Université Bordeaux 1, Approche Robuste et Intégrée de l'Automatique, Laboratory IMS, 351 Cours de la Libération, Talence Cedex 33405, France
The work presented in this paper focuses on the design of robust Fault Detection and Isolation (FDI) filters for dynamic systems characterized by LPV (Linear Parameter Varying) polytopic models. A sufficient condition is established to guarantee sensitivity performance of the residual signal vector to faults. Robustness constraints against model perturbations and disturbances are also taken into account in the design method. A key feature of the proposed method is that the residual structuring matrices are optimized as an integral part of the design, together with the dynamic part (i.e. the filter). The design problem is formulated as a convex optimization problem and solved using LMI (Linear Matrix Inequalities) techniques. The proposed method is illustrated on the secondary circuit of a Nuclear Power Plant.
1. Introduction and Motivations
The issue of Fault Detection and Isolation (FDI) in dynamic
systems has been an active research area in the last two decades. Model-based
FDI techniques use mathematical models of the monitored process and extract
features from measured signals, to generate fault indicating signals, that is, the
residuals. LTI models have been widely used to solve the problem of FDI. Tools
are now available to enhance robustness against small parameter variations and
other disturbances (see, [1–3] for surveys). The resulting robust FDI
problem is generally formulated as a min-max optimization setting to maximize
fault sensitivity performance and at the same time, to minimize the influence
of unknowns inputs.
More recently, some research works have appeared that consider Linear
Parameter Varying (LPV) modeling of the monitored system to take into account
wider and more rapid parameters variations. Such models can be used efficiently
to represent some nonlinear systems (see, e.g., [4, 5]). This motivates
some researchers from the FDI community to develop model-based methods using
LPV models (see [6–8] among others). The two commonly used
approaches are fault estimation methods where the fault indicating signal is an
estimate of the fault signal, and residual generation methods where the
residuals are synthesized to be robust against modeling errors and unknown
inputs, while being sensitive to the faults. In this context, a geometric
approach is proposed in [6] to design a LPV observer in a Luenberger form. A
procedure is derived to obtain the observer parameters via the construction of
a suitable family of invariant subspaces (parameter varying -invariant
and un-observability subspaces). In [7], a multi-model approach is used to
solve the FDI problem for nonlinear systems. The nonlinear system is modeled using
polytopic models and a robust polytopic unknown input observer is then
synthesized by means of pole assignment. The method uses LMI optimization
techniques to synthesize the observer gain. The major limitation of this
approach is that sensitivity of the residual signal against faults can only be checked
a posteriori. More precisely, if the distribution matrices of the fault model
and the effects that faults could have on the decoupled state is not of full
column rank, then faults could go undetectable. To overcome this problem, a
solution is provided in [8] where the main idea is to build a fault estimate
using a LPV filter such that the worst-case gain (i.e., the
performances measure for LPV systems) from
disturbances and faults to the estimation error, is minimized.
In this paper a different approach based on residual generation
is considered for LPV systems that can be modeled within a LPV polytopic
setting. Robustness against exogenous disturbances and sensitivity against
faults are considered in a framework similar to the well-known setting for LTI systems. The robustness objectives
are expressed in terms of a minimization problem using the
norm for LPV systems, and the sensitivity requirement
is formulated in terms of a maximization constraint using also the H-index for LPV systems. The main
difference between this problem and the standard
problem for LPV systems is that it involves the
residual structuring matrices that are unknown.
The paper is organized as follows: In Section 2, the general FDI
filter design problem and the corresponding solution are presented. In Section 3,
the proposed method is applied to real data set coming from the secondary
circuit of a nuclear power plant in France. Finally, some concluding remarks are made in a final section.
Preliminaries
The Euclidean norm is always used for vectors and is written without
a subscript; for example .
Similarly in the matrix case, the induced vector norm is used: where denotes the maximum singular value of . Signals, for example or ,
are assumed to be of bounded energy, and their norm is denoted by ,
that is, . LTI models, for example, or simply ,
are assumed to be in ,
real rational functions with . ,
that is, the largest gain of , is accompanied by the smallest gain of , ,
which may be equal to zero for some (e.g., strictly proper systems), if
the frequency range of interest is infinite. This motivated [1, 9–12] to define the non-zero smallest gain of , that is, the -index, as the restriction of to a finite frequency domain ,
that is, .
