1. Introduction
Air data systems (ADSs) are adopted on air vehicles to measure a set of data from the external environment. Generally speaking, a simplex ADS is made up of external (i.e., installed externally on the aircraft (A/C) fuselage) probes and vanes able to measure a full set of air data:
local static pressure, ;
local total pressure, ;
local air temperature (static, outside air temperature (OAT), or total, total air temperature (TAT));
local angle of attack (AoA), ;
local angle of sideslip (AoS), .
The ADS probes/vanes are connected (or integrated) with a corresponding measuring module (air data modules (ADMs)) encompassing suitable transducers able to convert the measure into analog (or digital) signals. If those ADM are all embedded in a single box, it usually refers to a central processor unit (air data computer, (ADC)). The ADC is able to provide pilots, or flight control computers, FCCs, with the more relevant air data information necessary for piloting, navigation and control purposes. In recent years, the air data algorithms are often implemented into the FCC and the ADC is removed. In both cases, the air data functionalities shall be able to calculate the following parameters:
Pressure altitude
Pressure altitude, baro-corrected (Kollsman)
Vertical speed
Calibrated airspeed (CAS)
Equivalent airspeed (EAS)
True airspeed (TAS) (only if OAT or TAT is available)
Mach number
Air temperature, , (only if OAT or TAT is available)
AoA
AoS
Generally speaking, for each element of the previous list except for AoA and AoS, the standard AS8002A [
1] sets operative performance and environmental requirements. For aerodynamic angles, AoA and AoS, there are not clear and well-defined performance requirements. Even though the AoA measurements shall satisfy the standard AS403A [
2], this standard sets prescriptions only for stall protection purposes and not for the entire range of flyable angle of attack. There is no standard applicable for AoS. In fact, when AoA and AoS are required to the ADS, the functional requirements are usually derived from other functionalities as described later in
Section 3.2.
According to the function allocated to each air data measured, the A/C integrator with failure hazard analysis (FHA) will classify the criticality of the loss of each one of the air data measured or calculated. There are some parameters, e.g., the CAS, whose loss is always classified as catastrophic and therefore the corresponding air data become safety-critical. The ADS, therefore, is one of the safety-critical systems on board that should be redundant in order to meet the A/C category safety requirement: for example, triplex solution is the common standard in commercial aviation.
With modern technologies, recently the ADS moved towards digital solutions for a better integration with modern digital avionics. Fly-by-wire (FBW) paradigm is successfully applied to large aircraft and therefore a more electrical aircraft is a technological transition necessary to achieve the goals defined by the European Community, EC, within the FlightPath 2050 [
3]. The aeronautical industry has launched several programs to cope with the fly-by-wire challenge, even for those systems that seemed less involved in this revolution, such as the ADS. In fact, in order to overcome drawbacks to connect probes and vanes to ADMs pneumatically and then each ADM to the flight control system (FCS), many recent large FBW A/C are equipped with integrated probes that embed transducers within the probe (or vane) itself [
4].
The same approach is shared with those air vehicles of reduced size, e.g., small aircraft transport (SAT) category, unmanned aircraft system (UAS), and urban air mobility vehicles (UAM), where the FBW is necessary for a more-integrated system. SAT aircraft is a crucial segment for travelers in Europe because it is the only means of transportation that has those characteristics able to fill a gap that could not be done in another way. Short-range flights, local communities’ connections, door-to-door within four hours [
3] are only a few examples that highlight the importance of the SAT segment in the European infrastructures. Efforts spent worldwide by governments and aviation safety agencies to regulate the air work of UAS and UAM vehicles over populated areas is a clear evidence that what has been studied by many companies could take off in the next years. As far as ADS is concerned, SAT, UAS and UAM categories have common drawbacks, e.g., heterogeneity of ADS requirements due to high range of A/C mission (altitude, speed, etc.) and need to optimize ADS’s line replaceable units (LRUs) installation on board in terms of space and weight due to reduced fuselage size (if compared with civil aircraft). Each aircraft will have its own dedicated probes/vanes to satisfy safety and performance requirements. This particular aspect would suggest to rely on a solid core in order to have a multi-platform ADS with interchangeable external probes.
ADS’s safety is another crucial aspect to be taken into account. In order to increase the reliability of ADS, a physical redundancy is applied. Moreover, there are other requirements from airworthiness authorities that should be taken into account, e.g., those related to the bird strike, that set some constraints on the fuselage installations. Analytical redundancy [
5,
6,
7] is a concept used more and more frequently in recent years because the avionic background is mature to welcome such innovations. This approach enables the replacement of physical sensors (used for redundancy) with analytical ones for aerodynamic angles [
8,
9,
10] and airspeed [
11] with several benefits in terms of weight, power consumption, reliability, maintainability, and emissions.
