[0022] The technical solutions of the present application will be clearly and completely described below in conjunction with the drawings and the embodiments of the present application.
[0023] There are three main types of satellite failures in orbit. One is the failure of the mission input layer, that is, the ground mission planning error, which causes the satellite to perform the wrong mission; the second is the satellite system layer failure, that is, the ground injection data error, which causes the satellite system to enter the safe mode; the third is the single layer failure, that is Affected by the orbital space environment, a single satellite fails and cannot work normally. In view of the above three failures, the failure mechanism is analyzed, and an on-orbit autonomous troubleshooting plan is proposed.
[0024] Specifically, when the mission data packet is injected, if the mission data packet validity telemetry shows invalid, it is judged as a mission input layer failure; when the satellite operating mode telemetry shows that it enters the "safe mode", it is judged as a satellite system layer failure; The single-machine state telemetry shows "abnormal", it is judged as a single-machine layer failure.
[0025] The three types of processing methods are also divided into three types of processing methods. One is the task input layer fault handling; the second is the satellite system layer fault handling; the third is the single-machine layer fault handling. See specifically figure 1.
[0026] (1) Task input layer fault handling strategy
[0027] Task autonomous fault handling is mainly aimed at checking the validity of the uploading task package to determine whether the task is reasonable. The note task package that meets the following conditions is considered valid and executable, otherwise the task package is invalidated and the task is not executed.
[0028] (1). The attitude maneuver range in the note task package is within the threshold range;
[0029] (2). The format of the upload task package is correct;
[0030] (3). The execution time of the note task package does not conflict with the existing tasks;
[0031] (4). The execution interval of the note task is outside the set threshold range.
[0032] (2) Satellite system layer fault handling strategy
[0033] Satellite system layer failure refers to the abnormal function of a certain sub-system of the satellite, which causes the satellite mission system to fail to work normally. Satellite system layer failures mainly include orbit failure, attitude control safety mode, energy load shedding mode, satellite service reset or shutdown.
[0034] 1) The track enters no track mode
[0035] Satellite GPS failure or invalid orbit data injection, causing the satellite to enter no-orbit mode. The judgment basis for entering the no-orbit mode includes: the satellite GPS stand-alone data is invalid; or the injected orbit data is invalid. Satellites need orbit data to perform tasks, and no orbit data will directly cause the mission to be interrupted. The specific handling of the failure of no orbit is as follows.
[0036] (1). Invalidate the task data package, and cancel the task direction and instruction;
[0037] (2). Attitude control enters windsurfing mode;
[0038] (3). Close the task-related stand-alone;
[0039] (4). Close the single track control unit.
[0040] 2) Energy enters load shedding mode
[0041] Satellite energy enters load shedding mode, which is a protection mode with low satellite battery power. The specific measures for energy entering the load shedding mode are as follows.
[0042] (1). Invalidate the task data package, and cancel the task direction and instruction;
[0043] (2). Attitude control enters windsurfing mode;
[0044] (3). The thermal control enters the safe mode;
[0045] (4). Turn off the task-related single machine;
[0046] (5). Close the single track control unit.
[0047] 3) Attitude control enters safe mode
[0048] The attitude control sub-system fails and cannot complete the task attitude pointing function, and enters the attitude control safety mode. The criteria for the attitude control to enter the safe mode are as follows.
[0049] (1). Satellite three-axis attitude determination failed;
[0050] (2) The satellite angular velocity exceeds the threshold;
[0051] (3). There are less than three reaction wheels in normal operation.
[0052] The specific measures for the attitude control to enter the safe mode are as follows.
[0053] (1). Invalidate the task data package, and cancel the task direction and instruction;
[0054] (2). Attitude control enters windsurfing mode;
[0055] (3). The thermal control enters the safe mode;
[0056] (4). Turn off the task-related single machine;
[0057] (5). Close the single track control unit;
[0058] (6). The top restarts.
[0059] 4) Star Affairs reset and cut machine processing
[0060] If the Star Affairs computer or the Star Affairs software fails, the Star Affairs resets or cuts the machine, and the specific measures are as follows.
[0061] (1). Close the task-related single machine;
[0062] (2). Turn off the rail control stand-alone switch;
[0063] (3). The thermal control enters the safe mode.
[0064] (3) Single-machine layer fault handling strategy
[0065] Single-machine layer failure refers to an abnormality of a single-machine, such as an increase in current, no telemetry return, and data error. The handling measures for a single machine failure are as follows.
[0066] (1). First judge whether the stand-alone machine is in an abnormal state according to the criterion;
[0067] (2). If the abnormal state exceeds the threshold time, restart operation;
[0068] (3). Do not restart within a period of time after the restart operation is completed;
[0069] Among them, there are three criteria for the abnormal state of a single machine.
[0070] (1). There is no return of single-machine telemetry; the satellite service computer has a single-machine telemetry data request, and the single-machine telemetry data does not return.
[0071] (2). The single-unit current is abnormal; if the single-unit current is detected to exceed twice the normal value, the current is judged to be abnormal.
[0072] (3). The single-machine data has a check error; if the content of the single-machine telemetry data does not match the check digit, the single-machine data check error is determined.
[0073] The foregoing description of the embodiments is for the convenience of those of ordinary skill in the art to understand and apply this application. Those skilled in the art can obviously easily make various modifications to these embodiments, and apply the general principles described here to other embodiments without creative work. Therefore, the application is not limited to the embodiments herein, and improvements and modifications made by those skilled in the art based on the content disclosed in the application without departing from the scope and spirit of the application are within the scope of the application.
