{"text_format":"2","workbook":"xlsx","n_sheets":15,"sheets":["ReadME","SFMEA","MCPS","Motor","Propeller","Power supply","Structure","RC receiver","WIFI controller","LIDAR altimeter","Optical flow sensor","GPS receiver","Flight controller","Remote control","Control desk"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":27,"comments":1,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"ReadME","index":0,"n_rows":0,"n_cols":0,"rows_kept":0,"cut":false,"hidden":false,"merged":[]}

{"sheet":"SFMEA","index":1,"n_rows":140,"n_cols":12,"rows_kept":140,"cut":false,"hidden":false,"merged":[[51,0,52,0],[1,0,6,0],[7,0,12,0],[13,0,18,0],[19,0,24,0],[25,0,29,0],[30,0,34,0],[35,0,39,0],[40,0,44,0],[45,0,46,0],[47,0,48,0],[49,0,50,0],[68,0,71,0],[76,0,122,0],[53,0,58,0],[60,0,61,0],[62,0,63,0],[64,0,67,0],[132,0,139,0],[72,0,75,0],[123,0,124,0],[127,0,129,0],[130,0,131,0]]}
["Equipment","Ref\n(in MBSA physical model)","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["MCPS 1","Drone.Propulsion_unit_1.Propulsion_unit_1_CAN_bus_driver.Loss","MCPS.CANBusDriver.Loss","Loss of communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit_1_CAN_bus_driver.Erroneous","MCPS.CANBusDriver.Erroneous","Erroneous communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.MCPS.Control_channel.Loss","MCPS.Control_channel.Loss","Loss of controller power provided to the motor","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.2180103939333076E-5,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.MCPS.Control_channel.Erroneous","MCPS.Control_channel.Erroneous","Erroneous speed rotation of the motor","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Flight duration","1.E-6",1.0889223289674444E-7,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.MCPS.Monitoring_channel.Loss","MCPS.Monitoring_channel.Loss","Unexpected motor shutdown","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.4247398977608546E-6,"FC_01","MCPS monitoring channel failsafe is \"shutdown enabled\""]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.MCPS.Monitoring_channel.Erroneous","MCPS.Monitoring_channel.Erroneous","Undefined shutdown command","Worst case : Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-6",1.3007842329502734E-6,"FC_01"]
["MCPS 2","Drone.Propulsion_unit_2.Propulsion_unit_2_CAN_bus_driver.Loss","MCPS.CANBusDriver.Loss","Loss of communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit_2_CAN_bus_driver.Erroneous","MCPS.CANBusDriver.Erroneous","Erroneous communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.MCPS.Control_channel.Loss","MCPS.Control_channel.Loss","Loss of controller power provided to the motor","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.2180103939333076E-5,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.MCPS.Control_channel.Erroneous","MCPS.Control_channel.Erroneous","Erroneous speed rotation of the motor","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Flight duration","1.E-6",1.0889223289674444E-7,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.MCPS.Monitoring_channel.Loss","MCPS.Monitoring_channel.Loss","Unexpected motor shutdown","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.4247398977608546E-6,"FC_01","MCPS monitoring channel failsafe is \"shutdown enabled\""]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.MCPS.Monitoring_channel.Erroneous","MCPS.Monitoring_channel.Erroneous","Undefined shutdown command","Worst case : Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-6",1.3007842329502734E-6,"FC_01"]
["MCPS 3","Drone.Propulsion_unit_3.Propulsion_unit_3_CAN_bus_driver.Loss","MCPS.CANBusDriver.Loss","Loss of communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit_3_CAN_bus_driver.Erroneous","MCPS.CANBusDriver.Erroneous","Erroneous communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.MCPS.Control_channel.Loss","MCPS.Control_channel.Loss","Loss of controller power provided to the motor","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.2180103939333076E-5,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.MCPS.Control_channel.Erroneous","MCPS.Control_channel.Erroneous","Erroneous speed rotation of the motor","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Flight duration","1.E-6",1.0889223289674444E-7,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.MCPS.Monitoring_channel.Loss","MCPS.Monitoring_channel.Loss","Unexpected motor shutdown","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.4247398977608546E-6,"FC_01","MCPS monitoring channel failsafe is \"shutdown enabled\""]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.MCPS.Monitoring_channel.Erroneous","MCPS.Monitoring_channel.Erroneous","Undefined shutdown command","Worst case : Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-6",1.3007842329502734E-6,"FC_01"]
["MCPS 4","Drone.Propulsion_unit_4.Propulsion_unit_4_CAN_bus_driver.Loss","MCPS.CANBusDriver.Loss","Loss of communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit_4_CAN_bus_driver.Erroneous","MCPS.CANBusDriver.Erroneous","Erroneous communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.MCPS.Control_channel.Loss","MCPS.Control_channel.Loss","Loss of controller power provided to the motor","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.2180103939333076E-5,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.MCPS.Control_channel.Erroneous","MCPS.Control_channel.Erroneous","Erroneous speed rotation of the motor","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Flight duration","1.E-6",1.0889223289674444E-7,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.MCPS.Monitoring_channel.Loss","MCPS.Monitoring_channel.Loss","Unexpected motor shutdown","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.4247398977608546E-6,"FC_01","MCPS monitoring channel failsafe is \"shutdown enabled\""]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.MCPS.Monitoring_channel.Erroneous","MCPS.Monitoring_channel.Erroneous","Undefined shutdown command","Worst case : Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-6",1.3007842329502734E-6,"FC_01"]
["Motor 1","Drone.Propulsion_unit_1.Propulsion_unit.Motor.Motor_structure","Motor.Structure.Loss","Loss of motor structural integrity, leading to loss of loads transmission from propeller to drone structure","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Visible","1.E-5",2.3918589801539035E-6,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Loss","Complete loss of rotation mouvement generation on motor axis","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Motor monitoring function","Visible","1.E-5",6.4094910470042634E-5,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Erroneous","Erroneous or partial loss of rotation mouvement generation on motor axis","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Motor monitoring function","1.E-6",8.6480884441309973E-6,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Loss","Complete loss of speed measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-5",1.331764946534399E-6,"FC_01","Loss of speed measure leads to commanded desactivation of motor by the flight controller monitoring channel"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Erroneous","Erroneous spead measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-6",1.1535710273058444E-7,"FC_01","Erroneous speed measure triggers the discrepancy check in the flight controller monitoring channel"]
["Motor 2","Drone.Propulsion_unit_2.Propulsion_unit.Motor.Motor_structure","Motor.Structure.Loss","Loss of motor structural integrity, leading to loss of loads transmission from propeller to drone structure","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust",null,"Visible","1.E-5",2.3918589801539035E-6,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Loss","Complete loss of rotation mouvement generation on motor axis","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Motor monitoring function","Visible","1.E-5",6.4094910470042634E-5,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Erroneous","Erroneous or partial loss of rotation mouvement generation on motor axis","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Motor monitoring function","1.E-6",8.6480884441309973E-6,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Loss","Complete loss of speed measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-5",1.331764946534399E-6,"FC_01","Loss of speed measure leads to commanded desactivation of motor by the flight controller monitoring channel"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Erroneous","Erroneous spead measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-6",1.1535710273058444E-7,"FC_01","Erroneous speed measure triggers the discrepancy check in the flight controller monitoring channel"]
