Adapting the Rafale's FBW functionality for the Falcon 7X wasn't much of a challenge for Dassault's engineers, for unlike its fighter sibling, the 7X is inherently stable and designed to be flown at subsonic speeds. FBW designers determined that the trijet's digital flight control system only needed a 50-millisecond response time, but they elected to retain the 12.5-millisecond response built into the Rafale's computers to assure there would be no detectable latency in the system. They also fitted the Falcon 7X with smaller, lower power, lighter weight control surface actuators than those on the Rafale because of the former's executive transport mission.
Similar to the Rafale, the Falcon 7X's digital flight control system maintains aircraft flight path with speed and configuration changes; it automatically trims the aircraft to neutralize primary control surface forces and provides stability augmentation. It also has low-speed and overstress flight envelope protection, plus it adds a high-speed envelope protection function not needed in a Mach 2 aircraft. Dassault designed the 7X for Mach 0.97 and 430 KIAS demonstrated dive speeds, but the FBW system limits the aircraft to Mach 0.94 and 405 KIAS.
The Rafale's FBW imposes no pitch angle limits, but the Falcon 7X's digital flight control system doesn't allow nose attitude to exceed 35 deg. nose up or 28 deg. nose down at speeds above 250 KIAS. Nose-up and nose-down pitch limits are reduced at slower speeds.
The Falcon 7X uses a radio altitude input to determine when to make the transition between ground and air modes. Above 50-ft. radio altitude, the aircraft will automatically trim the horizontal stabilizer to maintain flight path when the sidestick is released, assuming it is within the lower and upper speed limits. Below that radio altitude, auto trim is inhibited. At touchdown on landing, a weight-on-main-wheels command signals the horizontal stabilizer to start moving toward the pitch-down position. This causes a natural feeling, derotation of pitch attitude when the stick is released, helping the aircraft to transition to a three-point attitude with weight on the main and nosewheels.
The Falcon 7X has no hard bank angle limits, but the FBW system provides artificial spiral stability that automatically levels the wings if the stick is released and bank angle is less than 6 deg. The aircraft will hold bank angle if the stick is released at angles of 6 deg. to 35 deg. When the stick is released at bank angles greater than 35 deg., the aircraft automatically will roll back to 35 deg. Roll stability augmentation also prevents the aircraft from rolling off due to wing fuel imbalance or partial flight control system degradation.
Dassault installed three, single-channel digital computers plus a dual-channel analog computer aboard the Rafale to provide the required redundancy for such critical flight control functionality. The computers vote on control surface commands, so one or even two errant computers can be disqualified and excluded by the remaining computers.
If the Rafale FBW system has belt-and-suspenders redundancy, the 7X has belt-suspenders-braces-hooks-and-loops redundancy. This assures that it is controllable under all foreseeable abnormal or damaged conditions. It has three full-function, dual-channel main flight control computers (MFCCs) and three limited-function, single-channel secondary flight control computers (SFCCs). The MFCCs are capable of high-level normal, alternate (or degraded high level) and Direct Law modes while the SFCCs only can function in Direct Law modes.
Only one of those six computers is needed to fly the aircraft. All six send flight control-position commands to four actuator control and monitoring units (ACMUs) that essentially are FBW command signal quality assurance inspectors.
The ACMUs monitor the control surface commands coming from the main and secondary flight control computers. In the event of a disagreement between any of the MFCCs or SFCCs, the ACMUs can isolate and exclude that computer from the system. The design assures the system has the required 10-9 probability of failure.