Aviation-Grade Power Electronics
Aviation-grade power electronics are the converters, inverters, and distribution equipment that condition and route electrical power aboard aircraft, designed to meet the reliability, environmental, and certification standards unique to flight. As aircraft replace hydraulic, pneumatic, and mechanical systems with electrical ones, and as electric and hybrid-electric propulsion advances, power electronics move from a supporting role to the core of the aircraft energy system.
The demands placed on these systems are severe. Power converters must achieve high efficiency and low mass because every kilogram reduces payload or range, yet they must also tolerate wide temperature extremes, reduced air pressure at altitude, vibration, and electromagnetic interference, while meeting failure-probability targets far stricter than any consumer or automotive application. Civil airworthiness rules require that catastrophic failure conditions remain extremely improbable, on the order of one event per billion flight hours. This article examines the electrical architecture of the more-electric aircraft, the role of wide-bandgap semiconductors, motor drives for electric propulsion, the strategies used to achieve reliability and redundancy, thermal management under the thin air of high altitude, and the certification framework that governs airborne electronics.
The More-Electric Aircraft
The more-electric aircraft is a design philosophy that progressively replaces non-electrical power systems with electrical equivalents. It provides the context in which aviation-grade power electronics have grown from peripheral equipment into central infrastructure.
From Federated Power to Electrical Systems
Conventional aircraft distribute power in several distinct forms. Engine-driven hydraulic pumps actuate flight controls and landing gear, bleed air drawn from the engine compressors drives environmental control and anti-icing, and a comparatively small electrical system supplies avionics and lighting. The more-electric approach consolidates these functions onto the electrical system, replacing hydraulic actuators with electromechanical or electrohydrostatic units, substituting electric compressors for bleed-air environmental control, and using electric anti-icing in place of hot bleed air. The Boeing 787 is the most prominent example of this architecture. It eliminates the engine bleed-air manifold for nearly every function, retaining bleed air only for engine inlet cowl anti-icing, and it carries six generators: two 250-kilovolt-ampere variable-frequency starter-generators on each engine and two 225-kilovolt-ampere units on the auxiliary power unit, for roughly 1.45 megavolt-amperes of installed generating capacity. That is several times the electrical capacity of a comparable bleed-air airplane. The same machines run as motors to start the engines, which removes the pneumatic starter and its ducting.
Benefits and Consequences
Consolidating onto electrical power improves overall efficiency, because electrical distribution avoids the losses inherent in extracting bleed air from the engine core and because power can be delivered on demand rather than continuously. It also reduces maintenance, since electrical systems have fewer fluid lines and seals to inspect and replace. The consequence is a large increase in installed electrical power and a correspondingly central role for power electronics, which must now convert and distribute power for propulsion-adjacent loads, actuation, and environmental control. Each added function raises the stakes for the reliability of the converters that supply it.
High-Voltage DC Distribution
As electrical loads grow, the architecture of the distribution system itself becomes a design variable. The trend across advanced aircraft is toward higher voltages and toward direct-current distribution, both of which reduce the mass of the conductors that move power around the airframe.
Why Higher Voltage and Direct Current
For a given amount of power, raising the voltage lowers the current, and lower current permits thinner, lighter cables and reduces resistive losses. Because conductor mass is a significant fraction of an aircraft electrical system, this scaling motivates the move to higher distribution voltages. Traditional aircraft distribute 115-volt alternating current at a constant 400 hertz, held there by a constant-speed drive between the engine gearbox and the generator. Advanced designs discard that drive and accept variable-frequency power instead: the Boeing 787 generates 235-volt alternating current whose frequency varies from roughly 360 to 800 hertz with engine speed, then rectifies part of it to direct current. High-voltage direct-current buses of 270 volts, long standard on military aircraft under MIL-STD-704, and bipolar arrangements of plus and minus 270 volts giving 540 volts across the rails, are now common in large civil aircraft, and electric-propulsion studies propose distribution in the kilovolt range. Direct-current distribution is attractive because the battery and fuel-cell sources of electric aircraft produce direct current natively, because it avoids the reactive-power and frequency-synchronization concerns of alternating-current systems, and because it eases the parallel operation of multiple sources.
