# Remotely Piloted Aircraft Systems and a Wireless Sensors Network for Radiological Accidents

Authors: A. Reyes-Muñoz; J. Guerrero-Ibáñez; E. Pastor; M. Gasull; C. Barrado
Journal: International Journal of Aerospace Engineering
 (2016)

---

## Abstract

In critical radiological situations, the real time information that we could get from the disaster area becomes of great importance. However, communication systems could be affected after a radiological accident. The proposed network in this research consists of distributed sensors in charge of collecting radiological data and ground vehicles that are sent to the nuclear plant at the moment of the accident to sense environmental and radiological information. Afterwards, data would be analyzed in the control center. Collected data by sensors and ground vehicles would be delivered to a control center using Remotely Piloted Aircraft Systems (RPAS) as a message carrier. We analyze the pairwise contacts, as well as visiting times, data collection, capacity of the links, size of the transmission window of the sensors, and so forth. All this calculus was made analytically and compared via network simulations.


---

## Body

## 1. Introduction

Radiation monitoring is an essential part of any radiation protection program of a nuclear plant. The measurement of ambient values is crucial to minimize exposure to workers and estimates occupancy times for radiological areas. In that scenario, aerial surveys are useful to provide a precise perspective for monitoring, and, in case of an accident, it would not require human participation directly into potential hot zones to get data on the leak scope.For these kinds of emergency situations, the Remotely Piloted Aircraft Systems (RPAS) have been widely proposed, basically to obtain aerial images [1–6]. In the specific case of a radiological incident, the use of the RPAS as message carriers is a very attractive solution to gather information of potentially dangerous large areas of terrain due to the altitude they can reach.The use of RPAS as a relay system, acting as carrier of data retrieved from ground sensors, has been studied in a list of previous works [7–11], for both statically allocated sensors and mobile ground terminals. Another approach is setting the sensors in a fleet of RPAS which collaborate in gathering data named flying ad hoc networks or FANETs [12, 13]. Choi et al. focus more on the RPAS route and the energy-efficient communication ground/air using a single RPAS [14].In our proposal there is a Wireless Sensor Network (WSN) composed of a set of distributed wireless sensors located on the disaster area, several ground vehicles, and a RPAS.The RPAS has a previously defined flight plan that indicates all the waypoints that the RPAS has to fly over. Located physically in each logical waypoint there are one or several sensors which are in charge of collecting radiological properties of the air and soil in the surrounding environment and convert these properties into electrical signals. So when the RPAS flies through the waypoints it picks up all the information from sensors and sends it to the control center which is remotely located.The ground vehicles are mobile distributed sensors that collect data from their environment and try to communicate the data to the RPAS. As ground vehicles collect information from different sensors they have higher priority than fixed sensors when a RPAS flies over the area. So when a ground vehicle appears in the RPAS transmission range then the RPAS collects all stored information by the ground vehicle and reconfigure its own flight plan in order to arrive on time to achieve communication with most of the other sensors during its active phase. This means that the sensor transmission window has to be increased or decreased in real time and also the speed of the RPAS is readjusted to achieve in this way a greater amount of data collection collected by sensors and vehicles.All calculations were mathematical and compared with a network simulation. Finally, we developed a set of interfaces to simulate the geographical area of the nuclear plant in which the RPAS follows the flight plan to gather the sensors data.The paper is organized as follows: Section2 describes the scenario that is simulated in the Ascó nuclear plant in case a radiological accident occurs. Section 3 is dedicated to explain the components of our WSN. Section 4 shows the test that we have done in terms of network architecture and transmission protocols, capacity analysis of the links, and the implementation of the system interfaces. Finally, Section 4 describes the results of the research. Section 5 has a discussion and Section 6 concludes the paper.


