Dans cette thèse, nous étudions le problème de l’analyse de signatures de pannes dans le domaine de la maintenance avionique, afin d’identifier les défaillances au sein d’équipements en panne et suggérer des actions correctives permettant de les réparer. La thèse a été réalisée dans le cadre d’une convention CIFRE entre Thales Research & Technology et l’Université Paris-Sud. Les motivations sont donc à la fois théoriques et industrielles. Une signature de panne devrait fournir toutes les informations nécessaires pour identifier, comprendre et réparer la panne. Pour comprendre le mécanisme la panne son identification doit donc être explicable. Nous proposons une approche à base d’ontologies pour modéliser le domaine d’étude, permettant une interprétation automatisée des tests techniques réalisés afin d’identifier les pannes et obtenir les actions correctives associées. Il s’agit d’une approche d’apprentissage de concepts permettant de découvrir des concepts représentant les signatures de pannes tout en fournissant des explications sur les choix de propositions de réparations. Comme les signatures ne sont pas connues a priori, un algorithme d’apprentissage automatique non supervisé approxime les définitions des concepts. Les signatures apprises sont fournies sous forme de définitions de la logique de description (DL) et ces définitions servent d’explications. Contrairement aux techniques courantes d’apprentissage de concepts conçues pour faire de l’apprentissage supervisé ou basées sur l’analyse de patterns fréquents au sein de gros volumes de données, l’approche proposée adopte une perspective différente. Elle repose sur une construction bottom-up de l’ontologie. Le processus d’apprentissage est réalisé via un opérateur de raffinement appliqué sur l’espace des expressions de concepts et le processus est guidé par les données, c’est-à-dire les individus de l’ontologie. Ainsi, les notions de justifications, de concepts plus spécifiques et de raffinement de concepts ont été révisées et adaptées pour correspondre à nos besoins. L’approche a ensuite été appliquée au problème de la maintenance avionique. Un prototype a été implémenté et mis en œuvre au sein de Thales Avionics à titre de preuve de concept. / In this thesis we explore the problem of signature analysis in avionics maintenance, to identify failures in faulty equipment and suggest corrective actions to resolve the failure. The thesis takes place in the context of a CIFRE convention between Thales R&T and the Université Paris-Sud, thus it has both a theoretical and an industrial motivation. The signature of a failure provides all the information necessary to understand, identify and ultimately repair a failure. Thus when identifying the signature of a failure it is important to make it explainable. We propose an ontology based approach to model the domain, that provides a level of automatic interpretation of the highly technical tests performed in the equipment. Once the tests can be interpreted, corrective actions are associated to them. The approach is rooted on concept learning, used to approximate description logic concepts that represent the failure signatures. Since these signatures are not known in advance, we require an unsupervised learning algorithm to compute the approximations. In our approach the learned signatures are provided as description logics (DL) definitions which in turn are associated to a minimal set of axioms in the A-Box. These serve as explanations for the discovered signatures. Thus providing a glass-box approach to trace the reasons on how and why a signature was obtained. Current concept learning techniques are either designed for supervised learning problems, or rely on frequent patterns and large amounts of data. We use a different perspective, and rely on a bottom-up construction of the ontology. Similarly to other approaches, the learning process is achieved through a refinement operator that traverses the space of concept expressions, but an important difference is that in our algorithms this search is guided by the information of the individuals in the ontology. To this end the notions of justifications in ontologies, most specific concepts and concept refinements, are revised and adapted to our needs. The approach is then adapted to the specific avionics maintenance case in Thales Avionics, where a prototype has been implemented to test and evaluate the approach as a proof of concept.

No description available.

