High Pressure Regulator System (HPRS) Requirements ...emits.sso.esa.int/emits-doc/ASTRIUMLIM/BepiColombo... · BC-ASU-SP-00012 Issue 1 Page 6 of 88 Astrium Ltd owns the copyright

BC-ASU-SP-00012

Issue 1Page 1 of 88

Document Autogenerated from DOORS Module : /BepiColombo Implementation Phase/Level 3 Equipment Specifications/MPB/High Pressure Regulator Specification BC-ASU-SP-00012 HPRSpec1nn.doc

High Pressure Regulator System (HPRS) Requirements Specification

CI CODE: B3133 DRL Refs : EN-U16

UK EXPORT CONTROL RATING : Not Listed

Rated By :

Prepared by: Date:

Checked by: Date:

Approved by: Date:

Authorised by: Date:

This document is produced under ESA contract, ESA export exemptions may therefore apply. These Technologies may require an export licence if exported from the EU

© Astrium Limited 2008

Astrium Ltd owns the copyright of this document which is supplied in confidence and which shall not be used for any purpose other than that for which it is supplied and shall not in whole or in part be reproduced, copied, or communicated

to any person without written permission from the owner.

Astrium Limited, Registered in England and Wales No. 2449259 Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England

BC-ASU-SP-00012Issue 1

Page 2 of 88

Astrium Ltd owns the copyright of this document which is supplied in confidence and which shall not be used for any purpose other than that for which it is supplied and shall not in whole or in part be reproduced, copied, or communicated to any person without written permission from the owner.

BC-ASU-SP-00012 HPRSpec1nn.doc

INTENTIONALLY BLANK


Page 3 of 88



CONTENTS 1 Introduction and Scope ............................................................................................................................. 6

1.1 Introduction ........................................................................................................................................ 6 1.2 Scope ................................................................................................................................................. 6 1.3 Summary Description......................................................................................................................... 6

2 Applicable Documents............................................................................................................................... 8 2.1 Customer Documents ........................................................................................................................ 8 2.2 Military Standards .............................................................................................................................. 8 2.3 Other Standards................................................................................................................................. 8 2.4 ECSS Standards ................................................................................................................................ 9

3 Functional and Performance Requirements............................................................................................ 10 3.1 Purpose............................................................................................................................................ 10 3.2 Function............................................................................................................................................ 10 3.3 Equipment Configuration and Operation.......................................................................................... 10

3.3.1 Pressure Transducer Configuration.......................................................................................... 12 3.4 Performance Requirements ............................................................................................................. 13

3.4.1 Modes ....................................................................................................................................... 13 3.4.2 General ..................................................................................................................................... 15 3.4.3 Media ........................................................................................................................................ 17 3.4.4 Pressures.................................................................................................................................. 17 3.4.5 Leakage Rates.......................................................................................................................... 20 3.4.6 Filtration .................................................................................................................................... 20 3.4.7 Xenon Purity ............................................................................................................................. 21 3.4.8 Mass Flow Rate ........................................................................................................................ 21 3.4.9 Fluid / Equipment Temperatures .............................................................................................. 21 3.4.10 Reliability................................................................................................................................... 21

3.5 Electrical Requirements ................................................................................................................... 22 3.5.1 Power Bus................................................................................................................................. 22 3.5.2 Equipment Harnesses............................................................................................................... 22 3.5.3 Grounding and Bonding............................................................................................................ 22 3.5.4 Pressure Transducer Electrical Requirements ......................................................................... 22

3.6 Thermal Requirements..................................................................................................................... 22 3.6.1 Temperature Control................................................................................................................. 22 3.6.2 Temperature Monitoring............................................................................................................ 23

3.7 Power Requirements........................................................................................................................ 23 3.8 Maintainability .................................................................................................................................. 23 3.9 Parts Design and Construction ........................................................................................................ 23

3.9.1 Parts, Materials and Processes ................................................................................................ 23 3.9.2 Protection.................................................................................................................................. 24 3.9.3 Cleanliness ............................................................................................................................... 24

4 Design and Interface Requirements........................................................................................................ 26 4.1 Electrical Interface............................................................................................................................ 26 4.2 Discrete Telecommands and Telemetry .......................................................................................... 26

4.2.1 Discrete Telecommands ........................................................................................................... 26 4.3 MIL-STD-1553B Bus Interface......................................................................................................... 26

4.3.1 MIL-STD-1553B Commands .................................................................................................... 26 4.3.2 MIL-STD-1553B Telemetry....................................................................................................... 26

4.4 Environmental Requirements........................................................................................................... 27 4.4.1 Thermal Environment................................................................................................................ 27 4.4.2 Attitude Sensitivity..................................................................................................................... 27 4.4.3 External Pressure ..................................................................................................................... 27

4.5 Envelope Requirements................................................................................................................... 27 4.6 Thermal Control Interface ................................................................................................................ 27 4.7 Mechanical Requirements................................................................................................................ 28

4.7.1 General ..................................................................................................................................... 28 4.7.2 Construction.............................................................................................................................. 28


Page 4 of 88



4.7.3 Proof Pressure .......................................................................................................................... 28 4.7.4 Burst Pressure .......................................................................................................................... 28 4.7.5 Mass.......................................................................................................................................... 29 4.7.6 Mechanical Interfaces............................................................................................................... 29

5 Product Assurance .................................................................................................................................. 30 5.1 General Requirements ..................................................................................................................... 30

5.1.1 Product Assurance Requirements ............................................................................................ 30 5.1.2 Failure Tolerance ...................................................................................................................... 30

6 Verification and Test Requirements ........................................................................................................ 32 6.1 General Requirements ..................................................................................................................... 32

6.1.1 Responsibility for Inspection ..................................................................................................... 32 6.1.2 Quality Assurance Provisions ................................................................................................... 32 6.1.3 Surveillance, and Witness of Inspection and Test.................................................................... 32 6.1.4 Classification of Inspection and Test ........................................................................................ 32

6.2 Verification of Compliance ............................................................................................................... 32 6.2.1 Acceptance Inspections and Tests ........................................................................................... 33 6.2.2 Proto-Flight Inspections and Tests ........................................................................................... 35 6.2.3 Qualification Inspections and Tests .......................................................................................... 37

7 Abbreviation List ...................................................................................................................................... 40 8 GDIR Applicability Matrix......................................................................................................................... 44 9 Enviromental and Test Specification Applicability Matrix ........................................................................ 65 10 EMC Specification Applicability Matrix ................................................................................................ 71 11 Operational and Autonomy Applicability Matrix ................................................................................... 80

TABLES Table 3.4-1: HPRS Telecommand Table ...................................................................................................... 15 Table 3.7-1: HPRS Power Consumption Table............................................................................................. 23 Table 3.9-1: Max Partical Count Table.......................................................................................................... 25 Table 6.2-1: HPRS Acceptance Test Sequence ............................................................................................ 35 Table 6.2-2: HPRS Proto Flight Test Sequence............................................................................................. 36 Table 6.2-3: HPRS Qualification Test Sequence ........................................................................................... 39

FIGURES Figure 1.3-1: HPRS (High Pressure Regulation System) Schematic.............................................................. 6 Figure 3.3-1: HPR (High Pressure Regulation) Basic Schematic ................................................................. 11 Figure 3.3-2: PRE Basic Functional Block Diagram...................................................................................... 11 Figure 3.4-1: Mode and Sub-State Transitions Diagram............................................................................... 13 Figure 3.4-2: Predicted Flowrate Against Time Graph................................................................................... 16


Page 5 of 88



INTENTIONALLY BLANK


Page 6 of 88



1 INTRODUCTION AND SCOPE

1.1 Introduction

This document defines the requirements applicable for the for the High Pressure Regulation System (HPRS) for the BepiColombo Mercury Transfer Module (MTM) Electric Propulsion System (MEPS).

The BepiColombo Mercury Transfer Module (MTM) Electric Propulsion System (MEPS) consists of the following functional items.

• XST - Xenon Storage Tank (for storing the high pressure Xenon gas propellant)

• HPRS - High Pressure Regulator System [subject of this requirement document] (used for regulating the high pressure Xenon gas to a lower pressure to feed into the SEPS FCU inlet.

• SEPS - Solar Electric Propulsion System which comprises of:

PPU - Power Processing Unit (Controls the electrical power to the thruster and interface to the S/C system)

FCU - Flow Control Unit (Controls the mass flow of Xenon propellant gas to the thruster)

SEPT - Solar Electric Propulsion Thruster (Gridded Ion Thruster)

SEPH - Interconnecting Harness

SEPP - Interconnecting Pipework

All the requirements below are applicable to any design of HPRS, except where indicated with a [EPR] which denotes an Electronic Pressure Regulator design requirement only, and [MPR] which denotes a Mechanical Pressure Regulator design requirement only.

1.2 Scope

This document comprises the technical requirements and constraints for the BepiColombo MEPS High Pressure Regulation System; This includes:

• The performance,

• The design and interface requirements of subject hardware

• The design and interface requirements of subject software/firmware

• The testing and verification requirements

1.3 Summary Description

Below is a schematic of the HPRS (High Pressure Regulation System)

Pressure Regulating Electronics PRE A

HP Regulator Pressure

Regulating Electronics

PRE B

1553 Mil Bus A & B HP Gas Inlet Signals

28v Power

1553 Mil Bus A & B

28v Power

Power

Power

Signals LP Gas Outlet

Figure 1.3-1: HPRS (High Pressure Regulation System) Schematic


Page 7 of 88



The MTM current design has one High Pressure Regulator System (HPRS).

The High Pressure Regulator System elements are described as follows:

• High pressure regulator (HPR); this provides all the electro-mechanical parts to provide the isolation and fluid flow control, as well as all pressure sensing elements. The HPR has two pressure regulating branches for redundancy, each branch is selectable by the spacecraft On-Board-Computer (OBC) via the PRE (see below) but nominally only one branch is used at a time. All pressure transducers should be powered continuously irrespective of the regulation branch being used. The HPR should also include all internal thermal control devices (heaters, thermostats and thermistors) to guarantee its correct operation over its environmental temperature range

The HPR comprises of the following elements:

Gas Filters - both Inlet and outlet

High Pressure Transducers (HPT)

Low Pressure Transducers (LPT)

Pressure Regulation Elements

Pressure Isolation Elements

Thermal Control Hardware

• Pressure Regulation Electronics (PRE); this consists of all electronics to perform closed loop control of the HPRS (depending on the design solution for the HPR proposed); drive the actuators of the HPRS; provide pressure sensor power lines; perform signal acquisition; and perform internal thermal control if required. It has to run from a regulated 28 V power bus and it shall communicate with the OBC via the MTM MIL-STD-1553B bus.

• Pressure Regulator Harness (PRH): this provides all the electrical interconnections between the PRE and the HPR via a Safe/Arm S/C skin connector. The PRH consists of connectors, cables and associated harness furnishings to provide all the interconnections required.

• Housings / enclosures / baseplate to enable mounting of the HPRS units to the S/C platforms and provide environmental control as needed. These housings will also provide positions for mounting connectors.


Page 8 of 88



2 APPLICABLE DOCUMENTS

The following documents form a part of this specification to the extent specified herein. In the event of a conflict between this specification and the applicable documents referenced here, this conflict shall be notified to the Customer.

Throughout this specification applicable documents are referred to as AD2.x(y).

All documents referenced in the specification shall be to the revision stated in the cover letter.

2.1 Customer Documents

a BC-ASD-SP-00018 Product Assurance Requirements for Subcontractors

b BC-ASD-SP-00009 SW Product Assurance Requirements for Subcontractors

c BC-ASD-RS-00001 General Design and Interface Requirements (GDIR)

d BC-ASD-SP-00024 Management Requirements for Subcontractors

e BC-ASD-SP-00033 EMC/ESD Design and Test Requirements Specification

f BC-ASD-SP-00002 Environment Requirements and Test Specification

g BC-ASD-SP-00035 EGSE Support Specification

h BC-ASD-SP-00016 MIL-STD-1553B Bus Protocol Specification

2.2 Military Standards

a Not used

b MIL-PRF-27407B Helium

c MIL-PRF-27401D Nitrogen

d MIL-A-18455C Argon Gas

e GOST 10219-77 Xenon Gas Specification

f MIL-STD-6866 Penetrant Inspection

g MIL-STD-453C Radiographic Inspection

h MIL-STD-889B Dissimilar Metals

2.3 Other Standards

a TT-I-735A(3) Isopropyl Alcohol

b SE-S-0073 Deionised/Demineralised Water (NASA)

c MSC-Spec-C-25 Cleanliness

d NAS-1514 Radiographic Standard for Classification of Fusion Welded Discontinuities

e Fed. Std.209D Cleanroom and Work Station Requirements Controlled Environment

f SNT-TC-1A American Society for Non-Destructive Testing Recommended Practices

g CSG-RS-10A-CN, Vol.1 CSG Safety Regulations General Rules

h CSG-RS-22A-CN, Vol.2, Pt 2

CSG Safety Regulations Specific Rules for Spacecraft.


Page 9 of 88



2.4 ECSS Standards

a ECSS-E-32-02 Standard for Pressure Vessels

b ECSS-E-30-01A Fracture control

c ECSS-E-30 Part 5.1A Propulsion: Liquid and electric propulsion for spacecraft

d ECSS-E-30 Part 7A Mechanical parts

e ECSS-E-30 Part 1A Thermal Control

f ECSS-E-32-02 Structural Design for Pressurised Hardware


Page 10 of 88



3 FUNCTIONAL AND PERFORMANCE REQUIREMENTS

All pressures hereon in are absolute pressures unless otherwise stated.

HPR-2564//R

Pyro valves are specifically excluded for use in the HPRS.

3.1 Purpose

The purpose of the HPRS is to regulate the high storage pressure level (decreasing with Xenon consumption) to a constant nominal pressure level for operation of SEPS thrusters.

The HPR will be operating during the overall MTM flight mission, and shall isolate the SEPS from the Xenon Storage Tank (XST) when the MEPS is not operating .

3.2 Function

The functions of the High Pressure Regulation System (HPRS) areas follows:

HPR-2692//T

The HPRS Shall provide isolation of the Xenon Storage Tank (XST) during the launch phase.

HPR-2693//T

The HPRS Shall provide isolation of the Xenon Storage Tank (XST) during SEPS flight non operating periods.

HPR-2694//T

The HPRS Shall regulate autonomously the Xenon Storage Tank (XST) pressure to a demanded downstream pressure with a sufficient mass flow to the SEPS thruster inlet. (The XST and therefore HPR inlet pressure shall vary through the mission life) Ref. Section 3.4.8 and Section 3.4.4.

HPR-2695//T

The HPRS Shall prevent any reverse gas flow through the High Pressure Regulator

HPR-2697//T

The HPRS Shall provide pressure monitoring of the HP inlet and LP regulated pressure for TM

HPR-2698//T

The HPRS Shall acquire and provide to the spacecraft sufficient data for failure detection and isolation

HPR-2699//T

The HPRS Shall provide temperature telemetry to the OBC via the 1553 Mil bus.

HPR-2700//T

The HPRS Shall avoid excessive pressures due to HPR internal leakage and temperature excursions during ground and non-operational mission phases, by providing buffering volumes (if required) ref HPR-2596.

3.3 Equipment Configuration and Operation

HPR-3189//R

The HPRS shall have prime and redundant branches, each branch consists of 1 PRE plus 1 HPR branch.

HPR-3190//R

Each HPRS branch shall be completely independent, except where specifically identified in this specification.


Page 11 of 88



Below is a basic schematic of the HPR. (note that this schematic gives only the minimum functional blocks required by the Customer)

Regulation section with three independent inhibits

High Pressure Transducers (HPTs)

Low Pressure Transducers (LPTs)

Inlet Filter

Outlet Filter Figure 3.3-1: HPR (High Pressure Regulation) Basic Schematic

Below is a basic block diagram of the PRE (note that this block diagram gives only the minimum functional blocks required by the Customer for each PRE and does not include redundancy)

1553 interface Control

Valve Drive Circuits

Pressure Transducer Interface

Valves (e.g Regulation, Isolation)

PRE Control

Power Power

Switching Conditioning

Thermistor Interface Circuit

Thermistor

Pressure Transducers

Thermal Control Interface

Discrete HPC / Telecommand

1553 Mil Bus A & B

Heaters Thermostats

Figure 3.3-2: PRE Basic Functional Block Diagram

HPR-426//R

Two parallel redundant regulating branches shall be provided, each branch being capable of fulfilling all mission requirements.

HPR-1513//R

It shall be possible to test each regulating branch separately

HPR-424//R

A high pressure Inlet Filter to protect the high pressure regulation equipment from particulate contamination shall be provided.

HPR-436//R

Each pressure regulation branch shall have three independent inhibits, so that in the event of any two inhibits failing the complete system remains safe.


Page 12 of 88



HPR-973//T

All parts of the HPR which may be exposed to the high pressure (HP) section pressure, including in the event of failure of up to 2 inhibits, sahll be compatible with this HP section pressure.

HPR-974//T

[EPR] All of the three independent pressure inhibits in either HPR branch shall be able to be fully opened simultaneously when the inlet pressure falls below LP MEOP.

HPR-2528//R

A low pressure Outlet Filter 5 microns absolute (TBC) to protect the downstream equipment from particulate contamination shall be provided.

HPR-2909//T,A

A dedicated PRE (Pressure Regulator Electronics) shall be provided to perform all control and monitoring needs of the HPRS.

HPR-2934//R

The HPRS units shall be housed in an enclosure(s) / baseplate(s) to enable mounting on the S/C platforms

HPR-2968//R

The HPRS units housing(s)/baseplate shall provide support for all HPRS components e.g. connectors and thermal hardware

The HPRS enclosure may be divided into two separate housings for the PRE and HPR interconnected with the PRH.

3.3.1 Pressure Transducer Configuration

HPR-428//R

2 off (minimum) Low Pressure Transducers (LPTs) (prime and redundant) shall be provided

HPR-425//R

2 off (minimum) High Pressure Transducers (HPTs) (prime and redundant) shall be provided

The Contractor may propose additional Pressure Transducers if necessary to provide adequate reliability and failure tolerance

HPR-2898//T,R

The HPRS shall be configured such that all Pressure Transducers shall be powered, and all corresponding Pressure Transducers TM shall be available, from either the prime or redundant PRE branch.

HPR-2896//T,R

The High Pressure Transducers shall be configured such that nominally pressure TM from at least two HP transducers are available, or from at least one HP transducer in the event of an HPT failure

HPR-2897//T,R

The Low Pressure Transducers shall be configured such that nominally pressure TM from at least two LP transducers are available, or from at least one LP transducer in the event of an LPT failure.

HPR-2597//A,R

In the event that the LPTs are used as part of the pressure regulation control, then 2 LPTs are adequate only if any failure of an LPT can be unambiguously detected and allocated to the failed LPT. Otherwise, at least a third LPT shall be included to provide a 'majority vote" capability.


Page 13 of 88



HPR-2900//T,A

Any Pressure Transducer failure shall not result in failure or loss of data from any other Pressure Transducer

HPR-2901//T,A

Any Pressure Transducer failure shall not result in loss of any other part of the prime or redundant HPRS

HPR-2902//T,A

There shall be no single failure mode in a Pressure Transducers power or signal acquisition lines which will result in the loss of data from more than one Pressure Transducer.

3.4 Performance Requirements

3.4.1 Modes

The HPRS high level control will be perfomed by the MEPS Control Function (MCF), which is implemented within the spacecraft OBC. THIS MCF will manage all HPRS modes and sub-state activities; however, the HPRS has to manage any closed-loop pressure regulation control and LP section filling activities (if required) directly, as detailed below.

