Research Article  Open Access
Adaptive Robust FaultTolerant Synchronization Control for a Dual Redundant Hydraulic Actuation System with CommonMode Fault
Abstract
This paper investigates the faulttolerant synchronization control (FTSC) problem for a dual redundant hydraulic actuation system (DRHAS), which works on active/active (A/A) mode and suffers from a kind of commonmode fault (CMF), i.e., internal leakage faults occurring in both hydraulic actuator (HA) channels simultaneously due to a common cause. Firstly, in order to follow the position command and synchronize the force outputs of the two channels, a desired trajectory generator derived from the dynamics of the control surface is employed. Then, considering model uncertainties and nonlinear dynamics of the plant, an FTSC controller is designed based on adaptive robust control (ARC) theory and backstepping technology. The controller parameters, closely related to the fault parameters, are updated online to make the controller adapt to the fault condition only when the system performance degradation exceeds a prescribed tolerable level. It has been verified that the proposed FTSC scheme can guarantee the bounded stability of output tracking error system under commonmode fault. Finally, simulation results under two scenarios demonstrate the effectiveness of the proposed FTSC scheme.
1. Introduction
For safety and reliability consideration, the primary flight control systems for modern airplanes have universally adopted redundant hydraulic actuation systems (RHAS) to drive important control surfaces. One typical example is the Airbus A320, in which both ailerons are driven by a dual redundant hydraulic actuation system (DRHAS), the rudder is driven by a triply redundant hydraulic actuation system (TRHAS), and the elevators are driven by DRHASs [1].
In a typical RHAS configuration, several similar hydraulic actuators (HA), which are supplied from three redundant hydraulic power sources, connect to a common control surface in parallel. Each HA includes an electrohydraulic servo valve (EHSV), a hydraulic cylinder, and other accessories. There are two distinct operating modes for a RHAS, i.e., active/active (A/A) mode and active/standby (A/S) mode. In A/A mode, all HA channels are working together at the same point and their outputs can be summed in three ways, i.e., parallel force summing, parallel velocity summing, and parallel position summing [2]. Among them, the parallel force summing is the most common choice for the primary flight control system of airliners, such as A320, A380, B747, and B787. In A/S mode, the HA channels operate independently and only one channel is working at one time while others are isolated by bypassvalves.
The RHAS on A/A mode has a potential risk of suffering from commonmode fault (CMF), which is a coincidence of fault states of components in separate channels caused by the same event(s) [3]. As stated in [4], the CMF is difficult to predict or to avoid by system design as its nature is unexpected or unrecognized. Reference [5] shows that design faults which are not found and removed at stages prior to the operational stage constitute a major part of CMF in redundant system. In addition, CMF can also occur due to external causes such as environmental disturbance and power supply disturbance. Considering the critical functions of the RHAS in primary flight control systems, CMF tolerance is very important.
More recently, theoretical research on faulttolerant control (FTC) problems, especially on active faulttolerant control (AFTC) problems for hydraulic actuation system, is receiving more and more attention. However, most research focuses on the FTC problems for singlechannel hydraulic actuator (SHA). The existing design methods include quantitative feedback theory (QFT) [6, 7], adaptive robust control (ARC) [8â€“10], and intelligent control [11]. Among them, [7â€“11] belong to the AFTC method, which needs to employ realtime fault detection and diagnosis (FDD) module to provide up to date information about the true status of a system [12]. The FDD methods in [7â€“11] include neural network [7], adaptive robust observer [8], parameter adaptive methodology [9], and stochastic filtering theory [10, 11].
Compared with SHA, to the best of the authorsâ€™ knowledge, the studies on FTC strategies for the RHAS, especially for the RHAS suffering from CMF, are very limited. In [13, 14], a disturbancedecoupled robust adaptive observer was designed and applied to a RHASdriven elevator for faulty parameters estimation. A set of local fuzzy PI controllers with respect to different operating conditions of the system were designed. Then, a tolerant control output was generated by synthesizing the output of each local controller according to the obtained fault information. However, the FTC controllers are designed on the basis of an approximate linear model, dynamics of the control surface, and model uncertainties of the plant are not considered in the existing results.
