Mark 3 Aviation Satellite Communication Systems: Arinc Characteristic 781-6
Mark 3 Aviation Satellite Communication Systems: Arinc Characteristic 781-6
COMMUNICATION SYSTEMS
AN DOCUMENT
Prepared by AEEC
Published by
AERONAUTICAL RADIO, INC.
2551 RIVA ROAD, ANNAPOLIS, MARYLAND 21401-7435
DISCLAIMER
THE USE IN THIS DOCUMENT OF ANY TERM, SUCH AS SHALL OR MUST, IS NOT
INTENDED TO AFFECT THE STATUS OF THIS DOCUMENT AS A VOLUNTARY
STANDARD OR IN ANY WAY TO MODIFY THE ABOVE DISCLAIMER. NOTHING
HEREIN SHALL BE DEEMED TO REQUIRE ANY PROVIDER OF EQUIPMENT TO
INCORPORATE ANY ELEMENT OF THIS STANDARD IN ITS PRODUCT. HOWEVER,
VENDORS WHICH REPRESENT THAT THEIR PRODUCTS ARE COMPLIANT WITH
THIS STANDARD SHALL BE DEEMED ALSO TO HAVE REPRESENTED THAT THEIR
PRODUCTS CONTAIN OR CONFORM TO THE FEATURES THAT ARE DESCRIBED AS
MUST OR SHALL IN THE STANDARD.
This document is published information as defined by 15 CFR Section 734.7 of the Export Administration Regulations (EAR). As publicly available technology under 15 CFR 74.3(b)(3), it is not
subject to the EAR and does not have an ECCN. It may be exported without an export license.
©2012 BY
AERONAUTICAL RADIO, INC.
2551 RIVA ROAD ANNAPOLIS, MARYLAND
21401-7435 USA
ARINC Industry Activities organizes and provides the secretariat for international aviation
organizations (AEEC, AMC, FSEMC) which coordinate the work of aviation industry
technical professionals and lead the development of technical standards for airborne
electronic equipment, aircraft maintenance equipment and practices, and flight simulator
equipment used in commercial, military, and business aviation. The AEEC, AMC, and
FSEMC develop consensus-based, voluntary standards that are published by ARINC and
are known as ARINC Standards. The use of ARINC Standards results in substantial
technical and economic benefit to the aviation industry.
a) ARINC Characteristics – Define the form, fit, function, and interfaces of avionics
and other airline electronic equipment. ARINC Characteristics indicate to
prospective manufacturers of airline electronic equipment the considered and
coordinated opinion of the airline technical community concerning the requisites of
new equipment including standardized physical and electrical characteristics to
foster interchangeability and competition.
The release of an ARINC Standard does not obligate any organization or ARINC to
purchase equipment so described, nor does it establish or indicate recognition or the
existence of an operational requirement for such equipment, nor does it constitute
endorsement of any manufacturer’s product designed or built to meet the ARINC
Standard.
In order to facilitate the continuous product improvement of this ARINC Standard, two
items are included in the back of this volume:
An Errata Report solicits any corrections to existing text or diagrams that may be
included in a future Supplement to this ARINC Standard.
ii
ARINC CHARACTERISTIC 781
TABLE OF CONTENTS
iii
ARINC CHARACTERISTIC 781
TABLE OF CONTENTS
iv
ARINC CHARACTERISTIC 781
TABLE OF CONTENTS
v
ARINC CHARACTERISTIC 781
TABLE OF CONTENTS
vi
ARINC CHARACTERISTIC 781
TABLE OF CONTENTS
vii
ARINC CHARACTERISTIC 781
TABLE OF CONTENTS
ATTACHMENTS
ATTACHMENT 1-1A GENERAL CONFIGURATION OVERVIEW – SINGLE SATCOM
INSTALLATION ................................................................................. 97
ATTACHMENT 1-1B GENERAL CONFIGURATION OVERVIEW – DUAL SATCOM
INSTALLATION ................................................................................. 98
ATTACHMENT 1-2A SATCOM SYSTEM CONFIGURATION – HPA INTEGRATED
INTO SDU ......................................................................................... 99
ATTACHMENT 1-2B SATCOM SYSTEM CONFIGURATION – OPTIONAL FLANGE
MOUNTED HPA ..................................................................................100
ATTACHMENT 1-3 STANDARD INTERWIRING ................................................................101
ATTACHMENT 1-4 NOTES APPLICABLE TO STANDARD INTERWIRING .....................107
ATTACHMENT 1-4A SYSTEM CONFIGURATION PINS DEFINITION AND
INTERPRETATION .............................................................................113
ATTACHMENT 1-5 SDU FORM FACTOR ..........................................................................121
ATTACHMENT 1-5A SDU TOP PLUG CONNECTOR LAYOUT ..........................................122
ATTACHMENT 1-5B SDU MIDDLE PLUG CONNECTOR LAYOUT ....................................123
ATTACHMENT 1-5C SDU BOTTOM PLUG CONNECTOR LAYOUT ..................................124
ATTACHMENT 1-6 SDU CONFIGURATION MODULE FORM FACTOR ..........................125
ATTACHMENT 1-6A SDU CONFIGURATION MODULE CONNECTOR LAYOUT ..............126
ATTACHMENT 1-7A SMALL FLANGE MOUNT HPA FORM FACTOR ...............................127
ATTACHMENT 1-7B LARGE FLANGE MOUNT HPA FORM FACTOR ...............................129
ATTACHMENT 1-7C FLANGE MOUNT HPA CONNECTOR LAYOUT ................................131
ATTACHMENT 1-8 DIPLEXER/LOW NOISE AMPLIFIER FORM FACTOR ......................132
ATTACHMENT 1-9 ANTENNA COVERAGE ......................................................................135
ATTACHMENT 1-10 HIGH GAIN AND INTERMEDIATE GAIN TOP MOUNT
ANTENNA FOOTPRINT MAXIMUM DIMENSIONAL OUTLINE .........136
ATTACHMENT 1-10A ANTENNA COAXIAL CABLE INTERFACE .........................................137
ATTACHMENT 1-11 NOT USED ..........................................................................................138
ATTACHMENT 1-12 HIGH GAIN AND INTERMEDIATE GAIN ANTENNA CONTROL
CONNECTOR LAYOUT ......................................................................139
ATTACHMENT 2 ARINC 429 LABELS AND WORD FORMATS USED IN THE
AVIATION SATELLITE COMMUNICATIONS SYSTEM .....................140
ATTACHMENT 2A ANTENNA CONFIGURATION DATA REPORTING ...........................154
ATTACHMENT 2B BIT-ORIENTED FAULT REPORTING PROTOCOL ...........................161
ATTACHMENT 3 COCKPIT VOICE – SAT PHONE STATE MACHINE FOR
NORMAL OPERATION .......................................................................171
ATTACHMENT 4-A ARINC 781 SDU FUNCTIONS MATRIX .............................................172
ATTACHMENT 4-B ARINC 781 SDU INTERFACES MATRIX............................................174
ATTACHMENT 5 ETHERNET INTERFACE ....................................................................175
ATTACHMENT 6 ARINC 781 HPA OUTPUT POWER USE CASES ..............................237
ATTACHMENT 7 COMPACT SATCOM SYSTEM DEFINITION (SB200) .......................240
ATTACHMENT 8 NETWORK SECURITY FOR SWIFTBROADBAND
SAFETY SERVICES ........................................................................ 257
ATTACHMENT 9 ATTACHMENT REFERENCE GUIDE ................................................281
APPENDICES
APPENDIX A Acronyms .............................................................................................282
APPENDIX B Security Analysis of the Satcom Ethernet Interface .............................290
viii
ARINC CHARACTERISTIC 781 – Page 1
ARINC Specification 664: Aircraft Data Network, Part 2, Ethernet Physical and
Data Link Layer Specification
ARINC Specification 664: Aircraft Data Network, Part 7, Avionics Full Duplex
Switched Ethernet Network
ARINC Report 665: Loadable Software Standards
ARINC Characteristic 716: Airborne VHF Communications Transceiver
ARINC Characteristic 724B: Aircraft Communications Addressing and Reporting
System (ACARS)
ARINC Characteristic 739: Multi-Purpose Control and Display Unit
ARINC Characteristic 739A: Multi-Purpose Control and Display Unit
ARINC Characteristic 741: Aviation Satellite Communication System, Part 1,
Aircraft Installation Provisions
ARINC Specification 743A: GNSS Sensor
ARINC Characteristic 746: Cabin Communications Systems (CCS)
ARINC Characteristic 758: Communications Management Unit (CMU) Mark 2
ARINC Characteristic 761: Second Generation Aviation Satellite Communication
System, Aircraft Installation Provisions
ARINC Characteristic 763: Network Server Systems
ARINC Characteristic 791: Mark I Aviation Ku-Band and Ka-Band Satellite
Communication System, Part 1, Physical Installation and Aircraft Interfaces
ARINC Specification 801: Fiber Optic Connectors
ARINC Specification 802: Fiber Optic Cables
ARINC Report 803: Fiber Optic System Design Guidelines
ARINC Report 804: Fiber Optic Active Device Specification
ARINC Report 805: Fiber Optic Test Procedures
ARINC Report 806: Fiber Optic Installation and Maintenance
ARINC Specification 808: 3GCN – Cabin Distribution System
ARINC Report 811: Commercial Aircraft Information Security Concepts of Operation
and Process Framework
ARINC Specification 823: Data Link Security, Part 1, ACARS Message Security
EUROCAE ED-12/RTCA DO-178: Software Considerations in Airborne Systems
and Equipment Certification
EUROCAE ED-14/RTCA DO-160: Environmental Conditions and Test Procedures
for Airborne Equipment
EUROCAE ED-202/RTCA DO-326: Airworthiness Security Process Specification
FAA Advisory Circular 20-150: Satellite Voice Equipment
FAA Advisory Circular 20-173: Installation of Electronic Flight Bag (EFB)
Components
ARINC CHARACTERISTIC 781 – Page 3
The Inmarsat Swift64 service supports two types of data communications: Mobile
ISDN and an IP-based Mobile Packet Data Service (MPDS). A single Integrated
Services Digital Network (ISDN) channel is a dedicated 64 kbps circuit-switched
connection that may be bonded or multilinked together with other ISDN channels to
support higher data rates. MPDS is a shared 64 kbps connection.
The SwiftBroadband service is designed to deliver cabin and cockpit services for
pilots and cabin crew, together with in-flight Internet access for passengers. The
data rates available on SwiftBroadband are significantly greater than those offered
by Swift64 or Classic Aero. SwiftBroadband supports IP services as well as
traditional circuit-switched voice and ISDN data. The Standard IP data service offers
variable data rates up to 432 kbps (subject to aeronautical terminal capability, link
availability, signaling, and contention). A Streaming IP data service is also available
that offers guaranteed bandwidth-on-demand communications. Typical applications
for SwiftBroadband include:
• Traditional telephony services.
• Internet access, e.g.,
o web browsing
o e-mail
o file transfer
o video conferencing
o Intranet access (i.e., corporate WAN access via secure Virtual Private
Network (VPN) connection).
• ACARS-based and voice Future Air Navigation System (FANS) Air Traffic
Services (ATS).
There are four user terminal types defined for the SwiftBroadband service. They are
referred to as Class 6 (High Gain Antenna), Class 7 (Intermediate Gain Antenna),
Class 15 (Low Gain Antenna), and Class 4 (Enhanced Low Gain Antenna) user
terminal (UTs). An aircraft UT supports one transmit and one return RF channel. An
ARINC 781 AES can contain one or more SwiftBroadband UTs.
COMMENTARY
At WRC-03, additional spectrum, known as Extended L-band, was
allocated for Mobile Satellite Service. The Alphasat satellite will be the
first Inmarsat satellite to use this spectrum. Terminals with this
capability are known as Extended L-band or XL capable. It is
expected that, over time, equipment manufacturers will incorporate
the additional tuning range into their equipment. Before equipment is
designed for Extended L-band capability, the relevant sections of this
Characteristic should be updated.
Table 1-1 – Tuning Range for Standard and Extended L-band Terminals
Terminal Type Receive (MHz) Transmit (MHz)
Standard 1525 to 1559 1626.5 to 1660.5
Extended L-band 1518 to 1559 1626.5 to 1660.5 and 1668 to 1675
ARINC CHARACTERISTIC 781 – Page 5
to the DLNA is excessive. The SDU is also designed to interface with legacy top and
side mounted ARINC 741 antenna subsystems, to allow a simple upgrade path to
new satcom services for aircraft that are already equipped with ARINC 741
equipment.
High Gain Antennas (HGAs), Intermediate Gain Antennas (IGAs), and Enhanced
Low Gain Antennas (ELGAs) are defined in this Characteristic.
The SDU is capable of sending and receiving various data rates. The rate is
dynamically selected by the individual applications and by pragmatic assessment of
current operating conditions. The signals are transmitted via geostationary satellite
transponders to/from designated supporting earth stations.
1.6 Unit Description
1.6.1 Satellite Data Unit (SDU)
The signal-in-space parameters are determined by the SDU in relation to
modulation/demodulation, error correction, coding, interleaving, and data rates
associated with the communication channel(s). This unit contains circuits for
conversion of digital and/or analog inputs/outputs to/from radio frequency (RF), and
typically contains an HPA module. The SDU interfaces at L-band with the DLNA.
The SDU provides a number of user interfaces including:
• Cockpit 4-wire analog voice
• Cockpit data (e.g., via an ARINC Characteristic 724B ACARS
Management Unit or an ARINC Characteristic 758 Communications
Management Unit)
• Cockpit Ethernet
• Cabin voice and data via CEPT E1
• Cabin voice via 2-wire analog audio
• Cabin ISDN
• Cabin Ethernet, which may support data services as well as voice via
picocells
• The SDU is defined in two form factors: 6 MCU and 2 MCU. The 2 MCU
form factor is known as a Compact SDU (CSDU) and is defined in
Attachment 7.
1.6.2 SDU Configuration Module (SCM)
The SCM provides a location for retaining SDU configuration information and the
Universal Mobile Telecommunications Service (UMTS) Subscriber Identity Modules
(USIMs). The SCM remains with the aircraft whenever the SDU is changed, and
facilitates the swapping of an SDU without the need to reload Owner Requirements
Tables (ORTs) (if stored in the SCM) or to swap USIMs.
1.6.3 High Power Amplifier (HPA)
The HPA is an optional external amplifier unit that provides an adequate RF power
level, by automatic control, to the antenna in order to maintain the aircraft Effective
Radiated Isotropic Power (EIRP) within required limits. The HPA may be used in
installations where the expected cable loss between the SDU power amplifier output
and antenna input is greater than the allowable cable loss. The HPA may be located
ARINC CHARACTERISTIC 781 – Page 7
near the respective antenna to assure minimum loss of energy at the RF operating
frequency and to avoid excessive thermal dissipation in the HPA.
1.6.4 Diplexer/Low Noise Amplifier (DLNA)
The Diplexer/Low Noise Amplifier (DLNA) are combined into one unit for ease of
installation. The Diplexer couples transmit signals from the SDU (or external HPA) to
the antenna, and couples receive signals from the antenna to the LNA while isolating
transmit frequencies from receive frequencies. The DLNA also filters both the
transmit and receive signals.
The LNA amplifies the very low level L-band receive signal from the antenna and
compensates for RF losses in the coaxial cabling to the SDU.
1.6.5 HPA LNA Diplexer (HLD)
The High Power Amplifier/Low Noise Amplifier/Diplexer (HLD) is a combined HPA
and DLNA unit in a compact physical outline for single channel operation. The HLD
is installed near the antenna and accommodates large cable losses between the
SDU and the HLD. The HLD is defined in Attachment 7.
1.6.6 Enhanced Low Gain Antenna (ELGA)
The ELGA provides a nominal gain of 3 dBic above 20 degrees elevation, and 2 dBic
between 5 and 20 degrees elevation, and supports a single channel. The ELGA may
optionally contain the HPA and DLNA function. The ELGA is defined in
Attachment 7.
1.6.7 Intermediate Gain Antenna (IGA)
The IGA provides a nominal gain of 6 dBic. An ARINC 781 IGA is normally top-
mounted and contains an integrated beam steering function (as opposed to an
ARINC 761 IGA).
1.6.8 High Gain Antenna (HGA)
The HGA provides a nominal gain of 12 dBic. The HGA is normally top-mounted and
contains an integrated beam steering function, which in ARINC Characteristic 741,
requires a separate Line Replaceable Unit (LRU).
1.7 System Performance
1.7.1 Transmitter Equipment Performance
Table 1-2 provides an indication of EIRP required per RF carrier to support various
Inmarsat services.
Table 1-2 – Aircraft EIRP (dBW)
Inmarsat 3 Satellite Inmarsat 4 Satellite
Service/Configuration 1
Global beam Spot beam Global beam Regional beam Spot beam
1200 R, T 9.1 - 9.1 - -
10500 R, T 20.4 - 20.4 - -
2
8400 C initial 18.5 14.5 18.5 - -
21000 C initial 19.5 - 19.5 - -
Swift64 - 22.5 - - -
SwiftBroadband ELGA - - - - 10
SwiftBroadband IGA - - - - 15.1
SwiftBroadband HGA - - - - 20.0
ARINC CHARACTERISTIC 781 – Page 8
Notes:
1. The regional beams are not currently used on the I-4 satellites for
Classic Aero.
2. Inmarsat does not currently offer C-channels (other than C8400
Aero I) or 10500 R/T-channels in the I-3 spot or I-4 regional
beams.
The transmit system is equipped to adjust the EIRP according to commands from
the earth station.
The transmit gain of an HGA or an IGA may vary as its beam position is changed
while tracking a satellite from an aircraft in motion. To maintain a more constant
EIRP as the antenna's beam position is changed, the antenna provides transmit gain
for the current beam position on its ARINC 429 bus (in the antenna status word) to
the SDU. The antenna should report its gain in the direction currently pointed with a
resolution of 0.5 dB. The SDU should make appropriate HPA adjustments to
maintain a given EIRP whenever an antenna gain change is reported. The SDU
should also monitor HPA output power when one data channel is active or under
other determined signal conditions and make appropriate HPA adjustments to
maintain the EIRP to compensate for drifts in the HPA output power.
The antenna beam steering interface from the SDU to the antenna should be an
ARINC 429 bus.
The antenna beam steering function should be capable of maintaining the
transmitted beam performance with aircraft attitude rates of change of up to 7.5
degrees per second.
1.7.2 Receiver Equipment Performance
The receiver system performance is determined by the characteristics of the antenna
subsystem, the DLNA, the SDU and the interconnecting RF cables. This includes all
of the satcom equipment's RF systems and circuits from the antenna to the
demodulated baseband output. The design parameters of each of these system
elements have been described to achieve the following receiver figure of merit (gain-
to-noise temperature ratio or G/T) values. For a switched beam antenna, this
example corresponds to the main beam for any pointing angle.
IGA HGA ELGA
G/T -19 dB/K -13 dB/K -21 dB/K
The above values for G/T should be achieved under the conditions in Section
2.3.2.5.4. Under the operational RF environment; e.g., when the receive antenna is
illuminated in its operating bandwidth (34 MHz) by a total RF flux density of -100
dBW/m2 the receiver system performance is intended to provide a bit error rate
(BER) of 1x10-5 or better for classic Aero packet-mode data and 1x10-3 or better for
Classic Aero circuit-mode voice.
The receiver system performance is intended to provide a packet error rate (PER) of
1x10-3 or better for SwiftBroadband packet-switched services and
1x10-2 or better for SwiftBroadband circuit-switched voice.
ARINC CHARACTERISTIC 781 – Page 9
1.8 Interchangeability
ARINC Characteristic 781: Mark 3 Aviation Satellite Communication Systems
comprises two major subsystems and a number of individual units. System
interchangeability is desired for each of the major subsystems, and unit
interchangeability is desired for the individual units. The first major subsystem
comprises the SDU and the SCM. The second is the antenna subsystem, comprising
two LRUs: the antenna with its integrated beam steering function, and the DLNA.
Interchangeability is also desired for the external
flange-mounted HPAs.
There are two instances whereby individual units are defined to be functional
doublets. This means that the interwiring and pin-out definitions are interchangeable;
but due to unique protocol implementations, the supply and acquisition of these units
are manufacturer specific. Functional Doublets are different from Matched Pairs in
that each unit of the Functional Doublet may fail and be changed independently;
whereas, in Matched Pairs, both units must be changed regardless of which unit has
failed.
Functional Doublet #1: SDU and SCM.
Functional Doublet #2: SDU and External Flange Mounted HPA or Optional ARINC
741 HPA.
Additional interchangeability standards may be found in Section 2 of this
Characteristic.
COMMENTARY
Even though the overall satellite system avionics suite comprises
subsystems made up of multiple LRUs, each LRU must be
designed to be autonomous for installation purposes. The airlines
will not accept “matched pairs” of units or similar “unbreakable
bonds” which necessitate changing more than the LRU whose
failure actually causes a subsystem malfunction.
1.9 Regulatory Approval
The equipment should meet all applicable aviation and telecommunication regulatory
requirements. This document does not and cannot set forth the specific
requirements that such equipment must meet to be assured of approval. Such
information must be obtained from the regulatory agencies themselves. Reference
RTCA MOPS, RTCA MASPS, ICAO SARPs, and telecommunications regulations.
COMMENTARY
Minimum Operational Performance Standards (MOPS) are
prepared by Special Committees of RTCA. MOPS define the
performance required of equipment certified by the FAA.
Performance above and beyond that specified in MOPS may be
required for certification.
Minimum Aviation System Performance Standards (MASPS) are
also prepared by Special Committees of RTCA. MASPS
document end-to-end system performance requirements including
terrestrial elements where required.
ARINC CHARACTERISTIC 781 – Page 10
Notes:
1. This performance applies when the SDU is transmitting two
unmodulated carriers each at a power level of half the rated
output power measured at the SDU output connector.
2. This performance applies when the SDU is driven by two
unmodulated carriers each at a power level necessary to
provide the EIRP given in Table 1-2 for the SwiftBroadband
services provided by the SDU. The SDU output power should
be calculated from the EIRP based on a 12 dBic HGA or 6
dBic IGA and a loss from the SDU output to the antenna input
of 2.5 dB. As an alternative test condition, modulated carriers
may be used. The required test levels for modulated carriers
are specified in the Inmarsat BGAN System Definition Manual
(SDM).
ARINC CHARACTERISTIC 781 – Page 14
2.2.1.4.5.2 EVM2
The mean (Error Vector Magnitude)2 should be no more than 0.01 while
transmitting a SwiftBroadband carrier at the power level necessary to support the
EIRP of the service being provided - as defined in Table 1-2.
Note: This applies to SwiftBroadband services. Error Vector
Magnitude is a measure of the difference between the
(ideal) waveform and the measured waveform. The
difference is called the error vector, usually referred to
with regard to M-ary I/Q modulation schemes like
QPSK, and shown on an I/Q (in-phase and quadrature)
constellation plot of the demodulated symbols.
Modulation characteristics and EVM are further defined
in the Inmarsat BGAN SDM.
2.2.1.4.5.3 Spectral Regrowth
While transmitting with either an IGA or HGA and using either a π/4 QPSK or 16
QAM modulated bearer at the required output power level, the SDU should
comply with the spectral masks defined below.
Note: This applies to SwiftBroadband services.
0
-5
-10
Relative Spectral Density (dB)
-15
-20
-30
-32 dB, F2 kHz
-35 -37 dB, F3 kHz
-40
-45
-45 dB, F4 kHz
-50
Offset from Carrier (kHz)
Figure 2-1 – Spectral Regrowth Envelope
ARINC CHARACTERISTIC 781 – Page 15
2.2.1.4.9 VSWR
The SDU output port VSWR (i.e., the VSWR measured looking into the SDU
output port) should not exceed 1.5:1. The SDU should be capable of operating
into a load VSWR of 2.0:1 maximum at any phase angle.
Note: Safety circuitry should be provided to protect the
transmitter output stage in the event of an accidental
short or open circuit at its output.
2.2.1.5 RF Characteristics for SDU with External HPA
COMMENTARY
Although the SDU and external flange mounted HPA are
defined as a functional doublet, it is recommended that the
SDU RF output power is nominaly +23 dBm (when the HPA is
delivering full power) with a maximum value of +28 dBm. The
SDU RF characteristics should be such that when driving the
external HPA, the HPA meets the requirements defined in
Section 2.2.1.4.
2.2.2 External Flange-mounted High Power Amplifier (HPA)
2.2.2.1 General
The purpose of this amplifier is to provide a solution to overcome the cable loss
issues associated with the HPA located internal to the SDU on installations
where the SDU is, in general, greater than 1.4 dB (approximately 35 feet) away
from the DLNA. The design of this HPA should be a functional doublet with the
SDU as the gain stages of the HPA internal to the SDU and the flange-mounted
HPA are manufacturer-specific.
Two external HPA form factors are described in this document; a small form
factor external HPA suitable for installation in locations where space is more
restricted e.g., on short-range/narrow-body aircraft and a large form factor
suitable for installation on larger aircraft, typically long-range/wide-body aircraft.
COMMENTARY
It is anticipated that equipment manufacturers will develop
external HPAs with differing RF output power capabilities. The
objective of the output power ranges specified herein is to
encourage manufacturers to maximize RF output power with
the available power and cooling inputs.
COMMENTARY
Although the SDU and external flange mounted HPA are
defined as a functional doublet, it is recommended that the
HPA RF input power is nominally +5 dBm to +15 dBm (when
the HPA is delivering full power) with a maximum value of +20
dBm. The HPA RF characteristics should be such that when
driven by the SDU, the HPA meets the requirements defined in
Section 2.2.1.4.
The form factor and connector pin-out arrangement are shown in Attachment 1-7.
The connector and pin-out arrangement is common to both the large and small
form factor external HPAs.
ARINC CHARACTERISTIC 781 – Page 17
The communication protocol between the SDU and the external Flange Mounted
HPA is manufacturer specific. However, the SDU to HPA communications use
the same multi-control bus to the antenna. Some labels are reserved for SDU to
antenna communications and should not be used for the SDU to HPA
communications. Other labels defined in ARINC Specification 429 are broadcast
on this multi-control bus by the SDU and should not be used for any other
purpose by the HPA. The list of these labels is available in Attachment 2.
COMMENTARY
The external flange-mounted HPA is not intended to be a
substitute for the internal HPA within the SDU for installations
not truly requiring an external HPA. In most installations, this
device is not needed, as the maximum allowed cable loss
between the SDU (with internal HPA) and antenna subsystem
can be met.
2.2.2.2 Small Form Factor External HPA
The output power of the small form factor external HPA should be between 22 W
and 35 W to ensure that the form factor can be met with minimal weight (See
Attachment 6, Case 3, 4, and 5).
The small form factor external HPA design includes an internal plenum to allow
for a flexible hose attachment for additional cooling purposes. Attachment 1-7A
depicts the size and arrangement of this connection.
Continuous operation within the output power range is expected when cooling is
provided. Continuous operation is not expected (but is desirable) in the absence
of cooling.
2.2.2.3 Large Form Factor External HPA
The output power of the large form factor external HPA should be between 30 W
and 60 W to ensure that the form factor can be met with minimal weight (See
Attachment 6, Case 6 and 8).
The large form factor flange-mounted HPA design includes an internal plenum to
allow for a flexible hose attachment for additional cooling purposes. Attachment
1-7B depicts the size and arrangement of this connection.
When cooling air is available, the unit will operate in an actively-cooled manner;
but when cooling is lost the unit will revert to a passively-cooled operation but at
a reduced services mode of a minimum of 9 W and will inform the SDU of it being
in such a mode (See Attachment 6, Case 7). A minimum clearance of one inch
beyond the envelope defined in Attachment 1-7A and 1-7B should be provided to
facilitate the passively cooled nature of this design when in “loss of cooling
mode.”
The specific design of each installation should be discussed with the installer to
ensure adequate natural cooling around the device.
Continuous operation within the output power range is expected when cooling is
provided. An acceptable duty cycle restriction could then be applied as
necessary and could consist of the SDU restricting services to match the HPA
capability to retain cockpit functions in instances where the ambient temperature
is at an extreme.
ARINC CHARACTERISTIC 781 – Page 18
The above should be met over the DLNAs operating temperature range.
In addition, the path from the transmit port to the antenna port should have the
following characteristics at ambient and cold temperatures:
Frequency (MHz) Insertion loss
1628.7 to 1629.1 < 1.8 dB
1629.1 to 1629.5 < 1.3 dB
ARINC CHARACTERISTIC 781 – Page 22
The DLNA should use a MIL-C-26482 Series 2 type connector for control and
power interconnections.
Shell size and insert arrangement as per Attachment 1-8A.
2.2.4.7 DLNA Form Factor
See Attachment 1-8 for the form factor of the DLNAs.
Note: The form factor of the two DLNAs are slightly different –
principally in the position of the transmit connector. The
mounting hole locations are the same.
2.2.4.8 DLNA On/Off Control
Provisions are needed to switch the LNA on and off. Note 6 to the Standard
Interwiring in Attachment 1-4 of this Characteristic describes the switching signal.
2.2.4.9 DLNA BITE
Provisions are needed for the DLNA to provide BITE to the antenna. Note 5 to
the Standard Interwiring in Attachment 1-4 of this Characteristic describes the
switching signal.
ARINC CHARACTERISTIC 781 – Page 25
2.3.2.6.4 Gain
The HGA should have a minimum gain of 12 dBic within the achieved antenna
coverage volume.
The antenna reported gain sent from the antenna to the SDU shall be based on
the minimum gain value of the antenna measured at ambient for the highest,
lowest and central frequencies in the transmit band for that pointing angle. This
value shall be rounded to the nearest 0.5 dB and have an accuracy (before
rounding) of -0.5 to +0.5 dB (including gain variation with frequency and
measurement accuracy). This accuracy is required over 80% of the declared
coverage volume.
2.3.2.6.5 Steering Angle
The main beam of the antenna transmit subsystem should be steerable as
necessary to fulfill coverage specifications.
2.3.2.6.6 Steering Control
See Section 2.3.2.5.6.
2.3.2.6.7 Transmit Antenna VSWR
The antenna VSWR measured at the single antenna input/output port should be
less than 1.5:1 (with respect to a 50 ohm characteristic impedance) for all
antenna beam pointing angles over the transmit frequency band.
2.3.2.6.8 Output Power Capability
The antenna system should be able to transmit a continuous single carrier of up
to 60 W (i.e., 17.8 dBW) at the HGA input connector. Peak Envelope Power
(PEP) may exceed 150 watts due to the presence of multiple carriers.
2.3.2.6.9 Satellite Discrimination
The radiation pattern should discriminate by not less than 13 dB between wanted
and unwanted satellite positions over the declared coverage volume and not less
than 5 dB outside the declared coverage volume. This specification assumes
that: (1) satellites are in geostationary orbit, (2) unwanted satellites are not less
than 45 degrees longitude away from the wanted satellite, and (3) the aircraft is
in a straight and level attitude.
Note: Testing should be conducted with a ground plane
representative of the HGA installation on the aircraft.
2.3.2.6.10 Phase Discontinuity
When switching adjacent beams in a switched beam antenna, the signal phase,
over the transmit frequency range should not change by more than:
1. Eight degrees for a minimum of 90 percent of all combinations of
adjacent beams.
2. Twelve degrees for a minimum of 99 percent of all combinations of
adjacent beams.
Note: Adjacent beams are defined as beams which have the
minimum spatial separation in a given direction and
whose corresponding phase shifter states differ for at
least one element.
ARINC CHARACTERISTIC 781 – Page 30
In the frequency range 1575.92 to 1595.42 MHz, the level of the intermodulation
product may linearly increase with frequency from -158.5 dBW at 1575.92 MHz
to -138.5 dBW at 1595.42 MHz.
Intermodulation levels should be referenced to the output port of an external 1/4-
wave monopole GNSS antenna mounted on a common ground plane with the
HGA under test. The isolation between the monopole and the HGA shall be 40
dB, or suitable compensation to the measurement shall be applied.
COMMENTARY
The antenna intermodulation requirements to protect GNSS
are based on Figures C-1 and C-2 of RTCA DO-229C using
the curve for “Terminal area, enroute & acquisition for all,” and
assuming a safety margin of 6 dB and a multiple equipment
margin of 6 dB. The satcom intermodulation assumes 20 dBW
EIRP, 12 dBic antenna, and interference bandwidth between
100 kHz and 1 MHz.
2.3.3 Intermediate Gain Antenna (IGA)
2.3.3.1 Intermediate Gain Antenna Size
The top mounted IGA footprint should be a maximum of 43 inches [1092 mm]
long and 14.4 inches [366 mm] wide.
