UAV Autopilot Failover Using Programmable Logic Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing unmanned aerial vehicle (UAV) control systems lack redundancy and fail to seamlessly switch between primary and backup autopilot processes, leading to potential loss of control in case of primary system failure, and are often bulky and weight-intensive due to traditional backplane architectures.
Innovation Solution
A control system comprising a first processing unit configured to execute a primary autopilot process and a programmable logic array with a state machine that enables switching to a backup autopilot process in case of invalid output, integrated with a second processing unit and programmable logic array for redundant control, and a multiplexer to select appropriate servo commands, all within a compact and lightweight design.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional backplane architectures are used for control systems, then redundancy and failover capability are achieved, but the system becomes bulky and weight-intensive
Solution Approach 1:
The patent merges the primary and backup autopilot processing systems into a single integrated control unit with shared hardware resources. The programmable logic array and state machine are common to both processing systems, eliminating the need for separate redundant hardware components while maintaining failover capability. This consolidation directly reduces system weight and size.
Solution Approach 2:
The control system employs universal hardware components that serve multiple functions. The single programmable logic array and state machine can operate in support of either the primary or backup processing system depending on which is functional. This multi-functionality allows redundancy without requiring dedicated hardware for each system, thereby reducing overall weight.
2Reliability
If separate hardware components are provided for each vehicle control system and mission control system, then system independence and reliability are improved, but device complexity increases
Solution Approach 1:
The patent segments the control system into distinct functional modules: a first processing system for primary autopilot, a second processing system for backup autopilot, a shared programmable logic array, and a state machine. This segmentation allows logical independence and clear failure boundaries while sharing common resources, reducing overall hardware complexity compared to fully redundant separate systems.
Solution Approach 2:
The state machine acts as an intermediary component that manages the interaction between the primary and backup processing systems. It monitors the health of both systems and controls the failover process, providing a structured interface that simplifies the complexity of coordinating multiple independent hardware components while maintaining system reliability.
3Reliability
If a state machine in programmable logic array is used for seamless switching, then control reliability during failover is improved, but switching logic complexity increases
Solution Approach 1:
The state machine is pre-configured with failover logic that continuously monitors the health of primary and backup processing systems. The switching decisions and state transitions are predetermined based on defined failure conditions, allowing seamless failover without requiring complex real-time decision-making logic during actual failure events.
Solution Approach 2:
The state machine implements feedback mechanisms by continuously monitoring the operational status of both processing systems and adjusting its output accordingly. This feedback loop ensures that the system automatically transitions to the backup processor when the primary fails and can potentially switch back if the primary recovers, maintaining control reliability through a relatively simple reactive logic structure.
Data Source
AI summary
A control system an unmanned vehicle includes a first processing unit configured to execute a primary autopilot process for controlling the unmanned vehicle. The control system further includes a programmable logic array in operative communication with the first processing unit. The control system also includes a state machine configured in the programmable logic array. The state machine is configured to enable control of the unmanned vehicle according to a backup autopilot process in response to an invalid output of the first processing unit.