Verified hybrid LQ control for autonomous spacecraft rendezvous

Rendezvous is a fundamental maneuver in autonomous space operations in which an active chaser spacecraft is required to navigate safely to the proximity of a second passive target spacecraft. Ensuring safety of such control maneuvers is challenging and design errors can be expensive. We present the first verified control solution to a benchmark formulation of spacecraft autonomous rendezvous in the form of a hybrid LQR controller verified using a data-driven algorithm. Our hybrid LQR scheme is motivated by enforcing safety constraints rather than optimizing performance, and the control law is formulated by periodically solving optimization problems that depend on the current state. The resulting hybrid system presents a challenge for existing automated formal verification tools due to its lack of a closed-form model description. We overcome this challenge by using a data-driven approach (implemented in the new verification tool DryVR). DryVR relies on simulation traces to compute reachable states of the system over bounded time horizon and initial conditions to rigorously verify that the system does not violate any safety requirements.

[1]  J. D. Pearson.  Approximation Methods in Optimal Control I. Sub-optimal Control† , 1962 .

[2]  Daniel E. Hastings,et al.  Architecting a family of space tugs based on orbital transfer mission scenarios , 2003 .

[3]  M. Grimble,et al.  Recent trends in linear optimal quadratic multivariable control system design , 1987 .

[4]  Meeko M. K. Oishi,et al.  Computing reach-avoid sets for space vehicle docking under continuous thrust , 2016, 2016 IEEE 55th Conference on Decision and Control (CDC).

[5]  R. Scott Erwin,et al.  A spacecraft benchmark problem for hybrid control and estimation , 2016, 2016 IEEE 55th Conference on Decision and Control (CDC).

[6]  J. Cloutier,et al.  Control designs for the nonlinear benchmark problem via the state-dependent Riccati equation method , 1998 .

[7]  Chuchu Fan,et al.  Bounded Verification with On-the-Fly Discrepancy Computation , 2015, ATVA.

[8]  Stephen A. Jacklin,et al.  Survey of Verification and Validation Techniques for Small Satellite Software Development , 2015 .

[9]  David K. Geller,et al.  Navigating the Road to Autonomous Orbital Rendezvous , 2007 .

[10]  Umesh V. Vazirani,et al.  An Introduction to Computational Learning Theory , 1994 .

[11]  W. H. Clohessy,et al.  Terminal Guidance System for Satellite Rendezvous , 2012 .

[12]  W. Eric Wong,et al.  The Role of Software in Recent Catastrophic Accidents , 2009 .

[13]  Mahesh Viswanathan,et al.  DryVR: Data-Driven Verification and Compositional Reasoning for Automotive Systems , 2017, CAV.

[14]  Marco Bozzano,et al.  Formal Verification and Validation of AADL Models , 2010 .

[15]  Douglas J. Zimpfer,et al.  Autonomous Rendezvous, Capture and In-Space Assembly: Past, Present and Future , 2005 .

[16]  James Kapinski,et al.  Locally optimal reach set over-approximation for nonlinear systems , 2016, 2016 International Conference on Embedded Software (EMSOFT).

[17]  Gerard J. Holzmann,et al.  Mars code , 2014, CACM.

[18]  G. Cook,et al.  Suboptimal control for the nonlinear quadratic regulator problem , 1975, Autom..

[19]  Ricardo G. Sanfelice,et al.  Robust hybrid supervisory control for rendezvous and docking of a spacecraft , 2016, 2016 IEEE 55th Conference on Decision and Control (CDC).

[20]  Mahesh Viswanathan,et al.  C2E2: A Verification Tool for Stateflow Models , 2015, TACAS.

[21]  Antoine Girard,et al.  SpaceEx: Scalable Verification of Hybrid Systems , 2011, CAV.

[22]  Richard M. Murray,et al.  Constrained autonomous satellite docking via differential flatness and model predictive control , 2016, 2016 IEEE 55th Conference on Decision and Control (CDC).

[23]  Alvar Saenz-Otero,et al.  Model Predictive Control with Ellipsoid Obstacle Constraints for Spacecraft Rendezvous , 2015 .

[24]  Taylor T. Johnson,et al.  Satellite Rendezvous and Conjunction Avoidance: Case Studies in Verification of Nonlinear Hybrid Systems , 2012, FM.

[25]  Stéphane Reynaud,et al.  Accurate and autonomous navigation for the ATV , 2007 .

[26]  Sayan Mitra,et al.  Verifying safety of an autonomous spacecraft rendezvous mission , 2017, ARCH@CPSWeek.

[27]  Mahesh Viswanathan,et al.  Automatic Reachability Analysis for Nonlinear Hybrid Models with C2E2 , 2016, CAV.

[28]  Mahesh Viswanathan,et al.  Verification of annotated models from executions , 2013, 2013 Proceedings of the International Conference on Embedded Software (EMSOFT).

[29]  Joseph Bentsman,et al.  Constrained discrete-time state-dependent Riccati equation technique: A model predictive control approach , 2013, 52nd IEEE Conference on Decision and Control.

[30]  Goran Frehse.  PHAVer: Algorithmic Verification of Hybrid Systems Past HyTech , 2005, HSCC.