DATA LOGGERS
EVENT RECORDERS
BLACK BOX
Full-stack data logger and event recorder electronics engineering — 24-bit simultaneous multi-channel ADC, anti-aliasing filter design, CAN Bus and ARINC 429 bus data capture, GPS PPS and IRIG-B time synchronisation, NAND flash wear levelling, power-loss-protected write journaling, pre-trigger circular buffer, SHA-256 hash-chained tamper-evident storage, ATEX Zone 1 and MIL-STD-810H environmental qualification, and satellite and cellular remote telemetry for distributed field logger networks.
The Engineering Problem
Data Logger Failures Are Invisible During Normal Operation and Critical During Abnormal Events
An anti-aliasing filter designed at the wrong cutoff aliases high-frequency signal content into the recorded bandwidth — producing spectral artefacts indistinguishable from real physical events. This is not discovered during commissioning but during post-incident analysis when the data is needed to reconstruct what happened. The engineering failures that produce inadequate loggers are almost always failures of disciplines invisible during normal operation and critical during abnormal events.
NAND flash without hardware wear levelling exhausts specific block endurance within 6 weeks of high-rate continuous logging. A software-flush power-loss mechanism loses the last 2–5 seconds on every uncontrolled power removal — precisely the seconds after a vehicle collision or machinery trip that matter most. And a distributed logger network using independent crystal oscillators drifts at 10–50ppm, introducing inter-node timestamp errors of 10–50ms per hour — meaningless for mechanical transients at sub-100ms timescales.
Three structural drivers are expanding the market: regulatory event recording mandates extending across aviation (FDR to smaller aircraft), railway (EU ERA), and automotive (NHTSA and UN Regulation No. 160) — requiring electronics designed to specific standard requirements, not generic loggers retrofitted; Industry 4.0 platforms creating demand for loggers generating OPC-UA and MQTT data streams with embedded signal processing alongside waveform archival; and remote monitoring infrastructure expansion creating demand for ultra-low-power multi-year field loggers with satellite and LoRaWAN telemetry for seasonally inaccessible locations.
Aviation & Transportation Black Box and Event Recorders
Industrial Multi-Channel Data Acquisition & Condition Monitoring Loggers
Automotive & Motorsport Data Acquisition
Marine VDR & Subsea Data Recording
Environmental & Field Research Data Loggers
Railway & Rolling Stock Event Recorders
Medical & Clinical Data Recording
Defence & Military Data Acquisition
Analogue Acquisition & Anti-Aliasing
24-bit sigma-delta ADC for precision measurement of strain gauge (Wheatstone bridge), load cell, thermocouple, RTD, LVDT, and pressure transducer signals at noise floors below 1µV RMS. Simultaneous multi-channel sampling architecture ensuring zero inter-channel phase skew — no multiplexed sequential skew. Anti-aliasing filter design at or below Nyquist for the configured sample rate using 4th-order Butterworth or 8th-order elliptic topology, with documented passband, transition band, and stopband attenuation. IEPE constant current source (2-10mA configurable) for piezoelectric accelerometer conditioning. Wheatstone bridge excitation (2-10V ratiometric). Thermocouple cold junction compensation. 4-20mA current loop receiver. Programmable gain amplifier 1x to 128x.
Digital Bus & Protocol Capture
CAN Bus ISO 11898-1 2.0A and 2.0B passive listener capturing every frame — standard, extended, remote, and error frame — with timestamp resolution below 1µs at full 1Mbit/s bus load without frame loss. LIN bus 2.x frame logger for automotive body system capture. ARINC 429 word logger at 12.5kbps and 100kbps with word timing and SSM capture. MIL-STD-1553B bus word logger for BC, RT, and BM dual-redundant military avionics bus. RS-232, RS-422, RS-485 serial byte logger with configurable baud rate. GNSS NMEA 0183 and UBX message logger with GPS PPS correlation. Frequency, RPM, and pulse count input from digital encoder or proximity switch. SDI-12 sensor bus for environmental monitoring instruments.
