基于自组织神经网络的软件功能测试数据自动生成

针对面向软件功能的测试数据自动生成问题,提出了一种动态自组织特征映射方法,用于生成揭示软件功能故障的测试数据(简称故障数据)。该方法主要有两部分组成,①采用具有全局多峰搜索特性的小生境遗传算法,在输入空间内搜索功能测试数据,生成少量的初始故障数据;②由初始故障数据,采用具有联想和分类能力的可变结构自组织特征映射,不断迭代生成大量相近而不同的故障数据,以便给开发者提供引发这些软件故障的信息,从而确定软件故障行为的模式或假设。用某型空空导弹发射控制软件进行了实验,运行结果表明了方法的有效性,故障数据生成效率高于遗传算法和随机法。     

Methodology for cost-effective software fault tolerance formission-critical systems

A computing capabilities continue to advance, there will be a concurrent rise in the number of both hardware and software faults. These will be caused by the greater volume of more complex software, by the increased number of untested software states, and by more incidents of hardware/software interaction faults as a result of increased hardware speed and density. The traditional software implemented fault tolerance: approaches have been successfully utilized in life-critical systems, such as digital flight controls, where their additional costs can be easily justified. Examples include N-Version Programming and Recovery Block approaches. However, there is still a need for dependable computing for mission-critical applications as well. Often, these traditional techniques are avoided for mission-critical systems due to the difficulty in justifying their extra up-front development cost. We provide an alternative for the high “sunk cost” of traditional software fault tolerance techniques. The methodology, called data fusion integrity processes (DFIPs), is a simple, yet effective technique for mission-critical systems. In addition, the approach establishes a framework from which other costlier, more extensive traditional techniques can be added. We present details of the DFIP methodology and a DFIP framework for Ada programs. We also briefly discuss development of a DFIP code generation system which exploits Java that will enable users to quickly build a DFIP framework in Ada, and select reusable DFIP component methods     

基于交互多模估计策略的故障检诊方法

针对多模自适应（ＭＭＡＥ）故障检诊（ＦＤＤ）方法的局限性,提出了一种基于交互多模（ＩＭＭ）估计策略的动态系统中多重故障的检诊方法。交互多模估计是针对包含有结构以及参数的系统的一种效率较好的自适应估计技术,它提供了故障检测、诊断和状态估计的集中框架。通过对在传感器和作动器中含有多个故障飞机的仿真。结果表明,所提供的方法比其它方法能够更快、更可靠地检测和隔离出多重故障。     

Future architecture of flight control systems

The development of fault tolerant embedded control systems such as flight control systems (FCS) are currently highly specialized and time-consuming. We introduce a conceptual architecture for the next decade control system where all control and logic are distributed to a number of computer nodes locally linked to actuators and connected via a communication network. In this way, we substantially reduce the life-cycle cost of embedded systems and attain scalable fault tolerance. All fault tolerance is based on redundancy. Our philosophy is to cover permanent faults with hardware replication and handle all error processing caused by both permanent and transient faults with software techniques. With intelligent nodes and use of inherent redundancy we introduce a robust and simple fault tolerant system that utilizes minimum hardware and has bandwidth requirements of less than 300 kbits/s, which can be met with an electrical bus. The study is based on an FCS for JAS 39 Gripen, a multi-role combat aircraft that is statically unstable at subsonic speed.     

Detection and diagnosis of sensor and actuator failures using IMMestimator

An approach to detection and diagnosis of multiple failures in a dynamic system is proposed. It is based on the interacting multiple-model (IMM) estimation algorithm, which is one of the most cost-effective adaptive estimation techniques for systems involving structural as well as parametric changes. The proposed approach provides an integrated framework for fault detection, diagnosis, and state estimation. It is able to detect and isolate multiple faults substantially more quickly and more reliably than many existing approaches. Its superiority is illustrated in two aircraft examples for single and double faults of both sensors and actuators, in the forms of “total”, “partial”, and simultaneous failures. Both deterministic and random fault scenarios are designed and used for testing and comparing the performance fairly. Some new performance indices are presented. The robustness of the proposed approach to the design of model transition probabilities, fault modeling errors, and the uncertainties of noise statistics are also evaluated     

A novel two-stage extended Kalman filter algorithm for reaction flywheels fault estimation

This paper investigates the problem of two-stage extended Kalman filter(TSEKF)-based fault estimation for reaction flywheels in satellite attitude control systems(ACSs). Firstly, based on the separate-bias principle, a satellite ACSs with actuator fault is transformed into an augmented nonlinear discrete stochastic model; then, a novel TSEKF is suggested such that it can simultaneously estimate satellite attitude information and actuator faults no matter they are additive or multiplicative; finally, the proposed approach is respectively applied to estimating bias faults and loss of effectiveness for reaction flywheels in satellite ACSs, and simulation results demonstrate the effectiveness of the proposed fault estimation approach.     

