Redundant Actuator Channel Switching Using Motor Speed Cross-Checks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing actuator architectures, such as triplex and CON/MON, are costly and complex due to the need for multiple fully functional channels and slow control processes, respectively, which are disadvantageous in safety-critical applications like aviation and autonomous driving.

Innovation Solution

An actuator with redundant channels that utilizes a motor information unit to generate additional speed information, allowing a selection unit to decide which channel is functioning correctly based on speed and motor information values, eliminating the need for a higher-level control computer and reducing the requirement for a fully functional third channel.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a triplex architecture with three fully functional channels is used to increase reliability, then system reliability is improved, but device complexity and cost significantly increase

Engineering Contradiction:
Improveactuator reliabilityVSAvoidcontrol architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The invention segments the control architecture into two distinct parts: a first channel with a first functional unit for control tasks, and a second channel with a second functional unit for monitoring tasks. This segmentation allows each channel to be optimized for its specific function, reducing overall complexity while maintaining reliability through functional redundancy.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The second channel is designed to serve dual purposes: it monitors the first channel's control tasks and can also execute control tasks itself when needed. This multi-functionality reduces the need for completely separate redundant systems, thereby reducing device complexity and cost while maintaining reliability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If a CON/MON architecture with a central control computer is used to monitor control tasks, then system reliability is improved, but the control process speed decreases due to communication delays

Engineering Contradiction:
Improvecontrol monitoring reliabilityVSAvoidcontrol process speed
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The invention segments the monitoring function from the central control computer and places it directly in the second channel's functional unit. This segmentation allows monitoring to occur locally and independently, eliminating communication delays with the central computer and maintaining fast control process speed while ensuring reliable monitoring.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The second channel performs self-monitoring of the first channel's control tasks without requiring external intervention from a central control computer. This self-service approach enables real-time monitoring and rapid response to faults, maintaining both reliability and control speed.

Inventive Principle:
Principle #25Self-service

3Stability of the object's composition

If a central control computer with lower clock frequency is used to make control decisions, then system stability is improved, but the intervention time increases resulting in late response to faults

Engineering Contradiction:
Improvecontrol system stabilityVSAvoidfault detection and intervention time
Core Design Contradiction:
Stability of the object's compositionVSLoss of time

Solution Approach 1:

The invention segments the fault detection and decision-making functions into distributed functional units in the first and second channels, rather than concentrating them in a central control computer. This segmentation enables parallel processing and local decision-making, reducing intervention time while maintaining system stability through coordinated operation of the channels.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The second channel continuously monitors and prepares to take over control tasks in advance, before any fault occurs. This preliminary action ensures that when a fault is detected in the first channel, the second channel can immediately assume control without waiting for a central control computer's decision, thereby reducing loss of time while maintaining stability.

Inventive Principle:
Principle #10Preliminary action

4Reliability

If three fully functional redundant channels are implemented to ensure safety, then system reliability is improved, but cost significantly increases

Engineering Contradiction:
Improveflight safety reliabilityVSAvoidsystem cost
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The second channel is designed to serve dual purposes: it monitors the first channel's control tasks and can also execute control tasks itself when needed. This multi-functionality reduces the need for completely separate redundant systems, thereby reducing quantity of components and cost while maintaining reliability through functional redundancy.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The invention segments the control architecture into specialized functional units with different responsibilities. The first functional unit handles control tasks while the second functional unit handles monitoring and can also perform control. This segmentation allows for more efficient resource utilization and reduced component requirements, lowering cost while maintaining safety-critical reliability.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP4685604A1Redundant channel actuator
Publication Date: 2026.01.28 LIEBHERR AEROSPACE LINDENBERG GMBH
  • EP4685604A1 patent drawingFigure 1
  • EP4685604A1 patent drawing
  • EP4685604A1 patent drawing

AI summary

The invention relates to an actuator with redundant channels, comprising a motor for actuating the actuator, a sensor, in particular a speed sensor, for detecting and transmitting a speed signal from the motor, a first channel comprising a first functional unit connected to the sensor for operating the actuator, a second channel redundant to the first channel comprising a second functional unit connected to the sensor for operating the actuator, and a selection unit for selecting whether the first channel or the second channel takes control of the actuator, wherein the first channel provides a first speed information value based on the speed signal and the second channel provides a second speed information value based on the speed signal to the selection unit.The actuator is characterized by a motor information unit for providing a motor information value, in particular a third speed information value of the motor, to the selection unit, wherein the selection unit is designed to make a decision, based on the motor information value as well as the first and second speed information values, as to whether the first channel or the second channel receives control over the actuator.