2.3.3.2 Intermediate Gain Antenna Connectors
The IGA Control connector should conform to Mil Spec part number MIL-C-
38999 Series III or equivalent, as shown in Attachment 1-12.
The IGA RF connector should be a TNC jack (female).
2.3.3.3 Intermediate Gain Antenna Form Factor
The leading edge of the antenna should be tapered, the height of the antenna
should be minimized (within the constraints of required RF performance), and the
overall shape should be designed to minimize aerodynamic drag. The antenna
should be designed to minimize weight.
The maximum allowable IGA footprint dimensions are presented in Attachment
1-10.
2.3.3.4 Intermediate Gain Antenna Grounding and Bonding
The attention of equipment and airframe manufacturers is drawn to the guidance
material in Section 6 and Appendix 2 of ARINC Specification 404A on the subject
of equipment and radio rack grounding and bonding. Particular attention should
be given to bonding and grounding requirements of the antenna system
especially components mounted outside the airframe.
2.3.3.5 Intermediate Gain Antenna Receive System
2.3.3.5.1 Frequency of Operation
The IGA receive antenna system should operate on any frequency within the
band 1525 to 1559 MHz.
ARINC CHARACTERISTIC 781 – Page 33
2.3.3.5.2 Polarization
The polarization should be right-hand circular. The definition of ITU-R
Recommendation 573 applies.
2.3.3.5.3 Axial Ratio
The axial ratio should be less than 6.0 dB for all steering angles and frequencies
of operation.
2.3.3.5.4 Receive System Figure of Merit (G/T)
The receive antenna should perform such that an overall receive system figure of
merit of at least -19 dB/K is achieved under the following conditions:
• Clear sky climatic conditions.
• Satellite elevation angles greater than or equal to 5 degrees within the
coverage volume of the antenna.
• With residual antenna pointing errors (including effects of errors
introduced by the antenna beam steering system).
• With a DLNA noise figure and gain as described in Section 2.2.4.2 at
a temperature of 290 K.
• With a receiver having a noise figure described in Section 2.2.1.4.7 at
the SDU interface at a temperature of 290 K.
• With coaxial cable losses as described in Section 2.3.5 at a
temperature of 290 K.
• With the transmitter power of 30 watts (14.8 dBW) at the HGA
antenna connector.
• With noise contribution from passive and active intermodulation
effects and spurious signals associated with multi-carrier operation.
• Including the loss and noise contribution of a radome where a radome
is fitted.
2.3.3.5.5 Steering Angle
The main beam of the antenna should be steerable in accordance with the
coverage specifications.
2.3.3.5.6 Steering Control
The antenna receive beam performance specifications should be maintained on
a wanted satellite that is within the antenna coverage volume described in
Section 2.3.1.1 for aircraft motions that do not cause the aircraft itself to obstruct
the beam. The antenna should point to the commanded direction to within 0.5 dB
of its final gain value within 3 seconds from any initial condition. For switched
beam systems, the signal should not be interrupted by more than 50
microseconds when switching beams.
The IGA should position beams in accordance with the azimuth and elevation
positions given in the ARINC 429 Open Loop Steering Word. If the antenna is
mounted offset the top centerline of the aircraft, the SDU should adjust the
azimuth and elevation to account for the offset.
A current beam is one assigned to optimally point to the chosen satellite for a
given aircraft attitude/heading. When the azimuth and/or elevation angles to the
ARINC CHARACTERISTIC 781 – Page 34
satellite change to the extent that one or more phase shifters change state, the
new beam is defined as an adjacent beam.
COMMENTARY
Inmarsat Classic Aero SDM (Module 2, Paragraph 3.4.6)
specifies a three-second acquisition time for open-loop
steering.
2.3.3.5.7 Overload Capability
The receive antenna system should be able to survive power in the receive band
of 0 dBm at the antenna port.
2.3.3.5.7.1 Receive Antenna VSWR
The antenna VSWR measured at the single antenna input/output port should be
less than 1.5:1 (with respect to a 50 ohm characteristic impedance) for all
antenna beam positioning angles over the receive frequency band
(see Section 2.3.3.5.1).
2.3.3.5.8 Discrimination
The radiation pattern should discriminate by not less than 7 dB between wanted
and 85% of unwanted satellite positions for all antenna steering angles above 5
degrees elevation. This specification assumes that (1) satellites are in
geostationary orbits, (2) unwanted satellites are not less than 80 degrees
longitude away from the wanted satellite, and (3) the aircraft is in straight and
level flight.
Note: Testing should be conducted with a ground plane
representative of the IGA installation on the aircraft.
2.3.3.5.9 Phase Discontinuity
When switching adjacent beams in a switched beam antenna, the signal phase,
of the receive frequency range, should not change by more than 30 degrees for a
minimum of 99% of all combinations of adjacent beams.
Note: Adjacent beams are defined as beams which have the
minimum spatial separation in a given direction and
whose corresponding phase shifter states differ for at
least one element.
2.3.3.6 Intermediate Gain Transmit System
2.3.3.6.1 Frequency of Operation
The antenna transmit subsystem should operate on any frequency within the
band 1626.5 to 1660.5 MHz.
2.3.3.6.2 Polarization
The polarization should be right-hand circular. The definition of ITU-R
Recommendation 573 applies.
2.3.3.6.3 Axial Ratio
The axial ratio should be less than 6.0 dB for all steering angles and frequencies
of operation.
ARINC CHARACTERISTIC 781 – Page 35
2.3.3.6.4 Gain
The IGA transmit antenna should have a minimum gain of 6 dBic within the
achieved antenna coverage volume.
The antenna reported gain sent from the antenna to the SDU shall be based on
the minimum gain value of the antenna measured at ambient for the highest,
lowest and central frequencies in the transmit band for that pointing angle. This
value shall be rounded to the nearest 0.5 dB and have an accuracy (before
rounding) of -0.5 to +0.5 dB (including gain variation with frequency and
measurement accuracy). This accuracy is required over 80% of the declared
coverage volume.
2.3.3.6.5 Steering Angle
The main beam of the antenna transmit subsystem should be steerable as
necessary to fulfill coverage requirements.
2.3.3.6.6 Steering Control
See Section 2.3.3.5.6.
2.3.3.6.7 Transmit Antenna VSWR
The antenna VSWR measured at the single antenna input/output port should be
less than 1.5:1 (with respect to a 50 ohm characteristic impedance) for all
antenna beam pointing angles over the transmit frequency band.
2.3.3.6.8 Output Power Capability
The antenna system should be able to transmit a continuous single carrier of up
to 30 W (i.e., 14.8 dBW). Peak Envelope Power (PEP) may exceed 75 watts due
to the presence of multiple carriers.
2.3.3.6.9 Discrimination
The radiation pattern should discriminate by not less than 7 dB between wanted
and 85% of unwanted satellite positions for all antenna steering angles above 5
degrees elevation. This specification assumes that (1) satellites are in
geostationary orbits, (2) unwanted satellites are not less than 80 degrees
longitude away from the wanted satellite, and (3) the aircraft is in straight and
level flight.
Note: Testing should be conducted with a ground plane
representative of the IGA installation on the aircraft.
2.3.3.6.10 Phase Discontinuity
When switching adjacent beams in a switched beam antenna, the signal phase,
of the transmit frequency range, should not change by more than 30 degrees for
a minimum of 99% of all combinations of adjacent beams.
Note: Adjacent beams are defined as beams which have the
minimum spatial separation in a given direction and
whose corresponding phase shifter states differ for at
least one element.
2.3.3.6.11 L-band System Isolation
The installation designer should be aware of the need for physical and electrical
isolation between L-band antennas at the following frequencies:
ARINC CHARACTERISTIC 781 – Page 36
COMMENTARY
Why standardize interwiring?
The standardized interwiring is perhaps the heart of all ARINC
Characteristics. It is this feature which allows the airline
customer to complete his negotiation with the airframe
manufacturer so that the latter can proceed with installation
engineering and initial fabrication prior to airline commitment
on a specific source of equipment. This provides the
equipment manufacturer with many valuable months in which
to put final “polish” on his equipment in development.
2.5 Power Circuitry
2.5.1 Primary Power Input
The aeronautical satellite system should be designed to use 115 V variable
frequency single phase ac power. Aircraft power supply characteristics,
utilization, equipment design limitations and general guidance material are set
forth in ARINC Report 413A: Guidance for Aircraft Electrical Power Utilization
and Transient Protection. The primary power input should be protected by circuit
breakers of the size described in Attachment 1-4.
The equipment should have a power consumption less than or equal to that
shown below.
Normal Operation Normal Operation Loss of Cooling Mode
Equipment
(Internal HPA) (External HPA) (refer to Section 2.2.2.3)
SDU 255 VA max 150 VA max 180 VA max
Antenna/DLNA 60 VA max 60 VA max 60 VA max
Small Form
Factor External Not Applicable 240 VA max Not Applicable
HPA
Large Form
Factor External Not Applicable 440 VA max 150 VA max
HPA
2.8 Cooling
COMMENTARY
Equipment failures in aircraft due to inadequate thermal
management have plagued the airlines for many years.
Section 3.5 of ARINC Specification 600 contains everything
airframe and equipment manufacturers need to know to
prevent such problems in the future. They regard this material
as “required reading” for all potential suppliers of satellite
communication equipment and aircraft installations.
Equipment manufacturers should note that airlines may retrofit
satellite equipment into aircraft in which forced air cooling is
not available. They should therefore design their equipment
such that the thermal interface limits set forth in Section 3.5 of
ARINC Specification 600 can be met without such forced
cooling air being provided, or persuade their customers to
accept the presence of a cooling fan inside the component.
For non-ARINC 600 devices such as the flange mounted HPA,
the thermal design, temperature and testing requirements
should comply with ARINC Specification 628, Part 7, Section 4
for Forced Air Cooled and Stand Alone Cooled Equipment, but
with the local environment amended as described in Sections
2.2.2.2 and 2.2.2.3.
2.8.1 SDU
The SDU should be designed to accept, and airframe manufacturers should
configure the installation to provide, forced air cooling as defined in Section 3.5 of
ARINC Specification 600. The airflow rate provided to the SDU in the aircraft
installation should be 50 kg/hr of 40°C (max.) air, and the pressure drop through
the SDU should be 5 ±3 mm of water at this rate. The SDU should be designed
to dissipate less than 225 W and to expend this pressure drop to maximize the
cooling effect. Adherence to the pressure drop standard is necessary to allow
interchangeability of the equipment.
It should be noted that in emergency situations the cooling for the SDU may be
lost. The SDU should be able to detect this situation (without an external input)
and assume it is in “Loss of Cooling Mode.” If required, the SDU should shut
down lower priority communications so that service is still maintained for ATS
and AOC. Information on detailed requirements such as the length of time over
which service is required, and the service required in terms of number and type
of communications, EIRP and duty cycles should be obtained from airframe
manufacturers and regulatory authorities.
2.8.2 Flange Mounted HPA
The small and large form factor flange mounted HPAs should be designed to
accept, and airframe manufacturers should configure the installation to provide,
forced air-cooling.
The airflow rate provided to the small form factor flange mounted HPA in the
aircraft installation should be 50 kg/hr of 60° C (max) air (inlet temperature), and
the pressure drop through the small form factor flange mounted HPA should be
ARINC CHARACTERISTIC 781 – Page 42
51 ±5 mm of water at this rate. The small form factor flange mounted HPA should
be designed to expend this pressure drop to maximize the cooling effect.
The airflow rate provided to the large form factor flange mounted HPA in the
aircraft installation should be 72 kg/hr of 60° C (max) air (inlet temperature), and
the pressure drop through the large form factor flange mounted HPA should be
51 ±5 mm of water at this rate. The large form factor flange mounted HPA should
be designed to expend this pressure drop to maximize the cooling effect.
Adherence to these pressure drop standards is necessary to allow
interchangeability of the equipment.
It should be noted that some aircraft may operate with pressure drops other than
51mm. Installations in these aircraft must be discussed with the installer.
It should be noted that in emergency situations the cooling for the flange
mounted HPAs may be lost. The large form factor flange mounted HPA should
be able to detect this situation (without an external discrete input), inform the
SDU and should assume that it is in a “loss of cooling mode.” If required, the
large form factor flange mounted HPA should auto-bias itself to a lower rated
output (minimum 9 W) to ensure that the heat dissipated can be passively cooled
so that service is still maintained for cockpit and some basic cabin services.
Information on detailed requirements such as the length of time over which
service is required, and the service required in terms of number and type of
communications, EIRP and duty cycles should be obtained from airframe
manufacturers and regulatory authorities. The small form factor flange mounted
HPA is not expected to operate in the absence of forced air-cooling.
In addition to the above requirements, the large form factor flange mounted HPA
should be capable of minimum 9 W rated output operations at 35 C° ambient,
with a pressure altitude of up to 25,000 ft. and no cooling air.
2.9 Grounding and Bonding
The attention of equipment and airframe manufacturers is drawn to the guidance
material in Section 6 and Appendix 2 of ARINC Specification 404A on the subject
of equipment and radio rack grounding and bonding. Particular attention should
be given to bonding and grounding requirements of the antenna system
especially components mounted outside the airframe.
2.10 System ATE and BITE Design
2.10.1 General
To enable automatic test equipment (ATE) to be used in the bench maintenance
of the SDU, those internal circuit functions not available at active interconnection
pins and considered by the equipment manufacturer to be needed for automatic
test purposes, should be brought to ATE Reserved pins on the upper insert (TP)
of the connector (see Attachment 1-3).
2.10.2 Unit Identification
The SDU, antenna, and optional HPA should report their equipment identification
codes and serial numbers as defined in ARINC Specification 429 and ARINC
Report 665. The SDU should also provide all satcom LRU software and
hardware revision levels when requested by a centralized fault display unit on the
aircraft or when queried by ATE in the shop.
ARINC CHARACTERISTIC 781 – Page 43
confidence in the BITE was built up. Manufacturers are urged to make this
number easily alterable in their BITE implementation.
2.10.3.4 Monitor Memory Output
The BITE monitor memory output should consist of the following:
• An output on all low-speed ARINC 429 data buses to the centralized
fault display interface unit, when so requested, as described in ARINC
Report 604 using the format described therein.
• An output to the display (if provided) located on the SDU, indicating
system and LRU status. An English language alpha-numeric display is
preferred over Light-Emitting Diodes (LEDs) or coded messages.
• An output of undefined format which should be made available at the
ATE reserved pins of the upper connector located on the SDU.
The monitor memory should be capable of being reset in order that stored faults
will not be carried over once an LRU replacement or repair has been affected.
The reset should be initiated only by shop maintenance.
2.10.4 Use of Automatic Test Equipment
Equipment manufacturers should note that the airlines desire to have
maintenance procedures shop verified on automatic test equipment which
conforms to ARINC Specification 608: Standard Modular Avionics Repair and
Test System. The automatic test equipment is expected to execute software with
maintenance procedures written in accordance with ARINC Specification 626:
Standard ATLAS Language for Modular Test and ARINC Report 627:
Programmers Guide for SMARTTM Systems using ARINC 626 ATLAS.
ARINC CHARACTERISTIC 781 – Page 46
Operators (LESOs) and there are a number of stations per ocean region. Network
Coordination Station (NCS) control frequency assignments to the LES in real time to
maximize spectrum efficiency.
MPDS is operated via Inmarsat operated Satellite Base Stations (SBSs) and there is
one station per ocean region (plus a redundant station).
MPDS uses 33.6 kilo symbols per second (kSym/s) 16 QAM carriers for aeronautical
users with a fixed coding rate in both forward and return directions. RF channels are
multiplexed – that is they carry both signaling and traffic and are shared between
users. MPDS uses power control of the RF carriers in the return direction (from
aircraft) only.
Mobile ISDN uses 33.6 kSym/s 16 QAM carriers for traffic channels with a fixed
coding rate in both forward and return directions. Traffic channels are allocated on a
call by call basis to an individual terminal. Power control of the RF carriers for mobile
ISDN is mandatory in the return direction and optional in the forward direction.
The mobile ISDN and MPDS ground networks do not (currently) support priority and
preemption for aeronautical users.
3.1.1.4 SwiftBroadband
The SwiftBroadband service capability is described in Section 1.3 and summarized
in Figure 3-1.
SwiftBroadband supports both safety and non-safety services and the expected use
of the services to the classes of applications is shown below:
Service APC AAC AOC ATS
SBB Non-safety
SBB Safety
For non-safety services, multiple packet switched services and one circuit switched
service are available at a time to a SBB channel in an AES. Circuit switched and
streaming class services are delivered to a user via dedicated bandwidth (using
Quality of Service (QoS) mechanisms in the network). The available streaming rates
to a user depend on terminal class, elevation to satellite and link conditions. Offered
streaming rates are 8, 16, 32, 64, 128 kbps, and X-Stream. The X-Stream mode of
operation assigns a dedicated 200 kHz bearer to the requesting AES for its exclusive
use.
SwiftBroadband safety service delivers ACARS, two voice channels, IP data, and a
position reporting service on one 200 kHz AES channel. ORT item G1 determines if
SwiftBroadband safety service is activated in the AES and, if so, what SBB channel
supports it. The primary voice channel is implemented on the air interface as circuit
switched, whereas for a second voice channel (for both air-to-ground and ground-to-
air) VoIP is used – in both cases, the voice appears as circuit switched when
delivered into the ground networks and aircraft. For both ACARS and safety voice,
the 24-bit AES ID is used as the addressing mechanism.
The detailed requirements and implementation of SwiftBroadband safety are not
described in this document. Further details are described in RTCA DO-210 which is
being produced by RTCA SC-222. For the voice (both circuit-switched and VoIP-
based) and ACARS safety service, the SDU presents
ARINC CHARACTERISTIC 781 – Page 49
SwiftBroadband Services
* Non-safety service
# Safety service
*# Safety & Non-safety service
interfaces to the aircraft that are the same as for Classic Aero, and hence functions
such as the ACARS Aircraft Gateway (AAGW) and the VoIP server are contained in
the SDU. The VoIP server implements the RTP and SIP VoIP protocols to deliver
voice over the PS domain, as well as handling priority and preemption.
COMMENTARY
The IP safety service interface is being developed.
The above voice service using VoIP may also be used for the cabin. In this case,
priority and preemption is not provided, and the addressing does not use the
24-bit AES ID.
SwiftBroadband is a satellite component of the Third Generation IMT-2000/Universal
Mobile Telecommunications System (3G UMTS). SwiftBroadband is a UMTS
Release 4 network just like any other with one key difference being: SwiftBroadband
has a proprietary satellite radio interface (IAI-2) instead of the terrestrial WCDMA
radio interface. In addition, to support safety services, the SwiftBroadband ground
network contains various gateway functions (specifically, an ACARS Ground
Gateway (AGGW)).
ARINC CHARACTERISTIC 781 – Page 50
SwiftBroadband shares the same ground infrastructure that is used to deliver similar
services to other market segments (enterprise (also known as land portable), land
mobile and maritime). The enterprise service is known as Broadband Global Area
Network (BGAN), and this term is often used to describe the totality of the system
across all market segments. Unlike Classic Aero and Swift64 Mobile ISDN, Inmarsat
owns and operate the ground infrastructure which primarily consists of the Satellite
Access Station (SAS), the Data Communication Network (DCN), the Business
Support System (BSS), the Network Operations Center (NOC), the Satellite Control
Center (SCC), the Telemetry Tracking and Control system (TT&C – not shown in
figure below), and the Payload Control System (PCS) - not shown in Figure 3-2. The
SAS contains the satellite dishes, up down conversion, the Radio Access Network
(RAN) and the Core Network (CN). Inmarsat sells service on a wholesale basis to
Distribution Partners (DPs) who then sell service to service providers or end users.
Service providers sell service to end users.
The overall SwiftBroadband architecture is shown in Figure 3-2.
I4 Satellites
I-4 Satellites
USIM
USIM VoIP
VOIP AGGW
AGGW
USIM
Module
SDM Business
Business Network
Network Satellite
Satellite
Support
Support Operations
Operations Control
Control
System
System Center
Centre Center
Centre DCN
(BSS)
BSS (NOC)
NOC (SCC)
SCC
Inmarsat London
SwiftBroadband uses three types of satellite beam: global, regional and narrow spot.
The global beam is only used in the forward direction, while the regional and narrow
beams are used in forward and return directions. User traffic is carried in the narrow
beams, while the global and regional beams are used for log on and other signaling.
Handover between beams within a satellite is supported.
The SwiftBroadband ground network supports priority and preemption for the
SwiftBroadband safety services.
3.1.2 Management of Radio Interface
3.1.2.1 RF Power
The primary objectives of the SDU RF power management algorithm are to:
• Maintain the Aircraft EIRPs for established carriers.
• Determine the availability of RF power for additional RF carriers.
• Maintain the HPA within its operating limits (e.g., to satisfy
intermodulation products requirements).
• Ensure reservation of power for on-demand transmissions, (e.g., Classic
R or T channels).
• Prioritize the allocation of available RF power to multiple carriers, with
regard to the priority of each related service.
The Aircraft EIRP is either the EIRP assigned by the ground station, or a value
stored within the SDU.
ARINC CHARACTERISTIC 781 – Page 52
The SDU should provide independent power adjustment for the EIRP of each RF
carrier, plus optionally, overall power adjustment (e.g., by means of the HPA).
Calculation of the RF carrier adjustment should take into account factors such as:
• Power Control commands from the ground station (dynamically variable).
• Antenna transmit gain (dynamically variable).
• DLNA and RF cable losses (potentially frequency dependent).
• HPA (internal or external) gain variations or adjustments (dynamically
variable).
Carrier 1
Aircraft EIRP
Carrier 1
Carrier 1 Carrier (n)
Adjustment
Aircraft EIRP
High Power DLNA and
Amplifier Antenna Gain
Cable Losses
(internal or external)
Carrier (n)
Carrier (n)
Adjustment
If 3F L - 2FH ≤ f limit then the SDU must not transmit on either the newly assigned
frequency or a previously assigned frequency. In the latter case, the SDU must
ensure that the channels remaining satisfy 3F L - 2F H > f limit . Note that no recovery
mechanism is specified. F H and F L are the highest and lowest frequency
assignments, respectively.
f limit is 1605 MHz when GLONASS is fitted to the aircraft and 1585 MHz when
GLONASS is not fitted to the aircraft.
The need for a frequency check algorithm and the value of f limit is determined by ORT
settings or the System Configuration pins (see Section 3.2.2.4.3).
3.1.2.5 Mapping User Interfaces to Radio Interfaces
The SDU should include a function to map user interfaces to Inmarsat Services.
The potential mapping of user interfaces to compatible Inmarsat Services is outlined
in Table 3-3. This is a superset of interface capabilities and a specific SDU may have
only a subset of these.
Table 3-3 – Potential Mapping of User Interfaces to Compatible Inmarsat Services
Inmarsat Service SwiftBroadband Swift64 Classic Aero
SBB SBB
SBB SBB M-ISDN M-ISDN Classic PS
PS PS Classic CS
CS CS CS CS Data
Data Data MPDS Voice
Data Voice Data Voice (P-/R-/T-
Streaming Background (C-Channel)
User Interfaces Channel)
Class Class
Non-ATC 4-wire Analog +
Y3 Y1, 3 Y5, 3 Y2, 3
Cockpit Voice discretes
ATC Cockpit 4-wire Analog +
Y3 Y1, 3 Y5, 3 Y2, 3
Voice discretes
2-wire Analog
Y F1 F5 Y Y
POTS/SLIC
Cabin Voice
CEPT-E1 Y F1 F5 Y Y
ISDN Y Y Y
ARINC 429 3
Y Y2, 3
ACARS
Non-ATC ARINC 429
Y3
Cockpit Data Data-3
ARINC 664/
Y Y Y Y Y F
Ethernet
ARINC 429
Y3 Y2, 3
ACARS
ATC Cockpit ARINC 429
Data Data-3
ARINC 664/
F F F F
Ethernet
CEPT-E1 Y F F Y F Y Y
Cabin Data ISDN Y Y
(incl. Fax,
Modem & Ethernet Y Y4 Y4 Y Y
Packet Data) 2-wire Analog
Y Y Y
POTS/SLIC
ARINC CHARACTERISTIC 781 – Page 56
Notes:
“Y” indicates that a particular service can be supported via a particular
user interface.
“F” indicates potential “Future Support” pending definition or approval.
1. Requires Voice over IP (VoIP) conversion within the SDU.
2. Expected combination for cockpit Classic Aero system.
3. Expected combination for cockpit SBB and Classic Aero
system.
4. Expected combination for (digital) cabin voice (e.g., Global
System for Mobiles (GSM)) and data (wired or Wi-Fi).
5. For voice signaling.
3.1.2.6 Selection of Inmarsat Services, Satellites, and Ground Stations
The SDU should include a function to (1) select Inmarsat services, (2) select the
satellites and (3) select the ground stations. This function should also manage
handovers between satellites and ground stations.
This function should take into account priority, precedence and preference (see
Section 3.5) for the following items:
• Service type: Classic, Swift64, SwiftBroadband
• Service sub-type:
o For Classic Aero: Aero H, Aero H+, Aero I, Aero L
o For Swift64: M-ISDN, MPDS
o For SwiftBroadband: Packet-switched, ISDN, other circuit-switched
o Satellite beam: Global, I-3 spot, I-4 regional spot, I-4 narrow spot
• Service provider for Classic and Swift64 by choosing the appropriate
GES/LES
• Application: Voice, fax, PC modem, ISDN audio, packet data
• Application/service variants:
o Voice:
• Classic: 9.6 kbps Aero H BTRL, 4.8 kbps Aero H+/I AMBE
• SwiftBroadband: 64 kbps ISDN, 4 kbps AMBE+2, VoIP
o Fax:
• Classic: Group 3 TIF, Group 3 DIU
• Swift64: Group 3, Group 4
o PC modem data: Classic: TIF, DIU
o Packet data:
• Classic: 600 bps, 1200 bps, 10,500 bps
• SwiftBroadband class: Conversation (currently not supported),
Streaming, Interactive (currently not supported), Background
o ISDN Multilink/Bonding: 1B, 2B, 3B, 4B, 1B & 3B, 2B & 2B
• Physical interface: Ethernet 1-10, ISDN 1-2, POTS 1-2, Cabin CEPT-E1
• Duration (time since establishment) of circuit-mode call or packet-mode
session
ARINC CHARACTERISTIC 781 – Page 57
Specific menus are defined using the diagram below, whereby each airframe
manufacturer identifies which pages are bound by the unique HMI requirements for
fleet commonality and certification. All other menus may be described by the
individual avionics equipment manufacturers.
3.2.1.2.2 ACP
The Audio Control Panel provides a “CALL” light indication when a ground-to-air
(GTA) call is detected or an air-to-ground (ATG) call is in progress. The “MIC” light
indication provides the indication to identify which channel the flight crew is
communicating over. In some aircraft, pressing the “MIC” on light will answer and
terminate the voice call.
The discrete signaling between the SDU and ACP consists of:
• Cockpit Voice mic-on Inputs #1 and #2 (i.e., one per audio channel).
These inputs may be driven by latched mic-on or press-to-talk (PTT)
signals (refer to ORT item D7).
• Cockpit Voice Call Light Output #1 and #2 (i.e., one per audio channel).
• Call Place/End Discrete Inputs #1 and #2 (i.e., one per audio channel).
• Cockpit Voice Chime Signal Contacts 1 and 2 (shared between audio
channels).
ARINC CHARACTERISTIC 781 – Page 59
• Cockpit Voice Go Ahead Chime Reset (an optional input shared between
audio channels for silencing a multi-stroke chime without answering the
annunciated call).
The electrical definition of the above (e.g., voltage, current and impedance) is
defined in Attachment 1-4.
The Cockpit Voice mic-on inputs can operate in one of two modes as defined by
ORT item D7 defined in Section 3.4.2.1.3. These modes are “Latched ACP satcom
mic switch” and “Switched PTT.”
COMMENTARY
The use of discrete signaling is optional with the Williamsburg SDU
controller interface (WSCI) described in Section 3.2.1.9 (WSCI is
capable of handling all signaling on the ARINC Specification 429
signaling interface).
The use of ARINC Specification 429 signaling is to support more
complex text or graphical user interaction (such as phone number
selection) via ARINC 739 and 739A MCDUs/SCDUs or ARINC 741
Williamsburg SDU controllers (WSCs). The latter use the
Williamsburg SDU controller interface (WSCI) as described in
Section 3.2.1.9.
3.2.1.2.3 AMS
The Audio Management System (AMS) is responsible for connecting the flight deck
audio to each of the satcom voice channels.
The audio output from the SDU should:
1. Drive an analog balanced 600 ohm circuit at a nominal output level of
10mW RMS for a digital voice level of -22 dBm0.
2. Be adjustable over at least the range 5 mW to 40 mW (-3 dB to +6 dB),
via the ORT, for a digital voice level of -22 dBm0.
3. Be capable of driving an unbalanced load.
The input is a “carbon microphone” interface, which is the same as that of the VHF
radio (see ARINC Characteristic 716, Section 3.7.4).
In order to assess headset audio levels during installation, the SDU should be able
to, on demand via an MCDU or alternative HMI, generate a 1 kHz tone, at a level of
at least between 5 mW to 40 mW, determined by the ORT (Cockpit Headset Audio
Gain parameter).
The SDU should provide sidetone at a level dictated by the ORT. The maximum
level should match that of the incoming audio and there should be a number of back-
off levels, at multiples of 3 dB. There should also be a “Sidetone Off”
setting to accommodate installations where sidetone is provided by the AMS.
COMMENTARY
Previous definitions of audio output level have referred to a
“nominal 10 mW RMS” level. This is open to interpretation and
has been clarified. “Nominal” operating level is the level applicable
to typical operating conditions throughout the system (i.e.,
comfortable speech level and all controls in their usual operating
ARINC CHARACTERISTIC 781 – Page 60
positions). The digital voice level is the level within the terrestrial
networks. Normalization of the SDU audio output levels with that
from other services should be set via the ORT.
It should be noted that in order to present a sidetone level
matching that of the incoming audio, significant amplification of the
low-level carbon microphone signal is required.
A 1 kHz sine wave can be used to approximate the digital voice
referenced in the text above.
The following table provides a set of A-law samples, sampling at 8
kHz, which represents a 1 kHz sine wave with a power level of
-22 dBm0 into an A-law Pulse Code Modulation (PCM) decoder.
A-law Coded A-law Coded
Binary Hex
1001 0011 93
1000 1111 8F
1000 1111 8F
1001 0011 93
0001 0011 13
0000 1111 0F
0000 1111 0F
0001 0011 13
This queuing facility is defined as camp-on. This action is achieved either manually
or automatically.
3.2.1.5 Call Routing
The satcom system, by way of ORT item D4, provides the means to prevent ground-
to-air Priority 4 or Public calls being routed to the cockpit. This advice is being made
due to concerns about safety and access to the flight deck.
The satcom system, by way of ORT item D3, provides the means to route a ground-
to-air call to either channel 1 or channel 2 reserved for the cockpit when the two
channels are not already in use.
3.2.1.6 SAT Phone Using Classic Aero Services
3.2.1.6.1 General
This mode of operations has been previously defined as the traditional telephony
service for cockpit voice. Currently, satellite telephony utilizes Inmarsat Aero H/H+/I
services over the C-Channel protocol using either the 9.6 kbps or 4.8 kbps codecs.
The definition below is based on ARINC Characteristic 741, but various
options/functions from ARINC Characteristic 741 (Part 2, Section 4.4.4.3.2, and
Attachment 2F-42) are not described in ARINC Characteristic 781. These “not
described” options/functions are listed below. This does not preclude an avionics
manufacturer to implement them in the SDU:
• Multi-stroke chime
• Flashing lights
• Call via ACP to a number stored in ATC call register
• Generation of in-band tones and/or speech messages
• Call light activation upon call initiation
The SDU implementation for normal operation is described below as a state
machine, and this state machine is shown in Attachment 3. The SDU implements
procedures for interworking between the Cockpit “Lamp/Chime” and “Cockpit Voice
mic-on Input” control lines and the satellite network protocol for the provision of
cockpit voice services.
COMMENTARY
Although the AES presents as much as possible the same man-
machine interface as for HF and VHF radio, it nonetheless
operates as an addressed, point-to-point telephony service.
Call progress and completion/failure annunciations should be displayed on the
SCDU.
3.2.1.6.2 Air-to-Ground Call
Call Initiation State
A call is initiated via the SCDU or via the Audio Control Panel (Cockpit Voice mic-on
Discrete in ground state) after selection of the destination on the SCDU by means of
user menus (Section 3.2.1.4). If two channels are available, the request should
include the desired channel number.
