Search

In this paper, we present a new single fixed controller approach based on the multivariable H2 control/regulator theory with internal model principle to solve a challenging control problem...

This paper presents a flight envelope protection system for NASA’s Transport Class Model. The developed protection scheme is based on a command-limiting architecture that accounts for aircraft adverse aerodynamics, unusual attitude, and structural integrity and is designed to augment a standard gain-scheduled flight control law. The scheme also includes an energy protection system, which relies on an automatic throttle control loop that implements a total energy control law. In the setup adopted, the limits of the protected envelopes are actively adjusted to ensure, on the one hand, that the aircraft always stays in a safe flight condition and, on the other hand, that the pilot has enough control authority to perform aggressive maneuvers, if needed. Batch simulations demonstrate the efficacy of the protection system in maintaining the aircraft within desired safe conditions.

Urban Air Mobility (UAM) - defined as safe and efficient air traffic operations in a metropolitan area for manned aircraft and unmanned aircraft systems - is being researched and developed by industry, academia, and government. Significant resources have been invested toward cultivating an ecosystem for Urban Air Mobility that includes manufacturers of electric vertical takeoff and landing aircraft, builders of takeoff and landing areas, and researchers of the airspace integration concepts, technologies, and procedures needed to conduct Urban Air Mobility operations safely and efficiently alongside other airspace users. This paper provides high-level descriptions of both emergent and early expanded operational concepts for Urban Air Mobility that NASA is developing. The scope of this work is defined in terms of missions, aircraft, airspace, and hazards. Past and current Urban Air Mobility operations are also reviewed, and the considerations for the data exchange architecture and communication, navigation, and surveillance requirements are also discussed. This paper will serve as a starting point to develop a framework for NASA's Urban Air Mobility airspace integration research and development efforts with partners and stakeholders that could include fast-time simulations, human-in-the-loop (HITL) simulations, and flight demonstrations.

Loss of control is a major factor in fatal aircraft accidents. Although definitions of loss of control remain vague in analytical terms, it is generally associated with flight outside of the normal flight envelope, with nonlinear influences, and with a significantly diminished capability of the pilot to control the aircraft. Primary sources of nonlinearity are the intrinsic nonlinear dynamics of the aircraft and the state and control constraints within which the aircraft must operate. This paper examines how these nonlinearities affect the ability to control the aircraft and how they may contribute to loss of control. Specifically, the ability to regulate an aircraft around stall points is considered, as is the question of how damage to control effectors impacts the capability to remain within an acceptable envelope and to maneuver within it. It is shown that, even when a sufficient set of steady motions exist, the ability to regulate around them or transition between them can be difficult and nonintuitiv...

Aircraft loss of control (LOC) is a leading cause of fatal accidents across all transport airplane and operational classes. LOC can result from a wide spectrum of precursors (or hazards), often occurring in combination. Technologies developed for LOC prevention and recovery must therefore be effective under a wide variety of conditions and uncertainties, including multiple hazards, and the validation process must provide a means of assessing system effectiveness and coverage of these hazards. This paper provides a detailed description of a methodology for analyzing LOC as a dynamics and control problem for the purpose of developing effective technology solutions. The paper includes a definition of LOC based on several recent publications, a detailed description of a refined LOC accident analysis process that is illustrated via selected example cases, and a description of planned follow-on activities for identifying future potential LOC risks and the development of LOC test scenarios. Some preliminary considerations for LOC of Unmanned Aircraft Systems (UAS) and for their safe integration into the National Airspace System (NAS) are also discussed.

A robust linear parameter varying (LPV) control synthesis is carried out for a Highly Maneuverable Aircraft Technology (HiMAT) vehicle subject to loss of control effectiveness. The scheduling parameter is selected to be a function of the estimates of the control effectiveness factors. The estimates are provided online by a two-stage adaptive Kalman filter estimator. The inherent conservatism of the LPV design is reduced through the use of a scaling factor on the uncertainty block that represents the estimation errors of the effectiveness factors. Simulations of the controlled system with the online estimator show that a superior fault tolerance can be achieved.

This paper illustrates analysis of a fault tolerant control (FTC) system with false fault detections. The possible false fault detection from a fault detection and identification (FDI) module may cause a FTC system to become linearly unstable for very short time. Using the LPV analysis with brief instabilities, the upper bound of an induced-L 2 norm and asymptotic instability ratio of a closed-loop system can be calculated, which indicate performance degradation and tolerance of instabilities of the FTC system. Analysis of a FTC system is demonstrated for a HiMAT FTC system.

