A fault self-diagnosis and autonomous switching system and method for aerospace dual-redundancy space communication equipment

Abstract

The present invention discloses a fault self-diagnosis and autonomous switching system and method for aerospace dual-redundancy space communication equipment. The system includes: a fault self-diagnosis module, which is used for fault self-diagnosis and discrimination, and performs three-module redundancy processing on the logic circuit of fault self-diagnosis; an autonomous switching permission and prohibition control module, which is used to generate a control signal; a ground command response module, which is used to filter and calculate the ground command; a fault diagnosis result response module, which is used to respond to the result of the self-diagnosis; a ground command switching and autonomous switching control module, which is used to generate a corresponding control signal; a switching command output module, which is used to widen the output pulse of the switching command, and control the autonomous switching and ground command switching. In this way, the present invention adopts a method of combining FPGA logic circuits with combinational logic circuits, which improves the precision of fault diagnosis and avoids the disadvantage that the traditional autonomous switching method cannot judge the fault caused by loss of step and error code.

Description

Technical Field

[0001] The present invention relates to the technical field of space communication equipment, and in particular to a fault self-diagnosis and autonomous switching system and method for aerospace dual-redundancy space communication equipment. Background Art

[0002] In the aerospace field, in order to ensure the reliability of electronic circuit systems, a circuit module or system is often selected for dual redundant backup, so that when one system fails, it can switch back to another backup system to increase the reliability of the aerospace electronic system. In the process of selecting and switching back and forth, the ground control console is required to send remote control commands to complete such switching. How to enable aerospace equipment to autonomously detect its own faults in orbit, and when a fault occurs, it can autonomously diagnose and autonomously switch to the backup circuit for use is a difficult problem facing aerospace system designers.

[0003] In the development process of aerospace communication equipment, dual-machine redundant structure is usually used for design. The advantage of this design is that in the event of a failure of the main equipment, the backup equipment can be switched to replace the main equipment. Such a switching function is generally performed through remote control commands. However, since the remote control switching command must be sent from the ground to the space communication equipment running in orbit, the corresponding telemetry information is often required as a basis for judgment, and it cannot be sent in real time. In addition, in the event of a failure of the main equipment, the ground may not be able to receive the telemetry judgment information normally. This requires aerospace communication equipment to have the functions of autonomous fault diagnosis and autonomous switching.

[0004] At present, in the field of fault diagnosis and autonomous switching of dual redundant equipment in aerospace, the main application methods are: Yang Han and Fan Xianghui, "Design and Implementation of a 1553B Bus Interface Module with Autonomous Switching between Master and Standby", Information Communication, Issue 05, 2016, designed a remote terminal (RT) interface module that can realize autonomous switching and meet the 1553B bus standard. Under the condition of sharing one RT address, transceiver and transformer, the hot backup function of two 1553B buses is realized, thereby improving the reliability of the 1553B bus communication of the subsystem. The interface module uses SoC chip as the protocol processor. Two SoC chips form two independent protocol processing circuits of interface module A and B, and realize the host interface timing access and fault autonomous switching functions through FPGA. This method cannot meet the high reliability and single particle resistance and total dose resistance characteristics required by aerospace equipment.

[0005] Shanghai Aerospace Measurement, Control and Communication Research Institute application number CN201110366018.X, titled "Onboard dual redundant computer host working status monitoring and fault autonomous switching device", discloses an onboard dual redundant computer host working status monitoring and fault autonomous switching device, including: the acquisition circuit of the host normal signal is connected to the autonomous switching logic control circuit; the anti-mis-switching guarantee circuit is connected to the autonomous switching logic control circuit; the autonomous switching logic control circuit determines whether to output the switching command signal to the autonomous switching drive circuit according to the result of the integration circuit of the acquisition circuit. The present invention adopts a circuit with autonomous fault diagnosis and switching functions, which can implement high-reliability switching of dual redundant onboard computers, solving the problems of fault diagnosis and processing of onboard dual redundant computers in autonomous operation and mis-switching under normal working conditions. This method can only diagnose abnormal voltage output conditions, but cannot diagnose fault conditions caused by information loss and bit errors.

[0006] In summary, existing technologies cannot enable aerospace equipment to autonomously detect its own faults while in orbit, and to autonomously diagnose and switch to backup circuits when faults occur. Summary of the invention

[0007] The purpose of the present invention is to provide a fault self-diagnosis and autonomous switching system and method for aerospace dual-redundancy space communication equipment, by using FPGA to perform self-diagnosis of communication faults and using 54 series combinational logic circuits to realize autonomous switching or ground command switching between main and backup, so as to achieve the purpose of improving equipment reliability.