To deal with the control problem for nonlinear system with model uncertainties, a great number of nonlinear control schemes have been developed by employing backstepping technology. For example, in [15â€“18], several backsteppingbased adaptive neural (or fuzzy) control schemes were presented and neural networks (or fuzzy logic systems) were employed to approximate the unmodeled dynamics. However, the application of these schemes is limited by the large computation load. In [19], a FTC scheme based on adaptive sliding mode backstepping was proposed for a nonlinear system under external disturbances and faults. In [20, 21], with the aid of the backstepping technology, several nonlinear ARC controllers were constructed, in which the adaptive part was employed to handle parametric uncertainties and the robust part was mainly used to accommodate the unmodeled dynamics. To the authorsâ€™ knowledge, a critical issue for FTC design is the limited amount of time for the control system reconfiguration [12]. Therefore, due to its simple structure and fast execution speed, the backsteppingbased ARC scheme is more suitable for the FTC design for RHAS with model uncertainties.
The force fighting between HA channels is an inherent problem for the RHAS which works on A/A mode and has a parallel force summing configuration, namely, the HAs fight against each other to find an equilibrium point [22].The primary cause of the force fighting problem lies in the unsynchronized force outputs of HAs. In normal situation, manufacturing tolerances and individual nonlinear property of each HA can lead to unsynchronized force outputs. Moreover, the faults occurring in the RHAS will aggravate the unsynchronization of the force outputs and finally enlarge the force fighting between HA channels. Since a serious force fighting may slow down the system response, reduce the position tracking accuracy, or even damage the control surface, solving the problem of unsynchronized force outputs under fault conditions is very important for the FTC controller design for RHAS. Recently, several control strategies have been developed for force outputs synchronization, such as pressure differential equalization control [23], decoupling control [24], and motion state synchronization control [25, 26]. However, to the authorsâ€™ knowledge, most of the results are based on linear RHAS models without consideration of nonlinear dynamics and model uncertainties. Besides, no FTC scheme for RHAS can achieve force outputs synchronization control for HAs.
In this paper, considering the nonlinear dynamics of the hydraulic system, model uncertainties, and dynamics of the control surface, an adaptive robust faulttolerant synchronization control (FTSC) scheme is proposed for a DRHAS suffering from an internal leakage CMF. The contributions of the paper are twofold: Based on the introduction of two reference trajectories, a general nonlinear model for the DRHAS with model uncertainties and an internal leakage CMF is constructed to facilitate the controller design. A novel FTSC controller based on ARC control and backstepping technology is designed, which can handle the CMF tolerant control problem and the force outputs synchronization control problem simultaneously. Simulation results further demonstrate the effectiveness of the proposed scheme.
The rest of the paper is organized as follows. The model for a DRHAS working on A/A mode is given in Section 2. Then, the FTSC scheme which includes desired trajectory generation, model transformation, and FTSC controller design is presented in Section 3. Simulation results are provided in Section 4. Finally, a conclusion is given in Section 5.
2. Model of a Dual Redundant Hydraulic Actuation System
The structure of a typical DRHAS is shown in Figure 1. Two hydraulic actuators, powered by different hydraulic power sources, connect to a common control surface and operate on A/A mode. Each HA mainly consists of an EHSV and a hydraulic cylinder.
2.1. Model of the Hydraulic Actuator
The two HAs have the same structure, and the mathematical model for HA_{1} is presented below.
The model of the EHSV can be described by a proportional function [27, 28] aswhere is the servo valve displacement, is the control input, and is the servo valve gain.
The cylinder dynamic can be represented bywhere is the piston rod displacement, is the piston mass, is the piston area of the active chamber, is the piston area of the passive chamber, is the damping coefficient, is the external load of the cylinder, and is the model uncertainty which includes unmodeled nonlinear dynamics and lumped parameter variations.
