CFDS Use
CFDS Use
** ON A/C ALL
8. How to Use the CFDS
A. Types of systems
Systems have been divided into three categories in order to limit the complexity:
· type 1
· type 2
· type 3
depending on the type of interface that they may have with the CFDIU.
This system organization in three types essentially remains transparent for the operator as the
CFDIU manages any differences. Nonetheless, their definitions make it possible to understand
why certain menus are simplified.
(1) Type 1 systems
These systems are characterized by an input/output interface with the CFDIU of the ARINC 429 bus/
ARINC 429 bus type. Most systems are provided with this type of interface.
This type of system enables:
· output: permanent transmission to the CFDIU of maintenance messages generated during the current
flight or during the last flight
· input: an operator to dialog on the ground with the BITEs and therefore have access to
complementary information (test, ground report, etc.).
(2) Type 2 systems
These systems are characterized by an input/output interface with the CFDIU of the discrete/ARINC 429
bus type.
This type of system enables:
· output: permanent transmission to the CFDIU of maintenance messages generated during the current
flight or during the last flight, as well as permanent transmission while on the ground of maintenance
messages generated on the ground
· input: an operator to launch on the ground the system test and to obtain the results via the output bus.
(3) Type 3 systems
These systems are characterized by an input/output interface with the CFDIU of the discrete/discrete
type.
This type of system enables:
· output: permanent transmission of the operating status (OK, not OK)
· input: an operator to launch on the ground the system test and to obtain the result (OK, or not OK) via
the discrete output.
The CFDIU decodes the corresponding maintenance message into plain language.
B. System BITE
BITE
LRU1
SYSTEM
CFDIU
BITE
BITE
LRU2 LRU3
ARINC BUS
N_TS_000000_0_AEM0_01_00
When a system includes several computers, one of the computers collects the maintenance information
and provides the link between the system and the CFDIU. It then performs the BITE function and therefore
reports on behalf of all system computers.
This architecture provides a better targeted diagnosis by correlating data between system computers as
well as reducing bus links with the CFDIU.
For the operator, the resulting consequences are minor:
· it is the maintenance message itself which identifies, where necessary, the message source in the
system.
Example: source = ECAM1; message = SDAC1 : NO DATA FROM BMC1.
The SDAC which is part of the Flight Warning System has generated the message.
C. Flight/ground conditions
80kts
PLUS 30s
PFR
PFR
AUTOMATIC
PRINT-OUT
N_TS_000000_0_BGM0_01_00
Information concerning detected faults is generated by the CFDS according to flight/ground conditions.
Faults detected on ground may be due to maintenance actions on the aircraft and therefore are not to be
taken into account (e.g. loss of a system because the circuit breaker is open).
This is the reason why the aircraft systems have 2 types of memorization:
· the first one for the faults detected on ground
· the second one for the faults detected in flight.
The flight/ground condition used by the CFDS is specific and has been selected so as to
eliminate the false faults while covering, in the best possible manner, all operations. This is
calculated by the CFDIU.
The flight condition is located between first engine start up plus three minutes (or eighty knots plus thirty
seconds if flight plan is not available in the FMS) and eighty knots plus thirty seconds after touch down.
NOTE: In case of engine run up for maintenance purpose, a flight number (at least one character) must be
entered using the MCDU to get a PFR, the eighty knots condition being never reached.
Type 1 systems provided with an ARINC bus from the CFDIU will use this flight/ground condition defined by
the CFDIU (correct synchronization, monitored range optimized).
Management of messages of type 3 systems (no input or output bus) is via the CFDIU which uses its own
flight/ground condition.
Type 2 systems cannot receive this information (no input bus) and generate it by default. For these systems,
the flight condition is between takeoff and landing.
This difference only causes minor consequences for maintainability of type 2 systems.
In fact, only:
· the faults which may be detected between startup of the first engine plus three minutes and takeoff, still
present after the ground/fight transition, are reported on the PFR as faults occurred in the CLIMB phase
(phase 5).