[0008] The present invention provides a fault self-diagnosis and autonomous switching system for aerospace dual-redundancy space communication equipment, comprising: a fault self-diagnosis module, which is used for fault self-diagnosis and discrimination, and performs three-module redundancy processing on the logic circuit of the fault self-diagnosis, and outputs the result of the self-diagnosis after the three-module redundancy to a fault diagnosis result response module; an autonomous switching permission and prohibition control module, which is used to generate a control signal for allowing or prohibiting autonomous switching; a ground command response module, which is used to output the response result of the ground command by filtering and calculating the ground command; a fault diagnosis result response module, which is used to respond to the result of the self-diagnosis, and when the diagnosis result is abnormal, output an abnormal feedback signal; when the diagnosis result is normal, output a normal feedback signal; a ground command switching and autonomous switching control module, which is used to output the result of the fault diagnosis result response module operation to the ground command switching and autonomous switching control module to generate a corresponding control signal; a switching command output module, which is used to widen the output pulse of the switching command to achieve the purpose of delay, and is also used for the control of autonomous switching and ground command switching.

[0009] Preferably, a combination of an FPGA logic circuit and a combination logic circuit of a 54 series chip is used, wherein the FPGA logic circuit is used for fault self-diagnosis, and the combination logic circuit of the 54 series chip is used for autonomous switching; autonomous switching of the equipment is performed by sending the result of the fault self-diagnosis to the combination logic circuit for calculation.

[0010] Preferably, the fault self-diagnosis module includes a triple-module redundancy module for performing fault self-diagnosis of the dual-redundancy space communication device by determining whether the packet header of each transmission packet of the communication device meets normal standards.

[0011] Preferably, the autonomous switching permission and prohibition control module includes a D trigger, the output end of the D trigger is connected to an inverter to control the high and low levels of the signal. When the control signal is at a low level, the system allows autonomous switching, that is, autonomous switching and ground command switching respond simultaneously at this time; when the control signal is at a high level, the system prohibits autonomous switching, that is, the autonomous switching function is invalid, and only responds to the ground command switching signal.

[0012] Preferably, the ground command response module includes a ground command signal connected to a diode, a first resistor, a first capacitor and a second capacitor in sequence and grounded, and one end of the first AND gate input is connected, and at the same time, the second resistor, the third capacitor and the fourth capacitor are connected between the diode and the first resistor; the output end of the first AND gate is connected to the first inverter and the second inverter, and output to the switching command output module; the other end of the first AND gate input is connected to the output end of the first OR gate, one end of the first OR gate input is connected to the second AND gate, the third resistor and the power supply, and the other end of the first OR gate input is connected to the third AND gate, the fourth resistor and the power supply.

[0013] Preferably, in the fault diagnosis result response module, the output signal of the fault self-diagnosis includes a main fault self-diagnosis output signal and a backup fault self-diagnosis output signal. The main fault self-diagnosis output signal and the backup fault self-diagnosis output signal are sent to the ground command switching and autonomous switching control module after undergoing combinational logic operations.

[0014] Preferably, the fault diagnosis result response module includes a fault self-diagnosis output signal and a backup fault self-diagnosis output signal, the fault self-diagnosis output signal is connected to the third NOT gate input, the third NOT gate output is respectively connected to one end of the second OR gate input and one end of the fourth AND gate input, and the other end of the second OR gate input and the other end of the fourth AND gate input are respectively connected to the backup fault self-diagnosis output signal, the output end of the second OR gate and the output end of the fourth AND gate are respectively connected to one end of the fifth AND gate input and one end of the sixth AND gate input, the other end of the fifth AND gate input and the other end of the sixth AND gate input are respectively connected to the switching instruction, and the output end of the fifth AND gate and the output end of the sixth AND gate and the third OR gate are connected to the ground command switching and autonomous switching control module.

[0015] Preferably, the switching command output module adopts a D trigger, connects the response signal of the ground manual control command to the signal input terminal, and executes the output of the ground command switching or the autonomous switching signal through the high and low level conversion of the signal input terminal or the linkage change of the control signal.