The advent of distributed avionics, e.g., ARINC 664 networks on Airbus A380, A400M, A350 and Boeing 787, has been seen as a significant booster for a better exploitation of onboard data to be used, for instance, by other subsystems for redundancy purposes.
Within this scenario, innovative ADS for FBW applications as part of a redundant ADS is introduced with the MIDAS project funded in the SAT category of Clean Sky 2 programme [
12].
The MIDAS ADS will be driven by an integrative, modular and digital approach. Following the market trend and EC guidelines, the project outcome will be a fully-integrated probe (air data probes integrated with electronics) with digital outputs that can be interfaced with modern avionic bus onboard FBW A/C and several classes of external Pitot tubes and TAT probes.
The main innovation behind the MIDAS ADS lays on a patented technology [
13], named smart-air data system, attitude and heading reference system (ADAHRS), firstly by Politecnico di Torino and later under AeroSmart S.r.l. [
14] responsibility. This solution, basically a state observer obtained with a data-driven methodology, is able to estimate AoA and AoS with analytical sensors [
15,
16,
17] exploiting A/C flight dynamic equations and onboard data fusion.
The MIDAS equipment will be qualified (both for hardware [
18] and environmental [
19] aspects) and, therefore, even the virtual sensors. This aspect makes the MIDAS project a fundamental milestone in the certification process of analytical estimators for civil applications. Therefore, the main outcome of this project is to provide a qualifiable electronics able to be integrated into modern avionic bus (e.g., ARINC 664 network) that can be interfaced with several COTS probes (Pitot/static and TAT probes already certified by their own manufacturers).
This work deals with preliminary design activities accomplished to define analytical sensors (or virtual ones) for AoA and AoS estimation exploiting simulated flight data. The final design will deliver a qualifiable software module to be integrated on a demo board with AoA and AoS estimators guaranteeing at least the same performance of state-of-the-art sensors. Mainly for certification reasons, moving from previous and consolidated practice, a more efficient (in terms of computational cost and number of lines of code) virtual sensor will be designed for civil operative scenarios. Side findings emerge from the present work and they will affect the future steps of the MIDAS projects. The paper aims to highlight the original elements emerged during the present work and, therefore, neural network architecture optimization will not be discussed here because similar to previous works [
20,
21].
Considering the current project’s development stage, a complete and detailed reliability analysis cannot be conducted yet. For the same reason, the technology has been compared with simulated data. Even though the comparison with classical sensors is not described in this work, some brief considerations on expected performances will be given in
Section 3.1.
This paper begins with an overview of the MIDAS ADS and comparison between the state-of-the-art in
Section 2.
Section 3 describes the preliminary design of the MIDAS ADS solution with details about the virtual sensor design (
Section 3.1) and the certification aspects (
Section 3.2) that can be condensed in well-established target performance. After the reference A/C is introduced in
Section 4, the training strategy adopted in this work is presented in
Section 5.
Section 6 collects preliminary results obtained using only test maneuvers that are completely independent of the training pattern. The paper concludes with
Section 7.
3. MIDAS Technological Solution
Today, two distinct probes (certified) to measure pressure and temperature for flyable ADS are needed. There are few attempts worldwide to integrate both measures into a single probe, but there are no certified products so far. Therefore, MIDAS approach is to integrate the COTS probes (Pitot-static and temperature probes) as close as possible, as in
Figure 2, with dedicated electronics (MIDAS ADC) in order to achieve objectives defined later in
Section 3.2.
Therefore, the MIDAS air data system will be made up of:
The MIDAS project expects a tandem solution of the external probes according to preliminary considerations, but a more detailed aerodynamic study will be performed to find the optimal configuration.
3.1. Virtual Sensors
As stated before, the MIDAS project’s outcome will provide a single LRU embedding virtual sensor (or sensors), dedicated to AoA and AoS estimation, based on a patented technology at TRL6 [
24,
25]. These virtual sensors are essentially state observers for which the A/C flight dynamic model is replaced by a model based on neural networks.
Exploiting the paradigm of the FBW aircraft, the air data probe (ADP) will receive, as input, consolidated data from other A/C equipment to be fused with measured ones (, and ) in order to estimate AoA and AoS with high reliability.