The HPRS control requirements can be split into:

• Mode and sub-state transitions

• Closed loop regulation control

• FDIR

HPRS_OFF

HPRS_Standby HPRS_FILL

HPRS_Manual HPRS_INIT

HPRS_REG

Figure 3.4-1: Mode and Sub-State Transitions Diagram

HPR-2913//A,R

The HPRS shall comprise prime and redundant branches; these shall be completely independent, except for specific cases. Normally only 1 of the 2 redundant branches of the HPRS shall be enabled into HPRS_Standby, HPRS_FILL or HPRS_REG mode at any one time.


Page 14 of 88



HPR-2689//T

Closed-loop regulation control ("HPRS_REG" sub-state activities) is to be implemented within the HPRS. When in this sub-state, the HPRS shall control LP section pressure within the limits as defined in HPR-2904 below. This control shall be autonomous within the HPRS.

HPR-3001//T,A

[EPR] LP section filling (HPRS_FILL sub-state activities) is to be implemented within the HPRS. When in this sub-state, the HPRS shall open all valves and inhibits within the selected branch, until the LP section reaches a predefined threshold. Once this threshold is reached the valves shall be closed. This control shall be autonomous within the HPRS. This activity shall not result the LP section pressure exceeding the regulation band upper threshold during or immediately after the fill. The threshold value shall be modifiable by TC.

HPR-3193//

[MPR] LP section filling (HPRS_FILL sub-state activities) is to be implemented within the HPRS. When in this sub-state, the HPRS shall open all isolation valves within the selected branch, until the LP section reaches the predefined threshold. Once this threshold is reached the isolation valves shall be closed. This control shall be autonomous within the HPRS. This activity shall not result the LP section pressure exceeding the regulation band upper threshold during or immediately after the fill.

HPR-2912//T,A

FDIR activities will in general be managed at OBC level. However, any critical FDIR which may result in personnel hazards, or permanent damage to the HPRS or spacecraft, shall also be managed at HPRS level (to avoid the hazard arising due to failure of the OBC).

HPR-3002//T,A

The HPRS shall support al least the following TC. The HPRS shall accept and act on these commands only when in the state identified in the “Availability” column; otherwise the command shall be rejected

TC Name Description Availability Comments

HPRS ON Turns on the HPRS, and enables MIL bus. All drivers are OFF (HPRS_Init mode)

N/A High level command

HPRS OFF Turns off all parts of the HPRS, and disables MIL bus

N/A High level command

HPRS_Manual ON Ensure all supplies are available to be enabled or disabled by dedicated TC

HPRS_INIT Internal thermal control may be turned ON if required by the HPRS

HPRS_Standby_ON Turn on PT and thermistor supplies, and provide corresponding TM to the SC via the 1553 bus

HPRS_INIT, HPRS_Manual, HPRS_FILL,

HPRS_REG

Internal thermal control may be turned ON if required by the HPRS

Fill_ON HPR-3001 or HPR3195 applies

HPRS_Standby All activities under HPRS direct control

Regulation_ON Perform closed loop regulation control

HPRS_Standby Aall activities under HPRS direct control


Page 15 of 88



TC Name Description Availability Comments

TBD Dedicated TC to enable/disable supplies and actual HPR elements directly

HPRS_Manual To be used for fault diagnosis only

TBD Operational thresholds modification

HPRS_INIT

Table 3.4-1: HPRS Telecommand Table

3.4.2 General

HPR-54//T

The HPR shall provide a regulated downstream pressure over the mass flow range defined in HPR-93.

During each manoeuvre, one of the two redundant branches shall be used to regulate the pressure. It shall be possible to operate each branch completely independently.

HPR-2464//T,A

The overall performance of the HPRS shall not be dependant on OBC latencies (TBC).

HPR-2466//T,A

The HPRS shall be capable meeting the requirements of this specification during the following operating and non-operating periods post launch without the need for any intervention or maintenance:

• Operational periods predicted to be 130 days.

• Non-operational periods predicted to be 250 days.

HPR-2645//A,R

The HPRS shall be operated for 30 minimum (TBC) periods over the mission life.

Below is a graph showing the predicted typical flowrate against time indicating the operational periods.


Page 16 of 88



0.00E+00

1.00E-06

2.00E-06

3.00E-06

4.00E-06

5.00E-06

6.00E-06

7.00E-06

0 500 1000 1500 2000 2500

Time in days

Flow rate (kg/s)

Figure 3.4-2: Predicted Flowrate Against Time Graph

HPR-2541//T

The HPRS shall require no intervention or maintenance for ground non-operational periods of up to 6 months after launch preparation with both the HP section LP sections of the HPR pressurised to their respective MEOPs.

HPR-2601//A,R

The HPRS shall be capable of being stored for periods of up to 5 years for without the need for any intervention or maintenance.

HPR-2540//T,A,R

All data storage, processing and set points shall be 12 bit resolution (corresponding to 0.025% full scale of corresponding data range)

HPR-2923//T

Temperature acquisition accuracy shall be better than ± 1.2°C

HPR-2924//T

Temperature and pressure transducer data acquisition lag shall be less than 100 ms

HPR-2921//T

LPTs accuracy shall be better than 1% of LP section MEP (the LP section PTs should have sufficient range to cover the MEP defined by the supplier) see Section 3.4.4.3.

HPR-2922//T

HPTs accuracy shall be better than 1.75 bar (driven by contents gauging requirement)

HPR-2971//T

HP and LP accuracy shall also be compatible with internal HPRS needs for regulation control.


Page 17 of 88



HPR-2550//T

None of the inhibits shall require the application of electrical power to remain in the closed state (when starting from closed).

HPR-2551//T

In the event of removal of power from the HPRS, and with no flow out of the HPRS, at least 1 inhibit in each branch shall automatically return to the closed position.

3.4.3 Media

HPR-56//T,A,R

The HPRS shall be designed to operate, and only be operated, with the following media:

Xenon Gas Ref. AD2.2(e)

HPR-1516//T

The HPRS high pressure section shall be compatible with 2-phase and liquid Xenon during non-operational periods. (Non operational temperatures defined in AD2.1(f) ).

HPR-2563//A,S

The HPRS shall be capable of a throughput of Xenon propellant through either branch during operational life of 450kg minimum, this does not include any gasses used during the manufacturing, assembly and test.

HPR-971//T,A,R

The HPRS shall also be compatible (non-operating) with the following media:

Helium Gas Ref. AD2.2(b)

Nitrogen Gas Ref. AD2.2(c)

Argon Gas Ref. AD2.2(d)

3.4.4 Pressures

MEOP (Maximum Expected Operation al Pressure) = Operational conditions.

MEP (Maximum Expected Pressure) = Non Operational Conditions

3.4.4.1 Inlet / High Pressure System

HPR-59//T

During ground testing the HP system Maximum Expected Pressure (MEP) shall be 150 bar mandatory with 170 bar target.

HPR-60//T

During the launch the HP system Maximum Expected Pressure (MEP) shall be 150 bar mandatory with 170 bar target.

HPR-61//T

Post-Launch the HPRS in orbit operating pressure ranges shall be as follows:-

Maximum Expected Operating Pressure (MEOP) BOL 150 bar mandatory with 170 bar target

Minimum Required Operating Pressure EOL 3.0 bar

3.4.4.2 Slam Start

HPR-3198//T

[MPR] The HPRS shall not be damaged or suffer a subsequent performance degradation as a result of slam starts (opening of one of the branches isolation valve when inlet is pressurised to MEOP)


Page 18 of 88



HPR-3199//T

The HPRS shall be qualified to successfully perform at least 10 slam starts.

HPR-3221//T

[MPR] The HPRS shall include dynamic flow limiters at the inlet to the Mechanical Regulator Elements to prevent any transient overshoot at the outlet pressure under the slam pressurisation operation.

HPR-3223//T

[EPR] The HPRS shall include flow restrictors as part of the regulation section to prevent any transient overshoot at the outlet pressure under the slam pressurisation operation.

3.4.4.3 Low Pressure System

HPR-67//T,A

The LP Maximum Expected Operating Pressures shall not exceed 4 bar.

HPR-2465//T,A

The LP MEP (Maximum Expected Pressure - non operational) shall be defined by the Contractor taking into account the following:

• Non operational periods (both on ground and during flight) as defined in HPR-2464 above.

• Total internal leakage through the HPR.

• Temperature excursions, over the ranges defined in Section 3.4.9

HPR-65//T,A

The LP system Maximum Expected Pressure (MEP) shall not exceed 10.0 bar (non operational) for all ground, launch and post launch activities.

HPR-2596//T,A

For pressure excursions associated with HPR internal leakage, a downstream pipework volume of 0.1 litres (TBC) shall be taken into account; this shall be subjected to the same temperature range as the HPR, with zero flow and leakage out of the LP section. In the event that additional buffering volume is required to ensure the declared MEP is not exceeded, this shall be included as part of the HPRS.

3.4.4.4 Lock-Up Pressure

HPR-3205//T

[MPR] The Lock-Up pressure (PL) is the outlet pressure at which the regulator closes. The maximum value for lock-up pressure shall be less than the upper regulated pressure limit.

3.4.4.5 Pressure Regulation

HPR-64//T

[EPR] The HPRS shall regulate the inlet pressure, supplied by the XST, to the demanded pressure at the SEPS inlet within the operating tolerance band of 0.35bar (total).

HPR-3206//T

[MPR] The HPR shall regulate the inlet pressure, supplied by the XST, to a pressure at the HPRS outlet to within the following range: 2.65 ±0.06 bar.

HPR-972//T

[EPR] The HPRS regulated output shall be modifiable by Tele-Command on ground and during flight, to any pressure between 2 bar and the LP MEOP ref. HPR-67.


Page 19 of 88



HPR-2910//T

[EPR] The regulation set-point or thresholds shall be modifiable by Tele-Command in flight, the last values commanded shall be stored in registers within the HPRS throughout a manoeuvre.

HPR-3191//T

[EPR] The values modified as a result of Tele-Commands (see HPR-972 & HPR-2910) shall return to pre-programmed default values after a power cycle of the unit.

Note: This is to simplify unit complexity, it is expected that any power on will include setting of values to the currently required settings will be done as part of a power on sequence.

HPR-2911//T,A,R

[EPR] The regulation set-point or corresponding thresholds may be dependant on other HPRS parameters; if this is required, the corresponding data shall all be available in TM from the HPRS, and the corresponding computation would be performed by the spacecraft, provided it is not required to update these values more frequently than once every two weeks. If more frequent updating is required, the computation shall be performed within the HPRS.

HPR-2903//A,R

The regulation scheme used shall be robust in the event of any single failure within the HPRS (i.e. no single failure shall result in damage to the HPRS, spacecraft or personnel)

HPR-2539//T

[MPR] The low pressure output shall not vary by more than < 5millibar/sec (TBC) over the range specified in HPR-64 and HPR-972, with constant demanded flow rate (thruster firing).

HPR-3227//T

[EPR] The low pressure output shall not vary by more than 0.1 bar/sec (TBC) over the range specified in HPR-64 and HPR-972, during thruster firing and non-operating periods.

HPR-2905//T,A

[EPR] If sensors are used as part of an active regulation control scheme (e.g. flow or pressure sensors) then the regulation shall continue to operate safely and within specification even in the event of failure of any 1 sensor type.

HPR-2906//T,A

[EPR] It shall be possible to detect a regulation sensor failure and pass information to the TM

HPR-2907//T

[EPR] It shall be possible to declare a sensor as failed, and the control algorithm shall take this into account, between manoeuvres

3.4.4.6 Evacuation

HPR-69//T

All parts of the HPR shall be capable of withstanding internal evacuation to 0.001 torr under ambient external conditions.

HPR-2641//T

[EPR] Any part of the HPR shall be capable of being evacuated with the remainder of the HPR pressurised to its MEP

HPR-3224//T

[MPR] The HP section of the HPR upstream of the first barrier shall be capable of being evacuated with the remainedrof the HPR pressurised to the LP MEP.


Page 20 of 88



3.4.4.7 Valve Actuation Factor

HPR-130//T

All valves shall be capable of meeting the requirements in Section 3.4.5 when subjected to a force equal to 1.5 × the combined spring and MEOP load.

3.4.5 Leakage Rates

3.4.5.1 External Leakage

HPR-72//T

The external leakage from the HPR shall not exceed 1 x 10-6 scc/sec GHe when pressurised with helium under any combination of inlet and outlet conditions.

3.4.5.2 Internal Leakage

HPR-74//T

Leakage across the combined seats of the HPR with both branches in parallel shall not exceed 2 x 10-4 scc/sec GHe when the inlet is pressurised with helium at BOL and EOL pressures, for both non-operating and operating temperature limits.

HPR-433//T

[EPR] Leakage across any individual valve seat or inhibit of the HPR shall not exceed 1 x 10-4 scc/sec GHe when the inlet is pressurised with helium under normal operating pressures ranges both BOL and EOL, for both non-operating and operating temperature limits.

HPR-3194//T

[MPR] Leakage across any individual valve seat or inhibit of the HPR shall not exceed 1 x 10-4 scc/sec GHe when the inlet is pressurised with helium under normal operating pressures ranges both BOL and EOL with the mechanical regulator 'closed ' (at the preset regulation pressure) for both non-operating and operating temperature limits.

HPR-3187//T

Its shall be possible to open any of the barriers individually and together, to enable leak testing of individual barriers (seats).

HPR-3225//T

Reverse leakage across any individual valve seat or inhibits of the HPR shall not exceed 1 x 10-4 scc/sec GHe when the outlet is pressurised with helium under LP MEOP pressure, with the HP port evacuated, for both non-operating and operating temperature limits.

3.4.6 Filtration

3.4.6.1 Inlet Filtration

HPR-77//S

The inlet filter shall comply with the following:

HPR-78//S

• Filter Rating: Shall be defined by the Contractor, and of a size to protect the components of the HPR.

HPR-79//S

• Flow: Omnidirectional

HPR-2531//T

The inlet filter shall not degrade the required flowrate during life.


Page 21 of 88



HPR-2537//A,R,S

The minimum particulate capacity for the inlet filter shall be 1.0mg (TBC).

3.4.6.2 Output Filtration

HPR-83//S

The outlet filter shall comply to the following:

HPR-84//S

• Filter Rating: 5µm Absolute (98% removal rating per MIL-F-5504)

HPR-85//S

• Flow: Omnidirectional

HPR-2529//T,A

The outlet filter capacity shall be sufficient to accommodate all particulate matter generated by the HPR and passed through from the inlet.

HPR-2532//T,A

The output filter shall not degrade the required flowrate during life.

3.4.7 Xenon Purity

HPR-89//T

The HPR shall not degrade the quality of xenon supplied to the SEPS inlet, from that loaded and stored in the XST i.e. it shall not introduce any chemical or particulate contamination.

3.4.8 Mass Flow Rate

HPR-93//T

The flow rate provided by the HPR shall be 0 to at least 7.1 mg/s over mission life, to be achieved on either branch at the full range of inlet pressures (BOL to EOL).

3.4.9 Fluid / Equipment Temperatures

HPR-98//T

The HPRS shall maintain the temperature of the high-pressure xenon gas above +27°C (i.e. +17°C plus +10°C margin) during operation using internal heaters, or it has to demonstrate operating i.a.w. this specification with liquid & 2-phase Xenon at the inlet.

HPR-99//T

The HPRS shall meet the requirements of this specification when exposed to the environment temperatures defined in AD2.1(f) Section 5 Thermal Environment requirement ET-14785, the qualification and acceptance margins are defined in ET-231

3.4.10 Reliability

HPR-112//A

For reliability calculations, the pressure transducers shall be assumed to be powered on continuously.

HPR-2558//A

No one failure shall propagate to the redundant component or branch.

HPR-2559//A

No failure in one regulation branch shall prevent that branch from isolating the high-pressure system from the low-pressure system, or the availability of all TM from all operating Pressure Transducers.


Page 22 of 88



3.5 Electrical Requirements

3.5.1 Power Bus

HPR-2662//T

The Spacecraft will supply the power required to operate the HPRS according to the interface requirements in the GDIR section 3.6.2 (GDI-2270). The spacecraft will supply a nominal 28V bus and full performance of the HPRS shall be ensured within the range 28V +1% / -3% (GDI-410).

HPR-2663//R

The PRE shall not directly utilise primary power but shall generate isolated secondary voltages as required.

HPR-2702//T

The HPRS Shall generate all necessary internal voltage rails from the 28V bus

3.5.2 Equipment Harnesses

HPR-3049//R

All the harnesses between the various elements of the HPRS including all aspects of the Safe/Arm connectors are part of the overall HPRS.

HPR-117//R

Equipment harnesses shall be in accordance with AD2.1(c)

HPR-2973//R

The HPRS prime and redundant harness / connector scheme shall be designed to enable all the connections between the PRE and the HPR to be routed via a safe/arm connector mounted on the S/C skin.

HPR-3050//T

The harness length from the PRE to the HPR via the Safe/Arm connector and 'arming plug' is estimated to be 5 meters (TBC)

3.5.3 Grounding and Bonding

HPR-119//R

The bonding and grounding scheme shall be in accordance with AD2.1 (e)

3.5.4 Pressure Transducer Electrical Requirements

HPR-139//T

Insulation Resistance shall be > 100 Mohms @ 50 VDC ( input power to ground and signal output to ground )

HPR-144//T,S

The unit shall not be damaged by reversal of input voltage polarity.

3.6 Thermal Requirements

3.6.1 Temperature Control

HPR-2553//R

The HPRS Supplier shall provide all internal thermal control required to operate when subjected to the environment temperature range defined in AD2.1(f).

HPR-2461//T

The HPRS internal thermal control shall guarantee the operation of the HPR over specified environmental temperature range with Xenon input in either gas liquid or 2-phase state. ref HPR-98


Page 23 of 88



HPR-2462//T

The HPRS thermal control shall be completely autonomous, with no user input required.

3.6.2 Temperature Monitoring

HPR-151//R

The unit temperature Critical Temp Point shall be on a location that provides the best indication of the high pressure Xenon temperature (HPR Inlet).

HPR-122//T,R

All thermistors shall be in accordance with AD2.1(c)

HPR-980//R

Prime and redundant thermistors shall be used to monitor the HPRS Critical Temp Point

HPR-981//R

The prime and redundant thermistor shall be placed adjacent to each other on the HPRS as close to the Critical Temp Point as possible.

3.7 Power Requirements

HPR-121//T,R

The maximum HPRS power consumption shall not exceed the following. This power budget is based on the following:

• All pressure transducers are permanently powered.

• The prime and redundant PRE's will be powered individually.

• There shall be no simultaneous operation of prime and redundant heaters.

• The duration of the maximum peak power consumption shall not exceed 0.5s (TBC).

Note that the following values are all TBC.

Max. Peak Power (W) Max. Average Power

174.13 15.73

Table 3.7-1: HPRS Power Consumption Table

3.8 Maintainability

HPR-199//R

The HPRS shall be designed to require a minimum number of special tools and test equipment to maintain calibration, perform adjustments and accomplish fault identification. No field maintenance, servicing or adjustment shall be required within the specified lifetime.

3.9 Parts Design and Construction

3.9.1 Parts, Materials and Processes

HPR-204//R

The selection, documentation, qualification, approval, procurement and control of all parts, materials and processes for prototype and flight spacecraft equipment shall be in accordance with AD2.1(a).


Page 24 of 88



3.9.1.1 Seals

HPR-3196//T,A

Swelling of any hard or soft (elastomeric) seal shall not degrade the performance of the HPRS outside the limits of this specification, over the life of HPRS.

3.9.1.2 Pressure Barriers

HPR-3208//R

Any part of the HPRS including flexible membranes shall provide at least two barriers between the pressurised section and the external environment of the regulator.

3.9.2 Protection

HPR-216//I

All open tube ends shall be kept capped when not required to prevent ingress of particles or moisture.

3.9.3 Cleanliness

HPR-220//T,I

Pressurised elements of the sub-system (and components) shall be thoroughly cleaned prior to use with Xenon.

There shall be no chips, slag or particle matter, oil, grease or other foreign material remaining.

The applicable cleaning specification shall include demonstration of cleanliness at components, sub-assembly levels and after integration.

