82 FR 14113 - Special Conditions: Textron Aviation Inc. Model 700 Airplane; Isolation of Airplane Electronic System Security Protection From Unauthorized Internal Access
DEPARTMENT OF TRANSPORTATION
Federal Aviation Administration Federal Register Volume 82, Issue 51 (March 17, 2017)
Federal Aviation Administration
Federal Register Volume 82, Issue 51 (March 17, 2017)
| Page Range | 14113-14115 | |
| FR Document | 2017-05333 |
[Federal Register Volume 82, Number 51 (Friday, March 17, 2017)] [Rules and Regulations] [Pages 14113-14115] From the Federal Register Online [www.thefederalregister.org] [FR Doc No: 2017-05333] ----------------------------------------------------------------------- DEPARTMENT OF TRANSPORTATION Federal Aviation Administration 14 CFR Part 25 [Docket No. FAA-2016-9489; Special Conditions No. 25-649-SC] Special Conditions: Textron Aviation Inc. Model 700 Airplane; Isolation of Airplane Electronic System Security Protection From Unauthorized Internal Access AGENCY: Federal Aviation Administration (FAA), DOT. ACTION: Final special conditions; request for comments. ----------------------------------------------------------------------- SUMMARY: These special conditions are issued for the Textron Aviation Inc. (Textron) Model 700 airplane. This airplane will have a novel or unusual design feature when compared to the state of technology envisioned in the airworthiness standards for transport-category airplanes. This design feature is airplane electronic systems and networks that allow access, from aircraft internal sources (e.g., wireless devices, Internet connectivity), to the airplane's previously isolated, internal, electronic components. The applicable airworthiness regulations do not contain adequate or appropriate safety standards for this design feature. These special conditions contain the additional safety standards that the Administrator considers necessary to establish a level of safety equivalent to that established by the existing airworthiness standards. DATES: This action is effective on Textron on March 17, 2017. We must receive your comments by May 1, 2017. ADDRESSES: Send comments identified by docket number FAA-2016-9489 using any of the following methods: [squ] Federal eRegulations Portal: Go to http://www.regulations.gov/and follow the online instructions for sending your comments electronically. [squ] Mail: Send comments to Docket Operations, M-30, U.S. Department of Transportation (DOT), 1200 New Jersey Avenue SE., Room W12-140, West Building Ground Floor, Washington, DC 20590-0001. [squ] Hand Delivery or Courier: Take comments to Docket Operations in Room W12-140 of the West Building Ground Floor at 1200 New Jersey Avenue SE., Washington, DC, between 9 a.m. and 5 p.m., Monday through Friday, except Federal holidays. [squ] Fax: Fax comments to Docket Operations at 202-493-2251. Privacy: The FAA will post all comments it receives, without change, to http://www.regulations.gov/, including any personal information the commenter provides. Using the search function of the docket Web site, anyone can find and read the electronic form of all comments received into any FAA docket, including the name of the individual sending the comment (or signing the comment for an association, business, labor union, etc.). DOT's complete Privacy Act Statement can be found in the Federal Register published on April 11, 2000 (65 FR 19477-19478), as well as at http://DocketsInfo.dot.gov/. Docket: Background documents or comments received may be read at http://www.regulations.gov/ at any time. Follow the online instructions for accessing the docket or go to Docket Operations in Room W12-140 of the West Building Ground Floor at 1200 New Jersey Avenue SE., Washington, DC, between 9 a.m. and 5 p.m., Monday through Friday, except Federal holidays. FOR FURTHER INFORMATION CONTACT: Varun Khanna, FAA, Airplane and Flightcrew Interface, ANM-111, Transport Airplane Directorate, Aircraft Certification Service, 1601 Lind Avenue SW., Renton, Washington 98057- 3356; telephone 425-227-1298; facsimile 425-227-1320. SUPPLEMENTARY INFORMATION: The FAA has determined that notice of, and opportunity for prior public comment on, these special conditions is impracticable because these procedures would significantly delay issuance of the design approval, and thus delivery, of the affected airplane. In addition, the substance of these special conditions has been subject to the public-comment process in several prior instances with no substantive comments received. The FAA therefore finds that good cause exists for making these special conditions effective upon publication in the Federal Register. Comments Invited We invite interested people to take part in this rulemaking by sending written comments, data, or