The chamber pressures of the cylinder, i.e., and , are calculated bywhere is the effective oil bulk modulus, is the volume of the active chamber, is the volume of the passive chamber, and and are the initial volumes of two chambers, respectively. is the supply flow rate of the active chamber and is the return flow rate of the passive chamber.
When the DRHAS suffers from an internal leakage CMF, i.e., the internal leakage faults occurring in both HAs simultaneously due to a common cause, the internal leakage flow rate of HA_{1} can be modeled by [9]where is the normal internal leakage coefficient, represents the fault internal leakage coefficient, is the sign function, is the fault occurrence time, is the time profile of the fault which can be described by and is a positive constant which represents the fault evolution speed.
The flow rates and can be calculated bywhere is the flow rate gain of the servo valve, is the supply oil pressure, is the return oil pressure, and is defined as
For simplicity, we define
Therefore, (7) and (8) can be rewritten as
2.2. Model of the Control Surface
Supposing both HAs are connected rigidly to the control surface (see Figure 1), the driving forces and which are generated by the two HAs can be described by where , are the connection stiffness and is the linear displacement of the control surface. The angular displacement can be approximately represented as a linear function of , then we have
Assuming that the outputs of the HAs are summed by force, the control surface dynamics can be represented as [24]where represents the radial distance of the control surface, is the moment of inertia, is the damping coefficient, and is the load torque.
2.3. StateSpace Equation of the Dual Redundant Hydraulic Actuation System
Define the state variables as follows.
According to (3)(13), we haveand can be described in a similar manner. Then, a statespace equation for the DRHAS can be written as where , , , , , , , , , is the fault parameter vector, is the control input vector, and is the coupling part between two HA channels [24].
Defining the output variables as , then according to (14)(17), the output equation can be written as
Assumption 1. The chamber pressure , are bounded and satisfy , . Similarly, the chamber pressure , are bounded and satisfy , . Meanwhile, all the state variables in (18) are bounded no matter under faultfree or faulty conditions.
Remark 2. From Assumption 1 and (10)(11), it can be concluded that and . Similarly, it can be derived that and . Therefore, the inequalities and always hold and the matrix is reversible.
3. FaultTolerant Synchronization Control Scheme
For system (18)(24), the purpose of this section is to design a faulttolerant synchronization control scheme such that the output tracking error system is bounded stable under the internal leakage CMF condition and the following control performance can be guaranteed:(a)The output deflection angle of the control surface can follow the system deflection command.(b)The force outputs synchronization for two HAs can be maintained.
The structure of the proposed FTSC scheme is illustrated in Figure 2. To serve the control objectives, a desired trajectory generator is employed to adjust command inputs. Two reference trajectories and are generated for position tracking and for force outputs synchronization, respectively. Based on a transformed nonlinear model, an adaptive robust FTSC controller is designed by using backstepping technology. A Lyapunov function based method is used to evaluate the control performance of the closedloop system. The controller reconfigures its control action through parameters adaptation online as the degraded control performance induced by the CMF exceeds a tolerable level.
3.1. Desired Trajectory Generation
To realize the position control of the closedloop system, a reference trajectory is generated.
Theorem 3. The actual deflection angle can trace the deflection command accurately if the function can trace the reference trajectory which satisfies
Proof. The reference trajectory can be derived by using backstepping technique. Define two error variables asDefining a Lyapunov function as , its time derivative is Choosing the virtue control input as and substituting it into (27) yieldswhere is a positive constant.
Then choosing a Lyapunov function as and based on (24), (26), and (29), the time derivative of can be written as Defining a function as and from (30), the function can be seen as a control input, and when it satisfies (30) can be rewritten as where is a positive constant.
From (32), an asymptotic tracking can be achieved; i.e., and as . Therefore, Theorem 3 is proved.
In order to achieve the synchronous force outputs of two HAs and eliminate the fighting force as much as possible, a reference trajectory is generated.
According to (14) and (15), the fighting force between two HAs can be represented as
Defining a function as and setting . From (33), it is evident that the fighting force will approach zero as the function traces the reference trajectory accurately.
Assumption 4. The deflection command is continuous and bounded.
