Mixed-Criticality UMS Network with Virtualized Fault Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unmanned systems face challenges in reducing size, weight, and cost while maintaining reliability, as existing architectures often require multiple redundant components to ensure functionality in the event of failures.
Innovation Solution
The proposed architecture utilizes a single physical computer with hypervisor-based software to instantiate multiple virtual machines, separating networks by criticality and using power domains to isolate faults, allowing for efficient resource allocation and fault prevention across different components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple redundant physical computers are used to ensure reliability, then system reliability is improved, but size, weight, and cost increase
Solution Approach 1:
Multiple virtual computers are merged onto a single physical computer platform, allowing redundant computing functions to coexist on shared hardware. This consolidation eliminates the need for multiple separate physical computers while maintaining the reliability benefits of redundancy through virtualization isolation.
Solution Approach 2:
The single physical computer is designed to perform multiple functions by hosting different virtual computers for various missions and payloads. This multi-functionality allows the same hardware platform to support redundant systems for different purposes, reducing overall system weight while maintaining reliability.
2Reliability
If multiple redundant physical computers are used to ensure reliability, then system reliability is improved, but device complexity increases
Solution Approach 1:
The hypervisor software merges multiple virtual computer management functions into a single physical computer, simplifying the overall system architecture. Instead of managing multiple separate physical computers and their interconnections, the system uses one consolidated platform with virtualized functions, reducing complexity while maintaining reliability through virtual isolation.
3Reliability
If networks are logically separated by criticality tiers, then fault isolation is improved, but network complexity increases
Solution Approach 1:
The network is segmented into different criticality tiers (T1, T2, T3) with logical separation through the hypervisor and network switch. This segmentation isolates faults to specific tiers, preventing cascading failures while maintaining manageable network complexity through structured organization rather than complete physical separation.
Solution Approach 2:
The network switch acts as an intermediary that enforces logical separation between different criticality tiers. It mediates communication between tiers, allowing necessary interactions while preventing unauthorized fault propagation, thus achieving fault isolation without requiring complex physical network architecture.
4Reliability
If power domains are used to isolate electrical faults, then reliability is improved, but power system complexity increases
Solution Approach 1:
The power system is segmented into separate power domains (Power Domain 1, Power Domain 2, Power Domain 3) that correspond to different criticality tiers. This segmentation isolates electrical faults to specific domains, preventing system-wide failures while maintaining manageable complexity through hierarchical organization of power distribution.
Data Source
AI summary
Apparatus and methods for controlling unmanned systems (UMSs), such as unmanned aircraft, are provided. A UMS can be provided that includes a network, auxiliary systems, and a payload, where the network can connect the auxiliary systems and the payload. A network switch of the network can logically separate the network into at least a second tier of communications and a third tier of communications. The network can be used to control the UMS by at least: controlling the auxiliary systems using messages communicated by the second tier of communications, and communicating with the payload using messages communicated by the third tier of communications.