On-orbit reconstruction method and system for satellite-borne routing control system

Abstract

The present invention discloses an on-orbit reconstruction method and system for a satellite-borne routing control and management system. The method first powers on or resets the hardware, and enters the software injection control process when the communication is normal. The satellite service machine sends a software injection instruction to the control and management system, and the control and management system parses and judges the software injection instruction according to the established protocol, and executes different on-orbit reconstruction processes according to the injection data stream type of FPGA or CPU. During the reconstruction process, the target plug-in will judge the instruction in time and return a response, thereby effectively improving the reliability of data transmission and solving data anomaly problems in time. A reconstruction system based on this method is also provided. The present invention can realize the on-orbit reconstruction function of satellite-borne routing control, repair satellite-borne on-orbit faults, and alleviate space single particle effects.

Description

Technical Field

[0001] The present invention belongs to the technical field of on-orbit reconstruction, and in particular relates to an on-orbit reconstruction method and system for a satellite-borne routing control system. Background Art

[0002] With the development of space-based application systems such as satellite communications, satellite earth observation, and global satellite navigation and positioning, the functions of aerospace systems are becoming more and more complex, which in turn puts higher requirements on the on-orbit reconstruction and maintenance of the systems.

[0003] During the on-orbit service of the satellite, if fault repair or function update and upgrade is required, on-orbit reconstruction is generally achieved by updating the application software. Comparative Document 1 (CN202110662031.3) discloses an on-orbit reconstruction method and system for aerospace electronic systems based on FPGA. The system includes a master control communication protocol parsing module based on anti-fuse FPGA, a refresh chip protocol conversion and control module, a CPU routing software and loading control module, a telemetry acquisition and framing module, a CPU software operation monitoring module, a communication module, etc. And SRAM-type FPGA refresh chips and FLASH memories outside the FPGA. The reconstruction method based on this system can update the software and FPGA synchronously, thereby flexibly defining the functions or performance of satellites or electronic components, but the method does not verify the transmitted data, so it is slightly insufficient in terms of data reliability. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present invention proposes an on-orbit reconstruction method and system for a satellite-borne routing control system, which are used to improve the reliability of satellite-borne transmission data and the stability of satellite-borne operations.

[0005] An on-orbit reconstruction method for a satellite-borne routing control system specifically comprises the following steps:

[0006] Step 1: Power on or reset the hardware, and the control system will self-check and determine the communication status of each channel. If there is a communication abnormality, power on or reset it again; if the communication is normal, proceed to step 2.

[0007] Step 2: The control system performs the software upload control process. The satellite service machine sends the software upload instruction to the control system. The control system parses and judges the software upload instruction according to the established protocol, and identifies the upload data stream type and the upload target. If the upload data type is FPGA, execute step 3; if the upload data type is CPU, execute step 4. The upload targets include the main control plug-in, user plug-in, feed plug-in and routing switch plug-in, among which the upload data type of the main control plug-in is FPGA.

[0008] Step 3: Generate the corresponding target command based on the parsed software annotation command and send it to the target plug-in. The specific steps are as follows:

[0009] s3.1. The control system closes and refreshes the target plug-in;

[0010] s3.2. The control system erases the FLASH of the target plug-in and returns the telemetry data;

[0011] s3.3, the control system burns data into the FLASH of the target plug-in and returns telemetry data;

[0012] s3.4. If the target plug-in is the master plug-in, execute s3.5; otherwise, execute s3.8;

[0013] s3.5. The control system resets the target plug-in;

[0014] s3.6, the control system updates the FLASH storage stream start address of the target plug-in;

[0015] s3.7, the control system updates the FLASH storage stream end address of the target plug-in and executes s3.9;

[0016] s3.8. The control system sends a burning end mark instruction to the target plug-in and executes s3.9;

[0017] s3.9, the control system reads back and verifies the target plug-in and returns the telemetry data;

[0018] s3.10. If the target plug-in is the master plug-in, execute s3.11; otherwise, execute s3.12;

[0019] s3.11, the control system selects the main / backup FLASH for the target plug-in;

[0020] s3.12, the control system reloads the target plug-in on FPGA;

[0021] s3.13. If the reload is successful, the scheduled refresh is started and the on-orbit reconstruction is completed; if the reload fails, the telemetry data is returned.