The input and the output signals will be transmitted through the avionic bus of the A/C. As stated in the introduction, being the ADS a safety-critical system, the proposed solution must be considered valid also for redundant architectures in a hybrid framework, merging classical sensors and the MIDAS technology. The A/C integrator will be in charge to design a redundant ADS able to meet the applicable safety requirements with the best compromise merging COTS and synthetic sensors. The detailed reliability analysis of the MIDAS technology is non-trivial because it involves reliability analysis of other proprietary A/C systems (e.g., the FCC). Although some information can be deduced from previous works [
15], this topic will be extensively dealt with in a future step of this project.
The virtual sensors proposed in the MIDAS project rely on the use of A/C data from attitude and heading reference system, primary surface commands/deflections and Global Navigation Satellite System (GNSS) (
Figure 3b).
Topologically speaking, it consists of a biased linear combination of non-linear activation functions, each activation function is driven by a biased linear combination of the output of the preceding nodes. Although the multilayer perceptron (MLP) can be described from several points of view, in this case, the best description is that it can represent a non-linear map between the input and the target. The point is to find those weights of the network such that the output fits the desired map. The validity of the approach is mathematically proven using the universal approximation theorem (UAT). In fact, it is proven that any continuous function of
n real variables, with support in the unit hypercube, can be uniformly approximated by finite superposition of a fixed, univariate function that is discriminatory [
26].
The Smart-ADAHRS project deals with a very straightforward model, suitable for real-time and cost effective innovative avionic systems. Consider valid the following assumption on AoA and AoS:
where
and
are initial estimation obtained with flight mechanics equations whereas
and
are the differences between the linear estimations and the true nonlinear values. According to a patented procedure [
13],
and
is augmented with the evaluation of
and
based on two MLPs, which process measurements obtained with non-protruding sensors (except for the Pitot tube and TAT).
and
can be evaluated as follows:
where
stands for the pitch angle,
for the flight path angle,
is the proper acceleration as measured by the accelerometer along the
axis and
is the impact pressure.
K is an A/C constant derived from flight mechanic considerations (the order of magnitude for this category is 10
3 kg m
−2).
The patented approach can bring to a neural network with limited output(s) that is crucial aspect when dealing with certification authorities. Generally speaking, using real or simulated flight data the value ranges of and can be identified. Our approach is to apply the limited output only once the neural network is trained. This strategy allows to train the neural network without any limitations and to bound the estimated AoA and AoS to avoid any overshoot or spike values during the operative life.
Mathematical demonstrations exist [
26,
27,
28,
29,
30,
31] about the MLP performing as a universal approximator. During the training procedure, the weights of the linear combinations are estimated solving the non-convex problem of the error function optimization. Different heuristic rules exist and the Levenberg-Marquard, LM, algorithm is used in this work. The complete input vector needed by Smart-ADAHRS includes data from the GPS (providing
), the ADS (providing TAS) and the attitude and heading reference system (AHRS) (providing angular rates, Euler angles and linear accelerations), as can be seen in
Figure 3b.
Figure 3a shows a generic flight simulator model with autopilot and control laws in the loop. The Smart-ADAHRS is basically a data-based state observer exploiting neural functionalities and flight mechanic equations as described in
Figure 3b.
Previous research [
32] showed that analytic evaluation is indeed feasible for the evaluation of AoA and AoS, thanks to on board available data and with dedicated virtual sensors, one trained ad hoc for AoA and another for AoS. With the present application, where aircraft complexity is higher (for the auotpilot and control law presence itself), the scenario changes. Even though the presence of autopilot modes and control laws, as well known, affect the A/C dynamic behavior, they do not influence generic state observers if they are fed with current output and control surfaces, as showed in
Figure 3a.
Another important aspect is related to real operating scenario: a common virtual sensor able to estimate at the same time both AoA and AoS (essentially a single neural network with double output) could be beneficial in terms of required computational time and for ceritification aspects as mentioned before. In order to provide a realistic comparison, three feed-forward predictors are designed, (i) virtual, analytical or synthetic sensor (VS)-AoA, (ii) VS-AoS and (iii) VS-A&S, with the same architecture, the same input vector and the same training path (as shown in
Table 1).
The virtual sensors considered in this work have the following characteristics:
feed-forward neural network;
one hidden layer with 24 neurons;
neurons with sigmoidal activation functions;
one output layer with a single (or double for the VS-A&S) linear neuron;
limited output during the operative life.
