Engineering Applications of Intelligent Monitoring and Control 2014
View this Special IssueResearch Article  Open Access
Networked FaultTolerant Control Allocation for Multiple Actuator Failures
Abstract
This paper proposes intelligent faulttolerant control technique using network. Not only control commands generated by a controller but also diagnostic data for tolerating failures can be transmitted through network. In this paper, faulttolerant control allocation method (FTCA) is proposed to tolerate failures in more than one actuator. FTCA is based on a wellknown actuator management technique called control allocation (CA). While the conventional CA is used to redistribute actuators optimally, FTCA redistributes actuators to compensate for the performance degradation due to actuator failure. To analyze the effects of faulty actuator, this paper proposes the general model of the faulty system firstly. And then the modified CA for tolerating the effect of failure is proposed. The performance of the proposed FTCA method is verified by the numerical simulations with application to F18 High Alpha Research Vehicle (HARV).
1. Introduction
Systems, such as aircrafts, spacecrafts, and automotive vehicles, that lead to a catastrophic accident due to failures are called “safetycritical systems.” Since these systems require highlevel of dependability, redundant actuators are usually adopted. Redundant actuators are considered as backup systems that activate as main actuators after occurring failure in the primary ones. However, adopting redundant actuators takes disadvantages of fuel, space, cost, and weightinefficiency during normal operation. In contrast to adopting redundant actuators, techniques based on control theory have been proposed for last 30 years: for example, pseudoinverse [1], model reference adaptive control [2], sliding mode control [3], multiple model switching and tuning [4], control allocation [5–10], and so forth. The goal of these methods is to provide the feasible control input for a faulty system by reconfiguring a controller. Hence, these methods are defined as faulttolerant control (FTC) and also called reconfiguration. FTC techniques can be classified into three categories: poleassignment, multiple model, and allocating actuators. First, poleassignment method is to move the pole position from the undesired position due to faulty system dynamics to the position that can keep the normal performance. In a broad sense, pseudoinverse, model reference adaptive control, and sliding mode control are comprised in this method. To design poleassignment faulttolerant controller, the stability of the closedloop control system according to actuator operation range must be considered. Second, in multiple model method, reconfiguration can be achieved by selecting a feasible controller with respect to the faulty system model. So a group of possible faulty system models and their controllers are predesigned. Once failure occurs, multiple model faulttolerant controller estimates the closest faulty model in the group and then selects the corresponding controller. The main disadvantage of this method is that the number of possible models is increased exponentially in order to tolerate all possible failures. Control allocation is an actuator management technique in overactuated system that has larger number of actuators than the number of states. For normal operation, redundant actuators are used to improve the performance of the system. For example, thrust vectoring nozzles are adopted as redundant actuators to achieve high angleofattack flight ability in modern aircrafts. These redundant actuators can also provide an opportunity to compensate the effect of failure. This paper modifies the conventional CA to achieve the faulttolerant ability for failures on several actuators.
However, reconfiguration methods shown above must require fast and accurate failure information to tolerate failure. For this reason, fault detection and diagnosis (FDD) technique is generally introduced [11]. Ideally, failure can be compensated by FTC using the diagnostic data generated by FDD. However, most of FDD methods have been developed as monitoring/alarm systems in order to achieve safety by providing accurate failure information to users. Although FDD diagnoses health condition accurately, there are some differences between the diagnostic data generated by FDD and the required data for tolerating failure by FTC. These differences make it hard to apply the diagnostic data for faulttoleration [11].
Recent advances in network communication provide opportunities to transmit failureinformation data among controllers, actuators, and sensors by interconnecting the control nodes through fieldbus network such as CAN and FlexRay [9, 10, 12, 13]. The control system interconnected by network is defined as networked control system (NCS). NCS provides not only the advantages of simplified wiring but also the opportunity to implement more sophisticated control laws such as FTC. Two major research issues have been studied in applying NCS to a real system: one is the stability problem that occurred in network environments such as transmission delay and packet losses among network nodes and the other is to design a sophisticated control architecture including FTC. Actually, the stability problems due to message delay or packet loss can be resolved by adopting a highly reliable and deterministic network such as FlexRay and TTP/C. Recently, more researchers have paid attention to the second issue. Thanks to the enhanced dataexchange ability, NCS can be efficiently used to tolerate failures by exchanging the diagnostic data fast and accurately. For example, Yang et al. proposed the networked faulttolerant control system (NFTCS) architecture using smart actuators [9]. In Figure 1, by adopting microprocesses on conventional actuators, smart actuators can achieve the selfdiagnostic and communication abilities for sharing their health conditions. Then the supervisor can analyze the faulty system model and reconfigure the baseline controller that guarantees the stability of the faulty system using the shared health condition data. In this paper, the FTCA method using the transmitted condition data through network is proposed.
