Research Article  Open Access
M. Benini, M. Bonfè, P. Castaldi, W. Geri, S. Simani, "Design and Analysis of Robust Fault Diagnosis Schemes for a Simulated Aircraft Model", Journal of Control Science and Engineering, vol. 2008, Article ID 274313, 18 pages, 2008. https://doi.org/10.1155/2008/274313
Design and Analysis of Robust Fault Diagnosis Schemes for a Simulated Aircraft Model
Abstract
Several procedures for sensor fault detection and isolation (FDI) applied to a simulated model of a commercial aircraft are presented. The main contributions of the paper are related to the design and the optimisation of two FDI schemes based on a linear polynomial method (PM) and the nonlinear geometric approach (NLGA). The FDI strategies are applied to the aircraft model, characterised by tightcoupled longitudinal and lateral dynamics. The robustness and the reliability properties of the residual generators related to the considered FDI techniques are investigated and verified by simulating a general aircraft reference trajectory. Extensive simulations exploiting the Monte Carlo analysis tool are also used for assessing the overall performance capabilities of the developed FDI schemes, in the presence of turbulence, measurement, and model errors. Comparisons with other disturbancedecoupling methods for FDI based on neural networks (NNs) and unknown input kalman filter (UIKF) are finally reported.
1. Introduction
Increasing demands on reliability for safety critical systems such as aircraft or spacecraft require robust control and fault diagnosis capabilities as these systems are potentially subjected to unexpected anomalies and faults in actuators, inputoutput sensors, components, or subsystems. Consequently, fault diagnosis capabilities and requirements for aerospace applications have recently been receiving a great deal of attention in the research community [1, 2]. A fault diagnosis system needs to detect and isolate the presence and location of the faults, on the basis also of the control system architectures. Development of appropriate techniques and solutions for these tasks are known as the fault detection and isolation (FDI) problem. There are, broadly speaking, two main approaches for addressing the FDI problem, namely, hardwarebased and modelbased techniques [3, 4]. A common and important approach in modelbased techniques is known as the residualbased method. A number of researchers have developed residualbased methods for dynamic systems such as the parity space [5], state estimation [6], unknown input observer (UIO), Kalman filters (KFs) [3], and parameter identification [6]. Intelligent techniques [7] can be also exploited. Furthermore, the Massoumnia's geometric method [8] was successfully extended to nonlinear systems [9, 10]. A crucial issue with any FDI scheme is its robustness properties and a viable procedure for practical application of FDI techniques is really necessary. Moreover, robust FDI for the case of aircraft systems and applications is still an open problem for further research.
The first part of this work deals with the residual generator design for the FDI of inputoutput sensors of a general aviation aircraft subject to turbulence, wind gust disturbances, and measurement noises. The developed PM scheme belongs to the parity space approach [5] and it is based on an inputoutput polynomial description of the system under diagnosis. In particular, the use of inputoutput forms allows to easily obtain the analytical description for the disturbancedecoupled residual generators. These dynamic filters, organised into bank structures, are able to achieve fault isolation properties. An appropriate choice of their parameters allows to maximise robustness with respect to both measurement noise and modelling errors, while optimising fault sensitivity characteristics. The development of NLGA methodology is based on the works by De Persis and Isidori [10]. It was shown that the problem of the FDI for nonlinear systems is solvable if and only if there is an unobservability distribution that leads to a quotient subsystem which is unaffected by all faults but one. If such a distribution exists, an appropriate coordinate transformations in the state space can be exploited for designing a residual generator only for the observable subsystem. This technique was applied for the first time to a vertical takeoff and landing (VTOL) aircraft with reference to a reducedorder model [11]. The NLGA residual generators have been designed in order to be analytically decoupled from the vertical and lateral components of the wind (gusts and turbulence). Moreover, a new full analytical developed mixed optimisation is proposed in order to design the NLGA residual generators so that a good tradeoff between the fault sensitivity and the robustness with respect to measurements and model errors is achieved. The designed residual generators have been tested on a PIPER PA30 aircraft flight simulator that was implemented in MatlabSimulink environments. With respect to the related works by the same authors [12, 13], the main contribution of this paper regards the enhancement in the designs of the proposed FDI schemes. Moreover, the final performances have been evaluated by adopting a typical aircraft reference trajectory embedding several steadystate flight conditions, such as straight flight phases and coordinated turns. Comparisons with different disturbancedecoupling methods for FDI based on neural networks (NNs) and unknown input Kalman filter (UIKF) have been also provided. Finally, extensive experiments exploiting Monte Carlo analysis are used for assessing the overall capabilities of the developed FDI methods, in the presence of uncertainty, measurement, and modelling errors.
2. Aircraft Model Overview
This section recalls briefly the description of the monitored aircraft whose main parameters and variables are reported in Table 1.