Conversion Building Blocks
A modern aircraft electrical system is a network of conversion stages rather than a single bus. Transformer rectifier units and autotransformer rectifier units derive direct current from the generator output, the latter avoiding a heavy isolation transformer by phase-shifting the supply to feed a multipulse rectifier, which reduces harmonic distortion on the alternating-current side. Direct-current to direct-current converters step the high-voltage bus down to the 28-volt level that avionics and legacy equipment expect. Bidirectional converters sit between the high-voltage bus and the battery so that energy flows in during charging and out during a power interruption or a peak demand such as takeoff. Motor controllers then invert direct current back to variable-frequency alternating current for pumps, compressors, and propulsors. Each stage adds mass and loss, so architects weigh the number of conversion steps against the flexibility that a common bus provides.
Protection and the Arc Problem
Direct-current distribution introduces a difficult protection problem. An alternating current passes through zero twice per cycle, and these natural zero crossings help extinguish any arc that forms when a circuit is interrupted. Direct current has no such zero crossing, so an arc, once struck, tends to persist and can cause severe damage. Aviation high-voltage direct-current systems therefore rely on solid-state power controllers and hybrid contactors that interrupt fault currents within microseconds, far faster than the milliseconds an electromechanical breaker needs, suppressing the arc before it can propagate. Because a semiconductor switch can also limit current rather than simply open, a solid-state power controller can ride through a brief overload, distinguish an inrush transient from a genuine fault, and report load status to the aircraft's power-management computer. The same devices support arc-fault detection, which watches the high-frequency signature of a series or parallel arc that draws too little current to trip a conventional overcurrent protection. These solid-state protection devices, built from the same power semiconductors used in the converters, are an essential enabling technology for direct-current distribution.
Wide-Bandgap Power Converters
The performance gains that make electric propulsion and the more-electric aircraft practical depend heavily on advances in power semiconductor devices. Wide-bandgap materials, in particular, have shifted what is achievable in converter mass and efficiency.
Silicon Carbide and Gallium Nitride
Wide-bandgap semiconductors, principally silicon carbide and gallium nitride, are named for the larger energy gap of their crystal structure compared with silicon. This larger gap allows the devices to withstand higher electric fields, operate at higher temperatures, and switch faster with lower losses than silicon devices of comparable rating. Silicon carbide is generally applied at the higher voltages and powers characteristic of propulsion-scale converters, where its high blocking voltage and thermal capability are most valuable; commercial silicon carbide metal-oxide-semiconductor field-effect transistors are widely available at 650, 1200, and 1700 volts, which suits them to 540-volt and higher buses. Gallium nitride transistors, commonly rated to 650 volts, excel at lower voltages and very high switching frequencies, where their low switching losses are decisive. Both displace the silicon insulated-gate bipolar transistor that dominated earlier high-power converters, and because a silicon carbide transistor conducts in reverse through its channel and intrinsic body diode, a design can often omit the separate antiparallel freewheeling diode that an insulated-gate bipolar transistor requires.
Power Density and Efficiency
The practical payoff of wide-bandgap devices is twofold. First, faster switching shrinks the passive components, the inductors, transformers, and filter capacitors, that often dominate converter mass, because these components can be made smaller as the switching frequency rises. Second, lower conduction and switching losses raise efficiency, which reduces both wasted energy and the heat that must be removed. The targets NASA sets for electrified aircraft propulsion converters illustrate the ambition: a minimum of 12 kilowatts per kilogram of specific power at 98 percent efficiency, a goal of 19 kilowatts per kilogram at 99 percent, and a stretch target of 25 kilowatts per kilogram at 99.5 percent. Demonstrators have begun to reach the middle of that range; ZeroAvia reported in 2024 that a silicon carbide inverter rated for 200 kilowatts of continuous power exceeded 20 kilowatts per kilogram operating from an 800-volt bus. For comparison, the silicon-based traction inverter of a road vehicle typically delivers a few kilowatts per kilogram. These improvements are precisely what allow propulsion-scale power electronics to meet the unforgiving mass budget of an aircraft.