This paper is organized as follows. Section 2 analyzes the general dynamic model of the actuator faulty system. Then faulttolerant control allocation method is proposed in Section 3. In this section, actuator saturation problem due to limited operation range of actuators is also considered. In Section 4, the performance of the proposed FTCA method is evaluated by simulation results with application to the F18 HARV aircraft. Finally, the concluding remarks followed in Section 5.
2. General Dynamic Model of Actuator Faulty System
In this section, the general dynamic model of an actuator failure system is analyzed. The condition data provided by smart actuators are used to construct the mathematical model of the faulty system. First, the generalized model of a faulty actuator is proposed. And then it is expanded to the set of several faulty actuators. Finally, the general statespace form of the actuator failure system is proposed at the end of this section.
2.1. Generalized Actuator Failure Model
Bošković and Mehra proposed that the response of faulty actuator can be represented as one of the following four types: lockinplace (LiP), hardover, float, and loss of effectiveness (LoE) [14]. Figure 2 shows the actuator responses of normal and failure cases. In Figure 2, failure responses are categorized into two types according to the inputoutput relationship; that is, one is unstable case without any consideration of input commands since faulty actuator stops at one position or diverges to the saturation position like LiP, hardover, and float failures and the other is performance degradation case relative to input commands. In [9], the former one is defined as total failure.
(a) Lockinplace
(b) Float
(c) Lockinplace
(d) Float
From Figure 2, the general position of the th actuator with/without failures can be represented as follows: where the subscript indicates the th actuator and is the smallest integer greater than or equal to . And denotes the expected position of the th actuator if it is normal and denotes the total failure position if total failure occurs. The quantitative value in the range of 0 to 1 indicates the performance degradation of the th actuator: The quantitative value is provided by the th smart actuator as the condition data; that is, if 50% of LoE failure occurs on the th actuator, then ; so . Similarly, if the th actuator is operated normally, then ; so .
Let be total number of actuators. If failures occurred on actuators, then the general dynamics of a group of faulty actuators can be represented as follows: where denotes the set of expected normal outputs of faulty actuators and denotes the total failure positions. And is an ()identity matrix. Moreover,
Let us denote the responses of the augmented actuators whose entries are sets of faulty actuators and normal actuators by ; then the general responses of actuators can be represented as follows:
where , , In (5), if all actuators are operated normally, then it satisfies the fact that and , and in (6), and . So .
From (5), failureinformation data for generalizing the faulty dynamic model can be represented as the quantitative value . Each smart actuator diagnoses its health condition by estimating the value . By transferring this data, faulttolerant controller can accommodate failures occurring on multiple actuators.
2.2. General Dynamics of Faulty System
Let us consider the following dynamical system: where and are the state and input vectors, respectively. And is the input distribution matrix denoted by . And is the model uncertainty vector of the system.
By (5), if failures occurred on actuators, then the system model can be generalized as follows: where and are failure and normal input distribution matrices, respectively; that is, if failures occurred on both th and th actuators, then and ,.
3. The Proposed FaultTolerant Control Allocation Method
Like modern aircrafts such as the F18 HARV (High Alpha Research Vehicle) considered in this paper, additional actuators, also called control surfaces, are adopted to achieve high performance by producing additional forces/moments. Redundant actuators also provide opportunities to tolerate failures in actuators by providing additional moments enough to compensate unexpected disturbances generated by faulty actuators. In this section, an additional actuator management method for tolerating actuator failures is proposed by extending a conventional actuator management technique called control allocation (CA).
3.1. FaultTolerant Control Allocation Problem
CA is an actuator management technique in overactuated systems. Figure 3 describes the general structure of CA. In this figure, for a virtualinput signal generated by the controller, the control allocator generates the corresponding real control input signal . For the dynamical system represented in (7) with , suppose that the equivalent system controlled by the virtual input is represented as follows: where with is a full column rank matrix. Then the control allocation problem (CAP) can be stated as follows [9, 10].
3.1.1. Control Allocation Problem (CAP)
Given a virtual input , find the optimal actuator commands such that the following equation is satisfied: From (10), the redundant actuator redistribution problem is converted to the problem of finding the optimal inputs.
Similar to the CAP, redistribution of redundant actuators for tolerating actuator failures can also be represented as the optimal reconfiguration input problem. For the generalized faulty system (8) and the corresponding virtualinput system (9), the faulttolerant control allocation problem (FTCAP) can be represented as follows.
