1. Introduction
Aircraft icing results in a decrease in aerodynamic performance, characterized by a reduction in lift, an increase in drag, a decrease in the stall angle, and an increase in aerodynamic nonlinearity under the same flight conditions [
1,
2,
3]. Changes in the aircraft’s aerodynamic characteristics cause deviations from the original flight control design point, leading to a decline in maneuverability and stability, which significantly affects flight safety.
In response to these issues, manned aircraft employ the following solutions. 1. Anti-icing systems are used, such as heating elements to melt the ice or mechanical means to remove it [
4]. 2. The pilot monitors the aircraft’s icing severity through ice detection sensors [
5] and adjusts the flight strategy to ensure that the aircraft remains within a safe operational range, reducing the probability of accidents.
Manned aircraft operating along fixed flight paths can predict the probability of icing occurrences in advance, thereby mitigating the associated risks by adjusting their routes accordingly. However, UAVs operate in expansive mission areas under complex meteorological conditions, and owing to constraints in cost and weight, they are unable to predict icing risk along flight paths or detect the icing severity. Furthermore, anti-icing systems are typically heavy, energy-intensive, and costly, which is why most UAVs are not equipped with such systems. In addition, UAVs typically operate in autonomous flight mode. Owing to the slow nature of the icing process, when flight data indicate abnormalities, the icing severity is often already significant, which leads to significant degradation in aerodynamic performance, thereby reducing the UAV’s ability to fulfil its mission requirements and potentially compromising flight safety. Therefore, it is essential to design an icing severity detection method for UAVs and to reconfigure the flight control law in real time on the basis of the detection results to ensure flight safety.
Icing detection is a critical step in ensuring flight safety. Existing methods for icing detection can be categorized into direct and indirect detection techniques [
5]. Direct ice detection relies on sensors, such as capacitive, ultrasonic, and image-based detection methods [
6,
7]. Indirect ice detection is accomplished by detecting changes in the aircraft’s aerodynamic performance, primarily on the base of the aircraft’s motion and performance models, thereby enabling the detection of the icing severity. Reference [
8] enables the detection of the icing severity by calculating the total energy derivative of the aircraft, thereby calculating the change in the drag coefficient. However, this method relies on an accurate performance model. Currently, the primary method for icing detection is observer-based recognition of the icing severity [
9,
10,
11]. However, this method relies on active excitation and models that can accurately describe aircraft dynamics under nominal conditions. Icing causes a reduction in the aircraft’s stall angle of attack, thereby enhancing aerodynamic nonlinearity, and inappropriate excitation signals may induce instability in the aircraft’s motion, posing a risk to flight safety. Therefore, detecting the icing severity without the use of excitation signals is particularly important.
The calculation of safe flight control commands for icing aircraft is crucial for ensuring flight safety. References [
12,
13] design fuzzy risk boundaries for each flight parameter on the basis of the aircraft’s aerodynamic characteristics and, subsequently, obtain the time–domain response curves of the aircraft to input command signals through mathematical simulations. The risk assessment levels for different tracking commands are determined on the base of preset fuzzy risk boundaries. This method can assess the risk level associated with the aircraft’s command tracking and provides a certain degree of prediction for flight risk. However, the fuzzy risk boundaries it establishes are not adjusted for icing aircraft, leading to potential applicability issues. Reference [
14] determined a range of safe state variables for icing aircraft through reachable set analysis. If the aircraft remains within this range, a control strategy exists that enables the aircraft to achieve the desired state. However, the method is computationally intensive and time-consuming, which makes it challenging to meet real-time computational requirements.
