Reliability Analysis of a Dual-Redundant Engine Controller

A Markov model is developed to predict the reliability of a full-authority, dual-redundant aircraft engine controller. The effects of failures of any of the controller's sensors, electronic interface modules, processors and actuators, as well as the consequences of redundancy management decisions are modeled. The model is used to study parameter sensitivity and to develop quantitative data in support of design tradeoffs. The effects of scheduled maintenance of the inflight shutdown rate of the engine are determined.