A new method of analysis of sampled-data control systems.
Sampled data control system analysis, determining gain margin in unsampled loops
DATA CONTROL SYSTEM↗
SEARCH · Search NASA
Results for “Control Systems”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
JTAG-based PLC memory acquisition framework for industrial control systems
In industrial control systems (ICS), programmable logic controllers (PLC) are the embedded devices that directly control and monitor critical industrial infrastructure processes such as nuclear plants and power grid stations. Cyberattacks often target PLCs to sabotage a physical process. A memory forensic analysis of a suspect PLC can answer questions about an attack, including compromised firmware and manipulation of PLC control logic code and I/O devices. Given physical access to a PLC, collecting forensic information from the PLC memory at the hardware-level is risky and challenging. It may cause the PLC to crash or hang since PLCs have proprietary, legacy hardware with heterogeneous architecture. This paper addresses this research problem and proposes a novel JTAG (Joint Test Action Group)-based framework, Kyros, for reliable PLC memory acquisition. Kyros systematically creates a JTAG profile of a PLC through hardware assessment, JTAG pins identification, memory map creation, and optimizing acquisition parameters. It also facilitates the community of interest (such as ICS owners, operators, and vendors) to develop the JTAG profiles of PLCs. Further, we present a case study of Kyros implementation over Allen-Bradley 1756-A10/B to help understand the framework's application on a real-world PLC used in industry settings. The sample PLC memory dumps are shared with the research community to facilitate further research.
Rais, Muhammad Haris↗
Memory forensic analysis of a programmable logic controller in industrial control systems
In industrial control systems (ICS), programmable logic controllers (PLCs) are used to automate physical processes such as nuclear plants and power grid stations, and are often subject to cyber attacks. As in conventional IT domain, the memory analysis of the PLCs can help answer important forensic questions about the attack, such as the presence of malicious firmware, injection of modified control logic (the program running on the PLC), and manipulation of I/O devices (e.g., sensors and actuators). Unlike conventional IT domain, PLCs have heterogeneous hardware architecture, proprietary firmware and control software, making it challenging to employ a unified framework for their memory forensics. For merely extracting artifacts of forensic importance, reverse-engineering the firmware is a tedious task, and the effort needs to be repeated for every PLC model. As a community, a step-wise approach to tackle this challenge is to analyze the memory of specific PLCs, and subsequently find a generic framework applicable to all PLCs. Our work is a step forward in this direction. By following a methodology that focuses on the functional layer of PLCs instead of reverse engineering the firmware, we analyze the digital forensic artifacts available in a common PLC, Allen-Bradley ControlLogix 1756-L61. Before diving into the memory dump, we analyze the PLC control software to create a list of important artifacts that are sure to exist in the PLC memory dump. The approach employs a setup where PLC control software RSLogix-5000 is connected to the PLC, and the memory dump can be obtained as and when needed. We create test cases that sequentially highlight each category of artifacts, followed by an examination of the resultant impact on memory. After attaining the listed artifacts, we employ conventional string and known data searches to extract interesting information present in this PLC's memory. The memory analysis profile, presented as a Python library and shared with the community, can help a forensic investigator to readily extract forensic artifacts from the same model's controller. The adopted approach may help researchers in creating memory profile of other PLCs, and ultimately formulating a generic PLC memory analysis framework.