views. The most helpful comments reference a specific portion of the special conditions, explain the reason for any recommended change, and include supporting data. We will consider all comments we receive by the closing date for comments. We may change these special conditions based on the comments we receive. Background On November 20, 2014, Textron applied for a type certificate for their new Model 700 airplane. The Textron [[Page 14114]] Model 700 airplane is a twin-engine, transport-category executive airplane with seating for 2 crewmembers and 12 passengers, and a maximum takeoff weight of 38,514 lbs. Type Certification Basis Under the provisions of Title 14, Code of Federal Regulations (14 CFR) 21.17, Textron must show that the Model 700 airplane meets the applicable provisions of part 25, as amended by Amendments 25-1 through 25-139, 25-141, and 25-143. If the Administrator finds that the applicable airworthiness regulations (i.e., 14 CFR part 25) do not contain adequate or appropriate safety standards for the Textron Model 700 airplane because of a novel or unusual design feature, special conditions are prescribed under the provisions of Sec. 21.16. Special conditions are initially applicable to the model for which they are issued. Should the type certificate for that model be amended later to include any other model that incorporates the same novel or unusual design feature, these special conditions would also apply to the other model under Sec. 21.101. In addition to the applicable airworthiness regulations and special conditions, the Textron Model 700 airplane must comply with the fuel- vent and exhaust-emission requirements of 14 CFR part 34 and the noise- certification requirements of 14 CFR part 36. The FAA issues special conditions, as defined in 14 CFR 11.19, in accordance with Sec. 11.38, and they become part of the type certification basis under Sec. 21.17(a)(2). Novel or Unusual Design Features The Textron Model 700 airplane will incorporate the following novel or unusual design feature: Airplane electronic systems and networks that allow access, from airplane internal sources (e.g., wireless devices, Internet connectivity), to the previously isolated airplane electronic assets. Discussion Networks, both in safety-related and non-safety-related applications, have been implemented in existing commercial-production airplanes. However, network security considerations and functions have played a relatively minor role in the certification of such systems because of the isolation, protection mechanisms, and limited connectivity between these networks. To provide an understanding of the airplane electronic equipment, systems, and assets, these special conditions use the concept of domains. However, this does not prescribe any particular architecture. The aircraft-control domain consists of the airplane electronic systems, equipment, instruments, networks, servers, software and hardware components, databases, etc., which are part of the type design of the airplane and are installed in the airplane to enable the safe operation of the airplane. These can also be referred to as flight- safety-related systems, and include flight controls, communication, display, monitoring, navigation, and related systems. The airline-information-services domain generally consists of functions that the airplane operator manages or controls, such as administrative functions, cabin-support functions, etc. The passenger-information-services domain consists of all functions required to provide the passengers with information. The Textron Model 700 airplane design introduces the potential for access to aircraft-control domain and airline-information-services domain by unauthorized persons through the passenger-information- services domain; and the security vulnerabilities related to the introduction of viruses, worms, user mistakes, and intentional sabotage of airplane networks, systems, and databases. For electronic systems and assets security in these domains, the level of protection provided against security threats should be based on a security-risk assessment, noting that the level of protection could differ between domains and within domains, depending on the security threat. For each security vulnerability and airplane electronic asset, Textron should identify in which domain the asset will be addressed. In addition, the operating systems for current airplane systems are usually and historically proprietary. Therefore, they are not as susceptible to corruption from worms, viruses, and other malicious actions as are more widely used commercial operating systems, because access to the design details of these proprietary operating systems is limited to the system developer and airplane integrator. Some airplanes