Flight Envelope Protection Control Based on Reference Governor Method in High Angle of Attack Maneuver

The reference governor strategy is presented for the flight envelope protection control of the aircraft during high angle of attack maneuvers. Limits of key flight parameters and amplitude saturation of control surfaces are explicitly considered by imposing the output and input constraints on the flight system. Firstly, a nominal flight control scheme is designed using eigenstructure assignment approach.The static and dynamic reference governors are discussed for flight envelope protection control of the aircraft during stability-axis roll maneuver.Then, a new reference governor is presented based on step response model.The performance of these reference governors for flight envelope protection is demonstrated and compared by numerical simulations. Results show that the dynamic reference governor and the proposed step response model based reference governor are valid for the flight envelope protection control and the latter is easier to be realized.


Introduction
The control problem for systems with input and output constraints has substantially attracted researchers' attention during the past decades.Various control strategies have been proposed to solve this problem (see [1]).Among these existing strategies, antiwindup is an effective approach to deal with systems with input constraints [2,3], and override can be used to handle output constraints.In addition to this method, there exist other effective techniques to deal with systems with input constraints and output constraints, for example, model predictive control [4,5] or reference governor [6][7][8][9][10][11][12][13][14].
The reference governor, also called command governor and reference management device, is a practical method to deal with the constrained tracking control problem.It is a nonlinear device which is located between the original reference command and the input to the closed-loop system.The reference governor can modify the original reference in an appropriate way and a virtual command is produced for the closed-loop system to avoid violation of input and output constraints.To establish the inner closed-loop system, a nominal controller should be designed.And the output of the reference governor is employed as the input of the inner closed-loop system.The advantage of this scheme is that the reference governor does not change the performance of inner closed-loop system which is ensured by the nominal controller when the system is far away from its constraints.This is a grateful property for many practical applications which have requirements on both tracking performance and constraint fulfillment.
In the engineering practice, the low-pass filter can be considered as the basic type of the reference governor with openloop form.However, this form is quite conservative.A more effective method is the closed-loop reference governor which can modify the reference based on the current system state.Up to now, several reference governors of this form have been developed.Gilbert et al. [6] studied two discrete-time reference governors including the static and the dynamic forms for linear control systems with state and control constraints.These methodologies were improved in [7], in which the disturbance inputs were considered.A reference governor is proposed based on conceptual tools of predictive control for constrained linear time-invariant systems by Bemporad et al. [8].

Mathematical Problems in Engineering
In [9], it was extended to the time-variant case and obtained a robust command governor.This type of reference governor was applied to an inverted pendulum in [10].Kogiso and Hirata [11] constructed a reference governor in the form of a piecewise affine function of the state.Reference governors for constrained nonlinear systems have been also studied [12][13][14].However, when these methods are implemented in the practice of the flight envelope protection control, the admissible sets of the system used in the reference governors are complex and difficult to be obtained.
The flight envelope protection control of the aircraft in high angle of attack maneuver can be treated as a constrained control problem for which the reference governor is available.The safe flight regime is commonly described in terms of constraints on key parameters, airspeed and angle of attack.Other limitations related to the flight state of the aircraft may come from the saturation of control surfaces.The task of the flight envelope protection control is to track the commands from the cockpit.At the same time, the aircraft should stay within the boundaries of the envelope.The traditional limiter scheme is inefficient when the aircraft maneuvers at high angle of attack.Pilots need to monitor cockpit instruments when operating the aircraft to execute the desired maneuvers.Advanced flight envelope protection control system could reduce pilot's workload and improve the safety of the aircraft.Although lots of control laws have been developed for the aircraft to perform maneuvers at high angle of attack well [15,16], few of them take the envelope protection problem into consideration.van Oort et al. [17] developed a controller for F-16/MATV aircraft model to maneuver at high angle of attack combined with a stability-axis roll by a combination of feedback linearization and robust model predictive control (MPC).The constraints on the input and state were transformed to linear matrix inequality (LMI) constraints of the optimization problem of the MPC.In [18], an antiwindup compensator was designed for the aircraft model with input saturation.However, the constraints on outputs were not considered.Falkena et al. [19] investigated the effect of four approaches for the flight envelope protection: control limiting, command limiting, constrained flight control law, and virtual control limiting.The results indicated that for practical implementation command limit is the best choice.But only hard limits were imposed on the commands and the dynamic of the closed-loop system was not considered.In this paper, the reference governor is employed to adjust the original reference based on the current state which contains the dynamic information of the system and guarantees that the system satisfies its input and output constraints during transient or steady.
The principle of the reference governor has similarities with model predictive control [10,14].In absence of information on the future evolution of the reference, two reasonable assumptions can be used to make a prediction: the impulse signal assumption and the step signal assumption.In [6], the static reference governor is based on the impulse signal assumption and other reference governors are based on the step signal assumption.By invoking the latter, it is more convenient to use the increment of the reference signal than the signal itself.Thus, the step response model used in dynamic matrix control (DMC) is more favorable for the design of the reference governor in the practice of flight envelope protection control.Motived by above analysis, the reference governor strategy is presented for the flight envelope protection control of aircraft during the high angle of attack maneuver based on the step signal assumption.
The paper is organized as follows.Section 2 formulates the control problem and basic scheme of the reference governor strategy.Section 3 describes the static and dynamic reference governors proposed by [6], which is designed using the concept of the maximal admissible set.By using the step response model in DMC, a novel reference governor is proposed in Section 4. A constrained aircraft model is introduced in Section 5. Before the reference governor is applied to the flight envelope protection, a nominal flight controller is designed to meet the flying quality requirements using eigenstructure assignment approach.In Section 6, the studied three reference governors are applied to the flight envelope protection of the aircraft in high angle of attack maneuver.The maximal admissible set of the static and dynamic reference governor is calculated while the initial admissible set used in the step response model based reference governor is also given.Simulation results of each reference governor are presented.The advantages and disadvantages of them are discussed.Finally, Section 7 includes some conclusions.
The following notations will be used in this paper. + is the set of nonnegative integers.  is the notation for set of real vectors.The superscript  denotes vector or matrix transpose.The vectors and matrixes used in this paper are notated in boldface and the subsets are notated in decorated letter.KP = {Kx : x ∈ P} is the image of P under K. f  and   denote the th row of the matrix F and the vector g, respectively.

