arXiv subjects

Nathan van de Wouw

Publications and source records attributed to Nathan van de Wouw.

At least 55 records · Page 3Linked to original sources

arXiv2023

Impact Sensitivity Analysis of Cooperative Adaptive Cruise Control Against Resource-Limited Adversaries

Cooperative Adaptive Cruise Control (CACC) is a technology that allows groups of vehicles to form in automated, tightly-coupled platoons. CACC schemes exploit Vehicle-to-Vehicle (V2V) wireless communications to exchange information between vehicles. However, the use of communication networks brings security concerns as it exposes network access points that the adversary can exploit to disrupt the vehicles' operation and even cause crashes. In this manuscript, we present a sensitivity analysis of CACC schemes against a class of resource-limited attacks. We present a modelling framework that allows us to systematically compute outer ellipsoidal approximations of reachable sets induced by attacks. We use the size of these sets as a security metric to quantify the potential damage of attacks affecting different signals in a CACC-controlled vehicle and study how two key system parameters change this metric. We carry out a sensitivity analysis for two different controller implementations (as given the available sensors there is an infinite number of realizations of the same controller) and show how different controller realizations can significantly affect the impact of attacks. We present extensive simulation experiments to illustrate the results.

eess.SY↗

arXiv2023

Feedback Motion Prediction for Safe Unicycle Robot Navigation

As a simple and robust mobile robot base, differential drive robots that can be modelled as a kinematic unicycle find significant applications in logistics and service robotics in both industrial and domestic settings. Safe robot navigation around obstacles is an essential skill for such unicycle robots to perform diverse useful tasks in complex cluttered environments, especially around people and other robots. Fast and accurate safety assessment plays a key role in reactive and safe robot motion design. In this paper, as a more accurate and still simple alternative to the standard circular Lyapunov level sets, we introduce novel conic feedback motion prediction methods for bounding the close-loop motion trajectory of the kinematic unicycle robot model under a standard unicycle motion control approach. We present an application of unicycle feedback motion prediction for safe robot navigation around obstacles using reference governors, where the safety of a unicycle robot is continuously monitored based on the predicted future robot motion. We investigate the role of motion prediction on robot behaviour in numerical simulations and conclude that fast and accurate feedback motion prediction is key for fast, reactive, and safe robot navigation around obstacles.

cs.RO↗

arXiv2023

Infinite Horizon Privacy in Networked Control Systems: Utility/Privacy Tradeoffs and Design Tools

We address the problem of synthesizing distorting mechanisms that maximize infinite horizon privacy for Networked Control Systems (NCSs). We consider stochastic LTI systems where information about the system state is obtained through noisy sensor measurements and transmitted to a (possibly adversarial) remote station via unsecured/public communication networks to compute control actions (a remote LQR controller). Because the network/station is untrustworthy, adversaries might access sensor and control data and estimate the system state. To mitigate this risk, we pass sensor and control data through distorting (privacy-preserving) mechanisms before transmission and send the distorted data through the communication network. These mechanisms consist of a linear coordinate transformation and additive-dependent Gaussian vectors. We formulate the synthesis of the distorting mechanisms as a convex program. In this convex program, we minimize the infinite horizon mutual information (our privacy metric) between the system state and its optimal estimate at the remote station for a desired upper bound on the control performance degradation (LQR cost) induced by the distortion mechanism.

cs.CR↗

arXiv2023

Translating Assembly Accuracy Requirements to Cut-Off Frequencies for Component Mode Synthesis