are equipped with operating systems that are widely used and commercially available from third-party software suppliers. The security vulnerabilities of these operating systems may be more widely known than are the vulnerabilities of proprietary operating systems that the avionics manufacturers currently use. These special conditions contain the additional safety standards that the Administrator considers necessary to establish a level of safety equivalent to that established by the existing airworthiness standards. Applicability As discussed above, these special conditions are applicable to the Textron Model 700 airplane. Should Textron apply at a later date for a change to the type certificate to include another model incorporating the same novel or unusual design feature, these special conditions would apply to that model as well. Conclusion This action affects only a certain novel or unusual design feature on one model of airplane. It is not a rule of general applicability. The substance of these special conditions has been subjected to the notice and comment period in several prior instances and has been derived without substantive change from those previously issued. It is unlikely that prior public comment would result in a significant change from the substance contained herein. Therefore, because a delay would significantly affect the certification of the airplane, the FAA has determined that prior public notice and comment are unnecessary and impracticable, and good cause exists for adopting these special conditions upon publication in the Federal Register. The FAA is requesting comments to allow interested persons to submit views that may not have been submitted in response to the prior opportunities for comment described above. List of Subjects in 14 CFR Part 25 Aircraft, Aviation safety, Reporting and recordkeeping requirements. The authority citation for these special conditions is as follows: Authority: 49 U.S.C. 106(g), 40113, 44701, 44702, 44704. The Special Conditions Accordingly, pursuant to the authority delegated to me by the Administrator, the following special conditions are issued as part of the type certification basis for Textron Model 700 airplanes. 1. The applicant must ensure that the design provides isolation from, or airplane electronic-system security protection against, access by unauthorized sources internal to the airplane. The design must prevent inadvertent and malicious changes to, [[Page 14115]] and all adverse impacts upon, airplane equipment, systems, networks, or other assets required for safe flight and operations. 2. The applicant must establish appropriate procedures to allow the operator to ensure that continued airworthiness of the airplane is maintained, including all post-type-certification modifications that may have an impact on the approved electronic-system security safeguards. Issued in Renton, Washington, on February 10, 2017. Michael Kaszycki, Assistant Manager, Transport Airplane Directorate, Aircraft Certification Service. [FR Doc. 2017-05333 Filed 3-16-17; 8:45 am] BILLING CODE 4910-13-P
![Federal Register / Vol. 82, No. 51 / Friday, March 17, 2017 / Rules and Regulations 14113
this characteristic by impact and DEPARTMENT OF TRANSPORTATION including any personal information the
puncture testing, and testing to failure. commenter provides. Using the search
The applicant may conduct this test Federal Aviation Administration function of the docket Web site, anyone
with or without any glass coating that can find and read the electronic form of
may be utilized in the design. 14 CFR Part 25 all comments received into any FAA
[Docket No. FAA–2016–9489; Special docket, including the name of the
2. Strength—In addition to meeting
Conditions No. 25–649–SC] individual sending the comment (or
the load requirements for all flight and
signing the comment for an association,
landing loads, including any of the business, labor union, etc.). DOT’s
Special Conditions: Textron Aviation
applicable emergency-landing Inc. Model 700 Airplane; Isolation of complete Privacy Act Statement can be
conditions in subparts C & D of 14 CFR Airplane Electronic System Security found in the Federal Register published
part 25, the glass components that are Protection From Unauthorized Internal on April 11, 2000 (65 FR 19477–19478),
located such that they are not protected Access as well as at http://DocketsInfo.
from contact with cabin occupants must dot.gov/.
not fail due to abusive loading, such as AGENCY: Federal Aviation Docket: Background documents or
impact from occupants stumbling into, Administration (FAA), DOT. comments received may be read at
leaning against, sitting on, or performing ACTION: Final special conditions; request http://www.regulations.gov/ at any time.
