the shall
The shall The control system shall prevent engine overspeed
WHEN the shall When continuous ignition is commanded by the aircraft, the control system shall switch on continuous ignition
IF , THEN the shall If the computed airspeed fault flag is set, then the control system shall use modelled airspeed
WHILE the shall While the aircraft is in-flight, the control system shall maintain engine fuel flow above XXlbs/sec During thrust reverser door translation, the control system shall limit thrust to minimum idle
WHERE the shall Where the control system includes an overspeed protection function, the control system shall test the availability of the overspeed protection function prior to aircraft dispatch
While the aircraft is on-ground, when reverse thrust is commanded, the control system shall enable deployment of the thrust reverser While the aircraft is in-flight, if reverse thrust is commanded, then the control system shall inhibit thrust reverser deployment When selecting idle setting, if aircraft data is unavailable, then the control system shall select Approach Idle
It must be substantiated by tests, analysis or a combination thereof that the Engine Control System performs the intended functions in a manner which does not create unacceptable thrust or power oscillations. The Engine Control System shall not cause unacceptable thrust or power oscillations.
It must be demonstrated that, when a Fault or Failure results in a change from one Control Mode to another, or from one channel to another, or from the Primary System to the Back-up System, the change occurs so that the Engine does not exceed any of its operating limitations. When the Engine Control System changes operational mode, the Engine Control System shall maintain the engine within approved operational limits.
Single Failures leading to loss, interruption or corruption of Aircraft-Supplied Data, must not result in a Hazardous Engine Effect for any Engine. If a single Failure leads to deficient Aircraft-Supplied Data, then the Engine Control System shall not cause a Hazardous Engine Effect
The Engine Control System must be designed and constructed so that in the Full-up Configuration, the system is essentially single Fault tolerant for electrical and electronic Failures with respect to LOTC/LOPC events. While in a Full-Up Configuration, the Engine Control System shall be Essentially Single Fault Tolerant with respect to LOTC/LOPC event.
When over-speed protection is provided through hydromechanical means, it must be demonstrated by test or other acceptable means that the over-speed function remains available between inspection and maintenance periods. Where over-speed protection is provided through hydromechanical means, the frequency of Engine Control System inspection and maintenance periods shall be consistent with the required availability of the feature.
The software shall be distributed on CD-ROM and DVD media The software shall prevent UnauthorizedAccess to patient data. The software package shall include an installer. The software shall be written in Java. The software shall be available for purchase on the company web site and in retail stores. When an Unregistered Device is plugged into a USB port, the OS shall attempt to locate and load the driver for the device. When a DVD is inserted into the DVD player, the OS shall spin up the optical drive When the water level falls below the Low Water Threshold, the software shall open the water valve to fill the tank to the High Water Threshold. If the measured and calculated speeds vary by more than 10%, then the software shall use the measured speed. If the memory checksum is invalid, then the software shall display an error message. If the ATM card inserted is reported lost or stolen, then software shall confiscate the card. While in Low Power Mode, the software shall keep the display brightness at the Minimum Level. While the heater is on, the software shall close the water intake valve. While the autopilot is engaged, the software shall display a visual indication to the pilot. Where a thesaurus is part of the software package, the installer shall prompt the user before installing the thesaurus. Where hardware encryption is installed, the software shall encrypt data using the hardware instead of using a software algorithm. Where a HDMI port is present, the software shall allow the user to select HD content for viewing. When the landing gear button is depressed once, if the software detects that the landing gear does not lock into position, then the software shall sound an alarm. Where a second optical drive is installed, when the user selects to copy disks, the software shall display an option to copy directly from one optical drive to the other optical drive. While in start up mode, when the software detects an external flash card, the software shall use the external flash card to store photos. The installer software shall be available in Greek. When the user selects the caller count from the menu, the software shall display a count of the number of participants in the audio call in the UI. If the alarm software detects that a sensor has malfunctioned, then the alarm software shall phone the malfunctioned, then the alarm software shall phone the Alarm Company to report the malfunction While the mute button is depressed, the software shall mute the microphone. Where the book is available in digital format, the software shall allow the user to download the book without charge for a trial period of 3 days. While on battery power, if the battery charge falls below 