["Motor 3","Drone.Propulsion_unit_3.Propulsion_unit.Motor.Motor_structure","Motor.Structure.Loss","Loss of motor structural integrity, leading to loss of loads transmission from propeller to drone structure","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust",null,"Visible","1.E-5",2.3918589801539035E-6,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Loss","Complete loss of rotation mouvement generation on motor axis","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Motor monitoring function","Visible","1.E-5",6.4094910470042634E-5,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Erroneous","Erroneous or partial loss of rotation mouvement generation on motor axis","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Motor monitoring function","1.E-6",8.6480884441309973E-6,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Loss","Complete loss of speed measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-5",1.331764946534399E-6,"FC_01","Loss of speed measure leads to commanded desactivation of motor by the flight controller monitoring channel"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Erroneous","Erroneous spead measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-6",1.1535710273058444E-7,"FC_01","Erroneous speed measure triggers the discrepancy check in the flight controller monitoring channel"]
["Motor 4","Drone.Propulsion_unit_4.Propulsion_unit.Motor.Motor_structure","Motor.Structure.Loss","Loss of motor structural integrity, leading to loss of loads transmission from propeller to drone structure","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust",null,"Visible","1.E-5",2.3918589801539035E-6,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Loss","Complete loss of rotation mouvement generation on motor axis","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Motor monitoring function","Visible","1.E-5",6.4094910470042634E-5,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.Motor.Motor_rotation_generation","Motor.Rotation_generation.Erroneous","Erroneous or partial loss of rotation mouvement generation on motor axis","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Motor monitoring function","1.E-6",8.6480884441309973E-6,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Loss","Complete loss of speed measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-5",1.331764946534399E-6,"FC_01","Loss of speed measure leads to commanded desactivation of motor by the flight controller monitoring channel"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.Motor.Motor_speed_measure","Motor.Speed_measure.Erroneous","Erroneous spead measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible","1.E-6",1.1535710273058444E-7,"FC_01","Erroneous speed measure triggers the discrepancy check in the flight controller monitoring channel"]
["Propeller 1","Drone.Propulsion_unit_1.Propulsion_unit.Propeller.Loss","Propeller.Loss","Complete loss of thrust on propeller axis (ex : loss of all blades)","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.9184328713376612E-5,"FC_01"]
[null,"Drone.Propulsion_unit_1.Propulsion_unit.Propeller.Erroneous","Propeller.Erroneous","Partial loss of thrust on propeller axis (ex : loss of one blade)","Erroneous propulsion from the related propulsion unit (not detected by the motor monitoring function), leading to erroneous global thrust (","Visible","Flight duration","1.E-6",3.3264564327955854E-7,"FC_01"]
["Propeller 2","Drone.Propulsion_unit_2.Propulsion_unit.Propeller.Loss","Propeller.Loss","Complete loss of thrust on propeller axis (ex : loss of all blades)","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.9184328713376612E-5,"FC_01"]
[null,"Drone.Propulsion_unit_2.Propulsion_unit.Propeller.Erroneous","Propeller.Erroneous","Partial loss of thrust on propeller axis (ex : loss of one blade)","Erroneous propulsion from the related propulsion unit (not detected by the motor monitoring function), leading to erroneous global thrust (","Visible","Flight duration","1.E-6",3.3264564327955854E-7,"FC_01"]
["Propeller 3","Drone.Propulsion_unit_3.Propulsion_unit.Propeller.Loss","Propeller.Loss","Complete loss of thrust on propeller axis (ex : loss of all blades)","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.9184328713376612E-5,"FC_01"]
[null,"Drone.Propulsion_unit_3.Propulsion_unit.Propeller.Erroneous","Propeller.Erroneous","Partial loss of thrust on propeller axis (ex : loss of one blade)","Erroneous propulsion from the related propulsion unit (not detected by the motor monitoring function), leading to erroneous global thrust (","Visible","Flight duration","1.E-6",3.3264564327955854E-7,"FC_01"]
["Propeller 4","Drone.Propulsion_unit_4.Propulsion_unit.Propeller.Loss","Propeller.Loss","Complete loss of thrust on propeller axis (ex : loss of all blades)","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","1.E-5",1.9184328713376612E-5,"FC_01"]
[null,"Drone.Propulsion_unit_4.Propulsion_unit.Propeller.Erroneous","Propeller.Erroneous","Partial loss of thrust on propeller axis (ex : loss of one blade)","Erroneous propulsion from the related propulsion unit (not detected by the motor monitoring function), leading to erroneous global thrust (","Visible","Flight duration","1.E-6",3.3264564327955854E-7,"FC_01"]
["Power supply","Drone.Power_supply.Propulsion1PowerSupply.Loss","PowerSupply.PropulsionSupply.Loss","Loss of power supply to one propulsion unit","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","2,5.E-10",8.0407067036482533E-11,"FC_01"]
[null,"Drone.Power_supply.Propulsion2PowerSupply.Loss","PowerSupply.PropulsionSupply.Loss","Loss of power supply to one propulsion unit","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","2,5.E-10",8.0407067036482533E-11,"FC_01"]
[null,"Drone.Power_supply.Propulsion3PowerSupply.Loss","PowerSupply.PropulsionSupply.Loss","Loss of power supply to one propulsion unit","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","2,5.E-10",8.0407067036482533E-11,"FC_01"]
[null,"Drone.Power_supply.Propulsion4PowerSupply.Loss","PowerSupply.PropulsionSupply.Loss","Loss of power supply to one propulsion unit","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration","2,5.E-10",8.0407067036482533E-11,"FC_01"]
[null,"Drone.Power_supply.FlightControlPowerSupply.Loss","PowerSupply.FlightControlSystemSupply.Loss","Loss of power supply to the Flight control system","Complete loss of drone propulsion","Visible","Flight duration","1.E-7",8.3626993592908094E-8,"FC_02","Loss of consigns from the flight controller leads to motor null speed commanded by the MCPS control channels"]
[null,"Drone.Power_supply.CommonPowerSupplyFailure","PowerSupply.Common.Loss","Complete loss of power supply to Flight Control System and all propulsion units","Complete loss of drone propulsion","Visible","Flight duration","1.E-7",1.4146016361310966E-8,"FC_02"]
["Structure","Drone.Structure.Loss","Structure.loss","Loss of structural integrity leading to loss of one or several propulsion unit","Partial loss of propulsion leading to erroneous global loss thrust","Visible","Flight duration","1.E-9",1.7435307687666082E-5,"FC_01"]
["RC receiver","Drone.Flight_Control_System.RC_receiver.Loss","RC_receiver.Loss","Complete loss of reception of RC transmitted data","Switch to manual mode (mode selection failsafe) and manual consigns selection, which are lost too. Final effect is complete loss of propulsion","Visible","Flight duration","1.E-5",1.3379728862473251E-7,"FC_01"]
[null,"N/A","RC_receiver.Erroneous","Erroneous reception of RC transmitted data","Undefined control mode and erroneous manual consigns, leading in worst case to erroneous global thrust.","Visible","Flight duration","1.E-9","<1.E-9","FC_01","RC transmission protocol is robust enough, so that it will not result in undetected erroneous data transmission in single failure. Associated event is extremely remote, and not represented in the MBSA model"]
["WIFI controller","Drone.Flight_Control_System.Wifi_controller.Loss","WIFI_controller.Loss","Complete loss of WIFI reception and transmission","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration","1.10^-5",1.7435307687666082E-5,"FC_03"]
[null,"Drone.Flight_Control_System.Wifi_controller.Erroneous","WIFI_controller.Erroneous","Erroneous WIFI reception and transmission","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode, the pilot lands the drone manually","Visible","Flight duration","1.10^-6",1.3379728862473251E-7,"FC_03"]
["LIDAR altimeter","Drone.Flight_Control_System.LIDAR_altimeter.Loss","LIDAR.Loss","Complete loss of altitude acquisition","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_02","Loss of LIDAR data detected by the flight controller, leads to INVALID navigation data"]
[null,"Drone.Flight_Control_System.LIDAR_altimeter.Erroneous","LIDAR.Erroneous","Erroneous altitude acquisition","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
[null,"Drone.Flight_Control_System.LIDAR_CAN_bus_driver.Loss","LIDAR.CANbus.Loss","Loss of data transmission on Sensors CAN bus","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_02","Loss of LIDAR data detected by the flight controller, leads to INVALID navigation data"]
