1. 1 PHARE Advanced Tools (PATs) by I. Wilson, PATs Project Leader EUROCONTROLby EUROCONTROL

2. 2 Introduction l Overview of Advanced Tools l Technical concepts of the tool-set l Very brief description of each tool l Tools used in the PHARE Demonstrations l Then I will discuss some of the issues raised and lessons learnt l Overview of Advanced Tools l Technical concepts of the tool-set l Very brief description of each tool l Tools used in the PHARE Demonstrations l Then I will discuss some of the issues raised and lessons learnt

3. 3 PHARE Advanced Tools (PATs) X Arrival managerAM(DLR then NATS) X Conflict probeCP(NLR) X Cooperative toolsCT(CENA) X Departure manager DM(CENA) X Flight path monitorFPM(NLR) X Negotiation managerNM(NATS) X Problem solverHIPS(EEC) X Tactical load smootherTLS(EEC) X Trajectory predictor TP(DERA then NATS) X Arrival managerAM(DLR then NATS) X Conflict probeCP(NLR) X Cooperative toolsCT(CENA) X Departure manager DM(CENA) X Flight path monitorFPM(NLR) X Negotiation managerNM(NATS) X Problem solverHIPS(EEC) X Tactical load smootherTLS(EEC) X Trajectory predictor TP(DERA then NATS)

4. 4 Tools Concept ( The aircraft defines its most efficient trajectory ( The ground systems apply constraints for deconfliction and sequencing. ( The trajectory used by the ground system shall wherever possible be the trajectory generated by the aircraft Flight Management System. ( Trajectories shall be generated taking into account constraints for the entire flight. ( Planner controllers take deconfliction actions as far ahead as possible ( Sector - Sector transfer of control is automated and silent ( The aircraft defines its most efficient trajectory ( The ground systems apply constraints for deconfliction and sequencing. ( The trajectory used by the ground system shall wherever possible be the trajectory generated by the aircraft Flight Management System. ( Trajectories shall be generated taking into account constraints for the entire flight. ( Planner controllers take deconfliction actions as far ahead as possible ( Sector - Sector transfer of control is automated and silent

5. 5 Tools Technical Concept l Tools are not standalone l Tools provide services to each other l In the PHARE CMS Architecture Server tools provide information to client tools using events alerting the client tool to the information l One event such as a new trajectory can cause a cascade of events through the system l Tools are not standalone l Tools provide services to each other l In the PHARE CMS Architecture Server tools provide information to client tools using events alerting the client tool to the information l One event such as a new trajectory can cause a cascade of events through the system

6. 6 Trajectory Predictor (TP) l Primary tool in the system l Based on EFMS trajectory predictor l Generates trajectory for modelling by tools and controller l Trajectory generated using aircraft state data, performance data and route and profile constraints l Possibly too accurate. l Primary tool in the system l Based on EFMS trajectory predictor l Generates trajectory for modelling by tools and controller l Trajectory generated using aircraft state data, performance data and route and profile constraints l Possibly too accurate.

7. 7 Conflict Probe (CP) l Activates every time there is a new trajectory l Compares active trajectories l Compares alternate trajectories with active trajectories l Reports conflicts-found and conflict-cleared to the other tools l Uses geometric, nominal path and probabilistic detection algorithms l Activates every time there is a new trajectory l Compares active trajectories l Compares alternate trajectories with active trajectories l Reports conflicts-found and conflict-cleared to the other tools l Uses geometric, nominal path and probabilistic detection algorithms

8. 8 Negotiation Manager (NM) l Manages trajectory negotiation l Sends constraint list to aircraft when negotiation requested by other tools l Checks downlinked aircraft trajectory l Up-links accept after controller agreement if necessary l Activates down-linked trajectory and trajectories of non-datalink aircraft l Initiates and manages inter controller co-ordination l Must allow multiple users (multi-threaded) l Manages trajectory negotiation l Sends constraint list to aircraft when negotiation requested by other tools l Checks downlinked aircraft trajectory l Up-links accept after controller agreement if necessary l Activates down-linked trajectory and trajectories of non-datalink aircraft l Initiates and manages inter controller co-ordination l Must allow multiple users (multi-threaded)

