(1)
The occurrence of any failure condition which would prevent the continued safe .ight and landing of the airplane is extremely improbable, and

(2)
[The occurrence ofany other failure condition which would reduce the capabi-lity of the airplane or the ability of the crew to cope with adverse operating conditions is improbable.

(c)
Warning information must be provided to alert the crew to unsafe system opera-ting conditions, and to enable them to take appropriate corrective action.Systems, controls, and associated monitoring and warning means must be designed to mini-mize crew errors which could create additional hazards.

(d)
Compliance with the requirements ofparagraph(b) ofthis section mustbe shown by analysis,and wherenecessary,by appropriateground, .ight,orsimulatortests. The analysis must consider–]

(1)
Possible modes of failure, including malfunctions and damage from external sources.

(2)
The probability of multiple failures and undetected failures.

(3)
The resulting e.ects on the airplane and occupants, considering the stage of .ight and operating conditions, and

(4)
The crew warning cues, corrective action required, and the capability ofdetec-ting faults.

(e)
Eachinstallation whosefunctioningis requiredby this subchapter, and that requires apowersupply ,isan ”essentialload” onthepowersupply.Thepowersourcesand the system mustbe ableto supply thefollowingpowerloadsinprobableoperating combinations and for probable durations :

(1)
Loads connected to the system with the system functioning normally.

(2)
Essentialloads, afterfailure ofany oneprime mover,power converter, or energy storage device.

(3)
[Essential loads after failure of–

(i)
Any one engine on two-engine airplanes; and

(ii)
Any two engines on three-or-more engine airplanes.]

(4) Essentialloadsfor which an alternate source ofpoweris requiredby this chap-ter, after any failure or malfunction in any one power supply system, distri-bution system, or other utilization system.

(f)
[In determiningcompliance withparagraphs(e)(2) and(3) of this section, thepower loads maybe assumed to be reduced under a monitoringprocedure consistent with safety in the kinds of operation authorized. Loads not required in controlled .ight need not be considered for the two-engine-inoperative condition on airplanes with three or more engines.]

(g)
In showing compliance withparagraphs(a) and(b) ofthis sectionwith regardto the electrical system and equipment design and installation, critical environmen-tal conditions must be considered. For electrical generation, distribution, and uti-lization equipment required by or used in complying with this chapter, except equipment covered by Technical Standard Orders containing environmental test procedures, the ability to provide continuous, safe service under foreseeable en-vironmental conditions may be shown by environmental tests, design analysis, or reference to previous comparable service experience on other aircraft.

Amdt. 25-41, E.. 9/1/77
FAR25.1316 :[Systemlightningprotection.]
(a)
[For functions whose failure would contribute to or cause a condition that would prevent the continued safe .ight and landing of the airplane, each electrical and electronic system that performs these functions must be designed and installed to ensure that the operation and operational capabilities of the systems to perform thesefunctions are not adversely a.ected when the airplaneis exposed tolightning.

(b)
For functions whose failure would contribute to or cause a condition that would reduce the capability of the airplane or the ability of the .ightcrew to cope with adverse operating conditions, each electrical and electronic system that performs these functions must be designed and installed to ensure that these functions can be recovered in a timely manner after the airplane is exposed to lightning.
　
中國航空網 www.k6050.com
航空翻譯 www.aviation.cn
本文鏈接地址：FAA規章 美國聯邦航空規章 Federal Aviation Regulations 4(17)