| In order to ensure the civilian aircraft airborne systems with high reliability,high security,and through the airworthiness approval,foreign civil aircraft is analyzed,and the process has a strict standards and guidelines,such as:the SAE APR4754 civilian aircraft and systems development guidelines and SAE APR4761 "civil airborne system and equipment safety guidelines and methods of the assessment process".Based on the above two standards,this paper studies the safety design of a civil aircraft high lift control system..Firstly,this paper studies the safety assessment process of civil aircraft airborne system,and analyzes the common methods and application opportunities of system safety analysis.Based on the design of typical civil aircraft high lift control system,the system function,performance,airworthiness,fault monitoring and response,system working mode and other requirements of the high lift control system are analyzed in detail.Then,the functional hazard analysis method is adopted to classify the functional hazard level of the high lift control system of a certain civil aircraft,identify,analyze and evaluate the potential danger in the system function,obtain the safety requirements of the high lift control system level,and guide the architecture design of the high lift control system.Lose the failure rate of the quantitative indicators to meet the system function,adopt the method of redundancy in control system architecture to meet availability requirements,in order to prevent the loss of system functionality completeness effect the function of the system,the corresponding function of the unit(or module)design independent monitors,when monitoring the defective,the corresponding fault cut off(isolated)measures,eliminate perform the function of incorrect affect system security.Compared with the control system architecture without security design concept,these measures will lead to the change of the design of high-lift system architecture from the single redundancy non-monitor architecture to the redundant one with monitor architecture,so as to meet the requirements of high reliability and high security of the system. |