Search Results

The Multimission Platform (MMP) is a generic service module currently in Project at INPE. In the 2001 version, its control system can be switched between nine main Operation Modes and other submodes, according to information from satellite sensors and ground commands. The Nominal Mode stabilizes the MMP in three axes and takes it to a nominal attitude, using three reaction wheels. Each wheel has coarse and fine acquisition submodes. The use of multiple modes of control for specific situations frequently is simpler than projecting a single controller for all cases. However, besides being harder to warrant its general stability, the mere switching between these submodes generates bumps, which can reduce the performance and even damage the actuator or plant. In this work, we present an application of diverse methods to smooth the transition between control submodes of the Nominal Mode of the MMP.

In critical real-time computer systems, whether aircraft, automotive and industrial products it is very common the use of a fixed priority scheduler. The fixed priority scheduler has shown a good performance in control applications even in different applications where it was adopted. But nowadays, to go forward with the technology, be it in hardware and software, schedulers with dynamic priority can be a better alternative in certain situations. The present work aims to show that a variable priority scheduler can improve the performance of a control system obtained with a fixed priority scheduler, even when it was bad conditioned. This study is based on a four motor position control system. For this, the study will make use of a specialized simulation tool. In the future, we intend to extend this study to schedulers that use random and sporadic tasks.

In this work we discuss current trends driving the aerospace and automotive systems architectures. This includes trends as: 1) pos-globalization and regionalization; 2) the formation of knowledge oligopolies; 3) commonality, standardization and even synergy (of components, tools, development process, certification agents, standards); 4) reuse and scalability; 5) synergy of knowledge and tools convergence; 6) time, cost and quality pressures and innovation speed; 7) environmental and safety issues; and 8) abundance of new technologies versus scarcity of skilled manpower to apply them.

The increasing use of Global Navigation Satellite Systems-GNSS in future Aeronautical Navigation Systems-ANS is a current trend in the aeronautical operation and regulation communities. This trend implies the adoption of elements and interactions of a degree of complexity that is still being discussed around the world. Faced with that, we believe that a requirements based approach is an effective tool to deal with such highly complex and integrated systems. In this work we discuss a requirements based approach to future Aeronautical Navigation Systems based on Global Navigation Satellite Systems. To do that, we first briefly present the concept of Communication, Navigation, Surveillance/Air Traffic Management - CNS/ATM, and the current and potential benefits of the adoption of its paradigms.

Many control systems switch between control modes according to necessity. That is often simpler than designing a full control to all situations. However, this creates new problems, as determining the composed system stability and the transient during switching. The latter, while temporary, may introduce overshooting that degrade performance and damage the plant. This is particularly true for the MultiMission Platform (MMP), a generic service module currently under design at INPE. Its control system can be switched among nine main Modes of Operation and other submodes, according to ground command or information coming from the control system, mainly alarms. It can acquire one and three axis stabilization in generic attitudes, with actuators including magnetotorquers, thrusters and reaction wheels.

Systems are becoming increasingly more complex. To follow this increasingly complexity, systems engineering must evolve rapidly with the introduction of new methodologies, processes, tools, etc. Due to this rapid evolution, little attention is dedicated to the study of the history of its evolution. Currently there is the initiative of installation of a chapter of INCOSE (International Council on Systems Engineering) in Brazil and from this initiative emerged the interest of recovering the history of systems engineering in the country. There are indications that the introduction of systems engineering into Brazil occurred in the late 1960's, directly from NASA and that its first applications in Brazil were in Space Systems Engineering. This paper recovers the origins of systems engineering, of its introduction into Brazil, and of its use in space systems engineering.

Current systems such as satellites, aircrafts, automobiles, turbines, wind power generators and traffic controls are becoming increasingly complex and/or highly integrated as prescribed by the SAE-ARP-4754 Standard. Such systems frequently require accurate generation, distribution and time or phase synchronization of signals with different frequencies that may be based on one reference signal and frequency. But the environment fluctuations or the non-linear dynamics of these operations cause uncertainties (skew and jitter) in the phase or time of the reference signal and its derived signals. So, techniques to reduce those causes or their effects are becoming important aspects to consider in the design of such systems. The PLL techniques are useful for establishing coherent phase or time references, jitter reduction, skew suppression, frequency synthesis, and clock recovery in numerous systems such as communication, wireless systems, digital circuits, rotors, and others.

