{"text_format":"2","workbook":"xlsx","n_sheets":4,"sheets":["Aircraft FC -  List","System FC -  List","SFHA-scenario","DPCache_SFHA-scenario"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":9,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Aircraft FC -  List","index":0,"n_rows":6,"n_cols":3,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["List of Failure Conditions","FC title"]
["FC01 (CAT)","Uncontrolled drone (drone fly away) in an unauthorized area","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft."]
["FC02 (HAZ)","Uncontrolled drone in an authorized area","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft."]
["FC03 (MAJ)","Loss of drone capability leading to mission abortion","Loss of automatic drone control. Pilot is required to land the drone."]
["FC04 (MAJ)","Loss of drone protection","Reduction of safety margins"]
["FC05 (Min)","Degradation of drone control"]

{"sheet":"System FC -  List","index":1,"n_rows":30,"n_cols":5,"rows_kept":30,"cut":false,"hidden":false,"merged":[[4,0,14,0],[15,0,20,0],[1,0,2,0],[21,0,26,0],[27,0,29,0]]}
["System","List of Failure Conditions","FC title","Criticity","Failure rate objective"]
["Propulsion unit","FC_prop_01","Erroneous or loss of propulsion","CAT","5.10^-10"]
[null,"FC_prop_02","Incapacity to depower the actuator","HAZ","1.10^-6"]
["Structure","FC_struct_01","Erroneous thrust due to Structure","CAT","1.10^-9"]
["Flight control system","FC_control_01","Erroneous desactivation of at most 3 engines","CAT","1.10^-9"]
[null,"FC_control_02","Erroneous attitude/altitude control","HAZ","1.10^-5"]
[null,"FC_control_03","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT","1.10^-9"]
[null,"FC_control_04","Erroneous position control due to Flight control system","HAZ","1.10^-5"]
[null,"FC_control_05","Erroneous control mode selection (\"stuck auto\")","HAZ","1.10^-5"]
[null,"FC_control_06","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT","1.10^-10"]
[null,"FC_control_07","Erroneous control mode selection (\"stuck man\")","HAZ","1.10^-5"]
[null,"FC_control_08","Complete loss of thrust due to Flight Control system","HAZ","1.10^-7"]
[null,"FC_control_09","Loss of position control in AUTO mode due to Flight Control System","MAJ","1.10^-4"]
[null,"FC_control_10","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ","1.10^-9"]
[null,"FC_control_11","Incapacity to depower actuators due to Flight Control system","HAZ","1.10^-4"]
["Control desk","FC_desk_01","Erroneous flight plan computation","HAZ","1.10^-5"]
[null,"FC_desk_02","Erroneous pilot consigns acquisition on control desk","HAZ","1.10^-5"]
[null,"FC_desk_03","Erroneous pilot control mode acquisition","HAZ","1.10^-5"]
[null,"FC_desk_04","Erroneous or loss of drone follow-up data display","HAZ","1.10^-5"]
[null,"FC_desk_05","Loss of Flight plan and Flight zone computation","MAJ","1.10^-4"]
[null,"FC_desk_06","Loss of pilot consigns acquisition on control desk","MAJ","1.10^-4"]
["Remote control","FC_remote_01","Erroneous pilot consigns acquisition on remote control (other than manual override)","HAZ","1.10^-5"]
[null,"FC_remote_02","Loss of manual override acquisition","HAZ","1.10^-4"]
[null,"FC_remote_03","Erroneous pilot consigns acquisition on remote control combined by erroneous manual override acquisition","CAT","1.10^-10"]
[null,"FC_remote_04","Loss of pilot consigns acquisition on remote control (other than manual override)","MAJ","1.10^-4"]
[null,"FC_remote_05","Loss of pilot consigns acquisition combined with erroneous manual override acquisition on remote control","HAZ","1.10^-9"]
[null,"FC_remote_06","Erroneous manual override acquisition on remote control","MAJ","1.10^-5"]
["Power supply","FC_power_01","Loss of power supply to at most 3 propulsion units","CAT","1.10^-9"]
[null,"FC_power_02","Loss of power supply to all propulsion unit","HAZ","1.10^-7"]
[null,"FC_power_03","Loss of power supply to the Flight control system","HAZ","1.10^-7"]

{"sheet":"SFHA-scenario","index":2,"n_rows":89,"n_cols":12,"rows_kept":89,"cut":false,"hidden":false,"merged":[[74,2,75,2],[76,2,77,2],[78,2,82,2],[74,3,75,3],[76,3,77,3],[78,3,82,3],[58,2,61,2],[58,3,61,3],[64,2,66,2],[64,3,66,3],[69,2,72,2],[69,3,72,3],[24,3,26,3],[28,3,43,3],[45,2,48,2],[45,3,48,3],[49,3,52,3],[49,2,52,2],[86,2,88,2],[86,3,88,3],[14,2,17,2],[14,3,17,3],[1,1,1,2],[3,3,6,3],[3,2,6,2],[9,2,13,2],[9,3,13,3],[53,2,57,2],[53,3,57,3],[18,2,20,2],[18,3,20,3],[21,2,23,2],[21,3,23,3],[24,2,26,2]]}
