A reliable separation system and method for separating a service space separated load

By designing a reliable separation system consisting of an electrical separation connector, a cutter, an anti-drop pyrotechnic lock, and a power supply/charging management module, the problem of cable separation caused by vacuum cold welding was solved. This system enables safe and reliable separation and power supply management of the separation load from the satellite platform, adapting to satellite platforms with different voltage levels.

CN116620575BActive Publication Date: 2026-06-23BEIJING INST OF SPACECRAFT SYST ENG +1

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
BEIJING INST OF SPACECRAFT SYST ENG
Filing Date
2023-07-07
Publication Date
2026-06-23

AI Technical Summary

Technical Problem

During long-term on-orbit storage of traditional spacecraft, vacuum cold welding causes cable pins and sockets to be cold-welded together, making it impossible for electrical separation connectors to achieve electrical separation, which affects the safe and reliable separation of the separation payload from the satellite platform.

Method used

Design a reliable separation system for service space separation loads, including an electrical separation connector, a cutter, an anti-detachment pyrotechnic lock, a power supply/charging management module, and a separation controller. The electrical separation connector enables primary separation, the cutter serves as a backup, the anti-detachment pyrotechnic lock prevents loosening, the power supply/charging management module manages charging and power supply, and the separation controller performs control.

Benefits of technology

It ensures the safe and reliable separation of the payload from the satellite platform, prevents cable cutting from affecting the overall satellite structure and power supply, and is compatible with satellite platforms of different voltage levels, thus possessing versatility.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116620575B_ABST
    Figure CN116620575B_ABST
Patent Text Reader

Abstract

The application provides a reliable separation system and method for separating a service space load, which comprises an electrical separation connector, a cutter, an anti-falling pyrotechnic lock, a power supply / charge management module and a separation controller; the electrical separation connector is a main means for realizing electrical separation of a satellite platform and a separation load; the cutter is a backup means for realizing electrical separation of the satellite platform and the separation load, and is used for cutting a cable to realize separation when the electrical separation connector cannot normally separate; the anti-falling pyrotechnic lock is used for connecting a plug and a socket of the electrical separation connector; the power supply / charge management module is used for managing charging and power supply of the separation load; and the separation controller is used for controlling the electrical separation connector, the cutter and the anti-falling pyrotechnic lock. The application aims at the problem that the traditional electrical separation connector cannot normally separate due to vacuum cold welding of the separation load in long-term on-orbit, and ensures reliable separation by designing the cutter as a backup means.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of space power technology, and in particular to a reliable separation system and method for serving space separation payloads. Background Technology

[0002] With the continuous emergence of user demands and the constant innovation of spacecraft application scenarios, new types of missions with separable payloads have begun to appear. These payloads typically need to ensure that they can safely and reliably separate from the satellite platform after several years of operation in orbit. After separation, the satellite platform can continue to work and provide support for the separated payload. The separated payload itself has an energy storage unit that enables it to work independently for a period of time after separation.

[0003] Traditional multi-module spacecraft typically use electrical separation connectors to achieve electrical separation between modules. However, the time interval between launch and separation is usually short for such spacecraft, with the longest being less than a year for the Tianwen-1 Mars probe. The risk of electrical separation between the separated payload and the satellite platform's power and communication cables due to vacuum welding is not significant. However, separated payloads often need to be stored in orbit on the satellite platform for five years or longer. Vacuum welding can cause the electrical cable pins and sockets between the platform and the separated payload to become welded together, potentially rendering the electrical separation connectors ineffective in achieving electrical separation.

[0004] Therefore, for new types of spacecraft that store separated payloads in orbit for a long time, it is necessary to design a reliable separation system for separating payloads in space to ensure the safe and reliable separation of payloads and platforms. Summary of the Invention

[0005] The main objective of this invention is to provide a reliable separation system and method for service space separation payloads, aiming to achieve safe and reliable separation of the separation payloads from the satellite platform.

[0006] To achieve the above objectives, the present invention proposes a reliable separation system for service space separation loads, comprising: an electrical separation connector, a cutter, an anti-drop pyrotechnic lock, a power supply / charging management module, and a separation controller;

[0007] The electrically disconnecting connector is the primary means of achieving electrical separation between the satellite platform and the separated payload, while the cutter is a backup means of achieving electrical separation between the satellite platform and the separated payload. The cutter is used to cut the cable to achieve separation when the electrically disconnecting connector cannot be properly disconnected.

[0008] The anti-dislodgement pyrotechnic lock is used to connect the plug and socket of the electrical separation connector to prevent the plug of the electrical separation connector, which has become loose after the separation load is separated, from colliding with the satellite platform or the separation load.

