METHOD AND SYSTEM FOR ELECTRONICALLY CONTROLLING THE MOVEMENT OF A SERVO-ASSISTED DEVICE FOR RECEIVING AND/OR TRANSMITTING AND/OR REFLECTING ELECTROMAGNETIC RADIATIONS

Abstract

 A control method (100) for electronically controlling the movement of a servo-assisted device (3) for receiving and/or transmitting and/or reflecting electromagnetic radiations, comprising the steps of:
- acquiring (101) first sensor data by means of at least one first sensor (s1, s2);
- acquiring (201) second sensor data by means of at least one second sensor (s2, s3);
- processing (102) the first sensor data to synthesize a first control signal (cs1) by means of a first algorithm for controlling the movement of the servo-assisted device (3);
- processing (202) the second sensor data to synthesize a second control signal (cs2) by means of a second algorithm for controlling the movement of the servo-assisted device (3), the step of processing (202) the second sensor data being carried out in parallel with the step of processing (102) the first sensor data;
- performing an integrity check (103) of the first sensor data and/or of said first control signal (cs1) to determine if said first sensor data and/or said
first control signal (cs1) are intact or compromised;
- if it is determined from said integrity check step (103) that said first sensor data and/or said first control signal (cs1) are intact, providing the servo-assisted device (3) with the first control signal (cs1); otherwise
- providing (204) the servo-assisted device (3) with the second control signal (cs2).

Description

FIELD OF THE INVENTION

[0001] The present invention relates to the technical field of servo-assisted devices for receiving and/or transmitting and/or reflecting electromagnetic radiations, such as for example antenna systems, optical systems, radar systems,. In particular, the present invention relates to a method and system for electronically controlling the movement of a servo-assisted device for receiving and/or transmitting and/or reflecting electromagnetic radiations.

BACKGROUND ART

[0002] Servo-assisted devices for receiving and/or transmitting and/or reflecting electromagnetic radiations are known and widely used. For example, these servo-assisted devices comprise receiving and/or transmitting antennas, for example of radar systems, or comprise electro-optical emitters and/or receivers which can be moved by one or more actuators to vary or stabilize the pointing direction, and in general to electronically control the movement of the aforesaid devices. The aforesaid servo-assisted devices may also include movable and/or deformable mirrors, for example orientable mirrors. A servo-assisted device of the type indicated above is disclosed in European patent application EP 2887455 A1, which in particular discloses a steerable antenna.

[0003] In order to vary the pointing direction, or in general to electronically control the movement of servo-assisted devices of the type described above, the use is known of control systems comprising:

• one or more sensors adapted to acquire sensor data related to at least one motion and/or position parameter of a servo-assisted device for receiving and/or transmitting and/or reflecting electromagnetic radiations;
• at least one processing and control unit adapted to receive and process the sensor data to synthesize at least one control signal;
• at least one actuator comprised in, or operatively coupled to, the aforesaid servo-assisted device, adapted to receive said control signal to control the movement of the servo-assisted device.

[0004] Although control systems of the type described are currently widely used, the known control systems are not yet adequately robust or reliable with respect to possible breakdowns, malfunctioning or operating conditions which may compromise the operation or accuracy of the systems, and in particular, but not exclusively, of the related sensors.

[0005] In an attempt to reduce the aforesaid drawbacks, the attention of the known art to date has predominantly focused on developing control solutions based on the redundancy of the sensors. However, these solutions are not efficient due to size, weight or economical constraints, and in some applications are not even implementable.

[0006] It is a general object of the present description to provide a control method and system which allows obviating completely, or at least partially, the problems described above with reference to the control methods and systems of the known art.

[0007] The aforesaid object, as well as other objects better appearing below, are achieved by a control method for electronically controlling the movement of a servo-assisted device for receiving and/or transmitting and/or reflecting electromagnetic radiations, as defined in claim 1. Preferred and advantageous embodiments of the aforementioned control method are defined in the appended dependent claims. The present invention also relates to a control system for electronically controlling the movement of a servo-assisted device for receiving and/or transmitting and/or reflecting electromagnetic radiations, as defined in claim 10.