In [1, 9], an evaluation function which is a restriction of the signal norm to ,
is defined by the authors as .
Then, given so that , it follows that and thus that
. This motivates the introduction of an evaluation function, denoted , which
is defined according to:
From (2), it follows that takes the sense of the smallest value of a
singular value of evaluated on . Then it follows that .
The underlying LPV system is modeled by the following state
space representation
which is denoted in a compact form as
is the state vector, is the input vector, is the
output vector and is a varying parameter vector. It is assumed
that all parameters , are bounded, measurable (or estimated) in real
time and take their values in the domain ,
so that is a convex polytope.
The LPV system (3) admits a (non-conservatism) polytopic model
if it is possible to determine a set of matrices , constituting the vertices of a
polytope defined by
and such that it corresponds to the image by of the domain :
Then, , define barycentric coordinates of and the following convex decomposition yields:
Referring to the LPV system (3), the worst-case RMS gain from to which is known as the -norm for LPV systems is defined by:
Following the definition of the index of a LTI transfer given by (2), we will
introduce the following evaluation function, that will be useful in the following
to formulate fault sensitivity requirements for LPV fault detection schemes:
is also a generalization of (2) to LPV case.
2. FDI Filters for LPV Systems
2.1. Problem Setting
Consider the general FDI design problem for LPV systems
represented on Figure
1.
is a polytopic LPV model. is a known controller. represents exogenous disturbances and represents the faults to be detected. is the FDI LPV filter to be designed. is an estimation of ,
a subset of the measurements and the controlled inputs . and are the two residual structuring matrices to be designed.
Figure 1: The general FDI filter design problem.
It is assumed that the problem depicted on Figure 1 is well
posed and thus the lower fractional transformation always exists.
The FDI design problem we are interested in can then be formulated
as follows.
Problem 1. Assume that the faults f are detectable (the interested
reader can refer to [13] for a discussion on fault detectability).
The goal is to find the state space matrices , , and of the (stable) polytopic LPV filter and the residual structuring matrices and defining the residual vector
such that the residual vector meets the following requirements:
where
and
denote the looped transfers between and and and ,
respectively. This problem can be represented by the block diagram
illustrated on Figure 2, where is derived from so that .
In this formulation, and are two positive constants referring
respectively to the robustness and sensitivity performances levels.
Figure 2: General setup for FDI/LPV filter design problem.
Equation (11) represents the worst-case robustness of the
residual to disturbances for all ,
in the -norm sense.
Under plant perturbation, the effect that the exogenous disturbances have on
the residuals, can greatly increase and the fault detection performance may
then be considerably degraded. A robust fault sensitivity specification is then
needed to maintain a detection performance level of the FDI unit. Here the sensitivity
measure (9) for LPV fault detection scheme is used to guarantee the worst-case
sensitivity of the residual to faults.
Of course, the smaller and the bigger
are the better the fault detection performance
will be.
Remark 1. In Problem 1 formulation, it is assumed that the structuring matrices and do not depend on . If this assumption vanishes, it can be verified that the
following theoretical developments still yields. The only difference in such a
case is that, if we consider and in Problem 1, a set of structuring matrices and for each vertex of the polytope would be
obtained rather than constant matrices.
2.2. Design of the FDI Filter
In this section, a solution is provided to compute
simultaneously
, and so that the requirements (11) and (12) are satisfied.
It is straightforward to verify that the major difficulty in this problem is
related to the fault sensitivity requirement (12) since (11) can be solved
using the techniques developed in the robust control community (see, e.g., [14] or [15]). To overcome this problem, a sufficient condition is
established in terms of a fictitious problem. It is then shown in the following that a solution to this fictitious
problem is a solution of the original one.
2.2.1. Standard Setup for the Filter Design Problem
To proceed, let
Using some algebra manipulations, the filter design problem illustrated on
Figure 2, can be re-casted into the setup depicted in Figure 3, where is deduced from and
, according to:
where and denote respectively the identity matrix of dimension
and the
null matrix of dimension . is also the order of ,
that is, .
Figure 3: FDI/LPV filter design problem.
Following the method proposed in [10, 11], the requirements
(11) and (12) are now expressed in terms of loop shapes, that is, of desired gain
responses for the appropriate closed-loop transfers. These shaping objectives
are then turned into uniform bounds by means of the shaping filters. Let
and
denote the (dynamical) shaping filters associated
with (11) and (12) respectively, so that:
and denote respectively the and
norm of the LTI transfer
and
(see preliminaries).