Time Synchronisation & GPS Discipline
GPS PPS input with sub-100ns edge detection disciplining the logger's internal oscillator to GPS UTC — achieving sub-1µs timestamp accuracy for all logged samples and events. Multi-constellation GNSS (GPS, GLONASS, Galileo, BeiDou) for UTC traceability. IEEE 1588v2 PTP grandmaster and boundary clock electronics for distributed network synchronisation to sub-microsecond without GPS at each node. IRIG-B amplitude-modulated and DC-shift time code encoder and decoder for aerospace and military time system compatibility. GPS-disciplined oscillator with characterised holdover stability — typically sub-1µs per second after GPS signal loss. TCXO and OCXO selection for holdover applications. Timestamp accuracy budget calculation from PPS edge uncertainty through PPS-to-ADC trigger latency to sample tag resolution.
Storage Architecture & Data Integrity
NAND flash storage controller with hardware wear levelling distributing write cycles uniformly across all flash blocks — extending device lifetime beyond 10 million write cycles at high-throughput logging rates. ECC at NAND flash layer for bit error correction over device lifetime. Power-loss-protected write journaling with capacitor-backed completion record — guarantees last complete data record is intact after any uncontrolled power removal, verified by 10,000 abrupt-power-removal endurance cycles. WORM storage emulation for regulatory-compliant tamper-evident archiving. SHA-256 sequential hash chaining for cryptographic tamper evidence — each record contains the hash of the previous record. AES-256 at-rest encryption. LZ4 and zstd real-time lossless compression for extended recording duration. Dual-path RAID-mirrored storage for crash-survivable redundancy.
Pre-Trigger & Event Architecture
Circular ring buffer firmware maintaining continuously overwriting history (1 second to 30 minutes) for all acquisition channels — with atomic snapshot to persistent storage on trigger event. Configurable trigger conditions: analogue threshold crossing with hysteresis, digital input level, bus message content match, rate-of-change threshold, and time-scheduled event. Multi-channel logical trigger combining AND, OR, and sequential conditions. Priority trigger with non-maskable condition for safety-critical event capture. Post-trigger duration management with configurable hold. Double-buffer architecture for high-rate continuous acquisition without ring buffer race condition. Trigger event logging with cause, timestamp, and channel state at trigger moment. Simultaneous multi-rate acquisition: high-rate waveform capture for event channels and low-rate trend logging for context channels.
Telemetry & Remote Data Retrieval
LoRaWAN Class A device firmware for summary telemetry from distributed field loggers — statistical summary and alert data at low data rate for battery-efficient remote awareness. LTE-M and NB-IoT cellular for higher-bandwidth summary telemetry and remote configuration. Iridium SBD for ultra-remote logger status and alert transmission beyond cellular and LoRaWAN coverage. USB 3.0 high-speed download for full waveform retrieval at direct-connect maintenance visits (up to 5GB/min). Ethernet TCP/IP for networked logger data access and configuration. SFTP and REST API for automated server-side data retrieval. BLE 5.x for near-field status check from smartphone. Store-and-forward architecture for telemetry during connectivity windows with full waveform local archival. TLS 1.3 secure data transfer with certificate authentication.
Environmental Qualification & Survivability
MIL-STD-810H Method 514.8 vibration with platform-specific PSD profile; Method 516.8 functional and transit shock; Methods 501.7 and 502.7 temperature from -46°C to +71°C. IP67 and IP68 enclosure design for outdoor field, marine, and vehicle-deployed loggers. IP69K for wash-down industrial environments. ATEX Zone 1 Ex ia and Zone 2 Ex ec electronics for hazardous area logging — oil, gas, and mining applications. IPC-A-610 Class 3 workmanship and conformal coating for long-life industrial and field logger reliability. Crash-survivable enclosure design philosophy awareness from EUROCAE ED-112A — fire, penetration, static crush, and fluid immersion concepts. Battery chemistry selection for -40°C with capacity derating documentation. Vibration-isolated mounting bracket design for high-shock vehicle and rotating machinery installation.
Calibration Traceability & Regulatory Compliance
NIST-traceable calibration chain for each analogue channel type with ISO/IEC 17025 accredited calibration laboratory awareness. Multi-point polynomial correction factor storage for non-linear sensor response compensation. Calibration due-date tracking firmware with alert generation. Field calibration check interface for on-site verification. 21 CFR Part 11 compliant electronic record generation — audit trail that cannot be disabled, record modification history with original value, computer-generated date/time stamp, and electronic signature. EN 50155 railway electronics standard compliance awareness for rolling stock data recorder deployment. IMO A.861(20) and IEC 61996-1 VDR standard awareness. NHTSA CFR 49 Part 563 EDR standard awareness. GDPR-compliant data architecture for patient health data in medical logging applications.
