Abstract
In this contribution, a fault-tolerant control strategy for the longitudinal dynamics of an autonomous vehicle is presented. The aim is to be able to detect potential failures of the vehicle’s speed sensor and then to keep the vehicle in a safe state. For this purpose, the separation principle, composed of a static output feedback controller and fault estimation observers, is designed. Indeed, two observer techniques were proposed: the proportional and integral observer and the descriptor observer. The effectiveness of the proposed scheme is validated by means of the experimental demonstrator of the VEDECOM (Véhicle Décarboné et Communinicant) Institut.
Keywords: sensor fault, fault tolerant control, autonomous vehicle, separation principle, Lipschitz model, LMI approach
1. Introduction
The development of autonomous vehicles is enjoying a huge infatuation among the scientific community around the world. Hence, the research projects are globally intended to reduce traffic accidents, cut down fuel consumption and increase the efficiency of transportation systems, as well as passengers’ safety. In fact, vehicles’ automated systems have seen a significant advancement in a few decades, and several commercial cars are equipped with smart ADAS systems. Additionally, some leading companies around the world have shown promising results of fully-autonomous driving vehicles, such as the Google Car, Cruise of GM and the Tesla Autopilot. From this perspective, the SAE On-Road Automated Vehicle Standards Committee assessedr the classification of autonomous vehicles [1]. The Information Report provides a taxonomy for motor vehicle automation ranging in level from no automation to full automation. Thus, high levels of automation (namely 4 and 5) exclude the driver as a fall-back solution and must operate under specific environments (Level 4) or in all possible situations (Level 5), by ensuring autonomous monitoring of the surrounding area, the performance of the sensors and the algorithms and by deciding on the actions to maintain the vehicle in a safe state. Consequently, the monitoring of the performance of vehicle sensors is critical, as long as the entire operation of the car depends deeply on the sensors’ information. Indeed, the sensors’ reliability is a serious concern, especially since the architecture of an autonomous vehicle includes the tasks of: perception, localization, planning, control and system management, which share information with each other [2]; that is why a single faulty task can result in the dangerous behaviour of the vehicle.
From this perspective, it is necessary to design a fault tolerant control mechanism that can diagnose faults and preserve a safe vehicle behaviour even under faulty or degraded sensing. Furthermore, the designed fault tolerant mechanism must meet the requirements of the complexity of the high vehicle dynamics.
The fault tolerant control field has been an active research area. It is based on the inter-connection between the domains of system modelling, control theory and fault diagnosis. Several techniques and methodologies have been inventoried in review papers [3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21]. Mainly, there are two major branches of fault tolerant control, techniques that need a system analytical model and techniques that do not. Hence, methods without models are simple to synthesize and implement. On the other have, they have some issues in the event of transient faults, where the controlled closed loop system tends to dampen the effects of faults, and so, simply checking the size of the output signals does not give reliable insight into the overall system health [22]. Advances in the control theory field have boosted the development of mathematical modelling, made possible with recent computer technology. Hence, the model-based techniques provide a significant robustness against exogenous disturbances and structural model uncertainties, thanks to the and Lyapunov techniques. Further, exploiting analytical dynamic relations leads to estimated variables that cannot (or their dedicated sensors are expansive) be measured [23].
Moreover, looking at road death casualties, the human driver is mostly responsible, and the automated system may, hypothetically, decrease the number of deaths on the road by 90% [24]. Further, the report of the French Inter-ministerial Office of Road Safety pointed out that speeding was one of the main causes of accidents in French roads for the year 2015 with about of the cases. Indeed, speed control and regulation are critical in such automated systems [25]. Hence, the automated vehicle must have the ability to adjust its speed keeping, and, subsequently, a safe distance behind the front vehicle. This safe distance is a sufficient condition to immediately stop the vehicle if the front target stops rapidly, avoiding the collision. Thus, it is clear that inaccuracies or faults in the vehicle speed sensor can corrupt the inter-distance, leading to injurious control actions [26]. The problem of the vehicle speed sensor reliability belongs to the general family of proprioceptive fault diagnosis for which several techniques have been presented in the literature. The main methodologies aim to take advantage of the model-based techniques, mainly because of their robustness. Main methodologies aim to take advantage of the Model-Based techniques, mainly because of their robustness. In fact, the fault diagnosis task can be performed by using a large panel of methods, such as the parameter estimation (mainly for process faults), that exploit the the input/output pair to estimate the process model, and judge later whether the estimated parameters are more or less close to the parameters of the nominal case [27]. An other manner to proceed, is the design of a residual generator matrix using parity equations. Thus, the generated residuals give indications of the health of the diagnosed system, in such a way that if they are null it implies that there is no fault, contrariwise, if they are non null, one can conclude that some faults occurred [28]. Both aforementioned techniques can diagnose a fault, but they lack in robustness by leading to false alarms, due to the fact that they have a threshold, and the robust design of one threshold ensuring a global operating range is a harsh task. Thus, fault estimation observers appear to be an advantageous tool. Additionally, the reduced order observers can estimate states which dedicated sensors are very expensive, and can thereby, replace this expensive sensors. Several techniques of observers were presented in the literature recently, thus, it can be cited non exhaustively: the Unknown Input Observer (UIO) [29,30,31], Disturbance Observer [32,33], Descriptor Observer [34,35,36], Kalman Filtering variants [37,38,39]. As aforementioned, the main purpose of this work is to counteract the sensor faults of an autonomous vehicle. The proposed scheme in this paper aims to overcome the proprioceptive additive faults, with its three different forms (abrupt fault, intermittent fault and incipient fault) [40], as they occur with a far higher probability than multiplicative faults [41]. Furthermore, it is assumed in the designed scheme that there are no occurrence of parametric (tire deflation) and actuator (motor abnormalities) faults when the vehicle is operating.
