A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

29
International Journal of Innovative Computing, Information and Control ICIC International c 2012 ISSN 1349-4198 Volume 8, Number 3(A), March 2012 pp. 1743–1771 A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT-TOLERANT CONTROL SYSTEM Hicham Jamouli 1 and Dominique Sauter 2 1 National School of Engineering Science Ibn Zohr University BP 1136, Agadir, Morocco [email protected] 2 Research Center for Automatic Control of Nancy Nancy University BP 70239-54506, Vandeouvre-Les-Nancy [email protected] Received September 2010; revised January 2011 Abstract. This paper deals with the problem of diagnosis of multiple sequential faults using statistical test GLR. Based on the work of Willsky and Jones [50], we propose a modified Generalized Likelihood Ratio (GLR) test, allowing detection, isolation and esti- mation of multiple sequential faults. Our contribution aims to maximise the rate of good decision of fault detection, using another updating strategy. This is based on a reference model updated on line after each detection and isolation of one jump. To reduce the computational requirement, the passive GLR test will be derived from a state estimator designed on a fixed reference model directly sensitive to system changes. We will show that the active and passive GLR tests give an interesting result compared with the GLR of Willsky and Jones [50], and can be easily integrated in a reconfigurable Fault-Tolerant Control System (FTCS) to asymptotically recover the nominal system performances of the jump-free system. Keywords: Generalized likelihood ratio, Sequential jumps detection, Augmented state Kalman filter, Two-stage Kalman filter, Nuisance parameter, Fault-tolerant control sys- tem 1. Introduction. The diagnosis of multiple faults in stochastic systems has been solved by many approaches: observers, parity space and fault detection filters. All these ap- proaches are interested by residual generation, but missing appropriate test for decision. In this work, we will develop a method which takes into account the residual generation problem based Kalman filter, associated with GLR test decision for multiple faults. The GLR test has been used in a wide variety of applications including the detection of sensor and actuator failures [15,49,50], electrocardiogram analysis [18], geophysical signal processing [4] and freeways supervision [51]. For sequential jumps detection in discrete- time stochastic linear systems, the GLR test is made of the following steps: 1) Detection and isolation of one possible jump by applying a GLR detector on the innovation sequence of the Kalman filter designed on the jump-free system. 2) Updating of the Kalman filter using the jump magnitude estimate given by the GLR detector. 3) Go to the Step 1 to detect, isolate and estimate another possible jump from measure- ments immediately available after the detection time of the last jump. 1743

Transcript of A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

Page 1: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

International Journal of InnovativeComputing, Information and Control ICIC International c⃝2012 ISSN 1349-4198Volume 8, Number 3(A), March 2012 pp. 1743–1771

A GENERALIZED LIKELIHOOD RATIO TEST FOR AFAULT-TOLERANT CONTROL SYSTEM

Hicham Jamouli1 and Dominique Sauter2

1National School of Engineering ScienceIbn Zohr University

BP 1136, Agadir, [email protected]

2Research Center for Automatic Control of NancyNancy University

BP 70239-54506, [email protected]

Received September 2010; revised January 2011

Abstract. This paper deals with the problem of diagnosis of multiple sequential faultsusing statistical test GLR. Based on the work of Willsky and Jones [50], we propose amodified Generalized Likelihood Ratio (GLR) test, allowing detection, isolation and esti-mation of multiple sequential faults. Our contribution aims to maximise the rate of gooddecision of fault detection, using another updating strategy. This is based on a referencemodel updated on line after each detection and isolation of one jump. To reduce thecomputational requirement, the passive GLR test will be derived from a state estimatordesigned on a fixed reference model directly sensitive to system changes. We will showthat the active and passive GLR tests give an interesting result compared with the GLRof Willsky and Jones [50], and can be easily integrated in a reconfigurable Fault-TolerantControl System (FTCS) to asymptotically recover the nominal system performances ofthe jump-free system.Keywords: Generalized likelihood ratio, Sequential jumps detection, Augmented stateKalman filter, Two-stage Kalman filter, Nuisance parameter, Fault-tolerant control sys-tem

1. Introduction. The diagnosis of multiple faults in stochastic systems has been solvedby many approaches: observers, parity space and fault detection filters. All these ap-proaches are interested by residual generation, but missing appropriate test for decision.In this work, we will develop a method which takes into account the residual generationproblem based Kalman filter, associated with GLR test decision for multiple faults.

The GLR test has been used in a wide variety of applications including the detection ofsensor and actuator failures [15,49,50], electrocardiogram analysis [18], geophysical signalprocessing [4] and freeways supervision [51]. For sequential jumps detection in discrete-time stochastic linear systems, the GLR test is made of the following steps:

1) Detection and isolation of one possible jump by applying a GLR detector on theinnovation sequence of the Kalman filter designed on the jump-free system.

2) Updating of the Kalman filter using the jump magnitude estimate given by the GLRdetector.

3) Go to the Step 1 to detect, isolate and estimate another possible jump from measure-ments immediately available after the detection time of the last jump.

1743

Page 2: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1744 H. JAMOULI AND D. SAUTER

Following the notations used in [52] or in [5], the updating strategy of [50], based onthe incrementation of the state estimate xk and the state estimate error covariance matrixPk of the Kalman filter, works as follows:

xnewk = xold

k + [αj(k, r)− βj(k, r)] ν(k, r) (1)

P newk = P old

k + [αj(k, r)− βj(k, r)]Pν(k, r) [αj(k, r)− βj(k, r)]

T (2)

where (xnewk , P new

k ) and (xoldk , P old

k ) represent the new and the old state estimation ofthe Kalman filter, αj(kj, r) and βj(kj, r) the jump signatures on the state and the stateestimate, r the jump occurrence time estimate and (ν(k, r), P ν(k, r)) the jump magnitudeestimate given by the GLR detector. Immediately after the updating strategy (1), theinnovation sequence of the resulting Kalman filter is given by

γnewk = γold

k − ρj(k, r)ν(k, r) (3)

Hnewk = Hold

k + ρj(k, r)Pν(k, r)ρj(k, r)

T (4)

where (γnewk , Hnew

k ) and (γoldk , Hold

k ) represent the new and the old innovation sequence ofthe Kalman filter and ρj(k, r) = C [αj(k, r)− βj(k, r)] the signature of jump. A GLRdetector is then applied on γnew

k to detect another possible jump. Some critics can bemade about this updating strategy:

• What is the significant meaning of (xnewk , P new

k ) and (γnewk , Hnew

k ) consequently;• What are the stability and convergence conditions of the resulting Kalman filter;• The threshold level of the GLR detector must be chosen to solve a tradeoff betweenfast detection and accurate jump estimation;

• γnewk is not guaranteed to be minimum variance white innovation sequence, a neces-

sary condition to minimize the rate of false alarms;• The Kullback divergence is not guaranteed to be maximized with respect to the newpossible jumps, a necessary condition to maximize the rate of good decisions [4].

The first part of the paper revisits the standard GLR test of Willsky and Jones [50]in relation with the fault detectability indexes [27] describing the time delay between theoccurrence of a jump and its effect on measurements. In this part, we also derive a modifiedform of the standard GLR test avoiding the tradeoff between fast detection and accurateestimation. The necessary and sufficient conditions for multiple jumps detectability anddistinguishability are established.The second part presents the active GLR test. We will show that the updating strategy

(1) and (2) have a significant meaning for the Kalman filter designed on a new referencemodel including the original state vector of the system and the states of jumps detectedand isolated during the processing. The stability and convergence conditions of the aug-mented state Kalman filter designed on the new reference model will be established andlinked with the multiple jumps detectability conditions given in part 1. Its innovationsequence will be guaranteed to be a minimum variance white innovation sequence and theKullback divergence,

δnewi (k, r) =k∑

t=r

[ρnewt (t, r)TH−1

t ρnewt (t, r)](νnew)2 (5)

depending to the new jump signatures ρnewi (k, r), will be maximized with respect to thenew possible νnew. By considering the old jumps (the jumps detected and isolated duringthe processing) as nuisance parameters, the equivalence between the active GLR test andthe minmax test of basseville and Nikiforov [5] will be established. The active GLR testwill be made of the following steps:

1) Detection and isolation of one jump by the GLR detector;

Page 3: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1745

2) Updating the reference model of the system with the jump state initializing the aug-mented state Kalman filter using the jump magnitude estimate given by the GLRdetector;

3) Go to the first step to treat another possible jump from measurements immediatelyavailable after the detection time of the last jump.

To reduce the computational requirement of the active GLR test, the third part ofthis paper presents the passive GLR test. Based on the augmented state Kalman filterdesigned on a fixed reference model including all the states of hypothetical jumps at thebeginning of the processing, the updating strategy will be based on the incrementationof the state estimate and the state estimate error covariance matrix after each detectionof one jump as in [50]. Less power than the active GLR test, we will show that it can bemixed with the active GLR test to derive a complete strategy allowing the treatment ofthe appearance and the disappearance of sequential jumps.

A Fault-Tolerant Control System (FTCS) is a control system that possesses the abil-ity to accommodate system component failures automatically. The existing methods forreconfigurable controller design can be classified as linear quadratic regulator [31], eigen-structure assignment [24], multiple model [35], adaptive control [7], pseudo-inverse [8] andmodel following [19]. In general, a FTCS works as follows: a suitable Fault Detection andIsolation (FDI) strategy identifies the faults and their estimations are used to generateadditional input signals which are superimposed to the nominal control inputs in such away that the influence of the faults on the regulated variables is rejected. To integratethe standard GLR test in a FTCS, Willsky [49] has proposed a control law of the formuk = −Lxnew

k . To do the same with our active GLR test, the part 5 proposes the design of

a linear Quadratic Gaussian (LQG) regulator [2] of the form uk = −LXk, where Xk willbe the state prediction of the updated reference model, and thus reconfigurated on-lineafter each detection and isolation of one jump.

