European Robotic Arm

NASA. Public domain (NASA / US government work).

Overview

The European Robotic Arm is the manipulator of the Russian segment of the International Space Station, designed and built by Dutch Space with Astrium, SABCA and Stork as principal subcontractors [1]. It was originally to be launched by Space Shuttle in 2001 mounted on a Russian module; after the Columbia accident the launch was moved to a Proton, and ERA eventually flew on the Multipurpose Laboratory Module Nauka on 21 July 2021 [2].

ERA is a mirror-symmetric arm of two limbs and three joint clusters: a three-degree-of-freedom wrist at each end, roll, yaw and pitch, and a single pitch joint at the elbow [1], [3]. The two wrists are identical, so either can act as shoulder or hand, and relocation is performed by grappling a new base point with the free end effector and releasing the old one [1], [4].

Specifications

Parameter	Value	Source
Total length	11.3 m	[1], [3]
Reach	9.7 m	[3]
Mass	630 kg	[3]
Rated moveable mass	8000 kg	[1], [3]
Maximum payload dimensions	3 by 3 by 8.1 m	[1]
Maximum tip speed	0.10 m/s	[1], [3]
Braking distance at maximum joint speed	0.15 m	[1]
Positioning accuracy, open loop	+/-40 mm	[1]
Positioning accuracy, closed loop	+/-5 mm	[1], [3]
Average operating power, 120 V DC	475 W	[4]
Peak operating power	800 W	[1], [4]
Cameras	4 infrared	[3]

The difference between the open-loop and closed-loop positioning figures is the contribution of the camera vision system [1].

Mission profile

Parameter	Value	Source
Host	Multipurpose Laboratory Module Nauka, Russian segment of the ISS	[1], [2]
Original launch plan	Space Shuttle in 2001, mounted on a Russian module	[1]
Actual launch	Proton with Nauka from Baikonur, 21 July 2021	[1], [2], [8]
First tasks planned in orbit	airlock setup and radiator installation	[8]

Kinematics and workspace

Total length is 11.3 m and working reach 9.7 m, with seven degrees of freedom [3]. Launch mass integrated with Nauka is 630 kg. Each wrist is roll, yaw and pitch, and the elbow contributes a single pitch axis using the same basic hardware as the wrist pitch joints [1]. This gives a fully symmetric 3-1-3 arrangement rather than the distributed 7-joint chain of Canadarm2, and the consequence is that the kinematics look identical from either end: whichever end effector is latched to a base point becomes the shoulder, and the arm’s model of itself simply inverts.

The limbs are carbon fiber tube with aluminum interfaces, approximately 5 m each [1], [3]. The first bending mode contains more than 90 percent of the total inertia, so it is the mode the control system has to handle [1].

Joint design and actuation

Each joint contains a motor unit, a gearbox assembly, and a motor housing and yoke, plus an EVA access provision for manual override [1].

The motor unit is a pancake brushless permanent-magnet synchronous machine of 120.0 mm external diameter and 29.0 mm length, massing 0.750 kg [2]:

Motor parameter	Value
Design voltage	30 V +/-10 percent
Stall torque	greater than 1.45 N m
No-load speed at 30 V	345 rpm
Torque at maximum voltage and 25 rad/s	0.60 N m
Detent torque	less than 40 mN m
Stall power at 100 C	28 W
Torque constant	0.83 N m/A
Back EMF constant	0.83 V per rad/s
Motor constant	0.316 N m per root W
Torque ripple across the full torque range	less than 0.3 percent peak to peak

Source: [2].

Position is read by a 6040 Rotasyn speed-1 resolver of 14 bit resolution and better than 32 arcmin accuracy, 65.0 mm outside and 30.0 mm inside diameter, 20.0 mm long, 0.420 kg, with a rotor inertia of 0.96e-3 kg m2 [2]. The motor is a permanent magnet synchronous machine with a two-phase redundant winding. Its electronics are tuned for ripple-free torque, which requires instantaneous rotor position, supplied by a resolver whose two secondary windings give sine and cosine of angular position [1]. A separate Joint Position Sensor measures angular rotation at the joint output axis and feeds the joint control electronics; each contains a redundant set of read stations, light emitting diodes and signal processing. Measuring at the output rather than only at the motor is what lets the control system see through the gearbox.