[]
["Function ID","Functional BreakDown",null,"System responsible for the function","Function failure ID","Functions failures","S/R repercussion\nImmediate effect of failure on Drone, operator, people around","Detection means\nwarnings/hidden?","System Failure condition","Classification\noperability/\nreliability","parameters (procedure to detect failure, maintenance interval","Remarque RD"]
[1,"Control drone propulsion"]
["1.X",null,"Control propeller X","Propulsion unit","Fm 1.1.1","Loss of one propeller  control","Loss of one thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous or loss of propulsion","CAT"]
[{"$nulls":4},"Fm 1.1.4","Erroneous thurst and torque provided by the propeller","Erroneous control of one propeller. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous or loss of propulsion","CAT"]
[{"$nulls":4},"Fm.1.1.5","Erroneous control of one propeller","Erroneous control of one propeller is detected by both the monitoring function and the operator. One motor is depowered. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous or loss of propulsion","CAT"]
[{"$nulls":4},"Fm1.1.6","Loss of actuators depower capability","No effect as long as the actuators depower is not requested by the monitoring function.","Hidden","Incapacity to depower the actuator","HAZ"]
["1.5",null,"Reconstitute global thrust and torque","Structure","Fm1.5.1","Loss of thrust and torque from one propeller","Loss of one thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous thrust due to structure","CAT"]
["2.","Control drone attitude and position"]
["2.1",null,"Automatically control drone position","Flight control system","Fm 2.1.1","Loss of the capability to automatically control drone position","In auto mode, operator visually detects and switches to Manual mode, increased workload and end of mission.","Visually detected by operator ",null,"MAJ"]
[{"$nulls":4},"Fm 2.1.2","Erroneous automatic control of drone position","In auto mode, operator visually detects and switches to Manual mode, increased workload and end of mission.","Visually detected by operator ","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 2.1.3","Loss of the capability to automatically control drone position, combined with loss of manual mode","Loss of navigation capability, motors have no more inputs. Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.\n","Visually detected by operator",null,"HAZ"]
[{"$nulls":4},"Fm 2.1.4","Erroneous automatic control of drone position in auto mode, combined with loss of manual mode activation","Operator detects the erroneous behavior and selects the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[{"$nulls":4},"Fm 2.1.5","Erroneous automatic control of drone position combined with erroneous manual mode","Operator visually detects and switches to Manual mode. Erroneous control in manual mode is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ",null,"Pas vraiment pertinent au niveau du Flight Control system : un \"erroneous manual mode\" (ou \"erroneous control in manual mode\") concerne les fonctions SF2.3 à SF2.5, qui sont surveillées par la fonction de monitoring"]
["2.2",null,"Acquire pilot orders","Remote control","Fm 2.2.1","Loss of acquisition of pilot order (other than manual override)","In auto mode, no effect but inability to use MANUAL mode. In manual mode, loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator ","Loss of pilot consigns acquisition on remote control (other than manual override)","MAJ"]
[{"$nulls":4},"Fm 2.2.2","Erroneous acquisition of pilot order (other than manual override)","In auto mode, no effect but inability to use MANUAL mode. In manual mode, erroneous drone control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator ","Erroneous pilot consigns acquisition on remote control (other than manual override)","HAZ"]
[{"$nulls":4},"Fm 2.2.3","Loss of manual override acquisition","Inability to use manual mode","hidden","Loss of manual override acquisition","HAZ"]