Rais, Muhammad Haris↗
Attacking the IEC-61131 Logic Engine in Programmable Logic Controllers in Industrial Control Systems
In industrial control systems (ICS), programmable logic controllers (PLCs) directly monitor and control a physical process such as nuclear power plants, gas pipelines, and water treatment. They are equipped with a control logic written in IEC-61131 languages (e.g., ladder logic and structured text) that defines how a PLC should control a physical process. A PLC's control logic is a usual target of a cyberattack to sabotage a physical process. For instance, Stuxnet targets a control logic of a Siemens S7-300 PLC to damage a nuclear facility's centrifuges. The existing attacks in the literature generally focus only on injecting malicious control logic into a PLC. This paper presents a new dimension of control logic attacks that target the control logic engine (responsible for running a control logic) of a PLC. It demonstrates that a cyberattack can disable the control logic engine successfully by exploiting inherent PLC features such as program mode and starting/stopping engine. We develop two novel case studies on control logic engine attacks by employing the MITRE ATT\&CK knowledge base on the real-world PLCs used in industry settings, i.e., 1) Schweitzer Engineering Laboratory (SEL)'s Real-Time Automation Controller (SEL-3505 RTAC) equipped with security features such as encrypted traffic and device-level access control, and 2) traditional PLCs, i.e., Schneider Electric's Modicon M221, Allen-Bradley's MicroLogix 1400 and 1100 that do not have security features. The case studies present the internals of the logic engine attacks and facilitate the ICS research community and industry to understand the attack vectors on the control logic engine. We evaluate the effectiveness of the control engine attacks on a power substation, a 4-floor elevator, and a conveyor belt to demonstrate their real-world impact of halting a physical process.
Ali qasim, Syed↗
Seasat-A attitude control system
The Seasat-A attitude control system controls the attitude of the satellite system during injection into final circular orbit after Atlas boost, during orbit adjust and trim phases, and throughout the 3-year mission. Ascent and injection guidance and attitude control are provided by the Agena spacecraft with a gyrocompassed mass expulsion system. On-orbit attitude control functions are performed by a system that has its functional roots in the gravity-gradient momentum bias technology. The paper discusses hardware, control laws, and simulation results.
Weiss, R.↗
Contact position sensor using constant contact force control system
A force control system (50) and method are provided for controlling a position contact sensor (10) so as to produce a constant controlled contact force therewith. The system (50) includes a contact position sensor (10) which has a contact probe (12) for contacting the surface of a target to be measured and an output signal (V.sub.o) for providing a position indication thereof. An actuator (30) is provided for controllably driving the contact position sensor (10) in response to an actuation control signal (I). A controller (52) receives the position indication signal (V.sub.o) and generates in response thereto the actuation control signal (I) so as to provide a substantially constant selective force (F) exerted by the contact probe (12). The actuation drive signal (I) is generated further in response to substantially linear approximation curves based on predetermined force and position data attained from the sensor (10) and the actuator (30).
Sturdevant, Jay↗
Helicopter flight control system design and evaluation for NOE operations using controller inversion techniques
A flight control system design technique is described that allows rapid evaluation of candidate control laws using computer simulated trajectories. The two-step technique first computes the optimum trajectory for the basic aircraft, and then reconstructs the pilot's control displacements necessary to fly this trajectory, given a particular control system architecture. Since the flight control system itself does not add to the acceleration potential of the helicopter, one may evaluate several proposed control laws in terms of the resulting stick inputs for the same maneuver. The method is illustrated through application to implicit and explicit model-following control laws designed for a battlefield helicopter with and without an auxiliary propulsor. It is shown that the technique is a valuable aid for selection of promising control laws for further simulator studies and flight investigations.
Mckillip, Robert M., Jr.↗
Mechanization of and experience with a triplex fly-by-wire backup control system
A redundant three-axis analog control system was designed and developed to back up a digital fly-by-wire control system for an F-8C airplane. Forty-two flights, involving 58 hours of flight time, were flown by six pilots. The mechanization and operational experience with the backup control system, the problems involved in synchronizing it with the primary system, and the reliability of the system are discussed. The backup control system was dissimilar to the primary system, and it provided satisfactory handling through the flight envelope evaluated. Limited flight tests of a variety of control tasks showed that control was also satisfactory when the backup control system was controlled by a minimum-displacement (force) side stick. The operational reliability of the F-8 digital fly-by-wire control system was satisfactory, with no unintentional downmodes to the backup control system in flight. The ground and flight reliability of the system's components is discussed.