Switching Challenges at Altitude and Voltage
The fast switching that benefits efficiency and mass also creates difficulties. Rapid changes in voltage generate broadband electromagnetic interference that must be contained to protect sensitive avionics, and they stress the insulation of motors and cables. At altitude, reduced air pressure lowers the voltage at which electrical breakdown and partial discharge occur, an effect described by Paschen's law, which relates breakdown voltage to the product of gas pressure and gap spacing. At a typical cruise altitude of 40,000 feet the ambient pressure is roughly one-fifth of its sea-level value, and the Paschen curve for air bottoms out near 330 volts, so a 540-volt bus, and still more a kilovolt-class one, operates in a regime where insulation that is entirely adequate on the ground can break down in flight. The fast voltage transitions of wide-bandgap switching compound the problem, because the steep wavefront distributes unevenly across the first turns of a motor winding and concentrates stress there. Designers therefore manage clearances, creepage distances, and insulation coordination across the full altitude envelope, specify insulation systems qualified for partial-discharge inception above the worst-case bus transient, and filter and shield the converters to maintain electromagnetic compatibility.
Motor Drives for Electric Propulsion
In an electrically propelled aircraft, the motor drive is the converter that turns stored electrical energy into controlled mechanical power at the propulsor. It is among the most demanding power-electronic subsystems on the aircraft, combining high power, precise control, and stringent reliability.
Inverter Topology and Control
Propulsion inverters convert direct-current bus power into the three-phase alternating waveforms that drive electric motors, managing power from tens of kilowatts in light aircraft to multiple megawatts in regional-scale concepts. The dominant control method is field-oriented control, which mathematically separates the motor current into a component that produces magnetic flux and a component that produces torque, allowing each to be regulated independently. This separation yields smooth, precise torque across the flight envelope, from the high power demanded at takeoff to the sustained power of cruise. Most drives use a two-level three-phase bridge because of its simplicity, but multilevel topologies, which synthesize the output from several intermediate voltage steps, become attractive as bus voltages rise: they halve or better the voltage each device must block, reduce the rate of voltage change imposed on the machine insulation, and lower the harmonic content that the output filter must remove. Many designs adopt permanent-magnet synchronous motors for their high power density, and the inverter must be matched to the electrical characteristics of the chosen machine, particularly its low inductance, which drives switching frequency upward to keep current ripple acceptable. Permanent-magnet machines also impose a specific hazard, since a spinning rotor continues to generate voltage after the inverter shuts down, so the drive must be able to short or isolate the machine safely following a fault.
Modularity and Phase Redundancy
Because the loss of propulsion is a critical failure condition, propulsion drives are commonly built from multiple parallel power modules or from machines with multiple independent winding sets, a dual three-phase machine driven by two electrically isolated inverters being a common arrangement. This modular construction allows the drive to continue operating, at reduced power, after the failure of an individual module or phase, rather than failing completely. Achieving that graceful degradation requires magnetic, thermal, and physical separation between channels, so that a short circuit or a thermal runaway in one does not propagate to the others. Distributed propulsion concepts extend this principle to the airframe level, spreading thrust across many smaller propulsors so that no single failure removes a large fraction of the total. The control system must manage these distributed and redundant elements coherently, reconfiguring power flow when a fault is detected.
Reliability and Redundancy
The defining characteristic of aviation-grade power electronics, more than raw performance, is the depth of engineering devoted to ensuring that the system continues to function safely despite component failures. The failure-probability targets of civil aviation cannot be met by reliable components alone; they require deliberate redundancy and fault management.
