{"text_format":"2","workbook":"xlsx","n_sheets":8,"sheets":["Classification - obsolète","Key information - obsolète","Aircraft FC -  List V4.3","SFHA-scenario V4.3","Aircraft FC -  List V4.4","System FC -  List V4.4","SFHA-scenario V4.4","DPCache_SFHA-scenario"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":18,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Classification - obsolète","index":0,"n_rows":18,"n_cols":12,"rows_kept":18,"cut":false,"hidden":false,"merged":[[8,7,8,8]]}
[]
[]
["Idée: conserver la classification classique en associant des proabilités correspondants à la durée de vie de la flotte ou d'un drone"]
[]
["Safety",{"$nulls":6},"Pour un avion","/FH"]
["Classification","Effect on people ","Effect on goods in drone environment","Allowable qualitative probability","Allowable quantitative per flight hours","FDAL (TBC)",null,"proba d'un accident sérieux",9.9999999999999995E-7]
["CATASTROPHIQUE","Multiple serious or fatal injury ","Material destruction with major impact on safety, critical reduction of safety margins (flight in prohibited zone, uncontrolled crash)","Extremely improbable\nUnlikely at fleet level",{"$f":"I17/L17","v":5.0000000000000001E-9},"B\n\nBeware: fail safe criteria",null,"10% à cause d'une panne de systèmes",{"$f":"I6*10/100","v":9.9999999999999995E-8}]
["HAZARDOUS","Physical distress , stress or injury to a small number of people ","Material destruction.\nSignificant reduction of safety margins","Extremly remote\nFew times at fleet life level",9.9999999999999995E-8,"C",null,"On autorise 100 FC Catastrophique",{"$f":"I7/100","v":9.9999999999999986E-10}]
["MAJOR","Increase workload for operator,\nor signicative delay","Drone loss or drone Key function loss.\nReduction of safety margins\n","Remote\nUnlikely at A/C life level / several time at fleet level",1.0000000000000001E-5,"D",null,"Heures"]
["MINOR","inconvenience, small delay","Partial drone functionality loss","Probable\nOne or more times per aircraft life",1E-3,"E",null,"Nombre d'heures d'une mission",1,"valeur majorante à confirmer. 20 minute autonomie. "]
["No Safety Effects","None",null,"None",null,null,null,"Nombre d'heure de mission par an",{"$f":"10*200","v":2000},"10 missions de 1 heure par jour sur 200 jours"]
["info règlementaire et tendance de comment c'est calculé dans différents dmaine (groupes de travail)",{"$nulls":6},"Nombre de drones estimés",5000,5000,"réflexion: nombre de grosaéroport: 100\nnombre d'avion par jour de grose compagnie"]
[]
["Operability Reliability","per fligh our",{"$nulls":5},"Heure de vol 1 drone sur sa vie",{"$f":"2*I11","v":4000},"durée de vie 2 ans"]
["Mission interruption","1.e-3",{"$nulls":5},"Heure de vol flotte",{"$f":"I12*I14","v":20000000},"sur 10 ans"]
["Delay","1.e-3",{"$nulls":5},"proba/Heures","/FH"]
["No Operational effect","N/A",{"$nulls":5},"1 défaillance sur la vie de la flotte",{"$f":"1/I15","v":4.9999999999999998E-8},"proba=1 sur vie flotte","Nber FC",10]
[{"$nulls":7},"1 défaillance sur la vie du drone",{"$f":"1/I14","v":2.5000000000000001E-4}]

{"sheet":"Key information - obsolète","index":1,"n_rows":33,"n_cols":14,"rows_kept":33,"cut":false,"hidden":false,"merged":[]}
["Données de la mission",null,null,"Action Christel:\nObjectif réglementaire et mise en œuvre pour notre drone.",{"$nulls":4},"Contraintes opérationnelles -> Procédures et Manual",{"$nulls":4},"Tâches de maintenance"]
["Durée de vie du drone","2 ans",null,"contenu du dossier pour avoir les autorisation de vol."]
["temps de vol","1 heures",null,"Element de référence pour positionnement des hypotèses de travail."]
["temps au sol",null,null,"par exemple définition de crash zone"]
["Décollage",null,null,"Scénario d'intrusion et stratégie à définir."]
["Temps croisière"]
["Atterrissage"]
["Temps de réaction pilote de drone"]
[]
["List of External events"]
[null,"proba associées"]
["Obstacle entering in drone flight zone"]
["Unauthorize person  in drone flight zone"]
["A/C moving"]
["Wind Gust"]
["Rain, snow, lighntning"]
["Poor visbility condition"]
[]
[]
["List of External Function",null,null,"Contrainte de certification"]
["Data Base",null,null,"Le mode manuel est un mode de backup du mode auto"]
["Positionning signal loss"]
["Positionning signal erroneous"]
[]
["Forseen Common cause to be included in AFHA (ARP4754A)"]
[]
[]
[]
[]
[]
[]
["Info importante:"]
["si des éléments se détachent du drones ils peuvent aussi avoir des effets critiques. Question: dans quelle analyse safety va-t-on regarder ça?  Rajouter FC, mais non reliées à une fonction"]

{"sheet":"Aircraft FC -  List V4.3","index":2,"n_rows":5,"n_cols":3,"rows_kept":5,"cut":false,"hidden":false,"merged":[]}
["List of Failure Conditions","FC title"]
["FC01 (CAT)","Uncontrolled drone in an unauthorized area","Potentially flight in non authorized zone leading at worst to fatalities. "]
["FC02 (HAZ)","Uncontrolled drone, crash in an authorized area","Potentially crash on inspected aircraft."]
