INTRODUCTION
The rapid evolution of industrial and humanoid robotic systems has transformed numerous sectors, ranging from automated manufacturing to service robotics and medical applications [1]. In this context, cooperative and interactive robots often operate in the presence of human operators or within complex environments, giving rise to significant challenges related to operational safety, diagnostic systems, and optimal energy management.
Furthermore, the rapid growth of automated systems integrating artificial intelligence (AI), machine learning, and large-scale data processing algorithms has been accompanied by a substantial increase in energy demand. The availability of sufficient and properly managed electrical energy has therefore become a critical prerequisite for maintaining the performance, reliability, and operational continuity of intelligent robotic systems. Consequently, the optimization and supervision of energy flows have emerged as major challenges for the sustainable development of robotic technologies and advanced digital infrastructures [2, 3].
From an ethical and societal perspective, numerous researchers have also emphasized the importance of incorporating explicit supervision, safety, and control mechanisms into AI-based autonomous systems. Prominent scientists, including Geoffrey Hinton and Yoshua Bengio, have highlighted the challenges associated with the increasing decision-making autonomy of intelligent systems and the need to establish robust frameworks that ensure their safety, predictability, and alignment with human objectives [1, 4, 5, 6]. In the field of collaborative robotics, these concerns further strengthen the relevance of approaches based on energy-flow regulation, as they help ensure that the robot’s physical actions remain continuously supervised, bounded, and compliant with the safety requirements of human-robot interaction.
Traditionally, robotic safety relies on physical barriers or kinematic speed reductions, often codified by standards such as ISO 10218, which defines safety requirements for industrial robots, and ISO/TS 15066, which extends these prescriptions to collaborative robots (cobots) by limiting maximum energy and force in human-robot interaction [7, 8]. However, despite these normative standards, conventional methods remain insufficient to guarantee intrinsic and dynamic energy safety, particularly when controlling energy flows between actuators (electric motors), the robot mechanics, and the physical environment, whether human or material. Without a robust energy control architecture, a robot may inject uncontrolled energy into a physical system, potentially causing unregulated behavior, dangerous impacts, or exceeding safe thresholds [9]. This issue is particularly critical in direct physical human-robot interaction.
Furthermore, optimizing the energy consumption of robots, particularly those integrating advanced control techniques, artificial intelligence algorithms, and Big Data-based approaches, remains a major challenge in mastering next-generation automated technologies. Indeed, while these methods improve performance, adaptability, and decision-making autonomy, they often induce computational and energetic complexity that must be rigorously regulated to ensure efficiency, sustainability, and industrial viability [10, 5, 6]. To address these challenges, a unified energy-based approach founded on the port-Hamiltonian theory provides a powerful framework for describing the dynamics of robotic systems in terms of energy exchange, storage, and dissipation. This formulation offers a natural basis for analyzing passivity, stability, safety, and energy management in dynamic systems. Port-Hamiltonian systems explicitly model the energetic interconnections among subsystems, thereby facilitating the design of control laws that preserve the fundamental principles of energy conservation and dissipation, which are essential for ensuring safe, predictable, and physically consistent interactions [11].
Recent developments have confirmed the growing interest in this formalism across a wide range of robotic and mechatronic applications. For instance, the work reported in [12] employs the port-Hamiltonian framework to develop a control strategy that combines a fuzzy logic controller (FLC) with a particle swarm optimization (PSO)-based adaptive mechanism, with the objective of improving the dynamic robustness of an unmanned aerial vehicle subjected to icing disturbances and measurement noise. These results demonstrate the ability of the port-Hamiltonian formalism to accommodate advanced control strategies while preserving a physically consistent representation of the system's energy exchanges. Moreover, a recent line of research has explored control methods based on energy tanks, which constitute auxiliary state variables representing the available energy and are used to control and limit the power that the system can inject. This architecture guarantees that energy exchanges remain bounded, thus ensuring system passivity even when non-passive control laws are applied [8, 13].
In parallel, the development of robust control strategies for electric motors actuating robots, such as Permanent Magnet Synchronous Motors (PMSM), is crucial to ensure that the mechanical power delivered to the robot is strictly controlled and adapted to safety requirements. In robotic applications, PMSM control must handle disturbances, parametric variations, and complex dynamic requirements, which have led to advances in robust control, based on Lyapunov theory and advanced observers [14]. Moreover, the literature on energy safety in human–robot interaction has highlighted the importance of integrating both dynamic passivity aspects and power/energy constraints to prevent physical injuries and comply with energy safety criteria [15].
Scientific Problem and Ethical Issues
Despite recent advances in passivity-based control, safety standards, and robust actuator tuning, most existing approaches address these aspects in a fragmented manner. In particular, passivity-based control methods, safety constraints, and robust motor control strategies are generally developed independently, thereby limiting their ability to ensure coherent energy safety at the scale of a coupled robotic system. Furthermore, current efforts aimed at raising awareness of the risks associated with increasing robot deployment are not always accompanied by integrated methodological and technical solutions capable of effectively enhancing the safety of automated systems [1, 4]. Consequently, there remains a lack of systemic approaches capable of providing comprehensive energy supervision of a coupled robotic system, encompassing the electric motor, the robot's mechanical structure, and its dynamic interactions with the environment. This scientific gap constitutes the central research problem addressed in the present work.
From both ethical and operational perspectives, the deployment of interactive robots in human-centered environments requires that their physical actions remain continuously supervised and constrained. This necessitates the implementation of explicit energy-supervision mechanisms capable of ensuring that the robot's behavior remains within physically safe limits. In the absence of such mechanisms, uncontrolled energy transfers may lead to hazardous interactions or unexpected behaviors, representing a major concern in current discussions on safety, accountability, and trustworthiness in autonomous and collaborative systems [1, 9, 4, 5, 6].
In this context, two complementary levels of energy safety appear essential:
explicit control of the power injected by the electric motor, thereby limiting the amount of energy instantaneously available for mechanical actuation;
design and supervision of an Energy Tank, which imposes an upper bound on the total amount of energy that can be transferred during interaction.
The integration of these two levels within unified control architecture not only guarantees the dynamic stability and passivity of the overall system but also satisfies the intrinsic safety requirements associated with human-robot interactions.