ARINC CHARACTERISTIC 781 – Page 62
terrestrial networks as circuit switched. The SDU only uses this voice
service when a second cockpit voice channel is required.
The pilot input method for placing all three types of voice calls on SAT Phone from
the MCDU should be no different to that when placing an Aero H+/H/I voice call.
3.2.1.8 SAT Radio
Note: At the time of this writing, SAT Radio has not been
implemented within SwiftBroadband due to low customer
demand. The text below has been retained for reference
only.
This mode of operation is a newly defined concept by which satcom voice
communications operates in a similar manner to a VHF Radio effectively a PTT radio
service over a satellite link. This service is referred to as the “Netted Voice” feature
described in the Inmarsat BGAN SDM. Candidates for the use of this service could
be AOC Voice (to be used as private company voice use, airline
oceanic/international fleet communications etc.), Military command operations
(Air/Ground/Sea) and possible ATS use. The use of SAT Radio can also be
restricted to private and secured user groups. This service is not expected to be
used for communications between aircraft since there is the issue of a double
satellite latency hop making communications difficult to remain coherent.
The underlying technology is a combination of IP Multicast services for the forward
link and a high priority VoIP service for the return link. Actual implementation of the
SAT Radio service is still being defined with studies to determine the best tradeoff
between the most efficient pilot HMI requirements and satellite resource usage.
Some of the candidates for return link protocols could be Virtual Circuit, Packet
Switched and Dedicated Contention VoIP modes. Among the three modes are
aspects of considerations for voice latencies, ability to preempt pilots, thus
eliminating “Stuck MIC” situations. Other enhancements include minimization of
bandwidth requirements, traffic loading, introduction of emergency pilot interrupts
and preventing pilot to pilot “step-on” situations.
Figure 3-5 is a concept diagram of how the system could be implemented.
For the description of the operation between the SDU and ACARS MU/CMU refer to
ARINC Characteristic 741, Part 2, with the exception of the ARINC 429 Bus speed
selection. This parameter is set as ORT item B9 (Section 3.4.2.1.3) rather than
configuration pin strapping.
3.2.3 ISDN Interface
The SDU should accommodate two BRI interfaces for use of Swift64 and
SwiftBroadband circuit-switched services.
The signaling protocols used on the interfaces are ITU Q.921 and ITU Q.931 for
layer 2 and 3 of the signaling link, respectively. The SDU acts as the NT device.
Both (the aircraft user and the ground user) can terminate an established call by
using the signaling protocols on the ITU Q.921 and ITU Q.931 for layers 2 and 3 of
the signaling link.
For an M-ISDN call initiated from one of the two ISDN BRIs interfaces, when
appropriate, a Q.850 error code should be generated by the SDU.
3.2.4 Ethernet
This section summarizes the way Ethernet ports can be used for SwiftBroadband
and Swift64 services. A fully detailed interface description is available in Attachment
5. Other uses of the Ethernet ports (e.g., CFDS) may be described in future
supplements (see Sections 3.6.1 and 3.6.2)
COMMENTARY
The Ethernet interface defined in this section and in Attachment
5 was designed for non-safety applications. It has not yet been
determined if this interface definition is suitable for the SBB
Safety Priority IP service.
COMMENTARY
It is expected that this interface will be used by not only ARINC 781
SDUs but also non-ARINC 781 form factor LRUs that support
SwiftBroadband.
3.2.4.1 Purpose and Requirements of the Interface
Depending on the functions supported, the SDU should interface directly to
onboard communication networks using its Ethernet ports to access the following
telecommunication services:
• SwiftBroadband Circuit Switched service.
• SwiftBroadband Packet Switched service.
• Swift64 Mobile ISDN service.
• Swift64 MPDS service.
The interface can also use be used to retrieve the status of the SDU and
communication services/links.
The following requirements specify the proposed use of this interface:
• The interface needs to be scalable/extendable to architectures that
include:
ARINC CHARACTERISTIC 781 – Page 67
and (if there is a need to set-up secondary PDP context and modify established one)
3. An out of band control function using 3G/Inmarsat AT commands over
Telnet/TCPIP/Ethernet. Out of band means independent of the PPPoE
session carrying the user data.
and/or
4. Providing an IP router interface with Network/Port address translation to
route traffic to a SwiftBroadband primary context that is “always-on”
subject to service availability. This is called “Routed Interface.”
and (if required)
5. Using PPPoE to set up Swift64 and SwiftBroadband Circuit Switched UDI
data calls by using service names in PPPoE frames.
and (if required)
6. SNMP to retrieve SDU operational status of the AES and communication
links.
3.2.4.3 Interface Fundamentals
Based on the above, the interface fundamentals are:
• For the “Routed Interface”:
o Router functionality is limited to:
DHCP and NAT/PAT services to the TE.
o Functionality is provided as a Primary PDP Background context.
o When the SDU is successfully attached to the core network, it should
activate the context associated to the “Routed Interface” and continue
to re-connect in instances where service is lost due to aircraft
maneuvering, etc.
• For PPPoE:
o Each primary context is supported in a separate PPPoE session, and
is allocated an IP address by either the Inmarsat ground network or
the DP’s network. Secondary context traffic is supported via the
PPPoE session of the parent primary and shares the parent’s IP
address.
Note: SwiftBroadband supports up to 11 total contexts per
channel (i.e., sum of the primary and secondary contexts.)
o Error codes should be generated in the PPPoE error tags.
o If primary PDP context is cleared, then SDU should initiate a PPPoE
Active Discovery Termination (PADT).
• For the out of band control function:
o Secondary contexts can only be set up (and controlled) via the out of
band control function.
o Traffic Flow Templates (TFTs) (based on 3G plus Inmarsat
extensions) are a mechanism to specify the packet filter parameters
between parent primary and its secondary PDP contexts.
o Each control function equates to a single telnet session. There is no
mandated pairing between PPPoE sessions/PDP contexts and control
ARINC CHARACTERISTIC 781 – Page 69
Each of the dual satcom implementations can be separated into the definition of key
functions:
• Radio Function
• Interface Function
• BITE Function
• Control Function
Interface functions in a dual system are described in sections below of this
document. The Radio and Control functions are dependent on the degree of desired
dual operation and are described in relation to each of the services being provided,
i.e., Classic Aero and or SwiftBroadband/Swift64 operations.
3.4.1.1 Classic Aero Operations
3.4.1.1.1 General
The choice of which dual SDU mode to implement should be based on the expected
use of the SDU (including redundancy considerations) on its target aircraft.
ARINC CHARACTERISTIC 781 – Page 71
There are three key issues that determine the appropriate dual mode.
Firstly, at each power up cycle, both SDUs should perform a self-test of itself and if
no BITE errors are detected, the SDUs should each attempt to perform a logon to
verify correct operation. If any of the SDUs at power-up in a dual installation (other
than Cooperative Mode) fails to logon in a valid manner, the SDU that failed to log
on should declare itself inoperative and require manual intervention.
Secondly the interface between the AMS and satcom must be considered. If an AMS
can support four satcom voice inputs then the complexity in the SDU can be reduced
and for example Dual-Hot Standby can be used. However if the AMS can only
support two voice channels and it is required that (1) in normal operation the aircraft
has two voice channels and (2) on failure of either SDU, some voice functionality is
required (e.g., support for one voice channel), then only the Dual-Cooperative mode
may be appropriate.
Thirdly, only one ICAO address can normally be allocated to an aircraft. Hence in
this case dual independent mode is not appropriate.
Based on the above considerations, classic aero could be implemented as “dual-
warm standby”, “dual-hot standby”, or “dual-cooperative” depending on the aircraft
installation.
3.4.1.1.2 Interface Between SDUs
The Control & Interface Function that is implemented by the Cold/Warm/Hot
Standby/Dual Cooperative implementations use signaling that must be performed via
the dual satcom crosstalk buses (9C, 9D & 9G, 9H). This interface should be used to
provide an indication of the health between each system with the protocol and
interface definition being manufacturer specific.
3.4.1.1.3 Cold and Warm Standby
In the case of Cold and Warm Standby implementations, each SDU need not be
aware of what state the other SDU is in. Switching between each system is
achieved manually, either by software or a physical switch. In the case of Hot
Standby implementations, each SDU should monitor the health or the log on status
of the other SDU. Only one system is logged on to the Classic Aero services at any
one time, outputting valid indications to such systems such as the CMUs and
MCDUs. For the CMU, the standby SDU sets bit 11 of label 270 to indicate that it is
not available for the CMU to use. For the MCDU the ARINC Characteristic 739 data
would still be sent, but when the LSK is pressed for <SAT-R or <SAT-2 or
equivalent, then the satcom menu should show that the voice channels are not
available.
In normal operations, where both SDUs receive valid inputs from each other, the
SDU that is program pinned to be SDU number 1 should log on and SDU number 2
should remain logged off. If SDU number 2 receives an indication that SDU number
1 reports a failure (and is logged off), then SDU number 2 should proceed to log on.
If an SDU does not receive a valid input from the other system, then that SDU
should not attempt to log on or continue to be active. This could result in both SDUs
being in the standby mode. In this scenario, the situation requires pilot intervention
and a manual log on of the system that is deemed healthy.
ARINC CHARACTERISTIC 781 – Page 72
The data contained in the ORTs is shown in Section 3.4.2.1.3. One type of data is
the equivalent data to that determined by the optional system configuration pin. A
mandatory system configuration pin determines whether the SDU uses ORT data or
the optional system configuration pins customize the SDU operation.
A data loader is used to upload to the SDU and download from the SDU ORTs which
can be changed (i.e., ORTs (1), (2), (4), and (5)). Only complete User ORTs or
complete Secure ORTs should be uploaded/downloaded. When an ORT of type (1)
or (4) is uploaded to the SDU, the SDU should automatically (a) store within the SDU
a “local copy” of the ORT in case the SDU finds that an SCM held ORT is not valid,
(b) copy the ORT to the SCM, and (c) overwrite the old Secure ORTs or User ORTs
respectively held within both the SCM and as an SDU local copy. When an ORT of
type (1) or (4) is downloaded from the SDU, the SDU should download its local copy
of the Secure ORT or User ORT.
A “valid ORT” is an ORT whose: CRC is OK, is of the right format, and is not empty.
A valid ORT may have parameters within it or combinations of parameters within it
which will cause the SDU to not function or only to partially function on a particular
aircraft. A “correct ORT” is an ORT that is appropriate for that aircraft – appropriate
for a secure ORT is equivalent to it being certified for that aircraft. The SDU cannot
determine if its ORT is correct for a given aircraft; this can be only be determined by
manually comparing the part number of an ORT with the approved/certified ORT part
number for that aircraft.
3.4.2.1.2 ORT Synchronization
For ORTs that are held in the SCM (i.e., types (1) and (4)), the SDU should read the
ORT from the SCM after each power-up. Assuming it is valid, the SDU should
compare the just read SCM ORT with its “local copy” ORT. Normally, they are the
same, but if different, the SDU should overwrite its “local copy ORT” with the ORT
just read from the SCM. The SDU uses that ORT until the SDU is powered down.
The SDU should store the local copy of type (1) and (4) ORTs over a
power-down in case an ORT from the SCM is not valid when the SDU next
powers up.
The operation of the SDU when it determines that an ORT is not valid is as follows:
• For type (1) and (4): If the ORT read from the SCM is not valid then the
SDU should attempt to read the ORT from the SCM again. If the ORT is
still not valid after a number of such attempts, the SDU should use its
“local copy” ORT and the SDU should also declare a failure (but keep
operating). If the SDU has no valid local copy Secure ORT and it cannot
read a valid Secure ORT from the SCM, then the SDU should declare a
failure and stop operating. If the SDU has no valid local copy User ORT
and it cannot read a valid User ORT from the SCM, then the SDU should
(a) use the default User ORT, (b) declare a failure and (c) continue
operating.
• For types (2) and (3) – the SDU should declare a failure and stop
operating.
• For type (5) – the SDU should (a) use the default User ORT, (b) declare a
failure, and (c) continue operating.
ORT failures described above are “cleared” when the appropriate new ORT is
uploaded to the SDU as described in Section 3.4.2.1.1.
ARINC CHARACTERISTIC 781 – Page 74
This operation is summarized in Table 3-5 for type (1) and type (4) ORTs.
Table 3-5 – Operation of Type (1) and Type (4) ORTs
State of SDU Local Copy Logic for Type (1) ORT Logic for Type (4) ORT
ORT and SCM ORT (Secure ORT stored in SCM) (User ORT stored in SCM)
a Both ORTs valid & same Normal operation. Normal operation.
b Both ORTs valid but Use SCM ORT & transfer SCM ORT Same as for type (1).
different --> SDU Local Copy. Keep
operating. No failures raised.
c Only SCM ORT valid Use SCM ORT & transfer SCM ORT Same as for type (1).
--> SDU Local Copy. Keep
operating. No failures raised.
d Only SDU Local Copy Use SDU local copy. Do not transfer Same as for type (1).
ORT valid to SCM. Raise failure. Keep
operating. Failure cleared by
uploading new ORT.
e Neither ORT valid Raise failure. Do not operate. Use default User ORT. Do
Failure cleared by uploading new not transfer to SCM. Raise
secure ORT. failure. Keep operating.
Failure cleared by uploading
new user ORT.
this item refers to a single AMS/ACP logical channel in the context of the
combined dual system. Reference ORT items D1, D2, and D12.
a. Channel 1
b. Channel 2
4. Ground-initiated Public Correspondence call routing
a. Cabin Communication System (CCS)
b. Cabin analog phone system
c. Disallowed
d. Cockpit audio management system
COMMENTARY
The installer should consider regulatory and operational
requirements for security before allowing public calls to the
cockpit.
5. Cockpit air-to-ground call camp-on timer
This item determines if camped-on cockpit calls should stay camped-on
indefinitely, or only until a timeout, and if the latter case, what the timeout
period should be
a. Indefinite
b. Timed (allow entry of timeout period)
Note: Timeout period of “0” implies no camp-
on/immediate preemption.
6. Noise insertion
This item determines whether noise is inserted in the ground-to-air
direction for cockpit calls to prevent total silence when no audio is
present. (minimize noise modulation effects).
a. -40 dBm0
b. -50 dBm0
c. -60 dBm0
d. Off
7. Cockpit hookswitch signaling method
a. Switched PTT and/or SCDU line switch(es)
b. Latched Audio Control Panel (ACP) satcom Mic-Switch
8. Telephone number pre-select
This item determines whether an air-to-ground cockpit call is immediately
initiated when the number is selected on an MCDU menu; or the MCDU
action merely “pre-selects” the number, with the call not initiated until
after activation of the Audio Control Panel satcom mic select switch,
whereupon the call to the pre-selected number is initiated. The latter case
requires that ORT item D7 Cockpit hookswitch signaling method be in the
“Latched ACP satcom Mic Switch” state.
a. Telephone number pre-select enabled
b. Telephone number dialed upon selection
9. SCDU line select key prompts for cockpit air-to-ground call
ARINC CHARACTERISTIC 781 – Page 82
This item determines the headset audio level (both operational audio and
test tone) with respect to the nominal level of 10mW.
a. -3 dB
b. -2 dB
c. -1 dB
d. 0 dB
e. +1 dB
f. +2 dB
g. +3 dB
h. +4 dB
i. +5 dB
j. +6 dB
15. Cockpit Headset Sidetone Gain
This item determines the headset sidetone level, with respect to the
microphone input audio level.
a. 0 dB
b. -3 dB
c. -6 dB
d. -9 dB
e. -12 dB
f. Sidetone off
ORT Section E: Miscellaneous Configuration Settings
1. Use of flight ID (i.e., airline identifier and flight number)
a. Enabled
b. Disabled
2. Use of circuit-mode data on ground-to-air calls
a. Enabled
b. Disabled
3. High rate return data channel in global beam
This item determines, for an AES capable of high-rate packet data
service, whether the AES should request not to be assigned high-rate
return data channels while operating in the global beam.
a. High rate return data channel enabled in global beam
b. High rate return data channel disabled in global beam
4. Antenna configuration
a. ARINC 781 HGA
b. ARINC 781 IGA
c. LGA + LGA HPA
d. ARINC 741 Top BSU + Top HGA + HGA HPA
e. ARINC 741 Port BSU + Port HGA + STARBOARD BSU +
STARBOARD HGA + HGA HPA + HPR
ARINC CHARACTERISTIC 781 – Page 84
CMU/EICAS/EFB IO Ports
Channel Proc
& Memory RF Tuners
IO Ports
HPA
Cabin Ports IO Ports
Channel Proc
& Memory
RF Tuners
IF E/picocell
IO Ports
sample discard ratio for the measurements taken for each antenna beam pointing
angle. Reference ORT items 10E, 11E, 12E, and 13E (see Section 3.4.2.1.3).
3.7.3.5 IM Product Order to be Tested
The IM product order that was pre-determined in Inmarsat’s choice of test
frequencies should be computed by the SDU and used for making appropriate
adjustments to failure thresholds that are a function of the IM product order being
tested. IM product orders of at least 7 through 19 should be able to be taken into
account by the PIMBIT.
3.7.3.6 Transmit Signal Off/On Sequence for Receive Signal Monitoring
Monitoring of the receive frequency should be performed with the transmit
frequencies both “on” and “off” during adjacent time periods in order to be able to
attribute measured “on” signal levels to being from AES/UT-caused (P)IM (as
opposed to other possible sources of signal power at that frequency at the same
time). An off/on/off sequence of three measurements would further help to confirm
that conditions are stable during the measurement (by confirming that the two “off”
measurements are essentially identical).
3.7.3.7 Antenna Beam Pointing Angles to be Tested
Monitoring should be performed at a number of different antenna beam pointing
angles in order to aid with fault isolation. Reference ORT item 11E for the angles to
be used, and item 12E for the number of beam angles that must fail in order to
declare the PIM test to have failed.
3.7.3.8 PIMBIT Assessment Parameter
The industry-common parameter to be assessed by PIMBIT should be ∆T/T channel
degradation (if expressed as a simple ratio), where T = the normal system noise
temperature in Kelvins (316 for the system G/T spec of -13 dB/K and a minimum
antenna gain of 12 dB), and where ∆T = T 2 – T (where ∆T is the increase in system
noise temperature that is assumed to be due to PIM, T is the initial system noise
temperature without PIM degradation (from the system G/T requirement), and T 2 is
the effective system PIM-degraded noise temperature). Expressed as decibels (as
preferred for the PIMBIT application), this degradation is:
• 10 log 10 (T2/T) = 10 log 10 ((T + ∆T)/T) = 10 log 10 (1 + ∆T/T).
• E.g., for a 100% increase in system noise temperature
(T 2 = 632 Kelvins, T 2 /T = 2, ∆T/T = 1), channel degradation = 3 dB.
COMMENTARY
One recommended way of getting to this parameter is to make a
determination of the ratio of (PIM + N)/N, where PIM is the averaged
CW signal power level assumed to be from PIM during transmission
of the two CW test signals, and N is the averaged power level of the
noise floor (when the two CW test signals are not being transmitted).
Such a ratio derived from measurements that can be made by the
SDU eliminates installation variables such as the gain of the LNA and
the losses in the rest of the receive signal path (which would
otherwise need to be known if simply dealing with absolute signal
levels at the SDU and attempting to relate them to levels at the
antenna port). This is similar to how one would determine the channel
ARINC CHARACTERISTIC 781 – Page 93
Any failure should be immediately cleared following the test, as the test status is only
relevant at the time of its execution, such that any such failure has no impact on
normal system operation or on any subsequent reports to the central maintenance
system/function.
3.7.4 Operational Considerations
3.7.4.1 Prerequisite Conditions
Certain prerequisite conditions should be confirmed to be met before initiating the
test. These include having the satcom system successfully log-on or register
recently (within the previous 168 hours (seven 24-hour periods)), having the
IRS/ADIRS/GNSS operational/aligned/outputting valid data to the satcom system,
having no other failures in the satcom system that could affect the PIM test (e.g.,
HPA, DLNA, antenna/BSU/ACU, interconnections (RF coax, discretes, ARINC 429,
etc.), having the satcom system frequency reference being within its specified
operating temperature range, etc.).
3.7.4.2 Aircraft Orientation
No special aircraft orientation requirements pertain for systems using an HGA, nor
for those using an IGA with multi-dimensional beam steering. However, for testing
with an IGA using one-dimensional beam steering (i.e., one that produces a fan-
shaped beam), the aircraft must be oriented such that the nose is pointing toward
true north or south (either way), along with steering the antenna as defined in
Section 3.7.3.7.
3.7.4.3 Test Initiation
The PIMBIT should be initiated from the central maintenance system interface in the
cockpit or similar (e.g., MCDU or maintenance terminal). Ideally, the test should be
conducted while the aircraft is outside and at least 50 meters away from any
adjacent structures, other aircraft, or other large vehicles. The test will typically take
several minutes to execute.
3.7.4.4 Action Following Test Failure
If the test should fail when initiated inside a hangar or near large structures or
vehicles (including other aircraft), the test should be repeated in an open area at
least 50 meters away from any such adjacent structure/vehicle. If the re-test passes,
the initial failure can probably be attributed to (additional) PIM from the other
structures. If the re-test still fails, then corrective maintenance action should be
taken until subsequent re-tests pass.
3.7.4.5 Interpreting Results of the PIMBIT
This is an area where experience conducting the test will be helpful. Note that PIM
levels can vary considerably over time – repeated test attempts may be helpful in
interpreting the results.
Some guidelines are provided below based on early limited experience with PIMBIT.
• Failure at only some antenna beam pointing angles would tend to indict the
antenna, or possibly the aircraft skin.
• Failure at all angles would tend to indict a component such as the DLNA-to-
antenna coaxial cable assembly or its mating connectors.
ARINC CHARACTERISTIC 781 – Page 95
• High PIM levels at high elevation angles may indict the antenna. This could
be true if the PIM levels are variable with beam azimuth.
• High PIM levels at low elevation could indict the antenna or the installation
(adapter plate, etc.). There also may be an incompatibility with nearby
installed systems. This could be especially true if the PIM is present if beams
are steered fore and aft at low elevation along the axis of the aircraft.
• High PIM levels that are beam-independent might be indicative of a bad
DLNA or cable from the antenna to the DLNA. Depending on the severity of
the problem, they may be evident at the lower orders but in severe cases
may persist to, e.g., the 45th order. In cases like this, it may be useful to
remove the antenna from the chain and replace it with a low PIM load (e.g., a
long cable bundle). This could serve to isolate the DLNA and cable. This will
not be possible when the system is in service.
• Repeating the test after rotating the aircraft, or changing the antenna beam
pointing angles via the respective ORT item, will typically give at least
somewhat different results and may provide additional insight to the source of
the PIM.
3.7.4.6 AMM Recommendations
Recommended corrective actions to be performed when the test fails should be
included in the aircraft maintenance manual (AMM). It should be noted that PIM can
be intermittent, and that PIMBIT may indicate a PIM failure on the aircraft but that it
is very limited in its ability to isolate the failure to a specific area or to indicate the
specific required corrective action. The AMM information should include but not be
limited to the following (in the preferred order of execution for most aircraft – adjust
as appropriate for the specific aircraft type):
• Visually inspect the DLNA-to-antenna coaxial cable for physical damage
(cable jacket abrasion or cuts), violation of the minimum specified bend
radius or the presence of kinking, loose or over-tight cable clamps, corrosion,
etc.
• Check the DLNA-to-antenna cable assembly:
o Disconnect the cable assembly between the DLNA and the antenna.
o Inspect and clean (e.g., with isopropyl alcohol) the connectors on the
cable assembly and on the DLNA & antenna (starting with the DLNA end
first).
o Reconnect and torque the connectors on the coaxial cable between the
DLNA and the antenna.
• Clean the mating surfaces between the fuselage and the antenna adapter
plate, and between the adapter plate and the antenna. Treat aluminum
surfaces with chromate conversion coating (e.g., Alodine®).
Before performing any of the following replacement actions, it may be preferable to
perform one or more of the “additional actions” listed further below if the necessary
resources (personnel, equipment, and flight test opportunity) are available.
• Replace the antenna.
• Replace the DLNA.
• Replace the DLNA-to-antenna coaxial cable assembly.
ARINC CHARACTERISTIC 781 – Page 96
Additional actions that may be taken by OEM and/or equipment provider engineering
personnel for fault isolation include but are not limited to the following:
• Affix a low-PIM dummy load at the antenna port of the DLNA and repeat the
PIM test.
• Affix a low-PIM dummy load at the antenna end of the DLNA-to-antenna
coaxial cable assembly.
• Launch the PIMBIT while the aircraft is in-flight using special engineering test
interfaces/modes.
The maximum recommended azimuth and elevation angle settings for the ORT
items should be specified, based on the characteristics of the installed antenna.
ARINC CHARACTERISTIC 781 – Page 97
ATTACHMENT 1-1A
GENERAL CONFIGURATION OVERVIEW – SINGLE SATCOM INSTALLATION
Voice Channel 2
AMS
Analog Audio
,
Discretes
Voice Channel1
Wheels
Weight
Discrete
On
ISDN
CEPT-E1
Cabin Services
LAN
Cabin
Antenna
SwiftBroadband
Services
Cockpit
LAN
Satcom System
Cockpit
DLNA
EFB
615A
ARI NC
Loader
Data
ARINC 615
EI CAS
CMU
#1, #2
ARINC758
SDU
CFDS/
CMC
ARINC604
#1, #2
I RS
ARINC429
#1, #2, #3
SCM
SCDU
ATTACHMENT 1-1B
GENERAL CONFIGURATION OVERVIEW – DUAL SATCOM INSTALLATION
AMS
Analog Audio
, Analog Audio
,
Discretes Discretes
Voice Channel
1 Voice Channel
1
Wheels
Weight
On
Discrete Discrete
ISDN ISDN
CEPT-E1 CEPT-E1
Cabin Services
LAN
LAN
Cabin
Cabin
Antenna
Antenna
SwiftBroadband
Services
Cockpit
LAN
LAN
Cockpit
Cockpit
Satcom System #1
Satcom System #2
DLNA
DLNA
EFB
ARINC
ARINC
615A
615A
Loader
Data
ARINC615 ARINC615
EICAS
CMU
#1, #2
ARINC758 ARINC758
SDU
SDU
CFDS/
CMC
ARINC604 ARINC604
#1, #2
IRS
ARINC429 ARINC429
SCM
#1, #2, #3
SCM
SCDU
ATTACHMENT 1-2A
SATCOM SYSTEM CONFIGURATION – HPA INTEGRATED IN SDU
RF Rx
RF
RF Tx DLNA
ARINC 781
BITE / Control IGA or HGA
SDU
(contains
BSU
functions)
ARINC 429 (Multicontrol)
Power Signaling
SCM
ARINC CHARACTERISTIC 781 – Page 100
ATTACHMENT 1-2B
SATCOM CONFIGURATION – OPTIONAL FLANGE MOUNTED HPA
RF Rx
Power RF
RF Tx RF Tx DLNA
BITE / ARINC 781
Control IGA or HGA
HPA
SDU ARINC 429
(contains
(BITE from HPA) BSU
functions)
Power Signaling
SCM
ATTACHMENT 1-3
STANDARD INTERWIRING
SDU RF Output to DLNA (or HPA). TP71 50 ohm coax DLNA/J3 or HPA/J2 11
Input/output for ELGA (SB200 Configuration 3) or ELGA/J1
ATTACHMENT 1-3
STANDARD INTERWIRING
ATTACHMENT 1-3
STANDARD INTERWIRING
ATTACHMENT 1-3
STANDARD INTERWIRING
ATTACHMENT 1-3
STANDARD INTERWIRING
Chassis Ground A
115 Vac Cold E 16
115 Vac Hot F
+28 Vdc Hot G
+28 Vdc Return K
See also coaxial cable from SDU or from HPA and to
SDU
ATTACHMENT 1-3
STANDARD INTERWIRING
ATTACHMENT 1-4
NOTES APPLICABLE TO STANDARD INTERWIRING
1. The 24-bit ICAO SSR Mode S Address (used as the AES ID) should be read from the Data Bus
from CMU #1 (SDU pins MP3A and MP3B) or the Data Bus from CMU #2 (SDU pins MP3J and
MP3K) or the AES ID input (SDU pins MP7A and MP7B) if available. The Owner Requirements
Table (ORT) item B1 identifies whether ARINC 429 data is available. Data from the CMUs is
available on Labels 214 and 216 (as specified in ARINC Specification 429, Attachment 6), or on
the AES ID input bus on Labels 275 and 276 (at 5 to 10 words per second) as specified in
ARINC Specification 429 for the Mode-S Transponder to TCAS. ORT item B2 specifies the bus
speed for the AES ID input. If the address is not available on any 429 input, it should be read
from the ORT database or entered manually on the SCDU. If a Configuration Module is
installed, the ICAO address should be stored on the module for use by the SDU if the ICAO
Address is not available on a subsequent power-up.
The AES ID input may contain additional position labels (Latitude on label 310, Longitude on
label 311), depending upon the setting of ORT item B4 AES ID Input – Presence of GNSS
Position Data. When present on the AES ID input, label 310 (Present Position Latitude) and
311 (Present Position Longitude) will be formatted per ARINC 429. These labels are intended
to support SwiftBroadband transmit signal timing requirements on a B777 aircraft.
COMMENTARY
Installers wishing to use the Mode-S transponder as the source of the
ICAO address should ensure that the transponder will continue to
transmit a valid ICAO address when in standby mode. The satcom
system may be rendered inoperative if a valid ICAO address cannot
be obtained due to satcom attempting to read the ICAO address when
the transponder is in standby mode Transponders set the Sign/Status
Matrix (SSM), bits 30 and 31, to No Computed Data (NCD) when in
standby mode, so it is necessary that the SDU interpret ICAO data as
valid when the SSM is set to NCD.
2. The CMU is an optional system that may not be available on all aircraft whereas the
transponders are required equipment for Air Transport category aircraft. The Communications
Management Unit (CMU) or equivalent is responsible for integrating data communications via
the satellite communications system with data communications via other data links on the
aircraft. It exchanges data with the SDU at the physical layer on an ARINC 429 data bus, and
at the link layer using the bit-oriented file transfer protocol. It utilizes the ISO 8208 subnetwork
layer (packet level) protocol, as described in that international standard.
3. ARINC 429 low-speed data bus.
4. ARINC 429 high-speed data bus.
5. Units functioning normally should annunciate this fact by placing a voltage between +15 Vdc
and +36 Vdc relative to airframe dc ground, defined as 0 ± 3V dc, on the connector pins
assigned to the BITE discrete output. Absence of this voltage will be interpreted as a fault
annunciation. BITE annunciation is not required when the unit has been commanded “off.”
6. The SDU should provide an internal switch closure to ground. The switch “contact” should be
open for (i) LNA off, (ii) no cockpit voice call annunciation, and closed for (i) LGA LNA on, (ii)
cockpit voice call annunciation active, (iii) the polarity logic of spare outputs will be defined when
the spare output functionality is defined. The “open” voltage hold-off should be 36 Vdc max.,
the potential across the “closed” switch should be 1 Vdc or less and the cold in-rush current
handling capacity should be 500 mA max and the steady state value should be 50 mA max.
The cockpit voice call annunciation is to be steady until reset.
ARINC CHARACTERISTIC 781 – Page 108
ATTACHMENT 1-4
NOTES APPLICABLE TO STANDARD INTERWIRING
7. The SDU should sense the closure of an external switch to dc ground. The resistance to
airframe dc ground, defined as 0 ± 3V dc, presented to the SDU connector pins should be
100,000 ohms or more when the external switch is open and 10 ohms or less when the switch is
closed. The closed state of the external switches will indicate that (i) a cockpit microphone is in
use with satcom, (ii) the Voice Go-Ahead (Chime) output should be reset, (iii) the satcom RF
output should be muted, (iv) reset the SDU, (v) the polarity logic of spare inputs will be defined
when the spare input functionality is defined. In the case of (i), this input can be wired to either
the satcom-selected PTT switch, or to an ACP satcom mic transmit key switch suitably latched
for the duration of the call as specified by ORT setting D7.
LATCHED Mic-On OPERATION (ORT setting D7)
If the Call Light is ON, the Mic-steady ground is interpreted as off-hook, which answers an
incoming call when the signal goes low and ends the call when the signal goes high.
If the ORT (item D8) is set for ACP initiated Cockpit Calls and, if the Call Light is OFF, the Mic-
On discrete going to ground is interpreted as Place Cockpit Call. Refer to ARINC Characteristic
741, Part 2, Section 4.13.