The design of control law for icing aircraft is a crucial step in ensuring flight safety. For icing aircraft, applying a large control input may cause the aircraft’s angle of attack and other state variables to fall within dangerously large or small ranges, thereby jeopardizing flight safety. In Reference [
15], on the basis of the stall angle of attack, maximum roll angle, and minimum velocity under varying degrees of icing, the NDIC is employed to calculate the maximum available deflection angles of each control surface, which are then used as the limiting values for each control surface, thereby establishing the flight envelope protection control system. However, the effectiveness of the NDIC depends on the accuracy of aerodynamic modeling. If the aerodynamic model is not sufficiently accurate, the limit values of the control surfaces calculated at different times may vary significantly. Using the limit position during oscillations as the input for the protection control system can lead to oscillatory behavior or even divergence in the aircraft’s response. The model predictive control (MPC) approach has been widely used in recent years, and the MPC controller generates control commands for the current time by solving a constrained optimization problem for a future time horizon [
16,
17]. Reference [
18] proposed an ice tolerance flight envelope protection control system based on variable-weight multiple-model predictive control. The effectiveness of MPC in flight envelope protection control applications is demonstrated. However, the method requires repetitive iterative design at predefined operating points, which entails significant computational effort.
This paper proposes a design method for UAV ice tolerance flight envelope protection control based on LSTM neural network icing severity detection to address the issues outlined above; an LSTM neural network is employed to detect the icing severity without the need for excitation signals on the basis of historical aircraft flight data. Second, the existing fuzzy risk boundaries for the aircraft’s state and maneuver quantities are corrected on the basis of the aerodynamic model of the icing UAV. The risk level topography of the UAV’s three-dimensional trajectory commands is then obtained through mathematical simulations, enabling the determination of the range of safe tracking commands for the UAV. Next, an ice tolerance flight envelope protection control law is designed on the basis of NMPC. The NDIC is applied to design the inner loop control law, whereas the NMPC is used to design the outer loop control law, thereby ensuring the protection of key state variables such as the angle of attack and roll angle. Finally, the effectiveness and superiority of the method are demonstrated through a mathematical simulation-based calculation.
The novelty of the research methodology presented in this paper can be summarized as follows:
The icing severity detection method based on an LSTM neural network does not require active excitation and achieves rapid and accurate icing severity detection based on the UAV’s historical flight data while ensuring flight safety. Additionally, the offline-trained neural network has low computational requirements, making it suitable for UAV implementation.
By correcting the fuzzy risk boundaries of UAV flight parameters in icing conditions, a three-dimensional risk level topography of trajectory commands is generated. This enables the determination of a range of safe tracking commands for the UAV.
The integration of NMPC and NDIC simplifies the design process for icing-tolerant flight envelope protection. The control law effectively safeguards critical state variables, such as the angle of attack and roll angle, thereby ensuring flight safety for UAVs operating in icing conditions.
2. Flight Dynamics Modeling of the Icing UAV
2.1. General Parameters and Aerodynamic Modeling of the Icing UAV
In this paper, a specific type of UAV is used as a case study, with the three-view diagram and the overall parameters of the UAV presented in
Figure 1 and
Table 1, respectively.
The aerodynamic force and moment coefficients of the UAV are calculated as shown in Equation (1) [
19,
20]:
where
α and
β are the heading and sideslip angles of the aircraft;
p,
q, and
r are the roll, pitch, and yaw angular velocities, respectively;
is the average aerodynamic chord length of the aircraft;
b is the wingspan of the aircraft; and
V is the flight speed of the aircraft.
δe,
δa, and
δr are the deflections of the elevator, aileron, and rudder, respectively. Equation (1) shows that the total aerodynamic force of an aircraft consists of three main components: (1) the basic aerodynamic force/moment coefficients
Ci,basic such as
CL0,
CD0, and
Cm0; (2) the control surface aerodynamic force/moment coefficients
Ci,surface such as
CLδe,
Cmδe, and
CYδr; and (3) the dynamic aerodynamic force/moment coefficients
Ci,dynamic, such as
Cmα,
CYβ,
Clr, and
Clp.
Aircraft icing causes changes in aerodynamic derivatives. Bragg proposed a method for the aerodynamic modeling of icing with corrections to the aerodynamic derivatives on the basis of the clean configuration of the aircraft [
21].