One of the most popular methods for reducing the complexity of assemblies of finite element models in the field of structural dynamics is component mode synthesis. A main challenge of component mode synthesis is balancing model complexity and model accuracy, because it is difficult to predict how component reduction influences assembly model accuracy. This work introduces an approach that allows for the translation of assembly model accuracy requirements in the frequency domain to the automatic selection of the cut-off frequencies for the model-order reduction (MOR) of components. The approach is based on a mathematical approach for MOR for coupled linear systems in the field of systems and control. We show how this approach is also applicable to structural dynamics models. We demonstrate the use of this approach in the scope of component mode synthesis (CMS) methods with the aim to reduce the complexity of component models while guaranteeing accuracy requirements of the assembly model. The proposed approach is illustrated on a mechanical, three-component structural dynamics system for which reduced-order models are computed that are reduced further compared to reduction using standard methods. This results in lower simulation cost, while maintaining the required accuracy.

eess.SY↗

arXiv2023

Dual Arm Impact-Aware Grasping through Time-Invariant Reference Spreading Control

With the goal of increasing the speed and efficiency in robotic dual arm manipulation, a novel control approach is presented that utilizes intentional simultaneous impacts to rapidly grasp objects. This approach uses the time-invariant reference spreading framework, in which partly-overlapping ante- and post-impact reference vector fields are used. These vector fields are coupled via the impact dynamics in proximity of the expected impact area, minimizing the otherwise large velocity errors after the impact and the corresponding large control efforts. A purely spatial task is introduced to strongly encourage the synchronization of impact times of the two arms. An interim-impact control phase provides robustness in the execution against the inevitable lack of exact impact simultaneity and the corresponding unreliable velocity error. In this interim phase, a position feedback signal is derived from the ante-impact velocity reference, which is used to enforce sustained contact in all contact points without using velocity error feedback. With an eye towards real-life implementation, the approach is formulated using a QP control framework, and is validated using numerical simulations on a realistic robot model with flexible joints and low-level torque control.

cs.RO↗

arXiv2023

Risk in Stochastic and Robust Model Predictive Path-Following Control for Vehicular Motion Planning

In automated driving, risk describes potential harm to passengers of an autonomous vehicle (AV) and other road users. Recent studies suggest that human-like driving behavior emerges from embedding risk in AV motion planning algorithms. Additionally, providing evidence that risk is minimized during the AV operation is essential to vehicle safety certification. However, there has yet to be a consensus on how to define and operationalize risk in motion planning or how to bound or minimize it during operation. In this paper, we define a stochastic risk measure and introduce it as a constraint into both robust and stochastic nonlinear model predictive path-following controllers (RMPC and SMPC respectively). We compare the vehicle's behavior arising from employing SMPC and RMPC with respect to safety and path-following performance. Further, the implementation of an automated driving example is provided, showcasing the effects of different risk tolerances and uncertainty growths in predictions of other road users for both cases. We find that the RMPC is significantly more conservative than the SMPC, while also displaying greater following errors towards references. Further, the RMPCs behavior cannot be considered as human-like. Moreover, unlike SMPC, the RMPC cannot account for different risk tolerances. The RMPC generates undesired driving behavior for even moderate uncertainties, which are handled better by the SMPC.

math.OC↗

arXiv2023

Linear Fault Estimators for Nonlinear Systems: An Ultra-Local Model Design

This paper addresses the problem of robust process and sensor fault reconstruction for nonlinear systems. The proposed method augments the system dynamics with an approximated internal linear model of the combined contribution of known nonlinearities and unknown faults -- leading to an approximated linear model in the augmented state. We exploit the broad modeling power of ultra-local models to characterize this internal dynamics. We use a linear filter to reconstruct the augmented state (simultaneously estimating the state of the original system and the sum of nonlinearities and faults). Having this combined estimate, we can simply subtract the analytic expression of nonlinearities from that of the corresponding estimate to reconstruct the fault vector. Because the nonlinearity does not play a role in the filter dynamics (it is only used as a static nonlinear output to estimate the fault), we can avoid standard restrictive assumptions like globally (one-sided) Lipschitz nonlinearities and/or the need for Lipschitz constants to carry out the filter design. The filter synthesis is posed as a mixed H2/Hinf optimization problem where the effect of disturbances and model mismatches is minimized in the Hinf sense, for an acceptable H2 performance with respect to measurement noise.

