Veronte Autopilot 4x
Veronte Autopilot 4x is a redundant control system for critical operations such as UAM, eVTOL or MALE, HALE and Tactical drones. Fail-operational redundant autopilot architecture has been designed for avoiding single point of failure, all this included in a miniaturized autopilot managed by a dissimilar arbiter board.
Configurable control software makes Veronte Autopilot 4x compatible with all kinds of vehicle or aircraft layout. DO178C / ED-12 and DO254 aviation standards compliance is maintained in all configurations, enabling UAV, RPAS and UAM certification. Environmental DO160 / MIL-STD-810 test compliance data pack and MTBCF is also available for entering a certification process.
4x Redundancy
Certification Datapack
Dissimilar Arbiter
No SPOF
eVTOL, UAV and Others
Control Strategy
User defined using block diagram flow
Automatic Routines
Events and actions for FTS, operation, payload…
Payload Interface
Custom messages definition
Control
Control
Veronte Autopilot 4x includes a series of tools for the customization of the control and navigation strategy. The Programs module permits to generate block diagram flows for defining the control laws and other programs in the system. Block libraries like PIDs, Adaptive Control, Energy Control, maths and logical operations are available.
In configurations where onboard computer vision or extended data processing capacity is needed, it is possible to interface a Mission Computer with the Veronte Autopilot 4x. It permits to exchange telemetry data between both computers and send commands and routes to the autopilot from the external source.
eVTOL & UAM
eVTOL & UAM
Redundancy and high-reliability assurance is a must when doing manned flight operations or flying over populated areas. For this, Veronte Autopilot 4x is the first drone and eVTOL autopilot including 4x redundancy and compliance with the DO178C and DO254 aviation standards up to DAL-B (DAL-A Ongoing).
For eVTOL operations, Veronte Autopilot 4x can be directly connected to an onboard stick and a mission computer running the user interface. Buttons and sticks can also be connected, configuring a custom aircraft cabin. Flight modes can easily be configured according to pilot skills and aircraft capabilities.
eVTOL Features
Onboard sticks and user interface
Cloud Connectivity
Fleet management and database connectivity
High Reliability
Redundancy and certification data pack
Proven Reliability
MALE, HALE & Tactical UAV installation
Companion Computer
Interface with onboard mission computer
Certification
Compliance with DO178C, DO254, DO160
MALE & Critical UAV
MALE & Critical UAV
Veronte Autopilot 4x has been successfully installed in a wide range of Tactical, MALE and HALE UAVs. This redundant control system includes advanced tools for these scenarios, such as, fly-by-camera or communications silence. Fully autonomous operation from vessels or moving vehicles is possible thanks to the Rendezvous and Relative Mission algorithms.
In configurations where onboard computer vision or extended data processing capacity is needed, it is possible to interface a Mission Computer with the Veronte Autopilot 4x. It permits to exchange telemetry data between both computers and send commands and routes to the autopilot from the external source.
Embedded 3x Redundancy
Three complete autopilot cores inside
External 4x Core
Third party autopilot connection as main core or FTS
High Reliability
No Single Point Of Failure, robust even on arbiter failure
Redundancy
Redundancy
Veronte Autopilot 4x is the redundant version of the Veronte Autopilot 1x. It embeds three complete autopilot cores plus one dissimilar arbiter board managing the redundancy. This redundant flight controller has been designed so there is no single point of failure and custom voting strategies can be configured.
An external autopilot core can be installed by connecting it to the multiplexing stage and entering to the voting strategy. The 4th core can be configured as the main flight computer so the Veronte Autopilot 4x acts as a FTS solution or it can be a dissimilar backup unit.
Design Reliability
DO178C / ED-12 and DO254 DAL-B compliance
Environmental Test
Test according to DO160 and MIL-STD-810
Certification Documents
Design, testing and manufacturing reliability evidences
Certification
Certification
DO178C / ED-12 and DO254 aviation design standards are followed during the Veronte Autopilot 4x development (DAL-B). It permits to ensure the hardware and software reliability in the redundant autopilot for eVTOL and UAV certification. In addition, DO160 and MIL-STD-810 test permits to ensure robustness to adverse environmental conditions.
A robust Acceptance Test Procedure (ATP) is followed during the manufacturing process. Environmental Stress Screening (ESS) phase subjects the autopilot to temperature and vibration cycles for the detection of latent failures. This documentation, together with the DO Certification Data packs provides the evidence needed for UAV or eVTOL certification.
Data Logger
Onboard and on ground data logging
Worldwide Operation
Embedded worldwide DEM model
Advanced Control
Flight control optimization for aircraft layout
Advanced Functions
Advanced Functions
In these applications where failure is not an option, Veronte Autopilot 4x includes extended reliability and fail-operational functions. The automations module in Veronte permits to customize the aircraft performance upon a system failure or a risk to the operation (Low battery, datalink loss, GNSS loss, obstacle detection, flight envelope…).
