← Back
Home › Systems › Embedded and IoT

fly-by-wire-flight-control

certified fly-by-wire flight control

Airbus FCPC, Boeing 787 PFC, F-35 VMS

SystemTechniques · 13Primitives · 44 fly-by-wire-flight-cont… Envelope protectioncontrol · medium: Limit commands so angle of attack, load factor, speed and bank stay within bounds, via limiter functions or command-blending logicGain scheduled control lawscontrol · medium: Interpolate controller gains over flight condition (airspeed, altitude) from precomputed design points to keep performance across the envelopeFault detection isolation recoveryembedded · medium: Monitor/response tables, fault isolation and safe-mode recovery hierarchies for autonomous systemsModel checking and formal proofembedded · medium: Exhaustively explore a model's reachable states (or prove its invariants with a solver or proof assistant) to find rule violations with a shortest counterexample trace.›Hot-standby redundancyembedded · medium: A second, always-current controller shadows the primary and takes over within a few cycles of silence; epochs stop the old primary from fighting back.›Safety-critical coding standardsembedded · medium: Which rule sets (MISRA C, CERT C, JPL Power of Ten, Rust lint subsets) apply when software must not fail, what they forbid, and how to enforce them in CI.›Safety monitor architectureembedded · medium: Independent doer/checker safety monitor that forces a safe state when the main channel misbehavesRedundancy votingembedded · low: N-modular redundancy and MooN voting (2oo3, TMR) with discrepancy detectionWatchdog timerembedded · low: A hardware down-counter that resets the chip unless software proves, in time and in a plausible pattern, that it is still healthy.›Code coverage instrumentationcompilers · low: Insert counters into compiled code to record which blocks, edges or lines ran; a spanning tree of the control-flow graph cuts the counters needed.›End to end protection e2eembedded · low: Per-message counter, ID and CRC over a black channel to detect loss, repetition, corruption, delayMemory protection unitembedded · low: A handful of base/size regions with permissions, checked on every access by the CPU, give microcontroller tasks isolation and stack-overflow traps without an MMU.›Edac memory scrubbingembedded · low: ECC/EDAC memory with periodic scrubbing to correct radiation-induced bit flipsFixed-rate control loopembedded · low: Run a controller at an exact period using absolute deadlines and a fixed dt, so jitter never accumulates and the math stays valid.›Memory self test marchembedded · low: March RAM tests, ROM CRCs and CPU self-tests required by safety standardsRate monotonic analysisembedded · low: Schedulability tests and response-time analysis for periodic real-time tasksReal time fieldbusembedded · low: Deterministic cyclic fieldbuses (EtherCAT, PROFINET IRT): on-the-fly frames, distributed clocksTime triggered schedulingembedded · low: Static cyclic schedules where every task and message has a precomputed time slotComplementary filterrobotics · low: Blend high-passed gyro integration with low-passed accelerometer/magnetometer attitude (Mahony/Madgwick)Control allocation mixingrobotics · low: Map desired thrust and torques to actuator commands via mixer matrices with saturation handlingPID controllerrobotics · low: Drive a measured value to a setpoint with three terms on the error: proportional, integral, derivative. The default feedback loop for motors, heaters, drones and gimbals.›IIR and FIR filterssignal-processing · low: Two ways to shape a sampled signal's spectrum: FIR (finite taps, always stable, exact linear phase) or IIR (feedback, a few coefficients, cheap but phase-distorting).›Hierarchical state machinesystems · low: Nest states so a substate inherits its parent's reactions and only overrides what differs, with ordered entry and exit actions along the path.›+ 6 more techniques+ 28 more primitives

Similar systems

Share the most building blocks with this one.