Section J1 Preliminary NVR Requirements 072116ver2 BH.pdf

NVR Preliminary Program Requirements Document June 21, 2016 v2

FAA

Enterprise Services Communications, Information and Network Programs NAS Voice Services, AJM-315

National Airspace System (NAS) Voice Recorder

(NVR)

Preliminary Program Requirements (pPR)

PRELIMINARY PROGRAM REQUIREMENTS

for

NATIONAL AIRSPACE SYSTEM (NAS) VOICE RECORDER

(NVR)

Version (2)

Submitted by:

Bill Howard NAS Voice Systems, AJM-3151 Requirements Team Lead Phone: 202 267-9770 ii

Table of Contents

1 INTRODUCTION

1.1 DESCRIPTION

2 CAPABILITY DESCRIPTION AND PROGRAM INFORMATION

2.1 OPERATIONS

2.2 MAINTENANCE

2.2.1 Hardware Maintenance

2.2.2 Software Maintenance

2.3 QUANTITIES AND LOCATION

2.4 CONSTRAINTS

3 FUNCTIONAL AND PERFORMANCE REQUIREMENTS

3.1 FUNCTIONAL REQUIREMENTS

3.1.1 Perform System Management (F1)

3.1.2 Record Time Stamped Audio (F3)

3.1.3 Store Audio Recording (F5)

3.1.4 Access Audio Recorder and Storage (F7.4)

3.1.5 Perform System Maintenance (F1.3)

3.2 PERFORMANCE REQUIREMENTS

3.2.1 Reliability, Maintainability, and Availability (RMA) Requirements

3.2.2 System Equipment

3.2.3 Interfaces

4 INTEGRATION REQUIREMENTS

4.1 ENVIRONMENTAL

4.2 POLLUTION PREVENTION

4.3 DISPOSAL REQUIREMENTS

4.4 FACILITY

4.5 GROUNDING, BONDING, SHIELDING AND LIGHTNING PROTECTION

4.6 CABLES

4.7 POWER

4.8 HEATING, VENTILATION, AND AIR CONDITIONING

4.9 ENERGY AND WATER CONSERVATION

4.10 HAZARDOUS MATERIAL

4.10.1 General Hazmat Requirements

4.10.2 Mercury

4.10.3 Ozone Depleting Substances (ODS)

4.10.4 Polychlorinated Biphenyls (PCBs)

4.10.5 Asbestos

4.10.6 Lead and Lead-Based Paint

4.11 TELECOMMUNICATIONS

4.12 SPECIAL CONSIDERATIONS

4.13 HUMAN-SYSTEM INTEGRATION

4.14 EMPLOYEE SAFETY AND HEALTH REQUIREMENTS

4.14.1 General Environmental, Occupational, Safety and Health (EOSH) Requirements iii

4.14.2 Electrical Safety

4.14.3 Arc Flash

4.14.4 Energized Electrical Work, Lockout/Tagout

4.14.5 Fire Life Safety

4.14.6 Batteries

4.14.7 Occupational Noise

4.14.8 Personal Protective Equipment

4.15 SPECTRUM REQUIREMENTS

5 SECURITY REQUIREMENTS

5.1 FACILITY SECURITY

5.2 PERSONNEL SECURITY

5.3 INFORMATION SYSTEMS SECURITY (ISS)

5.4 ACCESS CONTROL (F1.1)

5.4.1 Account Management

5.4.2 Information Flow

5.4.3 Access Lockout

5.4.4 Warning Banner

5.5 AUDIT AND ACCOUNTABILITY

5.5.1 General Requirements

5.5.2 Types of Audit Records (F1.3.3)

5.5.3 Audit Info and Tool Protection

5.6 IDENTIFICATION AND AUTHENTICATION

5.6.1 Accounts (F.1.1.2)

5.6.2 Authenticators

5.6.3 Identifiers (F.1.1)

5.7 SYSTEM AND COMMUNICATIONS PROTECTION (F.6)

5.8 SYSTEM AND INFORMATION INTEGRITY (F.3)

5.8.1 Malware Protection

5.8.2 Information Integrity, Accuracy, Completeness and Validity

5.8.3 Logs and Audit Records (F1.3.3)

5.8.4 Maintenance of Secure State

5.9 SECURITY ASSESSMENTS

5.10 CONTINGENCY PLANNING

5.11 INCIDENT RESPONSE

5.12 PLANNING

5.13 RISK ASSESSMENT

5.14 TRAINING

5.15 SYSTEM ACQUISITION

5.16 SYSTEM AND COMMUNICATIONS PROTECTION (F.3)

6 QUALITY MANAGEMENT REQUIREMENTS

6.1 QUALITY ASSURANCE

6.2 CONFIGURATION MANAGEMENT

7 TEST AND EVALUATION

7.1 NAS TESTING REQUIREMENTS

7.1.1 T&E – General Requirements

iv

7.1.2 Operation and Capability Demonstration

7.1.3 Test Programs

7.2 CRITICAL OPERATIONAL ISSUES (COI)

7.2.1 Traceability

7.2.2 COI-1: NVR Operations Support

7.2.3 COI-2: Interoperability and NAS Interfaces

7.2.4 COI-3: User Interface

7.2.5 COI-4: Reliability, Maintainability, Availability

7.2.6 COI-5: Maintenance Operations

7.2.7 COI-6: Site Adaptation and Reconfigurability

7.2.8 COI-7: Integration

7.2.9 COI-8: Safety

7.2.10 COI-9: Security

8 IMPLEMENTATION AND TRANSITION

8.1 DEPLOYMENT PLANNING

8.2 SITE SURVEY

8.3 SITE IMPLEMENTATION PLAN

8.4 INSTALLATION

8.4.1 Air Traffic Services

8.4.2 Site Preparation Authority

8.4.3 Installation Work

8.5 SITE INTEGRATION

8.6 POWER-UP TESTING

8.7 POWER COMPATIBILITY

8.8 CONTRACTOR ACCEPTANCE INSPECTION

8.9 JOINT ACCEPTANCE INSPECTION

8.10 IN-SERVICE DECISION

8.11 DISPOSAL OF LEGACY EQUIPMENT

9 IN-SERVICE SUPPORT AND MANAGEMENT REQUIREMENTS

9.1 INTEGRATED LOGISTICS SUPPORT (ILS)

9.2 SUPPLY SUPPORT

9.2.1 Supply Support – General Requirements

9.2.2 Sparing

9.2.3 Warranty

9.2.4 Screening

9.2.5 Support Equipment

9.3 TECHNICAL DATA

9.4 CERTIFICATION

9.5 PACKAGING, HANDLING, STORAGE, AND TRANSPORTATION

9.6 STAFFING AND TRAINING

9.6.1 Staffing

9.6.2 Training and Training Support

9.7 LIFE CYCLE PROVISIONING

9.8 COMPUTER RESOURCES SUPPORT

9.9 IN-SERVICE MANAGEMENT

9.9.1 Monitoring, Assessment, and Optimization

v

9.9.2 Personal Property Management & Disposition

APPENDIX 1. CRITICAL PERFORMANCE REQUIREMENTS

APPENDIX 2. GLOSSARY

APPENDIX 3. ACRONYMS AND ABBREVIATIONS

APPENDIX 4. REFERENCE DOCUMENTS

APPENDIX 5. PROGRAM REQUIREMENTS TRACEABILITY AND VERIFICATION

APPENDIX 6. REQUIREMENTS ALLOCATION MATRIX

List of Figures Figure 2- 1. To-Be High-Level Context Diagram of the NAS Voice Recording System

Figure 3- 1. Enterprise Architecture View (SV-4a) for NVR

List of Tables

