Table of Contents Author Guidelines Submit a Manuscript
Mathematical Problems in Engineering
Volume 2012, Article ID 471585, 21 pages
http://dx.doi.org/10.1155/2012/471585
Research Article

Robust Control for Systems with Bounded-Sensor Faults

Department of Electrical Engineering, I-Shou University, Kaohsiung City 84001, Taiwan

Received 26 February 2012; Revised 4 May 2012; Accepted 15 May 2012

Academic Editor: Zhan Shu

Copyright © 2012 Chieh-Chuan Feng. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

Abstract

In this study an observer-based novel design of robust control system with an estimate scheme of sensor states to accommodate extended bounded-sensor faults is proposed. The sensor faults are, in general, modeled as polytopic bounds in robust control framework and are usually given as a priori assumption. But, in practice, the sensors that are subject to faults are especially vulnerable to variant conditions, such as high temperature, and humidity. Thus, their faults may fall outside the presumed polytopic bounds easily. An estimate scheme of sensor states integrated into the observerbased control system captures the sensor faults outside the presumed region. The notion of quadratic stability stabilizes the overall system and guarantees a robust performance measure of an output error signal in the presence of a set of extended admissible sensor faults. A numerical example shows the effectiveness of the proposed approaches.

1. Introduction

The problems of designing fault-tolerant control systems have attracted considerable attention. Much efforts have gone to advancing practical usage of fault-tolerant systems within the avionics industry, see [14], for example. These high-risk applications require fault safe operation; that is, the system can withstand tolerable faults without effects on the system operations. Theoretical results and application examples being developed in the literature are, in general, divided into two broad spectrums: active [1, 58] and passive [24, 918]. In the active approach, reconfigurable mechanism has been designed in the event of bounded faults. Due to flexible capacity of the mechanism, the controller in such systems is not in a fixed form. This increases the complexity of the control design. Such fault-tolerant control systems use reconfigurable structure either online or predefined control law. [5] designed a pseud-inverse technique that maintained the closed-loop system as much as possible to the original system by reconfiguring the control law, once the faults encountered. [6] used eigenstructure assignment that was capable of recovering the nominal system after faults occurred. The controller was insensitive to the variation of devices [7, 8], have used direct adaptive control schemes to update control parameters and account for the case where the sensing devices were stuck at some fixed values. The advantages of active approaches are the use of reconfigurable or adaptive structure of online controller.

In contrast, the passive fault-tolerant control is to exploit the inherent redundancy of the system components or to use the remaining functions of the component to design a fixed compensator so as to achieve a tolerable system performance in the presence of component faults. The designed fixed controller guarantees satisfactory system performance not merely during normal operations, but under variant fault conditions. [9] tolerated faults by using linear quadratic state-feedback control for a prescribed set of actuators. A given performance bound was guaranteed. The controller of [10] based on robust pole region assignment method guaranteed stability and maintained an acceptable performance in the event of actuator faults. Taken as bounded measurement noises, sensor faults are estimated by fault estimation techniques in [15]. The proposed estimator accomplished the observation of system states and measurement noises simultaneously. [16] designed a fault estimation scheme for sensor with bounded time derivative of faults. Based on linear matrix inequality techniques, [24, 11, 12, 17, 18] have designed robust controllers for sensor or actuator faults in the prescribed bounds with disturbance attenuation and satisfactory performance. In addition, [17, 18] treated sensor fault as a state of the system, which implies the possible boundedness of the faults. Notably, the aforementioned passive approaches have focused on the faults in a fixed bound and given as a priori information. To increase flexibility of passive approach, the advantages of active approach being adaptive are absorbed into passive design in this study.

This paper deals with extended bounded-sensor-faults, in which sensor faults may fall outside the presumed bounds in time varying or nonlinear manners. A passive form of observer-based controller with an integrated estimate scheme of sensor states captures the phenomena of extended bounded-sensor-faults. A basic idea of control design to extended faults of sensors in an observer-based control system relies on the plant states being correctly estimated under the corrupted measurement signals. To reach this goal, [11] designed a novel observer with an estimate scheme of sensor states in which the asymptotic stability of the system was restricted to against bounded and piece-wise constant faults. This result, however, is somewhat unrealistic. The study of this paper adopts the observer with estimate scheme idea as [11] but relaxes the piece-wise constant restriction to allow the sensor faults to be time-varying and/or nonlinear with bounds. Moreover, these presumed faulty sensors are allowed not to be in the presumed bounds. The observer with estimate scheme identifies these faulty conditions and computes the correct states for feedback. The notion of quadratic stability not only ensures the asymptotic stability of the system but also establishes -gain measure for the robust performance of a controlled error signal in the presence of a set of extended admissible sensor faults.