Assume that
is
invertible (this can be done without loss of generality because it is always
possible to add zeros in
to make it invertible).
and
are also defined in
order to tune the gain responses for, respectively, and .
Then it is straightforward to verify that the specification (11) yields if the
following constraint is satisfied:
In this formulation, is a fictitious signal generating through
(see Figure 4(a) for easy reference) and denotes the looped transfer between and .
Figure 4: Fictitious quadratic
formulation for the filter design problem.
The following lemma allows the sensitivity constraint (12) to be
transformed into a fictitious
one.
Lemma 1. Consider an invertible transfer matrix such
that and where .
Define the (fictitious) signal such that (see Figure 4(a)). Then a sufficient condition
for the specification (12) to hold, is:
where
denote the looped transfer between and .
Proof. Consider the signal introduced in Figure 4, that is,
where
is define as in Lemma
1.
Then it can be verified
that the following relation yields:
that can be re-written due to the
definition of
given by (19):
Now consider
the weighting function
defined in Lemma
1. Since,
is supposed to be invertible, we get
where
denotes the inverse of
which always exists by assumption (see Lemma 1). Then, factorizing the right term
of (21) by
gives
that
can be done since, by definition, .
With (22), it then follows that:
Now, since by construction
,
it is straightforward to verify that the following relation yields:
Suppose
now that inequality (18) yields, that is,
.
From (25), it follows that
and
with (24), we get
Thus, if
with , then (27) implies that
which terminates the proof.
Following (17) and (18), the design problem can be
re-casted in a fictitious LPV -framework
as depicted in Figure 4(a), where and are two fictitious signals, so that and .
Then, including
and into the model leads to the equivalent block diagram of Figure 4(b), where is defined according to:
The residual generation problem can now be formulated in a
framework which looks like a standard
problem for LPV systems, by combining both requirements (17) and (18)
into a single
constraint.
Using Lemma 1, it can be verified that a sufficient condition for (17) and (18)
to hold, is
As mentioned above, this equation seems to be similar to a standard
LPV problem.
In fact, this is not the case since the transfer depends on
and
that are unknown.
In the following section, a procedure is given to overcome this problem.
Remark 2. It is clear that a key feature in the proposed formulation is the a priori choice
of the shaping filters and . From a practical point of
view, it is required that the residuals
are as “big” and as “fast” as possible, when a fault occurs. Then, if the considered
faults manifest themselves in low frequencies, this leads to select as a low pass
filter with the static gain and the cutting frequency, the highest possible.
With regards to the robustness objectives, it is required that the effects of
the disturbances on the residuals are as “small” as possible. This implies to
choose the gain of as
“small” as possible in the frequency range where the energy content of the
disturbances is located. In other words, it is required a high attenuation
level of the disturbances on the residuals in the appropriate frequencies (see Section
3 where a practical case is presented). However, both sensitivity to
faults and robustness against disturbances might be not achieved in some cases.
Faults having similar frequency characteristics as those of disturbances might
go undetected. In such cases, the proposed formulation provides a framework to
find a good balance between fault sensitivity and robustness via the
construction of the shaping filters and . Finally, note
that the work reported in [16, 17] could be an interesting method to
select and .
2.2.2. Synthesis of the FDI Filter
In the following, a solution is derived in
terms of a SDP (Semi Definite Programming) problem. To proceed, let and be the state-space representations of and
respectively, and denote and the associated order, that is, and .
Using some linear algebra manipulations, it can be verified from (14) that the
matrices , , and of the state-space representation of are defined
according to:
Having in mind the definition of , , and ,
it can be noted that the
optimization
problem formulated by (30) is non convex since it involves simultaneously the
residual structuring matrices
and
and
the filter state-space matrices , , and .
A solution to this problem may consist in chosen heuristically
and
. However, as it has been outlined in [10], there is no
guarantee to the optimal solution.
The following lemma which is an adaptation of Proposition 1 in
[8] for our purpose, gives the solution to this problem. The proof is omitted
here as it can be found in [8].
Lemma 2. Let , , , be the evaluation of , , , at each vertex of the polytope .
Assume that and do not depend of (see Remark 3 for a
discussion about this assumption) and let .