[0016] Preferably, in the ground command switching and autonomous switching control module, when the output is a response to a ground command, the width of the output signal is twice the width of the CLK signal output by the ground command response module.

[0017] The present invention also provides a method for self-diagnosis and autonomous switching of faults of aerospace dual-redundancy space communication equipment, comprising the following steps:

[0018] Step S1, performing fault self-diagnosis and identification through a fault self-diagnosis module, performing triple-module redundancy processing on a logic circuit of the fault self-diagnosis, and outputting the result of the self-diagnosis after triple-module redundancy to a fault diagnosis result response module;

[0019] Step S2, generating a control signal for allowing or prohibiting autonomous switching through an autonomous switching allowing and prohibiting control module;

[0020] Step S3, filtering and calculating the ground command through the ground command response module, and outputting the response result of the ground command;

[0021] Step S4, responding to the self-diagnosis result through the fault diagnosis result response module, when the diagnosis result is abnormal, outputting an abnormal feedback signal; when the diagnosis result is normal, outputting a normal feedback signal;

[0022] Step S5, outputting the result of the fault diagnosis result response module to the ground command switching and autonomous switching control module through the ground command switching and autonomous switching control module to generate a corresponding control signal;

[0023] Step S6, the output pulse of the switching instruction is widened by the switching instruction output module to achieve the delay purpose, and the autonomous switching and ground instruction switching are also controlled.

[0024] Compared with the prior art, the present invention has the following beneficial effects:

[0025] First, the present invention adopts a method of combining FPGA logic circuits with combinational logic circuits to improve the precision of fault diagnosis and avoid the disadvantage of the traditional autonomous switching method that the fault cannot be judged due to loss of step and bit error.

[0026] Second, while the present invention has the function of autonomous real-time switching, it still has the function of switching redundant backup equipment by ground remote control commands. While ensuring that the ground control function remains unchanged, it can autonomously switch redundant backup equipment through internal autonomous logical judgment, which not only improves the switching efficiency but also enhances the reliability of the equipment.

[0027] Third, the present invention uses a triple-module redundancy design on key modules. When an abnormal phenomenon such as a single-particle flip or other abnormal problems occur in the fault self-diagnosis module inside the FPGA, the correctness of the fault self-diagnosis function can be ensured through triple-module redundancy. After triple-module redundancy, the probability of fault diagnosis abnormalities is greatly reduced, thereby improving the reliability of the equipment on track.

[0028] Fourthly, the present invention has a simple structure and is easy to use. It uses only domestically produced devices, has controllable costs, and uses high-quality aerospace grade components, which enable it to have the characteristics of resistance to single particle effects and total dose effects, further improving the adaptability and reliability of the fault diagnosis module in harsh environments. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 FPGA logic diagram of fault self-diagnosis in an embodiment of the present invention;

[0030] Figure 2 This is a core circuit diagram of autonomous switching control in an embodiment of the present invention;

[0031] Figure 3 A logic diagram for autonomous switching signal generation in an embodiment of the present invention;

[0032] Figure 4 This is a processing logic diagram of a fault diagnosis signal in an embodiment of the present invention. DETAILED DESCRIPTION

[0033] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0034] like Figure 1As shown, the present invention provides a fault self-diagnosis and autonomous switching system for aerospace dual-redundancy space communication equipment, including: a fault self-diagnosis module, which is used for fault self-diagnosis and discrimination, and performs three-module redundancy processing on the logic circuit of the fault self-diagnosis, and outputs the result of the self-diagnosis after the three-module redundancy to the fault diagnosis result response module; an autonomous switching permission and prohibition control module, which is used to generate a control signal that allows or prohibits autonomous switching; a ground command response module, which is used to output the response result of the ground command by filtering and calculating the ground command; a fault diagnosis result response module, which is used to respond to the result of the self-diagnosis, and when the diagnosis result is abnormal, output an abnormal feedback signal; when the diagnosis result is normal, output a normal feedback signal; a ground command switching and autonomous switching control module, which is used to output the result of the fault diagnosis result response module operation to the ground command switching and autonomous switching control module to generate a corresponding control signal; a switching command output module, which is used to widen the output pulse of the switching command to achieve the purpose of delay, and is also used for the control of autonomous switching and ground command switching.

[0035] The present invention is mainly directed to dual-redundant space communication equipment used in aerospace products, including but not limited to fault diagnosis and autonomous switching methods of other types of dual-redundant equipment for military, civilian, commercial or industrial use.