A Diagnostic Tree Approach for Fault Cause Identification in the Attitude Control Subsystem of Satellites

Space and Earth observation programs demand stringent guarantees ensuring smooth and reliable operations of space vehicles and satellites. Due to unforeseen circumstances and naturally occurring faults, it is desired that a fault-diagnosis system be capable of detecting, isolating, identifying, or classifying faults in the system. Unfortunately, none of the existing fault-diagnosis methodologies alone can meet all the requirements of an ideal fault- diagnosis system due to the variety of fault types, their severity, and handling mechanisms. However, it is possible to overcome these shortcomings through the integration of different existing fault-diagnosis methodologies. In this paper, a novel learning-based, diagnostic-tree approach is proposed which complements and strengthens existing efficient fault detection mechanisms with an additional ability to classify different types of faults to effectively determine potential fault causes in a subsystem of a satellite. This extra capability serves as a semiautomatic diagnostic decision support aid to expert human operators at ground stations and enables them to determine fault causes and to take quick and efficient recovery/reconfiguration actions. The developed diagnosis/analysis procedure exploits a qualitative technique denoted as diagnostic tree (DX-tree) analysis as a diagnostic tool for fault cause analysis in the attitude control subsystem (ACS) of a satellite. DX-trees constructed by our proposed machine-learning-based automatic tree synthesis algorithm are demonstrated to be able to determine both known and unforeseen combinations of events leading to different fault scenarios generated through synthetic attitude control subsystem data of a satellite. Though the immediate application of our proposed approach would be at ground stations, the proposed technique has potential for being integrated with causal model-based diagnosis and recovery techniques for future autonomous space vehicle missions.     

Model-based robustness testing for avionics-embedded software

Robustness testing for safety-critical embedded software is still a challenge in its nascent stages. In this paper, we propose a practical methodology and implement an environment by employing model-based robustness testing for embedded software systems. It is a system-level black-box testing approach in which the fault behaviors of embedded software is triggered with the aid of modelbased fault injection by the support of an executable model-driven hardware-in-loop (HIL) testing environment. The prototype implementation of the robustness testing environment based on the proposed approach is experimentally discussed and illustrated by industrial case studies based on several avionics-embedded software systems. The results show that our proposed and implemented robustness testing method and environment are effective to find more bugs, and reduce burdens of testing engineers to enhance efficiency of testing tasks, especially for testing complex embedded systems.     

Simultaneous state and actuator fault estimation for satellite attitude control systems

In this paper, a new nonlinear augmented observer is proposed and applied to satellite attitude control systems. The observer can estimate system state and actuator fault simultaneously. It can enhance the performances of rapidly-varying faults estimation. Only original system matrices are adopted in the parameter design. The considered faults can be unbounded, and the proposed augmented observer can estimate a large class of faults. Systems without disturbances and the fault whose finite times derivatives are zero piecewise are initially considered, followed by a discussion of a general situation where the system is subject to disturbances and the finite times derivatives of the faults are not null but bounded. For the considered nonlinear system, convergence conditions of the observer are provided and the stability analysis is performed using Lyapunov direct method. Then a feasible algorithm is explored to compute the observer parameters using linear matrix inequalities (LMIs). Finally, the effectiveness of the proposed approach is illustrated by considering an example of a closed-loop satellite attitude control system. The simulation results show satisfactory perfor-mance in estimating states and actuator faults. It also shows that multiple faults can be estimated successfully.     

Fault tolerant control system design with explicit consideration of performance degradation

A new approach is proposed for active fault tolerant control systems (FTCS), which allows one to explicitly incorporate allowable system performance degradation in the event of partial actuator fault in the design process. The method is based on model-following and command input management techniques. The degradation in dynamic performance is accounted for through a degraded reference model. A novel method for,selecting such a model is also presented. The degradation in steady-state performance is dealt with using a command input adjustment technique. When a fault is detected by the fault detection and diagnosis (FDD) scheme, the reconfigurable controller is designed automatically using an eigenstructure assignment algorithm in an explicit model-following framework so that the dynamics of the closed-loop system follow that of the degraded reference model. In the mean time, the command input is also adjusted automatically to prevent the actuators from saturation. The proposed method has been evaluated using the lateral dynamics of an F-8 aircraft against actuator faults subject to constraints on the magnitude of actuator inputs. Very encouraging results have been obtained.     

