Search Results

The aerospace and automotive electronic systems are getting more complex and/or highly integrated, as defined by ARP 4754A, making extensive use of microelectronics and digital memories which, in turn, operates in higher frequencies and lower voltages. In addition, the aircraft are flying in higher altitudes, and polar routes are getting more frequent. These factors raise the probability of occurrence of hazardous effects like the Single Event Upsets in their embedded electronic systems. These must be designed in a way to tolerate and assure the immunity to the Single Event Upsets, based upon criteria such as reliability, availability and criticality. This paper proposes an overview of an assurance process of immunity of embedded electronic systems to Single Event Upsets caused by ionizing particles by means of a review of literature and an analysis of standards as ECSS-E-ST-10-1, NASA Single Event Effects Criticality Analysis and IEC TS 62396-1.

Currently, the use of Global Navigation Satellite Systems-GNSS has been widely disseminated for the most different applications, from the aeronautical navigation to the car traffic, being the Global Positioning System-GPS the most used system for such objectives. New applications have presented challenges in terms of the main requirements associated to such systems, namely: precision, reliability, availability, continuity and integrity. It is because proposed solutions, such as satellite or ground-based augmentation systems, depend on signals provided by the GNSS satellite constellation. It constitutes a limitation for using such systems for position and velocity estimations. On other hand, Inertial Navigation Systems-INS, being independent of external signals, have a big potential to be applied on these circumstances; furthermore, they present characteristics that may be considered complementary to the GNSS.

The realization of modern systems subjected to automatic control, such as aircraft, automobiles, satellites, rocket launchers, cargo and military ships, and so forth; increasingly assume, within its very set of requirements, the task of providing better dependability, i.e.: safety, reliability, and availability altogether. Towards this demand, fault-tolerant control greatly meets such growing demand of dependability, by its ability of recognizing the occurrence of potentially hazardous/hazardous faults within the overall (closed-loop) system, and by taking remedial action whenever necessary/mandatory. The process of fault tolerance can be segregated into two fundamental steps: (1) that of fault diagnosis, comprising fault detection-isolation-identification, and, (2) control adjustment/reconfiguration. This paper focuses on the second step, of control adjustment/reconfiguration.

Current systems such as: satellites, aircrafts, automobiles, turbines, power controls and traffic controls are becoming increasingly complex and/or highly integrated as prescribed by the SAE-ARP-4754 Standard. Such systems and their control systems use many modes of operation and many forms of redundancy to achieve high levels of performance and high levels of reliability under changing environments and phases of their lifecycle. The environment disturbances, environment variability, plant non-linear dynamics, plant wear, plant faults, or the non-symmetric plant operation may cause de-synchronization in phase or time among: 1) simultaneous units in the same normal mode of operation; 2) successive units in successive normal modes of operation; 3) main and spare units from normal to faulty modes of operation. So, techniques to reduce those causes or their effects are becoming important aspects to consider in the design of such systems.

The architecture is a concept very broad and important that is directly connected to the realization of a system. It defines what the system is capable of doing, how it accomplishes its mission and how the system is. Currently, the development of system architectures is considered a domain of knowledge where science meets art. In some specific areas, the methods on the development of system architectures are already well formalized. However, when analyzing the evaluation of system architectures such as those for multi-domain control systems, it is clear that there is still much room for rationalization. In these cases, the search for new methods for the evaluation of system architectures is currently in the state of art. In this work we discuss methods used in the verification and validation of control systems architectures of cyber-physical systems based on models and systems metrics.

Since its introduction at INPE, in the late 1960s, Systems Engineering has passed through phases of greater and lesser importance. Three different phases are clearly recognized. The first two phases are closely associated with efforts to develop space systems. The third and present phase is associated to the recent growth in the importance of Systems Engineering to the development of the contemporary large and complex systems. This paper is a summary review of the history of Systems Engineering at INPE from its inception to the present.

The supply of electrical power is one of the most important functions required by the diverse payloads of satellites. A fault in the corresponding subsystem might lead to mission or even vehicle loss. Among the causes of such faults, we highlight the phenomenon of thermal avalanche in batteries. It can be explained as an energetic unbalance where the rate of heat generated in the interior of the system exceeds its capacity to dissipate it. This occurred to the OAO1 of NASA just after its launch on April 8, 1966; and with the CBERS2 of CAST and INPE already in orbit in 2007 and 2009. This work presents a discussion on the causes and effects of thermal avalanches in artificial satellite battery charging and discharging systems.