HPR-2622//I

The equipment shall be assembled under cleanroom conditions, Class 100,000 or better.

HPR-2625//I

All external surfaces of the sub-system and components shall be thoroughly cleaned.

HPR-2623//T

All equipments shall be measurably clean to equal or better than the levels shown in Max. Particle Count Table below. For units exposed to the flight propellant, a sample taken after passage through the equipment shall not exceed the listed particle count or distribution. The flushing media shall be Isopropyl Alcohol per AD2.3(a)

HPR-2624//I

The equivalent particle size of any particle shall be its maximum dimension (i.e. fibre length for fibres).

HPR-2626//T

The cleanliness verification sample shall be 100ml for every 0.9 square meters or less internal surface area to be cleaned.

HPR-2627//T

The cleaning fluid shall be tested for Non Volatile Residues (NVR) to ensure it is less than 1mg/100ml

HPR-2602//T

Max. Particle Count Table

Particle Size Maximum Count per 100 ml sample per 0.9 sq. metre

Over 100 microns None

50 microns 5 (no metallic)

25 - 50 microns 50


Page 25 of 88



Particle Size Maximum Count per 100 ml sample per 0.9 sq. metre

less than 25 microns No silting

Non Volatile Residue (NVR) Less then 1mg/100ml

Table 3.9-1: Max Partical Count Table


Page 26 of 88



4 DESIGN AND INTERFACE REQUIREMENTS

4.1 Electrical Interface

HPR-432//R

All electrical interfaces (e.g. Mil 1553 bus, HPC, discrete) shall be via connectors mounted on the housing(s) /baseplate(s) .

4.2 Discrete Telecommands and Telemetry

HPR-2916//T

The discrete telecommand/telemetry interfaces shall meet the requirements in AD2.1(c) GDI-445

4.2.1 Discrete Telecommands

HPR-2917//T

Each PRE shall provide a standard high power on/off command interface which shall meet the requirements of AD2.1(c) GDI-528 (TBC)

HPR-2703//T

The HPRS Shall receive ON/OFF telecommands from the OBC via discrete High Power Commands

4.3 MIL-STD-1553B Bus Interface

HPR-2918//R

Each PRE shall connect to both the prime and redundant MTM Mil-1553B-Bus as a non-packet remote terminal in accordance with the requirements the AD2.1(c) (GDI-3089).

4.3.1 MIL-STD-1553B Commands

HPR-2919//T

Each PRE shall provide redundant MIL-STD-1553B bus interfaces for the following commands which will be issued by the OBC:

• HPR Branch Select

• HPR Mode Select

• Pressure Threshold Command

Other TBD

4.3.2 MIL-STD-1553B Telemetry

HPR-2701//T

The HPRS Shall receive telecommands from the OBC via the MIL-STD-1553B bus.

HPR-2908//T

The HPRS Shall generate and send TM and FDIR data via the MIL-STD-1553B bus.

HPR-2920//T

Each PRE shall provide the following telemetry to the OBC via the MIL-STD-1553B bus:

• HPR Status telemetry

• Pressure telemetry

• Latch valve status telemetry

• HPR thermistor telemetry

• FDIR information

• Readback of all modifiable operating parameters


Page 27 of 88



• Count of actuations on each valve/actuator which are subject to life limitation on number of actuations.

4.4 Environmental Requirements

HPR-51//R

For all electrical/ mechanical and thermal design aspects not separately addressed in this specification, the requirements of AD2.1(c) and AD2.1(f) shall apply (refer to Sections 8 and Section 9 for the detailed applicability matrices).

HPR-2642//T

During environmental testing the HPR shall be in the launch configuration, with the HP and the LP sections pressurised to their MEP's.

4.4.1 Thermal Environment

HPR-2294//T,A

The HPR shall be compatible with exposure to the non-operating temperature limits defined in section 5 of AD2.1(f), without any power being supplied to any part of the HPR, including any internal thermal control as defined in Section 3.6.

HPR-2684//T

The HPR shall meet both internal and external leakage requirements defined in HPR-72, HPR-74 and HPR-433 when exposed to the non-operating temperature limits.

4.4.2 Attitude Sensitivity

HPR-3201//T,A

The HPRS shall comply with all the requirements in this specification in any orientation, unless otherwise specified in this document.

4.4.3 External Pressure

HPR-3203//T

The HPRS shall comply with the requirements of this specification with the external pressure in the range from sea level (1013 mbar) to vacuum.

4.5 Envelope Requirements

HPR-2599//R

The maximum allowable envelope volume for the HPR shall be 450mm x 250mm x 250mm high.

HPR-2914//R

The PRE and its housing shall not exceed 171mm x 145mm x 56 mm. The PRE may be integrated into the HPR housing if it can be accommodated within the HPR envelope.

4.6 Thermal Control Interface

HPR-1157//R

The HPRS Internal Heater power interface shall be via the HPRS Prime and Redundant Power Switching / Conditioning Unit.

HPR-1158//R

For ground test purposes, prime thermostat by-pass interface shall be provided (if thermostats are used). This shall be in the form of 2 flying leads, each 2.5 m long; one connected either side of the prime pair of thermostats.


Page 28 of 88



4.7 Mechanical Requirements

4.7.1 General

HPR-154//R

The HPRS shall be designed with the required positive margins of safety to meet the design and performance requirements of this specification prior to exposure, during exposure and after exposure to the environments specified herein. Environments experienced during fabrication, transportation and storage shall be controlled so as to be significantly less severe than the environments specified herein.

4.7.2 Construction

HPR-165//R

All parts of the HPR shall be hermetically sealed from the external environment, by welding.

The pressure transducers shall provide a secondary hermetic pressure barrier behind the sensing diaphragm capable of withstanding the system burst pressure.

HPR-2468//I

Positive locking of screw type hardware used on the equipment shall be achieved by safety wire where possible. Alternative methods of locking shall be approved by the Customer.

HPR-2542//T,A

Any single barrier of non-redundant parts (e.g. pipework) of the HPR and the environment shall be considered as potential single point failures and treated as critical items accordingly. These shall be subject to Customer approval

4.7.3 Proof Pressure

HPR-156//T

The HPR shall meet all requirements of this specification after being subjected to the following minimum proof pressures:

HPR-157//T

• High Pressure System. Upstream of and including the regulation section

- All HPR elements: HP MEOP x 1.5

HPR-158//T

• Low Pressure System. Downstream of the regulation section

- All HPR elements: LP MEP bar x 1.5

4.7.4 Burst Pressure

The HPR shall withstand without rupture the following minimum burst pressures:

HPR-161//T

• High Pressure System. Upstream of and including the regulation section

- Pipework only. HP MEOP bar x 4

- All other HPR elements HP MEOP x 2.5

HPR-162//T

• Low Pressure System. Downstream of the regulation section

- Pipework only. LP MEP bar x 4

- All other HPR elements LP MEP bar x 2.5


Page 29 of 88



4.7.5 Mass

HPR-167//T

The HPRS shall have the minimum mass necessary to meet the requirements of this specification, and shall not exceed the values below :

HPR-2931//T

The HPR mass shall not exceed 6.5 kg.

HPR-2932//T

The PRE mass shall not exceed 2 kg (TBC).

HPR-2933//T

The PRE/HPR harness shall not exceed 0.5 kg (TBC)

4.7.6 Mechanical Interfaces

4.7.6.1 Interfaces with the PPS Pipework

HPR-172//R

The equipment shall be supplied for connection to 6.35mm ( ¼”) diameter, 0.7mm ( 0.028”) wall thickness, titanium (Ti6AL4V or Ti3AL2.5V) pipework by welding.

4.7.6.2 Interfaces with the Structure

HPR-174//R

Interfaces with the structure are defined in AD2.1 (c).

HPR-2523//R

The external physical configuration, centre of gravity, mechanical interface and all critical dimensions shall be established and controlled according to AD2.1 (c).

4.7.6.3 Interfaces with the Ground Support Equipment

HPR-176//R

The equipment shall be compatible with the contractor's ground support equipment to allow all necessary testing operations.

In the case of special handling or operation precautions being necessary, these shall be included in the contractor's Handling and Transportation Procedures.


Page 30 of 88



5 PRODUCT ASSURANCE

5.1 General Requirements

5.1.1 Product Assurance Requirements

HPR-230//R

The HPRS assembly shall be designed, manufactured and tested in accordance with the PA

Requirements specified in AD2.1(a).

The applicable Product Assurance requirements are provided in the GDIR (General Design and Interface Requirements) AD2.1(c) and in the PA Requirements for Subcontractors AD2.1(a) (product assurance general; quality assurance; dependability; safety including product liability; EEE-parts with special chapter on radiation hardness assurance; parts, materials and processes; cleanliness & contamination control; deliverable PA documentation, …).

The applicable Software Product Assurance requirements are provided in “SW PA Requirements for Subcontractors” AD2.1(g) (including requirements for SW PA on firmware resident in PROM and ASICs or FPGAs; boot & init SW, etc.).

5.1.2 Failure Tolerance

The failure tolerance requirements of GDIR AD2.1(c) apply as listed in the GDIR applicability matrix provided in annexe 7. The GDIR requirements GDI-3136, GDI-3119, GDI-3123 cannot be used on equipment level and they are applicable as derived below:

HPR-1500//A

The design of units with embedded redundancy shall be such that a single component/part failure (e.g. resistor, transistor) cannot, as far as practicable, cause the failure of any function of the equipment.

Single point failures which cannot be eliminated from the design with reasonable effort (or fault tolerance requirements which cannot be met) shall be summarised in a Single Point Failure/Critical Items List. They are subject to formal approval by the customer up to prime contractor on a case by case basis with a detailed retention rationale.

HPR-1501//A

The contractor shall verify the capability of the design to sustain single failure as defined by the following failure tolerance requirement:

• No single hardware failure or operator error shall cause effects on equipment functions of the dependability severity category 1 (Propagation of failure to other subsystem/ assembly/ equipment) and - for units with embedded redundancy only - level 2 (Loss of functionality). Single point failures which cannot be eliminated from the design with reasonable effort (or fault tolerance requirements which cannot be met) shall be summarised in a Single Point Failure/Critical Item List. They are subject to formal approval by the customer up to prime contractor on a case-by-case basis with a detailed retention rationale.

HPR-1502//R

The Customer will decide whether dedicated ESA system level requirements are violated and forward the approval requests to ESA as necessary.

HPR-1503//A

Any command or command sequence that can cause

• consequences of the hazard severity category 1 (Catastrophic - Loss of human life; life threatening, permanently disabling injury or occupational illness) or

• dependability severity category 1 (Propagation of failure to other subsystem/ assembly/ equipment) or


Page 31 of 88



• - for units with embedded redundancy only - level 2 (Loss of functionality) or

• cause damage to flight hardware if issued inadvertently or not issued when required (out of sequence commanding)

• shall be identified in the FMECA and reported in the Hazard Analysis.


Page 32 of 88



6 VERIFICATION AND TEST REQUIREMENTS

6.1 General Requirements

HPR-2244//T,A,R

The Contractor shall meet the following verification and test requirements as a minimum. However, these requirements should not necessarily be considered as exhaustive, and the Contractor shall also include additional tests as necessary to demonstrate complete compliance of the SEPS with the requirements above.

6.1.1 Responsibility for Inspection

HPR-2246//R

Unless otherwise specified in the contract or Statement of Work (SOW), the Contractor is responsible for the performance of all inspection and test requirements as specified herein.

6.1.2 Quality Assurance Provisions

HPR-2248//T,I,R

The Contractor shall have or shall establish and implement a Quality Programme that complies with the requirements of Section 5.

6.1.3 Surveillance, and Witness of Inspection and Test

HPR-2250//I

The Customer shall be given access to the Contractor's facilities at all times in order to inspect the Contractor's quality control system and the records specified to be maintained therein. The Contractor shall ensure that appropriate arrangements are made for access to lower tier contractors' facilities/test houses where relevant processes are to be performed.

HPR-2251//I

The Customer reserves (or their nominated representatives) the right to witness, perform, or review the tests or documentation of any of the inspections set forth in the specification where such inspections are deemed necessary to assure that supplies and services conform to prescribed requirements.

HPR-2252//R

The Contractor shall notify the Customer at least 2 weeks and subsequently 48 hours prior to the commencement of the qualification or acceptance test phases to enable representation by the Customer and witnessing of any or all tests as considered necessary by the Customer.

6.1.4 Classification of Inspection and Test

HPR-236//T,R

The examination and testing of the HPRS equipment shall be classified as follows:

- Qualification as defined in Section 6.2.2.2

- Acceptance as defined in Section 6.2.1

- Preparation for delivery inspection and test

6.2 Verification of Compliance

HPR-239//R

The contractor shall identify the methods for acceptance and qualification tests how it intends to demonstrate compliance. The method of verification shall be presented in a Design Verification Matrix, the format defined by the Customer in the Statement of Work. The methods are:

• Analysis

• Similarity


Page 33 of 88



• Review of design

• Test

• Inspection

• Functional and Performance Test (to be performed at least at HPRS level (PRE, HPR and PRH combined)

6.2.1 Acceptance Inspections and Tests

6.2.1.1 Pressure Regulation Test

HPR-2547//T

All pressure regulation tests shall be performed over the entire HPR operating range (test pressures to be agreed with Customer before TRR)

6.2.1.2 Test Sample

HPR-242//T

Each FM deliverable unit produced in accordance with this specification shall be subject to the acceptance testing identified in Section 6.2.1.3.

HPR-2254//T

Each unit shall be clean prior to entering acceptance testing.

6.2.1.3 Acceptance Inspection and Tests Required

HPR-244//T

The following tests shall be performed as a minimum. The following does not necessarily define the sequence in which the tests shall take place.

Test Description

1 Inspection and Mass and Dimensions

2 Proof Pressure Tests

3 Leakage Tests (Internal and External)

4 Evacuation Test

5 Functional and Electrical Tests

• Electrical tests: Continuity, Bonding, isolation - unpressurised

• Slam Start

• Pressure Regulation

• Flow rate

• PT Verification

• Communication Communication Control & Monitoring verification

6 Vibration


8 Evacuation Test


Page 34 of 88



Test Description



• Slam Start


• Flow rate

• PT Verification

• Communication Control & Monitoring verification

10 Thermal Tests

11 HOT

Functional and Electrical Tests


• Slam Start


• Flow rate

• Leakage (internal)

• PT Verification


12 COLD



• Slam Start


• Flow rate

• Leakage (internal)

• PT Verification


13 AMBIENT



• Slam Start


• Flow rate



Page 35 of 88



Test Description


15 Cleanliness verification

16 Final Inspection and Examination

Table 6.2-1: HPRS Acceptance Test Sequence

6.2.1.4 Failure Criteria

The unit shall exhibit no failure, malfunction or out-of-tolerance performance degradation as a result of acceptance inspections and tests. Any such occurrence shall be cause for rejection.

6.2.2 Proto-Flight Inspections and Tests

6.2.2.1 Test Sample

HPR-249//R

Any proto-flight testing to be carried out shall be on a dedicated PFM unit that has been manufactured in accordance with the requirements of this specification.

6.2.2.2 Proto-Flight Tests

HPR-251//T

The following tests are required as a minimum. The following does not necessarily define the sequence in which the tests shall take place.

Subject to Customer approval, certain tests may be performed at individual component level (valves, for example).

Test Description

1 Inspection and Dimensions

2 Proof Pressure Test

3 Leakage Test (internal and external)

4 Evacuation Test



• Slam Start


• Flow rate

• PT Verification


6 Vibration Tests

7 Constant Acceleration (may be covered by Sine Dwell)

8 Thermal VACUUM Test


Page 36 of 88



Test Description

9 HOT



• Slam Start


• Flow rate

• Internal Leakage

• PT Verification


10 COLD



• Slam Start


• Flow rate


• PT Verification


11 AMBIENT



• Slam Start


• Flow rate

• PT Verification



13 Cleanliness Verification

14 Mass Measurement


Table 6.2-2: HPRS Proto Flight Test Sequence


Page 37 of 88




HPR-253//T,I

The unit shall exhibit no failure, malfunction or out-of-tolerance performance degradation as a result of qualification inspections and tests. Any such occurrence shall be cause for rejection.

6.2.3 Qualification Inspections and Tests

6.2.3.1 Test Sample

HPR-256//I,R

Qualification testing shall be carried out to verify the equipment design on a unit that has been manufactured in accordance with the requirements of this specification. The unit shall be identical to the units that will be supplied for flight spacecraft.

6.2.3.2 Qualification Tests

HPR-258//T

The following tests are required as a minimum. The following does not necessarily define the sequence in which the tests shall take place.

Subject to Customer approval, certain tests may be performed at individual component level (valves, for example).

Test Description

1 Inspection and Dimensions

2 Proof Pressure Test


4 Evacuation Test



• Slam Start


• Flow rate

• PT Verification


6 Vibration Tests

7 Constant Acceleration (may be covered by Sine Dwell)



• Slam Start


• Flow rate

• PT Verification



Page 38 of 88



Test Description


10 Thermal VACUUM Test

11 HOT



• Slam Start


• Flow rate

• PT Verification


• PT Verification


12 COLD



• Slam Start


• Flow rate

• PT Verification


• PT Verification


13 AMBIENT



• Slam Start


• Flow rate


• PT Verification



15 Shock


Page 39 of 88



Test Description



• Slam Start


• Flow rate

• PT Verification



18 Cleanliness Verification

19 Mass Measurement

20 EMC

21 Life tests (any life limited equipment e.g. valves)

22 Burst Test


Table 6.2-3: HPRS Qualification Test Sequence


HPR-260//I

The unit shall exhibit no failure, malfunction or out-of-tolerance performance degradation as a result of qualification inspections and tests. Any such occurrence shall be cause for rejection.