other intentional or unintentional for comments. Follow the online instructions for
forceful contact with the glass SUMMARY: These special conditions are accessing the docket or go to Docket
component. The applicant must assess issued for the Textron Aviation Inc. Operations in Room W12–140 of the
the effect of design details such as (Textron) Model 700 airplane. This West Building Ground Floor at 1200
geometric discontinuities or surface airplane will have a novel or unusual New Jersey Avenue SE., Washington,
finish, including but not limited to design feature when compared to the DC, between 9 a.m. and 5 p.m., Monday
embossing and etching. state of technology envisioned in the through Friday, except Federal holidays.
3. Retention—The glass component, airworthiness standards for transport- FOR FURTHER INFORMATION CONTACT:
as installed in the airplane, must not category airplanes. This design feature Varun Khanna, FAA, Airplane and
come free of its restraint or mounting is airplane electronic systems and Flightcrew Interface, ANM–111,
system in the event of an emergency networks that allow access, from aircraft Transport Airplane Directorate, Aircraft
internal sources (e.g., wireless devices, Certification Service, 1601 Lind Avenue
landing, considering both the
Internet connectivity), to the airplane’s SW., Renton, Washington 98057–3356;
directional loading and resulting
previously isolated, internal, electronic telephone 425–227–1298; facsimile
rebound conditions. The applicant must
components. The applicable 425–227–1320.
assess the effect of design details such
airworthiness regulations do not contain SUPPLEMENTARY INFORMATION: The FAA
as geometric discontinuities or surface
adequate or appropriate safety standards has determined that notice of, and
finish, including but not limited to
for this design feature. These special opportunity for prior public comment
embossing and etching. conditions contain the additional safety on, these special conditions is
4. Instructions for Continued standards that the Administrator impracticable because these procedures
Airworthiness: The instructions for considers necessary to establish a level would significantly delay issuance of
continued airworthiness must reflect the of safety equivalent to that established the design approval, and thus delivery,
method used to fasten the panel to the by the existing airworthiness standards. of the affected airplane.
cabin interior, and must ensure the DATES: This action is effective on In addition, the substance of these
reliability of the methods used (e.g., life Textron on March 17, 2017. We must special conditions has been subject to
limit of adhesives, or clamp receive your comments by May 1, 2017. the public-comment process in several
connection). The applicant must define ADDRESSES: Send comments identified prior instances with no substantive
any inspection methods and intervals by docket number FAA–2016–9489 comments received. The FAA therefore
based upon adhesion data from the using any of the following methods: finds that good cause exists for making
manufacturer of the adhesive, or upon b Federal eRegulations Portal: Go to these special conditions effective upon
actual adhesion-test data, if necessary. http://www.regulations.gov/and follow publication in the Federal Register.
the online instructions for sending your Comments Invited
Issued in Renton, Washington, on February
comments electronically.
14, 2017.
b Mail: Send comments to Docket We invite interested people to take
Michael Kaszycki, Operations, M–30, U.S. Department of part in this rulemaking by sending
Acting Manager, Transport Airplane Transportation (DOT), 1200 New Jersey written comments, data, or views. The
Directorate, Aircraft Certification Service. Avenue SE., Room W12–140, West most helpful comments reference a
[FR Doc. 2017–05330 Filed 3–16–17; 8:45 am] Building Ground Floor, Washington, DC specific portion of the special
BILLING CODE 4910–13–P 20590–0001. conditions, explain the reason for any
b Hand Delivery or Courier: Take recommended change, and include
comments to Docket Operations in supporting data.
Room W12–140 of the West Building We will consider all comments we
Ground Floor at 1200 New Jersey receive by the closing date for
Avenue SE., Washington, DC, between 9 comments. We may change these special
mstockstill on DSK3G9T082PROD with RULES
a.m. and 5 p.m., Monday through conditions based on the comments we
Friday, except Federal holidays. receive.
b Fax: Fax comments to Docket
Background
Operations at 202–493–2251.