[0022] Step 4: Generate the corresponding target command based on the parsed software annotation command and send it to the target plug-in; the specific steps are as follows:

[0023] s4.1. The control system erases the FLASH of the target plug-in and returns the telemetry data;

[0024] s4.2. The control system burns data into the FLASH of the target plug-in and returns telemetry data;

[0025] s4.3. The management and control system sends a burning end mark instruction to the target plug-in;

[0026] s4.4. The control system performs readback verification on the target plug-in;

[0027] s4.5. The control system reloads the CPU of the target plug-in;

[0028] s4.6. If the reload is successful, the on-orbit reconstruction is completed; if the reload fails, the telemetry data is returned.

[0029] An on-orbit reconstruction system of a satellite-borne routing control system is used to implement the above-mentioned on-orbit reconstruction method, including a clock management module, a global reset module, a software upload receiving and distribution module, an input latch module, an RS422 receiving and sending module, a main control FPGA on-orbit reconstruction module, a telemetry management module, and a power-on control and self-test module.

[0030] The clock management module is used to generate a main clock for controlling the operation of the main FPGA and a reset signal of the main clock.

[0031] The global reset module is used to receive a soft reset instruction, an OC instruction and a watchdog WDO, and generate a global reset signal.

[0032] The software injection module is used to receive the software reset instruction and software injection instruction sent by the satellite service machine, and after parsing, generate the corresponding target instruction and send it to the target plug-in.

[0033] Preferably, the instructions received by the software annotation module include reconstruction data preparation instructions, burning data instructions, reconstruction data end instructions and reload instructions.

[0034] The input latch module performs asynchronous reset and synchronous release processing on the global reset signal to generate a global reset signal used inside the FPGA; and performs synchronization processing on the asynchronous input signal.

[0035] The RS422 receiving and sending module is used to transmit command data and response data between modules.

[0036] The master FPGA on-orbit reconstruction module is a UART interface, which is used to realize serial communication between the master plug-in FPGA and the refresh chip. The master plug-in FPGA sends instructions to the refresh chip through the master FPGA on-orbit reconstruction module to complete the on-orbit reconstruction process; the refresh chip returns telemetry data to the master plug-in FPGA through the master FPGA on-orbit reconstruction module to monitor the working status of the refresh chip.

[0037] The telemetry management module is used to receive the slow / fast telemetry request from the satellite machine, parse it and send it to the target plug-in.

[0038] The power-on control and self-test module is used to receive the power-on control signal, switch selection control signal and self-test instruction of the satellite service machine, and send them to the target plug-in.

[0039] The present invention has the following beneficial effects:

[0040] The communication protocol method of the present application will immediately return a response after receiving any instruction other than the telemetry instruction. If the instruction is correct, it will return a response to the received instruction. If the instruction is abnormal, it will return an abnormal response with an abnormal type data frame, thereby effectively improving the reliability of data transmission and promptly resolving data anomaly problems.

[0041] The telemetry modes of this application are fast transmission and slow transmission. Fast transmission telemetry is only for a single target plug-in, while slow transmission telemetry collects telemetry data for all plug-ins. It can be used flexibly to effectively monitor the internal working status, thereby improving the safety of satellite operation.

[0042] This application adopts a timing method for transmitting large data such as data burning instructions and slow telemetry instructions to ensure effective data transmission and avoid breakpoints. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 It is a block diagram of the on-orbit reconstruction system in the embodiment;

[0044] Figure 2 Reconstruct the system flow chart for on-orbit;

[0045] Figure 3 Annotate the flow chart for FPGA;

[0046] Figure 4 Add a flow chart to the CPU. DETAILED DESCRIPTION

[0047] The present invention will be further explained below with reference to the accompanying drawings;

[0048] like Figure 1 As shown, an on-orbit reconstruction system of a satellite-borne routing control system includes a clock management module, a global reset module, a software upload receiving and distributing module, an input latch module, an RS422 receiving and transmitting module, a master control FPGA on-orbit reconstruction module, a telemetry management module, and a power-on control and self-test module.