[0036] Furthermore, an FPGA logic circuit is combined with a combinational logic circuit of a 54 series chip. The FPGA logic circuit is used for fault self-diagnosis, and the combinational logic circuit of the 54 series chip is used for autonomous switching. The autonomous switching of the equipment is accomplished by sending the result of the fault self-diagnosis to the combinational logic circuit for calculation.

[0037] Further, the fault self-diagnosis module includes a triple-module redundancy module for performing fault self-diagnosis of the dual-redundancy space communication device by determining whether the packet header of each transmission packet of the communication device meets the normal standard.

[0038] Those skilled in the art will appreciate that Figure 1 As shown, the fault self-diagnosis and triple-module redundancy modules can realize the fault self-diagnosis of dual-redundancy space communication equipment by judging whether the header of each transmission packet of the communication equipment meets the normal standard. For example, if the header of the transmission packet is DA87, when the header is not DA87 during communication, it is judged that the communication transmission is wrong, otherwise the transmission is considered normal. When the space communication equipment fails due to single particle effect or other reasons such as chip burnout, device failure, sudden rise or fall of voltage and current, it will inevitably lead to deviation of information transmission between aerospace communication equipment, and the communication header will inevitably be wrong.

[0039] Since the fault self-diagnosis module occupies a very important position in the whole system, the fault self-diagnosis module is processed with triple-module redundancy, that is, three identical modules perform the same operation at the same time, and the majority of the same outputs are used as the correct output of the voting system to improve the anti-interference ability and reliability of the space communication equipment. Figure 1 As shown in the figure, by judging whether the packet header of each transmission packet of the communication equipment meets the normal standard, the fault self-diagnosis of the dual redundant space communication equipment is realized. When the space communication equipment fails due to single particle effect or other reasons such as chip burnout, device failure, sudden rise or fall of voltage and current, it will inevitably lead to deviation of information transmission between aerospace communication equipment, and the communication packet header will inevitably be wrong.

[0040] Furthermore, the autonomous switching permission and prohibition control module includes a D trigger, the output end of the D trigger is connected to an inverter to control the high and low levels of the signal. When the control signal is at a low level, the system allows autonomous switching, that is, autonomous switching and ground command switching respond at the same time; when the control signal is at a high level, the system prohibits autonomous switching, that is, the autonomous switching function is invalid, and only responds to the ground command switching signal.

[0041] As attached Figure 2 , 3 As shown, the autonomous switching permission and prohibition control module controls the level of the NZS signal by controlling the output of pin 6 of the 54HC74 chip. When the NZS signal is at a low level, the system allows autonomous switching, that is, autonomous switching and ground command switching can respond at the same time. When the NZS signal is at a high level, the system prohibits autonomous switching, that is, the autonomous switching function is invalid at this time, and only responds to the ground command switching signal.

[0042] Further, the ground command response module includes a ground command signal K_TRANS which is connected to a diode V30, a first resistor R20, a first capacitor C319 and a second capacitor C320 in sequence and grounded, and one end 9 pin of the first AND gate D7C input is connected, and at the same time, the second resistor R109, the third capacitor C24 and the fourth capacitor C25 are connected between the diode V30 and the first resistor R20; the output end 8 pin of the first AND gate D7C is connected to the first inverter D3A and the second inverter D3B, and output to the switching instruction output module DIB; the other end 10 pin of the first AND gate D7C input is connected to the output end 3 pin of the first OR gate D20A, the one end 1 pin of the first OR gate D20A input is connected to the second AND gate D8B, the third resistor R902 and the power supply, and the other end 2 pin of the first OR gate D20A input is connected to the third AND gate D8A, the fourth resistor R903 and the power supply.

[0043] Those skilled in the art will appreciate that Figure 3As shown, the ground manual control command signal K_TRANS is filtered by the diode V30, the resistor R20, the capacitors C319 and C320, and then processed by the combinational logic AND gate and two NOT gates before being sent to the output module of the switching command.

[0044] Furthermore, the output signal of the fault self-diagnosis includes a main fault self-diagnosis output signal and a backup fault self-diagnosis output signal. After the main fault self-diagnosis output signal and the backup fault self-diagnosis output signal are subjected to combinational logic operation, they are sent to the ground command switching and autonomous switching control module.