[null,"Drone.Flight_Control_System.LIDAR_CAN_bus_driver.Erroneous","LIDAR.CANbus.Erroneous","Erroneous data transmission on Sensors CAN bus","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
["Optical flow","Drone.Flight_Control_System.Optical_flow_sensor","Optical_flow.Loss","Complete loss of optical flow acquisition","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration","1.E-5",8.244370799713978E-5,"FC_02","Loss of optical flow data detected by the flight controller, leads to INVALID navigation data"]
[null,"Drone.Flight_Control_System.Optical_flow_sensor","Optical_flow.Erroneous","Erroneous optical flow acquisition","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration","1.E-6",9.467973195907897E-7,"FC_01"]
[null,"Drone.Flight_Control_System.Optical_Flow_CAN_bus_driver.Loss","Optical_flow.CANbus.Loss","Loss of data transmission on Sensors CAN bus","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration","1.E-5",1.1205174654243776E-5,"FC_02","Loss of optical flow  data detected by the flight controller, leads to INVALID navigation data"]
[null,"Drone.Flight_Control_System.Optical_Flow_CAN_bus_driver.Erroneous","Optical_flow.CANbus.Erroneous","Erroneous data transmission on Sensors CAN bus","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration","1.E-6",4.5012064092849025E-7,"FC_01"]
["GPS receiver","Drone.Flight_Control_System.GPS_receiver.Loss","GPS.Loss","Complete loss of position acquisition","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,6.5456779839021826E-6,"FC_02","Loss of GPS data detected by the flight controller, leads to INVALID navigation data","FC_02"]
[null,"Drone.Flight_Control_System.GPS_receiver.Erroneous","GPS.Erroneous","Erroneous position acquisition","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.8460572488647387E-7,"FC_01",null,"FC_02"]
[null,"Drone.Flight_Control_System.GPS_CAN_bus_driver.Loss","GPS.CANbus.Loss","Loss of data transmission on Sensors CAN bus","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Loss of GPS  data detected by the flight controller, leads to INVALID navigation data","FC_02"]
[null,"Drone.Flight_Control_System.GPS_CAN_bus_driver.Erroneous","GPS.CANbus.Erroneous","Erroneous data transmission on Sensors CAN bus","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01",null,"FC_02"]
["Flight controller","Drone.Flight_Control_System.Flight_controller.Inertial_reference_sensor.Loss","Inertial_reference_sensor.Loss","Loss of inertial data measure ","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.0166206431636402E-5,"FC_02","Loss of pressure data detected by the flight controller, leads to INVALID navigation data."]
[null,"Drone.Flight_Control_System.Flight_controller.Inertial_reference_sensor.Erroneous","Inertial_reference_sensor.Erroneous","Erroneous inertial data measure","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,1.4827239129183944E-7,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Inertial_reference_sensor_MON.Loss","Inertial_reference_sensor_MON.Loss","Loss of inertial data measure for monitoring","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.4188984206221405E-6,"FC_02","Failsafe value of motor disabling, when one data is lost either on main or monitoring channel, is \"disabled\""]
[null,"Drone.Flight_Control_System.Flight_controller.Inertial_reference_sensor_MON.Erroneous","Inertial_reference_sensor_MON.Erroneous","Erroneous inertial data measure for monitoring","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,2.6280861129980842E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Pressure_sensor.Loss","Pressure_sensor.Loss","Loss of pressure measure","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.11640426445823E-5,"FC_02","Loss of north direction data detected by the flight controller, leads to INVALID navigation data."]
[null,"Drone.Flight_Control_System.Flight_controller.Pressure_sensor.Erroneous","Pressure_sensor.Erroneous","Erroneous pressure measure","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,3.302000898526835E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Pressure_sensor_MON.Loss","Pressure_sensor_MON.Loss","Loss of pressure measure for monitoring","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.9488586314775185E-5,"FC_02","Failsafe value of motor disabling, when one data is lost either on main or monitoring channel, is \"disabled\""]
[null,"Drone.Flight_Control_System.Flight_controller.Pressure_sensor_MON.Erroneous","Pressure_sensor_MON.Erroneous","Erroneous pressure measure for monitoring","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5943797421910233E-7,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Magnetometer.Loss","Magnetometer.Loss","Loss of north direction measure","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.0770784794533122E-6,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Drone.Flight_Control_System.Flight_controller.Magnetometer.Erroneous","Magnetometer.Erroneous","Erroneous north direction measure","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,2.5591367883692591E-7,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Drone.Flight_Control_System.Flight_controller.Magnetometer_MON.Loss","Magnetometer_MON.Loss","Loss of north direction measure for monitoring","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.2863874885080108E-5,"FC_01","The main flight control channel shall be robust enough (internal monitoring, watchdogs,…), so that this event can be considered as extremely remote and not the result of a single failure."]
[null,"Drone.Flight_Control_System.Flight_controller.Magnetometer_MON.Erroneous","Magnetometer_MON.Erroneous","Erroneous north direction measure for monitoring","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,1.9007805931475484E-7,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Flight_controller_power_supply.Loss","Flight_controller.power_supply.Loss","Complete loss of internal power supply","Complete loss of both main and monitoring channel, leading to null motor consigns (main channel) and motor disabling (monitoring channel). Complete loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,9.6595524458805993E-5,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Loss","Main_flight_control_board.Loss","Complete loss of the main flight control board","Loss of motor consigns transmitted to MCPS control channel, leading to null motor consigns. Complete loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,4.9197858400684769E-6,"FC_01"]
[null,"N/A","Main_flight_control_board.Erroneous","Undetected erroneous behaviour of the main flight control board","Worst case : erroneous motor consigns not detected by monitoring channel (because of common modes), leading to global erroneous thrust","Visible","Flight duration","Extremely remote (<1E-9)","<1E-9","FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM1_driver.Loss","Main_flight_control_board.PWM1_driver.Loss","Loss of signal transmission on PWM1 output","Loss of speed consign to motor 1, leading to complete loss of thrust on motor 1 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,3.3222047740646805E-5,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM1_driver.Erroneous","Main_flight_control_board.PWM1_driver.Erroneous","Erroneous signal transmission on PWM1 output","Erroneous speed rotation on motor 1, detected by monitoring channel, leading to motor 1 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,2.960601262513422E-6,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM2_driver.Loss","Main_flight_control_board.PWM2_driver.Loss","Loss of signal transmission on PWM2 output","Loss of speed consign to motor 2, leading to complete loss of thrust on motor 2 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,1.5585244414931888E-5,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM2_driver.Erroneous","Main_flight_control_board.PWM2_driver.Erroneous","Erroneous signal transmission on PWM2 output","Erroneous speed rotation on motor 2, detected by monitoring channel, leading to motor 2 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,1.8301743911033446E-6,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM3_driver.Loss","Main_flight_control_board.PWM3_driver.Loss","Loss of signal transmission on PWM3 output","Loss of speed consign to motor 3, leading to complete loss of thrust on motor 3 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,3.0156635028087051E-5,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM3_driver.Erroneous","Main_flight_control_board.PWM3_driver.Erroneous","Erroneous signal transmission on PWM3 output","Erroneous speed rotation on motor 3, detected by monitoring channel, leading to motor 3 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,9.8330337630945538E-7,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM4_driver.Loss","Main_flight_control_board.PWM4_driver.Loss","Loss