<p>The use of lower airspace for air taxi and cargo applications opens up exciting prospects for futuristic Unmanned Aircraft Systems (UAS). However, ensuring the safety and security of these UAS within densely populated urban areas presents significant challenges. Most modern aircraft systems, whether unmanned or otherwise, rely on the Global Navigation Satellite System (GNSS) as a primary sensor for navigation. From satellite navigations point of view, the dense urban environment compromises positioning accuracy due to signal interference, multipath effects, etc. Furthermore, civilian GNSS receivers are susceptible to spoofing attacks since they lack encryption capabilities. Therefore, in this thesis, we focus on examining the safety and cybersecurity assurance of UAS in dense urban environments, from both theoretical and experimental perspectives. </p> <p>To facilitate the verification and validation of the UAS, the first part of the thesis focuses on the development of a realistic GNSS sensor emulation using a Gazebo plugin. This plugin is designed to replicate the complex behavior of the GNSS sensor in urban settings, such as multipath reflections, signal blockages, etc. By leveraging the 3D models of the urban environments and the ray-tracing algorithm, the plugin predicts the spatial and temporal patterns of GNSS signals in densely populated urban environments. The efficacy of the plugin is demonstrated for various scenarios including routing, path planning, and UAS cybersecurity. </p> <p>Subsequently, a robust state estimation algorithm for dynamical systems whose states can be represented by Lie Groups (e.g., rigid body motion) is presented. Lie groups provide powerful tools to analyze the complex behavior of non-linear dynamical systems by leveraging their geometrical properties. The algorithm is designed for time-varying uncertainties in both the state dynamics and the measurements using the log-linear property of the Lie groups. When unknown disturbances are present (such as GNSS spoofing, and multipath effects), the log-linearization of the non-linear estimation error dynamics results in a non-linear evolution of the linear error dynamics. The sufficient conditions under which this non-linear evolution of estimation error is bounded are derived, and Lyapunov stability theory is employed to design a robust filter in the presence of an unknown-but-bounded disturbance. </p>

Les avions du futur auront une topologie tout électrique. Pour cela, les constructeurs augmentent la puissance et la tension d'utilisation du réseau d'énergie embarqué. Cependant, le défaut d'arc électrique est un risque qui est souvent la cause d'incidents d'exploitation voire de crash. La contribution de cette thèse porte sur la problématique de l'identification et la détection de défauts électriques sur un réseau de distribution d'énergie de type HVDC ±270VDC destiné à l'aéronautique. Dans ce manuscrit, le premier axe suivi est exploratoire. Il porte sur l'observation du comportement et de la phénoménologie d'arc dans le milieu proche de l'aéronautique (notamment par l'émulation de l'altitude par la pression). Le second axe de recherche porte sur l'analyse, la mise au point et le développement de méthode de détection fiable d'un défaut d'arc électrique par un coeur de distribution d'énergie (SSPC) sur charges résistive et légèrement inductive. Cinq méthodes ont été développées au cours de ce travail de thèse. Elles sont basées sur l'analyse des caractéristiques temporelles, fréquentielles et temps-fréquence du courant de ligne. À l'issue de chaque méthode est produit un indicateur qui est ensuite utilisé par une logique de discrimination dépendant de chaque critère. Le comportement non-déterministe des arcs notamment aux conditions d'expérimentation (courant, tension, matériaux des électrodes, longueur de l'arc, etc.) rendent la détection difficile par un simple seuil sur le résultat des critères. Dans ces travaux, une approche proportionnelle au défaut est proposée pour la discrimination à l'aide de seuils variables selon le courant, la variation de charge ou le bruit électrique du système. Le résultat combiné des méthodes aboutit à une décision de mise en protection. Pour valider expérimentalement les algorithmes proposés, une vaste base de données a été constituée comprenant aussi bien des signaux de nature résistive que selfique avec à la fois des arcs et des variations de charges sans arcs afin de vérifier qu'aucune détection n'opère à tort. Le fruit de ces travaux a été en partie implémenté dans un prototype d'analyse en temps réel de la ligne de distribution / Tomorrow’s aircraft will have an all-electric topology. This mean, manufacturers boost power and voltage of the embedded energy network. Nevertheless, the lack of an electric arc is a risk that is often the cause of the crash or operated occurrences. This thesis contributions concerns identification issue and electric arc fault detection on an energy distribution smart grid of HVDC network dedicated to avionic. The first line of this manuscript is exploratory. It covers behavioural observation and arc phenomenology in the grounded sphere of aeronautic (in particular emulated altitude by pressure). The second line of research deals with analysis, clarification and development of reliable approach of electric arc default detection through a central energy distribution on resistive charges. Five methods have been initiated throughout this thesis paper. They are based on several characteristic (time, frequency and time-frequency) of the line current. An indicator is produced at the end of each method. Subsequently, the indicator is used by a logic of discrimination according to each criterion. The non-deterministic behaviour of arc notably testing conditions (current, voltage, electrode materials, etc. makes detection difficult by a simple threshold on result of criteria. In this work, a new approach of arc fault discrimination is proposed. This used a proportional and variable threshold according to the current, load or noise variations from the system. The combined outcome of method results to a decision providing protection. To confirm experimentally proposed algorithms, a wide range database has been established. That included equally resistive and inductive signals with both arcs and load variations without arc fault so as to ensure that any detection is not mistakenly occurring. The upshot of this research work has been implemented in real time protection device prototype for HVDC +-270V smart-grid