The considered aircraft simulation model consists of a PIPER PA30, based on the classical nonlinear degrees of freedom (DoF) rigid body formulation [14] whose motion occurs as a consequence of applied forces and moments (aerodynamic, propulsive, and gravitational). A set of local approximations for these forces has been computed and scheduled depending on the values assumed by true airspeed (TAS), curvature radius, flight path angle, altitude, and flap deflection. In this way, it is possible to obtain a mathematical model for each flight condition. This model is suitable for a statespace representation, as it can be made explicit. The parameters in the analytic representation of the aerodynamic actions have been obtained from wind tunnel experimental data, and the aerodynamic actions are expressed along the axes of the wind reference system. It should be observed that aerodynamic forces and moments are not implemented by the classical linearised expressions (stability derivatives) but by means of cubic splines approximating the nonlinear experimental curves. The nonlinear DoF model has been completed by means of the PIPER PA30 propulsion system consisting of two pistons aspirated engines, with the throttle valve aperture as input and the overall thrust intensity as output. The overall simulation model, used to perform all the following tests, consists of the aircraft DoF flight dynamics and the engine model completed with the model of inputoutput sensors, the servo actuators, the atmosphere turbulence Dryden description, the wind gust disturbances, and a classical autopilot. Moreover, the sensor models embed all the possible sources of disturbance (calibration and alignment errors, scale factor, white and coloured noises, limited bandwidth, gsensitivity, gyro drift, etc.).
The linear model used by the proposed PM FDI approach described in Section 3 embeds the linearisation both of the DoF model and of the propulsion system as follows: with where denotes the variations of the considered variables while and are the control inputs and the disturbances, respectively. The disturbance contribution of the wind gusts as air velocity components, , , and , along body axes was also considered. The output equation associated with the model (1) is of the type , where the rows of correspond to rows of the identity matrix, depending on the measured variables.
On the other hand, regarding the NLGA FDI scheme described in Section 4, it requires a nonlinear input affine system [10], but the adopted simulation model of the aircraft does not fulfil this requirement. For this reason, the following simplified aircraft model is used: where are the aerodynamic coefficients; are the engine parameters; and , are the vertical and lateral wind disturbance components. In particular, the model of (3) has been obtained on the basis of some assumptions. In particular, the expressions of aerodynamic forces and moments have been represented by means of series expansions in the neighbourhood of the steadystate flight condition, then only the main terms are considered. The engine model has been simplified by linearising the power with respect to the angular rate behaviour in the neighbourhood of the trim point. The secondorder coupling between the longitudinal and lateraldirectional dynamics have been neglected. The body axis component of the wind has been neglected. In fact, the aircraft behaviour is much more sensitive to the body and body axis wind components. Finally, the rudder effect in the equation describing the dynamics has been neglected. It is worth noting that Section 5 has shown that the designs and the simulations of the NLGA residual generators are robust with respect to the last approximation. In fact, the model of the dynamics will never be used.
3. PM Residual Generators
Let us consider the inputoutput representation of a continuoustime, timeinvariant linear dynamic system affected by faults and disturbances in the form where is the output vector, is the input vector, is the disturbance vector, and is the fault vector; , , , and are known polynomial matrices of proper dimensions.
Models of type (4) can be frequently found in practice by applying wellknown physical laws to describe the inputoutput dynamical links of various systems. Algorithms to transform multivariable statespace models to equivalent multipleinputmultipleoutput (MIMO) polynomial representations and vice versa are available [15]. Suitable software routines for multivariable system transformations have been implemented by the authors in the Matlab environment. In fact, the Matlab software for statespace and transfer function conversions is not able to manage directly MIMO models, since they are considered as concatenations of singleinputsingleoutput (SISO) systems.
An important aspect of the residual generator design concerns the decoupling properties of the disturbance . The decoupling can be obtained premultiplying all the terms of (4) by the matrix , that is, the left nullspace of the matrix : Hence, the residual generator for the system of (4) is represented by where it is assumed that and is a polynomial row vector. The polynomial can be arbitrarily selected among the polynomials with degree greater than or equal to , where is the maximum rowdegree of the pair . Moreover, if all the roots of lie in the open lefthalf plane, it assures the stability of the filter of (6). Without loss of generality, it is assumed that . Remark 1. If the matrix is of fullcolumn rank (i.e., ), has dimension . Therefore, a polynomial matrix , whose rows represents a minimal polynomial basis of , has rows and columns.