State of the art
In recent literature, several contributions have partially addressed these issues:
Passivity-based control and port-Hamiltonian framework. The modeling and control of robotic systems within the port-Hamiltonian framework have been studied for manipulators and mobile robots, demonstrating the ability of these models to preserve passivity and structure energy-based control laws [16].
Passivity and safety in human-robot interaction. Recent works have proposed control architectures that guarantee the passivity of robotic systems interacting with humans by combining safety and passivity constraints through filters or targeted impedance designs [15].
Energy tanks in robotics. The use of energy tanks to guarantee passivity and limit the energy transmitted by the system is an emerging and promising approach, widely explored in both theoretical and applied literature [13].
Robust PMSM control. Robust methods, including those based on Lyapunov theory and improved observers, have been proposed to enhance PMSM response in the presence of uncertainties and disturbances, which are essential for reliable robotic actuator control [14].
Normative standards and collaborative safety. Relevant ISO standards (ISO 10218 / ISO/TS 15066) provide a recognized safety framework for human-robot interaction, but they are not sufficient on their own to guarantee dynamic energy safety in complex scenarios [17].
Despite these contributions, there is currently no framework that integrates in a unified manner energy-based modeling, port-Hamiltonian control, supervision through energy tanks, and normative and ethical safety constraints.
Objectives and contributions of the manuscript
This manuscript proposes a unified framework based on the port-Hamiltonian formalism, aimed at ensuring coherent, stable, and safe modeling, control, and energy supervision of coupled motor-robot-environment systems. Unlike existing approaches that address passivity-based control, safety, and energy regulation as separate problems, the proposed framework seeks to bridge several theoretical and methodological gaps related to the global energy supervision of collaborative and intelligent robotic systems.
The main contributions of this work are summarized as follows:
The first layer explicitly limits the power injected by the electric motor in order to guarantee controlled torque transmission. The second layer relies on the analytical sizing of an Energy Tank based on the maximum gravitational torque. This dual-layer structure ensures bounded mechanical energy and safe interactions, even in the presence of uncertainties and external disturbances.
This work highlights the relationship between energy management in robotic systems and data-driven as well as artificial intelligence-based approaches. Although such methods enhance autonomy and decision-making capabilities, they also increase the computational and energetic complexity of robotic platforms. In this context, the proposed port-Hamiltonian framework provides a suitable foundation for ensuring efficiency, robustness, and long-term sustainability in next-generation robotic systems.
The proposed framework guarantees that both injected and stored energy remain physically bounded and continuously supervised. As a result, it contributes to improving the transparency, predictability, and accountability of collaborative robotic systems operating in human-centered environments.
These include experimental validation of the proposed framework, its extension to multi-degree-of-freedom robotic systems, and the integration of machine-learning techniques under passivity constraints to further enhance its applicability, scalability, and practical deployment.
The remainder of this manuscript is organized as follows. Section 2 presents the proposed methodology, detailing the design of the two-level energy-control architecture that integrates motor power regulation and the Energy Tank mechanism within a port-Hamiltonian framework. Section 3 is devoted to the presentation and discussion of the results, including the validation of the Permanent Magnet Synchronous Motor (PMSM) control laws and the evaluation of the energy dynamics of the coupled motor–robot–environment system. Finally, Section 4 concludes the paper and outlines future research perspectives.
METHODOLOGIES
The proposed secure robotic system (Fig. 1) is based on the analysis of the role of the electric motor in the energy transmission dynamics of the robot. Electric machines, particularly Permanent Magnet Synchronous Machines (PMSM), have the primary function of supplying the industrial robot with a mechanical torque τm, as illustrated in Fig. 1. This torque τm constitutes the passive power port of the system, representing the fundamental energy exchange variable. It can be regulated or optimized through current control using static converters on the grid side (GSC) and on the machine side (RSC). The DC bus ensuring the interconnection of the two converters guarantees voltage level stability and control of the power flows injected into the machine.
The transmission dynamics between the motor shaft and the robotic arm joint involve several essential mechanical parameters: the viscous friction coefficient Fm, the moment of inertia Jm, the mechanical speed ωm, as well as the different applied torques such as the motor torque τm, the energy regulation torque τtank, and the environment-related resisting torque τenv.
Thus, the complete motor-robot-environment coupling at the joint level, formulated within the Port-Hamiltonian Interconnection and Damping Assignment-Passivity-Based Control (IDA-PBC) control framework, combined with the appropriate selection of the energy tank energy Etank, makes it possible to guarantee:
stable interaction with the environment;
compliance with the passivity properties of the system;
operational safety, and controlled management of the energy consumption of the robotic arm.
Modeling and control of the PMSM for coupling and secure control of robots
The first level of the safety formalism of the industrial robotic system (Fig.1) concerns the control of the Permanent Magnet Synchronous Motor (PMSM). The objective is to impose strictly controlled energy supply, so that the robot evolves according to its intrinsic dynamics, without excess or energy instability. Regardless of the considered robotic architecture-humanoid or industrial-the control of electric actuators plays a central role in two respects. On the one hand, it enables optimization of the overall energy consumption of the system. On the other hand, it ensures precise control of the injected power, whether remotely or in situ, in order to prevent any undesired dynamic response, particularly during interaction with the environment. Thus, the energy regulation of the PMSM constitutes the first link in the overall safety mechanism, ensuring that mechanical-level power exchanges remain compatible with the passivity and stability requirements of the coupled motor-robot-environment system.
Electrical modeling of the PMSM
The considered robotic system is based on the equivalent electrical model of the PMSM expressed in the rotating Park reference frame (d, q). This representation allows a decoupled description of flux and torque dynamics, thereby facilitating the synthesis of control laws adapted to the selected energy-based and passive framework. The electrical model is then written as follows [18]:
where the stator voltage components in the (d,q) reference frame are denoted by Usd and Usq, respectively; the permanent-magnet flux linkage per pole is denoted by Ψf.
The stator winding resistance is denoted by Rs; the direct-axis and quadrature-axis inductances are denoted by Ld and Lq, respectively; the stator currents in the (d,q) reference frame are denoted by Isd and Isq, respectively; the rotational speeds of the rotor and the transmission shaft are denoted by ωr and Ω, respectively; the moment of inertia of the mechanical transmission is denoted by Jm; the viscous friction coefficient of the mechanical transmission is denoted by Fm; and the total resisting torque is denoted by Cr.