[{"$nulls":4},"Fm 2.2.4","Erroneous manual override acquisition","In auto mode, inadverdent switch to manual mode. Mission abortion, increased workload for the pilot","visually detected by the operator","Erroneous manual override acquisition on remote control","MAJ"]
["2.3",null,"Control attitude","Flight control system","Fm 2.3.1","Loss of attitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.3.2","Erroneous control of attitude","Erroneous control of attitude is detected by the monitoring function. Motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.3.3","Erroneous control of attitude, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
["2.4",null,"Control altitude","Flight control system","Fm 2.4.1","Loss of altitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.4.2","Erroneous control of altitude","Erroneous control of altitude is detected by the monitoring function. The motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.4.3","Erroneous control of altitude, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
["2.5",null,"Control thrust","Flight control system","Fm 2.5.1","Loss of thrust control","Thrust control is lost, the propelleres stop and the drone crashes in an authorized area. ","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.5.2","Erroneous thrust control","Erroneous control of altitude is detected by the monitoring function. The motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 2.5.3","Erroneous thrust control, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[3,"Provide drone navigation data "]
[null,null,null,"Flight Control system","Fm 3.1","Loss of drone attitude computation","Loss of drone control and total loss of thrust. Moreover, monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.2","Erroneous attitude computation","Erroneous attitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.3","Erroneous attitude computation, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[{"$nulls":4},"Fm 3.4","Loss of drone altitude computation","Loss of drone control and total loss of thrust. Moreover, monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.5","Erroneous altitude computation","Erroneous altitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 3.6","Erroneous altitude compuation, combined with loss of monitoring capability","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous attitude/altitude control combined with incapacity to depower actuators due to Flight control system","CAT"]
[{"$nulls":4},"Fm 3.7","Loss of drone speed computation","No effect in manual Mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ"]
[{"$nulls":4},"Fm 3.8","Loss of drone speed computation, combined with loss of manual mode","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 3.9","Erroneous speed computation","No effect in manual Mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 3.10","Erroneous speed computation, combined with loss of manual mode","Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[{"$nulls":4},"Fm 3.11","Loss of drone position computation","No effect in Manual Mode. In auto mode operator switches to Manual mode, increased workload and end of mission.","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ"]
[{"$nulls":4},"Fm 3.12","Loss of drone position computation, combined with loss of manual mode","Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 3.13","Erroneous position computation","No effect in manual mode. In auto mode operator switches to manual mode, increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 3.14","Erroneous position computation, combined with loss of manual mode","Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
[{"$nulls":4},"Fm 3.4.5","Loss of time computation","Aircraft inspection fails, corrupted results.",null,null,"Min"]
[{"$nulls":4},"Fm 3.4.6","Erroneous time computation","Aircraft inspection fails, corrupted results.",null,null,"Min"]
[4,"Control drone navigation"]
["4.1",null,"Acquire and store flight plan","Flight control system","Fm 4.1.1","Loss of acquisition or flight plan storage","Before take off : Operator cannot begin the mission.\nDuring mission execution : drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ","Detection of loss of flight plan information to be added"]