Lock, W. P.↗
On Decision-Making Among Multiple Rule-Bases in Fuzzy Control Systems
Intelligent control of complex multi-variable systems can be a challenge for single fuzzy rule-based controllers. This class of problems cam often be managed with less difficulty by distributing intelligent decision-making amongst a collection of rule-bases. Such an approach requires that a mechanism be chosen to ensure goal-oriented interaction between the multiple rule-bases. In this paper, a hierarchical rule-based approach is described. Decision-making mechanisms based on generalized concepts from single-rule-based fuzzy control are described. Finally, the effects of different aggregation operators on multi-rule-base decision-making are examined in a navigation control problem for mobile robots.
Tunstel, Edward↗
Precision Segmented Reflector figure control system architecture
A control system architecture for an actively controlled segmented reflector is described along with a design realization for achieving precision alignment of reflector panels. Performance requirements are derived in part from the Large Deployable Reflector, which is a representative mission, and error allocations are made which consider mirror panel surface errors, position measurement and figure estimation, and position control of both quasi-static and dynamic disturbances. The design uses multiple wavelength interferometric edge sensors and voice coil actuators in conjunction with a hybrid control strategy to correct panel position errors. A unit cell shown to be central to the concept is analyzed. The cell integrates the sensing, actuation, and mechanical functions of a control module together with a reflector panel to form a unitized assembly.
Mettler, E.↗
Load control system
The load control system developed for the shuttle external structural tests is described. The system consists of a load programming/display module, and a load control module along with the following hydraulic system components: servo valves, dump valves, hydraulic system components, and servo valve manifold blocks. One load programming/display subsystem can support multiple load control subsystem modules.
Grosse, J. C.↗
Evaluating Function-as-a-Service (FaaS) frameworks for the Accelerator Control System
As particle accelerator control systems evolve in complexity and scale, the need for responsive, scalable, and cost-effective computational infrastructure becomes increasingly critical. Function-as-a-Service (FaaS) offers an alternative to traditional monolithic architecture by enabling event-driven execution, automatic scaling, and fine-grained resource utilization. This paper explores the applicability and performance of FaaS frameworks in the context of a modern particle accelerator control system, with the objective of evaluating their suitability for short lived and triggered workloads. In this paper, we evaluate prominent open-source FaaS platforms in executing functional logic, triggers, and diagnostics routines. Evaluation metrics consist of cold-start latency, scalability, performance, integration with other open-source tools like Kafka. Experimental workloads were designed to simulate real-world control tasks when implemented as stateless FaaS functions. These workloads were benchmarked under various invocation loads and network conditions. Self-hosted FaaS platforms, when deployed within accelerator networks, offer greater control over execution environment, better integration with legacy systems, and support for real-time guarantees when paired with message queues. Based on lessons learned and evaluation metrics, this paper describes reliability of the FaaS framework for the Accelerator Control Systems (ACS).
Jaikar, A. [Fermilab] (ORCID:0000000332046217)↗
Space Launch System: Core Stage Thrust Vector Control Systems Engineering Challenges in Reusing Heritage Hardware
The Space Launch System (SLS) Core Stage (CS) Thrust Vector Control (TVC) system is comprised of 8 mechanical feedback Shuttle heritage Type III TVC actuators and four RS-25 engines, each attached to a Shuttle heritage gimbal block/bearing. Two actuators are used to move each engine in two planes perpendicular to one another (i.e., pitch and yaw). The TVC system design leverages hardware from the Space Shuttle program as well as new hardware designed specifically for the Core Stage. The Space Shuttle heritage hardware directly reused on SLS includes the Orbiter TVC hydraulic servo-actuators (with two slight design modifications), the Orbiter hydraulic circulation pumps, the Orbiter gimbal block/bearing, and the Solid Rocket Booster hydraulic pumps. The Core Auxiliary Power Unit (CAPU) is derived from the Orbiter Auxiliary Power Unit (APU). The Orbiter and Solid Rocket Booster APU turbines are powered by hot gas produced by catalyzed hydrazine decomposition. On the SLS Core Stage, the CAPU turbine is spun using cold gas tapped-off from the RS-25 to CS liquid hydrogen autogenous pressurization line. While direct reuse or slight modification of existing hardware may seem to be a triple-win for a program in cost, schedule, and technical risk mitigation, those benefits can only be realized when its degree of application in a new system is carefully and thoughtfully managed. The heritage hardware reuse should be prescribed within the heritage design capability and reuse environments must lie within the envelope of heritage qualification testing. Despite the significant test and flight experience of the Shuttle heritage hardware components, successful integration with the newly designed CS TVC components and incorporation into the stage design proved to be a challenge which required re-qualification of the heritage hardware as well as thorough integrated testing to support flight certification. Examples of the challenges that were overcome include: re-qualifying heritage hardware to survive new shock and vibration environments, certifying performance of extensively modified heritage hardware, regenerating design insight due to lack of available heritage vendor data, showing compliance to modern structural design standards, translation of heritage requirements for analog avionics to modern digital avionics, and interfacing heritage mechanical hardware with newly designed avionics. This paper is the second installment in a seven-paper series surveying the design, engineering, test validation, and flight performance of the Core Stage Thrust Vector Control system. This paper will discuss several engineering challenges encountered during the development process for SLS CS TVC and how they were successfully overcome to reach flight readiness.