## 2. Ascó Nuclear Plant

Ascó is a nuclear plant located in the town of Ascó in the province of Tarragona [15]. Ascó has a control center that works as a reactive entity where the operating supervisor and senior operating personnel operate and monitor major plant equipment which provides alarms and notification in case any problem arises.A map of specific actions is activated for the three government regulated predefined areas [15]:(i)
Zone 0, area under operator control: it is an area with a 750 m radius. Emergency actions are defined in the emergency plan of the nuclear plant.
(ii)
Zone 1, area that requires urgent protection measures: it is a concentric circle with a 10 km radius including area 0. The radiation exposure may be in both the atmosphere and soil.
(iii)
Zone 2, area that covers 30 concentric kilometers: radioactivity is usually on objects that are on the ground.In this sense we propose a Wireless Sensor Network (WSN) that is consistent with the current plan for nuclear exercises of Ascó. If a sensor reading in the vicinity of the nuclear plant exceeds a preset radiological upper limit for the environment, then an alarm immediately notifies the control center.


## 3. Deployment of a Wireless Sensor Network

There are several crucial aspects in developing a WSN for radiological environments, such as the following: (a) Long expected network lifetime should be considered to reduce human intervention, for example, for batteries replacement. (b) The WSNs for harsh environments have to contemplate the fact that node failures may occur unexpectedly, so synchronization and routing algorithms need to be fault tolerant to guarantee network robustness. (c) There is a trade-off between energy consumption and monitoring capabilities. (d) The gradual accumulation of radiation effects on the WSN over a long period of time is known as displacement damage (displacement of atoms from their original position in the lattice sites) and damage due to total ionizing dose (absorption of energy by electronic ionization in the insulators) [16]. The mitigation approaches are mainly based on radiation hardened microelectronic techniques [17] and radiation shielding used to enclose the sensors with highly dense materials such as lead and cadmium.For our proposal we designed a three-layer model with four different components (see Figure1).Figure 1
Three-layer model.Sensing layer contains all devices that gather environmental data. It is formed by two components. First component is the set of distributedfixed sensors that are able to communicate with the RPAS via a highly reliable and secure link. These are the basic sensor nodes which are responsible for information collection. Each wireless sensor node is a complex device that embeds a microcontroller, an SD memory card, GPS, an accelerometer, a temperature sensor, and specific sensors for radiation levels and gases [18]. The sensors collect radiological properties of the air and soil and convert these properties into electrical signals. The transceiver is the RF module responsible for wireless communication with the RPAS. Technology used for data transmission (either the RPAS or a grand vehicle) is XBee 802.15.4 2.4 GHz with a range of 500 meters and bit rate of 250 kbps. The ZigBee protocol follows the IEEE 802.15.4 standard for WSN employing low data rates requirements and security services based on a 128-bit AES algorithm added to the security model provided by IEEE 802.15.4 [19]. We establish the theoretical positions of the waypoints (physical position in the map that allows the RPAS to fly over the sensors) because due to the harsh conditions of the terrain sometimes it is not possible to place sensors on the exact coordinates.Second component is theground vehicles (emergency units, police, firefighters, etc.) which are considered mobile nodes in the WSN. These vehicles are equipped with long-range radios, allowing collecting information of sensors within their coverage range. These kinds of nodes have higher priority level than fixed sensors and they can perform various functions such as data compression and fusion. Eachground vehiclecan be used as a gateway to enhance the connectivity with the RPAS and to reduce the amount of energy spent by sensor nodes in the data transmission process to RPAS. For that, ground vehicles contain a fixed amount of buffer memory, which is used to hold the collected sensing information until it transfers it to the RPAS when it arrives within its transmission range. The RPAS compares sensor IDs with the information of sensor included in the flight plan and then eliminates the sensors that have been collected already. Finally, the flight plan is rescheduled in real time and the transmission window is reconfigured in order to receive the collected information of ground vehicle.Collecting layer is composed of the RPAS which is responsible for retrieving the sensed and stored information by ground vehicles and sensors and for delivering that information to thecontrol center of the nuclear plant. We use a RPAS Sniper of Alpha Unmanned Systems widely used in urban environments [20] and enable speeds up to 150 km/h, altitude of 3000 m, and a range of approximately 2 hours because of its low weight 14 kg., 1.6 m, and reduced size. The RPAS follows a predefined flight plan that indicates the position of the waypoints and periodically broadcasting its own location using a long-range radio. So when a RPAS detects a sensor or ground vehicle within its transmission range, it sends a communication request. The RPAS makes proactive movement (adjust speed and altitude) to meet with fixed wireless sensors that are distributed on the ground and ground vehicles that move randomly.Finally,processing layer is composed by the control center which is responsible for processing the data received by the RPAS. This entity specifies the flight plan (with all the waypoints to be overflown by the RPAS) based on specific mission requirements.


