UAS OSC Volume 2

Operator ID:

UAS Operating Safety Case
Volume 2 - UAS Description:

Document reference number:

Document version and date:

Amendment Number

Date

Amended by

Details of changes

UAS Model

Matrice 300 RTK

UAS design & manufaturing organisations

DJI

Empty Mass

Weight:
Approx. 3.6 kg (without batteries)
Approx. 6.3 kg (with two TB60 batteries)

Maximum Take-Off Mass (MTOM)

Max Takeoff Weight:
9 kg

Dimensions for Rotorcraft / Multirotor

Length of aircraft body

Dimensions:
Unfolded, propellers excluded, 810 x 670 x 430 mm (L x W x H)
Folded, propellers included, 430 x 420 x 430 mm (L x W x H)

Diagonal Wheelbase:
895 mm

Width of aircraft body

Height of aircraft body

Propeller Configuration

Propeller Dimensions

Sound power level

Any other relevant information

Maximum airspeed

Max Speed (near sea level, no wind):
S mode: 23 m/s
P mode: 17 m/s

Minimum airspeed to maintain safe flight

Normal/typical operating height

Maximum operating height

Service Ceiling Above Sea Level:
5000 m (with 2110 propellers, takeoff weight <= 7 kg) / 7000 m (with 2195 propellers, takeoff weight <= 7 kg)

Maximum flight time during normal operation

Max Flight Time:
55 min

Maximum flight time on an ISA day at cruising speed at normal/typical operating height.

Maximum flight range on an ISA day (normal and emergency conditions)

Glide distances

Maximum radio range of the C2 Link

Max Transmitting Distance (unobstructed, free of interference):
NCC/FCC: 15 km
CE/MIC: 8 km
SRRC: 8 km

Wind speed limits

Max Wind Resistance:
Max Wind Resistance 15 m/s (12 m/s when taking off or landing)

Turbulence restrictions

Precipitation limits

Ingress Protection Rating[3]:
IP45

OAT limits

Operating Temperature:
-20 Deg.C to 50 Deg.C (-4 Deg.F to 122 Deg. F)

In-flight icing condition limits

Any other relevant information

Type of material

Material characteristics or properties

Any other relevant information

Batteries:

Battery type, model and manufacturer

Capacity[1]:
5935 mAh

Battery Type:
LiPo 12S

Name:
TB60

Quantity

Arrangement

Generator:

Generator type, model and manufacturer

Specification

Electrical loads

Voltage:
52.8 V

Energy:
274 Wh

Output Power:
100-120 V: 750 W
220-240 V: 992 W

Electrical load shedding functionality

Power supply redundancy

Procedures to charge and discharge batteries.

Safety provisions with regards to hazards inherent to high-voltage storage devices:

Procedures in place for safe handling by any person who may come into contact with high-voltage storage devices

Means of identifying high-voltage storage

Safety provisions for any person discovering the UA following an accident.

Procedures and safety provisions to mitigate the risk of battery thermal runaway.

Procedures for monitoring high-voltage storage devices.

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Net Weight:
Approx. 1.35 kg

Charging Time:
Using BS60 Intelligent Battery Station:
220V input: 60 minutes (fully charging two TB60 batteries), 30 minutes (charging two TB60 batteries from 20% to 90%)
110V input: 70 minutes (fully charging two TB60 batteries), 40 minutes (charging two TB60 batteries from 20% to 90%)

Charging Temperature:
-4 Deg.F to 104 Deg.F (-20 Deg.C to 40 Deg.C)
(When the temperature is lower than 5 Deg.C, the self-heating function will be automatically enabled. Charging in a low temperature may shorten the lifetime of the battery)

Operating Temperature:
-4 Deg.F to 122 Deg.F (-20 Deg.C to 50 Deg.C)

Ideal storage temperature:
71.6 Deg.F to 86 Deg.F (22 Deg.C to 30 Deg.C)

Propulsion type

Engines:

Type, model and manufacturer

Propeller type, model and manufacturer

Quantity

Arrangement

Power output

Propeller guards

In-flight restart functionality

Performance monitoring

Health monitoring

Safety features and redundancy in the system that allow maintaining flight after a failure or degradation has occurred in the propulsion system.

Fuel-powered propulsion system – Safety features to mitigate the risk of engine loss when the following hazards occur:

Fuel starvation

Fuel contamination

Failed signal input from the control station

Engine controller failure

Indication to the remote pilot

Electric-powered propulsion system:

Power source and supply management with regards to other systems in the UA

Redundant power sources

Maximum continuous power output of the motor

Maximum peak power output of the motor

Electrical distribution architecture

Electrical load shedding functionality

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Fuel type

Safety provisions with regards to hazardous substances within the fuel system:

List of hazardous substances and their characteristics.