The electromagnetic torque of the machine is written as follows [19]:
The expression for instantaneous electrical power is written as:
Synthesis of the PMSM control law
From equation (1), an algebraic rearrangement makes it possible to establish the PMSM current control model, expressed in the form given in equation (4). This formulation highlights the dynamics of the stator currents in the (d, q) reference frame and constitutes the basis for the synthesis of the regulation law.
A further rewriting of equation (4) then leads to the expression of the reference voltages required for converter control, also reported in equation (5). This expression explicitly incorporates the dynamic coupling terms:
where Ed=ωrLqIsq and Eq=ωr(LdIsd+Ψf) represent the cross-coupling compensation components induced by the rotation of the magnetic field. Their consideration ensures effective decoupling of
the dynamics along the direct and quadrature axes.
The introduction of a proportional-integral (PI) controller in equation (5) then makes it possible to establish the open-loop transfer functions (OLTF) and closed-loop transfer functions (CLTF) of the current regulation system. From these expressions, the regulation gains Kp(Isd,Isq) and Ki(Isd,Isq) are derived as follows:
Using the parameters in Table A1 in the appendix for the numerical application of the PI gains in equation (6), and for a damping time constant Tr=1 ms, the following values are obtained: Ki(Isd)=Ki(Isq)=958, Kp(Isd)=5.25, Kp(Isq)=12. These parameters ensure fast and stable current dynamics, compatible with the energy control and safety requirements of the robotic system.
Simulation assumptions for the robust PMSM control law
The assumptions adopted for the implementation of the control law do not in any way alter the physical structure of the motor. They essentially aim to structure the energy exchanges in order to enhance system robustness and preserve its passivity properties.
The objective is to channel the electromagnetic power exclusively along the quadrature axis (q), while ensuring structural passivity along the direct axis (d). This strategy reduces perturbation effects related to cross-couplings between current components and improves the stability of the overall dynamic behavior. The assumptions considered are as follows:
The vector control principle imposes that the electromagnetic power depends only on the reference current Isqref. This condition corresponds to opening the energy port on the (q) axis, characterized by Usqref=0. Thus, the quadrature component becomes the unique active power transmission channel.
Imposing Isdref=0 guarantees the absence of active energy contribution on the direct axis. This constraint promotes internal dissipation and stabilizes system dynamics by limiting cross-interactions [18].
Applying the condition Usd=0 ensures the passivity of the subsystem associated with the direct axis. This port closure reinforces the decoupling of the (d,q) dynamics, improves robustness with respect to parametric disturbances, and contributes to overall energetic stability.
Under these assumptions, the electromagnetic torque of the PMSM, converted into mechanical power (Pm), can be expressed as follows [18]:
The validation of the robust modeling associated with the PMSM control law, corresponding to the first level of secure power control, is presented in the Results and Discussion section. This validation is based on three distinct simulation scenarios, designed to evaluate the relevance and robustness of the previously formulated assumptions. These tests make it possible to analyze the dynamic behavior of the system, the effective channeling of power along the (q) axis, as well as the preservation of passivity properties and energetic decoupling.
Port-Hamiltonian method and analysis of the energetic dynamics of a robotic arm
In analytical mechanics, the dynamic modeling of robotic arms mainly relies on energy-based formulations grounded in the notions of kinetic energy and potential energy. Classical approaches thus lead to the Newton-Euler, Euler-Lagrange, and Hamilton equations, each providing a particular level of description of the system's dynamic behavior. Among these formalisms, the Hamiltonian representation constitutes the theoretical foundation of the port-Hamiltonian (PH) paradigm, which extends the classical formulation by explicitly integrating power exchanges through interconnection ports. This framework offers a unified systemic description of energy flows, particularly suited to the analysis and control of coupled electromechanical systems. In the context of a robotic arm, the port-Hamiltonian approach makes it possible to coherently model the energy interactions between the motor, the mechanical structure of the robot, and the environment (human or material). This unification of power interface ports provides a natural framework to [19]:
guarantee the passivity properties of the global system;
ensure interaction safety;
enhance robustness against disturbances;
preserve the coherence and traceability of energy exchanges;
and optimize energy management within the coupled system.
Thus, energy analysis based on the port-Hamiltonian formalism does not merely constitute an alternative modeling approach, but rather a structuring methodological framework enabling the integration of control, safety, and energy efficiency within a unified approach.
Formalism for energy evaluation and control of a single joint robotic arm
Let us consider a robotic arm as shown in Fig. 2 below, rotating about a jointed axis (0), heavy and rigid. Using the energy provided by the actuator-gear pair (PMSM + gearbox), this arm can be described as follows:
The distance ℓ is the length of the arm between the rotation axis (0) and the center of gravity of the arm at (G);
The moment of inertia I represent the resistance to rotation of the arm with respect to axis (0);
The angle θ or q represents the position or generalized coordinate formed by the arm with the vertical of the inertial frame;
The gravitational acceleration at G is given by the constant g=9.81m/s2;
The viscous friction coefficient at the joint is denoted D or B.
Determination of the position coordinates and associated energies of the robotic arm
The position coordinates of the arm of length ℓ in the inertial frame are written as:
The positioning velocity components are written as:
The expression of the velocity magnitude is written as:
The expressions of the kinetic energy T(q,q˙) and the potential energy V(q) of the robotic arm dynamics are written as follows:
Port-Hamiltonian formalism and energetic dynamics of the robotic arm
The port-Hamiltonian formalism applied to the robotic arm is based on a unified energy framework integrating modeling, control, safety, and observation of power exchanges. This approach is structured around the following principles:
The dynamics of the robot and its actuator are described from the Hamiltonian H, representing the total energy of the system (kinetic and potential). Its time evolution H’ explicitly reflects the power flows exchanged through the interconnection ports.
This strategy makes it possible to act on the interconnection structure and on the dissipation matrices in order to shape a desired Hamiltonian Hd. The latter is designed as a Lyapunov function, guaranteeing asymptotic stability of the closed-loop system while preserving its passivity properties.
The introduction of an energy tank ensures explicit management of energy exchanges by imposing constraints on the available power. This mechanism prevents any energy overflow that could compromise interaction safety.
The analysis of interconnection ports enables a coherent estimation of the energy flows exchanged with the environment, thus providing a direct indicator of the interaction level and safety.