Then, there exists a solution of (31) if and only if there exists and and and two symmetric matrices and solving the following SDP problem involving
constraints:
Moreover, is a full order filter if .
The state space realization of the LPV filter is then computed using the barycentric coordinates of given by (7), so that:
, , and are the state space matrices of the N LTI filters
that are deduced from the unique solution
following the procedure described in [14].
Remark 3. As
it is outlined in Lemma 2, it is required that and do not depend on . This assumption is also done for to be computed. If, by construction, such an
assumption is not verified, the solution consists in post filtering by a LTI filter at a high cutting frequency.
This solution has already been proposed in [14].
3. Application: The Secondary Circuit of a NPP
To illustrate the benefits of the proposed approach,
experimental results obtained from the secondary circuit of a Nuclear Power
Plant (NPP) are provided in this section.
In a NPP, the secondary circuit erosion can occur in the
steam generators, releasing radio nuclides into the secondary coolant. This
problem is now well understood and has been the subject of some studies initiated
by EDF (Eléctricité De France) for its pressurized water reactors (PWR) to
overcome and master the steam generator corrosion problems. The main
degradation process is to be controlled by careful optimization of the
secondary water chemistry. There is a need to ensure that the optimum secondary
chemistry regime is selected and maintained. So, the process of erosion—corrosion of steel piping and other components is of critical importance during
operation of a NPP. Feed water is
adjusted by hydrazine, so that the
is maintained within the limits specified by the nuclear authority (norm
ISO-14253-1).
The NPP under consideration is a pressurized water
reactors (PWR), located in France.
During the winter 2002, and thanks to a mandatory period of maintenance
operations, it has been possible to measure and record a set of experimental
data on the secondary circuit. The aim was to optimally control hydrazine and through an adaptive LQG control
scheme. The designed controller has been successfully tested under real
operational conditions [18].
The dynamics of hydrazine and ammoniac concentrations behavior in
the secondary circuit of the NPP can be expressed as follows:
is the circuit's
water volume,
the
water extraction flow rate of the condenser and is a parameter depending of the NPP operating conditions. and represent hydrazine,
ammoniac and oxygen concentrations respectively. is the flow rates of the pumps used to inject hydrazine in the
circuit. Moreover, the system present a time delay corresponding to the chemical reaction after
the introduction of hydrazine in the circuit. It is assumed that the is measured, that is,
where
denotes the measurement noise,
also denotes the morpholine concentration,
and
are the basicity
constants of the ammoniac and morpholine respectively.
Taken into account the dynamical equations (39), it follows that
where represents the state vector. represents the measurement noise of the
hydrazine sensor. is the image of the measurement noise of the
sensor via the relation (40). Then,
since (40) is static we will consider that an ammoniac concentration measure is
available through the
sensor. Characteristics
of are then deduced from the following equation,
which is the inverse of (40):
Figure 5 presents the behavior of the time varying parameter during a period of 3 days. We assume here that is not affected by the considered faults. As
it can be seen on Figure 5, varies between
and
with:
Figure 5: The time varying parameter .
The considered faults are hydrazine sensor faults and
sensor faults. Note that monitoring
of
sensors is a key feature for
well functioning the overall system.
The relation between the ammoniac measurement and the
measurement is only algebraic (see (41)),
then the
sensor fault is directly transmitted
to the ammoniac measurement. Therefore, we can consider an ammoniac sensor
fault in place of a
sensor fault.
Consequently, the following state space representation derived from (42) models
the failing behavior of the secondary circuit (the notations are chosen to be
consistent with those used in Section 2):
represent ammoniac sensor faults and hydrazine sensor faults. In this model, the
time delay due to actuators is approximated using a first order Pade
approximation. The model (44) corresponds to the model described in Figure 1,
where .
It follows that the considered polytope becomes a simple segment since .
For the FDI purpose, two filters and are computed such that the two residuals and satisfy the following requirements:
(i) is sensitive to
sensor faults through the (fictitious) ammoniac sensor and
robust to hydrazine sensor faults.(ii) is sensitive to hydrazine sensor faults and
robust to ammoniac sensor faults.
This method allows to isolate sensor faults uniquely. Therefore,
we consider a different model for each filter to be synthesized. For the design
of ,
the following model is used
where the disturbances vector includes the oxygen concentration, the measurement
noises and the hydrazine sensor fault, that is, .