The brake is fail-safe and electromagnetically attracted: eight springs supply on average about 85 N of axial force pressing two friction surfaces together when unpowered, and a constant coil current separates them magnetically [1]. The friction coating is Cr2O3 ceramic [2]. Disc separation is 0.2 mm nominal under coil attraction, reported by cruijssen as 0.25 to 0.30 mm [1], and a microswitch reports brake status, which has to be highly reliable at that separation.

Brake parameter	Value
Torque range	0.70 to 1.10 N m, average 0.90
Torque variation	+/-22 percent of the average
Emergency stopping time from runaway	less than 3.5 s
Operating temperature range	-55 to +85 C
Qualified duty	4380 h and more than 10,700 brake operations

Source: [2].

The brake is qualified in vacuum at LEO conditions [2], which is the case that rules out an oil-damped design: the friction pair has to work dry across a 140 C span with no atmospheric oxide replenishment.

The gearbox is an epicyclic train supplied by Stork Product Engineering, quoted as 454:1 in the joint hardware paper [2] and as a four-stage 450:1 train in the mechanisms paper [1], with gears of nitrided steel in stainless steel trains, with thermal expansion matched to the gearwheel material specifically to hold backlash stable across temperature. Three design choices in it are worth stating because they follow directly from the requirement for low backlash at low mass:

• Three planet wheels per stage, because a three-wheel system self-balances its internal load distribution. The last stage needed six wheels to keep Hertzian stress within limits in the available space, and those six are carried on a floating support to recover load sharing [1].
• A tandem configuration in which stages 1 and 2 share a ring wheel, as do stages 3 and 4 [1]. The gearwheels are too narrow to self-align individually, so pairing them through a common ring wheel lets each tandem self-center.
• A floating ring wheel, supported by a tooth coupling, with the planet carrier and sun wheel assembly on a flexible plate flexure. Between those two interfaces the gear train is not connected to the housing at all, which isolates the gears from housing deflection under load and thermal distortion.

Measured backlash including hysteresis is less than 1 mrad [1]. The roll joint runs on two angular contact bearings for radial and axial support plus a deep groove ball bearing for radial support only, lubricated with Bray oil and preloaded by Belleville springs to survive launch vibration. Bray is a perfluoropolyalkylether, the class whose vapor pressure at 150 C is around 3.5e-6 Pa, three orders of magnitude below a multiply alkylated cyclopentane [5]; at the 1e-4 to 1e-7 torr of orbital ambient [6] that margin is what keeps the film in the bearing rather than on the surrounding structure.

End effector

Both end effectors are identical Basic End Effectors, and the difference between them at any moment is functional, not physical. One is latched to a base point, providing a stiff structural connection to the Russian segment and carrying power, data and video into the arm. The other acts as the hand [1].

Four mechanisms sit inside each one [1]:

Grapple mechanism. Three hook and lever systems coupled to a moving platform. The platform is driven by a brushless motor through a gear train and three synchronized roller screws whose nuts are mounted to the platform with restricted float. The hooks pull on the grapple fixture or base point until the gap closes, then rigidize and pre-tension. Three redundant switches report the platform’s upper end position, the position at which the end effector is aligned with the fixture, and the position at which the latches are closed and pre-stressed, which is also where connectors mate. Hall sensors on the motor give continuous platform position between those points [1].

The hooks are sprung outward by coil springs. If a hook meets an obstruction while grappling, spring deformation applies about 30 N to it, the torque force sensor measures the reaction, and the onboard computer repositions the end effector relative to the fixture to relieve the load [1]. This is the mechanical equivalent of the snare’s misalignment tolerance on Canadarm2, achieved by sensing and correction rather than by geometry.

