Autonomous Implementation Method and System for Multi-Level Control of Satellite Energy Risk

Abstract

The present invention provides a method and system for autonomously implementing multi-level control of satellite energy risks, which are characterized by including: Step 1: Judging the satellite life state and setting the satellite life state word; Step 2: Judging the satellite health state and setting the satellite health state word; Step 3: Assigning values to the satellite energy safety state thresholds according to the satellite life state word and the satellite health state word; Step 4: Judging and confirming whether to enable satellite energy risk program control; Step 5: Judging and confirming whether the coulombmeter program control is allowed. If allowed, the coulombmeter participates in the program control. If not allowed, only the battery pack voltage participates in the program control, thereby realizing multi-level autonomous control of satellite energy risks. The present invention subdivides the satellite energy control levels, increases the practical value of the satellite life, and at the same time increases the rescue time in the case of satellite energy failures, reduces the probability of misjudgment in satellite energy safety management, and improves the reliability of satellite energy safety management.

Description

Technical Field

[0001] The present invention relates to the technical field of risk control, and specifically, to a method and system for autonomously implementing multi-level control of satellite energy risks. Background Art

[0002] Currently, the satellite energy risk level mode generally controls by judging the voltage of the battery pack, without control means for aspects such as the life state of the satellite battery pack, the health state of the satellite, and the battery pack power. The control means for the voltage of the satellite battery pack is single, and the relative reliability is low. In case of anomalies, it is easy to misjudge the voltage of the battery pack and cause unnecessary panic. Especially for long-life satellites, subdividing the satellite energy risk level is more conducive to satellite energy risk control. Therefore, the judgment of the life state of the satellite battery pack, the health state of the satellite, the battery pack power, and the battery pack temperature is introduced on the basis of the original satellite control, subdividing the satellite energy control level, allowing the battery pack capacity and voltage within different life periods of the long-life satellite battery pack to be set according to the degradation situation, allowing the battery pack capacity and voltage to be set in case of a single cell failure of the satellite battery pack, which has practical value for ensuring satellite energy safety and increasing satellite life. At the same time, it greatly increases the rescue time in case of satellite energy failures, reduces the probability of misjudgment in satellite energy safety management, and improves the reliability of satellite energy safety management.

[0003] Patent document CN115141984A discloses an autonomous management system for a satellite lithium-ion battery pack power sub-system. This patent describes overcharge, over-discharge (including under-voltage protection), and balancing of the battery pack, without describing energy risk control.

[0004] Patent document CN116311518A discloses a satellite on-orbit autonomous management method based on the application of a lithium-ion battery pack. This patent sets up a low battery pack voltage warning mode, a current task termination mode, a minimum power consumption mode, a sun-pointing mode, and a battery pack over-discharge protection mode, describes the five modes, and judges the voltage of the battery pack, without involving the control methods of the battery pack temperature and the battery pack power, and gives the adjustment method of the battery pack voltage threshold for each mode, which is different from the implementation method of this patent.

[0005] Patent document CN114578252A discloses a satellite energy early warning protection system-level method. The energy early warning specifically described is still implemented by the battery pack voltage method, without involving methods such as coulomb counting and temperature control, and without involving specific implementation methods.

[0006] Patent document CN115428742A discloses a high-reliability satellite lithium-ion battery pack charging method, specifically the two-out-of-three implementation method of BEA, which is different from the present invention.

[0007] Patent document CN111171541A discloses an on-orbit autonomous management method for a lithium-ion battery pack of a deep-space probe, mainly for the management of charging and discharging of the battery pack, rather than the management of satellite energy risk control.

[0008] Patent document CN113177175A (application number: CN212111278191.8) discloses a safety risk prevention and control method and device for a new energy uncertainty power system, enumerating and combining the schemes among the corresponding control schemes, deleting the combinations that do not meet the deterministic constraint conditions to form all possible control schemes; sorting all possible control schemes in ascending order according to the calculated values of the objective function, and successively performing safety and stability assessment calculations for all pre-conceived faults in the pre-conceived fault set under the operating mode of the safety and stability risk scenario for each control scheme, obtaining the total amount of load and the total amount of units cut off after the fault occurs, and judging whether it meets the chance constraint condition in the safety and stability risk prevention and control model. If it meets, the current control scheme is output as the final control scheme. However, this patent does not involve methods such as ammeters and temperature control, which is completely different from the present invention. Summary of the Invention

[0009] Aiming at the defects in the prior art, the purpose of the present invention is to provide a method and system for autonomous implementation of multi-level control of satellite energy risk.

[0010] According to the method for autonomous implementation of multi-level control of satellite energy risk provided by the present invention, it includes setting multi-level risk level modes of good energy, energy warning, energy crisis, and energy criticality, judging different risk level modes through satellite life status, satellite health status, battery pack power, battery pack voltage, and battery pack temperature, and performing relevant operations. The satellite risk level mode judgment threshold is modified by ground injection; the implementation method includes:

[0011] Step 1: Judge the satellite life status and set the satellite life status word;

[0012] Step 2: Judge the satellite health status and set the satellite health status word;

[0013] Step 3: Assign values to the satellite energy safety status threshold according to the satellite life status word and the satellite health status word;

[0014] Step 4: Judge and confirm whether to enable satellite energy risk program control;

[0015] Step 5: Judge and confirm whether ammeter program control is allowed. If allowed, the ammeter participates in program control. If not allowed, only the battery pack voltage participates in program control, so as to realize multi-level autonomous control of satellite energy risk.