Remark 5. Noting (24), (26), (28), (31), and Assumption 4, , , , , , and are all bounded. Then, from (25), it is obvious that is bounded. According to the definition of and following Assumption 4, it is evident that is bounded. Then, by similar analysis, it can be derived that and are continuous and bounded.
3.2. Model Transformation
A linear transformation for the first two equations of (23) is introduced [24] and a new statespace model can be derived as where , , , , , , and .
To facilitate using backstepping method [29] to design the FTSC controller, a new state variable is defined and the statespace model (34) can be rewritten into the following semistrictfeedback form [30].
Assumption 6. The components of the model uncertainty vector after transformation satisfywhere and are known constants.
Assumption 7. The components of the fault parameter vector satisfywhere , , , and are known constants.
The effects of the internal leakage CMF can be represented bywhere .
3.3. FaultTolerant Synchronization Controller Design
Based on the transformed nonlinear model (35), an adaptive robust FTSC controller is developed and two control objectives should be achieved:(1)The state variable can track the reference trajectory .(2)The state variable can track the reference trajectory .
The specific design procedure is described as follows.
Step 1. Defining a vector of reference trajectory as , the tracking error vector is calculated by Introducing a virtue control vector to stabilize , the error vector is calculated by Defining a Lyapunov function as , its time derivative isSetting and substituting it into (41) yieldswhere is a diagonal positive definite matrix.
Step 2. Introducing a virtual control vector to stabilize , the tracking error can be calculated byConstructing a Lyapunov function , then according to (35), (40), (42), and (43), the time derivative of can be written as Choose the virtual control vector in (43) as where is an adjustable model compensation term, is a nominal stabilizing feedback, is an additional feedback term to tackle the model uncertainties, and is a diagonal positive definite matrix.
The item in (45) should satisfy the following conditions:where and are positive design parameters. In condition (i), and are used to tackle the model uncertainties and in two HA channels, respectively. Condition (ii) is to ensure that the control items and are dissipating in nature without affecting the functionality of the control item .
Remark 8 (see [30]). To meet the conditions of (46), we can choose where and are positive design parameters and satisfy
Remark 9. From condition (i) of (46), it can be derived thatwhere . Note that the smaller the value of , the better the robust control performance can be achieved.
Substituting (45) into (44) yields
Step 3. Similarly, constructing a Lyapunov function , then according to (35), (43), and (50), the time derivative of can be calculated byThe control law can be described as follows:where is an estimation of , is an adjustable model compensation term, is a nominal stabilizing feedback, is a nonlinear robust control law to tolerate the effects of the slight internal leakage CMF, and is a diagonal positive definite matrix.
Remark 10. Under no leakage or slight internal leakage CMF condition, the proposed FTSC control law (52) without parameters adaptation is actually a nonlinear robust synchronization control (NRSC) law.
From (38), the effect of the slight internal leakage CMF for each HA channel, which can be tolerated by the robust control law , should satisfy where , are predefined constants and represent the tolerable level of the slight internal leakage for HA_{1} and HA_{2}, respectively.
Subsequently, the robust control law in (52) should satisfy the following conditions.In condition (i) of (54), and are robust control laws to tolerate the effects of the slight internal leakage and in two HA channels, respectively, and the control accuracy for them is quantified by the positive design parameters and , respectively. The condition (ii) of (54) is to ensure that the control law is damping without affecting the functionality of .
Remark 11. The control law is chosen as where and are positive design parameters which satisfy and it is easy to verify that the control law (55) satisfies both the conditions of (54).
Remark 12. According to the condition (i) of (54), it can be derived thatwith . Similarly, the smaller the value of , the better the robust control performance that can be achieved.
Then substituting (52) into (51) yields
Theorem 13. For the model uncertainties satisfying inequality (36) or/and the slight internal leakage CMF occurring in the DRHAS fulfilling inequality (53), the robust control law (52) without parameters adaptation (i.e., ) can guarantee the following:
(a) All signals are bounded and the Lyapunov function is bounded bywhereand , , and is the initial value of .
