Dual-computer cold-standby system of attitude and orbit control computer

Abstract

The invention discloses a dual-computer cold-standby system of an attitude and orbit control computer. The dual-computer cold-standby system comprises a dual-computer switched main control module, a dual-computer power management module, central processing unit (CPU) modules and watchdog modules, wherein two CPU modules are totally identical and have the respective watchdog modules; and the CPU modules are reset during software runaway. The CPU modules adopt an architecture of combination of an advanced reduced instruction set computer (RISC) machine (ARM) and a field programmable gate array (FPGA), and a triple modular redundancy (TMR) voting module in the FPGA performs voting correction on a signal in a static random access memory (SRAM), so the reliability of the ARM during program running is improved. In a normal mode, a standby CPU module is in a non-energizing state; the dual-computer switched main control module performs fault detection on a main control CPU module; when an irreversible fault of the main control CPU module is determined, computer switching operation is performed; with the dual-computer power management module, power switching between the main control CPU module and the standby CPU module is realized; relevant parameters of the field information and a running application program, which are stored by a dual-computer communication random access memory (RAM) module in real time, of the main control CPU module are used by the standby CPU module, so the inheritance of a control process is realized.

Description

technical field [0001] The invention relates to a two-computer cold backup system for attitude and orbit control computers, which can be used to design spacecraft with long service life and high reliability. Background technique [0002] The attitude and orbit control computer system undertakes the tasks of on-orbit attitude control and orbit control. It is one of the most important and complex systems on the star. Once a failure occurs, it often has a serious impact on the entire star. The fault diagnosis of the attitude and orbit control computer system has the characteristics of fault propagation and accumulation in the closed-loop system, the ground diagnosis has telemetry delay and less available information, and the independent diagnosis is limited by the attitude and orbit control computer resources. Therefore, redundant design should be adopted. Technology, the fault-tolerant design of the system structure, the use of redundant resources, through system reconstructio...

AI Technical Summary

Problems solved by technology

However, the use of hot backup technology to ensure system reliability also brings problems such as excessive power consumption; and standard cold backup because the data in the memory cannot be saved when the main control CPU module is powered off, resulting in the main system after switching. Critical data and state are lost, and inheritance of control processes cannot be completed

Images