[0008] The invention will be better understood from the following detailed description of particular embodiments thereof, given by way of non-limiting examples, with reference to the accompanying drawings briefly described in the following paragraphs.

BRIEF DESCRIPTION OF THE DRAWINGS

[0009] 

Figure 1 shows an exemplary diagram of a non-limiting embodiment of a possible system in which the control method according to the present invention can be implemented.

Figure 2 shows a flow diagram of a non-limiting embodiment of the control method according to the present invention.

Figure 3 shows a block diagram of a non-limiting embodiment of the control system according to the present invention.

DETAILED DESCRIPTION

[0010] Figure 1 shows an exemplary and non-limiting embodiment of an avionics system 1. The aforesaid avionics system 1 comprises a support platform 2, in particular an avionics platform 2, and a servo-assisted device 3 for receiving and/or transmitting and/or reflecting electromagnetic radiations mounted on the avionics platform 2. The aforesaid avionics platform 2 may, for example be a drone, airplane, rocket, missile, satellite. From now on, for simplicity of disclosure, the servo-assisted device 3 for receiving and/or transmitting and/or reflecting electromagnetic radiations will also be referred to as a servo-assisted device 3 in short.

[0011] However, the embodiments of the present invention are not limited to avionics systems because they can be extended to land or marine applications requiring the use of a servo-assisted device 3 for receiving and/or transmitting and/or reflecting electromagnetic radiations mounted in a stationary or movable support platform 2, for example mounted on a land vehicle, on a spacecraft or on a watercraft. The land vehicle may, for example be a motor vehicle, a van, a truck, a train. The watercraft may, for example be a boat or a ship. The aforesaid land vehicle or watercraft or spacecraft may also be a self-driven vehicle.

[0012] The support platform 2 preferably comprises propulsion means 4, for example it comprises at least one motor. If the support platform 2 is an avionics platform, the aforesaid propulsion means 4 comprise a rocket motor, for example a solid or liquid propellant rocket motor. If the support platform 2 is a land platform, the aforesaid propulsion means 4 comprise, for example a thermal, electric or hybrid powertrain.

[0013] According to an advantageous embodiment, system 1 comprises an inertial measurement unit (IMU) 5 preferably accommodated in the support platform 2. An inertial measurement unit is an electronic device which measures and signals the specific force of a body, the angular speed and sometimes, the orientation of the body, using a combination of sensors such as accelerometers, gyroscopes and at times, magnetometers. IMUs conventionally are used to maneuver aircraft (a heading and attitude reference system), including unmanned aerial vehicles (UAVs), among many others, and spacecraft, including satellites. In certain cases, IMUs are currently also employed in land vehicles, for example motor vehicles, or in watercrafts.

[0014] According to an advantageous embodiment, the system 1 comprises an on-board electronic control unit 6, preferably accommodated in the support platform 2 and operatively connected to the propulsion means 4 and the inertial measurement unit 5 to control the movement of the support platform 2, in particular to maneuver the support platform 2. In order to control the movement of the support platform 2, system 1 may further comprise a wireless data communication interface 7, accommodated on board platform 2, operatively connected to the on-board electronic control unit 6 and operatively connectable to a remote control device, for example by means of a wireless data communication link, for example land or satellite.

[0015] The servo-assisted device 3 comprises at least one actuator 8 and at least one movable part 9, or payload 9, operatively connected to actuator 8 to be moved by actuator 9. The movable part 9 comprises, for example at least one transmitting and/or receiving antenna device, or at least one optical device, for example a photosensor adapted to capture visual signals in the visible and/or infrared spectrum. The aforesaid optical device may comprise an image sensor. In alternative or additional embodiments, the aforesaid optical device comprises at least one optical emission device, such as a laser and/or an LED and/or an optical reflection device, for example, such as a mirror, for example.