[{"$nulls":4},"Fm 4.1.2","Loss of acquisition or flight plan storage, combined with loss of manual mode","Before take off : Operator cannot begin the mission.\nDuring mission execution : drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control without regaining control. Drone stand in its position until running out of battery. Potentially crash on inspected aircraft.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 4.1.3","Erroneous  acquisition or flight plan storage","Operator will detect visually the erroneous behavior of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ","Detection of loss of flight plan information to be added"]
[{"$nulls":4},"Fm 4.1.4","Erroneous acquisition of flight plan, combined with loss of manual mode","Operator will detect visually the loss of auto mode, select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
["4.2",null,"Run flight plan","Flight control system","Fm 4.2.1","Loss of the ability to run planned flight plan","Drone will stand in its position. Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator","Loss of position control in AUTO mode due to Flight Control System","MAJ",null,"HAZ si détécté par le monitoring"]
[{"$nulls":4},"Fm 4.2.2","Loss of the ability to run planned flight plan, combined with loss of manual mode","Drone will stand in its position. Operator will detect visually the loss of auto mode, select the manual mode without regaining control and will wait until the drone battery is depowered.","Visually detected by operator","Loss of position control in AUTO mode combined with erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 4.2.3","Erroneous flight plan run ","Operator will detect visually the loss of auto mode and select the manual control. Increased workload and end of mission.","Visually detected by operator","Erroneous position control due to Flight control system","HAZ"]
[{"$nulls":4},"Fm 4.2.4","Erroneous flight plan run, combined with loss of manual mode","Operator will detect visually the loss of auto mode and select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities. ","Visually detected by operator","Erroneous position control combined with erroneous control mode selection (\"stuck auto\")","CAT"]
["4.3",null,"Select control mode","Flight control system","Fm 4.3.1","Loss of control mode selection or mode stuck in Manual","Selected default mode is MANUAL mode. Operator will detect visually the loss of auto mode and keep the manual control. Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck man\")","HAZ"]
[{"$nulls":4},"Fm 4.3.2","Mode selection stuck in AUTO mode while in MAN mode","In case AUTO mode is erroneously selected while in MAN mode : the drone stands in its position. Operator can regain control of the drone in automatic mode.  Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck auto\")","HAZ"]
[{"$nulls":4},"Fm 4.3.3","Oscillatory mode selection.","Complete loss of drone control, both in auto and manual mode. Worst case : the drone flies out of the authorized area","Visually detected by operator","Oscillatory mode selection","CAT",null,"Pas d'accord avec l'analyse, ou alors il faudra le traiter plus finement dans la PSSA. Pour moi, on doit considérer à ce niveau le fait d'avoir un mode oscillant, et on gèrera dans la PSSA du Flight Control System le fait que ca ne doit pas arriver en simple panne. En l'état le système n'est pas conforme, car il n'y a pas d'indépendance entre SF4.3.2 et SF4.3.3.\n-->FC à remonter au niveau avion"]
[{"$nulls":4},"Fm 4.3.4","Loss of indication of control mode","No effect in auto mode. In manual mode, operator visually detects erroneous behavior and keeps manual control. No additional safety effect","Visually detected by operator","No safety effect","N/A",null,"Hypothèse opérationnelle : la perte de l'affichage du mode n'entraine pas d'action spécifique.\nLe mode manuel étant déjà un mode opérationnel dégradé, je préfererais dire \"no safety effect\""]
[{"$nulls":4},"Fm 4.3.5","Permanent indication of manual control mode selection ","No effect in manual mode. In auto mode, operator switch to manual control.  Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck man\")","HAZ",null,"Par extension, on considère que le passage en mode manuel est forcé par le système."]