["FC03 (MAJ)","Controlled loss of drone","Loss of automatic drone control. Increased workload and end of mission."]
["FC04 (Min)","Mission abortion","End of mission or invalid mission results."]

{"sheet":"SFHA-scenario V4.3","index":3,"n_rows":88,"n_cols":12,"rows_kept":88,"cut":false,"hidden":false,"merged":[[1,1,1,2]]}
[]
["Function ID","Functional BreakDown",null,"FC","Function failure ID","Functions failures","S/R repercussion\nImmediate effect of failure on Drone, operator, people around","Detection means\nwarnings/hidden?","Drone condition","Classification\noperability/\nreliability","parameters (procedure to detect failure, maintenance interval","Remarque Analyse Safety\nrecommandation"]
[1,"Control drone helixes"]
["1.1","Control drone helixes","Control helix","FC01 (CAT)","Fm 1.1.1","Loss of one helix  control","Loss of one thrust on one helix. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 helixes is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
[null,null,null,"FC02 (HAZ)","Fm 1.1.3","Total loss of helixes control","Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 1.1.4","Erroneous thurst and torque provided by the helix","Erroneous control of one helix. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm.1.1.5","Erroneous control of one helix","Erroneous control of one helix is detected by both the monitoring function and the operator. One motor is depowered. Operator switches to Manual mode to land the drone. Controllability with 3 helixes is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
["2.","Control drone attitude and position"]
["2.1",null,"Automatically control drone position","FC03 (MAJ)","Fm 2.1.1","Loss of the capability to automatically control drone position","In auto mode, operator visually detects and switches to Manual mode, increased workload and end of mission.","Visually detected by operator ",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 2.1.2","Erroneous automatic control of drone position","In auto mode, operator visually detects and switches to Manual mode, increased workload and end of mission.","Visually detected by operator ",null,"MAJ"]
[null,null,null,"FC02 (HAZ)","Fm 2.1.3","Loss of the capability to automatically control drone position, combined with loss of manual mode","Loss of navigation capability, motors have no more inputs. Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.\n","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 2.1.4","Erroneous automatic control of drone position in auto mode, combined with loss of manual mode activation","Operator detects the erroneous behavior and selects the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm 2.1.5","Erroneous automatic control of drone position combined with erroneous manual mode","Operator visually detects and switches to Manual mode. Manual mode control is erroneous. Operator does no regain control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
["2.2",null,"Acquire pilot orders","FC02 (HAZ)","Fm 2.2.1","Loss of acquisition of pilot order","In auto mode, no effect but inability to use MANUAL mode. In manual mode, loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator ",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 2.2.2","Erroneous acquisition of pilot order.","In auto mode, no effect but inability to use MANUAL mode. In manual mode, loss of drone control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator ",null,"CAT"]
["2.3",null,"Control attitude","FC02 (HAZ)","Fm 2.3.1","Loss of attitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 2.3.2","Erroneous control of attitude","Erroneous control of attitude is detected by the monitoring function. Motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 2.3.3","Erroneous control of attitude, combined with loss of capability to depower motors","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm 2.3.4","Erroneous control of attitude, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
["2.4",null,"Control altitude","FC02 (HAZ)","Fm 2.4.1","Loss of altitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 2.4.2","Erroneous control of altitude","Erroneous control of altitude is detected by the monitoring function. The motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 2.4.3","Erroneous control of altitude, combined with loss of capability to depower motors","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm 2.4.4","Erroneous control of altitude, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
["2.5",null,"Control thrust","FC02 (HAZ)","Fm 2.5.1","Loss of thrust control","Thrust control is lost, the helixes stop and the drone crashes in an authorized area. ","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 2.5.2","Erroneous thrust control","Erroneous control of altitude is detected by the monitoring function. The motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 2.5.3","Erroneous thrust control, combined with loss of capability to depower motors","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm 2.5.4","Erroneous thrust control, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
[3,"Compute drone position and speed"]
["3.1",null,"Compute drone attitude","FC02 (HAZ)","Fm 3.1.1","Loss of drone attitude computation","Loss of drone control and total loss of thrust. Moreover, monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 3.1.2","Erroneous attitude computation","Erroneous attitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 3.1.3","Erroneous attitude computation combined with loss of the capability to depower motors","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm 3.1.4","Erroneous attitude computation, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
["3.2",null,"Compute drone altitude","FC02 (HAZ)","Fm 3.2.1","Loss of drone altitude computation","Loss of drone control and total loss of thrust. Moreover, monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 3.2.2","Erroneous altitude computation","Erroneous altitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 3.2.3","Erroneous altitude computation, combined with loss of the capability to depower motors","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
[null,null,null,"FC01 (CAT)","Fm 3.2.4","Erroneous altitude compuation, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