[0016] According to an advantageous embodiment, the aforesaid servo-assisted device 3 comprises a gimbal support with two rotation axes, which preferably are perpendicular. For example, the aforesaid servo-assisted device 3 is made according to European patent application EP 2887455 A1. Here, actuator 8 comprises two actuators, for example two electric servomotors, one for each rotation axis. The movable part 9 preferably comprises a transmitting and/or receiving array antenna, more preferably a radar antenna of a guide system of the support platform 2. The movable part 9 is orientable so as to rotate about the two aforesaid rotation axes. According to a possible embodiment, the servo-assisted device 3 is a steerable antenna of a missile seeker.

[0017] According to a preferred and non-limiting embodiment, the servo-assisted device 3, or at least the movable part 9 thereof, is housed in a radome 10 fastened to the support platform 2.

[0018] System 1 comprises at least one first sensor s1, s2 adapted and configured to acquire first sensor data. System 1 further comprises at least one second sensor s2, s3 adapted and configured to acquire second sensor data. The aforesaid sensors s1, s2, s3 allow acquiring position and/or movement parameters of the support platform 2 and/or of the servo-assisted device 3.

[0019] For example, the at least one first sensor s1, s2 comprises a first group of sensors, comprising at least one inertial sensor s1, for example comprised in the IMU 5, and at least one non-inertial sensor s2, for example at least one non-inertial position sensor, such as, for example an angular sensor. According to an advantageous embodiment, actuator 8 comprises a servomotor and the aforesaid angular sensor s2 is, or comprises, an encoder integrated in the servomotor. According to a preferred embodiment, as mentioned above, actuator 8 comprises two servomotors, one for each rotation axis of the movable part 9, and the aforesaid angular sensor s2 is, or comprises, a pair of encoders, each of which integrated in a respective servomotor.

[0020] For example, the at least one second sensor s2, s3 comprises a second group of sensors s2, s3, among which there is the non-inertial sensor s2 described in the previous paragraph, and there is a further sensor s3 which is, for example a gyro sensor integrated in the servo-assisted device 3 and integral with the movable part 9. For example, sensor s3 is a biaxial inertial sensor.

[0021] The system 1 further comprises an electronic control module 20 operatively connected to the first sensor s1, s2 to receive the first sensor data and operatively connected to the second sensor s2, s3 to receive the second sensor data. Figure 1 shows the electronic control module 20 integrated in the electronic control unit 6 of the support platform 2 only by way of example. In an alternative embodiment, the electronic control module 20 could form part of a dedicated electronic control unit, for example integrated in the servo-assisted device 3 or placed in the vicinity thereof.

[0022] The electronic control module 20 is a unit which comprises firmware and hardware components and advantageously is implemented by means of one or more FPGAs (Field Programmable Array Logic).

[0023] The electronic control module 20 is adapted and configured, i.e., programmed, to process the first sensor data to synthesize a first control signal cs1 by means of a first algorithm for controlling the movement and/or the positioning of the servo-assisted device 3. The electronic control module 20 is further configured to process, in parallel to processing the first sensor data, the second sensor data to synthesize a second control signal cs2 by means of a second algorithm for controlling the movement and/or the positioning of the servo-assisted device 3. The electronic control module 20 is further operatively connected to the servo-assisted device 3 to provide the latter with the first control signal cs1 or the second control signal cs2 based on of the control method 100 described below with reference to Figure 2.

[0024] Figure 2 particularly shows an exemplary and non-limiting flow diagram of a control method 100 for electronically controlling the movement of a servo-assisted device 3 for receiving and/or transmitting and/or reflecting electromagnetic radiations.

[0025] The control method 100 comprises the steps of:

• acquiring 101 first sensor data by means of the at least one first sensor s1, s2;
• acquiring 201 second sensor data by means of the at least one second sensor s2, s3.

[0026] The control method 100 further comprises the steps of:

• processing 102 the first sensor data to synthesize the first control signal cs1 by means of a first algorithm for controlling the movement and/or positioning of the servo-assisted device 3;
• processing 202 the second sensor data to synthesize a second control signal cs2 by means of a second algorithm for controlling the movement of the servo-assisted device 3, the step of processing 202 the second sensor data being carried out in parallel with the step of processing 102 the first sensor data.