In Equation (2),
CA is the aerodynamic derivative value before icing and
CAi is the aerodynamic derivative value after icing. The severity of aircraft icing,
η(
t), is a parameter that characterizes the severity of icing. It is related to the icing meteorological conditions and aircraft-related parameters and is a function of the icing time.
KCA is the coefficient icing factor (CIF), which reflects the extent of the impact of icing on each aerodynamic derivative of the aircraft. The value of the
KCA is closely related to the aircraft aerodynamic layout. By calculating
KCA, the aerodynamic correction method’s applicability to different aircrafts can be ensured. Additionally, as shown in
Figure 1, the research object in this paper has a layout similar to that of a conventional aircraft, making this method effective in characterizing the aerodynamic properties of the icing UAV.
The above correction method effectively captures the main trends of different aerodynamic derivatives after icing, and its simplicity makes it commonly used in icing aircraft modeling. However, the constant value of
KCA in this correction method cannot accurately capture the changes in aerodynamic characteristics caused by icing at larger angles of attack, nor can it provide a reliable basis for designing protective control law for the flight envelope. Reference [
22] combined wind tunnel experimental data and proposed a nonlinear coefficient icing factor (Variable CIF, VCIF) that varies with the angle of attack. As an example, the variation curve of the longitudinal aerodynamic coefficient icing factor for the UAV with respect to the angle of attack is shown in
Figure 2.
Figure 2 shows that the variation in each coefficient icing factor is small when the angle of attack is in the range of −5° to 5°. However, when the angle of attack exceeds 5°, the coefficient icing factor becomes a nonlinear function of the angle of attack rather than remaining constant. Therefore, when analyzing the ice tolerance flight envelope protection problem at larger angles of attack, the constant coefficient icing factor
KCA in Equation (2) should be corrected to a nonlinear coefficient icing factor
KCA(
α), which varies with the angle of attack. This correction more accurately captures the effect of icing on the aerodynamic characteristics of the aircraft at higher angles of attack. The improved aerodynamic modeling method for nonlinear icing is presented in Equation (3).
According to Equation (3), the aerodynamic coefficients for different icing severity and angles of attack can be calculated. Taking the longitudinal aerodynamic characteristics of an icing aircraft as an example, the curves of the longitudinal aerodynamic coefficients of the icing UAV, namely,
CL,
CD, and
Cm, are shown in
Figure 3.
As shown in
Figure 3, icing causes only small aerodynamic changes in the low angle of attack region (0° to 5°), but leads to significant aerodynamic changes in the high angle of attack region (5° to 15°). This behavior more accurately reflects the phenomena of reduced lift, a rapid increase in drag, and an upwards pitching moment of the iced aircraft at larger angles of attack.
2.2. UAV Flight Dynamics Modeling
The nonlinear flight dynamics equations for the UAV can be expressed as Equations (4)–(7).
In Equations (4)–(7), m represents the mass of the UAV; g represents the gravitational acceleration; u, v, and w represent the axial, lateral, and normal velocity components in the body-fixed coordinate system, respectively; q0, q1, q2, and q3 represent the quaternions used to compute the attitude; X, Y, and Z represent the axial, lateral, and normal aerodynamic forces in the body axis, respectively; L, M, and N represent the roll, pitch, and yaw aerodynamic moments, respectively; Ix, Iy, Iz, and Izx represent the moments of inertia and products of inertia; and x, y, and z represent the axial, lateral, and normal positions in the ground coordinate system, respectively.
The equation for the aircraft speed, angle of attack, and sideslip angle is shown in Equation (8).
The relationship between the quaternion and the attitude angles of the vehicle is shown in Equation (9).
In Equation (9), φ, θ, and ψ are the roll, pitch, and yaw angles in the body–axis system, respectively.
The UAV control surface model adopts a first-order inertia system, as shown in Equation (10).
In Equation (10),
I = a,
e, and
r represent the aileron, elevator, and rudder, respectively.