The remainder of this paper is divided into the following sections: Section 2 describes the problem that we will be undertaking and the theoretical methods, while the experiments are described in Section 3. Section 4 shows the experimental results and discussions. Concluding remarks of this contribution are given in Section 5.
2. Materials and Methods
To tackle the probable proprioceptive sensor faults, an active fault tolerant strategy based on the separation principle is designed. The FTC scheme consists of: a Static Output Feedback controller (SOF) and a fault estimation observer. Hence, the SOF ensures the tracking of the reference speed, and it is designed in the nominal case (faultless scenarios). The aim of the separation principle is to keep the controller running always in the nominal case, even if faults are occurring. This is made possible by subtracting the estimated fault from the measurement signal, in such a way that the controller uses a healthy speed signal (see Figure 1). The proper functioning of the proposed scheme is ensured by the robustness of the controller and the perfect fault estimation provided by the observer [23].
Figure 1.
Adaptive Cruise Control (ACC) fault tolerant paradigm.
In this study, we are interested in designing a controller and two observers for the vehicle longitudinal dynamics in the Adaptive Cruise Control (ACC) driving scenario. Furthermore, the single track representation is advantageous in ensuring simplicity. The vehicle dynamics relies on the following assumptions [42,43,44]:
The road is assumed to be a plane (no slope, no inclination);
The lateral dynamics is not considered;
Yaw, pitch and roll dynamics are neglected.
Considering the above assumptions, the longitudinal vehicle dynamics can be expressed by the following equations (see Figure 2):
(1) |
where the vehicle parameters are expressed in Table 1. Adopting a single track modelling by defining:
Figure 2.
Vehicle longitudinal dynamics.
Table 1.
Vehicle parameters.
Notation | Definition | Unit |
---|---|---|
m | Vehicle mass | kg |
Vehicle speed | ms | |
Tire/road force of the i-th wheel | N | |
Aerodynamic force | N | |
Global inertia of the front axle | kg·m | |
Inertia of the i-th front wheel | kg·m | |
Acceleration of the i-th wheel | rad·s | |
The engine torque | Nm | |
r | The tire radius | m |
The rolling force of the i-th wheel | N | |
The braking torque of the i-th wheel | Nm | |
The rolling torque of the front/rear axle | Nm | |
Global inertia of the rear axle | kg·m | |
Inertia of the i-th rear wheel | kg·m |
We obtain the following equation:
(2) |
Substituting and in Equation (1) leads to:
(3) |
The longitudinal slip ratio hypothesis can be written as:
leading to , then . Substituting in (3), we obtain:
(4) |
Denoting , , we get:
(5) |
where , , and a and b are aerodynamic coefficients. is the torque given by the engine and the brake system; its dynamics is subject to loss and to a decay rate. To overcome this problem, we assume a first order dynamics, with a time constant [26]:
(6) |
Finally, the vehicle longitudinal dynamics is given in the quadratic form by combining (5) and (6) as follows:
(7) |
The model (7) can be written in the following Lipschitz nonlinear form:
(8) |
with: , , , , , .
Taking into account the exogenous disturbances:
(9) |
where is the disturbance signal and W the disturbance distribution matrix of the appropriate dimension.
In order to design the controller and the observers, we adopt the following hypothesis and algebraic lemmas:
Hypothesis 1.
The nonlinear terms are considered to be a smooth Lipschitz function satisfying the following relation:
(10) where and is a positive Lipschitz constant.
Hypothesis 2.
The sensor faults and the exogenous disturbances are assumed to be bounded:
(11) where and are constant scalars.
Lemma 1 (Schur complement).
Given the matrices , and , the following implication holds [45]:
(12)
Lemma 2.
Consider matrices A, B and a scalar δ; the following inequality holds [32]:
(13)
Lemma 3 (Elimination lemma).
Assume matrices , and . Thus, the following statements are equivalent [46]:
( or ) and ( or );
.
2.1. Static Output Feedback Controller Design
The controller must ensure a robust tracking of the reference signal against mismodelling dynamics and model noises. Indeed, for the sake of convenience with the separation principle, the SOF controller is designed in this subsection. In fact, this control technique is more appropriate with the longitudinal vehicle dynamics model. The output feedback theory is an active research area, and several works are presented in the literature [47]. These works aim to overcome the multiple challenges of the output feedback methodology.
In order to design the SOF controller, we rewrite the system (3) in the following form:
(14) |
where z is the performance output vector, with and being matrices of appropriate dimensions.