Table 1-1: Shortfalls of the Digital Audio Legal Recorder (DALR) vi

1 INTRODUCTION

The Federal Aviation Administration (FAA) Air Traffic Organization’s (ATO) mission is to provide safe, secure, and efficient air traffic services to commercial, private and military customers in the National Airspace System (NAS). A key component of the mission is voice communications between air traffic controllers, pilots, airport authorities, fire and rescue, law enforcement, military and the general public.

The voice recorders provide a legally accepted recording capability for conversations between air traffic controllers, pilots and ground-based air traffic control facilities and are used in the investigation of accidents/incidents and in the evaluation of ATC operations. The legacy Voice Recorder Replacement Program (VRRP) is being replaced by the NVR program.

The NAS Requirement Documents (NAS-RD-2013 and NAS-RD-2025) require that both air-to-ground (A/G) and ground-to-ground (G/G) communications be recorded, archived and retrieved (Sections 3.1.3.2 System and Service Analysis and 3.3.2 Communications). The NAS Requirements are applicable to all FAA Air Traffic Control Towers (ATCT), Terminal Radar Approach Control (TRACON) facilities, Air Route Traffic Control Centers (ARTCC), Automated Flight Service Stations (AFSS), and the Air Traffic Control System Command Center (ATCSCC). FAA Order 7210.3Y Facility Operation and Administration requires that ATC facilities “record operational communications to the maximum extent practicable”.

The NAS Voice Recorder Program (NVRP) within the ATO’s Communications, Information and Network Organization is responsible for procuring and installing voice recording systems to meet the needs of the FAA and Department of Defense (DOD). NAS Voice Recorders (NVRs) provide legally accepted recordings between air traffic controllers, pilots and ground-based Air Traffic Control (ATC) facilities.

These recordings support accident/incident investigations, Search And Rescue (SAR) operations, training, evaluations, quality assurance, risk based monitoring and responding to Freedom of Information Act (FOIA) requests.

The current digital voice recorders procured under VRRP have reached their End of Life (EOL) and will be unsustainable at End of Support (EOS) beyond 2021. The NVRP is planning to replace the aging digital recorders in over 450 FAA and 300 DOD facilities worldwide to provide increased system reliability, reduce operational costs, provide new functionality and support future enhancements.

This Requirements Document (RD) establishes the operational framework and performance baseline for the NVR. The RD defines the operational concept, identifies the shortfalls, and provides the functional and performance requirements the NVR must achieve. It also serves as the basis for evaluating the readiness of products and services prior to being placed into operation at a facility.

1.1 Description

Legacy voice recorder system functions include the capability to reliably and accurately record, monitor, playback, duplicate, quarantine, archive, and delete audio recordings. This includes capturing both A/G controller-pilot voice communications and G/G communications between facilities.

The key driver for the establishment of the NVRP is the legacy voice recorder system is reaching EOS. In addition, there are shortfalls identified within the legacy system.

A Preliminary Shortfall Analysis Report (PSAR) was conducted to identify problems in the legacy voice recording system. A total of fifteen legacy voice recorder system shortfalls are identified, as shown below in Table 1-1. These shortfalls have been broken down into 4 different impact categories which include;

infrastructure deficiencies, infrastructure opportunities, productivity deficiencies, and policy/procedure productivity deficiencies.

Table 1-1: Shortfalls of the Digital Audio Legal Recorder (DALR)

No. Shortfall Statement Impact Category

The legacy voice recorder is reaching end of life and will no longer be supported

Infrastructure Deficiency

Legacy voice recorder channel capacity limits impact current and future expansion needs

Infrastructure Deficiency

The legacy voice recorder does not support direct system interface using Voice over Internet Protocol (VoIP)

Infrastructure Opportunity

Lack of NAS Enterprise time source using FAA Telecommunications Infrastructure (FTI) Network Time Protocol (NTP) drives need for separate GPS hardware

Infrastructure Opportunity

Existing manual processes to access, retrieve, and use audio voice recordings are labor-intensive and inefficient

Productivity Deficiency

5.1

Limited ability of system administrators to notify users at remote locations of pending system shut-down

5.2

Excessive time and effort is required to access, transfer, and replay audio recordings stored in proprietary file format

5.3

Manual processes to record and add audio certification messages can be labor-intensive and error prone

5.4

Manual processes to transcribe audio recordings into text for legal documentation can be labor-intensive

