2 ms·
...three flight controllers ... two different sets of sensors ... independently compute the desired actions to take, and vote on what to do. Each ... has its ow
by rkagerer 2y ago
...three flight controllers ... two different sets of sensors ... independently compute the desired actions to take, and vote on what to do. Each ... has its own power source, backup battery, networking hardware, and set of critical sensors.
You didn't mention activators. Do all the redundant components you mentioned connect to a single voting system, and single set of actuators? How do you avoid your voting system and actuators being another single point of failure?
Or does each redundant system have it's own set of actuators, and enough of them to tolerate failure of one set? (e.g. three sets sized such that two working ones can overpower one erroneous one)
- n_ermosh 2y agoyes I should have mentioned actuators as well. the actuators are internally redundant in terms of computation and power and will fail silent and not move if they disagree. Then, each control axis has 2 sets of these servos. I say axis, rather than control surface, because for something like ailerons, we can have one go neutral in a fault case and the aileron on the other wing still operates with some reduced control authority. So even though each aileron has one servo, the roll axis has 2 and it maintains redundancy