The stabilizable static output feedback controller is given by:
(15) |
The real problem of the static output feedback control design lies in the difficulty of designing the gain when the matrix C is singular (as in our case). To deal with this issue, the system parametrization of Lemma 4 is adopted [48].
Lemma 4.
The parametrization of System (14) minimizing an optimal criterion for a SOF controller is given by:
(16)
Proof.
Let us consider the following relation:
(17) Deriving the relation (17) yields:
(18) Developing (18), by using the model (14), gives:
(19) Based on Hypothesis 1 and Lemma 2, the relation (19) can be written in the quadratic form of (20).
(20) Using the Schur complement, we obtain:
(21) The expression (16) can be obtained easily after that concluded from (21) by factorization, and that ends the proof. □
Using the compact form of parametrization lemma, the optimal control gain is then obtained by the following theorem:
Theorem 1.
The system (14) is stabilizable by the static output feedback controller , and minimizing a criterion , if there exist, a positive semidefinite matrix , matrices , , , and scalars and , such that the following constraints are satisfied [48]:
(22) The static output feedback controller can finally be deduced by: .
Proof.
Taking advantage of the parametrization lemma (Lemma 4), the closed loop formulation of the static output feedback control problem can be written as follows:
(23) By application of Lemma 3, we obtain:
(24) Factorizing the matrix in (24) (Note that for this purpose, the matrix must be invertible. This exigence is verified, since the block of (24) reads .), we get:
(25) LMI summarised in Relation (22) can be easily deduced from Relation (25), by taking the following notations: , , . □
Remark 1.
It is clear that Theorem 1 is a non-convex optimization problem, and its solution seems to be non trivial. To overcome this issue, an initialization of the variables and can be obtained reasonably by solving the following optimal problem [48]:
(26) Finally, we obtain: and .
Proof.
For brevity, the proof is omitted here, but the reader can refer to [48] and the references therein. □
The cross-decomposition Algorithm 1 to design the optimal static output feedback controller is then given as follows:
Algorithm 1 The cross-decomposition algorithm. |
|
where is a desired performance determined by the designer.
2.2. Proportional and Integral Observer Design
The proportional and integral observer has been broadly developed and applied in recent years for the topic of fault diagnosis and fault tolerant control [49]. It has a strong ability in obtaining fault information, such as the size and the shape. Indeed, the additive sensor fault can be estimated for the faulty system of the following form:
(27) |
where is the additive sensor fault and F is the fault matrix distribution.
The proportional and integral fault estimation observer of the system (27) is described by [50]:
(28) |
To calculate the observer gains and , we adopt the following considerations:
The estimated state error e is defined as ;
The estimated fault error is defined as ;
The free fault case (), residual signal r, is defined as (where is a weighting matrix to be designed).
By taking into account the latter considerations, the dynamics of estimated state error and estimated fault error are written:
(29) |
where . Based on (28) and (29), an augmented system of the following form can be written:
(30) |
where:
(31) |
(32) |
(33) |
In order to make the residual signal r insensitive to external disturbances w, we propose the following property:
Property 1.
The criterion ensuring the disturbances rejection is written as follows [51]:
(34)
Theorem 2.
The nonlinear Lipschitz Proportional and Integral Observer (28) is asymptotically stable, if there exist positive definite matrices and , matrices , and and positive scalars , λ and γ, such that the following LMI is verified:
(35)
(36) and:
(37)
(38)
(39) Finally, the observer gains are calculated:
(40)
Proof.
Consider the following multiple Lyapunov function, where matrices and are symmetric definite positive matrices:
(41) Deriving (41) and using Property 1 and , based on Lyapunov theory, we obtain:
(42) Using Hypothesis 1 and Lemma 2, we get:
(43) and:
(44)
(45) Remark 2.
The matrix is the consequence of applying Lemma 2 and Hypothesis 2; it characterizes in which system states the nonlinearities are applied. On the other hand, the residual signal is rewritten to fit in the dimension with the expression (42), in such a way that: and . Additionally, the matrix is written as follows:
Using the Schur Complement (Lemma 1) three times and denoting , yields the LMI constraints of (35)–(39), and that ends the proof. □
2.3. Descriptor Observer Design
The descriptor observer is based on the descriptor systems approach. The idea is to assume the additive sensor faults as a system state, in such a way that the resulting augmented system represents a descriptor system. Thus, the descriptor observer tends to estimate physical system states and the additive faults thanks to the appropriate gain matrices [52].
In order to design the descriptor observer, the system (27) is rewritten in the following augmented form:
(46) |
with: , , , , , , , , , and .
The nonlinear Lipschitz descriptor observer leading to the estimate of the system states and the sensor faults is written as follows:
(47) |
z is an internal variable, , , , where and R are chosen in such a way that is nonsingular.
Let us define the error and the free faults’ residual (where is a weighting matrix to be designed). Indeed, the following error dynamics:
(48) |
with , , , .
From (27) and (48), we have the following augmented system:
(49) |
The stability of the system (49) is ensured, using Property 1, and the -gain form, if the LMI condition summarized in the following Theorem holds:
Theorem 3.
The nonlinear augmented Lipschitz descriptor system is asymptotically stable, if there exist positive definite matrices , , and , matrices , and and positive scalars , and , such that the following LMI condition is satisfied:
(50) and:
(51)
(52)
(53)
The estimated fault is written as follows:
(54) |
where:
(55) |
Proof.