3.1.2. FaultTolerant Control Allocation Problem (FTCAP)
Given a virtual input , find the optimal reconfigurable actuator commands such that the following equation is satisfied: where and are vectors whose entries are the minimum and the maximum values of each entry of , respectively. The methodology of finding that satisfies (11) is proposed in the following subsection.
3.2. The Proposed Reconfiguration Law
From the FTCAP, the reconfiguration law finds the suitable control inputs corresponding to the virtual inputs generated by the controller. Hence, the reconfiguration law can be designed by adding two inputs: (a) the normal control inputs that satisfy the CAP in (10) and (b) the additional inputs that can tolerate the degraded performance due to failures. The following theorem proposes the method of designing the reconfiguration inputs.
Theorem 1. If a control system has kfaulty actuators, then reconfiguration law can be obtained as follows: where is the desired control input generated by the conventional CAP and is the additional input that satisfies the following condition: where
Proof. Using the proposed reconfiguration law in (12), the FTCAP can be analyzed as follows: Substituting (13) into (15), the following equation is satisfied: So the degraded performance can be compensated using the proposed faulttolerant control allocation method. Hence, the control system can maintain the normal operation.
From Theorem 1, the proposed reconfiguration law can efficiently compensate failures on actuators and the system can maintain the performance of normal operation. It is worth noting that pseudoinverse, constraint optimization, and so forth can be used to find the additional input in (13). Moreover, Buffington and Enns proposed the daisychain method that overcomes the actuator saturation problem for the conventional CA [17]. Since actuators are physically operated in limited range, some actuators cannot reach the desired position. This phenomenon is called actuator saturation. Errors between the actual and the desired actuator positions lead to the performance degradation of the control system. In this paper, the results of the daisychain method are modified to compensate failures in the following remark.
Remark 2 (faulttolerant daisychain method). Let us separate actuators into groups () as . And let us reorder and separate the column vectors of in (8) as along with the corresponding . To simplify the problem, all faulty actuators are assumed in Group 1; that is, . Then the generalized faulty model represented in (8) can be represented as follows: where is the number of actuators in Group 1.
Theorem 3. For the generalized faulty system (17), the reconfiguration law can be obtained as follows: where is the additional inputs provided by redistributing the redundant actuators to compensate for failures and satisfies the following conditions.(a)Let , and let be the right inverse of . Then (b)For , the right inverse of , (It is worth noting that is used to compensate the effect of failure actuators. If cannot compensate perfectly due to saturation, then tries to compensate the remainder. Similarly, is used, if is saturated at the upper or the lower limited position.)
Proof. If the system has faulty actuators, then the system dynamics can be generalized as (17). Using the reconfiguration law proposed in (18), the faulty actuator term of (17) satisfies the following: If the conditions (a) and (b) are satisfied, then the additional inputs try to reduce the errors due to saturated actuators as well as faulty actuators: If it is assumed that (22) is satisfied, that is, errors are compensated by redistributing the redundant actuators, then (21) can be represented as follows: So using the faulttolerant daisychain method proposed in (18)–(20), the degraded performance can be compensated. Hence, the control system can maintain the normal operation.
4. Simulation Results
4.1. Problem Description
In this section, the performance of the proposed faulttolerant control allocation technique is evaluated with application to the F18 HARV aircraft. Like conventional aircrafts, the F18 HARV adopts ailerons, stabilators, and rudders as primary control surfaces. Indeed, the aircraft also takes six vanes to produce additional moments by vectoring thrust [15]. Hence, the aircraft can overcome stall situation and achieve high angleofattack flight ability. The added control surfaces (vanes) also provide an opportunity to improve the faulttolerance ability that will be evaluated in this section. The structure of the F18 HARV is described in Figure 4.
(a)
(b)
In this simulation, two failure scenarios are considered: one with 50% of LoE failure on the left aileron at 3.5 sec and LiP failure on the left stabilator at 8 sec and the other with float failure on the left aileron at 3.5 sec and hardover failure on the left stabilator at 8 sec. In both scenarios, the aircraft performs turn reversal maneuver are achieved by rolling the aircraft to 60 deg to the left and then to 60 deg to the right. Since failures break the symmetry of the aircraft, the longitudinal and lateral/directional dynamics are coupled. The linearized model of the aircraft at Mach Mach 0.6 and altitude 30,000 ft is represented as follows [16]:where is the angleofattack (rad) and is sideslip (rad). And , , and are roll, pitch, and yaw angular velocities (rad/sec), respectively. denotes the deflections (rad) of control surfaces in the F18 HARV and the subscripts of are represented in Table 1. And Table 2 shows the loworder actuator models and constraints. Moreover, in Figure 4, thrust vectoring nozzle deflections can be obtained by combination of vanes circling the edge of engines. In this simulation, the dynamic inversion controller that satisfies the Level 1 flight requirements is designed to achieve the turn reversal maneuver [18, 19]. Moreover, it is assumed that maximally 5% of random disturbances of deflections of control surfaces are injected as uncertainties.