Procedures in place for safe handling of the UA by any person who may come into contact with the hazardous substances.

Means of identifying the hazardous substances.

Safety provisions for any person discovering the UA following an accident.

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Design and operation of flight control units, surfaces, actuators, control linkages, etc.

Flight controller:

Type, model and manufacturer

Functions

Flight modes available

Automatic functions:

Take-off and landing

Stabilisation

Autopilot

Return to home

If functions are provided by COTS equipment, provide type, model and manufacturer.

Safety features and redundancy in the system which allow maintaining flight after a failure or degradation of the flight control system, including indication to the remote pilot.

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Sensors

Type, model and manufacturer

GNSS:
GPS+GLONASS+BeiDou+Galileo

Quantity

Telemetry links

Method to determine current position.

RTK Positioning Accuracy (fixed RTK enabled):
When RTK enabled and fixed:
1 cm+1 ppm (Horizontal)
1.5 cm + 1 ppm (Vertical)

Method to navigate to intended destination.

Automatic/automated navigation functions

Geo-awareness functions

Containment functions

Safety features and redundancy in the system which allow maintaining flight after a failure or degradation has occurred in the navigation system:

Backup means of navigation

Detection of and response to loss of primary means and secondary means of navigation.

Indication to the remote pilot

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

DAA system functions

Devices used

Technology used

Interface between the DAA system and the flight control computer

Limitations of the DAA system

FOV:
Forward/Backward/Downward: 65 Deg. (H), 50 Deg. (V)
Left/Right/Upward: 75 Deg.(H), 60 Deg.(V)

Operating Environment:
Surfaces with clear patterns and adequate lighting (> 15 lux)

Obstacle Sensing Range:
Forward/Backward/Left/Right: 0.7-40m
Upward/Downward: 0.6-30m

Obstacle Sensing Range:
0.1-8m

Evidence of equipment qualification and approval.

DAA event sequence:

Level of automation

Actions required by the remote pilot

Means to verify normal system operation.

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Power sources, supply management and redundancy.

Built-in battery:
Type: 18650 lithium ion battery (5000 mAh @ 7.2 V)
Charging: Use a USB charger with specification of 12V / 2A
Rated power: 17 W
Charging time: 2 hours and 15 minutes (Using a USB charger with specification of 12V / 2A)

External Battery(WB37 Intelligent Battery):
Name: WB37 Intelligent Battery
Capacity: 4920 mAh
Voltage: 7.6V
Type: LiPo
Energy: 37.39Wh
Charging time (using BS60 Intelligent Battery Station): 70 minutes (15 Deg.C to 45 Deg.C); 130 minutes (0 Deg.C to 15 Deg.C)

Radio signal:

Determination of the signal strength and health value.

Threshold values which represent a critically degraded signal.

Control handover between two CUs

Safety features to mitigate the risk of inadvertent command activation:

List of critical commands

Mitigation means

Safety features to mitigate the risk of display or HMI lock-up.

Safety features to maintain flight-critical processing when multiple programs are running concurrently.

HMI:

Information indicated to the remote pilot.

Radio signal strength and/or health indication to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Battery Life:
Built-in battery: Approx. 2.5h
Built-in battery+External battery: Approx. 4.5h

Operating Temperature:
-20 Deg.C to 40 Deg.C (-4 Deg.F to 104 Deg.F)

RLOS

BRLOS

Antennas:

Type, model and manufacturer

Locations on the UAS

Transceivers / Modems:

Power levels

EIRP:
2.4000-2.4835 GHz:
29.5 dBm (FCC); 18.5dBm (CE)
18.5 dBm (SRRC); 18.5dBm (MIC)

5.725-5.850 GHz:
28.5 dBm (FCC); 12.5dBm (CE)
28.5 dBm (SRRC)

EIRP:
2.4000-2.4835 GHz:
29.5 dBm (FCC) 18.5dBm (CE)
18.5 dBm (SRRC); 18.5dBm (MIC)

5.725-5.850 GHz:
28.5 dBm (FCC); 12.5dBm (CE)
20.5 dBm (SRRC)

Transmission schemes

Operating frequencies

Details of frequency spectrum approvals

Operating Frequency:
2.4000-2.4835 GHz
5.725-5.850 GHz

Operating Frequency:
2.4000-2.4835 GHz
5.725-5.850 GHz

Maximum power output/range

Type of signal processing

Datalink margin in terms of the overall link bandwidth at the maximum anticipated distance from the CU.