Consider the following Lyapunov function, where and are symmetric definite positive matrices, of appropriate dimensions:
(56) Deriving (56) and using Property 1, as well as the -gain form, we obtain:
(57) Using Hypothesis 1 and Lemma 2, Equation (57) can be written as follows:
(58) with:
Using the Schur complement twice:
(59) where .
Substituting and by their values and taking , and implies:
(60) Using the Schur complement yields the LMI constraint of (50). □
3. Experimental Bench
This section is devoted to the evaluation of the proposed fault tolerant scheme through a real driving scenario data. For that purpose, the VEDECOM demonstrator is used (you can refer to Figure 3). This demonstrator, is a bi-mode electric and connected vehicle. Further, it is based on a Renault Zoe electric vehicle, and equipped by VEDECOM teams with several autonomous requirements equipments as Lidar (Velodyne VLP-16, VELODYNE LIDAR Inc., San Jose, CA, USA), Radar (Continental ARS-3XX series, CONTINENTAL AG, Hanover, Germany), GPS-RTK sensors and a DSpace MicroAutoBox (MABx) real time embedded computer. The wheel speeds, the motor speed and the steering wheel angle are measured by the sensors embedded in the vehicle architecture for ABS (Anti-lock Brake System) and ESP (Electronic Stability Program).
Figure 3.
(a) The VEDECOMdemonstrator. (b) Hardware platform of the vehicle demonstrator.
The experiments were conducted on the Satory test track (see Figure 4). The approach consists of self-driving mode, obeying a given reference speed profile, and in addition, recording the measured speed, the acceleration and braking torques of the vehicle, thanks to the CAN bus. This experimental data help us to validate the proposed fault tolerant scheme. Proceeding in this way allows us to properly evaluate our FTC proposition.
Figure 4.
Aerial view of the Satory test track.
Indeed, this methodology provides us the assurance that the lateral dynamics (which has not been taken into account in the model dynamics) do not influence the longitudinal speed and fault estimations.
The fault tolerant strategies are tested in the real-time software RTMaps (See: https://intempora.com/products/rtmaps.html for more details), which is a modular toolkit for multi-modal applications and provides simplicity to test and validate ADAS and autonomous driving applications. Thus, RTMaps modules of the observers are build from the MATLAB/Simulink scheme. The build task is made with respect to the sampling time of the sensor measurements; to this end, the C++ compilation builder and the Simulink blocks are set to the same sampling time of the measurement logged data, in our case 10 ms.
Nevertheless, before the building of the modules, the LMI conditions of Theorems 2 and 3 are solved in order to obtain the SOF controller DO and PIO gains. These gains, as well as the Lyapunov matrices are given in Appendix A.
4. Experimental Results and Discussions
4.1. Descriptor Observer Results
We want, through this manoeuvre, to give an outline of the autonomous vehicle driving in the case of stop and go. Initially, the vehicle has a velocity of 1 m/s. Then, the vehicle accelerates to reach the speed of 5 m/s. At s, the vehicle carries out a deceleration until stopping, and thereafter, at s, the vehicle accelerates to reach a velocity of 10 m/s at s. On can note that both estimated and measured speed are identical, which proves the convergence of the observer in a finite time with a negligible steady state error.
As we can notice through Figure 5, Figure 6 and Figure 7, the measured signal and the estimated one are simultaneously represented. The following remarks can be deduced:
The estimated states (speed, equivalent torque and fault) converge quickly toward the real states;
The performances obtained are good in dynamic, as well as in static output;
The observation errors are steered to zero in finite time;
The estimated vehicle speed seems to be insensitive to the fault variation and, so, in different phases of the considered driving scenario (accelerating phase, decelerating phase and constant speed phase).
Figure 5.
(a) Speed profile of the vehicle with the descriptor observer. (b) Zoom in at ss]. (c) Zoom in at ss].
Figure 6.
(a) Torque evolution of the vehicle with the descriptor observer closed loop FTC. (b) Zoom in at ss]. (c) Zoom in at ss].
Figure 7.
The additive fault with the descriptor observer closed loop FTC.
Moreover, the estimated torque tracks the vehicle control torque with a high attenuation level of the disturbances as depicted in Figure 6a–c.
4.2. Proportional and Integral Observer Results
The proportional and integral observer is tested in identical conditions as previously in terms of driving manoeuvre and fault type.
Thus, as depicted in Figure 8a–c, the estimated vehicle speed tracks the measured vehicle speed with attenuation of the disturbances.
Figure 8.
(a) Speed profile of the vehicle with the proportional and integral observer closed loop FTC. (b) Zoom in at ss]. (c) Zoom in at ss].
Additionally, the estimated torque with the proportional and integral observer converges to the control torque (see Figure 9a–c). Furthermore, the estimated fault with the proportional and integral observer struggles to converge in the event of abrupt additive fault variations. In fact, the variations at 60 s, 100 s and 160 s generate a small fault estimation error that needs time to be cancelled (see Figure 10).
Figure 9.