Currently, the use of Global Navigation Satellite Systems-GNSS has been widely disseminated for the most different applications, from the aeronautical navigation to the car traffic system, being the Global Positioning System-GPS the most used system for such objectives. New applications of such systems have presented more demanding requirements in terms of precision for the position and velocity provided by these systems. Some solutions, as the precision augmentation systems based on satellite or ground improve the precision of the position and velocity estimates. However, the sampling rate of these systems is not substantially improved. Therefore, it constitutes a major limitation of such systems for the position and velocity estimates during high acceleration transients. On other hand, Inertial Navigation Systems- INSs present superior performance under these circumstances.

Avionics Systems are increasingly used to perform safety-critical functions at high altitudes. But their increasing capacity and concentration of memory and logics leads to more frequent occurrences of single event upsets, especially in high altitudes. In this work we discuss the process of eliciting and validating requirements to handle single events upsets in avionic systems. To do that we initially summarize and update the concepts of radiation environment of the atmosphere, radiation induced errors, single event upsets, etc. presented in a previous paper. Then, we discuss some of their effects on avionic systems and ways of mitigation, reported in the literature. Finally, we discuss provisions to demand the adoption of such mitigation measures, and their sufficiency by transforming them into requirements, according to recommendations of compliance described in standards as SAE ARP 4754A and RTCA DO-254.

Several papers presents fault detection and isolation techniques for fault in only one sensor; in this paper we will present a technique for multiples faults detection and isolation in sensors of dynamic systems. Multiples faults have less probability to occur but it is not null. So in critical applications the system needs to be operational even in this situation. In this paper we will present a design for a Multiples Faults Detection and Isolation (MFDI) system, an example to illustrate this technique and its respective results.

In this work we developed a comparative study between many resolution methods of the exponential matrix from an inequality extracted from a specific Liapunov function to obtain information about some stability regions for sampled-data control systems as a function of the sampling-time and the plant used. We used many methods from the literature like: power series, Cayley-Hamilton theorem, Lagrange-Sylvester theorem, eigenvalues/ eigenvectors decomposition and Padé rational approximation. The main objective of this study is to choose the most appropriate method for the resolution of this important problem and to use the results found as a basis for future works.

In this work we study the stability of digital controls of flexible/Vibratory aerospace/automobile systems by the graph norm technique, occurring in sampled-data control systems due to sampling period variations. To do so, this work tries to establish regions (graphs) of stability and instability in a Banach Space, the distances (norms) between them and a given design to detect analytically and/or numerically its margins of stability or conditions of instability. Based on that, we sketch the first steps for a design methodology of stable digital controllers of flexible/vibratory systems embedded in a sampled-data system with adjustable sampling periods of A/D and D/A converters. A short tutorial about the graph norm technique is also given and some theoretical results as well numerical results are shown. This work was done in two folds to unmask the stability secrets hidden in a general sampled-data control system, until today not revelated.

In this work we discuss some types of simulation environments and laboratories, their characteristics and applications to the simulation and control of aerospace vehicles. This includes: the basic definitions, types and characteristics of simulators and simulations (physical, computational, hybrid, etc.; discrete events, discrete time, continuous time, etc; deterministic, stochastic, etc.) their basic compromise (simplicity × fidelity), their man-machine interfaces and interactions (virtual, constructive, live, etc.), their evolution law (time, events, mixed, etc.), their architectures (“stand-alone”, PIL, HIL, MIL, DIS, HLA, etc.), and especially, their environments (discrete, continuous, hybrid, etc.) and laboratories (physical, computational, hybrid, etc.), and their applications to the simulation and control of aerospace vehicles. This is illustrated by some examples driven from the aerospace industry.