[0009] The power supply / charging management module is used to manage the charging and power supply of the separated load, so as to charge or supply power to the separated load before separation.

[0010] The separation controller is used to control the electrical separation connector, the cutter, and the anti-dislodgement fire lock.

[0011] A further technical solution of the present invention is that the electrically detachable connector includes the socket, the plug, and a locking mechanism. The socket is fixedly installed on the detachable load end, the plug is flexibly installed on the satellite platform end, and the locking mechanism is used for fastening and separating the plug and the socket.

[0012] A further technical solution of the present invention is that the cutter is fixedly installed at the satellite platform end and is used to cut the cable at the rear end of the plug of the electrical separation connector when the separation load cannot be separated normally.

[0013] A further technical solution of the present invention is that the anti-dislodgement fire lock is installed at both ends of the plug and socket of the electrical separation connector, with a certain amount of room for movement during installation, so as to connect the plug and socket of the electrical separation connector;

[0014] When the separation load has been properly separated, the anti-drop pyrotechnic lock is detonated, and the plug and socket of the electrical separation connector are disconnected.

[0015] If the electrical disconnect connector fails to disconnect properly, there is a risk that the plug of the electrical disconnect connector may become loose after the cutter cuts the cable. The anti-dislodgement pyrotechnic lock keeps the plug and socket of the electrical disconnect connector connected.

[0016] A further technical solution of the present invention is that the power supply / charging management module is a four-switch topology architecture.

[0017] A further technical solution of the present invention is that the power supply / charging management module includes MOSFETs g1, g2, g3, and g4, an inductor, and two capacitors, wherein;

[0018] When the bus voltage of the satellite platform is higher than the energy storage unit voltage of the separated load, the power supply / charging management module operates in buck mode, MOSFET g3 is normally open, MOSFET g4 is normally closed, and MOSFET g1 and MOSFET g2 are mutually exclusive.

[0019] When the bus voltage of the satellite platform is lower than the energy storage unit voltage of the separated load, the power supply / charging management module operates in boost mode, MOSFET g1 is normally open, MOSFET g2 is normally closed, and MOSFET g3 and MOSFET g4 are mutually exclusive and switched off.

[0020] When the bus voltage of the satellite platform is equal to the energy storage unit voltage of the separated load, MOSFETs g1 and g3 are normally on, while MOSFETs g2 and g4 are normally off.

[0021] When in fault mode, MOSFETs g1, g2, g3, and g4 are normally off.

[0022] A further technical solution of the present invention is that the control logic of the power supply / charging management module when operating in charging mode is as follows:

[0023] (a) When the charging current I charge Less than or equal to 1.5 times the maximum current i that the battery can withstand ref At the same time, the battery voltage V in Greater than the minimum battery voltage V bat_low At this time, the separation controller enters the charging control state: the energy storage unit voltage reference U ref Real-time voltage U of the energy storage unit bat The comparison is performed and passed through a PI regulator, whose output is compared with the maximum charging current i that the energy storage unit can receive. ref Perform the minimum value operation, and the result of the minimum value operation is compared with the real-time charging current I of the energy storage unit. charge The comparison is performed, and a pulse width modulation (PWM) waveform is generated using a PI regulator.

[0024] (b) When the charging current I charge Greater than 1.5 times the maximum current i that the battery can withstand ref Or the battery voltage V in Less than or equal to the minimum battery voltage V bat_low When the separation controller enters a short-circuit fault or undervoltage fault mode, MOSFETs g1, g2, g3 and g4 are all in the off state.

[0025] (c) When the battery is fully charged, i.e., I charge When the current is less than 0.01A, the battery charging is complete, and the MOSFETs g1, g2, g3 and g4 of the separation controller are in the off state.

[0026] A further technical solution of the present invention is that the control logic of the power supply / charging management module when operating in power supply mode is as follows:

[0027] (a) When the bus current I of the disconnected load bus_R Less than or equal to 1.5 times the maximum current i that the load can withstand bus_ref At the same time, the bus voltage V bus_R Greater than the safe supply voltage V bus x low At that time, the bus voltage Vbus_R With the power supply safety voltage V bus_low The output of the comparison is passed through a PI regulator and its value is compared with the disconnected load bus current I. bus_R Comparison and PI operations are performed to form a pulse width modulation (PWM) waveform;

[0028] (b) When the bus current I bus_R The maximum current i that can be withstood is greater than 1.5 times the load. bus_ref Or bus voltage V bus_R Below the safe supply voltage V bus_low When the separation controller enters a short-circuit fault or undervoltage fault mode, MOSFETs g1, g2, g3 and g4 are all in the off state.