Problem Formulation and Reference Governor Strategy
In order to implement the reference governor into the system, the following discrete-time linear time-invariant equation with input and output constraints is considered: where x ∈   is the state vector and u ∈   is the input vector which has amplitude saturation constraints; y ∈   is the output which is required to track the commands; h ∈   is the output on which constraints are imposed; A, B, C  , C ℎ are matrices with corresponding dimensions.The input and output constraints can be described as u ∈ U, h ∈ H; U and H are convex and compact sets and are usually expressed as the following form: (2) The reference governor control strategy consists of a nominal controller and a reference command governor, as depicted in Figure 1.The nominal controller is equipped for obtaining good linear-system properties, that is, the satisfactory tracking performance of y.It is designed via classic linear control methods.Here, a full state feedback control law is given as follows: where K is the feedback gain matrix to make system asymptotically stable and L is the reference input matrix to eliminate the error between y and w, satisfying The virtual command w is the output of reference governor, which can be considered as a compromise of the original reference r.The task of reference governor is to modify the original reference to avoid constraints violation of input and output and to ensure that the output virtual command is a good approximation of the original reference.The reference governor of closed-loop form can be considered as a prefilter with its parameters varying by the current state and reference.The object of this paper is rendering the reference governor strategy described above to the flight envelope protection control problem to deal with constraints of key flight parameters and control surfaces.

Static and Dynamic Reference Governor
In order to address the reference governor theory, the work in [6] is introduced here as a basis of our work.If the nominal controller has been designed, the inner closed-loop system dynamics can be written as where Ã = A + BK, B = BL.

Static Reference
Governor.Since the information of future behavior of r is unknown, it is needed to assume that the future r is of a certain shape when we make a decision on the admissible r at current time [6].A reasonable assumption is r () = 0, for  > .(6) Under this assumption, the evolution of system ( 5) is similar to a zero-input response.We just need to find an invariant subset of the constrained set and render the state of the system within the subset.This leads to a static reference governor design methodology as follows.
According to [6], the static reference governor is given by where  = diag( 1 ,  2 , . . .,   ) is a diagonal matrix and each parameter is a nonlinear function of the reference r() and the current state of the system x().
For the discrete-time system (1), U and H are C-sets.The control law ( 3) is designed to guarantee that A + BK is Hurwitz stable.Assume that P is an invariant C-set in   for the system (5) when w = 0 and KP ⊆ U, C ℎ P ⊆ H.One can design the reference governor as The reference governor in (7) can guarantee that for all x(0) ∈ P and for all r() the constraints are not violated [20].Here ‖⋅‖ is an arbitrary norm on   .Since a norm can be considered as a particular measure of the distance, the optimization is to make w as close to r.In this work, 1-norm is selected that we can treat the optimization problem as a linear programming (LP) problem.LP software can be used to calculate the result quickly.Other gauge functions can be defined to approximate the original reference in a more proper manner which is not discussed here.
The invariant set P is limited by the input constraint set U and the control gain K.If a high gain feedback control law is used in the nominal controller, it will result in an extremely small P which is impracticable in engineering applications.This is a serious defect of the static reference governor which will be illustrated in simulation.