[0016] Preferably, when the coulombmeter is allowed to participate in the program control, the multi-level autonomous control process of the satellite energy is as follows:

[0017] Step 5.1: Detect and assign the current calculated power value and the battery pack voltage value. Continuously detect and compare the current calculated power value and the battery pack voltage value for 5 seconds. If both meet the requirements of the good energy threshold and it is determined that the satellite energy status word is good energy, then the satellite broadcasts that the current satellite energy status word is good energy; if it is determined that the satellite energy status word is not good energy, then continuously detect whether the satellite battery pack temperature meets the threshold for 5 seconds. If it meets the threshold, then the satellite broadcasts that the current satellite energy status word is good energy; if it does not meet the battery pack temperature threshold, then perform the battery pack heat preservation operation, and broadcast that the current satellite energy status word is good energy after meeting the requirements;

[0018] Step 5.2: Detect and assign the current calculated power value and the battery pack voltage value. Continuously detect and compare whether the current calculated power value and the battery pack voltage value simultaneously meet the requirements of the energy warning threshold for 5 seconds. If the requirements are met, then insert and execute the program control instruction for the energy warning mode and broadcast that the satellite energy status is energy warning;

[0019] Step 5.3: Detect and assign the current battery pack voltage value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, then insert and execute the program control instruction for the energy crisis mode and broadcast that the satellite energy status is energy crisis;

[0020] Step 5.4: Detect and assign the current battery pack voltage value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy critical threshold for 5 seconds. If the requirements are met, then insert and execute the program control instruction for the energy critical mode and broadcast that the satellite energy status is energy critical.

[0021] Preferably, when the coulombmeter is not allowed to participate in the program control, the multi-level autonomous control process of the satellite energy is as follows:

[0022] Step 5.5: Detect and assign the current battery pack voltage value. Continuously detect and compare the current battery pack voltage value for 5 seconds. If both meet the requirements of the good energy threshold and it is determined that the satellite energy status word is good energy, then the satellite broadcasts that the current satellite energy status word is good energy; if it is determined that the satellite energy status word is not good energy, then continuously detect whether the satellite battery pack temperature meets the threshold for 5 seconds. If it meets the threshold, then the satellite broadcasts that the current satellite energy status word is good energy. If it does not meet the battery pack temperature threshold, then perform the battery pack heat preservation operation, and broadcast that the current satellite energy status word is good energy after meeting the requirements;

[0023] Step 5.6: Detect the current battery pack voltage value and assign it. Continuously detect and compare whether the current battery pack voltage value meets the energy warning threshold requirements for 5 consecutive seconds. If the requirements are met, insert and execute the energy warning mode program control instruction and broadcast the satellite energy status as energy warning;

[0024] Step 5.7: Detect the current battery pack voltage value and assign it. Continuously detect and compare whether the current battery pack voltage value meets the energy crisis threshold requirements for 5 consecutive seconds. If the requirements are met, insert and execute the energy crisis mode program control instruction and broadcast the satellite energy status as energy crisis;

[0025] Step 5.8: Detect the current battery pack voltage value and assign it. Continuously detect and compare whether the current battery pack voltage value meets the energy critical threshold requirements for 5 consecutive seconds. If the requirements are met, insert and execute the energy critical mode program control instruction and broadcast the satellite energy status as energy critical.

[0026] Preferably, the satellite life status word setting includes the initial stage, the middle stage, and the end stage;

[0027] The satellite health status word setting includes satellite normal, open circuit fault of single cell n of the satellite battery pack, and short circuit fault of single cell n of the satellite battery;

[0028] The satellite energy safety status thresholds include good energy U4, energy warning U3, energy crisis U2, energy critical U1, battery temperature T, and power threshold UQ;

[0029] The satellite energy threshold includes the threshold of single or multiple battery packs;

[0030] Both the satellite energy threshold and the satellite status word can be modified by inscribing numbers.

[0031] Preferably, the setting value of U4 of the lithium-ion battery pack is implemented in a manner not less than 4.1V×n; the setting value of U3 of the lithium-ion battery pack is implemented in a manner not less than 3.6V×n; the setting value of U2 of the lithium-ion battery pack is implemented in a manner not less than 3.4V×n; the setting value of U1 of the lithium-ion battery pack is implemented in a manner not less than 3.2V×n; the setting value of the temperature T of the lithium-ion battery pack is not less than 11°C; the setting value of the capacity UQ of the lithium-ion battery pack is implemented in a manner not less than 61% of the rated battery pack capacity Q of the satellite.

[0032] According to the satellite energy risk multi-level control and autonomous implementation system provided by the present invention, it includes setting multi-level risk level modes of good energy, energy warning, energy crisis, and energy critical, judging different risk level modes through the satellite life status, satellite health status, battery pack power, battery pack voltage, and battery pack temperature, and executing relevant operations. The satellite risk level mode judgment threshold is modified by inscribing numbers on the ground; the implementation process includes:

[0033] Module M1: Determine the satellite's life status and set the satellite life status word;

[0034] Module M2: Determine the satellite's health status and set the satellite health status word;

[0035] Module M3: Assign values to the satellite energy security status threshold according to the satellite life status word and the satellite health status word;

[0036] Module M4: Determine and confirm whether to enable the satellite energy risk program control;

[0037] Module M5: Determine and confirm whether the voltmeter program control is allowed. If allowed, the voltmeter participates in the program control. If not allowed, only the battery pack voltage participates in the program control, so as to realize the multi-level autonomous control of satellite energy risk.

