• Journal of the Korean Society for Aeronautical & Space Sciences
• /
• v.50 no.5
• /
• pp.349-357
• /
• 2022

Since the flight control computer of unmanned aerial vehicle (UAV) is a flight critical equipment, it is necessary to ensure reliability and safety from the development step, and a redundancy-based fault management design is required in order to operate normally even a failure occurs. To reduce cost, weight and power consumption, the dual-redundant flight control system design is considered in UAV. However, there are various restrictions on the fault management design. In this paper, we propose the fault detection and isolation designs for the dual-redundant flight control computer to satisfy the safety requirements of an UAV. In addition, the flight control computer developed by applying the fault management design performed functional tests in the integrated test environment, and after performing FMET in the HILS, its reliability was verified through flight tests.

• Journal of the Institute of Electronics and Information Engineers
• /
• v.53 no.9
• /
• pp.26-37
• /
• 2016

The core technologies of the current transport network are OAM and protection switching to meet the sub-50ms protection switching time via a path redundancy when a link or node failure occurs. The transport networks owned by public network operators, central/local governments, and major enterprises are individually configured and managed with service resiliency in each own protected sub-network. When such networks are cascaded, it is also important to provide a node resiliency between two protected sub-networks. However, the linear protection switching in packet transport networks, such as MPLS-TP and Carrier Ethernet, does not define a solution of dual node interconnection. Although Ethernet ring protection switching covers the dual node interconnection scheme, a large amount of duplicated data frames may be flooded when a failure occurs on an adjacent (sub) ring. In this paper, we suggest a dual node interconnection scheme with linear protection switching technology in multiple protected sub-networks. And we investigate how various protected sub-network combinations with a proposed linear or ring protection process impact the service resiliency of multiple protected sub-networks through extensive experiments on link and interconnected node failures.

• The Transactions of The Korean Institute of Electrical Engineers
• /
• v.62 no.1
• /
• pp.120-126
• /
• 2013

This paper proposes a novel scheme of fault detection and self-recovery for space-borne dual ring counters subject to transient faults. The considered ring counter is equipped with hardware redundancy, but it has a limited output domain where direct access to the current state is unavailable. We employ the theory of corrective control to detect any transient fault occurring to the counter bits and to realize immediate self-recovery of the ring counter back to the normal state. The structure of the fault-tolerant controller is designed to be minimal regardless of the counter size. To validate the applicability, we implement the proposed system on a commercial FGPA board.

• Journal of Institute of Control, Robotics and Systems
• /
• v.15 no.7
• /
• pp.753-759
• /
• 2009

As many systems depend on electronics in an intelligent vehicle, concern for fault tolerance is growing rapidly. For example, a car with its braking controlled by electronics and no mechanical linkage from brake pedal to calipers of front tires(brake-by-wire system) should be fault tolerant because a failure can come without any warning and its effect is devastating. In general, fault tolerance is usually designed by placing redundant components that duplicate the functions of the original module. In this way a fault can be isolated, and safe operation is guaranteed by replacing the faulty module with its redundant and normal module within a predefined interval. In order to make in-vehicle network fault tolerant, this paper presents the concept and design methodology of an IEEE 1451 based dual CAN module. In addition, feasibility of the dual CAN network was evaluated by implementing the dual CAN module.

• Proceedings of the KSR Conference
• /
• 1998.11a
• /
• pp.280-287
• /
• 1998

In this paper, Dynamic Fault Tree algorithm(DFT algorithm) is presented. This new algorithm provides a concise representation of dynamic fault tolerance system structure with redundancy, dynamic redundancy management and complex fault ＆ error recovery techniques. And it allows the modeler to define a dynamic fault tree model with the relative advantages of both fault tree and Markov models that captures the system structure and dynamic behavior. This algorithm applies to TMR and Dual-Duplex systems with the dynamic behavior and show that this algorithm captured the dynamic behavior in these systems with fault ＆ error recovery technique, sequence-dependent failures and the use dynamic spare. The DFT algorithm for solving the problems of the systems is more effective than the Markov and Fault tree analysis model.