Page 40 of 88



7 ABBREVIATION LIST

Abbreviation Description

ABCL As Build Configuration List

AIT Assembly Integration and Test

AR Acceptance Review

ASIC Application Specific Integrated Circuit

ATB Avionics Test Bench

BB Bread Board model

CAD Computer Aided Design

CDR Critical Design Review

CFE Customer Furnished Equipment

CIDL Configuration Item Data List

COTS Commercial Off-the Shelf

DCL Declared Components List

DDR Detailed Design Review

DML Declared Materials List

DOS [US] Department of State

DPA Destructive Parts Analysis

DPL Declared Processes List

DR(B) Delivery Review (Board)

DTC [US] Department of Trade Control

EICD Electrical Interface Control Document

EIDP End Item Data Package

EM Engineering Model

EMC Electro Magnetic Analysis

EOL End Of Life

EQM Engineering Qualification Model

EQSR Equipment Qualification Status Review

ESA European Space Agency

ESD Electro Static Discharge

ESTEC European Space Technology Centre

ETB Electronic Test Bench

FAR Flight Acceptance Review

FCU Flow Control Unit

FDIR Failure Detection Isolation and Recovery

FGSE Fluidic Ground Support Equipment

FM Flight Model


Page 41 of 88



FMECA Failure Mode Effects & Criticality Analysis

FPGA Field Programmable Gate Array

FRR Flight Readiness Review

FS Flight Spare

GDIR General Design and Interface Requirements

GMM Geometrical Mathematical Model

GSE Ground Support Equipment

HDRM Hold Down and Release Mechanism

HGA High Gain Antenna

HPR High Pressure Regulator

HPRS High Pressure Regulator System

I/F, IF Interface

ICD Interface Control Document

ISVV Independent Software Verification and Validation

ISVV Independent Software Verification and Validation

ISAS Institute of Space and Astronautical Science

ITAR International Traffic in Arms Regulations

JAXA Japan Space Exploration Agency

KIP Key Inspection Point

MAIV Mechanical Assembly Integration and Verification

MCS Mercury Composite Spacecraft

MCU MEPS Control Unit

MD Mechanical Dummy

MDVE Model-based Development and Verification Environment

MGSE Mechanical Ground Support Equipment

MICD Mechanical Interface Control Document

MIP Mandatory Inspection Point

MLI Multi Layer Insulation

MMO Mercury Magnetospheric Orbiter

MPCB Materials & Processes Control Board

MPO Mercury Planetary Orbiter

MRR Manufacturing Release Review

NCR Non Conformance Report

NRB Non-Conformance Review Board

OGSE Optical Ground Support Equipment

PA Product Assurance

PCB Parts Control Board

PDR Preliminary Design Review


Page 42 of 88



PFM Proto Flight Model

PL Payload

PMP Parts, Materials, and Processes

PPL Preferred Parts List

PPU Power Processing Unit

PRE Pressure Regulating Electronics

PRH Pressure Ragulator Harness

PSA Parts Stress Analysis

PUS Packet Utilisation Standard

QM Qualification Model

QR Qualification Review

QSR Quality Summary Report

RFD Request for Deviation

RFW Request for Waiver

RID Review Item Discrepancy

RoHS Restriction of the use of certain Hazardous Substances

SC Solar Constant

SDB Satellite Data Base

SEPS Solar Electric Propulsion Subsystem

SEPT Solar Electric Propulsion Thruster

SGICD Space to Ground Interface Control Document

SK Spare Kit

SM Structural Model

SOW Statement of Work

SRDB Satellite Reference Data Base

SRR Software Requirements Review

SGICD Space to Ground Interface Control Document

SS Sun Shade

STM Structure Thermal Model

SVF Software Verification Facility

TAA Technical Assistance Agreement

TB Thermal Balance

tbd To be defined

TC Telecommand

TD Thermal Dummy

TM Telemetry

TM Thermal Model

TPA Thruster Pointing Assembly


Page 43 of 88



TPE Thruster Pointing Electronics

TPM Thruster Pointing Mechanism

TR Test Results review

TRB Test Review Board

TRR Test Readiness Review

TV Thermal Vacuum

VCD Verification Control Document

WCA Worst Case Analysis

WEEE Waste of Electrical and Electronic Equipment

XML eXtensibe Markup Language


Page 44 of 88



8 GDIR APPLICABILITY MATRIX

The following table lists the applicable requirements of the GDIR.

It contains, in the first column, the Local ID for each applicable GDIR requirement number.

The second column contains the GDIR Requirement number and the opening text of the requirement.

The third column defines the Applicability Y/N

The final column shows the intended verification method. If no method is shown it shall be assumed that verification is required and the method is TBD

Req No. Reference Applicability Verif. Method

2.1 Applicable Documents HPR-1168 GDI-3994:

The following documents, of the latest issue, or o ... Y

2.2 Applicable Standards HPR-1169 GDI-3993:

The following documents, of the latest issue, or o ... Y

2.2.1 ECSS 2.2.2 Military/Industrial 3.1.1 Lifetime HPR-453 GDI-35:

The equipment/subsystem shall meet the requirement ... Y TBD

HPR-454 GDI-38: Maintenance during storage shall be as limited as ...

Y A

HPR-455 GDI-53: The MTM equipment/subsystems shall be designed wit ...

Y T,A

HPR-456 GDI-48: Where the design margin on nominal lifetime is not ...

Y R,TBC

HPR-457 GDI-49: The lifetime of items which degrade shall be desig ...

Y R,TBC

3.1.2 Safety and Product Liability HPR-459 GDI-55:

The subcontractor shall comply to the applicable s ... Y A

HPR-460 GDI-56: The subcontractor shall comply to the applicable p ...

Y A

HPR-1170 GDI-3136: The design of the ASP, MPB and ETA subsystems shal ...

Y A

HPR-1171 GDI-3137: Alternate or redundant paths shall be functionally ...

Y A

HPR-1172 GDI-3138: Checkout of all redundant paths and contingency op ...

Y A

HPR-1173 GDI-3118: The contractor shall verify the capability of the ...

Y A

HPR-1174 GDI-3119: No single hardware failure or operator error shall ...

Y A

HPR-1175 GDI-3120: No single hardware failure or operator error shall ...

Y A

HPR-1176 GDI-3121: No two hardware failures, two operator errors, a c ...

Y A

HPR-1177 GDI-3122: Improper command or command sequences or software ...

Y A

HPR-1178 GDI-3123: Any command or command sequence that can cause con ...

Y A

HPR-2704 GDI-3163: Error protection and detection shall be by single ...

Y R


Page 45 of 88




HPR-2705 GDI-3164: There shall be redundant non-volatile memory avail ...

Y R

HPR-2706 GDI-3165: Non-volatile reprogrammable memory shall be availa ...

Y R

HPR-2707 GDI-3170: In the case of multiple read errors at the same lo ...

Y R

HPR-2708 GDI-3171: The total number of errors shall be available in t ...

Y R

HPR-2709 GDI-3172: The volatile memory shall be protected by an Error ...

Y R

HPR-2710 GDI-3173: Each processing unit shall count the single bit co ...

Y R

HPR-2711 GDI-3174: The memory allocated to one processor shall not be ...

Y R

HPR-2712 GDI-3175: The non-volatile storage shall provide an undetect ...

Y A

HPR-2713 GDI-3176: The non-volatile reprogrammable storage shall prov ...

Y A

HPR-2714 GDI-3177: The volatile storage shall provide an undetected b ...

Y A

3.1.4 Venting HPR-1179 GDI-65:

Provisions shall be implemented in the design of t ... Y R

HPR-1180 GDI-66: The method of venting shall prevent the release of ...

Y R

HPR-462 GDI-59: The equipment/subsystem shall be able to operate w ...

Y A,R

HPR-1181 GDI-63: Vents shall be < 5mm diameter and > 1.5mm diameter ...

Y R

HPR-463 GDI-60: For all relevant thermal hardware, explicitly MLI, ...

Y R

HPR-464 GDI-62: Structural members (honeycomb panels, in particula ...

Y R

3.1.5 Interchangeability HPR-466 GDI-70:

All spacecraft equipment/subsystems of the same pa ... Y R

3.1.6 Identification & Marking HPR-468 GDI-72:

The equipment hardware shall be identified with a ... Y I

HPR-469 GDI-73: The equipment/subsystem identification nameplate s ...

Y I

HPR-470 GDI-74: For the particular case of connector identificatio ...

Y I

3.1.7 Accessibility/Maintainability & Ground Testing Requirements

HPR-472 GDI-82: The design of the equipment/subsystem, the positio ...

Y R

HPR-473 GDI-83: The equipment shall be designed to require a minim ...

Y R

HPR-474 GDI-84: No field maintenance, servicing or adjustment shal ...

Y R

3.1.8 Transportation, Handling and Storage 3.1.8.1 Transport


Page 46 of 88




HPR-477 GDI-77: The equipment/subsystems shall be transported usin ...

Y R

HPR-1182 GDI-78: The equipment/subsystem containers, covers (for op ...

Y R

HPR-478 GDI-79: The equipment/subsystem transport container shall ...

Y R

HPR-479 GDI-80: The equipment/subsystem storage container shall be ...

Y R

HPR-1183 GDI-3910: The dew point shall never be reached inside the co ...

Y R

HPR-1184 GDI-3911: The pressure inside the container shall be 10 to 1 ...

Y R


Y R


Y R


Y R

HPR-1188 GDI-3909: Simple equipment/subsystem container shall be equi ...

Y I


Y R

HPR-1190 GDI-3913: The IATA flight regulations shall be considered. ...

Y R

HPR-1191 GDI-3914: For safety reasons, the equipment/subsystem transp ...

Y R

HPR-1192 GDI-3916: Flight altitude of 30 000 feet shall be considered ...

Y A

HPR-1193 GDI-3915: Maximum rates of air pressure change: 1,43 mbar/se ...

Y R

3.1.8.2 Equipment/Subsystem Packing HPR-481 GDI-90:

Where applicable blanking caps shall be fitted to ... Y I

HPR-482 GDI-91: All equipment shall be packaged to ensure that it ...

Y I

HPR-483 GDI-93: The specified item GSE shall follow as far as appr ...

Y I

3.1.8.3 Container Identification HPR-485 GDI-95:

Each container shall be labelled, tagged or marked ... Y I

HPR-486 GDI-96: In addition to the above, the container shall also ...

Y I

HPR-487 GDI-2267: Size of company labels on containers shall be agre ...

Y R

3.1.8.4 Handling HPR-489 GDI-98:

Equipment/subsystem weighing more than 10 kg shall ... Y R

3.1.9 Seals HPR-491 GDI-100:

Any seals used shall comply with all the applicabl ... Y R

HPR-492 GDI-101: Any seals requiring periodic replacement during gr ...

Y R

3.1.10 Lubricants and Sealants


Page 47 of 88




HPR-494 GDI-103: No lubricants or sealants shall be used without th ...

Y R

HPR-1194 GDI-3289: The spacecraft equipments/subsystems shall be able ...

Y A

HPR-1195 GDI-3292: The equipment/subsystem shall be able to safely wi ...

Y A

HPR-1196 GDI-3594: SEE in terms of transients are depending on applic ...

Y A

HPR-1197 GDI-3595: The subcontractor shall perform a displacement ana ...

Y A

HPR-1198 GDI-3596: With respect to radiation impact, the unit shall b ...

Y A

HPR-1199 GDI-3969: For items known to be sensitive to contamination s ...

Y R

HPR-1200 GDI-3970: implementation of protective covers which can be e ...

Y R

HPR-1201 GDI-3971: implementation of purge port allowing the connecti ...

Y R

HPR-1202 GDI-3972: if necessary, sensitive items shall be kept warmer ...

Y R

HPR-496 GDI-105: All drawings, specifications and engineering data ...

Y R

HPR-497 GDI-106: Equipment/subsystem shall be compatible with mecha ...

Y R

HPR-1203 GDI-3818: The unit supplier shall produce a list of the unit ...

Y R

HPR-1204 GDI-3819: In case that bouncing of relays may lead to interr ...

Y R

HPR-501 GDI-2137: Material selection shall be in accordance with ECS ...

Y R

HPR-502 GDI-2139: Mechanical parts selection shall be in accordance ...

Y R

HPR-1205 GDI-3980: All reference frames shall be right-handed orthogo ...

Y R

HPR-1206 GDI-3982: The MCS coordinate system shall be as defined in F ...

Y R

3.2.2 Structural Design 3.2.2.1 General Requirements HPR-505 GDI-117:

The following failure modes, for equipment/subsyst ... Y A

HPR-506 GDI-118: For all structural items the following analyses ar ...

Y A

HPR-507 GDI-119: Dynamic Analysis: The dynamic analysis shall show ...

Y A

HPR-508 GDI-121: Stress Analysis: For each item a complete stress/s ...

Y A

HPR-509 GDI-122: No yielding is allowed at proof load/proof pressur ...

Y T

HPR-510 GDI-2053: The structure shall be of adequate strength to wit ...

Y A

HPR-511 GDI-2054: Local buckling shall be tolerated only if it is re ...

Y A


Page 48 of 88




HPR-512 GDI-2055: For composite materials, microbuckling of fibers s ...

Y A

HPR-513 GDI-123: The equipment/subsystem shall be designed to withs ...

Y A

HPR-514 GDI-124: For sine and random vibrations, the mechanical siz ...

Y A

HPR-515 GDI-125: Wherever practical in the design of the primary st ...

Y A

HPR-516 GDI-126: Redundancy concepts (fail-safe) shall be considere ...

Y A

HPR-517 GDI-127: Fracture control principles shall be applied where ...

Y A

HPR-518 GDI-128: In cases where a fail-safe design cannot be implem ...

Y A

HPR-519 GDI-130: A sealed container is a pressurized container, com ...

Y A

HPR-520 GDI-131: Pressure lines, fittings and components shall subj ...

Y T

HPR-521 GDI-133: All fusion joints shall be 100 %inspected accordin ...

Y I

HPR-522 GDI-134: Fasteners used in safe life applications, items fa ...

Y A

HPR-523 GDI-135: Fasteners a. Fasteners shall be classified and ana ...

Y A

HPR-524 GDI-137: Non-metallic flight structural items (composite, g ...

Y T

HPR-525 GDI-138: For load cases involving thermal and/or moisture d ...

Y A

HPR-526 GDI-139: Where pressure and/or temperature and/or moisture ...

Y A

HPR-527 GDI-140: The Flight equipment shall be able to survive 4 ti ...

Y A

3.2.2.2 Mass Properies HPR-529 GDI-143:

All equipment/subsystem suppliers shall provide eq ... Y R

HPR-531 GDI-146: The mass of an item must be measured with the foll ...

Y T

3.2.2.3 Centre of Gravity and Moment of Inertia HPR-533 GDI-148:

All COG and MOI estimates shall be accompanied by ... Y A

HPR-534 GDI-149: The Center of Gravity (CoG) shall be given. w.r.t. ...

Y R

HPR-535 GDI-150: The Moments of Inertia (MoI) shall be given about ...

Y R

3.2.2.4 Stiffness requirements HPR-537 GDI-2140:

Minimum natural frequency requirements are imposed ... Y A

HPR-538 GDI-154: Except otherwise specified, when equipment/subsyst ...

Y T,A

HPR-539 GDI-155: Modal analysis shall be performed to verify the fr ...

Y T,A

HPR-542 GDI-2188: The units and associated transport containers shal ...

Y A


Page 49 of 88




HPR-543 GDI-2189: Vertical and horizontal loads shall be considered ...

Y A

HPR-549 GDI-2199: The transportation containers shall be designed to ...

Y A

HPR-550 GDI-2200: The MGSE design and analysis shall consider a desi ...

Y A

HPR-1207 GDI-3629: During ground transportation the units shall withs ...

Y A

HPR-1208 GDI-3664: All MGSE, containers, transportation and handling ...

Y A

HPR-1209 GDI-3665: Sine and random vibrations: the unit transport con ...

Y A

HPR-1210 GDI-3666: For containers, the shock requirement is a drop of ...

Y T,R

HPR-1211 GDI-3670: The flight limit accelerations are the loads that ...

Y A

HPR-1212 GDI-3671: The loads shall be applied at the unit CoG in out- ...

Y A

HPR-1213 GDI-3673: The initial unit Design Load (DL) shall be derived ...

Y A

HPR-1214 GDI-3676: After freeze of unit accommodation the design load ...

Y A

HPR-1215 GDI-3827: During orbit and attitude correction manoeuvres, t ...

Y R

HPR-1216 GDI-3828: When mounted on spacecraft CFRP panel, the unit s ...

Y A

HPR-1217 GDI-3997: The insert load carrying capability of GDI-2550 sh ...

Y A

3.2.2.6 Strength requirements 3.2.2.6.1 Definitions and General Requirements HPR-1218 GDI-3612:

The design load factor philosophy of the unit shal ... Y A

HPR-1219 GDI-3614: The Flight or Ground Limit Load, LL, is the load t ...

Y A

HPR-1220 GDI-3615: Qualification Load, QL is equal to the Limit Load ...

Y A

HPR-1221 GDI-3616: Design Load, DL is derived by the multiplication o ...

Y A

HPR-1222 GDI-3617: Yield Load, YL is derived by the multiplication of ...

Y A

HPR-1223 GDI-3618: Ultimate Load, UL is derived by the multiplication ...

Y A

HPR-1224 GDI-3619: Yield Factor of Safety, FOSY ensures that unaccept ...

Y A

HPR-1225 GDI-3620: Ultimate Factor of Safety, FOSU ensures that unacc ...

Y A

HPR-1226 GDI-3621: Additional Factor of Safety, KADD are additional f ...

Y A

HPR-1227 GDI-3622: Unit mechanical testing shall take into account an ...

Y A

HPR-1228 GDI-3623: An additional Protoflight Factor of Safety, FOSPF ...

Y A

3.2.2.6.2 Margins of Safety and Factors of Safety


Page 50 of 88




HPR-572 GDI-186: An uncertainty factor Jf shall be defined to provi ...

Y A

HPR-573 GDI-187: A Qualification Factor of 1.5 shall be used for KQ ...

Y T

HPR-574 GDI-188: An Acceptance Factor of 1.0 shall be used for KA t ...

Y A

HPR-575 GDI-189: A Design Factor of 1.5 shall be used for DF to det ...

Y A

HPR-577 GDI-194: The unit shall be able to withstand, without failu ...

Y A

HPR-578 GDI-195: Margin of safety (MOS) a. Margins of safety (MOS) ...

Y A

HPR-579 GDI-197: Minimum Factors of Safety against ultimate for pre ...

Y A

HPR-580 GDI-198: For combined loads where L(P) is the load due to m ...

Y A

HPR-1229 GDI-3229: Table [SRD-3782]: Minimum Factors of Safety ...

Y A

HPR-583 GDI-207: Conservative friction coefficients regarding minim ...

Y A

HPR-584 GDI-208: Wherever applicable, for general design of bolts, ...

Y R

HPR-585 GDI-209: In addition, in case of combined loads due to ther ...

Y A

HPR-1230 GDI-3398: The design loads for the structure elements are t ...

Y A

HPR-1231 GDI-3400: The internal loads (thermo elastic, pre-stressed ...

Y A

HPR-1232 GDI-3401: For sine and random vibrations, the mechanical siz ...

Y A

HPR-1233 GDI-3402: The margins of safety for all elements of the unit ...

Y A

3.2.3 Design Requirements 3.2.3.1 Mounting Requirements HPR-589 GDI-219:

The attachment points of the equipment/subsystem s ... Y R

HPR-1234 GDI-3995: The attachment points shall provide a controlled s ...

Y I,R

HPR-1235 GDI-3996: The mechanical mounting interface shall be consist ...

Y R

HPR-590 GDI-220: The number of attachment bolts for an equipment sh ...

Y A

HPR-591 GDI-221: The interface plane flatness of a equipment/subsys ...

Y I

HPR-592 GDI-222: The equipment/subsystem bolts type and number shal ...

Y R

HPR-593 GDI-223: Except otherwise specified, all equipment/subsyste ...

Y R

HPR-594 GDI-228: Unless special conditions override, the thickness ...

Y R

HPR-595 GDI-229: Minimum clearance between mechanical parts shall c ...

Y R


Page 51 of 88




HPR-596 GDI-230: All equipment/subsystems shall be designed allowin ...

Y A

HPR-597 GDI-2550: The minimum load carrying capability of the insert ...

Y A,R

HPR-598 GDI-2551: The following typical insert distances along the m ...

Y A,R

HPR-1236 GDI-3405: No equipment/subsystem shall generate microvibrati ...

Y A,R

HPR-1237 GDI-3815: The compatibility of the allowable microvibration ...

Y A

3.2.4 Mechanical / Optical Interface Control Documents HPR-600 GDI-239:

The mechanical and optical configuration and its i ... Y A

HPR-601 GDI-240: Interfaces will be subjected to a formal inspectio ...

Y T,I

HPR-602 GDI-241: The issues of ICDs have to be released as defined ...

Y A

HPR-603 GDI-242: One of the attachment holes on a equipment/subsyst ...

Y R

HPR-604 GDI-243: The equipment/subsystem reference frame shall have ...

Y R

HPR-605 GDI-246: The dimensioning of the attachment hole pattern sh ...

Y A

HPR-606 GDI-247: Interface Control Drawings shall be provided to AS ...

Y R

3.2.5 Mechanical Mathematical Model Requirements HPR-608 GDI-253:

Detailed Finite Element Models (FEM) shall be prov ... Y A

HPR-609 GDI-254: All FE model requirements, checks and formats are ...

Y T

3.4 Thermal Design and Interface Requirements HPR-1238 GDI-3179:

Chapter 3 of ECSS-E-30 Part 1 shall apply with the ... Y A

3.4.2 Definition of Temperatures and Terms HPR-614 GDI-298:

In the frame of BepiColombo, all equipment/subsyst ... Y R

3.4.2.2 Conductively Controlled Equipment/Subsystem HPR-616 GDI-300:

All equipment/subsystems with a power density on t ... Y R

3.4.2.3 Isothermal Equipment/Subsystem HPR-618 GDI-302:

As far as possible thermal gradients across the ba ... Y R

HPR-619 GDI-303: For radiative equipment/subsystems the temperature ...

