment and design limit operational conditions by the
applicant’s flight test pilots. The impact of the failure and the flight crew intervention should be
such that the aircraft can be maintained within the 1 × RNP value and within – 75 ft altitude
deviation.
(c) With reference to CS ACNS.C.PBN.605(c), the same requirements apply, except that, for the
case of failures classified as ‘remote’ but not ‘extremely remote’, the impact of the failure and
the flight crew intervention should be such that the aircraft can be maintained within the 2 ×
RNP value and within – 75 ft altitude deviation.
(d) With reference to CS ACNS.C.PBN.605(d), the applicant should demonstrate that no ‘extremely
remote’ failure limits the flight crew’s ability to:
— intervene and place the aircraft back on the target track contained within the alert
threshold; or
— safely extract the aircraft through manual intervention.
Safe extraction is defined as within 2 × RNP for the applicable approach and missed approach
procedure, until such time that the aircraft is stabilised and reaches a safe altitude. The RNP for the
missed approach procedure is usually higher than the RNP for the continued approach. For extremely
remote navigational failure conditions (e.g. all flight management computers (FMCs) failed), the flight
crew must be able to navigate the aircraft free of obstacles.
For departure procedures with close-in RF legs at or just beyond the departure end of the runway, and
for missed approach procedures with close-in RF legs, the retraction of the landing gear and flaps and
subsequent rapid acceleration may affect the RNP system’s ability to conduct accurate turn
anticipation. An inaccurate turn anticipation calculation may result in an overshoot of a close-in RF
turn. When this performance characteristic is present, the applicant should consider including a
limiting airspeed for the initial phase of the departure or the missed approach in the AFM. The
airspeed limit should not be lower than the best-climb airspeed with one-engine-inoperative.
The severity level of the above demonstrations (failure conditions in combination with the RNP
approach containment requirements), as assessed by the test pilot, must still match the probability of
the applicable failure condition (ref.: CS 25.1309).
Specific evaluations should be conducted to assess path excursions upon failures and the resulting
RNP levels. Results should be documented in the AFM, AFM Supplement, or any appropriate aircraft
operational support document which is approved by EASA and made available to the operator. In
other words: If, for example, the worst-case result of the assessments that have been conducted to
demonstrate compliance for ‘remote’ failures shows that the aeroplane diverts 0.40 NM from the
published track, then the applicant should limit the authorised RNP to 0.20 NM.
[Issue: CS-ACNS/2]
As regards applications for RNP AR approval, the involvement of flight test pilots in this exercise has
been shown to be crucial. Flight crew intervention is an essential aspect of these demonstrations and
on occasion it has been proven difficult for flight crews to timely recognise the failure and intervene
adequately. An appropriate level of specific training for RNP AR operations may be assumed.
[Issue: CS-ACNS/2]
As a minimum, the inertial positioning source needs to comply with the criteria of Appendix B. The
applicant should, however, demonstrate that circular error of the inertial system supports a safe
extraction, as defined in AMC1 ACNS.C.PBN.605 in case of loss of GNSS. This may imply that the design
of the inertial position source needs to exceed the performance criteria described in Appendix B.
If the RNP system does not exclude VOR-updating automatically, the applicant should identify any
pilot procedures for an aircraft to comply with this requirement.
[Issue: CS-ACNS/2]
Attitude and heading reference systems (AHRSs), including an AHRS with inputs from air-data
computers, are generally not considered to provide a level of performance that would be adequate to
support RNP AR operations, i.e. meet the criteria of Appendix B.
[Issue: CS-ACNS/2]
(a) Means are provided to couple the RNP system with the autopilot or flight director.
(b) The RNP system, the flight director system and autopilot must be capable of commanding a
bank angle up to 25 degrees above 121 m (400 ft) AGL and up to 8 degrees below 121 m (400 ft)
AGL.
[Issue: CS-ACNS/2]
CS ACNS.C.PBN.620 Reversion
ED Decision 2019/011/R
This requirement is intended to support the flight crew in extracting the aircraft from the procedure.
[Issue: CS-ACNS/2]
Loss of the RNP capability is considered as a condition that would require the initiation of a missed
approach.
[Issue: CS-ACNS/2]
If the RNP system offers multiple RNP values associated with lines of minima on an RNP AR approach
procedure, the system should allow the flight crew to select the RNP values associated with the
appropriate line of minima for use on the final approach segment. The system should then acquire the
associated RNP value(s) for the procedure from the navigation database.
[Issue: CS-ACNS/2]
(b) The RNP system provides lateral path guidance not later than when reaching 50 feet above the
departure runway.
(c) The RNP system is capable of executing an RF leg where the first fix defining the RF leg begins
at the departure end of the runway.
(d) The RNP system provides a means for the flight crew to confirm availability of GNSS for aircraft
positioning immediately prior to take-off.
(e) The INS position is automatically updated upon pressing the take-off/go-around (TOGA) button
or provide the ability to manually initiate a position update during ground operations
immediately prior to take-off.
[Issue: CS-ACNS/2]
With reference to (c), when the RNP AR DP requires a close-in turn at or just beyond the DER,
retraction of the landing gear and flaps during the take-off sequence and subsequent rapid
acceleration to en-route climb airspeed may compromise the RNP system’s ability to conduct accurate
turn anticipation for the close-in turns, possibly resulting in the aircraft’s inability to comply with the
defined turn (i.e. overshoot a close-in RF turn). Limiting the airspeed for the initial phase of the
departure can help ensure the RNP system’s turn anticipation calculations are accurate.
With reference to (e), if the aircraft requires the flight crew to conduct a manual INS position update
immediately prior to take-off, the applicant should provide procedures requiring the air crew to
conduct the position update within 300 meter (1 000 ft) of the start point of the aircraft’s take-off roll.
[Issue: CS-ACNS/2]
With reference to (a), locating an initial fix of an RNP AR DP at or just beyond the approach end of the
take-off runway is one acceptable means to facilitate executing an RF leg at the departure end of the
runway (DER). The straight segment from the initial fix leading to the fix defining the beginning of the
RF leg at the DER helps ensure the aircraft’s path is tangent to the RF leg in order to capture of the RF
leg guidance.
[Issue: CS-ACNS/2]
In support of RNP AR departures, the applicant provides aircraft take off performance data, including
performance on non-standard climb gradients, to the operator in a form acceptable to EASA.
[Issue: CS-ACNS/2]
The RNP system displays the desired and current aircraft track on an electronic map display in the
flight crew’s optimum field of view.
[Issue: CS-ACNS/2]
The full-scale deflection of the non-numeric lateral deviation display should not be greater than two
(2) times the applicable RNP.
[Issue: CS-ACNS/2]
Navigation database
Waypoint definition error should be less than or equal to 60 feet, including both the data storage
resolution and the RNP system computational resolution used internally for the construction of flight
plan waypoints.
The navigation database should contain vertical angles (glide path angles) stored to a resolution of
hundredths of a degree, with equivalent computational resolution.
[Issue: CS-ACNS/2]
Vertical performance
When the vertical position is provided by BARO-VNAV and the aircraft performs stabilised constant
descent path, the RNP system should ensure that 99.7 % of the system error in the vertical position is
equal to or less than the vertical error budget (VEB) attributed to the aircraft, as defined by (in feet):
Where SBAS/GNSS geometric altitude is used, the installation of equipment that supports a 50-m
vertical alert limit (VAL) satisfies the requirement for operations down to RNP 0.3 and the installation
of equipment that supports a 35-m vertical alert limit (VAL) satisfies the requirement for operations
down to RNP 0.1.
[Issue: CS-ACNS/2]
Guidance on the integrity (provisioning of erroneous output or display of data) of the RNP system
related to RNP AR operations is provided in Appendix A to Subpart C.
[Issue: CS-ACNS/2]
Guidance on the continuity (loss of the function) of the RNP system to provide lateral and vertical
position or guidance is provided in Appendix A to Subpart C.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.701 Applicability
ED Decision 2019/011/R
Subsection 7 provides the supplementary functional and performance criteria that are applicable to
obtain certification for applications for advanced-RNP (A-RNP).
[Issue: CS-ACNS/2]
The RNP system has the capability to execute radius to Fix (RF) legs (as specified in Subsection 8).
[Issue: CS-ACNS/2]
The RNP system has the capability to implement parallel offset (as specified in Subsection 10).
[Issue: CS-ACNS/2]
The RNP system has the capability to operate with RNP values (ranging from 0.3 to 1.0 NM in tenth(s)
of NM). The RNP value is either retrievable automatically from the on-board navigation database or
manually adjustable by the flight crew.
[Issue: CS-ACNS/2]
Installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the requirement.
[References: ED-75D § 3.7.2.1.3.1, ED-75D § 3.2.6, ED-75D § 3.2.6.2]
[Issue: CS-ACNS/2]
The RNP system displays the current aircraft track (or track angle error) in the flight crew’s optimum
field of view.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.801 Applicability
ED Decision 2019/011/R
Subsection 8 provides the supplementary functional and performance criteria that are applicable to
obtain certification for the capability to execute radius to fix (RF) path terminators.
The RF functionality is mandatory to obtain A-RNP and RNP AR certification, and can be optionally
associated with RNP 1, RNP 0.3 and RNP APCH.
[Issue: CS-ACNS/2]
The applicant should perform an evaluation of the navigation system on a representative set of
procedure designs under all foreseen operating conditions. The evaluation should address maximum
assumed crosswind and maximum altitude with the aircraft operating in the range of expected
airspeeds for the manoeuvre and operating gross weights and CG conditions (i.e. forward/aft).
Procedure design constraints should include sequencing multiple, consecutive RF leg segments of
varying turn radii, including consecutive RF leg segments reversing the direction of turn (i.e. reversing
from a left-hand RF turn to a right-hand RF turn).
When evaluating flight technical error on RF legs, the effect of rolling into and out of the turn should
be considered.
Within the demonstration, the applicant should be seeking to confirm that the FTE is commensurate
with the RNP navigation accuracy.
Where applicable, the ability of the aircraft to maintain an appropriate FTE after a full or partial failure
of the autopilot and/or flight director should also be demonstrated.
Any limitations identified during the compliance demonstration should be documented. Flight crew
procedures should be assessed, including identification of any limitations which surround the use of
pilot selectable or automatic bank angle limiting functions and confirmation of those related to go-
around or missed approach from an RF leg segment.
Test procedures for aircraft capability to perform RF legs in approach and departure should make use
of the RF leg demonstration templates described in Appendix D to Subpart C.
[Issue: CS-ACNS/2]
The test procedure is designed to provide 5 degrees of manoeuvrability margin to enable the aircraft
to get back on the desired track after a slight overshoot at the start of the turn.
Industry standards for RF defined paths can be found in EUROCAE ED-75D (RTCA DO-236C Change 1).
If the RNP cannot be achieved during a radius to fix (RF) leg, the flight guidance mode remains in lateral
navigation.
[Issue: CS-ACNS/2]
The applicant should perform an evaluation to demonstrate that the aircraft can be maintained on
the desired path, without excessive deviations, under all foreseen operating conditions. The
demonstrations should be performed on a representative set of procedure designs.
[Issue: CS-ACNS/2]
Display of navigation data
The RNP system displays the intended path on an appropriately scaled moving map display in the flight
crew’s maximum field of view.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.901 Applicability
ED Decision 2019/011/R
Subsection 9 provides the supplementary functional and performance criteria that are applicable to
obtain FRT certification.
The FRT functionality can optionally be associated with RNP 2, RNP 4, and advanced RNP (A-RNP)
specifications.
[Issue: CS-ACNS/2]
The installation of equipment with an ETSO authorisation against ETSO-C115d satisfies the
requirement.
[Reference ED-75D § 3.2.5.4.2]
[Issue: CS-ACNS/2]
FRT requirements are defined in Aeronautical Radio, Inc. (ARINC) 424, and their application is
described in more detail in EUROCAE documents ED-75D (RTCA DO-236C Change 1).
[Issue: CS-ACNS/2]
Display of navigation data
The RNP system displays the computed curved path of the FRT on an appropriately scaled moving map
display in the flight crew’s maximum field of view.
[Issue: CS-ACNS/2]
APPLICABILITY
CS ACNS.C.PBN.1001 Applicability
ED Decision 2019/011/R
Subsection 10 provides supplementary functional and performance criteria that are applicable to
obtain certification for parallel offset which enables the aircraft to fly a path parallel to, but offset left
or right from, the original active route (parent route). Parallel offset is applicable only for en-route
segments and is not foreseen to be applied on standard instrument departures (SIDs), standard
instrument arrivals (STARs) or approach procedures.
The parallel offset functionality is mandatory to obtain RNP 4 and A-RNP certification, and can be
optionally associated with RNP 2 specifications.
[Issue: CS-ACNS/2]
The installation of equipment with an ETSO authorisation against ETSO-C115d, Class A, satisfies the
requirement.
For RNP systems that have not been granted an ETSO authorisation against ETSO-C115d, Class A, the
requirements of ED-75D (RTCA DO-236C Change 1) Section 3.7.2.2.4 ‘Parallel Offsets’ apply, with the
following additions:
(a) The RNP system should have the capability to define the offset path from the parent track using
an increment of at least 1 NM, left or right and with a total offset of at least 20 NM. Where the
RNP system supports the definition of a single, pre-planned parallel offset using specific start
and end fixes, the RNP system should:
(1) provide automatic initiation and cessation of the offset at the start and end waypoint;
(2) begin transition to the offset path at the start waypoint on the original path to join the
intercept path;
(3) begin the return to the original path so that the return transition ends at the end
waypoint on the original path.
With reference to CS ACNS.C.PBN.1005(a) (3)(iii), cases which are not compatible with an
offset are considered to be:
(i) arrival at a fix where a course change exceeds 120 degrees;
(ii) a route segment that ends at a hold fix.
(b) When executing a parallel offset, the RNP system computes the offset reference points using
the same resolution that the parent route reference points have. Where FRTs are applied, the
offset track should be flown with the same turn radius as the parent track.
[Issue: CS-ACNS/2]
Display of navigation data
The following table provides guidance for the classification of failure conditions, based on a generic
assessment of the risks related to the execution of the flight procedure as defined in the ICAO
navigation specification.
As it is not possible for EASA to consider specific aspects of a particular design or particular mitigations,
EASA will consider the outcome of a functional hazard assessment (FHA) applied to the specific design.
If no FHA is provided, the higher of the classification is applied.
1
In the RNP 1 navigation specification of the PBN Manual, the loss of function is classified as ‘minor’.
Due to EASA’s decision to group all the basic requirements for lateral navigation together in Subsection
2 and not to grant specific approval for each separate navigation specification, but for the entire
bundle, the failure condition has been set to ‘major’. Applicants that intend to apply for RNP 1
approval only with an intended classification of the loss of function as ‘minor’ are encouraged to
consult EASA as early in the process as possible to discuss the applicable certification criteria.
2
The loss of function during the missed approach may be classified as a ‘minor’ failure condition and
the integrity may be ‘major’.
3
The loss of VNAV during the final approach may be classified as a ‘minor’ failure condition, provided
that lateral navigation is not affected.
(1) Introduction
Appendix B provides the performance and functionality criteria that an airborne INS/IRU
position source should meet to support PBN operations.
(2) INS/IRU position source standard performance and functionality
(a) The equipment should support an unambiguous indication when its outputs are invalid.
(b) The navigation function of the equipment should be designed commensurate with a
‘major’ failure condition.
(c) The alignment, updating, and navigation computer functions of the system must not be
invalidated by normal aircraft power transients.
(d) The equipment should provide or support the following functions and displays:
(i) valid ground alignment capability at all latitudes appropriate for the intended use
of the installation;
(ii) a display of alignment status; and
(iii) the present position of the aeroplane in suitable coordinates.
(e) The circular error of the equipment should be lower than or equal to 2 nautical miles per
flight hour on a 95-per-cent basis.
(1) Introduction
(a) Appendix C provides guidance on the installation and testing of RNP Systems. Depending
on the applicable airworthiness standards, the applicant should consider the following
paragraphs as indicated below:
(i) Paragraphs (2), (3), and (4) of Appendix C should always be considered.
(ii) When Subsection 3 ‘Supplementary specifications for lateral navigation in final
approach’ is applicable, paragraph (5) ‘Supplementary testing for lateral navigation
in final approach’ of Appendix C should be considered.
applicant should select the particular flight paths based on an analysis of critical signal
characteristics, station geometry, signal coverage (including limited station availability
with acceptable range), aircraft movement, etc. The system should demonstrate its
ability to detect poor signal conditions, inadequate navigation capability, recovery from
in-flight power failure, etc. The applicant should review and test the auto-tune logic to
verify that ground stations are identified and tuned correctly.
(f) Inertial systems that satisfy the criteria of Appendix B do not need further evaluation.
(g) With regard to GNSS sensors that have been granted an ETSO authorisation against
ETSO-C146 (Class Gamma equipment), it is stipulated that the equipment will support
installations with the ability to compensate for the navigation centre to antenna offset.
If applicable, the applicant should confirm that the antenna to aircraft centre of
navigation offset is appropriate to the installation for GNSS SBAS equipment supporting
RNP APCH to LPV and LNAV/VNAV minima.
Note: The fact that the GNSS antenna is top-mounted can result in several feet of vertical
difference between the antenna and the aircraft centre of navigation, significantly
greater than for ILS antennas. The centre-of-navigation to wheel-crossing height should
be evaluated for each installation. For most installations, a fixed vertical offset is
adequate.
(h) The applicant should evaluate the accessibility of all controls pertaining to the installation
of the RNP System.
(i) The applicant should evaluate the visibility of display(s) and annunciator(s) pertaining to
the installation of the RNP System during day and night lighting conditions. No distracting
cockpit glare or reflections may be introduced.
(3) Sensor interference testing
(a) GNSS equipment is particularly susceptible to out-of-band SATCOM emissions and in-
band inter-modulation between multiple channel SATCOM installations. The applicant
should not install GNSS equipment on aircraft with SATCOM transceivers, unless absence
of interference with the GNSS sensor is demonstrated.
(b) Improperly used or installed GNSS re-radiators can present misleading information to
GNSS equipment. Equipment manufacturers may provide mitigation against the use of
erroneous data for GNSS position and navigation solutions. Possible measures include:
implementing or enabling cross-checks of GNSS sensor data against independent position
sources and/or other detection monitors using GNSS signal metrics or data. It is left to
the applicant to determine that the method chosen by the equipment manufacturer is
adequate for the aircraft integration.
(c) The applicant should demonstrate the lack of interference from VHF radios on the
completed installation of navigation sensors (GNSS, DME where applicable, etc.) by
tuning each VHF transmitter to the frequencies listed below and transmitting for a period
of 30 seconds while observing the signal status of each satellite being received.
Degradation of individually received satellite signals below a point where the satellite is
no longer available will require additional isolation measures to be taken:
(i) 121.150 MHz; 121.175 MHz; 121.200 MHz; 131.250 MHz; 131.275 MHz; and
131.300 MHz (for radios with 25-kHz channel spacing); and
(ii) 121.185 MHz; 121.190 MHz; 130.285 MHz and 131.290 MHz (for radios with 8.33-
kHz channel spacing);
(d) For installations on rotorcraft, the applicant should ensure that the rotor blades do not
interfere with the received signals. This problem has been experienced in some rotorcraft
and varies with the rotation rate.
(4) Generic testing for performance-based lateral navigation
(a) The applicant should evaluate the navigation parameters displayed on cockpit
instruments (such as HSI, CDI, distance display, electronic flight instrument system,
moving maps, FMSs, etc.) against the relevant criteria. In particular, the parameters
displayed should be consistent across the cockpit, especially the aircraft heading or track
reference (magnetic or true), the aircraft altitude (feet or metres), and the aircraft speed
(knots or km/h).
(b) The applicant should verify that the RNP system continuously provides to the flight crew:
(i) an estimation of the present position, the position accuracy and integrity;
(ii) the computed desired path and the deviation from that path; in particular, the
applicant should:
(1) evaluate the sensitivity of the deviation display;
(2) verify that the full-scale setting is appropriate for the intended operation;
and
(3) when applicable, verify that when the full-scale setting changes, the display
of the updated deviation is appropriate;
(iii) the identification of the active TO waypoint;
(iv) the distance, bearing and time to the active TO waypoint; and
(v) the aircraft ground speed.
This behaviour should be evaluated for different flight phases, altitudes, and under
various normal aircraft manoeuvres (e.g. bank angles of up to 30 degrees and pitch angles
associated with take-off, departures, approaches, landing, and missed approaches, as
applicable).
(c) The applicant should verify that the course selector and the RNP system are properly
integrated. The behaviour of the system and the display of the aircraft heading and the
selected course should be appropriate and consistent when the aircraft follows the RNP
system’s flight plan but also when the aircraft is manually flown.
