Self-correcting redundancy switching mechanism for spacecraft system and verification method thereof

Abstract

The invention discloses a self-correcting redundancy switching mechanism for a spacecraft system and a verification method thereof. The invention adds the redundancy switching mechanism with the feature of self-correcting into the spacecraft system and provides the verification method thereof. The subsystems of the each spacecraft are communicated by a 1553B bus, and are respectively communicatedwith a ground monitor and control system by an Ethernet communication module. The ground monitor and control system immediately detects the fault state of the spacecraft system, and injects fault as well as a control instruction, thereby being capable of significantly improving the high efficiency and the safety of the redundancy switching mechanism of a complex system. By accumulating and optimizing expert opinions, the invention can reduce unnecessary backup switch, has significant research meaning for improving the long-time endurance capability, can immediately switch the fault of a key sensitive part, prevents from an uncontrolled state, and guarantees the safe operation of the system. The method has significant meaning for realizing the reliability research of a spacecraft autonomous intelligent control system.

Description

technical field [0001] The invention belongs to the fields of aerospace, intelligent control and computer information processing, and particularly relates to a self-correctable redundant switching mechanism and a verification method of the self-correcting redundant switching mechanism that can realize system real-time fault injection. Background technique [0002] With the development of space technology, the functions and structures of spacecraft are becoming more and more complex, and it is more and more difficult for such a large and complex system to operate exactly as the designer intended. The complexity of the space environment leads to many uncertain factors, and the possibility of hardware and software failure of the spacecraft increases with the complexity of the system. In order to ensure the smooth completion of the mission, the backup redundancy mechanism of the spacecraft system is to solve this problem. important way. The multi-redundancy mechanism of the spa...

AI Technical Summary

Problems solved by technology

For some temporary faults, no automatic switching is triggered, and its functional components are special, which may cause unrecoverable faults to the operation of the entire system in a short time

At the same time, some failures last longer and are judged as permanent failures. Their functional components are not very sensitive, so they can resume normal operation after a period of temporary failures are eliminated without the need for active and standby switchover. However, due to the fixed switching strategy, It produces automatic switching, which leads to premature utilization of system backup resources, and reduces its long-term battery life.

When an abnormal fault occurs, the ground monitoring system is often unable to perform timely remote control due to the delay in ultra-long-distance signal transmission or the difficulty in realizing real-time information communication.

[0004] In the traditional test-based verification, the test cases obviously cannot cover the conditions encountered in the actual operation of spacecraft such as deep space exploration, and the test using fault injection will also not be able to fully cover the spacecraft due to unknown faults.

Images