Y T,A

HPR-620 GDI-304: For conductive equipment/subsystems the temperatur ...

Y T,A

HPR-621 GDI-305: For non-isothermal equipment/subsystems a referenc ...

Y R

3.4.2.4 Temperature Reference Point (TRP) HPR-623 GDI-307:

The temperature reference point (TRP) shall be sel ... Y R

HPR-1239 GDI-3876: The system interface temperature point (STP) if de ...

Y T,A


Page 52 of 88




HPR-1240 GDI-3882: The equipment/unit supplier shall analyse the heat ...

Y A

3.4.3 Thermal Interface Requirements 3.4.3.1 Conductive Interface HPR-626 GDI-316:

The mounting interface shall comply with the mecha ... Y A

HPR-1241 GDI-317: Equipment/subsystem mounting areas shall not be pa ...

Y R

HPR-1242 GDI-318: All equipment/subsystems shall have a smooth and p ...

Y R

HPR-1243 GDI-319: Local heat flux shall not be greater than 1.5x spe ...

Y A

HPR-627 GDI-2536: An interface filler with a coefficient of friction ...

Y R

3.4.3.2 Radiative Interface HPR-629 GDI-322:

Equipment/subsystems shall be designed with an emi ... Y R

3.4.3.3 Internal Temperature Monitoring HPR-631 GDI-324:

Temperature monitoring of selected points within a ... Y R

HPR-632 GDI-325: The location, type and electrical interface of all ...

Y R

3.4.4 Thermal Design Requirements HPR-1244 GDI-3184:

Dimensioning of the Thermal Control of space expos ... Y A

HPR-1245 GDI-3881: Dimensioning of the standard Equipment/UnitThermal ...

Y A

HPR-634 GDI-327: The equipment/subsystems shall be designed such th ...

Y A

HPR-1246 GDI-3185: All space exposed items shall be able to withstand ...

Y T,A

HPR-1247 GDI-3188: Use of materials with non-stable thermo-optical pr ...

Y T,R

HPR-1248 GDI-3193: It shall be possible to demonstrate conformance of ...

Y T,A

HPR-1249 GDI-3203: Calculated temperatures of external materials shal ...

Y A

HPR-1250 GDI-3967: Every equipment/unit/subsystem which is exposed to ...

Y A

HPR-1251 GDI-3189: Thermal insulation properties of actual configurat ...

Y T

HPR-1252 GDI-3190: MLI blankets used on a Structural, Thermal and/or ...

Y R

HPR-1253 GDI-3191: The MLI used on the Flight Model of the spacecraft ...

Y R

HPR-1254 GDI-3192: It shall be possible to install/remove a complete ...

Y R

3.4.5 Thermal Control HPR-636 GDI-331:

All thermal hardware mounted on the equipment/subs ... Y R

3.4.6 Thermal Interface Control Documents HPR-638 GDI-333:

All equipment/subsystem thermal interfaces shall b ... Y R

3.4.7 Thermal Mathematical Model Requirements


Page 53 of 88




HPR-1255 GDI-3201: The compliance to the thermal performance requirem ...

Y A

HPR-1256 GDI-3202: In case of TB test execution, the temperature unce ...

Y A

3.4.7.2 Thermal Interface Modeling HPR-641 GDI-336:

The Thermal mathematical model shall be provided f ... Y A

HPR-642 GDI-337: SI units: All units used in thermal models (geomet ...

Y A

3.4.7.3 Thermal Model Correlation HPR-644 GDI-339:

The detailed thermal model of a equipment/subsyste ... Y T,A

3.4.7.4 Reduced Thermal Model HPR-646 GDI-341:

The consistency between reduced and detailed therm ... Y A

HPR-647 GDI-342: The convergence of the thermal models shall be dem ...

Y A

3.6 Electrical Design and Interface Requirements 3.6.1 General Requirements HPR-650 GDI-380:

All electrical performances are specified under Wo ... Y R

HPR-651 GDI-381: Beginning-Of-Life criteria shall be derived by the ...

Y R

3.6.2 Electrical Power 3.6.2.1 Power Requirements and Budgets HPR-655 GDI-1824:

For all units with a primary power consumption whi ... Y R

HPR-1257 GDI-1825: The power for telemetry conditioning of equipment ...

Y R

HPR-1258 GDI-1826: Any protection feature supporting essential functi ...

Y R

HPR-1259 GDI-1827: With the exception of protection features such as ...

Y A

HPR-1260 GDI-1828: Recovery of primary power shall be possible in any ...

Y A

3.6.2.4 Power Distribution and Protection HPR-657 GDI-393:

Fuses shall not be used. ... Y R

3.6.2.4.1 28V Regulated Power Requirements HPR-659 GDI-410:

All equipment/subsystems connected to the regulate ... Y T,A

HPR-660 GDI-412: In case of an inductive load, the load shall preve ...

Y T,A

HPR-661 GDI-413: The load shall not be irreversibly degraded for an ...

Y R

HPR-1261 GDI-415: No primary current protection shall be implemented ...

Y R

HPR-662 GDI-417: All electronic logic equipment/subsystems/circuits ...

Y I,R

HPR-1262 GDI-416: 28V Regulated Latching Current Limiter Interface C ...

Y T

HPR-1263 GDI-424: 28V Regulated Fold-Back Current Limiter Interface ...

Y T


Page 54 of 88




HPR-1264 GDI-426: Following switch-ON, and during input filter charg ...

Y T,R

3.6.2.4.3 Power Consumption Requirements HPR-664 GDI-433:

The compliance versus the power allocations shall ... Y T,A

HPR-665 GDI-434: For each power interface circuit, the following co ...

Y T,A

HPR-666 GDI-435: A power consumption test shall be required at temp ...

Y T,R

3.6.2.4.4 Tolerance to Power Bus Failures HPR-668 GDI-437:

When a equipment/subsystem is internally redundant ... Y T,A

3.6.2.4.5 Initial Electrical Status HPR-670 GDI-439:

After being switched ON, equipment shall have a sa ... Y T

HPR-2715 GDI-3090: Each BepiColombo MIL-STD-1553B Bus system shall be ...

Y R

HPR-2716 GDI-3212: Reset data bus transmitter: If while operating on ...

Y T

HPR-2717 GDI-3091: Each data bus system shall function asynchronously ...

Y R

HPR-2718 GDI-465: Each equipment/subsystem (flight, Ground/EGSE) con ...

Y T,R

HPR-2719 GDI-466: All equipment/subsystems connected to the bus shal ...

Y R

HPR-2720 GDI-467: Internally redundant equipment shall be connected ...

Y R

HPR-2721 GDI-3092: A single event failure to a data bus (A or B) shal ...

Y A

HPR-2722 GDI-2734: Digital data shall be transmitted in a form compat ...

Y R

HPR-2723 GDI-2735: The bit priority shall be as defined in [SD-1] par ...

Y R

HPR-2724 GDI-2756: The signal modulation shall comply to [SD-1] para ...

Y T

HPR-2725 GDI-2729: The data coding (Manchester II bi-phase) shall com ...

Y T

HPR-2726 GDI-2730: The transmisssion bit-rateshall comply to [SD-1] p ...

Y T

HPR-2727 GDI-2731: The word size shall comply to [SD-1] para 4.3.3.5. ...

Y T

HPR-2728 GDI-2732: The word formats (command , data, status words) sh ...

Y T

HPR-2729 GDI-3094: The Message/Transfer formats shall comply to [SD-1 ...

Y T

HPR-2730 GDI-3106: The RT shall provide a Response Time according to ...

Y T

HPR-2731 GDI-3097: Minimum No-Response Time-out shall comply to [SD-1 ...

Y T

HPR-2732 GDI-3114: A RT shall operate according to [SD-1] para 4.4.1 ...

Y T


Page 55 of 88




HPR-2733 GDI-2753: For a dual-redundant RT, a separate fail-safe time ...

Y A

HPR-2734 GDI-2724: Bus-Couplers (transformer coupled stub type) shal ...

Y R

HPR-2735 GDI-2727: Each BepiColombo MIL-STD-1553B bus (MPO, MTM, MMO) ...

Y T,A

HPR-2736 GDI-2736: The core bus test extension shall implement: the ...

Y A

HPR-2737 GDI-2737: The core bus test extension shall implement: the ...

Y A

HPR-2738 GDI-470: The BepiColombo MIL-STD-1553B data busses (MPO, MT ...

Y R

HPR-2739 GDI-471: Unless otherwise agreed with ASD, the MIL-STD-1553 ...

Y R

HPR-2740 GDI-2739: In case single failure requirements cannot be achi ...

Y A,R

HPR-2741 GDI-2719: The electrical output characteristics (transformer ...

Y T

HPR-2742 GDI-2728: The electrical input characteristics (transformer ...

Y T

HPR-2743 GDI-2741: The RT terminal address shall be wire-programmable ...

Y R

HPR-2744 GDI-2742: Each RT as identified in Figure GDI-473 shall prov ...

Y R

HPR-2745 GDI-2743: Unless otherwise agreed with ASD, no other signals ...

Y R

HPR-2746 GDI-2268: Unless otherwise agreed with ASD, each RT shall pr ...

Y R

HPR-2747 GDI-2744: The RT terminal address shall be set on the mating ...

Y R

HPR-2748 GDI-2747: When connected to the unit electrical ground, logi ...

Y R

HPR-2749 GDI-2750: The RT address plug shall be furnished with the un ...

Y I

HPR-2750 GDI-2425: Each 1553 function is considered being split in 3 ...

Y R

HPR-2751 GDI-2426: The tests corresponding to [SD-2] Section 100 “RT ...

Y T

HPR-2752 GDI-2427: The general test requirements of [SD-2] Section 10 ...

Y T

HPR-2753 GDI-2244: The general monitoring requirements of [SD-2] Sect ...

Y T

HPR-2754 GDI-2552: RT tests (Electrical and Protocol Tests) shall be ...

Y T

HPR-2755 GDI-2553: The test paragraphs defined in [SD-2] section 100 ...

Y T

HPR-2756 GDI-2428: Output characteristic test corresponding to [SD-2] ...

Y T


Y T


Page 56 of 88





Y T


Y T


Y T


Y T


Y T


Y T


Y T


Y T


Y T

HPR-2767 GDI-2439: Input characteristic test corresponding to [SD-2] ...

Y T


Y T


Y T


Y T


Y T


Y T

HPR-2773 GDI-2448: Protocol tests corresponding to [SD-2] Section 100 ...

Y T

HPR-2774 GDI-2449: Protocol tests (Intermessage gap) corresponding to ...

Y T

HPR-2775 GDI-2450: Protocol tests (Error Injection) corresponding to ...

Y T


Y T


Y T


Y T


Y T


Y T


Y T


Y T


Y T


Y T


Page 57 of 88





Y T


Y T

HPR-2787 GDI-2558: Protocol tests (Optional mode commands) correspond ...

Y T


Y T


Y T


Y T


Y T


Y T


Y T


Y T

HPR-2795 GDI-2561: Protocol tests (Status word bits) corresponding to ...

Y T


Y T

HPR-2797 GDI-2563: Protocol tests (Broadcast mode commands) correspon ...

Y T


Y T


Y T


Y T

HPR-2801 GDI-2567: Protocol tests (Error´injection - broadcast messag ...

Y T

HPR-2802 GDI-2446: A Test corresponding to [SD-2] Section 100, para 5 ...

Y T

HPR-1265 GDI-450: Specified driver (or source) characteristics shall ...

Y R

HPR-1266 GDI-451: All data and signal interface drivers shall surviv ...

Y T,A

HPR-1267 GDI-452: The equipment/subsystem shall tolerate active sign ...

Y T,A

HPR-1268 GDI-453: In case the electrical architecture does foresee c ...

Y T,R

HPR-1269 GDI-454: In case no load is specified, the interface charac ...

Y R

HPR-1270 GDI-2278: Input interfaces shall not be damaged or harmed du ...

Y A

HPR-1271 GDI-2279: Output interfaces shall not be damaged or harmed d ...

Y A

HPR-2803 GDI-2280: For pulse commands it shall be ensured that spurio ...

Y A

HPR-2804 GDI-478: The SBDL interface is dedicated to serial digital ...

Y R


Page 58 of 88




HPR-2805 GDI-486: Standard Balanced Digital Link interface: The (sub ...

Y T

HPR-1272 GDI-2283: The LVDS interface is dedicated to serial digital ...

Y R

HPR-2806 GDI-2285: Low Voltage Digital Signal interface: The (sub-)co ...

Y T

HPR-1273 GDI-509: The interface shall consist of a differential link ...

Y R

3.6.6.4.1 Analogue Telemetry Acquisition (AN1) HPR-672 GDI-511:

Analogue telemetry Acquisition -5V to +5V interfac ... Y T

3.6.6.4.2 Analogue Telemetry Acquisition (AN2) HPR-674 GDI-513:

Analogue telemetry Acquisition 0 to +5V interface: ... Y T

3.6.6.5 Temperature Acquisitions 3.6.6.5.1 Thermistor Type 1: YSI-44907/YSI-44908 (ANY) HPR-677 GDI-523:

Temperature Acquisition Type 1: YSI-44907/YSI-4490 ... Y T

3.6.6.5.2 Thermistor Type 2: PT-1000 (ANP) HPR-679 GDI-526:

Temperature Acquisition Type 2: PT-1000 (ANP) inte ... Y T

HPR-2807 GDI-549: Each bi-level digital channel shall be used to acq ...

Y R

HPR-2808 GDI-550: Bi-Level Digital TM Acquisition Interface The (sub ...

Y T

HPR-2809 GDI-488: The open/closed status of a relay/switch contact o ...

Y T

HPR-2810 GDI-489: The Relay / Switch Status interface receivers shal ...

Y A,R

HPR-2811 GDI-530: The High Power On/Off Command source shall be refe ...

Y R

HPR-2812 GDI-531: The High Power On/Off Command receiver shall be is ...

Y R

HPR-2813 GDI-532: The High Power On/Off Command receiver shall be eq ...

Y R

HPR-2814 GDI-533: The High Power On/Off Command source circuit shall ...

Y R

HPR-2815 GDI-3218: The High Power On/Off Command source shall not gen ...

Y T

HPR-2816 GDI-539: The (sub-)contractor High Power On/Off Command sou ...

Y R

HPR-2817 GDI-540: The control of the pulse width shall be managed au ...

Y T

HPR-2818 GDI-534: Standard High Power On/Off Command: The (sub-)cont ...

Y T

HPR-2819 GDI-496: The active level shall be High level ...

Y R

HPR-2820 GDI-500: The synchronisation reference shall be the leading ...

Y R


Page 59 of 88




3.6.8 Connectors and Harness General Design Requirements

HPR-685 GDI-574: The spacecraft harness categorisation into EMC cla ...

Y R

HPR-686 GDI-2576: Equipment/subsystems shall use a separate connecto ...

Y R

HPR-687 GDI-2577: Signals falling into different EMC categories shal ...

Y R

HPR-688 GDI-583: Nominal and redundant lines/functions shall be rou ...

Y R

HPR-717 GDI-592: All unterminated equipment or harness connectors s ...

Y I,R

HPR-718 GDI-593: All arming plugs shall be protected by EMC backshe ...

Y R

3.6.8.1 Connector Types HPR-690 GDI-572:

All connectors mounted on equipment/subsystems and ... Y R

HPR-691 GDI-2575: Where non-standard connector, inserts, or round co ...

Y R

HPR-692 GDI-582: Connectors shall be made of Non-magnetic material ...

Y R

HPR-693 GDI-573: The number times flight connectors are mated / dem ...

Y R

3.6.8.2 Connector Characteristics HPR-695 GDI-576:

Connectors at interfaces shall be clearly identifi ... Y R

HPR-696 GDI-577: Equipment or structure-mounted connectors/contacts ...

Y R

HPR-697 GDI-578: As far as possible, the connector type used for pr ...

Y R

HPR-698 GDI-2588: The EED mating (harness) connector shall be of MS ...

Y R

HPR-699 GDI-2585: If power and other signal connectors are located a ...

Y R

HPR-700 GDI-587: Mechanical methods in conjunction with identificat ...

Y R

HPR-701 GDI-610: All connectors shall be marked unambiguously. Labe ...

Y R

HPR-702 GDI-2578: Equipment or structure-mounted connectors shall be ...

Y R

HPR-703 GDI-581: Each signal and its corresponding return shall, wh ...

Y R

HPR-704 GDI-2579: An adequate number of spare contacts shall be made ...

Y R

HPR-705 GDI-2580: If a connector contains only shielded wires only 8 ...

Y R

HPR-706 GDI-2581: Connectors shall be fully equipped with contacts ( ...

Y I

HPR-707 GDI-589: At least one contact per equipment connector shall ...

Y R

HPR-708 GDI-2583: In case several shield connections through a conne ...

Y R

3.6.8.3 Connector Mounting


Page 60 of 88




HPR-710 GDI-585: All electrical connectors shall be located at a mi ...

Y R

HPR-711 GDI-586: Connectors shall be arranged in such a way that th ...

Y R

HPR-712 GDI-2582: D*M(A)-type connectors mounting clearances shall b ...

Y I,R

HPR-713 GDI-580: Male and female connectors shall be mechanically l ...

Y I

HPR-1274 GDI-3950: For D*M(A)-type connectors the wall thickness shal ...

Y R

HPR-1275 GDI-3951: For D*M(A)-type connectors the female screw lock a ...

Y R

HPR-714 GDI-588: Connector savers shall be utilized on all flight s ...

Y I

3.6.8.4 Test Connectors HPR-716 GDI-591:

Test connectors shall have sufficient protection t ... Y R

3.6.8.5 Cabling / Wiring HPR-1276 GDI-3124:

No piece of harness shall be used as a mechanical ... Y R

HPR-1277 GDI-3125: For transmission of power, each line shall be twis ...

Y

R

HPR-1278 GDI-3211: The power distribution shall be protected in such ...

Y A

HPR-1279 GDI-3127: The harness inductance for a fully regulated bus, ...

Y A

HPR-721 GDI-2587: For the power harness redundant contacts and wirin ...

Y R

HPR-722 GDI-595: Cables falling into different EMC categorisations ...

Y R

HPR-723 GDI-596: All cable bundles shall be routed as close as poss ...

Y I,R

HPR-725 GDI-598: The DC resistance between the single cable shield ...

Y T

HPR-726 GDI-2590: Connections to the pyro initiators shall be capabl ...

Y R

HPR-727 GDI-2591: The safe plug shall short-circuit and ground each ...

Y R

HPR-728 GDI-2592: The arming plug shall provide electrical continuit ...

Y R

3.6.8.6 Cable and Harness Shields HPR-735 GDI-611:

To achieve a complete Faraday-cage around the harn ... Y R

HPR-730 GDI-600: Where shielded wires are used, the shield shall be ...

Y R

HPR-731 GDI-601: The structure termination of shields shall be made ...

Y I,R

HPR-732 GDI-602: The maximum unshielded length of any shielded wire ...

Y R

HPR-733 GDI-603: Daisy chaining of shield terminations shall be avo ...

Y R

HPR-734 GDI-604: Shields shall not be used as an intentional curren ...

Y R


Page 61 of 88




HPR-736 GDI-612: Overall shields shall be terminated to the connect ...

Y R

3.6.8.7 Harness Capacitance HPR-738 GDI-607:

Interface signal drivers shall consider the capaci ... Y A

3.6.9 Electrical Interface Control Document HPR-740 GDI-621:

Interfaces will be formally controlled within the ... Y R

HPR-741 GDI-2574: Electrical interface control data shall be transfe ...

Y R

HPR-2821 GDI-624: In all project specific documentation including co ...

Y T,R

HPR-2822 GDI-626: For serial data transfer, within any data type str ...