T is the control surface response time, and the subscript “
cmd” denotes the control surface command. The specific parameters of the control surface model are presented in
Table 2.
The mathematical simulation process for the icing UAV is as follows. First, the aerodynamic coefficients CLα, Cmα, etc., on the right side of Equation (1) under the current icing severity are calculated using the aerodynamic correction model in Equation (3). Next, the aerodynamic forces and moments acting on the UAV are determined based on its flight state, including the angle of attack, velocity, and other state variables. From this, the X, Y, and Z, and moments L, M, and N in the body–axis system, are calculated. Finally, the UAV’s state response at the current moment is calculated using the flight dynamics in Equations (4)–(7).
4. Fuzzy-Risk-Boundary-Based Method for Calculating the Risk Level for Commands
4.1. Methodology for Calculating the Risk Level of Commands
After UAV icing, inappropriate input tracking commands can generate large maneuver volumes, which, in turn, push the flight state into higher-risk intervals, jeopardizing flight safety. Therefore, it is necessary to calculate the risk level of different tracking commands on the basis of the changes in the aerodynamic characteristics of the UAV after icing, from which the command value with a lower risk value is selected as the tracking command for the mission.
The steps of the method are as follows. 1. The risk boundaries of the flight state variables and maneuvering variables are determined on the basis of the aerodynamic characteristics of the UAV. 2. The tracking command signal is selected according to the flight mission, and its calculation range is determined. 3. Through mathematical simulation, the UAV time–domain response curve is obtained, the risk value of each flight parameter is weighted to calculate the risk level of different tracking commands, and a three-dimensional risk level topology map for the commands is generated. This method effectively evaluates the risk level of UAV tracking commands and offers predictive insights into flight safety.
In the flight process, the risk boundary values for each state and control variable are not fixed. Therefore, the risk state of each flight parameter is classified fuzzily in the form of risk intervals. Moreover, the flight risk level of a UAV is jointly determined by its various flight parameters, and the UAV’s flight is considered safe when all the flight parameters are within the lower range of risk values. When any of the flight parameters deviate from the safe range, the flight safety of the UAV is at risk. Therefore, important flight parameters were selected as assessment indicators, and the risk levels of these indicators were evaluated to determine the overall flight risk level of the UAV.
The evaluation metrics selected in this paper include the airspeed V, angle of attack
α, sideslip angle
β, roll angle
φ, attitude angle
θ, vertical velocity
Hdot, normal overload
nz, elevator deflection
δe, aileron deflection
δa, and rudder deflection
δr. The risk boundaries of each state variable for the example UAV are classified on the basis of the fuzzy risk boundary setting method from Reference [
13], as shown in
Table 7.
The color stripes in
Table 7 represent the risk level of the flight parameters, with green, yellow, red, and black from the center to the edges indicating a progressively increasing risk level. The weight design within the range of different risk class intervals is shown in Equation (17):
where
xi represents different flight parameters,
Ri (i = 1, 2,…, 10) represents the risk level of each flight parameter, and
a,
b,…,
f represent the corresponding boundary values of the different risk level intervals, corresponding to the six boundary values for each flight parameter in
Table 7. If the combined risk level change during UAV tracking commands is characterized by
R, then
R is calculated as shown in Equation (18):
where
Pi is the weight representing the degree of contribution of the risk level of different flight parameters to the total risk level, which is calculated via the entropy weight and grey correlation algorithm proposed in Reference [
13], which is more objective and adaptable.
4.2. Fuzzy Risk Boundary Correction Method
The fuzzy risk boundaries designed for clean configurations may not be applicable because of the significant changes in the aerodynamic characteristics of UAV after icing. Therefore, this paper proposes an innovative method to correct fuzzy risk boundaries on the basis of the UAV’s icing severity and flight dynamics model, enabling the more accurate calculation of the risk level of tracking commands.