4.2. Simulation Results
The results of the first scenario are shown in Figures 5–7. Due to the injected LoE failure in 3.5 sec, the turn reversal maneuver performance is a little degraded. However, locking at one position (near −3.5 deg) of the left stabilator due to the LiP failure in 8.0 sec leads to significant degradation of the performance. Since failure on one surface breaks symmetric geometry of the aircraft along with longitudinal axis, it makes the system unstable in longitudinal dynamics (Figure 5(b)). However, using the proposed reconfiguration algorithm, the aircraft can maintain the normal performance. The proposed FTCA method redistributes the redundant actuators in order to compensate the effect of failures on both lateral and longitudinal axes. Figures 67 show the deflections of control surfaces in faulty and reconfiguration cases, respectively. In Figure 6, the left aileron is deflected with 50% of degraded performance in 3.5 sec and the left stabilator locks around 10.5 deg in 8 sec. To achieve lateral and longitudinal stability of the faulty aircraft, the deflections of the right stabilator, aileron, and pitch thrust vectoring significantly increased as shown in Figure 7.
(a) Roll angle
(b) Pitch angle
(c) Flight path
(a)
(b)
(c)
(d)
(e)
(a)
(b)
(c)
(d)
(e)
Figures 8–10 show the results of the second failure scenario. Similar to the first scenario, the performance of the aircraft is degraded due to the injected float failure on the left aileron in 3.5 sec and hardover failure on the left stabilator in 8.0 sec. In particular, the aircraft starts to diverge in longitudinal axis around 8.0 sec. In contrast to the without reconfiguration case, the aircraft can maintain the normal performance in both lateral and longitudinal axes by applying the proposed FTCA method. The deflections of control surfaces for faulty and reconfiguration cases are shown in Figures 910, respectively. In Figure 9, the left aileron locks the equilibrium position (0 deg) in 3.5 sec and the deflection of the left stabilator diverges to the limit position −10.5 deg in 8 sec. Similar to Scenario I, Figure 10 shows that the deflections of the right stabilator, aileron, and pitch thrust vectoring significantly increase to achieve lateral and longitudinal stability of the faulty aircraft.
(a) Roll angle
(b) Pitch angle
(c) Flight path
(a)
(b)
(c)
(d)
(e)
(a)
(b)
(c)
(d)
(e)
Hence, by redistributing the redundant control surfaces based on the proposed FTCA, the aircraft can maintain the normal performance without considering the stability of the reconfigured closedloop system or predesigning all possible failure models.
5. Concluding Remarks
This paper proposed the networked faulttolerant control method based on control allocation. Using the transmitted condition data diagnosed by the local devices in network environment, the proposed FTC redistributes the redundant actuators in order to tolerate failures on several actuators. To analyze the effects of actuator failure, this paper proposes the general model of the faulty system firstly. From the general failure model, the effect of failure can be represented by a quantitative value . And then, using this value, the proposed FTCA method achieved by redistributing the redundant actuators can accommodate failures efficiently. The performance of the proposed method has been evaluated with a modern high performance aircraft. A set of simulation results shows that the proposed method can effectively accommodate the actuator failures.
However, the proposed faulttolerant control allocation is analyzed for a linearized system. Actually, tolerating faults highly depends on the relationship between faulty states and controllable normal inputs. For future work, the proposed method will be extended for nonlinear systems. Moreover, it is planned to implement in realtime nonlinear systems.
Conflict of Interests
The authors declare that there is no conflict of interests regarding the publication of this paper.
Acknowledgment
This research was supported by the International Research & Development Program of the National Research Foundation of Korea (NRF) funded by the Ministry of Science, ICT and Future Planning of Korea (2012K1A3A7A03057508).
