Veronte Autopilot 4x
Veronte Autopilot 4x is a redundant control system for critical operations such as UAM, eVTOL or MALE, HALE and Tactical drones. Fail-operational redundant autopilot architecture has been designed for avoiding single point of failure, all this included in a miniaturized autopilot managed by a dissimilar arbiter board.
Configurable control software makes Veronte Autopilot 4x compatible with all kinds of vehicle or aircraft layout. DO178C / ED-12 and DO254 aviation standards compliance is maintained in all configurations, enabling UAV, RPAS and UAM certification. Environmental DO160 / MIL-STD-810 test compliance data pack and MTBCF is also available for entering a certification process.
eVTOL, UAV and Others
User defined using block diagram flow
Events and actions for FTS, operation, payload…
Custom messages definition
Veronte Autopilot 4x includes a series of tools for the customization of the control and navigation strategy. The Programs module permits to generate block diagram flows for defining the control laws and other programs in the system. Block libraries like PIDs, Adaptive Control, Energy Control, maths and logical operations are available.
With the automations module it is possible to define automatic routines in the system. It permits to associate system events (WP reach, variable, battery…) with automatic actions (landing, go home, payload…) enabling fully autonomous mission and payload control. Custom Messages, Comms Manager, Phases… tools are also available for enhanced customization.
eVTOL & UAM
Redundancy and high-reliability assurance is a must when doing manned flight operations or flying over populated areas. For this, Veronte Autopilot 4x is the first drone and eVTOL autopilot including 4x redundancy and compliance with the DO178C and DO254 aviation standards up to DAL-B (DAL-A Ongoing).
For eVTOL operations, Veronte Autopilot 4x can be directly connected to an onboard stick and a mission computer running the user interface. Buttons and sticks can also be connected, configuring a custom aircraft cabin. Flight modes can easily be configured according to pilot skills and aircraft capabilities.
Onboard sticks and user interface
Fleet management and database connectivity
Redundancy and certification data pack
MALE, HALE & Tactical UAV installation
Interface with onboard mission computer
Compliance with DO178C, DO254, DO160
MALE & Critical UAV
Veronte Autopilot 4x has been successfully installed in a wide range of Tactical, MALE and HALE UAVs. This redundant control system includes advanced tools for these scenarios, such as, fly-by-camera or communications silence. Fully autonomous operation from vessels or moving vehicles is possible thanks to the Rendezvous and Relative Mission algorithms.
In configurations where onboard computer vision or extended data processing capacity is needed, it is possible to interface a Mission Computer with the Veronte Autopilot 4x. It permits to exchange telemetry data between both computers and send commands and routes to the autopilot from the external source.
Embedded 3x Redundancy
Three complete autopilot cores inside
External 4x Core
Third party autopilot connection as main core or FTS
No Single Point Of Failure, robust even on arbiter failure
Veronte Autopilot 4x is the redundant version of the Veronte Autopilot 1x. It embeds three complete autopilot cores plus one dissimilar arbiter board managing the redundancy. This redundant flight controller has been designed so there is no single point of failure and custom voting strategies can be configured.
An external autopilot core can be installed by connecting it to the multiplexing stage and entering to the voting strategy. The 4th core can be configured as the main flight computer so the Veronte Autopilot 4x acts as a FTS solution or it can be a dissimilar backup unit.
DO178C / ED-12 and DO254 DAL-B compliance
Test according to DO160 and MIL-STD-810
Design, testing and manufacturing reliability evidences
DO178C / ED-12 and DO254 aviation design standards are followed during the Veronte Autopilot 4x development (DAL-B). It permits to ensure the hardware and software reliability in the redundant autopilot for eVTOL and UAV certification. In addition, DO160 and MIL-STD-810 test permits to ensure robustness to adverse environmental conditions.
A robust Acceptance Test Procedure (ATP) is followed during the manufacturing process. Environmental Stress Screening (ESS) phase subjects the autopilot to temperature and vibration cycles for the detection of latent failures. This documentation, together with the DO Certification Data packs provides the evidence needed for UAV or eVTOL certification.
Onboard and on ground data logging
Embedded worldwide DEM model
Flight control optimization for aircraft layout
In these applications where failure is not an option, Veronte Autopilot 4x includes extended reliability and fail-operational functions. The automations module in Veronte permits to customize the aircraft performance upon a system failure or a risk to the operation (Low battery, datalink loss, GNSS loss, obstacle detection, flight envelope…).