The last part of this paper proposes a comparative study between the modified GLRtest presented in part 2 and the active GLR test for the treatment of sequential actuatorjumps in dynamic systems. We will show that the active GLR test is very power whenquick detections lead to bad jump estimations and thus very useful in a FTCS to maximizethe rate of good decisions specially in regard to the appearance of big jumps which maygreatly affect the nominal performance of the closed-loop system.

2. The GLR Test of Willsky and Jones. This part revisits the GLR test of Willskyand Jones [50] in relation with the multi-hypotheses GLR test described in [52]. Assumethat the model of the “no jump” hypothesis h0 is given by

xk+1 = Axk +Buk + uk (6)

yk = Cxk + vk (7)

where xk ∈ ℜn is the state vector, yk ∈ ℜm the measurement vector, uk ∈ ℜr the inputvector. The zero mean white gaussian noises wk and vk satisfy

E

[ωk

υk

] [ωTj υT

j

]=

[W 00 V

]δk,j (8)

where W ≥ 0 and V > 0 and the Gaussian initial state x0, ˆx0 = E(x0) and P0 =

E((x0 − E(x0)) (x0 − E(x0))

T). The jump hypotheses hi for i ∈ [1, . . . , N ] are modelized

by

xk+1 = Axk +Buk + fi(k, r)ν(k, r) + wk (9)

yk = Cxk + vk (10)

Page 4: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1746 H. JAMOULI AND D. SAUTER

where fi(k, r) is the fault distribution vector, ν(k, r) the scalar fault magnitude, r theunknwon time of failure occurrence. Without lost of generality, the fault magnitudeν(k, r) is assumed to follows a constant bias model: ν(k, r) = ν, (k ≥ r) with step profile:fi(k, r) = fi, (k ≥ r) and fi(k, r) = 0, (k < r).Let ρi = min(s : CAs−1fi = 0, s = 1, 2, . . .) for i ∈ [1, . . . , N ].The jump detectability indexes [27] and assume that ρi < ∞ signifying that the first

information about the jump hi, appearing at time r, will be present on measurementyr+ρi . In the case where the jumps may occur relatively infrequently, the most likelihoodreference model at the beginning of the processing is the model of h0. So, under thestability and convergence conditions

rang

[zI − A

C

]= n, |z| ≥ 1. (11)

and

rang[−ejwI + A W 1/2

]= n, w ∈ [0, 2π] (12)

The Kalman filter which gives the maximum likelihood state prediction of the jump-freesystem is given by

ˆxk+1 = Aˆxk +Buk + Kk(yk − C ˆxk) (13)

Pk+1 = (A−KkC)Pk(A−KkC)T +W + KkV KTk (14)

Hk = CPkCT + V (15)

Kk = APkCT H−1

k (16)

The additive effect of jump hi on the state prediction error ek+1 = xk+1 − ˆxk+1 and onthe innovation sequence γ = yk − C ˆxk can be expressed as

ek+1 = ek+1 + ζi(k + 1, r)ν (17)

γk = γk+1 + ϱi(k, r)ν (18)

where ek+1 and γk represent the state prediction error and the innovation sequence on thejump-free system and where ζi(k, r) and ϱi(k, r) describes the additive effect of the jumpsatisfying

ζi(k + 1, r) = (A− KkC)ζi(k, r) + fi, ζi(r, r) = 0 (19)

ϱi(k, r) = Cζi(k, r) (20)

In [52] or [5], ζi(k, r) = αi(k, r) − βi(k, r) where αi(k, r) and βi(k, r) describe theadditive effect of the jump on the state vector of the system and on the state vector ofthe Kalman filter, respectively. Our formulation shows that the jump signatures (19) onlydepend to the state prediction error of the Kalman filter and thus are decoupled from uk

(this property will be used in the design of the FTCS). The jump hypothesis hi can beconfronted to the “no-jump” hypothesis h0 as

H0 : E(γt) = 0, t < r (21)

Hi : E(γt) = ϱi(t, r)ν, k ≥ t ≥ r, i ∈ [1, . . . , N ] (22)

Since E(γk−t − E(γk−t))(γk − E(γk))

T= 0 ∀t < k, the likelihood ratio between (21)

and (22) gives

λi(k, r, ν) =P (γ0/h0) . . . P (γri+ρi/hi) . . . P (γk/hi)

P (γ0/h0) . . . P (γri+ρi/h0) . . . P (γk/h0)(23)

Page 5: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1747

From Equation (20), we have ϱi(r, r) = ϱi(r+ 1, r) = . . . = ϱi(r+ ρi − 1, r) = 0 leadingto

P (γri/hi) = P (γri/h0),

P (γri+1/hi) = P (γri+1/h0),

...

P (γri+ρi−1/hi) = P (γri + ρi − 1/h0)

(24)

and the likelihood ratio (23) can be rewritten

λi(k, r, ν) =P (γri+ρi/hi) . . . P (γk/hi)

P (γri+ρi/h0) . . . P (γk/h0)=

exp

(−1

2

k∑t=r+ρi

∥γt − ϱi(t, r)ν∥2H−1t

)

exp

(−1

2

k∑t=r+ρi

∥γt∥2H−1t

) (25)

Based on γ0, . . . , γk, the maximum likelihood prediction of ν conditioned on a particularassumed value of r is given by

ν(k + 1, r) =

[k∑

t=r+ρi

ϱTi (t, r)H−1t ϱi(t, r)

]−1 k∑t=r+ρi

ϱTi (t, r)H−1t γt (26)

and the log-likelihood ratio Ti(k, r) = 2 log(λi(k, r, ν(k + 1, r))) can be written

Ti(k, r) = bi(k, r)2ai(k, r)

−1 (27)

ai(k, r) =k∑

t=r+ρi

ϱTi (t, r)H−1t ϱi(t, r) (28)

bi(k, r) =k∑

t=r+ρi

ϱTi (t, r)H−1t γt (29)

So, the decision rule of the GLR detector is as follows:

maxi∈[1,...,N ], r∈[0,...,k]

Ti(k, r − ρi) > ε (30)

where ε is the decision threshold. For a practical implementation of the GLR detector(30), the translated jump occurrence time r must be constrained to belong to the slidingwindows W = [k −M ≤ r ≤ k] of size M . In this case, (30) can be rewitten

maxi∈[1,...,N ], r∈W

Ti(k, r − ρi) > ε (31)

if maxTi(k, r − ρi > ε then one jump is detected at time k, isolated from (j, ˆr) =

argmaxTi(k, r−ρi) where r = ˆr−ρj is the estimation of the jump occurrence time andwhere

ν(k + 1, r) = aj(k, r)−1bj(k, r) (32)

P ν(k + 1, r) = aj(k, r)−1 (33)

represent the maximum likelihood prediction of the jump magnitude based on measure-ments until time k under the assumption that ν has an infinite a priori covariance.

The second step of the standard GLR test, intuitively obtained from relation (17),consists to update the Kalman filter (13) by prediction and covariance incrementation of

Page 6: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1748 H. JAMOULI AND D. SAUTER

the Kalman filter (13) as follows:

xnewk+1 = ˆxold

k+1 + ζj(k + 1, r)ν(k + 1, r) (34)

P newk+1 = P old

k+1 + ζj(k + 1, r)Pζj(k + 1, r)T (35)

where the new state prediction (xnewk+1, P

newk+1 ) is substituted in the Kalman filter (13) (see

Figure 1 in [50]. In the original version of the GLR test, the state variables of the matchedfilters ζi(k, r) for i ∈ [1, . . . , N ] are reinitialized to zero immediately following the filterincrementation leading to consider (xnew

k+1, Pnewk+1 ) as a new initialization of the Kalman

filter more appropriate than the initial value given at the beginning of the processing [5].With this implementation, Equation (32) cannot be used to improve the jump estimationfrom measurements available after its detection leading to choose the threshold level ε bysolving a compromize between fast detection and accurate estimation.To avoid this treadeoff, we can modify this implementation in such a ways that (xnew

k+1,P newk+1 ) is not substituted in the Kalman filter but used to generate the auxiliary innovation

sequence γk = yk − Cxnewk and its covariance matrix Hk = CP new

k CT + V expressed

γk = γk − ϱj(k, r)ν(k, r) (36)

Hk = Hk + ϱj(k, r)Pν(k, r)ϱj(k, r)

T (37)

where γk and Hk represent the innovation sequence of the Kalman filter (13) and itscovariance matrix. Now decoupled to the updating strategy, the Kalman filter (13), (32)and (19) can be used to improve the jump estimation from measurements available afterits detection time and another possible jump can then be treated by the following GLRdetector

maxi∈[1,...,N ], i=j r∈W

Ti(k − ρi, r) > ε (38)

with

Ti(k, r) = bi(k, r)2ai(k, r)

−1 (39)

ai(k, r) =k∑

t=r+ρi

ϱTi (t, r)H−1t ϱi(t, r) (40)

bi(k, r) =k∑

t=r+ρi

ϱTi (t, r)H−1t γt (41)

where the jump signatures ϱi(t, r) are computed from Equation (19) after having reini-tialized ζi(k, r) for i = j to zero immediately after the detection time of the first jump.The active GLR test will give a significant meaning of the auxiliary innovation sequence36 and 37.

