C-17 flight control systems software design

An overview of software architecture for C-17 flight control system (FCS) avionics is presented. The software architecture is seen to be multiprocessor with both independent channel operation and (software) frame synchronous operation. Communication between subsystems is by 1553 and ARINC buses. Communication within a subsystem is by 1553 and a serial cross channel data link. When taken as a whole, the FCS avionics represents a reasonably complex fault-tolerant system. When separated into functional parts, however, this complexity has led to straightforward subsystem software design. The software design has been driven by the many mission requirements for the versatile C-17 airlifter. All of this has been made manageable by using mature software technology, robust redundancy management concepts, experienced engineering teams at the prime and supplier facilities, and the active involvement of the US Air Force customer