• Journal of Positioning, Navigation, and Timing
• /
• v.13 no.2
• /
• pp.189-197
• /
• 2024

Galileo is a European Global Navigation Satellite System (GNSS) that has offered the Galileo Open Service since 2016. Consequently, the standardization of GNSS augmentation systems, such as Satellite Based Augmentation System (SBAS), Ground Based Augmentation System (GBAS), and Aircraft Based Augmentation System (ABAS) for Galileo signals, is ongoing. In 2023, the European Union Space Programme Agency (EUSPA) released prior probabilities of a satellite fault and a constellation fault for Galileo, which are 3×10^-5 and 2×10^-4 per hour, respectively. In particular, the prior probability of a Galileo constellation fault is significantly higher than that for the GPS constellation fault, which is defined as 1×10^-8 per hour. This raised concerns about its potential impact on GBAS integrity monitoring. According to the Global Positioning System (GPS) Standard Positioning Service Performance Standard (SPS PS), a constellation fault is classified as a wide fault. A wide fault refers to a fault that affects more than two satellites due to a common cause. Such a fault can be caused by a failure in the Earth Orientation Parameter (EOP). The EOP is used when transforming the inertial axis, on which the orbit determination is based, to Earth Centered Earth Fixed (ECEF) axis, accounting for the irregularities in the rotation of the Earth. Therefore, a faulty EOP can introduce errors when computing a satellite position with respect to the ECEF axis. In GNSS, the ephemeris parameters are estimated based on the positions of satellites and are transmitted to navigation satellites. Subsequently, these ephemeris parameters are broadcasted via the navigation message to users. Therefore, a faulty EOP results in erroneous broadcast ephemeris data. In this paper, we assess the conventional ephemeris fault detection monitor currently employed in GBAS for wide faults, as current GBAS considers only single failure cases. In addition to the existing requirements defined in the standards on the Probability of Missed Detection (PMD), we derive a new PMD requirement tailored for a wide fault. The compliance of the current ephemeris monitor to the derived requirement is evaluated through a simulation. Our findings confirm that the conventional monitor meets the requirement even for wide fault scenarios.

• Journal of the Korean Society for Aeronautical & Space Sciences
• /
• v.34 no.3
• /
• pp.81-86
• /
• 2006

This paper deals with a driving current fault monitor design methodology for a DDV actuation system which has a dual hydraulic power supply system, and triplex electric control capability. A fault existing among these redundant channels should be detected accurately and removed timely, and the remaining channels are to be reconfigured in order to compensate the role of a removed faulty channel. An integrated analysis on the aerodynamics, flight control laws, and DDV actuation system is essential for the design of an actuation system fault monitor. A method to define a fault transient boundary which specifies a maximum travel of an actuation system caused by the first faulty operation is proposed based on the top level requirement on the fault effect specified in MIL-F-8785C.

• IEMEK Journal of Embedded Systems and Applications
• /
• v.9 no.3
• /
• pp.183-191
• /
• 2014

The software running on avionic system is required to be highly reliable and productive. The air transport industry has developed ARINC Specification 653(ARINC653) as a standardized software requirement of avionics computers. The document specifies the interface boundary between avionics application software and the core executive software. Dependability in ARINC 653 is provided by spatial and temporal partitioning whilst fault-tolerance is provided by health monitoring mechanism. Legacy real-time operating systems are used to support ARINC653 health monitor on integrated modular avionics(IMA). However, legacy real-time operating systems are costly and difficult to modify the kernel. In this paper, we suggest a Linux-based ARINC653 health monitor. Functionalities to support ARINC653 health monitor are implemented as a Linux kernel module and its performance is evaluated.

• Journal of the Korean Society for Aeronautical & Space Sciences
• /
• v.38 no.8
• /
• pp.781-789
• /
• 2010

In the GPS/INS integrated system fault detection, algorithm based on a chi-square distribution is commonly used. In this paper, it has been proposed simplified GPS/INS fault detection algorithm that is combined conventional RAIM (Receiver Autonomous Integrity Monitor) and algorithm based on chi-square distribution for UAV using row-grade processor. It use a fault model to verify the proposed algorithm and produced the result.

• Journal of the Korean Society for Precision Engineering
• /
• v.22 no.10 s.175
• /
• pp.80-89
• /
• 2005

In this paper, time-frequency analysis using wavelet packet transform and advanced-MDSA (Multiple Dimensional Spectral Analysis) which based on wavelet packet transform is applied fur fault source identification and diagnosis of early detection of fault non-stationary sound/vibration signals. This method is analyzing the signal in the plane of instantaneous time and instantaneous frequency. The results of ordinary coherence function, which obtained by wavelet packet analysis, showed the possibility of early fault detection by analysis at the instantaneous time. So, by checking the coherence function trend, it is possible to detect which signal contains the major fault signal and to know how much the system is damaged. Finally, It is impossible to monitor the system is damaged or undamaged by using conventional method, because crest factor is almost constant under the range of magnitude of fault signal as its approach to normal signal. However instantaneous coherence function showed that a little change of fault signal is possible to monitor the system condition. And it is possible to predict the maintenance time by condition based maintenance for any stationary or non-stationary signals.