["4.4",null,"Acquire pilot control consigns and mode","Control desk","Fm 4.4.1","Loss of pilot consigns","No effect in MANUAL mode. In AUTO mode, the flight continues with previous acquired AP consigns. Operator will detect visually the loss of AUTO mode consigns and select the manual control. Increased workload and end of mission.","Visually detected by operator","Loss of pilot consigns acquisition on control desk","MAJ"]
[{"$nulls":4},"Fm 4.4.2","Erroneous acquisition of pilot consign","No effect in MANUAL mode. In AUTO mode, operator will detect visually the inability to control drone and select the manual control. Increased workload and end of mission.","Visually detected by operator","Erroneous pilot consigns acquisition on control desk","HAZ"]
[{"$nulls":4},"Fm 4.4.3","Loss of automatic control start","The mission does not start. No safety effect","Visually detected by operator","No safety effect","N/A"]
[{"$nulls":4},"Fm 4.4.5","Inadvertent automatic control start, while in flight.","In AUTO mode, no effect. In MANUAL mode, without operator orders and without flight plan selected, the drone remains in the same position. Operator detects visually the loss of control and recover immediately in MANUAL mode with orders. Pilot workload and end of mission (no degradation of criticity) ","Visually detected by operator","No safety effect","N/A",null,"Le mode manuel étant déjà un mode opérationnel dégradé, je préfererais dire \"no safety effect\""]
[5,"Make and record video",null,"Payload","Fm 5.1","Loss of the capability to make and record video","Aircraft inspection fails.",null,null,"Min"]
[6,"Manage mission"]
["6.1",null,"Compute flight plan and flight zone","Control desk","Fm 6.1.1","Loss of flight plan or flight zone computation","Operator cannot begin the mission in AUTO mode. This failure is detected before drone takeoff.","Visually detected by operator","Loss of Flight plan and Flight zone computation","MAJ"]
[{"$nulls":4},"Fm 6.1.3","Erroneous flight plan or flight zone computation","Operator will detect visually the erroneous behavior and will select the manual control.  Increased workload and end of mission.","Visually detected by operator","Erroneous flight plan computation","HAZ"]
[{"$nulls":4},"Fm 6.1.4","Erroneous flight plan or flight zone computation, combined with loss of manual mode","Operator will detect visually the erroneous behavior and will select the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities.","Visually detected by operator",null,"CAT",null,"Ligne à supprimer, car la perte du mode manuel n'est pas liée au control desk. L'intégration de ces deux évènements se fait au niveau aircraft"]
["6.2",null,"Store data","Control desk","Fm 6.2.1","Loss of data storage","Aircraft inspection fails.",null,null,"Min"]
["6.3",null,"Analyse drone measurement","Control desk","Fm 6.3.1","Loss of drone measurements","Aircraft inspection fails.",null,null,"Min"]
["6.4",null,"Display drone follow-up data","Control desk","Fm 6.4.1","Loss of flight plan progress display","Operator is able to follow visually the drone flight. No effect","Visually detected by operator","No safety effect","N/A",null,"Hypothèse opérationnelle : la perte des infos de suivi n'entraine aucune action particulière du pilote tant que le drone poursuit normalement son plan de vol (bof…)"]
[{"$nulls":4},"Fm 6.4.2","Erroneous flight plan progress display","Operator will detect that the displayed flight plan progress is erroneous. Operator switches in manual mode. Increased workload and end of mission.","Visually detected by operator","Erroneous or loss of drone follow-up data display","HAZ"]
[{"$nulls":4},"Fm 6.4.3","Loss of control mode display","No effect in auto mode. In manual mode, operator visually detects erroneous behavior and keeps manual control. No additional safety effect","Visually detected by operator","No safety effect","N/A",null,"Hypothèse opérationnelle : la perte de l'affichage du mode n'entraine pas d'action spécifique.\nLe mode manuel étant déjà un mode opérationnel dégradé, je préfererais dire \"no safety effect\""]
[{"$nulls":4},"Fm 6.4.4","Permanent display of manual control mode selection ","No effect in manual mode. In auto mode, operator switch to manual control.  Increased workload or end of mission.","Visually detected by operator","Erroneous control mode selection (\"stuck man\")","HAZ"]