Onboard and control station data loggers are available within the autopilot and in the control station for post flight analysis. In addition, the eVTOL and UAV flight controller includes: worldwide DEM, curve based navigation, GNSS-attitude estimation, relative missions, RTK, adaptive control, sensor fusion, situational awareness, fly-by-camera…
Long Range Operations
Long Range Operations
A wide variety of communication channels can be used for interfacing the Veronte Autopilot 4x with the GCS (Ground Control Station). Veronte Tracker is the prefered solution for long range communication but third party LOS, 4G/LTE and Satcom datalink modules can be used for communications with no range limitations.
The use of Veronte Cloud and the embedded 4G module in the UAV / eVTOL control system enables UTM integration by interfacing with online databases for air traffic and weather information. Sense & Avoid functions are also possible by installing an obstacle data source, such an, ADS-B, a radar or a LIDAR sensor.
LOS Datalink
BLOS Communications
Sense & Avoid
UTM
Extended I/O
RS232, RS485, PWM, GPIO… ports
4th Autopilot
Dedicated connector for external module
CAN Expander
Extended I/O and long cables
Extended I/O
Extended I/O
Veronte Autopilot 4x includes a wide variety of inputs and outputs. RS232, RS485, CAN Bus, I2C, PWM, Analog, Digital I/O… are available and can be easily configured for interfacing with all kinds of devices. A dedicated connector is available for the connection of an external 4th autopilot core.
The Veronte CEX module is designed for large vehicles so the number of I/O available can be easily expanded and complex system architectures can be defined. The redundant CAN Bus provides a robust communications channel for long cables, converting the signals to PWM, I2C… once near the device requiring it.
| Mechanical | |
| Enclosure | Anodized aluminium | IP67 Waterproof | EMI Shielding |
| Weight | 750g (Including 3x radio module) |
| Size | 128x70x84mm |
| Mounting | M4 screws |
| Temperature range (No convection) | -40 to 65ºC |
| Pressure port diameter | 2.4mm |
| RF connectors | SSMA jack female | 1x LOS Radio / 2x GNSS / 1x 4G) |
| Advanced Vehicle Control | |
| eVTOL operations | Fully autonomous | Fly-by-wire | Remote control |
| Critical systems | MALE, HALE & tactical | Populated areas | Critical facilities |
| Any vehicle layout | Aircraft: Fixed-wing, VTOL, multicopter, autogiro, helicopter, parafoil, or hybrid | USV (Surface Vehicles ) | UGV (Ground Vehicles) | Other |
| Control surfaces | Aileron, flap, elevator, rudder, gas, v-tail, x-tail, elevon, flaperon, ruddervator, cyclic, collective, throttle, custom servo mixing… | Up to 32 actuators | Custom servo mixing |
| Engine | Electric, combustion or turbine | Multiple engine support |
| Control modes | Autonomous | Manual | Assisted manual | Fly-By-Camera | Custom |
| Automations | Custom automatic routines | Actions (go home, go to, output trigger…) | Events (variable range, WP reach, Control phase…) |
| Programs | Custom control algorithms | Configurable execution flow |
| Control blocks | PID | Energy control | Gain scheduling | Autotuning | Stall protection |
| Control phases | Customizable | Takeoff, landing, cruise, hold, autorotation, gliding, taxi, tumble, sea skimming… |
| GNSS denied | Inertial navigation | Sensors + wind estimation |
| Custom messages | CAN bus | Serial | User defined protocols |
| Embedded DEM | Worldwide Digital Elevation Model (DEM) onboard |
| Mission computer | Veronte VCP | Onboard telemetry and telecommand | Inflight mission edit | NVIDIA, Linux or Windows |
| Control station software | Veronte Pipe included | Support for custom CS software integration |
| Simulation environment | HIL (Hardware In the Loop) | SIL (Software In the Loop) | Custom integrations |
| Safety & Reliability | |
| No SPOF | No single point of failure | Robust to arbiter failure |
| 3x Redundancy | Embedded triple redundancy |
| 4x Redundancy | External autopilot core | Main controller or fail-operational unit |
| Redundant power input | Up to 4 independent inputs |
| FTS (Flight Termination System) | Dissimilar microprocessors & regulation stages | Automatic or manual activation |
| Internal redundancy | Redundant communication bus | Kill me function on each core |
| Custom voting logics | Configurable voting logics and strategies |