### 3.1. Network Links

We define 4 links that combine different communication ranges and different requirements regarding their transmission window: (1) sensor-RPAS, (2) sensor-ground vehicle, (3) ground vehicle-RPAS, and (4) RPAS-control center [21]. See Figure 2.Figure 2
Network links.The first link has a temporal pattern of periodic motion, the second and third link are completely spontaneous, and the last link has an aperiodic pattern.The data transmission protocol implements five steps: invitation to the network, data transfer, data management, data resend, and close communication. These five steps are implemented in the four mentioned links.Nodes can be in one of three possible modes (see Figure3).Figure 3
Operating modes: (a) fixed-ground and (b) fixed/ground and RPAS.
(a)
(b)Linked to the network, the node can accept requests to become part of the network. Intransmission mode, the node reads the sensors and transmits the data to the RPAS or ground node. In case of ground vehicles, the transmission mode includes the time dedicated to gather data of neighbor nodes that appears in their transmission range.Disconnected mode is only for fixed networks, the radio interface is turned off, and neither transmission nor reception is possible.A node is initiallydisconnectedfrom the network; it means that node has not requested data transmission; during that time the sensor is sensing or resting to save energy.When the node is onlinked mode it can receive a request message from the RPAS or ground node and change to thetransmission mode. After interaction with the RPAS or ground node, the node is disconnected from the network.The RPAS operating modes areidle andworking. Initially the RPAS is inidle mode. When RPAS detects a node (fixed node orground node), aLink_REQ is sent from RPAS to the detected node. Upon receiving the service response, the RPAS changes toworking mode to receive the sensed data. See Algorithm 1.Algorithm 1:RPAS modes.
H: the set of nodes requesting service
P: Route of waypoints for the RPAS
If the RPAS is inidle mode
H = empty set
The RPAS flights over the default flight plan
The RPAS periodically distributes location messages
If the UAV receive a service request message from a nodei
Addi to H
Calculate the new route of waypointsP
Setworking mode to the RPAS
Reduce the RPAS speed over waypoints to receive the maximum amount of data
If transmission ends
RemoveI from H
IfH is not empty
Calculate new routeP for RPAS
Otherwise
RPAS Mode =idle


