A system and method for on-board clock redundancy

Abstract

The invention provides a satellite-borne clock redundant system and method. The satellite-borne clock redundant system and method are used for providing a system clock for a spaceflight control system. According to the system and method, an external high-accuracy clock and two internal clocks sources of which are not the same serve as a main clock, a backup clock and a third-party clock respectively, the third-party clock can be adopted for arbitration only when the main clock and the backup clock are inconsistent, single-redundancy faults of the clock can be allowed, the tri-redundancy aim is achieved, implementation is simple, and cost is low. According to the satellite-borne clock redundant system and method, the clock redundancy function of a control system is achieved through the high-accuracy clock of an inertia unit and the two clocks in a flight control computer, the high-accuracy clock of the inertia unit is sufficiently used, influences of faults of the clock on running of the control system are avoided, the reliability and the safety of the control system can be improved, and the satellite-borne clock redundant system and method have the advantages of being low in implementation cost and facilitating engineering realization.

Description

technical field [0001] The invention relates to spacecraft control technology, in particular to an on-board clock redundancy system and a method for realizing the on-board clock redundancy. Background technique [0002] The control system of the spacecraft is responsible for key functions such as navigation guidance, attitude control calculation and mission planning management. The realization of these functions requires extremely high real-time performance, and the calculation cycle reaches the order of milliseconds. Therefore, the flight software must be driven by a high-precision clock. run. [0003] Due to the extremely harsh operating environment of the spacecraft, strong radiation and extreme temperatures make components prone to aging and failure, and single event flipping is more likely to cause unpredictable changes in the state instantaneously. Once the clock fails, it will lead to drift or disorder in the timing of the control system If it is serious, it will cau...

AI Technical Summary

Problems solved by technology

[0007] Option 1 can ensure the synchronous operation of each single unit of the control system, and the timing is better. However, once the inertial measurement unit clock fails, the entire control system will be paralyzed, "one damage and all damage"; Option 2 is simple to implement, but it will make the flight control The clock difference between the computer and the inertial measurement unit affects the control accuracy; in addition, the above two solutions have a common disadvantage: once the clock used by the flight control computer fails, the flight control system will collapse, affecting the successful completion of the mission of the spacecraft

Images