Abstract

This paper presents an enhanced robust control design structure to realise fault tolerance towards sensor faults suitable for multi-input-multi-output (MIMO) systems implementation. The proposed design permits fault detection and controller elements to be designed with considerations to stability and robustness towards uncertainties besides multiple faults environment on a common mathematical platform. This framework can also cater to systems requiring fast responses. A design example is illustrated with a fast, multivariable and unstable system, that is, the double inverted pendulum system. Results indicate the potential of this design framework to handle fast systems with multiple sensor faults.

1. Introduction

Growing demands for plant or system availability, reliability, and survivability have prompted active research in fault tolerant control systems (FTCSs) [1, 2]. FTCSs are designed to accommodate component faults automatically by ensuring overall system stability and acceptable performance. A typical FTCS design incorporating separate control and fault detection elements can achieve fault tolerance objectives, but without due considerations given to significant interactions between the elements such as those described in [3, 4]. In addition, addressing issues concerning uncertainties is crucial as practical problems associated with variations in actual plant operating range are undesirable.

Fault detectors are typically based upon the use of process models [57]. Data from the monitored plant is input to these algorithms and the outputs are compared with the corresponding plant outputs. If there are discrepancies, then it is an indication that at least one fault has occurred. The model-based approach to designing sensor FTCS employs mathematical manipulation of available signals, that is, analytical redundancy, via suitably designed controllers to accommodate for faults rather than using extra hardware (sensors/actuators).

1.1. Integrating Control and Fault Detection in FTCS

An integrated approach [811] where fault detection and controller elements are designed with consideration to the overall system stability or interaction is favourable as the reliability of operation can be determined in a mathematically sound setting offering fast control responses in addition to the availability of the established solution for incorporating robustness towards uncertainties.

In this paper, a robust controller-based MIMO FTCS which integrates the fault detection and controller elements in a single design is presented. A fault indicating residual is utilised as a function of control. The residual signals act as weighting factors, which put corresponding emphasis on nominal controller and fault accommodating controller. The FTCS structure proposed allows the plant to be controlled by a nominal controller that ensures the achievement of best performance objectives, when sensor faults and uncertainties are not present, while preserving the stability at a lower degree of system performance in the presence of major sensor faults [11, 12]. The proposed structure can handle systems with fast responses, multiple sensor faults, and modelling uncertainties.

Note that purely robust control-based FTCS such as described in [13, 14] ensures robustness towards minor faults only; faults are modelled as very small perturbations on the system. As demonstrated by [13, 14], it is not possible for a purely robust control structure to maintain high performance, when faults are not present as they are designed using worst case criterion.

2. Problem Statement

Assuming that the MIMO plants and controllers are described mathematically in state-space form as follows: ̇𝑥(𝑡)=𝐴𝑥(𝑡)+𝐵𝑢(𝑡),𝑦(𝑡)=𝐶𝑥(𝑡)+𝐷𝑢(𝑡),(1) where 𝑥𝑅𝑛 is state vector, 𝑢𝑅𝑙 is the input vector, while 𝑦𝑅𝑚 is the measured output vector.

𝐴,𝐵,𝐶, and 𝐷 are known matrices with appropriate dimensions related to the system dynamics. In addition, 𝜎(𝑀) denotes the largest singular value of 𝑀. 𝐻 denotes the Banach space of bounded analytic functions with the norm defined as 𝐹=sup𝜔𝜎(𝐹(𝑗𝜔)) for any 𝐹𝐻.

Definition 1. All MIMO transfer matrix representations have appropriate dimensions and are proper real-rational matrices, stabilisable, and detectable. A state space rational proper transfer function is denoted by 𝐺𝑠=𝐴𝐵𝐶𝐷=𝐶𝑠𝐼𝐴1𝐵+𝐷.(2) Furthermore, let 𝑃 be a block matrix,𝑃=𝑃11𝑃12𝑃21𝑃22.(3) Therefore, the linear fractional transformation of 𝑃 over 𝐹 is defined as 𝐹𝑙𝑃,𝐹=𝑃11+𝑃12𝐹𝐼𝑃22𝐹1𝑃21,(4) where 𝐹 is assumed to have appropriate dimensions and (𝐼𝑃22𝐹)1 is well defined.