5.5

The legacy voice recorder does not duplicate recorded audio files in precise 1-second time increments when in “voice activated” mode for portions of skipped silence periods

5.6

Legacy voice recorder processes for bulk data transfer of multiple audio recordings are slow

5.7

Limited ability to efficiently access audio voice recordings on- demand in a timely fashion

5.8

Where available, legacy voice recorder system response time for remote audio access is slow (the same holds true when performing remote administrative functions)

5.9

Audio monitor and replay may be difficult to hear and/or understand based on volume of the voice

No. Shortfall Statement Impact Category

5.10

The legacy voice recorder does not support pre-scheduled audio recording start and stop times per facility

Policy/Procedure & Productivity Deficiency

5.11

Lack of standard naming conventions requires a de-coding sheet to determine position channel assignments (no agency order exists to enforce a standard naming convention)

Policy/Procedure & Productivity Deficiency

Addressing these shortfalls is critical to the NextGen effort as infrastructure upgrades in the NAS, specifically the NAS Voice System (NVS), introduce VoIP interfaces that cannot be handled by the current system as well as End of Life issues in the current system itself. The overwhelming majority of the shortfalls—10 of the 16 identified issues—are in the Productivity category. The limits of the current system contribute to the demand placed on personnel to meet review and audit timelines. Shortfalls 5.1 and 5.4 were termed residual in that no requirements were produced in regard to them. For Item 5.1, the external architecture has not been finalized which inhibits development of requirements. In the case of Item 5.4, current automation technology is not sufficiently mature to pose a solution. But vendor submissions which include speech analytics as a standard feature will be considered.

The NVR will provide improved voice recording functionalities and capabilities to meet safety and audit requirements that require a risk-based monitoring of air traffic operational safety events addressing the policies and processes for identifying safety trends in the NAS and verifying the effectiveness of safety risk mitigations. Additionally NVR will address policies and processes for quality monitoring and compliance verification for services provided by air traffic control facilities, technical operations, and flight service stations. NVR will provide centralized remote access, retrieval and dissemination through a common, modern and flexible enterprise solution.

The NVR will provide the capability to securely record, store, retrieve, playback, duplicate, delete, and manage operational and administrative position voice data. The NVR will record communications from operational and administrative operational positions by interfacing to voice switches and administrative telephone systems at FAA and DoD Air Traffic Control (ATC) facilities in all domains (e.g., Terminal, Flight Service, Enroute, and Air Traffic Control System Command Center (ATCSCC).

The NVR will provide enhanced digital voice recording functionalities such as increased recording channel capacity, recording of Voice over Internet Protocol (VoIP) telephones, enhanced compatibility with FAA Telecommunications Infrastructure (FTI) resources, more efficient remote access, compliance with mandatory security standards, and an enterprise time-source solution.

The existing VRRP Program Requirements will be revalidated. The revalidated requirements and any new capabilities or enhancements will be incorporated into the NVR Requirements Document.

2 CAPABILITY DESCRIPTION AND PROGRAM INFORMATION

Legacy voice recorder system functions include voice recording and audio monitoring; audio record playback, duplication, quarantine, archive, and delete; audio record certification; as well as system security, administration, maintenance, and test.

The current Digital Audio Legal Recorder (DALR) system supports audio voice recording and live audio monitoring from both local and remote workstations. Functions include audio recording, playback, storage, and delete for air/ground controller-pilot communications.

The user interface supports audio duplication/download from workstations on the OPIP for upload to CEDAR and Falcon application software on the non-NAS MSUP network.

The current hardware and associated software interface to NAS voice switches and administrative telephone systems within all ATC domains at both FAA and Department of Defense (DOD) facilities.

The legacy voice recorder system shortfall statements and impacts are outlined below:

• The legacy voice recorder is reaching end of life and will no longer be supported: Since FAA must record all air traffic control communications, it is necessary to replace legacy voice recorders that are nearing end of life. There is no contract vehicle available to acquire voice recorder systems for new ATC facilities, or to expand voice channel capacity at existing facilities; vendor repair service contract expires in April 2016; and FAA Logistics Center replacement parts are unavailable beyond 2021.

NVRP will meet current voice recorder system functional requirements. The metric for measuring impact of this shortfall is the inability to efficiently provide needed voice recording services.

Shortfall quantification includes identifying the number of currently deployed NAS voice recorders, as well as the average number of daily voice recordings.

• Limited ability of system administrators to notify users at remote locations of pending system shut down: Routine system maintenance is coordinated locally during low operational activity periods, which may include normal business hours. Anticipated increase in the number of users from remote locations will drive need for broader coordination of maintenance activity. The legacy system does not allow the system administrators to notify users of pending maintenance or shutdown.

Unexpected shutdown of the voice recorder system adversely impacts availability and productivity for users at remote locations (i.e., those using remote access workstations). Timely notification of these events will allow users to complete audio analysis, save or duplicate records before logging out.

NVRP will notify users of pending system shutdown and maintenance activity to improve system availability and user productivity. Metrics for measuring impact of this shortfall are the number and duration of events where voice recorders are unavailable due to system maintenance (i.e., identify the number and duration of user impact events due to uncoordinated voice recorder shutdown). This includes analyzing sample events to determine minimum/mean/maximum frequency and duration of uncoordinated shutdown events).

• Legacy voice recorder channel capacity limits impact current and future expansion needs:

Legacy voice recorder system capacity was sized to meet anticipated operational needs based on unique configuration requirements at each facility. Voice channel capacity requirements have since grown, as facilities added new frequencies and telephone phone lines. NVRP enhancements will expand voice recorder system capacity limits to meet future needs. Metrics to measure impact of this shortfall are the number of voice channels that are not individually recorded at existing facilities.

The NVRs will be deployed throughout the NAS at all FAA ATC facilities (Automated Flight Service Stations (AFSS), ATCTs, mobile ATCTs, TRACONs, ARTCCs, and ATCSCC) and DOD facilities equipped for A/G or G/G communications. It will interface directly with NVS, legacy voice switches, administrative phone systems, FTI, and A/G Radios at each facility. To accommodate this variety of interfaces, the NVR will accept analog, digital and VoIP connections for voice input. The NVR system will interface with FTI for remote access. The expectation will be that users can access audio files both locally as well as remotely. Audio files will only be stored at the facility where the given voice recorder resides. Access to FTI will be utilized where available and not be cost prohibitive to do so.