This work is focused on the problem of detecting and isolating additive faults acting on the input and output sensors of the monitored system. If the inputoutput measurements are modelled by the relations of (7): the system of (4) becomes under the assumptions that . Thus, the residual generator of (6) is written as Remark 2. The residual generator described by (7) and (9) can be seen as an errorsinvariables (EIV) model [16] with respect the input and output variables, as the measurements that feed the residual function are affected by additive faults. This description highlights the importance of the residual generator in the form of (9).Remark 3. The diagnostic capabilities of the residual generator of (6) strongly depend on the choice of the terms and . This paper proposes a method for the design of these polynomials, under the assumption that is a scalar and, consequently, is a vector. The rationale of this assumption is commented in Section 3.2 where the fault isolation method is proposed.
In the following, the freedom design in the selection of the rows of the polynomial matrix is investigated when . These degrees of freedom are used to optimise the sensitivity properties of with respect to the fault , for example, by maximising the steadystate gain of the transfer function .
If () are the row vectors of the basis , can be expressed as linear combination of these vectors: where are real constants maximising: with the constraint Under these assumptions, when the fault is a stepfunction of magnitude , the steadystate residual value is If the following real vectors are defined as the problem of the maximisation of the residual fault sensitivity can be recast as follows.
Proposition 1. Given the vector , the vector that maximises the steadystate fault sensitivity, that is, the function given by the expression under the constraint of (12), can be found by solving
The solution to the problem described by Proposition 1 can be derived as follows. The constraint of (12) describes a hypersphere, whilst the expression of the function of (15) is a hyperplane. The unknown coefficients must belong to both the hyperplane and the hypersphere. Therefore, the points of tangency between the hypersphere and the hyperplane represents the solutions that maximise or minimise . As shown below, the solution of the problem described by Proposition 1 exists and is unique.
Proof. From (12), is expressed as a function of , , and it is substituted into (15):
By computing , that is,
and squaring the expression, after algebraic manipulation:
an expression in the form of is obtained, where
The unknown vector , under the constraint of (12), can be expressed as follows:
where is the th element of the vector . The vector represents the squares of the solution of the problem of Proposition 1.
Let us indicate the set of the vectors whose elements are the square roots of the elements of . As every element can be taken both with signs “+” and “”, such vectors are . Therefore, the solution of Proposition 1 can be reformulated as
Remark 4. The matrix can be expressed as , where is a matrix with equal columns. If , this assumption guarantees the existence of , and consequently the existence and the uniqueness of the solution . Obviously, if and , it is sufficient to express as function of the remaining variables and to reapply the same procedure.
Remark 5. The same solution can be found by maximising the function . Due to the symmetry properties, the maximisation of admits two solutions corresponding to the maximum and the minimum of the function . Moreover, the choice of the quadratic constraint of (12) guarantees the unicity of the solution to the problem of Proposition 1.
Remark 6. The problem described by Proposition 1 could have been solved also in a numerical way, that is, by searching that maximises on the surface of the dimensional hypersphere. However, the computational cost of this numerical solution can be a drawback when is big.
3.1. PM Residual Design
Section 3 has shown how to maximise the steadystate gain of the continuoustime transfer function trough a suitable choice of the real vector (i.e., . The design of the filter of (6) has been completed here by introducing a method for assigning both the zeros and the poles of the continuoustime transfer function . The zeros and poles location influences the transient characteristics (maximum overshoot, delay time, rise time, settling time, etc.) of the filter of (6). In many applications, these characteristics must be kept within tolerable or prescribed limits in order to guarantee good performances of the filter in terms, for example, of fault detection times and falsealarm probabilities.
Remark 7. When , the polynomial is fixed and no freedom degree is left to arbitrarily assign the zeros. In order to solve this problem, a polynomial vector can be considered. Under this assumption, still belongs to the subspace , where the terms are polynomial coefficients.
The previous consideration leads to introduce the polynomial , where is a dimensional polynomial vector whose th element has the form The degree and the coefficients are freedom design () that are exploited for obtaining the desired roots of the polynomial . However, in order to maximise the steadystate gain, as shown in Section 3, the following condition must hold:
Definition 1. is the reference polynomial whose roots are the zeros to be assigned: Since the constraint of (24) must hold, . Obviously, this assumption does not provide any restriction on the roots assignable. Under the previous considerations, the zero assignment and pole placement problem is formulated as follows.
Proposition 2. The degree and the coefficients have to be determined under the constraint of (24) in order to obtain .
Proof. In Section 3, the polynomial vector was defined. Its th element is a known polynomial of a certain degree, . If is defined as follows:
the th element of can be always written as a polynomial of degree :
by imposing that when .
As , by multiplying (23) and (27), it results
where
Equations (28) and (29) assume that when and when . Note that the coefficients depend on the freedom design . On the other hand, is fixed as the coefficients are assigned by (24).
Let us suppose that . By imposing , from (29) and (25), the following expressions are
computed:
Equations (24) and (30) represent a linear system with equations and unknowns, which can be expressed in the classical form , where
The degree of the polynomials has to be chosen in order to obtain a solvable system (i.e., ).