A discrete event systems approach to discriminating intermittent from permanent faults

Almost all work on model-based diagnosis （MBD） potentially presumes faults are per- sistent and does not take intermittent faults （IFs） into account. Therefore, it is common for diag- nosis systems to misjudge IFs as permanent faults （PFs）, which are the major cause of the problems of false alarms, cannot duplication and no fault found in aircraft avionics. To address this problem, a new fault model which includes PFs and IFs is presented based on discrete event systems （DESs）. Thereafter, an approach is given to discriminate between PFs and IFs by diagnosing the current fault. In this paper, the regulations of （PFs and IFs） fault evolution through fault and reset events along the traces of system are studied, and then label propagation function is modified to account for PFs and the dynamic behavior of IFs and diagnosability of PFs and IFs are defined. Finally, illustrative examples are presented to demonstrate the proposed approach, and the analysis results show the fault types can be discriminated within bounded delay if the system is diagnosable.     

Integrated active fault-tolerant control using IMM approach

An integrated fault detection, diagnosis, and reconfigurable control scheme based on interacting multiple model (IMM) approach is proposed. Fault detection and diagnosis (FDD) is carried out using an IMM estimator. An eigenstructure assignment (EA) technique is used for reconfigurable feedback control law design. To achieve steady-state tracking, reconfigurable feedforward controllers are also synthesized using input weighting approach. The developed scheme can deal with not only actuator and sensor faults, but also failures in, system components. To achieve fast and reliable fault detection, diagnosis, and controller reconfiguration, new fault diagnosis and controller reconfiguration mechanisms have been developed by a suitable combination of the information provided by the mode probabilities from the IMM algorithm and an index related to the closed-loop system performance. The proposed approach is evaluated using an aircraft example, and excellent results have been obtained     

航天器姿控系统的PD型学习观测器故障重构

针对满足Lipschitz条件的航天器姿态控制系统这一非线性系统中存在的执行器加性故障、空间干扰与测量噪声问题,提出了基于PD型迭代学习观测器的故障重构方法。该方法具有期望的鲁棒性能指标,能够在系统存在空间干扰与测量噪声情况下实现对突变故障与时变故障等故障类型的精确重构。基于线性矩阵不等式技术给出系统化PD型迭代学习观测器的设计方法,并根据Lyapunov稳定性理论对上述设计方法的稳定性条件进行了理论证明,同时利用鲁棒技术抑制空间干扰与测量噪声对执行器故障重构的影响,通过线性矩阵不等式工具箱求解观测器参数矩阵。最后,将该方法应用到航天器姿态控制系统中,仿真结果证明了该方法的有效性。     

Detection of satellite attitude sensor faults using the UKF

A novel fault detection (FD) method for nonlinear systems using the residuals generated by the unscented Kalman filter (UKF) is proposed. The errors of the UKF are derived and sufficient conditions for the convergence of the UKF are presented. As the local approach is a powerful statistical technique for detecting changes in the mean of a Gaussian process, it is used to devise a hypothesis test to detect faults from residuals obtained from the UKF. Further, it is demonstrated that the selection of a sample number is important in improving the performance of the local approach. To illustrate the implementation and performance of the proposed technique, it is applied to detect sensor faults in the measurement of satellite attitude.     

Fault self-repair strategy based on evolvable hardware and reparation balance technology

In the face of harsh natural environment applications such as earth-orbiting and deep space satellites, underwater sea vehicles, strong electromagnetic interference and temperature stress,the circuits faults appear easily. Circuit faults will inevitably lead to serious losses of availability or impeded mission success without self-repair over the mission duration. Traditional fault-repair methods based on redundant fault-tolerant technique are straightforward to implement, yet their area, power and weight cost can be excessive. Moreover they utilize all plug-in or component level circuits to realize redundant backup, such that their applicability is limited. Hence, a novel selfrepair technology based on evolvable hardware（EHW） and reparation balance technology（RBT） is proposed. Its cost is low, and fault self-repair of various circuits and devices can be realized through dynamic configuration. Making full use of the fault signals, correcting circuit can be found through EHW technique to realize the balance and compensation of the fault output-signals. In this paper, the self-repair model was analyzed which based on EHW and RBT technique, the specific self-repair strategy was studied, the corresponding self-repair circuit fault system was designed, and the typical faults were simulated and analyzed which combined with the actual electronic devices. Simulation results demonstrated that the proposed fault self-repair strategy was feasible. Compared to traditional techniques, fault self-repair based on EHW consumes fewer hardware resources, and the scope of fault self-repair was expanded significantly.     