(d) The applicant should verify the automatic and manual selection/deselection of sensor
types and positioning aids, in particular:
(i) The appropriate automatic sensor selection should be verified, and, where a multi-
sensor system is installed, the applicant should check that the automatic selection
is consistent with GNSS being the primary source of horizontal position;
(ii) Where a multi-sensor system is installed, the applicant should verify the
appropriate automatic reversion when one or several sensors fail;
(iii) The applicant should verify the appropriate automatic selection and tuning of
positioning navigation aids. Where DME is installed, the automatic selection and
tuning should be evaluated where multiple DME can be received from the aircraft,
for different flight phases and different altitudes. For each sensor, the applicant
should verify the continuous aircraft position estimations for different flight
phases, altitudes, and various normal aircraft manoeuvring (e.g. bank angles of up
to 30 degrees and pitch angles associated with take-off, departures, approaches,
landing and missed approaches as applicable);
(iv) The applicant should check the capability to manually override the selection or
deselection of a positioning sensor type and positioning navigation aids.
(e) The applicant should verify the capability to create, review, modify and activate a flight
plan. In particular, the applicant should verify the capability to extract and load
procedures from the navigation database into the RNP system. During the extraction, all
procedures’ characteristics (sequence of waypoints, speed and/or altitude constraint,
etc.) should be loaded into the flight plan.
(f) The applicant should evaluate the following aspects when the RNP system is interfaced
with an autopilot and/or a flight director. If some issues are raised, the RNP system may
still be installed, but either should not be connected to the autopilot or have an
appropriate aircraft flight manual supplement/rotorcraft flight manual supplement
(AFMS/RFMS) limitation that mitigates the issue.
(i) The applicant should evaluate the steering response while the flight director
and/or autopilot are/is coupled to the RNP system during a variety of different
track and mode changes while operating at the maximum and minimum operating
speeds. This evaluation should include, as applicable:
(1) transition from en route through the approach to missed approach modes
and then back to en route;
(2) intercept and track to and from a waypoint on a selected course.
(ii) The applicant should evaluate:
(1) the steering response during the automatic sequencing of various flight plan
legs and transition; and
(2) the appropriate display of this sequencing to the flight crew.
In particular, the capability to execute fly-by, fly-over, and RNAV holding should be
evaluated for different altitudes, wind conditions, aircraft speeds, and
configurations.
(iii) The applicant should verify that the lateral manoeuvre anticipation supplied by the
RNP system is appropriate for the aircraft type. The applicant should verify that an
appropriate annunciation of impending waypoint crossing is provided.
(iv) The applicant should verify that execution of the ‘direct-to’ and ‘direct-to’ with
intercept function with a resultant aircraft heading change do not overshoot and
do not cause ‘S-turns’.
(v) The applicant should evaluate that the autopilot response to the RNP system fault
by simulating a representative fault consistent with the equipment architecture
(e.g. pulling the circuit breaker). This test should be done under various navigation
modes.
(vi) The applicant should verify that modification of the flight plan does not impact on
the aircraft guidance until the flight plan and its modification is activated. This
behaviour should be evaluated for various kinds of flight plan modifications (lateral
revision, constraint insertion/deletion, etc.) and for different procedure types
(a) The applicant should evaluate the autopilot response to the insertion of various altitude
constraints into the RNP system’s flight plan:
(i) ‘AT or BELOW’ altitude constraint;
(ii) ‘AT or ABOVE’ altitude constraint;
(iii) ‘AT’ altitude constraint;
(iv) ‘WINDOW’ altitude constraint.
The autopilot response should be evaluated under various conditions (different aircraft
configurations and speeds, different lateral paths, and transitions at the altitude
constraint, etc.).
(7) Supplementary testing for vertical navigation in final approach
(a) For installations where the autopilot has not been modified and the RNP System provides
ILS-like deviations, the applicant should conduct several approaches:
(i) while flying raw data, flight director and coupled to the autopilot, as applicable;
(ii) while intercepting before and after the final approach fix (FAF),
and check that the autopilot response is appropriate and that the displays are
appropriate and consistent within the cockpit.
The objective of this test is not to verify approach performance, but to ensure that the
RNP system interfaces are compatible with the aircraft. In addition, the autopilot
approach functionality should be evaluated to ensure compatibility with the ‘gain
scheduling’ employed by some autopilots during approaches. For example, some
autopilots depend upon a radio altimeter or middle marker beacon passage inputs to
enable a ‘glideslope extension’ function to reduce oscillating or aerodynamic instability
when coupled to a glideslope signal during the final approach phase. As PBN approaches
do not have middle marker beacons, the autopilot response needs to be evaluated when
incorporating the PBN capability.
(b) For installations where the autopilot has been modified, the autopilot lateral control
channel performance has not been assessed, or non-standard deviations are provided
(not ILS-like), then the approach performance will need to be evaluated by the applicant
as per the latest revision of AMC1 to CS 25.1329, Appendix B of CS-29, FAA AC 23-17b or
equivalent means.
(c) For manual control to the approach flight path, the applicant should demonstrate that
the appropriate flight display(s) provide(s) sufficient information to maintain the
approach path and align with the runway or go-around without excessive reference to
other cockpit displays.
(d) In order to ensure that the system operates properly, the applicant should evaluate the
vertical full-scale deflection while on approach.
(e) A flight crew workload analysis when operating the RNP system in association with other
piloting requirements should be conducted by the applicant during all phases of flight
and found to be acceptable, including those non-normal procedures that can be
evaluated in flight.
(f) Where the RNP System is capable of automatically intercepting a vertical path, the
vertical fly-by and the autopilot response (if applicable) should be evaluated under
different configurations and winds.
(g) If the equipment uses barometric input, the applicant should verify that the equipment
properly interprets the barometer reading. Special consideration should be given to
manually entering barometric corrections.
(h) The initial certification of each BARO-VNAV system to be used for IFR approach
operations should be based on a system-performance demonstration by recording the
BARO-VNAV equipment vertical guidance and comparing it to the actual aircraft position
along a pre-established vertical flight path. This evaluation can be made by using the
actual coded path and appropriate path definition.
(i) Data should be gathered using a variety of descent rates, angles, and lateral navigation
source inputs available to the BARO-VNAV system.
Note: GNSS SBAS LNAV/VNAV most closely emulates BARO-VNAV performance.
(j) When a Class A TAWS is installed and LPV minima are foreseen to be used, the applicant
should verify the interface between the TAWS and the RNP system by checking the
excessive downward deviation from the glide path.
(k) When temperature compensation is enabled, the applicant should ensure that the
display of corrected altitude(s) is consistent on all displays in the cockpit.
(l) Where the RNP system provides both Barometric VNAV and SBAS/GNSS VNAV, the
applicant should ensure that transitions from one source to the other do not result in
transients or jumps that would cause either a sudden change in aircraft position on the
flight path or in commands that could contribute to destabilisation of the aircraft.
(8) Supplementary testing for applications for advanced RNP
(a) The applicant should evaluate the aircraft response to the insertion of a hold to a manual
termination. This evaluation should be performed at different altitudes, under different
wind conditions, and for different aircraft operating speeds.
(b) RF legs should be evaluated as detailed in Appendix D.
(c) The use of different navigation accuracies (RNP values) between 0.3 and 1 NM should be
evaluated. The applicant should particularly evaluate the aircraft response to navigation
accuracy changes and should check that:
(i) the display update following the navigation accuracy change is appropriate;
(ii) the display of the updated navigation accuracy is consistent with all displays in the
cockpit; and
(iii) the steering response while the flight director and/or autopilot are/is coupled to
the RNP system during the navigation accuracy change is appropriate.
AppD-1 — Introduction
(1) Applicants must demonstrate the aircraft’s capability to perform all types of RF legs that can be
published on instrument procedures as per the procedure design criteria. Appendix D provides
templates that are an acceptable method to demonstrate an aircraft’s capability to perform RF
legs. Applicants may use engineering simulations and/or aircraft for the flight test
demonstrations. The templates depict the various RF legs that procedure designers may use
when constructing actual initial, intermediate, missed approach, or final approach segments for
RNP approaches along with SIDs and STARs. Applicants may use the templates to create one or
more approach procedures at the desired aerodrome for flight test demonstration purposes in
visual meteorological conditions only. The intent of such demonstrations is to streamline the
airworthiness approval for conducting RF legs.
(2) The demonstration procedures need to include the depicted RF leg types shown in AppD-2. To
increase flight test efficiency, it is acceptable for applicants to link the individual RF legs that are
depicted in the figures by using straight segments to create ‘mega procedures’ for
demonstrating the aircraft’s capability. However, the reflex curve legs (‘S-turns’) and decreasing
radius turns must not have a straight segment between the path terminators (see Figure 1
below for an example). The point is to demonstrate that the aircraft is capable of flying the
various types of turns including turns of minimum radius.
Note: Figure 1 is only an example and is not intended as the only possible combination for
creating efficient flight profiles.
56 44
40 5200
0 0
0 0
0 5 0
4
0
0
Figure 1: Example procedure profiles
(3) It should be noted that the templates are designed for use on both RNP AR and standard RNP
approach procedures with RF legs. In addition, the procedures created from the templates
intend to provide some ‘stressing’ situations as a consequence of the procedure design criteria
applied. For example, several RF leg radii were intentionally reduced to approach the 25-degree
RNP AR flight guidance system bank angle limits, given the design wind criteria and aircraft
approach category C/D in terms of aircraft speeds (121–165 knots).
(4) AppD-2 provides a basic description, illustration, and waypoint information for the RF legs.
A ‘test guide’ in AppD-3 lists a recommended testing regimen and considerations for test
conduct, but the applicant can tailor the test regimen as needed.
(5) The test procedures are designed for an aerodrome with an elevation of approximately 1 500 ft
MSL. All turn radii were computed using expected ground speeds and altitudes based upon the
1 500-ft MSL aerodrome elevation. The turn radii were adjusted so that the required bank angle,
given the adverse wind input, would approach the bank angle limitation noted in the procedure
design criteria. The waypoint and navigation leg data is provided so that the procedures can be
‘translated’ to a location suitable to the applicant. However, the elevation of the selected
location should be within the range of 1 000–2 000 ft MSL to ensure that the designed turn radii
and bank angles do not change significantly. If the location used has an elevation outside the
1 000–2 000-ft MSL range, it is the applicant’s responsibility to ensure the procedures offer
adequate obstacle clearance and meet the bank angle limits in the RF leg design criteria.
consists of two back-to-back RF legs with decreasing radii. The arrival is shown in Figure 4 and
waypoint information is shown in Table 3.
Figure 4: Arrival
Figure 5: Approach 1
(3) Approach 2, as shown in Figure 6, is also a descending right turn to final but has a series of four
RF legs with differing radii. Similar to Approach 1 in Figure 5, this path will require the aircraft
to descend and decelerate during the RF leg. Waypoint information is shown in Table 6 and
vertical error budget information is included in Table 7.
Figure 6: Approach 2
(4) Approach 3 is shown in Figure 7. This procedure uses an RF leg early in the procedure followed
by a brief straight segment, then two back-to-back RF legs with a turn direction reversal. The
second RF leg terminates at the final approach fix. As on the other approaches, the aircraft will
be required to descend, decelerate, and configure for landing during the series of RF legs. The
missed approach also includes an RF leg to the missed approach hold. Waypoint information is
shown in Table 8 and vertical error budget information is included in Table 9.
Figure 7: Approach 3
(3) Verify that a navigation database with the ‘FOR TEST ONLY’ terminal procedures is loaded in the
RNP system.
(4) Verify that desired data parameters will be recorded (if data recording capability is available).
Note: In addition to the desired data parameters, the lateral path definition (desired path) and
lateral path ‘cross-track error’ (distance from the path’s centre line) should be included in the
recorded data parameters to monitor/review path maintenance performance.
(5) Configure the simulation, if practical, for trials using two atmospheric conditions:
(a) standard day, with standard lapse rate;
(b) 35 °C outside air temperature, with standard lapse rate.
(6) If practical, simulated wind direction should be set to a tailwind for each turn entry. Below
2 000-ft AGL, the wind velocity should be fixed at 30 kt. At 2 000-ft AGL and above, the wind
velocity in knots (VKTW) should be calculated as a function of the altitude in feet (A) in accordance
with the formula:
𝑉𝐾𝑇𝑊 = 0.00198 × 𝐴 + 47
If impractical (i.e. when the simulator cannot model variable winds and various levels), select the wind
direction and velocity that most effectively simulates the worst-case tailwind for the procedure.
1.0 0.5 NM
< 0.3 Agreed allowable FTE value to achieve TSE ≤ 1 × RNP value
(7) Perform steps (1) through (6) for each appropriate aircraft gross weight configuration and for
each test procedure.
GENERAL
CS ACNS.D.AC.001 Applicability
ED Decision 2013/031/R
This section provides standards for Mode A/C only airborne surveillance installations.
compliance. RTCA DO-144A contains the requirements for the equipment to reply to Mode
A/C/S All-Call and Mode A/C-Only All-Call interrogations.
(b) Minimum reply rate
(1) Mode A/C only transponders should be capable of continuously generating at least 500
replies per second for a 15-pulse coded reply.
(2) Transponder installations used solely below 4 500 m (15 000 ft), or below a lesser altitude
established by the appropriate authority or by regional air navigation agreement, and in
aircraft with a maximum cruising true airspeed not exceeding 90 m/s (175 knots) should
be capable of generating at least 1 000 15-pulse coded replies per second for a duration
of 0,1 s.
Note: The rate of 1 000 replies per second for a limited duration of 100ms is an acceptable
deviation to ETSO-C74d.
(3) Transponder installations operated above 4 500 m (15 000 ft) or in aircraft with a
maximum cruising true airspeed in excess of 90 m/s (175 knots) should be capable of
generating at least 1 200 15-pulse coded replies per second for a duration of 0,1 s.
Note 1: A 15-pulse reply includes 2 framing pulses, 12 information pulses, and the SPI
pulse.
Note 2: The transponder should be capable of replying to this short-term burst rate, even
though the transponder may not be capable of sustaining this rate.
Note 3: The rate of 1 200 replies per second for a limited duration of 0,1 s is an acceptable
deviation to ETSO-C74d.
(c) Minimum output power level
The transponder power output capability should be verified as follows depending on the aircraft
capability:
(1) For aircraft that operate at altitudes exceeding 4 570 m (15 000 ft) or with maximum
cruising speed exceeding 90 m/s (175 knots), the class of the transponder declared in the
transponder DDP should be Class A.
(2) For aircraft operating at or below 4 570m (15 000 ft) with a maximum cruising airspeed
of 90 m/s (175 knots) or less, the class of the transponder declared in the transponder
DDP should be Class A or Class B.
(c) Special Position Indication (SPI) for 15 to 30 seconds after an IDENT (SPI) command has been
initiated by the pilot.
(a) Altimeters compliant with JAA TGL No 6 are an approved and acceptable means of compliance
for the altitude source.
(b) Altimeters with a pressure altitude resolution lower than or equal to 7,62 m (25 ft) is an
approved and acceptable means of compliance.
Note: Altitude source resolution of 7,62 m (25 ft) or better is required for aeroplanes intended
to be used for international air transport as defined in ICAO Annex 6 Part 1 — 6.19.
(c) An altimeter with a pressure altitude resolution lower than or equal to 30 m (100 ft) and greater
than 7.62 m (25 ft) is an approved and acceptable means of compliance for aircraft provided
that the flight deck interface provides a means to inhibit the transmission of pressure altitude
information for aircraft equipped with Gillham encoded altitude
Note: It is not recommended to install altimeters with a Gillham altitude encoder interface.
(d) Manual or automatic selection of the altitude source are acceptable means of compliance
Modes of operation should be identified. Attention should be closely paid to line select keys, touch
screens or cursor controlled trackballs as these can be susceptible to unintended mode selection
resulting from their location in the flight deck.
Note: Systems not utilising Gillham interfaces may or may not provide a means to inhibit the
transmission of pressure altitude.
CS ACNS.D.AC.030 Integrity
ED Decision 2013/031/R
The Mode A/C only airborne surveillance system integrity is designed commensurate with a ‘minor’
failure condition .
CS ACNS.D.AC.035 Continuity
ED Decision 2013/031/R
The Mode A/C airborne surveillance system continuity is designed to an allowable qualitative
probability of ‘probable’.
INSTALLATION REQUIREMENTS
When dual or multiple transponders are installed on an aircraft, it is highly recommended to use a
common control interface/panel to ensure that only one transponder is active at a given time.
(a) Antenna locations recommended by the aircraft manufacturer do not need to be revalidated.
(b) Antenna performance for new locations may be validated in flight, by ground measurements or
simulation modelling.
GENERAL
CS ACNS.D.ELS.001 Applicability
ED Decision 2013/031/R
Provided that the differences listed in Appendix D have also been addressed, then previous
compliance declarations with JAA TGL 13 Revision1 (Certification of Mode S Transponder Systems for
Elementary Surveillance) supplemented with the additional assessments is another Acceptable Means
of Compliance.
Note 1: A list of Mode S ELS related documents is provided in Book 2 Subpart D Appendix B section (b).
Note 2: More information on how the ELS information will be extracted and used by ground
surveillance is available in Book 2 Subpart D Appendix B section (c).
Note 3: In accordance with EU Regulation No 1207/2011, aircraft operating flights as general air traffic
in accordance with instrument flight rules in the airspace within the ICAO EUR and AFI regions where
EU Member States are responsible for the provision of air traffic services are to be compliant with CS
ACNS Book 1 Subpart D section 2.
(3) The SI code capability can be verified by checking that the transponder DDP indicates the
letter ‘s’ in the transponder capability declaration.
Note 1: The DDP indicates those requirements of ED-73E (or later version) with which the
transponder is not compliant with.
Note 2: The transponder SI code capability can be found in EUROCAE ED-73E paragraph
3.18.4.34. SI codes have been allocated to Mode S radars used in Europe and it is,
therefore, an important capability to ensure correct detection of the aircraft.
(4) The Elementary Surveillance functionality can be verified by checking that the
transponder DDP indicates the letter ‘l’ for ELS or ‘n’ for EHS in the transponder capability
declaration.
Note: Such transponders meet the requirements specified in EUROCAE ED-73E 3.29.
According to ED-73E, a transponder with the Enhanced Surveillance capability has also
the Elementary Surveillance capability.
(5) ACAS compatibility can be verified by checking that the transponder DDP indicates the
letter ‘a’ in the transponder capability declaration.
Note: Necessary capabilities to be an ACAS-compatible Mode S transponder are described
in section 3.27 of EUROCAE ED-73E.
(b) Minimum output power level: The transponder power output capability should be verified as
follows, depending on the aircraft capability:
(1) For aircraft that operate at altitudes exceeding 4 570m (15 000ft) or with maximum
cruising speed exceeding 90 m/s (175 knots), the class of the transponder declared in the
transponder DDP should be Class 1.
(2) For aircraft operating at or below 4570m (15 000ft) with a maximum cruising airspeed of
90 m/s (175 knots) or less, the class of the transponder declared in the transponder DDP
should be Class 1 or Class 2.
Note: Classes of equipment are defined in EUROCAE ED-73E 1.4.2.4. Power characteristic
is defined in ICAO Annex 10 Volume IV 3.1.1.7.11.
Note 1: Information about how Mode S ELS data are used by Mode S ground system can be
found in Book 2 Appendix B to this CS.
Note 2: Downlink Formats (DF) are defined in ICAO Annex 10 Volume IV and EUROCAE ED-73E.
A summary can also be found in Book 2 Appendix B.
Note 3: It is not recommended to have 2 transponders installed without a common control panel.
(a) Altimeters compliant with JAA TGL No 6 are an approved and Acceptable Means of Compliance
for the altitude source.
(b) Altimeters with a pressure altitude resolution lower than or equal to 7.62 m (25 ft) are an
approved and Acceptable Means of Compliance.
Note: Altitude source resolution lower than or equal to 7.62 m (25 ft) is required for aeroplanes
intended to be used for international air transport as defined in ICAO Annex 6 Part 1 — 6.19.
(c) An altimeter with a pressure altitude resolution lower than or equal to 30 m (100 ft) and greater
than 7.62 m (25 ft) is an approved and Acceptable Means of Compliance for aircraft provided
that the following provisions are implemented:
(1) There is no conversion of Gillham encoded data to another format before inputting to
the transponder unless failure detection can be provided, and the resolution
(quantisation) is set in the transmitted data to indicate 30 m (100 ft);
Note 1: It is not recommended to install altimeters with a Gillham altitude encoder
interface as it supports a resolution of only 30 m (100 ft).
Note 2: Losses or errors of pressure altitude have an impact on the provision of separation
by ATC. It is, therefore, important to design the altitude pressure source to minimise the
loss of this data or the provision of erroneous data.
Note 3: Further guidance on altitude measurement and coding systems may be found in
EUROCAE document ED-26.