For the design of ,
the following model is retained
where the augmented disturbances vector takes into account the
ammoniac sensor faults;
.
According to the methodology developed in the Section 2, two
polytopic models and are built as illustrated on Figure 2. To save
place and for a better understanding, the different steps are only detailed for .
Here, because the system is placed in an open-loop control law, it follows from that (for clarity the index “1” is ignored from now):
where . Following the developments in Section 2, the fault detector design problem
turns out to be the design of satisfying the following objectives:
Figure 6 gives an illustration of this problem.
Figure 6: Filter
synthesized scheme.
Finally, following the method describes in Section 2, the
problem is recasted into the setup depicted in Figure 3 where the model is defined according to:
and
are the two components of the structuring
matrix .
As it is outlined in Remark 2 an important step in the
proposed method is the choice of the shaping filters and .
Similarly to the developments presented in Section 2,
is refereed to the robustness objectives against and
to the sensitivity requirements against .
Here, due to the definition of , it
is natural to choose
such as:
The weighting functions , , , , and
allow to manage separately the robustness
objectives against , , , , and respectively. The interested reader can refer
to [10] or [19] if necessary. These weighting functions are deduced from an off
line spectral analysis procedure of available measurements according to:
The parameters , , , , and allow to manage the gain of the weighting
functions separately. They are optimized by performing an iterative refinement.
Remember that the goal is to minimize the effects of disturbances on the
residual and maximize the effects of faults on .
The numerical values of them have been fixed to
The method described in Section 2.2.2 is then used to synthesize
the filter ,
and the structuring matrices
and
. For the SDP
optimization problem computation, the SDPT3 solver is used.
To analyze the computed solution, the principal gains and of the closed loop transfers and are plotted versus the objectives and for some (see Figure 7). The notation “” is
introduced to outline that the analysis is performed with respect to each
component of . As it can be seen on the figures, for each synthesis,
and
for all considered values of .
This indicates that the requirements (48) are satisfied for the considered
values of and by virtue of Lemma 2, we know that it
still yields for all values of .
Figure 7: Behavior of the principal
gains of the closed loop transfers and versus the shaping objective filters (in dB).
Simulation Results
The FDI unit is implemented within the simulator of the secondary circuit. For simulating faults, a variation of ten percent of sensors
measurements between
hours and
hours for the
sensor and between hours and hours for the
hydrazine sensor is made. Figures 8, 9 and 10 illustrate the behavior of the
residual signals and
in both fault free and faulty situations for
the aforementioned period of 3 days. As expected, it can be seen from figures
that is only sensitive to
sensor faults and is only sensitive to hydrazine sensor faults.
Finally, a sequential Wald decision test is also implemented
within the simulator to make a final decision about the faults. The
probabilities of non-detection and false alarms have been fixed to 0.1%. The
results are presented in Figures 8, 9 and 10. As it can be seen, all faults are
successfully detected and isolated.
Figure 8: Behavior of , and the decision test-fault-free situation.
Figure 9: Behavior of , and the decision test-pH sensor fault (80 h–85 h).
Figure 10: Behavior of , and the decision test-hydrazine sensor fault (120 h–125 h).
4. Conclusion
The problem which is addressed in this paper is that of
designing FDI filters for dynamic systems that can be described by LPV
polytopic models. The method can be seen as a generalization of the well known setting for LTI systems. The norm for LPV systems is used to formulate the
robustness specifications and a new index, that is, the
index, which is deduced from the -norm for LTI
systems, is introduced for fault sensitivity specifications. As a result,
various design goals and trades-off can be formulated and managed in a
systematic way by means of some high level design parameters formulated in
terms of dynamic weighting functions. A key feature of the proposed technique
is that the remaining control and measurement canals are optimally merged to
build the fault indicating signals. The resulting static matrices are also
optimized via LMI together with the dynamic FDI filter. The proposed technique is
also appropriate for fault diagnosis in nonlinear systems which can be
approximated efficiently by LPV models to cover a wider range of operating, and
to cope with rapid parameter variations. The method has been successfully
applied to experimental data set coming from the secondary circuit of a nuclear
power plant in France.
Acknowledgment
The authors would like to thank Prof. Kemin Zhou for his valuable comments and suggestions
that help us to clarify some key features.