9. 9 Departure Manager (DM) l On receipt of the initial trajectory sequences traffic for runways. This involves: l Using the CFMU slots and other requests for departures set a departure rate (passed to a runway sequence object) l Choosing the most optimal sequence based on least delays and best runway utilisation and no conflicts on the SIDs l Imposing push-back time and Scheduled Time of Departure based on sequence and taxi time from gate to runway l Accepts controller input for runway, sequencing or STD changes l On receipt of the initial trajectory sequences traffic for runways. This involves: l Using the CFMU slots and other requests for departures set a departure rate (passed to a runway sequence object) l Choosing the most optimal sequence based on least delays and best runway utilisation and no conflicts on the SIDs l Imposing push-back time and Scheduled Time of Departure based on sequence and taxi time from gate to runway l Accepts controller input for runway, sequencing or STD changes

10. 10 Arrival Manager (AM) l On receipt of the initial trajectory sequences traffic for runways. This involves: l Using the controller set base flow rate (this could come from Departure Manager and runway sequence object) l Choosing the most optimal sequence based on least delays and best runway utilisation l Imposing gate time constraint for Scheduled Time of Arrival. l Accepts controller input for runway, sequencing or STA changes l Identifies holding aircraft and creates appropriate Stack Constraints for safe separation l On receipt of the initial trajectory sequences traffic for runways. This involves: l Using the controller set base flow rate (this could come from Departure Manager and runway sequence object) l Choosing the most optimal sequence based on least delays and best runway utilisation l Imposing gate time constraint for Scheduled Time of Arrival. l Accepts controller input for runway, sequencing or STA changes l Identifies holding aircraft and creates appropriate Stack Constraints for safe separation

11. 11 Co-operative Tools (CT) l Purpose to provide an automated controller assistant l Think like a controller l Filter PROSITs which include problems as well as conflicts l Provide a simple Look-ahead function l Provide an agenda function l Allow close co-operation between PC and TC l Purpose to provide an automated controller assistant l Think like a controller l Filter PROSITs which include problems as well as conflicts l Provide a simple Look-ahead function l Provide an agenda function l Allow close co-operation between PC and TC

12. 12 Problem Solver (PS) l Purpose to provide interactive graphical capability to solve conflicts in all dimensions l Highly interactive closely coupled to HMI l Concept issues l Trajectories were edited on screen but constraints were passed to Trajectory Predictor l Trajectory being edited for 10 minutes in future was overlaid over current radar picture with potential for temporal confusion l Purpose to provide interactive graphical capability to solve conflicts in all dimensions l Highly interactive closely coupled to HMI l Concept issues l Trajectories were edited on screen but constraints were passed to Trajectory Predictor l Trajectory being edited for 10 minutes in future was overlaid over current radar picture with potential for temporal confusion

13. 13 Flight Path Monitor (FPM) l Checks each radar position report against the 4D trajectory for that flight l Reports deviation from trajectories in all dimensions to other tools and controllers l Accepts designation of significant points from controllers and tools and signals when each point is passed l Checks each radar position report against the 4D trajectory for that flight l Reports deviation from trajectories in all dimensions to other tools and controllers l Accepts designation of significant points from controllers and tools and signals when each point is passed

14. 14 Tactical Load Smoother (TLS) l Purpose to identify heightened levels of complexity or workload ahead of time l Allow Multi-Sector Planner to reduce forecast sector workload to within capability l Produced a coefficient of complexity l Essential tool in an exception management environment l Purpose to identify heightened levels of complexity or workload ahead of time l Allow Multi-Sector Planner to reduce forecast sector workload to within capability l Produced a coefficient of complexity l Essential tool in an exception management environment

15. 15 Tools Hierarchy Arrival Manager Departure Manager Problem Solver Negotiation Manager Cooperative Tools Tactical Load Smoother Conflict Probe Flight Path Monitor Trajectory Predictor