(a) Torque evolution of the vehicle with the proportional and integral observer closed loop FTC. (b) Zoom in at ss]. (c) Zoom in at ss].
Figure 10.
The additive fault with the proportional and integral observer.
4.3. Comparison of the Two Observers
Globally, the two observers have shown a high ability to detect and estimate the additive sensors faults, since the separation principle is applied to both observers and the same control approach is designed based on Lyapunov theory.
In fact, the estimated equivalent torque comparison between descriptor observer and proportional integral observer is depicted in Figure 11a. From this figure, we can note that the descriptor observer has a significant disturbance attenuation level compared to the proportional and integral observer. Further, we can notice that the abrupt additive fault variations affect the estimated equivalent torque, as shown in Figure 11b,c. Additionally, estimation error is very small with the proportional and integral observer and negligible with the descriptor observer.
Figure 11.
(a) Comparison of the vehicle estimated torque with the two observers. (b) Zoom in at ss]. (c) Zoom in at ss]
In fact, Figure 12 shows the comparison between the two observers fault estimations, and the Figure 13 shows the comparison of the fault estimation error. One can notice that the descriptor observer estimated fault state tracks the emulated one where the performances are good in dynamic, as well as in static output. On the other hand, the proportional and integral observer seems to present a small estimation error. This error is the consequence of the abrupt variations in the additive fault, and it is due to the proportional and integral observer scheme.
Figure 12.
Comparison of the estimated additive fault with the two observers.
Figure 13.
Comparison of fault estimation error between the two observers.
The difference between the descriptor observer and the proportional and integral observer in performing fault estimation is due to the nature of the last one. In fact, in a real-time environment, the numerical integration may not be achievable and lead to a highly time-consuming process, thus generating significant estimation errors. However, the vehicle speed estimation by the two observers presents no significant difference (see Figure 14a–c). Indeed, the speed estimation error comparison given in Figure 15 shows a negligible estimation error (around ms).
Figure 14.
(a) Comparison of the vehicle estimated speed with the two observers. (b) Zoom in at ss]. (c) Zoom in at ss].
Figure 15.
(a) Comparison of speed estimation error between the two observers. (b) Zoom in at ss]. (c) Zoom in at ss]
4.4. FTC Results
In order to test the proposed FTC scheme, the closed-loop approach is designed by numerical simulations using MATLAB/Simulink. Furthermore, the proposed adaptive cruise control FTC (depicted in Figure 1) is simulated with the same scenarios of the speed profile and fault.
Indeed, Figure 16a shows the speed profile of the vehicle in blue, which tracks the reference speed in red with the descriptor observer closed-loop FTC. In fact, the vehicle speed is well estimated as shown in the figure (the green line). In addition, the estimation of the additive fault is given in Figure 16b, where we can see a good estimation. On the other hand, the speed profile of the closed-loop FTC with the proportional and integral observer is shown in Figure 16c. The designed static output feedback control shows the good tracking performance of the reference speed. Indeed, the estimated speed converges to the estimated one. Figure 16d shows the estimation of the additive fault given by the proportional and integral observer.
Figure 16.
Speed profile( (a) with descriptor observer, (c) with proportional and integral observer) and fault estimations ( (b) with descriptor observer, (d) with proportional and integral observer) of the simulated closed-loop FTC scheme.
Simulations have been carried out to illustrate the ability of this approach, to give the good performance of the states’ estimation and FTC control scheme design in scenarios of autonomous driving. From this prospect, the tests on the vehicle prototype will be implemented.
5. Conclusions
The purpose of the proposed study is the sensor fault tolerant design of an autonomous vehicle. The designed theory is based on the separation principle. This approach consists of the design, in a separate manner, of a controller (a static output feedback) and a sensor fault estimation observer (a descriptor and a proportional and integral observer). Indeed, this methodology is easy to implement where the controller and observers are considered in a convex LMI optimization problem, avoiding in recourse to the use of the complex Bilinear Matrix Inequalities (BMI) in the case of an observer-based controller concept design. The experimental results of the proposed scheme show a high ability in estimating the additive fault and in maintaining a safe operating behaviour. Additionally, the designed observers have accurately estimated unmeasurable vehicle states (the vehicle equivalent torque), and this ability may be interesting when we do not need to measure a vehicle side slip angle for example or avoiding the design of cascading observers; this is made possible by the Lipschitz model used in this designed control approach. Thus, all vehicle dynamics that can be in Lipschitzian form are eligible for the method studied in this paper. The obtained successful experimental results will represent the basis of our future works in the design of fault detection for vehicle exteroceptive sensors (such as radars, LiDARs and cameras) and where the accurate proprioceptive informations must be highly accurate and fault tolerant. Afterwards, the robustness against parameter uncertainties will be taken into account; thus, the vehicle will be able to operate in all conditions.
Acknowledgments
The authors would like to thank the VEDECOM institute, which supports this research. Benoit Lusetti and Lynda Halit for the invaluable help in realizing the data collection.
