A redundant mechatronic system, comprising:
- two channels which are or can be connected to a mechanical arrangement for the output of a mechanical power, and
- at least one control unit,
- wherein each of the two channels comprises an energy supply connected upstream of both channels and an actuation circuit which is controllable by the at least one control unit,
- wherein the at least one control unit acts on the actuation circuits such that each of the actuation circuits switch an electric power specified by the control unit and drawn from the energy supply through to a winding set of at least one electrically operated actuator, thereby generating the mechanical power,
- wherein, during normal operation, the two channels are operated in parallel such that each channel instantaneously provides half of the mechanical power required for performing a function of the mechanical arrangement,
- wherein each of the two channels are configured to be individually capable of providing all of the mechanical power required for performing the function,
- wherein the redundant mechatronic system further comprises sensors connected to the control unit, by which overloads in the redundant mechatronic system can be detected,
- wherein, when an overload is detected, a reduction factor counteracting the overload is established and applied by the control unit,
- wherein the electric power of each of the two channels is, with the reduction factor, controlled by the control unit to counteract the overload,
- wherein the reduction factor is calculated such that, when the reduction factor is applied by the control unit, a sum power of both channels is sufficient for performing the function,
- wherein the function comprises a mandatory power component required to execute the function and a convenience power component, separate from the mandatory power component, which enhances performance of the function during normal operation,
- wherein, when the overload is detected, operability of enhancements provided by the convenience power component is deactivated if, while the reduction factor is applied, the sum power of both channels is insufficient to satisfy requirements of both the mandatory power component and the convenience power component,
- wherein, when the overload is detected in the mechanical arrangement, the reduction factor is applied to a first of the two channels to reduce power transmission and a second of the two channels to increase power transmission, and
- wherein the at least one control unit alternates, in an oscillatory manner, which of the two channels have increased or decreased power transmission.