[0027] According to a particularly advantageous embodiment, the first and second control algorithms implement, or are based on, different laws for controlling the movement and/or positioning of the servo-assisted device 3, in particular for considering the possible heterogeneity of the sensor data provided by the at least one first sensor s1, s2 and the at least one second sensor s2, s3, respectively.

[0028] The control method 100 further comprises an integrity check step 103 of the first sensor data to determine if the first sensor data and/or the first control signal cs1 are intact or compromised. "Compromised" means both the case in which the aforesaid integrity check is such as to ascertain that the sensor data and/or the control signal are actually compromised and the case in which the aforesaid check is such as to provide an indication concerning the fact that the sensor data and/or the first control signal cs1 potentially are compromised.

[0029] According to a possible embodiment, the aforesaid integrity check step 103 is performed according to at least one first control criterion in which the first sensor data and/or the first control signal cs1 are directly analyzed. This first control criterion is, for example based on fault detection and prediction checks and/or integrity checks of the data according to one or more of the following analyses: bit alarm, parity check, checksum, consistency, maximum value reached, statistical analysis. According to an alternative or additional embodiment, the integrity check is performed based on a second control criterion which analyzes data provided by one or more sources of additional data (such as, for example temperature sensors, humidity sensors, shock sensors) and/or by comparing data provided by combinations of sensors.

[0030] As indicated by the selection block 104 shown in the flow diagram in Figure 2, if it is determined from the integrity check step 103 that the first sensor data and/or the first control signal cs1 are intact, the control method 100 comprises a step of providing 105 the servo-assisted device 3 with the first control signal cs1. Instead, if it is determined from the integrity check step 103 that the first sensor data and/or the first control signal cs1 are corrupt, the control method 100 comprises a step of providing 205 the servo-assisted device 3 with the second control signal cs2.

[0031] The aforesaid control method 100 may be executed in real time and iteratively during the acquisition of the first and second sensor data, whereby while the servo-assisted device 3 is being provided with the second control signal cs2, if with respect to a successive integrity check step 103 of the first sensor data and/or the first control signal cs1, the control method 100 determines that the first sensor data and/or the first control signal become intact again, it may be established to perform step 105 again to resume providing the servo-assisted device 3 with the first control signal cs1.

[0032] It is also worth noting that according to an advantageous embodiment, the above-described control method 100 may also include an additional step of checking the integrity of the second sensor data and/or the second control signal cs2, and a step of comparing the results of the integrity check step 103 of the first sensor data and/or the first control signal with the results of the aforesaid additional checking step may also be provided to select, based on the results of the comparison, whether the servo-assisted device 3 is to be provided with the first control signal cs1 or the second control signal cs2.

[0033] According to an advantageous embodiment, in the control method 100, the servo-assisted device 3 is carried or supported by a support platform 2, and the first sensor s1, s2 comprises at least one sensor s1 integrated in the support platform 2, and said second sensor s2, s3 comprises at least one sensor s3 integrated in the servo-assisted device 3. Preferably, the support platform 2 is an avionics platform, preferably a missile platform.

[0034] According to an advantageous embodiment, the support platform 2 comprises an inertial measurement unit - IMU - 5, and said at least one first sensor s1 is a sensor of said IMU.

[0035] According to an advantageous embodiment, said at least one first sensor s1, s2 comprises a first group of sensors and said at least one second sensor comprises a second group of sensors s2, s3. The first and second groups of sensors comprise at least one shared sensor s2 and at least one dedicated sensor s1, s3. For example, the shared sensor s2 comprises the non-inertial angular sensor and is integrated in an actuator 8 of the servo-assisted device 3.

[0036] According to possible embodiments, the servo-assisted device 3 is, or comprises, an antenna of a missile seeker, or a camera or a thermal imager.

[0037] Further features of the control method 100 can be derived directly from the above description for system 1 and for this reason they will not be described again.