Abbreviations
The following abbreviations are used in this manuscript:
SAE | Society of Automotive Engineers |
ADAS | Advanced Driver-Assistance Systems |
FDD | Fault Detection and Diagnosis |
FTC | Fault Tolerant Control |
LMI | Linear Matrix Inequality |
BMI | Bilinear Matrix Inequality |
MABx | MicroAutoBox |
LTI | Linear Time Invariant |
DO | Descriptor Observer |
PIO | Proportional and Integral Observer |
SOF | Static Output Feedback |
Appendix A. The Different Gain Matrices
To solve the LMI conditions of Algorithm 1 and Theorems 2 and 3, we use the penlab solver running under the yalmpi environment of MATLAB. The LMI solutions are given as follows:
-
The static output feedback controller:
The optimization is run for an objective of and took eight steps.
The state feedback gain is obtained with a criterion of , and matrices: , , and .
Thus, the initializing state feedback gain is given:
.
At the end of the algorithm, the criterion of the the two parts is given: , .
The the static output feedback control gain is given:
.
-
The proportional and integral observer:
For an criterion of with a gain norm of , the proportional and integral gains are given by:
, ,
with the following positive semi-definite matrices:
, ,
and:
, . , .
-
The descriptor observer:
For an criterion of with a gain norm of , the descriptor gain is given by:
, ,
so that:
,
with the following positive semi definite matrices:
, , ,
with:
, , , , .
Author Contributions
M.R.B. designed the approach, carried out the experimentation, generated the results, M.R.B. and A.C. analyzed the results and were responsible for writing the paper, A.C., M.B. and S.G. supervised the research, reviewed the approach and the results to further improve the quality of the paper
Conflicts of Interest
The authors declare no conflict of interest.
References
- 1.SAE On-Road Automated Vehicle Standards Committee . Taxonomy and Definitions for Terms Related to On-Road Motor Vehicle Automated Driving Systems. SAE International; Brussels, Belgium: 2014. [Google Scholar]
- 2.Kichun J.O., Junsoo K., Dongchul K., Chulhoon J., Myoungho S. Development of autonomous car—Part I: Distributed system architecture and development process. IEEE Trans. Ind. Electron. 2014;61:7131–7140. [Google Scholar]
- 3.Boukhnifer M., Raisemche A., Diallo D., Larouci C. Fault tolerant control to mechanical sensor failures for induction motor drive: A comparative study of voting algorithms; Proceedings of the 2013 39th Annual Conference of the IEEE Industrial Electronics Society; Vienna, Austria. 10–13 November 2013. [Google Scholar]
- 4.James D., Kent A., Jr., Holloway J. Redundancy and the detection of first failures. IRE Trans. Reliab. Qual. Control. 1962;RQC-11:8–27. doi: 10.1109/IRE-PGRQC.1962.5009615. [DOI] [Google Scholar]
- 5.Boukhari M.R., Chaibet A., Boukhnifer M., Glaser S. Sensor fault tolerant control strategy for autonomous vehicle driving; Proceedings of 2016 13th International Multi-Conference on the Systems, Signals & Devices (SSD); Leipzig, Germany. 21–24 March 2016; pp. 241–248. [Google Scholar]
- 6.Hu C., Jing H., Wang R., Yan F., Chadli M. Robust H∞ output-feedback control for path following of autonomous ground vehicles. Mech. Syst. Signal Processing. 2016;70:414–427. doi: 10.1016/j.ymssp.2015.09.017. [DOI] [Google Scholar]
- 7.Wang R., Jing H., Wang J., Chadli M., Chen N. Robust output-feedback based vehicle lateral motion control considering network-induced delay and tire force saturation. Neurocomputing. 2016;214:409–419. doi: 10.1016/j.neucom.2016.06.041. [DOI] [Google Scholar]
- 8.Wang R., Hu C., Yan F., Chadli M. Composite nonlinear feedback control for path following of four-wheel independently actuated autonomous ground vehicles. IEEE Trans. Intell. Transp. Syst. Mag. 2016;17:2063–2074. doi: 10.1109/TITS.2015.2498172. [DOI] [Google Scholar]
- 9.Willsky A.S. A survey of design methods for failure detection in dynamic systems. Automatica. 1976;12:601–611. doi: 10.1016/0005-1098(76)90041-8. [DOI] [Google Scholar]
- 10.Isermann R. Process fault detection based on modeling and estimation methods-a survey. Automatica. 1984;20:387–404. doi: 10.1016/0005-1098(84)90098-0. [DOI] [Google Scholar]
- 11.Frank P.M. Fault diagnosis in dynamic systems using analytical and knowledge-based redundancy: A survey and some new results. Automatica. 1990;26:459–474. doi: 10.1016/0005-1098(90)90018-D. [DOI] [Google Scholar]