of signal transmission on PWM4 output","Loss of speed consign to motor 4, leading to complete loss of thrust on motor 4 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,2.4506379169895204E-5,"FC_03"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.PWM4_driver.Erroneous","Main_flight_control_board.PWM4_driver.Erroneous","Erroneous signal transmission on PWM4 output","Erroneous speed rotation on motor 4, detected by monitoring channel, leading to motor 4 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,3.2356439976062499E-7,"FC_03"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Remote_Communication_Acquisition.Loss","Main_flight_control_board.Remote_Communication.Loss","Loss of data acquisition on the remote communication input","Loss of manual pilot orders on main channel. Not visible impact without further failure. With additionnal failure requiring the switch to manual mode, loss of motor consigns leading to complete loss of thrust","None","10fh",1.0000000000000001E-5,2.6695874697521724E-5,"FC_03","In case of loss of data displayed on control desk, the pilot shall switch to manual mode and abort the mission"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Remote_Communication_Acquisition.Erroneous","Main_flight_control_board.Remote_Communication.Erroneous","Erroneous data acquisition on the remote communication input","Erroneous manual pilot orders on main channel.Not visible impact without further failure. With additionnal failure requiring the switch to manual mode, detected by monitoring channel leading to disabling all motors.","None","10fh",9.9999999999999995E-7,1.2727765904674757E-6,"FC_03","In case of inconsistent flight plan progress displayed on control desk, the pilot shall switch to manual mode and abort the mission"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Wifi_Acquisition.Loss","Main_flight_control_board.WIFI_acquisition.Loss","Loss of data acquisition on the WIFI input","Loss of flight plan, detected visually by the pilot. Switch to manual mode, mission abortion","Visible","Flight duration",1.0000000000000001E-5,9.6129651469897865E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Wifi_Acquisition.Erroneous","Main_flight_control_board.WIFI_acquisition.Erroneous","Erroneous data acquisition on the WIFI input","Erroneous flight plan, detected visually by the pilot. Switch to manual mode, mission abortion","Visible","Flight duration",9.9999999999999995E-7,7.3790724721558129E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Wifi_downlink_driver.Loss","Main_flight_control_board.WIFI_driver.Loss","Loss of data transmission on the WIFI output","Loss of flight plan progress displayed on the control desk, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,3.7343113771285847E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Wifi_downlink_driver.Erroneous","Main_flight_control_board.WIFI_driver.Erroneous","Erroneous data transmission on the WIFI output","Inconsisten flight plan progress displayed on the control desk, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,1.293507630304602E-7,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Sensors_CAN_bus_Acquisition.Loss","Main_flight_control_board.Sensors_CAN_bus.Loss","Loss of data acquisition on Sensors CAN bus","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.Sensors_CAN_bus_Acquisition.Erroneous","Main_flight_control_board.Sensors_CAN_bus.Erroneous","Erroneous data acquisition on Sensors CAN bus","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01","The monitoring flight control channel shall be robust enough (internal monitoring, watchdogs,…), so that this event can be considered as extremely remote and not the result of a single failure."]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.COM_CCDL_driver.Loss","Main_flight_control_board.CCDL.Loss","Loss of data emission and reception on Cross Channel Data Link","Loss of data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,5.2129519445062674E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Main_flight_control_board.COM_CCDL_driver.Erroneous","Main_flight_control_board.CCDL.Erroneous","Erroneous data emission and reception on Cross Channel Data Link","Erroneous data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,1.713158704257433E-7,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Loss","Monitoring_flight_control_board.Loss","Complete loss of the monitoring flight control board","Loss of motor disabling orders to MCPSs, leading to complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,4.2370777829156366E-5,"FC_03"]
[null,"N/A","Monitoring_flight_control_board.Erroneous","Undetected erroneous behaviour of the monitoring flight control board","Worst case : disabling of some motors but not all, leading to global erroneous thrust","Visible","Flight duration","Extremely remote (<1E-9)","<1.E-9","FC_03"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Remote_communication_acquisition.Loss","Monitoring_flight_control_board.Remote_Communication.Loss","Loss of data acquisition on the remote communication input","Loss of manual override leading to switch to manual mode, and loss of manual pilot orders on monitoring channel, leading to failsafe disabling of all the motors. Complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,2.9355963334263714E-5,"FC_03"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Remote_communication_acquisition.Erroneous","Monitoring_flight_control_board.Remote_Communication.Erroneous","Erroneous data acquisition on the remote communication input","Erroneous manual override, leading at first to erroneous drone behaviour detected by the pilot. Switch to manual mode through the control desk mode selection. Then, erroneous pilot orders on monitoring channel, leading to failsafe disabling of all the motors. Complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,3.4970989142703844E-7,"FC_03"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Wifi_acquisition.Loss","Monitoring_flight_control_board.WIFI_acquisition.Loss","Loss of data acquisition on the WIFI input","Uncommanded switch to manual mode, detected by the pilot. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,2.2804217009063623E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Wifi_acquisition.Erroneous","Monitoring_flight_control_board.WIFI_acquisition.Erroneous","Erroneous data acquisition on the WIFI input","Erroneous mode selection, leading at first to erroneous drone behaviour detected by the pilot. Switch to manual mode through the manual override. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,6.2405194755415889E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Wifi_downlink_driver.Loss","Monitoring_flight_control_board.WIFI_driver.Loss","Loss of data transmission on the WIFI output","Loss of indicated mode displayed on control desk, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,3.3081571369387157E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Wifi_downlink_driver.Erroneous","Monitoring_flight_control_board.WIFI_driver.Erroneous","Erroneous data transmission on the WIFI output","Erroneous indicated mode displayed on the control desk, detected by the pilot, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,5.7670681936118216E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Sensors_CAN_bus_Acquisition_MON.Loss","Monitoring_flight_control_board.Sensors_CAN_bus.Loss","Loss of data acquisition on Sensors CAN bus","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Sensors_CAN_bus_Acquisition_MON.Erroneous","Monitoring_flight_control_board.Sensors_CAN_bus.Erroneous","Erroneous data acquisition on Sensors CAN bus","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.CCDL_driver.Loss","Monitoring_flight_control_board.CCDL.Loss","Loss of data emission and reception on  Cross Channel Data Link","Loss of data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,1.0590640353261939E-6,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.CCDL_driver.Erroneous","Monitoring_flight_control_board.CCDL.Erroneous","Erroneous data emission and reception on  Cross Channel Data Link","Erroneous data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,5.4818782508658892E-6,"FC_01","RC transmission protocol is robust enough, so that it will not result in undetected erroneous data transmission in single failure. Associated event is extremely remote, and not represented in the MBSA model"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Motor_CAN_bus_driver.Loss","Monitoring_flight_control_board.Motors_CAN_bus.Loss","Loss of data emission and reception on Motors CAN bus","Loss of motor disabling orders to MCPSs, leading to complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02"]