Fault Tolerance Architecture
Flight-critical electrical systems are designed so that no single failure can produce a catastrophic outcome. This principle leads to multiple independent power sources, redundant distribution paths, and the ability to isolate a faulted section while healthy sources continue to feed essential loads. Cross-tie contactors connect or separate portions of the distribution network as conditions require. Power converters incorporate hardware monitoring of voltages, currents, and temperatures that can trigger protective action faster than software, together with watchdog timers and, in the most critical functions, redundant processing channels that cross-check one another and vote on control decisions.
Quantifying and Demonstrating Reliability
Reliability in aviation is not asserted but demonstrated through formal safety assessment. Established aerospace practice, codified in SAE ARP4761A and its European counterpart EUROCAE ED-135, both issued in December 2023 alongside the revised development guidance of ARP4754B, applies functional hazard assessment to identify failure conditions and classify their severity, preliminary and final system safety assessments to allocate and then verify safety requirements, and fault tree analysis to show that the probability of each hazardous condition meets its allocated target. Common-cause analysis complements this, examining whether nominally independent channels share a hidden dependency such as a common cooling loop, a common power source, or a single installation zone. Failure conditions are classified from no safety effect through minor, major, and hazardous to catastrophic, and each class carries a quantitative probability budget. Catastrophic conditions must be shown to be extremely improbable, with the analytical target on the order of one in a billion per flight hour, and the analysis must be supported by component reliability data and by testing. Built-in test functions verify the health of protection devices and converters before each flight, supporting dispatch reliability and ensuring that latent faults are detected before they can combine with a second failure.
Thermal Management at Altitude
Power electronics generate heat in proportion to their losses, and although wide-bandgap devices are efficient, propulsion-scale converters still dissipate substantial power that must be rejected to the environment. Doing so aboard an aircraft, where air is thin and mass is constrained, is a distinct engineering challenge.
Heat Rejection in Thin Air
The density of air falls with altitude, and thinner air carries away less heat for a given flow and surface area. A convective cooling system sized for sea level therefore loses effectiveness at cruise altitude, exactly where sustained high power is required. Designers address this through liquid cooling that circulates coolant between the power modules and heat exchangers, through ram-air intakes that accept some aerodynamic drag in exchange for cooling airflow, and through skin or surface heat exchangers that use the large area of the airframe to reject heat. Each choice trades cooling capacity against drag, mass, and complexity, and the balance depends on the aircraft and its mission.
Device-Level Thermal Design
At the level of the semiconductor, the junction temperature must be held within rated limits with adequate margin across the full operating envelope, since exceeding the limit causes immediate failure and sustained operation near it accelerates wear. Direct liquid cooling brings coolant into close thermal contact with the power modules to minimize the thermal resistance between junction and coolant, and double-sided cooling reduces it further. Advanced packaging integrates cooling channels within the module substrate. The thermal design must also withstand thermal cycling, the repeated heating and cooling that accompanies each flight, because the resulting expansion and contraction fatigue the solder joints and bonds within power modules and are a principal cause of long-term failure. Mitigations operate at the materials level: silver-sintered die attach in place of solder, substrates whose thermal expansion is matched more closely to the semiconductor, and copper wire bonds or bond-free top-side interconnects that endure more cycles than aluminum wire. Because a flight profile imposes a small number of deep cycles rather than the many shallow cycles of an industrial drive, qualification must reproduce the mission profile rather than a generic cycling test.
Certification Standards
No power-electronic equipment may be installed on a certified aircraft until it has been shown to comply with the applicable airworthiness standards. The certification framework is what most distinguishes aviation-grade hardware from equipment built to commercial or automotive standards, and it shapes the entire development process.