· the faults which may be detected between touch down and eighty knots plus thirty seconds are not
reported on the PFR on the last flight (Ref. Para. 8.E.(1)).
Nonetheless, type 2 systems having no specific function during these phases, the probability of
occurrence of these cases is very low.
For the CFDS, a cycle is defined as a set of sequences between two ground/flight transitions as
defined by the CFDS.
Conclusion:
Faults detected during flight will generate maintenance messages in the PFR associated with
this flight (if class 1 or 2 as defined in Para 8.D.).
Other faults, exceptionally detected on the ground after the flight, may generate maintenance
messages in a ground report (Ref. Para. 8.E.(3)(b)) of the associated system. However, if no
corrections are made, effective faults will still be present in the next cycle and will consequently
generate maintenance messages in the next PFR following the ground/flight transition.
Maintenance messages are stored only once during a given cycle at the first detection after the
beginning of the cycle.
D. Maintenance message classification
(1) General
This means that in most of the cases, the fault message is associated with a cockpit event
(ECAM warning, local warning, maintenance status...).
But in specific cases of fault e.g. only a small part of wiring is faulty and only one of the re-
ceivers detects the fault, it is possible to find in the PFR only the fault message.
- fault messages which are only displayed in a test result page.
Some faults can be detected only during a specific test.
The associated fault message is therefore only displayed on the MCDU as a test result and
will never appear on a PFR.
- fault messages which need a manual switching in order to generate a cockpit event.
For systems which are in standby and which fail, the fault message is immediately avail-
able in the PFR but the associated cockpit event is shown in the cockpit only when a manu-
al switching activates this system (example ADIRU3).
This event is also called a cockpit effect. Examples of cockpit effects are: an ECAM warning, a local
warning, a flag, or any invalid function such as a missing audio signal, amber crosses on a system page,
etc.
Some of these faults have consequences on the system safety objective and are NO GO items (i.e.: the
failure must be fixed before the next departure) or GO IF items (GO if the conditions given in the MEL
are fulfilled). The others are GO without conditions.
For some of these faults the cockpit effect does not automatically appear to the crew when it is activated
(e.g.: amber crosses on a system page).
The status regarding all these faults is given by the MEL.
When the crew take notice of a fault through the cockpit effect they must report it in the aircraft LOG
BOOK.
In order to be able to launch the proper maintenance actions, all faults:
· having a cockpit effect and
· detected by the systems are covered by a CLASS 1 maintenance message transmitted to the CFDIU.
Class 1 maintenance messages are presented in the Post Flight Report at the end of the
flight.
NOTE: Some of the system faults having an effect in the cabin are also covered by a CLASS 1 mainten-
ance message transmitted to the CFDIU.
These faults have no consequence on the system operating conditions. Dispatch is permitted without
condition, except if mentionned in MMEL section MI-00-08. These faults must be fixed at the first
opportunity and not later than the "rectification interval" required as per MMEL section MI-00-05 "Repair
Interval".
Recording of these faults in the Logbook is the trigger to start the countdown of the corresponding
MMEL rectification.
In order to launch at the first opportunity the proper maintenance action it is necessary to provide
the information to the maintenance teams. Consequently, these faults are covered by a CLASS 2
maintenance message transmitted to the CFDIU.
Class 2 maintenance messages are presented in the Post Flight Report at the end of the flight.
(4) Faults without cockpit event
(a) General philosophy
These faults have no consequence on the system operating conditions and the crew is not aware of
them.
Class 3 fault messages are not shown on the PFR.
All faults detected by the systems without cockpit event are covered by a CLASS 3 fault
maintenance message.
These messages are recorded in each system BITE (class 3 report).
AIRBUS recommend through the MPD (Maintenance Planning Document) to read Class 3 failures
every 750 flight hours / 6 months.