If compared with previous works, the current activity showed that both AoA and AoS need a complete set of input vector otherwise there is a lack of performances. This is mainly due to complexity of flight dynamics involved in the Piaggio flight simulator. The following input vectors are hence implemented:
where
is the true airspeed,
,
,
are the accelerations measured by the accelerometers respectively in
,
and
axes,
,
,
are the Euler angles,
p,
q,
r are the body angular rates,
is the initial estimation for the AoA.
For the preliminary design, the synthetic sensors have been tested only with simulated data. The virtual sensors are compared in terms of measurement uncertainty required to COTS or MFP probes from
Table 2. However, the Smart-ADAHRS technology has been already compared with vanes in [
20] without providing any particular evidence of degradation of the ADS performance. However, this analysis will be conducted in future dedicated experiments. Previous research activities on simulated turbulent environment in [
33] showed the possibility of considering previous time steps of the input vector in a time delay network. This practice however is not considered at this stage and will be considered as a further improvement step.
3.2. Certification Consideration
As far as certification is concerned, the MIDAS system can be split in three topics: (i) external probes; (ii) electronic unit; (iii) virtual sensors for AoA and AoS.
The external probes, already certified by the supplier, satisfy the required regulations, i.e., TSO-C16A [
34] for the Pitot-static probe and the AS793 [
35] for the TAT probe.
Design, manufacturing and verification of the electronic unit is one of the main topic of the MIDAS project. In fact, aim of the MIDAS project is to achieve an equivalent DAL-B design assurance level that could be extended to DAL-A for future industrialization. Since all the analytical algorithms are integrated in the field programmable gate array (FPGA), the whole design and validation process will follow RTCA DO-254 [
18] guidelines for product assurance and certification. The RTCA DO-178 is not applicable for the MIDAS project. The environmental features will be tested according to requirements established by the RTCA DO-160. In addition to DO-254 risk reduction, pre-qualified (by manufacturer) avionic components will reduce the DO-160 effort and risks as they already integrate lighting protections and other features.
As far as the MIDAS’s virtual sensors for AoA and AoS is concerned, they will be treated as physical sensors and, therefore, they have to satisfy the applicable aeronautical standards. As before mentioned in the
Section 1, performance requirements for AoA and AoS usually derive from other systems’ specifications. For example, for autonomous navigation purposes AoA and AoS may be required by the control laws with defined uncertainty in order to achieve desired navigation performance. Therefore, flight mechanics will specify some requirements on the accuracy of AoA and AoS. For the MIDAS project, the AoA and AoS specification are defined by the project leader, Piaggio Aerospace, and published in a project deliverable [
36].
Aiming to provide only necessary details for this work, the most significant target performance are summarised in
Table 2 where, with a little abuse of notation, for
is intended the value such that the probability
also in case the error is not normally distributed. Values reported in
Table 2 come from project leader’s system specifications for LFE and EFE.
During the normal and emergency flight conditions, the performance required for AoA and AoS are split into limited flight envelope, LFE, extended flight envelope, EFE, and steady-state flight conditions, SSFC. This latter was proposed by the authors and is more stringent because of the common lack of performance during steady operations [
37].
5. Training Strategy
The VS for AoA and AoS will be trained with consolidated strategy based on A/C flying characteristics. Firstly, a set of manoeuvres is defined in order to cover the most of the flight envelope. Once the operative speed range is defined, it is split in several flight regimes, e.g., according to the Mach number. Each flight regime is characterized in terms of its trim conditions: initial velocity, or Mach number, and attitude (usually uniform horizontal path, with null bank and sideslip angle). In each one of the flight regime, the following manoeuvres are simulated:
Each manoeuvre is performed with the aim to excite all A/C dynamic modes. Therefore, the single manoeuvre is repeated several times in order to populate the training pattern with adequate information. For example, the pitch hold is repeated from the minimum to the maximum values with steps of 10 .
Once all data are collected, all variables contained in the input vectors (Equation (7)) are normalized between
considering minimum and maximum values defined by the A/C manufacturer (and not the actual value flown). In this work these values are not shared because of intellectual property reasons. This aspect is crucial for a successful training stage because it will provide a feedback on the correctness of the flown manoeuvres. On the contrary, other flight data will be required to cover the entire region where the VS are defined. As an example,
Figure 5 shows how the input variables and the outputs are distributed within the operative range provided by the A/C integrator.