- 12.Stengel R.F. Intelligent failure tolerant control; Proceedings of the 5th IEEE International Symposium on Intelligent Control; Philadelphia, PA, USA. 5–7 September 1990; pp. 548–557. [Google Scholar]
- 13.Sottile J., Jr., Holloway L.E. An overview of fault monitoring and diagnosis in mining equipment. IEEE Trans. Ind. Appl. 1994;30:1326–1332. doi: 10.1109/28.315247. [DOI] [Google Scholar]
- 14.Frank P.M., Ding X. Survey of robust residual generation and evaluation methods in observer-based fault detection systems. J. Process Control. 1997;7:403–424. doi: 10.1016/S0959-1524(97)00016-4. [DOI] [Google Scholar]
- 15.Isermann R. Model-based fault-detection and diagnosis-status and applications. Annu. Rev. Control. 2005;29:71–85. doi: 10.1016/j.arcontrol.2004.12.002. [DOI] [Google Scholar]
- 16.Benosman M. A survey of some recent results on nonlinear fault-tolerant control. Math. Probl. Eng. 2009;2010 doi: 10.1155/2010/586169. [DOI] [Google Scholar]
- 17.Verhaegen M., Kanev S., Hallouzi R., Jones C., Maciejowski J., Smail H. Fault Tolerant Flight Control. Springer; Heidelberg/Berlin, Germany: 2010. Fault-tolerant fight control—A survey; pp. 47–89. [Google Scholar]
- 18.Xu Y., Jiang B., Gao Z., Zhang K. Fault-tolerant control for near space vehicle: a survey and some new results. J. Syst. Eng. Electron. 2011;22:88–94. doi: 10.3969/j.issn.1004-4132.2011.01.011. [DOI] [Google Scholar]
- 19.Silveira A., Araujo R.E., de Castro R. Technological Innovation for Sustainability. Springer; Heidelberg/Berlin, Germany: 2011. Survey on fault-tolerant diagnosis and control systems applied to multi-motor electric vehicles; pp. 359–366. [Google Scholar]
- 20.Gao Z., Cecati C., Ding S.X. A survey of fault diagnosis and fault-tolerant techniques part I: Fault diagnosis with model-based and signal-based approaches. IEEE Trans. Ind. Electron. 2015;62:3757–3767. doi: 10.1109/TIE.2015.2417501. [DOI] [Google Scholar]
- 21.Yu X., Jiang J. A survey of fault-tolerant controllers based on safety-related issues. Annu. Rev. Control. 2015;39:46–57. doi: 10.1016/j.arcontrol.2015.03.004. [DOI] [Google Scholar]
- 22.Samy I., Gu D.-W. Lecture Notes in Control and Information Sciences. Springer; Berlin, Germany: 2012. Fault detection and isolation (FDI) pp. 5–17. [Google Scholar]
- 23.Blanke b., Kinnaert M., Lunze J., Staroswiecki M. Diagnosis and Fault-Tolerant Control. Springer; Berlin, Germany: 2016. Distributed fault diagnosis and fault-tolerant control; pp. 3–27. [Google Scholar]
- 24.Voege T., Godziejewski B., Merat N., Rødseth Ø.J., van Schijndel-de Nooij M. Connected and Automated Transport-Expert Group Report. European Commission; Brussels, Belgium: 2017. [Google Scholar]
- 25.Uhlmann J.K. Covariance consistency methods for fault-tolerant distributed data fusion. Inf. Fusion. 2003;4:201–215. doi: 10.1016/S1566-2535(03)00036-8. [DOI] [Google Scholar]
- 26.Toulotte P.-F., Delprat S., Guerra T.-M., Boonaert J. Vehicle spacing control using robust fuzzy control with pole placement in lmi region. Eng. Appl. Artif. Intell. 2008;21:756–768. doi: 10.1016/j.engappai.2007.07.009. [DOI] [Google Scholar]
- 27.Patton R.J., Frank P.M., Clarke R.N. Fault Diagnosis in Dynamic Systems: Theory and Application. Prentice-Hall, Inc.; Upper Saddle River, NJ, USA: 1989. [Google Scholar]
- 28.Ding X., Guo L., Jeinsch T. A characterization of parity space and its application to robust fault detection. IEEE Trans. Autom. Control. 1999;44:337–343. doi: 10.1109/9.746262. [DOI] [Google Scholar]
- 29.Zarei J., Shokri E. Robust sensor fault detection based on nonlinear unknown input observer. Measurement. 2014;48:355–367. doi: 10.1016/j.measurement.2013.11.015. [DOI] [Google Scholar]
- 30.Gao Z., Liu X., Chen E., Michael Z.Q. Unknown input observer-based robust fault estimation for systems corrupted by partially decoupled disturbances. IEEE Trans. Ind. Electron. 2016;63:2537–2547. doi: 10.1109/TIE.2015.2497201. [DOI] [Google Scholar]
- 31.Zhang K., Liu G., Jiang B. Robust Unknown Input Observer-Based Fault Estimation of Leader–Follower Linear Multi-agent Systems. Circuits Syst. Signal Process. 2017;36:525–542. doi: 10.1007/s00034-016-0313-8. [DOI] [Google Scholar]
- 32.Han J., Zhang H., Wang Y., Liu Y. Disturbance observer based fault estimation and dynamic output feedback fault tolerant control for fuzzy systems with local nonlinear models. ISA Trans. 2015;59:114–124. doi: 10.1016/j.isatra.2015.08.015. [DOI] [PubMed] [Google Scholar]