Figure 2-1 shows a high-level Context Diagram of NVR. Each facility will have its own local NVR and recordings will be stored locally. NAS users can access the recordings remotely via the OPIP network. For non-operational support, NAS users can access the recordings remotely via the MSUP network.

NVR

Perform System Management

F1

Receive Time F3

Record Time Stamped Voice

F4

Store Voice Recording

F5

Receive Voice F2

Access Network F6

Access System F7

NAS Voice System

Legacy Voice Switches Phones Radios ATIS

GPS

Tech Ops

Quality Control

Voice

Recorder Maintenance

Audio Access

Audio File

Health and Status

FTI

Security Notification

Audio Access

Audio File

2nd Level Support

Health and Status

NVR Environment

Quality Assurance

2nd Level Engineering

Security Operations

Litigations Support Group

Emergency Response

Groups

Audio Access

Audio File

Audio Access

Audio File

Voice Voice VoiceVoice

GPS Time Request

GPS Time

Network Time

Network Time

Request

Figure 2- 1. To-Be High-Level Context Diagram of the NAS Voice Recording System

Descriptions of the major interfacing components of the NVRP are as follows:

• Legacy Voice Switches: The Legacy Voice Switches are the current state voice switches used in

Air Traffic Control (ATC) facilities across the NAS. Legacy Voice Switches are one of the main sources of voice that is captured from air-to-ground and ground-to-ground communications.

• NAS Voice System (NVS): NVS is the FAA’s new voice switch that will replace some of the Legacy Voice Switches used across the NAS in ATC facilities. NVS provides the NVR with voice from air-to-ground and ground-to-ground voice communications

• Phones: Phones provide the NVR with a source of voice from ground-to-ground administrative telephone communications between facilities

• Radios: Radios provide an additional source of air-to-ground voice communications for the NVR

• Automatic Terminal Information Service (ATIS): ATIS provides a continuous broadcast containing information to pilots. ATIS provides inputs to the NVR in the form of voice

• GPS: GPS provides the NVR with a source of time for the time stamping of voice recordings

• FTI: FTI provides the network that will be utilized by the NVR as well as the networks used by some of the NVR users. These networks allow remote access of audio by offsite users and also provides Network Time Protocol (NTP) used for the time stamping of voice recordings.

• Security Operations: As the recording system employed in the FAA air traffic environment evolves, so do the security concerns. The proposed recorder will be expected to connect to the FAA secured network as part of the remote access functionality. The introduction of network connectivity possess additional security concerns that will have to be understood and managed by the appropriate security personnel. In order to address these concerns security personnel will be responsible for identifying and verifying the appropriate security controls are put into place. Once in place security will continue to monitor the security status of the system.

The following summarizes the benefits of the NVR over the legacy recording system.

• Increase voice recorder channel capacity to accommodate current and future (NVS) expansion needs. The NVS supports both analog and IP voice, therefore the NVRP must also support both.

• Support external interfaces compatible with legacy protocols and direct VoIP input.

• Support digital PBX and VoIP Admin line interfaces

• Receive NAS Enterprise GPS time code signals through FTI NTP

• Notify users in advance of pending system shut-down

• Efficiently and effectively transfer and replay audio recordings

• Duplicate and playback both audio recordings and skipped silence periods (when desired), while displaying the complete set of time codes

• Complete timely bulk data transfer of multiple audio recordings

• Efficiently and effectively provide NAS-wide access to audio recordings on-demand in a timely fashion

• Normalize the volume of audio during monitor and playback

• Pre-schedule voice recording start and stop times

• Support the standard naming conventions for voice recorder position-channel assignments currently used in the legacy DALR system

2.1 Operations

The NVR will record, store, and time stamp data provided to it through its various interfaces with other equipment, including the voice switch interfaces. For example, the NVR will be used to record both outgoing and incoming A/G and G/G communications. The user may set the recording mode, such as Voice Operated Exchange (VOX) or record channels continuously. Incoming A/G communications will be recorded when VOX is active and terminated when VOX does not detect voice. G/G outgoing and incoming communications will be recorded when a telephone call is initiated and terminated when the call ends.

Recordings made at sites equipped with NVR will be accessed remotely by a secure connection. Access to the NVR will permit approved personnel to select multiple channels at each site from which to download subsets of stored data. Recordings will be downloaded from NVR and merged with recorded data from FAA automation systems within the Traffic Analysis and Review Program (TARP) and Comprehensive Electronic Data Analysis and Reporting (CEDAR) systems based on time stamps. Recorded data will be selected and arranged to meet oversight and investigational needs within the TARP/CEDAR systems. The merged product will permit playback of aircraft position data and associated voice communications for selected timeframes. Secure remote access will permit the centralization of air traffic quality assurance functions. Also, the NVR will provide the ability to make duplicates of voice communications to support FOIA requests and to support litigation.

2.2 Maintenance

The concepts defined in this section may be further refined, clarified, and defined based on cost and alternatives approved by the FAA organization(s) with responsibility for Technical Operations, including responsibility for the operational NAS and its facility, environmental, and support systems. The support structure of the NAS ensures its performance and integrity in a real-time environment. This includes real-time system administration and configuration management of the NVR elements, and maintenance of all aspects of the systems/services/equipment that support providing ATC services to the flying public.

Maintenance of the NVR will be accomplished in accordance with FAA Orders 6000.15 General Maintenance Handbook and 6000.30 National Airspace System Maintenance Policy. The operational concept for the voice recorder is to monitor the status of, and control, the NVR from designated workstations.

2.2.1 Hardware Maintenance

Hardware maintenance will be accomplished at two levels, site and depot. Airways Transportation System Specialists (ATSS) will operate, maintain, and modify the NVR on site. They will conduct periodic and corrective hardware maintenance, analyze interface problems, conduct failure recovery, verification and certification, and coordinate with second-level engineering support.