[0049] The RS422 receiving and sending module is used to receive the software upload of the RS422 interface of the satellite machine and deliver it to the software upload receiving and distributing module; send a confirmation response to the satellite machine; send 8-way software on-orbit reconstruction instructions to other plug-ins and receive confirmation responses from the target plug-ins; receive the fast / slow transmission telemetry request of the satellite machine and deliver it to the telemetry management module; send fast / slow transmission telemetry data to the satellite machine; send a telemetry request to the target plug-in and receive the telemetry data sent by each plug-in; receive the power-on / power-off control and self-test instructions of the satellite machine and deliver them to the power-on control and self-test module.

[0050] The software upload receiving and distributing module is used to parse the data uploaded by the satellite service machine and generate corresponding software upload instructions. If the target is the main control FPGA, it is sent to the main control FPGA on-orbit reconstruction module; if the target is other plug-ins, it is sent to the target plug-in through the RS422 module; if it is a software reset instruction for the main control plug-in, it is delivered to the global reset module; if the target is other plug-ins, it is sent to the target plug-in through the RS422 module; receive confirmation response instructions sent by the main control plug-in and other plug-ins, and send them to the satellite service computer.

[0051] The master FPGA on-orbit reconstruction module is used to configure the FPGA dedicated refresh chip, and sends the parsed command packet to the refresh chip through the UART interface to complete the software reconstruction.

[0052] The telemetry management module is used to send the telemetry request to the target plug-in after parsing after receiving the slow / fast telemetry request from the satellite service machine. If it is a slow telemetry request, the telemetry request is sent to all plug-ins; if it is a fast telemetry request, the telemetry request is sent to the parsed target plug-in separately. After receiving the telemetry data sent by each plug-in, if it is a slow telemetry, all the plug-in telemetry data are reframed, and the reframed routing baseband device telemetry data is sent to the satellite service machine; if it is a fast telemetry, the target plug-in telemetry data of the telemetry request is sent to the satellite service machine separately.

[0053] The global reset module is used to output a dog feeding signal to the watchdog circuit; receive a soft reset instruction from the master control plug-in of the satellite service machine, receive an OC instruction from the satellite service machine, receive the watchdog WDO, perform a combinational logic "AND" operation to generate a reset trigger signal; receive a watchdog global reset signal to reset the control FPGA.

[0054] The power-on control and self-test module is used to receive the power-on control and switch selection control signals of the satellite service machine, and output 13 TTL signals to the target plug-in. Receive the self-test instruction of the satellite service machine. If it is a self-test instruction for the routing switch, user baseband, and feed baseband plug-in, send a telemetry request to the plug-in, and judge whether the self-test is normal / abnormal through the telemetry of the reply; if it is a self-test for the time-frequency plug-in, judge whether the 100MHz crystal oscillator lock indication is normal; if it is a self-test for the main control plug-in, judge whether the self-test is normal / abnormal through the telemetry of the main control, and return a confirmation response to the satellite service machine.

[0055] The input latch module is used to generate a global reset signal used inside the FPGA after performing asynchronous reset and synchronous release processing on the global reset signal; and to perform synchronization processing on the asynchronous input signal.

[0056] The clock management module shown is used to perform a first-level latch on the 40MHz input clock generated by the crystal oscillator, and generate a 40MHz control FPGA working master clock and a whole-board reset signal for the master clock.

[0057] like Figure 2 As shown, an on-orbit reconstruction method of a satellite-borne routing control system specifically includes the following steps:

[0058] Step 1: Power on or reset the hardware, and the control system will self-check and determine the communication status of each channel. If there is a communication abnormality, power on or reset it again; if the communication is normal, proceed to step 2.