2.1. Sensor Faults Defined

Sensor fault symptoms can be observed as measurements that are unavailable, incorrect, or unusually noisy. These faults may occur individually or concurrently or simultaneously, resulting in total system failure or degradation in performance. Significant information about the influence of faults on a process cannot be known without the inclusion of its model in the design. Additive faults provide a suitable framework for sensor faults and are modelled as additional input signals to a system [5], ̇𝑥(𝑡)=𝐴𝑥(𝑡)+𝐵𝑢(𝑡),𝑦(𝑡)=𝐶𝑥(𝑡)+𝐷𝑢(𝑡)+𝑓𝑠(𝑡),(5) where 𝑓𝑠(𝑡)𝑅𝑚 denote sensor faults. Hence 𝑦(𝑠)=𝐺𝑝(𝑠)𝑢(𝑠).(6) The variable 𝑦(𝑠) denotes all available sensor outputs. When output sensor faults occur in the plant as shown in (5), the measured outputs become 𝑦(𝑠)=𝑦(𝑠)+𝑓𝑠(𝑠).(7) Due to the existence of fault represented by 𝑓𝑠(𝑠), a conventional controller cannot usually satisfy required performance and the closed-loop control system may even become unstable. A sensor fault-compensating controller can be introduced to augment a nominal controller designed for best performance. However, since the structure of the system as seen in Figure 1 is virtually an internal model controller [15], conditions for physical realizability need to be observed. To ensure that the fault-compensating controller, 𝑄 is well defined and proper, the transfer matrix representation from 𝑓𝑠(𝑠) to controller output 𝑢(𝑠) must exist and is also proper. Therefore, 𝑓𝑠(𝑠)=𝑊𝑠(𝑠)𝑓𝑠(𝑠).(8) By appropriate use of input weight, 𝑊𝑠(𝑠), the input 𝑓𝑠(𝑠) can be normalised and transformed into the physical input, 𝑓𝑠(𝑠). Consideration of such sensor fault models has been shown to be suitable for use in formulating the FTCS objectives for the rejection of sensor faults as an optimisation problem. Uncertainties affecting the sensors can also be classified as a subset of 𝑓𝑠(𝑠). Figure 1 shows the block diagram illustrating the interconnections assumed for the formulation 𝐻 problem associated with the proposed FTCS design.

2.2. Fault Indicating Residuals

The presence of sensor faults and uncertainty vectors defined in Section 2.1 can be reflected by a fault indicating residual, since a filtered estimation can be obtained via coprime factorisation of the plant model, 𝐺𝑝(𝑠) [11, 12]. Let 𝐺𝑝(𝑠)=𝑀1(𝑠)𝑁(𝑠).(9) Hence, from (8) and (9), the fault indicating residual denoted by 𝑓𝑟(𝑠) can be defined as 𝑓𝑟(𝑠)=𝑁(𝑠)𝑢(𝑠)𝑀(𝑠)𝑦(𝑠)=𝑁(𝑠)𝑢(𝑠)𝑀(𝑠)𝑦(𝑠)+𝑓𝑠(𝑠)=𝑀(𝑠)𝑊𝑠(𝑠)𝑓(𝑠).(10)

