Dissimilar Redundancy

 The problem of eliminating the possibility of a common mode failure from whatever cause
has thus led to the use of what is known as dissimilar redundancy.
(1) Use of two or more different types of micro processors with dissimilar software.
(2) Use of a back-up analogue system in addition to the main digital system which is at
quadruplex or triplex level of redundancy.
(3) Use of a back-up system using different sensors, computing and control means e.g.,
separate control surfaces.
 Modern airliner design practice is to split the basic control surfaces into two or three
sections with each section controlled independently by its own actuators.
 Most of the control surfaces are controlled by two actuators: in some cases dissimilar types
of actuator.
 The Airbus A318, A319, A320, A330, A340, A380 airliners share a common flight control
system architecture with similar control laws. This provides similar flight handling
characteristics enabling easy cross-qualification across the range.
 Each primary and secondary flight control
A380 Flight Control System computer control one of ailerons, spoilers,
elevators and rudder so that independent
access is available to the PRIM and SEC
FCS.

Each computer comprises two independent

processing channels with different internal
architectures, the processors being procured
from different manufacturers with their
software generated by different teams.

In the case of disagreement between the two

processing channels, the computer is
automatically disconnected.

ADIRS – Air data and inertial reference

system

One of the PRIMs is the master computer

It computes the control surface deflections for the aircraft to respond to and carries out the computation function.
the
pilot’s, or Autopilot, commands in an optimum manner from the
appropriate control laws and the aircraft feedback from the ADIRS.
• If all the PRIMs are lost, each SEC performs the computation and execution
function; there is no master SEC.
• An electrical back-up system provides control of the aircraft in the extremely
improbable case of loss of all the flight control computers, or electrical power
supplies.
• The electrical back-up system is totally segregated from the normal flight control
system and uses dedicated sensors and transducers in the pilot controls.
• The Back-up Control Module controls and monitors the inboard elevators, the
THS, the inboard ailerons and the upper and lower rudder only.
Boeing 777 Flight Control System

 In the very unlikely event of the

PFCS becoming totally
inoperable, then a reversionary
analogue command path is
directly available through the
ACE to provide aircraft control.

 Each ACE also contains a solid

state pitch rate gyro for use when
normal sources of body motion
are not available to enable a pitch
auto-stabilisation function to be
 In addition to this back-up mode, an independent mechanical link is also provided via maintained.
the stabiliser trim system and a pair of flight spoilers.  PFC – Two in electrical bay and
other one near forward cargo door.