## 3.1. Network Links

We define 4 links that combine different communication ranges and different requirements regarding their transmission window: (1) sensor-RPAS, (2) sensor-ground vehicle, (3) ground vehicle-RPAS, and (4) RPAS-control center [21]. See Figure 2.Figure 2
Network links.The first link has a temporal pattern of periodic motion, the second and third link are completely spontaneous, and the last link has an aperiodic pattern.The data transmission protocol implements five steps: invitation to the network, data transfer, data management, data resend, and close communication. These five steps are implemented in the four mentioned links.Nodes can be in one of three possible modes (see Figure3).Figure 3
Operating modes: (a) fixed-ground and (b) fixed/ground and RPAS.
(a)
(b)Linked to the network, the node can accept requests to become part of the network. Intransmission mode, the node reads the sensors and transmits the data to the RPAS or ground node. In case of ground vehicles, the transmission mode includes the time dedicated to gather data of neighbor nodes that appears in their transmission range.Disconnected mode is only for fixed networks, the radio interface is turned off, and neither transmission nor reception is possible.A node is initiallydisconnectedfrom the network; it means that node has not requested data transmission; during that time the sensor is sensing or resting to save energy.When the node is onlinked mode it can receive a request message from the RPAS or ground node and change to thetransmission mode. After interaction with the RPAS or ground node, the node is disconnected from the network.The RPAS operating modes areidle andworking. Initially the RPAS is inidle mode. When RPAS detects a node (fixed node orground node), aLink_REQ is sent from RPAS to the detected node. Upon receiving the service response, the RPAS changes toworking mode to receive the sensed data. See Algorithm 1.Algorithm 1:RPAS modes.
H: the set of nodes requesting service
P: Route of waypoints for the RPAS
If the RPAS is inidle mode
H = empty set
The RPAS flights over the default flight plan
The RPAS periodically distributes location messages
If the UAV receive a service request message from a nodei
Addi to H
Calculate the new route of waypointsP
Setworking mode to the RPAS
Reduce the RPAS speed over waypoints to receive the maximum amount of data
If transmission ends
RemoveI from H
IfH is not empty
Calculate new routeP for RPAS
Otherwise
RPAS Mode =idle


## 4. Experimental Section

In the experiments we used an XBee (250 Kbps) sensor configured with a frame time of 10 ms. The RPAS works as a client and downloads files located in sensors.The initial window size is set to 64 KB, which is the default window in most operating systems. The minimum time that will be taken for the ACK (acknowledgment) to arrive after the first package is sent (delay in the Xbee) is about four times the frame time, which in this case is RTT ~ 4∗ 10 ms = 40 ms. Thus, 512 kbits (64 KB) can be sent every 40 ms. Therefore, the maximum throughput is 512 kbits/40 msg = 12.8 Mbps.In the analysis of the sensor network we consider two types of variables.The contact time is the time in which a pair of nodes are within their coverage area and therefore within reach of communicating with each other. The contact time influences the capacity of the network by limiting the amount of data that can be transferred between nodes.The time between contacts is the time between two contacts, starting from the last contact with a node to the beginning of contact with another one. The time between contacts has an impact on network availability because it affects (a) the number of times that the transmission window of a sensor is opened when the RPAS flies over its position and (b) the frequency of opportunities a ground vehicle can transfer messages to the RPAS.For case (a) the RPAS visits sensors in a predefined time to either send or receive information that will be transmitted or that comes from the control center. See Figure4.Figure 4
RPAS-sensor link.Assuming the RPAS flies at a constant speed and defining{
w
0
,
w
1
,
…
,
w
n
} as the set of waypoints contained in the flight plan, the total time required for the RPAS to visit all the waypoints is total time =∑
i
=
0
n
t
w
i
,
w
i
+
1, where t
(
w
i
,
w
i
+
1
) represents the contact time required for the RPAS to collect data at the point w
i, plus the time between contacts you need to get from point w
i to consecutive waypoint w
i
+
1
.In case (b) the contact time of the RPAS to collect information on ground vehicles ist
2
(
G
i
,
D
G
).t
2 is the contact time required to collect data from a ground vehicle G
i plus the contact time required for the RPAS to get close to the ground vehicle D
G. Therefore, ∑
i
=
0
n
-
1
t
w
i
,
w
i
+
1
.Therefore, the RPAS flies over a waypoint for a total time/w
i to get all the sensed and stored information from sensors and ground vehicles.As mentioned above, the transmission window is initialized to the minimum size in order to save as much as possible of the sensor battery. Suppose the time of the transmission window is denoted as TimeW:(1)
T
i
m
e
W
≥
Time
establishment
+
T
i
m
e
t
r
a
n
s
m
i
s
s
i
o
n
+
T
i
m
e
C
l
o
s
e
_
c
o
m
m
,where Time
establishment is set as the minimum size to ensure the transmission opportunity andT
i
m
e
t
r
a
n
s
m
i
s
s
i
o
nis the required time to transfer all the stored information in the sensor to the RPAS.T
i
m
e
C
l
o
s
e
_
c
o
m
m is the sensor’s required time for closing the connection. Finally, the RPAS sends an ACK to the sensor indicating the next period of visit.Ift
2 > TimeW then it is necessary to adjust the speed of the RPAS or skip a visit to one or more waypoints from those indicated in the flight plan in order to be on time to achieve the maximum number of sensors set inlinked mode (open transmission window).The information sensed by ground vehicles has higher priority than information from fixed sensors, so the RPAS cannot ignore the communication of a ground vehicle.In order to evaluate the performance of the proposal, two RPAS flight plans were defined.(a) Flight plan 1 covers all the preestablished waypoints. We consider the scenario where the RPAS did not detect any ground node in the flight plan (See Figure5); (b) flight plan 2 does not cover all waypoints due to data collection of ground vehicles (See Figure 6).Figure 5
Flight plan 1. RPAS flies all the waypoints.Figure 6
Flight plan 2. The RPAS does not visit all the waypoints.In flight plan 2, the RPAS speed is readjusted to arrive on time to the rest of preestablished waypoints. In this case we evaluate the transmission window size.Figure7 shows the size of the transmission window in both flight plans.Figure 7
Transmission window size.