As established by FAA Order 6000.30E, National Airspace System Maintenance Policy and 1100.157, National Systems Engineering Divisions Maintenance Program Procedures, Operational Support (AOS) the Second Level Maintenance and Technical Support organization (e.g., Specialists-In-Depth) will provide assistance with restoration activities and enhancement of facility performance. Technical Support Specialists are responsive to system or equipment anomalies that are beyond field maintenance support personnel’s technical or resource capabilities.

Site-level hardware maintenance will be accomplished by removal and replacement of failed Line Replaceable Units (LRUs) from site spares using a minimum of tools and common test equipment. Failed LRUs that are repairable will be returned to a depot facility while others will be disposed of locally.

For depot-level support, the FAA Logistics Center will provide in-house integrated supply-support chain management, depot support, and logistics services. This support includes the capability to manage and affect depot-level repair activities, provide failure trend analysis, and provide logistics resources and assets.

2.2.2 Software Maintenance

Second-level engineering support provided by Technical Operations will be responsible for site adaptation support, technical support, system test and evaluation, correcting technical deficiencies, diagnostic support, configuration management, and implementing changes and improvements. First-level engineering support will be Regional Technical Support Offices (TSO). Second-level engineering support will include a centralized development and maintenance support environment, such as at the FAA’s Mike Monroney Aeronautical Center (MMAC) which is capable of replicating operational facilities.

2.3 Quantities and Location

The NVR system will replace approximately 750 systems in the FAA and DOD worldwide when fully deployed.

2.4 Constraints

For planning purposes, a new voice recorder procurement will begin market analysis in July 2015 to acquire the next generation of voice recorders that will interface with the existing FAA voice switching systems. The NVR procurement will incorporate the Safety Management System (SMS) needs that are part of the NextGen requirements and will undergo its Requirements Definition phase in the 2015-16 timeframe. Development and release of the Screening Information Request (SIR), evaluation of vendor proposals and assessment of vendor equipment will be conducted in 2016-17, with source selection and contract award in the mid-2017-18 timeframe.

Currently, there is no schedule or architectural constraints associated with replacing the legacy DALR systems.

3 FUNCTIONAL AND PERFORMANCE REQUIREMENTS

The Functional Analysis (FA) process provides the basis for the decomposition of an operational concept, as documented in a Solution Concept of Operations (ConOps) document, into preliminary top-level functions and data needs. FA serves as the foundation to develop functional and performance requirements that are then documented in the Program Requirements Document (PRD). The PRD defines the functional and performance requirements which the investment program must satisfy.

Unless otherwise indicated, requirements expressed in this document are minimum requirements.

Figure 3-1 shows the Enterprise Architecture View (SV-4a) for NVR. This block diagram was used to develop a high-level context diagram for the FA. This view depicts the higher level functions that define the program. In addition to the internal system functions relevant to the program, the context diagram must also identify external system functions and stakeholders that interface with the program. This would include functions that provide data to the program as well as receive data from the program using a service or a point to point interface. For the requirements contained in this document, the logic flow will, in general, follow Figure 3-1.

Figure 3- 1. Enterprise Architecture View (SV-4a) for NVR

3.1 Functional Requirements

3.1.1 Perform System Management (F1)

3.1.1.1 Manage User Access (F1.1)

3.1.1.1.1 Requirements regarding control of authorized user access to system functions must be in accordance with Section 5, Security Requirements. (F1.1)

3.1.1.1.2 The NVR must provide administrative control of user access. (F1.1)

3.1.1.2 Log Audio Recorder Management Actions (F1.5)

3.1.1.2.1 General

3.1.1.2.1.1 The NVR must provide administrative control to read the date and time of the event, type of event, subject identity, and the outcome (success or failure) of the event from the log files.

3.1.1.2.1.2 NVR must display the content of log files.

3.1.1.2.1.3 The NVR must permit users to print the content of log files.

3.1.1.2.1.4 The NVR must permit authorized personnel to assign a name to each record channel.

3.1.1.2.1.5 The NVR must permit authorized personnel to group record channels into similar groups (e.g., operational positions, radio frequencies, trunk lines, etc.).

3.1.1.2.2 Log Deleted Audio Recording (F1.5.1)

3.1.1.2.2.1 The NVR must automatically create log information for deleted records.

3.1.1.2.2.2 The NVR must automatically update log information for deleted records.

3.1.1.2.3 Log Quarantined Audio Recording (F1.5.2)

3.1.1.2.3.1 The NVR must automatically create log information for quarantined records.

3.1.1.2.3.2 The NVS must automatically update log information for quarantined records.

3.1.1.2.4 Log Certified Audio Recording (F1.5.3)

3.1.1.2.4.1 The NVR must automatically create log information for certified records.

3.1.1.2.4.2 The NVS must automatically update log information for certified records.

3.1.1.2.5 Log Archived Audio Recording (F1.5.4)

3.1.1.2.5.1 The NVR must automatically create log information for archived audio recordings.

3.1.1.2.5.2 The NVR must automatically update information for archived audio recordings.

3.1.1.2.6 Log Duplicated Audio Recording (F1.5.5)

3.1.1.2.6.1 The NVR must automatically create log information for duplicated audio recordings.

3.1.1.2.6.2 The NVR must automatically update information for duplicated audio recordings.

3.1.1.3 Perform System Monitoring (F1.2)

3.1.1.3.1 Monitor System Performance (F1.2.1)

3.1.1.3.1.1 The NVR must provide continuous indications of system status at workstations and central equipment.

3.1.1.3.1.2 The NVR must provide controls to select display timeout intervals configurable up to 24 hours.

3.1.1.3.1.3 The NVR must continue to provide access to all available functions while displaying visual malfunction alerts.

