Establishing a Framework for Dynamic Risk Management in ‘Intelligent’ Aero-Engine Control

Abstract

Abstract. The behaviour of control functions in safety critical software systems is typically bounded to prevent the occurrence of known system level hazards. These bounds are typically derived through safety analyses and can be implemented through the use of necessary design features. However, the unpredictability of real world problems can result in changes in the operating context that may invalidate the behavioural bounds themselves, for example, unexpected hazardous operating contexts as a result of failures or degradation. For highly complex problems it may be infeasible to determine the precise desired behavioural bounds of a function that addresses or minimises risk for hazardous operation cases prior to deployment. This paper presents an overview of the safety challenges associated with such a problem and how such problems might be addressed. A self-management framework is proposed that performs on-line risk management. The features of the framework are shown in context of employing intelligent adaptive controllers operating within complex and highly dynamic problem domains such as Gas-Turbine Aero Engine control. Safety assurance arguments enabled by the framework necessary for certification are also outlined.

Multi-Parameter Methods of Comprehensive Performance Evaluation for Aero-Engine

“…ZR. Liu [5,6] analyzed conditions of engine such as, performance sorting, evaluation of performance decline, and maintenance scheduling, based on the results of performance monitoring. The research guaranteed the security and economy of engine operation.…”

ReSonAte: A Runtime Risk Assessment Framework for Autonomous Systems

“…The effectiveness of dynamic risk estimation has been demonstrated in the avionics [9] and medical [10] domains, but these techniques often encounter challenges with state space explosion which may limit their applicability to relatively lowcomplexity systems. Also, real-time CPSs often have strict timing deadlines in the order of tens of milliseconds requiring any dynamic risk assessment technique to be computationally lightweight.…”

Towards a Holistic Approach to Fault Management

“…The complexity of today's systems is driving a change of approach, even in fairly conservative sectors, such as safety-critical systems (Kurd et al 2009), which tend to use static, non-adaptive practices, to steer runtime behaviour. We foresee the presence of self-management and adaptation as the norm rather than the exception in all dependable systems.As shown in Figure 1, we argue for a nested approach in order to obtain a more resilient, self-aware, and effective solution.…”