This paper is organized as follows. In Section 2, the system including observer structure and fault models of bounded piece-wise constant function is formulated. To proceed with Section 2, Section 3 gives the preliminary results developed in [11]. Section 4 presents the main results, which deal with the robust performance against extended bounded-sensor faults and is divided into three subsections including system reformulation, quadratic stability and Linear matrix inequality (LMI) characterizations. Section 5 includes the synthesis of observer and control gains in terms of LMIs. Section 6 demonstrates effectiveness of proposed method by a numerical example. Last section, Section 7, concludes the overall results shown in the paper.

2. Problem Formulation

Consider a linear time-invariant dynamical system with sensor faults where is the state vectors, and is the control signal of actuator. is the output of the system, and is the true measured output of sensor. is the disturbance. The representation of , when the vector is a vector with components, is a square matrix of dimension with the elements of on the diagonal. The sensor function, , is to represent the remaining function of the associated sensor. For example, if a sensor , in which represents the remaining function of sensor in the vector , then we say the sensor is functioning.

Now, consider a state observer with control law of the following form: where the vectors are the state of observer, which is an estimate of . Similarly, , an estimate of , which will be shown later in the sequel, is useful to observe the state in the presence of sensor faults. and are the observer gain and control gain, respectively, to be designed such that the control objectives are achieved. Notice that the following expressions are interchangeable when later deriving the formulas, and .

3. Preliminaries

The following assumptions are used for demonstrating the asymptotic stability based on Lyapunov method shown in the Theorem 3.1, which will be then relaxed while -gain robust performance is pursued in the next section. (1), (2), where , except at some time instants that jump toward zero.

The assumptions addressed above have the following interpretations: means the sensor fails. means the sensor works properly. A fault sensor will be such that . Thus, it is a bounded sensor fault. The and jumping toward zero mean that the sensor fault not only is a piecewise constant process but also indicate that is a bounded above function. The analysis of asymptotic stability of the closed-loop system against bounded and piecewise constant sensor faults is first studied in [11], which is revealed in the following theorem and is stated for the completeness. We define the following sets: and the vertex set of is defined as Notice that it is easy to see that there are vertices in to represent the possible faults in a known convex set.

Theorem 3.1. Assumptions 1 and 2 hold. Consider the system (2.1) and (2.2) for the case and .
If the following exist:(1)the matrices and satisfying where (2)the matrices and satisfying where (3)for a given matrix , the matrices and satisfying
then the closed-loop systemis asymptotically stable for , where is as follows: The state error is defined as . The parameters, and , are the maximum and minimum eigenvalues of and , respectively, for some positive definite symmetric matrices and and .

Proof. Refer to [11] for the proof.

Remark 3.2. The overall closed-loop system (3.8a)–(3.8d) decomposed into input-output structured block diagram in Figure 1, where the error filter (3.8d), the adaptive law (3.8c), and the state observer (3.8b) form the augmented observer. Without sensor faults, the block diagram Figure 1 is simplified to Figure 2 where and are both identity matrices, and the block of adaptive law can be removed from Figure 1.

471585.fig.001
Figure 1: The input-output structured block diagram of the closed-loop system (3.8a)–(3.8d).
471585.fig.002
Figure 2: An ordinary observer-based control system.

4. Robust Performance

In the last section the asymptotic stability, based on Lyapunov method, has been shown for the system with bounded sensor faults under piecewise constant assumption. Now, a set of extended sensor faults relax the previous restrictions to not only admit bounded time varying and/or nonlinear sensor function in the vertex set, , but also let the true sensor faults, which may fall outside the presumed bound, be norm bound. A closed-loop autonomous system will be reformulated in the following subsection.