[0038] With reference to Figure 3, the above description for system 1 and the control method 100 also extends to a control system 300 for electronically controlling the movement of a servo-assisted device 3 for receiving and/or transmitting and/or reflecting electromagnetic radiations.

[0039] The control system 300 comprises at least one first sensor s1, s2 adapted and configured to acquire first sensor data. The control system 300 further comprises at least one second sensor s2, s3 adapted and configured to acquire second sensor data. The aforesaid sensors s1, s2, s3 allow acquiring position and/or movement parameters of the support platform 2 and/or of the servo-assisted device 3. Preferably, the at least one first sensor s1, s2 and the at least one second sensor s2, s3 comprise sensors arranged on board the servo-assisted device 3 and/or a support platform 2 of the servo-assisted device 3.

[0040] With regards to examples of types and positioning of the sensors s1, s2, s3, refer to that described above in relation to Figure 1.

[0041] According to an advantageous embodiment, the control system 300 comprises at least one auxiliary sensor s4 adapted and configured to acquire additional sensor data. Said auxiliary sensor s4 preferably comprises one or more of the sensors from the following list: temperature sensor, humidity sensor, shock sensor, vibration sensor.

[0042] The control system 300 further comprises an electronic control module 20 operatively connected to the first sensor s1, s2 to receive the first sensor data and operatively connected to the second sensor s2, s3 to receive the second sensor data. If at least one auxiliary sensor s4 is provided in the control system 300, the electronic control module 20 is also operatively connected to this auxiliary sensor s4 to receive additional sensor data.

[0043] The electronic control module 20 is a unit which comprises firmware and hardware components and preferably is implemented by means of one or more FPGAs.

[0044] The electronic control module 20 further comprises:

• a first processing module 301 adapted and configured to synthesize a first control signal cs1 from the first sensor data;
• a second processing module 302 adapted and configured to synthesize a second control signal cs2 from the second sensor data, said second processing module 302 being such as to carry out such a synthesis in parallel with the synthesis carried out by the first processing module 301.

[0045] The electronic control module 20 further comprises an integrity check module 303 for checking the integrity of the first sensor data and/or of said first control signal cs1, which is adapted and configured to determine if the first sensor data and/or the first control signal cs1 are intact or compromised.

[0046] The electronic control module 20 further comprises a selection module 304 operatively connected to the first processing module 301, the second processing module 302, the integrity check module 303, and preferably connected to the servo-assisted device 3. In the example, the selection module 304 receives in input both the first control signal cs1 and the second control signal cs2.

[0047] If the integrity check module 303 determines that the first sensor data and/or the first control signal cs1 are intact, the selection module 304 is adapted and configured to provide the servo-assisted device 3 with the first control signal cs1. If instead the integrity check module 303 determines that the first sensor data and/or the first control signal cs1 are compromised, the selection module 304 is adapted and configured to provide the servo-assisted device 3 with the second control signal cs2. To make the aforesaid selection of the control signal to be provided to the servo-assisted device 3, the selection module 304 may, for example be controlled by a switching signal sw_s provided by the integrity check module 303.

[0048] As at least partly explained above, in order to check if the first sensor data and/or the first control signal cs1 are intact or compromised, the integrity check module 303 may perform a direct check based on the analysis of the first sensor data and/or the first control signal cs1 and/or may perform an indirect check by analyzing the additional sensor data acquired by means of the at least one auxiliary sensor s4. For example, if sensor s4 is a temperature sensor, the integrity check module 303 may determine that the first sensor data are intact if the temperature detected or measured by virtue of the data provided by the auxiliary sensor s4 is comprised in a range of operating temperatures in which it is possible to assume that the first sensor s1, s2 is capable of providing accurate data, for example based on the technical specifications provided by the manufacturer or based on data acquired during characterization.