In this work, the problem of fault detection, isolation, and reconfiguration (FDIR) for Networked-Control Systems (NCS) of aerospace vehicles is discussed. The concept of fault-tolerance is introduced from a generic structure, and a review on quantitative and qualitative methods (state estimation, parameter estimation, parity space, statistic testing, neural networks, etc.) for FDIR is then performed. Afterwards, the use of networks as loop-closing elements is introduced, followed by a discussion on advantages (flexibility, energy demand, etc.) and challenges (networks effects on performance, closed-loop fault-effects on safety, etc.) represented thereby. Finally, examples of applications on aerospace vehicles illustrate the importance of the discussion herein exposed.

Systems such as satellites, aircrafts, automobiles and air traffic controls are becoming increasingly complex and highly integrated, as prescribed by the SAE ARP 4754 Standard. They integrate many technologies and they work in very demanding environments, sometimes with little or no maintenance, due to the severe conditions of operation. To survive such harsh operating conditions, they require very high levels of reliability, to be reached by a diversity of approaches, processes, components, etc. By their turn, the processes of analysis and decision making shall be improved progressively, as experience accumulates and suggests modifications. Most of this can be translated in models. According to this philosophy, in this work, we discuss the use of Model Based Reliability for improving the results of the Reliability Analysis and FMEA/FMECA of a satellite program, as those conducted at the National Institute for Space Research-INPE, since 1979.

Complex and/or highly integrated systems require the evaluation of Dependability (Reliability, Maintainability, Availability, etc.) throughout their life cycle. The designs of these systems have three main sets of activities: managerial, technical and quality. The recent literature suggests that: 1) the growth of the committed project cost is much greater than the cost spent in the initial stages; and also, the cost to eliminate the defects is smaller in the initial stages of project; and 2) the functions, responsibilities, and authorities of Project Management and Systems Engineering are strongly coupled. Thus, based on the recent literature and the INPE´s (National Institute for Space Research) experience, this paper will show a discussion on the interaction between Project Management and Systems Engineering to improve the Dependability of space and automotive projects.

Internet of Things (IoT) for real-time applications are demanding more and more high performance, precision, accuracy, modularity, integration, dependability and other attributes in a complex and/or highly integrated environment. Such systems need to provide coordination among the integrated components (e.g. sensors, computer, controller and networks) for enabling the application to take real-time measurements and to translate into controllable, observable and smart actions with strict timing requirements. Therefore, coordination and synchronization are required to ensure the controllable, observable and smart actions of real-time IoT systems. This paper shows the design issues about the coordination and synchronization in the internet of things applied to real-time applications. We also show the current coordination and synchronization techniques and their design issues when applied to IoT systems.

Current systems such as satellites, aircrafts, automobiles, turbines, power controls and traffic controls are becoming increasingly complex and/or highly integrated as prescribed by the SAE-ARP-4754a Standard. Such systems operate in a real time distributed environment which frequently requires a common knowledge of time among different devices, levels and granularities. So, temporal correctness is mostly needed, besides logical correctness. It can be achieved by hardware clocks and devices, software clocks and algorithms, or both, to avoid or tolerate, within appropriate margins, the time faults or failures that may occur in aerospace and automotive systems. This paper presents an overview of clock synchronization algorithms and their uses in aerospace and automotive systems. It is based on a review of the literature, discussion and comparison of some clock synchronization algorithms with different policies.

The aerospace and automotive electronic systems are getting more complex and/or highly integrated, as defined by ARP 4754A, making extensive use of microelectronics and digital memories which, in turn, operates in higher frequencies and lower voltages. In addition, the aircraft are flying in higher altitudes, and polar routes are getting more frequent. These factors raise the probability of occurrence of hazardous effects like the Single Event Upsets in their embedded electronic systems. These must be designed in a way to tolerate and assure the immunity to the Single Event Upsets, based upon criteria such as reliability, availability and criticality. This paper proposes an overview of an assurance process of immunity of embedded electronic systems to Single Event Upsets caused by ionizing particles by means of a review of literature and an analysis of standards as ECSS-E-ST-10-1, NASA Single Event Effects Criticality Analysis and IEC TS 62396-1.