[0045] Those skilled in the art will appreciate that Figure 4 As shown, there are two output signals of fault self-diagnosis, namely the main fault self-diagnosis output signal CHECKA and the backup fault self-diagnosis output signal CHECKB. After the combinational logic operation of 54HC08 and 54HC32, the CHECKA and CHECKB signals are sent to the ground command switching and autonomous switching control module.

[0046] As attached Figure 4 As shown, the ground command switching and autonomous switching control modules generate the two control signals CLRTRANS and PRETRANS through the signal output by the fault self-diagnosis module. When the NZS signal is low and the RST signal is high, the high and low levels of the CLRTRANS and PRETRANS signals are just opposite, and this is the response mode of autonomous switching. When the NZS signal is high and the RST signal is high, the CLRTRANS and PRETRANS signals must be high at the same time, and this is the response mode of ground command switching.

[0047] The fault diagnosis result response module includes a main fault self-diagnosis output signal (CHECKA) and a backup fault self-diagnosis output signal (CHECKB), the fault self-diagnosis output signal CHECKA is connected to the 5th pin of the input terminal of the third NOT gate D5C, the 6th pin of the output terminal of the third NOT gate D5C is respectively connected to the 5th pin of one end of the second OR gate D9B input and the 1st pin of one end of the fourth AND gate D6A input, and the 4th pin of the other end of the second OR gate D9B input and the 2nd pin of the other end of the fourth AND gate D6A input are respectively connected to the backup fault self-diagnosis output Signal CHECKB, the output terminal 6 pin of the second OR gate D9B and the output terminal 3 pin of the fourth AND gate D6A are respectively connected to one end 13 pin of the fifth AND gate D6D input and one end 4 pin of the sixth AND gate D6B input, the other end 12 pin of the fifth AND gate D6D input and the other end 5 pin of the sixth AND gate D6B input are respectively connected to the switching instructions TRANS and YC_TRANS, the output terminal 11 pin of the fifth AND gate and the output terminal 6 pin of the sixth AND gate D6B and the third OR gate D9C are connected to the ground command switching and autonomous switching control module.

[0048] Those skilled in the art will appreciate that Figure 4 As shown, the ground command switching and autonomous switching control modules generate the two control signals CLRTRANS and PRETRANS through the signal output by the fault self-diagnosis module. When the NZS signal is low and the RST signal is high, the high and low levels of the CLRTRANS and PRETRANS signals are just opposite, and this is the response mode of autonomous switching. When the NZS signal is high and the RST signal is high, the CLRTRANS and PRETRANS signals must be high at the same time, and this is the response mode of ground command switching.

[0049] Furthermore, the switching instruction output module adopts a 54HC74 trigger.

[0050] As attached Figure 2 , 3 As shown, through the output characteristics of 54HC74, the response signal of the ground manual control command is connected to the CLK terminal of 54HC74, and the CLRTRANS and PRETRANS signals are connected to the CLR (CD) terminal and PRE (SD) terminal of the D flip-flop 54HC74 respectively, and then the D foot and Q' foot are connected and then output. The output of the ground command switching or autonomous switching signal is realized by controlling the high and low level conversion of the CLK terminal or controlling the linkage change of the CLRTRANS and PRETRANS signals.

[0051] Furthermore, when the output is a response to a ground command, the width of the output signal is twice the width of the CLK signal output by the ground manual command signal response module, which widens the width of the output signal, that is, increases the response time for switching between primary and standby devices, effectively ensuring that the switching function can respond smoothly.

[0052] The idea of ​​realizing the object of the present invention is:

[0053] First, the CLK, CLR (CD), PRE (SD) and D terminals of 54HC74 are controlled to realize the response output of the switching instruction, and the output signal is shaped through two 54HC14 NOT gates, and then output to the primary device and the backup device respectively, as shown in Table 1.

[0054] Table 1 54HC74 series chip truth table

[0055]

[0056] When both PRE and CLR signals are high, connect the D pin and Q' pin. When the CLK signal has a pulse response, the output will change with the CLK signal and the D signal. When one of the PRE and CLR signals is high and the other is low, the output Q' terminal only depends on the high and low levels of the PRE signal, and has nothing to do with the signals at the CLK and D terminals.