[0038] Preferably, when the voltmeter is allowed to participate in the program control, the multi-level autonomous control process of satellite energy is as follows:

[0039] Module M5.1: Detect the current calculated value of the electric quantity and the battery pack voltage value and assign values. Continuously detect and compare the current calculated value of the electric quantity and the battery pack voltage value for 5s. If both meet the requirements of the good energy threshold and it is determined that the satellite energy status word is good energy, the satellite broadcasts the current satellite energy status word of good energy; if it is determined that the satellite energy status word is not good energy, continuously detect whether the satellite battery pack temperature meets the threshold for 5s. If the threshold is met, the satellite broadcasts the current satellite energy status word of good energy; if the battery pack temperature threshold is not met, implement the battery pack heat preservation operation, and broadcast the current satellite energy status word of good energy after meeting the requirements;

[0040] Module M5.2: Detect the current calculated value of the electric quantity and the battery pack voltage value and assign values. Continuously detect and compare whether the current calculated value of the electric quantity and the battery pack voltage value meet the requirements of the energy warning threshold for 5s. If the requirements are met, insert and execute the energy warning mode program control instruction and broadcast that the satellite energy status is energy warning;

[0041] Module M5.3: Detect the current battery pack voltage value and assign values. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy crisis threshold for 5s. If the requirements are met, insert and execute the energy crisis mode program control instruction and broadcast that the satellite energy status is energy crisis;

[0042] Module M5.4: Detect the current battery pack voltage value and assign values. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy critical threshold for 5s. If the requirements are met, insert and execute the energy critical mode program control instruction and broadcast that the satellite energy status is energy critical.

[0043] Preferably, when the voltmeter is not allowed to participate in the program control, the multi-level autonomous control process of satellite energy is as follows:

[0044] Module M5.5: Detect the current battery pack voltage value and assign a value. Continuously detect and compare the current battery pack voltage value for 5 seconds. If the requirements of the good energy threshold are met simultaneously and it is determined that the satellite energy status word is in a good energy state, then the satellite broadcasts that the current energy status word of the satellite is in a good energy state; if it is determined that the satellite energy status word is not in a good energy state, then continuously detect for 5 seconds whether the satellite battery pack temperature meets the threshold. If the threshold is met, then the satellite broadcasts that the current energy status word of the satellite is in a good energy state. If the battery pack temperature threshold is not met, then implement the battery pack heat preservation operation, and after meeting the requirements, broadcast that the current energy status word of the satellite is in a good energy state;

[0045] Module M5.6: Detect the current battery pack voltage value and assign a value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy warning threshold for 5 seconds. If the requirements are met, then insert and execute the energy warning mode program control instruction and broadcast that the satellite energy status is in an energy warning;

[0046] Module M5.7: Detect the current battery pack voltage value and assign a value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, then insert and execute the energy crisis mode program control instruction and broadcast that the satellite energy status is in an energy crisis;

[0047] Module M5.8: Detect the current battery pack voltage value and assign a value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy critical threshold for 5 seconds. If the requirements are met, then insert and execute the energy critical mode program control instruction and broadcast that the satellite energy status is in an energy critical.

[0048] Preferably, the satellite life status word setting includes the initial stage, the middle stage, and the end stage;

[0049] The satellite health status word setting includes satellite normal, open circuit fault of battery cell n in the satellite battery pack, and short circuit fault of battery cell n in the satellite battery;

[0050] The satellite energy safety status thresholds include good energy U4, energy warning U3, energy crisis U2, energy critical U1, battery temperature T, and power threshold UQ;

[0051] The satellite energy threshold includes the threshold of a single battery pack or multiple battery packs;

[0052] Both the satellite energy threshold and the satellite status word can be modified by note numbers.

[0053] Preferably, the set value of the lithium-ion battery pack U4 is achieved in a manner not less than 4.1V×n; the set value of the lithium-ion battery pack U3 is achieved in a manner not less than 3.6V×n; the set value of the lithium-ion battery pack U2 is achieved in a manner not less than 3.4V×n; the set value of the lithium-ion battery pack U1 is achieved in a manner not less than 3.2V×n; the set value of the temperature T of the lithium-ion battery pack is not less than 11°C; the set value of the capacity UQ of the lithium-ion battery pack is achieved in a manner not less than 61% of the rated battery pack capacity Q of the satellite.