• Transactions on Control, Automation and Systems Engineering
• /
• v.1 no.1
• /
• pp.8-15
• /
• 1999

One of the main reason advocating redundant manipulators' superiority in application is that they can afford to optimize a dexterity measure, for example the manipulability measure. However, to obtain the gradient of the manipulability is not an easy task in case of general manipulator with high degrees of redundancy. This article proposes a method to compute the gradient of the manipulability, based on recursive algorithm to compute the Jacobian and its derivative using Denavit-Hartenberg parameters only. To characterize the null motion of redundant manipulators, the null space matrix using square minors of the Jacobian is also proposed. With these capabilities, the inverse kinematics of a redundant manipulator system can be done automatically. The result is easily extended to dual manipulator system using the relative kinematics.

• Journal of Mechanical Science and Technology
• /
• v.19 no.8
• /
• pp.1554-1567
• /
• 2005

When multiple robotics systems with several sub-chains grasp a common object, the inherent force redundancy provides a chance of utilizing internal loading. Analysis of grasping space based internal loading is proposed in this work since this method facilitates understanding the physical meaning of internal loadings in some applications, as compared to usual operational space based approach. Investigation of the internal loading for a triple manipulator has been few as ,compared to a dual manipulator. In this paper, types of the internal loading for dual and triple manipulator systems are investigated by using the reduced row echelon method to analyze the null space of those systems. No internal loading condition is derived and several load distribution schemes are compared through simulation. Furthermore, it is shown that the proposed scheme based on grasping space is applicable to analysis of special cases such as three-fingered and three-legged robots having a point contact with the grasped object or ground.

• Journal of the Korea Society of Computer and Information
• /
• v.20 no.10
• /
• pp.1-5
• /
• 2015

Based on the dual hardware and software with distributed recovery blocks, the centralized type fault tolerant store management system(SMS) was proposed. As a result of trade off study related to mutiplex hardware system design, dual single board computer(SBC) was adapted. To verify redundancy function of the proposed structure, the prototype SMS and weapon simulator were used. The proposed SMS operated normally without being affected by a primary SBC failure. The switching time from primary SBC to shadow SBC was within 200 ms. The reliability of the proposed SMS was predicted and compared with the non fault tolerant SMS, thereby it was proved that the proposed SMS has a higher reliability than the non fault tolerant system within effective range.

• The Transactions of the Korean Institute of Electrical Engineers D
• /
• v.54 no.9
• /
• pp.556-558
• /
• 2005

The effect of high irradiation on inspection systems in a nuclear power plant can be severe, especially to electronic components such as control hoards. The effect may lead to a critical malfunction or trouble to a underwater robot for inspection and maintenance of nuclear reactor. However, if information on the total accumulated dose on the sensitive parts of the robot is available, a prediction of robot's behavior in radiation environments becomes possible. To know how much radiation the robot has encountered, a dosimeter to measure the total accumulated dose is necessary. This paper describes the development effort of a dual radiation monitoring system using a SiC diode as a dose-rate meter and a p-type power MOSFET as a dose meter. This attempt using two sensors which detect same radiation improves reliability and stability at high intensity radiation detection in nuclear facilities. It uses the concept of diversity and redundancy.

• Proceedings of the Korean Society of Propulsion Engineers Conference
• /
• 2008.03a
• /
• pp.97-104
• /
• 2008

Most of engine control systems for helicopter turboshaft engines are equipped with dual sensors. For the system with dual redundancy, analytic methods are used to detect faults based on the system dynamical model. Helicopter engine dynamics are affected by aerodynamic torque induced from the dynamics of the main rotor. In this paper an engine model including the rotor dynamics is constructed for the T700-GE-700 turboshaft engine powering UH-60 helicopter. The singular value decomposition(SVD) method is applied to the developed model in order to detect sensor faults. The SVD method which do not need an additional computation to generate residual uses the characteristics that the system outputs in direction of the left singular vector if an input is applied in direction of the right singular vector. Simulations show that the SVD method works well in detecting and isolating the sensor faults.