3. Statistical and Geometrical Detectability and Distinguishability Conditionsof Jumps. The probability of false alarms is given by P F =

∫∞ε

p(T = x/h0)dx whereP (T = x/h0) is the probability density of Ti(k, r) conditioned on h0 which follows a Chi-squared density with one degrees of freedom. The probabilities PD

i of correct detection ofthe jump hi are given by PD

i =∫∞ε

p(Ti = x/hi)dx where p(Ti = x/hi) is the probabilitydensity of Ti(k, r) conditioned on hi which follows a noncentral Chi-squared density withone degrees of freedom with the noncentrality parameter δi(k, r) = ai(k, r)ν

2. The proba-bility of false isolations, i.e., the probability to detect a jump hi when the jump hj (j = i)is appeared on the system, is given by PD

ij =∫∞ε

p(Ti = x/hj)dx where p(Ti = x/hj) is the

Page 7: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1749

probability density of Ti(k, r) conditioned on hj which follows a noncentral Chi-squareddensity with one degrees of freedom with the noncentrality parameter

δij(k, r) =

[aij(k, r)

2ν2

ai(k, r)

](42)

with aij(k, r) =k∑

t=r+ρi

ϱTi (t, r)H−1t ϱj(t, r).

The probabilities PDi and PD

ij depend to the size the sliding window and the choice ofthe decision threshold ε is the main drawback of the GLR detector [4]. In this paper, εwill be only chosen to fixe the false alarms rate P F .

Theorem 3.1. Under Equations (11) and (12), the jump hypothesis hi is statisticallydetectable and distinguishable from each other if and only if

rank[CAρ1−1f1 . . . CAρi−1fi . . . CAρN−1fN

]= N (43)

rank

[I − A f1 . . . fNC 0

]= n+N (44)

Proof: The jump hypothesis hi is statistically detectable and distinguishable fromeach other if and only if the Kullback divergence (Kullback, 1959) defined by δ(k, r) =νTa(k, r)ν satisfies δ(k, r) > 0 ∀k ≥ r with ν ∈ ℜN = 0 where

a(k, r) =

a1(k, r − ρ1) . . . a1i(k, r − ρ1) . . . a1N(k, r − ρ1)

......

......

ai1(k, r − ρi) . . . ai(k, r − ρi) . . . aiN(k, r − ρi)...

......

...aN1(k, r − ρN) . . . aNi(k, r − ρN) . . . aN(k, r − ρN)

(45)

Let

ζ(k, r) =[ζ1(k, r − ρ1) . . . ζi(k, r − ρi) . . . ζN(k, r − ρN)

](46)

ϱ(k, r) =[ϱ1(k, r − ρ1) . . . ϱi(k, r − ρi) . . . ϱN(k, r − ρN)

](47)

satisfying

ζ(k + 1, r) = (A− KkC)ζ(k, r) + F (48)

ϱ(k, r) = Cζ(k, r) (49)

with F =[f1 . . . fi . . . fN

].

We have

a(k, r) > 0 ⇔k∑

t=r+1

ϱT (t, r)H−1t ϱ(t, r) + ϱ(r, r)T H−1

r ϱ(r, r) > 0 (50)

where ϱ(r, r) =[CAρ1−1f1 . . . CAρi−1fi . . . CAρN−1fN

]and a(k, r) > 0 is satisfied

under Equation (43).Another jump detectability condition has been proposed by [60]: The jump hypothesis

hi is statisticaly detectable and distinguishable from each other if the Kullback divergencea(k, r) strictly increases with time, in other words if

a(k, r) > 0 ∀k > r where a(k, r) = a(k, r)− a(k − 1, r) (51)

The Kullback increment is given by a(k, r) = ϱ(k, r)T H−1k ϱ(k, r). Under Equations

(11) and (12), A− KC has all its eigenvalues inside the unit circle (i.e., P is a stabilizing

Page 8: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1750 H. JAMOULI AND D. SAUTER

solution of (14)) and Equation (48) gives

lim|k|→∞

ϱ(k, r) = C[I − (A− KC)

]−1F =

[I + C(I − A)−1K

]−1C(I − A)−1F (52)

If I − A is nonsingular, the relation C(I − A)−1F = 0 cannot be satisfied underrank (ϱ(r, r)) = N and Equation (43), Equation (44) ensures that F does not belongto the null space of C(I −A)−1. So, lim

|k|→∞a(k, r) > 0 and the Kullback divergence a(k, r)

is not satured.What is the condition to have a(k, r) > 0, ∀k > r with k < ∞ signifying that any

new observation bring new information about possible jump: Let P ν(k, r) = a(k− 1, r)−1

satisfy the following Riccati difference equation:[Pk+1 00 P ν(k + 1, r)

]=

[APAT +W − KkCPAT 0

0 [I −Kν(k, r)ϱ(k, r)]P ν(k, r)

](53)

where Kν(k, r) = P ν(k, r)ϱ(k, r)T[CPkC

T + V + ϱ(k, r)P ν(k, r)ϱT (k, r)]−1

or equiva-lently

Ω(k + 1, r) = AΩ(k, r)AT + ΓW ΓT − AΩ(k, r)CT (CΩ(k, r)CT + V )−1CΩ(k, r)AT (54)

where

Ω(r, r) =

[Pr + ζ(r, r)P ν(r, r)ζ(r, r)T ζ(r, r)P ν(r, r)

P ν(r, r)ζ(r, r)T P ν(r, r)

],

A =

[A F0 I

], C =

[C 0

] (55)

and Γ =

[I0

](the equivalence between (53) and (54) will be more clearly explained in

the design of the active GLR test). Under Equation (12), the pair(A, ΓW 1/2

)has N

unreachable modes on the unit circle and the convergence condition of (53) to a strongsolution is given by

rank

[Iz − A

C

]= n+N, ∀z ∈ C, |z| ≥ 1 (56)

The detectability of the pair (A, C) corresponds to the geometrical detectability con-dition of jumps given by Caglayan [8]. Under Equation (11), Equation (56) is reducedto Equation (44) and ensures the asymptotical convergence of P ν(k, r) to zero with theinitial condition P ν(r, r) > 0. So, P ν(k + 1, r) < P ν(k, r) and a(k, r) > 0, ∀k > r withk < ∞. Under Equation (43), we conclude that the results of [60] coincide with the resultsof [8].

4. The Active GLR Test. The first part of this chapter gives a significant meaning ofthe auxiliary innovation sequence (36) and (37) used in the modified GLR test by showingthat Equations (1) and (2) are include in the augmented state Kalman filter[

xk+1

νk+1

]= Xk+1 = AXk + Buk +Kkγk (57)[

P xk+1 P xν

k+1

P νxk+1 P ν

k+1

]= Ωk+1 = AΩkA

T + ΓW ΓT − AΩkCT(CΩkC

T + V)−1

CΩkAT (58)

Kk =

[Kx

k

Kνj

k

]= AΩkC

TH−1k , Hk = CΩCT + V (59)

Page 9: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1751

designed on the new reference model hj rewritten

Xk+1 = AXk + Buk + Γwk (60)

yk = CXk + vk (61)

with Xk =

[xk

νk

], A =

[A fj0 1

], B =

[B0

], C =

[C 0

]and Γ =

[I0

]where

xk+1 = xnewk+1 and P x

k+1 = P newk+1 represents the maximum likelihood prediction of the

original state xk but the belonging now to augmented state Xk.

Theorem 4.1. In the two-stage Kalman filter of Friedland [16] which optimaly implement(5), the updating strategy (1) rewritten

xk+1 = ˆxk+1 + ζj(k + 1, r)ν(k + 1, r) (62)

Pk+1 = Pk+1 + ζj(k + 1, r)P ν(k + 1, r)ζj(k + 1, r)T (63)

have the following significant meaning:(ˆxk+1, Pk+1

)is the state prediction of the jump-free

system; (xk+1, Pk+1) is the reconfigurated state prediction of the faulty system (ν(k + 1, r) ;P ν(k + 1, r)) is the prediction of the jump magnitude, and is optimal under r extremelywell estimated if the augmented sate Kalman filter (5) is correctly initialized at the detec-tion time of the jump with

Xk =

[I ζj(k, r)0 1

] [ˆxk

ν(k, r)

]Ωk =

[I ζj(k, r)0 1

] [Pk 00 P ν(k, r)

] [I ζj(k, r)0 1

]T (64)

from the quantities(ˆxk, Pk

), (ν(k, r), P ν(k, r)) and ζj(k, r) given by the GLR detector.

