Communications and tracking expert systems study

The original objectives of the study consisted of five broad areas of investigation: criteria and issues for explanation of communication and tracking system anomaly detection, isolation, and recovery; data storage simplification issues for fault detection expert systems; data selection procedures for decision tree pruning and optimization to enhance the abstraction of pertinent information for clear explanation; criteria for establishing levels of explanation suited to needs; and analysis of expert system interaction and modularization. Progress was made in all areas, but to a lesser extent in the criteria for establishing levels of explanation suited to needs. Among the types of expert systems studied were those related to anomaly or fault detection, isolation, and recovery

Software control for large scale on-board checkout: A concept

Two level system checkout in which first level satisfies continuous monitoring requirements and second level provides fault isolation to satisfy maintenance requirements, provides self-checking capability for monitoring system and enables recovery from unexpected error or failure interruptions. System must perform operational duties of navigation, control, and experimentation

Control and protection sequence for recovery and reconfiguration of an offshore integrated MMC multi-terminal HVDC system under DC faults

AbstractA comprehensive process of the control and protection against a DC fault in a voltage source converter (VSC) based high-voltage direct current (HVDC) system typically includes fault detection, fault isolation and system recovery. Regarding an offshore wind farm (OWF) integrated modular multilevel converter (MMC) based multi-terminal HVDC (MTDC) system with two control paradigms, i.e. master-slave control and droop control under DC faults, this paper presents the fault isolation, including the isolation of the faulted line section, with detailed control and protection sequence, which would be useful for practical engineering. The control and protection sequence at the system recovery/reconfiguration phase is comprehensively investigated, which includes: (1) when to start the recovery/reconfiguration control; (2) the sequence between deblocking the MMCs and reclosing the AC circuit breakers (AC CBs); and (3) the recovery sequence of each HVDC terminal. Based on the analysis of the system characteristics, a preferred recovery/reconfiguration scheme is proposed. Simulation results on the real-time digital simulator (RTDS) validate the proposed scheme and demonstrate the advantages through comparison with a different recovery sequence. The impact of transient and permanent DC faults on the system recovery/reconfiguration control is discussed. In addition, the recovery/reconfiguration control of the MTDC in radial and meshed topologies is compared and demonstrated. Based on the analytical and simulation studies, a general guideline on the recovery/reconfiguration control of MMC MTDC systems is proposed

An autonomous fault detection, isolation, and recovery system for a 20-kHz electric power distribution test bed

Future space explorations will require long term human presence in space. Space environments that provide working and living quarters for manned missions are becoming increasingly larger and more sophisticated. Monitor and control of the space environment subsystems by expert system software, which emulate human reasoning processes, could maintain the health of the subsystems and help reduce the human workload. The autonomous power expert (APEX) system was developed to emulate a human expert's reasoning processes used to diagnose fault conditions in the domain of space power distribution. APEX is a fault detection, isolation, and recovery (FDIR) system, capable of autonomous monitoring and control of the power distribution system. APEX consists of a knowledge base, a data base, an inference engine, and various support and interface software. APEX provides the user with an easy-to-use interactive interface. When a fault is detected, APEX will inform the user of the detection. The user can direct APEX to isolate the probable cause of the fault. Once a fault has been isolated, the user can ask APEX to justify its fault isolation and to recommend actions to correct the fault. APEX implementation and capabilities are discussed

Towards Comprehensive AI-Based Onboard FDIR: System Design and First Results

Health monitoring of spacecrafts is a crucial task in Space operations. Fault Detection, Isolation and Recovery (FDIR) plays a critical role in ensuring the safety and successful operation of a spacecraft by detecting and isolating faults, and then executing recovery actions. Currently, the FDIR process is carried out mostly on ground, with only anomaly detection typically performed onboard the spacecraft using out-of-limit (OOL) threshold techniques, whereas fault isolation and recovery is managed by operators on the ground. This approach has two major limitations. Firstly, OOL approach is not capable of identifying subtle anomalies that occur within the parameters’ nominal operational range, limiting its effectivity in identifying a wide range of anomalies. Secondly, the need for ground investigation to isolate the fault prior to the implementation of a recovery action introduces a delay in the overall FDIR pipeline. This approach has two major limitations. Firstly, OOL approach is not capable of identifying subtle anomalies that occur within the parameters’ nominal operational range, limiting its effectivity in identifying a wide range of anomalies. Secondly, the need for ground investigation to isolate the fault prior to the implementation of a recovery action introduces a delay in the overall FDIR pipeline