(2) Altitude source comparison;
For aircraft equipped with ACAS II where the available source of pressure altitude
information is only in Gillham encoded format, detection of an altitude source or encoder
failure can be satisfied by means of dual independent altitude corrected sensors together
with an altitude data comparator (which may be incorporated and enabled in the
transponder). Similar provision is also acceptable for alternative altitude information
sources that do not signal erroneous data.
The flight deck interface should provide a means to inhibit the transmission of pressure altitude
information for aircraft equipped with a Gillham encoded altitude interface.
(d) Manual or automatic selection of the altitude source are acceptable means of compliance.
Modes of operation should be identified. Attention should be closely paid to line select keys, touch
screens or cursor controlled trackballs as these can be susceptible to unintended mode selection
resulting from their location in the flight deck.
CS ACNS.D.ELS.040 Integrity
ED Decision 2013/031/R
The Mode S ELS airborne surveillance system integrity is designed commensurate with a ‘minor‘ failure
condition.
CS ACNS.D.ELS.045 Continuity
ED Decision 2013/031/R
The Mode S ELS airborne surveillance system continuity is designed to an allowable qualitative
probability of ‘remote’.
INSTALLATION REQUIREMENTS
When dual or multiple transponders are installed on an aircraft, a common control interface/panel
should be provided to ensure that only one transponder is active at a given time, and to ensure that
the Mode A code and Aircraft Identification changes are applied to the active transponder.
The ICAO 24-bit aircraft address assigned by the competent authority is correctly implemented on
each transponder.
(a) Antenna locations recommended by the aircraft manufacturer do not need to be revalidated.
(b) Antenna performance for new locations should be validated in flight by ground measurements
or simulation modelling.
(c) The distance between ATC Transponder antenna should be at least 40 cm and the distance
between ATC Transponder antenna and other antenna (e.g. ACAS, DME) should satisfy the
appropriate isolation and longitudinal separation limits.
(d) When the Mode S ELS surveillance installation is using two antennas, the horizontal distance
between the two antennas should be less than 7.6m
(a) The aircraft maximum cruising true airspeed may be determined using one of the 3 following
options:
(1) Where the Aircraft Flight Manual or Pilot’s Operating Handbook gives more than one
table of true airspeed values for a range of temperatures, the table which gives the
maximum true airspeed, should be used;
(2) For some aircraft, the maximum cruising true airspeed is not obtained at the maximum
operating altitude. In those cases, the maximum true airspeed has to be considered and
not the true airspeed at maximum operating altitude;
(3) Aircraft which do not state the maximum cruising true airspeed under ISA conditions in
their Aircraft Flight Manual or Pilot’s Operating Handbook, may use the following
alternative method to calculate maximum cruising true airspeed:
(i) Use the maximum operating values of altitude and airspeed (i.e. VNO, or
VMO/MMO as applicable) quoted in the Limitations section of the Aircraft
GENERAL
CS ACNS.D.EHS.001 Applicability
ED Decision 2013/031/R
Provided that the differences listed in Appendix E have also been addressed, then previous compliance
declarations with EASA AMC 20-13 (Certification of Mode S Transponder Systems for Enhanced
Surveillance) supplemented with the additional assessments is another Acceptable Means of
Compliance.
Note: In accordance with EU Regulation No 1207/2011, fixed wing aircraft having a maximum take off
mass greater than 5 700 kg or a maximum cruising true airspeed greater than 128.6 m/s (250 knots)
and operating flights as general air traffic in accordance with instrument flight rules in the airspace
within the ICAO EUR and AFI regions where EU Member States are responsible for the provision of air
traffic services are to be compliant with CS ACNS Book 1 Subpart D section 3.
(a) The means of compliance defined in AMC1 ACNS.D.ELS.010 should be followed, with the
exception that the transponder DDP should indicate a label ‘n’ in the transponder capability
declaration to reflect ELS and EHS capabilities.
Note: Such transponders meet the requirements specified in EUROCAE ED-73E section 3.30 for
EHS capabilities. If the transponder is compliant with EUROCAE ED-73E, it provides register
format corresponding to a Mode S sub-network version 5.
(b) The Mode S sub-network format should be 3 or above.
Note : The use of the highest Mode S sub-network version format is recommended.
(a) The EHS capability compliance verification should address all the Mode S transponder registers
that are indicated as available in the Mode S Specific Services Capability reports (registers). The
compliance verification should include a list of transponder registers supported by the
installation, including the parameters that are available in each register. The list should contain
the registers that are indicated as available in the Mode Specific Capability reports (1816 to 1C16),
except the following registers:
(1) registers managed by the transponder to support the Mode S airborne initiated protocol
(0216, 0316, 0416);
(2) registers containing extended squitters information (0516, 0616, 0716, 0816, 0916, 0A16);
(3) aircraft capability reporting (1016 to 1F16);
(4) Aircraft Identification (2016);
(5) ACAS RA report (3016); and
(6) transponder dependant information (5F16, E316, E416, E716, EA16).
Note 1: An example of a minimum list of registers to support EHS is provided in Subpart D
Appendix C.
Note 2: An example of other registers and parameters is provided in Subpart D Appendix C.
(b) Verification of operation
(1) All the transponder registers containing data as defined in (a) should be verified to ensure
correct data is transmitted by the Mode S transponder.
Note: Format and resolution of airborne parameters can be found in ED-73E Volume 2 or
in ICAO Doc 9871 Edition 2.
(2) Where a register is declared available but a parameter within that register is not available,
it is necessary to verify that the status of the parameter is declared invalid in the
corresponding aircraft register.
Note 1: Some parameters are particularly difficult to measure statically. To ensure that
these parameters (e.g. Roll Angle, Track Angle Rate, Inertial Vertical Velocity) are correctly
received from the sensor and transmitted by the transponder, it is acceptable to test that
the correct transponder register is transmitted (by the transponder), that the value of the
parameter status bit is valid (status bit = 1), and the value of the parameter field is set to
zero when aircraft is not moving on the ground. Alternatively, for such parameters which
remain invalid in static condition, ground test may use simulation if simulated data bus
signal meets sensor data bus specifications, the same data bus provides at least one other
valid parameter which is tested and sensor specifications clearly establish availability
conditions and format of the simulated data parameter.
Note 2: Due to the limitations of the static tests, a recommended option is to perform a
flight and record the content of the different transponder registers (as extracted by a
Mode S ground station) to verify that all parameters listed in (a) are changing in
accordance with pilot input and aircraft attitude and manoeuvre.
Note 3: To minimise the certification effort for transponder follow-on installations, the
applicant may claim from the responsible authority credit for applicable certification and
test data obtained from equivalent aircraft installations. This is acceptable for a
parameter only if all related equipment connected to the transponders are of the same
type and same software revision number.
(c) Aircraft parameters
(1) Selected Altitude
(i) MCP/FCU Selected Altitude
Selected level input to the MCP or FCU should be used.
In case there is no MCP/FCU Selected Altitude function, it is accepted to use the
information provided by an altitude alerter.
(ii) FMS Selected Altitude
When available, it is recommended that the FMS Selected altitude field is provided.
Note: This will allow the reporting of the intermediate selected altitudes during
applications (e.g. Continuous Descent Operations) when the FMS provides the
guidance input to the auto-pilot.
(iii) MCP/FCU mode bits
When data is available, it is recommended (optional) to provide information on
autopilot mode which is selected by the flight crew.
Note: It is accepted to set this bit to zero rather than providing wrong information.
(iv) Target Altitude source bits
The target altitude source bits are used to indicate the source (e.g. FCU/MCP, FMS)
which provides the next level at which the aircraft will level off. This is also referred
to as the Target Altitude. However, the necessary data may be inconsistent or not
accessible. In this case, the status of target altitude source bits should indicate no
source information provided (set to zero).
Note: It is also acceptable that status of target altitude source bits is set to valid
and target altitude source is set to 00 to indicate unknown.
(2) Vertical Rate
The Barometric Altitude Rate should contain value solely derived from barometric
measurement.
When different sources are available, the Inertial Vertical Velocity should contain data
coming from the most accurate and steady source.
Note 1: The vertical rate can be provided in the Barometric Altitude Rate and/or the
Inertial Vertical Velocity fields of register 6016. Both the Barometric Altitude Rate and the
Inertial Vertical Velocity can be transmitted simultaneously.
Note 2: The Barometric Altitude Rate is usually very unsteady.
Note 3: The Inertial Vertical Velocity (derived from IRS, AHRS and/or GPS) information is
more filtered and smoothed.
(3) Barometric Pressure Setting
If operating with reference to the standard pressure setting, the Barometric Pressure
Setting field should indicate standard pressure value equivalent to 1.01325 105 Pa.
(4) Track Angle Rate or True Airspeed
If Track Angle Rate data cannot be readily provided due to the aircraft configuration, True
Airspeed data should be substituted.
(5) Roll Angle
It is difficult to test different values of Roll Angle when the aircraft is on the ground. To
ensure that this parameter is correctly received from the sensor and transmitted by the
transponder, it is acceptable to test that the Roll Angle field in register 5016 contains a
credible value, consistent with aircraft roll angle on the ground, and the Roll Angle Status
bit indicates valid data.
(6) True Track Angle
It is difficult to test different values of True Track Angle when the aircraft is on the ground.
To ensure that this parameter is correctly received from the sensor and transmitted by
the transponder, it is acceptable to test that the True Track Angle field in register 50 16
contains a value and the True Track Angle Status bit indicates valid data.
(7) Ground Speed
It is difficult to test different values of Ground Speed when the aircraft is on the ground.
To ensure that this parameter is correctly received from the sensor and transmitted by
the transponder, it is acceptable to test that the Ground Speed field in register 50 16
contains a value, consistent with the speed of the aircraft on the ground (close to zero if
the aircraft is not moving) and the Ground Speed Status bit indicates valid data.
(8) Magnetic Heading
To ensure that this parameter is correctly received from the sensor and transmitted by
the transponder, it is acceptable to test that the Magnetic Heading field in register 60 16
contains a value, consistent with the magnetic heading of the aircraft, and the Magnetic
Heading Status bit indicates valid data.
(9) Indicated Airspeed or Mach No
Indicated Airspeed and Mach No are considered as a single parameter. Both should be
provided where available.
To ensure that these parameters are correctly received from the sensor and transmitted
by the transponder, it is acceptable to test that the Indicated Airspeed or Mach fields in
register 6016 contain a value, consistent with the indicated airspeed or Mach No
generated via a test set, and the Indicated Airspeed or Mach Status bits indicate valid
data.
(d) Sensor Sources
Particular attention should be given to the interface between data sources and transponders
when multiple transponders and multiple sensors are employed. In this context, ‘sensors’ refers
to FMS, IRS, AHRS, ADS, GPS, or Data Concentrator (or other) systems used to provide data to
the transponder.
The crew should be aware, at all times, which sensors are providing information to the active
transponder.
In an installation, where automatic sensor selection for the active transponder is not provided,
the captain’s side transponder should utilise the captain’s side sensors, and the co-pilot’s side
transponder should utilise the co-pilot’s side sensors.
Data parameters from different sensors of the same type should not be mixed.
Note: For example, Mode-C or Mode-S altitude reporting information from ADC source #1 should
not be mixed with reporting of TAS, Baro Vertical Rate, Mach from ADC source #2. In this case,
partially blocking of data output from either ADC source #1 or #2 will cause uncorrelated results.
This could result in problems with ATC ground processing of the data.
Where only single sensors are available (i.e. single FMS), it is permissible to connect the single
sensor to multiple transponders. It should be noted that this may result in reduced operational
availability should the single sensor fail.
CS ACNS.D.EHS.020 Integrity
ED Decision 2013/031/R
The Mode S EHS airborne surveillance system integrity is designed commensurate with a ‘minor’
failure condition for the downlink aircraft parameters listed in CS ACNS.D.EHS.015.
CS ACNS.D.EHS.025 Continuity
ED Decision 2013/031/R
The Mode S EHS airborne surveillance system continuity is designed to an allowable qualitative
probability of ‘probable’ for the downlink aircraft parameters listed in CS ACNS.D.EHS.015.
GENERAL
CS ACNS.D.ADSB.001 Applicability
ED Decision 2013/031/R
With respect to 1 090 MHz ES ADS-B Out installations, the material in this section is to a large degree
in line with the corresponding FAA AC 20-165A material. Differences between the two documents are
listed in Appendix J . This guidance may be of use when showing of compliance with both documents
is required.
The requirements of CS ACNS.D.ADSB fully cover (and exceed) the requirements of AMC 20-24
(Certification Considerations for the Enhanced ATS in Non-Radar Areas using ADS-B Surveillance (ADS-
B-NRA) Application via 1090 MHz Extended Squitter). Therefore, aircraft that comply with CS
ACNS.D.ADSB also comply with AMC 20-24 but not vice versa.
The approval of on-board systems receiving and processing ADS-B messages in support of air-to-air
applications is outside the scope of Subpart D section 4.
Note: In accordance with EU Regulation No 1207/2011, aircraft having a maximum take off mass
greater than 5 700 kg or a maximum cruising true airspeed greater than 128.6 m/s (250 knots) and
operating flights as general air traffic in accordance with instrument flight rules in the airspace within
the ICAO EUR and AFI regions where EU Member States are responsible for the provision of air traffic
services are to be compliant with CS ACNS Book 1 Subpart D section 4.
Equipment Qualification
For equipment qualification, refer to AMC1 ACNS.D.ADSB.030 through to AMC1 ACNS.D.ADSB.090.
The ADS-B Out functionality should be demonstrated by ground testing, using ramp test equipment
where appropriate, that verifies during nominal system operation, the correctness of the aircraft
derived surveillance data contained in the ADS-B messages, and the functioning of system monitoring
tools/fault detectors including any ADS-B self-test features.
During ADS-B Out system installation testing, all the parameters that are broadcast should be
demonstrated to be correct for each installed ADS-B transmit unit, i.e. the transmitted data should be
in line with the respective source data.
The Emitter Category, Aircraft Length and Width and GPS Antenna Offset parameters might be either
configured as a fixed value during ADS-B Out system installation, or provided via a variable data
interface. In both cases, during installation, the respective settings should be verified to be correctly
set.
The ADS-B Horizontal Position System Design Assurance (SDA) parameter indicates the probability of
an ADS-B Out system malfunction causing false or misleading position information or position quality
metrics to be transmitted. SDA may be pre-set at installation for systems that do not utilise multiple
position sources with different design assurance levels, otherwise the system should be capable of
adjusting the SDA broadcast parameter to match the position source being employed at the time of
transmission.
ADS-B transmit equipment that is compliant with AMC1 ACNS.D.ADSB.030 and that is directly
connected to a position source compliant with AMC1 ACNS.D.ADSB.070 may set the SDA to ‘two’
without further analysis. For more complex ADS-B installations, a system safety assessment is required
to set the SDA. Basically, the lowest design assurance level of one system in the horizontal position
data transmission chain should define the SDA value.
Additional guidance material on the required surveillance data parameters are provided in Appendix
H Part 1 and Part 2.
Appendix H Part 6 provides matrices of the so-called BDS register fields as used by the 1090 ES ADS-B
transmit unit to broadcast the ADS-B Out parameters. These matrices detail the ADS-B Out data
requirements at data field level for general understanding and in support of integration testing, as
appropriate.
If installations transmit ADS-B Out data that do not meet some requirements of the Subpart D Section
4, the respective data should only be transmitted with a ‘zero’ quality indication (if a quality indication
is defined in the ADS-B Out transmit system).
(a) See AMC1 ACNS.D.ADSB.070-090 for details on the approval of the respective data sources.
(b) For transmission of optional data items, the following provisions should be considered:
(1) Airspeed
In case of a loss of GNSS horizontal velocity data, the ADS-B transmit unit normally
switches to broadcast airspeed information (using subtypes 3 and 4 of register 0916).
Therefore, if airspeed data is provided to the ADS-B transmit unit, it should be provided
by an approved airspeed source that is providing data intended for use by the flight crew.
An air data computer meeting the minimum performance requirements of holding an
EASA equipment authorisation in accordance with ETSO-C106 (JTSO-C106) is an
acceptable source.
(2) Heading
In case of a loss GNSS ground track and if heading is provided to the ADS-B transmit unit,
the heading source should hold an EASA equipment authorisation in accordance with
ETSO-C5e (JTSO-C5e) or any revision of ETSO-C6d (JTSO-C6d).
(3) Other Data Parameters
The Intent Change Flag should be set as appropriate to indicate the availability of
information in the Mode S registers 4016 to 4216.
If available, Selected Heading information should come from approved data sources.
The 1090 ES IN capability field should be set correctly.
Data quality indications for the horizontal position containment bound (NIC) and horizontal position
accuracy bound (NACp) should be provided to the ADS-B transmit unit together with the
corresponding horizontal position information within the same data set.
Data quality indications for the horizontal position source integrity level (SIL) and system design
assurance level (SDA) may be preset at installation. Systems that utilise multiple GNSS-based position
sources with different design assurance levels or source integrity levels, should be capable of adjusting
the SDA and SIL quality indications to match the position source that is employed at the time of
transmission.
The horizontal velocity accuracy bound (NACv) and vertical geometric altitude accuracy bound (GVA)
should be dynamically provided to the ADS-B transmit unit together with the corresponding velocity
and geometric altitude information within the same data set. However, NACv and GVA may be also
preset at installation.
For further guidance on the ADS-B data quality indicators, refer to AMC1 ACNS.D.ADSB.070(a).
To be approved, the ADS-B transmit unit should hold an EASA equipment authorisation in accordance
with ETSO-C166b and ETSO-C112d, including any additional requirements as required to comply with
the provision of the AMC’s to Subpart D section 4 (e.g. On-the-ground status determination and
maximum NIC encoding). Where such additional requirements apply, it is expected that the ADS-B
transmit unit manufacturer supplies compliance information through a Declaration of Design and
Performance (DDP), or an equivalent document
The broadcast of Selected Altitude and Barometric Pressure Setting are optional for equipment
meeting ETSO-C166b and equipment should implement this optional functionality if available and in
a suitable format
If using earlier versions of ETSO-C112( ), it should to be demonstrated that all applicable requirements
from EUROCAE ED-102A have been implemented. This can be achieved by a positive deviation of
compliance to previous versions of EUROCAE ED-73 that have been documented in the Declaration of
Design and Performance (DDP).
The 1090 ES data protocol includes a bit to indicate, at any time, if only one or both antennas (if
installed) are functional. The corresponding parameter for the Single Antenna bit is contained in
register 6516 (message element bit ‘30’) and should be set to the appropriate value.
Note 1: For detailed guidance on the required antenna diversity as a function of aircraft maximum
cruising true airspeed capability, refer to AMC1 ACNS.D.ELS.065.
Note 2: For further guidance on antenna installations, see CS ACNS.D.ELS.060, CS ACNS.D.ELS.065,
AMC1 ACNS.D.ELS.060 and AMC1 ACNS.D.ELS.065.
The ADS-B transmit unit has a peak transmit power as specified in CS ACNS.D.ELS.010(c);(d).
(a) The on-the-ground status is determined and validated by the ADS-B Out system.
(b) The on-the-ground status is not set by a manual action.
For aircraft with retractable landing gear, the on-the-ground status determination is typically provided
through a landing gear weight-on-wheels switch. For aircraft that have fixed-gear, the ADS-B Out
system should be able to determine the air-ground status of the aircraft using other means.
Installations that provide a means to automatically determine on-the-ground status based on input
from other aircraft sensors are acceptable if they are demonstrated to accurately detect the status.
Otherwise, ground status validation algorithms should be implemented, using speed thresholds that
match the typical aircraft’s rotation speed as closely as possible.
It is noted that for the validation of a directly determined on-the-ground status that is not validated
outside the ADS-B transmit function, validation against the aircraft’s typical rotation speed (rather
than a fixed value of 50 m/s (100 knots)) might not have been tested in accordance with ETSO-C166b.
If that is the case, it is expected that the ADS-B transmit unit manufacturer supplies compliance
information through a Declaration of Design and Performance (DDP), or an equivalent document.
Detailed guidance material is provided in Appendix I.
In order to fully address the standard associated with ADS-B Out, an ETSO authorisation
alone may not be sufficient to ensure ADS-B compatibility. The position and velocity
source should also comply with the following requirements (i) to (vi).
It is expected that compliance with these requirements is demonstrated by the
equipment manufacturer and documented in the Declaration of Design and Performance
(DDP), or an equivalent document. Detailed guidance material on the qualification
requirements is provided in Appendix H Part 5.
(i) GNSS system must provide a latitude and longitude output.
Note: ETSO-C129a does not cater for full compliance with this requirement.
(ii) The horizontal position integrity containment should have been qualified as per
Appendix H Part 5 paragraph 1;
Note: Horizontal Uncertainty Level (HUL) information does not fulfil
CS ACNS.D.ADSB.070.