Aircraft loss of control (LOC) is a leading cause of fatal accidents across all transport airplane and operational classes, and can result from a wide spectrum of hazards, often occurring in combination. Technologies developed for LOC prevention and recovery must therefore be effective under a wide variety of conditions and uncertainties, including multiple hazards, and their validation must provide a means of assessing system effectiveness and coverage of these hazards. This requires the definition of a comprehensive set of LOC test scenarios based on accident and incident data as well as future risks. This paper defines a comprehensive set of accidents and incidents over a recent 15 year period, and presents preliminary analysis results to identify worst-case combinations of causal and contributing factors (i.e., accident precursors) and how they sequence in time. Such analyses can provide insight in developing effective solutions for LOC, and form the basis for developing test scenarios that can be used in evaluating them. Preliminary findings based on the results of this paper indicate that system failures or malfunctions, crew actions or inactions, vehicle impairment conditions, and vehicle upsets contributed the most to accidents and fatalities, followed by inclement weather or atmospheric disturbances and poor visibility. Follow-on research will include finalizing the analysis through a team consensus process, defining future risks, and developing a comprehensive set of test scenarios with correlation to the accidents, incidents, and future risks. Since enhanced engineering simulations are required for batch and piloted evaluations under realistic LOC precursor conditions, these test scenarios can also serve as a high-level requirement for defining the engineering simulation enhancements needed for generating them.

Robust control system analysis and design is based on an uncertainty description which separates the uncertain system from the nominal system. Low-order models of this structure are difficult to formulate for many practical problems involving uncertainty in the physical parameters of the system. This paper presents a matrix-based method of directly constructing a low-order uncertainty model for real parameter problems involving multivariate rational functions of the uncertain parameters.

Loss of control (LOC) is one of the largest contributors to fatal aircraft accidents worldwide. LOC accidents are complex in that they can result from numerous causal and contributing factors acting alone or (more often) in combination. These LOC hazards include vehicle impairment conditions, external disturbances; vehicle upset conditions, and inappropriate crew actions or responses. Hence, there is no single intervention strategy to prevent these accidents. NASA previously defined a comprehensive research and technology development approach for reducing LOC accidents and an associated integrated system concept. Onboard technologies for improved situation awareness, guidance, and control for LOC prevention and recovery are needed as part of this approach. Such systems should include: LOC hazards effects detection and mitigation; upset detection, prevention and recovery; and mitigation of combined hazards. NASA is conducting research in each of these areas. This paper provides an overview of this research, including the near-term LOC focus and associated analysis, as well as preliminary flight system architecture.

Validation of technologies developed for loss of control (LOC) prevention and recovery poses significant challenges. Aircraft LOC can result from a wide spectrum of hazards, often occurring in combination, which cannot be fully replicated during evaluation. Technologies developed for LOC prevention and recovery must therefore be effective under a wide variety of hazardous and uncertain conditions, and the validation framework must provide some measure of assurance that the new vehicle safety technologies do no harm (i.e., that they themselves do not introduce new safety risks). This paper summarizes a proposed validation framework for safety-critical systems, provides an overview of validation methods and tools developed by NASA to date within the Vehicle Systems Safety Project, and develops a preliminary set of test scenarios for the validation of technologies for LOC prevention and recovery

Loss of control (LOC) remains one of the largest contributors to aircraft fatal accidents worldwide. Aircraft LOC accidents are highly complex in that they can result from numerous causal and contributing factors acting alone or more often in combination. Hence, there is no single intervention strategy to prevent these accidents. Research is underway at the National Aeronautics and Space Administration (NASA) in the development of advanced onboard system technologies for preventing or recovering from loss of vehicle control and for assuring safe operation under off-nominal conditions associated with aircraft LOC accidents. The transition of these technologies into the commercial fleet will require their extensive validation and verification (V&V) and ultimate certification. The V&V of complex integrated systems poses highly significant technical challenges and is the subject of a parallel research effort at NASA. This chapter summarizes the V&V problem and presents a proposed process that could be applied to complex integrated safety-critical systems developed for preventing aircraft LOC accidents. A summary of recent research accomplishments in this effort is referenced.