Proof: At time tj = r+ρj, (32) represents the minimum-time prediction of ν given by

ν(tj + 1, r) =[(CAρj−1fj

)TH−1

tj

(CAρj−1fj

)]−1 (CAρj−1fj

)TH−1

tj γtj (65)

P ν(tj + 1, r) =[(CAρj−1fj

)TH−1

tj

(CAρj−1fj

)]−1

(66)

under the assumption that ν has an infinite a priori covariance since ϱj(k, r) = 0 for k < tjand ϱj(tj, r) = CAρj−1fj. So, the updating strategy (1) and (2) applied at time tj givesby

xtj+1 = ˆxtj+1 + ζj(tj + 1, rj)ν(tj + 1, r) (67)

Ptj+1 = Ptj+1 + ζj(tj + 1, r)P ν(tj + 1, r)ζj(tj + 1, r)T (68)

and can be used to define the Gaussian state prediction of the initial state Xtj+1 as

Xtj+1 =

[xtj+1

ν(tj + 1, r)

]Ωtj+1 =

[Ptj+1 ζj(tj + 1, r)P ν(tj + 1, r)

P ν(tj + 1, r)ζj(tj + 1, r)T P ν(tj + 1, r)

] (69)

The augmented state Kalman filter (5) can be implemented from the two-stage Kalmanfilter of Friedland [16] described by

xk+1 = ˆxk+1 + ζk+1νk+1 (70)

Pk+1 = Pk+1 + ζk+1Pνk+1ζ

Tk+1 (71)

Page 10: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1752 H. JAMOULI AND D. SAUTER

where(ˆxk+1, Pk+1

)are given by the Kalman filter designed under h0

ˆxk+1 = Aˆxk +Buk + Kk(yk − C ˆxk) (72)

Pk+1 = APkAT +W − APkC

T (CPkCT + V )−1CPkA

T (73)

Kk = APkCT H−1

k (74)

Hk = CPkCT + V (75)

where (νk+1, Pνk+1) are given the jump filter

νk+1 = νk +Kνkγk (76)

P νk+1 = P ν

k − P νk ϱ

TkH

−1k ϱkP

νk (77)

Kνk = P ν

k ϱTkH

−1k (78)

γk = γk − ϱkνk (79)

Hk = Hk + ϱkPνk ϱ

Tk (80)

from the coupling equations

ζk+1 = (A− KkC)ζk + fj (81)

ϱk = Cζk (82)

From Equation (19), the initial values of the two-stage Kalman filter are[ˆxtj+1

νtj+1

]=

[I −ζtj+1

0 1

]Xtj+1 =

[ˆxtj+1

ν(tj + 1, r)

](83)[

Ptj+1 00 P ν

tj+1

]=

[I −ζtj+1

0 1

]Ωtj+1

[I −ζtj+1

0 1

]T=

[Ptj+1 00 P ν(tj + 1, r)

](84)

with ζtj+1 = ζj(tj + 1, r).After some manipulations, ν can be rewritten in the form of a recursive filter

ν(k + 1, r) = ν(k, r) +Kνkγk (85)

P ν(k + 1, r) = P ν(k, r)− P ν(k, r)ϱTj (k, r)H−1k ϱj(k, r)P

ν(k, r) (86)

Kνk = P ν(k, r)ϱTj (k, r)H

−1k (87)

γk = γk − ϱj(k, r)νk (88)

Hk = Hk + ϱj(k, r)Pν(k, r)ϱTj (k, r) (89)

We can verify that Equations (76) and (81) optimally implement Equation (85) closingthe proof of Theorem 4.1.To avoid the tradeoff between fast detection and accurate estimation, we conclude that

the innovation sequence which must be used to detect, isolate and estimate a new jump isthe innovation sequence of the jump filter (85) and (89) equals to the auxiliary innovationsequence (36) and (37) used in modified GLR test. This innovation sequence is also theinnovation sequence of the augmented state Kalman filter guaranted to be a minimumvariance white innovation sequence allowing the design of a GLR detector.

Theorem 4.2. After having initialized the augmented state Kalman filter (57) at thedetection time of the first jump with the help of Theorem 4.1, another possible jump canbe detected, isolated and estimated by the following GLR detector

maxi∈[1,...,N ], i =j r∈W

Ti(k, r − ρi) > ε (90)

Page 11: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1753

with

T newi (k, r) = bnewi (k, r)2anewi (k, r)−1 (91)

anewi (k, r) =k∑

t=r+ρi

[ϱnewi (t, r)]TH−1t ϱnewi (t, r) (92)

bnewi (k, r) =k∑

t=r+ρi

[ϱnewi (t, r)]TH−1t γt (93)

where the new jump signatures ϱnewi (t, r) are recursively computed as

ζnewi (k + 1, r) = (A− KkC)ζnewi (k, r) +

[fi0

], ζnewi (r, r) = 0 (94)

ϱnewi (k, r) = Cζnewi (k, r) (95)

where ζnewi (t, r) represents the additive effect of a new jump on the augmented state pre-diction error of the Kalman filter (5).

Proof: The jump hypotheses (9) and (10), noted hnewi for i ∈ [1, . . . , N ] and i = j, can

be modelized in relation with the new reference model (60) as

Xk+1 = AXk + Buk +

[fi(k, r)

0

]νnew(k, r) + Γwk (96)

yk = CXk + vk (97)

and can be confronted from the augmented state Kalman filter (57) as

hj : E(γt) = 0, t < r (98)

hnewi : E(γt) = ϱnewi (t, r)νnew, k ≥ t ≥ r, i ∈ [1, . . . , N ] and i = j (99)

where the additive effect of hnewi on its state prediction error

[exkeνk

]= Xk − Xk and on

its innovation sequence γk = yk − CXk is described by Equations (94) and (95). We have

E(γk−t − E(γk−t))(γk − E(γk))T = 0, ∀t < k (100)

and ϱnewi (r, r) = 0 and so until ϱnewi (r + ρi − 1, r) = 0 where ϱnewi (r + ρi, r) = CAρi−1fi(the detectability indexes ρi have not lost their significant meaning). So, the likelihoodratio between hnew

i (i = j) and hj is given by

λnewi (k, r, νnew) =

exp

(−1

2

k∑t=r+ρi

∥γt − ϱnewi (t, r)νnew∥2H−1

t

)

exp

(−1

2

k∑t=r+ρi

∥γt∥2H−1t

) (101)

Based on measurements until time k, the maximum likelihood prediction of νnew con-ditioned on r is given by

νnew(k + 1, r) =

[k∑

t=r+ρi

ϱnewi (t, r)T H−1t ϱnewi (t, r)

]−1 k∑t=r+ρi

ϱTi (t, r)H−1t γt (102)

Substituting Equation (102) in (101), we obtain the log-likelihood ratio

T newi (k, r) = 2 log(λnew

i (k, r, νnew(k + 1, r))) (103)

Page 12: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1754 H. JAMOULI AND D. SAUTER

So, if maxi∈[1,...,N ], r∈[0,...,k]

T newi (k, r − ρi) > ε, then a new jump is detected and isolated

from (j, ˆr) = argmaxT newi (k, r − ρi) and its estimation is given by

ν(k + 1, r) = anewj (k, r)−1bnewj (k, r) (104)

P ν(k + 1, r) = anewj (k, r)−1 (105)

with r = ˆr − ρj closing the proof.

Theorem 4.3. The first step of the active GLR test described by Theorems 4.1 and4.2 follows the minmax strategy developed by Basseville and Nikiforov [5]. The Kullbackdivergence between hnew

i and hj given by

δnewi (k, r) =k∑

t=r

[ϱnewi (t, r)TH−1

t ϱnewi (t, r)](νnew)2 (106)

is maximized with respect to νnew and satisfies δnewi (k, r) ≥ δi(k, r) where

δi(k, r) =k∑

t=r

[ϱi(t, r)

TH−1t ϱi(t, r)

](νnew)2 (107)

is the Kullback divergence derived from the modified GLR test presented in part 2. Therate of good decisions will then be always superior to those obtained by the modified GLRtest.

Proof: From the Kalman filter (13), the jump hypotheses hnewi can be confronted as

hj : γt = ϱtνold, t < r (108)

hnewi : γt =

[ϱi(t, r) ϱt

] [ νnew

νold

],

k ≥ t ≥ r + ρi, i ∈ [1, . . . , N ] for i = j (109)

where νold can be viewed as a nuisance parameter. Using the optimal prediction of νold

under hj and hnewi given by νt+1 and νt+1 + ζνi (t+1, r)νnew respectively where ζνi (t+1, r)

describes the additive effect of the new jump on the bias filter (76) given by

ζνi (t+ 1, r) = (I −Kνt ϱt)ζ

νi (t, r)−Kν

t ϱi(t, r) with ζνi (r, r) = 0 (110)

the jump hypotheses (108) and (109) can be equivalently confronted as

hj : γt = ϱtνt+1, t < r

hnewi : γt =

[ϱi(t, r) ϱt

] [ νnew

νt+1 + ζνi (t+ 1, r)νnew

],

t ≥ r + ρi, i ∈ [1, . . . , N ] for i = j

(111)

or

hj : E (γt − ϱtνt+1) = 0, t < r (112)

hnewi : E (γt − ϱtνt+1) = [ϱi(t, r) + ϱtζ

νi (t+ 1, r)] νnew (113)

t ≥ r + ρi, i ∈ [1, . . . , N ], i = j

The likelihood ratio between (113) and (114) gives

Page 13: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1755

λnewi (k, r, νnew) =

exp

(−1

2

k∑t=r+ρi

∥(I − ϱtKνt ) (γt − ϱtν − [ϱi(t, r) + ϱtζ

νi (t, r)] ν

new)∥2Q−1

t

)

exp

(−1

2

k∑t=r+ρi

∥(I − ϱtKνt ) (γt − ϱtνt)∥2Q−1

t

)(114)

where

Qt = (I − ϱtKνt )Ht(I − ϱtK

νt )

T (115)

since

γt − ϱtνt+1 = (I − ϱtKνt ) (γt − ϱtνt) (116)

ϱi(t, r) + ϱtζνi (t+ 1, r) = (I − ϱtK

νt ) (ϱi(t, r) + ϱtζ

νi (t, r)) (117)

or

λi(k, r, νnew) =

exp

(−1

2

k∑t=r+ρi

∥(γt − ϱtνt − [ϱi(t, r) + ϱtζνi (t, r)] ν

new)∥2H−1t

)exp

(−1

2

k∑t=r+ρi

∥(γt − ϱtνt)∥2H−1t

) (118)

From the transformation Tk =

[I −ζk0 I

]used in appendix 1, let Tkζ

newi (k, r) =[

ζi(k, r)ζνi (k, r)