[0054] Compared with the prior art, the present invention has the following beneficial effects:

[0055] Based on the current satellite energy risk level mode, the present invention introduces the judgment of the life state of the satellite battery pack, the health state of the satellite, the battery pack power, and the battery pack temperature, subdivides the satellite energy control level, allows the setting of the battery pack capacity and voltage according to the degradation situation during different life periods of the long-life satellite battery pack, allows the setting of the battery pack capacity and voltage in the case of a single cell failure of the satellite battery pack, has practical value for ensuring satellite energy safety and increasing satellite life, greatly increases the rescue time in the case of satellite energy failure, reduces the probability of misjudgment in satellite energy safety management, and improves the reliability of satellite energy safety management. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] By reading the following detailed description of the non-limiting embodiments with reference to the accompanying drawings, other features, objects, and advantages of the present invention will become more apparent:

[0057] Figure 1 It is a logic flowchart of the autonomous implementation method for multi-level control of satellite energy risk in an embodiment of the present invention;

[0058] Figure 2 It is a schematic diagram of satellite energy risk management in an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0059] The present invention will be described in detail below with reference to specific embodiments. The following embodiments will help those skilled in the art to further understand the present invention, but do not limit the present invention in any form. It should be noted that those of ordinary skill in the art can make several changes and improvements without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0060] Embodiment 1:

[0061] According to the satellite energy risk multi - level control autonomous implementation method provided by the present invention, it includes setting multi - level risk level modes of good energy, energy warning, energy crisis, and energy criticality. Different risk level modes are judged through the satellite life state, satellite health state, battery pack power, battery pack voltage, and battery pack temperature, and relevant operations are executed. The satellite risk level mode judgment threshold is modified through ground injection. The implementation method includes: Step 1: Judge the satellite life state and set the satellite life state word; Step 2: Judge the satellite health state and set the satellite health state word; Step 3: Assign values to the satellite energy safety state threshold according to the satellite life state word and the satellite health state word; Step 4: Judge and confirm whether to enable satellite energy risk program control; Step 5: Judge and confirm whether the wattmeter program control is allowed. If allowed, the wattmeter participates in the program control. If not allowed, only the battery pack voltage participates in the program control, thereby realizing multi - level autonomous control of satellite energy risk.

[0062] When the wattmeter is allowed to participate in the program control, the multi - level autonomous control process of satellite energy is as follows: Step 5.1: Detect and assign the current wattmeter calculated value and the battery pack voltage value. Continuously detect and compare the current wattmeter calculated value and the battery pack voltage value for 5 seconds. If both meet the requirements of the good energy threshold and it is judged that the satellite energy state word is good energy, the satellite broadcasts the current satellite energy state word of good energy; if it is judged that the satellite energy state word is not good energy, continuously detect whether the satellite battery pack temperature meets the threshold for 5 seconds. If it meets the threshold, the satellite broadcasts the current satellite energy state word of good energy; if it does not meet the battery pack temperature threshold, implement the battery pack heat preservation operation, and broadcast the current satellite energy state word of good energy after meeting the requirements; Step 5.2: Detect and assign the current wattmeter calculated value and the battery pack voltage value. Continuously detect and compare whether the current wattmeter calculated value and the battery pack voltage value meet the requirements of the energy warning threshold for 5 seconds. If the requirements are met, insert and execute the energy warning mode program control instruction and broadcast the satellite energy state as energy warning; Step 5.3: Detect and assign the current battery pack voltage value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, insert and execute the energy crisis mode program control instruction and broadcast the satellite energy state as energy crisis; Step 5.4: Detect and assign the current battery pack voltage value. Continuously detect and compare whether the current battery pack voltage value meets the requirements of the energy criticality threshold for 5 seconds. If the requirements are met, insert and execute the energy criticality mode program control instruction and broadcast the satellite energy state as energy criticality.

[0063] When the battery charger is not allowed to participate in program control, the multi-level autonomous control process of satellite energy is as follows: Step 5.5: Detect and assign the current voltage value of the battery pack, continuously detect and compare the current voltage value of the battery pack for 5 seconds. If the requirements of the good energy threshold are met simultaneously and it is determined that the satellite energy status word is good energy, the satellite broadcasts the current satellite energy status word of good energy; if it is determined that the satellite energy status word is not good energy, continuously detect whether the temperature of the satellite battery pack meets the threshold for 5 seconds. If the threshold is met, the satellite broadcasts the current satellite energy status word of good energy. If the battery pack temperature threshold is not met, implement the battery pack heat preservation operation, and broadcast the current satellite energy status word of good energy after meeting the requirements; Step 5.6: Detect and assign the current voltage value of the battery pack, continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy warning threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy warning mode and broadcast the satellite energy status as energy warning; Step 5.7: Detect and assign the current voltage value of the battery pack, continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy crisis mode and broadcast the satellite energy status as energy crisis; Step 5.8: Detect and assign the current voltage value of the battery pack, continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy critical threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy critical mode and broadcast the satellite energy status as energy critical.

[0064] The setting of the satellite life status word includes the initial stage, the middle stage, and the end stage; the setting of the satellite health status word includes satellite normal, open circuit fault of satellite battery pack monomer n, and short circuit fault of satellite battery monomer n; the satellite energy safety status thresholds include good energy U4, energy warning U3, energy crisis U2, energy critical U1, battery temperature T, and power threshold UQ; the satellite energy thresholds include single-group or multi-group battery pack thresholds; both the satellite energy thresholds and the satellite status words can be modified by annotation. The setting value of U4 for the lithium-ion battery pack is achieved in the way of not less than 4.1V×n; the setting value of U3 for the lithium-ion battery pack is achieved in the way of not less than 3.6V×n; the setting value of U2 for the lithium-ion battery pack is achieved in the way of not less than 3.4V×n; the setting value of U1 for the lithium-ion battery pack is achieved in the way of not less than 3.2V×n; the setting value of the temperature T of the lithium-ion battery pack is not less than 11°C; the setting value of the capacity UQ of the lithium-ion battery pack is achieved in the way of not less than 61% of the rated battery pack capacity Q of the satellite.