Further to troubleshooting and replacement of affected component(s), Class 3 faults may or may no
longer be displayed in AVIONICS STATUS, depending on the following three failure cases:
· If the component removed was the computer and the failure was internal to the computer:
The CLASS 3 FAULT message should no longer be present further to the BITE
test. The CLASS 3 REPORT should be empty, since the memory of the computer
coming from the shop should have been reset before installation on A/C. If no
further CLASS 3 failure detected, the CLASS 3 REPORT will be empty at the end
of the next flight.
· If the component removed was the computer and the failure was external to the computer:
The CLASS 3 FAULT message should be triggered again further to the BITE test.
The CLASS 3 REPORT should contain the CLASS 3 fault recorded during the
last flight(s). If no further CLASS 3 failure detected (case of intermittent failure
that was cleared without any maintenance action), the CLASS 3 REPORT will be
empty at the end of the next flight.
· If the component removed was not the computer and this component was the root cause of the
failure:
The CLASS 3 FAULT message should no longer be triggered further to the BITE
test. The CLASS 3 REPORT should contain the CLASS 3 fault recorded during
the last flight(s). If no further CLASS 3 failure detected, the CLASS 3 REPORT
will be empty at the end of the next flight.
(b) Class "S" fault messages
Class "S" fault messages are specific to engine BITE and to SFCC BITE.
Class "S" fault messages are not shown on the PFR.
1 Engine system
The class 3 faults (without cockpit event) have been classified in the two following categories:
· the TIME LIMITED dispatch faults: which means that the fault may remain uncorrected within a
maximum time frame specified by the Maintenance Planning Document.
· the UNLIMITED TIME dispatch faults: which means that the fault may remain uncorrected
within an unlimited time frame.
All these faults are presented by the FADEC BITE in the 'Scheduled
Maintenance Report' at the aircraft level and classified "S" in the Trouble
Shooting Manual.
Within class "S" faults, an (*) at the end of the maintenance message will
highlight UNLIMITED TIME dispatch faults.
Faults without the (*) correspond to TIME LIMITED dispatch faults.
Example:
'CFDIU,EIU (FLGT), J3*' is an UNLIMITED TIME dispatch fault and should
be treated like any other aircraft system CLASS 3 fault.
NOTE: For engines that give separate "Class 3" and "Scheduled Maintenance Report" (SMR) re-
ports, the (*) is not used in the message wording. The CLASS 3 messages are classified
directly as CLASS 3 in the TSM and not "S".
A unique fault may disturb several systems. In this case, it will lead to the generation of several
maintenance messages (one per system). One of these messages may be more accurate than the
others. Depending on the fault and its effect, it will be the one generated either by a computer which
detects itself faulty (self monitoring) or by the computer in charge of the BITE of the system.
Under these conditions this message is qualified by the unit generating it as having priority over all
messages transmitted by the other systems for the same fault. It will be the one retained by the CFDIU
(refer to the PFR). This message is called internal.
The other maintenance messages related to the same fault are called external by the other systems.
They have less accuracy, have not priority and are not recorded in this case by the CFDIU. Only their
origins are memorized by the CFDIU as identifiers (refer to the PFR).
Therefore, each system has in memory an information linked to every message transmitted to the
CFDIU which defines its internal or external attribute so that the CFDIU can give priority to the most
accurate one.
When no priority messages are received by the CFDIU for the same event it is considered that the
accuracy is the same for all messages received. In this case the CFDIU retains the first one received.
Remark: as a general rule, the LRUs incriminated by the maintenance messages shown in the PFR are
part of the systems which generated the internal messages.
Example:
(Ref. Fig. Example of ADM Sensor Fault Detection SHEET 1)
ADM
SENSOR
19FP1
ADIRU
INT
EXT
EXT
CFDIU EXT
EXT
N_TS_000000_0_BAM0_01_00
(Ref. Fig. POST FLIGHT REPORT - For Information only (Not customized) SHEET 1)
MAINTENANCE DB/N
POST FLIGHT REPORT
GMT PH ATA
1511 04 77-00 ENG 2 FADEC
1527 06 34-00 NAV ADR 3 FAULT(5)
1528 06 27-00 F/CTL
1744 06 32-00 WHEEL TYRE LO PR
FAILURE MESSAGES
N_TS_000000_0_ALM0_01_00
A backup of the printed PFR is available on the MCDU. It should only be used if the printed PFR is
not available as the information is less complete and the presentation is not so friendly.