2.3. Integrating the Controller Element

Now, since 𝑓𝑟(𝑠) reflects the presence of faults and uncertainty, it can be utilised as an input to the fault compensating controller. The perturbations caused can then be minimised by control actions due to the nominal controller and fault compensating controller. The control signal vector can be expressed as follows: 𝑢(𝑠)=𝑢𝑘(𝑠)+𝑢𝑞(𝑠),(11) where 𝑢𝑘(𝑠)=𝐾(𝑠)𝑒(𝑠)(12) and 𝑢𝑘(𝑠) denotes nominal controller (𝐾(𝑠)) output, and 𝑢𝑞(𝑠) denotes sensor fault compensator (𝑄(𝑠)) output. Error from feedback is denoted by 𝑒(𝑠) whereby 𝑟(𝑠) denotes input demand. Thus, from (10), 𝑓𝑟(𝑠) is utilised in the following manner: 𝑢𝑞(𝑠)=𝑄(𝑠)𝑓𝑟(𝑠)=𝑄(𝑠)𝑀(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠).(13) From (6), (7), and (8), 𝑒(𝑠) can be expressed as 𝑒(𝑠)=𝑟(𝑠)𝑦(𝑠)=𝑟(𝑠)𝑦(𝑠)𝑓𝑠(𝑠)=𝑟(𝑠)𝐺𝑝(𝑠)𝑢(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠).(14) By substituting (12), (13), and (14) into (11), the following is derived: 𝑢(𝑠)=𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1×𝐾(𝑠)𝑟(𝑠)𝐾(𝑠)+𝑄(𝑠)𝑀(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠).(15) Thus, 𝑦(𝑠)=𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1×𝐾(𝑠)𝑟(𝑠)𝐾(𝑠)+𝑄(𝑠)𝑀(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠).(16) The plant output expression in (16) shows that in the absence of sensor faults and uncertainties, the output closed-loop system is only reliant on the nominal controller 𝐾(𝑠), allowing for high performance during healthy operation. Note that the fault detection scheme generating the above-mentioned fault indicating residual does not need to be made robust, since the fault indicating residual is mainly used as an activating signal for 𝑄(𝑠). It is thus not essential to identify nor to estimate the source of the faults, hence even if the presence of 𝑓𝑟(𝑠) is due to uncertainties and not faults in the sensors, 𝑄(𝑠) will still provide the necessary control signals to compensate for such perturbations thereby introducing robustness to the system.

2.4. Sensor Fault Compensator Realisation

The sensor fault compensator 𝑄(𝑠) is integrated into the framework by utilising 𝑓𝑟(𝑠) as a function of control. The design 𝑄(𝑠) is achieved with the 𝐻 technique. A performance weights 𝑊ftc(𝑠) can be defined to establish postfault performance requirements, which emphasise on stability rather than high performance. The corresponding solution for achieving 𝑄(𝑠) is by minimising the following optimisation criterion: 𝛾=min𝑄(𝑠)𝐹𝑙𝑃𝑓(𝑠),𝑄(𝑠).(17) Therefore, the standard 𝐻 problem is specified in (17) for which the corresponding transfer functions from 𝑓𝑠(𝑠) to 𝑧(𝑠) must satisfy. If the controller 𝑄(𝑠) in (17) is found, then the closed-loop system is said to have robust performance towards uncertainty and sensor faults; it is well known that a system satisfies robust performance if and only if it is robustly stable with respect to norm-bounded matrix perturbation [16]. The equivalent linear fractional transformation (LFT) block diagram for the 𝐻 problem stated above is shown in Figure 2.

Thus, 𝑧(𝑠)𝑓𝑟(𝑠)=𝑃11(𝑠)𝑃12(𝑠)𝑃21(𝑠)𝑃22(𝑠)𝑃𝑠(𝑠)𝑓𝑠(𝑠)𝑢𝑞(𝑠).(18) From (10), 𝑃21 and 𝑃12 can be derived as 𝑃21(𝑠)=𝑀(𝑠)𝑊𝑠(𝑠),𝑃12(𝑠)=0.(19) Now, note that 𝑢𝑘(𝑠)=𝐾(𝑠)𝑟(𝑠)𝑦(𝑠)=𝐾(𝑠)𝑟(𝑠)𝐺𝑝(𝑠)𝑢(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠)=𝐾(𝑠)𝑟(𝑠)𝐾(𝑠)𝐺𝑝(𝑠)𝑢𝑘(𝑠)+𝑢𝑞(𝑠)𝐾(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠),(20) and thus, 𝑢𝑘(𝑠)=𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝑟(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝐺𝑝(𝑠)𝑢𝑘(𝑠).(21)