[0065] The satellite energy risk multi - level control autonomous implementation system provided by the present invention includes setting multi - level risk level modes of good energy, energy warning, energy crisis, and energy criticality. It judges different risk level modes through the satellite life state, satellite health state, battery pack power, battery pack voltage, and battery pack temperature, and executes relevant operations. The judgment threshold of the satellite risk level mode is modified by ground injection. The implementation process includes: Module M1: Judging the satellite life state and setting the satellite life state word; Module M2: Judging the satellite health state and setting the satellite health state word; Module M3: Assigning values to the satellite energy safety state threshold according to the satellite life state word and the satellite health state word; Module M4: Judging and confirming whether to enable the satellite energy risk program control; Module M5: Judging and confirming whether the watt - hour meter program control is allowed. If allowed, the watt - hour meter participates in the program control. If not allowed, only the battery pack voltage participates in the program control, so as to realize the multi - level autonomous control of satellite energy risk.

[0066] When the watt - hour meter is allowed to participate in the program control, the multi - level autonomous control process of satellite energy is as follows: Module M5.1: Detecting and assigning the current watt - hour calculation value and the battery pack voltage value, continuously detecting and comparing the current watt - hour calculation value and the battery pack voltage value for 5 s. If both meet the requirements of the good energy threshold and it is judged that the satellite energy state word is good energy, the satellite broadcasts the current satellite energy state word of good energy; If it is judged that the satellite energy state word is not good energy, continuously detect whether the satellite battery pack temperature meets the threshold for 5 s. If it meets the threshold, the satellite broadcasts the current satellite energy state word of good energy; If the battery pack temperature threshold is not met, implement the battery pack heat preservation operation, and broadcast the current satellite energy state word of good energy after meeting the requirements; Module M5.2: Detecting and assigning the current watt - hour calculation value and the battery pack voltage value, continuously detecting and comparing whether the current watt - hour calculation value and the battery pack voltage value simultaneously meet the requirements of the energy warning threshold for 5 s. If the requirements are met, insert and execute the energy warning mode program control instruction and broadcast the satellite energy state as energy warning; Module M5.3: Detecting and assigning the current battery pack voltage value, continuously detecting and comparing whether the current battery pack voltage value meets the requirements of the energy crisis threshold for 5 s. If the requirements are met, insert and execute the energy crisis mode program control instruction and broadcast the satellite energy state as energy crisis; Module M5.4: Detecting and assigning the current battery pack voltage value, continuously detecting and comparing whether the current battery pack voltage value meets the requirements of the energy criticality threshold for 5 s. If the requirements are met, insert and execute the energy criticality mode program control instruction and broadcast the satellite energy state as energy criticality.

[0067] When the battery meter is not allowed to participate in program control, the multi-level autonomous control process of satellite energy is as follows: Module M5.5: Detect and assign the current voltage value of the battery pack, continuously detect and compare the current voltage value of the battery pack for 5 seconds. If the requirements of the good energy threshold are met at the same time and it is judged that the satellite energy status word is good energy, the satellite broadcasts the current energy status word of the satellite as good energy; if it is judged that the satellite energy status word is not good energy, continuously detect whether the temperature of the satellite battery pack meets the threshold for 5 seconds. If the threshold is met, the satellite broadcasts the current energy status word of the satellite as good energy. If the battery pack temperature threshold is not met, perform the battery pack heat preservation operation, and broadcast the current energy status word of the satellite as good energy after meeting the requirements; Module M5.6: Detect and assign the current voltage value of the battery pack, continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy warning threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy warning mode and broadcast the satellite energy status as energy warning; Module M5.7: Detect and assign the current voltage value of the battery pack, continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy crisis mode and broadcast the satellite energy status as energy crisis; Module M5.8: Detect and assign the current voltage value of the battery pack, continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy critical threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy critical mode and broadcast the satellite energy status as energy critical.

[0068] The setting of the satellite life status word includes the initial stage, the middle stage, and the end stage; the setting of the satellite health status word includes satellite normal, open circuit fault of single cell n of the satellite battery pack, and short circuit fault of single battery n of the satellite; the satellite energy safety status thresholds include good energy U4, energy warning U3, energy crisis U2, energy critical U1, battery temperature T, and power threshold UQ; the satellite energy thresholds include single-group or multi-group battery pack thresholds; both the satellite energy thresholds and the satellite status words can be modified by annotation. The setting value of U4 of the lithium-ion battery pack is implemented in a way that is not less than 4.1V×n; the setting value of U3 of the lithium-ion battery pack is implemented in a way that is not less than 3.6V×n; the setting value of U2 of the lithium-ion battery pack is implemented in a way that is not less than 3.4V×n; the setting value of U1 of the lithium-ion battery pack is implemented in a way that is not less than 3.2V×n; the setting value of the temperature T of the lithium-ion battery pack is not less than 11°C; the setting value of the capacity UQ of the lithium-ion battery pack is implemented in a way that is not less than 61% of the rated battery pack capacity Q of the satellite.