On this basis, the port-Hamiltonian formalism of the robotic arm is developed in five main steps, allowing the structuring of modeling, control synthesis, and the integration of energetic safety mechanisms.
Step 1: Determination of the actual energy and the energy balance of the robotic arm
Let us first recall the classical expression of the articulated arm dynamics from the Euler-Lagrange formalism as follows [19]:
Where the set of generalized torque couples associated with the joints and the environment is denoted by τi; the generalized coordinates of the joints are denoted by qi; and the Lagrangian is denoted by L(q,q′) and is given by the following expression:
The Hamiltonian (H), on the other hand, describes the total energy of the robotic arm through the following function:
The energy balance, as a measurable quantity of the Hamiltonian variable, can be written as:
The port-Hamiltonian equations for conceptualizing the robotic arm are defined as follows [11, 19]:
where D represents dissipation or energy losses.
By rearranging Equation (16), the port-Hamiltonian (P-H) state-space representation of the robot dynamics can be expressed as follows:
Furthermore, by identifying the variables and matrices in Equation (17) as: x’=[qi’; pi’]T, [J-R]=[0 I;-I -D]T, ∇H=[∂H/∂qi; ∂H/∂pi]T, [G]=[0; I]T and u=[τi], the robot dynamics can be rewritten in the following generalized port-Hamiltonian state-space form [19]:
where the matrix (J) represents the interconnection structure matrix, also referred to as the skew-symmetric matrix, which characterizes the internal energy exchanges within the system; the matrix (R) denotes the dissipation matrix, representing the energy losses in the system; the vector (G) corresponds to the port input vector, including the actuators and interactions with the environment; and the variable (u) represents the effort variable applied to the ports, corresponding to the total torques τi.
By rearranging equations (16) and (18) in matrix form and exploiting the properties of symplectic geometry, it is possible to express the variation of the system’s total energy. This variation, identified as follows, allows direct linking of power flows to port actions and dissipation effects [19]:
where the term (∇HTGu) represents the energy injected into and exchanged through the ports; the term (∇HTR∇H) represents the dissipated or irreversible internal energy losses; and the variable (τi) denotes the port variable, or total effort applied to the mechanical ports, corresponding to the torque generated by the motor and the interaction with the environment.
From equation (19), the expression for the energy balance of the robotic arm can be written as follows:
where the mechanical torque, or passive port through which the motor injects mechanical power (Pm) into the arm, is denoted by τmreal; the term q′TDq′ represents the dissipation port (Pd), corresponding to the losses due to viscous friction; and the term q′τenv represents the interaction port power (Penv), corresponding to the power exchanged between the robotic arm and its environment.
Within the port-Hamiltonian framework, system passivity is guaranteed when the time derivative of the stored energy remains less than or equal to the power exchanged through the system ports, namely.
where y denotes the vector of flow variables associated with (q’). This condition implies that the system cannot generate more energy than it receives from its environment.
The Energy Tank mechanism further strengthens this property by imposing an upper bound on the energy available for control actions. As a result, the energy injected into the system remains limited, preventing excessive accumulation of mechanical energy that could compromise either stability or interaction safety. From a Lyapunov perspective, the augmented total energy (H + Etank) can be regarded as a positive Lyapunov candidate function whose time evolution remains bounded and dissipative. Consequently, the Energy Tank serves not only as an energy-protection mechanism but also as a means of enhancing system stability by preserving passivity and preventing any uncontrolled amplification of energy exchanges.
Step 2: IDA-PBC control law of the Port-Hamiltonian system
Let us rewrite the Hamiltonian H(p,q) of the studied robotic arm as follows:
Let us recall the real port-Hamiltonian formulation in terms of p and q as follows:
The objective of the IDA-PBC (Interconnection and Damping Assignment Passivity-Based Control) method is to shape the energy dynamics of the system by imposing a desired port-Hamiltonian structure together with a desired Hamiltonian function (Hd), which are respectively defined as follows [14, 20, 21]:
where Kd is the derivative damping gain.
where Kp is the virtual stiffness constant or virtual damping proportional gain, and qd is the desired generalized coordinate.
It should be emphasized that Equations (24) and (25) are not obtained as a direct mathematical consequence of the preceding equations. Rather, they arise from a design choice inherent to the IDA-PBC methodology, which is based on the principle of energy shaping. More specifically, their formulation is inspired by the structure of the actual port-Hamiltonian system given by Equation (16) and by the expression of the actual Hamiltonian defined in Equation (14). The objective is to define a desired Hamiltonian (Hd), interpreted as a candidate Lyapunov function, in order to shape the dynamics of the robotic manipulator around the desired equilibrium configuration (qd), corresponding to the strict minimum of the desired energy.
By subsequently substituting the expression of the desired Hamiltonian given in Equation (25) into the desired port-Hamiltonian formulation of Equation (24), the following expression of the desired port-Hamiltonian system is obtained:
The search for the IDA-PBC control law on the port torques τi consists of ensuring H′d ≤ 0 as a Lyapunov function. To do this, we identify p′ in equations (23 and 26) and deduce the expression of the ports associated with the desired energy as follows [14, 20]:
According to the fundamental theorem of rotational dynamics, we can write:
Equation (28) of the closed-loop dynamics corresponds to the canonical form of the following second-order linear dynamics:
where the natural undamped frequency is denoted by ωn; the damping coefficient is denoted by ξ; and the stiffness constant of the energy well is denoted by Kp. By identifying equations (28) and (29), we can write:
The derivations based on Equations (28), (29), and (30) show that the gain Kd is determined from the desired closed-loop dynamics, ensuring a trade-off between response speed and oscillation damping. Consequently, the value of Kd is directly related to the damping ratio ξ, thereby guaranteeing controlled energy dissipation within the system.
In contrast, the Energy Tank parameters are defined from the maximum gravitational torque τgmax, together with an additional safety margin to ensure passivity and to bound the energy exchanged during operation. These design choices directly affect system stability, torque-limitation capabilities, and robustness against external disturbances.
Compared with conventional control approaches such as PI and LQR controllers, which are primarily focused on reducing tracking errors, the proposed method introduces explicit supervision of energy flows through the combination of the port-Hamiltonian framework and an Energy Tank mechanism. This architecture enables energy constraints to be directly embedded into the control law, thereby simultaneously guaranteeing system stability, passivity, and physical safety.