Dynamic Reference Governor.
Another reasonable strategy to predict the future behavior of the reference is to assume that it remains invariant from time  onwards.Reviewing [8][9][10] yields Most of the existing reference governors are based on this assumption, such as the dynamic reference governor.It is constructed as a first-order filter with its parameter  depending on the reference r(), the state of the filter w(), and the state of the system x().The filter is designed as w ( + 1) = w () +  (r () , w () , x ()) (r () − w ()) .(10) Using x() to denote the augmented state vector [w  (), x  ()]  , the augmented system can be written as follows: where Similar to the static reference governor, the dynamic reference governor can be designed by using the following method.
For augmented system (11), A is Schur stable.Assume that P is an invariant C-set in  + for the system when r = w and K P ⊆ U, C P ⊆ H.Then, the dynamic reference governor can be designed as The reference governor in (11) can guarantee that for all x(0) ∈ P and for all r() the constraints are not violated.

Calculation of the Maximal Admissible Set.
Although P or P is an arbitrary C-set limited by U and H, the excessively conservative selection of the set will lead to a small feasible solution of , which means the distance between r and w is relatively large.The best selection of P or P is the maximal admissible set of the inner closed-loop system, which can be defined by Obviously, the maximal admissible set is an invariant set and satisfies the conditions of the reference governor.Because H and U have been assumed to have the polyhedral forms, X ∞ and X ∞ are also polyhedral sets.A numerical method developed to calculate the polyhedral invariant set given in [21] can be used to obtain the maximal admissible sets.Take the static case as an example and the maximal admissible set in dynamic reference governor can be obtained by the same procedures which are described as follows.
Procedure.Define the initial admissible set X 0 with w = 0 as The constraints representation for X 0 is expressed as Step 1. Set the initial polyhedron X 0 and give a tolerance  > 0. The maximal number of steps is set as  max .Furthermore, the initial number is  = 0.
Step 2. Compute the preimage set of the set X  which is denoted by PR(X  ) and given by PR (X  ) = {x : Step 3. Set X +1 = X  ∩ PR(X  ) and let the matrices F +1 and g +1 be those associated with the constraints representation of the set X +1 .Namely, X +1 = {x : Step 4. It can be proved that the maximal admissible set can be finitely determined when the system is asymptotically stable [20].The inner closed-loop system is asymptotically stable due to the nominal control law.Thus, X ∞ in the static reference governor can be obtained easily.However, the augmented system matrix A is just Schur stable.It is not assured that the maximal admissible set of the augmented system can be finitely determined.In real computation, we always use proper  or  max to obtain an approximate result.Even so, the calculation is usually time-consuming and the resulting set is complex which will be shown in the application of the flight envelope protection.

Calculation of the State Uncertainty Set.
For a practical aircraft system, it is usually not possible or economically feasible to measure all the states accurately.For example, the angles of attack and sideslip are difficult to measure accurately in the aircraft control system due to the existence of external disturbance.However, an observer or Kalman filter can be employed to provide corresponding estimates of them.We divide the state vector x() into two parts: x 1 () ∈   1 denotes the states which can be measured accurately, and x 2 () ∈   2 denotes the unmeasured states.The unmeasured states can be estimated as follows: where z() is the estimate of the actual x 2 () and () is a bounded noise satisfying () ∈ D ⊂   2 .Here D is a polyhedral set with 0 ∈ D which can be expressed as D = { : F   < g  }.
In such case, a state uncertainty set of x 2 () should be obtained before the reference governor is designed.The method in [22] is employed here to calculate the exact state uncertainty set.The set of unmeasured states depending on the estimate value z() can be written as The exact state uncertainty set X Σ ( | ) is calculated using the following set-valued recursions [22]: where Ã1 , Ã2 are partitioned matrices of Ã and {⋅} denotes a singleton.Assume that X Σ ( |  − 1) has the polyhedral form, such as , and x 2 () = C  x().Then, the recursive procedures can be expressed as follows: In the design of the reference governor, X Σ ( | ) is used by modifying ( 8) and ( 12) to ( 21) and (22), respectively.Then, we have According to (21) and (22), we can obtain a static reference governor and a dynamic reference governor with state uncertainty sets.