- 33.Zhang H., Han J., Luo C. Fault-Tolerant Control of a Nonlinear System Based on Generalized Fuzzy Hyperbolic Model and Adaptive Disturbance Observer. IEEE Trans. Syst. Man Cybern. Syst. 2017;47:2289–2300. doi: 10.1109/TSMC.2017.2652499. [DOI] [Google Scholar]
- 34.Zhang J., Swain A.K., Nguang E., Kiong S. Robust H∞ adaptive descriptor observer design for fault estimation of uncertain nonlinear systems. J. Frankl. Inst. 2014;351:5162–5181. [Google Scholar]
- 35.Yin S., Gao H., Qiu J., Kaynak O. Descriptor reduced-order sliding mode observers design for switched systems with sensor and actuator faults. Automatica. 2017;76:282–292. doi: 10.1016/j.automatica.2016.10.025. [DOI] [Google Scholar]
- 36.Dongsheng D.U. Fault detection for discrete-time linear systems based on descriptor observer approach. Appl. Math. Comput. 2017;293:575–585. [Google Scholar]
- 37.Foo G.H.B., Zhang X., Vilathgamuwa D.M. A sensor fault detection and isolation method in interior permanent-magnet synchronous motor drives based on an extended Kalman filter. IEEE Trans. Ind. Electron. 2013;60:3485–3495. doi: 10.1109/TIE.2013.2244537. [DOI] [Google Scholar]
- 38.Mrugalski M. An unscented Kalman filter in designing dynamic GMDH neural networks for robust fault detection. Int. J. Appl. Math. Comput. Sci. 2013;23:157–169. doi: 10.2478/amcs-2013-0013. [DOI] [Google Scholar]
- 39.Pourbabaee B., Meskin N., Khorasani K. Sensor fault detection, isolation, and identification using multiple-model-based hybrid Kalman filter for gas turbine engines. IEEE Trans. Control Syst. Technol. 2016;24:1184–1200. doi: 10.1109/TCST.2015.2480003. [DOI] [Google Scholar]
- 40.Yu M., Wang D. Model-based health monitoring for a vehicle steering system with multiple faults of unknown types. IEEE Trans. Ind. Electron. 2014;61:3574–3586. [Google Scholar]
- 41.Granig W., Hammerschmidt D., Zangl H. Calculation of failure detection probability on safety mechanisms of correlated sensor signals according to iso 26262. SAE Int. J. Passenger Cars Electron. Electr. Syst. 2017;10:144–155. doi: 10.4271/2017-01-0015. [DOI] [Google Scholar]
- 42.Boukhari M.R., Chaibet A., Boukhnifer M., Glaser S. Fault tolerant control for lipschitz nonlinear systems: Vehicle inter-distance control application. IFAC-PapersOnLine. 2017;50:14248–14253. doi: 10.1016/j.ifacol.2017.08.1817. [DOI] [Google Scholar]
- 43.Hedrick H. Brake System Modeling, Control and Integrated Brake/Throttle Switching Phase I. University of California; Berkeley, CA, USA: 1997. California PATH Research Report UCB-ITS-PRR-97-21. [Google Scholar]
- 44.Pham H., Tomizuka M., Hedrick J.K. Integrated Maneuvering Control for Automated Highway Systems Based on a Magnetic Reference/Sensing System. University of California; Berkeley, CA, USA: 1997. California PATH Research Report UCB-ITS-PRR-97-28. [Google Scholar]
- 45.Saad Y., Sosonkina M. Distributed Schur complement techniques for general sparse linear systems. SIAM J. Sci. Comput. 1999;21:1337–1356. doi: 10.1137/S1064827597328996. [DOI] [Google Scholar]
- 46.de Oliveira M.C. A robust version of the elimination lemma. IFAC Proceedings Volumes. 2005;38:310–314. doi: 10.3182/20050703-6-CZ-1902.00996. [DOI] [Google Scholar]
- 47.Syrmos V.L., Abdallah C.T., Dorato P.E.A., Grigoriadis K. Static output feedback—A survey. Automatica. 1997;33:125–137. doi: 10.1016/S0005-1098(96)00141-0. [DOI] [Google Scholar]
- 48.Yoshio E., Dimitri P., Denis A. Chapter Static Output-Feedback Synthesis, Book S-Variable Approach to LMI-Based Robust Control. Springer; London, UK: 2015. pp. 165–198. [Google Scholar]
- 49.Bakhshande F., SöFfker D. Proportional-integral-observer: A brief survey with special attention to the actual methods using acc benchmark. IFAC PapersOnLine. 2015;48:532–537. doi: 10.1016/j.ifacol.2015.05.049. [DOI] [Google Scholar]
- 50.Valibeygi A., Toudeshki A., Vijayaraghavan K. Observer-based sensor fault estimation in nonlinear systems. Proc. Inst. Mech. Eng. Part I J. Syst. Control Eng. 2016;230:759–777. doi: 10.1177/0959651816654070. [DOI] [Google Scholar]
- 51.Doyle J.C., Glover K., Khargonekar P.P., Francis B.A. State-space solutions to standard H2 and H∞ control problems. IEEE Trans. Autom. Control. 1989;34:831–847. doi: 10.1109/9.29425. [DOI] [Google Scholar]
- 52.Guerra T.M., Estrada-Manzo V., Lendek Z. Observer design for takagi-sugeno descriptor models: An LMI approach. Automatica. 2015;52:154–159. doi: 10.1016/j.automatica.2014.11.008. [DOI] [Google Scholar]