30316 Federal Register / Vol. 83, No. 125 / Thursday, June 28, 2018 / Rules and Regulations 

wired or wireless electronic 

connections. 

These special conditions contain the 

additional safety standards that the 

Administrator considers necessary to 

establish a level of safety equivalent to 

that established by the existing 

airworthiness standards. 

Applicability 

As discussed above, these special 

conditions are applicable to the Model 

A318, A319, A320 and A321 series 

airplanes. Should Airbus apply at a later 

date for a change to the type certificate 

to include another model incorporating 

the same novel or unusual design 

feature, these special conditions would 

apply to that model as well. 

Conclusion 

This action affects only a certain 

novel or unusual design feature on 

Airbus Model A318, A319, A320 and 

A321 series airplanes. It is not a rule of 

general applicability. 

List of Subjects in 14 CFR Part 25 

Aircraft, Aviation safety, Reporting 

and recordkeeping requirements. 

Authority Citation 

The authority citation for these 

special conditions is as follows: 

Authority: 49 U.S.C. 106(f), 106(g), 40113, 

44701, 44702, 44704. 

The Special Conditions 

■ Accordingly, pursuant to the authority 

delegated to me by the Administrator, 

the following special conditions are 

issued as part of the type certification 

basis for Airbus Model A318, A319, 

A320 and A321 series airplanes. 

1. The applicant must ensure that the 

airplane electronic systems are 

protected from access by unauthorized 

sources external to the airplane, 

including those possibly caused by 

maintenance activity. 

2. The applicant must ensure that 

electronic system-security threats are 

identified and assessed, and that 

effective electronic system-security 

protection strategies are implemented to 

protect the airplane from all adverse 

impacts on safety, functionality, and 

continued airworthiness. 

3. The applicant must establish 

appropriate procedures to allow the 

operator to ensure that continued 

airworthiness of the aircraft is 

maintained, including all post-typecertification modifications that may 

have an impact on the approved 

electronic system security safeguards. 

Issued in Des Moines, Washington, on June 

25, 2018. 

Victor Wicklund, 

Manager, Transport Standards Branch, Policy 

and Innovation Division, Aircraft 

Certification Service. 

[FR Doc. 2018–13949 Filed 6–27–18; 8:45 am] 

BILLING CODE 4910–13–P 

DEPARTMENT OF TRANSPORTATION 

Federal Aviation Administration 

14 CFR Part 25 

[Docket No. FAA–2018–0602; Special 

Conditions No. 25–729–SC] 

Special Conditions: Airbus Model 

A318, A319, A320 and A321 Series 

Airplanes; Electronic System Security 

Protection From Unauthorized Internal 

Access 

AGENCY: Federal Aviation 

Administration (FAA), DOT. 

ACTION: Final special conditions; request 

for comments. 

SUMMARY: These special conditions are 

issued for the Airbus Model A318, 

A319, A320 and A321 series airplanes. 

These airplanes will have a novel or 

unusual design feature when compared 

to the state of technology envisioned in 

the airworthiness standards for 

transport category airplanes. This design 

feature is airplane electronic systems 

and networks that allow access, from 

aircraft internal sources (e.g., wireless 

devices, internet connectivity), to the 

airplane’s previously isolated, internal, 

electronic components. The applicable 

airworthiness regulations do not contain 

adequate or appropriate safety standards 

for this design feature. These special 

conditions contain the additional safety 

standards that the Administrator 

considers necessary to establish a level 

of safety equivalent to that established 

by the existing airworthiness standards. 

DATES: This action is effective on Airbus 

on June 28, 2018. Send comments on or 

before August 13, 2018. 

ADDRESSES: Send comments identified 

by Docket No. FAA–2018–0602 using 

any of the following methods: 

• Federal eRegulations Portal: Go to 

http://www.regulations.gov/ and follow 

the online instructions for sending your 

comments electronically. 

• Mail: Send comments to Docket 

Operations, M–30, U.S. Department of 

Transportation (DOT), 1200 New Jersey 

Avenue SE, Room W12–140, West 

Building Ground Floor, Washington, DC 

20590–0001. 