8. These SDU pins are intended to support two-wire analog POTS (plain old telephone service)
circuit mode equipment such as telephones, fax machines, and circuit-mode data equipment
including personal computers and secure voice terminals connected directly to the satcom
system. Reference the Inmarsat Aeronautical System Definition Manual, Modules 1, 2, and 5,
and the relevant vendors for specific options and details.
9. When enabled by ORT item D10 and a cockpit air to ground call is placed, or upon receiving a
ground to air cockpit call, the SDU should close a circuit between pins MP2C and MP2H when
the voice go-ahead (chime) output is to be activated such that a current of 1 amp may flow
through an external device fed from a 28 Vdc source. The current should flow “from” the chime
“to” MP2C, and the current should flow “to” the chime “from” MP2H. Maximum hold-off voltage
in the open circuit condition should be 36 Vdc. The minimum hold time (for both the on and off
states) should be 250 ms. The chime should be single stroke.
10. The shields of twisted and shielded pairs of wires used for audio signal transfer should be
grounded at the transmitter end only. While it is preferable to utilize two cockpit audio channels,
the SDU is only required to interface with one channel.
11. The characteristic impedance of each coaxial interface should be 50 ohms.
12. This Satellite Control/Display Unit (SCDU) interface is required to permit the SDU to be
managed by a cockpit control panel. The SDU should be capable of exchanging command and
control information with the SCDU using the MCDU protocol standards defined in ARINC
Characteristic 739 or WSCI (see ARINC 741 Part 2, Attachment 2F-42.1). Display and control
details are manufacturer-specific. Note that no messages for the air-ground link will originate in
or be routed to the SCDU over this interface. The details of this interface are manufacturer-
specific.
13. All TNC and N type connectors should be provided with means to prevent the effects of
vibration from causing the threaded collar with which the mating halves are secured together
from becoming loose.
14. Interface details are per ARINC Report 615. Interwiring is only required on those aircraft having
an ARINC 615 Airborne Computer High Speed Data Loader installed. The Data Loader Link A
discrete is used to enable the SDU to determine whether or not an ARINC 615 ADL is
connected. A resistance to airframe dc ground, defined as 0 ±3 Vdc, presented to the SDU
connector pin of 100,000 ohms or more should be interpreted as the ADL is not connected, and
a resistance of 1,500 ohms or less should be interpreted as the ADL is connected.
ARINC CHARACTERISTIC 781 – Page 109
ATTACHMENT 1-4
NOTES APPLICABLE TO STANDARD INTERWIRING
15. There are four ARINC 429 inputs defined on the SDU connector for the purpose of receiving
inertial data and GNSS data. The airframe manufacturer should provide a definition of what
data is available on each of these four ports to the SDU manufacturer. The following table lists
the possible functionality available on each ARINC 429 input:
The following table defines the inertial and GNSS parameters and labels available from various
aircraft inertial and GNSS systems. For inertial data and GNSS data available on IRS inputs for
antenna control steering and computed Doppler correction, the ARINC 429 Octal labels in the
left hand column of the table below should be transmitted from an inertial system, such as IRS,
ADIRS, ADSU, or equivalent equipment. In addition to the inertial labels, when the
SwiftBroadband function is supported by the SDU, it is strongly recommended that the SDU
obtain GNSS corrected position data (latitude/longitude). Depending on the aircraft, GNSS data
may be obtained from various sources. If a hybrid inertial/GNSS system is available on the
aircraft, the IRS input(s) should be wired to provide both inertial data and GNSS position data
according to the right hand column of the following table. If a hybrid inertial/GNSS system is not
available on the aircraft, then one of the IRS inputs may be used to provide inertial data to the
SDU while the other IRS input may be used to obtain autonomous GNSS data, or GNSS data
may be provided on the Data from GNSS data to SDU input while maintaining primary and
secondary IRS inputs for inertial data. If provided on the aircraft, GNSS data may also be
obtained from the AES ID input per Interwiring Note 1. Each IRS input may be configured per
ORT items B5 and B6 to receive the labels in any one column of the following table:
ATTACHMENT 1-4
NOTES APPLICABLE TO STANDARD INTERWIRING
Refer to ARINC 429 for the format of labels in the above table.
Systems providing classic aeronautical services and Swift64 may only need to use the inertial
labels in the left hand column for inertial data. An SDU may be wired to any one or two of up to
three IRSs. It is strongly recommended that systems providing SwiftBroadband service is wired
to receive GNSS data to support SwiftBroadband transmit signal timing requirements in addition
to receiving inertial data.
The hybrid inertial and GNSS data solution is preferred, as it allows for redundant Inertial and
GNSS inputs to the SDU using the primary and secondary IRS inputs to the SDU.
If the aircraft is not equipped with hybrid inertial systems providing inertial and GNSS data on
the same data bus, then the SDU should be wired to receive separate inertial and GNSS inputs.
a. If the aircraft provides two inertial inputs to the SDU, then the primary and secondary
IRS SDU inputs should be wired to receive inertial data. The Data from GNSS to SDU
input should be wired to receive GNSS Data (unless lat/long is available on the AES
Input Bus).
b. If the aircraft provides one inertial input to the SDU, then the primary IRS input to the
SDU should be wired to receive inertial data and either the secondary IRS input or the
Data from GNSS to SDU Input can be used to receive GNSS data.
ORT items B4, B5, and B21 define which IRS pins on the SDU are wired to sources of IRS data
and whether the GNSS to SDU bus is enabled.
For aircraft with hybrid inertial/GNSS systems inputs, label 370 should not be used for altitude
because it can be defined to be acceleration. Hybrid inertial/GNSS systems should use altitude
label 261 for altitude when available. If label 261 is not available, then label 076 should be used
for altitude.
For aircraft that do not have hybrid inertial/GNSS systems inputs, label 370 from GNSS should
be used for altitude over labels 076, and 361. If altitude label 370 is not available, label 076
should be used. If neither label 370 nor label 076 is available, then label 361 should be used for
altitude.
Track angle may not be available on the ground. The SDU should not declare a fault due to a
lack of track angle or no computed data for track angle when the aircraft is on the ground.
16. Circuit breaker protection information for the single satcom system is as follows:
• One (1) 115 Vac 5 amp, circuit breaker is provided for SDU-1, DLNA-1 and Antenna-1
for the majority of configurations.
• Two (2) 115 Vac 5 amp circuit breakers are provided, one for SDU-1 and one for HPA-1,
DLNA-1 and Antenna-1 for aircraft with a long distance between the SDU and antenna
components requiring an FMHPA installation.
The system installer should conduct a load analysis to ensure the total current draw of the total
system does not exceed approximately 80% of the current rating of the circuit breaker, and
in-rush current should be taken into consideration. After conducting the load analysis, a larger
circuit breaker may be chosen or an additional circuit breaker used to power the antenna
components (DLNA, Antenna) if the above circuit breaker recommendations are insufficient.
Each circuit breaker should have a Type A (short delay) response. When dual satcom systems
are installed, the circuit breakers utilized in each system are the same as those given above. It
should be noted that the pin size for the high gain antenna connector allows a maximum of 22
gage wire to be installed to power the antenna. This wire size limits the antenna circuit breaker
to a maximum of 5 amps in order to ensure that the circuit breaker protects the wire in the event
of a short circuit.
ARINC CHARACTERISTIC 781 – Page 111
ATTACHMENT 1-4
NOTES APPLICABLE TO STANDARD INTERWIRING
17. The System Configuration Pins definition and interpretation details are shown in
Attachment 1-4A. A small number of System Configuration Pins are mandatory. The others
may be optionally used by installers to define additional configuration details. If the optional
System Configuration Pins are not used then the configuration information may be found in the
ORT. TP3G is used to define whether the optional System Configuration Pins should be read
by the SDU. The SDU should attempt to read the System Configuration Pins upon power-up.
It should be noted that the System Configuration Pins use ‘multiplexed pin programming’ and
that 7 of the Service Availability Discretes are used to provide the multiplexed matrix select
strapping. Although unlikely, the optional System Configuration Pins could be used on aircraft
that also use the Service Availability Discretes. It is therefore recommended that (1) the SDU’s
System Configuration Pins are open circuit except when they are being read so that Service
Availability lamps/LEDs are not partially illuminated, and (2) diode isolation (external to the
SDU) of each Service Availability lamp/LED power may be needed to stop misreading of
System Configuration Pins by the SDU if (and only if) the external power source of the
lamps/LEDs could be grounded in the “off state” and the Service Availability Discrete is
connected to a System Configuration Pin.
18. Reference Attachment 1-4A or ORT item B15 for the definition of the speed (high or low) of this
ARINC 429 bus.
19. This discrete will be used to enable the SDU to determine whether or not the aircraft is airborne.
The WOW Input should be programmable such that the “true” state may be annunciated by
either an airframe dc ground, defined as 0 ±3 Vdc or a resistance to airframe dc ground of less
than 1500 ohms at the SDU connector pin MP7D, or an open circuit or voltage. An open circuit
is defined as a resistance of 100,000 ohms or more between pin MP7D and airframe dc ground.
The voltage, relative to airframe dc ground, at an input for a “true” indication should be 7 Vdc or
more (max 30 Vdc). For this condition, the SDU should present a load of at least 10,000 ohms
at the input. Resistance sensing should be based on current flow from the SDU to airframe dc
ground.
Programming should be either achieved by means of SDU system configuration pin TP6D or
ORT item E6. This discrete is only required to be wired if equivalent information is not strapped
as being available to the SDU on an ARINC 429 input, for example, IRS or the CFDS.
Appropriate fail-safe logic (assuming airborne when the air/ground state is unknown, or when
multiple ARINC 429 sources contradict each other) should be used in most cases; however,
when two or more ARINC 429 sources are wired and no valid data is available (including
reception of invalid data), the on-ground state may be assumed in order to enable normal
ground maintenance activities independent of other aircraft equipment.
20. CEPT-E1 data bus defined in CCITT G.703 and G.704 and ARINC 746.
The SDU designer should be aware that some aircraft will use 100 ohm “star quad” cable rather
than 120 ohm shielded twisted pair for this interface.
21. Deleted. Content consolidated into Note 15.
22. The protocol used on these interfaces is manufacturer specific.
23. The SDU should sense a momentary (typically no less than 100 milliseconds) closure of
external switches to dc ground. The resistance to airframe dc ground presented to the SDU
connector pins should be 100,000 ohms or more when open, and less than 10 ohms when
grounded. The transition from open to ground on the external switches will indicate End Call for
any ongoing call on the respective channel. If there is no ongoing call, and if ORT item D8
telephone number pre-select is enabled and ORT item D7 cockpit/hookswitch signaling is set to
latched, then the transition from open to ground shall indicate Place Cockpit Call if a telephone
number has been pre-selected.
ARINC CHARACTERISTIC 781 – Page 112
ATTACHMENT 1-4
NOTES APPLICABLE TO STANDARD INTERWIRING
24. Reference ORT item B9 for the definition of the speed (high or low) of these ARINC 429 buses.
25. This SDU output may also be wired to the EICAS/ECAM/EDU to permit that unit to monitor the
Label 270 word, which is specified in ARINC Characteristic 741, Part 2, Section 4.7.3.1.
26. Reserved.
27. Reference ORT item B2 for the definition of the speed (high or low) of this ARINC 429 bus.
28. In a dual system, the physical channel 1 and 2 interfaces on each SDU map to the AMS/ACP
logical channel interfaces per ORT items D1 and D2 (CODEC dedication) and D12 (codecs
fixed/shared. The SDU cockpit telephony signaling outputs in a dual system should only be
asserted by the SDU supporting a call with one of its physical channels. AMS/ACP systems with
interfaces for two Satcom audio channels typically use one physical channel from each SDU to
provide two operational cockpit voice channels. AMS/ACP systems with interfaces for four
Satcom audio channels typically connect both physical channels from each SDU to the
AMS/ACP system, providing redundancy for both cockpit voice channels in the event of a single
channel failure.
29. These interfaces should support both ARINC 429 low-speed and high-speed.
30. The SDU should provide an internal switch closure to ground. The “open” voltage hold-off
should be 36 Vdc max., the potential across the “closed” switch should be 1 Vdc or less and the
cold in-rush current handling capacity should be 500 mA max and the steady state value should
be 50 mA max. Some of these outputs will also be used as part of the System Configuration
Pins – see note 17 and Attachment 1-4A.
31. These two pins are cross coupled with the corresponding pins on the other SDU in a dual
system. That is SDU#1 MP09E is connected to SDU#2 MP09F and SDU#1 MP09F is
connected to SDU#2 MP09E. In addition a switch closure to airframe dc ground, defined as 0
±3 Vdc, can also be wire OR-ed with either SDU’s Dual System Disable Select and this switch
closure should disable that SDU and hence the other SDU becomes master.
32. This input is defined in ARINC Characteristic 741, Part 1.
33. The protocol used on these interfaces is manufacturer specific. The length of the cable
between the SDU and SCM should be no more than 10 m. The current on the SCM’s power
and power return lines should be limited by the SDU to no more than 300 mA. The choice of
SCM and SDU power values is manufacturer specific but they should be a value in the range
8-15 V. Furthermore the SCM should not be damaged by dc power values of up to 18 Vdc, in
case one manufacturer’s SCM is accidentally connected to another manufacturer’s SDU.
34. Fiber optic contacts are bi-directional.
35. Screen twisted triple.
36. The electrical characteristics should be as in Note 30. The functionality is manufacturer
specific.
37. Refer to Section 3.4.2.1.3, ORT items C1 and C2, regarding actual operating speed of these
interfaces.
ARINC CHARACTERISTIC 781 – Page 113
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
1.0 INTRODUCTION
1.1 Pins Used for Programming
The following 20 rear connector pins should be used for configuration
programming:
• Configuration Pin #1 - TP3D (note that this pin is a 0 V output from the
SDU).
• Configuration Pin #2 - TP3E
• Configuration Pin #3 - TP3F
• Configuration Pin #4 - TP3G
• Configuration Pin #5 - TP4D
• Configuration Pin #6 - TP4E
• Configuration Pin #7 - TP4F
• Configuration Pin #8 - TP4G
• Configuration Pin #9 - TP5D
• Configuration Pin #10 - TP5E
• Configuration Pin #11 - TP5F
• Configuration Pin #12 - TP5G
• Configuration Pin #13 - TP6D
• Configuration Pin #14 - TP6E
• Configuration Pin #15 - TP6F
• Configuration Pin #16 - TP6G
• Configuration Pin #17 - TP7D
• Configuration Pin #18 - TP7E
• Configuration Pin #19 - TP7F
• Configuration Pin #20 - TP7G
Configuration Pins #1 and #2 are used for determining if an external HPA is fitted.
Configuration Pins #3 through #20 are implemented (electrically) in the same way
and they use ‘multiplexed pin programming’, that is where each input pin can be
connected to one of the seven service availability discretes or left not connected.
Hence each of these input pin can have 8 possible states and thus, for example,
can indicate 3 independent binary configuration options.
The following discrete outputs provide the multiplexed matrix select strapping:
• Service availability discrete #1 (MP11E)
• Service availability discrete #2 (MP11F)
• Service availability discrete #3 (MP12E)
• Service availability discrete #4 (MP12F)
• Service availability discrete #5 (MP13E)
• Service availability discrete #6 (MP13F)
• Service availability discrete #7 (MP14E)
ARINC CHARACTERISTIC 781 – Page 114
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
Note: Although this pin defines 4 variables, they are not fully
independent. The five most likely combinations have been
defined in the table below.
TP4D
• SDU Number – Identifies the SDU number installed onboard the aircraft.
TP4E
• CCS Presence – Identifies whether or not a CCS is wired to the SDU
CEPT-E1 port.
• CMU #1 Configuration – Identifies if CMUI #1 is installed.
• CMU #2 Configuration – Identifies if CMUI #2 is installed.
TP4F and TP4G
• Antenna Subsystem Configuration – Identifies the antenna subsystem
configuration.
TP5D
• SDU Controller Type – Identifies whether the controller type is ARINC 739
MCDU/SCDU or ARINC 741P2 ATT.2F-42.1 WSC.
• SCDU/WSCI #1 Configuration – Identifies if SCDU/WSCI #1 is installed.
• SCDU/WSCI #2 Configuration – Identifies if SCDU/WSCI #2 is installed.
TP5E
• SCDU/WSCI #3 Configuration – Identifies if SCDU/WSCI #3 is installed.
• ARINC 429 Bus Speed to SCDU/WSCI #1, #2, #3 – Identifies the ARINC
429 Bus Speed to SCDU/WSCI #1, #2, #3.
• Swift64 Activation – Enables the Swift64 functionality.
TP5F
• ISDN #1 Presence – Identifies whether or not this port is wired.
• ISDN #2 Presence – Identifies whether or not this port is wired.
• Ethernet #1 Presence – Identifies whether or not this port is wired.
TP5G
• Ethernet #2 Presence – Identifies whether or not this port is wired.
• Ethernet #3 Presence – Identifies whether or not this port is wired.
• Ethernet #4 Presence – Identifies whether or not this port is wired.
ARINC CHARACTERISTIC 781 – Page 116
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
TP6D
• WOW logic – Identifies the meaning of the WOW signal received by MP7D
(WOW input) based on a TRUE/FALSE status of pin TP6D:
Signal received by MP7D TP6D Meaning
DC ground Not connected or connected to Aircraft on ground
MP11E or MP11F or MP12E
(WOW True)
Open circuit Not connected or connected to Aircraft in air
MP11E or MP11F or MP12E
(WOW True)
DC ground Connected to MP12F or Aircraft in air
MP13E or MP13F or MP14E
(WOW False)
Open circuit Connected to MP12F or Aircraft on ground
MP13E or MP13F or MP14E
(WOW False)
• SDU Configuration – Identifies whether or not the second SDU is installed.
• Swift Broadband Activation – Enables the Swift Broadband functionality.
TP6E
• WOW Input Presence – Identifies whether or not the MP7D
(WOW input) is wired.
• GNSS frequency check – Identifies whether or not the GNSS frequency
check is implemented, and if so the value of f limit
(1585 MHz or 1605 MHz - see Section 3.1.2.4)
• Swift Broadband Safety Activation – Enables the SwiftBroadband Safety
functionality. (Note: Swift Broadband must already be activated (TP6D).)
TP6F, 6G, 7D, 7E, 7F, 7G
• These pins are spares.
ARINC CHARACTERISTIC 781 – Page 117
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
Note: A more advanced and robust scheme could be defined for the
parity in the future. Consequently, the SDU should be able to
interpret when TP3F is connected to any service availability
discrete used for strapping (MP11F, MP12E, MP12F, MP13E,
MP13F, and MP14E).
4.0 TP3G, TP4D, TP4E, TP4F, TP4G, TP5D, TP5E, TP5F, TP5G, TP6D, AND TP6E: VARIOUS
FUNCTIONS
Example (for pin TP4E)
If TP4E is not connected then the SDU’s interpretation should be:
• A CCS is not installed, CMU#1 is not installed, and CMU#2 is not installed.
• If TP4E is connected to MP12F then the SDU’s interpretation should be:
• A CCS is installed, CMU#1 is not installed, and CMU#2 is not installed.
ARINC CHARACTERISTIC 781 – Page 118
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
Config
Pin not connected MP11E MP11F MP12E MP12F MP13E MP13F MP14E
Inputs
SDU Interpretation of Config Pins When Config Pin Input is Connected to The Selected Service Availability Discrete
TP3G Do not use other Use other Use other Use other Use other Not defined Not defined Not defined
straps – info in straps straps straps straps
ORT
SCM SCM SCM SCM SCM Not defined Not defined Not defined
installed not installed installed not installed installed
Secure ORT in Secure ORT in Secure ORT in Secure ORT in Secure ORT in Not defined Not defined Not defined
SCM SDU SDU SDU SDU
(non-modifiable) (non-modifiable) (modifiable) (modifiable)
User ORT in User ORT in User ORT in User ORT in User ORT in Not defined Not defined Not defined
SCM SDU SCM SDU SCM
TP4D This is SDU1 This is SDU1 This is SDU1 This is SDU1 This is SDU2 This is SDU2 This is SDU2 This is SDU2
Spare 1 Spare 1 Spare 1 Spare 1 Spare 1 Spare 1 Spare 1 Spare 1
Not installed Not installed installed installed Not installed Not installed installed installed
Spare 2 Spare 2 Spare 2 Spare 2 Spare 2 Spare 2 Spare 2 Spare 2
Not installed installed Not installed installed Not installed installed Not installed installed
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
ATTACHMENT 1-4A
SYSTEM CONFIGURATION PINS DEFINITION AND INTERPRETATION
ATTACHMENT 1-5
SDU FORM FACTOR
SIZE 6 MCU
#2 Shell Connector
A B C D E F G H J
1 1
5 5
7 7
A B C D E F G H J
1 A B C D E F G H J
9
1
0
1
1
1
2
1
1 2 3 2 3
1
4 3 4 1 4
1
1T 5 2T
Index code
81 (5,2,2)
9 8
2 1
11 10
4 3
12
5
7 6
For the index code pins above, the dark color represents the post.
ARINC CHARACTERISTIC 781 – Page 122
ATTACHMENT 1-5A
SDU TOP PLUG CONNECTOR LAYOUT
A B C D E F G H J K
RF TX
Pin 71
ATE ATE ATE ATE ATE ATE ATE ATE ATE ATE
1
Pin 1 Pin 2 Pin 3 Pin 4 Pin 5 Pin 6 Pin 7 Pin 8 Pin 9 Pin 10
ATE ATE ATE ATE ATE ATE ATE ATE ATE ATE
2
Pin 11 Pin1 2 Pin 13 Pin 14 Pin 15 Pin 16 Pin 17 Pin 18 Pin 19 Pin 20
A B C D E F G H J K
Call Resv Ext Call
Data from Data from Multi-Control Multi-Control Data from Data from
Place/End SCM Pwr Reset Place/End
1 MCDU 1 MCDU 1 Output Output MCDU 2 MCDU 2
Discrete +8 to +15V Discrete Discrete
A B A B A B
Input 1 Input Input 2
Rsvd
Data from Data from BITE BITE
Cockpit Voice Mfr - Specific Cockpit Voice Data from Data from
Primary Primary SCM Pwr Input Input
2 Chime Signal 0-28V Chime Signal Secondary Secondary
IRS/GNSS IRS/GNSS Return 0V From HPA From HPA
Contact 1 Discrete Contact 2 IRS A IRS B
A B A B
Output
Data from Data from Cockpit Voice SDU Data Spare Spare Cockpit Voice Data from Data from
3 CMU 1 CMU 1 Call Light to SCM Discrete Discrete SPARE Call Light CMU 2 CMU 2
A B Output 1 A Output Input Output 2 A B
Cockpit Cockpit Cockpit Cockpit
Cockpit Voice SDU Data Spare Spare Cockpit Voice
Audio Audio Audio Audio
4 Mic-On to SCM Discrete Discrete SPARE Mic-On
Input 1 Input 1 Input 2 Input 2
Input 1 B Output Input Input 2
High Low High Low
Cockpit Cockpit Cockpit Voice Spare Spare Cockpit Cockpit
SCM Data Spare Spare
Audio Audio Go Ahead ARINC ARINC Audio Audio
5 to SDU Discrete Discrete
Output 1 Output 1 Chime 429 Output 429 Output Output 2 Output 2
A Output Input
High Low Reset 1 A B High Low
Ethernet 5 Ethernet 5 Spare Spare
Spare Spare Spare SCM Data Data from Data from
10 Ethernet T 10 Ethernet T ARINC ARINC
6 Discrete Discrete Discrete to SDU GNSS to GNSS to
(Spare) from (Spare) from 429 Input 429 Input
Input Input Input B SDU A SDU B
SDU to User+ SDU to User- A B
Ethernet 5 Ethernet 5 Spare Spare Data to Data to
Spare
AES ID AES ID WOW 10 Ethernet T 10 Ethernet T ARINC ARINC CMU CMU
7 Discrete
Input A Input B Input 1 (Spare) from (Spare) from 429 Output 429 Output 1&2 1&2
Input
User to SDU+ User to SDU- A B A B
BITE BITE BITE BITE
Data from Data from Data Loader Data to Data to
Input Input TX Mute Input Input
8 CFDS CFDS Link CFDS CFDS
Top/Port Top/Port Input STBD BSU STBD BSU
A B A A B
BSU/Ant A BSU/Ant B A B
From From Crosstalk Crosstalk Dual System Dual System Crosstalk Crosstalk
To Airborne To Airborne
Airborne Airborne from other from other Select Disable to other to other
9 Data Loader Data Loader
Data Loader Data Loader SDU SDU Discrete Discrete SDU SDU
A B
A B A B I/O I/O A B
STBD STBD Data to Data to
Data from Data from Port BSU Port BSU LGA LNA BITE
BSU BSU MCDU MCDU
10 MCDU 3 MCDU 3 HPA Mute HPA Mute On/Off Input from
HPA Mute HPA Mute 1, 2, 3 1, 2, 3
A B Input A Input B Control LGA LNA
Input A Input B A B
Cabin Cabin Cabin Cabin
Service Service
CEPT-E1 CEPT-E1 CEPT-E1 CEPT-E1
POTS 1 POTS 1 Availability Availability POTS 2 POTS 2
11 Data Data Data Data
A B Discretes Discretes A B
Output Output input Input
1 2
A B A B
Service Service
Availability Availability
12
Discretes Discretes
3 4
1 2 2 3
Service Service
Ethernet 3 Ethernet 3 Ethernet 4 Ethernet 4
Availability Availability
13 from SDU from User from User from SDU
Discretes Discretes
to User + to SDU + to SDU + to User -
5 6
4 3 Service Service 1 4
Ethernet 3 Ethernet 3 Availability Availability Ethernet 4 Ethernet 4
14 from SDU from User
from User from SDU Discretes Discretes
to SDU - to User – 7 8 to User + to SDU –
Service Service
Availability Availability
15 1T 2T
Discretes Discretes
9 10
ARINC CHARACTERISTIC 781 - Page 124
ATTACHMENT 1-5C
SDU BOTTOM PLUG CONNECTOR LAYOUT
9 8
2 1
28V 115V
HOT Ethernet 7 Ethernet 6 COLD
11 10
4 3
Ethernet 9 Ethernet 8
28V CHASSIS
GND GROUND
12
Ethernet 10
115v 5
HOT
Antenna
Control
DLNA (CSDU
only)
7 6
ARINC CHARACTERISTIC 781 – Page 125
ATTACHMENT 1-6
SDU CONFIGURATION MODULE FORM FACTOR
0.106 (2.7)
MAX
M3 Earth stud
4.0 3.0
(101.6) 3.75 3.5 3.25 (76.2) 15 way D type male with
(nom) (95.25) (88.9) (82.55) (nom) locking screws
0.25 (6.35)
0.25 (6.35)
0.6 (15.24)
3.3 (83.82)
3.9 (99.06)
1.0 (25.4)
4.5 (114.3)
(nom)
Note:
1. All dimensions in inches (mm) unless otherwise stated. Tolerance of
fixing centers ±0.004 (±0.1).
Tolerance of fixing holes +0.004, -0.0 (+0.1, -0.0).
All other tolerances ±0.015 (±0.4).
Fixing holes are designed for either M3 or 4-40 UNC screws. Earth
stud is metric.
ARINC CHARACTERISTIC 781 – Page 126
ATTACHMENT 1-6A
SDU CONFIGURATION MODULE CONNECTOR LAYOUT
Reserved Power
Data to Data to Data from Data from RS-232 Spare Chassis Input +8 to
SDU A SDU B SDU A SDU B Gnd Ground +15V
1 8
9 15
ATTACHMENT 1-7A
SMALL FLANGE MOUNT HPA FORM FACTOR
Notes:
1. Small form factor FMHPA may be mounted in any orientation using
the mounting surface defined.
2. Possible alternative cooling spud orientation to accommodate
installation constraints.
3. The flange-mount HPA will have three connectors, located as shown:
a. J1 - Power/Control MIL-DTL-38999 Series III Insert Arrangement
17-26
b. J2 - RF Input; TNC Female
c. J3 - RF Output; N Type Female
4. Air filter/mesh may be necessary to prevent debris interference in
applications with drawn airflow.
ARINC CHARACTERISTIC 781 – Page 129
ATTACHMENT 1-7B
LARGE FLANGE MOUNT HPA FORM FACTOR
Notes:
1. The mounting configuration is critical to operation in conditions of loss
of cooling (See Section 2.2.2.3). The natural air flow shown
represents that of a horizontally mounted FMHPA. Alternative
mounting configurations should be discussed with FMHPA
manufacturers.
2. Key features are the four mounting holes and the locations of the
connectors and airflow adaptor. Clear and unobstructed access to
mounting fasteners should be provided to facilitate aircraft installation.
ARINC CHARACTERISTIC 781 – Page 130
ATTACHMENT 1-7B
LARGE FLANGE MOUNT HPA FORM FACTOR
Pin Description
Pin A Chassis Ground
Pin B LNA Control
Pin C Future Spare
Pin D Future Spare
Pin E 115 Vac Cold
Pin F 115 Vac Hot
Pin G +28 Vdc Hot
Pin H LNA BITE
Pin J LNA BITE Ground
Pin K +28 Vdc Return
H A B
G K J C
F E D
90°
-90°
ARINC CHARACTERISTIC 781 – Page 136
ATTACHMENT 1-10
HIGH GAIN AND INTERMEDIATE GAIN TOP MOUNT ANTENNA FOOTPRINT
MAXIMUM DIMENSIONAL OUTLINE
5.91" [MIN]
(150.0 mm)
2.95"
KEEP-AWAY ZONE (75.0 mm)
HGA & IGA:
maximum width
14.4" 2.95" [MIN]
(365.8 mm) (75.0 mm)
Notes:
1. The Antenna should have a removable aft radome fairing to allow
access to connectors, cables and aircraft skin penetration area.
2. Connecting Control and RF cables should be routed through a feed-
through skin penetration hole on the aircraft fuselage, which can be
anywhere within the “keep away zone.”
3. The antenna should be installable or removable while the aircraft
cable installation remains in place.
4. The cable routing design should allow the cables to be routed from
the skin penetration area to the antenna bulkhead connectors.
5. Sufficient access volume should be provided for cable routing and
hand/tool access to prevent over bending the cabling beyond its bend
allowances. As general guidance, coaxial cable should not be bent at
a radius of less than 10 times its diameter for permanent installation,
or less than 5 times its diameter during the connecting (insertion or
removal) process.
6. Should a tool be required for cable installation, such tool should be
clearly identified in the manufacturer’s installation and maintenance
procedures, and be supplied upon request by the antenna
manufacturer.
7. Antenna adapter plate design may need to be customized to
accommodate the keep-away zone requirements.
ARINC CHARACTERISTIC 781 – Page 137
ATTACHMENT 1-10A
ANTENNA COAXIAL CABLE INTERFACE
BASEPLATE
ATTACHMENT 1-11
NO LONGER USED
14 1
13 2
15
12 3
21
11 16 4
20
22
17
10 19 5
18
9 6
8 7
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
Figure 1 - Deleted
Figure 2 - Deleted
Figure 3 - Deleted
ARINC CHARACTERISTIC 781 – Page 141
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
BIT 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
Label 144
Function P SSM Undefined Reserved DIS SDI
[23] [4]
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 1 0
4 4 1
Figure 4 – Antenna Control Word - ARINC 781 SDU to ARINC 741/781 Antenna
ARINC CHARACTERISTIC 781 – Page 142
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
BIT 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
E S
G
Q p
a Label 144
Function P SSM I a Discretes Gain SDI
I [4]
D r
n
[43] e
1 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 1 1 0
4 4 1
Discretes Values
Bit Description 0 1
18 Antenna Location Top Reserved
19 Antenna Type HGA IGA
20 Reserved
21 Reserved
22 Reserved
23 Reserved
24 HGA/IGA LNA Status Disabled Enabled
25 Reserved
26 Tracking Mode Open Reserved
Figure 5 – Antenna Status Word - ARINC 781 Antenna to ARINC 741/781 SDU
ARINC CHARACTERISTIC 781 – Page 143
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
BIT 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
Label 350
Function P SSM C Undefined Discretes SDI
[4]
0 0 0 0 0 0 0 1 0 0 0 1 0 1 1 1
0 5 3
Figure 6 – Antenna Maintenance Word - ARINC 781 Antenna to ARINC 741/781 SDU
ARINC CHARACTERISTIC 781 – Page 144
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
BIT 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
(MSB) Azimuth (LSB) (MSB) Elevation (LSB) Label 152
Function P SSM
[25] [24] [26] [32]
0 1 0 1 0 1 1 0
2 5 1
Sign/Status Matrix
Bits
Coding
31 30
0 0 Failure Warning
0 1 No Computed Data
1 0 Functional Test
1 1 Normal Operation
Figure 7 – Open Loop Steering Word - ARINC 781 SDU to ARINC 741/781 Antenna
ARINC CHARACTERISTIC 781 – Page 145
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
P SSM A16-----------------------------------------------------------------------------------------------A1 Octal Label
MSB 220
[50]
0 0 0 0 1 0 0 1
1 Label 1
2 . 2 0
3 . 0
4 . 1
5 . 2 0
6 . 0
7 . 0
8 Label 0 0
9 PAD 47
10 . 47
11 . 47
12 . 47
13 PAD 47
14 Swift64 Base Fwd ID (Part 1) A1 (MSB) 48
15 . A2 48
16 . A3 48
17 . A4 48
18 . A5 48
19 . A6 48
20 . A7 48
21 . A8 48
22 . A9 48
23 . A10 48
24 . A11 48
25 . A12 48
26 . A13 48
27 . A14 48
28 . A15 48
29 Swift64 Base Fwd ID (Part 1) A16 48
30 SSM
31 SSM
32 Parity Odd
Sign/Status Matrix (SSM) Definition per ARINC Specification 429 for DISC discrete
data words.