3.1.1.3.1.4 The NVR must detect hardware faults.

3.1.1.3.1.5 The NVR must detect software faults.

3.1.1.3.1.6 The NVR must automatically diagnose faults down to the LRU level.

3.1.1.3.1.7 The NVR must display individual fault messages at the workstation until each fault is cleared.

3.1.1.3.1.8 The NVR must provide a visual indication display of the current date and the time, to the second, on the workstation display.

3.1.1.3.1.9 The NVR must, when configured with a backup power subsystem, continually display the status of the backup power subsystem at the workstation.

3.1.1.3.1.10 The NVR must detect failures of NVR storage.

3.1.1.3.1.11 The NVR must detect the loss of external time source.

3.1.1.3.1.12 The NVR must continuously display recording status for each recording channel at the workstation.

3.1.1.3.1.13 The NVR must continuously display the status of primary power at the workstation.

3.1.1.3.1.14 The NVR must provide storage utilization status at workstations.

3.1.1.3.2 Generate System Alarm (F1.2.2)

3.1.1.3.2.1 The NVR must display visual fault condition alerts at workstations and at central equipment.

3.1.1.3.2.2 The NVR must provide audible fault condition alarms simultaneously with visual indications at workstations.

3.1.1.3.2.3 The NVR must, when configured with a remote alarm panel, provide fault condition alerts to the workstation and remote alarm panel simultaneously.

3.1.1.3.2.4 The NVR must, when configured with a remote alarm panel, provide simultaneous visual and audible alarms indicating the existence of a system fault condition.

3.1.1.3.2.5 The NVR must, when configured with a remote alarm panel, permit users to silence alarms on a per-event basis.

3.1.1.3.2.6 The NVR must provide controls at workstations to silence audible malfunction alarms on a per-event basis.

3.1.1.3.2.7 The NVR must, when configured with a remote alarm panel, provide at least 300 feet separation from the central equipment.

3.1.1.3.2.8 The NVR must provide user-defined fault levels configurable by authorized users.

3.1.1.3.2.9 The NVR alarm/status indications must be unaffected by the restoration of electrical power to the recording equipment after a power interruption.

3.1.1.3.2.10 The NVR must provide alerts at workstations when storage reaches a user-configurable utilization percentage.

3.1.1.3.2.11 The NVR must provide alerts to the workstation when equipment temperature is out of operating range specified in FAA-G-2100.

3.1.1.3.2.12 The NVR must provide an alert to the workstation when the external time source is lost.

3.1.1.3.3 Send Security Notifications (F1.2.3)

3.1.1.3.3.1 The NVR must send security notifications to National Enterprise Operations (NEO).

3.1.1.3.4 Log System Event (F1.5.6)

3.1.1.3.4.1 The NVR must automatically log system events organized in chronological order in an event log.

3.1.1.3.4.2 The NVR must include a time stamp with each log event entry.

3.1.1.3.4.3 The NVR must permit authorized users to annotate the event log.

3.1.1.3.4.4 The NVR must provide a search function for all event logs.

3.1.1.3.4.5 The NVR must provide a filter function for all event logs.

3.1.1.3.4.6 The NVR must provide a security event audit log.

3.1.1.3.4.7 The NVR must include configuration changes in the event log.

3.1.1.4 Control Audio Recorder Settings (F1.4)

3.1.1.4.1 General

3.1.1.4.1.1 The NVR must provide administrative control of system management.

3.1.1.4.1.2 The NVR must display recorder channel assignments at workstations.

3.1.1.4.2 Recording Channel Configurations Settings

3.1.1.4.2.1 The NVR VOX threshold for all channels shall be adjustable on a per channel basis, by maintenance action, from -12 dB to +9 dB from the default setting.

3.1.1.4.2.2 The NVR must permit changes to recording channel configuration settings on a per-channel basis.

3.1.1.4.2.3 The NVR must permit changes to recording channel configuration settings for all channels simultaneously.

3.1.1.4.2.4 The NVR must permit duplication of recording channel configuration settings from one channel to others.

3.1.1.4.3 Set Audio Recording Retention Period (F1.4.1)

3.1.1.4.3.1 The NVR must permit authorized users to configure the recording channel retention period to at least 45 days.

3.1.1.4.3.2 The NVR must permit authorized users to turn off the retention feature.

3.1.1.4.4 Set Recording Channel Start/Stop Times (F1.4.2/ F1.4.3)

3.1.1.4.4.1 The NVR must permit authorized users to assign recording channel start/stop times.

3.1.1.4.5 Assign Audio to Recording Channel (F1.4.4)

3.1.1.4.5.1 The NVR must permit authorized users to assign recording channels.

3.1.2 Record Time Stamped Audio (F3)

3.1.2.1 General

3.1.2.1.1 Recording functions of the NVR must remain unaffected by any user action other than those specifically intended to affect the recording process.

3.1.2.1.2 The NVR must begin recording when data is received at a NVR interface in accordance with the start/stop time window of 3.1.1.4.4.1.

3.1.2.1.3 The NVR must conclude recording after the data has been stored in accordance with the start/stop time window of 3.1.1.4.4.1.

3.1.2.1.4 The NVR must digitally store audio signals received over analog audio interfaces. (CPR)

3.1.2.1.5 The NVR must record digital audio information. (CPR)

3.1.2.1.6 The NVR must record VOIP audio information. (CPR)

3.1.2.1.7 The NVR must maintain data integrity. (CPR)

3.1.2.2 Receive/Record Time Stamp (F3)

3.1.2.2.1 The NVR must apply timestamps to recordings in UTC format using an internal clock.

(CPR)

3.1.2.2.2 The NVR must permit synchronization of its internal clock to a user designated external time source.

3.1.2.2.3 The NVR must permit an external NTP server to be user designated as the external time source.

3.1.2.2.4 The NVR must permit an external GPS time source to be user designated as the external time source.

3.1.2.2.5 The NVR must use a free-running internal clock when an external time source is not available.

3.1.2.3 Set Recording Modes (F1.4.5)

3.1.2.3.1 The NVR must permit recording of channels continuously.

3.1.2.3.2 The NVR must permit recording of channels by voice-activated (VOX) input.

3.1.2.3.3 The NVR must permit recording of channels by line sensing input.

3.1.3 Store Audio Recording (F5)

3.1.3.1 Store to Local NAS Record Storage

3.1.3.1.1 The NVR must automatically store recorded audio communications. (CPR) (F3)

3.1.3.1.2 The NVR must store data which includes audio, timecode, and system information.

(CPR)