| Reliability documents | DDP: Declaration of Design & Performance ATR: Acceptance Test Results COC: Certificate Of Compliance |
| Manufacturing process | Strict Acceptance Test Procedure (ATP) | Conformal coat |
| ESS (Environment Stress Screening) | Temperature and vibration circles for early failure detection |
| DO160 & MIL-STD-810 Environmental test | Temperature, temperature variation, altitude, shock, vibration |
| DO178C Software reliability | DAL-B |
| DO254 Hardware reliability | DAL-B |
| Certification datapack | PSAC, SDP, CMP, SQAP, SVP, HVVP, HCMP, HPAP, TTR, SVCP, SQAR, SCI, SECI, SRD, TD, SVR, SCMR, SAS, PR, HRD, HDD, HTP, HVVR, HCMR. |
| Certification support | Dedicated engineering support |
| Software testing | 24/7 testing environment | Custom test for specific PDIs | Iron bird setup |
| MTBF | 4×10^7 MTBF | Project-based MTBCF calculation |
| Configurable failsafe | Custom events and actions | Multiple safety levels |
| Warnings | Visual & sound alarms | Customizable |
| User access level | Unlimited users | Custom permissions |
| Sensors | |
| Redundancy | Redundant sensors on each autopilot core |
| 9x Barometer | 3x 0 to 103 kPa | 3x 1 to 120kPa | 3x 30 to 110 kPa |
| 3x Pitot | 3x 0.003kPa (5kt 8km/h sea level) to 6.9kPa (206kt 382km/h sea level) | Up to 1570kt 2900km/h with optional external sensor |
| 6x Accelerometers (3 axes) | 6x ±16G | 3x ±24G | Sustained manoeuvre (peaks up to ±32g) |
| 6x Gyroscopes (3 axes) | 9x 125 to 2000 deg/sec (compensated) |
| 6x Magnetometers (3 axes) | 6x 16 gauss | 3x 8 gauss |
| 6x GPS | GPS, BeiDou, GLONASS | RTK | GNSS-based Attitude |
| 4x Voltage | 4x Input voltage sensor |
| 3x Temperature | 3x Internal temperature sensor |
| External sensors | Enhanced compatibility | Navigation fusion |
| I / O (Critical Ports) | |
| Vin | 4x (6.5-36V) |
| Power | 17 / 29 (without data link / 3G data) |
| PWM / GPIO | Up to 16 (multiplexed) |
| RS232 | 1x (multiplexed) |
| RS485 | 1x (multiplexed) |
| VOut | 5 & 3.3V (multiplexed) |
| CAN Bus | 2x (redundant) |
| ADC | 5x (0-3V) (independent) |
| EQUEP (Encuadrature encoder) | 1x (multiplexed) |
| I2C | 1x (multiplexed) |
| UART | 1x (multiplexed) |
| USB | 3x (one per module) |
| I/O Extenders | Veronte CAN expander | Redundant CAN bus communications |
- Multiplexed: Arbiter controls which module signal is in the I/O
- Redundant: Communications bus
- Independent: All modules receive the same signal
| I / O (Auxiliary Ports – Arbiter Microprocessor) | |
| Vin | 1x (6.5-36V) DC |
| PWM / GPIO | 8x |
| I2C | 1x |
| RS232 | 2x |
| RS485 | 1x |
| ADC | 10x (0-36V) |
| ARINC | 1x Tx / 1x Rx |
| I / O (Auxiliary Ports – External FCU Interface) | |
| PWM / GPIO | 12x |
| CAN Bus | 2x |
| RS232 | 1x |
| RS485 | 1x |
| ADC (Output) | 4x |
| FTS (Input) | 1x Watchdog |
| Data Link | |
| LOS Datalink | 3x Embedded datalink | Custom combinations |
| LOS Datalink options | 410-480MHz | 902-928MHz | 2400-2483MHz | None |
| BLOS Datalink | 3x Embedded datalink | 4G | eSIM or nano-SIM |
| External modules | RS232 connection | SATCOM | 4G | LOS |
| Other | External radio module via RS232, Satcom, 4G |
| Tracking antenna | Veronte Tracker or third party |
| Operation | |
| Geofencing | Hard & soft | No go areas |
| Sense & avoid | Lidar, radar, ADS-B |
| Selectable units | Selectable units or custom unit creation |
| Workspace | Drag & drop telemetry displays (LCD, text, gauge, LED…) | Configurable colors & sizes |
| Map view | Map sources (Google Maps, Bing Maps, Open Maps…) | Custom map layers |
| Multiple platforms | Simultaneous platform control from the same control station |
| Multiple control stations | Multiple control stations available for controlling or monitoring |
| Route | Intuitive user interface for waypoint & route creation | Inflight mission edit |
| Payload | Camera gimbal, tracking antenna, transponder, camera shooter, GNSS receiver… |
| Post-flight | Post-flight analysis tool | CSV data export |
| Safety pitot | Manual control at any time during the operation | Joystick connection on ground or onboard |
| Export | No export restrictions, ITAR free | Advanced functionalities may require an export permit. Please contact our team for further details |
Veronte Autopilot 4x
Veronte Autopilot 4x - w/o DAA v1.8
23500
Veronte Autopilot 4x - ADS-B v1.8
27000
Veronte Autopilot 4x - Remote ID v1.8
24000