16. 16 Tools in PD/1 Problem Solver Conflict Probe Flight Path Monitor Trajectory Predictor

17. 17 Deconflictor Tools in PD/2 Arrival Manager Negotiation Manager Conflict Probe Flight Path Monitor Trajectory Predictor

18. 18 Tools in PD/2+ Arrival Manager Problem Solver Negotiation Manager Conflict Probe Flight Path Monitor Trajectory Predictor

19. 19 Tools in PD/3 CENA Departure Manager Problem Solver Negotiation Manager Cooperative Tools Conflict Probe Flight Path Monitor Trajectory Predictor

20. 20 Tools PD/3 EEC Arrival Manager Departure Manager Problem Solver Negotiation Manager Cooperative Tools Tactical Load Smoother Conflict Probe Flight Path Monitor Trajectory Predictor

21. 21 Stack Manager Tools PD/3 NLR Arrival Manager Problem Solver Negotiation Manager Conflict Probe Flight Path Monitor Trajectory Predictor

22. 22 Conceptual Issues (1) l Systems Analysis and Design rule: Automate the FUNCTION not the Procedure l In ATM procedure is an overused term - for a controller a procedure is made up of a set of tasks l SIDs, STARs and Airways are also procedures l Should these controller and airspace procedures be automated? l The function required is to provide safe, orderly, economic and expeditious ATM with sufficient capacity l Automate the required functions not the existing procedures designed for the manual function l Systems Analysis and Design rule: Automate the FUNCTION not the Procedure l In ATM procedure is an overused term - for a controller a procedure is made up of a set of tasks l SIDs, STARs and Airways are also procedures l Should these controller and airspace procedures be automated? l The function required is to provide safe, orderly, economic and expeditious ATM with sufficient capacity l Automate the required functions not the existing procedures designed for the manual function

23. 23 Conceptual Issues (2) l Letters of Agreement - Standing Agreements - Standard Levels etc. Used to avoid surprising the adjeacent controller. Not required when there is access to a trajectory. l Controller Roles - all partners thought they had the same PC/TC concept, but they did not l Temporal Splits in Layered Planning affects what was team approach to problem solving l Operational Gap of PD/3 due to temporal split l Letters of Agreement - Standing Agreements - Standard Levels etc. Used to avoid surprising the adjeacent controller. Not required when there is access to a trajectory. l Controller Roles - all partners thought they had the same PC/TC concept, but they did not l Temporal Splits in Layered Planning affects what was team approach to problem solving l Operational Gap of PD/3 due to temporal split

24. 24 Conceptual Issues (3) l What is a conflict ?- the snitch patch mentality collision avoidance vs separation maintenance what are the separation standards for ? l Trajectory prediction errors and guidance errors and uncertainties l Every constraint on a flight has a cost for both ground and air l What is a conflict ?- the snitch patch mentality collision avoidance vs separation maintenance what are the separation standards for ? l Trajectory prediction errors and guidance errors and uncertainties l Every constraint on a flight has a cost for both ground and air

25. 25 Architecture l Architecture exports its world-view to the Applications l Legacy systems based on Servers tend to be less scalable, and unsuited to intelligent controller workstations automated tools l Real Object Oriented Design based systems are better suited to the distributed intelligence. l Performance and scalability requirements should be given a higher priority in choice of architectures l Architecture exports its world-view to the Applications l Legacy systems based on Servers tend to be less scalable, and unsuited to intelligent controller workstations automated tools l Real Object Oriented Design based systems are better suited to the distributed intelligence. l Performance and scalability requirements should be given a higher priority in choice of architectures

26. 26 Performance Issues l Tool Performance in most cases was not a problem. BUT l Trajectory Predictor was too slow (possibly too accurate) l Arrival Management re-sequencing had to be limited l Without exception, ALL simulations and demonstrations had performance problems. l Architectures suited to systems without automated support will almost certainly not be capable of the performance required with the implementation of automated tools l Operational system implementers of distributed intelligent systems MUST learn from this issue l Tool Performance in most cases was not a problem. BUT l Trajectory Predictor was too slow (possibly too accurate) l Arrival Management re-sequencing had to be limited l Without exception, ALL simulations and demonstrations had performance problems. l Architectures suited to systems without automated support will almost certainly not be capable of the performance required with the implementation of automated tools l Operational system implementers of distributed intelligent systems MUST learn from this issue