[0059] Step 2: The control system performs the software upload control process. The satellite service machine sends the software upload instruction to the control system. The control system parses and judges the software upload instruction according to the established protocol, and identifies the upload data stream type and the upload target. If the upload data type is FPGA, execute step 3; if the upload data type is CPU, execute step 4. The upload targets include the main control plug-in, user plug-in, feed plug-in and routing switch plug-in, among which the upload data type of the main control plug-in is FPGA. . The data frame format in this embodiment is shown in Table 1:

[0060] Frame Header Frame length Command word Target plugins Flash Selection Valid data Checksum 2 bytes 1 byte 1 byte 1 byte 1 byte variable 1 byte or 2 bytes

[0061] Table 1

[0062] The frame header of the data is 2 bytes, and the frame length is 1 byte, which represents the number of bytes between the frame header and the cumulative sum. The command word is used to identify the type of the frame data. The target plug-in is used to identify the injection target. The Flash selection determines the injection type. The checksum is used to check the sum check from the frame header to the valid data. To improve the reliability of data transmission, the master plug-in uses XOR check according to the injection target, and other plug-ins use cumulative check.

[0063] It should be noted that the data frame format shown in Table 1 is only an example, and any data frame format that complies with the communication protocol of this application can be used in this application. If a command frame information that does not comply with the communication protocol of this application is received, a corresponding abnormal response will be returned based on the abnormal type command error and reconstructed data error.

[0064] Step 3: Generate the corresponding target command according to the parsed software annotation command and send it to the target plug-in. The specific steps are as follows: Figure 3 As shown:

[0065] s3.1. The control system receives the reconstruction preparation instruction from the satellite service machine, returns a response to the satellite service machine, and closes the refresh of the target plug-in;

[0066] s3.2. The control system accepts the response from the target plug-in and erases the FLASH of the target plug-in;

[0067] s3.3. After the FLASH erasing status of the target plug-in changes from "erasing" to "erasing successfully" after being received by the satellite service machine through the fast transmission telemetry data, it periodically sends the programming data to the control system. The sending cycle is 5 to 500ms, the effective data length is 1 to 256 bytes, and the frame contains frame length information and frame count information;

[0068] s3.4. After receiving the reconstructed data frame, the control system sends a reconstructed data response frame to the computer. The response frame includes two types: "reconstructed data received correctly" and "reconstructed data received incorrectly". The response frame contains frame count information. After the control system parses the correct data frame, it reassembles the frame and sends it to the target plug-in. If the target plug-in does not reply for more than 1ms, the reconstructed data of this frame will be resent. If it times out again or the frame count in the reply command information is discontinuous, the command communication is judged to be abnormal, and an abnormal frame response is sent to the satellite service machine.

[0069] s3.5. The control system receives the burn-in end mark command sent by the satellite service machine and returns a response to the satellite service machine. If the target plug-in is the master control plug-in, execute s3.6; otherwise, execute s3.9.

[0070] s3.6. The control system sends a reset command to the target plug-in;

[0071] s3.7. The control system accepts the response from the target plug-in and updates the starting address of the FLASH storage code stream for the target plug-in;

[0072] s3.8. The control system accepts the response from the target plug-in, updates the end address of the FLASH storage code stream for the target plug-in, and executes s3.10;

[0073] s3.9, the management and control system sends a burning end mark instruction to the target plug-in;

[0074] s3.10. The control system receives the response from the target plug-in and sends a read-back verification instruction to the target plug-in;

[0075] s3.11. When the target plug-in receives the read-back verification instruction, it calculates the CRC of all data burned into FLASH and compares it with the received CRC. The comparison result is returned through the fast transmission telemetry data. If it is correct, s3.12 is executed; if it is incorrect, the telemetry data is returned and the data burning fails;

[0076] s3.12, the control system receives the reload command from the satellite service machine and returns a response to the satellite service machine. If the target plug-in is the master control plug-in, execute s3.14; otherwise, execute s3.13;

[0077] s3.13. The target plug-in selects the primary / secondary FLASH, and the target plug-in sends a response to the management and control system;

[0078] s3.14. Reload the target plug-in to FPGA. If the reload is successful, start the timed refresh. If the reload fails, return the telemetry data.

