Satellite on-orbit autonomous fault handling scheme

A technology to deal with failures, applied in space navigation equipment, space navigation equipment, instruments, etc., can solve the problems of short entry time, long ground processing period, emphasis on theory, etc., to achieve the effect of simple process and strong implementability

Active Publication Date: 2019-01-11
6 Cites 12 Cited by

AI-Extracted Technical Summary

Problems solved by technology

In addition, satellite fault handling has long exit time, short entry time, and long ground processing cycle, which is easy to delay fault processing operations
It can be seen that manual processing of satellite on-orbit faults involves many processes, involves a wide range of areas, and has a long cycle. Therefore, there is an ur...
View more


The application relates to a satellite on-orbit autonomous fault handling scheme, including step 1) of judging a type of a satellite on-orbit operation fault; and step 2) of performing fault handlingaccording to the type of the fault.

Application Domain

Cosmonautic vehiclesElectric testing/monitoring +1

Technology Topic

SatelliteEngineering +2


  • Satellite on-orbit autonomous fault handling scheme


  • Experimental program(1)

Example Embodiment

[0022] The technical solutions of the present application will be clearly and completely described below in conjunction with the drawings and the embodiments of the present application.
[0023] There are three main types of satellite failures in orbit. One is the failure of the mission input layer, that is, the ground mission planning error, which causes the satellite to perform the wrong mission; the second is the satellite system layer failure, that is, the ground injection data error, which causes the satellite system to enter the safe mode; the third is the single layer failure, that is Affected by the orbital space environment, a single satellite fails and cannot work normally. In view of the above three failures, the failure mechanism is analyzed, and an on-orbit autonomous troubleshooting plan is proposed.
[0024] Specifically, when the mission data packet is injected, if the mission data packet validity telemetry shows invalid, it is judged as a mission input layer failure; when the satellite operating mode telemetry shows that it enters the "safe mode", it is judged as a satellite system layer failure; The single-machine state telemetry shows "abnormal", it is judged as a single-machine layer failure.
[0025] The three types of processing methods are also divided into three types of processing methods. One is the task input layer fault handling; the second is the satellite system layer fault handling; the third is the single-machine layer fault handling. See specifically figure 1.
[0026] (1) Task input layer fault handling strategy
[0027] Task autonomous fault handling is mainly aimed at checking the validity of the uploading task package to determine whether the task is reasonable. The note task package that meets the following conditions is considered valid and executable, otherwise the task package is invalidated and the task is not executed.
[0028] (1). The attitude maneuver range in the note task package is within the threshold range;
[0029] (2). The format of the upload task package is correct;
[0030] (3). The execution time of the note task package does not conflict with the existing tasks;
[0031] (4). The execution interval of the note task is outside the set threshold range.
[0032] (2) Satellite system layer fault handling strategy
[0033] Satellite system layer failure refers to the abnormal function of a certain sub-system of the satellite, which causes the satellite mission system to fail to work normally. Satellite system layer failures mainly include orbit failure, attitude control safety mode, energy load shedding mode, satellite service reset or shutdown.
[0034] 1) The track enters no track mode
[0035] Satellite GPS failure or invalid orbit data injection, causing the satellite to enter no-orbit mode. The judgment basis for entering the no-orbit mode includes: the satellite GPS stand-alone data is invalid; or the injected orbit data is invalid. Satellites need orbit data to perform tasks, and no orbit data will directly cause the mission to be interrupted. The specific handling of the failure of no orbit is as follows.
[0036] (1). Invalidate the task data package, and cancel the task direction and instruction;
[0037] (2). Attitude control enters windsurfing mode;
[0038] (3). Close the task-related stand-alone;
[0039] (4). Close the single track control unit.
[0040] 2) Energy enters load shedding mode
[0041] Satellite energy enters load shedding mode, which is a protection mode with low satellite battery power. The specific measures for energy entering the load shedding mode are as follows.
[0042] (1). Invalidate the task data package, and cancel the task direction and instruction;
[0043] (2). Attitude control enters windsurfing mode;
[0044] (3). The thermal control enters the safe mode;
[0045] (4). Turn off the task-related single machine;
[0046] (5). Close the single track control unit.
[0047] 3) Attitude control enters safe mode
[0048] The attitude control sub-system fails and cannot complete the task attitude pointing function, and enters the attitude control safety mode. The criteria for the attitude control to enter the safe mode are as follows.
[0049] (1). Satellite three-axis attitude determination failed;
[0050] (2) The satellite angular velocity exceeds the threshold;
[0051] (3). There are less than three reaction wheels in normal operation.
[0052] The specific measures for the attitude control to enter the safe mode are as follows.
[0053] (1). Invalidate the task data package, and cancel the task direction and instruction;
[0054] (2). Attitude control enters windsurfing mode;
[0055] (3). The thermal control enters the safe mode;
[0056] (4). Turn off the task-related single machine;
[0057] (5). Close the single track control unit;
[0058] (6). The top restarts.
[0059] 4) Star Affairs reset and cut machine processing
[0060] If the Star Affairs computer or the Star Affairs software fails, the Star Affairs resets or cuts the machine, and the specific measures are as follows.
[0061] (1). Close the task-related single machine;
[0062] (2). Turn off the rail control stand-alone switch;
[0063] (3). The thermal control enters the safe mode.
[0064] (3) Single-machine layer fault handling strategy
[0065] Single-machine layer failure refers to an abnormality of a single-machine, such as an increase in current, no telemetry return, and data error. The handling measures for a single machine failure are as follows.
[0066] (1). First judge whether the stand-alone machine is in an abnormal state according to the criterion;
[0067] (2). If the abnormal state exceeds the threshold time, restart operation;
[0068] (3). Do not restart within a period of time after the restart operation is completed;
[0069] Among them, there are three criteria for the abnormal state of a single machine.
[0070] (1). There is no return of single-machine telemetry; the satellite service computer has a single-machine telemetry data request, and the single-machine telemetry data does not return.
[0071] (2). The single-unit current is abnormal; if the single-unit current is detected to exceed twice the normal value, the current is judged to be abnormal.
[0072] (3). The single-machine data has a check error; if the content of the single-machine telemetry data does not match the check digit, the single-machine data check error is determined.
[0073] The foregoing description of the embodiments is for the convenience of those of ordinary skill in the art to understand and apply this application. Those skilled in the art can obviously easily make various modifications to these embodiments, and apply the general principles described here to other embodiments without creative work. Therefore, the application is not limited to the embodiments herein, and improvements and modifications made by those skilled in the art based on the content disclosed in the application without departing from the scope and spirit of the application are within the scope of the application.