Thrust Vector Control↗
Dynamic verification of a digital flight control system.
Development of a digital control system dynamic variation technique which accounts for the limitation of available frequency response analyzers. Digital control system theory is briefly reviewed, and generation of the necessary theoretical frequency responses is discussed. Results of the dynamic verification of a digital control system for a Saturn V launch vehicle are presented, and attention is given to the limitations of this technique along with its applicability to other types of digital control systems. A technique for performing open-loop frequency response analyses of a flight program implemented in a 'flight-type' digital computer and interface hardware with vehicle dynamics simulated on an analog computer is described.
Nabers, J. P., Jr.↗
Fiber Optic Control System integration for advanced aircraft. Electro-optic and sensor fabrication, integration, and environmental testing for flight control systems: Laboratory test results
This report presents the data obtained in laboratory testing of the optical sensors and multiplexing architecture developed for flight testing in the NASA F-18 systems research aircraft.
Kessler, Bradley L.↗
Combined air and water pollution control system
A bioaquatic air pollution control system for controlling both water and atmospheric pollution is disclosed. The pollution control system includes an exhaust for directing polluted gases out of a furnace and a fluid circulating system which circulates fluid, such as waste water, from a source, past the furnace where the fluid flow entrains the pollutants from the furnace. The combined fluid and pollutants are then directed through a rock/plant/microbial filtering system. A suction pump pumps the treated waste water from the filter system past the exhaust to again entrain more pollutants from the furnace where they are combined with the fluid (waste water) and directed to the filter system.
Wolverton, Billy C.↗
Hierarchical Robot Control System and Method for Controlling Select Degrees of Freedom of an Object Using Multiple Manipulators
A robotic system includes a robot having manipulators for grasping an object using one of a plurality of grasp types during a primary task, and a controller. The controller controls the manipulators during the primary task using a multiple-task control hierarchy, and automatically parameterizes the internal forces of the system for each grasp type in response to an input signal. The primary task is defined at an object-level of control, e.g., using a closed-chain transformation, such that only select degrees of freedom are commanded for the object. A control system for the robotic system has a host machine and algorithm for controlling the manipulators using the above hierarchy. A method for controlling the system includes receiving and processing the input signal using the host machine, including defining the primary task at the object-level of control, e.g., using a closed-chain definition, and parameterizing the internal forces for each of grasp type.
Abdallah, Muhammad E.↗
Predictive valve control system
A pressure control system may include a plurality of inflatable objects, each of the inflatable objects having a respective pressure sensor and a respective inflation valve, wherein each of the inflation valves has a behavior profile predictive of an amount of current used by the valve when operated. A valve controller of the system may have a pressure management circuit that receives information from the pressure sensors and is configured to automatically maintain a respective selected pressure in each of the inflatable objects by issuing commands to operate the inflation valves. An electrical current management circuit of the valve controller may be configured to predict, based on the valve behavior profiles, what effect the command would have on a total current usage, when executed, and automatically prevent any command that would cause the total current usage to exceed a maximum allowable current.
Piraner, Alexander↗