Chipsets & Platforms
Tested silicon and proven stacks — no experimental platform dependencies.
Aviation, Railway & Transportation Black Box Electronics
GPS PPS Synchronisation: The Timestamp Engineering That Makes Multi-Channel Incident Reconstruction Defensible
A railway event recorder with successful data recovery but 200ms inter-channel timestamp skew — because it used independent crystal oscillators rather than GPS PPS synchronisation — cannot establish the sequence of door releases, brake applications, and signal state changes at the sub-100ms resolution an incident investigation requires. Regulatory survivability and timestamp accuracy must be first-order design constraints. GPS PPS hardware capture with sub-10ns timer resolution disciplines the logger's sampling clock to UTC; PPS-to-ADC sampling discipline eliminates drift accumulation; TCXO holdover of 1–10µs per second of GPS outage determines the maximum acceptable signal loss for a given accuracy requirement. Ankh documents the timestamp accuracy budget from GPS PPS edge uncertainty through PPS capture resolution through ADC sample clock period to the sample tag — not from the receiver's marketing specification.
Industrial Condition Monitoring, Power Quality & Field Research Loggers
Pre-Trigger Circular Buffer Architecture: The Ring Buffer Race Condition That Determines Whether Industrial Event Capture Works
A machine health monitoring logger may need 64 simultaneous channels at 50kHz from a mains-powered cabinet. A remote groundwater bore 120km from the nearest road needs hourly data for 5 years on 2 AA lithium cells at 50µW average. These are opposite ends of the power, acquisition, storage, and communication architecture space — serving both requires genuine acquisition engineering breadth. The ring buffer advances a write pointer through a fixed-size memory region, creating a FIFO of exactly the last N samples from every channel; the atomic snapshot mechanism copies the write pointer position on trigger without stopping acquisition. The race condition arises when the write pointer advances into the pre-trigger history during storage write — requiring a double-buffer architecture that snapshots the non-writing buffer on trigger. Ankh designs pre-trigger buffer architectures from acquisition rate and storage throughput engineering.
Motorsport, Medical & Scientific Data Recording Electronics
21 CFR Part 11: The Electronic Record Requirements That Determine Clinical Data Admissibility
A motorsport logger losing 200ms during a gear change misses the most dynamic data in the lap — commercially inconvenient. The same 200ms gap in an ambulatory ECG clinical trial logger must be accounted for or excluded by the statistician — potentially affecting the statistical power of a drug safety assessment. A cosmic ray event recorder losing 200ms loses a scientifically irreplaceable record. 21 CFR Part 11 is specific: the audit trail cannot be disabled; record modifications must preserve the original value; timestamps must use a clock that cannot be reset without audit trail entry; electronic signatures must link to authenticated operator identification. A clinical trial logger not implementing these requirements generates data FDA inspectors cannot accept as equivalent to paper records. Ankh designs 21 CFR Part 11 compliance into firmware architecture from the first design review.
Anti-Aliasing Filter Designed for the Sample Rate, Not Specified After the ADC
A 1kHz logger with a -3dB anti-aliasing corner at Nyquist attenuates 499Hz signals to 70% — they alias back as sub-1Hz content indistinguishable from real low-frequency events. An 8th-order elliptic filter with 80dB stopband attenuation at 500Hz attenuates aliased content below the noise floor of any 12-bit ADC. Ankh designs anti-aliasing filters as a function of sample rate, ADC bit depth, and measurement bandwidth — frequency response is characterised and documented, not assumed from the ADC datasheet.
Power-Loss Data Integrity From Hardware Write Journaling, Not Software Flush
A software filesystem flush on abrupt power loss may require 3–50ms depending on buffer size and flash write speed, while capacitor hold-up is typically 1–3ms — the last 2–10 seconds of data are never committed. Ankh designs power-loss integrity using a hardware write journal with a dedicated capacitor-backed power rail that writes the journal completion record independently of the main supply, verified by 10,000 abrupt-power-removal endurance test cycles with zero data loss in final record.