Torque force sensor. A strain-gauge unit measuring forces and moments in six degrees of freedom, temperature compensated and protected from overload by rigid end stops [1]. Every grapple on ERA is therefore force-instrumented. The two end effectors are described by the operator as identical gripper mechanisms [3], so the instrumentation is present whichever end is acting as the hand.

TFS rigidization mechanism. Because a force sensor is by construction compliant, ERA can lock it out when stiffness matters more than measurement, for example when the end effector is acting as the shoulder or when transporting a large mass. A brushless motor drives a worm gear of ratio 105, turning a cam wheel through 60 degrees [1]; three cam tracks convert that rotation into 3 mm of translation on three rods, which push solid inner cones into flexible slotted outer cones, expanding them to block the sensor. The worm gear is not backdriveable, so the blocked state holds without power [1].

Integrated Servicing Tool. A powered wrench in the lower end effector compartment: a redundant brushless motor, a gearbox, and a tool head with a pop-in device. The drive shaft enters a receptacle on the grapple fixture as the platform moves down, and the head rotates slowly on command until it pops in; the receptacle provides compliance if it does not seat immediately, and a sensor confirms insertion [1]. This lets ERA drive bolts on a grappled object, for example to release a stowed radiator stack, without a separate tool changeout.

Three floating system connectors on the moving platform carry power, video and data across the interface, mounted on floating devices to absorb lateral and angular misalignment, each reporting its own mated status [1]. Average power drawn through that path in operation is 475 W at 120 V DC, rising to 800 W at peak [4].

Base points are mechanically identical to grapple fixtures but omit the IST receptacle and instead carry the station-side halves of the three connectors [1].

Force and moment sensing

Six-axis force and moment sensing is built into both end effectors, and is used both for contact management during grappling and for monitoring loads during insertion, extraction and transport of a payload [1]. It can be rigidized out of the load path when stiffness is the binding requirement. This is a more capable arrangement than the wrist force-moment sensors of Canadarm2 in one respect, since the sensor is inside the grapple interface itself rather than behind the wrist, and the sensed load includes the grapple contact directly.

Power and energy

ERA draws from the station bus through whichever base point it is latched to. Peak power dissipation is 800 W, standby heat dissipation 420 W, and hibernation heater power 250 W [1].

Thermal

Joints carry multi-layer insulation and heaters [1]. Thermal deformation was a first-order design driver rather than a survival question: gear material and thermal expansion were matched to keep backlash stable, bearing preload was arranged so that thermal expansion loads distribute across the bearing through the lateral elasticity of the yoke fingers, and flexures were introduced through the joint specifically to absorb thermal and manufacturing deformation in a statically indeterminate support. MLI covers the manual override inlets and position indicators to prevent sun trapping, and folds back for EVA access. The cycling load behind that design is roughly 34,000 eclipse transitions per 5.8 years at LEO altitude, the rate measured on LDEF, where cycling produced microcracking in composites and delamination of some coatings [6].

System-level operating and survival temperature ranges are not stated in the retrieved sources, though thermal vacuum and thermal balance testing were performed at system level [1]. At joint level the brake is qualified from -55 to +85 C [2].

Compute and avionics

The ERA Control Computer, also called the onboard computer, is the system’s central processor. It communicates with the station over an external data bus and with each subsystem over an internal bus [1]. Joint control is distributed: each wrist contains an electronics box that drives its three motors independently with redundancy provided by two circuit boards, and the elbow has its own box. Those boxes are mounted between the limbs and form part of the structural load path, so they are built as ribbed, stiffened rectangular structures rather than as ordinary avionics housings.

Four infrared Camera and Lighting Units are fitted, one on each end effector and one on each side of the elbow [1], [3]. Closed-loop accuracy of plus or minus 5 mm depends on them; open loop the arm holds plus or minus 40 mm [1].

Autonomy

ERA is described by its operator as fully programmable, able to work automatically or semi-automatically, and controllable in real time or from a preprogrammed sequence [8]. The relocation maneuver is autonomous: the arm walks from base point to base point on the Russian segment without step-by-step commanding [1].