As mentioned in
Section 2, the value of the aerodynamic derivative in Equation (1) changes after icing. Therefore, to determine the fuzzy risk level boundaries for different flight parameters under UAV icing conditions, the overall force and moment characteristics of the UAV need to be analyzed as a benchmark. Taking the angle of attack risk boundary correction calculation for an icing UAV as an example, the aerodynamic coefficients involved in the angle of attack in Equation (1) include the lift coefficient
CL, the drag coefficient
CD, and the pitching moment coefficient
Cm. The method for determining the boundary limit value of the angle of attack risk from these three perspectives is outlined below.
The lift, drag, and pitching moment experienced by the example UAV in a trimmed condition are taken as a baseline. The angle of attack at which the lift, drag, and pitching moment after icing do not deviate beyond a specified margin from the baseline value is selected as the limiting value for the angle of attack boundary protection. The margins are selected on the basis of the boundary limits for different risk classes. Selecting the angle of attack limit values in this manner ensures that the iced UAV experiences an acceptable amount of lift loss, drag increase, and pitching moment variation within the angle of attack limit region. With this method, the engine thrust required at the same level of flight speed remains essentially unchanged, and the static stability can be adjusted to be nearly the same under both icing and clean conditions by modifying the control law parameters. After the three limiting values for the angle of attack are determined, the smallest limiting value is selected through a comparison, which represents the risk boundary of the angle of attack that ultimately satisfies the three design requirements for the lift, drag, and pitching moment. Similarly, risk boundaries for other flight state parameters can be determined via this approach.
The risk boundaries for control surface deflections, such as elevator, rudder, and aileron, are determined in a similar manner. On the basis of the force and moment characteristics related to these control inputs in Equation (1), appropriate safety margins are defined relative to the UAV’s trimmed baseline values. These margins are then used to establish the risk boundaries for the maneuvering variables. Unlike flight state quantities, maneuvering variables are inherently constrained by the aircraft’s design limitations. Therefore, additional considerations must be accounted for when determining the risk boundary values to ensure that they meet all the design requirements.
Using the fuzzy risk boundary correction method based on the UAV flight dynamics model described above, the fuzzy risk boundaries for the flight parameters of the UAV under an icing severity of 1 were determined, as shown in
Table 8.
A comparison of
Table 7 and
Table 8 reveals that, after the aircraft experiences icing, the risk intervals for various flight parameters become narrower, indicating an increased level of flight risk.
4.3. Calculation of the Risk Level Topology Map for 3D Commands
On the basis of the data in
Table 7 and
Table 8, the risk levels corresponding to different tracking commands and icing severities can be determined. This allows for identifying the range of safe commands necessary to accomplish the flight mission while ensuring flight safety.
Reference [
25] revealed that aircraft icing has specific environmental requirements, meaning that parameters such as the liquid water content (LWC) and mean volume drop diameter (MVD) need to be within a certain range, so aircraft icing occurs only within a specific range. Therefore, in this paper, the UAV tracking command is selected as the trajectory command to ensure that the UAV follows a stable route, allowing it to exit the icing area, reduce the icing severity, and thereby lower the flight risk. On the basis of the above analyses,
V,
γ, and
χ are selected as the flight control commands of the UAV for calculating the risk level topology map. The tracking commands and icing severity are defined as shown in Equation (19).
The time–domain response curves for each flight parameter, corresponding to different commands and icing severities, are obtained through mathematical simulation. Firstly, the fuzzy risk boundaries applicable to the UAV are determined on the basis of the icing severity. The risk level of the flight parameters is then determined on the basis of their values at different moments, which, in turn, allows for the calculation of the risk weight for each flight parameter via Equation (17). Afterwards, the risk level weights of each flight parameter are considered comprehensively, and the overall risk level of the UAV at different moments is determined via Equation (18). Finally, the combined risk level at different moments is weighted to determine the risk level of the tracking command. The results of the risk level calculations for different tracking commands and icing severities are presented in
Figure 11.