[7,"Monitor drone control"]
["7.1",null,"Provide drone navigation data MON","Flight Control System","Fm 7.1.1","Loss of drone attitude or altitude computation ","Monitoring detects the loss and depowers motors. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.1.2","Erroneous attitude or altitude computation","Erroneous attitude computation is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
["7.2",null,"Control attitude and altitude MON","Flight Control System","Fm 7.2.1","Loss of attitude or altitude control ","Control loss is detected by the monitoring function. Motors are depowered. Loss of drone uncontrolled in authorized area. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.2.2","Erroneous control of attitude or altitude","Erroneous control of attitude is detected by the monitoring function. Motors are depowered. Potentially crash on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
["7.3",null,"Monitor drone parameters","Flight Control System","Fm 7.3.1","Loss of drone attitude or altitude control failure detection","Incapability to detect control failures. No effect without additional failure.\nAny additional control failure is not detected. The operator selects the manual mode without regaining control. Potentially flight in non authorized zone leading at worst to fatalities.  ","Visually detected by operator","Incapacity to depower actuators due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.3.2","Erroneous drone attitude or altitude control failure detection","Erroneous failure detection, leading to all motors depowering.. Potentially crash on inspected aircraft","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[{"$nulls":4},"Fm 7.3.3","Loss of motor control failure detection","Incapability to detect motor failures. No effect without additional failure.\nAn additional motor failure would not be detected, and the motor is not depowered. No safety effect, as this monitoring function is not efficient anyway (loss of one motor is also CAT)","Visually detected by operator","No safety effect","N/A",null,"Avec l'archi actuelle, le fait de couper ou non un moteur défaillant revient au même : on perd le contrôle du drone.\nProposition : no safety effect"]
[{"$nulls":4},"Fm 7.3.4","Erroneous failure detection on one engine","Loss of thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Erroneous desactivation of at most 3 engines","CAT"]
[{"$nulls":4},"Fm 7.3.5","Erroneous failure detection on all engines","Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.","Visually detected by operator","Complete loss of thrust due to Flight Control system","HAZ"]
[8,"Provide direct remote identification information"]
[8,null,"Provide direct remote identification information","Flight control system","Fm8.1","Erroneous or loss of direct remote identification information","Direct remote identification information are not broadcasted to surrounding systems","Hidden","No safety effect","NSE"]
[null,"Provide drone power supply"]
[null,null,"Provide power supply to propulsion units","Power supply","Fm9.1","Loss of power supply to one propulsion unit","Loss of one thrust on one propeller. Detected visually by the operator. Operator switches to Manual mode to land the drone. Controllability with 3 propellers is not sufficient to ensure that the drone will not go out of authorized area. Potentially flight in unauthorized zone leading at worst to fatalities.","Visually detected by operator","Loss of power supply to at most 3 propulsion units","CAT"]
[{"$nulls":4},"Fm9.2","Loss of power supply to all propulsion unit","Total loss of thrust. Crash in authorized area, potentially on inspected aircraft.","Visually detected by operator","Loss of power supply to all propulsion unit","HAZ"]
[{"$nulls":4},"Fm9.3","Loss of power supply to flight control system","Total loss of flight control system. Motors are depowered, leading to total loss of thrust. Crash in authorized area, potentially on inspected aircraft.","Visually detected by operator","Loss of power supply to the Flight control system","HAZ",null,"En cas de perte des signaux provenant du flight control system, les moteurs doivent se couper."]