3.1.3.1.3 NVR storage must be non-volatile.

3.1.3.1.4 The NVR must store audio communications in a lossless compression format.

3.1.3.2 Archive Audio Recording (F7.4.6)

3.1.3.2.1 The NVR must manage archived recordings in accordance with the configurable retention period.

3.1.3.2.2 The NVR must permit authorized access users to manually archive stored data.

3.1.4 Access Audio Recorder and Storage (F7.4)

3.1.4.1 Local Access (F7)

3.1.4.1.1 The NVR must provide administrative control for expandable recording databases.

3.1.4.1.2 The NVR must provide controls to eject removable media.

3.1.4.2 Remote Access (F6)

3.1.4.2.1 The NVR must permit remote access to locally stored recordings via a secure external connection.

3.1.4.2.2 The NVR must permit authorized users to configure remote access rights.

3.1.4.2.3 The NVR must permit transmission of stored data via the secure external connection.

3.1.4.2.4 The NVR must permit remote selection of channels for downloading of stored data.

3.1.4.2.5 The NVR must permit remote selection of subsets of stored data for downloading.

3.1.4.3 Retrieve

3.1.4.3.1 The NVR must permit local retrieval of recorded channel files from on-site storage.

3.1.4.3.2 The NVR must permit remote retrieval of recorded channel files from on-site storage.

3.1.4.3.3 The NVR must permit local retrieval of recorded channel files from archived storage.

3.1.4.3.4 The NVR must permit remote retrieval of recorded channel files from archived storage.

3.1.4.4 Monitor Audio and Playback Record (F7)

3.1.4.4.1 Monitor Live Audio (F7.2)

3.1.4.4.1.1 The NVR must permit selection of any combination of channels from a single site for monitoring of audio simultaneously .

3.1.4.4.1.2 The NVR channel monitor audio must be the audio as it appears at the record channel input.

3.1.4.4.1.3 The NVR must permit monitoring selected channel(s) without interfering with ongoing record operation on those channels.

3.1.4.4.1.4 The NVR must provide controls at each workstation to adjust the monitor volume of each monitor channel that will affect only the monitor audio without affecting the channel audio level placed into storage.

3.1.4.4.1.5 The NVR must permit the user to select the sound output configuration from the workstation headset or workstation loudspeaker.

3.1.4.4.2 Playback Audio Recording (F7.4.1)

3.1.4.4.2.1 The NVR must permit selection of multiple recorded channel files for playback based on date and time recorded, to within 1-second increments.

3.1.4.4.2.2 The NVR must provide controls to select a specific time within the selected recorded channel files for playback.

3.1.4.4.2.3 The NVR must provide controls to move forward and backward to any point in time within a user-selected recording for playback.

3.1.4.4.2.4 The NVR must permit selection of playback audio that skips periods of silence or plays them.

3.1.4.4.2.5 The NVR must continuously display on the workstation the time-code data to within a minimum resolution of one second of the selected playback channels on the workstation during playback.

3.1.4.4.2.6 The NVR must provide visual indication of audio activity on each selected channel during playback.

3.1.4.4.2.7 The NVR must provide nominal playback audio at the same audio level that had been provided to the channel interface. (CPR)

3.1.4.4.2.8 The NVR must permit playback of time stamp audio.

3.1.4.4.2.9 The NVR must permit muting of audible time-code data during playback.

3.1.4.4.2.10 When time-stamp audio is muted, the NVR must provide playback audio to both channels of a stereo output.

3.1.4.4.2.11 The NVR must permit playback of audio from any combination of recording channels. (CPR)

3.1.4.4.2.12 The NVR must permit playback of duplicate recordings on any NVR-enabled workstation.

3.1.4.4.2.13 The NVR must permit single playback for a user selected recording channel.

3.1.4.4.2.14 The NVR must permit continuous playback until user stops for a selected recording channel.

3.1.4.4.2.15 The NVR must permit selection of a recording time period to be repeated continuously.

3.1.4.4.2.16 The NVR must permit selection of a recording time period to be repeated once.

3.1.4.4.2.17 The NVR must permit selection of a time period for all selected channels to be repeated.

3.1.4.4.2.18 The NVR must permit authorized users to playback bulk-copied files of stored data on any NVR-enabled workstation.

3.1.4.4.2.19 The NVR must permit authorized users at each workstation to configure the audio output from the workstation such that playback audio is on the left audio channel and synchronized IRIG B AM modulated signal is on the right audio channel.

3.1.4.4.3 Controls

3.1.4.4.3.1 The NVR must permit user adjustment of playback volume of each selected channel.

3.1.4.4.3.2 The NVR must permit user control of muting of playback audio for each selected channel.

3.1.4.4.3.3 The NVR must permit user control of audio routing.

3.1.4.4.3.4 During playback, the NVR must permit fast forward at a user-selectable rate from between one times the normal rate to at least eight times the normal rate.

3.1.4.4.3.5 During fast forward, the NVR must continue to provide playback audio to the workstation.

3.1.4.4.3.6 The NVR must permit selection of a specific go-to time to within at least one second of the selected playback channels.

3.1.4.4.3.7 When the selected go-to time is initiated, the NVR must go to the time within the channel and continue to execute the last playback function selected (i.e., play, pause, stop, fast forward).

3.1.4.4.3.8 The NVR must permit pausing the playback audio operation.

3.1.4.4.3.9 The NVR must resume playback at the same time position in the recording when pause was initiated.

3.1.4.4.3.10 The NVR must permit stopping of a playback.

3.1.4.4.3.11 The NVR must provide controls to route recorder audio to selected output devices.

3.1.4.5 Duplicate Audio Record (F7.4.2)

3.1.4.5.1 The NVR must permit authorized users to create identical duplicate copies of stored data.

3.1.4.5.2 The NVR must permit writing the duplicate to removable media.

3.1.4.5.3 The NVR must provide duplicate copies of stored data that must include synchronized time code, in a publicly available format.