In order to understand the proposed solution, the following points should be considered.
(i)The choice of must guarantee that the relations are satisfied.(ii) When , the difference between the number of unknown terms and the number of equations, that is, , is greater than zero if is selected sufficiently high.(iii)Even if the system admits solutions, the inverse of the matrix may not exist; in such case there are infinite solutions and the one associated to the pseudoinverse of , that is, can be computed.
Remark 8. The use of a polynomial vector instead of a real vector has the drawback of increasing the complexity of the residual generator. Many FDI applications require that where is an arbitrary polynomial. These cases do not require a such that , but it is enough considering and imposing where . However, there is a restriction on the choice of . In fact, due to the realisability condition, . Moreover, the method cannot be applied if admits one or more roots with positive real part, as the residual generator would become unstable. These cases require an approximate solution.
Remark 9. This section is focused on the design of residual generators on the basis of a given reference function with disturbancedecoupling and fault sensitivity maximisation properties. The pole location influences the transient dynamics of the designed residual filters, while the steadystate properties depend on the PM residual design, as it maximises the residual steadystate values with respect to step faults affecting input and output sensors. The poles of the residual functions could be optimised with respect to both fault and disturbance terms, as shown, for example, in a work by the same authors [17].
3.2. PM Fault Isolation
This section addresses the design problem of residual generator banks for the isolation of faults affecting the input and the output sensors. This design is performed by using the disturbancedecoupling method suggested in Section 3.
To univocally isolate a fault concerning one of the output sensors, under the hypotheses that the input sensors and the remaining output sensors are faultfree, a bank of residual generator filters is used. The number of these generators is equal to the number of the system outputs, and the th device () is driven by all but the th output and all the inputs of the system. In this case, a fault on the th output sensor affects all but the th residual generator.
In presence of a fault on the th output sensor, the measured output can be expressed as follows: with where represents the th output fault function.
In these conditions, the system of (4) becomes where is the th column of the matrix .
Let us indicate a polynomial row vector belonging to the basis of the left null space of the matrix . The expression of the th filter when a fault is acting on the th output sensor is obtained by multiplying (36) by : where is the matrix obtained by deleting from the th column, and represents the dimensional vector obtained by deleting from its th component.
From the comparison between (37) and (6) with if , the methods shown in Sections 3 and 3.1 can be exploited for the design of the th filter. In particular, the parameters of this filter can be properly chosen in order to optimise its performances when a fault is acting on the th output sensor.
In more detail, as shown in Section 3, is chosen to maximise the steadystate gain in the presence of the fault . Moreover, as shown in Section 3.1, is chosen to obtain a fixed behaviour of the transfer function due to the fault .
It is worth noting that the similar design technique can be used for input sensor fault isolation.
The problem requirements determine the selection of the specific fault with respect to which the design depends. Most often in practice, it is important to obtain good performance with respect to all possible faults rather than optimal behaviour with respect to one specific fault. In this situation, a different design of the filter behaviour for each fault situation is needed.
4. NLGA Residual Generators
The considered NLGA to the FDI problem is suggested in [18] and formally developed in [10]. It consists in finding, by means of a coordinate change in the state space and in the output space, an observable subsystem which, if possible, is affected by the fault and not affected by disturbance. In this way, necessary and sufficient conditions for the FDI problem to be solvable are given. Finally, a residual generator can be designed on the basis of the model of the observable subsystem.
More precisely, the approach considers a nonlinear system model in the form in which the state vector (an open subset of ), is the control input vector, is the fault, the disturbance vector (embedding also the faults which have to be decoupled), and the output vector; whilst , , the columns of and are smooth vector fields; and is a smooth map.
Therefore, if represents the distribution spanned by the column of , the NLGA method can be devised as it follows: first, determine the largest observability codistribution contained in , denoted with [10].
If , the design procedure can continue, otherwise, the fault is not detectable; whenever the previous condition is satisfied, it can be found a surjection and a function fulfilling and , respectively. The functions and defined as are (local) diffeomorphisms, where is a selection matrix (i.e., a matrix in which any row has all 0 entries but one, which is equal to 1), represents the measured part of the state which is affected by and not affected by , and represents the not measured part of the state which is affected by and by .
In the new (local) coordinate defined previously, the system of (38) is described by the relations in the form with not identically zero. Denoting with and considering it as an independent input, it can be singled out the subsystem: which is affected by the single fault and decoupled from the disturbance vector. This subsystem has been exploited for the design of the residual generator for the FDI of the fault .
As already described in Section 2, the proposed NLGA FDI scheme is designed on the basis of a model structure of the input affine type as described in [10]. For this reason, the aircraft simulation model has been simplified and the nonlinear model of (3) has been considered for the NLGA design.