Bits
Meaning
31 30
0 0 Normal Operation
0 1 NCD
1 0 Functional Test (Not Used)
1 1 Failure Warning (Not Used)
Figure 8 – Label 220 Inmarsat Swift64 Base Forward ID Word #1 - (Discrete)
ARINC CHARACTERISTIC 781 – Page 146
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
P SSM A24------------------------------------------A17 Octal Label
LSB 221
[50]
1 0 0 0 1 0 0 1
1 Label 1
2 . 2 0
3 . 0
4 . 1
5 . 2 0
6 . 0
7 . 0
8 Label 1 1
9 PAD 47
10 . 47
11 . 47
12 PAD 47
13 Swift64 Base Fwd ID (Part 2) A17 48
14 . A18 48
15 . A19 48
16 . A20 48
17 . A21 48
18 . A22 48
19 . A23 48
20 Swift64 Base Fwd ID (Part 2) A24 (LSB) 48
21 PAD 47
22 . 47
23 . 47
24 . 47
25 . 47
26 . 47
27 . 47
28 . 47
29 PAD 47
30 SSM
31 SSM
32 Parity Odd
Sign/Status Matrix (SSM) Definition per ARINC Specification 429 for DISC discrete
data words.
Bits
Meaning
31 30
0 0 Normal Operation
0 1 NCD
1 0 Functional Test (Not Used)
1 1 Failure Warning (Not Used)
Figure 9 – Label 221 Inmarsat 24-Bit Swift64 Base Forward ID Word #2 - (Discrete)
ARINC CHARACTERISTIC 781 – Page 147
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
Where:
• aaaa = Minor Model (e.g., -400, -800, -500).
• xbbb = Major Model (e.g., 787, 777).
• ccc = Airframe Manufacturer Specific.
• ddd = Airframe Manufacturer Specific.
The following xbbb have been reserved by Boeing:
x bbb Aircraft Type
0 000 Boeing A/C #1
0 001 Boeing A/C #2
0 010 Boeing A/C #3
0 011 Boeing A/C #4
0 100 Boeing A/C #5
0 101 Boeing A/C #6
0 110 Boeing A/C #7
0 111 Boeing A/C #8
1 000 RSV
1 --- RSV
1 111 RSV
Sign/Status Matrix (SSM) Definition per ARINC Specification 429 for discrete data
words.
Bits
Meaning
31 30
0 0 Normal Operation
0 1 NCD
1 0 Functional Test (Not Used)
1 1 Failure Warning (Not Used)
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
BIT 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
Function P Spare Satellite System Type SDU SAL Label 172
X 0 0 0 0 0 0 0 0 0 0 0 X X X 1 X X X X X X X X 0 1 0 1 1 1 1 0
2 7 1
Notes
Notes 1-41 are numbered the same as the notes in ARINC 741, Attachment 2.
0. The SDU to/from antenna interface is based on ARINC 741, and supports the following
combinations of equipment:
SDU Antenna
ARINC 781 ARINC 781
ARINC 781 ARINC 741 (top mount or side mount)
ARINC 741 ARINC 781
This attachment specifies the output words from the ARINC 781 SDU and antenna, and these
have been designed to allow ARINC 781 and ARINC 741 equipment to interoperate. For the
definition of output words from ARINC 741 equipment, please refer to ARINC 741. The
antenna does not need to know what type of SDU it is connected to.
1. Not used.
2. Not used.
3. Not used.
4. RATE: 5-10 words per second. This implies that the interval between the start of two words
with the same label number should always be between 100 and 200 ms.
5. Not used.
6. Not used.
7. Not used.
8. Reserved.
9. Not used.
10. Not used.
11. Not used.
12. Not used.
13. Not used.
14. When Bit 11 or 25 is set, bits 14, 15, 16, 18, 19, and 22 are used to provide further detail (if
known). “Failed” indicates that an immediate maintenance action is recommended (class 1).
‘Warning’ indicates that the system is expected to continue to operate but with degraded
capability (class 3).
15. Reserved.
16. Not used.
17. The SSM should be used as follows:
FUNCTIONAL TEST = Test in Progress (ignore
DISCRETE field, invalid).
NORMAL OPERATION = No failures detected in Antenna.
FAILURE WARNING = Failure(s) detected in the Antenna and indicated in DISCRETE
field; does not include failures in the LNA/Diplexer, Control
ARINC CHARACTERISTIC 781 – Page 150
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
32. RATE: 10-20 words per second. This implies that the interval between the start of two words
with the same label number should always be between 50 and 100 ms.
33. Reserved.
34. Not used.
35. The SDI bits should be set to the code of the Antenna (s) intended to receive and process the
Control Word. An ARINC 781 antenna should always respond to SDI bits set to ALL CALL or
TOP.
36. The Antenna TX Gain field is used to report gain variations at different steering angles to the
SDU. The SDU will use this information from the selected subsystem to vary the HPA gain
accordingly so as to maintain the same effective transmitted power from position to position,
except for changes commanded by the GES.
37. Not used.
38. “If a parameter can only be tested in certain circumstances (e.g., LNA/Diplexer Failed
[Antenna Maintenance Word bit 20] while the LNA is switched on), the failure indication
should persist until a subsequent test or until the next monitored result indicates that the
status has changed to “OK.”
39. Not Used.
40. If the LNA was being commanded “off” before performing a Functional Test, the LNA should
only be turned “on” momentarily (< 100 ms) during Functional Test.
41. Same as Note 17 except that there is no application for the No Computed Data State, which
therefore should not be used. The same requirements as for the Failure Warning indication
apply to the respective Discretes failure bit indications in the Maintenance Word. Failure
Warning and respective DISCRETES failure bit indications should persist until all conditions
and parameters are subsequently re-tested by appropriate tests and are found to be “OK.”
42. Not used.
43. The Equipment Identifier Bit (EQID) bit No 29 should always be set to “1”, identifying the
antenna as ARINC 781 compliant.
44. After the antenna has performed a reset it should set bit 24 for 10 consecutive antenna
maintenance words.
45. The antenna should set Bit 29 and respond with Configuration Data as per Attachment 2A.
At conclusion of Configuration Data reporting the antenna should clear this bit.
46. Bit 18 is equivalent to “Any Other BSU Parameter” in ARINC 741.
47. All PAD bits are set to binary 0.
48. A1 - A24 represent Forward ID “address” bits 1 - 24.
49. The following list provides the labels that are reserved to SDU/antenna manufacturers for
SDU to antenna communications on the SDU multicontrol bus common to both the antenna
and external HPA when fitted. These labels shall not be used by SDU/external HPA
manufacturers for communications from the SDU to the external HPA on the multicontrol bus:
• Labels 145 to 149
• Label 153
The following table provides the list of labels that are used by SDU/antenna manufacturers
for SDU to antenna communications on the SDU multicontrol bus common to both the
antenna and external HPA when fitted. These labels could be used by SDU/external HPA
ARINC CHARACTERISTIC 781 – Page 152
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
manufacturers for communications from the SDU to the external HPA on the multicontrol bus
as far as they are used for their intended purpose as defined in the Label description field:
ARINC Label Label Description
110 GNSS Latitude
111 GNSS Longitude
125 Universal Time Coordinated
150 Universal Time Coordinated
Manufacturer- specific Status
171 Note: the antenna or external HPA should consider labels 371 and 377 when
processing this label
214 ICAO Address Part 1
216 ICAO Address Part 2
227 CFD BITE Summary
251 Flight Leg Counter
254 Hybrid Latitude
255 Hybrid Longitude
257 Hybrid Latitude, Fine
258 Hybrid Longitude, Fine
260 Date
251 Flight Number
275 Discrete #6 ICAO Address Part 1
276 Discrete #7 ICAO Address Part 2
277 General Test Label
310 Present Position, Longitude
311 Present Position, Latitude
361 Altitude (Inertial)
371 General Aviation Equipment Identifier
Equipment ID
Note: the Antenna Equipment ID is 341 (corresponding to ACU in ARINC 429
377
characteristic) and the external HPA equipment ID is 241 (as defined in ARINC
Characteristic 429)
50. The following labels are used for Swift64 Forward IDs that are obtained from a centralized
source on certain aircraft:
• SDU #1: FWD ID #1 Word #1 = Label 220, Word #2 = Label 221.
• SDU #1: Reserved FWD ID #2 Word #1 = Label 222, Word #2 = Label 223.
• SDU #2: FWD ID #3 Word #1 = Label 224, Word #2= Label 225.
• SDU #2: Reserved FWD ID #4 Word #1 = Label 226, Word #2 = Label 227.
Labels 220 - 221 (and 222 - 227) Inmarsat Swift64 Base Forward ID Words #1 and #2 -
(Discrete)
Swift64 operation requires a 24-bit Forward ID for each Swift64 channel and a corresponding
24-bit Return ID, which the SDU may derive from the Forward ID via an internal look-up table.
Some aircraft are able to supply Forward ID data from a centralized source to the SDU on its
AES ID and/or CMU ARINC 429 inputs. The Swift64 Forward ID is structured and
communicated similarly to the ICAO Aircraft Address (reference labels 214 and 216). It
should be transmitted by the source system at a nominal rate of 1 Hz.
For a multi-channel SDU, labels 220 and 221 communicate the Forward ID for the first (base)
Swift64 channel of the SDU number 1, and the SDU may derive its additional Forward IDs
from this base ID via an internal look-up table. Alternatively, labels 222/223, formatted
identically to labels 220/221, may be used to explicitly communicate the Forward IDs for
Swift64 channel number 2 of the SDU number 1.
ARINC CHARACTERISTIC 781 – Page 153
ATTACHMENT 2
ARINC 429 LABELS AND WORD FORMATS USED IN THE AVIATION SATELLITE COMMUNICATIONS SYSTEM
In a dual satcom installation, labels 224/225 and 226/227, formatted identically to labels
220/221, may be used to explicitly communicate the Forward IDs for Swift64 channel numbers
1 and 2 of the SDU number 2.
The Forward ID is typically specified as a six-digit hexadecimal number (rarely as a seven-
digit decimal number). In written form, it follows the usual big-endian convention of placing
the most-significant bit (MSB) and most-significant digit first (left-most), and the least-
significant bit (LSB) and least-significant digit right-most. Note, however, that the MSB is
designated as ID (address) bit A1, and the LSB is designated as A24.
The following example illustrates the coding for "Normal Operation" labels 220 and 221 for
Forward ID 23 A5 1F hex (2 336 031 decimal, 10 722 437 octal, 0010 0011 1010 0101 0001
1111 binary):
32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
P SSM A16--------------------------------------------------------------- A1 Octal Label
MSB 220
0 0 0 1 0 1 0 0 1 0 1 1 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1
32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1
P SSM A24--------------------------A17 Octal Label
LSB 221
1 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 0 0 0 0 0 0 0 1 0 0 0 1 0 0 1
51. This label is used for Aircraft type definition that is obtained from a centralized source on
certain aircraft.
Note: labels to be confirmed by AEEC (Boeing to coordinate). The objective is to have these
labels specified in ARINC 429 P2 but in the interim, these labels are described in this
supplement.
52. For full details, reference ARINC Characteristic 761 Attachment 2 Item 2, which defines a
satcom multi-bearer system (MBS), wherein the ARINC 761 SDU may support multiple
satellite systems (e.g., Inmarsat and Iridium). This capability is also defined from the CMU
perspective in ARINC Characteristic 758 (Supplement 2 and subsequent, including in
Attachment 6 Table 6-16). Included in this capability is the MBS SDU's use of the ARINC 429
label 172 subsystem identifier word, transmitted at a nominal rate of 1 Hz on its output bus to
the CMU (and EICAS/ECAM/EDU), to indicate the satellite systems through which it is
capable of providing service. In ARINC 761, label 172 thus has a unique definition and usage
of bits 17-29 that are only defined as pad (zero) bits in the generic ARINC Specification 429
definition of label 172. (ARINC 758 has similar unique definitions for some of the bits in its
label 172 output to the SDU and other air/ground data link equipment.)
The details of an MBS SDU beyond this definition of label 172 are beyond the scope of
ARINC Characteristic 781. However, at a minimum, an ARINC 781 SDU will set bit 17 to
indicate support of the Classic Aero service, and may also set other bits in the Satellite
System Type field as applicable to the specific SDU design.
ARINC CHARACTERISTIC 781 – Page 154
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
1.0 INTRODUCTION
This attachment defines how an ARINC 781 intermediate or high-gain antenna, on
request from an ARINC 781 SDU or a compatible ARINC 741/761 SDU, provides
configuration data to the SDU for onward transmission to the central maintenance
system.
The configuration data includes:
• LRU name
• LRU part number
• LRU serial number
• Software application name
• Software part number
• Optional additional undefined configuration data
2.0 PROTOCOL
This protocol is based on a subset of that specified in ARINC Report 604,
Appendix 2.
The antenna configuration data may be requested by the SDU at any time once the
antenna resets and initializes. This data is typically requested once per power cycle.
Configuration data is requested by the SDU via the label 227 command word, using
the “Configuration” function select code (see Section 3.2). Upon receipt of the
“Configuration” function in label 227, the antenna should set the “In Progress” bit
(29) in its Antenna Maintenance Words (label 350) within two seconds. When the
SDU notes the set “In Progress” bit from the antenna, it sends Label 227 with the
“Null” function selected as an acknowledgement. The antenna then proceeds with
its data transmission. The antenna may alternatively proceed with its data
transmission directly after setting the “In Progress” bit, without waiting for the “Null”
function in Label 227.
The above definition regarding Label 227 represents the minimum functionality for
SDU compatibility with the protocol. The SDU may transmit label 227 as described
above (i.e., a minimum of two times per power cycle), or it may transmit short bursts
(e.g., four words with minimum inter-word time gaps of four bit times) of each
Configuration/Null command to help ensure reception, or it may periodically transmit
label 227 continuously (with the “Null” function indicated when configuration data is
not being requested). If the SDU does transmit label 227 periodically, the
transmission interval should nominally be one second (100 ms minimum), e.g.,
between Null words or between a Configuration word and the subsequent Null word.
For compatibility with ARINC 741/761 SDUs not implementing this protocol, the
antenna must be tolerant with not receiving any label 227 words. The antenna
should not raise any ARINC 429 bus inactivity failure (or any other failure) based on
label 227.
After the “In Progress” bit in the antenna Maintenance Word (Label 350) has been
set by the antenna (and possibly after waiting for acknowledgement by the SDU with
a label 227 “Null” word), the antenna transmits its configuration data using label 356
(see Section 3). The STX word should be initiated no later than two seconds after
either (1) the antenna sets its Label 350 word bit 29 to 1; or, if it is required by the
antenna, (2) the antenna’s receipt of the SDU’s “Null” acknowledgement word. The
ARINC CHARACTERISTIC 781 – Page 155
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
transmission interval of label 356 words (while they are active) should be between
50-250 ms.
Although the application of this protocol is intended for Antenna/SDU
communications, its original ARINC 604 application was oriented to ARINC 739A
MCDU displays. The response data transmitted is formatted so that it can be
displayed with up to 24 characters per row and up to 10 rows per “page”. All data is
transferred using a subset of the ISO 8859-5 alphabet. Only one “page” of data
should be sent from the antenna to non-specific SDUs using the protocol defined
here. If it is desired to send more than one “page” of data to specific SDU models
(e.g., for enhanced maintenance functionality between a same-manufacturer or
otherwise compatible antenna and SDU, which is beyond the scope of this
definition), then one or more manufacturer-specific label 227 Function Select codes
should be used by the SDU to request such additional information from a compatible
antenna.
The data response words are transmitted in the following order:
1. The STX word is sent.
2. The SYN word is sent.
3. The first three characters (starting with information for row 1 column 1) are
sent.
4. The next three characters for this row are sent. (More words are transmitted
as required for row 1.)
5. At the conclusion of row one, the ETX word is sent, indicating that the
character that follows it is for column 1 of the next row.
6. The first three characters (starting with information for the next row column 1)
are sent.
7. The next three characters for this row are sent. (More words are transmitted
as needed for this row.)
8. The ETX word is sent indicating that the character that follows it is for column
1 of the next row.
Steps 6 through 8 are repeated as needed to transmit all of the information except
the information for the last word of the last row. The ETX word is not transmitted for
the last row, and an EOT word is sent instead, indicating the end of block.
When all of the configuration data has been transmitted to the SDU, the antenna
resets the “In Progress” bit (29) in the antenna Maintenance Word (Label 350).
The SDU should record all received configuration data, including any that it has no
specific knowledge of from “rows” 6 through 10. The additional data should simply
be recorded verbatim and made available for inspection
(e.g., via a maintenance port).
The SDU should not raise any failures due to the non-successful receipt of the
antenna configuration data (including protocol errors). Lack of this data should be
indicated in a manner consistent with the central maintenance system’s
requirements (e.g., as all “dash” (-) characters).
ARINC CHARACTERISTIC 781 – Page 156
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
32 31 25 24 13 12 11 10 09 08 01
Function Select
000 0000 (0 10 ) = Null
000 0001 (1 10 ) = Reserved for future use
000 0010 (2 10 ) = Configuration Data
000 0011 (3 10 ) = Manufacturer-specific (see Section 2)
000 0100 (4 10 ) through 000 1100 (12 10 ) = Reserved for future use
000 1101 (13 10 ) through 111 1111 (127 10 ) = Manufacturer-specific
Equipment ID
0001 1000 0001 (181 H = ARINC 781 satcom antenna)
SDI
SDI CODE
BITS
CODING
10 9
0 0 All Call
0 1 Top
1 0 Reserved
1 1 Reserved
1. When the antenna receives a “Null” command word from the SDU, it takes no
action.
2. When the antenna receives a “Configuration” command word from the SDU,
it responds with its configuration data.
An ARINC 781-compliant antenna responds to Command words with the satcom
equipment ID set to 181 H when the appropriate SDI code is set. If the SDI code ‘All
Call’ or ‘Top’ is encoded in the SDI field, the antenna responds to the command
ARINC CHARACTERISTIC 781 – Page 157
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
word. If the SDI code is not equal to ‘All Call’ or ‘Top’, the antenna does not
respond.
1.5 3.3 STX Word (Start of Text)
CONFIGURATION DATA LABEL 356
32 31 25 24 19 18 17 16 09 08 01
BITS DEFINITIONS
1-8 Octal Label 356
9 - 16 Number of 32-bit words to be transmitted including the initial and final words.
17 - 18 SDI
19 - 24 Unused
25 - 31 ISO 8859-5 code for “STX”
32 31 25 24 23 17 16 15 09 08 01
BITS DEFINITIONS
1–8 Octal Label 356
9 – 15 Present Data Page Number (normally 1 – see Section 2)
16 Unused
17 - 23 Total Number of Data Pages Available (normally 1 – see Section 2)
24 Unused
25 - 31 ISO 8859-5 code for “SYN”
ARINC CHARACTERISTIC 781 – Page 158
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
32 31 25 24 23 17 16 15 09 08 01
BITS DEFINITIONS
1–8 Octal Label 356
9 – 15 First/Next Character of the Configuration Data
16 Unused
17 - 23 Next Character of the Configuration Data
24 Unused
25 - 31 Next + 1 Character of the Configuration Data
32 31 25 24 23 17 16 15 09 08 01
The ETX word is used to indicate that the next character is to be displayed in column
1 of the next row (similar to CR/LF). All data is transferred using a subset of the ISO
8859 #5 alphabet as specified in Section 4. The ETX code must appear in bits 25-
31 of the word. Any character positions in the ETX word not needed to complete the
current row should be filled with the NUL code (0000000).
32 31 25 24 23 17 16 15 09 08 01
The EOT code must appear in bits 25-31 of the word. Any character positions in the
EOT word not needed to complete the current row should be filled with the NUL
code (0000000).
ARINC CHARACTERISTIC 781 – Page 159
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
BITS DEFINITIONS
1–8 Octal Label 356
9 – 15 Configuration Data character or NUL
16 Unused
17 – 23 Configuration Data character or NUL
24 Unused
25 - 31 ISO 8859-5 code for “EOT”
SDU Antenna
Label 227 Function Select =
Configuration
2 sec max Label 350 Bit 29 = 1 (Config Data In Progress)
Label 227 Function Select = Null -- Note 1--
2 sec max Label 356 = STX (Start of Transmission)
50- 250 ms Label 356 = SYN (Page Sync)
Label 356 = Intermediate Word (Text)
Label 356 = Intermediate Word (Text)
... ...
Label 356 = ETX (End of Text/Line)
Label 356 = Intermediate Word (Text)
Label 356 = Intermediate Word (Text)
... ...
Label 356 = ETX (End of Text/Line)
Label 356 = Intermediate Word (Text)
... ...
Label 356 = Intermediate Word (Text)
Label 356 = EOT (End of Transmission/Page)
Label 350 Bit 29 = 0 (Config Data Complete)
Notes:
1. The antenna may start transmitting STX directly after transmitting
Label 350 with Bit 29 set (i.e., without requiring the SDU’s “Null”
acknowledgement word).
ARINC CHARACTERISTIC 781 – Page 160
ATTACHMENT 2A
ANTENNA CONFIGURATION DATA REPORTING
All rows are left justified and contain no more than the maximum number of
characters for each line as listed in the table.
ARINC CHARACTERISTIC 781 – Page 161
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. "OK" status shall always be indicated for equipment not installed or data not used, as
determined by the Satellite Data Unit system configuration pins or its design.
2. Bit reserved in ARINC 781 to preserve compatibility with Central Maintenance Computers
designed per ARINC 741. Bits should always be set to “OK” in an ARINC 781 SDU.
3. Implementation required if the SDU is designed to interface with ARINC 741 antenna systems.
4. Applicable to any top-mount diplexer in an ARINC 781 antenna system (high gain, intermediate
gain, low gain) or a top-mount diplexer in an ARINC 741 top-mount high gain antenna system or
a port diplexer in an ARINC 741 side-mount high gain antenna system.
5. Applicable to a top-mount high gain or intermediate gain antenna in an ARINC 781 antenna
system or a top/port antenna in an ARINC 741 top-mount high gain antenna system.
ARINC CHARACTERISTIC 781 – Page 163
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. "OK" status shall always be indicated for equipment not installed or buses not used, as
determined by the Satellite Data Unit system configuration pins or its design.
2. An "Inactive Bus" report, if applicable, will supersede a data input "Failure" report.
3. Bits reserved in ARINC 781 to preserve compatibility with Central Maintenance Computers
designed per ARINC 741.
4. Implementation required if the SDU is designed to interface with ARINC 741 antenna systems.
ARINC CHARACTERISTIC 781 – Page 164
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Note: The use of this word is optional. The format is being defined only to document the word.
The field "Bit Error Rate" indicates the number of raw bit errors detected since the last report
was generated. The report should be generated every 3000 channel bits, at a 600 bps P-
channel rate, this would be a new word every 5 seconds. The data will be in binary format
(positive only), and range from 0 to 3000 maximum.
ARINC CHARACTERISTIC 781 – Page 165
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. Pin numbers are relative to the SDU.
2. "OK" status shall always be indicated for equipment not installed or buses not used, as
determined by the Satellite Data Unit system configuration pins or its design.
3. An "Inactive Bus" report, if applicable, will supersede a data input "Failure" report.
4. Bit reserved in ARINC 781 to preserve compatibility with Central Maintenance Computers
designed per ARINC 741. ARINC 781 SDUs should always set this bit to “OK.”
5. Bit used if the SDU is designed to interface with ARINC 741 high gain antenna systems.
6. Bit used if the SDU is designed to interface with ARINC 741 HPAs.
ARINC CHARACTERISTIC 781 – Page 166
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. “OK” status should always be indicated for equipment not installed or buses not used, as
determined by the Satellite Data Unit system configuration pins or its design.
2. Logic “1” state = one or more of channel modules 6 and beyond have failed;
Logic “0” state = all of channel modules 6 and beyond are OK.
3. Bits reserved in ARINC 781 to preserve compatibility with Central Maintenance Computers
designed per ARINC 741.
4. Used if the SDU is designed to interface with ARINC 741 HPAs.
ARINC CHARACTERISTIC 781 – Page 167
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. “OK” status should always be indicated for equipment not installed or buses not used, as
determined by the Satellite Data Unit system configuration pins or its design.
2. RFU HSDU refers to a High Speed Data Unit LRU that conforms in general to the wiring and
form factor of a Radio Frequency Unit.
3. Intended for SDUs with internal high power amplifiers.
4. Bits reserved in ARINC 781 to preserve compatibility with Central Maintenance Computers
designed per ARINC 741.
ARINC CHARACTERISTIC 781 – Page 168
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. “OK” status should always be indicated for equipment not installed or buses not used, as
determined by the Satellite Data Unit system configuration pins or its design.
ARINC CHARACTERISTIC 781 – Page 169
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. “OK” status should always be indicated for equipment not installed or buses not used, as
determined by the SDU system configuration pins or the SDU design.
2. RFU HSDU refers to a High Speed Data Unit LRU that conforms in general to the wiring and
form factor of a Radio Frequency Unit.
3. Bits reserved in ARINC 781 to preserve compatibility with Central Maintenance Computers
designed per ARINC 741.
ARINC CHARACTERISTIC 781 – Page 170
ATTACHMENT 2B
BIT-ORIENTED FAULT REPORTING PROTOCOL
Notes:
1. “OK” status should always be indicated for equipment not installed or buses not used, as
determined by the Satellite Data Unit system configuration pins or its design.
ARINC CHARACTERISTIC 781 – Page 171
ATTACHMENT 3
COCKPIT VOICE – SAT PHONE STATE MACHINE FOR NORMAL OPERATION
ATTACHMENT 4-A
ARINC 781 SDU FUNCTIONS MATRIX
The SDU functions matrix seeks to define what features and functions are typically
included in which model or version of satcom systems. ARINC 781 differs from
previous satcom specifications in that various features of the system can be optional.
The following provides two examples of representative versions of satcom systems.
Cockpit & Cabin Cabin-Only
Options/
Section Feature/Function Satcom Satcom
Comments
(Example) (Example)
2.10 BITE (CFDS interface) OEM CFDSs All None
3.1.1 Inmarsat Services
1
3.1.1.2 Classic Aero Channels: 0-4 2 0
1
3.1.1.3 Swift64 Channels: 0-4 2 4
1
3.1.1.4 SwiftBroadband Channels: 0-4 2 4
3.1.2 Radio Interfaces
3.1.2.5 User/Radio Interfaces
Mapping
Non-ATC 4-wire Analog Yes No
Cockpit Voice
ATC Cockpit 4-wire Analog Yes No
Voice
Cabin Voice 2-wire POTS/SLIC Yes Yes
Non-ATC Data-2/3, Ethernet/ Ethernet/
Cockpit Data Ethernet/ARINC 664 ARINC 664 ARINC 664
ATC Cockpit Data-2/3, Data-2/3 None
Data Ethernet/ARINC 664
Cabin Data CEPT-E1, ISDN, Ethernet Only All
Ethernet, 2 Wire
POTS/SLIC
3.2.1 Pilot System Interfaces
for Voice
3.2.1.2 MCDU Menus OEM Specific OEM Compliant None
3.2.1.6 SAT Phone – Aero-H/H+/I Yes None
Classic Aero
3.2.1.7 SAT Phone - 4 kbps AMBE+2, VoIP Both None
SwiftBroadband
3.2.1.8 SAT Radio – VoIP Yes None
SwiftBroadband
3.2.1.9 Williamsburg Yes None
SDU Controller
3.2.4 Ethernet PPPoE, DHCP, SNMP, All All
Telnet, Routed IP
3.3 Software Data Loader ARINC 615-3/4, Both ARINC 615A
ARINC 615A
3.4.1 Dual Satcom
3.4.1.1 Classic Aero Independent, Cold Warm Standby, None
Operations Standby, Warm Cooperative
Standby, Hot Standby,
Cooperative
3.4.1.2 SwiftBroadband & Independent, Cold Independent, Independent,
Swift64 Standby, Warm Cooperative Cooperative
Operations Standby, Hot Standby,
Cooperative
3.4.3 Security Incorporated Yes No
3.6 Future Growth
ARINC CHARACTERISTIC 781 – Page 173
ATTACHMENT 4-A
ARINC 781 SDU FUNCTIONS MATRIX
Notes:
1. SDU manufacturers should clearly state what combination of channels is supported.
ARINC CHARACTERISTIC 781 – Page 174
ATTACHMENT 4-B
ARINC 781 SDU INTERFACES MATRIX
The SDU interfaces matrix seeks to define which interfaces are typically included in
which model or version of satcom systems. ARINC Characteristic 781 differs from
previous satcom specifications in that various interfaces of the system can be
optional. The following provides two examples of representative versions of satcom
systems.
Cockpit & Cabin Cabin-Only
Options/
Interfaces on ARINC 600 Connector Satcom Satcom
Comments
(Example) (Example)
Power
115 Vac V/F Yes Yes
28 Vdc No No
Satcom Interfaces
Tx RF (Power) 30W 25W
BSU Control A781 HGA/IGA,
A741 Top, All A781 HGA/IGA
A741 Side
LGA Control No No
External HPA Control A741, A781 A781 No
HPA Mute Yes No
SCM Yes Yes
Other SDU (dual) Yes No
User Interfaces 2 2
10/100BaseT on size 22 pins 2 2
10/100BaseT (Cockpit data) on Quadrax No No
ARINC 664 Copper (Cockpit voice & data) No No
ARINC 664 Fiber (Cockpit voice & data) No No
ISDN 2 2
CEPT-E1 No No
(C)MU 2 No
Cockpit Voice (4-wire & discretes) Yes No
MCDU 3 No
POTS/SLIC No No
BITE/Maintenance Interfaces
CFDS / CMC on ARINC 429 Yes Yes
ADL (ARINC 615/429) Yes Yes
Service Availability Status discretes Yes Yes
ATE pins Yes Yes
Miscellaneous Interfaces
AES ID (ARINC 429) Yes No
IRS/GNSS 2 2
Configuration Straps Yes No
WOW Yes Yes
Tx Mute No No
ARINC CHARACTERISTIC 781 – Page 175
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
1.0 INTRODUCTION
1.1 Purpose and Scope
This attachment describes how an SDU should set up, control, terminate and
transfer packet data using the BGAN/SwiftBroadband packet data service via an
IEEE 802.3 Ethernet interface(s) to Terminal Equipment. Services offered by the
Terminal Equipment are out of scope of this document. Other uses of the physical
interface, such as BITE and control of the SDU are outside the scope of this
document.
The following uses of the interface as stated in Section 3.2.4 do not (currently) have
detailed requirements described in this attachment.
• Routed Interface
• Security requirements
1.2 End to End Architecture Overview
The architecture below closely resembles that which would occur in an aircraft with a
SwiftBroadband SDU. This represents a single channel. The interface to be
implemented must support such architecture.
ATTACHMENT 5
ETHERNET INTERFACE
Note: The diagram does not show multiple SDUs or Channel Units,
but these may be attached to the Router as an extension of
this configuration. In addition, there may be scenarios where
PPPoE originates in one or more TE/Router devices attached
to the network.
