Run-time Verification and Validation for Safety-Critical Flight Control Systems

As the complexity of flight controllers grows so does the cost associated with verification and validation (V&V). Current-generation controllers are already reaching a level of complexity that pushes the envelopes of existing V&V approaches, and there is little hope for affordable V&V of next-generation intelligent systems. One possible solution is to combine runtime monitors for complex systems with simple controllers that can provide a reversionary mode during undesirable conditions. Such an architecture allows the V&V to be partitioned into design-time V&V (for the relatively simple monitor and fail-safe controller), and runtime V&V (of the complex controller). Barron Associates proposes an aggressive Phase I plan of research to develop both the monitoring algorithms as well as fail-safe controller approaches for flight-critical systems. The monitoring technology will leverage related runtime V&V work done for non-aerospace safety-critical applications, and the fail-safe control approach will be based on a partitioning of the control tasks into those required for stability and safe return (the fail-safe system) and those required for acceptable performance and mission success (the mission controller). One innovative aspect of Phase I will be the development of runtime V&V approaches for both single-vehicle systems as well as multi-vehicle coordinated control systems.