Onboard and control station data loggers are available within the autopilot and in the control station for post flight analysis. In addition, the eVTOL and UAV flight controller includes: worldwide DEM, curve based navigation, GNSS-attitude estimation, relative missions, RTK, adaptive control, sensor fusion, situational awareness, fly-by-camera…
Long Range Operations
A wide variety of communication channels can be used for interfacing the Veronte Autopilot 4x with the GCS (Ground Control Station). Veronte Tracker is the prefered solution for long range communication but third party LOS, 4G/LTE and Satcom datalink modules can be used for communications with no range limitations.
The use of Veronte Cloud and the embedded 4G module in the UAV / eVTOL control system enables UTM integration by interfacing with online databases for air traffic and weather information. Sense & Avoid functions are also possible by installing an obstacle data source, such an, ADS-B, a radar or a LIDAR sensor.
Sense & Avoid
RS232, RS485, PWM, GPIO… ports
Dedicated connector for external module
Extended I/O and long cables
Veronte Autopilot 4x includes a wide variety of inputs and outputs. RS232, RS485, CAN Bus, I2C, PWM, Analog, Digital I/O… are available and can be easily configured for interfacing with all kinds of devices. A dedicated connector is available for the connection of an external 4th autopilot core.
The Veronte CEX module is designed for large vehicles so the number of I/O available can be easily expanded and complex system architectures can be defined. The redundant CAN Bus provides a robust communications channel for long cables, converting the signals to PWM, I2C… once near the device requiring it.
|Enclosure||Anodized aluminium | IP67 Waterproof | EMI Shielding|
|Weight||650g (Including 3x radio module)|
|Temperature range (No convection)||-40 to 65ºC|
|Pressure port diameter||2.4mm|
|RF connectors||SSMA jack female | 1x LOS Radio / 2x GNSS / 1x 4G)|
|Advanced Vehicle Control|
|eVTOL operations||Fully autonomous | Fly-by-wire | Remote control|
|Critical systems||MALE, HALE & tactical | Populated areas | Critical facilities|
|Any vehicle layout||Aircraft: Fixed-wing, VTOL, multicopter, autogiro, helicopter, parafoil, or hybrid | USV (Surface Vehicles ) | UGV (Ground Vehicles) | Other|
|Control surfaces||Aileron, flap, elevator, rudder, gas, v-tail, x-tail, elevon, flaperon, ruddervator, cyclic, collective, throttle, custom servo mixing… | Up to 32 actuators | Custom servo mixing|
|Engine||Electric, combustion or turbine | Multiple engine support|
|Control modes||Autonomous | Manual | Assisted manual | Fly-By-Camera | Custom|
|Automations||Custom automatic routines | Actions (go home, go to, output trigger…) | Events (variable range, WP reach, Control phase…)|
|Programs||Custom control algorithms | Configurable execution flow|
|Control blocks||PID | Energy control | Gain scheduling | Autotuning | Stall protection|
|Control phases||Customizable | Takeoff, landing, cruise, hold, autorotation, gliding, taxi, tumble, sea skimming…|
|GNSS denied||Inertial navigation | Sensors + wind estimation|
|Custom messages||CAN bus | Serial | User defined protocols|
|Embedded DEM||Worldwide Digital Elevation Model (DEM) onboard|
|Mission computer||Veronte VCP | Onboard telemetry and telecommand | Inflight mission edit | NVIDIA, Linux or Windows|
|Control station software||Veronte Pipe included | Support for custom CS software integration|
|Simulation environment||HIL (Hardware In the Loop) | SIL (Software In the Loop) | Custom integrations|
|Safety & Reliability|
|No SPOF||No single point of failure | Robust to arbiter failure|
|3x Redundancy||Embedded triple redundancy|
|4x Redundancy||External autopilot core | Main controller or fail-operational unit|
|Redundant power input||Up to 4 independent inputs|