• Proceedings of the Korean Information Science Society Conference
• /
• 2005.07a
• /
• pp.772-774
• /
• 2005

안전성이 강조되는 실시간 시스템에서 시스템이 시간의 제약을 만족해야만 한다. 실시간 시스템에서 오류는 잘못된 응답 뿐 만이 아니라 시간적으로 늦은 응답에 대해서도 오류로 분류를 할 수가 있다. 이런 오류들을 모니터하기 위해서 본 논문에서는 커널에 Timed Conformance Monitor를 모듈로 추가하였다. Timed Conformance Monitor를 통해서 실시간 태스크가 시간의 제약을 만족하는지를 분석하고 또한 분석 결과에 따라 오류를 처리할 수 있는 Fault Handler를 추가하여 실시간 시스템에 대한 Fault Tolerance를 보장해 줄 수 있다.

• Journal of KIISE:Software and Applications
• /
• v.37 no.7
• /
• pp.568-572
• /
• 2010

Self-healing is one of the techniques that assure dependability of mission-critical system. Self-healing consists of fault detection and fault recovery and fault detection is important first step that enables fault recovery but it causes overhead. We can detect fault based on model, the detection tasks that notify system's behavior and compare normal behavior model and system's behavior are heavy jobs. In this paper, we propose architecture-based multi-level self-adaptive monitoring method that complements model-based fault detection. The priority of fault detection per component is different in the software architecture. Because the seriousness and the frequency of fault per component are different. If the monitor is adapted to intensive to the component that has high priority of monitoring and loose to the component that has low priority of monitoring, the overhead can be decreased and the efficiency can be maintained. Because the environmental changes of software and the architectural changes bring the changes at the priority of fault detection, the monitor learns the changes of fault frequency and that is adapted to intensive to the component that has high priority of fault detection.

• The Transactions of the Korean Institute of Electrical Engineers
• /
• v.40 no.1
• /
• pp.120-127
• /
• 1991

The purpose of this study is to develop a fault detection and diagnosis scheme that can monitor process fault and instrument fault of a steam generator. The suggested scheme consists of a Kalman filter and two bias estimators. Method of detecting process and instrument fault in a steam generator uses the mean test on the residual sequence of Kalman filter, designed for the unfailed system, to make a fault decision. Once a fault is detected, two bias estimators are driven to estimate the fault and to discriminate process fault and instrument fault. In case of process fault, the fault diagnosis of outlet temperature, feed-water heater and main steam control value is considered. In instrument fault, the fault diagnosis of steam genrator's three instruments is considered. Computer simulation tests show that on-line prompt fault detection and diagnosis can be performed very successfully.

• International Journal of Control, Automation, and Systems
• /
• v.5 no.1
• /
• pp.104-109
• /
• 2007

This paper is about a redundancy management system design for the Smart UAV(unmanned aerial vehicle) which utilizes the tilt..rotor mechanism. In order to meet the safety requirement on the PLOC(probability of loss of control) of $1.7{\times}10^{-5}$ per flight hour for FCS (flight control system) failures, a digital FCS is mechanized with a dual redundant structure. A fault detection system which is composed of a CCM(cross channel monitor) and analytic redundancy using the Kalman filtering is designed, and its effectiveness is evaluated through experiments. A threshold level and persistence count for managing redundant sensors are designed based on the statistical analysis of the FCS sensors. To increase the survivability of the UAV after the loss of critical sensors in the SAS(stability augmentation system) and to provide reference information for a tie-breaking condition at which an ILM(in-line monitor) cannot distinguish the faulty channel between two operating ones, the Kalman filter approach is investigated.

• The Transactions of The Korean Institute of Electrical Engineers
• /
• v.57 no.9
• /
• pp.1589-1593
• /
• 2008

The condition of a high voltage motor was monitored with the motor performance monitor (MPM) at the motor control center. The MPM detected defects in the rotor bar and end ring and input power according to motor and load conditions. The assessment of the condition of a coal pulverizer motor indicated it was clearly in good condition in terms of the rotor bars, over voltage, and motor performance. However, the side bands at frequency, 56.48 Hz indicated existence of rotor end-ring fault. The large torque ripple indicated abnormal operating conditions. After visual inspection, it has been observed that an impeller blade of the circulating water pump was broken off causing the irregular torque pattern.