Recent studies reported in the literature further confirm that energy-based control approaches provide stronger guarantees for robot-environment interactions, particularly in collaborative robotics applications where safety, robustness, and predictable behavior are critical requirements.
The choices of ωn ϵ[10 to 30] rad/s and ξ = 0.023, corresponding to the desired industrial arm, and using the parameter values from Table A1 in the appendix, allow determining the following Kd and Kp:
The simulation model of the actually desired mechanical torque, associated with the energy tank for safety, obeys the formalism of the IDA-PBC/Energy Tank law as follows [8, 11, 13, 20]:
To guarantee passivity and energy safety of the ports, the energy tank (Etank / τtankmax) serves to limit the injection of motor energy, by considering either the calculated or desired real torque (τical) if Etank > Emin; otherwise, by setting the damping torque (τtankmax / α τical).
The choice of the tank energy (Etank), in accordance with ISO-type standards in robotics [8, 21, 22], allows writing:
where τgmax represents the maximum gravitational torque.
In practice, the gravitational torque (τg) corresponds to the gradient of potential energy and takes into account both:
the local peak or maximum static load at the joint;
and the minimum energy required to lift the robot’s mechanical link.
Meanwhile, the Energy Tank (Etank) acts as an energy-supervision mechanism designed to limit the amount of energy that can be injected into the robot-environment interaction. Its sizing is based on the maximum gravitational torque that may be exerted at the robot joint. This torque is defined as τgmax=mgℓ and corresponds to the worst-case static load that the system must be able to compensate.
To introduce a safety margin ensuring both system passivity and the robustness of energy exchanges, the tank-sizing coefficient is selected within the safety interval (1.5, 2), as specified in Equation (33). In the present study, the most conservative choice is adopted by setting this coefficient equal to 2. The maximum admissible torque associated with the Energy Tank is therefore defined as:
The factor 2 is a dimensionless safety coefficient and should not be interpreted as a torque value under any circumstances. Consequently, the quantity τtankmax(N.m) represents the only torque bound employed in the proposed energy-supervision mechanism. It defines the upper limit of the energy exchanges authorized by the control law and ensures that the available mechanical energy remains compatible with the passivity, stability, and safety requirements of the robot-environment system.
For the studied robotic arm, whose joints are rigid and subject to gravity, these considerations allow establishing the following relations [8, 21, 22]:
Using equation (35), it is possible to determine the maximum tank torque (τtank) not to be exceeded in the studied model. Hence, the maximum gravitational torque τgmax is reached for |sinq| = 1, which leads to: τgmax = m g ℓ = 12 * 9.81 * 0.6 = 70.632 N.m.
From equation (34), the maximum energy tank torque is then calculated as follows: τtank = 2 * τgmax = 141.264 N.m.
This value (τtank) defines the available power limit in the tank, ensuring that the port-Hamiltonian control remains passive and safe, while covering the maximum energy requirements of the robotic arm during operations under gravitational load.
Third step: Validation of safety bounds and local performance of the torque model
The objective of this step is twofold:
verify energy safety: demonstrating that, regardless of variations in energy exchanges, the torque or effective energy remains bounded by the global safety limit defined by the tank (τtankmax);
evaluate local performance: analysis of the accuracy of the exact torque model around the desired set point, in order to guarantee dynamic behavior consistent with control objectives.
For this, the following parameters are used in equation (27) of the torque:
D - Kd = -3.07 N.m, mgℓ = 70.632 N·m²/s², Kp = 672
This leads to the calculated torque expression: τcal = 70.632 sin(q) - 672 (q - qd) - 94.07 q′
The simulation assumptions adopted are as follows:
Four desired positions qd, representative of physically significant configurations: qd = (0°, 0 rad); (30°, 0.524 rad); (45°, 0.7854 rad); (90°, 1.571 rad);
The arm is initially at rest, q′ = 0°, at critical static instants;
The maximum tank limit is τtankmax = 2 * |τg| = 141.264 N.m.
This configuration allows verification that the calculated torque τcal remains strictly below the safety limit τtankmax while evaluating the local fidelity of the model with respect to the setpoint qd.
a) Validation of Etank safety bound
The static equilibrium condition corresponds to:
∆q = q - qd = 0 and q = qd
The calculated torque values τcal for the chosen setpoint angles are as follows:
τcal (0) = 0 N.m; τcal (30°) = 35.316 N.m; τcal (45°) = 49.944 N.m; τcal (90°) = 70.632 N.m
It is observed that for any desired angle qd ϵ [-180°, 180°], the calculated torque systematically respects the conditions: τcal < τtank and τcal = τreal
Therefore, the energy tank Etank is always respected, and no exceedance of the maximum torque is observed. This constitutes proof of global safety, independent of the exact configuration of the robotic arm, and guarantees local passivity, even for high Kp gains.
b) Validation of local performance of the exact model
The realism allows considering error variation choices such that ∆q is: (±3°, ±0.05 rad); (±6°, ±0.10 rad); (±7°, ±0.122 rad). Additionally, q ≠ qd and q′ = 0.
In this validation case, we consider the locally critical desired position qd = 90°. Therefore, q = ∆q + 90°, and we can write: τcal = 70.632 cos (∆q) - 672 * ∆q
The values of τcal (90°) corresponding to the following ∆q errors are:
For ∆q (+0.05, -0.05) rad: τcal = 36.935 N.m, 104.135 N.m;
For ∆q (+0.10, -0.10) rad: τcal = 3.045 N.m, 137.45 N.m;
For ∆q (+0.122, -0.122) rad: τcal = -11.878 N.m, 152.1 N.m.
Unlike the static equilibrium study, the exact model reaches and exceeds the saturation performance τtank = 141.264 N.m, when at the critical desired state qd = 90° and for ∆q = -0.122 rad. Therefore, we see that τcal = 152.1 N.m is greater than τtank = 141.264 N·m.
Consequently, we can write: τreal = τtank or τreal = α τcal; to signify that the sizing is consistent with the energy tank conditions of equation (32).
Modeling of the complete motor-robot-environment dynamics
The modeling of the complete energy dynamics allows coupling and evaluating the motor-robot-environment interaction, such that:
The motor provides controlled energy to the robot;
The Tank control law prevents any violent energy injection, bounding the robot’s total energy;
The environment can only consume or return available energy.
This novel complete coupling model at the robotic arm joint unifies the ports of energy torques that interact with the joint efficiency and the motor’s controlled mechanical speed.
Consider the Hamiltonian passivity equation at the joint as follows:
The classical reduction ratio at the joint is N.
The motor-side energy projection and conservation of power at the joint allow determining the efficiency without dissipation losses as follows:
where the mechanical torque injected and current-controlled is denoted by τm; the term (τreal/Nη) represents the torque used to move the robot; and the term (τenv/Nη) represents the torque exchanged with the environment.
The coupled motor-robot-environment dynamics can be compactly expressed as a residual-torque-driven motor equation, ensuring physical causality and energy consistency. The torque dynamics equation can be written as:
where, small(s) is the Laplace operator (s=jw).
To determine the complete coupling, equation (37) is introduced into equation (38) of the energy transmission dynamics, yielding the following complete coupling model:
The coupled motor-robot-environment dynamics can be compactly expressed as a residual-torque-driven motor equation, ensuring physical causality and energy consistency.
RESULTS AND DISCUSSIONS
The evaluation and validation of the proposed secure energy system for motor-robot-environment coupling are structured around two main stages:
validation of the assumptions of the robust PMSM control law, corresponding to the first level of secure power control;
simulated evaluation of the energy dynamics, corresponding to the second level of safety, on the complete motor-robot-environment coupling model.
For this analysis, the PMSM and robot parameters presented in Table A1 (Appendix) were used. All simulations were carried out using Matlab/Simulink software, enabling accurate reproduction of the coupled dynamics and verification of the validity of the safety and energy passivity assumptions over the entire system.
In summary, the parameters reported in Table A1 in the Appendix were selected to comply with the physical constraints of the considered robotic system while satisfying the passivity conditions imposed by the port-Hamiltonian framework. More specifically, both the control gains and the Energy Tank parameters were tuned to ensure system stability, limit excessive energy exchanges, and respect the safety bound defined by τtankmax. Their selection results from a trade-off between dynamic performance, robustness, and energy safety across the different operating regimes investigated.
Validation test of the assumptions of the robust modeling of the PMSM control law
The validation of the motor control law assumptions consists of verifying the following tests by simulation:
The quadrature reference current Isq-ref is a ramp varying from 0 A to 5 A, respectively from 0 s to 30 s and from 30 s to 60 s. In addition, we take a current Isd-ref = 5 A (Isd-ref ≠ 0) and Usd ≠ 0. The simulation results of Fig. 3 are obtained. Under these conditions, it is observed that the current Isd in Fig. 3a generally follows its reference but undergoes disturbances after each transient regime at times 0 s and 30 s. Moreover, in Fig. 3b, the current Isq also follows its reference but exhibits a deviation or tracking error with respect to Isq-ref. These observations indicate that opening the ports (Isd-ref ≠ 0 and Usd ≠ 0) increases the sensitivity of the control model to disturbances and reference deviations, highlighting the importance of closing the direct port to ensure the robustness and passivity of the control.
The quadrature reference current Isq-ref is defined as a ramp, identical to that of the first test. The direct-axis reference current is set to Isd-ref = 0 A while the voltage Usd ≠ 0 V. The simulation results are presented in Fig. 4.
In this second test, it is observed that the current Isd in Fig. 4a generally follows its reference but undergoes disturbances after each transient regime, at times 0 s and 30 s. Meanwhile, in Fig. 4b, the current Isq follows its reference with a very small deviation, indicating good tracking despite the presence of disturbances.
These results show that opening the direct port (Usd ≠ 0 V) leads to increased sensitivity of the control model to disturbances and reference deviations, although the errors remain small on the quadrature axis. This analysis confirms that closing the direct port is essential to maximize robustness and passivity of the control, by minimizing the influence of disturbances on the current dynamics.
The quadrature reference current Isq-ref is this time defined as a decreasing ramp, from 5 A to 1 A, respectively over the intervals from 0 s to 30 s and from 30 s to 60 s. The direct-axis reference current is set to Isd-ref= 0 A and the direct voltage Usd= 0 V. The simulation results are presented in Fig. 5.
The current Isd in Fig. 5a perfectly follows its reference, without disturbance or accuracy error. In addition, in Fig. 5a, the current Isq also follows its reference, without significant deviation and with almost zero fluctuation.
These results demonstrate that complete port closure (Isd-ref = 0 A and Usd = 0 V) eliminates the sensitivity of the control model to disturbances and reference deviations. Thus, this test fully validates the port closure assumption, confirming that the PMSM control law is robust to external disturbances and model variations, and guarantees accurate and stable current tracking.
As a preliminary step to the formulation of the hypotheses underlying the robust control law of the Permanent Magnet Synchronous Motor (PMSM) presented in Section 2.1.3, three test configurations were carried out to assess the robustness of different port opening and closing conditions, with the aim of selecting the most appropriate control model for the system.
In summary, the obtained results lead to the following observations:
This case shows that, under the influence of coupling effects represented by the terms (Ed) and (Eq) in Equation (5), the control model exhibits sensitivity to disturbances induced by abrupt changes in reference commands (Isdref = 5 A at t = 0 s, Fig. 3a, and Isqref = 5 A at t = 30 s, Fig. 3b). This configuration also leads to a steady-state tracking error between the reference Isqref and the actual current (Isq), characterized by a relative error of (Er = 2.4%) as shown in Fig. 3b.
In this configuration, the results show that a sudden variation in Isq (Fig. 4b at t = 30s) still induces a disturbance on the Isd component (Fig. 4a at t = 30s), indicating that coupling effects (Ed) and (Eq) remain present. Moreover, the non-zero voltage port Usd ≠ 0 introduces additional fluctuations in Isd (Fig. 4a) and contributes to a tracking error between Isqref and Isq, with a relative error of (Er = 0.1%) observed in Fig. 4b.
In contrast to the previous configurations, this case shows that abrupt variations in Isq induce almost no disturbance on Isd (Fig. 4a, t = 0s and t = 30s), indicating a significant attenuation of coupling effects associated with (Ed) and (Eq). Furthermore, simultaneous port closure leads to a reduction in tracking error, with a relative error of approximately (Er ≈ 0%) observed in Figs. 5a and 5b.
Based on this comparative analysis, the configuration (Isd = 0 and Usd = 0) is retained for the subsequent development of the robust PMSM control law. This choice makes it possible to reduce cross-coupling between the d- and q-axes, improve the robustness of the motor’s dynamic behavior, and ensure better consistency with the passivity and energy-control requirements of the overall motor-robot-environment system.
Simulated evaluation of the energy dynamics of the second safety level of a complete coupling model (motor, robot and environment)
The simulated evaluation and validation of the secure energy dynamics of the complete coupling system (motor, robot and environment) are carried out through three distinct scenarios:
No-load or ideal test: the system is tested without compensation of the gravitational torque (τg);
Partial operational test: the system is subjected to partial compensation of the gravitational torque (τg);
Full-load test: the system operates with complete compensation of the gravitational torque (τg).
In all simulation cases, the desired robot position is initially fixed at maximum effort, qd = pi/2. The control of the power supplied by the motor is ensured by:
Regulation of the direct-axis current Isd = 0 A (fig.5a);
Control of the quadrature current Isq, set to 5 A between 0 s and 30 s, then to 1 A between 30 s and 60 s (fig.5b).
Figs.5a and 5b illustrate that the power injected by the motor can be controlled precisely and optimally for the robot and, possibly, for its environment. This approach constitutes the first level of energy safety, allowing the human operator to maintain direct control over the energy transmitted to an industrial or humanoid robot.
The second level of energy safety is then evaluated through the three mentioned cases, based on the sizing and simulation of the energy tank Etank, in order to analyze the global energy dynamics of the robot under different load and gravitational compensation conditions.
Case 1 (Isd = 0, Isq = 5 A to 1 A, Cr = 0, qd = 90°): Ideal regime without gravitational compensation
For the no-load regime, the load torque is zero (Cr = 0) and no compensation of the gravitational torque (τg) is applied. The motor operates in synchronous mode following the Isq reference (fig.5b), thus developing the maximum electromagnetic torque Cem, the mechanical speed ωm, and the instantaneous power Pint, as illustrated respectively in Figs.6a and 6b and Fig. 7a.
Fig. 7b shows that the calculated torque τcal or its estimation correctly follows and bounds the power and respects the Etank limits. Although the upper and lower bounds of the torque τcal exceed the tank limit (141.264 N.m), the real torque τreal remains limited to the tank value (τreal = τtank), thus guaranteeing energy safety (fig.8).
Moreover:
The total energy H (fig.9a) reaches its maximum values (1000 J and 100 J), corresponding to the speed ωm.
The variation of H (fig.9b) stabilizes and oscillates around the maximum values (500 W and 100 W) while passing through zero, reflecting instantaneous energy flows.
Figs.10a and 10b illustrate the maximum environmental power and torque that the robot can withstand within the limits set by Preal, ΔH, and losses.
In summary, this first scenario demonstrates that:
All powers are non-zero;
The motor operates in synchronous mode, providing the maximum possible power;
The real torque is limited by the tank (τreal = τtank), ensuring that the robot power threshold is respected;
The total energy remains below the environmental capacity (H’ < Penv), allowing the robot to withstand or overcome the expected loads without exceeding its limits.
Thus, the ideal case (Cr = 0) is passive, and the motor behaves as an ideal isolating transformer, guaranteeing maximum energy safety while allowing optimal utilization of the available power.
Case 2 (Isd = 0, Isq = 5 A to 1 A, Cr = τreal / Nη, qd = 90°): Intermediate regime with partial load compensation
The intermediate regime corresponds to the common operational case, in which the load is partially compensated. Unlike the no-load regime, a decrease in torque, speed, and power is observed, as illustrated respectively in figs.11ab and fig.12a.
Fig. 12b shows that the calculated torque τcal (or its estimation) correctly follows and bounds the instantaneous power and ensures compliance with the constraint imposed by the Etank reservoir. More precisely, in figs.13ab:
In the time interval [0 s, 30 s], we have τcal > τtank, which leads to saturation such that τreal = τtank;
In the time interval [30 s, 60 s], we observe τcal < τtank, hence τreal = τcal.
Thus, the tank mechanism acts as an adaptive energy bound, limiting the torque when necessary and allowing the system to evolve freely when the energy demand remains below the safety threshold.
Unlike the ideal case, the total energy H (fig.14a) decreases and reaches maximum values on the order of 600 J and 80 J. Moreover, the time variation of H (fig.14b), as a function of the injected speed ωm, stabilizes and oscillates around 400 W and 50 W, periodically crossing zero, which reflects a controlled energy regime.
Figs.15ab also illustrates the power and environmental torque that the robot can withstand, within the limits imposed by Preal, ΔH, and internal losses.
In summary, this second scenario highlights that:
The motor operates with a reduced effort level compared to the ideal case; torques, dissipations, and powers are globally lower;
The total energy remains below the environmental capacity (H’ < Penv), which ensures that the robot can withstand the expected obstacle without exceeding its energy capabilities.
Consequently, this intermediate operational regime satisfies passivity conditions in real operation, confirming the consistency of the tank sizing and the robustness of the energy control in a partially loaded context.
Fig. 11. Representation of the electromagnetic torque Cem (a) and the rotational speed Wm (b) for case 2
Case 3 (Isd = 0, Isq = 5 A to 1 A, Cr = τg = mgsin(q), qd = 90°): Regime with full gravitational compensation
The full-load regime corresponds to the case where the gravitational load is fully compensated. In this configuration, the electromagnetic torque Cem (fig.16a) faithfully reproduces the shape of the current Isq, while the rotational speed ωm (fig.16b) converges toward an equilibrium point close to zero. Consequently, the injected power Pint (fig.17a) also tends toward zero.
Fig.17b shows that the calculated torque τcal (or its estimation) correctly follows the system dynamics and bounds the injected power, while respecting the constraint imposed by the Etank reservoir. Over the time interval [0 s, 60 s], it is observed that τcal < τtank, which directly implies τreal = τcal (fig.17b and fig.18a).
As the speed ωm becomes nearly constant, the real power Preal tends toward zero equilibrium (fig.18b). Unlike the intermediate case, the total energy H’ (fig.19a) as well as its time variation (fig.19b) progressively vanishes, reflecting an energy equilibrium state. Moreover, the environmental torque τenv converges toward τreal (fig.20b and fig.18b), while the environmental power Penv tends toward zero (fig.20a).
This third scenario highlights that:
The motor operates under nominal load conditions;
All the power produced by the motor is entirely absorbed by the robot;
The condition H’ ≤ Penv is satisfied, guaranteeing perfect passivity;
The rotational speed becomes constant;
The dynamic quantities no longer drift over time;
No net power exchange is observed;
A stable energy equilibrium point is reached.
Thus, the motor operates in a quasi-stationary regime, which can be assimilated to a perfectly coupled ideal transformer, ensuring balanced and fully controlled energy transmission.
Fig. 16. Representation of the electromagnetic torque Cem (a) and the rotational speed Wm (b) for case 3
Fig. 17. Representation of the instantaneous power Pint (a) and the calculated torque τcal (b) for case 3
In summary, the obtained results call for several additional clarifications to better interpret the highlighted physical phenomena. Within the framework of the studied robotic dynamics, the term ideal transformer refers to a theoretical energy behavior characterized by the absence of internal losses. In this configuration, mechanical power is fully transferred between the motor, the robot, and the environment through the interconnection ports. Conversely, the notion of energy equilibrium corresponds to a steady-state regime in which incoming and outgoing power flows mutually balance each other, resulting in an almost zero variation of the stored energy, (H’≈0).
To characterize these phenomena, three operating scenarios were quantitatively compared based on the following indicators:
The instantaneous power Pint injected by the motor;
The difference between the computed torque (τcal), the torque limited by the energy tank (τtank), and the actually applied torque (τreal);
The variation of the Hamiltonian energy H’ with respect to the power exchanged with the environment Penv.
The obtained results show that:
a) No-load operation
For the time intervals [0s, 30s] and [30s, 60s], the power injected by the motor is respectively Pint ≈ 3,7kW and Pint ≈ 151W (Fig. 7a). The computed torque reaches τcal ≈ 4kN.m and τcal ≈ 450N.m, respectively (Fig. 7b), while the maximum torque allowed by the energy tank remains fixed at τtank ≈ 141,5N.m. It is observed that τcal > τtank. Fig. 8b confirms that the actually applied torque satisfies τreal = τtank, reflecting the limiting action of the energy tank. This situation indicates that the available energy is sufficient to drive the system without significant load compensation.
Furthermore, the variations of the Hamiltonian energy are on the order of H’ ≈ 1kW and 200W (peak-to-peak values) (Fig. 9b), while the environmental power is estimated at Penv ≈ 1,1kW and 210W (Fig. 10a). The passivity condition H’<Penv is thus satisfied. This no-load regime exhibits the highest energy levels among the three studied scenarios.
b) Partial-load operation
For the same time intervals, the power injected by the motor is respectively Pint ≈ 2,9kW and 97,1W (Fig. 12a). The computed torque reaches τcal ≈ 3kN.m and τcal ≈ 45N.m (Fig. 12b), while the energy tank limit remains τtank =141,5N.m.
Over the interval [0s, 30s], it is observed that τcal > τtank, leading to τreal = τtank. In contrast, over [30s, 60s], the relationship reverses and τcal < τtank, resulting in τreal = τcal. This behavior reflects partial load compensation, characteristic of an intermediate operating regime.
Regarding energy exchanges, the variations of the Hamiltonian energy are estimated at H’ ≈ 800W and 110W (peak-to-peak) (Fig. 14a), while the environmental power reaches Penv ≈ 820W and 130W (Fig. 15a). The passivity condition H’ < Penv remains satisfied. This intermediate regime is characterized by a trade-off between dynamic performance and energy limitation ensured by the energy tank.
c) Full-load operation
Finally, for the full-load regime studied over the interval [0s, 60s], the injected power tends toward an equilibrium value close to zero (Pint ≈ 0) (Fig. 17a), while the computed torque reaches τcal ≈ 1kN.m (Fig. 17b). Since τcal > τtank, the actually applied torque remains limited by the energy tank, τreal = τtank (Fig. 18a).In this case, the variation of the Hamiltonian energy becomes practically zero (H’ ≈ 0) (Fig. 19a), while the power exchanged with the environment is also Penv ≈ 0 (Fig. 20a). The passivity condition H’ ≤ Penv is therefore satisfied.
Thus, unlike conventional approaches, the proposed control framework ensures an intrinsic limitation of power surges through the energy tank mechanism. This property contributes to improving the robustness of the system against nonlinear interactions and external disturbances, while guaranteeing compliance with passivity and energy stability conditions.
CONCLUSIONS
This work establishes a coherent and systemic energy framework for the control of interactive robots, relying on the port-Hamiltonian structure to explicitly link dynamics, power flows, and the overall energy balance. Unlike classical approaches that prioritize tracking performance at the expense of explicit energy analysis, the proposed method enforces intrinsic energy consistency, ensuring stability, robustness, and safety. The central contribution is based on dual-layer energy safety architecture. The first layer involves a direct limitation of motor-injected power, providing strict control of the transmitted torque. The second layer relies on the analytical sizing of the energy tank based on the maximum gravitational torque, ensuring that the total mechanical energy remains bounded by design. This approach eliminates any possibility of uncontrolled energy amplification, even in the presence of parametric uncertainties or external disturbances. Beyond mechanical safety, this contribution addresses a major technological challenge: optimizing the energy consumption of robots integrating advanced control techniques, artificial intelligence, and Big Data-driven approaches. While these technologies significantly enhance performance and autonomous decision-making, they also increase computational complexity and energy consumption. Strict management of energy flows thus becomes essential to guarantee efficiency, sustainability, and industrial viability of next-generation automated systems. From an ethical standpoint, the explicit bounding of injected power and stored energy ensures that robotic autonomy remains energetically supervised and physically controllable by humans. This approach strengthens transparency, predictability, and accountability in collaborative robotic systems. Future directions include experimental validation on real platforms, extension to highly coupled multi-degree-of-freedom systems, and the integration of learning strategies under strict passivity and energy-bounding constraints.


























