Under these assumptions, by means of computations detailed in [19], the residual generators for detecting the faults affecting the aircraft input sensors are obtained. In particular, the residual generator for the elevator , with , is described by the relation The aileron residual generator , with , has the form The rudder residual generator , with , is written in the form The throttle residual generator , with , has the form Remark 10. It is worth observing that each residual generator is affected by a single input sensor fault and is decoupled from the wind components and the faults affecting the remaining input sensors. This feature can be obtained by defining a different for each residual generator design [19]. In this way, the tuning of the residual generator gains , , and can be carried out independently. Finally, by a straightforward analysis, the positive sign of each gain is a necessary and sufficient condition for the asymptotic stability of the dynamics (42)–(45). A procedure optimising the tradeoff between the fault sensitivity and the robustness to the modelling errors and disturbances of the generic residual generator is proposed in the next section.
4.1. NLGA Robustness Improvement
The proposed NLGAbased scheme consists of two design steps: (1)the structural decoupling of critical disturbances (wind gust and turbulence) and critical modelling errors can be obtained as described in Section 4;(2)the nonlinear residual generators robustness is improved by minimising the effects of both noncritical disturbances and modelling errors, whilst maximising the fault effects on the residual signals. In order to apply the robustness improvement procedure presented in this section, the considered framework is restricted to suitable scalar components of the subsystem (41). In particular, the vectors and are decomposed as follows: where , , and, correspondingly, it follows that Let us consider the following conditions: where is a smooth map and is an invertible smooth map. It is important to highlight that if the constraints (48) are satisfied, the decomposition (46)(47) can always be applied to obtain the following subsystem: As can be seen in [19], the conditions (48) are satisfied for the considered aircraft application, hence, from now on, the scalar subsystem (49) is referred to in place of the subsystem (41).
It can be noted that the tuning of the residual generator gains, in the framework of the subsystem (49), cannot be properly carried out. In fact, the critical disturbances are structurally decoupled but the noncritical ones are not considered. For this reason, to achieve robustness of the residual generators, the tuning of the gains is performed by embedding the description of the noncritical disturbances in the subsystem as follows: where, to simplify the treatment without loss of generality (accordingly to the considered aircraft application), the state variable is supposed to be directly measured. Moreover, the variable is the measurement noise on . Finally, the variable and the related scalar field represent the noncritical effects which have not been considered in the simplified aircraft model (3) used for the NLGA scheme.
The following system, which is referred to as filter form, represents a generic scalar residual generator (based on the subsystem (50)) to which (42)–(45) belong as a particular case where the gain has to be tuned in order to minimise the effects of the disturbances and whilst maximise the effects of the fault on the residual . The quantification both of the disturbances and of the fault effects on the residual can be obtained by defining the estimation error which allows to write the following equivalent residual model: In order to apply the effective mixed approach [3, 20] to tune , the system (53) has to be linearised in the neighbourhood of a stationary flight condition, as suggested in [2] with reference to the optimisation of nonlinear unknown input observers. It is worth observing that the considered aircraft application is characterised by small excursions of the state, input, and output variables with respect to their trim values , , , , and , hence the robustness of the nonlinear residual generator is achieved. The linearisation of (53) is the following: where Now, it is important to note that in place of the residual generators in the filter form (51), the following observer form of the residual generators can be used: For the same reasons previously described, the estimation error is introduced: hence The linearisation of (58) is Both the linearised models (54) and (59) of the residual generators in the filter form and observer form, respectively, can be represented by the following general form: with as well as the following positions: On the basis of (60) and (61), the mixed [3, 20] procedure is developed for the robustness improvement of the residual generators both in the filter and observer form. Since the considered NLGA residual generators are scalar, the procedure leads to a new analytical solution.
The following definition will be used throughout the section.
Definition 2. The norms and of a stable transfer function are defined as where represents the maximum singular value, whilst the minimum singular value. The problem of the tradeoff between disturbances robustness and fault sensitivity is stated as follows.
Problem 1 (Mixed Residual Robustness Improvement). Given two scalars and , find the set defined as: where In order to obtain the analytical solution of Problem 1, the following propositions are given.
Proposition 3. For all then
Proof. From the definition (64) hence it is possible to write so that it follows From the last expression, it is straightforward to obtain (66) and (67).
Proposition 4. The set is given by
Proof. By means of Proposition 3, it is possible to write which holds for
Proposition 5. If , then is given by
Proof. From the definition (65), it results and assuming, without loss of generality, that , it follows . By imposing with , the constraint has to hold. Then, by recalling the result of Proposition 4, the maximum feasible value of fulfilling the constraint is given by hence
Theorem 1. Given and , the set fulfilling the constraints of Problem 1 is given by
Proof. The proof of the theorem is not reported, as it is straightforward from Propositions 3, 4, and 5.