]. So, the new fault signatures (94) can then be equivalently computed as

Tk+1ζnewi (k + 1, r) = Tk+1(A−KkC)T−1

k Tkζnewi (k, r) + Tk+1

[fi0

]ϱnewi (k, r) = CT−1

k Tkζnewi (k, r)

(119)

leading to [ζi(k + 1, r)ζνi (k + 1, r)

]=

[A− KkC 0−Kν

kC I −Kνkϱk

] [ζi(k, r)ζνi (k, r)

]+

[fi0

],[

ζi(r, r)ζνi (r, r)

]= 0,

ϱnewi (k, r) = C[I ζk

] [ ζi(r, r)ζνi (r, r)

] (120)

where Equation (120) gives ϱnewi (k, r) = ϱi(k, r) + ϱkζνi (k, r). We conclude that Equation

(118) is equivalent to Equation (101). From the two-stage Kalman filter results, we canverify that P ν

i (k+1, r) = anewi (k, r)−1 satisfying the following Riccati Difference equation[Ω 00 P ν

i (k + 1, r)

]=

[AΩAT + W −KkCΩkA

T 00 [I −Kν

i (k, r)ϱnewi (k, r)]P ν

i (k, r)

](121)

whereKνi (k, r) = P ν

i (k, r)ϱnewi (k, r)T

[CΩkC

T + V + ϱnewi (k, r)P νi (k, r)ϱ

newi (k, r)T

]−1min-

imizes the trace of P νi (k+1, r) (and where the gain of the augmented state Kalman filter

Kk minimize the trace of Ωk+1) and the Kullback divergence δnewi (k, r) = [P νi (k, r)]

−1

(νnew)2 is then maximized with respect to νnew. We have

[Ωk+1 00 P ν

i (k + 1, r)

]equiva-

lent to

Page 14: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1756 H. JAMOULI AND D. SAUTER

Pk+1 0 00 P ν

k+1 + ζνi (k + 1, r)P νi (k + 1, r)ζνTi (k + 1, r) ζνi (k + 1, r)P ν

i (k + 1, r)−1

0 P νi (k + 1, r)−1ζνTi (k + 1, r) P ν

i (k + 1, r)

(122)

From Equation (122), the Kullback divergence between hnewi and h0 can be expressed as[

νold

νnew

]T [P νk+1 + ζνi (k + 1, r)P ν

i (k + 1, r)ζνTi (k + 1, r) ζνi (k + 1, r)P νi (k + 1, r)−1

P νi (k + 1, r)−1ζνTi (k + 1, r) P ν

i (k + 1, r)

]−1 [νold

νnew

]=

[νold − ζνi (k + 1, r)νnew

νnew

]T [P νk+1 00 P ν

i (k + 1, r)

]−1 [νold − ζνi (k + 1, r)νnew

νnew

](123)

The Kullback divergence (123) gives its minimal value δnewi (k, r) = [P νi (k + 1, r)]−1

(νnew)2 for νold = ζνi (k + 1, r)νnew. So, we conclude that the first step of the active GLRtest follows a minmax strategy (see appendix) closing the proof of Theorem 4.3. Basedon an inductive reasonning with the help of Theorems 4.1 and 4.2, the proposed activeGLR test is then derived leading to a GLR detector of the form

maxi∈[1,...,N ], i =[jumps already treated] r∈W

T newi (k, r − ρi) > ε (124)

where the state vector Xk =[xTk (νold)T

]Tof the reference model (96) includes the

q states of jumps νoldk =

[ν1k ... νq

k

]Tdetected and isolated during the recursive pro-

cessing. In [5], the off-line statistical decoupling of nuisance parameters is reduced to astatic decoupling problem in a regression model. Our active GLR test solves on-line adynamic statistical decoupling problem by rejecting the nuisance parameters which arestatistically significant (see also appendix).Under the multiple jumps detectability and distinguishability conditions of Theorem

3.1, the augmented state Kalman filter is guaranted to be stable at each step of therecursive treatment. With this implementation, the estimation of jumps detected andisolated during the processing will be improved from measurements available after theirdetection. In the case where the old jumps are extremely well estimated (the jumpprediction errors does not converge exponentially to zero as the state prediction of thejump-free system but only asymptotically), then δnewi (k, r) = δi(k, r) and the GLR testcoincides with the modified GLR test.

5. The Passive GLR Test. The passive GLR is based on the assumption that thejumps occur frequently. So assume that the fixed reference model noted HN is described

Xk+1 = AXk + Buk + Γwk (125)

yk = CXk + vk (126)

with A =

[A F0 1

], B =

[B0

], Γ =

[I0

], C =

[C 0

]and Xk =

[xk

νk

], the

augmented state model including all jump’s states νk =[ν1k . . . νj

k . . . νNk

]that we

wish to detect and isolate. From Equations (125) and (126), the jump hypothesis hj

described by Equations (9) and (10) can be viewed as an impulsive abrupt change on thejth hypothetical jump’s state, modelized as

νjk+1 = νj

k +∆νδkr, ∀j ∈ [1, . . . , N ] (127)

where r is the unknown occurrence time of impulsive abrupt change, ∆ν the jump’s stateincrement and δkr is the Kronecker operator.

Page 15: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1757

Substituting Equation (127) in (125), we obtain the impulsive jump hypotheses, notedh∆j , described by

Xk+1 = AXk + Buk + f∆j (k, r)∆νj(k, r) + Γwk

yk = CXk + vk(128)

with ∆νj(k, r) = ∆νjδkri , f∆j (k, r) = f∆

j δkri with f∆j =

[0Ij

]and ITj = [0 . . . 1 . . . 0]

has one at the jth position and zero elsewhere. Based on an approach very similar to themodified GLR test of part 4, let

Xk+1 = AXk + Buk +Kk(yk − CXk)

Ωk+1 = AΩkAT + ΓW ΓT − AkΩkC

T(CΩkC

T + V)−1

CΩkAT

Kk = AΩkCTH−1

k

Hk = CΩkCT + V

(129)

the augmented state Kalman filter designed on the reference model Equations (125) and(126). The additive effect of the impulsive jump hypothese h∆

j on the state predictionerror and on the innovation sequence of the augmented state Kalman filter propagates as

ek+1 = ek+1 + ζ∆j (k + 1, r)∆ν (130)

γk = γk+1 + ϱ∆j (k, r)∆ν (131)

where ek+1 and γk represent the state prediction error and the innovation sequence on thejump-free system and where ζ∆j (k + 1, r) and ϱ∆j (k, r) propagate as

ζ∆j (k + 1, r) = (A− KkC)ζ∆j (k, r), ζ∆j (r, r) = f∆j

ϱ∆j (k, r) = Cζ∆j (k, r)(132)

So, we can apply the following GLR detector

maxj∈[1,...,N ], r∈W

T∆j (k − ρj, r) > ε (133)

with

T∆j (k, r) = b∆j (k, r)

2a∆j (k, r)−1 (134)

a∆j (k, r) =k∑

t=r+ρj

ϱ∆Tj (t, r)H−1

t ϱ∆j (t, r) (135)

b∆j (k, r) =k∑

t=r+ρj

ϱ∆Tj (t, r)H−1

t γt (136)

if maxj, r

T∆j (k − ρj, r > ε, then (i, ˆr) = argmax

j,rT∆

j (k, r − ρj) and the implusive jump

h∆i is declared to be occurred at time where r = ˆr − ρi, where

∆ν(k + 1, r) = a∆i (k, r)−1b∆i (k, r) (137)

P∆ν(k + 1, r) = a∆i (k, r)−1 (138)

represents the maximum likelihood prediction of the jump increment ∆ν (under the as-sumption that ∆ν has an infinite a priori covariance). At the detection time of the firstjump, the tracking ability of the augmented state Kalman filter (129) can be improvedfrom the updating strategy as

Xnewk+1 = Xold

k+1 + ζ∆i (k + 1, r)∆ν(k + 1, r)Ωnew

k+1 = Ωoldk+1 + ζ∆i (k + 1, r)P∆ν(k + 1, r)ζ∆i (k + 1, r)T

(139)

Page 16: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1758 H. JAMOULI AND D. SAUTER

In our case, the state of the matched filters given by ζ∆j (k, r) are spanned in the tra-jectory space of the augmented state Kalman filter’s prediction errors. So, Equation(139) substituted in the augmented state Kalman filter (129) improves its tracking abilitywithout to produce a possible instability on the resulting filter (under the stability andconvergence conditions of the augmented state Kalman filter given by Jamouli (2007)).The treatment of another impulsive jump is then obtained by applying GLR detector(133) on the resulting filter after having reinitialized ζ∆j (k, r) = 0, ∀j ∈ [1, . . . , N ] im-

mediately after the filter incrementation. The new initialization (139) allows E(Xnewk ) to

reach the true state of the system very quickly (and E(γt) to reach zero for jump com-pensation, consequently) avoiding the detection of the same jump several times. From aninductive reasonning, the passive GLR test is then derived and consists of the followingsteps:

1) Detection, isolation and estimation of one impulsive jump with the GLR detector (133),2) Updating of the augmented state Kalman filter (129) with (139) to improve its tracking,3) Go to Step 1.

The sequential multiple decision theory is not complete and the choise of the thresholdlevel ε is not studied in this paper. However, some simulation results not presented in thispaper show that only statistical tuning parameter ε can be fixed at the beginning of theprocessing (this is not the threshold level which is adaptive but the augmented Kalmanfilter).If the updated reference model (60) is substituted to the fixed reference model (125),

the jump hypothesis h∆i can modelize another jump on the old changes or also the disap-

pearance of the old jumps. In this case, a mixed active/passive GLR test can be derivedfor a complete strategy allowing the treatment of the appearance and the disappearanceof sequential jumps.