|FTS (Flight Termination System)||Dissimilar microprocessors & regulation stages | Automatic or manual activation|
|Internal redundancy||Redundant communication bus | Kill me function on each core|
|Custom voting logics||Configurable voting logics and strategies|
DDP: Declaration of Design & Performance
ATR: Acceptance Test Results
COC: Certificate Of Compliance
|Manufacturing process||Strict Acceptance Test Procedure (ATP) | Conformal coat|
|ESS (Environment Stress Screening)||Temperature and vibration circles for early failure detection|
|DO160 & MIL-STD-810 Environmental test||Temperature, temperature variation, altitude, shock, vibration|
|DO178C Software reliability||DAL-B|
|DO254 Hardware reliability||DAL-B|
|Certification datapack||PSAC, SDP, CMP, SQAP, SVP, HVVP, HCMP, HPAP, TTR, SVCP, SQAR, SCI, SECI, SRD, TD, SVR, SCMR, SAS, PR, HRD, HDD, HTP, HVVR, HCMR.|
|Certification support||Dedicated engineering support|
|Software testing||24/7 testing environment | Custom test for specific PDIs | Iron bird setup|
|MTBF||4×10^7 MTBF | Project-based MTBCF calculation|
|Configurable failsafe||Custom events and actions | Multiple safety levels|
|Warnings||Visual & sound alarms | Customizable|
|User access level||Unlimited users | Custom permissions|
|Redundancy||Redundant sensors on each autopilot core|
|9x Barometer||3x 0 to 103 kPa | 3x 1 to 120kPa | 3x 3 to 110 kPa|
|3x Pitot||3x 0.003kPa (5kt 8km/h sea level) to 6.9kPa (206kt 382km/h sea level) | Up to 1570kt 2900km/h with external sensor|
|6x Accelerometers (3 axes)||3x ±16G | 3x ±24G | Sustained manoeuvre|
|6x Gyroscopes (3 axes)||6x 125 to 2000 deg/sec|
|6x Magnetometers (3 axes)||3x 16 gauss | 3x 8 gauss|
|6x GPS||GPS, BeiDou, GLONASS | RTK | GNSS-based Attitude|
|4x Voltage||4x Input voltage sensor|
|3x Temperature||3x Internal temperature sensor|
|External sensors||Enhanced compatibility | Navigation fusion|
|I / O (Critical Ports)|
|Power||17 / 29 (without data link / 3G data)|
|PWM / GPIO||Up to 16 (multiplexed)|
|VOut||5 & 3.3V (multiplexed)|
|CAN Bus||2x (redundant)|
|ADC||5x (0-3V) (independent)|
|EQUEP (Encuadrature encoder)||1x (multiplexed)|
|USB||3x (one per module)|
|I/O Extenders||Veronte CAN expander | Redundant CAN bus communications|
- Multiplexed: Arbiter controls which module signal is in the I/O
- Redundant: Communications bus
- Independent: All modules receive the same signal
|I / O (Auxiliary Ports – Arbiter Microprocessor)|
|Vin||1x (6.5-36V) DC|
|PWM / GPIO||8x|
|ARINC||1x Tx / 1x Rx|
|I / O (Auxiliary Ports – External FCU Interface)|
|PWM / GPIO||12x|
|FTS (Input)||1x Watchdog|
|LOS Datalink||3x Embedded datalink | Custom combinations|
|LOS Datalink options||410-480MHz | 902-928MHz | 2400-2483MHz | None|
|BLOS Datalink||3x Embedded datalink | 4G | eSIM or nano-SIM|
|External modules||RS232 connection | SATCOM | 4G | LOS|
|Other||External radio module via RS232, Satcom, 4G|
|Tracking antenna||Veronte Tracker or third party|
|Geofencing||Hard & soft | No go areas|
|Sense & avoid||Lidar, radar, ADS-B|
|Selectable units||Selectable units or custom unit creation|
|Workspace||Drag & drop telemetry displays (LCD, text, gauge, LED…) | Configurable colors & sizes|
|Map view||Map sources (Google Maps, Bing Maps, Open Maps…) | Custom map layers|
|Multiple platforms||Simultaneous platform control from the same control station|
|Multiple control stations||Multiple control stations available for controlling or monitoring|
|Route||Intuitive user interface for waypoint & route creation | Inflight mission edit|
|Payload||Camera gimbal, tracking antenna, transponder, camera shooter, GNSS receiver…|
|Post-flight||Post-flight analysis tool | CSV data export|
|Safety pitot||Manual control at any time during the operation | Joystick connection on ground or onboard|
|Export||No export restrictions, ITAR free | Advanced functionalities may require an export permit. Please contact our team for further details|