Double-machine cold standby non-distance switching method for small satellite affair system

Abstract

The invention discloses a double-machine cold standby non-distance switching method for a small satellite affair system. The method comprises the following steps of: constructing the satellite affair system consisting of a satellite affair host and a lower computer, configuring the lower computer in a double-machine cold standby mode, and communicating the lower computer and the satellite affair host through a satellite Internet; if a certain on-duty lower computer works abnormally is discovered, sending switching instruction by the satellite affair host to immediately shut down and restart the on-duty lower computer and start a corresponding standby machine, and setting the start time of the on-duty lower computer to be less than the start time of the standby machine; and if the restarted on-duty lower computer is still abnormal, replacing the on-duty lower computer by the standby machine, actively returning the stored working condition information before the primary on-duty lower computer works abnormally by the satellite affair host, performing reconstruction by the current on-duty lower computer, and entering a continuous normal working state. The method has high reliability and good instantaneity, enables the satellite affair system to form non-distance technical guarantee of uninterrupted work and application, and improves the service quality of a satellite without additionally increasing the overhead of hardware equipment.

Description

technical field [0001] The invention belongs to the field of satellite control, and relates to a method for dual-machine cold standby and no scrambling machine for a star service system computer group. Background technique [0002] In general, in order to ensure the reliability of satellite operation, satellite-borne smart devices generally adopt a dual-machine redundant backup method. Dual-machine backup is divided into hot backup and cold backup. The power consumption of the hot backup mode is relatively large, but because the switching is a hot start from some processes, the recovery time is short. The cold backup method has high reliability, can save energy on the planet, and can provide the radiation "annealing" effect of space single particles, but because it needs to restart from a cold start, the recovery process takes a long time. [0003] At present, there are usually two ways to cut off the spaceborne intelligent equipment. The first is to analyze the telemetry ...

AI Technical Summary

Problems solved by technology

[0003] At present, there are usually two ways to cut off the spaceborne intelligent equipment. The first is to analyze the telemetry data, diagnose by the ground experts, and then realize the cut-off through the remote control command, and start the backup machine to be on duty. The shortcomings of this method It is necessary to increase the workload of ground satellite management; the second is to increase the cut-off management link of the satellite equipment, and when the watchdog bites multiple times and cannot reset to normal work, the cut-off management link will automatically cut off the machine and transfer to the backup machine On duty, the disadvantage of this method is that it needs to add on-board equipment, and it is a "single point" equipment, which is not conducive to improving the reliability of the system

In addition, after using these two types of methods to realize machine cut-off, the backup machine of the on-board smart device is generally initialized and enters the initial equipment state, so it is inconsistent with the working conditions before the abnormality, resulting in interruption of the external application process, requiring the application process to be restarted. settings, and restarts the satellite application process, reducing the quality of service for the satellite application

Images