Integrierte modulare Avionik (IMA)

Überblick

Integrated Modular Avionics (IMA) represents a fundamental architectural shift in how aircraft computing systems are designed, from collections of dedicated black boxes each performing a single function to a consolidated platform of standardised computing modules that host multiple avionics applications as partitioned software. The shift was driven by the exponential growth in avionics software complexity, the prohibitive cost of certifying and maintaining dozens of unique hardware platforms, and the weight and wiring penalties of distributing dedicated processors throughout the airframe. IMA centralises computing resources while maintaining the strict functional isolation required for aviation safety certification.

The FAA and EASA formally recognised IMA as a certification framework through RTCA DO-297 and the corresponding European standard, establishing the processes by which multiple hosted functions can be certified to different Design Assurance Levels (DALs) on shared hardware. The Airbus A380, entering service in 2007, fielded the first large-scale civil IMA implementation. The Boeing 787 followed with its own IMA architecture, and the Airbus A350 advanced the concept further. Retrofits of IMA principles into existing types such as the Boeing 737 MAX have applied selective modularity rather than a clean-sheet IMA design.

Funktionsweise

An IMA cabinet contains multiple Line Replaceable Modules (LRMs), standardised computing boards that run certified real-time operating systems (RTOS). The operating system implements spatial and temporal partitioning per ARINC 653, the standard governing hosted avionics applications. Spatial partitioning prevents one application from accessing or corrupting the memory space of another. Temporal partitioning allocates fixed time slots to each application within each scheduling cycle, ensuring that a malfunctioning application cannot monopolise processor time and starve safety-critical functions.

Applications ranging from flight management computing to cabin pressure control to maintenance recording run as partitioned software units called APEXs (Application/EXecutive). Each partition is assigned a DAL matching the function's safety criticality: a DAL A application such as fly-by-wire control occupies strictly isolated partitions certified to the highest rigour, while a DAL D application such as in-flight entertainment interfaces may share hardware but is completely isolated from safety-critical partitions. Cross-application communication uses defined inter-partition communication channels, typically ARINC 429 or ARINC 664 (AFDX) data network interfaces.

Hauptkomponenten

• Common Computing Resource (CCR): Standardised computing cabinet housing multiple LRMs, with hot-standby redundancy provided by active-standby module pairs for critical functions.
• Line Replaceable Module (LRM): Plug-in computing board in a standard form factor, interchangeable between slots and programmable with different application software loads.
• ARINC 653 RTOS: Real-time operating system implementing spatial and temporal partitioning, providing the certified isolation boundary between hosted applications.
• AFDX Network (ARINC 664): Avionics Full-Duplex Switched Ethernet network replacing hundreds of point-to-point ARINC 429 buses with a managed switched network offering deterministic latency and high bandwidth.
• Network Switch: Dedicated avionics Ethernet switch enforcing Virtual Link bandwidth allocation to guarantee deterministic data delivery between IMA cabinets and remote data concentrators.

Anwendungen bei Flugzeugen

The Airbus A380's IMA, developed by Thales and Diehl, uses two Core Processing Input/Output Modules (CPIOMs) redundant cabinets hosting applications including flight warning, fuel management, cabin pressure, and aircraft condition monitoring. The Boeing 787 employs a Common Core System (CCS) with dual Common Computing Resource cabinets connected by an AFDX backbone network, hosting applications for flight management, flight controls monitoring, and utilities management. The Airbus A350 extended IMA to cover virtually all aircraft functions, reducing total avionics box count dramatically compared with traditional federated architectures. The Boeing 737 MAX applies a more limited modular approach through its Flight Management Computing System but retains largely federated architectures for other systems.

Vorteile und Grenzen

IMA reduces airframe weight by consolidating hardware, replacing many individual boxes and their dedicated power supplies and cooling provisions with shared rack space. Standardised LRMs simplify spares logistics, since a single module type can serve multiple functions depending on its software load. Software updates can be loaded to hosted applications without replacing hardware, and the AFDX network reduces wire bundle weight compared with parallel point-to-point ARINC 429 buses. The principal challenge is the complexity of multi-application certification: demonstrating that partitioning guarantees are robust enough for DAL A applications sharing hardware with lower-DAL functions requires extensive analysis and testing. Development and integration costs for IMA-based systems are substantial, and modifications to any hosted application require re-certification analysis of all partitions on the affected module, creating longer and more expensive software change processes than federated architectures.