### 4.1. Sensor Network Interface

The interface that manages the sensor network is part of the mission monitor of ISIS+, a software we developed as part of the simulator for unmanned aerial systems [22]. The interface is linked to the simulator as a service that is managed by our Middleware Architecture for embedded remote applications.The interface has 4 menus: anActuation Map to configure the number of sensors of Zones I, II, and III of the nuclear central.Sensor Manager is used to establish the sensor mode (linked or disconnected). TheFlight Plan is the menu that generates the waypoints location, the RPAS speed, and total distance of the flight plan, among other parameters. ACommunication Menu allows authorized users to modify the information of the flight plan and visualize the collected information by the RPAS as shown in Figure 8.Figure 8
Sensor network interface.


## 4.1. Sensor Network Interface

The interface that manages the sensor network is part of the mission monitor of ISIS+, a software we developed as part of the simulator for unmanned aerial systems [22]. The interface is linked to the simulator as a service that is managed by our Middleware Architecture for embedded remote applications.The interface has 4 menus: anActuation Map to configure the number of sensors of Zones I, II, and III of the nuclear central.Sensor Manager is used to establish the sensor mode (linked or disconnected). TheFlight Plan is the menu that generates the waypoints location, the RPAS speed, and total distance of the flight plan, among other parameters. ACommunication Menu allows authorized users to modify the information of the flight plan and visualize the collected information by the RPAS as shown in Figure 8.Figure 8
Sensor network interface.