4.1. System Reformulation

Consider closed-loop system (3.8a)–(3.8d), which can be rewritten as where , and . defines a domain that contains the origin. The matrices , , , and are to be determined in the sequel. The signal, , is a bounded exogenous signal that comprises and , that is, , where is the difference of estimated sensor function, , and true sensor function, , that is . The estimation error is assumed to belong to the following diagonal norm-bound set: which defines the extended sensor faults.

Remark 4.1. We have noticed that if the true sensor function falls within the presumed polytopic bound, , then the diagonal norm-bound set, which is confined within , is partially (or maybe completely) overlaid with the . However, if the true sensor function does not fall into the set , then it is possible that intersects partially or their intersection is an empty set.

Remark 4.2. It is worth noting that, under the above assumption, the signal is such that which for asymptotically stable systems can be bounded above and will be demonstrated in the sequel.

4.2. Robust Performance Measure

This subsection defines a robust performance measure and states an important theorem on which the robust performance is established. We assume that not all state information is available and is concerned with designing a fixed structure observer-based controller to stabilize the system (4.1) satisfying a given -gain constraint in response to all admissible sensor faults. The following notion of stabilizability for the system (4.1) with robust -gain measure is defined.

Definition 4.3. Let the constant be given. The system (4.1) is said to be stabilizable with a robust -gain measure if there exists a fixed control law and observer gain such that for any admissible sensor faults the following conditions are satisfied.(1)The system is uniformly asymptotically stable.(2)Subject to the assumption of zero initial condition, the controlled output satisfies Here, the quadratic stability with an -gain measure was introduced [19]. This concept is a generalization of that of quadratic stabilization to handle -gain measure constraint on exogenous attenuation. To this end, the characterizations of robust performance based on quadratic stability will be given in terms of matrix inequalities, where if LMIs can be found, then the computations by finite dimensional convex programming are efficient.

Theorem 4.4. Consider the closed-loop system (4.1), and the following statement holds: the closed-loop system is said to be quadratically stable with a robust -gain measure from input to output if there exists and such that where

Proof. Let quadratic Lyapunov function be , with such that and constraint Then, it follows from the S procedure that the equivalent condition of (4.11) is the existence of satisfying which can be equivalently written as for . Then the -gain of the (4.1) is less than . To show this, we integrate (4.14) from 0 to , with the initial condition , to get Since , this implies that The inequality (4.8) and definition (4.9) are obtained by substituting (4.1) into (4.14). Without loss of generality, we will adopt only strict inequality in this paper. This completes the proof.

4.3. Matrix Inequality Characterizations

The following lemma is to show that the energy of the estimated output signals by observer can be limited by some matrix inequalities, which provide an upper bound of the exogenous signal, .

Lemma 4.5. Given that if there exist and satisfying then the following statements are equivalent:(1), (2), where

Proof. is an invariant ellipsoid. Let . Since then we have Hence, and Let . We have From (4.23) and (4.24), we have This completes the proof of . The equivalence of and is straightforward.

Before stating the main theorem for the robust -gain measure of the closed-loop system (4.1), which ensures the robust performance of the original system (2.1) and (2.2) against sensor faults, the following matrices are defined: where

Theorem 4.6. Let the , , and be given. The closed-loop system (4.1) with the admissible bounded sensor faults is said to be quadratically stable with a robust -gain measure , if one lets the matrix be in the set there exist , , , , and such that , , and .

Proof. We consider the signals in response to the signals with the zero initial states, and a (candidate) quadratic Lyapunov function . For any nonzero vectors, and are defined as We have where is defined in (4.20). Let , thus where is defined by (4.9). If the matrix inequalities, , , and , are satisfied, we have , or equivalently, for nonzero and , which implies that . Hence, by Theorem 4.4, the closed-loop system is quadratically stable with a robust -gain measure is ensured. This completes the proof.

Remark 4.7. It is highlighted that the is defined to be the decay rate of the estimated sensor function shown in (3.8a)–(3.8d) such that , when .

Remark 4.8. The ideas of using to set the block diagonal matrix are from the separation principle, where the observer and control gain are designed independently [20], and the lower triangular matrix structure of , where the diagonal elements are the major concerns of the design [21]. It is shown later in the next section that the computation of Lyapunov matrix for controller () and observer () is independently accomplished. Hence, in contrast to the general conservative issue of LMI due to the use of a single Lyapunov matrix for all design, the implementation of the proposed block diagonal matrix obtains less conservativeness. To demonstrate the fact, the robust -gain measure in the numerical example shows that the indexed number is much less than the number shown in [12].