ARINC CHARACTERISTIC 781 – Page 180
ATTACHMENT 5
ETHERNET INTERFACE
Area of Interest is
between the TE and SDU
TE SDU
User
CU
User SDU H
TE
E CU
User User TE SDU
CU
SDU
CU
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
3.0 PPPOE
3.1 Description
Extract from introduction of RFC2516:
“PPP over Ethernet (PPPoE) provides the ability to connect a network of hosts over
a simple bridging access device to a remote Access Concentrator. With this model,
each host utilizes its own PPP stack and the user is presented with a familiar user
interface. Access control, billing and type of service can be done on a per-user,
rather than a per-site, basis.”
For SwiftBroadband, IP traffic between the SDU and end user (TE) will be via PPP
over Ethernet (PPPoE). Multiple PPPoE sessions will be supported. This will allow
multiple end users, each having a separate connection. It is assumed that each
PPPoE client will be assigned the IP address associated with the packet data call
(PDP context) and that each Primary PDP context will have a different IP address.
3.2 Protocol Layering
There are two conceptual models for operation of the protocols: Ethernet
presentation to TE and IP presentation to TE.
The SDU interface remains the same in either case, and hence can support either
model.
3.2.1 Layer 2 (Switched) Model - PPPoE Presentation at TE
The following diagram shows the user plane protocol stack for a single device
attached to an SDU using PPPoE, where all the applications run on the Mobile
Network Node TE and Fixed Network Node (FNN) TE.
MNN SDU SAS GGSN FNN
TE DTE
App App
TCP TCP
IP IP IP
ATTACHMENT 5
ETHERNET INTERFACE
App App
TCP TCP
IP IP IP IP
ATTACHMENT 5
ETHERNET INTERFACE
Session Request
LCP
Authentication
NCP MSG_T_AM
MSG_A_AM
Call Clear
MSG_T_AP
MSG_A_AP
PPPoE IP Call
ATTACHMENT 5
ETHERNET INTERFACE
PPPoE
PPPoE Client
Client PPPoE
PPPoEServer
Server
TEuser)
(End SDU
(CCA)
PADI
PADO
PADR
PADS
PADT
PPPoE Discovery
Stage Comment
1 The PPPoE client (TE) broadcasts a PPPoE Active Discovery Initiation (PADI) packet. As it is a
broadcast packet all attached devices on the network, including the SDU, will receive it.
2 The PPPoE server (SDU) receives the PADI and responds to the PPPoE client with a PPPoE
1
Active Discovery Offer (PADO) packet if the requested service is available . The PADO must
uniquely identify the SDU. Additionally the PADO may contain a number of Service-Name TAGs.
3 The PPPoE client (TE) sends a PPPoE Active Discovery Request (PADR) packet to the PPPoE
server. This is analogous to a call request. It will also contain a Service-Name TAG_TYPE to
indicate the SBB bearer type required.
4 The PPPoE server (SDU) responds with a PPPoE Active Discovery Session-confirmation (PADS)
packet.
5 The session is now established. PPP traffic can pass between the PPPoE client (TE) and PPPoE
server (SDU).
6 To terminate the session a PPPoE Active Discovery Terminate (PADT) packet is sent from either
the PPPoE client (TE) or PPPoE server (SDU).
1
Since a PADO is only returned if there is service availability, the use of PADI is not a reliable method of getting a list of available
services. The service availability table (Section 5.3.2.2.1) accessible via SNMP is the recommended method. PADI is still a legitimate
method for checking for the availability of a specific service. Sending a PADI does not infer any reservation of service; this is done
through a PADR.
ARINC CHARACTERISTIC 781 – Page 187
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
PADI
PADO
PADS
LCP Negotiation
IPCP Configure-Request
SET IP Address, MSG_T_AM PacketSwitch “QoS, PDP” PDP Activate Context
DNS
MSG_A_PS
MSG_A_PR
MSG_A_PC PDP Activate Context Accept
MSG_T_AS
Get MSG_T_AS_BGANPDPCONTEXT
MSG_A_AS
Get MSG_T_AS_BGANPDPCONTEXT “PDP
Context Data”
IPCP Configure-Ack
SET IP Address,
DNS
IP Packet RabDataReq(data)
IPData (data) MSG_P_PP (data)
IP Packet IPData (data) MSG_A_PD (data) RabDataInd(data)
IPCP Terminate-Request
IPCP Terminate-Ack
LCP Termination
ATTACHMENT 5
ETHERNET INTERFACE
Stage Comment
1 The PPPoE (TE) client requests a PPPoE session. Included in the request is the service type, which
will be used to map to a SBB bearer type and QOS. The PPPoE access concentrator (SDU)
completes the discovery stage.
2 With the call established, the PPPoE server can now configure the PPPoE client by continuing with
LCP, authentication.
3 Once the NCP stage has requested an IP address, the SDU Channel Unit is instructed to start the
packet data call, and is passed the PDP context information, required for the PDP context to be
requested.
The NCP request is acknowledged once the PDP context has accepted.
4 Data is passed between the PPPoE client and PPPoE server using PPPoE. Data is passed
between the PPPoE server and Channel Unit SBB stack using IP packets.
ATTACHMENT 5
ETHERNET INTERFACE
3.3.11.1.1 Service
The PPPoE Client (TE) needs to be able to specify the type of service desired. The
SDU shall parse the first part of the Service Descriptor to determine which this is:
Service Description
SBB SwiftBroadband
MPDS Swift 64 MPDS
ISDN 64K UDI CS Call
3.3.11.2 Channel
The PPPoE Client (TE) may wish to direct the request to a specific channel.
If no channel number is provided, the SDU is free to provide the service on whatever
channel it deems appropriate.
If a channel is specified in the string, only this channel is considered for the service.
To provide an order of preference (such as “use channel 2 if available, but fall back
to channel 1 if it’s not available”), the “Hunt Group” functionality should be used.
Example: SBB-2
3.3.11.3 Parameters
Parameters are dependent on the service being requested.
Parameters provided as part of a PPPoE string will have precedence over
configuration provided by an ORT or factory defaults.
3.3.11.3.1 Parameters Field for SBB
This documents the parameters field for the SBB call type. If no parameters are
supplied, the default service level will be supplied (usually BACKGROUND, but this
could be overridden through an ORT parameter).
SBB Option Name Description
BACKGROUND Places a Primary Background PDP Context
STREAM8K Places a Primary Streaming class PDP Context at the data rate of 8k
STREAM16K Places a Primary Streaming class PDP Context at the data rate of 16k
STREAM32K Places a Primary Streaming class PDP Context at the data rate of 32k
STREAM64K Places a Primary Streaming class PDP Context at the data rate of 64k
STREAM128K Places a Primary Streaming class PDP Context at the data rate of 128k
XSTREAM Places a Primary Streaming class PDP Context with a dedicated 200 kHz bearer
AT String This allows the TE PPPoE client to enter a full AT Context activation string. The
letters “AT” must be present and the command string need to specify both
CGEQREQ and CGEQMIN to ensure the desired QoS is provided.
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
The SDU will treat this request as being one for the first service it deems available
(i.e.: one which it would respond with a PADO in response to a PADI). The SDU will
not automatically attempt the next service in the list in the event the selected service
fails (for example, the SDU thought SBB was available, but it failed due to network
congestion).
3.3.12 Offered Service-Name
PPPoE must, in response to a PADI for an available service, provide all available
services. Since it is not possible to provide every possible combination of every
service with every set of parameters, the PADO is only expected to provide:
• Firstly, the Service-Name as requested (complete with parameters) as per
RFC2516 requirements.
• All combination of Service and Channel (see Service Request description)
that is available.
The SDU is free to offer services beyond this required list. The list may be cut short if
there is insufficient space in the Ethernet frame to provide a full list. Because of this
limitation, PADI is not a recommended way to get a list of available services; SNMP
should be used instead.
ARINC CHARACTERISTIC 781 – Page 194
ATTACHMENT 5
ETHERNET INTERFACE
Router/TE
Stage 1, No Control Line, Single User
Router/TE SDU
Stage 1, No Control Line, Multiple PPPoE Sessions
ARINC CHARACTERISTIC 781 – Page 195
ATTACHMENT 5
ETHERNET INTERFACE
MNN
Protocol Stack for a TE to SDU Control Line
Router/TE SDU
Stage 2, Control Line Added, Single PPPoE Session
ARINC CHARACTERISTIC 781 – Page 196
ATTACHMENT 5
ETHERNET INTERFACE
In addition to the standard PPPoE handler, a Command Line Interface (CLI) client is
required on both the TE and SDU, as is a TFT handler. The CLI handler, via the
command line, is used to pass further ‘AT’ commands to the SDU. As previously
discussed, this facilitates PDP context modification and also provides a mechanism
for creating secondary PDP contexts. The TFT handler has to be included in order to
interpret the TFT as passed via the control line, and then route the upstream IP
traffic between any active PDP contexts. The full format of the UT and GGSN TFT is
described in 3GPP 27.00.7
4.2.2.1 Pairing of PPPoE Session and PDP Contexts
The use of PPPoE makes it possible to route the IP traffic from multiple PDP
contexts via a single virtual PPPoE interface. It is considered that each Primary
context and its associated Secondary contexts must share a single PPPoE session.
This scheme is shown in the next figure.
Router/TE SDU
Control Line 1
CLI CLI
Client Control Line 2 Client
Control Line 3
In the previous diagram, the SDU has seven active contexts. Following the
convention described, three PPPoE sessions are required. This scheme should also
be used with a stage 1 implementation as well, where each separate primary context
would therefore have its own PPPoE session.
The number of control lines shown in the diagram is not mandatory.
ARINC CHARACTERISTIC 781 – Page 197
ATTACHMENT 5
ETHERNET INTERFACE
SDU
Router/TE
CLI CLI
Control Line
Client Client
ATTACHMENT 5
ETHERNET INTERFACE
2
The default echo state is currently undefined. Some manufacturers have it on (as per V.250) while others have opted to have it off (as
per Internet service convention). Applications which need it in one specific state should send an appropriate command to put it in the
desired state upon connection and be ready to discard potential echo (i.e., a response line which starts with AT).
ARINC CHARACTERISTIC 781 – Page 199
ATTACHMENT 5
ETHERNET INTERFACE
.
.
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
4.4 AT Commands
Editor’s comment: The AT command section of this document has been replaced
with a table that defines the supported AT commands that are documented in 3GPP
27.0007 with the exception of the ARINC 781 defined AT commands. This change
is not marked with track changes in order to improve readability.
4.4.1 AT Command Interface Support
M = Mandatory
O = Optional
N = Not required/Not defined or Not Supported
Table 1 - Inmarsat UT-TE Interface Spec and ARINC 781 Cross Reference [D.G.2]
Inmarsat BGAN ARINC 781
3 GPP AT
Description UT-TE Interface Attachment
Command
Spec 5
SMS SERVICE - GENERAL
CONFIGURATION AT-COMMANDS (3GPP
TS 27.005)
+CSMS Select Message Service M O
+CPMS Preferred Message Storage M O
+CMGF Message Format M O
+CMS ERROR Message Service Failure Result Code M O
MESSAGE CONFIGURATION AT-
COMMANDS (3GPP TS 27.005)
+CSCA Service Centre Address M O
+CSMP Set Text Mode Parameters O O
+CSDH Show Text Mode Parameters O O
+CSAS Save Settings O O
+CRES Restore Settings O O
MESSAGE RECEIVING AND READING AT-
COMMANDS (3GPP TS 27.005)
+CNMI New Message Indications to TE M O
+CMGL List Messages M O
+CMGR Read Messages M O
MESSAGE SENDING AND W RITING AT-
COMMANDS (3GPP TS 27.005)
+CMGS Send Message M O
+CMSS Send Message from Storage M O
+CMGW Write Message to Memory M O
+CMGD Delete Message M O
GENERAL AT-COMMANDS (3GPP TS
27.007)
+CGMI Request Manufacturer Identification M M
+CGMM Request Model Identification M M
+CGMR Request Revision Identification M M
+CGSN Request Product Serial Number M M
Identification
+CSCS Select TE Character Set O O
ARINC CHARACTERISTIC 781 – Page 202
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
The same _IPDPS:0,0.0.0.0 is also used when the call is torn down (as it is not
possible to send further commands to a call which no longer exists).
4.4.2.1.2 Read Command
The read command returns the currently selected primary PDP by the TCP
Session that sends the read command. If no PPPoE Session selected, 0, 0.0.0.0 is
returned.
4.4.2.1.3 Test Command
Not supported.
4.4.2.1.4 Unsolicited Result Code
(Section deleted as it contradicted programming model and introduced unnecessary
complexity).
4.4.2.1.5 Defined Values
<PDP_addr>: a string parameter that identifies the PPPoE by the address of the
Primary PDP Context.
Two values are possible, the PPPoE session ID or the IP address associated with
that primary PDP. The two are recognized by their format. The PPPoE session ID is
a simple number, while the IP address is an IPv4 address in the form
aaa.bbb.ccc.ddd.
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
Table 4 -
ARINC CHARACTERISTIC 781 – Page 209
ATTACHMENT 5
ETHERNET INTERFACE
.iso(1)
└─ .org(3)
└─ .dod(6)
└─ .internet(1)
├─ .mgmt(2)
│ └─ .mib-2(1)
│ ├─ .system(1)
│ │ └─ ... (as defined in RFC1213-MIB)
│ ├─ .interfaces(2)
│ │ └─ ... (as defined in RFC1213-MIB)
│ ├─ .ip(4)
│ │ └─ ... (as defined in RFC1213-MIB)
│ ├─ .icmp(5)
│ │ └─ ... (as defined in RFC1213-MIB)
│ ├─ .tcp(6)
│ │ └─ ... (as defined in RFC1213-MIB)
│ ├─ .udp(7)
│ │ └─ ... (as defined in RFC1213-MIB)
│ ├─ .transmission(10)
│ │ └─ .ppp(23)
│ │ └─ ... (as defined in PPP-LCP-MIB as defined in RFC1471)
│ └─ .snmp(11)
│ └─ ... (as defined in RFC1213-MIB)
└─ .private(4)
└─ .enterprises(1)
└─ .aeec(13712)
ATTACHMENT 5
ETHERNET INTERFACE
.iso(1)
└─ .org(3)
└─ .dod(6)
└─ .internet(1)
└─ .private(4)
└─ .enterprises(1)
└─ .aeec(13712)
└─ .arincSwift(781)
└─ ...
All definitions in this document are related to the MIB Entry Point. Inside this
definition all structures will only be shown with the shortened prefix
".arincSwift(781)".
5.2.3 General MIB Branches
The basic Structure shall be defined as shown in the following figure:
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
.arincSwift(781)
├─ .asVersion(1)
├─ .asLinks(2)
├─ .asSystem(3)
├─ .asUnits(4)
└─ .asUserDefArea(5)
Main Branches
5.3.2.1 MIB Version Related Objects
The .asVersion(1) folder contains only two objects. The first object is the major
version number. The second object is the minor version number. Both objects are
from the Type Integer32 and the sub version is limited to the range from 0 to 99.
The following table shows the object details of this folder:
Table 12 -
ARINC CHARACTERISTIC 781 – Page 214
ATTACHMENT 5
ETHERNET INTERFACE
.arincSwift(781)
├─ ....
└─ .asLinks(2)
├─ .aslServices(1)
└─ .aslInfos(2)
ATTACHMENT 5
ETHERNET INTERFACE
3
In practice, there will be many more entries than this. There will be separate entries for each streaming class, and separate entries for
each channel (i.e.: SBB-2:STREAM64K). These names follow the PPPoE service-name convention. SDUs may include non-data
services (such as voice) as this information would help diagnose scenarios where services are not available due to non-data usage of
the SDU.
ARINC CHARACTERISTIC 781 – Page 216
ATTACHMENT 5
ETHERNET INTERFACE
The value of .aslsNumbers(1) is 4 in this case. The content of the table indicates
that Swift 64 services MISDN and MPDS can be supported by the unit, but are not
available and that the SwiftBroadband services are available. The client can
establish up to 22 background channels with up to 864 kbps, up to 14 32K streaming
channels with up to 448 kbps, up to 2 128K streaming channels, or a mixture of
thereof.
If for example an application opens a 128 kbps SBB Streaming class, available
background channels will go down by one (as a primary slot is being used),
STREAM32K channels will go down by 4, etc.
5.3.2.2.2 Link Related Information Sub Branch
5.3.2.2.2.1 Object Structure
The second subfolder in the .asLinks(2) branch is .aslInfos(2). It contains
two tables and four objects.
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
Note 1: The values of the previous table referring to this note can also
be set to -1, if the system (e.g., for temporary design reasons)
cannot provide it. Due to the fact that all these values are very
useful for the client applications to calculate the throughput,
the satcom systems shall implement this feature as soon as
possible.
Note 2: Recommended values for MaxSigQual are as follows:
64 dBHz BGAN Global Beam
68 dBHz BGAN Regional Beam
80 dBHz BGAN Spot Beam
ARINC CHARACTERISTIC 781 – Page 220
ATTACHMENT 5
ETHERNET INTERFACE
In accordance with Table 14 – Example Link Service Table Content, the values
are indicating the following scenario:
The satcom has established two primary contexts:
• One primary context is located in row 1 with index 1 and is related to service
index 3 (SBB:Background).
• The other primary context is located in row 2 with index 9 and is related to
service index 4 (SBB: STREAM32K).
• The entry in row 3 indicates a secondary context with a current allocated
bandwidth of 64 kbps on spot beam 101 from the type SBB: STREAM32K.
This entry is related to the one in row 2, because the asliLinkServiceIndex is
set to 9.
5.3.2.2.2.2.1 Insertion of a New Entry into the Table
A new entry has to be attached on the end of the table. The first entry, which will be
attached, has to start with a .asliActLinkIndex(1) of “1”. Each time, where a
new service entry will be inserted, the .asliActLinkIndex(1) of the new entry
has to be increased. If the maximum value has been reached, the index has to start
with 1 again. If the table already has an entry with the index 1, the value has to be
ARINC CHARACTERISTIC 781 – Page 221
ATTACHMENT 5
ETHERNET INTERFACE
increased to 2. This has to continued, until a free index value has been found. Index
numbers are unique across both tables (the active and terminated calls).
The new content with a new secondary background link for the bundle in row 2 and 3
in beam 101 has to look as shown in the following table:
Table 19 - Example 2 of the Actual Link Table Content
Table .asliActLink…
Row …Index(1) …Status(4) …LinkNegotiatedBW (10) …BeamID(14) …MainIndex(16) …ServiceIndex(17)
1 1 up 0 101 0 3
2 9 up 128 101 0 6
3 11 up 64 101 9 5
4 12 up 0 101 9 3
The history table still has the same content. This is shown in the following table:
Table 20 - Example 2 of the History Link Table Content
Table .asliHistLink…
Row …Index(1) …Status(4) …LinkNegotiatedBW(10) …BeamID(14) …MainIndex(16) …ServiceIndex(17)
1 3 down 0 100 0 3
2 2 down 128 100 0 6
3 4 down 64 100 3 5
4 8 down 0 100 0 3
5 5 down 0 100 0 3
6 6 down 64 101 8 5
7 7 down 64 101 5 5
8 10 down 0 101 6 3
4
In an earlier version of the document, the lifetime of a link was not explicitly defined and could have allowed a secondary to be re-
activated within the 30 second timer and be considered the same link instance.
ARINC CHARACTERISTIC 781 – Page 222
ATTACHMENT 5
ETHERNET INTERFACE
The history table now has one entry more at the end of the table. This is shown in
the following table:
Table 22 - Example 3 of the History Link Table Content
Table .asliHistLink…
Row …Index(1) …Status(4) …LinkNegotiatedBW(10) …BeamID(14) …MainIndex(16) …ServiceIndex(17)
1 3 down 0 100 0 3
2 2 down 128 100 0 6
3 4 down 64 100 4 5
4 8 down 0 100 5 3
5 5 down 0 100 0 3
6 6 down 64 101 8 5
7 7 down 64 101 6 5
8 10 down 0 101 6 3
9 1 down 0 101 0 3
The history table now has one entry more at the end of the table. This is shown in
the following table:
Table 24 - Example 3 of the History Link Table Content
Table .asliHistLink…
Row …Index(1) …Status(4) …LinkNegotiatedBW(10) …BeamID(14) …MainIndex(16) …ServiceIndex(17)
1 3 down 0 100 0 3
2 2 down 128 100 0 6
3 4 down 64 100 4 5
4 8 down 0 100 5 3
5 5 down 0 100 0 3
6 6 down 0 101 8 3
7 7 down 0 101 6 3
8 10 down 0 101 6 3
9 1 down 0 101 0 3
10 9 down 128 101 0 6
11 11 down 64 101 9 5
12 12 down 0 101 9 3
ATTACHMENT 5
ETHERNET INTERFACE
.arincSwift(781)
├─ ....
└─ .asSystem(3)
├─ .assConfig(1)
├─ .assInfos(2)
├─ .assTraps(3)
├─ .assSelfTestAvailable(4)
└─ .assSelfTest(5)
ATTACHMENT 5
ETHERNET INTERFACE
.asstLinkBeamIDTrap(3) .asliSatID, This trap has to be sent, if the system changes the beam or
.asliActLinkIndex, the satellite. It has also to be sent, if the lock state changes.
.asliActLinkBeamID,
.asliSatState
.asstServiceAvailabilityTrap(4) .aslsIndex, This trap has to be sent, if the availability status of a service
.aslsAvailable changes in the service table.
.asstLinkInsertedTrap(5) .asliActLinkIndex This trap has to be sent, when the system inserts a new entry
into the link table.
.asstLinkRemovedTrap(6) .asliActLinkIndex This trap has to be sent, if the timer for the deletion of a link
table entry has expired. After this trap, the according entry has
been moved to the link table.
.asstSatHandoverPending(7) .asliSatHandoverPending This trap will be sent if the system knows it may need to do a
handover soon.
ATTACHMENT 5
ETHERNET INTERFACE
.arincSwift(781)
├─ ....
└─ .asSystem(3)
├─ ....
├─ .assSelfTestAvailable(4)
└─ .assSelfTest(5)
└─ .asssTestcaseTable(2)
.assSelfTest Subfolders
The .assSelfTest(5) folder itself has a Table, some readable and two writable
objects.
Table 28 - System Self-Test Related Object Details
Object Identifier Content Type
Range Description
.asssTestcaseNumber(1) Integer32
0..100 This object indicates how many entries are in the test
case table.
.asssTestCommand(3) Integer32 0..100 This is a writable object. By setting this value to a non-
zero value, the corresponding test case of the test case
table will be started. Starting a test will stop a previously
running one. Setting it to zero will stop any running test.
.asssTestUpTime(4) TimeTicks This is a writable object. A client application can control
the run time of the test case.
.asssTestStatus(5) ASTestState This value shows the status of the current running self-
test.
.asssTestLastResult(6) ASTestState This value indicates the result of the last finished test.
.asssTestReturnCode(7) Integer32 This field covers a unique return code of the self-test,
which can easily be validated.
.asssTestReturnMessage(8) DisplayString 0..256 This field contains a textual result message of the last
self-test, which can be logged.
ATTACHMENT 5
ETHERNET INTERFACE
The objects in the Configuration and Information folder are grouped in a table. For
each subunit connected to the system, an entry has to be inserted into the
Information table. An Integer32 object related to each table shows the number of
table entries.
Due to security reasons, it may be that a sub unit is not allowed to be configured. If
so, it has no entry in this table. Both tables (configuration and information) have
their own index values. These index values have to be the same for one unit. For
example: if “Antenna1” is not configurable and “Antenna2” is configurable, the table
entries in the .asuAntConfig(2) and .asuAntInfo(1) tables are shown as in
the tables below:
Table 30 - Relation Between Unit Config and Unit Info Table
Table asuAntConfig… Table asuAntInfo…
Row …Index …Name Row …Index …Name
1 32 Antenna2 1 17 Antenna1
2 32 Antenna2
.arincSwift(781)
├─ ....
└─ .asUnits(4)
├─ .asuSDUAvailable(1)
└─ .asuSDU(2)
└─ .asuSduInfo(1)
├─ .asuSduInfoTableNumbers(1)
└─ .asuSduInfoTable(2)
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 5
ETHERNET INTERFACE
5.3.2.4.1.2 Configuration Sub Branch for the SDU Unit Related Objects
This sub section shows all objects, which are related to the configuration part of the
.asuSDU(2) sub branch.
The basic substructure of this MIB section defined as follows:
.arincSwift(781)
├─ ....
└─ .asUnits(4)
├─ .asuSDUAvailable(1)
└─ .asuSDU(2)
├─ ...
└─ .asuSduConfig(2)
├─ .asuSduConfigTableNumbers(1)
└─ .asuSduConfigTable(2)
ATTACHMENT 5
ETHERNET INTERFACE
of entries in the table It is from Type Integer32 and has a value range of 0..10.
If for security reasons no configuration shall be available, the table can be empty.
The objects in the table are defined as shown below:
Table 33 - SDU Configuration Table Object Details
Object Identifier Content Type Range Description
.asuSduConfIndex(1) Integer32 1..10 Unique identifier of the table entry.
.asuSduConfUTCDateTime(2) ASDateTime RFC3339 This value allows a client to set the time in
the SDU according to RFC3339.
.asuSduConfTxMuteRequested(3) TruthValue Allows external equipment to request a state
change of the TX mute discrete.
.asuSduConfTailNumber(4) DisplayString 0..30 This field allows a client to provide the tail
number of the current plane to the SDU.
.asuSduConfCityPair(5) DisplayString 0..30 This field allows a client to provide the city-
pair of the current flight to the SDU.
.asuSduConfFlightNumber(6) DisplayString 0..30 This field allows a client to provide the Flight
Number of the current flight to the SDU.
.asuSduConfFlightPhase(7) DisplayString 0..30 This field allows a client to provide the actual
flight phase to the SDU.
.asuSduConfClientOnGroundSate(8) TruthValue This field allows a client Application to
provide its on ground state to the SDU. True
means on ground. If the SDU has no other
possibility to set its own on ground state it
can copy this value into the info table value.
5.3.2.4.1.3 Trap Sub Branch for the SDU Unit Related Objects
In the moment no Traps are identified for the SDU. This sub section is a placeholder
for future updates and can be used to insert trap objects in the .asuSDUTraps(3)
subfolder.
5.3.2.4.2 SCM unit Related Objects
This subsection contains all objects related to the SCM. They are grouped in tables
to cover that the unit can be available multiple times.
5.3.2.4.2.1 Information Sub Branch for the SCM Unit Related Objects
This sub section shows all objects, which are related to the information part of the
.asuSCM(4) sub branch.
The basic substructure of this MIB section defined as follows:
...
├─ .asuSCMAvailable(3)
└─ .asuSCM(4)
├─ .asuScmInfo(1)
├─ .asuScmInfoTableNumbers(1)
└─ .asuScmInfoTable(2)
ATTACHMENT 5
ETHERNET INTERFACE
5.3.2.4.2.2 Configuration Sub Branch for the SCM Unit Related Objects
In the moment no configuration items are identified for the SCM. This sub section is
a placeholder for future updates and can be used to insert configuration objects in
the .asuScmConfig(2) subfolder.
5.3.2.4.2.3 Trap Sub Branch for the SCM Unit Related Objects
In the moment no Traps are identified for the SCM. This sub section is a
placeholder for future updates and can be used to insert trap objects in the
.asuSCMTraps(3) subfolder.
5.3.2.4.3 DLNA Unit Related Objects
This subsection contains all objects related to the DLNA. They are grouped in tables
to cover that the unit can be available multiple times.
ARINC CHARACTERISTIC 781 – Page 231
ATTACHMENT 5
ETHERNET INTERFACE
5.3.2.4.3.1 Information Sub Branch for the DLNA Unit Related Objects
This sub section shows all objects, which are related to the information part of the
.asuDLNA(6) sub branch.
The basic substructure of this MIB section defined as follows:
...
├─ .asuDLNAAvailable(5)
└─ .asuDLNA(6)
└─ .asuDlnaInfo(1)
├─ .asuDlnaInfoTableNumbers(1)
└─ .asuDlnaInfoTable(2)
5.3.2.4.3.2 Configuration Sub Branch for the DLNA Unit Related Objects
In the moment no configuration items are identified for the DLNA. This sub section is
a placeholder for future updates and can be used to insert configuration objects in
the .asuDlnaConfig(2) subfolder.
5.3.2.4.3.3 Trap Sub Branch for the DLNA Unit Related Objects
In the moment no Traps are identified for the DLNA. This sub section is a
placeholder for future updates and can be used to insert trap objects in the
.asuDlnaTraps(3) subfolder.
ARINC CHARACTERISTIC 781 – Page 232
ATTACHMENT 5
ETHERNET INTERFACE
...
├─ .asuAntennaAvailable(7)
└─ .asuAntenna(8)
└─ .asuAntInfo(1)
├─ .asuAntInfoTableNumbers(1)
└─ .asuAntInfoTable(2)
ATTACHMENT 5
ETHERNET INTERFACE
5.3.2.4.4.2 Configuration Sub Branch for the Antenna Unit Related Objects
In the moment no configuration items are identified for the Antenna. This sub section
is a placeholder for future updates and can be used to insert configuration objects in
the .asuAntConfig(2) subfolder.
5.3.2.4.4.3 Trap Sub Branch for the Antenna Unit Related Objects
In the moment no Traps are identified for the Antenna. This sub section is a
placeholder for future updates and can be used to insert trap objects in the
.asuAntTraps(3) subfolder.
5.3.2.4.5 Future units
If a new unit will be identified to be added in the unit sub branch, this structure can
be extended by adding a new .asu<Unitname>(OID) sub branch with the same
restrictions, as described in Unit Related Objects.
5.3.2.5 User Defined Area
This MIB structure has a sub branch to insert vendor specific information. A supplier
is free to bring any kind of readable and writable objects in any user defined
structure. The only restriction to be covered is to use a dedicated subfolder. The
following subfolders are identified until now within the .asUserDefArea(5) sub
branch.
Table 37 - User Defined Area Vendor OID’s
Vendor Name <Vendor> Vendor sub OID complete Vendor OID
EMS EMS .asudaEMS(1) 1.3.6.1.4.1.13712.781.5.1
Honeywell Honeywell .asudaHoneywell(2) 1.3.6.1.4.1.13712.781.5.2
Rockwell/Collins RockColl .asudaRockColl(3) 1.3.6.1.4.1.13712.781.5.3
Thales Thales .asudaThales(4) 1.3.6.1.4.1.13712.781.5.4
Thrane Thrane Thrane .asudaThrane(5) 1.3.6.1.4.1.13712.781.5.5
Chelton Chelton .asudaChelton(6) 1.3.6.1.4.1.13712.781.5.6
If a new vendor needs its own place for user defined and vendor specific information
(and is not covered by the table above), he has to request an entry ID for its own
objects from Air/Ground Communication Systems Subcommittee to avoid OID
conflicts within the whole structure.
Each of the vendor sub OID’s contains two mandatory objects to define the version
of the sub folder. The first object is the major version number. The second object is
the minor version number. Both objects are from the Type Integer32 and the sub
version is limited to the range from 0 to 99.
The following table shows the object details of this folder:
ATTACHMENT 5
ETHERNET INTERFACE
5
For ARINC 741 architectures, replace “SDU” with “HSDU”.
6
Manufacturers may utilize non-standard formats in addition to the standard/generic formats shown, but they should not use the
following reserved names: “SLCV”, “Q850”, “MPDS”, “BGAN”. Consult Inmarsat for further details.
ARINC CHARACTERISTIC 781 - Page 235
ATTACHMENT 5
ETHERNET INTERFACE
If the PPPoE session was a Swift64 MPDS session, the AC-System-Error tag will be
of the following format:
MPDS – mmm: +WQ_cause_string
• Where:
o mmm is the MPDS cause code defined in the IPDS SDM Volume 2 Chapter
11 Tables 7 and 8.
o +WQ_cause_string is the MPDS AT +WQ cause string defined in the IPDS
SDM Volume 2 Chapter 11 Tables
7and 8.
If the PPPoE session was a SwiftBroadband PS session, the AC-System-Error tag
will be of the following format:
BGAN – bbb: BGAN_string
• Where:
o bbb and BGAN_string are defined in 3GPP TS 24.008, 27.005, 27.007 and
the BGAN SDM Volume 2, Chapter 2, Section 3.1.4.3
Example terminations:
1. ISDN termination due to SDU:
• Generic Error:
o SLCV – 12B1/00XX: call cleared by MES for unspecified reason [Channel
cleared, SDU reporting system failure]
• AC-System Error:
o Not Applicable
Note: Text in [square brackets] is manufacturer-specific.
