Redundancy management of shuttle flight control sensors

Aerospace programs such as the Space Shuttle increasingly demand that avionics be fault tolerant. This paper describes the concept used for sustaining two system failures in the Shuttle Flight Control System (FCS) using redundancy management of sensors as the specific area of emphasis. Moreover, an analytical approach is described which is capable of verifying performance on a statistical basis, addressing performance requirements concerned with ?? Avoidance of nuisance failures. ?? Detectability of faults. ?? Maximum vehicle transients incurred as a result of a failure. This approach will be the basis for preflight verification of Space Shuttle FCS redundancy management implemented in software.