Privacy: The FAA will post all On November 20, 2014, Textron
comments it receives, without change, applied for a type certificate for their
to http://www.regulations.gov/, new Model 700 airplane. The Textron
VerDate Sep<11>2014 19:31 Mar 16, 2017 Jkt 241001 PO 00000 Frm 00003 Fmt 4700 Sfmt 4700 E:\FR\FM\17MRR1.SGM 17MRR1](https://thefederalregister.org/doc/82_FR_14164/page/1.svg)
![Federal Register / Vol. 82, No. 51 / Friday, March 17, 2017 / Rules and Regulations 14115
and all adverse impacts upon, airplane SUPPLEMENTARY INFORMATION: Novel or Unusual Design Features
equipment, systems, networks, or other The Model 787–10 airplane will
assets required for safe flight and Background
incorporate the following novel or
operations. On July 30, 2013, Boeing applied for unusual design feature:
2. The applicant must establish an amendment to Type Certificate No. A flaps-up vertical modal suppression
appropriate procedures to allow the T00021SE to include the new Model system.
operator to ensure that continued 787–10 airplane. This twin-engine,
airworthiness of the airplane is Discussion
transport-category airplane is a
maintained, including all post-type- stretched-fuselage derivative of the 787– The Boeing Model 787–10 will add a
certification modifications that may 9, with maximum seating capacity of new flaps-up vertical modal-
have an impact on the approved suppression (F0VMS) system to the
440 passengers. The 787–10 has a
electronic-system security safeguards. Normal mode of the primary flight-
maximum takeoff weight of 560,000 lbs.
Issued in Renton, Washington, on February control system (PFCS). The F0VMS
10, 2017. Type Certification Basis system is needed to satisfy the flutter-
Michael Kaszycki, damping margin requirements of
Under the provisions of Title 14, Code § 25.629 and the means-of-compliance
Assistant Manager, Transport Airplane of Federal Regulations (14 CFR) 21.101,
Directorate, Aircraft Certification Service. provisions in Advisory Circular (AC)
Boeing must show that the Model 787– 25.629–1B. This system will be used in
[FR Doc. 2017–05333 Filed 3–16–17; 8:45 am]
10 airplane meets the applicable lieu of typical methods of improving the
BILLING CODE 4910–13–P
provisions of the regulations listed in flutter characteristics of an airplane,
Type Certificate No. T00021SE or the such as increasing the torsional stiffness
applicable regulations in effect on the of the wing or adding wingtip ballast
DEPARTMENT OF TRANSPORTATION
date of application for the change, weights.
Federal Aviation Administration except for earlier amendments as agreed The F0VMS system is an active
upon by the FAA. modal-suppression system that will
14 CFR Part 25 provide additional damping to an
In addition, the certification basis
already stable, but low-damped, 3Hz
[Docket No. FAA–2016–6137; Special includes other regulations, special
symmetric wing, nacelle, and body
Conditions No. 25–644–SC] conditions, and exemptions that are not aeroelastic mode of the airplane. This
relevant to these proposed special feedback-control system will maintain
Special Conditions: The Boeing conditions. Type Certificate No. adequate damping margins to flutter.
Company Model 787–10 Airplane; T00021SE will be updated to include a The F0VMS system accomplishes this
Aeroelastic Stability Requirements, complete description of the certification by oscillating the elevators, and, when
Flaps-Up Vertical Modal-Suppression basis for this airplane model. needed, the flaperons.