Figure 11a shows the topology map of the 3D command risk level for the clean configuration, whereas
Figure 11b illustrates the topology map of the 3D command risk level for an icing severity of 1. The risk level is categorized into four levels: green, yellow, red, and black. As the color intensifies, the risk level increases accordingly.
Figure 11a shows that, for the same trajectory angle command, the command risk level decreases as the speed tracking command increases. The reason for this is that, as the speed increases, the required change in the angle of attack to track the same trajectory angle command decreases. Consequently, each flight parameter remains within the low-risk interval, leading to a lower risk level for the tracking command. As the velocity tracking command decreases, to track the same trajectory angle command, the UAV requires a larger control surface deflection to maintain flight state quantities, such as the angle of attack, within the high-risk interval to generate the aerodynamic forces required to complete the mission, resulting in a higher risk level for the tracking command. When tracking the same speed command, as the tracking trajectory angle command decreases, the risk level of the tracking command also decreases. The reason for this is that, as the tracking trajectory angle command decreases, the increment of lift required by the UAV decreases. With the same dynamic pressure conditions, the increment of the angle of attack required also decreases, leading to a reduction in the variation of control surface deflection, which, in turn, lowers the risk value of the flight parameters. The tracking command risk level increases as the tracking trajectory angle command is further reduced to a larger negative value. The reason for this is that, to track a large negative trajectory angle command, the UAV will need to control the elevator to produce a significant positive deviation, causing the UAV’s angle of attack to continuously decrease, potentially reaching a negative value and entering the left end of the high-risk interval in
Table 7, which leads to an increase in the overall risk level of the UAV.
A comparison of
Figure 11a,b reveals that the black range in
Figure 11b is significantly larger than that in
Figure 11a, indicating that icing on the UAV leads to a substantial increase in the risk value of the tracking command. The effect of UAV icing on the available trajectory angle is more pronounced, with greater contraction on the upper boundary and less contraction on the lower boundary. This is primarily due to the deterioration of the UAV’s aerodynamic characteristics caused by icing, which leads to increased drag and reduced lift under the same flight conditions. The upper boundary trajectory angle is positive, and the maximum thrust can no longer overcome the additional drag induced by icing during climb. In contrast, the lower boundary trajectory angle is negative, allowing the potential energy from gliding to offset some of the increased drag.
On the basis of the above analysis, the risk level of the corresponding command can be calculated considering both the icing severity and the value of the tracking command. This approach provides the UAV with a safe range of tracking commands, ensuring that the UAV completes its flight tasks safely.
5. NMPC-Based Ice Tolerance Flight Envelope Protection Control Law Design
Under icing conditions, the aerodynamic characteristics of the UAV deteriorate, leading to a subsequent decline in flight performance. The control law design should ensure the fast, accurate, and stable tracking of command signals while prioritizing flight safety. In this paper, an NMPC-based ice tolerance flight envelope protection control law is designed following the aforementioned principles.
5.1. Design of the Inner Loop Structure of the Control Law Based on NDIC
NDIC is a superior control method for achieving the decoupled control of each state variable without the need for complex gain adjustments while providing clear physical insights into the system’s behavior [
26]. Therefore, NDIC is employed to design the inner loop control law for the ice tolerance flight envelope protection of the UAV. The parameters of the inner loop control law are adjusted on the basis of the icing severity detection result discussed in
Section 3, thereby optimizing the performance of the controller. The basic structure of the inner loop flight control law is shown in
Figure 12.
As shown in
Figure 12, the inner loop structure of the ice tolerance flight envelope protection control law consists of two loops. The inner loop control variables are
p, q, and
r, whereas the middle loop control variables are
α,
β, and
μ, with
μ representing the roll angle around the velocity vector axis. Ideally, the relationship between the control command and the actual response of the variable follows a first-order inertial link. The relationship between the command value and the actual response is expressed in Equation (20):
where
Xc is the command for the airflow angle or attitude angular velocity and
X is the actual response of the airflow angle or attitude angular velocity.