eess.SY↗

arXiv2023

Adaptive Headway Motion Control and Motion Prediction for Safe Unicycle Motion Design

Differential drive robots that can be modeled as a kinematic unicycle are a standard mobile base platform for many service and logistics robots. Safe and smooth autonomous motion around obstacles is a crucial skill for unicycle robots to perform diverse tasks in complex environments. A classical control approach for unicycle control is feedback linearization using a headway point at a fixed headway distance in front of the unicycle. The unicycle headway control brings the headway point to a desired goal location by embedding a linear headway reference dynamics, which often results in an undesired offset for the actual unicycle position. In this paper, we introduce a new unicycle headway control approach with an adaptive headway distance that overcomes this limitation, i.e., when the headway point reaches the goal the unicycle position is also at the goal. By systematically analyzing the closed-loop unicycle motion under the adaptive headway controller, we design analytical feedback motion prediction methods that bound the closed-loop unicycle position trajectory and so can be effectively used for safety assessment and safe unicycle motion design around obstacles. We present an application of adaptive headway motion control and motion prediction for safe unicycle path following around obstacles in numerical simulations.

cs.RO↗

arXiv2023

Modular Model Reduction of Interconnected Systems: A Top-Down Approach

Models of complex systems often consist of multiple interconnected subsystem/component models that are developed by multi-disciplinary teams of engineers or scientists. To ensure that such interconnected models can be applied for the purpose of simulation and/or control, a reduced-order model for the interconnected dynamics is needed. In the scope of this paper, we pursue this goal by subsystem reduction to warrant modularity of the reduction approach. Clearly, by reducing the complexity of the subsystem models, not only the accuracy of the subsystem models is affected, but, consequently, also the accuracy of the interconnected model. It is typically difficult to predict a priori how the interconnected model accuracy is affected precisely by the subsystem reduction. In this work, we address this challenge by introducing a top-down approach which enables the translation of given accuracy requirements of the interconnected system model to accuracy requirements at subsystem model level, by using mathematical tools from robust performance analysis. This allows for the independent reduction of subsystem models while guaranteeing the desired accuracy of the interconnected model. In addition, we show how this top-down approach can be used to significantly reduce the interconnected model in an illustrative structural dynamics case study.

eess.SY↗

arXiv2022

Robot control for simultaneous impact tasks via Quadratic Programming-based reference spreading

With the aim of further enabling the exploitation of impacts in robotic manipulation, a control framework is presented that directly tackles the challenges posed by tracking control of robotic manipulators that are tasked to perform nominally simultaneous impacts associated to multiple contact points. To this end, we extend the framework of reference spreading, which uses an extended ante- and post-impact reference coherent with a rigid impact map, determined under the assumption of an inelastic simultaneous impact. In practice, the robot will not reside exactly on the reference at the impact moment; as a result a sequence of impacts at the different contact points will typically occur. Our new approach extends reference spreading in this context via the introduction of an additional interim control mode. In this mode, a torque command is still based on the ante-impact reference with the goal of reaching the target contact state, but velocity feedback is disabled as this can be potentially harmful due to rapid velocity changes. With an eye towards real implementation, the approach is formulated using a quadratic programming (QP) control framework and is validated using numerical simulations both on a rigid robot model and on a realistic robot model with flexible joints.

cs.RO↗

arXiv2022

Robot Control for Simultaneous Impact Tasks through Time-Invariant Reference Spreading