["3.3",null,"Compute drone speed","FC03 (MAJ)","Fm 3.3.1","Loss of drone speed computation","No effect in manual Mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC02 (HAZ)","Fm 3.3.2","Loss of drone speed computation, combined with loss of manual mode","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC03 (MAJ)","Fm 3.3.3","Erroneous speed computation","No effect in manual Mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC01 (CAT)","Fm 3.3.4","Erroneous speed computation, combined with loss of manual mode","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]
["3.4",null,"Compute drone position and time","FC03 (MAJ)","Fm 3.4.1","Loss of drone position computation","No effect in Manual Mode. In auto mode operator switches to Manual mode, increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC02 (HAZ)","Fm 3.4.2","Loss of drone position computation, combined with loss of manual mode","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC03 (MAJ)","Fm 3.4.3","Erroneous position computation","No effect in manual mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC01 (CAT)","Fm 3.4.4","Erroneous position computation, combined with loss of manual mode","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
[null,null,null,"FC04 (Min)","Fm 3.4.5","Loss of time computation","Aircraft inspection fails, corrupted results.",null,null,"Min"]
[null,null,null,"FC04 (Min)","Fm 3.4.6","Erroneous time computation","Aircraft inspection fails, corrupted results.",null,null,"Min"]
[4,"Control drone navigation"]
["4.1",null,"Acquire and store flight plan","FC04 (Min)","Fm 4.1.1","Loss of acquisition or flight plan storage","Operator cannot begin the mission. This failure is detected before drone takeoff.","Visually detected by operator",null,"Min","Detection of loss of flight plan information to be added"]
[null,null,null,"FC03 (MAJ)","Fm 4.1.2","Erroneous  acquisition or flight plan storage","Operator will detect visually the erroneous behavior of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator",null,"MAJ","Detection of loss of flight plan information to be added"]
[null,null,null,"FC01 (CAT)","Fm 4.1.3","Erroneous acquisition of flight plan, combined with loss of manual mode","Operator will detect visually the loss of auto mode, select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
["4.2",null,"Run flight plan","FC03 (MAJ)","Fm 4.2.1","Loss of the ability to run planned flight plan","Drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator",null,"MAJ",null,"HAZ si détécté par le monitoring"]
[null,null,null,"FC02 (HAZ)","Fm 4.2.2","Loss of the ability to run planned flight plan, combined with loss of manual mode","Drone will stand in its position. Operator will detect visually the loss of auto mode, select the manual mode without regaining control and will wait until the drone battery is depowered.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC03 (MAJ)","Fm 4.2.3","Erroneous flight plan run ","Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC01 (CAT)","Fm 4.2.4","Erroneous flight plan run, combined with loss of manual mode","Operator will detect visually the loss of auto mode and select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator",null,"CAT"]
["4.3",null,"Select control mode","FC03 (MAJ)","Fm 4.3.1","Loss of control mode selection or mode stuck in Manual","Selected default mode is MANUAL mode. Operator will detect visually the loss of auto mode and keep the manual control. Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 4.3.2","Mode selection stuck in AUTO mode while in MAN mode","In case AUTO mode is erroneously selected while in MAN mode : the drone stands in its position. Operator can regain control of the drone in automatic mode.  Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 4.3.3","Oscillatory mode selection.","The passivation engagemenet oscillation function forces the manual mode. Operator is informed about the selected manual mode and keeps the manual control. Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 4.3.4","Loss of indication of control mode","No effect in auto mode. In manual mode, operator visually detects erroneous behavior and keeps manual control.  Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 4.3.5","Permanent indication of manual control mode selection ","Operator keeps the manual control.  Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
["4.4",null,"Acquire pilot control consigns and mode","FC03 (MAJ)","Fm 4.4.1","Loss of pilot consigns","No effect in MANUAL mode. In AUTO mode, the flight continues with previous acquired AP consigns. Operator will detect visually the loss of AUTO mode consigns and select the manual control. Increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 4.4.2","Erroneous acquisition of pilot consign","No effect in MANUAL mode. In AUTO mode, operator will detect visually the inability to control drone and select the manual control. Increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC04 (Min)","Fm 4.4.3","Loss of automatic control start","The mission does not start. No safety effect","Visually detected by operator",null,"Min"]
[null,null,null,"FC04 (Min)","Fm 4.4.5","Inadvertent automatic control start, while in flight.","In AUTO mode, no effect. In MANUAL mode  with flight plan selected, AUTO mode engagement and flight plan run. In MANUAL mode, without operator orders and without flight plan selected, the drone remains in the same position. Operator detects visually the loss of control and recover immediately in MANUAL mode with orders. Pilot workload and end of mission (no degradation of criticity) ","Visually detected by operator",null,"Min"]
[5,"Make and record video",null,"FC04 (Min)","Fm 5.1","Loss of the capability to make and record video","Aircraft inspection fails.",null,null,"Min"]
[6,"Manage mission"]
["6.1",null,"Compute flight plan and flight zone","FC04 (Min)","Fm 6.1.1","Loss of flight plan or flight zone computation","Operator cannot begin the mission in AUTO mode. This failure is detected before drone takeoff.","Visually detected by operator",null,"Min"]