Currently, the use of Global Navigation Satellite Systems-GNSS has been widely disseminated for the most different applications, from the aeronautical navigation to the car traffic, being the Global Positioning System-GPS the most used system for such objectives. New applications have presented challenges in terms of the main requirements associated to such systems, namely: precision, reliability, availability, continuity and integrity. It is because proposed solutions, such as satellite or ground-based augmentation systems, depend on signals provided by the GNSS satellite constellation. It constitutes a limitation for using such systems for position and velocity estimations. On other hand, Inertial Navigation Systems-INS, being independent of external signals, have a big potential to be applied on these circumstances; furthermore, they present characteristics that may be considered complementary to the GNSS.

The realization of modern systems subjected to automatic control, such as aircraft, automobiles, satellites, rocket launchers, cargo and military ships, and so forth; increasingly assume, within its very set of requirements, the task of providing better dependability, i.e.: safety, reliability, and availability altogether. Towards this demand, fault-tolerant control greatly meets such growing demand of dependability, by its ability of recognizing the occurrence of potentially hazardous/hazardous faults within the overall (closed-loop) system, and by taking remedial action whenever necessary/mandatory. The process of fault tolerance can be segregated into two fundamental steps: (1) that of fault diagnosis, comprising fault detection-isolation-identification, and, (2) control adjustment/reconfiguration. This paper focuses on the second step, of control adjustment/reconfiguration.

Current systems such as: satellites, aircrafts, automobiles, turbines, power controls and traffic controls are becoming increasingly complex and/or highly integrated as prescribed by the SAE-ARP-4754 Standard. Such systems and their control systems use many modes of operation and many forms of redundancy to achieve high levels of performance and high levels of reliability under changing environments and phases of their lifecycle. The environment disturbances, environment variability, plant non-linear dynamics, plant wear, plant faults, or the non-symmetric plant operation may cause de-synchronization in phase or time among: 1) simultaneous units in the same normal mode of operation; 2) successive units in successive normal modes of operation; 3) main and spare units from normal to faulty modes of operation. So, techniques to reduce those causes or their effects are becoming important aspects to consider in the design of such systems.

The architecture is a concept very broad and important that is directly connected to the realization of a system. It defines what the system is capable of doing, how it accomplishes its mission and how the system is. Currently, the development of system architectures is considered a domain of knowledge where science meets art. In some specific areas, the methods on the development of system architectures are already well formalized. However, when analyzing the evaluation of system architectures such as those for multi-domain control systems, it is clear that there is still much room for rationalization. In these cases, the search for new methods for the evaluation of system architectures is currently in the state of art. In this work we discuss methods used in the verification and validation of control systems architectures of cyber-physical systems based on models and systems metrics.

Since its introduction at INPE, in the late 1960s, Systems Engineering has passed through phases of greater and lesser importance. Three different phases are clearly recognized. The first two phases are closely associated with efforts to develop space systems. The third and present phase is associated to the recent growth in the importance of Systems Engineering to the development of the contemporary large and complex systems. This paper is a summary review of the history of Systems Engineering at INPE from its inception to the present.

The supply of electrical power is one of the most important functions required by the diverse payloads of satellites. A fault in the corresponding subsystem might lead to mission or even vehicle loss. Among the causes of such faults, we highlight the phenomenon of thermal avalanche in batteries. It can be explained as an energetic unbalance where the rate of heat generated in the interior of the system exceeds its capacity to dissipate it. This occurred to the OAO1 of NASA just after its launch on April 8, 1966; and with the CBERS2 of CAST and INPE already in orbit in 2007 and 2009. This work presents a discussion on the causes and effects of thermal avalanches in artificial satellite battery charging and discharging systems.

Currently, the use of Global Navigation Satellite Systems-GNSS has been widely disseminated for the most different applications, from the aeronautical navigation to the car traffic system, being the Global Positioning System-GPS the most used system for such objectives. New applications of such systems have presented more demanding requirements in terms of precision for the position and velocity provided by these systems. Some solutions, as the precision augmentation systems based on satellite or ground improve the precision of the position and velocity estimates. However, the sampling rate of these systems is not substantially improved. Therefore, it constitutes a major limitation of such systems for the position and velocity estimates during high acceleration transients. On other hand, Inertial Navigation Systems- INSs present superior performance under these circumstances.