[null,"Drone.Flight_Control_System.Flight_controller.Monitoring_flight_control_board.Motor_CAN_bus_driver.Erroneous","Monitoring_flight_control_board.Motors_CAN_bus.Erroneous","Erroneous data emission and reception on Motors CAN bus","Worst case : disabling orders sent to some MCPS but not all, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_02"]
["Remote communication","Remote_control.Remote_communication.Loss","Remote.Communication.Loss","Loss of data emission","Loss of manual override, leading to switch to manual mode. As pilot orders are lost too, loss of motor speed consigns and complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,8.4299897904813612E-5,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"N/A","Remote.Communication.Erroneous","Erroneous data emission, not detectable by the RC receiver","Undefined control mode and erroneous manual consigns, leading in worst case to erroneous global thrust.","Visible","Flight duration","Extremely remote (<1.E-9) ","<1.E-9","FC_03"]
["Remote battery","Remote_control.Remote_battery.Loss","Remote.battery.Loss","Loss of internal power supply","Loss of data emission to flight controller. See Remote.Communication.Loss","Visible","Flight duration",1.0000000000000001E-5,2.7020906403075143E-5,"FC_03"]
["Remote switch","Remote_control.Remote_switch.Loss","Remote.switch.Loss","Uncontrolled switch off of the remote switch","Loss of data emission to flight controller. See Remote.Communication.Loss","Visible","Flight duration",1.0000000000000001E-5,6.5375505399357649E-5,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
["Push button","Remote_control.Push_button.Stuck_AUTO","Remote.Push_button.Stuck_AUTO","Push button stuck on AUTO mode","Incapacity to switch to manual mode. No further impact without additional failure requesting to switch to manual mode, but loss of drone protection","None","10fh",1.0000000000000001E-5,1.260146602556297E-6,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Remote_control.Push_button.Stuck_MAN","Remote.Push_button.Stuck_MAN","Push button stuck on MAN mode","Uncommanded switch to manual mode. Pilot still has the capacity to control the drone in manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,2.041739574443103E-7,"FC_03"]
[null,"Remote_control.Push_button.Oscillating","Remote.Push_button.Oscillation","Push button oscillating between AUTO and MAN modes","Oscillating control mode is filtered by the flight controller, which force the manual mode.Pilot still has the capacity to control the drone in manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,9.14071655413782E-6,"FC_03"]
["Left and right hands sticks","Remote_control.Left_and_right_hand_sticks.Loss","Remote.Sticks.Loss","Loss of acquisition on left and right sticks","Incapacity to control the drone in manual mode. No further impact without additional failure requesting to switch to manual mode, but loss of drone protection","None","10fh",1.0000000000000001E-5,2.2713475603586243E-6,"FC_03","Hyp : the pilot can detect and switch to manual mode quickly enough (discutable).\nRecommandation : when flight plan is lost, automatic switch to manual mode"]
[null,"Remote_control.Left_and_right_hand_sticks.Erroneous","Remote.Sticks.Erroneous","Erroneous acquisition on left and right sticks","Incapacity to control the drone in manual mode. No further impact without additional failure requesting to switch to manual mode, but loss of drone protection","None","10fh",9.9999999999999995E-7,1.7994035339122402E-6,"FC_03"]
["Control desk","Control_desk.SF4_4_Acquire_pilot_control_consigns_and_mode.Loss","ControlDesk.Pilot_Control_Consigns_and_mode.Loss","Loss of pilot control consigns and mode acquisition","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,3.1992521809204252E-5,"FC_03","Pilot detects the inconsistency between the real and the displayed drone behaviour"]
[null,"Control_desk.SF4_4_Acquire_pilot_control_consigns_and_mode.Erroneous","ControlDesk.Pilot_Control_Consigns_and_mode.Erroneous","Erroneous pilot control consigns and mode acquisition","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode through the manual override, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,1.122792565155034E-6,"FC_03","Pilot detects the inconsistency between the real and the displayed drone behaviour"]
[null,"Control_desk.SF6_1_Compute_Flight_Zone_and_Flight_Plan.Loss","ControlDesk.Compute_flight_zone_and_flight_plan.Loss","Loss of flight zone and flight plan computation","First, loss of flight plan leading to loss of propulsion. Pilot detection and switch to manual mode, gets back the control of the drone and abort the mission","Visible","Flight duration",1.0000000000000001E-5,3.2258878677370978E-6,"FC_03","Hyp : the pilot can detect and switch to manual mode quickly enough (discutable).\nRecommandation : when flight plan is lost, automatic switch to manual mode"]
[null,"Control_desk.SF6_1_Compute_Flight_Zone_and_Flight_Plan.Erroneous","ControlDesk.Compute_flight_zone_and_flight_plan.Erroneous","Erroneous flight zone and flight plan computation","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode through the manual override, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,1.0717292856211442E-6,"FC_03"]
[null,"Control_desk.SF6_4_Display_drone_follow_up_data.Loss","ControlDesk.Display_drone_follow_up_data.Loss","Loss of drone follow up data display","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,2.9005300919967564E-5]
[null,"Control_desk.SF6_4_Display_drone_follow_up_data.Erroneous","ControlDesk.Display_drone_follow_up_data.Erroneous","Erroneous drone follow up data display","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,7.372569248187424E-7]
[null,"Control_desk.Control_desk_common.Loss","ControlDesk.Common.Loss","Complete loss of all control desk functions","First, loss of flight plan leading to loss of propulsion. Pilot detection and switch to manual mode, gets back the control of the drone and abort the mission","Visible","Flight duration",1.0000000000000001E-5,1.0895853888951056E-5]
[null,"Control_desk.Control_desk_common.Erroneous","ControlDesk.Common.Erroneous","Complete erroneous behavior of all control desk functions","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode through the manual override, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,7.9839088913435668E-6]

{"sheet":"MCPS","index":2,"n_rows":7,"n_cols":11,"rows_kept":7,"cut":false,"hidden":false,"merged":[[1,0,6,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["MCPS","MCPS.CANBusDriver.Loss","Loss of communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243799E-5,"FC_01"]
[null,"MCPS.CANBusDriver.Erroneous","Erroneous communication on Motors CAN bus","Unexpected shutdown of one or several propulsion units, leading at worst to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01"]
[null,"MCPS.Control_channel.Loss","Loss of controller power provided to the motor","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration",1.0000000000000001E-5,1.4247398977608546E-6,"FC_01"]
[null,"MCPS.Control_channel.Erroneous","Erroneous speed rotation of the motor","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Flight duration",9.9999999999999995E-7,1.3007842329502734E-6,"FC_01"]
[null,"MCPS.Monitoring_channel.Loss","Unexpected motor shutdown","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration",1.0000000000000001E-5,1.4247398977608546E-6,"FC_01","MCPS monitoring channel failsafe is \"shutdown enabled\""]
[null,"MCPS.Monitoring_channel.Erroneous","Undefined shutdown command","Worst case : Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,1.3007842329502734E-6,"FC_01"]

{"sheet":"Motor","index":3,"n_rows":6,"n_cols":11,"rows_kept":6,"cut":false,"hidden":false,"merged":[[1,0,5,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Motor","Motor.Structure.Loss","Loss of motor structural integrity, leading to loss of loads transmission from propeller to drone structure","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust",null,"Visible",1.0000000000000001E-5,2.3918589801539035E-6,"FC_01"]
[null,"Motor.Rotation_generation.Loss","Complete loss of rotation mouvement generation on motor axis","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Motor monitoring function","Visible",1.0000000000000001E-5,6.4094910470042602E-6,"FC_01"]
[null,"Motor.Rotation_generation.Erroneous","Erroneous or partial loss of rotation mouvement generation on motor axis","Detected by the motor monitoring function, leads to motor shutdown and erroneous global thrust","Motor monitoring function","Motor monitoring function",9.9999999999999995E-7,8.6480884441310007E-6,"FC_01"]
[null,"Motor.Speed_measure.Loss","Complete loss of speed measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible",1.0000000000000001E-5,1.3317649465344001E-6,"FC_01","Loss of speed measure leads to commanded desactivation of motor by the flight controller monitoring channel"]
