Redundancy Design and Fault-Tolerant Control for eVTOL Distributed Propulsion

Introduction to Distributed Electric Propulsion in eVTOL

Distributed electric propulsion (DEP) is a cornerstone of modern eVTOL aircraft design, enabling higher efficiency, improved redundancy, and quieter operation. In a multi-rotor configuration, multiple electric motors drive individual propellers, allowing for precise thrust vectoring and enhanced safety. This guide details the redundancy design logic and essential engineering considerations for DEP systems, focusing on fault-tolerant control and the matching of high power density motors with reduction gearboxes.

The inherent redundancy of DEP means that a single motor failure does not lead to catastrophic loss of control. Instead, the remaining motors must compensate through rapid power redistribution and attitude adjustments. Understanding the control algorithms and hardware selection criteria is critical for engineers developing reliable eVTOL platforms.

Redundancy Design Logic for Multi-Rotor eVTOL

Redundancy in DEP systems is implemented at multiple levels: motor, inverter, battery, and communication buses. The most common architecture is a fully distributed setup where each motor is powered by its own inverter and battery pack segment, with interconnections to enable load sharing. This ensures that a single point of failure does not cascade across the propulsion system.

The design logic follows the principle of graceful degradation: the aircraft must maintain controlled flight and safe landing even after losing any single motor. This requires careful selection of the number of rotors and their geometric distribution. For a typical six-rotor or eight-rotor eVTOL, the control system is over-actuated, meaning there are more actuators than strictly needed for six-degree-of-freedom control. The extra actuators provide the necessary margin to reallocate thrust when one motor fails.

Engineers must also consider failure modes such as propeller jamming, inverter short-circuit, or battery depletion. Each failure scenario demands a specific reconfiguration strategy. The redundancy design is validated through extensive failure mode and effects analysis (FMEA) and hardware-in-the-loop testing.

Fault-Tolerant Control Algorithm Under Single Motor Failure

When a single motor fails, the immediate response is to detect the fault via current sensors, speed sensors, or motor temperature monitors. The control algorithm must then isolate the failed motor by cutting its power and re-energize the remaining motors to maintain the desired net thrust and moments. This is achieved through a reallocation process based on the control allocation matrix.

A common approach is to use a pseudo-inverse control allocation algorithm. The desired wrench (forces and torques) is mapped to individual motor thrust commands via a control effectiveness matrix. Under normal operation, all motors contribute. After a failure, the column corresponding to the failed motor is removed, and the pseudo-inverse of the reduced matrix is computed online to redistribute commands to the healthy motors. The algorithm also accounts for motor saturation limits to prevent overload.

In practice, the flight controller uses a cascaded structure: an outer loop for position and attitude tracking, and an inner loop for angular rate control. When a motor fails, the inner loop automatically adjusts the rates to keep the aircraft level, while the outer loop guides the aircraft to a safe landing. Advanced techniques like model predictive control (MPC) can further optimize the transient response and ensure stability under partial power loss.

Matching Principles for High Power Density Motors and Gearboxes

High power density motors are essential for eVTOL to minimize weight while delivering sufficient thrust. However, electric motors achieve peak efficiency at high rotational speeds (typically 10,000 to 20,000 RPM), while propellers operate efficiently at much lower speeds (2,000 to 4,000 RPM). A reduction gearbox is therefore required to match the motor speed to the propeller optimal speed.

The selection of the gearbox ratio depends on the motor's torque-speed characteristics and the propeller's power requirements. A common trade-off is between gearbox mass and efficiency. Higher reduction ratios require larger, heavier gears but allow the motor to run at its most efficient speed, reducing motor mass. The optimal point is found by minimizing the combined mass of motor and gearbox while meeting the peak torque and continuous power requirements.

For the motor itself, key parameters include specific power (kW/kg), continuous torque density, and thermal management capability. Motors designed for eVTOL often use high-strength magnets (e.g., samarium cobalt) and advanced cooling techniques (oil spray or direct winding cooling). The gearbox must be matched to the motor's output speed and torque ripple to avoid resonance. Planetary gearboxes are preferred for their compactness and high torque-to-weight ratio. Engineers must also consider lubrication, reliability, and noise constraints.

Conclusion

The redundancy design of distributed electric propulsion in eVTOL is a multi-faceted engineering challenge. By implementing robust fault-tolerant control algorithms that reallocate thrust following a single motor failure, and carefully matching high power density motors with appropriate reduction gearboxes, developers can achieve both safety and performance. Future work will focus on integrating AI-based prognostics and adaptive reconfiguration to handle multiple simultaneous failures, further enhancing the reliability of urban air mobility systems.