Aerospace eVTOLs: Aerofugia and Sysgo Consolidate Safety-Critical Functions

Related Vendor

item Industrietechnik GmbH

The eVTOL manufacturer Aerofugia and Sysgo will collaborate in the future on the avionics platform for the eVTOL program AE200-100 of Geely's subsidiary. 

The AE200-100 program addresses this challenge with a partitioned avionics architecture based on ARMv8 technology and Sysgo's real-time operating system and hypervisor PikeOS. The architecture allows applications with different criticality levels to share common computing resources while maintaining strict spatial and temporal separation.

By consolidating functions that would traditionally require multiple dedicated computing units, this approach can reduce size, weight, power consumption, and costs while simultaneously creating a scalable software base for future aircraft development, as Alex Tu, Chief of Production at Aerofugia, explains: "For new eVTOL aircraft, certification cannot be considered only after the architecture has been developed. It must be included from the very beginning. With the AE200-100, we are developing an avionics platform designed for certification, commercial operation, and continuous development throughout the aircraft's entire operational life."

Certification begins with the architecture

Modern eVTOLs must integrate flight control, electric propulsion, battery management, navigation, communication, and condition monitoring in increasingly compact computing environments. The more functions are consolidated, the more proving their independence becomes a fundamental challenge for architecture and certification.

Partitioned architectures based on concepts like ARINC 653 allow applications with different criticality levels to share common computing resources while maintaining defined temporal and spatial boundaries.

PikeOS combines a hard real-time operating system with separation kernel and hypervisor functionality. This enables multiple applications and operating environments to run independently on a shared hardware platform. At the same time, PikeOS provides an architectural foundation for systems aiming for high software assurance levels according to DO-178C, up to Design Assurance Level A (DAL A).

Designed for international certification

Commercial eVTOL programs are increasingly targeting multiple international markets. For the AE200-100, this means taking into account the requirements of the Civil Aviation Administration of China (CAAC). At the same time, international ambitions make alignment with established global certification principles—including those applied by the European Union Aviation Safety Agency (EASA)—an important aspect.

The use of software technology with a proven certification history and reusable certification artifacts can reduce development risks and help avoid costly architectural changes in later program phases.

Additionally, with the increasing connectivity of aircraft, security assurance is becoming ever more important. The separation kernel architecture of PikeOS ensures strong isolation between applications and is available with a Common Criteria certification at EAL5+. This complements the requirements for functional safety in safety-critical avionics platforms.

From eVTOL development to commercial aviation

China's rapidly evolving low-altitude economy is accelerating the transition of eVTOL technology from demonstrator aircraft to commercially operated passenger platforms. As the market matures, aircraft manufacturers must consider not only flight performance but also certification, maintainability, and the long-term development of their platforms.

The AE200-100 program demonstrates how hardware consolidation, mixed-criticality partitioning, and a certification-focused software architecture can work together to create a sustainable avionics platform for the long term. (se)

Aviation

Hitachi Energy and Eve Air Mobility Are Expanding Infrastructure for eVTOLs