Before presenting the synthesis results in the next section, a useful and important lemma will be stated for clarity.

Lemma 4.9 (Elimination Lemma see [19]). Given , , and with and , there exists a matrix such that if and only if where and are orthogonal complement of and , respectively; that is, and are of maximum rank.

5. Control and Observer Gain Synthesis

In this section according to the analyzed results shown in the last section, the observer gain, , and control gain, , will be synthesized. The general LMI synthesis problem involves sets of the form and a list of matrices , and and scalars , , and . We will conclude the quadratic stability with a robust -gain measure control problem in an convex optimization fashion. We will also specify the details in the following, and the results will be concluded in an algorithm of computation.

Assume and . Given prespecified matrices and scalars and . If, according to Theorem 4.6, there exist matrices , and such that , , and , are satisfied, then the closed-loop system is quadratically stable with a robust -gain measure . Let the matrix be decomposed into where Thus, we have It is noted that for . Next, by S procedure, the requirement of is equivalent to which implies that . Hence, by the well-known Schur complement, the matrix can be rewritten as The inequality (5.8) can be again rewritten as where Next, the orthogonal complement of and is given by In which is defined as the orthogonal complement of and is such that and is of maximum rank. Similarly, and are defined as orthogonal complement of and , respectively.

It is followed by using the well-known Elimination Lemma stated in Lemma 4.9 that the matrix variable, , can be eliminated from the inequality (5.9), which is equivalent to the following two inequalities: Substituting (5.10) and (5.12) into (5.13), we have which is equivalent to It is noted that (5.15), (5.16), and (5.17) cannot be solved simultaneously using LMI Toolbox of Matlab due to its nonconvexity in matrix variable, . We, therefore, propose that of (5.15) be solved first. It is easy to find using . If we let , then (5.16) and (5.17) are LMIs in variables, , , , and , which can be solved simultaneously by the LMI Toolbox of Matlab. The rest LMIs considered are for a prespecified decaying rate, , , and matrix , we have where . And lastly for using Schur complement, we equivalently have where .

Remark 5.1. Now, we can summarize the step of computation.(1)Find feasible solutions of and thus where LMI (5.15) is satisfied.(2)Use the computed matrices found in step , the robust -gain performance problem is placed as the following optimization problem: (3)Reconstruct control gain, , and the matrices found in step and are substituted into the inequality (5.9), which is LMI on one matrix variable, and can be solved by LMI Toolbox of Mtalab.

6. Numerical Example

This example adopted from [12] will be used to illustrate the proposed design with the following parameters: We will test three cases to verify the superiority of the designed observer-based controller. First, case no. 1: one sensor fault where the conditions for simulation are similar to those in [12], in which the sensor is perfectly normal and sensor is subject to faults with 50% reduction in signal strength. That is, by Theorem 3.1, is equal to 1, and is allowed to be time varying or nonlinear function and varies between 0 and 0.5, that is, . In the simulation, we let to examine the design. Using Matlab LMI control toolbox and following the step of computation in Remark 5.1, the matrix, , is computed as follows:

Then we solve optimization problem proposed by (5.20). We find that and the optimal value of is 56.0603. The control gain places the eigenvalues of matrix at . It is of interest that the eigenvalues of are placed around for all . It is highlighted that intends to closely map the fault sensor signal into its null space. This claim can be verified by viewing where the effectiveness of on the eigenvalues of has been greatly reduced. Figures 3 and 4 show the complete simulation results. In Figure 3, the observed states, , converge to the plant states, , eventually. In Figure 4, it is noted that the estimate sensor function approaches very closely to its true value. However, for fast variation of sensor function , the estimated sensor function, , does not follow it but stay at certain value as . We must highlight that the estimate scheme of sensor function may not be able to approach the true sensor function, see [22] for detail, if lacking of persistent excitation, but to keep the the difference of estimated signal and true sensor function within a bound. It is seen from Figure 9 that . In Figure 4, the control input, , is also shown. It is worth noting that the smallest possible value of obtained by [12] was 416.9764 (). Compare with 50.0603, the number of [12] is much larger. The reasons for that are not hard to conduct; the adaptive law and estimate scheme of faults capture the rate of change of faults, while [12] assumed only bounds of all faults.