(iii) The maximum time to alert for the indication of a signal-in-space data integrity
failure should be 10 seconds as per Appendix H in Part 5 paragraph 1;
(iv) Navigation modes that would force the NIC value temporarily to ‘zero’ whilst the
actual horizontal position integrity containment bound would meet the NIC
requirements in Appendix H Part 3 Table 20, should not be installed.
(v) The horizontal position source accuracy output should have been qualified as per
Appendix H Part 5 paragraph 2;
(vi) The horizontal position source latency and timing characteristics should have been
documented (see Appendix H Part 5 paragraph 3);
(vii) The horizontal velocity accuracy output should have been qualified. If a dynamic
horizontal velocity accuracy output is not provided, the transmitted horizontal
velocity accuracy should be based on a worst case accuracy. If a dynamic horizontal
velocity accuracy output is provided, the source should have been qualified for this
quality indication accordingly as per Appendix H Part 5 paragraph 4.
In addition, a means should be provided to establish the condition when the
horizontal velocity track angle accuracy exceeds plus/minus ‘eight’ degrees as per
Appendix H Part 5 paragraph 4.
(3) Interface Interoperability Aspects
It should be verified that the position and velocity information (including their respective
quality indicators) received from the source are correctly interpreted by the ADS-B
equipment.
(i) Horizontal Position Integrity Containment Bound
Some approved horizontal position sources may incorrectly output horizontal
position integrity containment bounds of less than 75 meters. In such cases, it is
accepted that the transmit unit limits the NIC value to ’eight’.
It is expected that the ADS-B transmit unit manufacturer supplies compliance
information through a Declaration of Design and Performance (DDP), or an
equivalent document.
(ii) Horizontal Velocity Format
In order to ensure that minimum performance requirements are met for Vertical Rate
information, the following source prioritisation should be applied:
— Hybrid Vertical Rate Source: the information may be taken from a hybrid system which
filters barometric vertical rate with an inertial reference unit (IRU) vertical rate and GNSS
vertical rate, provided the accuracy of the vertical rate output is at least as good as
barometric vertical rate sources (e.g. ETSO-C106).
— Blended Vertical Rate Source: the information may be taken from a blended system which
filters IRU vertical rate and barometric vertical rate, provided the accuracy of the vertical
rate output t is at least as good as barometric vertical rate sources (e.g. ETSO-C106).
— Barometric Vertical Rate Source: the information may be taken from an air data computer
(ADC) holding an EASA equipment authorisation in accordance with ETSO-C106 or a
vertical velocity instrument holding an EASA equipment authorisation in accordance with
applicable revisions of ETSO-C8() .
— GNSS Vertical Rate Source: GNSS vertical velocity equipment which have not been
qualified in accordance with CS ACNS.D.ADSB.070 should not be interfaced with the ADS-
B transmit unit.
Vertical Rate from an inertial sensor that is not blended with barometric altitude should not be
transmitted. Neither should ADS-B transmit units derive a barometric altitude rate by sampling
barometric altitude measurements.
The source bit for vertical rate (1090 ES register 0916, message bit ‘36’) should be coded as
barometric when utilising barometric rate from an air data computer, or when using a blended
or hybrid vertical rate. The source bit for vertical rate should only be coded as geometric when
using vertical rate from a GNSS source.
Note: due to differences in the respective transmit formats, the above source prioritisation
differs in some parts with the guidance applicable to Mode S Enhanced Surveillance as provided
in AMC1 ACNS.D.EHS.015.
For general guidance on Vertical Rate data sources, refer to Appendix H , Part 1, Definition 14.
(e) Selected Altitude (and related Modes)
With respect to the various status and mode fields contained in register 6216 (subtype 1), the
respective provisions of AMC1 ACNS.D.EHS. (c)(1) apply to the Selected Altitude Type, Status of
MCP/FCU Mode Bits, VNAV Mode Engaged, Altitude Hold Mode, and Approach Mode
information.
The population of the additional Autopilot Engaged and LNAV Mode Engaged fields status bits
are optional but should be populated where the data is available.
(a) The control and display of surveillance data items is as per CS ACNS.D.ELS.030.
(b) A means is provided to indicate the non-operational status or failure of the ADS-B Out system
without undue delay.
(a) Installations
(1) Data Transmission and Display Consistency
The data transmitted by the active ADS-B transmit unit with the data displayed to the
flight crew should be consistent.
Note: The horizontal position data displayed to the flight crew might be based on data
from more than the position source than that used for ADS-B transmissions.
(2) Single Point of Flight Crew Entry
Installations that do not provide a single point of flight crew entry for the transponder
and the ADS-B transmit unit should be evaluated to ensure that dual entry of the Mode
A code, SPI, and emergency status does not lead to the transmission by the active ADS-B
transmit unit of inconsistent data, particularly when communicating an aircraft
emergency.
(b) ADS-B Off Switch
If control is provided to enable or disable the ADS-B transmit unit, then the status of the active
ADS-B transmit unit should clearly be indicated to the flight crew from their normal seated
position.
The respective controls should be located such that inadvertent disabling is prevented.
ADS-B device or function failures, should be indicated in amber or in accordance with the flight deck
annunciation philosophy, without undue delay, i.e. a response time within the order of one second.
ADS-B device or function failures may be indicated independently of each other; however, detailed
operating instructions should be developed to describe the means to interpret indications.
The ADS-B device or function failure indication should not be confused with an ACAS or Mode S system
failure annunciations.
In case of an ADS-B function failure, it is expected that the transponder should continue to support
the ACAS, Mode A/C and Mode S functions.
The proper indications of the ADS-B Out system failures should be tested.
CS ACNS.D.ADSB.100 Integrity
ED Decision 2013/031/R
(a) The ADS-B Out system integrity is designed commensurate with a ‘major’ failure condition for
the transmission of the following parameters:
(1) ICAO 24-bit aircraft address;
(2) Airborne Horizontal Position — Latitude and Longitude;
(3) Airborne Navigation Integrity Category: NIC;
(4) Airborne/Surface Navigation Accuracy Category for Position: NACp;
(5) Airborne/Surface Source Integrity Level: SIL;
(6) Airborne/Surface System Design Assurance: SDA;
(7) 1090 ES Version Number;
(8) Airborne velocity over Ground — East/West and North/South;
(9) Airborne/Surface Navigation Accuracy Category for Velocity: NACv;
(10) Emitter Category;
(11) Surface Horizontal Position — Latitude and Longitude;
(12) Surface Navigation Integrity Category: NIC;
(13) Surface Ground Track;
(14) Movement (surface ground speed);
(15) Length/width of Aircraft;
(16) GPS Antenna Offset;
(17) Geometric Altitude;
(18) Geometric Altitude Quality: GVA;
(b) The ADS-B Out system integrity is designed commensurate with a ‘minor‘ failure condition for
the transmission of other data parameters.
CS ACNS.D.ADSB.105 Continuity
ED Decision 2013/031/R
(a) The ADS-B Out system continuity is designed to an allowable qualitative probability of ‘remote’.
A horizontal position and velocity source calculates position and velocity data with a rate of at least 1
Hertz.
For systems with a 1 Hertz computation rate, the output of position and velocity data can vary
between 0.8 seconds and 1.2 seconds.
Note Faster position update rates reduce the latency of the transmitted position and velocity
information and are therefore encouraged.
uncompensated latency determines the transmit time of applicability (TTOA). The GNSS time
mark if provided to the transmit system, can be used by the ADS-B transmit unit to reduce
uncompensated latency. It is possible for compensation algorithms to overcompensate for the
effects of latency, also as a result of the desired attempt to account for latency external to the
ADS-B transmit unit. This might lead to transmitting a position that is out in front of the actual
aircraft position rather than behind the actual aircraft position. This is acceptable as long as the
transmitted position is not further ahead than 0.2 s (200 ms).
The various latency related parameters are summarised in Figure 1.
TL = 1.5s
UL = 0.6s
(CL=TL-UL)
t
APPENDICES
(c) General
This appendix provides additional references, background information, and guidance for
maintenance testing, as appropriate to Mode A/C surveillance installations.
(d) Related References
(1) EASA
ETSO-C74d, Minimum Performance Standards for Airborne ATC Transponder Equipment.
(2) ICAO
(i) ICAO Annex 10, Volume IV, Aeronautical Communications (Surveillance Radar and
Collision Avoidance Systems) — Amd. 85;
(ii) ICAO Document 8168-OPS/611 Volume I, Procedures for Air Navigation Services,
Aircraft Operations;
(iii) ICAO Document 4444-ATM/501, Procedures for Air Navigation Service, Air Traffic
Management; and
(iv) ICAO EUR Regional Air Navigation Plan, Part IV CNS Supplement SSR Code
Allocation List for the EUR region, current edition.
(3) EUROCAE
(i) ED-43, Minimum Operational Performance Requirements for SSR Transponder and
Alticoder; and
(ii) ED-26, Minimum Performance Specification for Airborne Altitude Measurement
and Coding Systems.
(iii) EUROCAE document 1/WG9/71 June 1972 MPS for airborne secondary
surveillance radar transponder apparatus - Including Amendment N°1
(measurement procedures)-April 1974 & Amendment N°2-January 2000
(4) RTCA
(i) DO-144A Minimum Operational Performance Standards (MOPS)
(e) Background Information
Airborne surveillance system
The following diagram presents the Mode A and C transponder and its main functional
interfaces.
Mode A code
interface
Top antenna
Bottom antenna
Altitude source
(a) General
This appendix provides background information on Elementary Surveillance (ELS) useful to
understand ELS airborne surveillance system defined in the CS ACNS.D.ELS and its associated
AMCs.
(b) Related Material
(1) EASA
ETSO-C112d, Minimum Operational Performance Specification for SSR Mode S
Transponders. (Based on EUROCAE ED-73E).
(2) ICAO
(i) ICAO Annex 10, Volume IV, Amd. 85, Aeronautical Communications (Surveillance
Radar and Collision Avoidance Systems; )
(ii) ICAO Document 9871 Edition 2 (transponder register formats);
(iii) ICAO Document 8168-OPS/611 Volume I (Procedures for Air Navigation Services);
and
(iv) ICAO Document Doc 4444-RAC/501 Procedures for Air Navigation Service, Air
Traffic Management.
(3) EUROCAE
(i) ED-73E Minimum Operational Performance Specification for Secondary
Surveillance Radar Mode S Transponders; and
24 bit aircraft
address
Mode A code
interface
Top antenna
When Aircraft Identification is modified, the transponder will indicate this change for 18s
in its selective replies. This is done using the Mode S Comm-B Broadcast protocol (ICAO
Annex 10 Volume IV 3.1.2.6.11.4). The Mode S ground station will extract the Comm–B
Broadcast message to obtain the new value of the Aircraft Identification.
(4) Extraction of Mode A code using Mode S protocol
Ground Mode S surveillance system will extract Mode A code at track initialisation.
If the Mode A code is modified, the transponder will indicate this change for 18s in its
selective replies. This is done by raising an alert bit which is set for 18s after the change.
Once this alert is detected, the Mode S ground stations will extract the new Mode A code.
It is, therefore important, that the change of the Mode A code happens on the active
transponder which is announcing the change for 18s.
Note: ED-73E contains additional requirement requiring the announcement of a Mode A
code change when a transponder becomes active. This is not necessarily available on older
Mode S transponders in which it may be necessary to follow a specified procedure on
installations with no common control interface. In some instances, a ground system
workaround, consisting of periodically extracting the Mode A code, has also been
implemented.
(5) ACAS Resolution Advisory (RA) report extraction
When a resolution advisory has been produced, the transponder announces the presence
of a ‘RA report’ for the time that the RA is active until 18s after it has ceased. The Mode
S ground stations will extract the register 3016 to obtain the information
(6) Summary of registers used for ELS
Register 1016 to obtain information on data link capability of the airborne surveillance
system.
Register 1716 to obtain information on additional services available. For ELS, it is possible
that register 1716 is empty (=0).
Register 2016 to obtain the Aircraft Identification.
Register 3016 to obtain the RA Report
(7) Information on Mode S replies used to support ELS
The following Mode S reply types are used to track the aircraft and obtain additional data:
DF11: Mode S All Call replies containing the 24-bit Aircraft Address and the CA field
indicating whether the transponder is level 2 or greater and whether the aircraft is on the
ground or airborne. DF11 can also be spontaneously transmitted as acquisition squitters.
These replies are used for aircraft acquisition.
DF4: Short Mode S reply containing Altitude information.
DF5: Short Mode S reply containing the selected Mode A code.
DF20: Long Mode S reply containing the Altitude information and the content of the
transponder register requested.
DF21: Long Mode S reply containing the Mode A code and the content of the transponder
register requested.
(a) Introduction
This appendix provides background information on Enhanced Surveillance (EHS) useful to
understand EHS airborne surveillance system defined in the CS ACNS.D.EHS and its associated
AMCs.
(b) Related Material
(1) EASA
ETSO-C112d, Minimum Operational Performance Specification for SSR Mode S
Transponders. (Based on EUROCAE ED-73E).
(2) EUROCONTROL
(i) The Concept of Operations - Mode S in Europe, document SUR.ET2.ST02.1000-
CNP-01-00, Edition 2, Nov 1996:
(ii) Operational Hazard Assessment of Elementary and Enhanced Surveillance, Edition
1.1, EATMP Infocentre Reference: 04/04/07-01, 07.04.2004; and
(iii) Preliminary System Safety Analysis for the Controller Access Parameter service
delivered by Mode S Enhanced Surveillance, Edition 1.1, EATMP Infocentre
Reference: 04/04/07-02, 07.04.2004
(3) ICAO
(i) ICAO Annex 10, Volume IV, Amd. 85, Aeronautical Communications (Surveillance
Radar and Collision Avoidance Systems; )
(ii) ICAO Document 9871 Edition 2;
(iii) ICAO Document 8168-OPS/611 Volume I (Procedures for Air Navigation Services);
and
(iv) ICAO Document Doc 4444-RAC/501 Procedures for Air Navigation Service, Air
Traffic Management.
(4) EUROCAE
(i) ED-73E Minimum Operational Performance Specification for Secondary
Surveillance Radar Mode S Transponders;
(ii) ED-26 Minimum Performance Specification for Airborne Altitude Measurement
and Coding Systems; and
(iii) ED-12C Software Considerations in Airborne Systems and Equipment Certification.
(5) RTCA
DO-181E Minimum Operational Performance Specification for Air Traffic Control Radar
Beacon System/ Mode Select (ATCRBS/Mode S) Airborne Equipment.
(c) Background Information
(1) Airborne surveillance system description
This section describes the EHS system including transponder, interfaces, and antenna.
The following diagram represents the Mode S Transponder, and its main functional
interfaces. It is to be noted that different interfaces coming from different parts of the
avionics may need to be connected to the transponder to support EHS.
24 bit aircraft
address
Mode A code
interface
Top antenna
Bottom antenna
Aircraft
Identification
interface
Example of a basic list of registers and parameters to use to support the declaration
of registers and parameters supported by an EHS installation is provided in Table 2
below.
Table 2 - Example of basic list of EHS registers and parameters
Register Assignment Capability reporting in parameters EHS
number register 1816 to 1C16 req
4016 Selected vertical Reg. 1916 MCP/FCU Selected Altitude Yes
intention Bit 49 FMS Selected Altitude No
Barometric Pressure Setting Yes
MCP/FCU Mode bits No
Target altitude source bits No
5016 Track and turn Reg. 1916 Roll Angle Yes
report Bit 33 True Track angle Yes
Ground speed Yes
Track Angle Rate Yes
True Airspeed Yes
6016 Heading and Reg. 1916 Magnetic Heading Yes
speed report Bit 17 Indicated Airspeed Yes
Mach Yes
Barometric Altitude Rate Yes
Inertial Vertical Velocity Yes
(a) All transmitted parameters are correct and are correctly indicated as available (see
CS ACNS.D.EHS.015(c));
(b) Barometric pressure setting is provided (See CS ACNS.D.EHS.015(a)(8) and (c)).
(Company Name)
The limitations and information contained herein either supplement or, in the case of conflict,
override those in the flight manual.
GENERAL
The installed transponder system is able to respond to interrogations in Modes A, C and S and is fully
compliant with the requirements of CS ACNS.D.ELS/EHS (Mode S Elementary/Enhanced Surveillance).
A detailed description of the transponder operation can be found in the ___________________, P/N
_________________, Rev. ____ or subsequent revisions.
LIMITATIONS
None
EMERGENCY PROCEDURES
No change to Approved Aircraft Flight Manual
Issue:_______ Signature:___________________________________
(Company Name)
ADS-B Out
The limitations and information contained herein either supplement or, in the case of conflict,
override those in the flight manual.
GENERAL
The installed ADS-B out system is fully compliant with the requirements of CS ACNS.D.ADSB (1090
MHz Extended Squitter ADS-B Out). A detailed description of the system operation can be found in
the ___________________, P/N _________________, Rev. ____ or subsequent revisions.
LIMITATIONS
None
EMERGENCY PROCEDURES
No change to Approved Aircraft Flight Manual
Issue:_______ Signature:___________________________________
Part 1 of this Appendix provides guidance to the aircraft integrator on the minimum ADS-B Out
surveillance data requirements (Table 5 and associated Definitions).
In addition, guidance is given for the overall understanding of the ADS-B Out system, in support of
equipment configuration and ADS-B Out data parameter testing, as appropriate. This includes the
presentation of data encodings related to the so-called BDS registers (Table 4), as extracted from ED-
102A. The content of the various BDS registers are loaded into the 56-bit ADS-B message (ME) field of
the Mode S Downlink Format 17 (DF17, bits 33-88), in line with their respective transmission rates.
Table 5 below makes reference to the BDS registers that contain the various ADS-B Out data
parameters. When Table 5 states Same source as for Mode S replies, reference is made to the
requirement that the content of ADS-B broadcasts and Mode S replies that carry the same information
need to come from the same source (CS ACNS.D.ADSB.025(b)).
The reference to the BDS registers is provided in order to facilitate a detailed understanding and
traceability of ADS-B Out requirements at ADS-B transmit unit level, also in support of integration
testing, as appropriate.
The relationship between the BDS registers and the ADS-B message Type Codes (first 5 bits in the 56-
bit ADS-B message field) is thereby as shown in Table 4. The Type Code is used to differentiate
between ADS-B message types (i.e. BDS registers). In addition, for Airborne and Surface Position
Messages, the Type Code is used to encode the horizontal position integrity containment bounds
(NIC). The Subtype Code is used to further differentiate between ADS-B messages of a certain type
(e.g. Operational Status Message).
A number of service bulletins have been issued to rectify some observed deficiencies and have already
been addressed by the equipment manufacturers. Therefore, the installed transponders should have
all published corrective transponder equipment service bulletins (SB) relating to the correct operation
of the ADS-B functionality embodied.
12a Surface Horizontal Source see AMC 0616 Quality indicators NACp,
Position – Latitude and ACNS.D.ADSB.070 SIL, SDA: same encodings
Longitude See Definition 3 as for airborne horizontal
position
12b Surface Horizontal See Definition 15 0616 Type Codes Incl. NIC Supplements A
Position Quality: NIC and C (both 6516)
13 Heading/Ground Track See Definition 16 0616 Heading preferred source
14 Movement (surface See Definitions 11 and 0616 NACv: same as for
ground speed) 12 airborne ground velocity
(see 9b)
15 Length/width of Aircraft See Definition 17 6516 (subtype 1)
16 GPS Antenna Offset See Definition 18 6516 (subtype 1) Lateral and longitudinal
indicators will be set to invalid (zero), regardless of the indicated integrity containment bound (e.g.
HPL).
Definition 5: Airborne NIC Value
NIC is reported so that surveillance applications, such as by ATC or other aircraft, may determine
whether the reported horizontal position has an acceptable level of measurement integrity for the
intended use. (Note that the NIC parameter is closely associated with the SIL quality metric.)
The NIC (and SIL) values are associated with a possible failure condition of the position measurement
function and the detection thereof. For most ADS-B applications, the NIC (and SIL) values are the key
horizontal position quality metrics on which the horizontal position data is determined to be of
sufficient quality for its intended use. The NIC value is encoded on the respective horizontal position
integrity containment radius as provided by the source.