[0057] Second, as attached Figure 2 , 3 As shown, the output of the autonomous switching signal is prohibited / allowed by controlling the CLK, CLR (CD), PRE (SD) and D terminals of 54HC74. Connect the D terminal to the PRE terminal with a high level, the CLK terminal to the manual command control response signal, and the RST reset terminal to the CLR terminal. As shown in Table 1, when the power is just turned on, the PRE terminal is high and the CLR reset signal is low. At this time, the Q' terminal of 54HC74 is not affected by the CLK and D terminals, and the output is high, causing the NZS signal to be low. After the power-on is completed, RST returns to a high level. At this time, as long as there is any level fluctuation of CLK, the NZS signal will flip. Thereby realizing the control of prohibiting / allowing the autonomous switching signal.

[0058] Third, as attached Figure 4 As shown, in the ground command switching and autonomous switching control modules, when the NZS signal is high, the outputs of the CLRTRANS signal and the PRETRANS signal are not interfered by any other signal and both will output high. When the NZS signal is low, the outputs of the CLRTRANS signal and the PRETRANS signal are affected by the output signal of the 8th pin of the D9 chip 54HC32. At this time, when the output of the 8th pin of the D9 chip 54HC32 is high, the output of CLRTRANS is low and the output of PRETRANS is high; when the output of the 8th pin of the D9 chip 54HC32 is low, the output of CLRTRANS is high and the output of PRETRANS is low;

[0059] Based on the above system embodiment, the present invention also provides a method for self-diagnosis and autonomous switching of aerospace dual-redundancy space communication equipment, comprising the following steps:

[0060] Step S1, performing fault self-diagnosis and identification through a fault self-diagnosis module, performing triple-module redundancy processing on a logic circuit of the fault self-diagnosis, and outputting the result of the self-diagnosis after triple-module redundancy to a fault diagnosis result response module;

[0061] Step S2, generating a control signal for allowing or prohibiting autonomous switching through an autonomous switching allowing and prohibiting control module;

[0062] Step S3, filtering and calculating the ground command through the ground command response module, and outputting the response result of the ground command;

[0063] Step S4, responding to the self-diagnosis result through the fault diagnosis result response module, when the diagnosis result is abnormal, outputting an abnormal feedback signal; when the diagnosis result is normal, outputting a normal feedback signal;

[0064] Step S5, outputting the result of the fault diagnosis result response module to the ground command switching and autonomous switching control module through the ground command switching and autonomous switching control module to generate a corresponding control signal;

[0065] Step S6, the output pulse of the switching instruction is widened by the switching instruction output module to achieve the delay purpose, and the autonomous switching and ground instruction switching are also controlled.

[0066] Those skilled in the art will appreciate that the following steps are performed when executing this method:

[0067] Step 1: Prepare high-quality FPGA chips and 54 series logic gate chips that meet aerospace standards. Other peripheral circuit components should also be selected as high-quality aerospace components.

[0068] Step 2: As attached Figure 1 As shown, the FPGA fault self-diagnosis function is completed according to the corresponding logic. At the same time, the fault self-diagnosis logic is processed with triple-module redundancy, and the fault diagnosis result is output to the fault self-diagnosis result response module.

[0069] Step 3: As attached Figure 4 As shown, the fault self-diagnosis result CHECKA of the main part of the aerospace communication equipment is connected to the 5th pin of the D5 chip 54HC14, and the 6th pin of the D5 chip 54HC14 is connected to the 1st pin of the D6 chip 54HC08. The 2nd pin of D6 is connected to the fault self-diagnosis result CHECKB of the backup, the 3rd and 4th pins of D6 are connected, the 5th pin is connected to the switching instruction YC_TRANS, the 12th pin is connected to the switching instruction TRANS, and the 13th pin is connected to the 6th pin of the D9 chip 54HC32. The 4th pin of the D9 chip 54HC32 is connected to the fault self-diagnosis result CHECKB of the backup, the 5th pin is connected to the 6th pin of the D5 chip 54HC14, the 9th pin is connected to the 11th pin of the D6 chip 54HC08, and the 10th pin is connected to the 6th pin of the D6 chip 54HC08.

[0070] Step 4: As attached Figure 4As shown, the output end of the fault diagnosis result response module, that is, the 8th pin of the D9 chip 54HC32 is connected to the 2nd pin, the 1st pin is connected to the 13th pin of D9 and the 10th pin of the D3 chip 54HC14, the 8th pin is connected to the 13th pin of D3, the 12th pin is connected to the 12th pin of D3, the 3rd pin is connected to the 1st pin of the D4 chip 54HC14, and the 11th pin is connected to the 9th pin of the D6 chip 54HC08. The 10th pin of D6 is connected to the RST reset signal end, the 8th pin is the output signal CLRTRANS connected to the 13th pin of the D1 chip 54HC74. The 12th pin of the D7 chip 54HC08 is connected to the RST reset signal end, and the 11th pin is connected to the 3rd pin of D4. The 2nd pin of D4 is connected to the 13th pin of D7, and the 4th pin is the output signal PRETRANS connected to the 10th pin of D1.