Y T,R

HPR-2823 GDI-2535: For MIL-STD-1555B bus systems, the bit/byte number ...

Y T,R

HPR-848 GDI-746: The following standardization (Table GDI-747) shal ...

Y R

HPR-2824 GDI-3403: The system engineering process related to software ...

Y R

HPR-2825 GDI-763: Data Type Representation and Data Value Representa ...

Y R

HPR-2826 GDI-2548: The equipment/subsystem shall implement the functi ...

Y T

HPR-2827 GDI-2549: It shall be possible to trigger the reset and/or c ...

Y T

HPR-2828 GDI-1105: All onboard software shall be developed using a hi ...

Y R

HPR-2829 GDI-759: No high level programming language, real time kern ...

Y R

HPR-2830 GDI-752: Software execution shall be deterministic and oper ...

Y T,R

HPR-2831 GDI-1116: Software shall be segmented into modules by functi ...

Y R

HPR-2832 GDI-1117: Each module shall be further segmented into code, ...

Y R

HPR-2833 GDI-1120: All input and output data for each module shall be ...

Y R

HPR-2834 GDI-1121: It shall be possible to compile a module as a stan ...

Y T,TBC

HPR-2835 GDI-1122: A module shall not clear or otherwise modify input ...

Y R

HPR-2836 GDI-1123: Each data element that is passed between modules s ...

Y T

HPR-2837 GDI-1141: The software shall feature a modular structure, i. ...

Y R

HPR-2838 GDI-1124: The software shall be built using references to th ...

Y T,R

HPR-2839 GDI-1125: If required the service 22 shall be used to save t ...

Y T

HPR-2840 GDI-1126: The resources utilised by onboard software shall b ...

Y T

HPR-2841 GDI-1106: The software developed shall be in two stand-alone ...

Y T,R


Page 62 of 88




HPR-2842 GDI-3404: The initialisation S/W shall execute in PROM and/ ...

Y T

HPR-2843 GDI-777: The Software package (Initialisation and Applicati ...

Y T,A

HPR-2844 GDI-779: Release/Version information shall be hard-coded wi ...

Y R

HPR-2845 GDI-780: Release/Version information shall be reported on r ...

Y T

HPR-2846 GDI-781: The equipment/subsystem shall contain a non-volati ...

Y R

HPR-2847 GDI-782: The non-volatile memory of the Initialisation S/W ...

Y R

HPR-2848 GDI-808: The Initialisation S/W shall support the communica ...

Y T

HPR-2849 GDI-798: The Initialisation S/W shall generate a boot repor ...

Y T

HPR-2850 GDI-805: The Initialisation S/W shall have the capability t ...

Y T


Y T


Y T

HPR-2853 GDI-799: The Initialisation S/W shall complete the so-calle ...

Y T

HPR-2854 GDI-795: The Initialisation S/W shall NEVER reach HALT (e.g ...

Y T

HPR-2855 GDI-2547: A failed test shall not lead to a dead lock of the ...

Y T

HPR-2856 GDI-3610: Software for designated redundant units shall only ...

Y T

HPR-2857 GDI-800: The Application S/W shall be started upon TC reque ...

Y T

HPR-2858 GDI-796: If the application software will enter unforeseen ...

Y T

HPR-2859 GDI-729: It shall be possible to store the uploaded equipme ...

Y T

HPR-2860 GDI-1140: Where possible FDIR shall be implemented in separa ...

Y R

HPR-2861 GDI-1128: Whenever a condition that forces a processor reset ...

Y T

HPR-2862 GDI-761: The error context information shall include as a m ...

Y T

HPR-2863 GDI-1143: Software shall not need to react at high speed to ...

Y A

HPR-2864 GDI-1129: Whenever a processor is running synchronously sche ...

Y T

HPR-2865 GDI-1130: Whenever a processor overload condition is detecte ...

Y T

HPR-2866 GDI-754: Scheduler overruns shall be detected and reported ...

Y T

HPR-2867 GDI-755: Schedule overruns shall not lead into uncompleted ...

Y R


Page 63 of 88




HPR-2868 GDI-2546: After a predefined number of consecutive or recurr ...

Y T

HPR-2869 GDI-1131: Whenever an unexpected arithmetic overflow conditi ...

Y T

HPR-2870 GDI-1132: Whenever an illegal programme instruction is encou ...

Y T

HPR-2871 GDI-1133: Whenever a data bus error is detected by software, ...

Y T

HPR-2872 GDI-1134: Whenever a memory corruption is detected by an err ...

Y A,TBC

HPR-2873 GDI-1135: Whenever a checksum error is detected, an event re ...

Y T

HPR-2874 GDI-1136: A processor should perform internal consistency ch ...

Y R,TBC

HPR-2875 GDI-1137: Whenever an internal inconsistency is detected, an ...

Y T

HPR-2876 GDI-1138: The event reports that are generated in the case o ...

Y T

HPR-2877 GDI-1139: The system shall ensure that safety critical softw ...

Y A,R

HPR-2878 GDI-1144: The onboard software shall perform a continuous me ...

Y A,R

HPR-2879 GDI-1145: When a single bit error is detected, the memory ad ...

Y A,TBC

HPR-2880 GDI-1112: The images of initialisation software shall be con ...

Y A,R

HPR-2881 GDI-1113: The image for the mission software shall be contai ...

Y A,R

HPR-2882 GDI-1114: The executable image of the mission software shall ...

Y A,R

HPR-2883 GDI-1115: The mission software shall not use more than 75% o ...

Y A,TBC

HPR-2884 GDI-1118: Each module shall be allocated 5% spare memory are ...

Y A,TBC

HPR-2885 GDI-1119: When a processor cannot support the direct address ...

Y A,TBC

HPR-2886 GDI-1149: The full development, test and maintenance environ ...

Y R

HPR-2887 GDI-1159: The software test environment used pre-launch has ...

Y R

HPR-2888 GDI-1150: The complete software development environment shal ...

Y R

HPR-2889 GDI-1151: The development environment shall include (list no ...

Y R

HPR-2890 GDI-1153: The full software development and maintenance envi ...

Y T

HPR-2891 GDI-1157: The capability shall be provided to check that onb ...

Y T

HPR-2892 GDI-1158: Enabling of onboard software shall use only a sing ...

Y T

HPR-2893 GDI-1163: A Software Test Bed (STB) shall be used by each so ...

Y R

HPR-2894 GDI-3904: The Subcontractor shall incorporate after filterin ...

Y A,R


Page 64 of 88




5.1 Mechanical Interface Datasheet HPR-881 GDI-2760:

The mechanical and optical configuration and its i ... Y R

6.1 Thermal Interface Control Document HPR-883 GDI-2892:

All unit thermal interfaces shall be described wit ... Y R

7.1 Electrical Interface Datasheets (Format) HPR-1280 GDI-2964:

The equipment/subsystem Electrical ICD shall provi ... Y R


Page 65 of 88



9 ENVIROMENTAL AND TEST SPECIFICATION APPLICABILITY MATRIX







HPR-1006 ET-14273: The MCS coordinate system is shown below. The +Y a ...

Y R

HPR-1007 ET-36: Sine and random vibrations: The following mechanic ...

Y A,R

HPR-1008 ET-15090: wdTCaption: Sinus and Random Environment durin ...

Y A,R

HPR-1009 ET-15091: deleted ...

Y A,R

HPR-1010 ET-15092: wdTCaption: Sinus and Random Environment during ...

Y A,R


Y A,R


Y A,R


Y A,R

HPR-1014 ET-15098: The LV generated quasi-staic loads at satellite Co ...

Y A

HPR-1015 ET-15100: The LV generated sine vibration loads at the LV-Ad ...

Y A

HPR-1016 ET-15102: The LV generated random vibration loads at the LV- ...

Y A

HPR-1160 ET-15392: The sine vibration environment applicable for the ...

Y

HPR-1017 ET-210: System level sine vibration inputs Y T,A HPR-1161 ET-15393:

The acoustic environment is given in Table ET-212. ... Y

HPR-1018 ET-212: Acoustic test spectra Y T,A HPR-1281 ET-15394:

The shock enviroment (tbc) to be expected for the ... Y

HPR-1019 ET-215: wdFCaption: Shock environment of separation eve ...

Y T

HPR-1020 ET-15106: The following accelerations shall be considered du ...

Y A

HPR-1021 ET-14642: For external items the heatexchange and absorbed f ...

Y A

HPR-1022 ET-160: A generic unit/equipment/subsystem temperature lev ...

Y T,A,R

HPR-1282 ET-14757: For MTM units, the following temperature limits ap ...

Y T,A


Page 66 of 88




HPR-1023 ET-14785: Propulsion Temperature limits (design temperatures ...

Y T,A

HPR-1024 ET-249: All equipment shall be designed to withstand a rel ...

Y R

HPR-1025 ET-252: For AIV and storage, all equipment shall withstand ...

Y R

HPR-1026 ET-253: During transport prior to integration on the space ...

Y R

HPR-1027 ET-254: The flight hardware transportation containers shal ...

Y R

HPR-1028 ET-14632: After encapsulation under the fairing, the spacecr ...

Y

HPR-1029 ET-14635: The typical mission timeline for BC is shown in ta ...

Y A

HPR-1030 ET-251: Units mounted on the S/C shall be designed to with ...

Y A,R

HPR-1031 ET-15263: The spacecraft subsystems/equipments shall withsta ...

Y A

HPR-1032 ET-460: Each subsystem/unit/equipment shall assess the eff ...

Y R

HPR-1033 ET-461: Solar and Planetary Electromagnetic Radiation ...

Y R

HPR-1034 ET-462: Neutral Atmosphere ...

Y R

HPR-1035 ET-463: Plasmas ...

Y R

HPR-1036 ET-464: Energetic Particle Radiation ...

Y R

HPR-1037 ET-465: Particulates ...

Y R

HPR-1038 ET-466: Contamination ...

Y R

HPR-1039 ET-467: Thermal (described in section 5) ...

Y R

HPR-1040 ET-15264: For many of the associated analyses it is necessar ...

Y A

HPR-1041 ET-14252: Average and worst case irradiance levels for the h ...

Y A

HPR-1042 ET-625: For design purposes the worst-case values of ET-56 ...

Y R

HPR-1043 ET-15111: MCS elements shall be withstanding the plasma effe ...

Y R

HPR-1044 ET-15112: The Table below gives the parameters which shall b ...

Y R

HPR-1045 ET-15299: For trapped radiation source term evaluation withi ...

Y A

HPR-1162 ET-15303: For solar particle events (solar protons) the refe ...

Y A

HPR-1046 ET-15302: To predict the fluences seen by BepiColombo an inv ...

Y A

HPR-1047 ET-15304: For analysing single event upset rates during sola ...

Y A

HPR-1283 ET-15306: CREME96 shall be the standard model for cosmic ray ...

Y A


Page 67 of 88




HPR-1163 ET-15308: It is possible to make upset rate predictions only ...

Y A

HPR-1164 ET-15309: The CREME96 method shall be used [13], [14] for th ...

Y A

HPR-1165 ET-15310: The test data shall show the normalised upset rate ...

Y A

HPR-1048 ET-15314: Secondary radiation has to be analysed on a case-b ...

Y A

HPR-1049 ET-15316: The ionizing dose environment is represented by th ...

Y A

HPR-1050 ET-15317: The SHIELDOSE-2 model shall be used [16*] for ioni ...

Y A

HPR-1051 ET-15323: The solar proton spectrum which shall be applied f ...

Y A

HPR-1052 ET-15327: The galactic cosmic ray (GCR) LET spectrum which ...

Y A

HPR-1053 ET-15330: The BC spacecraft MCS elements shall be able to sa ...

Y A

HPR-1054 ET-15331: Peak fluxes (worst week, worst day, peak 5 minutes ...

Y A

HPR-1055 ET-15334: The source term of electrons at 0.39 AU shown in F ...

Y A

HPR-1056 ET-15339: The BC MCS elements shall withstand the effects of ...

Y A

HPR-1166 ET-15356: Table ET-15358 lists the types of testing which sh ...

Y T,R

HPR-1057 ET-14302: Contamination and cleanliness requirements are add ...

Y R

HPR-1058 ET-15038: ECSS-E-10-03A shall apply with the modifications d ...

Y

HPR-1059 ET-105: Qualification of the design shall be accomplished ...

Y R

HPR-1060 ET-14256: The objective of the qualification shall be to dem ...

Y T,A

HPR-1061 ET-14258: The test specimen shall be subjected to qualificat ...

Y T

HPR-1062 ET-14259: The test conditions shall not exceed design margin ...

Y T,R

HPR-1063 ET-14260: Items which can be qualified by an applicable qual ...

Y T,R

HPR-1064 ET-14261: Qualification testing shall be conducted at the re ...

Y R

HPR-1065 ET-107: Environmental acceptance testing shall be performe ...

Y T

HPR-1066 ET-14263: During environmental acceptance testing, condition ...

Y T

HPR-1067 ET-109: The objective of the test item functional performa ...

Y T,A

HPR-1068 ET-14265: An initial and a final functional performance test ...

Y T

HPR-1069 ET-14266: Intermediate functional performance tests, which m ...

Y T

HPR-1070 ET-14267: A functional performance test may run continuously ...

Y T


Page 68 of 88




HPR-1071 ET-14268: The test shall be conducted under standard laborat ...

Y R

HPR-1072 ET-14269: The tests shall be performed in compliance with ap ...

Y T

HPR-1073 ET-14270: Failure detection, isolation and recovery function ...

Y T

HPR-1074 ET-14271: Functional test will be performed by operating all ...

Y T

HPR-1075 ET-111: Any test facility to be used within the instrument ...

Y A,R

HPR-1076 ET-113: The accuracy of instrument and test equipment used ...

Y A,R

HPR-1077 ET-115: The allowed test condition tolerances shall be app ...

Y A,I,R

HPR-1078 ET-119: Unless otherwise specified herein, all measurement ...

Y A,I,R

HPR-1079 ET-14276: The cleanliness requirements for the test items du ...

Y A,I,R

HPR-1080 ET-121: Test execution shall be started only if all starti ...

Y A,I,R

HPR-1081 ET-14277: Prior to and after every environmental test activi ...

Y I

HPR-1082 ET-14279: Before commencing any formal qualification or acce ...

Y R

HPR-1083 ET-14278: After completion of all formal qualifications or a ...

Y R

HPR-1084 ET-123: The test is successfully performed if all measurem ...

Y T,A

HPR-1085 ET-14280: Modifications, repair, replacement or refurbishmen ...

Y T,A

HPR-1086 ET-127: The unit/equipment/subsystem under test shall be m ...

Y T

HPR-1087 ET-128: At least one triaxial sensor shall be mounted on t ...

Y T

HPR-1088 ET-129: At least two axis aligned sensors shall be mounted ...

Y T

HPR-1089 ET-130: All unit/equipment/subsystems powered on during la ...

Y T

HPR-1090 ET-15033: Any need for notching shall be notified to ASD as ...

Y T,A

HPR-1091 ET-133: The test item shall be attached to the vibration e ...

Y T

HPR-1092 ET-134: The variation of transmissibility between test ite ...

Y T

HPR-1093 ET-135: Adequate fixture design and specimen installation ...

Y T

HPR-1094 ET-136: A pre-test of the empty fixture shall be performed ...

Y T

HPR-1095 ET-202: In case of large and heavy test items (e.g. module ...

Y

HPR-1096 ET-203: Proof testing of test adapters is specified in the ...

Y T

HPR-1097 ET-138: Frequency search tests shall be conducted in order ...

Y T


Page 69 of 88




HPR-1098 ET-140: Frequency search tests shall be conducted along ea ...

Y T

HPR-1099 ET-14312: Units mounted on the spacecraft shall be designed ...

Y T,A

HPR-1100 ET-14391: Units mounted on the spacecraft shall be designed ...

Y T,A

HPR-1101 ET-14434: After freeze of unit accommodation the loads as de ...

Y R

HPR-1167 ET-14439: For major subsystems which are sensitive to acoust ...

Y T,A

HPR-1102 ET-14590: Units shall be designed and tested to withstand wi ...

Y T,A,R

HPR-1103 ET-149: Sine and random vibration tests shall be performed ...

Y T

HPR-1104 ET-150: Prior and after sine and random vibration qualific ...

Y T

HPR-1105 ET-151: Before applying full levels, a test at intermediat ...

Y T

HPR-1106 ET-152: Any notching must be formally requested as a waive ...

Y T

HPR-1107 ET-153: The vibration facility shall include a shock free ...

Y T

HPR-1108 ET-155: Unit/equipment/subsystems shall demonstrate by tes ...

Y T

HPR-1109 ET-156: Prior and after shock tests a low level sine frequ ...

Y T

HPR-1110 ET-14624: Shock testing shall be performed with a device pr ...

Y T

HPR-1111 ET-14625: The qualification to shock has to be demonstrated ...

Y T

HPR-1112 ET-158: Static tests shall be performed by applying static ...

Y T

HPR-1113 ET-15044: For sealed or pressurized equipments, pressure and ...

Y

HPR-1114 ET-231: The following temperature margins shall be taken f ...

Y T

HPR-1115 ET-162: The temperatures shall be selected and controlled ...

Y R

HPR-1116 ET-163: The test arrangement shall be as shown in Figure E ...

Y R

HPR-1117 ET-164: The unit/equipment/subsystem shall be bolted to a ...

Y R

HPR-1118 ET-165: On all external surfaces flight representative the ...

Y R

HPR-1119 ET-166: The heat sink (HS) plates shall be black painted ( ...

Y R

HPR-1120 ET-167: The conductive heat sink temperature and the chamb ...

Y R

HPR-1121 ET-168: For vacuum tests the pressure inside the chamber s ...

Y R

HPR-1122 ET-172: unit/equipment/subsystem’s suppliers shall perform ...

Y T

HPR-1123 ET-174: The TV test on unit/equipment/subsystem level shal ...

Y R


Page 70 of 88




HPR-1124 ET-176: The unit/equipment/subsystems shall be tested foll ...

Y T,R

HPR-1125 ET-182: unit/equipment/subsystem suppliers shall perform t ...

Y T

HPR-1126 ET-183: The thermal vacuum acceptance test shall be perfor ...

Y T,R

HPR-1127 ET-187: unit/equipment/subsystem suppliers shall perform t ...

Y T

HPR-1128 ET-188: The thermal vacuum protoflight test shall be perfo ...

Y T,R

HPR-1129 ET-191: With regard to radiation testing the manufacturer ...

Y R

HPR-1130 ET-193: With regard to unit/equipment/subsystem EMC testin ...

Y R

HPR-1131 ET-15042: With regard to unit/equipment/subsystem ESD testin ...

Y R

HPR-1132 ET-195: A life test shall be required for all the assembli ...

Y T,R

HPR-1133 ET-197: Space conditioning shall be performed whenever des ...

Y T,R

HPR-1134 ET-198: The contractors shall propose the corresponding te ...

Y R

HPR-1135 ET-199: For example, but without limitation to, materials ...

Y T

11.1 SCOPE 11.2 Mechanical Test Objectives 11.3 Notching Pilosophy 11.4 Essential Rules 11.5 Notching Sine Test Spectrum 11.6 Notching Random Test Spectrum 11.6.1 General Notching Criteria 11.6.2 Detailed Notching Criteria 11.6.2.1 Notching of a single resonance 11.6.2.2 Notching of a multi DOF equipment 11.6.2.3 Combined interface loads 11.6.3 Notching during tests 11.6.3.1 Identification of eigen modes 11.6.3.2 Determination of the interface loads 11.6.3.3 Determination of the notched spectrum 11.6.3.4 Random Tests at intermediate levels 11.6.3.5 Measurement plan 11.7 Random notching example


Page 71 of 88



10 EMC SPECIFICATION APPLICABILITY MATRIX







HPR-1285 EMC-545: Class "R" Bonds shall be made by direct metal to m ...