The NIC values, including the NIC Supplements values, are encoded for airborne position messages as
follows (Rc is the horizontal position integrity containment bound, typically HPL/HIL for GNSS
systems):
Table 6: Airborne NIC Encoding
NIC Radius of Containment (RC) Airborne
Value Airborne Position NIC Supplement Codes
TYPE Code A B
0 RC unknown or 0, 18 or 22 0 0
RC ≥ 37 040 m (20 NM)
1 RC < 37 040 m (20 NM) 17 0 0
2 RC < 14 816 m (8 NM) 16 0 0
3 RC < 7 408 m (4 NM) 16 1 1
4 RC < 3 704 m (2 NM) 15 0 0
5 RC < 1 852 m (1 NM) 14 0 0
6 RC < 1 111.2 m (0.6 NM) 13 1 1
RC < 926 m (0.5 NM) 13 0 0
RC < 555.6 m (0.3 NM) 13 0 1
7 RC < 370.4 m (0.2 NM) 12 0 0
8 RC < 185.2 m (0.1 NM) 11 0 0
9 RC < 75 m 11 1 1
10 RC < 25 m 10 or 21 0 0
11 RC < 7.5 m 9 or 20 0 0
Note: The minimum NIC values required for the ADS-B-RAD application can be found in Table 20, in
Part 3 of Appendix H. They are met through the horizontal position source requirements defined in
CS ACNS.D.ADSB.070.
Definition 6: NACp
NACp specifies the 95 % radial accuracy of the aircraft’s horizontal position information (latitude and
longitude) derived from the position source’s accuracy output, typically the HFOM metric from GNSS
based sources.
Whereas the NIC value is associated with a possible failure condition of the position measurement
function, the NACp value describes the nominal performance of the measurement function in terms
of horizontal position accuracy as provided by the source.
Note: The minimum NACp values required for the ADS-B-RAD application can be found in Table 20, in
Part 3 of Appendix H. This value is met through the horizontal position source requirements defined in
CS ACNS.D.ADSB.070.
The NACp encoding is the same for airborne position messages and surface position messages.
Definition 7: SIL
The encoding of the horizontal position source integrity level (SIL) is based on the probability of the
reported horizontal position exceeding the radius of containment defined by the NIC, without alerting,
assuming no avionics faults. The SIL value is set as follows:
Table 8: SIL Encoding
SIL value Probability of Exceeding the NIC Containment Radius
0 Unknown or > 1 10-3 per flight hour or per sample
1 ≤ 1 10-3 per flight hour or per sample
2 ≤ 1 10-5 per flight hour or per sample
3 ≤ 1 10-7 per flight hour or per sample
Note: The minimum SIL value required for the ADS-B-RAD application can be found in Table 20, in Part 3
of Appendix H. This value is met through the horizontal position source requirements defined in
CS ACNS.D.ADSB.070 (see also related AMC guidance).
Whereas SIL assumes that there are no system integrity failures, the SIL should consider the effects of
a faulted signal-in-space.
For horizontal position sources compliant with CSACNS.D.ADSB.070, the probability of exceeding a NIC
radius of containment without alerting is based on a per hour rate. Hence, the SIL Supplement should
be set to ‘zero’. If based on per sample, the SIL Supplement would be set to ‘one’.
The SIL encoding is the same for airborne position messages and surface position messages.
Definition 8: SDA
The encoding of the system design assurance level (SDA) is based on the failure condition that the
entire ADS-B Out system, with respect to the horizontal position data and associated quality
indicators, is designed to support.
The SDA value is encoded as follows:
Note 1: Software Design Assurance per EUROCAE ED-12C (RTCA DO-178C). Airborne Electronic
Hardware Design Assurance per EUROCAE ED-80 (RTCA DO-254).
Note 2: In line with the ADS-B-RAD requirements, the minimum value required for the horizontal
position source is SDA=2 ().
The SDA encoding is the same for airborne position messages and surface position messages.
Definition 9: Pressure Altitude Data Sources
Refer to AMC1 ACNS.D.ELS.015 for guidance.
The ADS-B NICbaro quality indicator is encoded as follows:
Table 10: NICbaro Encoding
Coding Meaning
0 The barometric altitude is based on a Gillham coded input that has not been cross-checked
against another source of pressure altitude.
1 The barometric altitude is either based on a Gillham code input that has been cross-checked
against another source of pressure altitude and verified as being consistent, or is based on a
non-Gillham coded source.
Coding Meaning
(Binary) (Decimal)
010 2 Lifeguard/medical Emergency
011 3 Minimum Fuel
100 4 No Communications
101 5 Unlawful Interference
110 6 Downed Aircraft
111 7 Reserved
The NACv encoding is the same for airborne position messages and surface position messages.
Definition 13: Emitter Category
Emitter Category settings describe the size and performance of an aircraft, primarily expressed with
respect to its maximum take-off weight.
The Emitter Category value is encoded as follows:
Table 13: Emitter Category Encoding
ADS-B Emitter Category Set “A” ADS-B Emitter Category Set “B”
Coding Meaning Coding Meaning
0 No ADS-B Emitter Category Information 0 No ADS-B Emitter Category
Information
1 Light (< 7 031 kg (15 500 lbs)) 1 Glider / Sailplane
2 Small (7 031 to 34 019 kg (15 500 to 2 Lighter-than-Air
75 000 lbs))
3 Large (34 019 to 136 078 kg (75 000 to 3 Parachutist / Skydiver
300 000 lbs))
4 High-Vortex Large (aircraft such as B-757) 4 Ultralight / hang-glider / paraglider
5 Heavy (> 136 078 kg (300 000 lbs)) 5 Reserved
6 High Performance (> 49 m/s² (5g) 6 Unmanned Aerial Vehicle
acceleration and > 205 m/s (400 knots))
7 Rotorcraft 7 Space / Trans-atmospheric vehicle
ADS-B Emitter Category Set “C” ADS-B Emitter Category Set “D”
Coding Meaning Coding Meaning
0 No ADS-B Emitter Category Information 0 No ADS-B Emitter Category
Information
1 Surface Vehicle - Emergency Vehicle 1-7 Reserved
2 Surface Vehicle - Service Vehicle
3 Point Obstacle (includes tethered
balloons)
4 Cluster Obstacle
5 Line Obstacle
6-7 Reserved
The ADS-B Emitter Category Sets A, B, C or D are identified by the Message Format TYPE Codes 4, 3, 2,
and 1 respectively.
Note 1: A coding of ‘0’ within an Emitter Category Set is not allowed.
Note 2: The Emitter Category codes 1 to 5 in category set A are intended to advise other aircraft of the
transmitting aircraft’s wake vortex characteristics, and not necessarily the transmitting aircraft’s
actual maximum take-off weight. In case of doubt, the next higher aircraft category code should be
used
Definition 14: Vertical Rate
Vertical Rate is either the barometric or geometric rate at which the aircraft is climbing or descending,
measured in feet per minute. The vertical rate is typically generated by an air data computer or GNSS
position source, or equipment which blends barometric vertical rate with inertial vertical rate and/or
GNSS vertical rate.
As the geometric vertical rate can be readily derived from the ADS-B Out position source, it is classified
as a minimum requirement rather than an (effectively Mode S Enhanced Surveillance) conditional
requirement.
Definition 15: Surface NIC Value
The Surface NIC value, including the NIC Supplement A and C values, is encoded as follows:
A/V - L/W Code Length Code Width Code Upper-Bound Length and Width
for Each Length/Width Code
(Decimal) ‘ME’ ‘ME’ ‘ME’ ‘ME’ Length Width
Bit 21 Bit 22 Bit 23 Bit 24 (meters) (meters)
3 1 34
4 0 1 0 0 35 33
5 1 38
6 0 1 1 0 45 39.5
7 1 45
8 1 0 0 0 55 45
9 1 52
10 1 0 1 0 65 59.5
11 1 67
12 1 1 0 0 75 72.5
13 1 80
14 1 1 1 0 85 80
15 1 90
Example: a powered glider with an overall length of 24 meters and wingspan of 50 meters would,
normally, have a length code of ‘001’. However, since the wingspan exceeds 34 meters, it does not
qualify for either Width subcategory of length category ‘001’. In line with its actual width, such an
aircraft would be assigned a length code of ‘100’ and width code of ‘1’, meaning length less than 55
meters and width less than 52 meters.
Definition 18: GPS Antenna Offset (lateral and longitudinal)
GPS Antenna Offset information provides the position offset of the GNSS antenna used for the
provision of horizontal position information.
Both a lateral distance of the GPS Antenna (from the longitudinal axis of the aircraft) and a longitudinal
distance of the GPS Antenna (from the nose of the aircraft) are provided.
The accuracy of the information should be better than 2 meters, consistent with the data resolution.
The lateral and longitudinal GPS Antenna Offset values are encoded as follows:
Supplementary Notes
Maximum distance left or right of aircraft longitudinal (roll) axis is 6 meters or 19.685 feet. If the
distance is greater than 6 meters, then the encoding should be set to 6 meters.
The No Data case is indicated by encoding of 000 as above, while the ZERO offset case is represented
by encoding of 100 as above.
The rounding should be performed to half of the resolution of the GPS antenna offset information, i.e.
+/- 1 meter.
Supplementary Notes:
If the distance is greater than 60 meters, the encoding should be set to 60 meters.
Position Offset Applied by the Sensor applies to future cases where the antenna offset is compensated
by the horizontal position source to the centre of the rectangle describing the aircraft’s length and
width (refer to Definition 17).
The encoding of the values from decimal ‘2’ (only bit 1 one set to ‘1’) to ‘31’ (all five bits set to ‘1’) is as
follows: encoded binary value = offset [m]) / 2 + 1 (e.g. an offset of 4 meters leads to a binary value of
(4/2 + 1 = 3), i.e. Bits 0-1 equal ‘1’ and Bits 2-4 equal ‘0’).
Definition 19: Geometric Altitude
The geometric altitude is a measure of the aircraft’s height above a geometric reference and is
provided by a GNSS-based position source.
Both within 0516 and 0916, Geometric Altitude is provided as height above ellipsoid (HAE) in accordance
with the WGS 84 coordinate system (AMC1 ACNS.D.ADSB.085(b)).
Definition 20: Geometric altitude quality indicator information (GVA)
The GVA parameter expresses the actual performance of the geometric altitude data source as valid
at the time of applicability of the measurement.
The GVA value is encoded as follows:
Table 18: GVA Encoding
GVA Encoding (decimal) 95% Accuracy (meters)
0 Unknown or > 150 meters
1 ≤ 150 meters
2 < 45 meters
3 Reserved
Table 19 below makes reference to the BDS register(s) that contain the various ADS-B Out surveillance
data parameters. When Table 19 states Same source as for Mode S replies, reference is made to the
requirement that the content of ADS-B broadcasts and Mode S replies that carry the same information
and need to come from the same source (CS ACNS.D.ADSB.025(b)).
Guidance on the content of the various BDS registers and their relationship with the ADS-B message
Type Codes is provided in Table 4 in part 1 of Appendix H.
Table 19: ADS-B-ADD Surveillance Data Transmission Requirements
Item Parameter Requirements BDS Register Remarks
1 Selected Altitude See Definition 21. 6216
2 Barometric Pressure Setting 6216
3a ACAS Operational 6216 and 6516 Same source
See Definition 22. as for Mode S
3b Resolution Advisory (RA) 6116
replies
(subtype 2)
Part 3 – ADS-B Out Minimum Horizontal Position and Velocity Data Requirements
Table 20 provides a summary of the minimum horizontal position data requirements as specified in
the defining ADS-B-RAD Safety and Performance Requirements/Interoperability document (ED-161).
Table 20: Minimum Horizontal Position and Velocity Data Quality Requirements
Quality Parameter Requirement
Position Accuracy (NACp) NACp<=185.2 m (0.1NM) (i.e. NACp>=7) for both 3 NM
and 5 NM separation
Position Integrity Containment Radius (NIC) 3 NM Sep: NIC<=1 111.2 m (0.6 NM) (i.e. NIC>=6)
5 NM Sep: NIC<=1 852 m (1 NM) (i.e. NIC>=5)
Source Integrity Level (SIL) SIL=3: 10-7/flight-hour
System Design Assurance (SDA) SDA=2: 10-5/flight-hour - allowable probability level
REMOTE
(MAJOR failure condition, LEVEL C software and design
assurance level)
Velocity Accuracy (NACv) NACv<=10 m/s (i.e. NACv>=1)
Note 1: The requirement of NACp<=0.1NM in support of 3NM separation is based on the arguments
produced in Annex B to ED-161 (ADS-B-RAD Safety and Performance Requirements/Interoperability
Requirements Document).
Note 2: The SDA encoding of ‘2’ (10-5/fight-hour) applies to individual components of the ADS-B Out
system, i.e. 10-5/fight-hour for the ADS-B transmit unit and 10-5/flight-hour for the horizontal position
and velocity source.
Note 3: ADS-B transmit units interfaced with a GNSS position source that is compliant with
CS ACNS.D.ADSB.070 (and the related AMC guidance) should preset the SIL Supplement to ‘zero’.
Note 4: If set as fixed value, NACv should be always ‘one’. For quality indications that are dynamically
provided by the velocity source, NACv should be ‘one’ or ‘two’. There is currently no established
guidance on establishing a NACv performance of ‘three’ or better.
This should be verified through appropriate tests, as follows. With respect to NIC and NACp testing,
the ADS-B Out system installer should check for satellite shielding and masking effects if the stated
performance is not achieved.
(a) Airborne & Surface NIC:
During testing under nominal GNSS satellite constellation and visibility conditions, the
transmitted NIC value should be a minimum of ‘six’.
(b) NACp:
During testing under nominal GNSS satellite constellation and visibility conditions, the
transmitted NACp value should be a minimum of ‘eight’
In order to validate the correctness of the transmitted horizontal position, the aircraft should
be positioned on a known location.
(c) SIL:
SIL is typically a static (unchanging) value and may be set at the time of installation if a single
type of position source is integrated with the ADS-B transmit unit. SIL should be set based on
design data from the position source equipment manufacturer. Installations which derive SIL
from GNSS position sources compliant with CS ACNS.D.ADSB.070 should set the SIL to ‘three’.
ADS-B transmit units interfaced with a GNSS position source that is compliant with
CS ACNS.D.ADSB.070 (and the related AMC guidance) should pre-set the SIL Supplement to
‘zero’.
(d) NACv:
If set as fixed value, NACv should be always ‘one’. For quality indications that are dynamically
provided by the velocity source, NACv should be ‘one’ or ‘two’.
It is noted that there is currently no established guidance on establishing a NACv performance
of ‘three’ or better.
CS ACNS.D.ADSB.100 and CS ACNS.D.ADSB.105 summarise, per data parameter, the integrity and
continuity probability levels applicable to the ADS-B Out system.
In the first place, the ADS-B Out System installed in the aircraft needs to deliver data that satisfy the
ADS-B-RAD airborne domain system safety and performance requirements in line with Section 3.4 of
the ADS-B-RAD Safety and Performance Requirements/Interoperability standard ED-161.
As, for the purpose of framing the ADS-B-RAD operational safety assessment, the ADS-B-RAD airborne
domain only comprises the horizontal position data source and the ADS-B transmit unit, including the
interconnecting avionics, the data sources providing surveillance information other than horizontal
position and velocity are assumed to operate as within today’s SSR environment. Hence, in line with
CS ACNS.D.ADSB.080, the related Mode S Elementary and Enhanced Surveillance requirements apply.
It is noted that the respective Mode S Elementary and Enhanced Surveillance requirements have to
be understood within their given context, in particular taking into account applicable procedural
mitigation means (e.g. as currently performed by means of the ICAO required controller-pilot
verification procedure for pressure altitude reporting).
The ADS-B Out data parameters other than the ones addressed in the preceding paragraphs, need to
satisfy comparable ADS-B-RAD requirements.
The specified integrity levels are required to adequately protect against the corruption of ADS-B Out
surveillance data causing false or misleading information to be transmitted.
Although the direct effects to an aircraft of an ADS-B Out failure may be minor, the ADS-B Out
information will be used by ATC and other ADS-B equipped aircraft, thus provisions that would allow
for a reduction in failure probabilities and design assurance level, do not apply to the ADS-B Out
system.
Note: ETSO-C145 refers to RTCA DO-229A, ETSO-C146 refers to RTCA DO-229B, ETSO-C145c/146c
refers to RTCA DO-229D, and ETSO-C145()/146() refers to any of those revisions.
In addition to the ETSO minimum requirements, the requirements of this part need to be
demonstrated unless this has been demonstrated as a declared non-ETSO function. It is expected that
the required compliance demonstration is supplied by the position and velocity source manufacturer
through a Declaration of Design and Performance (DDP), or an equivalent document.
(a) Horizontal Position Integrity (HPL)
Horizontal Position Integrity — AMC1 ACNS.D.ADSB.070(a).1.2(a)
Applicability: ETSO-C129a (JTSO-C129a)
GNSS equipment manufacturers should provide substantiation data showing that the
equipment outputs latitude and longitude information that is referenced to the WGS-84
coordinate system.
GNSS equipment manufacturers should provide substantiation data showing that the
equipment outputs a 10-7/hr Horizontal Protection Limit (HPL, or equivalent) based on the RAIM
algorithm meeting the ETSO-C129a (JTSO-C129a) Class A1, A2, B1, B2, C1, or C2 RAIM
requirements.
Applicability: ETSO-C145()/146()
SBAS equipment certified under any revision of ETSO-C145 or ETSO-C146 is required to have
several modes of operation depending on the availability of augmentation. For example, when
operating in an augmented mode intended for LPV approach guidance, the position source may
determine HPL based on a lateral error versus a horizontal error and an exposure time based
on the duration of the approach versus flight hour (refer to Appendix J to RTCA DO229D for
details).
If the position source outputs the HPL on lateral error and approach exposure time, it is possible
that the ADS-B transmit function would need to inflate the HPL by 3% in approach modes to
ensure the integrity is appropriately bounded.
GNSS equipment manufacturers should provide information data to determine if the integrity
output needs to be scaled (i.e., by applying an inflation factor). The same considerations apply
to GBAS differentially-corrected position sources when in approach mode.
Note 1: The latency of reporting nominal ADS-B Quality Indicator changes, such as in response
to changing GNSS satellite constellations or due to switching between position sources, is
bounded by CS ACNS.D.ADSB.070(a).1.2(c) as well.
Note 2: ED-72A allows a provision to extend the Time to Alarm up to 30 seconds during en route
phases of flight while for terminal and Non-Precision Approach the 10-second limit is applicable.
For ADS-B Out, a time to alert of 10 seconds applies to any phases of flight.
horizontal accuracy test procedure. General certification substantiation data that the
equipment meets this requirement is sufficient; no specific test is required.
Note 1: The scaling factors for the horizontal position accuracy metrics were rounded to
2 decimal places; there is no intention to prohibit the use of a more accurate number.
Note 2: The horizontal position accuracy metrics listed above are the standard metrics
used to provide a minimum of 95 % containment (varying from 95 % to approximately
98.5 % for the horizontal metrics) under the assumption that a Gaussian distribution with
a sigma of σi over- bounds the error of the range measurements. The use of a general
least squares position solution (or mathematically equivalent) results in a joint Gaussian
distribution for the components (North, East, Up) of the position error. Any accuracy
metric that can be mathematically demonstrated to provide a minimum 95 %
containment in the position domain under the Gaussian assumption is also acceptable.
(c) Horizontal Position Latency — AMC1 ACNS.D.ADSB.070(a).1.2(e)
Time of Measurement to Time of Applicability
Applicability: ETSO-C129a (JTSO-C129a)
The intent of this qualification is to ensure that position and related quality indicator
information are related to the same time of applicability in a consistent manner.
Based on the particular receiver design, GNSS equipment manufacturers should use a
manufacturer-defined test, and/or analysis to determine the latency between the time satellite
measurements are collated for processing and the time the equipment calculates a filtered
(impulse response) position solution. The equipment should meet a 500-millisecond time of
measurement to time of applicability requirement and account for the impulse response of the
position solution.
Note: Whilst CS ACNS.D.ADSB does not establish requirements on the time of measurement, the
above qualification has been incorporated to ensure consistency with FAA AC 20-165A.
Time of Applicability to Time of Output
Applicability: ETSO-C129a (JTSO-C129a)
The GNSS equipment manufacturer should document the position source latency from time of
applicability to time of position output. If this latency exceeds 0.4 seconds, it may not support
the 1.5-second total ADS-B transmission latency at the aircraft level (refer also to AMC1
ACNS.D.ADSB.115).
Time Mark
Applicability: ETSO-C129a (JTSO-C129a), ETSO-C196a, ETSO-C145()/C146()
If the use of the time mark to reduce latency is implemented in the ADS-B Out system, GNSS
equipment manufacturers should provide installation instructions describing how the time
mark relates to the time of applicability of the position, velocity, and related quality indicator
information.
(d) Horizontal Velocity Accuracy — AMC1 ACNS.D.ADSB.070(a).1.2(f)
Environmental Noise Test Conditions:
Applicability: ETSO-C129a, ETSO-C145( )/C146( ) (JTSO-C145/C146)
For equipment that was not required to meet the environmental noise standard prescribed by
DO-235B, the velocity tests in AC 20-138B, Appendix 4 use environmental noise test conditions
that may cause the equipment to stop functioning, i.e. to lose satellite acquisition and tracking
capability that causes the equipment to stop outputting velocity. Whilst this contributes to an
ADS-B availability issue for operators, this loss of function will not prevent the equipment from
being used as an ADS-B velocity input, provided:
(1) the equipment does not output misleading velocity information at or after the onset of
the triggering interference levels; and
Note: A method to accomplish this is first running the test at the higher noise level to
ensure there is no misleading velocity information at loss of function before running the
complete test at the lower noise level.