The conventional Mini and Large scale Unmanned Aerial Vehicle systems span anywhere from approximately 12 inches to 12 feet; endowing them with larger propulsion systems, batteries/fuel-tanks, which in turn provide ample power reserves for long-endurance flights, powerful actuators, on-board avionics, wireless telemetry etc. The limitations thus imposed become apparent when shifting to Micro Aerial Vehicles (MAVs) and trying to equip them with equal or near-equal flight endurance, processing, sensing and communication capabilities, as their larger scale cousins. The conventional MAV as outlined by The Defense Advanced Research Projects Agency (DARPA) is a vehicle that can have a maximum dimension of 6 inches and weighs no more than 100 grams. Under these tight constraints, the footprint, weight and power reserves available to on-board avionics and actuators is drastically reduced; the flight time and payload capability of MAVs take a massive plummet in keeping with these stringent size constraints. However, the demand for micro flying robots is increasing rapidly. The applications that have emerged over the years for MAVs include search&rescue operations for trapped victims in natural disaster succumbed urban areas; search&reconnaissance in biological, radiation, natural disaster/hazard succumbed/prone areas; patrolling&securing home/office/building premises/urban areas. VTOL capable rotary and fixed wing flying vehicles do not scale down to micro sized levels, owing to the severe loss in aerodynamic efficiency associated with low Reynolds number physics on conventional airfoils; whereas, present state of the art in flapping wing designs lack in one or more of the minimum qualities required from an MAV: Appreciable flight time, appreciable payload capacity for on-board sensors/telemetry and 6DoF hovering/VTOL performance. This PhD. work is directed towards overcoming these limitations. Firstly, this PhD thesis presents the advent of a novel Quad-Wing MAV configuration (called the QV). The Four-Wing configuration is capable of performing all 6DoF flight maneuvers including VTOL. The thesis presents the design, conception, simulation study and finally hardware design/development of the MAV. Secondly, this PhD thesis proves and demonstrates significant improvement in on-board Energy-Harvesting resulting in increased flight times and payload capacities of the order of even 200%-400% and more. Thirdly, this PhD thesis defines a new actuation principle called, Fixed Frequency, Variable Amplitude (FiFVA). It is demonstrated that by the use of passive elastic members on wing joints, a further significant increase in energy efficiency and consequently reduction in input power requirements is observed. An actuation efficiency increase of over 100% in many cases is possible. The natural evolution of actuation development led to invention of two novel actuation systems to illustrate the FiFVA actuation principle and consequently show energy savings and flapping efficiency improvement. Lastly, but not in the least, the PhD thesis presents supplementary work in the design, development of two novel Micro Architecture and Control (MARC) avionics platforms (autopilots) for the application of demonstrating flight control and communication capability on-board the Four-Wing Flapping prototype. The design of a novel passive feathering mechanism aimed to improve lift/thrust performance of flapping motion is also presented.

