Safety NewsLetter Q2 2019
Safety NewsLetter Q2 2019
2, April 2019
Page 1 of 2
AVIATION SAFETY NEWSLETTER 2019 Edition; Issue No. 2, April 2019
EASA Proposes Beefing Up Aircraft EASA: Operators Need To Prep for GPS Rollover
Cybersecurity Event
EASA has issued a Notice of Proposed Amendment (NPA) On April 6, navigation data from some GPS receivers will
that aims to mitigate the potential effects of become inaccurate unless they are reset to account for
cybersecurity threats on aviation safety. The the next so‐called “week number” rollover event,
requirements would replace the use of special conditions according to a new EASA Safety Information Bulletin. If
to meet these threats with dedicated requirements affected GPS receivers are not reset by that date, the
under the specific certification specifications (CS) time data used for navigation solutions will be
applicable to aircraft, as well as avionics. inaccurate. “A nanosecond error in GPS time can equate
to one foot of position error,” EASA said.
“Such threats could be the consequences of intentional
unauthorized acts of interference with aircraft onboard The GPS weekly number has a valid range of values from
electronic networks and systems,” EASA said. These zero to 1,023 weeks. Unless updated by April 6, the end
threats have the potential to disrupt or destroy of the 1,024th week, the counter experiences a rollover,
electronic information. All recently designed large could reset to week zero and the GPS will think it’s the
airplanes are known to be potentially sensitive to those week of Jan. 6, 1980. The GPS week zero started on that
security threats due to the interconnectivity of their date and the last week‐number rollover occurred Aug.
avionics systems. 21, 1999.
Currently, cybersecurity is addressed as part of the A GPS device that conforms to the Interface Specification
certification activities of new large airplane type designs GPS 200J and provides UTC should not be adversely
and STCs in the form of special conditions to EASA CS‐25. affected, according to a U.S. Department of Homeland
But the proposed rules would introduce cybersecurity Security white paper. These devices should not be
provisions into the relevant certification specifications of affected by the April 6 rollover date “but may experience
small and large aircraft. In addition to updating the a similar rollover event at a future date. For example, a
certification specifications to protect products and particular GPS device might interpret the week‐number
equipment against cybersecurity threats, the parameter relative to a firmware creation date and
amendment is also expected to improve harmonization would experience a similar rollover event 1,024 weeks
with FAA regulations. after that firmware creation date.”
Comments on the NPA are due by May 22. EASA expects However, EASA said, tests of some GPS devices revealed
to make a decision on implementing the new rules in the that not all manufacturer implementations will correctly
third quarter. handle the April 6 rollover. The EASA bulletin is intended
to help operators understand the implications of the
week‐number rollover and recommend steps to rectify
the issue.
The Aviation Safety Newsletter will be issued Quarterly (January, April, July and
October) to promote safety. Your contributions are always welcome, email them
to sms@gulfwings‐fze.com.
Page 2 of 2