3.1.4.5.4 The NVR must provide duplicate copies of recordings that permit audible time code to be muted.

3.1.4.5.5 The NVR must provide duplicate copies of recordings that can be played back on NVR equipment.

3.1.4.5.6 As a minimum, the NVR must provide duplicate copies of selected audio channels in WAV file format in the left audio channel and IRIG-B AM modulated time code in the right audio channel.

3.1.4.5.7 The NVR must permit authorized users to create bulk copies of stored data consisting of audio from selected recording channels in raw format as a single file.

3.1.4.5.8 The NVR must permit authorized users to create duplicate copies of recordings with normalized audio levels.

3.1.4.6 Delete Audio Record (F7.4.3)

3.1.4.6.1 The NVR must automatically delete from stored recordings those non- quarantined recordings that exceed the retention period.

3.1.4.6.2 The NVR must prevent recovery of recordings previously stored on the NVR that have been deleted.

3.1.4.6.3 The NVR must preclude manual erasure of recordings previously stored on the NVR.

3.1.4.7 Quarantine Audio Record (F7.4.4)

3.1.4.7.1 The NVR must preclude quarantined recordings from being deleted.

3.1.4.7.2 The NVR must permit authorized users to quarantine recordings.

3.1.4.7.3 The NVR must permit authorized users to remove quarantine status from selections.

3.1.4.8 Certify Audio Record (F7.4.5)

3.1.4.8.1 The NVR must permit insertion of audio certifications by user before the duplicate.

(CPR)

3.1.4.8.2 The NVR must permit insertion of audio certifications by user after the duplicate. (CPR)

3.1.4.8.3 The NVR must permit insertion of audio segments by the user between other audio segments. (CPR)

3.1.5 Perform System Maintenance (F1.3)

3.1.5.1 Hardware Maintenance

3.1.5.1.1 The NVR must, during the change-out of a failed LRU, continue to perform without any reduction in system functionality beyond that resulting from the failed LRU itself.

3.1.5.1.2 NVR LRUs must be accessible and removable at the equipment operational location.

3.1.5.1.3 The NVR must be maintained with common tools and test equipment only.

3.1.5.1.4 The NVR must permit all modules and equipment to be completely removable from their enclosure without disassembly of the modules or equipment.

3.1.5.1.5 The NVR must permit the replacement of any LRUs without removal of adjacent LRU(s).

3.1.5.1.6 The NVR must permit the replacement of any LRUs without removal of any cabling not associated with the replaced LRU.

3.1.5.1.7 The NVR must permit maintenance actions on any LRUs without impacting the operation of any redundant LRU(s).

3.1.5.1.8 The NVR must require periodic maintenance no more often than once every six months.

3.1.5.1.9 Subsystems of NVR must permit the conduct of periodic maintenance without total equipment outages.

3.1.5.2 Software Maintenance

3.1.5.2.1 System Software Maintenance

3.1.5.2.1.1 The NVR must, without necessity of system shutdown, permit on-line maintenance of software that permits installation of software changes by authorized users.

3.1.5.2.1.2 The NVR must permit at least two versions of system software to be resident on the system at one time.

3.1.5.2.1.3 The NVR must permit authorized users to select the software version to be executed.

3.1.5.2.1.4 The NVR must display the current version of system software in use to workstations.

3.1.5.2.2 Component Software / Firmware Maintenance

3.1.5.2.2.1 NVR node components requiring software/firmware upgrades must provide sufficient memory to store a minimum of two software/firmware versions.

3.1.5.2.2.2 The NVR must, in the event of software/firmware download failure, provide an indication of the failure to the system workstation.

3.1.5.2.2.3 The NVR must, in the event of software/firmware download failure, default to the node component software/firmware version in effect prior to the failed download.

3.1.5.2.2.4 The NVR must permit selection of the version of software/firmware that is operational at any NVR node.

3.1.5.2.2.5 The NVR must display reports of NVR node component software/firmware versions at the system workstation(s).

3.1.5.2.2.6 The NVR must display reports of NVR node component software/firmware versions with file integrity information to the system workstation(s).

3.1.5.2.2.7 The NVR must permit printing of the results of any node component software/firmware report to a file.

3.1.5.2.2.8 The NVR must permit export of node component software/firmware to an external device.

3.1.5.2.3 Software/Firmware Downloads

3.1.5.2.3.1 The NVR must support Software/Firmware download(s) by way of a connection to a secure network.

3.1.5.2.3.2 The NVR must support local installation of software from removable media.

3.1.5.2.3.3 Downloads for NVR node components must be performed without any impact to ATC operations.

3.1.5.2.3.4 The NVR must, upon the installation of new NVR node components, validate that the current version of the software/firmware on the component is reported to the NVR workstation initiating the download.

3.1.5.2.3.5 The NVR must provide an alert at the maintenance workstation in the event that a node component with incorrect firmware/software is installed in the system.

3.2 Performance Requirements

3.2.1 Reliability, Maintainability, and Availability (RMA) Requirements

3.2.1.1 Reliability

3.2.1.1.1 The NVR Mean Time Between Failures (MTBF) must be greater than 5,000 hours for a

NVR configured to its maximum channel capacity.

3.2.1.1.2 The NVR, including all of its components, must have no single point of failure.

3.2.1.2 Maintainability

3.2.1.2.1 The NVR Mean Time to Repair (MTTR) must be less than or equal to 30 minutes for any single corrective maintenance action.

3.2.1.2.2 NVR maintenance actions shall be less than or equal to 90 minutes in duration.

3.2.1.3 Availability

3.2.1.3.1 The NVR must have an inherent availability (Ai) of 0.9999 or greater. (CPR)

3.2.2 System Equipment

3.2.2.1 General

3.2.2.1.1 NVR equipment must consist of recording hardware capable of being mounted in a

19x36-inch rack.