Pre-Trigger Buffer Sized From the Physics of the Monitored Event
A 500ms pre-trigger buffer before a roller bearing fracture event is meaningless — the subsurface fatigue crack vibration signature that precedes fracture develops over hours. The correct pre-trigger duration is determined by the physics of the failure mode: acoustic emission timescales for bearing failure, voltage instability timescales for power electronics trips, pore pressure change timescales for dam embankment failure. Ankh designs pre-trigger buffer capacity from failure mode physics and monitoring literature — not from remaining MCU RAM after firmware fits.
Timestamp Accuracy Documented as a Budget, Not Claimed as a Feature
A logger claiming GPS-synchronised timestamps may achieve sub-second accuracy if PPS is captured to the system timer tick of ±1ms and OS scheduling adds ±3ms jitter. Sub-microsecond accuracy requires applying GPS PPS to a hardware timer with sub-10ns edge resolution, characterising PPS-to-ADC trigger latency, and documenting the combined uncertainty budget from GPS receiver PPS accuracy through PPS capture jitter through ADC sample clock period to the sample tag. Ankh provides a documented timestamp accuracy budget for every distributed logger system.
128-Channel Railway Event Recorder for a Rolling Stock Technology Company
128-channel railway event recorder requiring GPS PPS timestamp accuracy below ±10µs across all channels, power-loss-protected write journaling with zero data loss, and EN 50155 environmental qualification for deployment across an 84-vehicle fleet.
GPS PPS synchronised acquisition achieving ±6µs across all 128 channels, verified by simultaneous calibration pulse injection; 24-bit simultaneous ADC on 64 analogue channels at 5kHz; CAN Bus full-bus logger at 500kbit/s without frame loss; NAND flash with hardware wear levelling and 50ms capacitor-backed write journal (10,000 abrupt-power-removal cycles, zero final-record data loss); 60-second pre-trigger circular buffer; SHA-256 hash-chained tamper-evident archive; LTE-M daily telemetry; EN 50155 including EN 61373 Category 1B.
- 99.97% data completeness over 18 months across 84-vehicle fleet — ±6µs cross-channel timestamp accuracy verified by simultaneous calibration pulse injection
- Zero data loss in final record across 10,000 abrupt-power-removal endurance test cycles — 50ms capacitor-backed hold-up with verified journal completion
- SHA-256 hash-chained sequential record — tamper-evident archive contributed evidence to 3 separate incident investigations
- EN 50155 qualification including EN 61373 Category 1B vibration and -25°C to +70°C — LTE-M daily telemetry, USB 3.0 download at 2.1GB/min
Ultra-Low-Power Environmental Field Data Logger for a Distributed River Gauging Network
Distributed river gauging network requiring autonomous field loggers for 240 stations with multi-year battery life, LoRaWAN connectivity to 23km rural range, SDI-12 sensor bus compatibility, and no site visit for at least 4 years.
47µW average system power through adaptive duty cycling — STM32L4 at 1.2µA sleep with 60-second scheduled wake; 12-bit ADC river level with 0.5mm depth resolution from submersible pressure transducer; SDI-12 bus for temperature, conductivity, and turbidity; LoRaWAN Class A OTAA to 23km with ADR; primary lithium AA pack with 4.9-year life validated in -30°C thermal chamber (23% capacity derating applied); IP68 enclosure; AES-128 payload encryption; OTA firmware update over LoRaWAN; automated flood-warning threshold alert.
- 47µW average system power — 4.9-year battery life validated in -30°C thermal chamber with 23% capacity derating applied
- 97.8% data completeness across 240 stations over 24 months — 94% stations continued transmission throughout a 100-year flood event peak
- LoRaWAN Class A OTAA achieving reliable connectivity to 23km across rural terrain — AES-128 payload encryption, OTA firmware update over LoRaWAN
- Automated flood warning alert on threshold crossing — 0.5mm depth resolution from 12-bit ADC with submersible pressure transducer
Building a data logger, event recorder, or black box system? Let's capture everything that matters.
Anti-aliasing filter designed from the sample rate and measurement bandwidth requirement before the ADC is selected. Power-loss data integrity from hardware write journaling, not software flush. Full-stack delivery from GPS PPS-synchronised 24-bit simultaneous acquisition through SHA-256 hash-chained tamper-evident storage through satellite and cellular telemetry.
Quote Your Data Logger Project