Automatic Detection of Electric Power Troubles (ADEPT)

ADEPT is an expert system that integrates knowledge from three different suppliers to offer an advanced fault-detection system, and is designed for two modes of operation: real-time fault isolation and simulated modeling. Real time fault isolation of components is accomplished on a power system breadboard through the Fault Isolation Expert System (FIES II) interface with a rule system developed in-house. Faults are quickly detected and displayed and the rules and chain of reasoning optionally provided on a Laser printer. This system consists of a simulated Space Station power module using direct-current power supplies for Solar arrays on three power busses. For tests of the system's ability to locate faults inserted via switches, loads are configured by an INTEL microcomputer and the Symbolics artificial intelligence development system. As these loads are resistive in nature, Ohm's Law is used as the basis for rules by which faults are located. The three-bus system can correct faults automatically where there is a surplus of power available on any of the three busses. Techniques developed and used can be applied readily to other control systems requiring rapid intelligent decisions. Simulated modelling, used for theoretical studies, is implemented using a modified version of Kennedy Space Center's KATE (Knowledge-Based Automatic Test Equipment), FIES II windowing, and an ADEPT knowledge base. A load scheduler and a fault recovery system are currently under development to support both modes of operation

Study of fault tolerant software technology for dynamic systems

The major aim of this study is to investigate the feasibility of using systems-based failure detection isolation and compensation (FDIC) techniques in building fault-tolerant software and extending them, whenever possible, to the domain of software fault tolerance. First, it is shown that systems-based FDIC methods can be extended to develop software error detection techniques by using system models for software modules. In particular, it is demonstrated that systems-based FDIC techniques can yield consistency checks that are easier to implement than acceptance tests based on software specifications. Next, it is shown that systems-based failure compensation techniques can be generalized to the domain of software fault tolerance in developing software error recovery procedures. Finally, the feasibility of using fault-tolerant software in flight software is investigated. In particular, possible system and version instabilities, and functional performance degradation that may occur in N-Version programming applications to flight software are illustrated. Finally, a comparative analysis of N-Version and recovery block techniques in the context of generic blocks in flight software is presented

Care 3, Phase 1, volume 1

A computer program to aid in accessing the reliability of fault tolerant avionics systems was developed. A simple mathematical expression was used to evaluate the reliability of any redundant configuration over any interval during which the failure rates and coverage parameters remained unaffected by configuration changes. Provision was made for convolving such expressions in order to evaluate the reliability of a dual mode system. A coverage model was also developed to determine the various relevant coverage coefficients as a function of the available hardware and software fault detector characteristics, and subsequent isolation and recovery delay statistics

Implementing a real time reasoning system for robust diagnosis

The objective of the Thermal Control System Automation Project (TCSAP) is to develop an advanced fault detection, isolation, and recovery (FDIR) capability for use on the Space Station Freedom (SSF) External Active Thermal Control System (EATCS). Real-time monitoring, control, and diagnosis of the EATCS will be performed with a knowledge based system (KBS). Implementation issues for the current version of the KBS are discussed

Care 3 phase 2 report, maintenance manual

CARE 3 (Computer-Aided Reliability Estimation, version three) is a computer program designed to help estimate the reliability of complex, redundant systems. Although the program can model a wide variety of redundant structures, it was developed specifically for fault-tolerant avionics systems--systems distinguished by the need for extremely reliable performance since a system failure could well result in the loss of human life. It substantially generalizes the class of redundant configurations that could be accommodated, and includes a coverage model to determine the various coverage probabilities as a function of the applicable fault recovery mechanisms (detection delay, diagnostic scheduling interval, isolation and recovery delay, etc.). CARE 3 further generalizes the class of system structures that can be modeled and greatly expands the coverage model to take into account such effects as intermittent and transient faults, latent faults, error propagation, etc