For each single box, the central mark indicates the median and the bottom and top edges of the box indicate the 25th and 75th percentiles, respectively. The whiskers (dashed vertical lines) cover to the most extreme data points not considered outliers whereas the outliers are plotted using the + symbol. The distribution shown in
Figure 5 demonstrates that test data collected during simulated flights are included in the training pattern.
6. Result
The AoA and AoS estimations rely on the input data provided by the A/C FCS (e.g., inertial data, primary and secondary control surface deflections). In this section results related to flight manoeuvres FT
–4 are presented because they give a real feedback on the VS performances. The training results are only used for training purposes, e.g., to select the best training among several ones according to consolidated metrics, as showed in previous works [
20] and not reported in this paper. Results will be presented as time histories of the errors whereas the current values are not shown for intellectual property reasons. Moreover, some important parameters are derived from result analysis that can be used as pass/fail criteria if compared with those in
Table 2.
Figure 6 shows time histories of errors obtained with the VS-AoA on the four flight tests and corresponding error distribution. Results are within the required performance (
Table 2).
Figure 7 shows time histories of errors obtained with the VS-AoS on the four flight tests and corresponding error distribution. Even though errors of AoS estimation are larger than AoA, they are within the required performance (
Table 2).
Figure 8 shows time histories of errors obtained with the VS-A&S on the four flight tests and corresponding error distribution. Performances of the double-output neural network are comparable with the two single neural networks (one dedicated to AoA and one to AoS) and, therefore, performance are still acceptable (
Table 2).
Results shown in this section allow authors to select the VS-A&S as the candidate virtual sensor architecture because more suitable for real time operations and, more important, for certification aspects (a single software module to be qualified). Moreover, it is confirmed that the AoS estimation shows larger errors with respect to AoA estimation. To understand the reason behind, it was noted that training AoA and AoS at the same time requires a better balanced training pattern between longitudinal flight test points and lateral-directional ones. In fact, AoS was noted to be less than 1 for about of the common training pattern. Therefore, as suggestion for the final design step, a review of the training strategy is required for the MIDAS objectives.
Table 3 collects all validation results obtained with the preliminary design about three aerodynamic angle estimators suitable for civil certification and compared with the most stringent requirements (LFE) provided by Piaggio Aerospace (project leader).
7. Conclusions
The present work introduces preliminary design activities for a reliable and ready-to-be-flown air data system for FBW applications within the MIDAS project funded in the frame of Clean Sky 2. The MIDAS technology will enable to remove flow angles vanes or complex rotating/slotted probes that are hard to be procured on the market. The ambition is providing the SAT community with a digital and fully integrated ADS that joins all benefits of available flyable architectures and removes their drawbacks. It is introduced MIDAS projects’ aims to improve the current state-of-the-art of ADS.
It is shown that the MIDAS ADS will be based on AoA and AoS analytical estimators based on neural network techniques, today at TRL6.
Training and test manoeuvres are introduced. Training manoeuvres are defined aiming to excite all dynamic modes of the A/C model whose complexity is increased by several autopilot modes and control laws. Test manoeuvres are collected with the scope to validate results independently from the training set and all possible autopilot configuration.
With respect to the previous works, it emerged that both AoA and AoS need a complete set of input pattern to show acceptable performances due to high complexity of A/C dynamics. According to previous works, AoA and AoS are estimated with dedicated virtual sensors using a single output neural network. This approach has two main drawbacks when applied to qualifiable avionics: (i) it requires a higher computational cost; (ii) two independent software modules to submit to a certification process (DO-178 or, as for the MIDAS project, DO-254). These two main drawbacks suggest to have a single neural network with double output, therefore the computational and certification effort can be drastically reduced.
The virtual sensor (VS-A&S) exhibits only slightly degraded performance for steady-state conditions whereas comparable errors for dynamic flight tests. This evidence makes the single VS (both AoA and AoS) the candidate solution in the next staged of development. Moreover, the A/C complexity conjugated with the new neural network architecture has introduced a new challenge: a common training pattern (both for AoA and AoS) will require, not only, a uniform distribution but even a balanced data between longitudinal and lateral-directional flight test points. This means that the hypercube definition of the neural network shall be uniformly populated as much as possible when collecting flight test data at the simulator. This topic will be discussed with the project leader in a next stage. The reliability analysis and the comparison of the MIDAS technology with classical solution will be studied with the other partners contributions in a next stage.
In conclusion, the selected VS (VS-A&S) exhibits good preliminary performances both for AoA and AoS and it is selected for the candidate VS architecture. Further investigation of larger errors on AoS estimation shall be investigated in the following works.