[0069] Example 2:

[0070] Example 2 is the preferred example of Example 1.

[0071] Such as Figure 1 、 Figure 2As shown in the figure, the present invention provides a method for autonomously realizing multi-level control of satellite energy risks, including: setting multi-level risk level modes of good energy, energy warning, energy crisis, and energy criticality, judging different risk level modes through satellite life status, satellite health status, battery pack power, battery pack voltage, and battery pack temperature, and performing relevant operations. The satellite risk level mode judgment threshold can be modified by ground injection. The following takes a certain satellite as an example for further explanation.

[0072] Set the satellite life status word to the initial stage of life;

[0073] Set the satellite health status word to satellite normal;

[0074] Set the initial thresholds of the satellite U4A, U4B, U3A, U3B, U2A, U2B, U1A, U1B, T, UQA, UQB;

[0075] The integrated electronic management unit uses software to control the recharge and heat preservation of the whole satellite: when the battery pack voltage value is greater than U4A and U4B (the initial value is 4.1V×7), and the average value of the temperatures of the two battery packs 1 and 2 is higher than T (the initial value is 11°C, and obvious too large or too small temperature values should be excluded when judging the temperature), it is judged that the whole satellite is in a good energy state, and the recharge and heat preservation operation is performed when recovering from the energy crisis or energy saving state to the good energy state.

[0076] When the energy safety management is allowed, the integrated electronic system software judges and calculates the current power values of battery packs A and B, monitors the voltage values of battery packs A and B, and compares them with the preset threshold values respectively to diagnose the current energy health status of the whole satellite:

[0077] When the following 4 conditions are simultaneously met, the whole satellite is in a good energy state:

[0078] 1) When the current power of battery pack A is higher than the power threshold, that is, the current power of battery pack A UQa≥UQA;

[0079] 2) When the voltage of battery pack A is higher than the saving threshold, that is, the voltage of battery pack A≥U3A;

[0080] 3) When the current power of battery pack B is higher than the power threshold, that is, the current power of battery pack B UQb≥UQB;

[0081] 4) When the voltage of battery pack B is higher than the saving threshold, that is, the voltage of battery pack B≥U3B;

[0082] When only condition 1 and condition 2 are simultaneously met, or only condition 3 and condition 4 are simultaneously met, the whole satellite is in an energy crisis state, and some devices are turned off to enter the minimum energy mode, otherwise the good energy state is maintained:

[0083] 1) When the current power of the battery in Group A is continuously lower than the power threshold for 5 seconds, i.e., the current power UQa of Group A < UQA;

[0084] 2) When the voltage value of the battery in Group A is continuously lower than the warning threshold for 5 seconds, i.e., the voltage of the battery in Group A < U3A;

[0085] 3) When the current power of the battery in Group B is continuously lower than the power threshold for 5 seconds, i.e., the current power UQb of Group B < UQB;

[0086] 4) When the voltage value of the battery in Group B is continuously lower than the warning threshold for 5 seconds, i.e., the voltage of the battery in Group B < U3B;

[0087] Judge the energy. When the following Condition 1 or Condition 2 is met, the entire satellite is in an energy crisis state:

[0088] 1) When the voltage value of the battery in Group A is continuously lower than the crisis threshold for 5 seconds, i.e., the voltage of the battery in Group A < U2A;

[0089] 2) When the voltage value of the battery in Group B is continuously lower than the crisis threshold for 5 seconds, i.e., the voltage of the battery in Group B < U2B;

[0090] After the entire satellite is in an energy crisis, continue to judge the energy. When the following Condition 1 or Condition 2 is met, the entire satellite is in an energy critical state, and the integrated electronics sends the enable permission instruction for undervoltage protection of Batteries A and B:

[0091] 1) When the voltage value of the battery in Group A is continuously lower than the critical threshold for 5 seconds, i.e., the voltage of the battery in Group A < U1A;

[0092] 2) When the voltage value of the battery in Group B is continuously lower than the critical threshold for 5 seconds, i.e., the voltage of the battery in Group B < U1B.

[0093] Those skilled in the art know that in addition to implementing the systems, devices, and their respective modules provided by the present invention in the form of pure computer-readable program codes, the method steps can be logically programmed to enable the systems, devices, and their respective modules provided by the present invention to be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers, etc. to achieve the same program. Therefore, the systems, devices, and their respective modules provided by the present invention can be considered as a kind of hardware component, and the modules included therein for implementing various programs can also be regarded as the structures within the hardware component; the modules for implementing various functions can also be regarded as either software programs for implementing the method or the structures within the hardware component.

[0094] The specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which does not affect the essence of the present invention. Without conflict, the embodiments of the present application and the features in the embodiments can be combined with each other arbitrarily.