[0049] With reference to Figures 1 and 3, an example of practical implementation of the control system 300 according to the invention is now described. In such an example, the servo-assisted device 3 is a radar antenna which is steerable along two perpendicular rotation axes. The radar antenna comprises, for example an antenna sensor which represents the movable, in particular steerable, part 9 of the servo-assisted device 3. The steerable part 9 is, for example supported by a biaxial gimbal electromechanical support device. The servo-assisted device 3 comprises two actuators 8, for example two brushless motors, each associated with a respective rotation axis. Each of the two brushless motors comprises a non-inertial angular sensor s2, for example an angular encoder, respectively. Each of the two actuators 8 receives in input a respective first control signal cs1 provided by the selection module 304, which determines the torque of the respective actuator 8.

[0050] The first processing module 301 synthesizes a first pair of control signals cs1 to be provided to the actuators 8 based on the first sensor data provided by the inertial sensor s1 and by the two non-inertial angular sensors s2. In particular:

• the first processing module 301 acquires the inertial angular speed associated with the support platform 2 by means of the first sensor data provided by sensor s1;
• the first processing module 301 estimates the relative angular speeds between the sensors s2 and the support platform 2 and adds the inertial angular speed of the support platform 2 acquired by means of sensor s1 to such speeds to reconstruct the inertial speeds of the sensors s2 by means of the first sensor data provided by the sensors s2.

[0051] The first processing module 301 compares the inertial speeds of the sensors s2 with the speeds it would have imparted to such sensors s2 with the control signals provided and the resulting error is used to synthesize the new first control signals cs1 of the actuators 8. If the integrity check block 103 determines that the first sensor data provided by the sensors s1, s2 are intact, the actuators 8 are provided with said new first control signals cs1.

[0052] In parallel to the processing performed by the first processing module 301, the second processing module 302:

• acquires the inertial angular speeds of the movable part 9 by means of second sensor data provided by sensor s3;
• uses the second sensor data provided by the angular sensors s2 exclusively for checking the actuators 8.

[0053] The second processing module 302 compares the inertial angular speeds of the movable part 9 with the speeds it would have imparted to such sensors s2 by means of the second synthetized control signals cs2 and the resulting error is used to synthesize the new second control signals cs2 of the actuators 8. If the integrity check block 303 determines that the first sensor data provided by sensor s1 are corrupt, the selection block 304 forwards the aforesaid new second control signals cs2 synthesized by the second processing block 302 to the actuators 8. Thereby, the control system 300 is capable of correctly and continuously controlling the movement of the servo-assisted device 3 also in the event of an actual or hypothetical breakdown or malfunction of sensor s1.

[0054] Without prejudice to the principle of the invention, the embodiments and the manufacturing details can be broadly varied with respect to the above description disclosed by way of a non-limiting example, without departing from the scope of the invention as defined in the appended claims.

Claims

1. A control method (100) for electronically controlling the movement of a servo-assisted device (3) for receiving and/or transmitting and/or reflecting electromagnetic radiations, comprising the steps of:

- acquiring (101) first sensor data by means of at least one first sensor (s1, s2);

- acquiring (201) second sensor data by means of at least one second sensor (s2, s3);

- processing (102) the first sensor data to synthesize a first control signal (csl) by means of a first algorithm for controlling the movement of the servo-assisted device (3);

- processing (202) the second sensor data to synthesize a second control signal (cs2) by means of a second algorithm for controlling the movement of the servo-assisted device (3), the step of processing (202) the second sensor data being carried out in parallel with the step of processing (102) the first sensor data;

- performing an integrity check (103) of the first sensor data and/or of said first control signal (csl) to determine if said first sensor data and/or said first control signal (csl) are intact or compromised;

- if it is determined from said integrity check step (103) that said first sensor data and/or said first control signal (csl) are intact, providing the servo-assisted device (3) with the first control signal (cs1); otherwise

- providing (204) the servo-assisted device (3) with the second control signal (cs2).

2. A control method (100) according to claim 1, wherein the servo-assisted device (3) is carried or supported by a support platform (2), and wherein said first sensor (s1, s2) comprises at least one sensor (s1) integrated in the support platform (2) and said second sensor (s2, s3) comprises at least one sensor (s3) integrated in the servo-assisted device (3).