• Hand Delivery or Courier: Take 

comments to Docket Operations in 

Room W12–140 of the West Building 

Ground Floor at 1200 New Jersey 

Avenue SE, Washington, DC, between 9 

a.m. and 5 p.m., Monday through 

Friday, except Federal holidays. 

• Fax: Fax comments to Docket 

Operations at 202–493–2251. 

Privacy: The FAA will post all 

comments it receives, without change, 

to http://www.regulations.gov/, 

including any personal information the 

commenter provides. Using the search 

function of the docket website, anyone 

can find and read the electronic form of 

all comments received into any FAA 

docket, including the name of the 

individual sending the comment (or 

signing the comment for an association, 

business, labor union, etc.). DOT’s 

complete Privacy Act Statement can be 

found in the Federal Register published 

on April 11, 2000 (65 FR 19477–19478). 

Docket: Background documents or 

comments received may be read at 

http://www.regulations.gov/ at any time. 

Follow the online instructions for 

accessing the docket or go to Docket 

Operations in Room W12–140 of the 

West Building Ground Floor at 1200 

New Jersey Avenue SE, Washington, 

DC, between 9 a.m. and 5 p.m., Monday 

through Friday, except Federal holidays. 

FOR FURTHER INFORMATION CONTACT: 

Varun Khanna, Airplane and Flight 

Crew Interface Section, AIR–671, 

Transport Standards Branch, Policy and 

Innovation Division, Aircraft 

Certification Service, Federal Aviation 

Administration, 2200 South 216th 

Street, Des Moines, Washington 98198; 

telephone and fax 206–231–3159; email 

Varun.Khanna@faa.gov. 

SUPPLEMENTARY INFORMATION: The 

substance of these special conditions 

previously has been published in the 

Federal Register for public comment. 

These special conditions have been 

derived without substantive change 

from those previously issued. It is 

unlikely that prior public comment 

would result in a significant change 

from the substance contained herein. 

Therefore, the FAA has determined that 

prior public notice and comment are 

unnecessary, and finds that, for the 

same reason, good cause exists for 

adopting these special conditions upon 

publication in the Federal Register. 

Comments Invited 

We invite interested people to take 

part in this rulemaking by sending 

written comments, data, or views. The 

most helpful comments reference a 

specific portion of the special 

conditions, explain the reason for any 

recommended change, and include 

supporting data. 


amozie on DSK3GDR082PROD with RULES
Federal Register / Vol. 83, No. 125 / Thursday, June 28, 2018 / Rules and Regulations 30317 

We will consider all comments we 

receive by the closing date for 

comments. We may change these special 

conditions based on the comments we 

receive. 

Background 

On February 2, 2017, Airbus applied 

for a change to Type Certificate No. 

A28NM for the installation of electronic 

network system architecture or Flight 

Operations and Maintenance Exchanger 

(FOMAX) equipment in the Model 

A318, A319, A320 and A321 series 

airplanes. The Airbus Model A318, 

A319, A320 and A321 series airplanes 

are twin-engine, transport category 

airplanes with a passenger seating 

capacity of 136 to 230 and a maximum 

takeoff weight of 123,458 to 213,848 

pounds, depending on the specific 

design. 

Type Certification Basis 

Under the provisions of title 14, Code 

of Federal Regulations (14 CFR) 21.101, 

Airbus must show that the Model A318, 

A319, A320 and A321 series airplanes 

as changed, continue to meet the 

applicable provisions of the regulations 

listed in Type Certificate No. A28NM or 

the applicable regulations in effect on 

the date of application for the change, 

except for earlier amendments as agreed 

upon by the FAA. 

If the Administrator finds that the 

applicable airworthiness regulations 

(i.e., 14 CFR part 25) do not contain 

adequate or appropriate safety standards 

for the Airbus Model A318, A319, A320 

and A321 series airplanes because of a 

novel or unusual design feature, special 

conditions are prescribed under the 

provisions of § 21.16 

Special conditions are initially 

applicable to the model for which they 

are issued. Should the type certificate 

for that model be amended later to 

include any other model that 

incorporates the same novel or unusual 

design feature, or should any other 

model already included on the same 

type certificate be modified to 

incorporate the same novel or unusual 

design feature, these special conditions 

would also apply to the other model 

under § 21.101. 