471585.fig.003
Figure 3: (Case no. 1): The comparison of the plant states, , and observed states, , of one sensor fault for the true sensor function .
471585.fig.004
Figure 4: (Case no. 1): True sensor functions, and , and estimated sensor functions, and , for . The control input, , is also shown.

The second simulation, case #2, uses the condition, which is similar to the previous case, where true sensor function and the true sensor function are not in the designed interval, that is, , which makes or . In the simulation, we let true sensor function, . The simulation results can actually be predicted and are similar to the previous case since the computed observer gain closely maps the second sensor signal into its null space. It is easy to predict that the states, and , will be similar to Figure 1 and is shown in Figure 5. In Figure 6, the true sensor functions, and , estimated sensor functions, and , and control signals, , are depicted. It is shown that although the estimated signal, , is within the diagonal norm bound, , which is shown in Figure 6, its results are deteriorated by the poor guess of its initial states.

471585.fig.005
Figure 5: (Case no. 2): The comparison of the plant states, , and observed states, , of one sensor fault for the true sensor function .
471585.fig.006
Figure 6: (Case no. 2): True sensor functions, and , and estimated sensor functions, and , for . The control input, , is also shown.

The third simulation, that is, (case no. 3), is to show two sensor faults. We allow the true sensor function, , shown in Figure 8, to be varying in the pulse form between 0.4 and 0.7 for the first 0.8 second and then , while keeping for . To compute and , we assume the polytopic bound with and . We surprisingly found that , which is close to the one sensor fault case, and . Under two sensor fault cases, we have raised the . It is not surprising to have the result since the signals for feedback are extremely weak. We have shown the comparison of the true states and observed states in Figure 7, where the large ripples of the observed states are produced due to the pulses of the true sensor function in the first 0.8 second but soon died out. In Figure 8, the control input, the true sensor signals, and estimate sensor signals are depicted. We recognize again from Figure 9 that although we assume that , it really depends on the good guess of initial states on the estimate scheme due to viewing the fact that maintains at its initial states. This, however, can be understood that the associated sensor function is not subject to persistent excitation [22] since it is mapped closely to its null space. Notably, for the third case, the method in [12] failed.

471585.fig.007
Figure 7: (Case no. 3): The comparison of the plant states, , and observed states, , of two sensor fault for the true sensor function .
471585.fig.008
Figure 8: (Case no. 3): The true sensor functions, = pulses shown in the upper figure for and and , and the estimated sensor functions, and . The control input, , is also shown.
fig9
Figure 9: Solid-diamond line represents , and solid-star line represents . (a), (b), and (c) are associated with simulation cases 1, 2, and 3, respectively.

7. Conclusion

This paper has developed an observer-based robust control system with an estimate scheme of sensor states against extended bounded-sensor faults. In this design, the control system not only can deal with the sensor fault in a prescribed polytopic bound but also can endure the faults outside the bound. Based on the notion of quadratic stability with a robust -gain measure , sufficient conditions for the solvability of the robust control problem have been obtained, and a complete solution was given in terms of LMIs. The numerical example shows the effectiveness of the designed method.