3. A control method (100) according to claim 2, wherein the support platform (2) is an avionics platform, preferably a missile platform.

4. A control method (100) according to claim 2 or 3, wherein the support platform (2) comprises an inertial measurement unit - IMU - (5), and wherein said first sensor (s1) is a sensor of said IMU.

5. A control method (100) according to any one of the preceding claims, wherein said second sensor comprises a non-inertial angular sensor (s2).

6. A control method (100) according to any one of the preceding claims, wherein said at least one first sensor (s1, s2) comprises a first group of sensors, and wherein said at least one second sensor comprises a second group of sensors (s2, s3), and wherein the first and second groups of sensors comprise at least one shared sensor (s2) and at least one dedicated sensor (s1, s3).

7. A control method (100) according to claims 5 and 6, wherein said shared sensor (s2) comprises said non-inertial angular sensor (s2) and is integrated in an actuator (8) of the servo-assisted device (3).

8. A control method (100) according to any one of the preceding claims, wherein the servo-assisted device (3) is, or comprises, an antenna of a missile seeker, or a camera or a thermal imager.

9. A control method (100) according to any one of the preceding claims, wherein the first and second control algorithms implement different control laws.

10. A control system (300) for electronically controlling the movement of a servo-assisted device (3) for receiving and/or transmitting and/or reflecting electromagnetic radiations, comprising:

- at least one first sensor (s1, s2) adapted and configured to acquire first sensor data;

- at least one second sensor (s2, s3) adapted and configured to acquire second sensor data;

- an electronic control module (20) operatively connected to the first sensor (s1, s2) to receive the first sensor data and operatively connected to the second sensor (s2, s3) to receive the second sensor data;

wherein the electronic control module (20) comprises:

- a first processing module (301) adapted and configured to synthesize a first control signal (csl) from the first sensor data;

- a second processing module (302) adapted and configured to synthesize a second control signal (cs2) from the second sensor data, said second processing module (302) being such as to carry out said synthesis in parallel with the synthesis carried out by the first processing module (301);

- an integrity check module (303) for checking the integrity of the first sensor data and/or of said first control signal (cs1), adapted and configured to determine if the first sensor data and/or the first control signal (csl) are intact or compromised;

- a selection module (304) operatively connected to the first processing module (301), the second processing module (302), the integrity check module (303);

wherein:

- if the integrity check module (303) determines that the first sensor data and/or the first control signal (csl) are intact, the selection module (304) is adapted and configured to provide the servo-assisted device (3) with the first control signal (cs1); otherwise,

- if the integrity check module (303) determines that the first sensor data and/or the first control signal (csl) are compromised, the selection module (304) is adapted and configured to provide the servo-assisted device (3) with the second control signal (cs2).

11. A control system (300) according to claim 10, wherein said at least one first sensor (s1, s2) comprises a first group of sensors and wherein said at least one second sensor comprises a second group of sensors (s2, s3), and wherein the first and second groups of sensors comprise at least one shared sensor (s2) and at least one dedicated sensor (s1, s3).

12. A control system (300) according to claim 10 or 11, wherein said first and said second sensor data comprise data related to at least one motion and/or position parameter of the servo-assisted device (3).

13. A control system (300) according to any one of claims 10 to 12, wherein in order to check if the first sensor data and/or the first control signal (csl) are intact or compromised, the integrity check module (303) is such as to perform a direct check based on the analysis of the first sensor data and/or the first control signal (cs1).

14. A control system (300) according to any one of claims 10 to 13, wherein in order to check if the first sensor data and/or the first control signal (csl) are intact or compromised, the integrity check module (303) is such as to perform a direct check by analyzing additional sensor data acquired by means of at least one auxiliary sensor (s4) .

15. A control system (300) according to claim 14, wherein said at least one auxiliary sensor (s4) comprises one or more of the sensors from the following list: temperature sensor, humidity sensor, shock sensor, vibration sensor.

Drawing