Redundancy Design in eVTOL Distributed Electric Propulsion Systems

Introduction

Distributed electric propulsion (DEP) is a core enabling technology for multi-rotor eVTOL aircraft, offering enhanced safety and performance through multiple independent motor-propeller units. Redundancy design must ensure that the loss of any single motor does not lead to catastrophic failure, while maintaining adequate thrust and control authority. This guide explains the engineering logic behind redundancy architectures, fault-tolerant control algorithms, and the key considerations for selecting high-power-density motors and gearboxes.

The fundamental challenge is that eVTOL operate in safety-critical environments where certification standards demand a certain level of fault tolerance. By distributing multiple small motors instead of a single large one, the system gains inherent redundancy, but careful design of control logic and powertrain components is required to realize this benefit.

Redundancy Architecture and Design Principles

In a typical multi-rotor eVTOL with eight or more rotors, the overall thrust requirement is distributed across all units. Redundancy design uses a k-out-of-n architecture, where the vehicle can sustain safe flight with a reduced number of operating motors. The design must account for worst-case scenarios, such as the loss of a motor at a critical rotor position, and ensure that the remaining motors can generate enough thrust to maintain flight and control.

Key principles include: (1) physical separation of motor and controller units to avoid common-cause failures; (2) independent power buses and batteries; (3) rapid fault detection and isolation; (4) control allocation that redistributes thrust among remaining motors while respecting their power and torque limits. The system must also handle transient effects like sudden torque loss without causing excessive attitude oscillations.

For safety certification, redundancy is often classified as 'fail-safe' or 'fail-operational'. In a fail-operational design, the eVTOL can continue normal flight after a single motor failure, and even complete its mission. This requires that the remaining motors have sufficient margin (typically 15-25% extra thrust capacity) in normal operation to compensate for a failed unit.

Fault-Tolerant Control Algorithm for Single Motor Failure

Upon detection of a motor failure (identified via current, speed, or torque deviation), the flight controller must switch from a nominal control allocation to a fault-tolerant mode. A widely used approach is control allocation based on pseudo-inverse redistribution, where the desired total thrust and moments are recalculated using a modified effectiveness matrix that excludes the failed motor.

The algorithm proceeds as follows: first, the fault identification module estimates which motor has failed and how much thrust capacity remains (usually zero for a complete failure). Then, the control allocator solves an optimization problem that minimizes thrust errors while respecting the torque and speed limits of each operational motor. Linear programming or quadratic programming solvers can achieve this in real-time. A practical technique is to precompute a set of allocation matrices for each possible failure scenario or use a dynamic saturation handling method.

Additional considerations include: (1) the need to adjust motor speed commands to avoid exceeding mechanical limits; (2) managing yaw control when a motor fails on an arm that also contributes to roll and pitch; (3) smoothly transitioning to the new allocation to prevent pilot disorientation or structural loads. The algorithm should also handle partial failures (e.g., motor power reduction) by treating them as a reduced effectiveness factor.

High-Power-Density Motor and Reducer Matching Selection

To achieve the required thrust-to-weight ratio, eVTOL motors must have high power density (typically >5 kW/kg). Permanent magnet synchronous motors (PMSM) with high-speed designs (10,000-20,000 rpm) are common. However, propellers operate best at much lower speeds (1,000-3,000 rpm), so a gearbox (reducer) is necessary to match speed and torque. The selection of motor and reducer pairs involves several trade-offs.

First, motor power density is maximized at higher speeds, but the reducer introduces weight, friction, and reliability concerns. A direct-drive motor would be simpler but heavier and larger for the same power. Therefore, the designer must choose a gear ratio that balances motor size with gearbox mass. Typically, a gear ratio between 5:1 and 10:1 is optimal for multi-rotor eVTOL. The gearbox must also handle the high torque pulses from rapid speed changes during fault recovery.

Second, thermal management is critical. High power density motors generate significant heat, and the gearbox adds additional losses. Integrated cooling solutions, such as oil spray cooling for the motor and gearbox, help maintain performance. The matching process should consider continuous and peak torque requirements, including overload conditions after a motor failure. It is often necessary to select a motor with a peak torque capability 1.5x the nominal to allow redistribution of loads.

Finally, reliability and maintenance must be factored in. Planetary gearboxes are common for their high ratio in a compact package, but they require precise lubrication and may fail due to debris. Redundant bearing supports and oil analysis sensors can improve dependability. Ultimately, the motor and reducer pair must meet the overall system weight budget while providing the necessary power and torque density for safe operation.

Case Study: Failure Mode Effects Analysis (FMEA)

A practical how-to step for engineers is to perform a Failure Mode Effects Analysis (FMEA) on the DEP system. For each motor, list failure modes such as electrical short, bearing seizure, or controller shutdown. Assess the effect on thrust and control. Then, design the fault-tolerant control algorithm to mitigate each failure mode. For example, if a motor jams, it could create a large drag torque; the control system must quickly command the opposite propeller to reduce net yaw moment.

Simulate the worst-case single motor failure at critical flight phases like hover and forward flight. Use a dynamic model that includes motor dynamics, propeller aerodynamics, and aircraft response. Tune the control allocation algorithm to avoid overloading the remaining motors. Validate through hardware-in-the-loop testing with actual motor controllers.

Conclusion

Redundancy design in eVTOL distributed electric propulsion is a multi-disciplinary challenge that integrates fault-tolerant control, motor selection, and gearbox design. By following the principles of k-out-of-n architecture, implementing robust control redistribution algorithms, and carefully matching high-power-density motors with reducers, engineers can create a safe and efficient DEP system. Continuous iteration through FMEA and testing ensures that the final design meets certification standards and provides the reliability required for urban air mobility.