10% remaining, then the system shall display a warning message to switch to AC power. The software shall include an online help file. When the software detects the J7 jumper is shorted, it shall clear all stored user names and passwords If the software detects an invalid DRAM memory configuration, then it shall abort the test and report the error. While in Manufacturing Mode, the software shall boot without user intervention. Where both 3G and Wi-Fi radios are available, the software shall prioritize Wi-Fi connections above 3G. While on DC power, if the software detects an error, then the software shall cache the error message instead of writing the error message to disk. Where the control system includes the engine starter, the control system shall prevent starter overspeed which could result in a Hazardous Engine Effect When considering engine starter drive failure mechanisms, the control system safety assessment shall assess the possibility of the starter remaining connected, or subsequently becoming reconnected, to the engine. When commanded by the flight crew the control system shall ignite the fuel in the engine combustion chamber. While the aircraft is in-flight, when inclement weather is detected, the control system shall increase engine thrust. When reverse thrust is commanded, if the reverser door fails to move, then the control system shall select Idle thrust. While the aircraft is in-flight, if the throttle command is lost, then the control system shall select Idle thrust. When exposed to EMI, electronic control system parts shall operate with an output deviation of no more than X%. The primary communications path from the control system shall be a digital data bus. If the primary communication path from the control system fails, then the control system shall use an alternative communication path. The alternative communication path from the control system shall be discrete. The control system shall indicate the engine oil quantity to the aircraft When continuous ignition is commanded by the aircraft, the control system shall switch on continuous ignition If the computed airspeed fault flag is set, then the control system shall use modelled airspeed While the aircraft is in-flight, the control system shall maintain engine fuel flow above XXlbs/sec Where a control system component acts as a firewall, the component shall be Fireproof. Whenmore than 3 incorrect login attempts occur for a single user ID within a 30 minute period, the software shall lock the account associated with that user ID The 802.3 Ethernet frame length shall be between 64 and 1518 bytes inclusive. The software shall display the current local time when selected by the user from the menu. The software shall allow a maximum of twenty concurrent users The software shall be backwards compatible with Windows® Vista SP2 and SP1, and Windows®XPSP3. 80% of requirements High, 15% Medium and 5% Low Whenusing unattended installation with standard options, the software shall install in under 3 minutes 80% of the time and under 4 minutes 100% of the time. The manual shall be located in a folder named User Manual in the root directory of the CD-ROM. The user shall only be allowed to enter whole numbers except if the time interval is selected. The user shall be allowed to enter the time interval in seconds and tenths of a second Prompt_PIN: The software shall prompt the user for the PIN.
When object detected happens, the door controller shall open door until opening the limit reached. When opening limit reached happens, the door controller shall start countdown counter. When timer expires happens, the door controller shall close door until object detected or closing limit reached. when object detected happens, the door controller shall not close door
While not liquid level 1 is reached, when start button is pressed the liquid mixer controller shall open valve 0 until emergency button is pressed. When liquid level 1 is reached occurs, the liquid mixer controller shall close valve 0 While not liquid level 2 is reached, when liquid level 1 is reached the liquid mixer controller shall open valve 1 until emergency button is pressed When liquid level 2 is reached occurs, the liquid mixer controller shall close valve 1. When liquid level 2 is reached occurs, the one minute timer shall start. When liquid level 2 is reached happens, the liquid mixer controller shall start stirring motor until one minute timer expires or emergency button is pressed. When one minute timer expires occurs, the two minute timer should start. When one minute timer expires happens, the liquid mixer controller shall open valve 2 until two minute timer expires happens, or emergency button is pressed When emergency button is pressed occurs, the liquid mixer controller shall close valve 0 When emergency button is pressed occurs, the liquid mixer controller shall close valve 1 When emergency button is pressed occurs, the liquid mixer controller shall close valve 2 When emergency button is pressed occurs, the liquid mixer controller shall stop stirring motor
When start button is pressed occurs, the motor controller shall start oil motor until stop button pressed. When start button is pressed occurs, the motor controller shall start ten second timer. When ten second timer expires occurs, the motor controller shall start main motor until stop button pressed. When ten second timer expires occurs, the motor controller shall start five second timer. When five second timer expires occurs, the motor controller shall start auxilary motor until stop button pressed.