Environmental Qualification under DO-160
RTCA DO-160, titled Environmental Conditions and Test Procedures for Airborne Equipment, defines the standard environmental tests that airborne equipment must survive. It is published jointly with EUROCAE ED-14, and revision G, with Change 1 issued in December 2014, is the version in current use while a further revision is prepared. The document is organized into numbered sections, each a self-contained test: Section 4 covers temperature and altitude, including decompression and overpressure; Section 5 temperature variation; Section 6 humidity; Section 7 operational shocks and crash safety; Section 8 vibration; Section 16 power input, which exercises the equipment against the voltage and frequency excursions of the aircraft supply; Section 17 voltage spike; Section 21 emission of radio frequency energy; Section 22 lightning-induced transient susceptibility; and Section 25 electrostatic discharge. Within most sections the standard defines categories that correspond to installation environments, so an item mounted in an unpressurized, unheated bay is qualified more severely than one in the avionics rack. Power electronics intended for flight are qualified against the categories relevant to their installation, demonstrating that they operate correctly across the temperature and altitude ranges, tolerate the vibration of the airframe, and neither emit interference that would disturb other equipment nor malfunction in the presence of interference from it. Because a switching converter is both a strong source of conducted and radiated emission and a load with a large inrush, Sections 16, 17, and 21 are usually the ones that shape its filter design. DO-160 qualification is a baseline expectation for any airborne electrical hardware.
Hardware Assurance under DO-254
RTCA DO-254, titled Design Assurance Guidance for Airborne Electronic Hardware, governs the development of complex custom electronic hardware, such as the application-specific integrated circuits and field-programmable gate arrays that implement control and protection functions in modern converters. It establishes a disciplined development process, requirements capture, conceptual and detailed design, implementation, verification, and configuration management, with rigor scaled to the criticality of the function through design assurance levels lettered A through E. Level A applies to hardware whose failure could contribute to a catastrophic condition and demands the most exhaustive verification, including elemental analysis or similar techniques to show that verification actually exercised the design; Level E applies where failure has no safety effect and carries essentially no process obligation. DO-254 is the hardware counterpart to DO-178C, which provides analogous assurance for airborne software across the same five levels, and the two together cover the digital control of power-electronic systems. In a propulsion converter this typically means that the gate-drive protection and current-limit logic implemented in a field-programmable gate array follows DO-254, while the control laws running on the processor follow DO-178C, with the safety assessment allocating a level to each.
The Evolving Framework for Electric Propulsion
The existing standards were largely written for conventional aircraft, and certification authorities are extending them to address electric and hybrid-electric propulsion. The European Union Aviation Safety Agency proposed Special Condition SC E-19, Electric / Hybrid Propulsion System, in January 2020 and published Issue 01 in April 2021; it treats the electrical propulsion system as a whole, in the way that the existing engine standards treat a turbine. The agency's SC-VTOL framework establishes criteria for the vertical-takeoff vehicles central to urban air mobility. The United States Federal Aviation Administration develops comparable special conditions and means of compliance. These documents address concerns specific to high-power electrified propulsion, including high-voltage arc-fault protection, the behavior of the system after electrical failures, and the integration of battery and fuel-cell sources. The framework continues to evolve as authorities accumulate experience with these new technologies.
Summary
Aviation-grade power electronics convert and distribute electrical power aboard aircraft to standards of reliability, environmental tolerance, and certification that exceed those of any terrestrial application. The more-electric aircraft consolidates hydraulic, pneumatic, and mechanical functions onto the electrical system, greatly increasing installed power and placing converters at the center of the aircraft, while electric and hybrid-electric propulsion extends this trend to thrust itself. High-voltage direct-current distribution reduces conductor mass but demands fast solid-state protection to manage arcing, and wide-bandgap silicon carbide and gallium nitride devices deliver the high efficiency and low mass that make propulsion-scale converters feasible, at the cost of new challenges in electromagnetic compatibility and high-altitude insulation.
Motor drives for electric propulsion combine field-oriented torque control with modular and phase-redundant construction so that they degrade gracefully rather than fail outright. Reliability is achieved through fault-tolerant architecture and demonstrated through formal safety assessment against failure-probability targets on the order of one in a billion per flight hour. Thermal management must reject converter losses in the thin air of altitude while respecting the aircraft mass budget, and all equipment must satisfy a certification framework anchored by DO-160 environmental qualification and DO-254 hardware assurance, now being extended through special conditions to cover electrified propulsion. Together these disciplines define a field in which performance is inseparable from safety.