2. ISDN termination due to network issue:
• Generic Error:
o SLCV – 1F11/0000: call failed, terrestrial party busy
•
• AC-System Error:
o Q850 - 17: User busy
3. MPDS protocol error:
• Generic Error:
o SLCV - 0000/031c: MPDS channel cleared [Control sub-layer protocol
failure]
• AC-System Error:
o MPDS - 796: Control sub-layer protocol failure
4. BGAN PDP Context activation failure protocol error:
• Generic Error:
o Not Applicable
• AC-System Error:
ARINC CHARACTERISTIC 781 - Page 236
ATTACHMENT 5
ETHERNET INTERFACE
ATTACHMENT 6
ARINC 781 OUTPUT POWER USE CASES
The table below contains various scenarios and service combinations used as a
basis for developing the RF output power ranges for the Internal, Small Form Factor
External and Large Form Factor External HPA using the EIRPs defined in Section
1.7.1, Table 1-2 and noted below.
ATTACHMENT 6
ARINC 781 OUTPUT POWER USE CASES
Other use cases of HPA Output Powers (watts) can be calculated using the following
tables and formula:
(X/10)
Antenna Gain (dB) [X] Antenna Gain Factor [10 ]
12.0 15.85
11.5 14.13
11.0 12.59
6.5 4.47
6.0 3.98
(Y/10)
Cable Loss (dB) [Y] Cable Loss Factor [10 ]
2.5 1.78
2.2 1.66
1.5 1.41
(Z/10)
Channel (use case) EIRP Power/Channel (dBW) [Z] EIRP Power/Channel (watts) [10 ]
1
Aero C (8.4 kbps) initial 18.50 70.79
Aero C (8.4 kbps) settled * ~ 13.50 ~ 22.39
Aero R/T (1.2 kbps) 9.10 8.13
Aero R/T (10.5 kbps) 20.40 109.65
1
Swift64 initial 22.50 177.83
1
Swift64 settled ~ 18.50 ~ 70.79
SBB Channels (Class 6) 20.00 100.00
SBB Channels (Class 7) 15.10 32.36
Note:
1. For this channel type, there is typically no more than one channel at a
time at the initial power level (for only a few seconds), with any other
channels of the same type typically at the settled power level. The
worst (unrealistic) case would be for all such channels to be at the
initial power level simultaneously; the best (unrealistic) case would be
for all such channels to be at the settled power level simultaneously.
Realistic cases involving more than one channel of this type may be
estimated as desired by selecting an appropriate mix of the power
levels in the overall desired Use Case. Settled power levels are
approximate.
Where:
CL factor = Cable Loss Factor
AG factor = Antenna Gain Factor
ARINC CHARACTERISTIC 781 - Page 239
ATTACHMENT 6
ARINC 781 OUTPUT POWER USE CASES
= 73.13 watts
COMMENTARY
When multiple channels are in operation simultaneously, the Peak-to-
Average Power Ratio (PAPR) should be examined. In the example
above , the multiple channels also include 4 SBB channels. The SBB
channel uses both π/4-QPSK modulation for the power efficiency and
16-QAM modulation for the bandwidth efficiency. The 16-QAM
modulation, however, will generate high PAPR. The component
(including power amplifier) and system designers need take the PAPR
into account to avoid deteriorating the system performance.
The Power Complementary Cumulative Distribution Function (CCDF)
curves provide critical information about the signals encountered in
the digital modulation systems. The CCDF display shows the peak
powers and how often they occur, or how many symbols require those
power levels. The CCDF plays an important role in characterizing of
power amplifiers and predicting BER/PER performance.
For more information on PAPR and CCDF see:
• Agilent Technologies Application Note , Characterizing Digital
Modulated Signals with CCDF Curves, Agilent Technologies,
Copyright 2000
• Rumney, Moray (Editor), Agilent Technologies Staff. LTE and
the Evolution to 4G Wireless: Design and Measurement
Challenges , Padstrow, Corrwall Great Britain for Agilent
Technologies by John Wiley & Sons, Ltd, 2009
ARINC CHARACTERISTIC 781 – Page 240
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
1.0 Introduction
This attachment describes a Compact Satcom System. It is intended as a small
form-factor, lower-cost alternative configuration, aimed primarily at delivering safety
services to the cockpit.
The Compact Satcom System is particularly suited to deliver the Inmarsat
SwiftBroadband SB200 Evolution service, operating in Class 4 over the Inmarsat I-4
and Alphasat satellites. A Class 4 is by definition a single-channel system, allowing
reduced size, power dissipation and cost. The Compact System is therefore not
suitable for providing multi-channel services such as Classic Aero.
The interfaces to the aircraft as well as wiring provisions are designed to have a high
level of commonality with the full-size ARINC 781 system. Due to the high similarity
with the full-sized system, the detail definitions of various interfaces are not repeated
in this attachment. This attachment aims to describe the differences found in the
compact system.
While a single system configuration for all aircraft types is highly desirable, this was
found to be difficult to achieve due to varying and conflicting requirements in different
airframes. Multiple configuration options are therefore described.
While the focus of this standard is on the provision of safety services to the cockpit,
the system may also be suitable for providing limited cabin services, perhaps more
suitable for non-airline applications. The compact system is well suited to airline
applications where segregation is required between the cockpit and cabin from a
network security perspective. Cabin connectivity may then be provided by a
separate satcom system.
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
Required for
INTERFACES ON ARINC 600
SB200 safety Comments
CONNECTOR
system?
Power
115 Vac Variable Frequency Yes
28 Vdc No Required for business jets.
SATCOM System Interfaces
Tx RF (Power) Yes For single-channel SB200.
BSU Control Yes For A781 HGA / IGA. Optional for ELGA.
ELGA Control No Optional via co-ax or ARINC 429.
External HPA Control (A429) If required for
HLD
HPA Mute No
SCM Yes Per A781 wiring provisions.
Other SDU (dual) No
User Interfaces
10/100BaseT on size 22 pins Yes – 2 for cabin
10/100BaseT on Quadrax Yes – 2 for
cockpit
ARINC 664 copper (Cockpit voice No
& data)
ARINC 664 fiber (Cockpit voice & No
data)
ISDN No
CEPT-E1 No
(C)MU Yes – 2 Two for B777. Two ACRs in A350/380.
Cockpit Voice (4-wire & discretes) Yes – 2 sets
MCDU Yes – 3
POTS/SLIC No
BITE/Maintenance Interfaces
CFDS/CMC on ARINC 429 Yes
ADL (ARINC 615/429) Ethernet & For Ethernet: Quadrax Ethernet 3 preferred.
ARINC 429
Service Availability Status discrete No Optional. Desirable for certain business jet
applications.
ATE pins No
ARINC 664 copper or fiber No ARINC 664 copper desirable for A350/380.
Miscellaneous Interfaces
AES ID (429) Yes
IRS/GNSS Yes – 3
Configuration Straps Yes
WOW Yes
Tx Mute Yes
ARINC 664 copper or fiber No ARINC 664 copper desirable for A350/380.
ARINC CHARACTERISTIC 781 – Page 244
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
Note: Configuration 1 baseline does not require the multi-pin connector. Signals
marked “*” are standard wiring for Configuration 1 – Alternate wiring
ARINC CHARACTERISTIC 781 – Page 248
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
As described in Section 7.0, the ELGA may be controlled and powered using any
one of the following interfaces:
• The RF coaxial cable.
• A multi-pin connector. The multi-pin connector and its pin assignments are
the same as the connector on the HGA/IGA.
• A second coaxial cable, instead of the multi-pin connector.
The ELGA should also provide BITE information through the same chosen interface.
4.5.2 ELGA Form Factor
The ELGA footprint is shown in Figure 4, Figure 5 and Figure 6. This footprint
partially matches the footprint of the LGA, as defined in ARINC 741. The ELGA is
shorter, however, and does not use the rear pair of mounting screw holes.
4.5.3 ELGA Operation at High Ambient Conditions
Where system configuration 3 is adopted, the performance of the system should
provide continuous operation within the expected output power range when the
ambient air temperature is as an extreme. An acceptable duty cycle restriction could
then be applied as necessary and could consist of the CSDU restricting services to
retain cockpit functions.
The system should continue to provide ACARS messaging and 1 voice channel at
100% duty cycle as a minimum.
4.5.4 ELGA Connectors
The ELGA should be equipped with a TNC female connector for Tx and Rx radio
signals.
A second connector may be fitted for power, control and BITE. This connector
should be a multi-pin connector or a TNC female connector as described in section
7.0. If a multi-pin connector is used it should be identical to that defined for the HGA
in section 2.3.2.2 and attachment 1-12. If the ELGA contains two TNC connectors,
then they should be color coded.
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
If a DLNA is used (Configuration 2), the system should meet its requirements with
the following cable loss ranges:
Cable Loss (dB)
Tx cable, CSDU to DLNA 0 to 3 dB
Rx cable, DLNA to CSDU 6 to 25 dB (0 to 25 dB is desirable)
Antenna cable, DLNA to ELGA 0 to 0.5 dB
If the ELGA requires a second coaxial cable between the ELGA and CSDU, the
system should operate with cable losses in the range 0 to 25 dB.
If the installation is designed to allow power on a coaxial cable, then its DC
resistance should be no more than 0.6 Ohms.
If the HPA, DLNA and antenna are combined (Configuration 3), the system should
meet its requirements with the following cable loss ranges:
Cable Loss (dB)
Tx/Rx cable, CSDU to ELGA 0 to 18 dB
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
The connector and electrical interfaces of the CSDU are intended to be compatible
with the full-size (6 MCU) SDU, except that electrical details may differ on the
interface to the HLD (e.g. power and control over coaxial cables instead of ARINC
429).
6.0 Performance Criteria
The CSDU, SCM, HLD or DLNA and ELGA are designed as a functional set. The
performance criteria for individual units are not described in this document. The
complete system is required to comply with the requirements as set out in the
relevant Inmarsat System Definition Manual (SDM). Below follows a short selection
of requirements for information.
6.1 Transmitter Equipment Performance
The equipment is aimed at supporting the Inmarsat SB200 Evolution (Class 4)
Safety Service. The nominal EIRP required is 10 dBW. The transmit system is
equipped to reduce the EIRP below this level according to commands from the earth
station (back-off).
Table 1 – Worked Example of Transmitter Performance Criteria for Configuration 2
System Component Value Unit
EIRP 10.0 dBW
Ant Gain (min) 1.0 dB
Ant-DLNA Cable Loss 0.5 dB
DLNA Insertion Loss 0.8 dB
CSDU-DLNA Tx Cable Loss 3.0 dB
CSDU Output Power 13.3 dBW
CSDU Output Power 21.4 W
The transmit gain of the ELGA may vary as its beam position is changed while
tracking a satellite from an aircraft in motion. To maintain a more constant EIRP as
the antenna's beam position is changed, the system may make appropriate RF
power adjustments to compensate for the change in antenna gain.
If the antenna beam steering function uses attitude, then aircraft attitude rates of
change should be assumed to be up to 7.5 degrees per second.
The transmitter should operate over the frequency bands 1626.5 to 1660.5 and
1668.5 to 1675.5 MHz. This includes the extended L-band (XL-band) used by
Alphasat.
There is no intermodulation requirement, as this is a single channel system.
6.2 Receiver Equipment Performance
To support the Inmarsat SB200 Evolution (Class 4) Safety Service, the receiver
chain should provide a nominal G/T performance of better than -21 dB/K for
elevation angles above 5 degrees. (This is an approximation. Consult the Inmarsat
SDM for detailed requirements.)
The receiver system performance is intended to provide a packet error rate (PER) of
1x10-3 or better for SwiftBroadband packet-switched services and 1x10-2 or better for
SwiftBroadband circuit-switched voice.
ARINC CHARACTERISTIC 781 - Page 253
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
The receiver should operate over the frequency band 1518 to 1559 MHz. This
includes the extended L-band (XL-band) used by Alphasat.
7.0 Interwiring
This section deals specifically with wiring between the CSDU, HLD / DLNA and
ELGA. Wiring to other avionics in the aircraft is simplified as “aircraft interfaces” in
the figures in this section. Refer to section 4.1.3 of this attachment as well as
Attachment 1-3 and Attachment 1-5 (a, b and c) for the connector and pin allocation
detail.
The multi-pin connector on the HLD is defined to be the same as on the FMHPA
except that a different keying is used.
Aircraft installers should contact equipment manufacturers to determine which of the
wiring schemes presented in this section are appropriate for their equipment.
Notes on wiring configurations:
1. Power, ARINC 429 buses (labeled ‘A429’) and SCM signaling are all
shown as a single line in the drawings for simplicity. These are wire
pairs in reality.
2. The HLD connector definition has connections defined for both the
DLNA BITE Discrete and an ARINC 429 BITE bus. Whether both are
used is the manufacturer’s choice.
3. “SCM signaling” includes duplex RS422 connections.
4. The 2nd coaxial cable between the CSDU and the ELGA connects to
the CSDU bottom plug, insert 6 (see Attachment 1-5c).
7.1 Configuration 1 – Systems using a HLD
This system is suitable for aircraft where some cooling can be provided in the crown
of the aircraft. Because the HLD contains a power amplifier, it can compensate for
increased loss in the RF TX cable as specified in section 0 of this attachment. A
weight saving can be achieved this way.
The baseline interwiring method is shown in Figure 7. Power and HLD control and
BITE information is supplied through the coaxial cables. The ELGA should also
receive power, control and provide BITE information via the single coax from the
HLD.
The alternate interwiring method shown in Figure 8 allows the antenna and HLD to
be controlled via ARINC 429. The Antenna BITE ARINC 429 bus is fed to the HLD.
The intention of this BITE scheme is that the HLD receives BITE words from the
antenna, adds its own BITE words and then reports all of these to the SDU on one
ARINC 429 bus (marked ‘HLD BITE A429’ in the drawings). This scheme only
needs to be supported by manufacturers who offer an HLD, and who make provision
for ARINC 429 control of the antenna. Power to the HLD and the antenna may also
be supplied through the multi-pin connectors.
7.2 Configuration 2 – Systems using a DLNA
When using a standard DLNA, control of the antenna through the antenna RF
coaxial cable is normally not possible. Either a second coaxial cable or ARINC 429
control is required. The design of the specific ELGA will determine which of the two
methods applies.
Power is supplied to the DLNA through the multi-pin connector.
ARINC CHARACTERISTIC 781 – Page 254
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
The loss in the RF TX cable needs to be kept low, as specified in section 0. This
configuration is suitable for aircraft where cooling of the HLD in the crown of the
aircraft is not possible. The power dissipation in the DLNA is much less than that of
the HLD.
The baseline interwiring method is shown in Figure 9. DLNA control and BITE
information is supplied via the antenna ARINC 429 interface. The ELGA should also
receive power, control and provide BITE information via the multi-pin connector.
The alternate interwiring method shown in Figure 10 makes provision for DLNA BITE
and control using discrete wires from the CSDU. Power to the DLNA may also be
supplied through the multi-pin connector.
7.3 Configuration 3 – Systems using a combined HPA, DLNA and Antenna
This system is suitable for aircraft with high or low cable losses. Because the
antenna contains a power amplifier, it can compensate for increased loss in the
coaxial cable as specified in section 0 of this attachment. A weight saving may be
achieved as only one cable is required between the two LRUs.
The interwiring method is shown in Figure 11.
Power
ELGA
RF RX **
HLD RF **
(DLNA + HPA)
RF TX **
Aircraft
Interfaces Low-
Power
CSDU
SCM
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
Power Power
ELGA
RF RX
Antenna
RF
HLD
RF TX
Aircraft
Low- Power
Interfaces
Power
CSDU
MutliControl A429
HLD BITE A429 Antenna BITE A429
Power Signalling
SCM
Power Power
ELGA
RF RX
Antenna
RF
DLNA
RF TX
Aircraft
High- Power
Interfaces
Power
CSDU DLNA on/off discrete
DLNA BITE discrete
MutliControl A429
Antenna BITE A429
Power Signalling
SCM
ATTACHMENT 7
COMPACT SATCOM DEFINITION (SB200)
Power Power
ELGA
RF RX
Antenna
RF
DLNA
RF TX
Aircraft
Interfaces High-
Power
CSDU DLNA on/off discrete
DLNA BITE discrete
Power Signalling
SCM
Power
ELGA, plus
HLD functions
Power Signalling
SCM
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
1.0 INTRODUCTION
In 2009 Inmarsat announced its intention to offer safety services over
SwiftBroadband (SBB) as an alternative to the Classic Aero service in oceanic
regions.
This attachment contains security guidance for SwiftBroadband safety services that
is intended to facilitate the sharing of SDU resources with safety communications
and other lower-assurance applications such as EFBs and passenger Internet
access. This guidance is intended for the ARINC 781 system designer involved in
the development of the 2 MCU single channels Compact SDU or the 6 MCU, multi-
channel SDU. It provides detailed guidance that will assist in development of a
system design that is intended to satisfy regulatory requirements by providing
adequate risk mitigation against threats that could result in undetected corruption of
FANS messages, the loss of the FANS messaging service, or the loss of cockpit
voice services. Most of the requirements herein are not necessary for strict functional
compliance with the ARINC Characteristic 781 but were developed to support overall
system security. These requirements should be subject to the same verification,
validation, and testing as that of any other functional requirements.
Some sample architectures (i.e., reference designs) are presented and are then
used as a basis for a security analysis based on the process defined in EUROCAE
ED-202A: Airworthiness Security Process Specification (draft) and ED-203 (draft).
This security analysis enabled the development of recommended security
requirements for ARINC 781 systems supporting safety services over SBB. It is
expected that the ED-202A Security Level (SL) should be defined according to the
Design Assurance Level (DAL), as defined in the lastest version of RTCA DO-178:
Software Considerations in Airborne Systems and Equipment Certification and
RTCA DO-254: Design Assurance Guidance for Airborne Electronic Hardware for
each component in the system.
The reference architecture employs the use of separate physical processors to
achieve segregation. A manufacturer may choose to use an alternative design, such
as a single processor employing an ARINC 653-compliant operating system to
achieve the equivalent segregation, or a combination of methods e.g., employing
multiple physical processors where specified processors can support segregated
functions implemented by methods such as the use of ARINC 653. All
implementations should be supported by a security analysis to show that it provides
segregation equivalent to that provided by the reference architecture.
2.0 OBJECTIVES
When designing a secure system, it is important to first document the overall security
objectives. These objectives are typically based on the experience of the system
designer and security experts and guided by an understanding of the functional role
of the system, the threat environment in which it will operate, and its criticality level.
These general objectives are intended to be further refined and augmented during
the security analysis phase.
The following high-level objectives have been identified for ARINC 781 systems
supporting SBB safety services, including both compact and full-size SDUs. They
are not in ranked order and should all be taken into consideration for a system
design.
ARINC CHARACTERISTIC 781 – Page 258
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
1. The SDU software should remain Level D to the extent possible (the RTCA
DO-178 design assurance level). If assurance requirements necessitate any
Level C functions, they should be as small as possible.
2. The SB200 design should be able to support SBB safety services and an
EFB running on a single channel card, including support for required priority
and preemption for safety services.
3. SDU designs should ensure that security threats targeting the SDU or using
the SDU as an attack vector cannot cause any safety impact to the aircraft.
4. Security controls should not unduly complicate maintenance and operations
activities.
5. Data loading functions should be designed to preclude the creation of new
vulnerabilities that could be exploited by an attacker or malware directed at
the system software or that of any connected system.
6. Data loading operations should be performed only when explicitly enabled by
authorized maintenance personnel.
7. Packet Data Protocol (PDP) context control should be protected from
unauthorized manipulation.
8. Means should be provided to prevent spoofing of safety-related
communications.
9. Security measures should be designed to prevent attacks that would result in
the decreased or loss of availability of services (e.g., via resource
exhaustion).
10. SDU channel cards should act as transparent modems.
11. The SDU should provide a means for detecting when it is out of software
conformity and generate the appropriate fault notification.
The following security areas are explicitly not addressed by this security guidance:
1. Authentication of ACARS messaging endpoints. Other specifications
address this area (i.e., ARINC Specification 823: Data Link Security, Part 1,
ACARS Message Security).
2. Security requirements for ground systems.
3.0 ARCHITECTURE
The safety services to be delivered over SwiftBroadband include ACARS, cockpit
voice, and an IP Priority data service. The ACARS service packages ACARS
messages into IP packets for transmission between air and ground. For voice, the
first cockpit voice call is delivered using a circuit switched connection, while a
second cockpit voice call is delivered over IP. The ADS-C and CPDLC FANS Air
Traffic Control (ATS) applications utilize the ACARS service over VHF, HF, and
Inmarsat Classic Aero satcom links.
3.1 End-to-End ACARS System Architecture
Figure 1 is a block diagram describing the end-to-end architecture for the ACARS
service, where a single SBB channel (e.g., SB200) is used to deliver the ADS-C and
CPDLC FANS applications, as well as Electronic Flight Bag (EFB) services.
ARINC CHARACTERISTIC 781 - Page 259
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Aircraft
BGAN Core
Satellite Satellite
ARINC/SITA ARINC/SITA
Figure 1 shows those functions that are resident in the SDU, the aircraft, and the
BGAN Core network. The BGAN Core network, which provides SBB non-safety
communication services, provides standard 3G IP service which is then used by the
air and ground ACARS gateways (AAGW and AGGW) to encapsulate the ACARS
messages as a UDP datagram for transport over IP.
The ground infrastructure is assumed to be operating at the appropriate security
level. Authentication mechanisms between aircraft and ground are therefore not
required.
ARINC CHARACTERISTIC 781 – Page 260
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Priority IP Ethernet
ACARS to / from
Cockpit Voice
ADL Ethernet
(Future)
EFB 1
EFB 2
CMU
BITE
SDU
Sw1 Sw2
ACD AISD
Processor Eth Driver Processor Eth Driver
eth0 eth0
BITE
IP IP
Data Load
ACARS Data Load
VoIP
Air
GW
GW
PS PS PS
IP IP
Channel
PPPoE / card PS
ethX
Telnet control
IP
EE
AISD Queue
ACD Queues
Data Arbitration
Control Data
Legend:
AC Domain
BITE AIS Domain
Channel Card
Mixed
CS
Segregation
RF Interface
The key features of this architecture are described in the following subsections.
3.2.1 Data Arbitration Function
The data arbitration function enforces traffic priority and preemption, and maintains
segregation of traffic between the AC and AIS domains up to the channel card
interface. Appropriate to mitigation of a major hazard, it should be developed to
DO-178/DO-254 Level C and should be segregated in both software and hardware
from the other SDU functions.
In the air-to-ground direction, the data arbitration function arbitrates between an AIS
domain data queue and separate data queues for packet-switched (PS) voice
(VoIP), ACARS, and Priority IP service. The ACD queues always have priority over
the AISD queue. Should any queue overflow, the existing data in the queue is then
discarded. The data queues should use separate memory spaces.
After connecting to the satellite network, the ACD processor automatically instructs
the channel card to create a PDP context specifically to carry data from the AISD.
ARINC CHARACTERISTIC 781 – Page 262
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
The data arbitration function marks the data for transmission through this context
based purely on the physical port from which it is received. This marking is achieved
by adding a header identifying the context that the channel card should use for
transmitting the data. The content of the data therefore cannot affect its routing.
The ACD processor similarly creates PDP contexts to be used for data packets
carrying CS, ACARS, and Ethernet data.
The ACD processor adds headers to data packets from the ACD which enable the
channel card to identify the data as Cockpit Voice, ACARS, or Priority IP service.
These headers are added by the EE (Ethernet Encapsulation) function that is part of
the networking protocol stack.
The mechanisms described above allow the channel to transmit data without ever
examining the actual payload data. It only examines the headers to determine the
PDP context to be used for transmission.
The parameters needed to establish the background context for the AISD are
contained in the Owner Requirements Table (ORT). These context parameters
include the Access Point Name (APN) and host name. The priority of this PDP
context is fixed. Neither the EFB nor the AISD processors have any control over the
PDP context and both should be agnostic to the characteristic or profile of the IP
connection. The context parameters cannot, therefore, be manipulated via an attack
from the EFB.
In the ground-to-air direction, the channel card sends data packets to the data
arbitration function with headers identifying the context through which the data was
received. The data arbitration function acts as a switch. It sends data to the AISD
processor or the ACD processor depending on the PDP context it originated from. In
the case of a data packet for the AISD, the data arbitration function removes the
header containing the PDP context identifier before sending the packet to the AISD
processor. In the case of packets for the ACD, the headers containing the PDP
context identifiers are not removed, as the ACD processor needs them to distinguish
between data packets for its different services.
To ensure that other hosts in the ACD cannot be made to inject malicious messages,
the link between the SDU and the ACARS system (e.g., the Communications
Management Unit (CMU) or Communications Management Function (CMF)) should
provide network isolation equivalent to that of a point-to-point ARINC 429
connection.
One possible implementation of the data arbitration function is as part of a Field
Programmable Gate Array (FPGA). Other methods may be possible (e.g., an
ARINC 653 operating system providing segregation) but should achieve a similar
level of segregation and robustness.
3.2.2 ACD (Aircraft Control Domain) Processor
As shown in Figure 2, the ACD processor provides all functions for the following
cockpit communications services:
• A circuit-switched (CS) voice channel
• A Voice over IP channel (VoIP)
• An ACARS Airborne Gateway (AAGW), with an associated port connecting to the
ACARS system (e.g., a CMU)
• An Ethernet interface for a Priority IP service (for unidentified future applications)
ARINC CHARACTERISTIC 781 - Page 263
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Control of the terminal also resides in the ACD processor. This includes some
functions not shown in Figure 2:
• Control of the antenna
• Control of the HPA
• ARINC 429 navigation data inputs for IRS, GNSS, and Aircraft ID information
• ORT
• Control of the channel card, including instructing the channel card to create
separate PDP contexts to be used for the various ACD and AISD services.
• Data loading (discussed under a separate heading)
• Interface to the Universal Integrated Circuit Card (UICC) (part of the SDU
Configuration Module (SCM))
3.2.3 AISD (Aircraft Information Services Domain) Processor
This processor is intended to provide connectivity to up to two EFBs. Because a
default background class context is pre-established by the ACD processor, no
support is provided for PPPoE or “Telnet” control of the channel card by the EFB or
the AISD processor. There should also be no exchange of control information
between the AISD and the ACD. Note that rather than being directly attached via
Ethernet, EFBs may be connected through an Aircraft Interface Device (AID) that
provides an additional layer of control over data transmission to and from the EFB
units. FAA Advisory Circular 20-173: Installation of Electronic Flight Bag (EFB)
Components, documents the regulatory requirements for EFB data interfaces.
The AISD functions should operate on a separate processor. It should not share
physical memory with the ACD. Alternative methods of achieving separation may be
possible (e.g. a single processor with an ARINC 653 operating system providing
segregation), but alternative solutions should achieve a similar level of segregation
and robustness as demonstrated by a security analysis.
3.2.4 PDP Contexts
The SwiftBroadband system uses the well-established concept of PDP contexts as
defined in the 3GPP system. A PDP context is a virtual bidirectional data pipe that is
established by negotiation between the channel card in the AES and the BGAN core
network. Multiple PDP contexts (up to 11) can be established over the same radio
bearer. This mechanism allows transmission of separated streams of data over a
single radio bearer.
At the time of establishing a PDP context, a PDP context identifier is agreed
between the AES and the core network. A header, which is added to transmitted
data packets, contains this PDP context header allowing the data to be routed
correctly at the receiving end. Each PDP context is associated with an Access Point
Name (APN) on the ground. Each PDP context is also allocated a priority level.
This association between a PDP context identifier and an APN and a priority level
exists for the duration of the PDP context.
PDP contexts can be created, modified, or destroyed as required at any time. This
is normally done by a controller instructing the channel card in the AES. The
channel card then negotiates the PDP context with the ground and reports back.
In an AES terminal, the ACD processor should set up the required PDP contexts for
ACARS and AISD IP data as soon as the channel card has connected to the
SwiftBroadband network. The APN for the ACARS PDP context is the AGGW. The
ARINC CHARACTERISTIC 781 – Page 264
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ACD processor also associates this PDP context with the AAGW internally. In this
way, one PDP context with the correct priority level forms a virtual data pipe between
the AAGW and AGGW. This association should remain for as long as the terminal is
connected to the SwiftBroadband network for the purposes of providing safety
services.
Similarly, a durable association with a PDP context is set up connecting the AISD
processor to an appropriate APN which provides connectivity to the internet.
The primary (AMBE+2) voice channel is handled by special provision in the BGAN
network without the need to set up a PDP context. A secondary voice channel uses
VoIP, however, for which a special PDP context is created on-demand by the ACD
processor.
For the sake of network security, the ACD processor should manage the setup,
modification, and destruction of all PDP contexts on the channel card.
The control of the channel card, particularly the setup of PDP contexts, should be
robust. A robust bi-directional link between the ACD processor and the channel card
should be used for the purpose. The creation of a PDP context should be confirmed
by the channel card. The PDP context identifier agreed between the channel card
and the RAN (as described in the Inmarsat SDM) should be passed to the ACD
processor. This identifier should be used in the headers to identify the context used
for data packets in both directions. For this reason, the ACD processor should also
notify the data arbitration function of the PDP context identifier for the AISD.
3.2.5 PPPoE / Telnet Control
External equipment using the priority IP Interface may be used to control the creation
and properties of IP contexts by the channel card, utilizing the protocol described in
Attachment 5. In the case of an SB200 safety services terminal, it is important that
the PPPoE / Telnet messaging is handled in the ACD processor, and such
messages are not passed to the channel card for interpretation. The ACD processor
should then control the channel card, typically using a proprietary interface and
protocol.
This mechanism allows the ACD processor to moderate the control of PDP contexts.
In particular, the ACD processor should prevent the external equipment from
affecting PDP contexts which the external equipment did not create, such as the
context used for ACARS. In addition, only trusted equipment in the ACD should be
allowed to have PPPoE / Telnet control over PDP contexts.
If the external equipment does not specifically require PPPoE/Telnet control over
PDP contexts, the ACD processor may be configured to set up a background context
for the priority IP port automatically (as it does for the AISD). PPPoE/Telnet control
may be disabled in this case. To make provision for different avionics equipment
connected to the priority IP port, the following options should be configurable in the
secure ORT:
• Create a default background context for the priority IP port (enable / disable, and
PDP context parameters).
• Allow PPPoE/Telnet control over the priority IP port (enable / disable).
ARINC CHARACTERISTIC 781 - Page 265
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
does not match an established PDP context, should cause the packet to be
discarded.
• While it is essential for the channel card to analyze many protocol layers of
ground-to-air data to satisfy operation of the SBB system, the final payload IP
data should not be analyzed by the channel card. Out-of-range or unexpected
data within the PDP context identifier should not lead to malfunction of the
channel card. Any error during PDP context analysis should lead to discarding of
the data packet.
• The channel card should robustly implement the protocol described in the
Inmarsat SDM to ensure that ground-to-air data received over one PDP context
does not get passed on with an incorrect PDP context identifier resulting in the
data being routed to the wrong destination by the data arbitration function.
• The channel card, in conjunction with the RAN, should enforce the traffic priority
and preemption over the SBB air-interface as specified in the Inmarsat SDM.
4.0 SECURITY ANALYSIS
After the reference architecture was developed, a condensed security analysis was
performed based on the airworthiness security process defined in RTCA draft
document DO-326A (EUROCAE ED-202A). This process helps ensure that all
potential security threats have been accounted for and that the threats are
adequately mitigated when there is a potential safety impact due to a security failure.
An ARINC 811-based analysis was done to aid the system designer. This is
published in Appendix B, Security Analysis of the Satcom Ethernet Interfaces.
System designers should plan to conduct a full security analysis on their complete
design as part of the overall development process.
The process defined in RTCA DO-326A is comprehensive and is intended to cover
the end-to-end airplane design process from the airplane level down to the system
and item levels. It is intended to align closely with SAE ARP4754A. Because
ARINC 781 defines just one system, only a subset of the overall process was used.
At a high level, the analysis process consists of the following steps:
1. Identify the security scope to determine the points of entry to the system.
2. Identify the external threats that can attack those entry points and how they
can impact the system.
3. Determine the overall security architecture of the system, including the
potential vulnerabilities and any existing mitigations against the threats.
4. Determine security risks for the system, based on impact and likelihood of
successful attacks.
5. Identify threat conditions with a non-trivial safety impact, and mitigations that
reduce the risks to an acceptable level. Develop additional mitigations as
needed to address any remaining unacceptable risks.
6. Identify any external dependencies that contribute to the overall security of
the system including operational requirements.
ARINC CHARACTERISTIC 781 - Page 267
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Figure 3 shows the key questions to be answered as part of the security analysis.