(b) If there are no model uncertainties and internal leakage CMF after a finite time (i.e., ), then, except for the results in (a) of Theorem 13, zero final tracking error can also be achieved (i.e., as ).
Proof. Substituting (38), (49), and (57) into (58) yieldswhich leads to inequality (59) and (60). Therefore, , , and are bounded. Since is continous and bounded, from (39)(41), , , , , and are bounded. As and are bounded, and are bounded. Then, from (45) and (43), and are bounded. Noting Assumption 6, (35), and (39), , , and are bounded. Hence, from (45), is bounded. Then, noting Assumption 1 and (52), the control input is bounded. Therefore, the (a) of Theorem 13 is proved.
Furthermore, when after a finite time , (61) can be rewritten asand then following condition (ii) of (46) and (54), we haveHence, the (b) of Theorem 13 is proved.
Remark 14. If a moderate or severe internal leakage CMF occurs, inequality (53) will be violated which means that the control law (52) without fault parameter adaptation cannot tolerant the CMF any more. Meanwhile, the performance of the closedloop system will deteriorate immediately, followed by a violation of inequality (59). Therefore, the quadratic Lyapunov function is adopted as a performance indicator.
Remark 15. The function is used as a tolerable performance degradation level. As shown in (60), the maximum value of can be freely chosen by adjusting the controller parameters and . Note that the smaller the value of or the larger the value of , the better the transient performance that can be guaranteed.
Remark 16. Through online monitoring of the value of and comparing it with the value of , a moderate or severe internal leakage CMF can be indicated as inequality (59) is violated over a period of time, and a conditionbased maintenance operation can be performed to take the place of the scheduled maintenance, which will effectively reduce the maintenance costs.
If the performance indicator exceeds a tolerable performance degradation level, the controller reconfigures its control actions through controller parameter adaptation.
As , , (58) can be rewritten as where .
Furthermore, construct a Lyapunov function shown as follows:where the learning rate matrix is a diagonal positive definite matrix and the time derivative of is equivalent toFrom the above equation, an online updating law for estimation of internal leakage CMF can be derived by using the discontinuous projection mapping [30]. where and the discontinuous projection mapping is defined as follows:which guarantees that the parameters adaptation process has the following properties:
Theorem 17. For the DRHAS suffering from moderate or severe internal leakage CMF which violates inequality (53), the control law (52) combined with the parameter adaptation law (67) can guarantee that the closedloop control system gradually recover its performance if the following persistent excitation (PE) condition is satisfied:with .
Proof. In this situation, the third equation of (35) can be rewritten as Then, the time derivative of is equal toNote that there is no unknown disturbance in (72) and the PE condition (70) can be easily satisfied as the integral term is a diagonal positive definite matrix. Therefore, the CMF estimation will converge to its real value (i.e., as ). Thus, (64) can be rewritten aswhich leads to the same result as (59). If there are no model uncertainties after a finite time (i.e., ), the same result as (63) can be obtained. Thus, Theorem 17 is proved.
4. Simulation Results
To illustrate the effectiveness of the proposed FTSC scheme, a model of a DRHAS is established in the MATLAB/Simulink environment. Simulation parameters of the model are given in Table 1.

A comprehensive performance evaluation regarding the proposed FTSC scheme is performed in comparison with the other two schemes, i.e., the classical PID and the NRSC. Moreover, the following two scenarios are considered:
(a) Scenario S1: A severe internal leakage CMF which has different effects (i.e., different magnitudes and evolution speeds) on two channels occurs in the DRHAS. Specifically, at , a severe internal leakage fault with , occurs in HA_{1} and a severe internal leakage fault with , occurs in HA_{2} due to a common cause.
(b) Scenario S2: A slight internal leakage CMF occurs in the DRHAS. Specifically, at , a slight internal leakage with , occurs in HA_{1} and a slight internal leakage with , occurs in HA_{2} due to a common cause.
The parameters for the control schemes are shown in Table 2. In addition, is used as the system deflection command to fulfill Assumption 4. An elastic load is used to simulate the air loads acting on the control surface and the unknown model uncertainties and in two HAs are as follows:and .