Loss of control remains one of the largest contributors to aircraft fatal accidents worldwide. Aircraft loss-of-control accidents are highly complex in that they can result from numerous causal and contributing factors acting alone or (more often) in combination. Hence, there is no single intervention strategy to prevent these accidents. This paper presents future system concepts and research directions for preventing aircraft loss-of-control accidents.

Loss of control remains one of the largest contributors to fatal aircraft accidents worldwide. Aircraft loss-of-control accidents are complex in that they can result from numerous causal and contributing factors acting alone or (more often) in combination. Hence, there is no single intervention strategy to prevent these accidents. To gain a better understanding into aircraft loss-of-control events and possible intervention strategies, this paper presents a detailed analysis of loss-of-control accident data (predominantly from Part 121), including worst case combinations of causal and contributing factors and their sequencing. Future potential risks are also considered.

Loss of control remains one of the largest contributors to aircraft fatal accidents worldwide. Aircraft loss-of-control accidents are highly complex in that they can result from numerous causal and contributing factors acting alone or (more often) in combination. Hence, there is no single intervention strategy to prevent these accidents and reducing them will require a holistic integrated intervention capability. Future onboard integrated system technologies developed for preventing loss of vehicle control accidents must be able to assure safe operation under the associated off-nominal conditions. The transition of these technologies into the commercial fleet will require their extensive validation and verification (V and V) and ultimate certification. The V and V of complex integrated systems poses major nontrivial technical challenges particularly for safety-critical operation under highly off-nominal conditions associated with aircraft loss-of-control events. This paper summarizes the V and V problem and presents a proposed process that could be applied to complex integrated safety-critical systems developed for preventing aircraft loss-of-control accidents. A summary of recent research accomplishments in this effort is also provided.

This paper reports the latest development of several techniques for adaptive flight envelope estimation and protection system for aircraft under damage upset conditions. Through the integration of advanced fault detection algorithms, real-time system identification of the damage/faulted aircraft and flight envelop estimation, real-time decision support can be executed autonomously for improving damage tolerance and flight recoverability. Particularly, a bank of adaptive nonlinear fault detection and isolation estimators were developed for flight control actuator faults; a real-time system identification method was developed for assessing the dynamics and performance limitation of impaired aircraft; online learning neural networks were used to approximate selected aircraft dynamics which were then inverted to estimate command margins. As off-line training of network weights is not required, the method has the advantage of adapting to varying flight conditions and different vehicle configurations. The key benefit of the envelope estimation and protection system is that it allows the aircraft to fly close to its limit boundary by constantly updating the controller command limits during flight. The developed techniques were demonstrated on NASA s Generic Transport Model (GTM) simulation environments with simulated actuator faults. Simulation results and remarks on future work are presented.

Formal robustness analysis of aircraft control upset prevention and recovery systems could play an important role in their validation and ultimate certification. As a part of the validation process, this paper describes an analysis method for determining a reliable flight regime in the flight envelope within which an integrated resilent control system can achieve the desired performance of tracking command signals and detecting additive faults in the presence of parameter uncertainty and unmodeled dynamics. To calculate a reliable flight regime, a structured singular value analysis method is applied to analyze the closed-loop system over the entire flight envelope. To use the structured singular value analysis method, a linear fractional transform (LFT) model of a transport aircraft longitudinal dynamics is developed over the flight envelope by using a preliminary LFT modeling software tool developed at the NASA Langley Research Center, which utilizes a matrix-based computational approach. The developed LFT model can capture original nonlinear dynamics over the flight envelope with the ! block which contains key varying parameters: angle of attack and velocity, and real parameter uncertainty: aerodynamic coefficient uncertainty and moment of inertia uncertainty. Using the developed LFT model and a formal robustness analysis method, a reliable flight regime is calculated for a transport aircraft closed-loop system.

Switching control, servomechanism, and H2 control theory are used to provide a practical and easy-to-implement solution for the actuator jam problem. A jammed actuator not only causes a reduction of control authority, but also creates a persistent disturbance with uncertain amplitude. The longitudinal dynamics model of the NASA GTM UAV is employed to demonstrate that a single fixed reconfigured controller design based on the proposed approach is capable of accommodating an elevator jam failure with arbitrary jam position as long as the thrust control has enough control authority. This paper is a first step towards solving a more comprehensive in-flight loss-of-control accident prevention problem that involves multiple actuator failures, structure damages, unanticipated faults, and nonlinear upset regime recovery, etc.