{"sheet":"DPCache_SFHA-scenario","index":3,"n_rows":61,"n_cols":3,"rows_kept":61,"cut":false,"hidden":true,"merged":[]}
["FC","Function failure ID","Functions failures"]
[]
["FC02 (HAZ)","Fm 1.1.1","Partial loss of  helix  Control"]
["FC01 (CAT)","Fm 1.1.2","Partial loss of  helix  Control, combined with incapacity to crash the drone"]
["FC02 (HAZ)","Fm 1.1.3","Total loss of helixes control"]
["FC01 (CAT)","Fm 1.1.4","Partial loss of  helix  Control, combined with loss of quick control recovery "]
["FC01 (CAT)","Fm 1.1.5","Erroneous Control of one helix"]
["FC02 (HAZ)","Fm 1.1.6","Symetrical loss of two helixes "]
["FC01 (CAT)","Fm 1.1.7","Symetrical loss of two helixes, combined with incapacity to crash the drone"]
["FC02 (HAZ)","Fm 1.1.8","Assymetrical loss of two helixes"]
["FC01 (CAT)","Fm 1.1.9","Assymetrical loss of two helixes, combined with incapacity to crash the drone"]
[]
["FC04 (Min)","Fm 2.1.1","Loss of control of drone position in auto mode"]
["FC04 (Min)","Fm 2.1.2","Erroneous control of drone position in auto mode"]
["FC02 (HAZ)","Fm 2.1.3","Loss of control of drone position in manual mode"]
["FC01 (CAT)","Fm 2.1.4","Erroneous control of drone position in manual mode"]
["FC02 (HAZ)","Fm 2.1.5","Loss of drone position in both auto and manual mode"]
["FC01 (CAT)","Fm 2.1.6","Erroneous drone position in both auto and manual mode"]
["FC02 (HAZ)","Fm 2.2.1","Loss of acquisition of pilot order in manual mode"]
["FC01 (CAT)","Fm 2.2.2","Erroneous acquisition of pilot order in manual mode"]
["FC02 (HAZ)","Fm 2.3.1","Loss of attitude control "]
["FC01 (CAT)","Fm 2.3.2","Erroneous control of attitude"]
["FC02 (HAZ)","Fm 2.4.1","Loss of altitude control "]
["FC01 (CAT)","Fm 2.4.2","Erroneous control of altitude"]
["FC03 (MAJ)","Fm 2.5.1","Loss of thrust control"]
["FC01 (CAT)","Fm 2.5.2","Erroneous thrust control"]
[]
["FC02 (HAZ)","Fm 3.1.1","Loss of drone attitude computation"]
["FC01 (CAT)","Fm 3.1.2","Erroneous attitude computation"]
["FC02 (HAZ)","Fm 3.2.1","Loss of drone altitude computation"]
["FC01 (CAT)","Fm 3.2.2","Erroneous altitude computation"]
["FC04 (Min)","Fm 3.3.1","Loss of drone speed computation"]
["FC02 (HAZ)","Fm 3.3.2","Loss of drone speed computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.3.3","Erroneous speed computation"]
["FC01 (CAT)","Fm 3.3.4","Erroneous speed computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.1","Loss of drone position computation"]
["FC02 (HAZ)","Fm 3.4.2","Loss of drone position computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.3","Erroneous position computation"]
["FC01 (CAT)","Fm 3.4.4","Erroneous position computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.5","Loss of time computation"]
[null,null,"Loss of time computation, combined with loss of manual mode"]
["FC04 (Min)","Fm 3.4.6","Erroneous time computation"]
[null,null,"Erroneous time computation, combined with loss of manual mode"]
[]
["FC03 (MAJ)","Fm 4.1.1","Loss of acquisition or flight plan storage"]
["FC03 (MAJ)","Fm 4.1.2","Erroneous  acquisition or flight plan storage"]
["FC01 (CAT)","Fm 4.1.3","Erroneous acquisition of flight plan, combined with loss of manual mode"]
["FC03 (MAJ)","Fm 4.2.1","Loss of the ability to run planned flight plan"]
["FC01 (CAT)","Fm 4.2.2","Loss of the ability to run planned flight plan, combined with loss of manual mode"]
["FC03 (MAJ)","Fm 4.2.3","Erroneous flight plan run "]
["FC01 (CAT)","Fm 4.2.4","Erroneous flight plan run, combined with loss of manual mode"]
["FC03 (MAJ)","Fm 4.3.1","Loss of MAN or AUTO selection"]
["FC01 (CAT)","Fm 4.3.2","Erroneous AUTO mode  while in MAN mode"]
["FC03 (MAJ)","Fm 4.3.3","Erroneous MAN mode while in AUTO mode"]
["NSE"]
[]
["FC04 (Min)","Fm 6.1.1","Loss of flight plan or flight zone computation"]
["FC01 (CAT)","Fm 6.1.2","Erroneous flight plan or flight zone computation"]
["NSE"]
[]
["NSE"]