中国安全科学学报 ›› 2026, Vol. 36 ›› Issue (5): 165-173.doi: 10.16265/j.cnki.issn1003-3033.2026.05.0952

• 安全技术与工程 • 上一篇    下一篇

基于STPA-BN的真北导航过渡风险评估模型

任杰1,2(), 曲仕茹2, 王莉莉1, 韩元松1, 孙志远1   

  1. 1 中国民航大学 空中交通管理学院, 天津 300300
    2 西北工业大学 自动化学院, 陕西 西安 710072
  • 收稿日期:2025-12-14 修回日期:2026-02-28 出版日期:2026-05-28
  • 作者简介:

    任 杰 (1983—),男,山东平原人,博士研究生,讲师,主要研究方向为空中交通流量管理、民航安全评估。E-mail:

    曲仕茹 教授。

    王莉莉 教授。

  • 基金资助:
    中央高校自然科学一般项目(3122024042); 天津市自然科学基金联合基金面上项目资助(25JCLMJC00530)

Risk assessment model for true north transition in aviation based on STPA-BN

Ren Jie1,2(), Qu Shiru2, Wang Lili1, Han Yuansong1, Sun Zhiyuan1   

  1. 1 School of Air Traffic Management, Civil Aviation University of China, Tianjin 300300, China
    2 School of Automation, Northwestern Polytechnical University, Xi'an Shaanxi 710072, China
  • Received:2025-12-14 Revised:2026-02-28 Published:2026-05-28

摘要:

随着全球民航导航系统向以真北为基准的导航方式转型,为量化识别与有效控制导航基准转换所引发的系统性风险,提出一种融合系统理论过程分析(STPA)与模糊贝叶斯网络(FBN)的动态风险评估模型,用于支持真北导航过渡过程中的多源不确定性风险识别与演化分析,构建包含“战略-区域-组织-设备”4层次的控制结构,系统识别7类系统级危险与12项不安全控制行为(UCA),并通过模糊集方法处理专家认知的不确定性,结合Leaky Noisy-or门逻辑建立贝叶斯网络(BN),进一步扩展为动态贝叶斯网络(DBN)模拟5阶段(t0~t0+28年)风险演化过程。结果表明:技术适配滞后与政策协同不足是初期主要风险驱动因素(如空域冲突概率达0.852),但通过分阶段推进技术升级、政策协调与冗余设计,关键风险在t0+28年可降低至0.01以下。研究提出融合“阶段达标-资金拨付”政策联动机制、基于机型寿命分级的技术迭代路径以及“惯导 + 低轨卫星”双冗余人工智能(AI)治理体系的原创策略,以系统性解决真北过渡中的政策延迟、设备代际冲突及运行风险问题。

关键词: 系统理论过程分析(STPA), 模糊贝叶斯网络(FBN), 真北导航, 风险评估, 不安全控制行为(UCA), 过渡过程, 风险缓解

Abstract:

With the global transition of civil aviation navigation systems from magnetic north to true north reference, a dynamic risk assessment model integrating STPA and FBN was proposed to quantify, identify, and effectively control systemic risks induced by the navigation reference transition. A four-level control structure-covering strategic, regional, organizational, and equipment layers-was established to identify seven categories of system-level hazards and twelve types of unsafe control actions. Expert uncertainty was quantified via fuzzy sets, and a Bayesian network (BN) was constructed using the Leaky Noisy-or Gate model. Furthermore, a dynamic Bayesian network (DBN) was developed to simulate risk evolution across five phases (t0 to t0+28 years). The results show that technological lag and insufficient policy coordination are the major risk drivers in the early stage (e.g., airspace conflict probability up to 0.852). However, through phased implementation of technology upgrades, policy alignment, and redundancy design, key risks can be reduced to below 0.01 by t0+28. This study proposes an original strategy integrating the 'phased compliance-fund disbursement' policy linkage mechanism, aircraft service life-based technical iteration path, and the 'inertial navigation + low-orbit satellite' dual-redundancy artificial intelligence (AI) governance system, to systematically resolve policy delays, intergenerational equipment conflicts and operational risks in the true north transition.

Key words: system-theoretic process analysis(STPA), fuzzy Bayesian network(FBN), true north navigation, risk assessment, unsafe control action(UCA), transition process, risk mitigation

中图分类号: