Fault tolerant actuator assembly

An electric motor assembly comprising:

• a housing having an interior volume;
• said housing containing in said interior volume an electric motor, a motor driver and a secondary power source;
• said electric motor comprising a stator and a mover mounted for movement relative to one another;
• said electric motor operatively configured to connect to a primary power supply;
• said mover of said electric motor operatively configured to mechanically couple to an object external to said interior volume of said housing to be driven by said electric motor within a range of motion and having a safe position within said range of motion;
• said electric motor connected to said secondary power source;
• said stator comprising a primary winding operatively configured to move said mover in a normal operation mode;
• said stator comprising a secondary winding operatively configured to move said mover in a secondary operation mode;
• said motor driver comprising a primary motor controller operatively configured to control said primary winding in said normal operation mode;
• said motor driver comprising a secondary motor controller operatively configured to control at least one of said primary winding and/or said secondary winding in said secondary operation mode;
• a power sensor configured to sense a fault in said primary power supply and communicating with said secondary motor controller;
• a power sensor configured to sense a fault in said secondary power source and communicating with said secondary motor controller;
• a primary winding sensor configured to sense a fault in said primary winding and communicating with said secondary motor controller;
• a secondary winding sensor configured to sense a fault in said secondary winding and communicating with said secondary motor controller;
• said secondary motor controller configured to drive said motor to said safe position using said secondary winding in the event of a sensed fault in said primary winding;
• and
• said secondary motor controller configured to drive said motor to said safe position using said secondary power source in the event of a sensed fault in said primary power source.