Safety of the airborne platforms rests heavily on the way they are maintained. This maintenance includes repairs and testing, to reduce platform down time. Maintenance is performed using generic and specific test equipment within the existing maintenance management system (MMS). This thesis reports the work undertaken to improve maintainability and availability of avionics systems using an intelligent decision support system (IDSS). In order to understand the shortcomings of the existing system, the prevalent practices and methodologies are researched. This research thesis reports the development and implementation of an IDSS and the significant improvements made by this IDSS by integrating autonomous and independent information sources by employing a multi-agent system (MAS). Data mining techniques and intelligence agents (IA) are employed to create an expert system. The developed IDSS successfully demonstrates its ability to integrate and collate the available information and convert into valuable knowledge. Using this knowledge, the IDSS is able to generate interpreted alerts, warnings and recommendations thereby reasonably improving platform maintainability and availability. All facets of integrated logistics support (ILS) are considered to create a holistic picture. As the system ages, the IDSS also matures to assist managers and maintainers in making informed decisions about the platform, the unit under test (UUT) and even the environment that supports the platform.

Les architectures modulaires intégrées (IMA) sont une évolution majeure de l'architecture des systèmes avioniques. Elles permettent à plusieurs systèmes de se partager des ressources matérielles sans interférer dans leur fonctionnement grâce à un partitionnement spatial (zones mémoires prédéfinies) et temporel (ordonnancement statique) dans les processeurs ainsi qu'une réservation des ressources sur les réseaux empruntés. Ces allocations statiques permettent de vérifier le déterminisme général des différents systèmes: chaque système doit respecter des exigences de bout-en-bout dans une architecture asynchrone. Une étude pire cas permet d'évaluer les situations amenant aux limites du système et de vérifier que les exigences de bouten- bout sont satisfaites dans tous les cas. Les architectures IMA utilisés dans les avions centralisent physiquement des modules de calcul puissants dans des baies avioniques. Dans le cadre d'une étude de cas hélicoptère, ces baies ne sont pas envisageables pour des raisons d'encombrement: des processeurs moins puissants, utilisés à plus de 80%, composent ces architectures. Pour ajouter de nouvelles fonctionnalités ainsi que de nouveaux équipements, le souhait est de distribuer la puissance de traitement sur un plus grand nombre de processeurs dans le cadre d'une architecture globale asynchrone. Deux problématiques fortes ont été mises en avant tout au long de cette thèse. La première est la répartition des fonctions avioniques associée à une contrainte d'ordonnancement hors-ligne sur les différents processeurs. La deuxième est la satisfaction des exigences de communication de bout-en-bout, dépendantes de l'allocation et l'ordonnancement des fonctions ainsi que des latences de communication sur les réseaux. La contribution majeure de cette thèse est la recherche d'un compromis entre la distribution des architectures IMA sur un plus grand nombre de processeurs et la satisfaction des exigences de communication de bout-en-bout. Nous répondons à cet enjeu de la manière suivante: - Nous formalisons dans un premier temps un modèle de partitions communicantes tenant en compte des contraintes d'allocation et d'ordonnancement des partitions d'une part et des contraintes de communication de bout-en-bout entre partitions d'autre part. - Nous présentons dans un deuxième temps une recherche exhaustive des architectures valides. Nous proposons l'allocation successive des fonctions avioniques en considérant au même niveau la problématique d'ordonnancement et la satisfaction des exigences de bout-en-bout avec des latences de communication figées. Cette méthode itérative permet de construire des allocations de partitions partiellement valides. La construction des ordonnancements dans chacun des processeurs est cependant une démarche coûteuse dans le cadre d'une recherche exhaustive. - Nous avons conçu dans un troisième temps une heuristique gloutonne pour réduire l'espace de recherche associé aux ordonnancements. Elle permet de répondre aux enjeux de distribution d'une architecture IMA dans un contexte hélicoptère. - Nous nous intéressons dans un quatrième temps à l'impact des latences de communication de bout-en-bout sur des architectures distribuées données. Nous proposons pour celles-ci les choix de réseaux basés sur les latences de communication admissibles entre les différentes fonctions avioniques. Les méthodes que nous proposons répondent au besoin industriel de l'étude de cas hélicoptère, ainsi qu'à celui de systèmes de plus grande taille. / Integrated Modular Architectures (IMA) is a major evolution of avionics systems. A spatial (predefined memory zones) and temporal (off-line scheduling) partitioning as well as communication resources reservation permit several systems not to interfere in this architecture. The determinism of systems is proved thanks to these static allocations: each system must respect end-to-end requirements in an asynchronous architecture. A worst-case study permits to assess the bounds of systems in order to verify that end-to-end requirements are satisfied in all the cases. IMA architectures physically centralize powerful computing resources in avionics bays in aircraft. These aren't feasible in helicopters due to size reasons: powerless processors, at least 80% used, set these architectures. In order to add new functionalities and equipment, the aim is to distribute processing power over a larger number of processors in the context of a globally asynchronous architecture. Two strong issues have been advanced throughout this thesis. The first one is the distribution of avionics functions with an off-line scheduling constraint on the different processors. The second one is the satisfaction of end-to-end requirements, depending on allocation and scheduling of functions as well as communication latencies over the networks. This thesis proposes a trade-off between the distribution of IMA architectures on a larger number of processors and the satisfaction of end-to-end communication requirements. We answer at this topic as follows: - First, we formalize a communicating partitions model based on the partitions allocation and scheduling constraints on the one hand and end-to-end communication constraints on the other hand. - Second, we present an exhaustive search of valid architectures. We introduce a successive allocation of avionics functions considering altogether the scheduling and the satisfaction of end-to-end constraints with fixed communication latencies. This iterative method allows the building of partially valid allocations schemes, but the scheduling search is expensive here. - Third, we create a greedy heuristic to reduce the scheduling search space. It permits to meet the challenges of the distribution of IMA architecture in a helicopter context. - Finally, we focus on the impact of end-to-end communication latencies on given distributed architectures. We define for them the networks based on eligible communication latencies between the different avionics functions. Our methods answer the industrial case study needs as well as bigger size systems needs.