Formal robustness analysis of aircraft control upset prevention and recovery systems could play an important role in their validation and ultimate certification. Such systems developed for failure detection, identification, and reconfiguration, as well as upset recovery, need to be evaluated over broad regions of the flight envelope or under extreme flight conditions, and should include various sources of uncertainty. To apply formal robustness analysis, formulation of linear fractional transformation (LFT) models of complex parameter-dependent systems is required, which represent system uncertainty due to parameter uncertainty and actuator faults. This paper describes a detailed LFT model formulation procedure from the nonlinear model of a transport aircraft by using a preliminary LFT modeling software tool developed at the NASA Langley Research Center, which utilizes a matrix-based computational approach. The closed-loop system is evaluated over the entire flight envelope based on the generated LFT model which can cover nonlinear dynamics. The robustness analysis results of the closed-loop fault tolerant control system of a transport aircraft are presented. A reliable flight envelope (safe flight regime) is also calculated from the robust performance analysis results, over which the closed-loop system can achieve the desired performance of command tracking and failure detection.

As part of the NASA Aviation Safety Program at Langley Research Center, a dynamically scaled unmanned aerial vehicle (UAV) and associated ground based control system are being developed to investigate dynamics modeling and control of large transport vehicles in upset conditions. The UAV is a 5.5% (seven foot wingspan), twin turbine, generic transport aircraft with a sophisticated instrumentation and telemetry package. A ground based, real-time control system is located inside an operations vehicle for the research pilot and associated support personnel. The telemetry system supports over 70 channels of data plus video for the downlink and 30 channels for the control uplink. Data rates are in excess of 200 Hz. Dynamic scaling of the UAV, which includes dimensional, weight, inertial, actuation, and control system scaling, is required so that the sub-scale vehicle will realistically simulate the flight characteristics of the full-scale aircraft. This testbed will be utilized to validate modeling methods, flight dynamics characteristics, and control system designs for large transport aircraft, with the end goal being the development of technologies to reduce the fatal accident rate due to loss-of-control.

The objective of this paper is to quantify the damage caused by a missile impacting aircraft structures, using computational simulations. A three-step approach was taken. The first step was to investigate the effects of a simple body-on-body impact on the aircraft's wing structure. The second step was to simulate the hydrodynamic ram effects due to a high-velocity projectile impacting and traveling through a fluid-filled wing box. The third step was to add an explosive to the projectile model to investigate the combined effects of the kinetic energy of the projectile, hydrodynamic ram, and the explosive blast at various locations and incident angles. This paper presents the results of these steps in which the LS-DYNA code was used for each of the simulations. Results are presented in terms of images of damages as well as area removed.

A procedure for obtaining an uncertainty model for real uncertain parameter problems in which the uncertain parameters can be represented in a multilinear form is presented. The procedure is formulated such that the resulting uncertainty model is minimal relative to a given state-space realization of the system. The approach is demonstrated for a multivariable third-order example problem having four uncertain parameters. Although two of the uncertain parameters entered into the given model as squared terms and as fractions, they were easily modeled within the multilinear framework. >

An active fault tolerant control (FTC) law is generally sensitive to false identification since the control gain is reconfigured for fault occurrence. In the conventional FTC law design procedure, dynamic variations due to false identification are not considered. In this paper, an FTC synthesis method is developed in order to consider possible variations of closed-loop dynamics under false identification into the control design procedure. An active FTC synthesis problem is formulated into an LMI optimization problem to minimize the upper bound of the induced-L2 norm which can represent the worst-case performance degradation due to false identification. The developed synthesis method is applied for control of the longitudinal motions of FASER (Free-flying Airplane for Subscale Experimental Research). The designed FTC law of the airplane is simulated for pitch angle command tracking under a false identification case.