[0079] Step 4: Generate the corresponding target command according to the parsed software annotation command and send it to the target plug-in; the specific steps are as follows: Figure 4 As shown:

[0080] s4.1. The control system receives the reconstruction preparation instruction from the satellite service machine, returns a response to the satellite service machine, and performs FLASH erasing on the target plug-in;

[0081] s4.2. After the satellite service machine receives the target plug-in's FLASH erase status from "erasing" to "erasing successfully" through the fast transmission telemetry data, it sends a data burning instruction to the management and control system;

[0082] s4.3 The control system returns a response to the satellite service machine and writes data to the FLASH of the target plug-in. If the target plug-in does not respond for more than 1ms, the frame is resent to reconstruct the data. If it times out again or the frame count in the reply command information is discontinuous, the command communication is judged to be abnormal and the telemetry data is returned;

[0083] s4.4. The control system receives the burn-in end instruction from the satellite service machine, returns a response to the satellite service machine, and sends a burn-in end mark instruction to the target plug-in;

[0084] s4.5. The control system accepts the response from the target plug-in and performs a read-back check on the target plug-in. When the target plug-in receives the read-back check instruction, it calculates the CRC of all data burned into the FLASH and compares it with the received CRC. The comparison result is returned through the fast transmission telemetry data. If it is correct, s4.6 is executed; if it is incorrect, the telemetry data is returned and the data burning fails.

[0085] s4.6. The control system receives the reload command from the satellite service machine, returns a response to the satellite service machine, and reloads the CPU of the target plug-in;

[0086] s4.7, if the reload fails, the telemetry data is returned and the reload fails;

[0087] The telemetry of this application includes slow transmission telemetry and fast transmission telemetry. The fast transmission telemetry used in the software can quickly collect target plug-in data, while the slow transmission telemetry can effectively collect data from each plug-in in a more flexible form.

[0088] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that the technical solutions described in the above embodiments may still be modified, or some or all of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present invention, and should all be included in the scope of the claims and specification of the present invention.

Claims

1. An on-orbit reconstruction method for a satellite-borne routing control system, characterized in that: The method specifically comprises the following steps: Step 1: Power on the hardware or globally reset it. The control system will self-check and determine the communication status of each channel. If there is a communication abnormality, power on or reset it again. If the communication is normal, proceed to step 2. Step 2: The control system performs software upload control process. The satellite service machine sends software upload instructions to the control system. The control system parses and judges the software upload instructions according to the established protocol, and identifies the upload data stream type and upload target. If the upload data type is FPGA, execute step 3; if the upload data type is CPU, execute step 4; the upload targets include the main control plug-in, user plug-in, feed plug-in and routing switch plug-in, among which the upload data type of the main control plug-in is FPGA. Step 3: Generate the corresponding target command based on the parsed software annotation instruction and send it to the target plug-in. The specific steps are as follows: s3.

1. The control system closes and refreshes the target plug-in; s3.

2. The control system erases the FLASH of the target plug-in and returns the telemetry data; s3.3, the control system burns data into the FLASH of the target plug-in and returns telemetry data; s3.

4. If the target plug-in is the master plug-in, execute s3.5; otherwise, execute s3.8; s3.

5. The control system resets the target plug-in; s3.6, the control system updates the FLASH storage stream start address of the target plug-in; s3.7, the control system updates the FLASH storage stream end address of the target plug-in and executes s3.9; s3.

8. The control system sends a burning end mark instruction to the target plug-in and executes s3.9; s3.

9. The control system performs readback verification on the target plug-in and returns telemetry data; s3.

10. If the target plug-in is the master plug-in, execute s3.11; otherwise, execute s3.12; s3.11, the control system selects the main / backup FLASH for the target plug-in; s3.12, the control system reloads the target plug-in on FPGA; s3.