[0071] Step 5: As attached Figure 3 As shown, the ground manual control command signal TRANS is connected to the V30 diode, and pulled up to 5V through the resistor R109 and the capacitors C24 and C25. At the same time, the other end of V30 is connected to the 9th pin of the D7 chip 54HC08 through R20, and two capacitors C319 and C320 with the same capacitance are connected in series near the 9th pin of D7 for filtering. If the 10th pin of D7 has no other use, it can be directly pulled high for use.

[0072] Step 6: As attached Figure 3 As shown, the autonomous switching module is disabled / enabled. Pin 8 of D7 chip 54HC08 is connected to pin 1 of D3 chip 54HC14. Pin 2 of D3 is connected to pin 3 and to pin 3 of D1. Pin 2 of D1 is pulled up to 5V through R23, pin 2 is connected to pin 4, pin 1 is connected to the RST reset signal terminal, and pin 6 is connected to pin 11 of D3. Pin 10 of D3 outputs signal NZS which is connected to pin 1 and pin 13 of D9.

[0073] Step 7: As attached Figure 3 As shown, the switching command output module, pin 11 of D1 is connected to pin 4 of D3, pin 13 is connected to the CLRTRANS signal terminal, pin 10 is connected to the PRETRANS signal terminal, pin 12 is connected to pin 8 and connected to pin 9 of D3. Pin 8 of D3 outputs the signal YC_TRANS and is connected to its pin 5, and pin 6 outputs the TRANS signal.

[0074] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A fault self-diagnosis and autonomous switching system for aerospace dual-redundant space communication equipment, characterized in that: include: A fault self-diagnosis module is used for self-diagnosis and identification of faults, and performs three-module redundancy processing on the logic circuit of the fault self-diagnosis, and outputs the self-diagnosis result after three-module redundancy to the fault diagnosis result response module; an autonomous switching permission and prohibition control module is used to generate a control signal for allowing autonomous switching or prohibiting autonomous switching; The ground command response module is used to output the response result of the ground command by filtering and calculating the ground command; the fault diagnosis result response module is used to respond to the result of the self-diagnosis, and when the diagnosis result is abnormal, it outputs an abnormal feedback signal; when the diagnosis result is normal, it outputs a normal feedback signal; the ground command switching and autonomous switching control module is used to output the result of the fault diagnosis result response module calculation to the ground command switching and autonomous switching control module to generate a corresponding control signal; The switching command output module is used to widen the output pulse of the switching command to achieve the purpose of delay, and is also used for the control of autonomous switching and ground command switching; Among them, the FPGA logic circuit and the combination logic circuit of the 54 series chip are combined, the FPGA logic circuit is used for fault self-diagnosis, and the combination logic circuit of the 54 series chip is used for autonomous switching; the autonomous switching of the equipment is performed by sending the result of the fault self-diagnosis to the combination logic circuit for calculation; The fault self-diagnosis module includes a three-module redundancy module for performing fault self-diagnosis of the dual-redundancy space communication device by determining whether the packet header of each transmission packet of the communication device meets the normal standard; The autonomous switching permission and prohibition control module includes a D trigger, the output end of the D trigger is connected to an inverter to control the level of the signal. When the control signal is at a low level, the system allows autonomous switching, that is, autonomous switching and ground command switching respond simultaneously at this time; when the control signal is at a high level, the system prohibits autonomous switching, that is, the autonomous switching function is invalid, and only responds to the ground command switching signal; the autonomous switching permission and prohibition control module controls the level of the NZS signal by controlling the output of pin 6 of the 54HC74 chip. When the NZS signal is at a low level, the system allows autonomous switching, that is, autonomous switching and ground command switching respond simultaneously at this time, and when the NZS signal is at a high level, the system prohibits autonomous switching, that is, the autonomous switching function is invalid at this time, and only responds to the ground command switching signal; The ground command response module includes a ground command signal K_TRANS, a diode V30, a first resistor R20, a first capacitor C319, and a second capacitor C320 connected in sequence and grounded, and one end 9 of the first AND gate D7C input is connected, and at the same time, the second resistor R109, the third capacitor C24, and the fourth capacitor C25 are connected between the diode V30 and the first resistor R20; the output end of the first AND gate D7C is connected to the first inverter D3A and the second inverter D3B, and output to the switching command output module DIB; the other end 10 pin of the first AND gate D7C input is connected to the output end 3 pin of the first OR gate D20A, one end 1 of the first OR gate D20A input is connected to the second AND gate D8B, the third resistor R902 and the power supply, and the other end 2 pin of the first OR gate D20A input is connected to the third AND gate D8A, the fourth resistor R903 and the power supply; In the fault diagnosis result response module, the output signal of the fault self-diagnosis includes a main fault self-diagnosis output signal and a backup fault self-diagnosis output signal, and the main fault self-diagnosis output signal and the backup fault self-diagnosis output signal are sent to the ground command switching and autonomous switching control module after undergoing combinational logic operations; there are two output signals of the fault self-diagnosis, namely, the main fault self-diagnosis output signal CHECKA and the backup fault self-diagnosis output signal CHECKB, and the CHECKA and CHECKB signals are sent to the ground command switching and autonomous switching control module after undergoing combinational logic operations of 54HC08 and 54HC32; The fault diagnosis result response module includes a fault self-diagnosis output signal CHECKA and a backup fault self-diagnosis output signal CHECKB, the fault self-diagnosis output signal CHECKA is connected to the 5th pin of the input terminal of the third NOT gate D5C, the 6th pin of the output terminal of the third NOT gate D5C is respectively connected to the 5th pin of one end of the second OR gate D9B input and the 1st pin of one end of the fourth AND gate D6A input, and the 4th pin of the other end of the second OR gate D9B input and the 2nd pin of the other end of the fourth AND gate D6A input are respectively connected to the backup fault self-diagnosis output signal CHECKA. CKB, the output end pin 6 of the second OR gate D9B and the output end pin 3 of the fourth AND gate D6A are respectively connected to one end pin 13 of the fifth AND gate D6D input and one end pin 4 of the sixth AND gate D6B input, the other end pin 12 of the fifth AND gate D6D input and the other end pin 5 of the sixth AND gate D6B input are respectively connected to the switching instructions TRANS and YC_TRANS, the output end pin 11 of the fifth AND gate D6D and the output end pin 6 of the sixth AND gate D6B and the third OR gate D9C are connected to the ground command switching and autonomous switching control module.