Reference Governor Based on
Step Response Model In this section, a new reference governor is proposed based on the methodology introduced in Section 3. The constant reference assumption can also be expressed using the increment of reference signal at next time which is Since the increment signal is used, the step response model is employed to describe the relationship between the increment input and the output of the inner closed-loop system.It will be seen that the design of the reference governor is greatly simplified based on this model.Firstly, the step response model of the system should be deduced from the state-space representation (5) by the similar method used in DMC [23].In order to obtain the step response model, we need the following assumptions.
From Assumption 2, we know that the inner closed-loop system will achieve steady state from  +  − 1 onwards.The states of the system will be constant, as x(+−1) = x(+) = x( +  + 1) = ⋅ ⋅ ⋅ .In general, the nominal controller can ensure the stability of the inner closed-loop system.Thus, this assumption is reasonable.
The above equations can be simplified as where Because of the additivity property of the linear system, the response of the system to any increment of the input under nonzero initial conditions can be written as where H() = [h  (), h  ( + 1), . . ., h  ( +  − 1)]  , U() = [u  (), u  ( + 1), . . ., u  ( +  − 1)]  , and Now, we employ the principle used in Section 3 to the step response model (29).We can obtain that M  is Schur stable.On the basis of this conclusion, the maximal admissible set of the system when Δw() = 0 can be found.The initial admissible set X 0 of system (5) with a known w can be written as Since w( − 1) is known at time , it is obvious that the maximal admissible set of system (29) with Δw() = 0 is given by X  = {X : x ( + ) ∈ X 0 (w ( − 1)) ,  = 0, . . .,  − 1} . (32) Using the related results of reference governor in Section 3, we can design the reference governor as Δw () =  (Δr () , X ()) Δr () , where Δr() denotes the increment of the original reference.The parameter  is calculated via the following optimization problem: Compared with the dynamic reference governor, a significant advantage of this reference governor is that the maximal admissible set (32) is explicit and is easy to obtain.Although the complexity of optimization computation is increased due to the use of an -steps prediction model (29), the prediction step number  is finite.Another noticeable feature of this reference governor is that it is designed without using the measurement of states.A virtual step response model is used to generate the X() signal instead.So the state uncertainty set is not considered here.

Nominal Controller Design for the Flight Envelope Protection
In this section, a constrained aircraft model is introduced.A nominal controller is designed for the aircraft model to embody desirable flying qualities properties.

Constrained Aircraft Model in High Angle of Attack
Maneuver.The stability-axis roll maneuver is a classic maneuver at high angle of attack.During this maneuver, the altitude and velocity can be seen as a constant and the angle of attack is maintained at a high value near the edge of the envelope.At the same time, the sideslip angle is limited to zero.A linear aircraft model can be obtained from [16].The trim point is selected so that the linear aircraft model can efficiently approximate the nonlinear dynamics during the high angle of attack maneuver.The trim conditions are  0 = 70 m/s,  0 = 15.6474∘ ,  ℎ0 = 0.5851 ∘ , and  0 = 1000 m.Since the candidate aircraft does not equip the thrust vector control device, the maneuver is performed by using the conventional aerodynamic control surface.During the maneuver, the engine thrust is set to maximum value to provide adequate power.Thus, we do not consider thrust as a control input of the system.Three controlled variables are selected to be related to cockpit control according to the three channels of the aircraft.The linearized mode is In (35), the state vector x  = (, V, , , , )  consists of the body components of linear velocity and angular velocity; the inputs vector u = ( ℎ ,   ,   )  includes deflections of the horizontal stabilator, aileron, and rudder; the performance output vector is y = (  , , )  , in which  and  are angles of attack and sideslip, respectively.  is the stability-axis roll rate defined as   =  cos  +  sin .A trim , B trim , C trim are system matrices derived by linearization at the trim point.
For high angle of attack maneuvers, the body-axis rates (, , )  are usually substituted by stability-axis rates (  ,   ,   )  .We also use (, , )  to describe the velocity vector rather than the body components (, V, )  .A transformation is introduced to rewrite model ( 35) with a new state vector x = (, , ,   ,   ,   )  .The new system matrices are as follows: , where is the transition matrix.
During the stability-axis roll maneuver, the velocity , angle of attack , and the stability-axis roll rate   should be limited to prevent the aircraft from the state out of control.We assume that the symmetric constraints are imposed on these key parameters.Besides, boundaries of other state variables are chosen for simplified calculation and data availability.The dynamics of the actuators are neglected and only amplitude saturations are considered.Then, the input and output constraints are written as and h = x, C ℎ = I.