With the goal of enabling the exploitation of impacts in robotic manipulation, a new framework is presented for control of robotic manipulators that are tasked to execute nominally simultaneous impacts. In this framework, we employ tracking of time-invariant reference vector fields corresponding to the ante- and post-impact motion, increasing its applicability over similar conventional tracking control approaches. The ante- and post-impact references are coupled through a rigid impact map, and are extended to overlap around the area where the impact is expected to take place, such that the reference corresponding to the actual contact state of the robot can always be followed. As a sequence of impacts at the different contact points will typically occur, resulting in uncertainty of the contact mode and unreliable velocity measurements, a new interim control mode catered towards time-invariant references is formulated. In this mode, a position feedback signal is derived from the ante-impact velocity reference, which is used to enforce sustained contact in all contact points without using velocity feedback. With an eye towards real implementation, the approach is formulated using a QP control framework, and is validated using numerical simulations both on a rigid robot with a hard inelastic contact model and on a realistic robot model with flexible joints and compliant partially elastic contact model.

cs.RO↗

arXiv2022

Immersion and Invariance-based Coding for Privacy in Remote Anomaly Detection

We present a framework for the design of coding mechanisms that allow remotely operating anomaly detectors in a privacy-preserving manner. We consider the following problem setup. A remote station seeks to identify anomalies based on system input-output signals transmitted over communication networks. However, it is not desired to disclose true data of the system operation as it can be used to infer private information. To prevent adversaries from eavesdropping on the network or at the remote station itself to access private data, we propose a privacy-preserving coding scheme to distort signals before transmission. As a next step, we design a new anomaly detector that runs on distorted signals and produces distorted diagnostics signals, and a decoding scheme that allows extracting true diagnostics data from distorted signals without error. The proposed scheme is built on the synergy of matrix encryption and system Immersion and Invariance (I&I) tools from control theory. The idea is to immerse the anomaly detector into a higher-dimensional system (the so-called target system). The dynamics of the target system is designed such that: the trajectories of the original anomaly detector are immersed/embedded in its trajectories, it works on randomly encoded input-output signals, and produces an encoded version of the original anomaly detector alarm signals, which are decoded to extract the original alarm at the user side. We show that the proposed privacy-preserving scheme provides the same anomaly detection performance as standard Kalman filter-based chi-squared anomaly detectors while revealing no information about system data.

cs.CR↗

arXiv2022

Modular Model Reduction of Interconnected Systems: A Robust Performance Analysis Perspective

Many complex engineering systems consist of multiple subsystems that are developed by different teams of engineers. To analyse, simulate and control such complex systems, accurate yet computationally efficient models are required. Modular model reduction, in which the subsystem models are reduced individually, is a practical and an efficient method to obtain accurate reduced-order models of such complex systems. However, when subsystems are reduced individually, without taking their interconnections into account, the effect on stability and accuracy of the resulting reduced-order interconnected system is difficult to predict. In this work, a mathematical relation between the accuracy of reduced-order linear-time invariant subsystem models and (stability and accuracy of) resulting reduced-order interconnected linear time-invariant model is introduced. This result can subsequently be used in two ways. Firstly, it can be used to translate accuracy characteristics of the reduced-order subsystem models directly to accuracy properties of the interconnected reduced-order model. Secondly, it can also be used to translate specifications on the interconnected system model accuracy to accuracy requirements on subsystem models that can be used for fit-for-purpose reduction of the subsystem models. These applications of the proposed analysis framework for modular model reduction are demonstrated on an illustrative structural dynamics example.

eess.SY↗

arXiv2022

Privacy-Preserving Federated Learning via System Immersion and Random Matrix Encryption

Federated learning (FL) has emerged as a privacy solution for collaborative distributed learning where clients train AI models directly on their devices instead of sharing their data with a centralized (potentially adversarial) server. Although FL preserves local data privacy to some extent, it has been shown that information about clients' data can still be inferred from model updates. In recent years, various privacy-preserving schemes have been developed to address this privacy leakage. However, they often provide privacy at the expense of model performance or system efficiency, and balancing these tradeoffs is a crucial challenge when implementing FL schemes. In this manuscript, we propose a Privacy-Preserving Federated Learning (PPFL) framework built on the synergy of matrix encryption and system immersion tools from control theory. The idea is to immerse the learning algorithm, a Stochastic Gradient Decent (SGD), into a higher-dimensional system (the so-called target system) and design the dynamics of the target system so that: the trajectories of the original SGD are immersed/embedded in its trajectories, and it learns on encrypted data (here we use random matrix encryption). Matrix encryption is reformulated at the server as a random change of coordinates that maps original parameters to a higher-dimensional parameter space and enforces that the target SGD converges to an encrypted version of the original SGD optimal solution. The server decrypts the aggregated model using the left inverse of the immersion map. We show that our algorithm provides the same level of accuracy and convergence rate as the standard FL with a negligible computation cost while revealing no information about the clients' data.

