Reliability Analysis of a Dual-Redundant Engine Controller

A Markov model is developed to predict the reliability of a full-authority, dual-redundant aircraft engine controller. The effects of failures of any of the controller’s sensors, electronic interface modules, processors and actuators, as well as the consequences of redundancy management decisions are modeled. The use of the model to perform parameter sensitivity studies and to develop quantitative data in support of design tradeoffs is described. The effects of scheduled maintenance on the inflight shutdown rate of the engine are determined.