13. If the reload is successful, the scheduled refresh is started and the on-orbit reconstruction is completed; if the reload fails, the telemetry data is returned; Step 4: Generate the corresponding target command based on the parsed software annotation command and send it to the target plug-in; the specific steps are as follows: s4.

1. The control system erases the FLASH of the target plug-in and returns the telemetry data; s4.

2. The control system burns data into the FLASH of the target plug-in and returns telemetry data; s4.

3. The management and control system sends a burning end mark instruction to the target plug-in; s4.

4. The control system performs readback verification on the target plug-in; s4.

5. The control system reloads the CPU of the target plug-in; s4.

6. If the reload is successful, the on-orbit reconstruction is completed; if the reload fails, the telemetry data is returned.

2. An on-orbit reconstruction system for a satellite-borne routing control system, characterized in that: Used to implement the on-orbit reconstruction method as claimed in claim 1; the system includes a clock management module, a global reset module, a software uplink receiving and distribution module, an input latch module, an RS422 receiving and sending module, a master control FPGA on-orbit reconstruction module, a telemetry management module, and a power-on control and self-test module; The clock management module is used to generate a master clock for controlling the operation of the FPGA and a reset signal of the master clock; The global reset module is used to receive a soft reset instruction, an OC instruction and a watchdog WDO, and generate a global reset signal; The software injection module is used to receive the software reset instruction and software injection instruction sent by the satellite service machine, and after parsing, generate the corresponding target instruction and send it to the target plug-in; The input latch module performs asynchronous reset and synchronous release processing on the global reset signal to generate a global reset signal used inside the FPGA; and performs synchronization processing on the asynchronous input signal; The RS422 receiving and sending module is used to transmit command data and response data between modules; The master FPGA on-orbit reconstruction module is a UART interface, which is used to realize serial communication between the master plug-in FPGA and the refresh chip; the master plug-in FPGA sends instructions to the refresh chip through the master FPGA on-orbit reconstruction module to complete the on-orbit reconstruction process; the refresh chip returns telemetry data to the master plug-in FPGA through the master FPGA on-orbit reconstruction module to monitor the working status of the refresh chip; The telemetry management module is used to receive the telemetry request from the satellite service machine, parse it and send it to the target plug-in; The power-on control and self-test module is used to receive the power-on control signal, switch selection control signal and self-test instruction of the satellite service machine, and send them to the target plug-in.

3. The on-orbit reconstruction system of the satellite-borne routing control system according to claim 2, characterized in that: The instructions received by the software upload module include reconstruction data preparation instructions, burning data instructions, reconstruction data end instructions and reload instructions.

4. The on-orbit reconstruction system of the satellite-borne routing control system according to claim 2, characterized in that: The telemetry management module is used to send the telemetry request to the target plug-in after receiving the telemetry request from the satellite service machine, and if it is a slow transmission telemetry request, send the telemetry request to all plug-ins; If it is a fast-transmission telemetry request, a telemetry request is sent to the parsed target plug-in separately; after receiving the telemetry data sent by each plug-in, if it is a slow-transmission telemetry, all plug-in telemetry data are reframed, and the reframed routing baseband device telemetry data is sent to the satellite service machine; If it is fast transmission telemetry, the target plug-in telemetry data of the telemetry request will be sent to the satellite service machine separately.

5. The on-orbit reconstruction system of the satellite-borne routing control system according to claim 2, characterized in that: The power-on control and self-test module is used to receive the power-on control and switch selection control signals of the satellite service machine, and output 13-channel TTL signals to the target plug-in; receive the self-test instructions of the satellite service machine, and if it is a self-test instruction for the routing switch, user baseband, and feed baseband plug-in, send a telemetry request to the plug-in, and judge whether the self-test is normal / abnormal through the telemetry of the reply; If it is a self-test of the time-frequency plug-in, determine whether the 100MHz crystal oscillator lock indication is normal; if it is a self-test of the main control plug-in, determine whether the self-test is normal / abnormal through the telemetry of the main control, and return a confirmation response to the satellite service machine.

Images