Also 𝑧(𝑠)=𝑊ftc(𝑠)𝑦(𝑠)=𝑊ftc(𝑠)𝐺𝑝(𝑠)𝑢(𝑠)+𝑊𝑠(𝑠)𝑓𝑠(𝑠)=𝑊ftc(𝑠)𝐺𝑝(𝑠)𝑢𝑘(𝑠)+𝑊ftc(𝑠)𝐺𝑝(𝑠)𝑢𝑞(𝑠)+𝑊ftc(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠).(22) Substituting (21) into (22), 𝑧(𝑠)=𝑊ftc(𝑠)𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝑟(𝑠)𝑊ftc(𝑠)𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝐺𝑝(𝑠)𝑢𝑞(𝑠)+𝑊ftc(𝑠)𝐺𝑝(𝑠)𝑢𝑞(𝑠)𝑊ftc(𝑠)𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1×𝐾(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠)+𝑊ftc(𝑠)𝑊𝑠(𝑠)𝑓𝑠(𝑠).(23) Ignoring the reference input r(s), we have 𝑃11(𝑠)=𝑊ftc(𝑠)𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1×𝐾(𝑠)𝑊𝑠(𝑠)+𝑊ftc(𝑠)𝑊𝑠(𝑠)=𝑊ftc(𝑠)𝐼𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝑊𝑠(𝑠)=𝑊ftc(𝑠)1+𝐺𝑝𝑠𝐾𝑠1𝑊𝑠(𝑠),𝑃12(𝑠)=𝑊ftc(𝑠)𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1×𝐾(𝑠)𝐺𝑝(𝑠)+𝑊ftc(𝑠)𝐺𝑝(𝑠)=𝑊ftc(𝑠)𝐼𝐺𝑝(𝑠)𝐼+𝐾(𝑠)𝐺𝑝(𝑠)1𝐾(𝑠)𝐺𝑝(𝑠)=𝑊ftc(𝑠)1+𝐺𝑝𝑠𝐾𝑠1𝐺𝑝(𝑠).(24) Note that the following matrix operation (Zhou, Doyle & Glover, 1996, page 23) has been used in the derivation of (24): 𝐴111+𝐴111𝐴12(𝐴22𝐴21𝐴111𝐴12)1𝐴21𝐴111=(𝐴11𝐴12𝐴122𝐴21)1.(25) With the conditions laid out, the closed-loop system shown above is guaranteed to be tolerant to sensor faults and modelling uncertainty, stable for any nonlinear, time varying, and stable 𝐾(𝑠) and 𝑄(𝑠) due to the minimisation of the transfer matrix between fault-generating signal 𝑓𝑠(𝑠) to the performance evaluation signal 𝑧(𝑠).

3. A Numerical Simulation Example

An experimental study of the FTCS implementation on a double inverted pendulum system for tolerance towards sensor faults is shown next to illustrate the feasibility of the proposed design method. The implementation is tested for fault tolerance towards sensors in nominal and under plant uncertainty conditions.

3.1. The Double Inverted Pendulum System

The double inverted pendulum system is an example of a chaotic system. The system is a fast, multivariable, nonlinear, and unstable process. The pendulum system is a standard classical control test rig for the verification of different control methods, and is among the most difficult systems to control in the field of control engineering. Similar to the single inverted pendulum problem, the control task for the double inverted pendulum is to stabilise the two pendulums. The position of the carriage on the track is controlled quickly and accurately, so that the pendulums are always erected in their inverted position during such movements.