Experimental testing is an important aspect of validating complex integrated safety critical aircraft technologies. The Airborne Subscale Transport Aircraft Research (AirSTAR) Testbed is being developed at NASA Langley to validate technologies under conditions that cannot be flight validated with full-scale vehicles. The AirSTAR capability comprises a series of flying sub-scale models, associated ground-support equipment, and a base research station at NASA Langley. The subscale model capability utilizes a generic 5.5% scaled transport class vehicle known as the Generic Transport Model (GTM). The AirSTAR Ground Facilities encompass the hardware and software infrastructure necessary to provide comprehensive support services for the GTM testbed. The ground facilities support remote piloting of the GTM aircraft, and include all subsystems required for data/video telemetry, experimental flight control algorithm implementation and evaluation, GTM simulation, data recording/archiving, and audio communications. The ground facilities include a self-contained, motorized vehicle serving as a mobile research command/operations center, capable of deployment to remote sites when conducting GTM flight experiments. The ground facilities also include a laboratory based at NASA LaRC providing near identical capabilities as the mobile command/operations center, as well as the capability to receive data/video/audio from, and send data/audio to the mobile command/operations center during GTM flight experiments.

This paper summarizes the results of the three-year research project, Reconfigurable Control of Aircraft in Nonlinear Flight Regimes, sponsored by NASA Langley Research Center. The research results include: 1) Reconfigurable controller design based on multivariable regulator and 2 H control theory, 2) Cooperative control and failure accommodation, 3) Symbolic model construction of an F-16 aircraft, 4) Reconfigurable control for an F-16 aircraft with asymmetric failures, and 5) Bifurcation analysis of aircraft in nonlinear flight regimes.

In a fault tolerant control (FTC) system, a parameter varying FTC law is reconfigured based on fault parameters estimated by fault detection and isolation (FDI) modules. FDI modules require some time to detect fault occurrences in aero-vehicle dynamics. This paper illustrates analysis of a FTC system based on estimated fault parameter transient behavior which may include false fault detections during a short time interval. Using Lyapunov function analysis, the upper bound of an induced-L2 norm of the FTC system performance is calculated as a function of a fault detection time and the exponential decay rate of the Lyapunov function.

For part I see ibid. Verifying the integrity of control computers in adverse operating environments is a key issue in the development, validation, certification, and operation of critical control systems. Future commercial aircraft will necessitate flight-critical systems with high reliability requirements for stability augmentation, flutter suppression, and guidance and control. Operational integrity of such systems in adverse environments must be validated. The paper considers the problem of dynamic detection techniques to monitoring the integrity of fault tolerant control computers in critical applications. Specifically, the paper considers the detection of malfunctions in an aircraft flight control computer (FCC) that is subjected to electromagnetic environment (EME) disturbances during laboratory testing. A dynamic monitoring strategy is presented and demonstrated for the FCC from glideslope engaged until flare under clear air turbulence conditions using a detailed simulation of the B737 Autoland. The performance of the monitoring system is analyzed.

The design of a linear parameter varying (LPV) controller for an aircraft at actuator failure cases is presented. The controller synthesis for actuator failure cases is formulated into linear matrix inequality (LMI) optimizations based on an estimated failure parameter with pre-defined estimation error bounds. The inherent conservatism of an LPV control synthesis methodology is reduced using a scaling factor on the uncertainty block which represents estimated parameter uncertainties. The fault parameter is estimated using the two-stage Kalman filter. The simulation results of the designed LPV controller for a HiMXT (Highly Maneuverable Aircraft Technology) vehicle with the on-line estimator show that the desired performance and robustness objectives are achieved for actuator failure cases.

It is anticipated that electromagnetic field disturbances will be increasingly problematic for future aircraft control systems, which will perform numerous flight-critical functions. Shielding within the digital systems cannot eliminate these common-cause disturbances, and redundancy is ineffective in accommodating them. This paper presents a distributed detection scheme with data fusion for monitoring the function of redundant processing channels of a flight critical control system during operation. The detection scheme is demonstrated using data collected during closed-loop High Intensity Radiated Fields (HIRF) system effects experiments on a quad-redundant Flight Control Computer (FCC), which is executing Autoland control laws under flight conditions with heavy clear air turbulence. The performance of the monitoring system is assessed. The detection scheme presented in this paper can also be applied to redundancy management in fault tolerant systems.

Formal robustness analysis of failure detection and accommodation systems could play an important role in their validation and ultimate certification. However, formulation of linear fractional transformation (LFT) models can be very difficult for complex parameter-dependent systems. The paper presents a matrix-based computational approach that can be implemented in software for obtaining LFT models of complex systems involving parametric uncertainties, faults, and failures. Several examples are presented, including, a modeling framework for performing robustness analyses of faulty uncertain systems and failure detection and accommodation systems.