Operational C2 link management:

Frequency switchovers

Contingency situations

Third party link service provider

Radio signal:

Determination of the signal strength and health value

Threshold values which represent a critically degraded signal.

Minimum and average assured data rates

Minimum and average assured latencies

Design features and procedures to maintain availability, continuity, and integrity of the datalink:

RF or other interference

Flight beyond communications range

Antenna masking

Loss of CU functionality

Loss of UA functionality

Atmospheric attenuation

Safety features to mitigate the risk of loss of C2 link:

C2 links redundancy

Automatic triggering of an emergency recovery function

Automatic return to home

Safety features to mitigate the risk of harmful interference.

HMI:

Information indicated to the remote pilot.

Radio signal strength and/or health indication to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Antennas:

Type, model and manufacturer

Locations on the UAS

Communication method:

VHF

GSM network

Satellite

Safety features to mitigate the loss of communication function:

Primary communication means

Secondary / back-up communication means

HMI:

Information indicated to the remote pilot.

Radio signal strength and/or health indication to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Wheels, skids, rails, launchers, etc.

If various mechanisms can be fitted:

Primary mechanism

Secondary mechanisms

Operational conditions/requirements for each mechanism.

Any other relevant information

Mode of operation

Safety features which mitigate the risk of loss of control or situational awareness.

Means to verify normal system operation.

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Type, model and manufacturer

Locations on the UA

Colour

Operation

Operating modes

Purpose

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

Effective lighting distance:
5 m

Types

Mass

Interfaces with the UA:

Mechanical interface

Single Gimbal Damper’s Max Payload:
930g

Electrical interface

Data interface

Release mechanism

Any other interface

Procedures to install the payload onto the UA.

Effects of the payload on the UA

Sensors

Safety features to mitigate the risk of the payload affecting the flight of the UA:

Effects on aerodynamics

Effects of electro-magnetic interference.

Effects of electrical power and / or data connection failures on the UAS.

Effects of complete detachment of the payload from the UA (either caused by a failure or through intentional lowering / dropping of the payload).

Effects of partial detachment of the payload from the UA.

Distraction of the remote pilot generated by the payload during flight.

Procedures to verify the attachment points to the UA.

Procedures to verify the UA MTOM and CG location.

Procedures to detect and mitigate any failure of the payload in flight.

Safety provisions with regards to hazards inherent to the payload

Procedures in place for safe handling of the payload.

Means of identifying hazards.

HMI:

Information indicated to the remote pilot.

Alert messages indicated to the remote pilot.

Any other relevant information

UAS launch and recovery systems

Power sources

Transportation equipment

Backup or emergency equipment

Procedures to transport UA, CU, battery/fuel, and other equipment between operation sites and from the loading/off-loading area to the take-off/landing area.

Storage of ground support equipment.

Suitability of the ground support equipment and transportation method with regards to the UAS components’ fragility, sensitivity or inherent hazards.

Ground support equipment standards

Ground support equipment manufacturer's recommendations.

Any other relevant information

Maintenance manual:

Structure

Maintenance procedures:

Inspections

Overhaul

Repairs

Assurance of repair procedures

Batteries maintenance during storage periods

Origin of each procedure

Maintenance schedules

Procedures to record maintenance that has been carried out.

Storage of maintenance records

Staff qualification and levels of approval.

Procedures to use the manual by the Maintenance staff

Configuration control

Any other relevant information

Sources of procurement

Process to confirm the suitability of the part.

Any other relevant information

Hardware, software, and firmware version control

Modification standards

Modification records storage

Safety assessment associated with the modification

Any other relevant information

Step 1 – Identify the main functions of the UAS.

Step 2 – Identify the sub-functions.

Step 3 – Consider the ways each function may fail.

Step 4 – Identify the failure conditions.

Step 5 – Select those failure conditions that may lead to mid-air collision or harm to uninvolved people on the ground. (Identified Hazard)

Step 6 – Assurance

Step 7 – Describe the consequence of the failure condition.

Step 8 – Describe the failure modes. (Unmitigated Failures)

Step 9 – Identify the single points of failure.

Step 10 – Describe the risk mitigation means.

Aircraft

Remote Controller

Vision System

Infrared ToF Sensing System

Top and bottom auxiliary light

FPV Camera

Intelligent Flight Battery

BS60 Intelligent Battery Station

Notes