Remark 11. Let us consider the following performance index to maximise
From (66), it follows
hence
From (81), it can be observed that
In this way, the maximum value of the performance index is
The method proposed in this paper guarantees the maximum value of the performance index as well as the constraints and if .
In fact, from it follows
hence .
Finally, from (75) it is
always possible to find a such that
On the basis of Theorem 1, can be designed by means of the following procedure.
Procedure 1. (1) Choose to obtain a desired level of disturbance attenuation.
(2) Compute and choose to obtain a desired level of fault sensitivity.
(3) Choose , with and .
(4) Apply the chosen gain to the of (51) or to the of (56) if the NLGA
residual generator is in the filter form or in the observer form, respectively.
5. FDI Performance Estimation
To show the diagnostic characteristics brought by the application of the proposed FDI schemes to general aviation aircrafts, some numerical results obtained in the Matlab and Simulink environments are reported. The final performances that are achieved with the developed FDI schemes are finally reported. These performances are evaluated by means of extensive simulations applied to the aircraft simulation model. This section presents also some comparisons of the developed PM and NLGA FDI strategies with NN and UIKF FDI schemes.
The designed PM residual generator filters are fed by the component input vector and the component output vector acquired from the simulation aircraft model previously described. In particular, a bank of residual generator filters has been used to detect input sensor faults regarding the input control variables. Moreover, in order to obtain the fault isolation properties, each residual generator function of the considered bank is fed by all but one of the control input signals and by the output variables. Obviously, the residual generator bank has been designed to be decoupled from the component wind disturbance vector . As to the NLGA residual generator filters, the aircraft synthesis model of (3), adopted for the design, is simplified with respect to the simulation model. Analogously to the PM, the approximations of the NLGA synthesis nonlinear model are related to a particular steadystate flight condition. For this reason, the switching for the NLGA FDI scheme is also required when a generic reference trajectory is followed. Hence, it is important to evaluate the robustness characteristic of a single design of NLGA residual generators when a large set of flight conditions is dealt with.
It is worth noting that the aircraft reference trajectories are typically made up of a sequence of steadystate flight conditions, each one described by the associated input state output set point and the linearised model of (1). As a consequence, all the FDI linear techniques are usually implemented by switching among the residual generators related to the different steadystate flight conditions. The target of this work is to reduce the switching by adopting robust PM residual generators. In particular, the robustness is achieved by using the same residual generators for a large set of flight conditions. The chosen single steadystate flight condition for designing both of the PM and of the NLGA residual generators is a coordinated turn characterised as follows: (i)the true airspeed is m/s;(ii)the curvature radius is m;(iii)the flightpath angle is ;(iv)the altitude is m;(v)the flap deflection is . This represents one of most general flight condition due to the coupling of the longitudinal and lateral dynamics. Moreover, it is used in simulation to highlight the performances of the proposed methods in the nominal flight condition.
Regarding the PM, the detection properties of the filters in terms of fault sensitivity and disturbance rejection can be achieved according to Section 3. The synthesis of the dynamic filters for FDI has been performed by choosing a suitable linear combination of residual generator functions. This choice has to maximise the steadystate gain of the transfer functions between input sensor fault signals. The roots of the polynomial matrix have been optimised for maximising the fault detection promptness, as well as to minimise the occurrence of false alarms. In order to assess the PM diagnosis technique, different fault sizes have been simulated on each sensor. Single faults in the input sensors have been generated by producing abrupt (step) and ramp (slowly developing) faults in the input signals . The residual signals indicate fault occurrence according to whether their values are lower or higher than the thresholds fixed in faultfree conditions. The residual processing methods can be based on simple residual geometrical analysis or comparison with fixed thresholds [3]. More complex residual evaluation can rely on statistical properties of the residuals and hypothesis testing [6], or based on adaptive thresholds, that is, the socalled threshold selector [21].
In this paper, the threshold test for FDI is performed with the logic described by (86): that is, the comparison of with respect its statistical normal characteristics. and are the normal values for the mean and variance of the faultfree residual, respectively. In order to separate normal from faulty behaviour, the tolerance parameter (normally ) is selected and properly tuned. Hence, by a proper choice of the parameter , a good tradeoff can be achieved between the maximisation of fault detection probability and the minimisation of falsealarm probability. In practice, the threshold values depend on the residual error amount due to measurement errors, linearised model approximations, and disturbance signals that are not completely decoupled.
Thus, in this case, a suitable value of for the computation of the positive and negative thresholds in (86) has been considered. To summarise the performances of the PM FDI scheme, the minimal detectable step faults on the various input sensors are collected in Table 2.

On the other hand, the minimal detectable ramp faults are reported in Table 3.