[null,"Motor.Speed_measure.Erroneous","Erroneous spead measure tachometer signal","Shutdown commanded by the flight controller monitoring channel, leading to loss of propulsion from the related propulsion unit and erroneous global thrust","Motor monitoring function","Visible",9.9999999999999995E-7,1.1535710273058444E-7,"FC_01","Erroneous speed measure triggers the discrepancy check in the flight controller monitoring channel"]

{"sheet":"Propeller","index":4,"n_rows":3,"n_cols":11,"rows_kept":3,"cut":false,"hidden":false,"merged":[[1,0,2,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Propeller","Propeller.Loss","Complete loss of thrust on propeller axis (ex : loss of all blades)","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration",1.0000000000000001E-5,1.9184328713376602E-5,"FC_01"]
[null,"Propeller.Erroneous","Partial loss of thrust on propeller axis (ex : loss of one blade)","Erroneous propulsion from the related propulsion unit (not detected by the motor monitoring function), leading to erroneous global thrust (","Visible","Flight duration",9.9999999999999995E-7,3.3264564327955854E-7,"FC_01"]

{"sheet":"Power supply","index":5,"n_rows":4,"n_cols":11,"rows_kept":4,"cut":false,"hidden":false,"merged":[[1,0,3,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Power supply","PowerSupply.PropulsionSupply.Loss","Loss of power supply to one propulsion unit","Loss of propulsion from the related propulsion unit, leading to erroneous global thrust","Visible","Flight duration",2.5000000000000002E-10,8.0407067036482533E-11,"FC_01"]
[null,"PowerSupply.FlightControlSystemSupply.Loss","Loss of power supply to the Flight control system","Complete loss of drone propulsion","Visible","Flight duration",9.9999999999999995E-8,8.3626993592908094E-8,"FC_02","Loss of consigns from the flight controller leads to motor null speed commanded by the MCPS control channels"]
[null,"PowerSupply.Common.Loss","Complete loss of power supply to Flight Control System and all propulsion units","Complete loss of drone propulsion","Visible","Flight duration",9.9999999999999995E-8,1.4146016361310966E-8,"FC_02"]

{"sheet":"Structure","index":6,"n_rows":2,"n_cols":11,"rows_kept":2,"cut":false,"hidden":false,"merged":[]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Structure","Structure.loss","Loss of structural integrity leading to loss of one or several propulsion unit","Partial loss of propulsion leading to erroneous global loss thrust","Visible","Flight duration",1.0000000000000001E-9,2.5028231794528477E-9,"FC_01"]

{"sheet":"RC receiver","index":7,"n_rows":3,"n_cols":11,"rows_kept":3,"cut":false,"hidden":false,"merged":[[1,0,2,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["RC receiver","RC_receiver.Loss","Complete loss of reception of RC transmitted data","Switch to manual mode (mode selection failsafe) and manual consigns selection, which are lost too. Final effect is complete loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,1.4590866589781499E-5,"FC_01"]
[null,"RC_receiver.Erroneous","Erroneous reception of RC transmitted data","Undefined control mode and erroneous manual consigns, leading in worst case to erroneous global thrust.","Visible","Flight duration",1.0000000000000001E-9,"<1.E-9","FC_01","RC transmission protocol is robust enough, so that it will not result in undetected erroneous data transmission in single failure. Associated event is extremely remote, and not represented in the MBSA model"]

{"sheet":"WIFI controller","index":8,"n_rows":3,"n_cols":11,"rows_kept":3,"cut":false,"hidden":false,"merged":[[1,0,2,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["WIFI controller","WIFI_controller.Loss","Complete loss of WIFI reception and transmission","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,1.7435307687666082E-5,"FC_03"]
[null,"WIFI_controller.Erroneous","Erroneous WIFI reception and transmission","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,1.3379728862473251E-7,"FC_03"]

{"sheet":"LIDAR altimeter","index":9,"n_rows":5,"n_cols":11,"rows_kept":5,"cut":false,"hidden":false,"merged":[[1,0,4,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["LIDAR altimeter","LIDAR.Loss","Complete loss of altitude acquisition","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,1.3269561500755639E-5,"FC_02","Loss of LIDAR data detected by the flight controller, leads to INVALID navigation data"]
[null,"LIDAR.Erroneous","Erroneous altitude acquisition","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,8.1404928129629469E-6,"FC_01"]
[null,"LIDAR.CANbus.Loss","Loss of data transmission on Sensors CAN bus","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Loss of LIDAR data detected by the flight controller, leads to INVALID navigation data"]
[null,"LIDAR.CANbus.Erroneous","Erroneous data transmission on Sensors CAN bus","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01"]

{"sheet":"Optical flow sensor","index":10,"n_rows":5,"n_cols":11,"rows_kept":5,"cut":false,"hidden":false,"merged":[[1,0,4,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Optical flow","Optical_flow.Loss","Complete loss of optical flow acquisition","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,8.244370799713978E-5,"FC_02","Loss of optical flow data detected by the flight controller, leads to INVALID navigation data"]
[null,"Optical_flow.Erroneous","Erroneous optical flow acquisition","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,9.467973195907897E-7,"FC_01"]
[null,"Optical_flow.CANbus.Loss","Loss of data transmission on Sensors CAN bus","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Loss of optical flow  data detected by the flight controller, leads to INVALID navigation data"]
[null,"Optical_flow.CANbus.Erroneous","Erroneous data transmission on Sensors CAN bus","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01"]

{"sheet":"GPS receiver","index":11,"n_rows":5,"n_cols":11,"rows_kept":5,"cut":false,"hidden":false,"merged":[[1,0,4,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["GPS receiver","GPS.Loss","Complete loss of position acquisition","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,6.5456779839021826E-6,"FC_02","Loss of GPS data detected by the flight controller, leads to INVALID navigation data"]
[null,"GPS.Erroneous","Erroneous position acquisition","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.8460572488647387E-7,"FC_01"]
[null,"GPS.CANbus.Loss","Loss of data transmission on Sensors CAN bus","Complete loss of navigation data on both channels, leading to loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Loss of GPS  data detected by the flight controller, leads to INVALID navigation data"]
[null,"GPS.CANbus.Erroneous","Erroneous data transmission on Sensors CAN bus","Erroneous (consistent, not detected) navigation data on both channels, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01"]

{"sheet":"Flight controller","index":12,"n_rows":48,"n_cols":11,"rows_kept":48,"cut":false,"hidden":false,"merged":[[1,0,47,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Flight controller","Inertial_reference_sensor.Loss","Loss of inertial data measure ","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.4188984206221405E-6,"FC_02","Loss of inertial data detected by the flight controller, leads to INVALID navigation data."]
[null,"Inertial_reference_sensor.Erroneous","Erroneous inertial data measure","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,2.6280861129980842E-6,"FC_02"]
[null,"Inertial_reference_sensor_MON.Loss","Loss of inertial data measure for monitoring","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.4188984206221405E-6,"FC_02","Failsafe value of motor disabling, when one data is lost either on main or monitoring channel, is \"disabled\""]
[null,"Inertial_reference_sensor_MON.Erroneous","Erroneous inertial data measure for monitoring","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,2.6280861129980842E-6,"FC_02"]
[null,"Pressure_sensor.Loss","Loss of pressure measure","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.9488586314775185E-5,"FC_02","Loss of pressure data detected by the flight controller, leads to INVALID navigation data."]
[null,"Pressure_sensor.Erroneous","Erroneous pressure measure","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5943797421910233E-7,"FC_02"]
[null,"Pressure_sensor_MON.Loss","Loss of pressure measure for monitoring","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.9488586314775185E-5,"FC_02","Failsafe value of motor disabling, when one data is lost either on main or monitoring channel, is \"disabled\""]
[null,"Pressure_sensor_MON.Erroneous","Erroneous pressure measure for monitoring","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5943797421910233E-7,"FC_02"]
[null,"Magnetometer.Loss","Loss of north direction measure","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.0770784794533101E-6,"FC_02","Loss of north direction data detected by the flight controller, leads to INVALID navigation data."]
