Equipment failure isn’t so bad for a small toy that only trolls in harbor. Worst case scenario, you lost a cheap drone. And small toys can’t do much damage to surrounding property. But for the long endurance drones, we can’t afford to lose the drone. We invested a lot of money into that 40 ft. (12 m) long drone. Fault tolerance becomes critical as we expand into larger and better drones.
Your average ship comes with plenty of fault tolerance. Think about fuses on a ship electrical system. Great idea. Something goes wrong, the fuse blows, protecting the rest of the system and isolating the problem. Now we just need to fix the problem and replace the fuse. Except how do you plan to achieve that fix on a drone? You aren’t there.
Most drones employ redundancy to get around the remote problem. If a system goes down, use the backup. This is especially important with communications. If we lose a communication link, we lose the whole drone. For small electronics, redundancy makes sense. It’s relatively inexpensive to add a 2nd GPS receiver. But for larger systems, this becomes more complicated.
Do we add a second engine? What about the electrical power system. Do we provide a completely redundant power supply, with double the electrical wires leading to every instrument and device? Those system redundancies become very expensive. And complicated. Consider a redundant power system. I need to keep the backup power isolated. Otherwise, whatever fault killed the primary power may do the same to my backup power. Then we need a way to switch from primary to backup power. The switch also needs power. So now I have a tertiary power system just to switch from my primary to secondary. Wow! That’s a lot of switches, wires, and complexity. Means a lot more things that can break.
Most drones don’t come with full system redundancy. If something major breaks, the drone switches to recovery mode. We don’t expect the drone to have full capability or to continue its mission. At this point, we just want the drone to return to safety. Recovery mode might be something simple, like a radio beacon so we can go out and find the drone. Some drones use a reduced propulsion system that allows it to limp home. The details of disaster recovery change with each drone. Currently, drones can continue with one or two minor faults. We run for home if a major fault happens. Beyond that, things don’t look good for the poor little drone.
Admittedly, fault tolerance still needs improvement on drones. The next major advancement I want to see: self-repair. Show me a drone that changes its own fuses. I see nascent signs of this already. Some operators equip their drones with cameras for self-diagnosis. For example, a camera pointing at the propeller can be critical when diagnosing loss of propulsion. Did we lose power, or is the propeller fouled with seaweed? A simple camera solves this problem. I look forward to seeing the next step, when the drone contains its own internal robot for self-repair. I think that capability will enable trust for larger drones and better autonomous operation.