Content deleted Content added
JanHRichter (talk | contribs) |
Adding short description: "Approach in control theory to achieve fault-tolerant control for dynamic systems" |
||
(40 intermediate revisions by 21 users not shown) | |||
Line 1:
{{Short description|Approach in control theory to achieve fault-tolerant control for dynamic systems}}
'''Control reconfiguration''' is an active approach in [[control theory]] to achieve [[Fault-Tolerant Control|fault-tolerant control]] for [[dynamic systems]].<ref>{{Harv|Blanke|Kinnaert|Lunze|Staroswiecki|2006}}</ref> It is used when severe [[Fault (technology)|faults]], such as actuator or sensor outages, cause a break-up of the [[control loop]], which must be restructured to prevent [[failure]] at the system level. In addition to loop restructuring, the [[Controller (control theory)|controller]] parameters must be adjusted to accommodate changed plant dynamics. Control reconfiguration is a building block toward increasing the [[dependability]] of systems under [[feedback]] control.<ref>{{Harv|Patton|1997}}</ref>
== Reconfiguration
[[Image:ReconfStructure.png|frame|
=== Fault
The figure to the right shows a plant controlled by a controller in a standard control loop.
The nominal linear model of the plant is
<math>\begin{cases}\dot{\mathbf{x}} & = \mathbf{A}\mathbf{x} + \mathbf{B}\mathbf{u}\\
\mathbf{y} & = \mathbf{C}\mathbf{x}\end{cases}</math>
The plant subject to a fault (indicated by a red arrow in the figure) is modelled in general by
<math>\begin{cases}\dot{\mathbf{x}}_f & = \mathbf{A}_f\mathbf{x}_f + \mathbf{B}_f\mathbf{u}\\
\mathbf{y}_f & = \mathbf{C}_f\mathbf{x}_f\end{cases}</math>
where the subscript <math>f</math> indicates that the system is faulty. This approach models multiplicative faults by modified system matrices. Specifically, actuator faults are represented by the new input matrix <math>\mathbf{B}_f</math>, sensor faults are represented by the output map <math>\mathbf{C}_f</math>, and internal plant faults are represented by the system matrix <math>\mathbf{A}_f</math>.
The upper part of the figure shows a supervisory loop consisting of ''fault detection and isolation'' (FDI) and ''reconfiguration'' which changes the loop by
# choosing new input and output signals from {<math>\mathbf{u},\mathbf{y}</math>} to reach the control goal,
# changing the controller internals (including dynamic structure and parameters),
# adjusting the reference input <math>\mathbf{w}</math>.
Line 25 ⟶ 30:
To this end, the vectors of inputs and outputs contain ''all available signals'', not just those used by the controller in fault-free operation.
Alternative scenarios can model faults as an additive external signal <math>\mathbf{f}</math> influencing the state derivatives and outputs as follows:
<math>\begin{cases}\dot{\mathbf{x}}_f & = \mathbf{A}\mathbf{x}_f + \mathbf{B}\mathbf{u} + \mathbf{E}\mathbf{f}\\
\mathbf{y}_f & = \mathbf{C}_f\mathbf{x}_f + \mathbf{F}\mathbf{f}\end{cases}</math>
=== Reconfiguration goals ===
The goal of reconfiguration is to keep the reconfigured control-loop performance sufficient for preventing plant shutdown. The following goals are distinguished:
# Stabilization
# Equilibrium recovery
# Output trajectory recovery
# State trajectory recovery
# Transient time response recovery
Internal stability of the reconfigured closed loop is usually the minimum requirement. The equilibrium recovery goal (also referred to as weak goal) refers to the steady-state output equilibrium which the reconfigured loop reaches after a given constant input. This equilibrium must equal the nominal equilibrium under the same input (as time tends to infinity). This goal ensures steady-state reference tracking after reconfiguration. The output trajectory recovery goal (also referred to as strong goal) is even stricter. It requires that the dynamic response to an input must equal the nominal response at all times. Further restrictions are imposed by the state trajectory recovery goal, which requires that the state trajectory be restored to the nominal case by the reconfiguration under any input.
Usually a combination of goals is pursued in practice, such as the equilibrium-recovery goal with stability.
The question whether or not these or similar goals can be reached for specific faults is addressed by [[reconfigurability]] analysis.
== Reconfiguration approaches ==
=== Fault hiding ===
[[Image:FaultHiding with Goals.png|frame|Fault hiding principle. A reconfiguration block is placed between faulty plant and nominal controller. The reconfigured plant behaviour must match the nominal behaviour. Furthermore, the reconfiguration goals are pointed out.]]
This paradigm aims at keeping the nominal controller in the loop. To this end, a reconfiguration block can be placed between the faulty plant and the nominal controller. Together with the faulty plant, it forms the reconfigured plant. The reconfiguration block has to fulfill the requirement that the behaviour of the reconfigured plant matches the behaviour of the nominal, that is fault-free plant.<ref>{{Harv|Steffen|2005}}</ref>
=== Linear model following ===
In linear model following, a formal feature of the nominal closed loop is attempted to be recovered. In the classical pseudo-inverse method, the closed loop system matrix <math>\bar{\mathbf{A}} = \mathbf{A}-\mathbf{B}\mathbf{K}</math> of a state-feedback control structure is used. The new controller <math>\mathbf{K}_f</math> is found to
In perfect model following, a dynamic compensator is introduced to allow for the exact recovery of the complete loop behaviour under certain conditions.