ωx represents the tracking response dynamic characteristic band, which includes
ωα,
ωβ,
ωμ,
ωp,
ωq, and
ωr.
5.2. Design of the Outer Loop Control Law Based on NMPC
Aircraft icing is a nonlinear and time-varying process. As the icing severity increases, the nonlinearity of UAV aerodynamic performance becomes more pronounced, and the safety margins for each flight parameter progressively diminish. The state quantities that are related mainly to flight safety during flight are the angle of attack, roll angle, and sideslip angle. Therefore, the protection of the above variables is particularly important.
The analysis of
Figure 3 reveals that the aerodynamic characteristics of the icing UAV exhibit minimal differences within the range of small angles of attack. In this range, icing has a limited impact on flight performance. However, beyond a certain angle of attack threshold, the aerodynamic characteristics change significantly. Therefore, the angle of attack for the icing UAV should not be too large during command tracking.
The NMPC generates a control sequence for the current moment by solving a constrained optimization problem over a set of future time steps. While ensuring the effectiveness of command tracking, it also ensures that the system parameters remain within the specified limit boundaries. Therefore, the NMPC offers significant advantages in terms of flight envelope protection.
On the basis of the above analysis, this paper proposes a flight envelope protection control method based on NMPC. The NMPC controller is applied to design the outermost loop of the UAV control system. The nonlinear equation of state for the outer loop of the UAV is shown in Equation (21) [
27], where
γ and
χ are the flight path angle and flight path heading angle of the UAV and
T,
L, and
D are the thrust, lift, and drag of the UAV, respectively. The state and output quantities are
V,
γ, and
χ, while the control variables are
T,
α, and
μ.
L and
D are calculated in real time by solving the flight dynamics Equation (4) using the current flight state parameters. This approach is independent of the aerodynamic model of the icing UAV, thereby effectively ensuring the accuracy of the NMPC.
The structure of the UAV outer loop NMPC controller is constructed according to Equation (21), as shown in
Figure 13.
As shown in
Figure 13, the UAV determines the time-varying limiting boundaries for the angle of attack and velocity roll angle on the basis of the icing severity detection values. The optimization objective function is constructed by considering the input tracking command values
Vcmd,
γcmd, and
χcmd, the designed output quantities, and the control variable weights. The UAV control commands
δp,
α, and
μ in the predicted time domain are obtained via optimization solving on the basis of the UAV outer loop mathematical model. These control commands are then used as the inner loop inputs for the UAV within the control time domain range. The NMPC controller continuously repeats the above process, using rolling optimization to obtain the UAV inner loop control commands. This approach ensures effective command tracking while simultaneously protecting the key state variables.
Figure 12 and
Figure 13 are combined to establish the overall structure of the UAV ice tolerance flight envelope protection control law, as shown in
Figure 14.
The parameters to be set during the design process of the NMPC controller include the following: error weights, control weights, control rate of change weights, prediction time horizon, control time horizon, and control boundaries. The error weights should be designed to ensure that the UAV can track the
V,
γ, and
χ commands both quickly and accurately [
28,
29,
30]. The control weights are applied to the UAV’s
δp, α, and
μ commands to prevent the inner loop control commands from becoming too large or too small. The control command changing rate weights regulate the rate of change in the inner loop commands to prevent excessively rapid changes, which could cause instability and lead to the dispersion of the UAV’s motion. The design of the prediction and control time domains involves trade-offs between system stability, dynamic performance, predictability, and computational complexity [
30,
31,
32].
As shown in
Figure 15, the working principle of the ice tolerance flight envelope protection control system is as follows: first, the icing severity is detected by the neural network on the basis of the historical flight data of the UAV. Then, the risk levels of different trajectory tracking commands for that icing level are calculated, and the safe tracking commands from them are selected as the UAV tracking command inputs. Finally, the UAV control law is switched to the NMPC flight envelope protection control law, and the parameters of the NMPC flight envelope protection control law are adjusted according to the results of the icing severity detection, completing the control law reconstruction and ensuring flight safety.