[null,null,null,"FC03 (MAJ)","Fm 6.1.3","Erroneous flight plan or flight zone computation","Operator will detect visually the erroneous behavior and will select the manual control.  Increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC01 (CAT)","Fm 6.1.4","Erroneous flight plan or flight zone computation, combined with loss of manual mode","Operator will detect visually the erroneous behavior and will select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities.",null,null,"CAT"]
["6.2",null,"Store data","FC04 (Min)","Fm 6.2.1","Loss of data storage","Aircraft inspection fails.",null,null,"Min"]
["6.3",null,"Analyse drone measurement","FC04 (Min)","Fm 6.3.1","Loss of drone measurements","Aircraft inspection fails.",null,null,"Min"]
["6.4",null,"Display drone follow-up data","FC04 (Min)","Fm 6.4.1","Loss of flight plan progress display","Operator is able to follow visually the drone flight. No effect","Visually detected by operator",null,"Min"]
[null,null,null,"FC03 (MAJ)","Fm 6.4.2","Erroneous flight plan progress display","Operator will detect that the displayed flight plan progress is erroneous. Operator switches in manual mode. Increased workload and end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 6.4.3","Loss of control mode display","No effect in auto mode. In manual mode, operator visually detects erroneous behavior and keeps manual control.  Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
[null,null,null,"FC03 (MAJ)","Fm 6.4.4","Permanent display of manual control mode selection ","Operator keeps the manual control.  Increased workload or end of mission.","Visually detected by operator",null,"MAJ"]
[7,"Monitor drone control"]
["7.1",null,"Compute drone attitude MON","FC02 (HAZ)","Fm 7.1.1","Loss of drone attitude computation","Loss is detected by monitoring. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.1.2","Erroneous drone attitude computation","Erroneous behavior is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
["7.2",null,"Compute drone altitude MON","FC02 (HAZ)","Fm 7.2.1","Loss of drone altitude computation","Loss is detected by monitoring. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.2.2","Erroneous drone altitude computation","Erroneous behavior is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
["7.3",null,"Control attitude and altitude MON","FC02 (HAZ)","Fm 7.3.1","Loss of drone attitude control","Loss is detected by monitoring. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.3.2","Erroneous drone attitude control","Erroneous behavior is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.3.3","Loss of drone altitude control","Loss is detected by monitoring. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.3.4","Erroneous drone altitude control","Erroneous behavior is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.3.5","Loss of thrust control","Loss is detected by monitoring. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC02 (HAZ)","Fm 7.3.6","Erroneous thrust control","Erroneous behavior is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
["7.4",null,"Monitor drone parameters","FC04 (Min)","Fm 7.4.1","Loss of the capability to send an alarm","No effect. Loss of monitoring capability.",null,null,"Min"]
[null,null,null,"FC02 (HAZ)","Fm 7.4.2","Permanent alarm ","Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator",null,"HAZ"]
[null,null,null,"FC01 (CAT)","Fm 7.4.3","Loss of the capability to send an alarm combined to erroneous control helix control","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT"]

{"sheet":"Aircraft FC -  List V4.4","index":4,"n_rows":6,"n_cols":3,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["List of Failure Conditions","FC title"]
["FC01 (CAT)","Uncontrolled drone (drone fly away) in an unauthorized area","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft."]
["FC02 (HAZ)","Uncontrolled drone in an authorized area","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft."]
["FC03 (MAJ)","Loss of drone capability leading to mission abortion","Loss of automatic drone control. Pilot is required to land the drone."]
["FC04 (MAJ)","Loss of drone protection","Reduction of safety margins"]
["FC05 (Min)","Degradation of drone control"]

{"sheet":"System FC -  List V4.4","index":5,"n_rows":28,"n_cols":4,"rows_kept":28,"cut":false,"hidden":false,"merged":[[5,0,15,0],[16,0,21,0],[1,0,3,0],[22,0,27,0]]}
["System","List of Failure Conditions","FC title","Criticity"]
["Propulsion system","FC_prop_01","Erroneous thrust due to Propulsion system","CAT"]
[null,"FC_prop_02","Incapacity to depower actuators due to Propulsion system","HAZ"]
[null,"FC_prop_03","Complete loss of thrust due to Propulsion system","HAZ"]
["Structure","FC_struct_01","Erroneous thrust due to Structure","CAT"]
["Flight control system","FC_control_01","Erroneous desactivation of at most 3 engines","CAT"]
[null,"FC_control_02","Erroneous attitude/altitude control","HAZ"]
[null,"FC_control_03","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[null,"FC_control_04","Erroneous position control due to Flight control system","HAZ"]
[null,"FC_control_05","Erroneous control mode selection (\"stuck auto\")","HAZ"]
[null,"FC_control_06","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[null,"FC_control_07","Erroneous control mode selection (\"stuck man\")","HAZ"]
[null,"FC_control_08","Complete loss of thrust due to Flight Control system","HAZ"]
[null,"FC_control_09","Loss of position control in AUTO mode due to Flight Control System","MAJ"]
[null,"FC_control_10","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[null,"FC_control_11","Incapacity to depower actuators due to Flight Control system","HAZ"]
["Control desk","FC_desk_01","Erroneous flight plan computation","HAZ"]
[null,"FC_desk_02","Erroneous pilot consigns acquisition on control desk","HAZ"]
[null,"FC_desk_03","Erroneous pilot control mode acquisition","HAZ"]
[null,"FC_desk_04","Erroneous or loss of drone follow-up data display","HAZ"]
[null,"FC_desk_05","Loss of Flight plan and Flight zone computation","MAJ"]
[null,"FC_desk_06","Loss of pilot consigns acquisition on control desk","MAJ"]
["Remote control","FC_remote_01","Erroneous pilot consigns acquisition on remote control (other than manual override)","HAZ"]
[null,"FC_remote_02","Loss of manual override acquisition","HAZ"]
[null,"FC_remote_03","Erroneous pilot consigns acquisition on remote control combined by erroneous manual override acquisition","CAT"]
[null,"FC_remote_04","Loss of pilot consigns acquisition on remote control (other than manual override)","MAJ"]