6. Results. To illustrate the proposed approach we considered the following system de-scribed by the matrix

A =

0.6 0.2 0 00 0.2 0.1 00 0 0.4 0.10 0 0 0.5

, B =

0 11 00 11 0

(140)

C =

1 0 0 00 1 0 00 0 1 1

, F =

1 01 11 10 1

(141)

W = 0.01 ∗ Id(4, 4) and V = 0.5 ∗ Id(3, 3) (142)

The faults isolability is satisfied with rank [CAf1 CAf2] and F = [f1 f2]. The statis-tical variables describing the performances of the reconfigurable FTCS coincide with thestatistical variables describing the performances of the statistical test. So, to simplifythe Monte Carlo simulation, the proposed example will be realized in open loop. In thefield od dynamic systems, the signal-to-noise ratio δi(k, r) are generally more greater thanthe signal to noise ratio treated in the fields of electrocardiogram analysis or geophysicalsignal processing and the size M of the sliding window W = [k −M ≤ r ≤ k] can begenerally chosen small. In our example, we take M = 0 (we do not optimize r at alland we fixe the following rate of false alamrs: P F = 0.005 from a table of Chi-Squareddistribution.

Page 17: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1759

In first, we suppose one fault occurred at 350 with magnitude 2, we obtain the followingresults.

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

Figure 1. First state component and its estimation given by Willsky algorithm

0 50 100 150 200 250 300 350 400 450 5000

0.5

1

1.5

2

2.5

3

3.5

4

4.5

5

Figure 2. Second state component and its estimation given by Willsky algorithm

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

Figure 3. Third state component and its estimation given by Willsky algorithm

In the first case, the results shows that the proposed state estimation giving by ourfilter is more adaptive to the fault occurence than the Willsky algorithm.

In second case, we suppose two sequentiel faults occurred at 350 and 400 with magni-tudes 2, we obtain the following results.

Page 18: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1760 H. JAMOULI AND D. SAUTER

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

Figure 4. Fourth state component and its estimation given by Willsky algorithm

0 50 100 150 200 250 300 350 400 450 5000

50

100

150

200

250

Figure 5. GLR test applied on Willsky algorithm

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

Figure 6. First state component and its estimation given by our adaptivefilter algorithm

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

Figure 7. Second state component and its estimation given by our adap-tive filter algorithm

Page 19: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1761

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

Figure 8. Third state component and its estimation given by our adaptivefilter algorithm

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

Figure 9. Fourth state component and its estimation given by our adap-tive filter algorithm

0 50 100 150 200 250 300 350 400 450 5000

20

40

60

80

100

120

Figure 10. GLR test applied on our adaptive filter

0 50 100 150 200 250 300 350 400 450 5000

2

4

6

8

10

12

Figure 11. First state component and its estimation given by Willskyalgorithm with presence of two sequential faults

Page 20: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1762 H. JAMOULI AND D. SAUTER

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

8

Figure 12. Second state component and its estimation given by Willskyalgorithm with presence of two sequential faults

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

8

9

10

Figure 13. Third state component and its estimation given by Willskyalgorithm with presence of two sequential faults

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

Figure 14. Fourth state component and its estimation given by Willskyalgorithm with presence of two sequential faults

0 50 100 150 200 250 300 350 400 450 5000

50

100

150

200

250

300

350

Figure 15. GLR test applied on Willsky algorithm with presence of twosequential faults

Page 21: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1763

0 50 100 150 200 250 300 350 400 450 5000

2

4

6

8

10

12

Figure 16. First state component and its estimation given by our adaptivealgorithm with presence of two sequential faults

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

Figure 17. Second state component and its estimation given by our adap-tive algorithm with presence of two sequential faults

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

8

9

10

Figure 18. Third state component and its estimation given by our adap-tive algorithm with presence of two sequential faults

In case of two sequential faults, the GLR detector applied on the passive augmentedmodel allows to detect the first at 350s and the second faults at 400s. The Willsky GLRdetect just the first fault at 350, and cannot detect the second.

Remarks and Discussion

• We have also computed the rate of false alarms and the rate of good detections with105 Monte Carlo trials. We have obtained P F ≃ 0, 01; PD ≃ 0, 85 for the modifiedGLR test and P F ≃ 0, 0055, PD ≃ 0, 91 for the passive GLR test clearly much power.We conclude that the passive GLR test is very power when quick detections lead tobad jump estimations and thus very usefull for FTCS to maximize the rate of gooddecisions specially in reguard to the occurrence of a big jump which may greatlyaffect nominal performance of the system.

Page 22: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1764 H. JAMOULI AND D. SAUTER

0 50 100 150 200 250 300 350 400 450 5000

1

2

3

4

5

6

7

Figure 19. Fourth state component and its estimation given by our adap-tive algorithm with presence of two sequential faults

0 50 100 150 200 250 300 350 400 450 5000

20

40

60

80

100

120

140

160

180

200

Figure 20. GLR test applied on adaptive algorithm with presence of twosequential faults

• We can improve this approach of detection and isolation with an active GLR basedon free model which it will be augmented after each detection and isolation. Thefaults already detected and isolated will considered as perturbation and the we willupdate the new GLR in order to detect another fault.

The sequential multiple decision theory is not complete and the choise of the thresholdlevel ε is not studied in this paper. However, some simulation results not presented in thispaper show that only statistical tuning parameter ε can be fixed at the beginning of theprocessing (this is not the threshold level which is adaptive but the augmented Kalmanfilter).

7. A Reconfigurable Fault-Tolerant Control System. The purpose of the chapteris to show how the active and passive GLR test can be used in a FTCS. Our FTCS isonly designed to reach the unique goal:

E(yk) = 0k→∞

under r < ∞ (143)

in order words to asymptotically reject the effect of jumps on the output of the system(the reference input will be maintained equals to zero avoiding the need of a reconfigurablefeedforward control law). The proposed FTCS is based on the active GLR test integratedvia a reconfigurable control law designed on the model

Xk+1 = AXk + Buk + Γwk (144)

yk = CXk + vk (145)

where the main problem to reach our goal is that the pair (A, B) has N uncontrollablemodes (under (A,B) controllable). The reconfigurable control law of the form uk =

Page 23: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1765

unk −Gνk will be designed in such a way that the nominal control un

k = −Lxk of the jump-free system (6;7) (obtained by a LQG approach on an infinite horizon) is reconfiguredon-line after each detection and isolation of one impulsive jump by the additive term Gνk.In order to design G in relation with the available nominal control law, we assume thatthe implementation of the active GLR test is based on the two-stage Kalman filter, theonly optimal filter which gives the state prediction of the jump-free system xk. So, let

uk = unk −Gνk (146)

the control law that we wish to design for a physical rejection of jumps νk. Under thestate transformation [

xk

νk

]=

[I T0 I

] [xk

νk

](147)

the system (141) with (144) can be expressed as[xk+1

νk+1

]=

[A (I − A)T + F0 I

] [xk

νk

]+

[B0

](un

k −Gνk) (148)

yk =[C −CT

] [ xk

νk

](149)

and the physical rejection of jumps will be obtained if and only if T let G satisfy thealgebraic equations

(I − A)T + F = −BG (150)

CT = 0 (151)

Under the existence condition of a solution of (148) given by

rang

[A− I B −FC 0 0

]= rang

[I − A BC 0

](152)

the gain G of the control law (143), solution of (148) gives

G = [C(I − A)−1B]−1C(I − A)−1F (153)

and T = (I − A)−1(BG− F ). Under Equation (150), Equation (145) gives[xk+1

νk+1

]=

[A 00 I

] [xk

νk

]+

[B0

]unk +

[I0

]wk (154)

yk =[C 0

] [ xk

νk

]+ vk (155)

where xk represent the state of the jump-free system. So, under (A,B) controllable,the LQG regulator un

k = −Lˆxk can be designed on the jump-free system h0 (from theseparation principle) to obtained the nominal system performances (not defined here).The reconfigurated control law, which reject the q jump’s uncontrollable modes is givenby

uk = −Lˆxk −Gνk (156)

from the two-stage Kalman filter or equivalently

uk = −[L G

] [ I −ζk0 I

] [I ζk0 I

] [ˆxk

νk

]= −

[L G− Lζ

] [ xk

νk

](157)

from the augmented state Kalman filter. Note that after each detection and isolation ofone jump, the nominal control law un

k = −Lˆxk is not affected by the active GLR test butonly corrected by the additive term Gνk depending to the old jumps estimation (improvedfrom measurement available after their detection). The active GLR test depends only to

Page 24: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1766 H. JAMOULI AND D. SAUTER

the state prediction errors of the Kalman filter decoupled from uk and we can propose thefollowing reconfigurable FTCS scheme:

Actuators Sensors Two-stage

Kalman

GLR Control

law

Plant y

Figure 21. The reconfigurable FTCS scheme based on the active GLR test

The reference model used for the design of the control law GLR test coincides withthe reference model used by the GLR Test. After each detection and isolation of onejump, the reference model is updated with the new state of jump and the three parts ofthe FTCS, i.e., the GLR detector, the Kalman filter, the control law, can be reconfigu-rated in harmony by the reconfiguration mechanism. To reduce the the computationalrequirement, the passive GLR test working on a fixed reference model can be used but thestatistical performances of the reconfigurable FTCS will be closely related by the rates offalse alarms and good decisions of the used statistical test.