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Also, if ARINC 664 (deterministic Ethernet) is used for any interfaces, it would likely
be used instead of the standard Ethernet interfaces (i.e., an aircraft network would
likely use either deterministic Ethernet or regular Ethernet, but not both side-by-
side).
4.2.2 Assets
The assets characterize the system well enough to identify the potential targets of
attack. Assets include functions, data, and resources that are associated with
airworthiness or airworthiness security. These are the components of the system
that, if attacked, will cause an adverse effect on aircraft safety. For purposes of this
analysis, we are focused on the safety services to be carried over the SBB network
as they are managed by the SDU system on the airplane.
1. ACARS messages containing ATS or Airline Operational Communications
(AOC) messages
2. Cockpit voice calls, either circuit-switched or packet-switched (VoIP)
3. IP data to or from the cockpit (future use, not analyzed here)
4. ORT-based configuration data for the SDU
5. System software
6. The data arbitration function (listed separately due to its importance to the
security of the system)
7. Universal Subscriber Identity Module (USIM) (which operates on the UICC
within the SCM)
8. PPPoE client software hosted on external system
9. Data loading functions and controls (e.g., WoW input, manual analog switch
inputs)
10. BITE reporting
11. Security functions
EFBs, other cabin systems, and passenger data are excluded from this analysis
because, they are either under protection of systems external to the SDU, has no
safety impact, or both. Also specifically excluded are the ground systems
communicating with the airborne equipment; ground systems are treated as external
dependencies.
4.2.3 External Dependencies
External dependencies are elements, functions, systems, or processes that
contribute to the overall security of the system under analysis but are outside the
perimeter of the system. For the SDU, these include:
1. Inmarsat ground station systems
Ground station systems should adhere to aviation industry best practices for
mission critical IT systems, for example, the U.S. National Institute of
Standards and Technology (NIST) risk management framework, which is
used by the FAA for security evaluation of Comm/Nav/Surveillance ground
systems. Specific control measures should include, but are not limited to:
ARINC CHARACTERISTIC 781 – Page 270
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
acceptable level based on impact and likelihood. For example, a risk of probable
(pIV) likelihood may be acceptable at level IV (minor) impact, but not acceptable at
level III (major) impact.
Note that time of exposure to a threat source is another variable to be considered.
Attackers onboard the aircraft have, at most, one flight segment to complete an
attack (and are able to attack only one aircraft), while attackers on the ground have
both significantly longer timeframes for an attack, plus the potential ability to impact
multiple aircraft simultaneously (i.e., all aircraft connected through a specific ground
station).
The assumptions stated above eliminate some threat source profiles from
consideration in this analysis. Also, some threat source profiles will not trace to a
threat condition, meaning they may present a security issue but not a safety issue.
These threat source profiles are nonetheless included in Table 1 for sake of
completeness, and are dispositioned accordingly.
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Element Description
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Element Description
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
In all three configurations, the domains are segregated from each other by using
separate processors for each domain, with no shared memory. Other methods may
be possible (e.g., an ARINC 653 operating system providing segregation), but
alternative solutions should achieve a similar level of segregation and robustness.
In addition, the safe BITE and data loading principles, as described for the SB200
system, should be used.
The configurations shown below assume the use of multiple channel cards, where
each channel card provides a single SBB channel. Manufacturers may wish to
employ channel cards which can provide multiple SBB channels, provided
segregation is maintained where necessary. For example a multi-channel capable
card may not need to meet any segregation requirement if all the channels are used
for PIESD. If, however, a multi-channel card is to be used for data belonging to
separate network domains (ACD/AISD/PIESD), it should provide segregation
equivalent to that provided by using separate channels cards for each network
domain.
ARINC CHARACTERISTIC 781 – Page 278
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Configuration 1:
Configuration 1, shown in Figure 4, uses a single-channel card for all cockpit
communications (ACD and AISD) using the architecture described above for SB200.
The other (one to three) channel cards may then be used for cabin communications
services (PIES).
Priority IP Ethernet
ACARS to / from
Cockpit Voice
ADL Ethernet
Cabin IP 1
Cabin IP 2
Phones
EFB 1
EFB 2
CMU
BITE
SDU
Sw1 Sw2 Sw3
Legend:
Segre-
Data gation
Load
Data
Arbitration
CS Data
Data
Data Ctrl
Load
Load
Ctrl Load Data BITE Data
RF
Split / Combine
RF Interface
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Configuration 2:
Configuration 2, shown in Figure 5, uses separate channel cards for each domain.
The ACD uses one channel card, the AISD uses one channel card, and the PIESD
uses the remaining one or two channel cards.
Priority IP Ethernet
ACARS to / from
Cockpit Voice
ADL Ethernet
Cabin IP 1
Cabin IP 2
Phones
EFB 1
EFB 2
CMU
BITE
SDU
Sw1 Sw2 Sw3
Legend:
Segre-
Data gation
Load
RF
Split / Combine
RF Interface
ATTACHMENT 8
NETWORK SECURITY FOR SWIFTBROADBAND SAFETY SERVICES
Configuration 3:
Configuration 3, shown in Figure 6, allocates one channel for ACD use and is
segregated from the other two domains. The AISD and PIESD share the remaining
channel cards. Segregation between the AISD and the PIESD is achieved by a
specialized Ethernet switch designed to provide protection to the AISD, either
internal or external to the SDU. The design of this switch is beyond the scope of this
document.
Priority IP Ethernet
ACARS to / from
Cockpit Voice
ADL Ethernet
Cabin IP 1
Cabin IP 2
Phones
EFB 1
EFB 2
CMU
BITE
SDU
Note: Sw2 can be internal or
Sw1 Sw2 external to SDU
Data AIS
Load Domain
PIES
Domain
Segre-
gation
Data
Load
Data CS Data
Data
Ctrl
Load
Load
BITE Data
RF
Split / Combine
RF Interface
Attachment
Description
Number
1-1A General Configuration Overview – Single Satcom Installation
1-1B General Configuration Overview – Dual Satcom Installation
1-2A Satcom System Configuration – HPA Integrated in SDU
1-2B Satcom System Configuration – Optional Flange Mounted HPA
1-3 Standard Interwiring
1-4 Notes Applicable to Standard Interwiring
1-4A System Configuration Pins Definition and Interpretation
1-5 SDU Form Factor
1-5A SDU Top Plug Connector Layout
1-5B SDU Middle Plug Connector Layout
1-5C SDU Bottom Plug Connector Layout
1-6 SDU Configuration Module Form Factor
1-6A SDU Configuration Module Connector Layout
1-7A Small Flange Mount HPA Form Factor
1-7B Large Flange Mount HPA Form Factor
1-7C Flange Mount HPA Connector Layout
1-8 Diplexer/LNA Form Factor
1-8A Diplexer/LNA Connector Layout
1-9 Antenna Coverage
1-10 High Gain and Intermediate Gain Antenna Footprint
1-10A Close-up View of the Coaxial Interface for Top Mounted HGA and IGA
1-11 Low Gain Antenna Footprint
1-12 High Gain and Intermediate Gain Antenna Control Connector Layout
ARINC 429 Labels And Word Formats Used In The Aviation Satellite
2
Communications System
2A Antenna Configuration Data Reporting
2B Bit-Oriented Fault Reporting Protocol
3 Cockpit Voice – SAT Phone State Machine for Normal Operation
4-A ARINC 781 SDU Functions Matrix
4-B ARINC 781 SDU Interfaces Matrix
5 Ethernet Interface Control Document
6 ARINC 781 HPA Output Power Use Cases
7 Compact Satcom Definition (SB200)
8 Network Security For SwiftBroadband Safety Services
9 Attachment Reference Guide
ARINC CHARACTERISTIC 781 – Page 282
APPENDIX A
ACRONYMS
3D Three Dimensions
3GPP Third Generation Partnership Project
A/C Aircraft
AAC Airline Administrative Communications
AAGW ACARS Aircraft Gateway
ac Alternating current
AC Access Concentrator
ACARS Aircraft Communications Addressing and Reporting System
ACD Aircraft Control Domain
ACP Audio Control Panel
ACR Avionics Communication Router
ADIRS Air Data Inertial Reference System
ADL Airborne Data Loader
ADS-C Automatic Dependent Surveillance – Contract
ADSU Automatic Dependent Surveillance Unit
AEEC Airlines Electronic Engineering Committee
AES Aircraft Earth Station
AAGW ACARS Aircraft Gateway
AGGW ACARS Ground Gateway
AGC Automatic Gain Control
AISD Aircraft Information Services Domain
AM/PM Amplitude Modulation/Phase Modulation
AMBE Advanced Multi-Band Excitation (speech encoding algorithm)
AMCP Aeronautical Mobile Communications Panel
AMM Aircraft Maintenance Manual
AMR(S) Aeronautical Mobile-Satellite (Route) Service
AMS Audio Management System
AMSS Aeronautical Mobile Satellite Services
ANSP Air Navigation Service Provider
ANT Antenna
AOC Airline Operational Control
APC Airline Passenger Communications
APM Aircraft Personality Module
APN Access Point Name
AT Attention
ATC Air Traffic Control
ATG Air-to-Ground
ATE Automatic Test Equipment
ATLAS Abbreviated Test Language for All Systems
ATS Air Traffic Services
ARINC CHARACTERISTIC 781 – Page 283
APPENDIX A
ACRONYMS
V Volts
VA Volt-Ampere
Vac Volts, alternating current
Vdc Volts, direct current
VHF Very High Frequency
VoIP Voice over IP
VPN Virtual Private Network
VSWR Voltage Standing Wave Ratio
W Watts
WAN Wide Area Network
WCDMA Wide-band Code Division Multiple Access
WG Working Group
WGS-84 World Geodetic System 1984
WRC-03 World Radio Communication Conference 2003
WOW Weight On Wheels
WSC Williamsburg SDU Controller
WSCI Williamsburg SDU Controller Interface
XL Band Extended L-band
ARINC CHARACTERISTIC 781 – Page 290
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Step 2:
Select and implement
Security
securit y controls Review
Step 3:
Operate and manage
security controls
Figure 1
This analysis will also follow this framework, but will only focus on the activities of
Step 1, and to a limited extent, Step 2.
Step 1: “Identify information security needs and objectives” – consists of
performing the analysis necessary to enable determination of which security
controls are most appropriate to the system under consideration.
This step involves activities like:
• Asset identification – what information will the system process?
• Security categorization – how sensitive is the information?
• Risk assessment – what threats exist to the system? How likely are they
and how severe could their impact be?
• Policy identification – what policies, regulations, and laws must be taken
into account during system design and operation?
• Physical environment and assumptions – what assumptions can be made
that will affect the design of the security solution?
ARINC CHARACTERISTIC 781 – Page 292
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
This analysis is based on the characteristics of the information assets that will be
transmitted via the Inmarsat services. A security failure of the SDU could result
in exposure of confidential assets to unauthorized parties, compromise of the
integrity of those assets, impersonation of privileged communications, and/or the
inability to transmit those information assets to and from the ground. Security
controls or functions of the SDU and its Ethernet interfaces should therefore
enable resistance to such failures. Considering the mapping of user interfaces to
compatible Inmarsat services (ARINC 781, Table 3.3), the following analysis is
extended to all interfaces (SBB, Swift64, and Classic Aero). Indeed, all services
on SBB Ethernet are not available today and satcom should prevent security
failure when used with other services such as Classic Aero regardless of the
architecture of the aircraft.
The scope of the analysis is focused on the SDU and its neighbor systems, but
takes into consideration some of the potential threat vectors such as attacks
launched against the airplane from the ground.
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 1
Information Type Description Owner Primary Domain
Airline operational Data such as aircraft Airline Airline Information Services
data position, or FOQA data (AIS)
used to maintain health
and dispatchability of the
aircraft
Engine monitoring Data collected by engine Airline Aircraft Control (AC)
data monitoring subsystem (originates in ACD but
and transmitted to engine transmitted by system in AIS
manufacturer and airline domain)
Cabin crew Data for applications such Airline AIS
application data as duty free on board,
cabin logbook. May
include passenger
personal data and credit
card numbers.
Pilot comms AOC-type messages Airline AC or AIS
Passenger comms Voice over IP (VoIP) calls, Passengers Passenger Information and
email, web Entertainment Services
(PIES)
SDU configuration Configuration and session Airline / AIS or PIES (See note)
data essential for service
operation of the SDU provider
(Inmarsat
Distribution
Partner)
Safety services Cockpit voice and data Airline AC
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 2
Security Category
Information Type
Confidentiality Integrity Availability
Airline operational data High Medium Medium
Engine monitoring data Medium High High
Cabin crew application data High Medium Medium
Pilot communications High Medium Medium
Passenger communications Low Low Low
SDU control and configuration High High Medium
SDU operational status Low Medium Medium
Safety services Medium High High
Notes:
1. Due to sensitivities to tracking of individual pilot actions, airline
operational data such as FOQA must be kept highly confidential
until it is processed and anonymized on the ground. Also, as
airlines more fully integrate the data feeds coming off of the
aircraft into their regular operations, they will rely on its availability
for operations.
2. The effectiveness of onboard applications (e.g. aircraft health
monitoring and prognostics functions) depends on the reliable
collection and off-aircraft transmission of the associated data.
Loss, corruption, alteration or reception of the data by
unauthorized entities can compromise the integrity of the data and
thus severely impact the effectiveness of the applications and their
value to the airline.
3. Cabin crew application data ratings reflect the sensitivity of
passenger personal and credit card data that might be present in
a “buy onboard” application, and reliance on transmission of cabin
logbook data to the ground to ensure quick turnaround at the
arrival gate.
4. Passenger communications, while possibly important to the
passenger, are rated “Low” to reflect the fact that an attack
against any of the categories would have minimal impact to the
airline, loss of goodwill chief among them.
5. A compromise of the SDU’s own configuration data (e.g. ORT)
would likely impact the other information types. Loss or non-
availability of this data would mean that the SDU could not
operate, and therefore no satcom service could be provided.
Likewise if its integrity were compromised, although this could also
have a financial impact as an attacker could manipulate the
configuration to use a more expensive class or type of service.
Adding the capability of the satcom to support safety services, the
integrity of the configuration needs to be assured.
ARINC CHARACTERISTIC 781 – Page 296
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
The primary domain mainly depends on the architecture of the Aircraft. The analysis
should be based on the most restrictive use of the satcom devices.
The connection between the different outputs identified in Table 3-3 and the different
domains are identified in the following table (including future support):
Inmarsat Service
Connected
User Interface Swift "Classic"
Swift64 Domain
Broadband Aero
Non - ATC 4-wire Analog +
X X ACD
Cockpit Voice discretes
ATC Cockpit 4-wire Analog +
X X ACD
Voice discretes
2-wire Analog
X X X
POTS/SLIC
Cabin Voice AISD/PIESD
CEPT-E1 X X X
ISDN X X X
ARINC 429
Non - ATC X
Data-2/Data-3 ACD
Cockpit Data
Ethernet/AFDX X X X
ARINC 429
X
ATC Cockpit Data Data-2/Data-3 ACD
Ethernet/AFDX X X
CEPT-E1 X X X
Cabin Data (inc. ISDN X X
Fax, Modem & Ethernet X X AISD/PIESD
Packet Data) 2-wire Analog
X X X
POTS/SLIC
ARINC CHARACTERISTIC 781 – Page 297
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Aircraft
SATCOM
Non ATC Cockpit Voice 4-wire Analog + discretes
ACD
ATC ARINC 429 Data-2/Data-3
Cockpit Data Ethernet / AFDX
2-wire Analog+POTS/SLIC
AISD
Cabin Voice CEPT-E1
ISDN
CEPT-E1
PIESD
ISDN
Cabin Data
Ethernet
Administration, 2-wire Analog+POTS/SLIC
Configuration, Control,
Dataloading,
Monitoring...
Administration,
Configuration, Control,
Dataloading,
Monitoring...
Figure 2
ARINC CHARACTERISTIC 781 – Page 299
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 3
Threat
Threat Description Likelihood Severity
Identifier
T.ENTRY.1 Control messages to the SDU may be spoofed. Highly likely Medium
T.ENTRY.3 Status messages from the SDU may be spoofed. Highly likely Medium
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Threat
Threat Description Likelihood Severity
Identifier
An attacker or non-malicious user may generate bogus
T.DOS.2 or spurious traffic that saturates the channel or specific Highly likely High
contexts.
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Threat
Threat Description Likelihood Severity
Identifier
An authorized user of the system may intentionally force
T.OPERATE.1 Likely High
the operational system into an unsecure state.
The threats in Table 3 are shown in risk grid format below in Figure 2. Mitigation
efforts and selection of security controls should of course focus first on the
threats in the red areas, then on the ones in the yellow areas.
ARINC CHARACTERISTIC 781 – Page 302
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
l Likely
i
h
o T.PHYSICAL
o
d Unlikely
Severity
Figure 3
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 4
P.REGULATION.1 TBD
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 5
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 6
O.MISSION- Security controls for aircraft systems should not inhibit airline mission
ACCOMPLISH accomplishment (i.e. delivery of passengers from point A to point B).
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Table 7
The system should recover gracefully when Prevents operation of the system in an unsecure state.
failure of a security function is detected, and Attackers often attempt to disable security systems first so that
shut down if repeated abnormalities are seen. activities can continue undetected. Mitigates risk defined by:
T.FAILURE.1
The system should generate a maintenance Enables reactive detection of possible attacks against the
log entry when failure of a security function is system, i.e. does not directly prevent an attack but enables a
detected. response that may limit its severity or duration.
The satcom should support strict partitioning Use of separate physical communications paths (Ethernet
of traffic from AIS and PIES domains by interfaces, modems, and channel cards) minimizes the risk that
physical or equivalent logical separation an attacker can either subvert a shared component to gain
internal to the satcom, up to the RF module. access across the domain boundary, or flood a shared
component to reduce resources available to the other domain
(e.g., AIS, as attacker is most likely coming from PIES).
Mitigates risk defined by:
T.ACCESS.1
T.ENTRY.8
T.DOS
T.FAILURE.
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Satcom should support authenticated and Satcom should allow an authenticated and encrypted
encrypted communication between ground communication to go through the satcom between the ground
and AISD and the AISD (As suggested in the control deleted above, the
satcom may not be an end point of such a communication). It
protects communications from PIESD.
Satcom should support authenticated and Satcom should allow an authenticated and encrypted
encrypted communication between ground communication to go through the satcom between the ground
and ACD and the ACD (As suggested in the control deleted above, the
satcom may not be an end point of such a communication).
T.ENTRY.5
Satcom should support authenticated and Satcom should allow an authenticated and encrypted
encrypted communication between ground communication to go through the satcom between the ground
and PIESD and the PIESD
The justification of strict partitioning between ACD, AISD, and PIESD may not be
easy, but it has to be achieved in order to reduce the vulnerabilities of attack from
the PIESD.
Instead of having “SBB user sessions are authenticated and encrypted”
considering the different architectures, it is more useful for the satcom to have
authenticated and encrypted communications to go through satcom ACD or
AISD. Moreover, satcom may not be the only standard IP communication means
(as shown in Figure 6), and such authenticated and encrypted communication
should be common for all those means. This is the reason for authenticated and
encrypted communication to go through the satcom.
Satcom may also have to allow authenticated and encrypted communication
between ground and PIESD to go through the satcom in case of secure
communication for passenger is required by airlines/passenger.
According to Table 3-3 of Section 3, the cockpit data may be able to use SBB
services instead of “Classic” Aero, provided that SBB will not present more
vulnerabilities. To prevent this risk, a strict partitioning is required between
“Classic” Aero and SBB/S64, so that “Classic” Aero can still be used as it is
today.
The following drawings are illustrations of the different threats to illustrate the
need of these security measures.
ARINC CHARACTERISTIC 781 – Page 310
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Aircraft
SATCOM
NonNon
ATCATC
Cockpit Voice
Cockpit 4-4-wire
Voice Analog+
wire Analogdiscretes
+ discretes
ATC ATC
Cockpit VoiceVoice 4- wire Analog+ discretes
Cockpit
ACD
ATCATC ARINC
ARINC 429
429 Data
Data -2-2/ Data-3
/ Data
Cockpit
Cockpit DataData Ethernet/ AFDX
Ethernet
ARINC
ARINC 429429 Data
Data -2/ Data
- 2/Data -3
-3
Non Non
ATCATC Cockpit
Cockpit DataData
Ethernet/ AFDX
Ethernet
GROUND
2- wireAnalog
2-wire Analog+ POTS/ SLIC
AISD
Cabin Voice CEPT-E1
A IS
ISDN
CEPT-E1
P IESD
PIESD
ISDN
Cabin Data
Ethernet
Administration, 2- wire Analog
+ POTS/ SLIC
Configuration, Control,
Dataloading,
Monitoring...
Administration,
Configuration, Control,
From the outside of the aircraft
Dataloading,
Monitoring...
From the PIES
Figure 4 - Integrity
ARINC CHARACTERISTIC 781 – Page 311
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Aircraft
SATCOM
Non ATC Cockpit Voice 4- wire Analog + discretes
ACD
ATC ARINC
ARINC429
429Data -2/ Data-3
Data-2/
Cockpit Data Ethernet / AFDX
ARINC
ARINC429
429Data - 2/ Data-3
Data-2/
Non ATC Cockpit Data
Ethernet / AFDX
GROUND
2-wire
2- wireAnalog
Analog+ POTS/SLIC
AISD
Cabin Voice CEPT-E1
ISDN
CEPT-E1
PIESD
P SD
ISDN
Cabin Data
Ethernet
Administration, 2-wire
2- wireAnalog
Analog+ POTS/SLIC
Configuration, Control,
Dataloading,
Monitoring...
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
Aircraft
SATCOM
Non ATC Cockpit Voice 4- wire Analog + discretes
ACD
ATC ARINC 429 Data-2/ Data-3
Cockpit Data Ethernet / AFDX
AISD
Cabin Voice CEPT-E1
ISDN
CEPT-E1
PIESD
ISDN
Cabin Data
Ethernet
Administration, 2- wire Analog+ POTS/ SLIC
Configuration, Control,
Dataloading,
Monitoring...
Administration,
From the PIES
Configuration, Control,
Dataloading,
Monitoring...
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
assurance levels and reside in different domains of the aircraft network, yet share
a common link to the satcom SDU. The NFS/switch/router would have to be able
to differentiate traffic by source and destination, to protect the SDU from attack
by unauthorized persons in the IFE (cabin) domain. Establishing separate
VLANs by source of traffic would provide some security against basic threats, but
should not be regarded as a complete solution as many switch implementations
do not adequately resist attacks against them, and therefore may allow an
attacker to inject traffic that jumps VLANs or cause the switch to fail into shared
hub mode. Without additional security controls in the SDU, the
NFS/switch/router is solely responsible for network defense of the SDU.
This design represents the likely most common implementation, and is made
more secure by use of separate communication paths inside the satcom SDU
with two Ethernet interfaces to receive connections from the switch from the AIS
and PIES domains.
Pico Cell
NFS / PPPoE
EFB Switch / SATCOM
Router
IFE
Figure 7
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
NFS
EFB
Cockpit
PPPoE SATCOM
Pico Cell
NFS
IFE
Cabin
Figure 8
Figure 9 is similar in separation to the Figure 8 design, but uses two separate
SDUs. This design would go even more strongly against cost and weight
reduction objectives, while not achieving substantially lower risk than the design
above. Despite this, some airlines are considering this design, believing it to
offer redundancy that will enhance dispatchability of the aircraft.
NFS PPPoE
EFB SATCOM
Cockpit
Pico Cell
NFS PPPoE
IFE Cabin SATCOM
Figure 9
Absent additional security controls on the SDU Ethernet interface, the chief
security concern with the preceding designs is a complete reliance on the
security of the NFS / switch unit. This goes against the security objective of
defense-in-depth (O.DEFENSE-IN-DEPTH).
Another area of potential interest regards use of a standard interface for all
offboard links. Figure 10 below shows an example scenario for commercial
ARINC CHARACTERISTIC 781 – Page 315
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
aircraft where multiple offboard links are present and routing intelligence is
implemented to select a specific link depending on application, flight phase, and
location requirements. All interfaces are via Internet standard layer 3 protocols
(IP, ICMP).
This includes the communications manager function that is instantiated
separately from the NFS/switch/router. It is responsible for securely managing
and controlling all offboard links.
Figure 10
B-6 Summary
This security analysis has enumerated the threats that may be introduced when
interfacing an ARINC 781 satcom SDU to an aircraft’s onboard data network via
an Ethernet interface, and lays out some recommended security controls to
mitigate those threats. Adherence to defense-in-depth and traffic segregation
principles means that a secure network design cannot rely on single points of
control; rather each component in the network must contribute to overall security.
For the satcom, this means that the Ethernet interface(s) must be segregated
from the “Classic” Aero channel and must support authenticated and encrypted
connections when needed for the different domains. It must ensure that
malicious cabin network activities or ground activities cannot interfere with these
higher sensitivity domains. Most importantly, the communication paths inside the
satcom must be fully segregated through to the channel cards to ensure
adequate separation of domain traffic.
ARINC CHARACTERISTIC 781 – Page 316
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
APPENDIX B
SECURITY ANALYSIS OF THE SATCOM ETHERNET INTERFACE
SUPPLEMENT 1
TO
ARINC CHARACTERISTIC 781
MARK 3 AVIATION SATELLITE COMMUNICATION SYSTEM
Adopted by the Airlines Electronic Engineering Executive Committee: October 11, 2006
SUPPLEMENT 1 TO ARINC CHARACTERISTIC 781 – Page a
SUPPLEMENT 2
TO
ARINC CHARACTERISTIC 781
MARK 3 AVIATION SATELLITE COMMUNICATION SYSTEM
Adopted by the Airlines Electronic Engineering Executive Committee: September 26, 2007
SUPPLEMENT 2 TO ARINC CHARACTERISTIC 781 – Page a
SUPPLEMENT 3
TO
ARINC CHARACTERISTIC 781
MARK 3 AVIATION SATELLITE COMMUNICATION SYSTEM
SUPPLEMENT 4
TO
ARINC CHARACTERISTIC 781
MARK 3 AVIATION SATELLITE COMMUNICATION SYSTEM
ATTACHMENT 1-5B
Pins MP6J and MP6K assigned to “Data from GNSS to SDU”.
ATTACHMENT 2B – BIT-ORIENTED FAULT REPORTING PROTOCOL
In Fault Summary Word #7 for satcom table, changed bit 20 from “Reserved” to
“HGA Over Temperature”.
In Fault Summary Word #9 for satcom table, changed:
• Bit 21 to “Data from GNSS to SDU”
• Bit 22 to “Reserved for PIM Failure”
• Bits 23, 28 and 29 to “reserved”.
ATTACHMENT 5 – ETHERNET INTERFACE
New and updated material.
The following material is archived for future consideration and revision.
4.4.1.1 AT Command Timeouts
Activation and modification commands can take quite a while to execute over
the air. A context activation (+CGACT) with maximum retries can take almost 3
minutes; context modification (+CGCMOD) can take 1 minute. In an
environment where there are many processes sharing the same unit,
commands by these other users may delay execution (that is, commands from
all clients might be executed serially).
An application should tolerate a fairly long delay before declaring the
connection as invalid (say, 5 minutes). The user application may decide to
declare the operation has failed before that time, but should still give the side
AT handler a chance to respond.
If an application gives up on a side AT command, it is recommended that it
close the socket and connect a new one. Note that if the timeout is caused by
too many commands having been queued up at the same time, opening a new
connection and sending the command again will probably not result in a quick
response.
SUPPLEMENT 4 TO ARINC CHARACTERISTIC 781 – Page c
arincSwift_v1-0_MIB
Basic SNMP v2 imporrts Conformity according
SNMPv2 based OIDs
to other
ARINC standards
asLinks
aslInfos
asliSatLockState
aslServices
asliSatID
aslsServiceNumbers
asliLinkEntryNumbers
aslsServiceTable
asliLinkTable
PK aslsServiceIndex
PK asliLinkIndex
aslsServiceName
aslsServiceAvailablility I1 asliLinkMainLinkIndex
aslsServiceMaxChannels I2 asliLinkServiceIndex
aslsServiceMaxBW I3 asliLinkContrInterfaceIndex
I4 asliLinkPhysIntefaceIndex
asVersion asliLinkReleaseType
asliLinkReleaseReason
asuda<Vendor> asliLinkUp
asvMajorVersion RFC1213-MIB asliLinkChannelNo
- ifIndex asliLinkChannelCardNo
asvMinorVersion asliLinkBeamID
asuda<Vendor> asliLinkContextID
PPP-LCP-MIB asliLinkIpAddress
asliLinkCurAllocBW
asUserDefArea
- pppLinkStatusPhysicalIndex
asliLinkTxTrafficVol
asuda<Vendor>
asliLinkRxTrafficVol
asliLinkSatSigQual
asuSDU
assConfig asuSCMAvailable
assSelfTestAvailable
asuSCM
asscTrapActivation
assSelfTest
asuScmConfig asuScmInfo asuScmTrap
asscTrapDest (DNS / IP)
asscTrapDestPort asuDLNAAvailable
asssTestcaseTable
assInfos ARINC Swift MIB Structure
PK asssTestcaseIndex
asuDLNA
asssTestCommand asuAntennaAvailable
assiVendor
asstHealthStatusTrap
asssTestUpTime
assiHWPN asuAntenna
asstLinkReleaseTrap
asssTestStatus
asuAntConfig asuAntInfo asuAntTrap
assiSerialNumber
asstLinkBeamIDTrap
asssTestLastResult
assiHWFunction asu<TBD>Available
asstServiceAvailabilTrap
asssTestReturnCode Future units
assiShortName can be added here
asu<TBD>
asssTestReturnMessage
AERONAUTICAL RADIO, INC.
2551 Riva Road
Annapolis, Maryland 24101-7435
SUPPLEMENT 5
TO
ARINC CHARACTERISTIC 781
MARK 3 AVIATION SATELITE COMMUNICATION SYSTEM
SUPPLEMENT 6
TO
ARINC CHARACTERISTIC 781
MARK 3 AVIATION SATELITE COMMUNICATION SYSTEMS
2. Reference
3. Error
(Reproduce the material in error, as it appears in the standard.)
4. Recommended Correction
(Reproduce the correction as it would appear in the corrected version of the material.)
6. Submitter (Optional)
(Name, organization, contact information, e.g., phone, email address.)
Note: Items 2-5 may be repeated for additional errata. All recommendations will be evaluated by the staff. Any
substantive changes will require submission to the relevant subcommittee for incorporation into a subsequent
Supplement.
Review Status:
Page 1 of 3
Updated: March 2012
Mandate/regulatory requirement yes ☐ no ☐
Program and date: (program & date)
Is the activity defining/changing an infrastructure standard? yes ☐ no ☐
Specify (e.g., ARINC 429)
When is the ARINC standard required?
______(month/year)__________
What is driving this date? _______(state reason)_____________________
Are 18 months (min) available for standardization work? yes ☐ no ☐
If NO please specify solution: _________________
Are Patent(s) involved? yes ☐ no ☐
If YES please describe, identify patent holder: _________________
3.3 Issues to be worked
(Describe the major issues to be addressed.)
4.0 Benefits
4.1 Basic benefits
Operational enhancements yes ☐ no ☐
For equipment standards:
(a) Is this a hardware characteristic? yes ☐ no ☐
(b) Is this a software characteristic? yes ☐ no ☐
(c) Interchangeable interface definition? yes ☐ no ☐
(d) Interchangeable function definition? yes ☐ no ☐
If not fully interchangeable, please explain: _________________
Is this a software interface and protocol standard? yes ☐ no ☐
Specify: _________________
Product offered by more than one supplier yes ☐ no ☐
Identify: (company name)
4.2 Specific project benefits (Describe overall project benefits.)
4.2.1 Benefits for Airlines
(Describe any benefits unique to the airline point of view.)
4.2.2 Benefits for Airframe Manufacturers
(Describe any benefits unique to the airframe manufacturer’s point of view.)
4.2.3 Benefits for Avionics Equipment Suppliers
(Describe any benefits unique to the equipment supplier’s point of view.)
Page 2 of 3
Updated: March 2012
5.1 Meetings and Expected Document Completion
The following table identifies the number of meetings and proposed meeting days
needed to produce the documents described above.
Please note the number of meetings, the number of meeting days, and the
frequency of web conferences to be supported by the IA Staff.
6.0 Comments
(Insert any other information deemed useful to the committee for managing this
work.)
6.1 Expiration Date for the APIM
April/October 20XX
Page 3 of 3
Updated: March 2012