[null,"FC_remote_05","Loss of pilot consigns acquisition combined with erroneous manual override acquisition on remote control","HAZ"]
[null,"FC_remote_06","Erroneous manual override acquisition on remote control","MAJ"]

{"sheet":"SFHA-scenario V4.4","index":6,"n_rows":84,"n_cols":12,"rows_kept":84,"cut":false,"hidden":false,"merged":[[15,2,18,2],[15,3,18,3],[1,1,1,2],[3,3,7,3],[3,2,7,2],[10,2,14,2],[10,3,14,3],[54,2,58,2],[54,3,58,3],[19,2,21,2],[19,3,21,3],[22,2,24,2],[22,3,24,3],[25,2,27,2],[25,3,27,3],[29,3,44,3],[46,2,49,2],[46,3,49,3],[50,3,53,3],[50,2,53,2],[59,2,62,2],[59,3,62,3],[65,2,67,2],[65,3,67,3],[70,2,73,2],[70,3,73,3],[75,2,76,2],[77,2,78,2],[79,2,83,2],[75,3,76,3],[77,3,78,3],[79,3,83,3]]}
[]
["Function ID","Functional BreakDown",null,"System responsible for the function","Function failure ID","Functions failures","S/R repercussion\nImmediate effect of failure on Drone, operator, people around","Detection means\nwarnings/hidden?","System Failure condition","Classification\noperability/\nreliability","parameters (procedure to detect failure, maintenance interval","Remarque RD"]
[1,"Control drone propulsion"]
["1.X",null,"Control propeller X","Propulsion system","Fm 1.1.1","Loss of one propeller  control","Loss of one thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous thrust due to propulsion system","CAT"]
[{"$nulls":4},"Fm 1.1.3","Total loss of propellers control","Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to propulsion system","HAZ"]
[{"$nulls":4},"Fm 1.1.4","Erroneous thurst and torque provided by the propeller","Erroneous control of one propeller. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous thrust due to propulsion system","CAT"]
[{"$nulls":4},"Fm.1.1.5","Erroneous control of one propeller","Erroneous control of one propeller is detected by both the monitoring function and the operator. One motor is depowered. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous thrust due to propulsion system","CAT"]
[{"$nulls":4},"Fm1.1.6","Loss of actuators depower capability","No effect as long as the actuators depower is not requested by the monitoring function.","Hidden","Incapacity to depower actuators due to Propulsion system","HAZ"]
["1.5",null,"Reconstitute global thrust and torque","Structure","Fm1.5.1","Loss of thrust and torque from one propeller","Loss of one thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous thrust due to structure","CAT"]
["2.","Control drone attitude and position"]
["2.1",null,"Automatically control drone position","Flight control system","Fm 2.1.1","Loss of the capability to automatically control drone position","In auto mode, operator visually detects and switches to Manual mode, increased workload and end of mission.","Visually detected by operator ",null,"MAJ"]
[{"$nulls":4},"Fm 2.1.2","Erroneous automatic control of drone position","In auto mode, operator visually detects and switches to Manual mode, increased workload and end of mission.","Visually detected by operator ","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 2.1.3","Loss of the capability to automatically control drone position, combined with loss of manual mode","Loss of navigation capability, motors have no more inputs. Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.\n","Visually detected by operator",null,"HAZ"]
[{"$nulls":4},"Fm 2.1.4","Erroneous automatic control of drone position in auto mode, combined with loss of manual mode activation","Operator detects the erroneous behavior and selects the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[{"$nulls":4},"Fm 2.1.5","Erroneous automatic control of drone position combined with erroneous manual mode","Operator visually detects and switches to Manual mode. Erroneous control in manual mode is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ",null,"Pas vraiment pertinent au niveau du Flight Control system : un \"erroneous manual mode\" (ou \"erroneous control in manual mode\") concerne les fonctions SF2.3 à SF2.5, qui sont surveillées par la fonction de monitoring"]
["2.2",null,"Acquire pilot orders","Remote control","Fm 2.2.1","Loss of acquisition of pilot order (other than manual override)","In auto mode, no effect but inability to use MANUAL mode. In manual mode, loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator ","Loss of pilot consigns acquisition on remote control (other than manual override)","MAJ"]
[{"$nulls":4},"Fm 2.2.2","Erroneous acquisition of pilot order (other than manual override)","In auto mode, no effect but inability to use MANUAL mode. In manual mode, erroneous drone control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator ","Erroneous pilot consigns acquisition on remote control (other than manual override)","HAZ"]
[{"$nulls":4},"Fm 2.2.3","Loss of manual override acquisition","Inability to use manual mode","hidden","Loss of manual override acquisition","HAZ"]
[{"$nulls":4},"Fm 2.2.4","Erroneous manual override acquisition","In auto mode, inadverdent switch to manual mode. Mission abortion, increased workload for the pilot","visually detected by the operator","Erroneous manual override acquisition on remote control","MAJ"]
["2.3",null,"Control attitude","Flight control system","Fm 2.3.1","Loss of attitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.3.2","Erroneous control of attitude","Erroneous control of attitude is detected by the monitoring function. Motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.3.3","Erroneous control of attitude, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
["2.4",null,"Control altitude","Flight control system","Fm 2.4.1","Loss of altitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.4.2","Erroneous control of altitude","Erroneous control of altitude is detected by the monitoring function. The motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.4.3","Erroneous control of altitude, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
["2.5",null,"Control thrust","Flight control system","Fm 2.5.1","Loss of thrust control","Thrust control is lost, the propelleres stop and the drone crashes in an authorized area. ","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.5.2","Erroneous thrust control","Erroneous control of altitude is detected by the monitoring function. The motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.5.3","Erroneous thrust control, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[3,"Provide drone navigation data "]