cs.LG↗

arXiv2022

Multiple Faults Estimation in Dynamical Systems: Tractable Design and Performance Bounds

In this article, we propose a tractable nonlinear fault isolation filter along with explicit performance bounds for a class of nonlinear dynamical systems. We consider the presence of additive and multiplicative faults, occurring simultaneously and through an identical dynamical relationship, which represents a relevant case in several application domains. The proposed filter architecture combines tools from model-based approaches in the control literature and regression techniques from machine learning. To this end, we view the regression operator through a system-theoretic perspective to develop operator bounds that are then utilized to derive performance bounds for the proposed estimation filter. In the case of constant, simultaneously and identically acting additive and multiplicative faults, it can be shown that the estimation error converges to zero with an exponential rate. The performance of the proposed estimation filter in the presence of incipient faults is validated through an application on the lateral safety systems of SAE level 4 automated vehicles. The numerical results show that the theoretical bounds of this study are indeed close to the actual estimation error.

math.OC↗

arXiv2022

Ultra Local Nonlinear Unknown Input Observers for Robust Fault Reconstruction

In this paper, we present a methodology for actuator and sensor fault estimation in nonlinear systems. The method consists in augmenting the system dynamics with an approximated ultra-local model (a finite chain of integrators) for the fault vector and constructing a Nonlinear Unknown Input Observer (NUIO) for the augmented dynamics. Then, fault reconstruction is reformulated as a robust state estimation problem in the augmented state (true state plus fault-related state). We provide sufficient conditions that guarantee the existence of the observer and stability of the estimation error dynamics (asymptotic stability of the origin in the absence of faults and ISS guarantees in the faulty case). Then, we cast the synthesis of observer gains as a semidefinite program where we minimize the L2-gain from the model mismatch induced by the approximated fault model to the fault estimation error. Finally, simulations are given to illustrate the performance of the proposed methodology.

eess.SY↗

arXiv2022

Hysteresis-Based RL: Robustifying Reinforcement Learning-based Control Policies via Hybrid Control

Reinforcement learning (RL) is a promising approach for deriving control policies for complex systems. As we show in two control problems, the derived policies from using the Proximal Policy Optimization (PPO) and Deep Q-Network (DQN) algorithms may lack robustness guarantees. Motivated by these issues, we propose a new hybrid algorithm, which we call Hysteresis-Based RL (HyRL), augmenting an existing RL algorithm with hysteresis switching and two stages of learning. We illustrate its properties in two examples for which PPO and DQN fail.

cs.LG↗

arXiv2022

Gaussian Mechanisms Against Statistical Inference: Synthesis Tools

In this manuscript, we provide a set of tools (in terms of semidefinite programs) to synthesize Gaussian mechanisms to maximize privacy of databases. Information about the database is disclosed through queries requested by (potentially) adversarial users. We aim to keep part of the database private (private sensitive information); however, disclosed data could be used to estimate private information. To avoid an accurate estimation by the adversaries, we pass the requested data through distorting (privacy-preserving) mechanisms before transmission and send the distorted data to the user. These mechanisms consist of a coordinate transformation and an additive dependent Gaussian vector. We formulate the synthesis of distorting mechanisms in terms of semidefinite programs in which we seek to minimize the mutual information (our privacy metric) between private data and the disclosed distorted data given a desired distortion level -- how different actual and distorted data are allowed to be.

eess.SY↗