no PUM

Description & Claims & Application Information

We can also present the details of the Description, Claims and Application information to help users get a comprehensive understanding of the technical details of the patent, such as background art, summary of invention, brief description of drawings, description of embodiments, and other original content. On the other hand, users can also determine the specific scope of protection of the technology through the list of claims; as well as understand the changes in the life cycle of the technology with the presentation of the patent timeline. Login to view more.

Similar technology patents

Image sensor and method of manufacturing the same

InactiveUS20110128423A1simple processrealistic image

Treating method for oily sludge

InactiveCN106957136AThe treatment method is simple and effectiveSimple process

Classification and recommendation of technical efficacy words

  • Simple process
  • Strong implementability

Method for preparing graphite alkyne film

ActiveCN101774570ASimple processuniform surface

Electric conduction asphalt blending and laying device

ActiveCN110644328Asimple organizationStrong implementability

Temperature control device for COREX furnace gas and use method thereof

InactiveCN106566903Asystem stabilityStrong implementability

A method for planting auricularia auricula under a forest

InactiveCN109863941AComplete technologyStrong implementability

Included angle measuring and calculating method, device and system and machine readable storage medium

InactiveCN110954047AStrong implementability

Photoelectric coupling mechanism and manufacturing method thereof

InactiveCN109407225ASimple structureStrong implementability
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products