Concerning the NLGA, the synthesis of the residual generators has been performed by using filter gains that optimise the fault sensitivity and reduce as much as possible the occurrence of false alarms due to model uncertainties and to disturbances not completely decoupled. This robustness requirement has been fulfilled by designing the residual gains according to the Procedure 1. For example, with reference to the fourth residual generator, Procedure 1 has led to which satisfies the norm bounds and . This guarantees a good separation of the residual signal with and , where norm is considered.
In order to assess the NLGA diagnosis technique, single step and ramp faults have been used. Moreover, also in this case the threshold values have been chosen in simulation according to (86). A suitable value of for the computation of the positive and negative thresholds in (86) has been considered. For what concern NLGA FDI scheme, the minimal detectable step faults on the various input sensors are summarised in Table 4.

On the other hand, the minimal detectable input sensor ramp faults are reported in Table 5.

The minimal detectable step fault values in Tables 2, 3, 4 and 5 are expressed in the unit of measure of the sensor signals. The fault step sizes and ramp slopes are relative to the case in which the occurrence of a fault is detected and isolated as soon as possible. The detection delay times represent the worst case results, as they are evaluated on the basis of the time taken by the slowest residual function to cross the settled threshold. These experiments represent a further validation of the residual generator robustness with respect to the fault type, as the the residual function sensitivity was optimised only with respect to step faults.
As an example, Figure 1 shows the PM residual functions generated for the complete trajectory. On the basis of the faultfree and faulty conditions, this bank provides the correct isolation of the considered input sensor ramp fault.
(a)
(b)
(c)
(d)
The horizontal lines represent the levels of the faultfree thresholds that are settled according to test (86) with . The first residual function depicted in Figure 1, provides also the isolation of the fault regarding the 1st input sensor.
The second example of Figure 2 shows the residual functions generated by the NLGA filter bank applied to the complete aircraft trajectory. The horizontal lines represent the thresholds with . Note that, due to the NLGA design technique, only the 1st residual related to the signal of the filter bank is sensitive to a ramp fault affecting the 1st input sensor.
(a)
(b)
(c)
(d)
5.1. Reliability and Robustness Evaluation
In this section, the robustness characteristics of the proposed PM and NLGA FDI schemes have been evaluated and compared also with respect to the UIKF scheme [3] and the NN technique [7]. In particular, a bank of UIKF has been exploited for diagnosing faults of the monitored process. This technique seems to be robust with respect to the modelling uncertainties, the system parameter variations, and the measurement noise, which can obscure the performance of an FDI system by acting as a source of false faults. The procedure recalled here requires the design of a UIKF bank and the basic scheme is the standard one: a set of measured variables of the system is compared with the corresponding signals estimated by filters to generate residual functions. The diagnosis has been performed by detecting the changes of UIKF residuals caused by a fault. The FDI input sensor scheme exploits a number of KF equal to the number of input variables. Each filter is designed to be insensitive to a different input sensor of the process and its disturbances (the socalled unknown inputs). Moreover, the considered UIKF bank was obtained by following the design technique described in [3, Section 3.5, pages 99–105], whilst the noise covariance matrices were estimated as described in [22, Section 3.3, pages 70–74 and Section 4.6, pages 130131]. Each of the UIKF of the bank was decoupled from both one input sensor fault and the wind gust disturbance component, thus providing the optimal filtering of the inputoutput measurement noise sequences. On the other hand, a dynamic NN bank has been exploited in order to find the dynamic connection from a particular fault regarding the input sensors to a particular residual. In this case, the learning capability of NN is used for identifying the nonlinear dynamics of the monitored plant. The dynamic NN provides the prediction of the process output with an arbitrary degree of accuracy, depending on the NN structure, its parameters, and a sufficient number of neurons. Once the NN has been properly trained, the residuals have been computed as the difference between predicted and measured process outputs. The FDI is therefore achieved by monitoring residual changes. The NN learning is typically an offline procedure. Normal operation data are acquired from the monitored plant and are exploited for the NN training. Regarding the NN FDI method and according to a generalised observer scheme (GOS) [3], a bank of timedelayed threelayers multilayer perceptron (MLP) NN with neurons in the input layer, neurons in the hidden layer, and neuron in the output layer is implemented. Each NN was designed to be insensitive to each input sensor fault, and the NN were trained in order to provide the optimal output prediction on the basis of the training pattern and target sequences [7].
In the following of this section, the performances of the different FDI schemes have been evaluated by considering a more complex aircraft trajectory. This has been obtained by means of the guidance and control functions of a standard autopilot which stabilises the aircraft motion towards the reference trajectory as depicted in Figure 3. The reference trajectory is made up of branches (2 straight flights and 2 turn flights) so that a closed path is obtained. It is worth observing that only steadystate flight conditions are used to follow alternatively the branches of the reference trajectory: (i)straight flight condition: true airspeed [m/s]; radius of curvature ; flightpath angle; [m]; flap deflection;(ii)turn flight condition: true airspeed [m/s]; radius of curvature [m]; flightpath angle ; altitude [m]; flap deflection .