In addition to the applicable 

airworthiness regulations and special 

conditions, the Airbus Model A318, 

A319, A320 and A321 series airplanes 

must comply with the fuel vent and 

exhaust-emission requirements of 14 

CFR part 34, and the noise certification 

requirements of 14 CFR part 36. 

The FAA issues special conditions, as 

defined in 14 CFR 11.19, in accordance 

with § 11.38, and they become part of 

the type certification basis under 

§ 21.101. 

Novel or Unusual Design Features 

The Airbus Model A318, A319, A320 

and A321 series airplanes will 

incorporate the following novel or 

unusual design feature: 

The installation and activation of 

electronic network system architecture 

or Flight Operations and Maintenance 

Exchanger (FOMAX) equipment that 

allows access from internal sources (e.g., 

wireless devices, internet connectivity) 

to the airplane’s once isolated internal 

electronic components. 

Discussion 

The Airbus Model A318, A319, A320 

and A321 series airplanes architecture is 

novel or unusual for commercial 

transport airplanes because it allows 

connection to previously isolated data 

networks connected to systems that 

perform functions required for the safe 

operation of the airplane. This data 

network and design integration may 

result in security vulnerabilities from 

intentional or unintentional corruption 

of data and systems critical to the safety 

and maintenance of the airplane. The 

existing regulations and guidance 

material did not anticipate this type of 

system architecture or electronic access 

to aircraft systems. Furthermore, 14 CFR 

regulations and the current system 

safety assessment policy and techniques 

do not address potential security 

vulnerabilities, which could be 

exploited by unauthorized access to 

airplane networks and servers. 

Therefore, these special conditions are 

to ensure that the security of airplane 

systems and networks is not 

compromised by unauthorized wired or 

wireless internal access. 

These special conditions contain the 

additional safety standards that the 

Administrator considers necessary to 

establish a level of safety equivalent to 

that established by the existing 

airworthiness standards. 

Applicability 

As discussed above, these special 

conditions are applicable to the Model 

A318, A319, A320 and A321 series 

airplanes. Should Airbus apply at a later 

date for a change to the type certificate 

to include another model incorporating 

the same novel or unusual design 

feature, these special conditions would 

apply to that model as well. 

Conclusion 

This action affects only a certain 

novel or unusual design feature on 

Airbus Model A318, A319, A320 and 

A321 series airplanes. It is not a rule of 

general applicability. 

List of Subjects in 14 CFR Part 25 

Aircraft, Aviation safety, Reporting 

and recordkeeping requirements. 

Authority Citation 

The authority citation for these 

special conditions is as follows: 

Authority: 49 U.S.C. 106(f), 106(g), 40113, 

44701, 44702, 44704. 

The Special Conditions 

■ Accordingly, pursuant to the authority 

delegated to me by the Administrator, 

the following special conditions are 

issued as part of the type certification 

basis for Airbus Model A318, A319, 

A320 and A321 series airplanes. 

1. The applicant must ensure that the 

design provides isolation from, or 

airplane electronic system security 

protection against, access by 

unauthorized sources internal to the 

airplane. The design must prevent 

inadvertent and malicious changes to, 

and all adverse impacts upon, airplane 

equipment, systems, networks, or other 

assets required for safe flight and 

operations. 

2. The applicant must establish 

appropriate procedures to allow the 

operator to ensure that continued 

airworthiness of the aircraft is 

maintained, including all post type 

certification modifications that may 

have an impact on the approved 

electronic system security safeguards. 

Issued in Des Moines, Washington, on June 

25, 2018. 

Victor Wicklund, 

Manager, Transport Standards Branch, Policy 

and Innovation Division, Aircraft 

Certification Service. 

[FR Doc. 2018–13948 Filed 6–27–18; 8:45 am] 

BILLING CODE 4910–13–P 

DEPARTMENT OF TRANSPORTATION 

Federal Aviation Administration 

14 CFR Part 97 

[Docket No.: FAA–2017–0879] 

RIN 2120–AA65 

Criteria and Process for the 

Cancellation of Standard Instrument 

Approach Procedures as Part of the 

National Procedures Assessment 

(NPA) 

AGENCY: Federal Aviation 

Administration (FAA), Department of 

Transportation (DOT). 

ACTION: Statement of policy. 


amozie on DSK3GDR082PROD with RULES