2. The fault self-diagnosis and autonomous switching system of aerospace dual-redundancy space communication equipment as claimed in claim 1, characterized in that: The switching command output module adopts a D trigger to connect the response signal of the ground manual control command to the signal input terminal, and executes the output of the ground command switching or the autonomous switching signal through the high and low level conversion of the signal input terminal or the linkage change of the control signal.

3. The fault self-diagnosis and autonomous switching system of aerospace dual-redundancy space communication equipment as claimed in claim 1, characterized in that: In the ground command switching and autonomous switching control module, when the output is a response to a ground command, the width of the output signal is twice the width of the CLK signal output by the ground command response module.

4. A method for self-diagnosis and autonomous switching of faults of dual redundant space communication equipment in aerospace, characterized in that: A fault self-diagnosis and autonomous switching system for aerospace dual-redundancy space communication equipment according to any one of claims 1 to 3, comprising the following steps: Step S1, performing fault self-diagnosis and identification through a fault self-diagnosis module, performing triple-module redundancy processing on a logic circuit of the fault self-diagnosis, and outputting the result of the self-diagnosis after triple-module redundancy to a fault diagnosis result response module; Step S2, generating a control signal for allowing or prohibiting autonomous switching through an autonomous switching allowing and prohibiting control module; Step S3, filtering and calculating the ground command through the ground command response module, and outputting the response result of the ground command; Step S4, responding to the self-diagnosis result through the fault diagnosis result response module, when the diagnosis result is abnormal, outputting an abnormal feedback signal; when the diagnosis result is normal, outputting a normal feedback signal; Step S5, outputting the result of the fault diagnosis result response module to the ground command switching and autonomous switching control module through the ground command switching and autonomous switching control module to generate a corresponding control signal; Step S6, the output pulse of the switching instruction is widened by the switching instruction output module to achieve the delay purpose, and the autonomous switching and ground instruction switching are also controlled.

Images