The clearest documented autonomous behavior at the mechanism level is the grapple correction loop, where an obstructed hook produces a measurable reaction at the force sensor and the computer repositions the end effector to relieve it [1].

Communications

ERA has no independent radio. Power, data and video pass through the mated end effector’s three system connectors into the base point and thence to the Russian segment [1], and the control computer talks to the station over an external data bus. Commanding reaches it through the IMMI laptop inside the pressurized segment or the EMMI console outside [4], not through a dedicated ground link.

Payload and instruments

ERA carries no science instruments. Its sensing consists of the four camera and lighting units, the two six-axis force and torque sensors, and the joint position sensors and Hall sensors described above [1]. Its functional payload is the Integrated Servicing Tool, which turns the arm from a transporter into a servicer capable of driving a torque interface on a grappled object.

Modes of operation

Two crew control stations exist [4]:

• The IVA Man-Machine Interface (IMMI), a laptop-based application inside the pressurized Russian segment, with an adjacent workstation able to display ERA camera views [1], [4].
• The EVA Man-Machine Interface (EMMI), a dedicated console of switches and LED displays built to be operated by a crew member in a pressure suit and to survive extended exposure to the space environment.

Every end-effector function also has a mechanical override available to the crew [3], and the end effector carries a motorized screwdriver whose torque and rotational speed are programmable.

A hibernation configuration is defined in which both end effectors are mated to base points, with heaters drawing 250 W [1].

Manual override at the mechanism level is provided throughout for contingency: EVA overrides exist for the grapple mechanism, the Integrated Servicing Tool, the TFS rigidization mechanism and the joints, using dedicated EVA tools [1].

Ground operations

ERA was designed from the outset to be maintainable in orbit. Large components are defined as EVA Replaceable Units, and one ERU was launched ahead of the arm itself on STS-132 in 2010 and stored externally on MRM-1 in a protective MLI bag, so that a spare was already on orbit before the arm arrived [1]. Mechanism dimensions and accessibility were driven by EVA tool clearances, and EVA handrails and tether eyes are fitted along the arm. A cosmonaut walkaround of the qualification model was conducted as part of the Critical Design Review, with the arm posed operationally and the overrides, labels, handrails and tether eyes presented for inspection. External hardware is also exposed to a meteoroid population whose average impact speed in low Earth orbit is 19 km/s [7], which is one reason the EVA Replaceable Unit approach was adopted rather than a sealed non-serviceable design.

Ground qualification faced the same problem as every large space manipulator: the arm cannot support itself in one gravity. Only planar motion in the pitch plane could be tested physically, and three-dimensional robotic operation was qualified analytically, with a multi-body dynamics model in the ERA Simulation Facility whose flexible-body parameters were validated by striking the real arm with its joints braked and measuring the response [1]. Qualification followed a mixed qualification-model and protoflight approach, with structural and thermal qualification on the engineering and qualification model and electrical qualification on the flight model, since only the flight model carried high-reliability parts. A boosted modal survey was used to qualify launch interfaces by exciting selected modes to qualification load levels, though not all levels were reachable because of non-linear behavior in the launch configuration, and static strength tests had to complete the qualification for axial components.

Technologies developed

The mirror-symmetric 3-1-3 architecture gives relocation with inverse kinematics that are the same problem from either end, at the cost of a smaller usable workspace for a given length [4].

A six-axis force and torque sensor integrated into the grapple interface, with a non-backdriveable worm-and-cone mechanism to lock it out of the load path, addresses the conflict between force sensing, which requires compliance, and payload transport, which requires stiffness [1].

The planetary joint with floating ring wheels in tandem pairs holds backlash including hysteresis below 1 mrad at a ratio of 450:1 in a mass-constrained package [1]. Its motor unit holds torque ripple below 0.3 percent peak to peak across the full torque range [2], in an application where harmonic drive was not selected.

Designing for EVA replacement from the start, and pre-positioning a spare unit on orbit eleven years before the arm itself launched, is an operational precedent for long-lived external robotics [1].