[null,"Magnetometer.Erroneous","Erroneous north direction measure","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,2.5591367883692591E-7,"FC_02"]
[null,"Magnetometer_MON.Loss","Loss of north direction measure for monitoring","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,3.0770784794533122E-6,"FC_02","Failsafe value of motor disabling, when one data is lost either on main or monitoring channel, is \"disabled\""]
[null,"Magnetometer_MON.Erroneous","Erroneous north direction measure for monitoring","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,2.5591367883692591E-7,"FC_02"]
[null,"Flight_controller.power_supply.Loss","Complete loss of internal power supply","Complete loss of both main and monitoring channel, leading to null motor consigns (main channel) and motor disabling (monitoring channel). Complete loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,9.6595524458805993E-5,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Main_flight_control_board.Loss","Complete loss of the main flight control board","Loss of motor consigns transmitted to MCPS control channel, leading to null motor consigns. Complete loss of propulsion","Visible","Flight duration",1.0000000000000001E-5,4.9197858400684769E-6,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Main_flight_control_board.Erroneous","Undetected erroneous behaviour of the main flight control board","Worst case : erroneous motor consigns not detected by monitoring channel (because of common modes), leading to global erroneous thrust","Visible","Flight duration","Extremely remote (<1E-9)","<1E-9","FC_01","The main flight control channel shall be robust enough (internal monitoring, watchdogs,…), so that this event can be considered as extremely remote and not the result of a single failure."]
[null,"Main_flight_control_board.PWM1_driver.Loss","Loss of signal transmission on PWM1 output","Loss of speed consign to motor 1, leading to complete loss of thrust on motor 1 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,1.5585244414931888E-5,"FC_01"]
[null,"Main_flight_control_board.PWM1_driver.Erroneous","Erroneous signal transmission on PWM1 output","Erroneous speed rotation on motor 1, detected by monitoring channel, leading to motor 1 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,1.8301743911033446E-6,"FC_01"]
[null,"Main_flight_control_board.PWM2_driver.Loss","Loss of signal transmission on PWM2 output","Loss of speed consign to motor 2, leading to complete loss of thrust on motor 2 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,1.5585244414931888E-5,"FC_01"]
[null,"Main_flight_control_board.PWM2_driver.Erroneous","Erroneous signal transmission on PWM2 output","Erroneous speed rotation on motor 2, detected by monitoring channel, leading to motor 2 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,1.8301743911033446E-6,"FC_01"]
[null,"Main_flight_control_board.PWM3_driver.Loss","Loss of signal transmission on PWM3 output","Loss of speed consign to motor 3, leading to complete loss of thrust on motor 3 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,1.5585244414931888E-5,"FC_01"]
[null,"Main_flight_control_board.PWM3_driver.Erroneous","Erroneous signal transmission on PWM3 output","Erroneous speed rotation on motor 3, detected by monitoring channel, leading to motor 3 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,1.8301743911033446E-6,"FC_01"]
[null,"Main_flight_control_board.PWM4_driver.Loss","Loss of signal transmission on PWM4 output","Loss of speed consign to motor 4, leading to complete loss of thrust on motor 4 and global erroneous thrust","Visible","Flight duration",1.0000000000000001E-5,1.5585244414931888E-5,"FC_01"]
[null,"Main_flight_control_board.PWM4_driver.Erroneous","Erroneous signal transmission on PWM4 output","Erroneous speed rotation on motor 4, detected by monitoring channel, leading to motor 4 desactivation and erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,1.8301743911033446E-6,"FC_01"]
[null,"Main_flight_control_board.Remote_Communication.Loss","Loss of data acquisition on the remote communication input","Loss of manual pilot orders on main channel. Not visible impact without further failure. With additionnal failure requiring the switch to manual mode, loss of motor consigns leading to complete loss of thrust","None","10fh",1.0000000000000001E-5,2.6695874697521724E-5,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Main_flight_control_board.Remote_Communication.Erroneous","Erroneous data acquisition on the remote communication input","Erroneous manual pilot orders on main channel.Not visible impact without further failure. With additionnal failure requiring the switch to manual mode, detected by monitoring channel leading to disabling all motors.","None","10fh",9.9999999999999995E-7,1.2727765904674757E-6,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Main_flight_control_board.WIFI_acquisition.Loss","Loss of data acquisition on the WIFI input","Loss of flight plan, detected visually by the pilot. Switch to manual mode, mission abortion","Visible","Flight duration",1.0000000000000001E-5,9.6129651469897865E-6,"FC_03"]
[null,"Main_flight_control_board.WIFI_acquisition.Erroneous","Erroneous data acquisition on the WIFI input","Erroneous flight plan, detected visually by the pilot. Switch to manual mode, mission abortion","Visible","Flight duration",9.9999999999999995E-7,7.3790724721558129E-6,"FC_03"]
[null,"Main_flight_control_board.WIFI_driver.Loss","Loss of data transmission on the WIFI output","Loss of flight plan progress displayed on the control desk, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,3.7343113771285847E-6,"FC_03","In case of loss of data displayed on control desk, the pilot shall switch to manual mode and abort the mission"]
[null,"Main_flight_control_board.WIFI_driver.Erroneous","Erroneous data transmission on the WIFI output","Inconsisten flight plan progress displayed on the control desk, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,1.293507630304602E-7,"FC_03","In case of inconsistent flight plan progress displayed on control desk, the pilot shall switch to manual mode and abort the mission"]
[null,"Main_flight_control_board.Sensors_CAN_bus.Loss","Loss of data acquisition on Sensors CAN bus","Loss of navigation data on main channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02"]
[null,"Main_flight_control_board.Sensors_CAN_bus.Erroneous","Erroneous data acquisition on Sensors CAN bus","Erroneous navigation data on main channel, detected by the monitoring channel. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_02"]
[null,"Main_flight_control_board.CCDL.Loss","Loss of data emission and reception on Cross Channel Data Link","Loss of data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,1.0590640353261939E-6,"FC_02"]
[null,"Main_flight_control_board.CCDL.Erroneous","Erroneous data emission and reception on Cross Channel Data Link","Erroneous data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,5.4818782508658901E-6,"FC_02"]
[null,"Monitoring_flight_control_board.Loss","Complete loss of the monitoring flight control board","Loss of motor disabling orders to MCPSs, leading to complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,4.9197858400684769E-6,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Monitoring_flight_control_board.Erroneous","Undetected erroneous behaviour of the monitoring flight control board","Worst case : disabling of some motors but not all, leading to global erroneous thrust","Visible","Flight duration","Extremely remote (<1E-9)","<1.E-9","FC_01","The monitoring flight control channel shall be robust enough (internal monitoring, watchdogs,…), so that this event can be considered as extremely remote and not the result of a single failure."]