References
 Z. Gao and P. J. Antsaklis, “Stability of the pseudoinverse method for reconfigurable control systems,” International Journal of Control, vol. 53, no. 3, pp. 717–729, 1991. View at: Publisher Site  Google Scholar  Zentralblatt MATH  MathSciNet
 K. J. Åström and B. Wittenmark, Adaptive Control, AddisonWesley, Reading, Mass, USA, 2nd edition, 1995.
 I. Yang, Y.J. Kim, and D. Lee, “Actuator failure diagnosis and accommodation using sliding mode control for submersible vehicle,” Journal of Institute of Control, Robotics and Systems, vol. 16, no. 7, pp. 661–667, 2010. View at: Publisher Site  Google Scholar
 J. D. Bošković and R. K. Mehra, “A multiple modelbased reconfigurable flight control system design,” in Proceedings of the 37th IEEE Conference on Decision & Control (CDC), pp. 4503–4508, IEEE, Tampa, Fla, USA, December 1998. View at: Publisher Site  Google Scholar
 D. Enns, “Control allocation approaches,” in Proceedings of the AIAA Guidance, Navigation and Control Conference and Exhibit, pp. 98–108, 1998. View at: Google Scholar
 J. Buffington, P. Chandler, and M. Pachter, “Online system identification for aircraft with distributed control effectors,” International Journal of Robust and Nonlinear Control, vol. 9, no. 14, pp. 1033–1049, 1999. View at: Google Scholar
 H. Alwi and C. Edwards, “Fault tolerant control using sliding modes with online control allocation,” Automatica, vol. 44, no. 7, pp. 1859–1866, 2008. View at: Publisher Site  Google Scholar  MathSciNet
 K. Ahmed and T. Didier, “Reconfigurable control design for overactuated systems based on reliability indicators,” in Proceedings of the Conference on Control and Fault Tolerant Systems, Nice, France, October 2010. View at: Google Scholar
 I. Yang, D. Kim, and D. Lee, “Faulttolerant control strategy based on control allocation using smart actuators,” in Proceedings of the Conference on Control and FaultTolerant Systems, pp. 377–381, Nice, France, October 2010. View at: Publisher Site  Google Scholar
 I. Yang, D. Kim, and D. Lee, “FaultTolerant networked control systems using control allocation for failures in multiple control surfaces,” Journal of Institute of Control, Robotics and Systems, vol. 17, no. 11, pp. 1067–1073, 2011. View at: Publisher Site  Google Scholar
 Y. Zhang and J. Jiang, “Bibliographical review on reconfigurable faulttolerant control systems,” in Proceedings of the 5th IFAC Symposium on Fault Detection, Supervision and Safety for Technical Processes, pp. 265–276, Washington, DC, USA, 2003. View at: Google Scholar
 D. Lee, Distributed realtime faulttolerant control using smart actuators and timetriggered communication [Ph.D. dissertation], Department of Automatic Control and Systems Engineering, Sheffield University, Sheffield, UK, 2002.
 C. Kambhampati, R. J. Patton, and F. J. Uppal, “Reconfiguration in networked control systems: fault tolerant control and plugandplay,” in Proceedings of the 6th IFAC Symposium on Fault Detection, Supervision and Safety of Technical Processes, pp. 151–156, Tsinghua University, Beijing, China, 2006. View at: Google Scholar
 J. D. Bošković and R. K. Mehra, “Failure detection, identification and reconfiguration in flight control,” in Fault Diagnosis and Fault Tolerance for Mechatronic Systems: Recent Advances, vol. 1, pp. 129–167, Springer, Berlin, Germany, 2003. View at: Publisher Site  Google Scholar
 K. W. Iliff and K.S. C. Wang, “Flightdetermined subsonic longitudinal stability and control derivatives of the F18 High Angle of Attack Research Vehicle (HARV) with thrust vectoring,” Tech. Rep. NASA/TP97206539, 1997. View at: Google Scholar
 J. A. Richard, J. M. Buffington, A. G. Sparks, and S. S. Banda, Robust Multivariable Flight Control, Springer, London, UK, 1994.
 J. M. Buffington and D. F. Enns, “Lyapunov stability analysis of daisy chain control allocation,” Journal of Guidance, Control, and Dynamics, vol. 19, no. 6, pp. 1226–1230, 1996. View at: Publisher Site  Google Scholar  Zentralblatt MATH
 D. Enns, D. Bugajski, R. Hendrick, and G. Stein, “Dynamic inversion: an evolving methodology for flight control design,” International Journal of Control, vol. 59, no. 1, pp. 71–91, 1994. View at: Publisher Site  Google Scholar
 “Military Standard Flying Qualities of Piloted Aircraft,” MilSTD1797A, 1990. View at: Google Scholar
Copyright
Copyright © 2015 Inseok Yang and Dongik Lee. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.