Claims

1. An autonomous implementation method for multi-level control of satellite energy risk, characterized in that, It includes setting multi - level risk - level modes such as good energy, energy warning, energy crisis, and energy criticality. For different risk - level modes, it judges through satellite life status, satellite health status, battery pack power, battery pack voltage, and battery pack temperature, and performs relevant operations. The judgment threshold of the satellite risk - level mode is modified through ground injection. The implementation method includes: Step 1: Judge the satellite life status and set the satellite life - status word; Step 2: Judge the satellite health status and set the satellite health - status word; Step 3: Assign values to the satellite energy - security - status thresholds according to the satellite life - status word and the satellite health - status word; Step 4: Judge and confirm whether to enable satellite energy - risk program control; Step 5: Judge and confirm whether the watt - hour meter program control is allowed. If allowed, the watt - hour meter participates in the program control. If not allowed, only the battery - pack voltage participates in the program control, so as to realize multi - level autonomous control of satellite energy risk; When the watt - hour meter is allowed to participate in the program control, the process of multi - level autonomous control of satellite energy is as follows: Step 5.1: Detect the current calculated power value and the battery - pack voltage value and assign values. Continuously detect and compare the current calculated power value and the battery - pack voltage value for 5 s. If both meet the requirements of the good - energy threshold and it is judged that the satellite energy - status word is good energy, the satellite broadcasts the current satellite energy - status word of good energy; if it is judged that the satellite energy - status word is not good energy, continuously detect whether the satellite battery - pack temperature meets the threshold for 5 s. If it meets the threshold, the satellite broadcasts the current satellite energy - status word of good energy; if it does not meet the battery - pack temperature threshold, implement the battery - pack heat - preservation operation, and broadcast the current satellite energy - status word of good energy after meeting the requirements; Step 5.2: Detect the current calculated power value and the battery - pack voltage value and assign values. Continuously detect and compare whether the current calculated power value and the battery - pack voltage value simultaneously meet the requirements of the energy - warning threshold for 5 s. If they meet the requirements, insert and execute the energy - warning - mode program - control instruction and broadcast that the satellite energy status is energy warning; Step 5.3: Detect the current battery - pack voltage value and assign values. Continuously detect and compare whether the current battery - pack voltage value meets the requirements of the energy - crisis threshold for 5 s. If it meets the requirements, insert and execute the energy - crisis - mode program - control instruction and broadcast that the satellite energy status is energy crisis; Step 5.4: Detect the current battery - pack voltage value and assign values. Continuously detect and compare whether the current battery - pack voltage value meets the requirements of the energy - criticality threshold for 5 s. If it meets the requirements, insert and execute the energy - criticality - mode program - control instruction and broadcast that the satellite energy status is energy criticality.

2. The autonomous implementation method for multi-level control of satellite energy risk according to claim 1, characterized in that, When the watt - hour meter is not allowed to participate in the program control, the process of multi - level autonomous control of satellite energy is as follows: Step 5.5: Detect the current battery - pack voltage value and assign values. Continuously detect and compare the current battery - pack voltage value for 5 s. If both meet the requirements of the good - energy threshold and it is judged that the satellite energy - status word is good energy, the satellite broadcasts the current satellite energy - status word of good energy; If it is determined that the satellite energy status word is not in good energy condition, continuously detect whether the temperature of the satellite battery pack meets the threshold for 5 seconds. If it meets the threshold, the satellite broadcasts that the current satellite energy status word is in good energy condition. If it does not meet the battery pack temperature threshold, perform the battery pack heat preservation operation, and broadcast that the current satellite energy status word is in good energy condition after meeting the requirements; Step 5.6: Detect and assign the current battery pack voltage value, and continuously detect and compare whether the current battery pack voltage value meets the energy warning threshold requirements for 5 seconds. If the requirements are met, insert and execute the energy warning mode program control instruction and broadcast that the satellite energy status is energy warning; Step 5.7: Detect and assign the current battery pack voltage value, and continuously detect and compare whether the current battery pack voltage value meets the energy crisis threshold requirements for 5 seconds. If the requirements are met, insert and execute the energy crisis mode program control instruction and broadcast that the satellite energy status is energy crisis; Step 5.8: Detect and assign the current battery pack voltage value, and continuously detect and compare whether the current battery pack voltage value meets the energy critical threshold requirements for 5 seconds. If the requirements are met, insert and execute the energy critical mode program control instruction and broadcast that the satellite energy status is energy critical.

3. The autonomous implementation method for multi-level control of satellite energy risk according to claim 1, characterized in that, The satellite life status word setting includes the initial stage, the middle stage, and the final stage; The satellite health status word setting includes satellite normal, open circuit fault of satellite battery pack monomer n, and short circuit fault of satellite battery monomer n; The satellite energy safety status thresholds include good energy U4, energy warning U3, energy crisis U2, energy critical U1, battery temperature T, and power threshold UQ; The satellite energy threshold includes the threshold of single or multiple battery packs; Both the satellite energy threshold and the satellite status word can be modified by injecting numbers.