[null,null,null,"Flight Control system","Fm 3.1","Loss of drone attitude computation","Loss of drone control and total loss of thrust. Moreover, monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.2","Erroneous attitude computation","Erroneous attitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.3","Erroneous attitude computation, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[{"$nulls":4},"Fm 3.4","Loss of drone altitude computation","Loss of drone control and total loss of thrust. Moreover, monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.5","Erroneous altitude computation","Erroneous altitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.6","Erroneous altitude compuation, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[{"$nulls":4},"Fm 3.7","Loss of drone speed computation","No effect in manual Mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ"]
[{"$nulls":4},"Fm 3.8","Loss of drone speed computation, combined with loss of manual mode","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 3.9","Erroneous speed computation","No effect in manual Mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 3.10","Erroneous speed computation, combined with loss of manual mode","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[{"$nulls":4},"Fm 3.11","Loss of drone position computation","No effect in Manual Mode. In auto mode operator switches to Manual mode, increased workload and end of mission.","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ"]
[{"$nulls":4},"Fm 3.12","Loss of drone position computation, combined with loss of manual mode","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 3.13","Erroneous position computation","No effect in manual mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 3.14","Erroneous position computation, combined with loss of manual mode","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[{"$nulls":4},"Fm 3.4.5","Loss of time computation","Aircraft inspection fails, corrupted results.",null,null,"Min"]
[{"$nulls":4},"Fm 3.4.6","Erroneous time computation","Aircraft inspection fails, corrupted results.",null,null,"Min"]
[4,"Control drone navigation"]
["4.1",null,"Acquire and store flight plan","Flight control system","Fm 4.1.1","Loss of acquisition or flight plan storage","Before take off : Operator cannot begin the mission.\nDuring mission execution : drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ","Detection of loss of flight plan information to be added"]
[{"$nulls":4},"Fm 4.1.2","Loss of acquisition or flight plan storage, combined with loss of manual mode","Before take off : Operator cannot begin the mission.\nDuring mission execution : drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control without regaining control. Drone stand in its position until running out of battery. Potentially crash on inspected aircraft.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 4.1.3","Erroneous  acquisition or flight plan storage","Operator will detect visually the erroneous behavior of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ","Detection of loss of flight plan information to be added"]
[{"$nulls":4},"Fm 4.1.4","Erroneous acquisition of flight plan, combined with loss of manual mode","Operator will detect visually the loss of auto mode, select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
["4.2",null,"Run flight plan","Flight control system","Fm 4.2.1","Loss of the ability to run planned flight plan","Drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ",null,"HAZ si détécté par le monitoring"]
[{"$nulls":4},"Fm 4.2.2","Loss of the ability to run planned flight plan, combined with loss of manual mode","Drone will stand in its position. Operator will detect visually the loss of auto mode, select the manual mode without regaining control and will wait until the drone battery is depowered.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 4.2.3","Erroneous flight plan run ","Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 4.2.4","Erroneous flight plan run, combined with loss of manual mode","Operator will detect visually the loss of auto mode and select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
["4.3",null,"Select control mode","Flight control system","Fm 4.3.1","Loss of control mode selection or mode stuck in Manual","Selected default mode is MANUAL mode. Operator will detect visually the loss of auto mode and keep the manual control. Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck man\")","HAZ"]
[{"$nulls":4},"Fm 4.3.2","Mode selection stuck in AUTO mode while in MAN mode","In case AUTO mode is erroneously selected while in MAN mode : the drone stands in its position. Operator can regain control of the drone in automatic mode.  Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 4.3.3","Oscillatory mode selection.","Complete loss of drone control, both in auto and manual mode. Worst case : the drone flies out of the authorized area","Visually detected by operator","Oscillatory mode selection","CAT",null,"Pas d'accord avec l'analyse, ou alors il faudra le traiter plus finement dans la PSSA. Pour moi, on doit considérer à ce niveau le fait d'avoir un mode oscillant, et on gèrera dans la PSSA du Flight Control System le fait que ca ne doit pas arriver en simple panne. En l'état le système n'est pas conforme, car il n'y a pas d'indépendance entre SF4.3.2 et SF4.3.3.\n-->FC à remonter au niveau avion"]
[{"$nulls":4},"Fm 4.3.4","Loss of indication of control mode","No effect in auto mode. In manual mode, operator visually detects erroneous behavior and keeps manual control. No additional safety effect","Visually detected by operator","No safety effect","N/A",null,"Hypothèse opérationnelle : la perte de l'affichage du mode n'entraine pas d'action spécifique.\nLe mode manuel étant déjà un mode opérationnel dégradé, je préfererais dire \"no safety effect\""]
[{"$nulls":4},"Fm 4.3.5","Permanent indication of manual control mode selection ","No effect in manual mode. In auto mode, operator switch to manual control.  Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck man\")","HAZ",null,"Par extension, on considère que le passage en mode manuel est forcé par le système."]