Nominal Controller Design.
The nominal controller is designed to make the performance of the closed-loop system satisfy the flying quality specifications described in MIL-STD-1797A [24].Among the existing approaches, the eigenstructure assignment developed in [25] is an effective method and widely used in flight control design.An advantage of this approach is that it leads to an inner closed-loop system of loworder which is important for the calculation of invariant set.It will be seen that the complexity of the computation and the resulting maximal admissible set grows exponentially by the order of the closed-loop system.
The performance output variables (  , , )  are considered as the controlled variables corresponding to the roll, pitch, and yaw axis of aircraft, respectively.They are expected to have the desired response characteristics.The desired closed-loop eigenstructure consists of the desired modes for the closed-loop aircraft system, along with the eigenvectors associated with these modes.Firstly, we select a set of desired closed-loop eigenvalues   to meet the requirements of closed-loop frequency and damping of the various dynamic modes proposed in MIL-STD-1797A.Equation (39) illustrates the candidate eigenvalues   along with desired eigenvectors.The longitudinal short period mode has an eigenvalue pair of −1.5 ± 1.3229, and the Dutch roll mode also has an eigenvalue pair of −3.09 ± 2.7251.For roll mode, a single negative real eigenvalue −2.5 is given.And then, we assign a matching eigenvector for each eigenvalue, as indicated in   .Here "×" denotes an entry that is unconstrained which can be selected arbitrarily.Furthermore, all other values denote hard eigenvector constraints ("1" denotes related and "0" denotes unrelated): Assuming that all states of the plant are measurable, the state feedback control law is used to assign the desired eigenstructure; that is, u = Kx.The system matrix A is 6-dimensional but only 5 eigenvalues have been given.Although eigenvalues   can be assigned arbitrarily via state feedback for a controllable system, the eigenvectors only can be assigned when they are on the subspace spanned by (  I − A) −1 B. On the other hand, the velocity  is a long-term variable in the state vector x.The last eigenvalue and eigenvector are relevant to the long-term modes of the system and should be selected to eliminate effects of  on the short-term modes.When the last eigenvalue is fixed to −0.0554, the corresponding eigenvector is approximated to (1, 0, 0, 0, 0, 0)  , and the elements related to  in the other eigenvectors are almost equal to zero.Then, the effects of long-term mode are removed.
Finally, the reference input matrix L is designed to eliminate the steady state error between reference commands and responses of the system.Under this case, (4) should be satisfied.As a result, a state feedback control law is obtained as u = Kx + Lw, in which  given.The sideslip angle   remains zero during the maneuver.Figure 2 includes the time plots of the simulation results, in which two cases are shown: model with actuator saturations (dashed line) and without actuator saturations (solid line).The solid lines in the figure show that good tracking performance is achieved for   , , and  in the absence of actuator saturation.When saturations are imposed, the steady state of   cannot reach its command due to the limit on aileron, and the nonlinear characteristic of the saturations will result in an error of .On the other hand, the response of  has overshoot which is out of the limit on the angle of attack.
Therefore, a reference governor is needed to deal with the input and output constraints.

Simulation Study of Reference Governor for Flight Envelope Protection
Based on the previous analysis, the nominal control is insufficient to cope with the input and output constraints.The reference governor is essential for the flight envelope protection during the high angle of attack maneuver.

