Theory and Practice of Energy-directed Passive Fault-tolerant Control Systems for Safety-critical Applications

任何事故的真正原因是什么？它是储存能量的一种“不受控制的”释放。人们滑倒；这是势能的不受控制的释放。两辆车相撞；这是动能的不受控制的释放。随着技术的进步，随着我们建造更大的飞机、更大的核反应堆和超高层建筑，人造系统储存的能量越来越多。这些系统中涉及的任何事故往往可以追溯到储存的能量无法控制地释放。多年来，人们提出了不同类型的容错控制系统概念来维护这类系统的安全，但遗憾的是，很少有人研究问题的核心，即如何通过安全的方式有效地重新引导存储的能量，以维护系统边界的完整性。目前的许多容错控制系统依靠外部能源来“压倒”储存的能量，从而改变其路线。这不仅增加了设计和实现的复杂性，而且使系统的安全性更容易受到外部能源故障的影响。具有讽刺意味的是，我们可以问：福岛核电站灾难的原因是什么？答案很简单，因为由于衰变热，反应堆堆芯中留下了太多的“能量”，而由于地震摧毁的电网和海啸摧毁了现场的应急柴油发电机，我们没有足够的外部‘能量’来迅速从衰变热中提取能量。一个值得问的问题是：我们能否通过创新的安全控制系统设计，有效地利用堆芯中的能量来保持自身的凉爽？在拟议的研究中，我们将尝试通过使用状态依赖和能量存储/耗散装置来安全地重新定向存储的能量，从而维护整个系统的安全性。这项研究代表了从传统方法到安全控制系统的范式转变。它改善了加拿大人的安全和工作环境。该项目还将创造一个激励环境，培养9名HQP创造性思维、挑战传统推理方式和创新能力。

What is the true cause of any accident? It is an 'uncontrolled' release of the stored energy. People slip and fall; it is an uncontrolled release of potential energy. Two cars collide; it is an uncontrolled release of kinetic energy. As technology advances, man-made systems store increasingly more energy, as we build bigger planes, larger nuclear reactors, and ultra-tall buildings. Any accident involved in these systems can often be traced back to an uncontrollable release of the stored energy. Over the years, different types of fault-tolerant control system concepts have been proposed to maintain the safety of such systems, but unfortunately, few have examined the heart of the problem, i.e. how to effectively re-direct the stored energy through safe ways so that integrity of the system boundaries are maintained. Many of the current fault-tolerant control systems rely on external energy sources to 'overpower' the stored energy to change its course. This not only increases the complexity of the design and implementation, but also makes the safety of the system more vulnerable to failures of the external energy sources. Ironically, we can ask: what is the cause of the disaster at the Fukushima nuclear power plant? The answer is simply that there is too much 'energy' left in the reactor core due to decay heat, and we do not have sufficient external 'energy' to get the energy from the decay heat out quickly, due to earthquake ruined power grids and tsunami shattered on-site emergency diesel generators. A worthy question to ask is: Can we effectively use the energy in the core to keep itself cool through innovative design of safety control systems?In the proposed research, we will try to redirect the stored energy safely, by using state-dependent and energy storage/dissipation devices, so that the overall system safety can be maintained. This research represents a paradigm shift from traditional approach to safety control systems. It improves the safety, working environment for Canadians. This project will also create a stimulating environment for training 9 HQPs to think creatively, to challenge traditional way of reasoning, and to be innovative.