The double inverted pendulum system is made up of two aluminium arms connected to each other with the lower arm attached to a cart placed on a guiding rail, as illustrated in Figure 3. Data used in this case study has been obtained from [9]. The aluminium arms are constrained to rotate within a single plane and the axis of rotation is perpendicular to the direction of the force acting on the cart motion 𝑓. The cart can move along a linear low-friction track and is moved by a belt driven by a servo motor system. Sensors providing measurements of cart position 𝑥𝑐, the pendulums angles 𝜃1 and 𝜃2, controller output, 𝑢, and motor current 𝑖 are assumed available for the purpose of control. The control law has to regulate the lower-arm angle and upper-arm angle, 𝜃1 and 𝜃2, respectively, from an initial condition, and the control of the position of the cart 𝑥𝑐 from an initial position.

3.2. Nominal High-Performance Controller

An 𝐻 loop shaping controller, as high-performance nominal controller 𝐾 for the MIMO system, is designed using the MATLAB command ncfsyn.m. The specification function 𝑊𝑝 is augmented to K in the manner shown in Figure 4. Sensors for detecting 𝑒𝑥 (cart positional error), 𝜃1 and 𝜃2, are fault prone sensors. Motor voltage and current are denoted by 𝑢 and 𝑖, respectively. The controller output variable is the corresponding motor voltage demand 𝑢. The controller performance was tested on the SIMULINK model of the double inverted pendulum. Initial conditions are with 𝜃1=0.05rad and 𝜃2=0.04rad. The cart movement command signal 𝑟𝑐 is initiated at 0.5 m and at 0.5 m after 50 seconds, is shown in Figure 5, while system responses are shown in Figure 6. It is observed that the output responses are within limits of specifications, and the cart position set points have been achieved in a stable and smooth manner.

3.3. FTCS Design and Implementation

The nominal model of the double inverted pendulum model is described by its left coprime factors to ensure well posedness. The double inverted pendulum model without modelling uncertainty is considered for the representation of the nominal plant in the fault indicating residual generator setup. Fault indicating residuals are denoted by 𝑓𝜃1, 𝑓𝜃2 and 𝑓𝑒𝑥 for faults in the corresponding sensors.

The interconnection of the system is setup and the design of the controller sensor fault compensating controller, 𝑄 is automated with the command hinfsyn.m provided in MATLAB’s 𝜇-analysis and synthesis toolbox [17], which iteratively solves the optimisation criterion set out in (17). When 𝛾 value of below 1 is obtained, the solution of a satisfactory 𝑄 is used. This condition is only met with relaxations to the effects of additive faults, as it is obvious that total failure cannot be handled. Note that the performance weights 𝑊ftc(𝑠) (shown in the appendix) to establish postfault performance requirements reuse the elements in the original specification function 𝑊𝑝, which are related to the fault prone sensors, that is, sensors providing measurements of cart position 𝑥𝑐, the pendulums angles 𝜃1 and 𝜃2. The block diagram showing the augmentation of 𝑄 to nominal controller 𝐾 is illustrated in Figure 7.

3.4. Tests and Results

The following responses have been recorded from testing the FTCS by simulating the occurrence of faults in the relevant sensors. Sensor effectiveness indicating faults are simulated as deterioration of performance; 0%: no fault, 100%: total failure. Results are shown for conditions with and without modelling uncertainty. Responses of the inverted double pendulum system performances with the proposed FTCS, 𝐻, and 𝜇 controllers are recorded for comparison purposes.

Nominal Response, without Modelling Uncertainties and Sensor Faults
Nominal performances of all controllers for healthy system are recorded in Figure 8. Apparently the proposed FTCS produces faster cart positioning response compared to all other control system responses, initiating slightly higher overshoots in 𝜃1 and 𝜃2.