Line 54 ⟶ 64:
In eigenstructure assignment, the nominal closed loop eigenvalues and eigenvectors (the eigenstructure) is recovered to the nominal case after a fault.
=== Optimisation-based control schemes ===
===
Some probabilistic approaches have been developed.<ref>{{Harv|Mahmoud
=== Learning control ===
== Mathematical
The methods by which reconfiguration is achieved differ considerably. The following list gives an overview of mathematical approaches that are commonly used
* [[Adaptive control]] (AC)
Line 79 ⟶ 89:
* [[Robust control]] techniques
==
Prior to control reconfiguration, it must be at least determined whether a fault has occurred ([[
[[Fault Accommodation|Fault accommodation]] is another common approach to achieve [[Fault Tolerance|fault tolerance]]. In contrast to control reconfiguration, accommodation is limited to internal controller changes. The sets of signals manipulated and measured by the controller are fixed, which means that the loop cannot be restructured
== References ==
<references/>
== Further reading ==
* {{Citation
| last1=Blanke | first1=M. | last2=Kinnaert | first2=M.
| last3=Lunze | first3=J. | last4=Staroswiecki | first4=M.
| year= 2006 | edition=2nd
| title=Diagnosis and Fault-Tolerant Control | publisher=Springer}}
* {{Citation
| last=Steffen | first=T. | year= 2005
| title=Control Reconfiguration of Dynamical Systems | publisher=Springer}}
* {{Citation
| last=Staroswiecki | first=M. | year=2005
| chapter=Fault Tolerant Control: The Pseudo-Inverse Method Revisited
| title=Proceedings of the 16th IFAC World Congress
| publisher=IFAC | place=Prague, Czech Republic}}
* {{Citation
| last1=Lunze| first1=J. | last2=Rowe-Serrano | first2=D.
| last3=Steffen | first3=T. | year=2003
| chapter=Control Reconfiguration Demonstrated at a Two-Degrees-of-Freedom Helicopter Model
| title=Proceedings of European Control Conference (ECC) | place=Cambridge, UK.}}
* {{Citation
| last1=Maciejowski | first1=J. | last2=Jones | first2=C. | year=2003
| chapter=MPC Fault-Tolerant Flight Control Case Study: Flight 1862
| title=Proceedings of the SAFEPROCESS 2003: 5th Symposium on Detection and Safety for Technical Processes
| publisher=IFAC | place=Washington D.C., USA | pages=265–276}}
* {{Citation
| last1=Mahmoud | first1=M. | last2=Jiang | first2=J.
| last3=Zhang | first3=Y. | year= 2003
| title=Active Fault Tolerant Control Systems - Stochastic Analysis and Synthesis
| publisher=Springer}}
* {{Citation
| last1=Zhang | first1=Y. | last2=Jiang | first2=J. | year= 2003
| chapter=Bibliographical review on reconfigurable fault-tolerant control systems
| title=Proceedings of the SAFEPROCESS 2003: 5th Symposium on Detection and Safety for Technical Processes
| publisher=IFAC | place=Washington D.C., USA | pages=265–276}}
* {{Citation
| last=Patton | first=R. J. | year= 1997
| chapter=Fault-tolerant control: the 1997 situation
| title=Preprints of IFAC Symposium on Fault Detection Supervision and Safety for Technical Processes
| place=Kingston upon Hull, UK | pages=1033–1055}}
* {{Citation
| last=Rauch | first=H. E. | year= 1995
| journal=IEEE Control Systems Magazine
| title=Autonomous control reconfiguration
| volume=15 | number=6 | pages=37–48 | doi=10.1109/37.476385}}
* {{Citation
| last=Rauch | first=H. E. | year= 1994
| journal=IEEE Control Systems Magazine
| title=Intelligent fault diagnosis and control reconfiguration
| volume=14 | number=3 | pages=6–12 | doi=10.1109/37.291462| s2cid=39931526 }}
* {{Citation
| last1=Gao | first1=Z. | last2=Antsaklis | first2=P.J.
| year= 1991 | journal=International Journal of Control
| title=Stability of the pseudo-inverse method for reconfigurable control systems
| volume=53 | number=3 | pages=717–729 | doi=10.1080/00207179108953643}}
* {{Citation
| last1=Looze | first1=D. | last2=Weiss | first2=J.L.
| last3=Eterno | first3=J.S. | last4=Barrett | first4=N.M.
| year= 1985 | journal=IEEE Control Systems Magazine
| title=An Automatic Redesign Approach for Restructurable Control Systems|volume=5
| number=2 | pages=16–22 | doi=10.1109/mcs.1985.1104940| s2cid=12684489 }}.
* {{Citation
| last1=Esna Ashari | first1=A. | last2=Khaki Sedigh | first2=A.
| last3=Yazdanpanah | first3=M. J. | year= 2005
| journal=International Journal of Control
| title=Reconfigurable control system design using eigenstructure assignment: static, dynamic and robust approaches
| volume=78 | number=13 | pages=1005–1016 | doi=10.1080/00207170500241817| s2cid=121350006 }}.
[[Category:Control theory
[[Category:Cybernetics]]
[[Category:Control
[[Category:Fault tolerance]]
|