[null,"Monitoring_flight_control_board.Remote_Communication.Loss","Loss of data acquisition on the remote communication input","Loss of manual override leading to switch to manual mode, and loss of manual pilot orders on monitoring channel, leading to failsafe disabling of all the motors. Complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,2.6695874697521724E-5,"FC_02"]
[null,"Monitoring_flight_control_board.Remote_Communication.Erroneous","Erroneous data acquisition on the remote communication input","Erroneous manual override, leading at first to erroneous drone behaviour detected by the pilot. Switch to manual mode through the control desk mode selection. Then, erroneous pilot orders on monitoring channel, leading to failsafe disabling of all the motors. Complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,1.2727765904674757E-6,"FC_02"]
[null,"Monitoring_flight_control_board.WIFI_acquisition.Loss","Loss of data acquisition on the WIFI input","Uncommanded switch to manual mode, detected by the pilot. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,9.6129651469897865E-6,"FC_03"]
[null,"Monitoring_flight_control_board.WIFI_acquisition.Erroneous","Erroneous data acquisition on the WIFI input","Erroneous mode selection, leading at first to erroneous drone behaviour detected by the pilot. Switch to manual mode through the manual override. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,7.3790724721558129E-6,"FC_03"]
[null,"Monitoring_flight_control_board.WIFI_driver.Loss","Loss of data transmission on the WIFI output","Loss of indicated mode displayed on control desk, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,3.7343113771285847E-6,"FC_03"]
[null,"Monitoring_flight_control_board.WIFI_driver.Erroneous","Erroneous data transmission on the WIFI output","Erroneous indicated mode displayed on the control desk, detected by the pilot, leading the pilot to switch to manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,1.293507630304602E-7,"FC_03"]
[null,"Monitoring_flight_control_board.Sensors_CAN_bus.Loss","Loss of data acquisition on Sensors CAN bus","Loss of navigation data on monitoring channel,  leading to loss of propulsion.","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02"]
[null,"Monitoring_flight_control_board.Sensors_CAN_bus.Erroneous","Erroneous data acquisition on Sensors CAN bus","Erroneous navigation data on monitoring channel, detected by comparison with main channel navigation data. Desactivation of all propulsion units, leadings to complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_02"]
[null,"Monitoring_flight_control_board.CCDL.Loss","Loss of data emission and reception on  Cross Channel Data Link","Loss of data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,1.0590640353261939E-6,"FC_02"]
[null,"Monitoring_flight_control_board.CCDL.Erroneous","Erroneous data emission and reception on  Cross Channel Data Link","Erroneous data transmitted to monitoring channel, leading to disabling all motors. Complete loss of thrust","Visible","Flight duration",9.9999999999999995E-7,5.4818782508658892E-6,"FC_02"]
[null,"Monitoring_flight_control_board.Motors_CAN_bus.Loss","Loss of data emission and reception on Motors CAN bus","Loss of motor disabling orders to MCPSs, leading to complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,1.1205174654243776E-5,"FC_02","Failsafes of MCPS when no data is received is \"null speed consign\" (control channel) and \"motor disabled (monitoring channel)"]
[null,"Monitoring_flight_control_board.Motors_CAN_bus.Erroneous","Erroneous data emission and reception on Motors CAN bus","Worst case : disabling orders sent to some MCPS but not all, leading to erroneous global thrust","Visible","Flight duration",9.9999999999999995E-7,4.5012064092849025E-7,"FC_01"]

{"sheet":"Remote control","index":13,"n_rows":10,"n_cols":11,"rows_kept":10,"cut":false,"hidden":false,"merged":[[1,0,2,0],[5,0,7,0],[8,0,9,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Remote communication","Remote.Communication.Loss","Loss of data emission","Loss of manual override, leading to switch to manual mode. As pilot orders are lost too, loss of motor speed consigns and complete loss of thrust","Visible","Flight duration",1.0000000000000001E-5,8.4299897904813606E-6,"FC_02"]
[null,"Remote.Communication.Erroneous","Erroneous data emission, not detectable by the RC receiver","Undefined control mode and erroneous manual consigns, leading in worst case to erroneous global thrust.","Visible","Flight duration","Extremely remote (<1.E-9) ","<1.E-9","FC_01","RC transmission protocol is robust enough, so that it will not result in undetected erroneous data transmission in single failure. Associated event is extremely remote, and not represented in the MBSA model"]
["Remote battery","Remote.battery.Loss","Loss of internal power supply","Loss of data emission to flight controller. See Remote.Communication.Loss","Visible","Flight duration",1.0000000000000001E-5,2.7020906403075143E-5,"FC_02"]
["Remote switch","Remote.switch.Loss","Uncontrolled switch off of the remote switch","Loss of data emission to flight controller. See Remote.Communication.Loss","Visible","Flight duration",1.0000000000000001E-5,6.5375505399357598E-6,"FC_02"]
["Push button","Remote.Push_button.Stuck_AUTO","Push button stuck on AUTO mode","Incapacity to switch to manual mode. No further impact without additional failure requesting to switch to manual mode, but loss of drone protection","None","10fh",9.9999999999999995E-7,1.2601466025563001E-7,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Remote.Push_button.Stuck_MAN","Push button stuck on MAN mode","Uncommanded switch to manual mode. Pilot still has the capacity to control the drone in manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,2.041739574443103E-7,"FC_03"]
[null,"Remote.Push_button.Oscillation","Push button oscillating between AUTO and MAN modes","Oscillating control mode is filtered by the flight controller, which force the manual mode.Pilot still has the capacity to control the drone in manual mode. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,9.14071655413782E-6,"FC_03"]
["Left and right hands sticks","Remote.Sticks.Loss","Loss of acquisition on left and right sticks","Incapacity to control the drone in manual mode. No further impact without additional failure requesting to switch to manual mode, but loss of drone protection","None","10fh",1.0000000000000001E-5,2.2713475603586243E-6,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]
[null,"Remote.Sticks.Erroneous","Erroneous acquisition on left and right sticks","Incapacity to control the drone in manual mode. No further impact without additional failure requesting to switch to manual mode, but loss of drone protection","None","10fh",9.9999999999999995E-7,1.7994035339122402E-6,"FC_04","A test of manual control capability shall be executed every 10 flight hours"]

{"sheet":"Control desk","index":14,"n_rows":9,"n_cols":11,"rows_kept":9,"cut":false,"hidden":false,"merged":[[1,0,8,0]]}
["Equipment","Failures mode","Local effect","High level effect on system","Failure detection","Exposure","Allocated failure rate","Achieved failure rate","FCs réf\n","Assumptions and Requirements","Reviews Statements"]
["Control desk","ControlDesk.Pilot_Control_Consigns_and_mode.Loss","Loss of pilot control consigns and mode acquisition","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,3.1992521809204252E-5,"FC_03"]
[null,"ControlDesk.Pilot_Control_Consigns_and_mode.Erroneous","Erroneous pilot control consigns and mode acquisition","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode through the manual override, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,1.122792565155034E-6,"FC_03"]
[null,"ControlDesk.Compute_flight_zone_and_flight_plan.Loss","Loss of flight zone and flight plan computation","First, loss of flight plan leading to loss of propulsion. Pilot detection and switch to manual mode, gets back the control of the drone and abort the mission","Visible","Flight duration",1.0000000000000001E-5,3.2258878677370978E-6,"FC_03","Hyp : the pilot can detect and switch to manual mode quickly enough (discutable).\nRecommandation : when flight plan is lost, automatic switch to manual mode"]
[null,"ControlDesk.Compute_flight_zone_and_flight_plan.Erroneous","Erroneous flight zone and flight plan computation","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode through the manual override, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,1.0717292856211442E-6,"FC_03"]
[null,"ControlDesk.Display_drone_follow_up_data.Loss","Loss of drone follow up data display","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",1.0000000000000001E-5,2.9005300919967564E-5,"FC_03","Pilot detects the inconsistency between the real and the displayed drone behaviour"]
[null,"ControlDesk.Display_drone_follow_up_data.Erroneous","Erroneous drone follow up data display","Switch to manual mode, the pilot lands the drone manually. Mission abortion","Visible","Flight duration",9.9999999999999995E-7,7.372569248187424E-7,"FC_03","Pilot detects the inconsistency between the real and the displayed drone behaviour"]
[null,"ControlDesk.Common.Loss","Complete loss of all control desk functions","First, loss of flight plan leading to loss of propulsion. Pilot detection and switch to manual mode, gets back the control of the drone and abort the mission","Visible","Flight duration",1.0000000000000001E-5,1.0895853888951056E-5,"FC_03","Hyp : the pilot can detect and switch to manual mode quickly enough (discutable).\nRecommandation : when flight plan is lost, automatic switch to manual mode"]
[null,"ControlDesk.Common.Erroneous","Complete erroneous behavior of all control desk functions","Erroneous drone behaviour in AUTO mode, detected visually by the pilot. Switch to manual mode through the manual override, the pilot lands the drone manually","Visible","Flight duration",9.9999999999999995E-7,7.9839088913435668E-6,"FC_03"]