Multiple Sensor Faults without Plant Uncertainty
Multiple sensor faults are assumed to occur at 2, 4, and 6 seconds after the simulation has been initiated (𝑒𝑥 at 90% deterioration, 𝜃1 at 20% deterioration, and 𝜃2 at 10% deterioration, resp.). The output responses are shown in Figure 9. Observe that the proposed FTCS and the 𝜇 controller handled the faults and managed to achieve satisfactory control responses. However, stability could not be maintained by the 𝐻 controller.

Multiple Sensor Faults with Plant Uncertainty
Tests for control systems to handle system uncertainty and multiple sensor faults were also performed. Conditions were made similar to the tests performed for the nominal system with multiple sensor faults. The supremacy of the proposed FTCS to accommodate for faults even under the influence of system uncertainties is seen in Figure 10.

The 𝐻 controller could not handle this mode of fault and oscillates beyond control as shown. Meanwhile, both the proposed FTCS and the 𝜇 controller handled the fault satisfactorily.

Further Discussion
Overall, the proposed FTCS has managed to handle all pre- and postfault conditions satisfactorily, while maintaining the highest level of stability in all test scenarios. Although it seems that the 𝜇 controller could handle faults and modelling uncertainty as well as the proposed FTCS, it could not handle certain cases of single faults such as the cases shown in Figure 11 for the effect of 𝜃2 sensor fault at 10% deterioration. Responses of 𝜇 control system is too oscillatory and unstable.

4. Conclusion

The proposed FTCS has been observed to have managed all faults simulated in the nominal performance tests, while the two other control systems could not consistently maintain stability in a majority of fault scenario. Robust performance assessments showing the performance of the control systems when faced with system uncertainty in addition to sensor faults were also simulated. Again, it is observed that fault tolerance capability of the proposed FTCS has been maintained. The proposed improvement to the model-based FTCS structure provides a potential framework for the realisation of an integrated MIMO FTCS. This design framework is suitable as it inherently incorporates fault residuals as feedback and allows the application of established robust MIMO control design concept. The test results show the capability of the proposed FTCS to maintain availability and an acceptable level of performance for multiple deteriorated sensor conditions.

Appendix

Transfer matrix of 𝑄: 𝑢𝑞(𝑠)𝑓𝑒𝑥(𝑠)=𝛼1𝛽1,𝑢𝑞(𝑠)𝑓𝜃1𝜃2(𝑠)=𝑢𝑞(𝑠)𝑓𝜃3(𝑠)=𝛼2𝛽2,𝑢𝑘(𝑠)𝑓𝑒𝑥(𝑠)=𝛼3𝛽3,(A.1) where 𝛼1=(0.0001𝑠7+0.0025𝑠6+0.0465𝑠5+0.3162𝑠4+1.5660𝑠3+2.5422𝑠2+1.0939𝑠0.1242), 𝛽1=0.0004𝑠7+0.0088𝑠6+0.1299𝑠5+0.6940𝑠4, +2.8528𝑠3+3.3483𝑠2+2.4253𝑠+0.1423, 𝛼2=103(0.0001𝑠70.0032𝑠60.0603𝑠50.3832𝑠41.8085𝑠32.176𝑠20.9779𝑠+0.0841), 𝛽2=0.0004𝑠7+0.0088𝑠6+0.1299𝑠5+0.6940𝑠4+, 2.8528𝑠3+3.3483𝑠2+2.4253𝑠+0.1423𝛼3=(0.0001𝑠7+0.0016𝑠6+0.0223𝑠5+.