Y R

HPR-1286 EMC-529: The contact surface area of the two items to be bo ...

Y R

HPR-1287 EMC-530: Class R bonds shall be assembled so that a DC resi ...

Y T

HPR-1288 EMC-735: Class "R" bonds shall be verified in both directio ...

Y T

HPR-1289 EMC-531: Where bond straps are required for class R bond pu ...

Y A

HPR-1290 EMC-532: The bond shall have an adequate cross section to c ...

Y A

HPR-1291 EMC-536: Bonding of metallic surfaces shall be made by meta ...

Y R

HPR-1292 EMC-537: The assembled class S bond (i.e. metallic strap / ...

Y T

HPR-1293 EMC-553: Bonding for powered equipment not requiring a zero ...

Y T

HPR-1294 EMC-554: The bond assembly shall be sized to carry 150% of ...

Y A

HPR-1295 EMC-388: Joint faces shall be flat and clean before assembl ...

Y I,R

HPR-1296 EMC-559: To prevent corrosion and alloying, bonding of elec ...

Y A

HPR-1297 EMC-560: Where dissimilar materials are to be bonded, the r ...

Y A

HPR-1298 EMC-669: A suitable anti-corrosion coating shall be applied ...

Y R

HPR-1299 EMC-859: Conformance to electrical bonding requirements sha ...

Y R

HPR-1300 EMC-398: Structural elements including connector brackets, ...

Y T,R

HPR-1301 EMC-645: All housing parts, including connector recepticles ...

Y T

HPR-1302 EMC-400: For CFRP structure without shielding function, the ...

Y T,R

HPR-1303 EMC-656: Aluminium honeycomb shall be bonded to the Ground ...

Y T

HPR-1304 EMC-658: The DC resistance between any other conductive com ...

Y T

HPR-1305 EMC-406: Mechanical Parts without electrical nor shielding ...

Y T,R

HPR-1306 EMC-592: Conductive structural elements which form part of ...

Y T,R


Page 72 of 88




HPR-1307 EMC-407: Mechanical Parts used for electromagnetic shieldin ...

Y T,R

HPR-1308 EMC-693: The cable harness overall shield is considered to ...

Y R

HPR-1309 EMC-694: A long the harness length the average distance bet ...

Y T,R

HPR-1310 EMC-695: All metalic and metalised layers of Multi Layer In ...

Y T,R

HPR-1311 EMC-677: The BepiColumbo Grounding Concept shall be governe ...

Y A,R

HPR-1312 EMC-683: The concept shall be implemented through the use o ...

Y R

HPR-1313 EMC-686: Each independant network shall be referenced to st ...

Y T

HPR-1314 EMC-687: The location of this point shall be chosen so as t ...

Y A,R

HPR-1315 EMC-688: Interconnection of the dedicated ground reference ...

Y R

HPR-1316 EMC-705: The distributed prime power shall not be utilised ...

Y R

HPR-1317 EMC-703: The Ground Reference for the generated secondary V ...

Y T

HPR-1318 EMC-437: Grounding: All secondary power supplies, inside a ...

Y I,R

HPR-1319 EMC-439: Power distributed between units (1 supplier; 1 rec ...

Y R

HPR-1320 EMC-440: Power distributed between units (1 supplier; sever ...

Y R

HPR-1321 EMC-719: Specific care shall be taken to avoid grounding lo ...

Y R

HPR-1322 EMC-441: After grounding, the impedance between the unit se ...

Y T

HPR-1323 EMC-438: Isolation: Prior to connection of the unit interna ...

Y T,R

HPR-1324 EMC-445: Grounding of signal circuits interfacing between S ...

Y R

HPR-1325 EMC-446: Where single-ended signal transmitters are used, i ...

Y R

HPR-1326 EMC-447: The use of common signal return paths is to be dis ...

Y R

HPR-1327 EMC-721: With the exception of declared Rf signals the use ...

Y R

HPR-1328 EMC-726: Interface circuits (with the exception of selected ...

Y T

HPR-1329 EMC-410: Each unit shall provide a grounding point, which i ...

Y I

HPR-1330 EMC-415: All units shall have a M4 bonding stud ...

Y I

HPR-1331 EMC-417: The resistance between the bonding stud and the un ...

Y T

HPR-1332 EMC-442: A grounding diagram showing the implementation of ...

Y I

HPR-1333 EMC-727: The minimum content of each grounding diagram shal ...

Y I


Page 73 of 88




HPR-1334 EMC-1328: The symbols shown in figure EMC-1347 below shall b ...

Y R

HPR-1335 EMC-449: EGSE signal and power circuits interfacing with fl ...

Y R

HPR-1336 EMC-411: CFRP and SiC shall not be used as an electrical bo ...

Y R

HPR-1337 EMC-419: Space exposed Insulating material having a surface ...

Y R

HPR-1338 EMC-425: PAINTS: Refer to PA Section above. ...

Y R

HPR-1339 EMC-426: HEATERS & THERMISTORS: Heaters, thermistors and o ...

Y T,R

HPR-1340 EMC-413: The structure of electrical and electronic units s ...

Y T

HPR-1341 EMC-697: Distances between screws for lids, etc... shall ne ...

Y R

HPR-1342 EMC-414: Discontinuities e.g. openings for ventilation, dra ...

Y A,I

HPR-1343 EMC-708: All harness and associated backshells shall form a ...

Y T,I

HPR-1344 EMC-891: Thermal hardware e.g. thermocouples and heatermats ...

Y R

HPR-1345 EMC-714: The electrical wiring harness shall be separated i ...

Y R

HPR-1346 EMC-715: The cables of each harness type shall be routed as ...

Y R

HPR-1347 EMC-885: Cable bundles shall be separated by at least 5cm w ...

Y R

HPR-1348 EMC-888: Test harness and connection access shall be config ...

Y R

HPR-1349 EMC-889: Thermal harness used during flight shall be catego ...

Y R

HPR-1350 EMC-890: Thermal harness used for ground test purposes shal ...

Y I,R

HPR-1351 EMC-716: Cable and shield shall be considered for each sign ...

Y R

HPR-1352 EMC-883: Each harness bundle shall have an overall shield o ...

Y I,R

HPR-1353 EMC-884: All cable shields shall be grounded at both ends, ...

Y T

HPR-1354 EMC-717: Use in preference order: MIL Round with approv ...

Y R

HPR-1355 EMC-1330: Shield termination at connectors shall be as shown ...

Y R

HPR-1356 EMC-803: Electromagnetic interference safety margins are ma ...

Y A

HPR-1357 EMC-804: A minimum acceptable safety margin is to be achiev ...

Y T,A

HPR-1358 EMC-815: All electronic and electrical items whose performa ...

Y R

HPR-1359 EMC-816: Isolated conducting items subject to energetic ele ...

Y R


Page 74 of 88




HPR-1360 EMC-818: A controlled grounding and isolation concept has b ...

Y R

HPR-1361 EMC-801: The EMC Programme is controlled and documented by ...

Y R

HPR-1362 EMC-842: The submitted EMC Contol Plan shall co-ordinate th ...

Y R

HPR-1363 EMC-730: Each power line interface shall be designed to be ...

Y R

HPR-1364 EMC-731: Each power user shall ensure that: at electrical c ...

Y T

HPR-1365 EMC-455: For 28V busses inrush current at unit switch on sh ...

Y T

HPR-1366 EMC-457: For 28V: The transient on the primary power bus di ...

Y T

HPR-1367 EMC-459: For 28V: Conducted voltage transients on the prima ...

Y T

HPR-1368 EMC-453: The Conducted Emission requirements given below ar ...

Y R

HPR-1369 EMC-461: Conducted narrow band current emissions (different ...

Y T

HPR-1370 EMC-463: Conducted narrow band current emissions (common mo ...

Y T

HPR-1371 EMC-465: In case of internal redundancy, conducted emission ...

Y T

HPR-1372 EMC-467: Differential Mode: Time domain conducted current r ...

Y T

HPR-1373 EMC-893: Time domain conducted voltage ripple/spike on the ...

Y T

HPR-1374 EMC-468: Common Mode: The time domain conducted current ri ...

Y T

HPR-1375 EMC-469: In case of internal redundancy, time domain emissi ...

Y T

HPR-1376 EMC-473: The maximum voltage emission levels for secondary ...

Y T

HPR-1377 EMC-475: The voltage ripple and spikes on secondary power s ...

Y T

HPR-1378 EMC-464: Frequency Domain: Conducted narrow band (NB) curre ...

Y T

HPR-1379 EMC-481: Primary power bus powered units shall not exhibit ...

Y T

HPR-1380 EMC-483: Primary power bus powered units shall not exhibit ...

Y T

HPR-1381 EMC-485: The unit shall not exhibit any failures, malfuncti ...

Y T

HPR-1382 EMC-490: When secondary lines power a unit, the unit shall ...

Y T

HPR-1383 EMC-491: When a unit delivers secondary power, the unit sha ...

Y T

HPR-1384 EMC-493: The conducted susceptibility specification for sec ...

Y T,R


Page 75 of 88




HPR-1385 EMC-495: In addition, a margin of at least +6dB shall be de ...

Y T,R

HPR-1386 EMC-927: Reciever circiuts shall not respond to the followi ...

Y

HPR-1387 EMC-502: The Radiated H field generated by Units, shall not ...

Y T

HPR-1388 EMC-1342: Unit low frequency AC test requirements to achieve ...

Y T

HPR-1389 EMC-505: The unit shall not show any malfunction or deviati ...

Y T

HPR-1390 EMC-506: The unit shall not show any malfunction or deviati ...

Y T

HPR-1391 EMC-510: Units shall not show any malfunction or deviation ...

Y A

HPR-1392 EMC-514: The use of ferro-magnetics shall be avoided for pa ...

Y I,R

HPR-1393 EMC-516: Steel or other magnetic materials shall be avoided ...

Y T,I,R

HPR-1394 EMC-517: It is not permitted to use high permeable shieldin ...

Y

HPR-1395 EMC-518: The use of relays shall be limited to the most cri ...

Y R

HPR-1396 EMC-519: The maximum magnetic moment applicable to each uni ...

Y R

HPR-1397 EMC-522: The unit shall not be susceptible when submitted t ...

Y T

HPR-1398 EMC-323: MGSE shall not interfere with the aims of Electric ...

Y R

HPR-1399 EMC-306: All MGSE used for test purposes shall provide bond ...

Y R

HPR-1400 EMC-298: All MGSE used for electrical tests shall provide g ...

Y R

HPR-1401 EMC-308: All electromechanical devices with a safety wire c ...

Y R

HPR-1402 EMC-310: Transport containers and protective covers for the ...

Y R

HPR-1403 EMC-314: EGSE shall not interfere with the aims of Electric ...

Y R

HPR-1404 EMC-325: EMI orginated by EGSE shall be limited to such ext ...

Y T,R

HPR-1405 EMC-320: The Bonding, Grounding and Isolation of all EGSE s ...

Y R

HPR-1406 EMC-331: Each EGSE shall include a mains isolation transfor ...

Y I

HPR-1407 EMC-332: Compliance to EN 60335-1 Class II ...

Y

HPR-1408 EMC-333: Provide galvanic isolation from the supplied Phase ...

Y T

HPR-1409 EMC-334: Provide galvanic isolation from the Industrial sup ...

Y T

HPR-1410 EMC-336: Provide a ground reference point for the isolated ...

Y T

HPR-1411 EMC-338: Provide adequate safety protection devices (See di ...

Y T


Page 76 of 88




HPR-1412 EMC-382: Provide adequate Powerline filtering to ensure tha ...

Y T

HPR-1413 EMC-335: Ensure an isolation value of at least 4 kV primar ...

Y T

HPR-1414 EMC-339: Power (ac & dc) shall be distributed within the EG ...

Y T

HPR-1415 EMC-370: The loss of any powerline shall not cause damage t ...

Y T

HPR-1416 EMC-371: Subsequent restoration of power either partially o ...

Y T

HPR-1417 EMC-372: Uninterruptable power supplies may be used only wi ...

Y R

HPR-1418 EMC-341: Each EGSE shall provide an internal ground referen ...

Y R

HPR-1419 EMC-342: Each EGSE rack/unit tester shall provide a bonding ...

Y T

HPR-1420 EMC-343: The EGSE rack housing shall be bonded to the inter ...

Y T

HPR-1421 EMC-344: The bonding stud shall be connected to the EGSE gr ...

Y T

HPR-1422 EMC-361: EGSE comprising more than one rack (e.g. at Instru ...

Y T

HPR-1423 EMC-351: EGSE signal/power circuits interfacing with onboar ...

Y T

HPR-1424 EMC-354: The signal interfaces between onboard hardware and ...

Y T

HPR-1425 EMC-352: EGSE buffer and isolation circuitry and associated ...

Y T

HPR-1426 EMC-353: Additional line drivers in the cable harness betwe ...

Y T

HPR-1427 EMC-358: The grounding of shields on interface circuits wit ...

Y T

HPR-1428 EMC-360: Signals/interfaces requiring connection to onboard ...

Y T

HPR-1429 EMC-376: All EGSE shall provide adequate AC power line inpu ...

Y T,A

HPR-1430 EMC-377: EGSE units/racks shall not compromise other EGSE w ...

Y

HPR-1431 EMC-374: All EGSE shall maintain a conducted margin of at l ...

Y T,A

HPR-1432 EMC-378: EGSE housing/racks shall be RF tight to the maximu ...

Y T,R

HPR-1433 EMC-379: No EGSE shall compromise the objective of EMC and ...

Y T,A

HPR-1434 EMC-380: EGSE located within the anechoic chamber during an ...

Y T,A

HPR-1435 EMC-348: For each EGSE /EGSE set-up a grounding diagram sha ...

Y R

HPR-1436 EMC-154: Development tests shall be performed to evaluate t ...

Y T,R

HPR-1437 EMC-156: Qualification tests for PFM shall be performed as ...

Y T,R

HPR-1438 EMC-158: Acceptance tests for FM shall be performed as spec ...

Y T,R


Page 77 of 88




HPR-1439 EMC-160: In order to ensure the proper grounding of the sec ...

Y T,R

HPR-1440 EMC-162: A re-test may be required in case a test result is ...

Y R

HPR-1441 EMC-164: The pre- and post-test inspection is specified in ...

Y R

HPR-1442 EMC-169: All EMC tests shall be conducted under standard am ...

Y R

HPR-1443 EMC-171: The test facilities used for the EMC test program ...

Y R

HPR-1444 EMC-174: The maximum allowable tolerance for the test param ...

Y R

HPR-1445 EMC-176: The accuracy of measurement equipment and test equ ...

Y R

HPR-1446 EMC-178: Grounding of Test Equipment: Measurement equipment ...

Y R

HPR-1447 EMC-179: Antenna Placement: For radiated emission measureme ...

Y R

HPR-1448 EMC-180: Receiver Bandwidth: The following receiver bandwid ...

Y R

HPR-1449 EMC-182: Power Adjustment: The primary power for unit/equip ...

Y R

HPR-1450 EMC-184: For the conducted emission and susceptibility test ...

Y R

HPR-1451 EMC-187: Each LISN has to be designed and provided by the c ...

Y T

HPR-1452 EMC-191: These particular tests shall demonstrate the compl ...

Y R

HPR-1453 EMC-192: The equipment under test shall be switched on in t ...

Y R

HPR-1454 EMC-193: For emission testing the unit/equipment shall oper ...

Y R

HPR-1455 EMC-194: For susceptibility testing the suitable operationa ...

Y R

HPR-1456 EMC-195: After testing the equipment shall be switched off ...

Y R

HPR-1457 EMC-196: Both Emission and Susceptibility operational test ...

Y R

HPR-1458 EMC-197: The particular test set-up shall represent the fli ...

Y R

HPR-1459 EMC-199: General Aspects: Each item (from unit/equipment to ...

Y R

HPR-1460 EMC-200: Data Acquisition: The item under test shall be con ...

Y R

HPR-1461 EMC-203: This test shall verify the DC resistance of bondin ...

Y R

HPR-1462 EMC-204: The bonding test shall be performed with the unit/ ...

Y R


Page 78 of 88




HPR-1463 EMC-205: The bonding test shall be performed without any ha ...

Y R

HPR-1464 EMC-863: Milliohm level bonds imposed for RF interference c ...

Y T

HPR-1465 EMC-865: All elements that could discharge, were they isola ...

Y T

HPR-1466 EMC-866: Immunity to electrostatic discharge shall be verif ...

Y T

HPR-1467 EMC-868: Control of static charging, plasma/payload induced ...

Y T,A

HPR-1468 EMC-207: This test is to measure the isolation of primary a ...

Y R

HPR-1469 EMC-208: The isolation test shall be performed with the UUT ...

Y R

HPR-1470 EMC-212: This test shall demonstrate the compliance of the ...

Y R

HPR-1471 EMC-213: UUT operation shall be selected in order to maximi ...

Y R

HPR-1472 EMC-215: Ripple and transient interference tests on the pow ...

Y R

HPR-1473 EMC-219: This test shall measure the conducted emissions (r ...

Y R


Y R

HPR-1475 EMC-221: When the secondary power provider and user need to ...

Y R


Y T

HPR-1477 EMC-229: This test shall demonstrate the noise immunit/equi ...

Y R

HPR-1478 EMC-230: The mode selection for susceptibility testing shal ...

Y R

HPR-1479 EMC-238: This test shall demonstrate the noise immunit/equi ...

Y R

HPR-1480 EMC-239: The mode selection for susceptibility testing shal ...

Y R


Y R


Y R

HPR-1483 EMC-252: This test shall demonstrate the immunity of the te ...

Y R


Y R

HPR-1485 EMC-256: This test shall demonstrate the immunit/equipmenty ...

Y R


Y R

HPR-1487 EMC-260: The ESD test, radiated discharges, shall demonstra ...

Y R


Y R

HPR-1489 EMC-265: This test shall be used in order to show the compl ...

Y T,R


Page 79 of 88




HPR-1490 EMC-267: Verification by similarity may be applied to units ...

Y A,R


Page 80 of 88



11 OPERATIONAL AND AUTONOMY APPLICABILITY MATRIX







HPR-3053 OPA-1823: The spacecraft shall provide visibility of its int ...

Y T,R

HPR-3054 OPA-1824: The control functions (telecommands) provided at e ...

Y T,R

HPR-3055 OPA-1830: The spacecraft shall not require any TM monitoring ...

Y R

HPR-3056 OPA-59: During all mission phases there shall be no requir ...

Y R

HPR-3057 OPA-60: Situations in which the Ground is expected to reac ...

Y R

HPR-3058 OPA-61: Situations in which the Ground is required to reac ...

Y R

HPR-3059 OPA-62: Autonomous recovery to normal operations after a r ...

Y R

HPR-3060 OPA-63: The spacecraft shall be able to continue nominal o ...

Y A

HPR-3061 OPA-67: The spacecraft shall always be able to receive and ...

Y T,R

HPR-3062 OPA-2051: It shall be possible to evaluate the consumed prop ...

Y A

HPR-3063 OPA-71: The modes of the spacecraft and its payload, subsy ...

Y R

HPR-3064 OPA-1099: For his contribution the sub-contractor shall iden ...

Y R

HPR-3065 OPA-1108: After being powered-up, each equipment/subsystem s ...

Y T

HPR-3066 OPA-72: The telemetry shall provide unambiguous identifica ...

Y R

HPR-3067 OPA-1101: The sub-contractor shall identify all internal and ...

Y T

HPR-3068 OPA-73: The spacecraft shall be able to support the modes ...

Y T

HPR-3069 OPA-74: Initialisation of a mode (at spacecraft, subsystem ...

Y T

HPR-3070 OPA-75: The spacecraft shall autonomously prevent executio ...

Y T

HPR-3071 OPA-1102: It shall be possible to command the equipment/subs ...

Y T

HPR-3072 OPA-81: Autonomy shall be divided into two separate functi ...