System If the Administrator finds that the Because Boeing’s flutter analysis
AGENCY: Federal Aviation applicable airworthiness regulations shows that the 3Hz mode is stable and
Administration (FAA), DOT. (i.e., 14 CFR part 25) do not contain does not flutter, the F0VMS system is
adequate or appropriate safety standards not an active flutter-suppression system,
ACTION: Final special conditions.
for the Model 787–10 airplane because but, rather, a damping-augmentation
SUMMARY: These special conditions are of a novel or unusual design feature, system. At this time, the FAA is not
issued for the Boeing Company (Boeing) special conditions are prescribed under prepared to accept an active flutter-
Model 787–10 airplane. This airplane the provisions of § 21.16. suppression system that suppresses a
will have a novel or unusual design divergent flutter mode in the
Special conditions are initially operational or design envelope of the
feature when compared to the state of applicable to the model for which they
technology envisioned in the airplane.
are issued. Should the type certificate This will be the first time an active
airworthiness standards for transport- for that model be amended later to
category airplanes. This design feature modal-suppression system will be used
include any other model that for § 25.629 compliance. The use of this
is a flaps-up vertical modal-suppression
incorporates the same novel or unusual new active modal-suppression system
system, which is in lieu of traditional
design feature, or should any other for flutter compliance is novel or
methods of improving airplane flutter
model already included on the same unusual when compared to the
characteristics. The applicable
type certificate be modified to technology envisioned in the current
airworthiness regulations do not contain
adequate or appropriate safety standards incorporate the same novel or unusual airworthiness standards. Consequently,
for this design feature. These special design feature, these special conditions special conditions are required in
conditions contain the additional safety would also apply to the other model consideration of the effects of this new
standards that the Administrator under § 21.101. system on the aeroelastic stability of the
considers necessary to establish a level In addition to the applicable airplane, both in the normal and failed
of safety equivalent to that established airworthiness regulations and special state, to maintain the level of safety
by the existing airworthiness standards. conditions, the Model 787–10 airplane intended by § 25.629.
must comply with the fuel-vent and These special conditions contain the
DATES: Effective April 17, 2017.
exhaust-emission requirements of 14 additional safety standards that the
FOR FURTHER INFORMATION CONTACT: Administrator considers necessary to
CFR part 34, and the noise-certification
mstockstill on DSK3G9T082PROD with RULES
Wael Nour, FAA, Airframe and Cabin establish a level of safety equivalent to
Safety Branch, ANM–115, Transport requirements of 14 CFR part 36.
that established by the existing
Airplane Directorate, Aircraft The FAA issues special conditions, as airworthiness standards.
Certification Service, 1601 Lind Avenue defined in 14 CFR 11.19, in accordance
SW., Renton, Washington 98057–3356; with § 11.38, and they become part of Discussion of Comments
telephone 425–227–2143; facsimile the type certification basis under Notice of Proposed Special
425–227–1320. § 21.101. Conditions No. 25–16–05–SC for the
VerDate Sep<11>2014 19:31 Mar 16, 2017 Jkt 241001 PO 00000 Frm 00005 Fmt 4700 Sfmt 4700 E:\FR\FM\17MRR1.SGM 17MRR1](https://thefederalregister.org/doc/82_FR_14164/page/3.svg)
Document Created: 2017-03-17 02:48:58
Document Modified: 2017-03-17 02:48:58
| Category | Regulatory Information | |
| Collection | Federal Register | |
| sudoc Class | AE 2.7: GS 4.107: AE 2.106: | |
| Publisher | Office of the Federal Register, National Archives and Records Administration | |
| Section | Rules and Regulations | |
| Action | Final special conditions; request for comments. | |
| Dates | This action is effective on Textron on March 17, 2017. We must receive your comments by May 1, 2017. | |
| Contact | Varun Khanna, FAA, Airplane and Flightcrew Interface, ANM-111, Transport Airplane Directorate, Aircraft Certification Service, 1601 Lind Avenue SW., Renton, Washington 98057- 3356; telephone 425-227-1298; facsimile 425-227-1320. | |
| FR Citation | 82 FR 14113 | |
| CFR Associated | Aircraft; Aviation Safety and Reporting and Recordkeeping Requirements |
2025 Federal Register | Disclaimer | Privacy Policy
USC | CFR | eCFR