27. 27 Automation Issues l Automated tools can only reduce controller workload if the controller lets them do some of the work. l Controllers who do not let the tools do some of the work have more work than without the tools l Restrictive or prescriptive automation - unwelcome l Permissive or assisting automation - welcome l Not De-skilling - Re-skilling - automated tools are more powerful and require careful and correct use. Misuse can have rapid and wide impact l Automated tools can only reduce controller workload if the controller lets them do some of the work. l Controllers who do not let the tools do some of the work have more work than without the tools l Restrictive or prescriptive automation - unwelcome l Permissive or assisting automation - welcome l Not De-skilling - Re-skilling - automated tools are more powerful and require careful and correct use. Misuse can have rapid and wide impact

28. 28 System Trust l Legal liability is an issue that is a concern - but controllers will still feel responsible for any incidents l Trust on 3 levels l Is the System Really right ? l Will the System fail ? l What do I do when it fails or goes wrong ? l Legal liability is an issue that is a concern - but controllers will still feel responsible for any incidents l Trust on 3 levels l Is the System Really right ? l Will the System fail ? l What do I do when it fails or goes wrong ?

29. 29 Is the System Really right? l System behaviour unlike a controllers undermines trust l Intermittent performance undermines trust l Lack of picture information undermines trust l Mismatching conflict detection destroys trust l System behaviour unlike a controllers undermines trust l Intermittent performance undermines trust l Lack of picture information undermines trust l Mismatching conflict detection destroys trust

30. 30 Will the System fail ? l Experience with personal computers and monolithic legacy systems - Computer crashes regular occurrence l Well designed distributed systems should not experience such total failures l With layered planning - conflicts are cleared well ahead of current time - more stability and time to recover from minor failures. l Experience with personal computers and monolithic legacy systems - Computer crashes regular occurrence l Well designed distributed systems should not experience such total failures l With layered planning - conflicts are cleared well ahead of current time - more stability and time to recover from minor failures.

31. 31 What do I do when it fails? l The assumption must be that any system will fail l Future research will need to identify the acceptable loading of an ATM System that relies on automated support to raise capacity above that of an unsupported controller l The assumption must be that any system will fail l Future research will need to identify the acceptable loading of an ATM System that relies on automated support to raise capacity above that of an unsupported controller

32. 32 Areas for Research l Better linking of algorithms at conceptual level especially trajectory generation and conflict detection l More efficient operational System architectures - not just use of buzz-words l Data-link and Trajectory Negotiation l Controller techniques for use of automated tools l Metrics for exception management systems l REAL LIVE TRIALS - lack of trust in simulations - there is nothing more convincing or testing than a live flight trial of an advanced system l Better linking of algorithms at conceptual level especially trajectory generation and conflict detection l More efficient operational System architectures - not just use of buzz-words l Data-link and Trajectory Negotiation l Controller techniques for use of automated tools l Metrics for exception management systems l REAL LIVE TRIALS - lack of trust in simulations - there is nothing more convincing or testing than a live flight trial of an advanced system

33. 33 Summary l The tools defined in 1989- 1992 made a complete tool- set, nobody has identified a missing tool l The tools all worked although they showed the mismatching concepts of the partners l Architecture has a profound affect - it exports its view of the function to the applications l Advanced systems have to be trustworthy to become trusted. l The tools defined in 1989- 1992 made a complete tool- set, nobody has identified a missing tool l The tools all worked although they showed the mismatching concepts of the partners l Architecture has a profound affect - it exports its view of the function to the applications l Advanced systems have to be trustworthy to become trusted.

34. 34 PHARE Advanced Tools (PATs) by I. Wilson, PATs Project Leader EUROCONTROL nexnext nexby I. Wilson, PATs Project Leader EUROCONTROL nexnext nex