(2) the equipment manufacturer should state that the equipment meets the noise
requirements in DO-235B.
If the above conditions are met, the velocity tests in Appendix 4 of AC 20-138B (see below for
NACv=1 and NACv=2 cases) can be run using an interference level that does not cause the
equipment to lose acquisition and tracking.
ADS-B Out system installations intending to support NACv = 1:
Applicability: ETSO-C129a (JTSO-C129a), ETSO-C196a, ETSO-C145()/146()
The GNSS equipment manufacturer should perform the velocity tests in Appendix 4 of AC 20-
138B associated with NACv = 1 to substantiate the equipment’s velocity output.
The GNSS equipment manufacturer should indicate that the equipment satisfies the
requirements for NACv =1 in the instructions for the ADS-B integration.
ADS-B Out system installations intending to support NACv = 2:
Applicability: ETSO-C129a (JTSO-C129a), ETSO-C196a, ETSO-C145()/146()
The GNSS equipment manufacturer should substantiate that the equipment dynamically
outputs HFOMv and VFOMv and perform the velocity tests in AC 20-138C Appendix 4 associated
with NACv = 1 and NACv = 2 to substantiate the equipment’s velocity output.
The GNSS equipment manufacturer should indicate that the equipment satisfies the
requirements for NACv = 2 in the instructions for ADS-B Out system integration.
Track Angle Validity:
Applicability: ETSO-C129a (JTSO-C129a), ETSO-C196a, ETSO-C145()/146()
Using test and/or analysis for substantiation data, GNSS manufacturers should provide
instructions for the ADS-B Out system integrator indicating when the track angle 95 % accuracy,
when derived from north/east velocity, exceeds plus/minus ‘eight’ degrees. It is acceptable for
the instructions to state that the track angle does not meet the required accuracy below a
specified speed.
Note 1: Track Angle Validity is only an issue at taxiing speeds. Thereby, only along-track
acceleration (0.58g) and jerk (0.25g/sec) are assumed to apply.
Note 2: Use should be made of the test environment specified in Appendix 4 of AC 20-138B. The
interference levels used to demonstrate velocity accuracy compliance can be used for true track
angle validity testing as well.
(e) Geometric Altitude Accuracy (VFOM) — AMC ACNS.D.ADSB.085
Applicability: ETSO-C129a (JTSO-C129a), ETSO-C196a, ETSO-C145()/146()
GNSS equipment manufacturers should provide substantiation data showing if and how the
equipment computes and outputs VFOM. If VFOM is output, the following criteria for an
acceptable HAE-referenced geometric altitude output and its associated VFOM accuracy metric
are recommended to be applied:
(1) The HAE output should be calculated using the general least squares position solution of
DO-229D Appendix J.1 (or any mathematically equivalent linear combination of range
measurements). There is no restriction on the choice of the weight matrix W including
non-weighted solutions; the use of the LNAV/VNAV, LP, LPV approach weight (wi = 1/σi2)
is optional.
(2) The HAE accuracy should be tested using the procedure of DO-229D Section 2.5.8.3. The
σi2 used to compute the variance dU2 should be greater or equal to the ones listed in DO-
229D Appendix J when the equipment uses SBAS-provided integrity and greater or equal
to the ones listed as an acceptable means for FDE-provided integrity in section 2.1.2.2.2.2
when the equipment does not use SBAS-provided integrity. A fixed sigma of 33.3 m is
considered a sufficient over-bound when using FDE-provided integrity. For equipment
that uses SBAS-provided integrity, testing only in the highest mode attainable for its
declared Operational Class as specified in the test itself is acceptable.
(3) The accuracy metric should be greater or equal to 1.96 dU where dU is computed using
the same σi employed during the HAE accuracy test procedure. General certification
substantiation data that the equipment meets this requirement is sufficient; no specific
test is required.
For GPS equipment that outputs altitude references other than HAE whilst the overall ADS-B
Out System meets AMC1 ACNS.D.ADSB.085(b), an equivalent data accuracy should be
demonstrated.
Note 1: The scaling factors for the vertical position accuracy metrics were rounded to 2 decimal
places; there is no intention to prohibit the use of a more accurate number.
Note 2: The vertical position accuracy metrics listed above are the standard metrics used to
provide a minimum of 95 % containment (varying from 95 % to approximately 98.5 % for the
vertical metrics) under the assumption that a Gaussian distribution with a sigma of σi over-
bounds the error of the range measurements. The use of a general least squares position solution
(or mathematically equivalent) results in a single Gaussian distribution for the components
(North, East, Up) of the position error. Any accuracy metric that can be mathematically
demonstrated to provide a minimum 95 % containment in the position domain under the
Gaussian assumption is also acceptable.
Register 0916 - Airborne Velocity Message - Velocity over Ground (Subtypes 1and2,
Normal/Supersonic)
Register 6116 - Aircraft Status Message - Emergency Status and Mode A Code
ME Bits Field Req’t Remark
6-8 Subtype M =‘1’
9-11 Emergency/Priority Status M Mandatory codes: ‘0’, ‘1’, ‘4’ and ‘5’, Item 7a,
Definition 10
12-24 Mode A Code M Item 2, Definition 2
The ADS-B Out system installer should verify that the air-ground status inputs (or algorithms) are
functioning properly and that the ADS-B Out system transmits the appropriate airborne messages or
surface messages based on the On-the-ground status. This can be accomplished with simulated inputs
to the appropriate sensors or accomplished in conjunction with the flight test.
The following tests provide guidance to the aircraft integrator for the verification of the ADS-B Out
system installation, as appropriate. Separate cases are presented depending on the need to validate
the status within the ADS-B transmit unit.
(a) Directly determined On-the-ground status being validated outside the ADS-B transmit function:
Modern aircraft with integrated avionics suites commonly contain sophisticated algorithms for
determining the On-the-ground status based on multiple aircraft sensors. These algorithms are
customised to the airframe and designed to overcome individual sensor failures. These
algorithms are an acceptable means to determine the On-the-ground status and do not require
additional validation.
(b) Validation of directly determined On-the-ground status not being validated outside the ADS-B
transmit function:
If ground speed or airspeed is larger than the aeroplane’s typical rotation speed, then the On-
the-ground status is (changed to) airborne and the airborne position message is broadcast
irrespective of the directly determined On-the-ground status (i.e. as indicated to the ADS-B
transmit function).
(c) Indirectly determined On-the-ground status validation within the ADS-B transmit unit:
If an aircraft is not equipped with a means, such as a weight-on-wheels switch, to determine
whether it is airborne or on the ground, then the following tests should be performed to
determine whether to broadcast the Airborne or Surface Position Messages.
(1) If the aircraft’s radio height (RH) parameter is available, and RH is less than 15 m (50 feet),
and at least ground speed (GS) or airspeed (AS) is available, and the GS or the AS are less
than 51 m/s (100 knots), then that aircraft broadcasts the surface position message.
If all three parameters are available, the decision to broadcast the Airborne or Surface
Position Messages is determined by the logical AND of all three parameters.
(2) If radio height (RH) is not available, and if the aircraft’s ground speed (GS) and airspeed
(AS) are available, and GS<26 m/s (50 knots) and AS<26 m/s (50 knots), then that aircraft
broadcasts the surface position message.
Otherwise, the aircraft broadcasts the Airborne Position Message.
On-the-ground status Test and Validation Guidance for Helicopters, Lighter-than-Air Vehicles and
Fixed-under-Carriage Aeroplanes
Installations intended for this category that are unable to provide a compliant direct or indirect ground
status detection function, should only broadcast the Airborne Position Message. In addition, the “CA”
capability field in downlink format DF 17 should be set accordingly.
SUBPART E — OTHERS
SECTION 1 – TERRAIN AWARENESS AND WARNING SYSTEM (TAWS)
GENERAL
CS ACNS.E.TAWS.001 Applicability
ED Decision 2013/031/R
CS ACNS.TAWS airworthiness requirements are not suitable to allow the use of TAWS for navigation
or for mitigation of navigation system failures.
The Class A or Class B TAWS equipment should be approved in accordance with ETSO-C151b.
demonstrated equal or better accuracy, may be used in lieu of barometric altitude rate
(accuracy specified in ETSO-C10b, Altimeter, Pressure Actuated, Sensitive Type, or later
revisions) and/or altimeter altitude (accuracy specified in ETSO-2C87 (Low range radio
altimeters) - or later revisions) to meet the warning requirements described in RTCA Document
No. DO-161A. In addition, ETSO-C106 for Air Data Computers may be used as an alternative
means of compliance with this provision.
(d) An interface with the accident data recording system to record alerts from the TAWS and to
record, where practicable, when FLTA or PDA is inhibited.
Note 1: It is not necessary to be able to distinguish between the Basic GPWS and the new FLTA
and/or PDA alerts from the recording. The voice recorder will be used for this purpose.
Note 2: Where the data recorded by the Flight Data Recorder is modified, the document which
presents the information necessary to retrieve and convert the stored data into engineering
units, will need to be amended by the operator.
In case of descent the TAWS should provide an automatic call out when descending through a
predefined altitude (typically 150 m (500 ft) above terrain or above the elevation of nearest runway).
For a Class B TAWS in order to compensate for the lack of ‘excessive closure rate to terrain’ function
the predefined altitude should be 500ft.
TAWS REQUIRED TERRAIN CLEARANCE (RTC) BY PHASE OF TAWS (RTC) TAWS (RTC)
FLIGHT Level Flight Descending
/climbing
En route 215m (700 ft) 150 m (500 ft)
Terminal (Intermediate Segment) 105 m (350 ft) 90 m (300 ft)
Approach 45 m (150 ft) 30 m (100 ft)
Departure (above 400 ft) 30 m (100 ft) 30 m (100 ft)
TABLE 1
(c) gives Imminent Terrain Impact alerts when the aeroplane is currently below the elevation of a
terrain cell along the aeroplane’s lateral projected flight path and, based upon the vertical
projected flight path, the equipment predicts that the terrain clearance will be less than the
value given in the RTC column of Table 1.
(d) gives alerts for the Imminent Terrain Impact and Required Terrain Clearance functions when
the aeroplane is in turning flight.
(a) The TAWS lateral search area should be less than the protected area defined by ICAO PANS OPS
8168, volume 2 to prevent nuisance alerts.
Note: The required obstacle (terrain) clearance (ROC) have been used to define the minimum
requirements for obstacle/terrain clearance (RTC) appropriate to the FLTA function
(b) As an alternate to the stepped down reduction from the terminal to approach phase in
CS ACNS.E.TAWS.015 Table 1 , a linear reduction of the RTC as the aeroplane comes closer to
the nearest runway is allowed, providing the requirements of CS ACNS.E.TAWS.015 Table 1 are
met.
(c) During the visual segment of a normal instrument approach (typically about 1850 m (1 NM)
from the runway threshold), the RTC should be defined/reduced to minimise nuisance alerts.
(d) The RTC values can be reduced slightly for descending flight conditions to accommodate the
dynamic conditions and pilot response times.
(e) The FLTA search volume should vary as a function of phase of flight, distance from runway, and
the required terrain clearance.
The purpose of the PDA alert is to increase pilot’s awareness. Therefore ‘significantly below’ means
the point below the profile where the pilot would normally initiate a Go Around (e.g. for ILS this would
correspond to 1 dot deviation).
(a) An automatic inhibit capability is acceptable if it uses the information of the TAWS as a failure
monitoring function.
(b) If an automatic inhibition is provided and it automatically inhibits the FLTA alerts, PDA alerts
and terrain display then the manual inhibit may be designed to only inhibit aural and visual
alerts.
(c) A separate guarded control should be provided to inhibit GPWS alerts based on flaps being
other than the landing configuration.
(e) Where additional terrain views are provided, they must present information consistent and
compatible with (a) to (e) above.
(a) Terrain data should be displayed in the normal field of view. Terrain that is more than 600 m
(2000 ft.) below the aeroplane’s elevation need not be depicted.
(b) If terrain alerting information is displayed on a weather radar, an Electronic Flight Instrument
System display, or other compatible display system available on the flight deck, then the TAWS
information should be displayed in a manner consistent with other information (e.g. range,
colour coding, symbology).
(c) When Auto-range switching is provided, an auto-ranging display should be designed so that it
is evident to the flight crew that the range has been automatically selected. The range selected
for auto-ranging should clearly depict the threat on the display. Manual reversion to a selected
range should be simple.
(a) The testing of the TAWS system integration within the aircraft should address the provision of
the alerts listed in Table 1 below. In addition to this minimum set, other implemented optional
voice alerts should be tested.
Class A & Class B Amber text message that is obvious, None Required
equipment concise, and must be consistent with
the Aural message
Aural Alert
‘Don’t Sink’ and ‘Too Low Terrain’
Ground Proximity Envelope Visual Alert Visual Alert
1 (Not in Landing Amber text message that is obvious, None required
Configuration) concise, and must be consistent with Aural Alert
Class A equipment the Aural message None Required
Aural Alert
‘Too Low Terrain’ and ‘Too Low Gear’
Ground Proximity Envelope Visual Alert Visual Alert
2 Insufficient Terrain Amber text message that is obvious, None required
Clearance (Landing and Go concise, and must be consistent with Aural Alert
around configuration) the Aural message None Required
Class A equipment Aural Alert
‘Too Low Terrain’ and ‘Too Low Flaps’
Ground Proximity Envelope Visual Alert Visual Alert
4C Insufficient Terrain Amber text message that is obvious, None required
Clearance (Take-off concise, and must be consistent with Aural Alert
configuration) the Aural message None Required
Class A equipment Aural Alert
‘Too Low Terrain’
Ground Proximity Excessive Visual Alert Visual Alert
Glide Slope or Glide Path Amber text message that is obvious, None required
Deviation concise, and must be consistent with Aural Alert
Class A equipment the Aural message None Required
Aural Alert
‘Glide Slope’
Ground Proximity Advisory Visual Alert Visual Alert
Voice Call Out None Required None required
Class A & Class B Aural Alert Aural Alert
equipment ‘Five Hundred’ None Required
Reduced Required Terrain Visual Alert Visual Alert
Clearance Amber text message that is obvious, Red text message that is obvious,
Class A & Class B concise, and must be consistent with concise and must be consistent
equipment the Aural message with the Aural message
Aural Alert Aural Alert
Minimum selectable Voice Alerts: Minimum selectable Voice Alerts:
‘Caution, Terrain; Caution, Terrain’ and ‘Caution, Terrain; Terrain; Pull-
‘Terrain Ahead; Terrain Ahead’ Up, Pull-Up’ and ‘Terrain Ahead,
Pull-Up; Terrain Ahead, Pull-Up’
Imminent Impact with Visual Alert Visual Alert
Terrain Amber text message that is obvious, Red text message that is obvious,
Class A & Class B concise, and must be consistent with concise and must be consistent
equipment the Aural message with the Aural message
Aural Alert Aural Alert
Minimum selectable Voice Alerts: Minimum selectable Voice Alerts:
‘Caution, Terrain; Caution, Terrain’ and ‘Caution, Terrain; Terrain; Pull-
‘Terrain Ahead; Terrain Ahead’ Up, Pull-Up’ and ‘Terrain Ahead,
Pull-Up; Terrain Ahead, Pull-Up’
Premature Descent Alert Visual Alert Visual Alert
(PDA) None required
Class A & Class B Amber text message that is obvious, Aural Alert
equipment concise, and must be consistent with None Required
the Aural message
Aural Alert
‘Too Low Terrain’
Ground Proximity Envelope Visual Alert Visual Alert
1, 2 or 3 Amber text message that is obvious, Red text message that is obvious,
Excessive Descent Rate concise, and must be consistent with concise and must be consistent
Class A & Class B the Aural message with the Aural message
equipment Aural Alert Aural Alert
‘Sink Rate’ ‘ Pull-Up’
Ground Proximity Excessive Visual Alert Visual Alert
Closure Rate (Flaps not in Amber text message that is obvious, Red text message that is obvious,
Landing Configuration) concise, and must be consistent with concise and must be consistent
Class A equipment the Aural message with the Aural message
Aural Alert Aural Alert
‘Terrain- Terrain’ ‘ Pull-Up’
Ground Proximity Excessive Visual Alert Visual Alert
Closure Rate (Landing Amber text message that is obvious, None required
Configuration) concise, and must be consistent with Aural Alert
the Aural message ‘ Pull-Up’ - for gear up
Class A equipment Aural Alert None required - for gear down
‘Terrain- Terrain’
TABLE 1: Visual and aural alerts
(b) If a two tone sweep (‘Whoop Whoop’) is used then the complete cycle of the two tone sweeps
plus annunciation may be extended from ‘1.4’ to ‘2’ seconds.
(c) Note: GPWS alerting thresholds may be adjusted or modified to be more compatible with the
FLTA alerting functions and to minimize GPWS nuisance alerts.
(d) Parameters such as airspeed, groundspeed barometric altitude rate should be included in the
logic that determines basic GPWS alerting time.
(e) GPWS alerting thresholds may be adjusted or modified to be more compatible with the FLTA
alerting functions and to minimize GPWS nuisance alerts.
(f) Consideration should be given to presenting voice announcements at a pre-set level via
headsets when they are in use.
[Issue: CS-ACNS/2]
CS ACNS.E.TAWS.040 Integrity
ED Decision 2013/031/R
(a) Integrity of the TAWS (including un-enunciated loss of the terrain alerting function) is designed
commensurate with a major failure condition.
(b) False terrain alerting is designed commensurate with a minor failure condition.
(c) Failure of the installed TAWS does not degrade the integrity of any critical system interfacing
with the TAWS.
CS ACNS.E.TAWS.045 Continuity
ED Decision 2013/031/R
CS ACNS.E.TAWS.050 GPWS
ED Decision 2013/031/R
The predictive terrain hazard warning functions, does not adversely affect the functionality, reliability
or integrity of the basic GPWS functions.
Terrain data used for the generation of the TAWS terrain database should be compliant with EUROCAE
ED-98 () – User Requirements for Terrain and Obstacle Data. Similarly airport and runway data terrain
used for the generation of the TAWS airport database should be compliant with EUROCAE ED-77 () –
Standards for Aeronautical Information. Generation of the TAWS terrain database and of the TAWS
airport database should be compliant with EUROCAE ED-76 () – Standards for Processing Aeronautical
Information.
Note: Other technologies could be considered to provide the required terrain and airport information.
The manufacturer of the TAWS system should present the development and methodology used to
validate and verify the terrain and airport information and, if relevant, obstacle information in
compliance with EUROCAE ED-76/RTCA DO-200A.
(d) When a positioning source generates a fault indication or any flag indicating the position is
invalid or does not meet performance requirements, the TAWS is to stop utilising that
positioning source.
(e) The positioning source for the predictive terrain hazard warning system accuracy is suitable for
each phase of flight and/or region of operations.
(f) The TAWS provides indications, as appropriate, regarding degradation or loss of function
associated with the loss of the positioning source.
(a) The TAWS positioning information can be generated internally to the TAWS (e.g. GPS receiver)
or acquired by interfacing to other installed avionics on the aeroplane (e.g. FMS).
(1) For Class A TAWS an RNAV system may be used as an aeroplane horizontal position sensor
provided that:
— it has been approved for navigation in accordance with ETSO-C115() or ETSO-C129a
or ETSO-C145() or ETSO-C146() or ETSO-C196a; or
— it satisfies FAA AC 20-138 or FAA AC 20-130A.
(2) For Class A and B TAWS a GNSS sensor may be used as an aeroplane horizontal position
sensor provided that it is compliant with ETSO-C196 or ETSO-C145.
Note: For TAWS relying on GNSS sensor, the TAWS design should consider the use of other
horizontal position sensors to ensure TAWS availability in case of GNSS failures
(3) Equipment that uses a GNSS internal to the TAWS for horizontal position information,
and that are capable of detecting a positional error that exceeds the appropriate alarm
limit for the particular phase of flight in accordance with ED-72A is considered acceptable.
(4) Vertical position for TAWS may come from a barometric source such as an altimeter or
an air data computer, or from a geometric source, such as GNSS provided that:
— the barometric altitude equipment is approved in accordance with ETSO-C106 Air
data computer or ETSO-C10b Altimeter, Pressure Actuated, Sensitive Type;
— the radio altimeter equipment is approved in accordance with ETSO-2C87 Low-
Range Radio Altimeter;
— the vertical velocity equipment is compliant with ETSO-C8 Vertical Velocity
Instruments or ETSO-C105 Air Data Computer;
— the GNSS equipment is approved in accordance with:
— ETSO-C129a, Airborne Supplemental Navigation Equipment Using Global
Positioning System (GPS); or
— ETSO-C145, Airborne Navigation Sensors Using the Global Positioning
System Augmented by the Satellite Based Augmentation System; or
— ETSO-C146, Stand-Alone Airborne Navigation Equipment Using the Global
Positioning System Augmented by the Satellite Based Augmentation System.
