Electrification of aircraft fuel systems is one of the important factors to achieve CO2 emission reduction targets for civil aviation. Aircraft systems are commonly expected to make not only simplified configuration and improvement of controllability, but also safety and reliability. The electrification of fuel system also requires the similar approach. Therefore, a simple and reliable redundancy concept is a crucial challenge. Redundant Electric Fuel Metering System (rEFMS) is a possible solution for the concept. Although control performances of rEFMS in normal operations have been investigated, rEFMS behavior in failure events, such as error of flow rate, and fault-tolerant design have not been sufficiently discussed. In this study, we apply a tool of model-based development (MBD) to investigate the system behavior in failure events, which is difficult to acquire with actual equipment. Also, we propose fault-tolerant control methods for most likely failure events. The proposed methods enable us to keep safely fuel supply even in failure events.