4. The autonomous implementation method for multi-level control of satellite energy risk according to claim 3, characterized in that, The setting value of U4 for the lithium-ion battery pack is achieved by not less than 4.1V×n; the setting value of U3 for the lithium-ion battery pack is achieved by not less than 3.6V×n; the setting value of U2 for the lithium-ion battery pack is achieved by not less than 3.4V×n; the setting value of U1 for the lithium-ion battery pack is achieved by not less than 3.2V×n; the setting value of the lithium-ion battery pack temperature T is not less than 10°C; the setting value of the lithium-ion battery pack capacity UQ is achieved by not less than 60% of the satellite rated battery pack capacity Q; 5. A system for autonomous implementation of multi-level control of satellite energy risk, characterized in that, It includes setting multi-level risk level modes such as good energy, energy warning, energy crisis, and energy critical, judging different risk level modes through the satellite life status, satellite health status, battery pack power, battery pack voltage, and battery pack temperature, and performing relevant operations. The satellite risk level mode judgment threshold is modified by ground injection of numbers; The implementation process includes: Module M1: Judge the satellite life status and set the satellite life status word; Module M2: Judge the satellite health status and set the satellite health status word; Module M3: Assign values to the satellite energy safety status thresholds according to the satellite life status word and the satellite health status word; Module M4: Judge and confirm whether to enable the satellite energy risk program control; Module M5: Judge and confirm whether the battery meter program control is allowed. If allowed, the battery meter participates in the program control. If not allowed, only the battery pack voltage participates in the program control, so as to realize the multi-level autonomous control of satellite energy risk; When the coulombmeter is allowed to participate in program control, the multi-level autonomous control process of satellite energy is as follows: Module M5.1: Detect the current calculated value of the electricity quantity and the voltage value of the battery pack and assign values. Continuously detect and compare the current calculated value of the electricity quantity and the voltage value of the battery pack for 5 seconds. If the requirements of the good energy threshold are met simultaneously and it is determined that the satellite energy status word is good energy, the satellite broadcasts the current satellite energy status word of good energy; if it is determined that the satellite energy status word is not good energy, continuously detect whether the temperature of the satellite battery pack meets the threshold for 5 seconds. If the threshold is met, the satellite broadcasts the current satellite energy status word of good energy; if the battery pack temperature threshold is not met, perform the battery pack heat preservation operation, and broadcast the current satellite energy status word of good energy after meeting the requirements; Module M5.2: Detect the current calculated value of the electricity quantity and the voltage value of the battery pack and assign values. Continuously detect and compare whether the current calculated value of the electricity quantity and the voltage value of the battery pack simultaneously meet the requirements of the energy warning threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy warning mode and broadcast the satellite energy status as energy warning; Module M5.3: Detect the current voltage value of the battery pack and assign values. Continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy crisis mode and broadcast the satellite energy status as energy crisis; Module M5.4: Detect the current voltage value of the battery pack and assign values. Continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the critical energy threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the critical energy mode and broadcast the satellite energy status as critical energy.

6. The satellite energy risk multi - level control autonomous implementation system according to claim 5, characterized in that, When the coulombmeter is not allowed to participate in program control, the multi-level autonomous control process of satellite energy is as follows: Module M5.5: Detect the current voltage value of the battery pack and assign values. Continuously detect and compare the current voltage value of the battery pack for 5 seconds. If the requirements of the good energy threshold are met simultaneously and it is determined that the satellite energy status word is good energy, the satellite broadcasts the current satellite energy status word of good energy; If it is determined that the satellite energy status word is not good energy, continuously detect whether the temperature of the satellite battery pack meets the threshold for 5 seconds. If the threshold is met, the satellite broadcasts the current satellite energy status word of good energy. If the battery pack temperature threshold is not met, perform the battery pack heat preservation operation, and broadcast the current satellite energy status word of good energy after meeting the requirements; Module M5.6: Detect the current voltage value of the battery pack and assign values. Continuously detect and compare whether the current voltage value of the battery pack simultaneously meets the requirements of the energy warning threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy warning mode and broadcast the satellite energy status as energy warning; Module M5.7: Detect the current voltage value of the battery pack and assign values. Continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy crisis threshold for 5 seconds. If the requirements are met, insert and execute the program control instruction of the energy crisis mode and broadcast the satellite energy status as energy crisis; Module M5.8: Detect the current voltage value of the battery pack and assign a value. Continuously detect and compare whether the current voltage value of the battery pack meets the requirements of the energy critical threshold for 5 seconds. If the requirements are met, insert and execute the energy critical mode program control instruction and broadcast the satellite energy status as energy critical.

7. The satellite energy risk multi - level control autonomous implementation system according to claim 5, characterized in that, The satellite life status word settings include the initial stage, the middle stage, and the end stage; The satellite health status word settings include satellite normal, open circuit fault of single cell n of the satellite battery pack, and short circuit fault of single cell n of the satellite battery; The satellite energy safety status thresholds include good energy U4, energy warning U3, energy crisis U2, energy critical U1, battery temperature T, and power threshold UQ; The satellite energy threshold includes the threshold of single or multiple battery packs; Both the satellite energy threshold and the satellite status word can be modified by note number.

8. The satellite energy risk multi - level control autonomous implementation system according to claim 7, characterized in that, The setting value of U4 for the lithium-ion battery pack is achieved by not less than 4.1V×n; the setting value of U3 for the lithium-ion battery pack is achieved by not less than 3.6V×n; the setting value of U2 for the lithium-ion battery pack is achieved by not less than 3.4V×n; the setting value of U1 for the lithium-ion battery pack is achieved by not less than 3.2V×n; the setting value of the temperature T of the lithium-ion battery pack is not less than 10°C; the setting value of the capacity UQ of the lithium-ion battery pack is achieved by not less than 60% of the satellite rated battery pack capacity Q.

Images