基于鲁棒故障观测器的非线性离散系统容错控制设计

针对存在执行器故障以及未知干扰的非线性离散系统,提出了一种鲁棒故障估计与容错控制方法。首先在未知系统干扰作用下,设计鲁棒故障观测器实现系统状态和执行器故障的同步估计;然后根据鲁棒故障观测器得到的系统状态估计和故障估计信息设计容错控制器,进行状态反馈容错控制,同时基于D稳定与H_∞控制理论对鲁棒故障观测器和容错控制器进行设计,实现了多约束条件下的故障估计与容错控制;最后用飞行控制系统模型验证了所提方法的有效性。     

Fault diagnostics and fault tolerant control

A novel simultaneous fault detection and diagnostics (FDD) and fault tolerant control (FTC) strategy for nonlinear stochastic systems in closed loops based on a continuous stirred tank reactor (CSTR) is presented. The purpose of control is to track the reactant concentration setpoint. Instead of output feedback we propose here to use proportional-integral-derivative (PID) state feedback, which is shown essential to achieve FTC against sensor faults. A new concept of “equivalent bias” is proposed to model the sensor faults. Both the states and the equivalent bias are on-line estimated by a pseudo separate-bias estimation algorithm. The estimated equivalent bias is then evaluated via a modified Bayes' classification based algorithm to detect and diagnose the sensor faults. Many kinds of sensor faults are tested by Monte Carlo simulations, which demonstrate that the proposed strategy has definite fault tolerant ability against sensor faults, moreover the sensor faults can be on-line detected, isolated, and estimated simultaneously     

基于UIO的航空发动机执行机构故障诊断

为了提高航空发动机诊断过程中对噪声干扰和模型参数变化的鲁棒性,应用UIO(Unknown Input Ob-server)理论估计发动机动态系统的工作状态,通过干扰正交投影弱化外界干扰对状态估计的影响,处理了航空发动机执行机构的故障诊断问题。对航空发动机执行机构设计一组UIO观测器,其中每个UIO用于监测估计对应执行机构的故障偏移量,计算系统输出理论估计值与发动机实际测量信号间的残差数据,分析残差队列的幅值特性,实现航空发动机执行机构系统的故障检测和隔离。某型涡扇发动机上的实验结果表明,与Kalman滤波算法相比,UIO诊断方法更能鲁棒地检测和隔离出执行机构故障。     

基于自适应滑模观测器的航空发动机故障诊断

为解决现有航空发动机基于模型的在线故障诊断方法存在对模型精度要求高等的问题,利用滑模方法设计一种自适应滑模观测器对航空发动机进行在线故障重构、诊断与隔离。对传感器故障和执行机构故障分别设计了重构算法,针对两者重构故障的特点提出了判断逻辑,讨论了设计参数对于观测效果与抖振的影响。 Matlab/Simulink仿真结果显示,重构的故障与实际故障基本吻合,对故障的诊断、隔离、定位具有良好效果,并对环境不确定性具有优良的鲁棒性。     

基于模糊奇偶方程的非线性系统传感器故障诊断

 给出了一种非线性系统传感器的故障诊断方法。该方法将T-S 模糊模型、全解耦奇偶方程和参数估计相结合,同时对非线性系统的多个传感器的故障进行检测、隔离与识别。设计出用于产生残差的线性系统全解耦奇偶方程,并给出了全解耦奇偶向量的存在条件,全解耦奇偶方程产生的残差仅对一个传感器故障敏感,而对系统状态、扰动输入和其它传感器输出解耦。引入T-S 模型将全解耦奇偶方程推广到非线性系统中得到了模糊奇偶方程。传感器的故障模型表示为刻度因子和偏差的形式,根据残差信息应用卡尔曼估计方法可识别出故障模型的参数。最后给出了某型号飞机控制系统传感器的故障诊断仿真实例。