skip to main content


Title: Integrity monitoring for Kalman filter-based localization
The problem of quantifying robot localization safety in the presence of undetected sensor faults is critical when preparing for future applications where robots may interact with humans in life-critical situations; however, the topic is only sparsely addressed in the robotics literature. In response, this work leverages prior work in aviation integrity monitoring to tackle the more challenging case of evaluating localization safety in Global Navigation Satellite System (GNSS)-denied environments. Localization integrity risk is the probability that a robot’s pose estimate lies outside pre-defined acceptable limits while no alarm is triggered. In this article, the integrity risk (i.e., localization safety) is rigorously upper bounded by accounting for both nominal sensor noise and other non-nominal sensor faults. An extended Kalman filter is employed to estimate the robot state, and a sequence of innovations is used for fault detection. The novelty of the work includes (1) the use of a time window to limit the number of monitored fault hypotheses while still guaranteeing safety with respect to previously occurring faults and (2) a new method to account for faults in the data association process.  more » « less
Award ID(s):
1637899
NSF-PAR ID:
10203882
Author(s) / Creator(s):
; ; ;
Date Published:
Journal Name:
The International Journal of Robotics Research
Volume:
39
Issue:
13
ISSN:
0278-3649
Page Range / eLocation ID:
1503 to 1524
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. null (Ed.)
    This paper presents a new methodology to quantify robot localization safety by evaluating integrity risk, a performance metric widely used in open-sky aviation applications that has been recently extended to mobile ground robots. Here, a robot is localized by feeding relative measurements to mapped landmarks into an Extended Kalman Filter while a sequence of innovations is evaluated for fault detection. The main contribution is the derivation of a sequential chi-squared integrity monitoring methodology that maintains constant computation requirements by employing a preceding time window and, at the same time, is robust against faults occurring prior to the window. Additionally, no assumptions are made on either the nature or shape of the faults because safety is evaluated under the worst possible combination of sensor faults. 
    more » « less
  2. null (Ed.)
    This paper presents a Model Predictive Controller (MPC) that uses navigation integrity risk as a constraint. Navigation integrity risk accounts for the presence of faults in localization sensors and algorithms, an increasingly important consideration as the number of robots operating in life and mission-critical situations is expected to increase dramatically in near future (e.g. a potential influx of self-driving cars). Specifically, the work uses a local nearest neighbor integrity risk evaluation methodology that accounts for data association faults as a constraint in order to guarantee localization safety over a receding horizon. Moreover, state and control-input constraints have also been enforced in this work. The proposed MPC design is tested using real-world mapped environments, showing that a robot is capable of maintaining a predefined minimum level of localization safety while operating in an urban environment. 
    more » « less
  3. null (Ed.)
    This paper presents a new method to efficiently monitor localization safety in mobile robots. Localization safety is quantified by measuring the system's integrity risk, which is a well-known aviation performance metric. However, aviation integrity monitoring solutions almost exclusively rely on the Global Navigation Satellite System (GNSS) while robot navigation usually needs the additional information provided by a state evolution model and/or relative positioning sensors, which makes previously established approaches impractical. In response, this paper develops an efficient integrity monitoring methodology applicable to Kalman Filter-based localization. The work is intended for life-or mission-critical operations such as co-robot applications where ignoring the impact of faults can jeopardize human safety. 
    more » « less
  4. Monitoring localization safety will be necessary to certify the performance of robots that operate in life-critical applications, such as autonomous passenger vehicles or delivery drones because many current localization safety methods do not account for the risk of undetected sensor faults. One type of fault, misassociation, occurs when a feature extracted from a mapped landmark is associated to a non-corresponding landmark and is a common source of error in feature-based navigation applications. This paper accounts for the probability of misassociation when quantifying landmark-based mobile robot localization safety for fixed-lag smoothing estimators. We derive a mobile robot localization safety bound and evaluate it using simulations and experimental data in an urban environment. Results show that localization safety suffers when landmark density is relatively low such that there are not enough landmarks to adequately localize and when landmark density is relatively high because of the high risk of feature misassociation. 
    more » « less
  5. null (Ed.)
    Ensuring the integrity of embedded programmable logic controllers (PLCs) is critical for safe operation of industrial control systems. In particular, a cyber-attack could manipulate control logic running on the PLCs to bring the process of safety-critical application into unsafe states. Unfortunately, PLCs are typically not equipped with hardware support that allows the use of techniques such as remote attestation to verify the integrity of the logic code. In addition, so far remote attestation is not able to verify the integrity of the physical process controlled by the PLC. In this work, we present PAtt, a system that combines remote software attestation with control process validation. PAtt leverages operation permutations—subtle changes in the operation sequences based on integrity measurements—which do not affect the physical process but yield unique traces of sensor readings during execution. By encoding integrity measurements of the PLC’s memory state (software and data) into its control operation, our system allows to remotely verify the integrity of the control logic based on the resulting sensor traces. We implement the proposed system on a real PLC controlling a robot arm, and demonstrate its feasibility. Our implementation enables the detection of attackers that manipulate the PLC logic to change process state and/or report spoofed sensor readings (with an accuracy of 97% against tested attacks). 
    more » « less