This thesis is analysing the historical evolution of flight instruments and aims at the design of a new, enhanced cockpit that includes basic flight instruments supplemented by data from selected aircraft subsystems. The design is based on currently available electronic instruments, known as EFIS, presently used onboard Boeing 737-800 cockpit. The proposed design aims at improvements to graphic style of EFIS, and accomodation of new data into newly designed displays. As a result of this effort, a set of design concepts is created. Those are then implemented as fully functional set of displays using custom made user interface system design tool.

Nedávné studie předpovídají nárůst pasažérů využívajících leteckou dopravu. Tento trend bude vyžadovat zavedení nových leteckých linek, důsledkem čeho bude zhuštěn letový provoz s dopadem hlavně na nápor letišť v metropolitních oblastech. Automatizovaně řízení pojíždení letounu umožní menší rozestupy mezi jednotlivými linkami a zvýšení příletové a odletové kapacity letišť. Tato práce se zabývá návrhem modelu pohybu dopravního letounu po zemi s ohledem na různé provozní podmínky jako např.: stav povrchu vzletové a přistávací dráhy za různého počasí a lišící se provozní parametry letounu (tlak v pneumatikách, zatížení podvozků a pod.). Validace modelu byla založena na sledování poloměru zatáčky pro různe uhly natočení přední podvozkové nohy. Výsledky simulace byly validovany vzhledem k analytickému modelu Ackermanovy geometrie a na specifikační dokument od Boeingu určený pro plánovaní pohybu letounu na letišti. Výsledky prokázaly přesnost modelu a potvrdily jeho možné nasazení pro simulace v reálnem čase.

At avionics control and critical systems is necessary guarantee a minimal level of fault tolerance and their high reliability. On the electronic components in these devices has an undesirable influence environment conditions and mainly cosmic ray. In this paper are described the most common failure types of semiconductor components and devices together with modern methods which can be increased the system fault tolerance and its overall reliability. There are introduced aspects of the avionic systems design due to finally certification and ways to evaluate its safety. This thesis describes design and implementation of the CAN bus control system for the FPGA platform which uses the CANAerospace application protocol. Created system design is improved by the TMR architecture. Fault tolerance of both system version is tested by the SEU framework which allows using the dynamic partial reconfiguration generate an SEU failures into running FPGA design.