Note: TAWS should mitigate potential vertical positioning source inaccuracies by
appropriate blending of available vertical position information.
(b) When the GPS alert limit is activated, the GPS computed position is considered unsuitable for
TAWS, and a TAWS unsuitability indication should be given.
(c) Geometric altitude should be enabled if the system has the facility.
INSTALLATION REQUIREMENTS
(a) A failure of the TAWS does not disable other protection functions (e.g. windshear or weather
radar).
(b) The failure of the GPWS functions, except for power supply failure, input sensor failure, or other
failures external to the TAWS functions, does not negatively alter the FLTA function, PDA
function, or Terrain Display and vice versa.
(c) Where the terrain information is displayed on a multi-function display, failure of the TAWS does
not prevent the normal functioning of other systems using that display.
For dual displays installations, when an automatic pop-up mode is provided, the pop-up function
should be inhibited if terrain is already presented on at least one display.
If TAWS and the Predictive Windshear System share the same display and an automatic pop-up
function is employed, the display priorities indicated in Table 4 are recommended:
Priority Description
Highest Terrain Awareness Warning
Predictive Windshear Warning
Terrain Awareness Caution
Predictive Windshear Caution
Normal Terrain Display
Lowest Weather Radar Display
TABLE 4: Alert display priorities
If the TAWS system provides alerting for obstacle threats, the priority for warning and cautions should
be the same as those for terrain.
APPENDICES
General Testing:
(a) Most of the testing of a TAWS installation can be achieved by ground testing that verifies system
operation, interfaces between affected aeroplane systems, correct warning prioritisation, and
freedom from unwanted interaction or interference.
(b) The use of the TAWS as an integrated part of the aeroplane flight deck should be demonstrated.
The TAWS should be shown to be compatible with the operation of the installed navigation
systems, the airborne collision and avoidance system (ACAS), the windshear warning system,
and the weather radar.
(c) The tests should evaluate the effects of sensor failure on TAWS operation.
(d) Flight testing should be carried out to evaluate overall operation, compatibility of TAWS with
warning systems, navigation systems, and displays, freedom from unwanted interference, and
to assess, during adverse flight conditions, instrument visibility, display intelligibility, sound
levels and intelligibility of voice announcements, and the effects of electrical transients.
(e) Adequate flight testing to evaluate the terrain display can be conducted while verifying all the
other required TAWS functions. Emphasis could be placed on showing compliance with CS
ACNS.E.TAWS requirements during normal aeroplane manoeuvres for all phases of flight. Pop-
up and auto-ranging features could be evaluated if applicable. Sustained turns could be
performed, to evaluate for example symbol stability, flicker, jitter, display update rate,
readability, the use of colour to depict relative elevation data, caution and warning alerts, and
overall suitability of the display.
GPWS Testing:
(a) Flight testing to verify the proper operation of Basic GPWS functions can be conducted in any
area where the terrain elevation is known to the flight crew. The following information provides
an example of guidance for conducting flight tests to verify the proper operation of each GPWS
function.
(1) Excessive Rate of Descent. Descents toward near level terrain are recommended if they
provide the best results and ease of correlation with designed Mode 1 envelopes. This
test verifies the operation of barometric altitude (and the corresponding computation of
barometric altitude rate) and radio altitude.
(2) Excessive Closure Rate To Terrain. It is recommended that one level test run at an altitude
between 150 m (500 ft.) and 300 m (1000 ft.) above the terrain elevation be conducted.
This test will verify the proper installation of the radio altimeter.
(3) Negative Climb Rate or Altitude Loss After take-off. If it is adequate this test can be
conducted immediately after take-off before climbing above 700 AGL or above runway
elevation. This test verifies the proper operation of barometric altitude, barometric
altitude rate and radio altitude.
(4) Flight Into Terrain When Not In Landing Configuration. If it is adequate this test can be
conducted while on a visual approach to a suitable runway. This test verifies the proper
installation of barometric altitude, barometric altitude rate and radio altitude as well as
the gear and flap sensor inputs to TAWS.
(5) Excessive Downward Deviation from a glide slope or glide path. These tests should
be conducted, as applicable, during:
(i) an ILS approach to verify the proper operation of the ILS glide slope input to
TAWS;
(ii) an RNP approach to LPV minima to verify the proper operation of the glide
path input from the GNSS receiver or FMS to the TAWS;
(iii) a GBAS approach to verify the proper operation of the GBAS glide path input
to TAWS.
(6) Voice Callout ‘Five Hundred ft. This test should be conducted during an approach
to a suitable runway in order to verify the proper operation of barometric altitude
and/or radio altitude.
(7) Go-around. This test can be performed to confirm that nuisance alerts do not occur
during normal go-around manoeuvres.
FLTA Testing:
(a) Flight testing to verify the proper operation of the FLTA function can be conducted in an area
where the terrain elevation for the test runs is known within approximately 90 m (300 ft.). Two
test runs can be performed:
(1) In level flight at approximately 150 m (500 ft) above the terrain of interest.
(2) While descending toward the terrain of interest.
(b) In each test case, the terrain display, the aural and visual alerts, the navigation source input,
and the terrain data base can each be evaluated if necessary. Confirmation that the specific
terrain cells do generate the required alert can also be evaluated if necessary.
Note: To conduct the test as described, the chosen terrain could be for example at least 28 Km
(15 NM) away from the nearest airport. If this is not practical, the fly-over altitude will have to
be lowered, for example to 90 m (300 ft.) or less above the terrain in order to generate a TAWS
alert.
PDA Testing:
(a) Flight testing to verify the proper operation of the PDA function can be conducted in any airport
area within an adequate distance of the nearest runway for example, 18.5 Km (10 NM). The
aeroplane should be configured for landing at an adequate height for example, 450 m (1500 ft.)
AGL, along the final approach segment of the runway at an adequate distance from the runway,
for example, 18.5 Km (10 NM).
(b) At a suitable point, a normal flight path angle descent, for example, three degrees can be
initiated and maintained until the PDA alert occurs. This test may exercise also, if necessary the
500 ft. voice callout.
The adequacy of the PDA aural alert should be verified during this test. If necessary, this test
could verify the adequacy of the airport data base, the navigation source input and the
barometric and/or radio altitude inputs to TAWS.
Note: The area in the vicinity of the runway selected for this test should be relatively free from
terrain and obstacles to preclude activation of the FLTA function. Approximately level terrain
along the final approach segment will exercise the PDA function.
(c) Flight tests should be conducted to verify that conditions at 300 m (1000 ft) AGL within 18.5 –
28 Km (10 -15 NM) of the nearest airport the TAWS system does not generate alerts.
[Issue: CS-ACNS/2]
(n) Indication that the TAWS is operating in Basic GPWS mode only.
(o) A means to initiate the TAWS self-test function on the ground.
(p) An interface with the flight recording system to record TAWS alerts and inhibition of FLTA or
PDA functions.
(q) Indication to the flight crew where geographical regions of operation or other factors which
adversely affect system performance to the extent that the TAWS may be potentially misleading
and should not be relied up. If this indication is not practicable, a flight crew procedure may be
used to determine whether the navigation system accuracy is acceptable for continued use of
the TAWS.
(r) A means for the flight crew to inhibit the FLTA and PDA functions together with appropriate
annunciation of the inhibited condition.
(s) A display with a means for the flight crew to select or deselect the terrain information. An
automatic pop-up mode may be used with a simple means to deselect the terrain information
after an automatic pop-up.
(a) General
This appendix provides additional references, background information, and guidance for
maintenance testing, as appropriate to TAWS installations.
(b) Related References
(1) EASA
(i) ETSO-C151b Terrain Awareness and Warning System (TAWS)
(ii) ETSO-C92c Ground Proximity Warning, Glide Slope Deviation Alerting Equipment
dated 24/10/2003
(iii) ETSO-C10b Aircraft Altimeter, Pressure Actuated, Sensitive Type dated 24/10/2003
(iv) ETSO-2C87 Low Range Radio Altimeters dated 24/10/2003
(v) ETSO-C106 Air Data Computer dated 24/10/2003
(vi) ETSO-C115b Airborne Area Navigation Equipment using Multi-Sensor Inputs dated
24/10/2003
(vii) ETSO-C129a Airborne Supplemental Navigation Equipment Using Global
Positioning System (GPS) dated 24/10/2003
(viii) ETSO-C145 Airborne Navigation Sensors Using the Global Positioning System (GPS)
Augmented by the Wide Area Augmentation System (WAAS) dated 24/10/2003 –
ETSO-C145c Airborne Navigation Sensors Using the Global Positioning System
Augmented by the Satellite Based Augmentation System (SBAS) dated 21/12/2010
(ix) ETSO–C146 Stand-Alone Airborne Navigation Equipment Using the Global
Positioning System (GPS) Augmented by the Wide Area Augmentation System
(WAAS) dated 24/10/2003 – ETSO-C146c Stand-Alone Airborne Navigation
Equipment Using the Global Positioning System Augmented by the Satellite Based
Augmentation System (SBAS) dated 21/12/2010
(x) ETSO-C196a Airborne Supplemental navigation Sensors for Global Positioning
System Equipment Using Aircraft-Based Augmentation dated 05/07/2012
(xi) ETSO-C105 Optional Display Equipment for Weather and Ground Mapping Radar
Indicators dated 24/10/2003
(2) ICAO
Doc 8168 Aircraft Operations Procedures for Air Navigation Services Fifth edition – 2006
Volume II Construction of Visual and Instrument Flight Procedures
(3) EUROCAE
(i) ED-98 () User requirements for Terrain and Obstacle Data (any edition - last edition
B dated September 2012)
(ii) ED-76 Standards for processing aeronautical data dated October 1998 (identical to
RTCA DO-200A)
(4) RTCA
DO-161A Minimum Performance Standards-Airborne Ground Proximity Warning
Equipment dated 27/05/1976
GENERAL
CS ACNS.E.RVSM.001 Applicability
ED Decision 2013/031/R
Previous airworthiness certification against JAA TGL6 is an acceptable means of compliance for the
RVSM system.
(2) Equipment for measuring static pressure sensed by the static source, converting it to
pressure altitude;
(3) Equipment for providing a digitally encoded signal corresponding to the displayed
pressure altitude, for automatic altitude reporting purposes;
(4) Static source error correction (SSEC), as required to meet the performance criteria as
specified in CS ACNS.E.RVSM.035; and
(5) Signals referenced to a pilot selected altitude for automatic control and alerting derived
from one altitude measurement system.
(b) an altitude alerting system;
(c) an automatic altitude control system; and
(d) a secondary surveillance radar (SSR) transponder with altitude reporting system that can be
connected to the altitude measurement system in use for altitude keeping.
(a) When Static Source Error Corrections (SSEC) are required they should be embedded within the
altimetry system.
Note: The design aim for SSEC is to correct for the residual static source error, compatible with
the RVSM performance requirements.
(b) For RVSM systems with SSEC, an equivalent SSEC should be applied to the altitude control signal.
The signal representing the altitude alerting system may be used either directly, or combined with
other sensor signals. The signal may be an altitude deviation signal, relative to the selected altitude,
or a suitable absolute altitude signal.
CS ACNS.E.RVSM.020 Integrity
ED Decision 2013/031/R
The RVSM system integrity is designed commensurate with a major failure condition.
CS ACNS.E.RVSM.025 Continuity
ED Decision 2013/031/R
If the design and characteristics of the aircraft and its altimetry system are such that the performance
requirements are not satisfied by the location and geometry of the static sources alone, then suitable
Static Source Error Corrections should be applied automatically within the altimetry system.
| residual static source error +worst case avionics | does not exceed 50 m (160 ft).
(2) For all conditions in the full envelope (outside the basic envelope):
| residual static source error +worst case avionics | does not exceed 60 m (200 ft).
To demonstrate the compliance with ASE performances the following steps should be performed:
(a) Group determination:
(1) Aircraft should have been constructed to a nominally identical design and be approved
on the same Type Certificate (TC). Aircraft modified to a TC amendment, or by a
Supplemental TC may be considered as part of the same group providing that all height
keeping performance characteristics as described in the following paragraphs remain the
same.
(2) The static system of each aircraft should be nominally identical. The Static Source Error
and any applied SSE Corrections should be the same for all aircraft of the group.
Differences affecting factors that contribute to the Static Source Error (see Appendix A,
Table 1), that effect RVSM performances and accuracy should be demonstrated as
negligible.
(3) The operational flight envelope should be the same.
(4) The avionics units installed on each aircraft to meet the minimum RVSM performance
requirements should demonstrate equivalent height keeping system performance in
relation to; altitude control, altitude reporting and the interface to the altimetry system
sensors. Altimetry system integrity should be the same with equivalent reliability,
degradation and failure rates.
If an airframe does not meet the conditions above to qualify as a member of a Group, or
is presented as an individual airframe for approval, then it will be considered as a non-
group aircraft for the purposes of RVSM approval.
(b) RVSM Flight envelopes boundaries (Full and Basic)
The RVSM full flight envelope boundaries should be defined based on the RVSM airspace and
aircraft or group aircraft characteristics as summarised in Table 1.
The RVSM basic envelope boundaries are similar to the ones of the full flight envelope, however,
the upper Mach boundary may be lower than the one of the full flight envelope but not be less
than the Long Range Cruise Mach Number plus 0.04 Mach, unless limited by available cruise
thrust, buffet or other flight limitations. This reduction in upper Mach value would typically
apply to cases where airspeeds could be limited to the range of airspeeds over which the aircraft
can reasonably be expected to operate most frequently.
Note: It is accepted that if any aircraft is identified as having an error exceeding ±60m
(±200 ft) then it should receive corrective action.
(g) Compliance Demonstration for a Non Groups Aircraft.
For non-group aircraft, the following data should be established:
(1) Flight test calibration of the aircraft to establish its ASE or SSE over the RVSM envelope
should be conducted. The flight test calibration should be performed at points in the flight
envelope(s) as agreed by the responsible authority using one of the methods identified
in (e) above.
(2) Calibration of the avionics used in the flight test as required may be conducted for
establishing residual SSE. The number of test points should be agreed by the responsible
authority. Since the purpose of the flight test is to determine the residual SSE, specially
calibrated altimetry equipment may be used.
(3) The installed altimetry avionics equipment specification should identify the largest
allowable errors.
For group aircraft; to evaluate a system against the ASE performance, it is necessary to quantify the
mean and three standard deviation values for ASE expressed as ASEmean and ASE3SD. To do this, it is
necessary to take into account the different ways in which variations in ASE can arise. The factors that
affect ASE are:
(a) Unit to unit variability of avionics equipment.
(b) Effect of environmental operating conditions on avionics equipment.
(c) Airframe to airframe variability of static source error.
(d) Effect of flight operating conditions on static source error.
Note : Assessment of ASE, whether based on measured or predicted data will need to consider
item a to d above. The effect of item d as a variable can be eliminated by evaluating ASE at the
most adverse flight condition in an RVSM flight envelope.
Appendix A provides two examples of methods to establish and monitor static source errors.
APPENDICES
1 Introduction
The purpose of this appendix is to provide guidance to help ensure that all the potential error
sources are identified and included in the Altimetry System Error budget.
2 Objective of ASE Budget
The purpose of the ASE budget is to demonstrate that the allocation of tolerances amongst the
various parts of the altimetry system is consistent with the overall statistical ASE performance
requirements. These individual tolerances within the ASE budget also form the basis of the
procedures, defined in the airworthiness approval data package, which will be used to
demonstrate that aircraft satisfy the RVSM criteria.
It is necessary to ensure that the budget takes account of all contributory components of ASE.
For group approval it is necessary to ensure either that the budget assesses the combined effect
of the component errors in a way that is statistically realistic, or that the worst case specification
values are used.
3 Altimetry System Error
3.1 Breakdown
Figure 1 shows the breakdown of total ASE into its main components, with each error
block representing the error associated with one of the functions needed to generate a
display of pressure altitude. This breakdown encompasses all altimetry system errors that
can occur, although different system architectures may combine the components in
slightly different ways.
(a) The 'Actual Altitude' is the pressure altitude corresponding to the undisturbed
ambient pressure.
(b) The 'Static Source Error' is the difference between the undisturbed ambient
pressure and the pressure within the static port, at the input end of the static
pressure line.
(c) The 'Static Line Error' is the difference in pressure along the length of the line.
(d) The 'Pressure Measurement and Conversion Error' is the error associated with the
processes of sensing the pneumatic input seen by the avionics, and converting the
resulting pressure signal into altitude. As drawn, Figure 2-1 represents a self-
sensing altimeter system in which the pressure measurement and altitude
conversion functions would not normally be separable. In an air data computer
system the two functions would be separate, and SSEC would probably then be
applied before pressure altitude (Hp) was calculated.
(e) The 'Perfect SSEC' would be that correction that compensated exactly for the SSE
actually present at any time. If such a correction could be applied, then the
resulting value of Hp calculated by the system would differ from the actual altitude
only by the static line error plus the pressure measurement and conversion error.
In general this cannot be achieved, so although the 'Actual SSEC' can be expected
to reduce the effect of SSE, it will do so imperfectly.
(f) The 'Residual Static Source Error' is applicable only in systems applying an avionic
SSEC. It is the difference between the SSE and the correction actually applied. The
corrected value of Hp will therefore differ from actual pressure altitude by the sum
of static line error, pressure measurement and conversion error, and residual SSE.
(g) The error between Hp and displayed altitude is the sum of the baro-correction
error and the display error. Figure 2-1 represents their sequence for a self-sensing
altimeter system. Air data computer systems can implement baro-correction in a
number of ways that would modify slightly this part of the block diagram, but the
errors would still be associated with either the baro-correction function or the
display function. The only exception is that those systems that can be switched to
operate the display directly from the Hp signal can eliminate baro-correction error
where standard ground pressure setting is used, as in RVSM operations.
3.2 Components
Each of the system errors presented in Figure 1 and described in (c)(1) is discussed below
in greater detail.
3.2.1 Static Source Error
The component parts of SSE are presented in Table 1, with the factors that control
their magnitude.
(a) The reference SSE is the best estimate of actual SSE, for a single aircraft or
an aircraft group, obtained from flight calibration measurements. It is
variable with operating condition, characteristically reduced to a family of
W/δ curves that are functions of Mach.
It includes the effect of any aerodynamic compensation that may have been
incorporated in the design. Once determined, the reference SSE is fixed for
the single aircraft or group, although it may be revised when considering
subsequent data.
(b) The test techniques used to derive the reference SSE will have some
measurement of uncertainty associated with them, even though known
instrumentation errors will normally be eliminated from the data. For
trailing-cone measurements the uncertainty arises from limitations on
pressure measurement accuracy, calibration of the trailing-cone installation,
and variability in installations where more than one are used. Once the
reference SSE has been determined, the actual measurement error is fixed,
but as it is unknown it can only be handled within the ASE budget as an
estimated uncertainty.
(c) The airframe variability and probe/port variability components arise from
differences between the individual airframe and probe/port, and the
example(s) of airframe and probe port used to derive the reference SSE.
3.2.2 Residual Static Source Error
(a) The components and factors are presented in Table 1. Residual SSE is made
up of those error components which make actual SSE different from the
reference value, components 2, 3, and 4 from Table 1, plus the amount by
which the actual SSEC differs from the value that would correct the
reference value exactly, components 2(a), (b) and(c) from Table 2.
(b) There will generally be a difference between the SSEC that would exactly
compensate the reference SSE, and the SSEC that the avionics is designed to
apply. This arises from practical avionics design limitations. The resulting
error component 2(a) will therefore be fixed, for a particular flight condition,
for the single aircraft or group. Additional variable errors 2(b) and 2(c) arise
from those factors that cause a particular set of avionics to apply an actual
SSEC that differs from its design value.
(c) The relationship between perfect SSEC, reference SSEC, design SSEC and
actual SSEC is illustrated in Figure 2, for the case where static line errors and
pressure measurements and conversion errors are taken as zero.
(d) Factors that create variability of SSE relative to the reference characteristic
should be accounted for twice. First, as noted for the SSE itself in Table 2,
and secondly for its effect on the corruption of SSEC as in factor 2(a)(i) of
Table 2. Similarly the static pressure measurement error should be
accounted for in two separate ways. The main effect will be by way of the
'pressure measurement and conversion' component, but a secondary effect
will be by way of factor 2(a)(ii) of Table 2.
1 Introduction
Two examples showing the method establish and monitor static source errors are presented
below.