["4.4",null,"Acquire pilot control consigns and mode","Control desk","Fm 4.4.1","Loss of pilot consigns","No effect in MANUAL mode. In AUTO mode, the flight continues with previous acquired AP consigns. Operator will detect visually the loss of AUTO mode consigns and select the manual control. Increased workload and end of mission.","Visually detected by operator","Loss of pilot consigns acquisition on control desk","MAJ"]
[{"$nulls":4},"Fm 4.4.2","Erroneous acquisition of pilot consign","No effect in MANUAL mode. In AUTO mode, operator will detect visually the inability to control drone and select the manual control. Increased workload and end of mission.","Visually detected by operator","Erroneous pilot consigns acquisition on control desk","HAZ"]
[{"$nulls":4},"Fm 4.4.3","Loss of automatic control start","The mission does not start. No safety effect","Visually detected by operator","No safety effect","N/A"]
[{"$nulls":4},"Fm 4.4.5","Inadvertent automatic control start, while in flight.","In AUTO mode, no effect. In MANUAL mode, without operator orders and without flight plan selected, the drone remains in the same position. Operator detects visually the loss of control and recover immediately in MANUAL mode with orders. Pilot workload and end of mission (no degradation of criticity) ","Visually detected by operator","No safety effect","N/A",null,"Le mode manuel étant déjà un mode opérationnel dégradé, je préfererais dire \"no safety effect\""]
[5,"Make and record video",null,"Payload","Fm 5.1","Loss of the capability to make and record video","Aircraft inspection fails.",null,null,"Min"]
[6,"Manage mission"]
["6.1",null,"Compute flight plan and flight zone","Control desk","Fm 6.1.1","Loss of flight plan or flight zone computation","Operator cannot begin the mission in AUTO mode. This failure is detected before drone takeoff.","Visually detected by operator","Loss of Flight plan and Flight zone computation","MAJ"]
[{"$nulls":4},"Fm 6.1.3","Erroneous flight plan or flight zone computation","Operator will detect visually the erroneous behavior and will select the manual control.  Increased workload and end of mission.","Visually detected by operator","Erroneous flight plan computation","HAZ"]
[{"$nulls":4},"Fm 6.1.4","Erroneous flight plan or flight zone computation, combined with loss of manual mode","Operator will detect visually the erroneous behavior and will select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT",null,"Ligne à supprimer, car la perte du mode manuel n'est pas liée au control desk. L'intégration de ces deux évènements se fait au niveau aircraft"]
["6.2",null,"Store data","Control desk","Fm 6.2.1","Loss of data storage","Aircraft inspection fails.",null,null,"Min"]
["6.3",null,"Analyse drone measurement","Control desk","Fm 6.3.1","Loss of drone measurements","Aircraft inspection fails.",null,null,"Min"]
["6.4",null,"Display drone follow-up data","Control desk","Fm 6.4.1","Loss of flight plan progress display","Operator is able to follow visually the drone flight. No effect","Visually detected by operator","No safety effect","N/A",null,"Hypothèse opérationnelle : la perte des infos de suivi n'entraine aucune action particulière du pilote tant que le drone poursuit normalement son plan de vol (bof…)"]
[{"$nulls":4},"Fm 6.4.2","Erroneous flight plan progress display","Operator will detect that the displayed flight plan progress is erroneous. Operator switches in manual mode. Increased workload and end of mission.","Visually detected by operator","Erroneous or loss of drone follow-up data display","HAZ"]
[{"$nulls":4},"Fm 6.4.3","Loss of control mode display","No effect in auto mode. In manual mode, operator visually detects erroneous behavior and keeps manual control. No additional safety effect","Visually detected by operator","No safety effect","N/A",null,"Hypothèse opérationnelle : la perte de l'affichage du mode n'entraine pas d'action spécifique.\nLe mode manuel étant déjà un mode opérationnel dégradé, je préfererais dire \"no safety effect\""]
[{"$nulls":4},"Fm 6.4.4","Permanent display of manual control mode selection ","No effect in manual mode. In auto mode, operator switch to manual control.  Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck man\")","HAZ"]
[7,"Monitor drone control"]
["7.1",null,"Provide drone navigation data MON","Flight Control System","Fm 7.1.1","Loss of drone attitude or altitude computation ","Monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.1.2","Erroneous attitude or altitude computation","Erroneous attitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
["7.2",null,"Control attitude and altitude MON","Flight Control System","Fm 7.2.1","Loss of attitude or altitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.2.2","Erroneous control of attitude or altitude","Erroneous control of attitude is detected by the monitoring function. Motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