8. Numerical Example. Consider the following discrete-time stochastic system

A =

0.5 2 0.20 0.4 10 0 0.1

, B =[B1 B2

]=

1 00 1−1 0

, C =

[1 0 10 1 0

](158)

V = 2I and W = I. Subject to two possible abrupt changes h1 and h2 on actuatorsmodelized by f1 = B1, f2 = B2 with ρ1 = 2 and ρ2 = 1. From Theorem 3.1, the twojumps are statistically detectable and distinguishable, i.e., (11) and (12) hold with

rank[CAf1 Cf2

](159)

and

rank

[I − A f1 f2C 0

]= 3 + 2 = 5(I). (160)

We can remark that the rank condition (I) guaranties the existence condition of thereconfigurable FTCS given by (149) for any jump’s scenario. The statistical variablesdescribing the performances of the reconfigurable FTCS coincide with the statistical vari-ables describing the performances of the statistical test. So, to simplify the Monte Carlosimulation, the proposed example will be realized in open loop.

Page 25: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1767

In the field of dynamic systems, the signal-to-noise ratio δi(k, r) are generally moregreater than the signal to noise ratio treated in the fields of electrocardiogram analysis orgeophysical signal processing and the size M of the sliding window W = [k −M ≤ r ≤ k]can be generally chosen small. In our example, we take M = 0 (we do not optimize r atall) and we fixe the following rate of false alarms: P F = 0.005 from a table of Chi-Squareddistribution. The first jump ν = 10 appearing at time instant k = 50 has been chosensufficiently important to ensure that the rate of correct decisions is very closed to one.The statistical comparaison will be made on the second jump ν = 3 occurring at timeinstant r = 60.

We have computed the rate of false alarms and the rate of good detections with 105

Monte Carlo trials. We have obtained P F ≈ 0.01, PD ≈ 0.85 for the modified GLRtest and P2 ≈ 0.0055, PD ≈ 0.91 for the active GLR test clearly much power. Manyother simulations not presented in this paper, realized in the case where the second jumpappears at times r = 70, 80, . . . have shown that the active GLR test always gives betterresults but with less significant results. In the limite case where the second jump appearsafter the first jump with a very long time delay, the two GLR tests have given the sameresults. We conclude that the active GLR test is very power when quick detections leadto bad jump estimations and thus very usefull for FTCS to maximize the rate of gooddecisions specially in reguard to the occurrence of a big jump which may greatly affectnominal performance of the system.

9. Conclusion. Derived from the works of Willsky and Jones [50], this paper has pre-sented the active GLR test for sequential jumps detection in stochastic discrete-time linearsystems. From a new updating strategy based on the statistical rejection of the jumpsdetected and isolated during the recursive treatment, the rate of false alarm has beenminimized and the rate of good decisions maximized. The active GLR test has beenintegrated in a reconfigurable Fault-Tolerant Control System by using an LQG regulatordesigned on the jump-free system where the nominal control law is corrected on line toasymptotically reject the influence of jumps.

REFERENCES

[1] C. Aubrun, D. Sauter, H. Noura and M. Robert, Fault diagnosis and reconfiguration of systemsusing fuzzy logic: Application to a thermal plant treatment process, International Journal of SystemSciences, vol.24, pp.1945-1954, 1993.

[2] B. D. O. Anderson and J. B. Moore, Optimal Control: Linear Quadratic Methods, Prentice Hall,Englewood Cliffs, 1990.

[3] P. Ball, M. Fisher, D. Fussel, O. Nelles and A. Isermann, Integrated control diagnosis and recconfig-uration of a heat exchanger, IEEE Control System Magazine, vol.18, no.3, pp.52-64, 1998.

[4] M. Basseville and A. Benveniste, Design and comparative study of some sequential jump detectionalgorithms for digital signal, IEEE Trans. on Acous., Speech, Signal Processing, vol.31, pp.521-535,1983.

[5] M. Basseville and I. Nikiforov, Detection of Abrupt Changes Theory and Application, Prentice Hall,Englewood Cliffs, 1994.

[6] R. V. Beard, Failure Accommodation in Linear Systems Through Self-Reorganisation, Ph.D. Thesis,MA, USA, 1971.

[7] M. Bodson and J. Groszkiewicz, Multivariable adaptive algorithms for reconfigurable flight control,The 39th IEEE Transactions on Control Systems Technology, vol.5, pp.217-229, 1997.

[8] A. K. Caglayan, Necessary and sufficient conditions for detectability of jumps in linear systems,IEEE Trans. on Automatic Control, vol.25, pp.833-834, 1980.

[9] A. K. Caglayan, S. M. Allen and K. Whmuller, Evaluation of second generation reconfigurationstrategy for aircraft flight control systems subject to actuator failure/surface damage, Proc. of theIEEE National Aerospace and Electronics Conference, NY, USA, pp.520-529, 1988.

Page 26: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1768 H. JAMOULI AND D. SAUTER

[10] J. Chen and R. J. Patton, Robust Model-Based Fault Diagnosis for Dynamic Systems, Kluwer Aca-demic Publishers, Norwell, MS, 1999.

[11] R. H. Chen and J. L. Speyer, Robust multiple fault detection filter, International Journal of Robustand Nonlinear Control, vol.12, pp.675-696, 2002.

[12] E. E. Chow, K. P. Dumn and A. S. Willsky, Research status report to NASA Langley research center:A dual-mode generalized likelihood ratio approach to self-reorganizing digital flight control systemdesign, M.I.T Electronic Systems Laboratory, Cambridge, 1975.

[13] W. H. Chung and J. L. Speyer, A game theoritic fault detection filter, IEEE Trans. on AutomaticControl, vol.43, pp.933-935, 1998.

[14] J. D’Azzo and C. H. Houpis, Linear control system analysis and design, conventional and modern,McGraw-Hill Series in Electrical and Computer Engineering, 1995.

[15] J. C. Deckert, M. N. Desai, J. J. Deyst and A. S. Willsky, F8-DFBW sensor failure identificationusing analytical redundancy, IEEE Trans. on Automatic Control, vol.22, pp.795-803, 1977.

[16] B. Freidland, Treatment of bias in recursive filtering, IEEE Trans. on Automatic Control, vol.14,pp.359-367, 1969.

[17] Z. Gao and P. J. Antsaklis, Reconfigurable control system design via perfect model following, Inter-national Journal of Control, vol.56, no.4, pp.783-798, 1992.

[18] D. E. Gustafson, A. S. Willsky, J. Y. Wang, M. C. Lancaster and J. H. Triebwasser, ECG/VGCrhythm diagnosis using statistical signal analysis I; identification of persistent rhythms, IEEE Trans-actions on Biomedical Engineering, vol.25, pp.344-353, 1978.

[19] C. Y. Huang and R. F. Stengel, Restructurable control using proportional-integral implicite modelfollowing, Journal of Guidance Control and Dynamic, vol.13, pp.303-309, 1990.

[20] H. Jamouli, J. Y. Keller and D. Sauter, Fault isolation filter with unknown inputs in stochasticsystems, IFAC Safeprocess, Washington, pp.531-536, 2003.

[21] H. Jamouli and D. Sauter, A new adaptive Kalman estimator integrated in a fault-tolerant controlsystem, The 15th IEEE MED, Athens, Greece, 2007.

[22] H. Jamouli and D. Sauter, An active generalized likelihood ratio test in a reconfigurable fault-tolerantcontrol system, The 16th IEEE MED, Ajaccio, France, 2008

[23] H. Jamouli and D. Sauter, Fault detection and isolation of sequential multiples faults in dynamiclinear systems, The 18th IEEE MED, Marrakech, Morocco, 2010.

[24] J. Jiang, Design of reconfigurable control systems using eigenstructure assignement, InternationalJournal of Control, vol.59, pp.395-410, 1994.

[25] J. Jiang and Q. Zhao, Fault tolerant control systems synthesis using imprecise fault identificationand reconfigurable control, IEEE ISIC/CIRA/ISAS Joint Conference, Gaithersburg, MD, USA,pp.169-174., 1998.

[26] H. L. Jones, Failure Detection in Linear Systems, Ph.D. Thesis, MA, USA, 1973.[27] J. Y. Keller, Fault isolation filter for linear systems, Automatica, vol.35, pp.1701-1706, 1999.[28] J. Y. Keller and D. Sauter, Robust fault isolation filter for discrete time systems. Proc. of the 4th

IFAC Safeprocess Symposium, Budapest, 2000.[29] P. K. Kitandis, Unbaised minimum-variance linear state estimation, Automatica, vol.23, pp.775-778,

1987.[30] B. Liu and J. Si, Fault isolation filter design for time invariant systems, IEEE Trans. on Automatic

Control, vol.21, pp.775-778, 1997.[31] D. P. Looze, J. M. Weiss, J. S. Eterno and N. M. Barret, An automatic redesign approach for control

methods, IEEE Control System Magazine, vol.5, pp.16-22, 1985.[32] M. Mahmoud, Stabilizing controllers for a class of discrete time fault tolerant control systems, ICIC

Express Letters, vol.2, no.3, pp.213-218, 2008.[33] M. Mahmoud, Sufficient conditions for the stabilization of feedback delayed discrete time fault toler-

ant control systems, International Journal of Innovative Computing, Information and Control, vol.5,no.5, pp.1137-1145, 2009.

[34] M.-A. Massoumnia, A geometric approach to the synthesis of failure detection filters, IEEE Trans.on Automatic Control, vol.31, no.9, pp.839-846, 1986.

[35] P. S. Maybeck and R. D. Stevens, Reconfigurable flight control via multiple model adaptive controlmethods, IEEE Transactions on Aerospace and Electronic Systems, vol.27, pp.470-479, 1991.

[36] K. M. Nagpal, R. E. Helmick and C. S. Sims, Reduced-order estimation: Part 1. Filtering, Interna-tional Journal of Control, vol.45, no.6, pp.1867-1888, 1987.