## 5. Results

In order to evaluate the performance of our experiments, we ran several simulations in Castalia [23], a discrete-event simulator developed in C++ based on the Omnet Framework [24] and used in similar studies [25]. The simulation model is based on a set of 50 replications. Each replication represents the simulation of a flight plan for data recollection.The proposed scenario defined into Castalia is based on the sensors network designed to Ascó nuclear plant, which was explained in previous sections. The total number of sensors used for the simulation was 24, which were distributed in each zone as shown in Figure5. We used different number of ground vehicles. Ground vehicles were uniformly distributed over the total monitoring area. The speed of ground vehicles was set to 15 km/h.We evaluated the transmission window size and delivery ratio applying different speeds for RPAS to show the performance in the maximization of collected information. Additionally, we evaluated the cadence time in a flight plan that consider random ground vehicles.Figure9 shows the transmission window size obtained in the simulation of the two flight plans previously explained and evaluated analytically. When the speed is low we can observe a similar behavior of the results obtained in both analytical and simulated forms. However, as displayed, when the speed of the RPAS increases, our system in the simulation obtained values of transmission windows less almost 12% in comparison with the analytic model. When we analyzed the results obtained in the simulation model we observed that there is interference in the transmission process that is produced by the neighbor nodes which result in a difference between the analytical and the simulated models.Figure 9
Transmission window size.Figure10 shows how the delivery ratio obtained in the simulation of the two flight plans previously explained varies firstly increasing and then decreasing slightly as the RPAS speed is increased. We observed when a constant speed is applied during all flight (flight plan 1) the delivery ratio suffers a decrement up to 48%. On the other hand, when the RPAS is constant and ground vehicles are used, the delivery ratio increases up double with respect to flight plan 1. When we use an adaptable speed, the delivery ratio increases up 32%. The main reason behind this behavior is that when the RPAS speed increases, less packets can be delivered from sensor nodes because there is not sufficient time for the RPAS to collect packets from the nodes and the delivery ratio goes down; however, when the RPAS speed is adapted there is sufficient time for the RPAS to collect packets from the nodes and the delivery ratio can be kept.Figure 10
Delivery ratio.Figure11 shows the cadence time of the simulation. We analyze the results increasing the number of ground vehicles. The zero value in the number of vehicles represents the situation where the RPAS covers all the preestablished waypoints. We can observe that when the number of vehicles increases the system reduces the cadence time almost 17% in comparison with the complete coverage of the RPAS. As the priority of ground vehicles is higher than the one in the fixed sensors, if a ground vehicle is in the transmission range of the RPAS it will interfere with the established flight plan and with the adjustments the RPAS does not cover all the predefined waypoints. So the total distance is smaller given the reduction in the cadence time.Figure 11
Cadence time.Finally, we evaluated the impact that the number of ground vehicles has in the collected data. Figure12 shows an improvement of almost 17% in transmission window when the number of ground vehicles increases compared with the scenario where the RPAS covers all waypoints.Figure 12
Transmission window size.


## 6. Discussion

In this article, we have focused on the use of a single carrier message (in the form of a RPAS) to provide communication between the nuclear plant and the control center with both fixed and mobile sensors.However, a containment transmission can occur when multiple sensors of the same waypoint attempt communication with the RPAS, or when simultaneously a ground vehicle is in the transmission range of the RPAS.Future work will analyze the network performance with multiple RPAS and cooperative routing protocols as we consider that multiple carriers’ messages can potentially improve network capacity.In this article we consider only the difference in priorities between the data provided by ground vehicles (highest priority) and sensor data.Future work will differentiate the priority level of the sensors depending on the area of the nuclear plant where they are located.In the packet header we will include a bit indicating the priority of the message. When sensors detect the RPAS in its transmission range, the sensors would inform about the number of messages that are in the buffer and their priorities to the RPAS. So the RPAS could in real time intelligently readjust the contact time with each sensor. Thus the RPAS could reduce the possibility of containment of transmission that can occur with the scheme we have today.Security is also one of the critical points, due to the continuous developments of new attacks and the limited applicable regulations for control. Although the proposed Wireless Sensor Network is vulnerable to malicious attacks, authentication techniques are rapidly evolving which encourage the deployment of Wireless Sensor Networks in nuclear plants [26].


## 7. Conclusions

In radiological scenarios crisis, due to lack of connectivity it is essential to have alternative schemes to reschedule the sensing of the ground in real time. Our implementation is based on algorithms that exploit infrastructure nodes (sensors, ground vehicles, etc.) by a carrier of messages (the RPAS) responsible for transmitting the information to the control center.The interface of the sensor network that we programmed in this research is able to reschedule the flight plan of an unmanned aerial vehicle to collect the largest possible amount of information from both sensors and ground vehicles. The interface was integrated in our simulation environment in which software RPAS components can be developed under scenarios of actual air traffic and automatic reconfigurations as real time flight plans.



---

*Source: 9437165-2016-10-12.xml*