["7.3",null,"Monitor drone parameters","Flight Control System","Fm 7.3.1","Loss of drone attitude or altitude control failure detection","Incapability to detect control failures. No effect without additional failure.\nAny additional control failure is not detected. The operator selects the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities.  ","Visually detected by operator","Incapacity to depower actuators due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.3.2","Erroneous drone attitude or altitude control failure detection","Erroneous failure detection, leading to all motors depowering.. Potentially crash on inspected aircraft","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.3.3","Loss of motor control failure detection","Incapability to detect motor failures. No effect without additional failure.\nAn additional motor failure would not be detected, and the motor is not depowered. No safety effect, as this monitoring function is not efficient anyway (loss of one motor is also CAT)","Visually detected by operator","No safety effect","N/A",null,"Avec l'archi actuelle, le fait de couper ou non un moteur défaillant revient au même : on perd le contrôle du drone.\nProposition : no safety effect"]
[{"$nulls":4},"Fm 7.3.4","Erroneous failure detection on one engine","Loss of thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous desactivation of at most 3 engines","CAT"]
[{"$nulls":4},"Fm 7.3.5","Erroneous failure detection on all engines","Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]

{"sheet":"DPCache_SFHA-scenario","index":7,"n_rows":61,"n_cols":3,"rows_kept":61,"cut":false,"hidden":true,"merged":[]}
["FC","Function failure ID","Functions failures"]
[]
["FC02 (HAZ)","Fm 1.1.1","Partial loss of  helix  Control"]
["FC01 (CAT)","Fm 1.1.2","Partial loss of  helix  Control, combined with incapacity to crash the drone"]
["FC02 (HAZ)","Fm 1.1.3","Total loss of helixes control"]
["FC01 (CAT)","Fm 1.1.4","Partial loss of  helix  Control, combined with loss of quick control recovery "]
["FC01 (CAT)","Fm 1.1.5","Erroneous Control of one helix"]
["FC02 (HAZ)","Fm 1.1.6","Symetrical loss of two helixes "]
["FC01 (CAT)","Fm 1.1.7","Symetrical loss of two helixes, combined with incapacity to crash the drone"]
["FC02 (HAZ)","Fm 1.1.8","Assymetrical loss of two helixes"]
["FC01 (CAT)","Fm 1.1.9","Assymetrical loss of two helixes, combined with incapacity to crash the drone"]
[]
["FC04 (Min)","Fm 2.1.1","Loss of control of drone position in auto mode"]
["FC04 (Min)","Fm 2.1.2","Erroneous control of drone position in auto mode"]
["FC02 (HAZ)","Fm 2.1.3","Loss of control of drone position in manual mode"]
["FC01 (CAT)","Fm 2.1.4","Erroneous control of drone position in manual mode"]
["FC02 (HAZ)","Fm 2.1.5","Loss of drone position in both auto and manual mode"]
["FC01 (CAT)","Fm 2.1.6","Erroneous drone position in both auto and manual mode"]
["FC02 (HAZ)","Fm 2.2.1","Loss of acquisition of pilot order in manual mode"]
["FC01 (CAT)","Fm 2.2.2","Erroneous acquisition of pilot order in manual mode"]
["FC02 (HAZ)","Fm 2.3.1","Loss of attitude control "]
["FC01 (CAT)","Fm 2.3.2","Erroneous control of attitude"]
["FC02 (HAZ)","Fm 2.4.1","Loss of altitude control "]
["FC01 (CAT)","Fm 2.4.2","Erroneous control of altitude"]
["FC03 (MAJ)","Fm 2.5.1","Loss of thrust control"]
["FC01 (CAT)","Fm 2.5.2","Erroneous thrust control"]
[]
["FC02 (HAZ)","Fm 3.1.1","Loss of drone attitude computation"]
["FC01 (CAT)","Fm 3.1.2","Erroneous attitude computation"]
["FC02 (HAZ)","Fm 3.2.1","Loss of drone altitude computation"]
["FC01 (CAT)","Fm 3.2.2","Erroneous altitude computation"]
["FC04 (Min)","Fm 3.3.1","Loss of drone speed computation"]
["FC02 (HAZ)","Fm 3.3.2","Loss of drone speed computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.3.3","Erroneous speed computation"]
["FC01 (CAT)","Fm 3.3.4","Erroneous speed computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.1","Loss of drone position computation"]
["FC02 (HAZ)","Fm 3.4.2","Loss of drone position computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.3","Erroneous position computation"]
["FC01 (CAT)","Fm 3.4.4","Erroneous position computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.5","Loss of time computation"]
[null,null,"Loss of time computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.6","Erroneous time computation"]
[null,null,"Erroneous time computation, combined with loss of manual mode"]
[]
["FC03 (MAJ)","Fm 4.1.1","Loss of acquisition or flight plan storage"]
["FC03 (MAJ)","Fm 4.1.2","Erroneous  acquisition or flight plan storage"]
["FC01 (CAT)","Fm 4.1.3","Erroneous acquisition of flight plan, combined with loss of manual mode"]
["FC03 (MAJ)","Fm 4.2.1","Loss of the ability to run planned flight plan"]
["FC01 (CAT)","Fm 4.2.2","Loss of the ability to run planned flight plan, combined with loss of manual mode"]
["FC03 (MAJ)","Fm 4.2.3","Erroneous flight plan run "]
["FC01 (CAT)","Fm 4.2.4","Erroneous flight plan run, combined with loss of manual mode"]
["FC03 (MAJ)","Fm 4.3.1","Loss of MAN or AUTO selection"]
["FC01 (CAT)","Fm 4.3.2","Erroneous AUTO mode  while in MAN mode"]
["FC03 (MAJ)","Fm 4.3.3","Erroneous MAN mode while in AUTO mode"]
["NSE"]
[]
["FC04 (Min)","Fm 6.1.1","Loss of flight plan or flight zone computation"]
["FC01 (CAT)","Fm 6.1.2","Erroneous flight plan or flight zone computation"]
["NSE"]
[]
["NSE"]