Conditional maintenance operations are carried out in response to the observations made by the
flight crew in the LOG BOOK.
This information represents a cockpit effect as previously defined.
the Maintenance Status (for a Class 2 fault) is displayed every time in the cockpit and transmitted
every time to the CFDIU.
Therefore, it is possible to find in the PFR several times the same ECAM warning or Maintenance
Status but only one fault message.
Example:
ECAM WARNING MESSAGES
GMT PH ATA
1000 06 31-00 DAR(3)
1030 06 21-31 CAB PR SYS 2 FAULT
1045 06 31-00 DAR
FAILURE MESSAGES
GMT PH ATA SOURCE IDENT.
1000 06 31-36-52 DAR DMU
1030 06 21-31-34 PRESS CONTR 2 CPC2
The DAR fails several times during the flight.
The figure (3) displayed after the Maintenance Status "DAR" means that this Maintenance Status
was sent 3 consecutive times to the CFDIU for PFR recording. In order to prevent the recording
of 3 "DAR" messages, the "occurence counter" has been activated, and only the fault message
related to the first occurrence of the DAR fault is recorded (GMT = 1000).
But as a warning "CAB PR SYS 2 FAULT" has been recorded (GMT = 1030), followed by a new
"DAR" Maintenance Status (GMT=1045), then in this case the "occurence counter" is reset.
If the warning "CAB PR SYS 2 FAULT" would have not been recorded, the "DAR" message
would have been recorded at GMT=1000 with a counter set to 4.
(c) An ECAM warning or a Maintenance Status can be associated with a system only
shown as an identifier in the PFR, because it is not the root cause of the fault.
Example:
ECAM WARNING MESSAGES
GMT PH ATA
0844 06 34-00 NAV RA 2 FAULT
0844 06 27-00 F/CTL
FAILURE MESSAGES
GMT PH ATA SOURCE IDENT.
0844 06 34-42-33 NO RA2 DATA CFDS EFCS 1
EFCS 2
ECAM 1
ECAM 2
EIS 1
EIS 2
There is a Radio Altimeter 2 fault.
The RA2 is really faulty and is not able to send a fault message. The users of the RA2 signals detect
the fault (CFDS, EFCS, ECAM, EIS). For the EFCS, the loss of the RA2 is a class 2 fault. The
associated Maintenance Status is available (F/CTL).
The installation of a new RA2 on the aircraft will eliminate the ECAM warning and the Maintenance
Status.
NOTE: The number of identifiers is limited to 6. If more than 6 are correlated, the CFDIU keeps only
the first six systems received. The remaining are ignored. It is therefore theorically possible
to have an ECAM warning or a Maintenance Status without any indication on the associated
system in the FAILURE MESSAGES part.
The manual test function is the main function of the CFDS manual operating mode.
The purpose is to be able to test on the ground, the maximum number of components, i.e. the integrity
of the computer managing the test, the system LRUs and the validity of the external signals used by the
system with a single test.
(a) Various types of tests
(Ref. Fig. Examples of Main Menu SHEET 1)
<
<
<
<
< >
< >
BSCU
<
<
<
<
< >
<
LGCIU
N_TS_000000_0_AQM0_01_00
Nonetheless, in order to optimize the test function and better satisfy operator requirements, certain
adaptations have been introduced:
· To limit system complexity and their BITE, the test function does not always fully cover complete
system integrity.
In the TSM with each maintenance message, the test or the procedure will be
indicated making it possible to recheck the component on the ground
· To better manage the effect of the test on the system and its ground handling the test function
may be divided into two groups:
. BASIC TEST (OR SYSTEM TEST)
. COMPLEMENTARY TESTS.