[37] H. Noura, D. Sauter and F. Hamelin, Evaluation of a fault-tolerant control design for actuator faults,IEEE Conference on Decision and Control, 1997.

Page 27: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1769

[38] H. Noura, D. Sauter, F. Hamelin and D. Theilliol, Fault-tolerant control in dynamic systems: Ap-plication to a winding machine, IEEE Control Systems Magazine, vol.20, no.1, pp.33-49, 2000.

[39] J. Park and G. Rizzoni, A new interpretation of the fault detection filter: Part 1, InternationalJournal of Control, vol.60, pp.767-787, 1994.

[40] J. Park and G. Rizzoni, A new interpretation of the fault detection filter: Part 2, InternationalJournal of Control, vol.60, pp.1033-1055, 1994.

[41] R. J. Patton, The 1997 situation (survey), IFAC SAFEPROCESS, Hull, UK, vol.2, pp.26-28, 1997.[42] Y. Rafi and H. Peng, Piecewise sliding mode decoupling fault tolerant control system, ICIC Express

Letters, vol.4, no.4, pp.1215-1222, 2010.[43] H. E. Rausch, Autonomous control reconfiguration, IEEE Control Systems Magazine, vol.15, no.6,

pp.37-49, 1995.[44] D. Sauter and F. Hamelin, Frequency-domain optimization for robust fault detection and isolation

in dynamic systems, IEEE Trans. on Automatic Control, vol.44, pp.878-883, 1999.[45] D. Theilliol, H. Noura and D. Sauter, Fault-tolerant control method for actuator and component

faults, IEEE Conference on Decision and Control, Tampa, FL, USA, pp.604-609, 1998.[46] D. Theilliol, H. Noura and J.-C. Ponsart, Fault diagnosis and accommodation of a three-tank-system

based on analytical redundancy, ISA Transactions, vol.41, no.3, pp.365-382, 2002.[47] S. Tong, T. Wang and W. Zhang, Fault tolerant control for uncertain fuzzy systems with actua-

tor failures, International Journal of Innovative Computing, Information and Control, vol.4, no.10,pp.2461-2474, 2008.

[48] J. E. White and J. L. Speyer, Detection filters design: Spectral theory and algorithms, IEEE Trans.on Automatic Control, vol.32, pp.593-603, 1987.

[49] A. S. Willsky, A survey of design methods for failure detection in dynamic systems, Automatica,vol.12, pp.601-611, 1976.

[50] A. S. Willsky and H. L. Jones, A generalized likelihood ratio approach to detection and estimationof jumps in linear systems, IEEE Trans. on Automatic Control, vol.21, pp.108-112, 1976.

[51] A. S. Willsky, E. Y. Chow, S. B. Gershwin, C. S. Greene, P. K. Houpt and A. L. Kurkjian, Dy-namic model-based techniques for the detection of incidents on freeways, IEEE Trans. on AutomaticControl, vol.25, pp.347-360, 1980.

[52] A. S. Willsky, Detection of abrupt changes in dynamic systems, Lecture Notes in Control and Infor-mation Sciences, pp.27-49, 1986.

[53] E. Wu, Y. Zhang and K. Zhou, Detection estimation and accommodation of loss of control effective-ness, International Journal of Adaptive Control and Signal Processing, vol.14, pp.175-195, 2002.

[54] Q. Zhao and J. Jiang, Reliable state feedback control system design against actuator failures, Auto-matica, vol.34, no.10, pp.1267-1272, 1998.

[55] F. A. Zaid, P. Ionnaou, K. Gousman and R. Rooney, Accommodation of failures in the F16 aircraftusing adaptive control, IEEE Control Systems Magazine, vol.11, no.1, pp.73-84, 1991.

[56] J. E. Geddes and M. Poslethwaite, Improvements in product quality in tandem cold rolling usingrobust multivariable control, IEEE Transactions on Control Systems, vol.6, no.2, 1998.

[57] M. J. Grimble and G. Hearns, Advanced control for hot rolling mills, Advances in Control, Highlightsof ECC, pp.135-169, 1999.

[58] H. Koc, D. Knittel, M. Mathelin and G. Abba, Modeling and control of winding systems for elasticwebs, IEEE Transactions on Control Systems Technology, vol.10, no.2, pp.197-208, 2002.

[59] D. Knittel, E. Laroche, D. Gigan and H. Koc, Tension control for winding systems with two degrees offreedom H’infinity’ controller, IEEE Transactions on Industry Applications, vol.39, no.1, pp.113-120,2003.

[60] S. Tanaka, Diagnosability of systems and optimal sensor location, International Series in Systemsand Control Engineering, pp.155-188, 1990.

Page 28: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

1770 H. JAMOULI AND D. SAUTER

Appendix 1. The predictive form of the Friendland’s two-stage Kalman Filter whichoptimaly implement the following augmented state Kalman filter[

xk+1

νk+1

]= Xk+1 = AXk + Buk +Kkγk (161)[

P xk+1 P xν

k+1

P νxk+1 P ν

k+1

]= Ωk+1 = AΩkA

T + ΓW ΓT − AΩkCT(CΩkC

T + V)−1

CΩkAT(162)

Kk =

[Kx

k

Kνj

k

]= AΩkC

TH−1k , Hk = CΩCT + V (163)

with X0 =

[x0

ν0

]and Ω0 =

[P x0 P xν

0

P νx0 P ν

0

], where A =

[A F0 I

], B =

[B0

], C =[

C 0]and Γ =

[I0

]is given by

xk+1 = ˆxk+1 + ζk+1νk+1 (164)

Pk+1 = Pk+1 + ζk+1Pνk+1ζ

Tk+1 (165)

where(ˆxk+1, Pk+1

)are given by the bias-free filter

ˆxk+1 = Aˆxk +Buk + Kkγk (166)

Pk+1 = APkAT +W − APkC

T (CPkCT + V )−1CPkA

T (167)

Kk = APkCT H−1

k (168)

γk = yk − C ˆxk (169)

Hk = CPkCT + V (170)

where (νk+1, Pνk+1) are given the bias filter

νk+1 = νk +Kνk (γk − ρkνk) (171)

Kνk = P ν

k ρTk (Hk + ρkP

νk ρ

Tk )

−1 (172)

P νk+1 = P ν

k − P νk ρ

Tk (ρkP

νk ρ

Tk + Hk)

−1ρkPνk (173)

with the coupling equation

ζk+1 = (A− KkC)ξk + F (174)

ρk = Cζk (175)

The initial conditions of the two-stage Kalman filter are given by[ˆx0

ν0

]=

[I −ζ00 I

] [x0

ν0

](176)

and [P0 00 P ν

0

]=

[I −ζ00 I

] [P x0 P xν

0

P νx0 P ν

0

] [I −ζ00 I

]T(177)

with ζ0 = P xν0 (P ν

0 )−1. The zero mean white innovation sequence of the bias-filter equals

to the innovation sequence of the augmented state Kalman filter since γk = yk − CXk =γk − ρkνk where Hk = Hk + ρkP

νk ρ

Tk is its covariance matrix. The optimality of two-

stage Kalman filter can be proved under the transformation Tk =

[I −ζk0 I

]with ζk =

Page 29: A GENERALIZED LIKELIHOOD RATIO TEST FOR A FAULT - ijicic

A GLR TEST FOR A FAULT-TOLERANT CONTROL SYSTEM 1771

P xνk [P ν

k ]−1 applied on the augmented state filter

Xk+1 = AXk + Buk +

[Kx

k

Kνk

](yk − CXk) (178)

Ωk+1 =

(A−

[Kx

k

Kνk

]C

)Ωk

(A−

[Kx

k

Kνk

]C

)T

+ ΓW ΓT +

[Kx

k

Kνk

]V

[Kx

k

Kνk

]T(179)

as

Tk+1Xk+1 = Tk+1AT−1k TkXk + Buk + Tk+1

[Kx

k

Kνk

](yk − CT−1

k TkXk) (180)

Tk+1Ωk+1TTk+1 = Tk+1

(A−

[Kx

k

Kνk

]C

)T−1k TkΩkT

Tk (T

Tk )

−1

(A−

[Kx

k

Kνk

]C

)T

(181)

+ΓW ΓT + Tk+1

[Kx

k

Kνk

]V

[Kx

k

Kνk

]TT Tk+1

From

[ˆxk

νk

]= TkXk,

[Pk 00 P ν

k

]= TkΩT

Tk and under the assumption that Kν

k =

Kk + ζk+1Kνk with ζk+1 = P xν

k+1[Pνk+1]

−1, we obtain[ˆxk+1

νk+1

]=

[A− KkC 0−Kν

kC (I −Kνkρk)

] [ˆxkνk

]+ Buk +

[Kk

Kνk

]yk (182)[

Pk+1 ×× P ν

k+1

]=

[A− KkC 0−Kν

kC (I −Kνkρk)

] [Pk 00 P ν

k

] [A− KkC 0−Kν

kC (I −Kνkρk)

]T+

[Kk

Kνk

]V

[Kk

Kνk

]T+

[W 00 0

](183)

and with Kk = APkCT H−1

k minimizing the trace of Pk+1.The trace of P ν

k+1 is minimized by Kνk = P ν

k ρTk (Hk + ρkP

νk ρ

Tk )

−1 and the proof thatKx

k = Kk + ζk+1Kνk where ζk+1 = P xν

k+1[Pνk+1]

−1 is given in Keller and Darouach (1997).Note that the existence condition of ζk = P xν

k [P νk ]

−1 given by P νk > 0 is always satisfied

under (21.a).