2 Example 1
One process for showing compliance with RVSM criteria is shown in Figure 1. Figure 1 illustrates
how those flight test calibrations and geometric inspections will be performed on a given
number of aircraft. The flight calibrations and inspections will continue until a correlation
between the two is established. Geometric tolerances and SSEC will be established to satisfy
RVSM criteria. For aircraft being manufactured, every Nth aircraft will be inspected in detail and
every Mth aircraft will be flight test calibrated, where 'N' and 'M' are determined by the aircraft
constructor and agreed to by the competent authority.
The data generated by 'N' inspections and 'M' flight calibrations can be used to track the mean
and three standard deviation values to ensure continued compliance of the model with the
criteria of CS ACNS.E.RVSM.035.
As additional data are acquired, they should be reviewed to determine if it is appropriate to
change the values of N and M as indicated by the quality of the results obtained.
There are various ways in which the flight test and inspection data might be used to establish
the correlation. The example shown in Figure 2 is a process in which each of the error sources
for several aeroplanes is evaluated based on bench tests, inspections and analysis. Correlation
between these evaluations and the actual flight test results would be used to substantiate the
method.
The method illustrated in Figures 1 and 2 is appropriate for new models since it does not rely
on any pre-existing data base for the group.
3 Example 2
Figure 3 illustrates that flight test calibrations should be performed on a given number of
aircraft and consistency rules for air data information between all concerned systems verified.
Geometric tolerances and SSEC should be established to satisfy the criteria. A correlation should
be established between the design tolerances and the consistency rules. For aircraft being
manufactured, air data information for all aircraft should be checked for consistency in cruise
conditions and every Mth aircraft should be calibrated, where M is determined by the
manufacturer and agreed to by the responsible authority. The data generated by the M flight
calibrations should be used to track the mean and three standard deviation values to ensure
continued compliance of the group with the criteria of CS ACNS.E.RVSM.035.
Figure 1 - Process for showing initial and continued compliance of airframe static pressure systems
Conduct
ADC ground
Measure fuselage flight test
Fuselage calibration
geometric calibration
geometric
conformance conformance
using inspection Yes
with xx ?
tool
No Perform an Remove ADC calibration
analysis to error
Rework estimate
airplane
position error
Estimated
Improve qualitative
Geometrical Airworthiness
and quantitative rules
Results inspection and Authorities
for the surfaces
satisfactory? theoretical
No around static ports
analysis.
and other sensors
Yes
Figure 3 - Process for showing initial and continued compliance of airframe static pressure systems for new model aircraft.
Note: The flight test installation chosen to get the calibration data will need to have an accuracy
compatible with the level of performance to be demonstrated and an analysis of this accuracy will need
to be provided. Any possible degradation of this accuracy will need to be monitored and corrected
during the flight test period.
GENERAL
solutions or is a combination of several types of solutions, the means of compliance need to include
all non-specific AMC and additional conditions to be agreed with EASA.
This Section includes three types of solutions:
— Automatic deployable flight recorder (ADFR)
An ADFR is composed of a recorder in a deployable package, a deployment system, and sensors
in the aircraft. The deployable package contains an ELT that facilitates locating it, and a structure
having both an aerofoil function and a float function. The sensors detect the deformation of the
aircraft structure caused by the accident and the water pressure due to immersion. These
detections result in the automatic deployment of the deployable package as well as in the
activation of the ELT. Thanks to the deployment characteristics, the deployable package lands
clear of the main impact point. It floats on water if the accident site is in water. The ELT transmits
406-MHz signals that are detected by satellites of the international COSPAS-SARSAT
programme. This enables locating the point of end of flight within a few minutes. The ELT also
transmits a 121.5-MHz homing signal to support the on-site search and rescue (SAR) of potential
survivors. The recording function of the ADFR is not necessary to comply with
point CAT.GEN.MPA.210.
— Distress tracking ELT (ELT(DT))
An ELT(DT) is a specific type of ELT that relies on an ‘automatic triggering function’. That function
monitors aircraft parameters and automatically triggers the ELT when it detects conditions that
are likely to result in an accident during which the aircraft is severely damaged. The flight crew
can also manually activate the ELT(DT) in case of a distress situation. Once the ELT is activated,
it transmits 406-MHz signals that are detected by satellites of the international COSPAS-SARSAT
programme. This enables locating the point of end of flight within a few minutes. If the accident
is survivable, a crash-survivable ELT (the ELT(DT) or an automatic ELT) transmits, after the
impact, the 406-MHz signals to satellites of the international COSPAS-SARSAT programme and
a 121.5-MHz homing signal. These signals enable accurately locating the point of end of flight
and support the on-site search and rescue of potential survivors.
— High-rate tracking (HRT)
HRT relies on an airborne system that frequently transmits signals that enable locating the
aircraft in case of an accident. The frequency of the transmission and the accuracy of the
transmitted position data are such that the point of end of flight can be located within a few
minutes. Adequate position accuracy of the point of end of flight after a survivable accident is
achieved either through high frequency of transmission, or transmission after reaching the
point of end of flight, or both. A 121.5-MHz homing signal is also transmitted after a survivable
accident to support the on-site search and rescue of potential survivors.
This Section’s requirements do not address remote activation or remote deactivation of airborne
systems.
[Issue: CS-ACNS/3]
CS ACNS.E.LAD.010 Definitions
This CS contains definitions of terms that are only applicable to this Section and may differ from
definitions of terms in CS ACNS.A.GEN.005 ‘Definitions’:
— ‘accident during which the aircraft is severely damaged’ is an accident during which the aircraft
sustains damage or structural failure that:
— ‘point of end of flight’ is, depending on the nature of the accident, the point where the aircraft
crashed into land or water, or landed on land or water, or was destroyed;
— ‘solution based on an ADFR’ is a solution using equipment that meets the requirements
applicable to an automatic deployable flight recorder (ADFR), except those related to the
recording and retrieval of data for accident investigation purposes;
— ‘solution based on an ELT(DT)’ is a solution based on an automatic triggering function that is
coupled with an emergency locator transmitter of a distress tracking type (ELT(DT));
— ‘solution based on HRT’ is a solution based on an automatic triggering function that is coupled
with airborne equipment other than an ELT and that frequently transmits the aircraft position
and the information that an accident during which the aircraft is severely damaged is likely to
occur;
— ‘signals’ are the information that is transmitted by the system;
— ‘survivable accident’ is an accident such that, if an automatic fixed emergency locator
transmitter (ELT(AF)) were correctly installed on board the aircraft, the ELT(AF) would not be
exposed to conditions exceeding the environmental test conditions applicable to an ELT(AF),
specified in EUROCAE ED-62B (including Change 1), Chapter 4;
— ‘system’ is the organised set of airborne applications and airborne equipment to comply with
point CAT.GEN.MPA.210 of Annex IV (Part-CAT) to Regulation (EU) No 965/2012 (‘Air OPS
Regulation’);
— ‘the system is activated’ means that the system is transmitting activation signals;
— ‘the system is armed’ means that all the functions of the system are operating or are ready to
operate immediately (in particular, the detection of an accident condition and the signal
transmission);
— ‘the system is disarmed’ means that the system cannot be automatically activated but may be
manually activated.
[Issue: CS-ACNS/3]
(4) ‘capability G (internal/integral GNSS receiver)’: means containing a GNSS receiver and
transmitting GNSS coordinates through the 406-MHz signal;
(5) ‘capability T.001 (first generation)’: means meeting the requirements of COSPAS-SARSAT
document C/S T.001 ‘Specification for Cospas-Sarsat 406MHz Distress Beacons’; and
(6) ‘capability T.018 (second generation)’: means meeting the requirements of
COSPAS-SARSAT document C/S T.018 ‘Specification for Second Generation Cospas-Sarsat
406MHz Distress Beacons’.
(c) Non-dedicated airborne data sources that are used for the detection of activation conditions
are usually not considered part of the system, except for the source of position information that
is transmitted through the activation signals.
(d) An automatic triggering function is intended to activate the system before an accident occurs
and should not be confused with a crash sensor.
[Issue: CS-ACNS/3]
TRANSMISSION
(c) The flight crew can manually stop the transmission of the 121.5-MHz homing signal whether
this transmission was automatically or manually initiated unless the homing-signal transmitter
is detached from the aircraft.
(d) The 121.5-MHz homing signal is transmitted for at least 48 hours or until the aircraft is
submersed.
[Issue: CS-ACNS/3]
(1) flight with normal electrical power, for the maximum possible duration of flight in that
condition, followed by;
(2) flight with all the systems generating normal electrical power inoperative, for the
maximum possible duration of flight in that condition.
(b) If the system includes deployable equipment, it remains armed or activated throughout the
following:
(1) flight with normal electrical power, for the maximum possible duration of flight in that
condition, followed by;
(2) flight with all the systems generating normal electrical power inoperative, for the
maximum possible duration of flight in that condition, followed by;
(3) 15 minutes on the ground with all systems generating normal electrical power
inoperative.
[Issue: CS-ACNS/3]
scenarios during which the aircraft is severely damaged (such as in-flight fire, uncontained
engine failure, explosive decompression, etc.); and
(b) disables the automatic triggering function before the activation criteria used by that function
are met.
Equipment failures that occur during normal aircraft operation are not within the scope of
AMC2 ACNS.E.LAD.240. They are addressed by integrity requirements (refer to CS ACNS.E.LAD.620).
[Issue: CS-ACNS/3]
[Issue: CS-ACNS/3]
ROBUSTNESS
(b) If activation signals need to be transmitted by non-deployable equipment after reaching the
point of end of flight to meet CS ACNS.E.LAD.410, that equipment (including antennas) should
be demonstrated to pass the following tests:
(1) the impact shock test of EUROCAE ED-112A, Section 2-4.2.1;
(2) the penetration resistance test of EUROCAE ED-112A, Section 2-4.2.3;
(3) the static crush test of EUROCAE ED-112A, Section 2-4.2.4; and
(4) the high-temperature fire test of EUROCAE ED-112A, Section 2-4.2.5, except that the
duration of the high-temperature fire test does not need to be longer than the time that
is sufficient for transmitting the activation signals and complying with
CS ACNS.E.LAD.410.
Successful transmission of activation signals should be demonstrated at the end of this
sequence of tests.
(c) If activation signals need to be transmitted by non-deployable equipment after reaching the
point of end of flight to meet CS ACNS.E.LAD.420, that equipment (including antennas) should
successfully transmit the activation signals after being subjected to the environmental tests
applicable to an ELT(AF) in Tables 4-1 and 4-2 of EUROCAE ED-62B (including Change 1).
However, if the duration of the flame test of EUROCAE ED-62B, Section 4.5.13 is not sufficient
to ensure that at least a complete data set, such as that specified in CS ACNS.E.LAD.140, is
received and that CS ACNS.E.LAD.420 is met, an appropriate duration should be determined
and used for the flame test.
(d) If activation signals need to be transmitted by deployable equipment after reaching the point
of end of flight to meet CS ACNS.E.LAD.410, that equipment should meet the same
environmental standard as specified for an ADFR in European Technical Standard Order
(ETSO)-2C517, and should be installed as specified for an ADFR in CS 25.1457 of the Certification
Specifications for Large Aeroplanes (CS-25), except that the recording of data to facilitate
accident investigations is not necessary for compliance with CS ACNS.E.LAD.310.
(e) The homing-signal transmitter and antennas that are used by the system for transmitting the
homing signal should successfully transmit the 121.5-MHz homing signal when subjected to the
environmental tests applicable to an ELT(AF) in Tables 4-1 and Table 4-2 of EUROCAE ED-62B
(including Change 1).
(f) If ELTs are used to meet CS ACNS.E.LAD.310, they should be installed in accordance with
EUROCAE ED-62B (including Change 1), Chapter 6.
Table 1 — Minimum environmental qualification level test conditions applicable to the system
The following tests may be performed in any order or combination. Unless otherwise specified,
compliance with requirements on the transmission of activation signals (CS ACNS.E.LAD.110 and
CS ACNS.E.LAD.120) as well as compliance with requirements on the information of activation
signals (CS ACNS.E.LAD.140) should be ensured for each test. In addition, the test should be
considered failed if undesirable activation occurs during the test.
Equipment that is used by the system may be replaced between tests. Unless otherwise specified,
dedicated power sources may be replaced if the duration of the test is greater than the duration of
the battery capacity.
The test categories indicated in this Table are those defined in EUROCAE ED-14G. The column ‘Test
categories’ contains a mention of ‘(MINIMUM)’ because more stringent test categories may be
required to demonstrate that the system performs as intended under specific environmental
conditions applicable to an aircraft type. When no test category is indicated in this Table, select an
appropriate test category for the system.
If the system includes deployable equipment, ‘The system should be activated’ in column
‘ADDITIONAL TEST CONDITIONS’ means that the system should be activated without deploying that
equipment, and that the performance of the automatic deployment does not need to be checked
(‘System performance should be checked’ does not include checking the performance of the
deployment mechanism).
Note: the environmental conditions and test procedures that are described in EUROCAE ED-14G
and in RTCA DO-160G are identical so that RTCA DO-160G may be used instead of EUROCAE ED-
14G.
Flammability 26.0 C
Flame The flame test should be performed for the following components: transmitter of
activation signals, antennas used by the system, and antenna cabling.
At the start of the flame test, the temperature of these components should be
stabilised at an ambient room temperature.
The fire source should be in a tray of 1 m2 and 100 mm deep, containing water with
a depth of 50 mm, in which 10 l of Avgas 100 LL is floating.
The Avgas should be ignited and allowed to burn for 15 (± 2) seconds, before
performing the following flame test:
(a) place the components in a position directly over the centre of the fire tray at
a height of 1 m (± 25 mm) above the tray; and
(b) let the components remain in the flame for a duration corresponding to the
time frame defined in CS ACNS.E.LAD.110.
The flame test should be conducted in conditions as near as practicable to still air
conditions. After removal from the flame, the components of the test should be
allowed to cool naturally to ambient temperature before being tested.
Compliance with CS ACNS.E.LAD.120 and CS ACNS.E.LAD.140 should be ensured
after the test.
[Issue: CS-ACNS/3]
(b) The ELT(DT), its antennas, and other components that are required for the transmission of
activation signals should be installed so as to minimise the risk of disconnection during an
accident.
(c) When installing an ELT(DT) that uses an integral battery (as defined in EUROCAE ED-62B,
including Change 1), mitigation measures should be taken to ensure that the ELT(DT) remains
powered after a survivable accident.
[Issue: CS-ACNS/3]
(iii) the position accuracy of the point of end of flight that is required for survivable
accidents is achieved on typical flight trajectories of survivable accidents;
(2) if the system transmits activation signals from deployable equipment:
(i) the deployable equipment has at least the same performance as an ADFR with
regard to deployment, activation, and crashworthiness of the transmitter;
(ii) unless the system transmits before deployment activation signals that are
sufficient to achieve the position accuracy for non-survivable accidents, the crash
testing specifications of the transmitter in the deployable equipment and the
deceleration properties of the deployable equipment are such that the
transmission of activation signals is not adversely affected by impact shock forces
that are representative of deployment during a non-survivable aircraft collision
with terrain;
(iii) the communication infrastructure detects the activation signals of the deployable
equipment when that equipment is deployed and not moving; and
(iv) the communication infrastructure detects the activation signals and deactivation
signals when the aircraft stands on its landing gears and no equipment is deployed;
and
(3) the performance specified in (1) or (2), as applicable, is achieved at any location.
(b) Documentation is prepared, which demonstrates the minimum performance of a
communication infrastructure that is required for complying with (a).
[Issue: CS-ACNS/3]
(1) availability: ‘The system should be available 99.5 % of the time over a period of one year.’;
and
(2) processing anomalies: ‘The system should not produce more than one processing
anomaly for every 10,000 alert messages. A processing anomaly is an alert message
produced by the system, which should not have been generated, or which provided
incorrect information.’.
[Issue: CS-ACNS/3]
(a) conditions that justify manual activation of the system and conditions that do not justify manual
activation;
(b) recommended flight crew action after manual activation or manual deactivation of the system;
and
(c) recommended flight crew action in case of undesirable activation (automatic or manual); these
recommendations should address as a minimum the following:
(1) using in a timely manner available communication means to inform the relevant ATS unit
and the operator of the undesirable activation; and
(2) action, if any, to stop the undesirable activation.
[Issue: CS-ACNS/3]
ACCURACY
INTEROPERABILITY
SYSTEM PERFORMANCE
CS ACNS.E.LAD.610 Continuity
The system is designed to provide a level of continuity that supports its intended operation.
[Issue: CS-ACNS/3]
CS ACNS.E.LAD.620 Integrity
The system is designed to provide a level of integrity that supports its intended operation.
[Issue: CS-ACNS/3]
(b) The transmission of activation signals that contain an erroneous aircraft position or erroneous
aircraft identification should be considered a minor failure condition.
(c) The transmission of deactivation signals that contain erroneous aircraft identification should be
considered a minor failure condition.
[Issue: CS-ACNS/3]
APPENDICES
infrastructure, which are defined in paragraph (a) of CS ACNS.E.LAD.320). This Appendix is applicable
to a system that transmits activation signals before or without deploying equipment.
(a) Verification condition
(1) The system should be in the least favourable configuration (e.g. if a power supply
transition may reset the system, the system is reset; or if a GNSS receiver may be in a cold
or warm start-up condition, the cold start-up condition is used).
(2) If a satellite constellation is used, the verification should be based on the number and
distribution of satellites that are available for 95 % of the time (e.g. no use of spare
satellites).
(3) Location and time of the test or simulation are the least favourable ones. This could be
demonstrated by performing a location and time sensitivity analysis.
(4) The verification should include tests that allow confirmation of the radio frequency link
performance.
(5) The applicant should document the verification results, including:
(i) assumptions about the system and the communication infrastructure;
(ii) substantiated deviations from the example flight trajectory and its sequence that
are described in point (b) of this Appendix;
(iii) the tested flight trajectories;
(iv) for each point of a tested flight trajectory:
(A) position, attitude, speed, and acceleration;
(B) the number of communication infrastructure sensors that are actively used;
(C) the communication link performance (link budget); and
(D) the exchanged data; and
(v) for each tested flight trajectory, the location of the point of end of flight, which is
determined based on the activation signals that are transmitted along the tested
flight trajectory.
(b) Example flight trajectory
The example flight trajectory and the status of the system should be as described below:
(1) change the system to the armed state and maintain a static position for 15 seconds (s) at
an altitude between 0 and 500 metres (m); the attitude angles are:
(i) pitch attitude angle: 0°,
(ii) bank angle: 0°, and
(iii) heading: north;
(2) accelerate in a straight line in north direction, while climbing to reach a 5 000-m altitude
after 60 seconds; the horizontal acceleration should be 5.55 m/s2 throughout this phase
so that a horizontal speed of 333 m/s is reached at a 5 000-m altitude;
(3) maintain a horizontal speed of 333 m/s for 60 s, while climbing to 10 000 m;
(4) level out, set the pitch attitude angle, roll attitude angle, and heading to 0, activate the
system, and while maintaining a horizontal speed of 333 m/s, apply the following during
30 s:
(i) roll:
(A) bank right with a constant roll rate of +30°/s until reaching +30°, then bank
left with a constant roll rate of –30°/s until reaching –30°; and
(B) continue this sequence until the end of the 30-s sequence; and
(ii) keep the heading, pitch attitude angle, and altitude unchanged;
(5) while maintaining the same altitude at a constant horizontal speed of 333 m/s, apply the
following during 2 s:
(i) pitch attitude: pitch down at a constant pitch rate of –10°/s until reaching –20°;
(ii) roll attitude: bank left at a constant roll rate of –30°/s until reaching –60°; and
(iii) keep the heading and altitude unchanged;
(6) from this point and until altitude is 0 m (corresponding to the point of end of flight),
maintain a horizontal speed of 333 m/s, a pitch attitude angle of –20°, and a vertical
speed of –80 m/s, while applying the following sequence:
(i) during 17.5 s:
(A) maintain the roll attitude angle at –60°; and
(B) decrease the heading at a constant yaw rate of –10°/s;
(ii) during 4 s:
(A) increase the roll attitude angle at a roll rate of 30°/s to reach +60°; and
(B) decrease the yaw rate at a yaw acceleration of 5°/s² to reach +10°/s;
(iii) during 17.5 s:
(A) maintain the roll attitude angle at +60°; and
(B) increase the heading at a constant yaw rate of +10°/s; and
(iv) during 4 s:
(A) decrease the roll attitude angle at a constant roll rate of –30°/s to reach -
60°; and
(B) decrease the yaw rate at a yaw acceleration of -5°/s² to reach –10°/s; and
(7) after reaching the point of end of flight (altitude is 0 m), maintain stationary position for
60 s.
(c) Pass criteria
The last two-dimensional position that is determined through the activation signals that were
transmitted before reaching the point of end of flight is within 6 nautical miles (NM) of the
position of that point.
[Issue: CS-ACNS/3]