This makes it possible to have at least one test available at the terminal gate
(the basic test) which is quickly to start-up by a single technician, the other tests
making it possible to increase the global coverage level of the tests where useful
and possible.
All these tests are run on the ground from the MCDU using, first of all, the CFDIU
menu (SYSTEM REPORT/TEST) then the system MENU.
* Complementary tests
(Ref. Fig. Example of Caution SHEET 1)
N_TS_000000_0_ASM0_01_00
These tests can also be menu-guided tests. The actions to be taken are
displayed in plain language on the MCDU. (Description of the initial configuration,
description of the actions, wording of the questions to which the operator must
respond). Test names are related to the tested parts.
Return to initial condition is obtained by pressing the MCDU MENU key then
CFDS key and selecting the system again.
If the same sequence reoccurs then the computer managing the BITE of the
system or the wiring from the CFDIU must be the cause.
(f) Test stop
In some cases, a key is allocated to stop a test in progress.
(g) Configuration resetting after a test
The operator may be requested to reconfigure after a test if the initial conditions required by the test
have had a significant effect on the aircraft (instructions are in the AMM). If the operator wants to
repeat the test he is not obliged to apply these instructions on configuration resetting.
(h) Ground handling of the tests
As maintenance messages are stored in the PFR or the GROUND REPORT they will not be erased
until the next beginning of flight. Therefore, a test is a means of checking whether a fault is still
present and a means of isolating a failed LRU.
Activation of a test will be requested in the TSM by the fault isolation procedure related to a
maintenance message. It will be used to confirm the presence of a fault or to eliminate any
ambiguity. As a general rule, the test of the system including the LRU incriminated by the
maintenance message (message ATA) will be activated. By default, the test of the system which
generated the message (SOURCE) may be activated.
The activation of a test may also be part of the removal/installation procedure of an LRU given in the
AMM.
(3) 3rd group
(a) AVIONICS STATUS
This function displays the identity of the systems detecting a class 1, 2 or 3 internal or external fault
when the function is called.
The AVIONICS STATUS thus rapidly provides a global overview of the status of all systems. It is
a user-friendly monitoring device providing direct access to system menus which detect a fault (for
example, flag displayed on the PFD).
Furthermore, after aircraft power up, it enables to check that all computers have correctly satisfied
the related power up tests.
In order to know the reason for which a system is displayed in the AVIONICS STATUS it is
recommended to get access to the system menu and to activate the system test (or test).
NOTE: Certain systems are listed in the AVIONICS STATUS due to normal absence of a ground
power supply. Therefore, it is recommended to supply all systems prior to gaining access to
the AVIONICS STATUS. It shall be noted that when a computer is not supplied it is not dir-
ectly displayed in the AVIONICS STATUS as it no longer detects, itself, this fault. However,
the systems using the signals from this computer appear in the AVIONICS STATUS.
NOTE: Case related to Type 2 systems: This function is in the LAST LEG/GROUND REPORT sec-
tion specific to type 2 systems. The messages in this section concern faults detected during
flight and on ground, the wording GND preceding the list of messages related to the faults
detected on the ground in accordance with the same ground report logic as for type 1 sys-
tems. Case related to Type 3 systems: There is no ground report function for Type 3 sys-
tems. The test function shall be used in this case.
NOTE: For information purposes, the messages generated by the identifiers are accessible in the
last leg report of these identifiers. The user who wants to use these messages must do so
carefully as the information involved is non-correlated and non-priority information.
If certain trouble shooting data are required for fault trouble shooting, data readout will be requested
by a TSM procedure. Wherever possible, these data will be displayed decoded on the MCDU.
(c) LRU IDENTIFICATION
The purpose of this section is to display on ground the part numbers of computers of the selected
system and possibly their serial numbers. This section may be consulted to check the interrogated
computer standard.
This is a configuration management aid.
(5) 5th group
(a) CLASS 3 REPORT
All class 3 (internal and external) maintenance messages corresponding to the selected system are
grouped under this report. This function enables a quick access to the class 3 messages of a given
system.
End of document