Applications of Static and Dynamic Reference Governor.
In this subsection, the static and the dynamic reference governors are employed to the flight envelope protection to handle the constraints imposed on input and output of the aircraft system.Because the nominal control law is designed based on continuous-time linear plant of the aircraft, the closed-loop system should be discretized to the form of (1) for the design of the reference governor with discrete type.The nominal control law (3) does not change in the discretization.Different sampling periods are used for static and dynamic reference governors, respectively.Zero-order holds are used at each output of the reference governor.
For the static reference governor, the system is discretized using the 0.01 second sampling period.The maximal admissible set is calculated by utilizing the method in Section 5. inequality constraints is obtained after 52 iterations.The polyhedron is of more than three dimensions and is difficult to be displayed visually.Different profiles are produced when displayed in various three-dimensional coordinates.Figure 3 shows the profiles of the polyhedron in --  and -  -  coordinates.Compared with the initial admissible set X 0 decided by the input and output constraints, the profile in --  coordinate does not change a lot.However, the profile in -  -  coordinates is largely trimmed.The previously given step command in Section 5.3 is specified as the original reference command and the output of the reference governor and the closed-loop system is shown in Figure 4.It can be seen that the static reference governor prevents the deflection of control surfaces out of their limits successfully at the beginning of the simulation.However, the steady states of   and  are far away from their commands while the control effectors still have margin by comparing with their saturation conditions.It is apparent that there exists an inherent drawback of the static reference governor.
The sampling period used in the discretization of the system for the dynamic reference governor is 0.1 seconds and the tolerance in the maximal admissible set calculation is set to be 0.000001.Large sampling period and tolerance are selected to reduce the calculated quantity of the maximal admissible set.Additional constraints are imposed on the state of the dynamic reference governor (  ,   ,   )  as   ≤ 150,   ≤ 30, and   ≤ 30.After 884 iterations, a polyhedron in  9 with 2948 inequalities constraints is obtained, as shown in Figure 5.The profiles of the polyhedron in --  and -  -  coordinates are same as in the static reference governor and the rough surfaces are caused by large tolerance.
Figure 6 shows the response of the system with the dynamic reference governor.In Figure 6, it is shown that the original step references   and   are modified through the reference governor and virtual signals   and   are generated.Tracking these signals, constraint violations of  and the deflection of control surfaces are avoided.When  reaches the upper limit,   is about 128 degrees per second.This signal is considered as the nearest signal by r in the sense of 1-norm.
Simulations are also performed in the situation that (, , ) cannot be measured accurately, whereas (  ,   ,   ) are exactly known.The noises of (, , ) satisfy |()| < 1, ∀ ∈  + .Reference governors with state uncertainty sets are employed.Simulation results of the static reference governor (21) and the dynamic reference governor (22) are showed in Figures 7 and 8, respectively.It can be seen that more conservative reference signals are generated due to the existence of the noise.

Application of Reference Governor Based on Step Response
Model.The settling time   of the continuous-time inner closed-loop system is determined after the nominal control law is given.The order of the step response model  is then decided by the sampling period  as  =   /.In the application for flight envelope protection, we choose   = 4 s and  = 0.1 s.Thus, we have  = 40.Consequently, a 240thorder model is created in the simulation.Although the model is complex, iterative computations of the maximal admissible set are avoided when this model is applied for the reference governor.By contrast, it uses the initial admissible set which relies on the reference value at −1.A typical initial admissible set (when w = 0) is shown in Figure 9.
Simulation results of the system with the reference governor based on step response model are shown in Figure 10.It is shown that equally good properties as the dynamic reference governor can be achieved.However, the complex calculation of the maximal admissible set is not needed under this case.
From Figures 6 and 10, the dynamic reference governor and the reference governor based on step response model are valid in the flight envelope protection control.

Conclusion
In this paper, the reference governor strategy has been developed for the flight envelope protection control during high angle of attack maneuvers.According to the simulation results, we can conclude the following: (i) the static reference governor has great conservatism on the admissible input and cannot be used for the flight envelope protection; (ii) the dynamic reference governor exhibits good properties to prevent constraint violation of key flight parameters and deflections of control surface, but the maximal admissible set is difficult to obtain and it has complex profile; (iii) the reference governor based on step response model proposed in Section 4 has good properties as well but does not need to calculate the complex maximal admissible set.When highdimensional models are utilized, more effective optimization algorithm should be developed for the large-scale optimization problem.This will be discussed in our future works.

Figure 2 :
Figure 2: Simulation results of the nominal controller.

Figure 3 :
Figure 3: The maximal admissible set of the static reference governor.

Figure 4 :
Figure 4: Simulation results of the static reference governor.

Figure 5 :
Figure 5: The maximal admissible set of the dynamic reference governor.

Figure 6 :
Figure 6: Simulation results of the dynamic reference governor.

Figure 7 :Figure 8 :
Figure 7: Simulation results of the static reference governor with state uncertainty set.

3 .Figure 9 :
Figure 9: The initial admissible set of the inner closed-loop system.

Figure 10 :
Figure 10: Simulation results of the reference governor based on step response model.
The obtained nominal control law was demonstrated by the simulation of MATLAB in which a high angle of attack stabilityaxis roll maneuver is performed.Extreme references of a step angle of attack command   with 30-degree amplitude are examined.At the same time, a step stability-axis roll rate command   with an amplitude of 150 degrees per second is