The reference turn flight condition is used to design the PM and the NLGA filters. The achieved results are reported in Tables 2 and 4, respectively. The performed tests represent a also a possible reliability evaluation of the considered FDI techniques. In fact, in this case the diagnosis requires that the residual generators are robust with respect to the flight conditions that do not match the nominal trajectory used for the design.
As an example, the faultfree and faulty residuals generated by the designed NN and UIKF banks are shown in Figures 4 and 5, respectively.
(a)
(b)
(c)
(d)
(a)
(b)
(c)
(d)
Table 6 summarises the results obtained by considering the observers and filters (corresponding to the PM, NLGA, UIKF, and NN) for the input sensor FDI whose parameters have been designed and optimised for the steadystate coordinated turn represented by the 2nd reference flight condition of the complete trajectory. Table 6 reports the performances of the considered FDI techniques in terms of the minimal detectable step faults on the various input sensors, as well as the corresponding parameters for the residual evaluation of (86). The mean detection delay is also reported in Table 6 in order to compare the effectiveness of the different FDI schemes.

The choice of has been performed with reference to the particular flight conditions involved in the complete trajectory following. In particular, the selected value of for each FDI observer or filter represents a tradeoff between two objectives, that is, for increasing the residual fault sensitivity and promptness, as well as for minimising the occurrence of false alarms due to the switching among the reference flight conditions needed to stabilise the aircraft motion towards the reference trajectory. Table 6 shows how the proper design of the parameter allows to obtain good performances with all the considered FDI schemes, hence the robustness with respect to the proposed complete trajectory is always achieved.
It is worth noting that the NLGA has a theoretical advantage by taking into account the nonlinear dynamics of the aircraft. However, the behaviour of the related nonlinear residual generators is quite sensitive to the model uncertainties due to variation of the flight condition. In fact, the NLGA FDI scheme requires high values of which have to be increased (from to in this work) when the aircraft motion regarding the complete trajectory is considered in place of the nominal flight condition. In particular, even though the analysis was restricted just to the aircraft turn phase of the complete trajectory, a performance worsening would happen, since the steadystate condition (nominal flight condition) is quite far to be reached. However, the filter design based on the NLGA lead to a satisfactory fault detection, above all in terms of promptness. On the other hand, regarding the PM, it is rather simple to note the good FDI performances, even if optimisation stages can be required. The values selected for the PM are lower, but the related residual fault sensitivities are even smaller. Similar comments can be made for the UIKF and NN techniques.
The simulation model applied to the complete trajectory is an effective way to test the performances of the proposed FDI methods with respect to modelling mismatch and measurement errors. The obtained results demonstrate the reliability of the PM, NLGA, UIKF, and NNbased FDI schemes as long as proper design procedures are adopted.
5.2. Monte Carlo Analysis
In this section, further experiment results have been reported. They regard the performance evaluation of the developed FDI scheme with respect to uncertainty acting on the system. Hence, the simulation of different faultfree and faulty data sequences was performed by exploiting the aircraft MatlabSimulink simulator and a Monte Carlo analysis implemented in the Matlab environment. The Monte Carlo tool is useful at this stage as the FDI performances depend on the residual error magnitude due to the system uncertainty, as well as the signal and measurement errors. It is worth noting how the Monte Carlo simulations have been achieved by perturbing the parameters of the PM filter residuals by additive white Gaussian noises with standard deviation values equal to a fixed percentage of the element values. The same experiments have been performed by statistically varying the main parameters of the NLGA filters. In these conditions, the Monte Carlo analysis represents a further method for estimating the reliability and the robustness of the developed FDI schemes, when applied to the considered aircraft.
For robustness and reliability experimental analysis of the FDI schemes, some performance indices have been used. The performances of the FDI method are then evaluated on a number of Monte Carlo runs equal to . This number of simulations is carried out to determine the indices listed below with a given degree of accuracy.
FalseAlarm Probability (): the number of wrongly detected faults divided by total fault cases.
MissedFault Probability (): for each fault, the total number of undetected faults, divided by the total number of times that the fault case occurs.
True Detection/Isolation Probability (, ): for a particular fault case, the number of times it is correctly detected/isolated, divided by total number of times that the fault case occurs.
Mean Detection/Isolation Delay (, ): for a particular fault case, the average detection/isolation delay time.
These indices are hence computed for the number of Monte Carlo simulations and for each fault case. Table 7 summarises the results obtained by considering the PM dynamic filters for the input sensor FDI for a complete aircraft trajectory and with