Eigenstructure techniques allow to detect and isolate faulty components in a dynamic process, such as sensor biases, actuator malfunctions, changes in dynamic parameters due to leaks and deterioration. Fault detection is the first step to achieve fault tolerance, but for this the redundancy has to be included in the system. This redundancy can be either by hardware or by software. In situations in which it is not possible to use hardware redundancy only the software redundancy can be used. Therefore using eigenstructure techniques, for the fault detection and isolation, the tests can be done through the angle between the residue vector direction and the fault direction vector. By this way, we can reduce false alarm and the alarm loss rates due to the noise and changes in system parameters.

Systems such as satellites, aircrafts, automobiles and air traffic controls are becoming increasingly complex and/or highly integrated, as prescribed by the standard SAE-ARP 4754A Standard. They integrate many technologies and they work in very demanding environments, sometimes with little or no maintenance, due to the severe conditions of operation. To survive such harsh operating conditions, they require very high levels of dependability, to be reached by a diversity of approaches, processes, components, etc. Some are suggested by the SAE-ARP-4754A as one of the highest level standards to be met. So, it is important to know it and its consequences for product and staff deeply. The aim of this paper is to present: a discussion on the standard SAE-ARP-4754A and a proposal for using it in product certification and qualification of staff.

This paper presents an analytical and simulation study of the stabilization and improvement of the active vibration damping of a system modeled by a simple analog harmonic oscillator driven by discrete time control. Initially, this control is the Bilinear (or Tustin) s-z mapping equivalent of a continuous-time asymptotically stable Proportional plus Derivative (PD) control. It is tested with high values of the sampling period. It is shown that all classical mappings (Tustin, Schneider, etc.) tested may instabilize the system. To circumvent this, we propose and use a new (ST1) mapping that behaves better than the classical ones tested under the same conditions. We also model an active discrete control of a suspension of a vehicle, and compare the performance between the PD controllers designed by Bilinear and by the new (ST1) S-Z mappings, for this example.

The measure of time intervals with relatively high accuracy (of 1 milisecond, at least) in PC computers is a relatively hard task to solve. But this is essential for the digital simulation, with sensors in the loop, of fast control systems. This work allows the reading of the programmable internal timer 8253 present in a typical PC, reaching 1 ms resolution, at least, through a C high level language routine. The determination of the angular velocity of a 53M2-30H Contraves 3-axis dynamic simulator used in that simulation was improved by the use of this work, allowing the acquisition of consecutive measures of angles and angular velocities with a time interval smaller than 10 ms in some cases. Using this routine and other simulator control and monitoring softwares we estimated the angular velocity faster (100 ms × 210 ms)and better than the simulator Rate Readout Module, and used it in a fast real time control simulation.

Currently, aerospace and automotive industries are developing complexand/or highly integrated systems, whose services require greater confidence to meet a set of specifications that are increasingly demanding, such as successfully operating a communications satellite, a commercial airplane, an automatic automobile, and so on. To meet these requirements and expectations, there is a growing need for fault treatment, up to predict faults and monitor the health of the components, equipment, subsystems or systems used. In the last decades, the approaches of 1) Fault Prevention, 2) Fault Detection/Tolerance and 3) Fault Detection/Correction have been widely studied and explored.

The increasing development of Unmanned Aerial Vehicle (UAV) technologies has allowed greater use of UAVs as remote sensing platforms to enhance satellite and manned aerial vehicle remote sensing surveillance and environmental management systems. Particularly, the Brazilian National Institute for Space Research - INPE has an Environmental Data Collection System (SCD) since 1993. Recently, the MCTI (Ministry of Science, Technology and Innovation) opened the National Center for Monitoring and Early Warning of Natural Disasters (CEMADEN). Both may need additional resources for their expansions in the near future as offered by UAV technologies. These needs illustrate the potential of UAV technologies as complement to existing or future systems. This paper presents an overview of data transmission used in UAVs for remote sensing surveillance and environmental management systems.

Control systems that can switch between control modes have the advantage of being simpler to design than an equivalent system with a single mode. However, the transition between control modes can introduce steps or overshootings in the state variables, and this can degrade the performance or even damage the system. In this work, we will use integral criteria in an original way, to determine a coefficient on the system which should optimize the trajectory of the control signal, during the switching between two modes. Effectively, each transition will be done by a subsystem specific for it, according to the selected criterion. The simulations will be made in MATRIXx, using as models the system of control of attitude of the Multimission Platform, and a system which keeps the synchrony between two induction motors.