Y R

HPR-3073 OPA-84: FDIR shall not trigger on one sample of a paramete ...

Y R

HPR-3074 OPA-85: FDIR limits shall be set as wide as possible with ...

Y R


Page 81 of 88




HPR-3075 OPA-86: The FDIR functions implemented onboard should be i ...

Y R

HPR-3076 OPA-87: For clearly identified critical mission phases fai ...

Y T,R

HPR-3077 OPA-88: Hot redundancy shall be provided for functions whi ...

Y R

HPR-3078 OPA-90: Spacecraft Autonomy shall be limited to the minimu ...

Y R

HPR-3079 OPA-91: The Autonomy shall be implemented using determinis ...

Y R

HPR-3080 OPA-96: All parameters used for autonomous operations (e.g ...

Y T

HPR-3081 OPA-2128: For non-PUS based equipment the subcontractor shal ...

Y R

HPR-3082 OPA-100: The spacecraft shall provide mechanisms to avoid o ...

Y T,A

HPR-3083 OPA-102: Control of the autonomy shall be by high-level com ...

Y R

HPR-3084 OPA-82: There shall be two separate levels of FDIR: Redund ...

Y T,R

HPR-3085 OPA-83: The two levels of FDIR shall not interfere with ea ...

Y T,R

HPR-3086 OPA-106: Whenever reasonably possible, the redundancy FDIR ...

Y R

HPR-3087 OPA-107: Any potential conflict between failure recovery ac ...

Y T,R

HPR-3088 OPA-109: For failures whose resolution does not imply safeg ...

Y T,R

HPR-3089 OPA-110: The management of anomalies within a unit, subsyst ...

Y T,R

HPR-3090 OPA-113: The fault management functions at all levels shall ...

Y T

HPR-3091 OPA-114: The FDIR functions shall not be based on processin ...

Y R

HPR-3092 OPA-116: The spacecraft shall manage the isolation of faile ...

Y T

HPR-3093 OPA-117: For failures whose resolution implies safeguarding ...

Y T

HPR-3094 OPA-118: A failure in the performance of an autonomous reco ...

Y T

HPR-3095 OPA-119: The responses of the redundancy level FDIR to the ...

Y T

HPR-3096 OPA-121: Failures that cannot be handled at a given level s ...

Y R

HPR-3097 OPA-122: Where possible, failure recovery actions shall fir ...

Y R

HPR-3098 OPA-123: If an onboard processor is switched from a main to ...

Y T

HPR-3099 OPA-124: The activation of a redundant unit or functional p ...

Y R

HPR-3100 OPA-126: Anomalies and actions taken to recover from them s ...

Y T

HPR-3101 OPA-127: It shall be possible to reconstruct from telemetry ...

Y R


Page 82 of 88




HPR-3102 OPA-128: The fault management functions at all levels shall ...

Y T

HPR-3103 OPA-129: Failure detection algorithms shall avoid continuou ...

Y T

HPR-3104 OPA-130: Failure detection algorithms shall start generatio ...

Y T

HPR-3105 OPA-131: It shall be possible for the Ground to enable/disa ...

Y T

HPR-3106 OPA-132: For control of all FDIR Surveillances (i.e. low-le ...

Y T

HPR-3107 OPA-133: It shall be possible to request a report of all de ...

Y T

HPR-3108 OPA-134: The following FDIR surveillance information shall ...

Y T

HPR-3109 OPA-154: The number of different Safe or Survival Modes sha ...

Y R

HPR-3110 OPA-159: No nominal operation (including critical mission e ...

Y R

HPR-3111 OPA-138: All onboard reconfigurations shall end with an una ...

Y T

HPR-3112 OPA-139: The maximum duration of an onboard reconfiguration ...

Y T

HPR-3113 OPA-140: Telemetry shall be available for the Ground to mon ...

Y T

HPR-3114 OPA-141: The reconfiguration of onboard units or the switch ...

Y T,R

HPR-3115 OPA-142: Telemetry indicating the cause of an onboard recon ...

Y T

HPR-3116 OPA-143: The capability shall be provided to pre-configure ...

Y T

HPR-3117 OPA-146: At power-up, restart and upon recovery from any po ...

Y T

HPR-3118 OPA-147: The capability shall be provided for the Ground to ...

Y T,R

HPR-3119 OPA-148: All defined combinations of main and redundant equ ...

Y T

HPR-3120 OPA-149: Any selection of main or redundant equipment shall ...

Y T

HPR-3121 OPA-150: Redundancy switching at unit level shall not requi ...

Y R

HPR-3122 OPA-151: The onboard fault management shall avoid continuou ...

Y T,R

HPR-3123 OPA-184: Telecommands shall be available to command all onb ...

Y T

HPR-3124 OPA-185: No single command function executed at the wrong t ...

Y A

HPR-3125 OPA-1409: The equipment/subsystem sub-contractor shall ident ...

Y A

HPR-3126 OPA-1410: All hazardous commands shall be approved by ASD an ...

Y A

HPR-3127 OPA-1412: Execution of equipment/subsystem hazardous functio ...

Y T

HPR-3128 OPA-1413: The equipment/subsystem shall provide an unambiguo ...

Y T


Page 83 of 88




HPR-3129 OPA-186: Execution of identified vital functions (agreed by ...

Y T,R

HPR-3130 OPA-188: It shall be possible to command all onboard device ...

Y T

HPR-3131 OPA-1114: All switchable elements (e.g. relays or units with ...

Y R

HPR-3132 OPA-190: The onboard reception, processing and execution of ...

Y T

HPR-3133 OPA-191: Changes to onboard data or software parameters sha ...

Y R

HPR-3134 OPA-192: Readouts of loaded onboard data or software parame ...

Y T

HPR-3135 OPA-1117: It shall be possible to abort long duration teleco ...

Y T

HPR-3136 OPA-1120: The equipment/subsystem shall provide the capabili ...

Y T

HPR-3137 OPA-1122: The equipment or subsystem shall accept commands a ...

Y T

HPR-3138 OPA-198: The Ground shall be provided on request throughout ...

Y T,R

HPR-3139 OPA-199: The availability of telemetry information shall be ...

Y R

HPR-3140 OPA-200: Telemetry data shall be provided on request to the ...

Y T,R

HPR-3141 OPA-1125: The equipment or subsystem shall provide telemetry ...

Y T,R

HPR-3142 OPA-202: Telemetry shall always be provided to unambiguousl ...

Y R

HPR-3143 OPA-1132: The equipment/subsystem shall provide its status i ...

Y R

HPR-3144 OPA-204: All mission critical functions shall be observable ...

Y T,R

HPR-3145 OPA-1133: All inputs from equipment or subsystems to onboard ...

Y T,R

HPR-3146 OPA-1134: Information to indicate all actions of operational ...

Y T,R

HPR-3147 OPA-1135: The equipment/subsystem S/W status telemetry shall ...

Y R

HPR-3148 OPA-208: The values of telemetry parameters shall be self-c ...

Y R

HPR-3149 OPA-209: The value of a telemetry parameter shall be transm ...

Y R

HPR-3150 OPA-1128: For trouble shooting purposes and failure analysis ...

Y T,R

HPR-3151 OPA-1129: Parameter super-commutation is allowed in periodic ...

Y R

HPR-3152 OPA-1130: A telemetry parameter shall always have the same s ...

Y R

HPR-3153 OPA-1131: All spare fields within a telemetry data stream sh ...

Y R

HPR-3154 OPA-1137: The handling of onboard telemetry shall be hierarc ...

Y R

HPR-3155 OPA-214: Vital spacecraft health functions (e.g. primary bu ...

Y R


Page 84 of 88




HPR-3156 OPA-1138: Vital subsystem/equipment health functions (e.g. p ...

Y T

HPR-3157 OPA-215: Telemetry shall be provided to enable detection an ...

Y R

HPR-3158 OPA-216: Where telemetry measurements are processed onboard ...

Y T

HPR-3159 OPA-217: For elements in hot redundancy, telemetry shall be ...

Y T

HPR-3160 OPA-218: For elements in redundancy, the loss or failure of ...

Y T

HPR-3161 OPA-1141: If the equipment/subsystem controls the redundancy ...

Y T

HPR-3162 OPA-219: Telemetry parameters shall be sampled at a frequen ...

Y R

HPR-3163 OPA-220: Sampling frequencies and sequences shall be define ...

Y R

HPR-3164 OPA-221: Oversampling of telemetry parameters shall be poss ...

Y T

HPR-3165 OPA-1253: It shall be possible to activate any provided diag ...

Y T

HPR-3166 OPA-1254: No fault management function shall trigger on test ...

Y T,A

HPR-3167 OPA-1255: Entering a test mode shall not require (or imply) ...

Y T,A

HPR-3168 OPA-1256: Redundant units should provide the capability to b ...

Y T

HPR-3169 OPA-1257: The capability shall be provided to load and check ...

Y T

HPR-3170 OPA-1752: Each equipment/subsystem subcontractor shall defin ...

Y A

HPR-3171 OPA-1779: An "are you alive" function shall be provided for ...

Y T

HPR-3172 OPA-1782: All intelligent users shall be able to process a d ...

Y T

HPR-3173 OPA-2150: The subcontractor shall propose and define his req ...

Y R

HPR-3174 OPA-1785: Each equipment/subsystem subcontractor shall defin ...

Y A

HPR-3175 OPA-1805: The subcontractor shall define which information h ...

Y R

HPR-3176 OPA-2132: The subsystem/equipment User Manual (UM) shall add ...

Y R

HPR-3177 OPA-2133: The subsystem/equipment UM shall provide the custo ...

Y R

HPR-3178 OPA-2134: The content of the UM shall include: · A complete ...

Y R

HPR-3179 OPA-2135: All subsystem/equipment procedures in the UM shall ...

Y T

HPR-3180 OPA-2136: The contents of the UM shall be internally consist ...

Y R

HPR-3181 OPA-2137: The content of the UM shall be consistent with the ...

Y R


Page 85 of 88




HPR-3182 OPA-2138: The content of the UM shall be consistent with the ...

Y R

HPR-3183 OPA-2142: The database shall contain: · the complete defini ...

Y R

HPR-3184 OPA-2143: The contents of the database shall be internally c ...

Y R

HPR-3185 OPA-2144: TM and TC parameters shall contain a description o ...

Y R

HPR-3186 OPA-2145: In addition to this database a TM/TC ICD shall be ...

Y R


Page 86 of 88



Requirement/Section Cross Reference Page numbers are the pages where the sections start

HPR-51............... 4.4....................27 HPR-54............... 3.4.2.................15 HPR-56............... 3.4.3.................17 HPR-59............... 3.4.4.1..............17 HPR-60............... 3.4.4.1..............17 HPR-61............... 3.4.4.1..............17 HPR-64............... 3.4.4.5..............18 HPR-65............... 3.4.4.3..............18 HPR-67............... 3.4.4.3..............18 HPR-69............... 3.4.4.6..............19 HPR-72............... 3.4.5.1..............20 HPR-74............... 3.4.5.2..............20 HPR-77............... 3.4.6.1..............20 HPR-78............... 3.4.6.1..............20 HPR-79............... 3.4.6.1..............20 HPR-83............... 3.4.6.2..............21 HPR-84............... 3.4.6.2..............21 HPR-85............... 3.4.6.2..............21 HPR-89............... 3.4.7.................21 HPR-93............... 3.4.8.................21 HPR-98............... 3.4.9.................21 HPR-99............... 3.4.9.................21 HPR-112............. 3.4.10...............21 HPR-117............. 3.5.2.................22 HPR-119............. 3.5.3.................22 HPR-121............. 3.7....................23 HPR-122............. 3.6.2.................23 HPR-130............. 3.4.4.7..............20 HPR-139............. 3.5.4.................22 HPR-144............. 3.5.4.................22 HPR-151............. 3.6.2.................23 HPR-154............. 4.7.1.................28 HPR-156............. 4.7.3.................28 HPR-157............. 4.7.3.................28 HPR-158............. 4.7.3.................28 HPR-161............. 4.7.4.................28 HPR-162............. 4.7.4.................28 HPR-165............. 4.7.2.................28 HPR-167............. 4.7.5.................29 HPR-172............. 4.7.6.1..............29 HPR-174............. 4.7.6.2..............29 HPR-176............. 4.7.6.3..............29 HPR-199............. 3.8....................23 HPR-204............. 3.9.1.................23 HPR-216............. 3.9.2.................24 HPR-220............. 3.9.3.................24 HPR-230............. 5.1.1.................30 HPR-236............. 6.1.4.................32 HPR-239............. 6.2....................32 HPR-242............. 6.2.1.2..............33 HPR-244............. 6.2.1.3..............33 HPR-249............. 6.2.2.1..............35 HPR-251............. 6.2.2.2..............35 HPR-253............. 6.2.2.3..............37 HPR-256............. 6.2.3.1..............37 HPR-258............. 6.2.3.2..............37 HPR-260............. 6.2.3.3..............39

HPR-424 .............3.3 ................... 10 HPR-425 .............3.3.1 ................ 12 HPR-426 .............3.3 ................... 10 HPR-428 .............3.3.1 ................ 12 HPR-432 .............4.1 ................... 26 HPR-433 .............3.4.5.2 ............. 20 HPR-436 .............3.3 ................... 10 HPR-971 .............3.4.3 ................ 17 HPR-972 .............3.4.4.5 ............. 18 HPR-973 .............3.3 ................... 10 HPR-974 .............3.3 ................... 10 HPR-980 .............3.6.2 ................ 23 HPR-981 .............3.6.2 ................ 23 HPR-1157 ...........4.6 ................... 27 HPR-1158 ...........4.6 ................... 27 HPR-1500 ...........5.1.2 ................ 30 HPR-1501 ...........5.1.2 ................ 30 HPR-1502 ...........5.1.2 ................ 30 HPR-1503 ...........5.1.2 ................ 30 HPR-1513 ...........3.3 ................... 10 HPR-1516 ...........3.4.3 ................ 17 HPR-2244 ...........6.1 ................... 32 HPR-2246 ...........6.1.1 ................ 32 HPR-2248 ...........6.1.2 ................ 32 HPR-2250 ...........6.1.3 ................ 32 HPR-2251 ...........6.1.3 ................ 32 HPR-2252 ...........6.1.3 ................ 32 HPR-2254 ...........6.2.1.2 ............. 33 HPR-2294 ...........4.4.1 ................ 27 HPR-2461 ...........3.6.1 ................ 22 HPR-2462 ...........3.6.1 ................ 22 HPR-2464 ...........3.4.2 ................ 15 HPR-2465 ...........3.4.4.3 ............. 18 HPR-2466 ...........3.4.2 ................ 15 HPR-2468 ...........4.7.2 ................ 28 HPR-2523 ...........4.7.6.2 ............. 29 HPR-2528 ...........3.3 ................... 10 HPR-2529 ...........3.4.6.2 ............. 21 HPR-2531 ...........3.4.6.1 ............. 20 HPR-2532 ...........3.4.6.2 ............. 21 HPR-2537 ...........3.4.6.1 ............. 20 HPR-2539 ...........3.4.4.5 ............. 18 HPR-2540 ...........3.4.2 ................ 15 HPR-2541 ...........3.4.2 ................ 15 HPR-2542 ...........4.7.2 ................ 28 HPR-2547 ...........6.2.1.1 ............. 33 HPR-2550 ...........3.4.2 ................ 15 HPR-2551 ...........3.4.2 ................ 15 HPR-2553 ...........3.6.1 ................ 22 HPR-2558 ...........3.4.10 .............. 21 HPR-2559 ...........3.4.10 .............. 21 HPR-2563 ...........3.4.3 ................ 17 HPR-2564 ...........3 ...................... 10 HPR-2596 ...........3.4.4.3 ............. 18 HPR-2597 ...........3.3.1 ................ 12 HPR-2599 ...........4.5 ................... 27 HPR-2601 ...........3.4.2 ................ 15

HPR-2602........... 3.9.3 .................24 HPR-2622........... 3.9.3 .................24 HPR-2623........... 3.9.3 .................24 HPR-2624........... 3.9.3 .................24 HPR-2625........... 3.9.3 .................24 HPR-2626........... 3.9.3 .................24 HPR-2627........... 3.9.3 .................24 HPR-2641........... 3.4.4.6 ..............19 HPR-2642........... 4.4 ....................27 HPR-2645........... 3.4.2 .................15 HPR-2662........... 3.5.1 .................22 HPR-2663........... 3.5.1 .................22 HPR-2684........... 4.4.1 .................27 HPR-2689........... 3.4.1 .................13 HPR-2692........... 3.2 ....................10 HPR-2693........... 3.2 ....................10 HPR-2694........... 3.2 ....................10 HPR-2695........... 3.2 ....................10 HPR-2697........... 3.2 ....................10 HPR-2698........... 3.2 ....................10 HPR-2699........... 3.2 ....................10 HPR-2700........... 3.2 ....................10 HPR-2701........... 4.3.2 .................26 HPR-2702........... 3.5.1 .................22 HPR-2703........... 4.2.1 .................26 HPR-2896........... 3.3.1 .................12 HPR-2897........... 3.3.1 .................12 HPR-2898........... 3.3.1 .................12 HPR-2900........... 3.3.1 .................12 HPR-2901........... 3.3.1 .................12 HPR-2902........... 3.3.1 .................12 HPR-2903........... 3.4.4.5 ..............18 HPR-2905........... 3.4.4.5 ..............18 HPR-2906........... 3.4.4.5 ..............18 HPR-2907........... 3.4.4.5 ..............18 HPR-2908........... 4.3.2 .................26 HPR-2909........... 3.3 ....................10 HPR-2910........... 3.4.4.5 ..............18 HPR-2911........... 3.4.4.5 ..............18 HPR-2912........... 3.4.1 .................13 HPR-2913........... 3.4.1 .................13 HPR-2914........... 4.5 ....................27 HPR-2916........... 4.2 ....................26 HPR-2917........... 4.2.1 .................26 HPR-2918........... 4.3 ....................26 HPR-2919........... 4.3.1 .................26 HPR-2920........... 4.3.2 .................26 HPR-2921........... 3.4.2 .................15 HPR-2922........... 3.4.2 .................15 HPR-2923........... 3.4.2 .................15 HPR-2924........... 3.4.2 .................15 HPR-2931........... 4.7.5 .................29 HPR-2932........... 4.7.5 .................29 HPR-2933........... 4.7.5 .................29 HPR-2934........... 3.3 ....................10 HPR-2968........... 3.3 ....................10 HPR-2971........... 3.4.2 .................15


Page 87 of 88



HPR-2973........... 3.5.2.................22 HPR-3001........... 3.4.1.................13 HPR-3002........... 3.4.1.................13 HPR-3049........... 3.5.2.................22 HPR-3050........... 3.5.2.................22 HPR-3187........... 3.4.5.2..............20 HPR-3189........... 3.3....................10 HPR-3190........... 3.3....................10 HPR-3191........... 3.4.4.5..............18 HPR-3193........... 3.4.1.................13 HPR-3194........... 3.4.5.2..............20 HPR-3196........... 3.9.1.1..............24 HPR-3198........... 3.4.4.2..............17 HPR-3199........... 3.4.4.2..............17 HPR-3201........... 4.4.2.................27 HPR-3203........... 4.4.3.................27 HPR-3205........... 3.4.4.4..............18 HPR-3206........... 3.4.4.5..............18 HPR-3208........... 3.9.1.2..............24 HPR-3221........... 3.4.4.2..............17 HPR-3223........... 3.4.4.2..............17 HPR-3224........... 3.4.4.6..............19 HPR-3225........... 3.4.5.2..............20 HPR-3227........... 3.4.4.5..............18


Page 88 of 88



DOCUMENT CHANGE DETAILS

ISSUE CHANGE AUTHORITY CLASS RELEVANT INFORMATION/INSTRUCTIONS

1 - II First Formal Issue

DISTRIBUTION LIST

INTERNAL EXTERNAL