References

  1. D. Ye and G.-H. Yang, “Adaptive fault-tolerant tracking control against actuator faults with application to flight control,” IEEE Transactions on Control Systems Technology, vol. 14, no. 6, pp. 1088–1096, 2006. View at Publisher · View at Google Scholar · View at Scopus
  2. M. Blanke, M. Kinnaert, J. Lunze, and M. Staroswiecki, Diagnosis and Fault-Tolerant Control, Springer, New York, NY, USA, 2003.
  3. H. Alwi and C. Edwards, “Robust sensor fault estimation for tolerant control of a civil aircraft using sliding modes,” in Proceedings of the American Control Conference, pp. 5704–5709, June 2006. View at Scopus
  4. F. Liao, J. L. Wang, and G. H. Yang, “Reliable robust flight tracking control: an LMI approach,” IEEE Transactions on Control Systems Technology, vol. 10, no. 1, pp. 76–89, 2002. View at Publisher · View at Google Scholar · View at Scopus
  5. Z. Gao and P. J. Antsaklis, “Stability of the pseudo-inverse method for reconfigurable control systems,” International Journal of Control, vol. 53, no. 3, pp. 717–729, 1991. View at Google Scholar · View at Scopus
  6. J. Jiang, “Design of reconfigurable control systems using eigenstructure assignments,” International Journal of Control, vol. 59, no. 2, pp. 395–410, 1994. View at Publisher · View at Google Scholar · View at Zentralblatt MATH
  7. K. S. Kim, K. J. Lee, and Y. Kim, “Reconfigurable flight control system design using direct adaptive method,” Journal of Guidance, Control, and Dynamics, vol. 26, no. 4, pp. 543–550, 2003. View at Google Scholar · View at Scopus
  8. G. Tao, S. M. Joshi, and X. Ma, “Adaptive state feedback and tracking control of systems with actuator failures,” IEEE Transactions on Automatic Control, vol. 46, no. 1, pp. 78–95, 2001. View at Publisher · View at Google Scholar · View at Scopus
  9. R. J. Veillette, “Reliable linear-quadratic state-feedback control,” Automatica, vol. 31, no. 1, pp. 137–143, 1995. View at Google Scholar · View at Scopus
  10. Q. Zhao and J. Jiang, “Reliable state feedback control system design against actuator failures,” Automatica, vol. 34, no. 10, pp. 1267–1272, 1998. View at Google Scholar · View at Scopus
  11. C.-C. Feng, “Fault-tolerant control and adaptive estimation schemes for sensors with bounded faults,” in Proceedings of the 16th IEEE International Conference on Control Applications (CCA '07), pp. 628–633, October 2007. View at Publisher · View at Google Scholar · View at Scopus
  12. G. H. Yang, J. L. Wang, and Y. C. Soh, “Reliable H controller design for linear systems,” Automatica, vol. 37, no. 5, pp. 717–725, 2001. View at Publisher · View at Google Scholar · View at Scopus
  13. K. Zhou and Z. Ren, “A new controller architecture for high performance, robust, and fault-tolerant control,” IEEE Transactions on Automatic Control, vol. 46, no. 10, pp. 1613–1618, 2001. View at Publisher · View at Google Scholar · View at Scopus
  14. J. Stoustrup and V. D. Blondel, “Fault tolerant control: a simultaneous stabilization result,” IEEE Transactions on Automatic Control, vol. 49, no. 2, pp. 305–310, 2004. View at Publisher · View at Google Scholar · View at Scopus
  15. Z. Gao and H. Wang, “Descriptor observer approaches for multivariable systems with measurement noises and application in fault detection and diagnosis,” Systems and Control Letters, vol. 55, no. 4, pp. 304–313, 2006. View at Publisher · View at Google Scholar · View at Scopus
  16. Z. Gao, S. X. Ding, and Y. Ma, “Robust fault estimation approach and its application in vehicle lateral dynamic systems,” Optimal Control Applications and Methods, vol. 28, no. 3, pp. 143–156, 2007. View at Publisher · View at Google Scholar · View at Scopus
  17. Z. Gao and S. X. Ding, “Sensor fault reconstruction and sensor compensation for a class of nonlinear state-space systems via a descriptor system approach,” IET Control Theory and Applications, vol. 1, no. 3, pp. 578–585, 2007. View at Publisher · View at Google Scholar · View at Scopus
  18. Z. Gao and S. X. Ding, “State and disturbance estimator for time-delay systems with application to fault estimation and signal compensation,” IEEE Transactions on Signal Processing, vol. 55, no. 12, pp. 5541–5551, 2007. View at Publisher · View at Google Scholar · View at Scopus
  19. S. Boyd, L. El Ghaoui, E. Feron, and V. Balakrishnan, Linear Matrix Inequalities in Systems and Control Theory of Studies in Applied Mathematics, vol. 15, SIAM, Philadelphia, Pa, USA, 1994.
  20. F. Franklin, J. D. Powell, and A. Emami-Naeini, Feedback Control of Dynamic Systems, Addison-Wesley, 3rd edition, 1994.
  21. J. C. Geromel, M. C. de Oliveira, and L. Hsu, “LMI characterization of structural and robust stability,” Linear Algebra and Its Applications, vol. 285, no. 1–3, pp. 69–80, 1998. View at Google Scholar · View at Scopus
  22. K. J. Astrom and B. Wittenmark, Adaptive Control, Addison-Wesley Longman Publishing, Boston, Mass, USA, 1994.