Transfer matrix of 0.1791𝑠4: +0.8204𝑠3+1.9258𝑠2+1.7793𝑠+0.2839) where 𝛽3=0.0006𝑠7, +0.0137𝑠6+0.1474𝑠5+0.8104𝑠4+2.8431𝑠3, +4.6326𝑠2+3.8566𝑠+1.5476, 𝐾𝑢𝑘(𝑠)𝑒𝑥(𝑠)=𝛼4𝛽4,𝑢𝑘(𝑠)𝜃1(𝑠)=𝛼5𝛽5,𝑢𝑘(𝑠)𝜃3(𝑠)=𝛼6𝛽6,𝑢𝑘(𝑠)𝑢(𝑠)=𝛼7𝛽7,𝑢𝑘(𝑠)𝑖(𝑠)=𝛼8𝛽8,(A.2)𝛼4=(0.0001𝑠7+0.0016𝑠6+0.0223𝑠5+0.1791𝑠4+0.8204𝑠3+1.9258𝑠2+1.7793𝑠+0.2839), 𝛽4=0.0006𝑠7+0.0137𝑠6+0.1474𝑠5+0.8104𝑠4, +2.8431𝑠3+4.6326𝑠2+3.8566𝑠+1.5476𝛼5=(0.003𝑠7+0.061𝑠6, +0.740𝑠5+4.942𝑠4+17.436𝑠3+26.050𝑠2+16.23𝑠+4.898)𝛽5=0.0006𝑠7, +0.0137𝑠6+0.1474𝑠5+0.8104𝑠4+2.8431𝑠3+4.6326𝑠2+3.8566𝑠+1.5476𝛼6=(0.005𝑠7, 0.115𝑠61.333𝑠58.249𝑠425.938𝑠335.97𝑠221.914𝑠6.633), 𝛽6=0.0006𝑠7+0.0137𝑠6+0.1474𝑠5+0.8104𝑠4+2.8431𝑠3+4.6326𝑠2+3.8566𝑠+1.5476.

Postfault performance weight matrix: 𝛼7=(0.00006𝑠7 where

(i)0.00149𝑠60.01616𝑠50.08897𝑠4 denotes the performance weight related to 0.30832𝑠30.49612𝑠20.40571𝑠0.16099);(ii)𝛽7= denotes the performance weight related to 0.0006𝑠7;(iii)+0.0137𝑠6+0.1474𝑠5+0.8104𝑠4 denotes the performance weight related to +2.8431𝑠3+4.6326𝑠2+3.8566𝑠+1.5476.

The performance function of the signals provided is weighted to characterise the following limits:

(i)limiting cart position tracking error 𝛼8=(0.00006𝑠7 at 0 m at high frequency and relaxed for low frequency at a maximum error of 0.04 m;(ii)limiting the vertical to lower arm angle 0.00159𝑠60.01862𝑠50.06867𝑠4 at 0 radians at high frequency and relaxed for low frequency at a maximum angle of 0.20 radians;(iii)limiting the vertical to upper arm angle 0.10104𝑠30.04271𝑠20.01119𝑠0.01105) at 0 radians at high frequency and relaxed for low frequency at a maximum angle of 0.22 radians.

System Interconnection and Synthesis of Q(s)
The appropriate system interconnection structure of P(s) which is the outer loop of the FTCS inclusive of the nominal controller, K(s), and fault indicating generation elements needs to be formed using MATLAB μ-toolbox instruction sysic.m [17]. Hence, Figure 12 is equivalent to Figure 13.
Following that, the sensor fault compensating controller, Q(s), which is an 𝛽8=0.0006𝑠7 controller closing the inner loop of the FTCS (i.e., closing the loop for the system interconnection obtained from P(s) shown above), can be solved with the MATLAB instruction, hinfsyn.m [17]. Since +0.0137𝑠6 hence, in this case,(i)k denotes the calculated +0.1474𝑠5+0.8104𝑠4 controller, that is, Q(s); (i)p denotes system interconnection P(s) as shown above;(iii)nmeas denotes number of fault indicating signals;(iv)ncont denotes the number of control inputs;(v)gmin, gmax, tol, and so on are as denoted in [17]. Finally, the closed-loop interconnection with Q(s) is shown as in Figure 14.

Acknowledgments

The authors gratefully acknowledge funding from Brunel University and the University of Malaya in order to complete this work.