[0029] A further technical solution of the present invention is that the separate payload includes payload electrical equipment and energy storage unit, and a unidirectional diode is designed at the power supply and charging interface between the separate payload and the satellite platform.

[0030] To achieve the above objectives, the present invention also proposes a reliable separation method for service space separation payloads, the method comprising the following steps:

[0031] Before the load needs to be separated, the power supply / charging module enters charging mode and checks whether the charging current of the separated load energy storage unit meets the I... charge A current of <0.01A is used to determine if the battery is fully charged.

[0032] If fully charged, it will begin supplying power to the isolated load, and the power supply / charging module will enter power supply mode.

[0033] When load separation is required, the power supply / charging module enters the disconnect state, and the electrical separation connector performs electrical separation.

[0034] The satellite platform detects the platform separation status signal. If separation is not completed, the cable is cut using a cutter.

[0035] If separation is completed, the anti-detachment pyrotechnic lock is detonated, causing the connector plug and socket to disconnect from the flexible connection.

[0036] The beneficial effects of the reliable separation system and method for service space separation payloads of the present invention are:

[0037] (1) This invention addresses the problem that vacuum cold welding may occur when the separation load is on the track for a long time, which may prevent traditional electrical separation connectors from performing normal electrical separation. It designs a cutter as a backup method to ensure reliable separation.

[0038] (2) This invention proposes a reliable separation system for service space separation loads, including corresponding separation control procedures and fault protection design, which can prevent the impact of cable cutting from harming the overall satellite structure and power supply safety.

[0039] (3) The power supply / charging module proposed in this invention can simultaneously meet the power supply and charging requirements of the separate payload, and can quickly adapt to satellite platforms with different voltage levels, thus having the advantage of versatility. Attached Figure Description

[0040] Figure 1 This is a system architecture diagram of a preferred embodiment of the reliable separation system for service space separation loads of the present invention.

[0041] Figure 2 This is a schematic diagram of the interface design of the electrically disconnecting connector of a preferred embodiment of the reliable separation system for separating loads in service space according to the present invention.

[0042] Figure 3 This is a schematic diagram of the four-switch topology of the power supply / charging management module.

[0043] Figures 4(a) to 4(d) It is a four-switch topology architecture working mode for the power supply / charging management module.

[0044] Figure 5 This is the charging control logic for the power / charging module.

[0045] Figure 6 This is a schematic diagram of the charging control logic of a preferred embodiment of the reliable separation system for service space separation loads of the present invention.

[0046] Figure 7 This is the power supply control logic for the power supply / charging module.

[0047] Figure 8 This is the power supply control logic of a preferred embodiment of the reliable separation system for service space separation loads of the present invention.

[0048] Figure 9 This is a schematic diagram of the reliable separation process of a preferred embodiment of the reliable separation system for service space separation loads of the present invention.

[0049] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. Detailed Implementation

[0050] It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of the invention.

[0051] This invention proposes a reliable separation system for service space separation payloads, such as... Figure 1As shown, a preferred embodiment of the reliable separation system for service space separation loads of the present invention includes an electrical separation connector, a cutter, an anti-drop pyrotechnic lock, a power supply / charging management module, a diode, and a separation controller.

[0052] Among them, the electrical separation connector is the main means of achieving electrical separation between the satellite platform and the separation payload, and the cutter is the backup means of achieving electrical separation between the satellite platform and the separation payload. The cutter is used to cut the cable to achieve separation when vacuum cold welding causes the electrical separation connector to fail to separate normally.

[0053] Anti-drop pyrotechnic locks are used to connect the plug and socket of the electrical disconnect connector to prevent the plug of the loose electrical connector from colliding with the satellite platform or the disconnect load after the disconnect load is separated.

[0054] The power supply / charging management module is used for the charging and power supply management of the separated payload. It can quickly adapt to satellite platforms with different voltage levels and meet the requirement of charging or powering the separated payload before separation.

[0055] The separation controller is used to control the separation connector, cutter, and anti-detachment fire lock, serving as the central control unit for controlling the operation of the electrically separated connector, cutter, and anti-detachment fire lock.

[0056] In this implementation, the electrically disconnecting connector includes a socket, a plug, and a locking mechanism for securing and disconnecting the plug and socket, achieving electrical separation between the satellite platform and the disconnected load. The socket is fixedly installed on the disconnected load end, while the plug is flexibly installed on the satellite platform end, ensuring sufficient travel when the electrically disconnecting socket retracts under force.

[0057] The locking and separating mechanism includes a coil, a push rod component, etc., and is electrically driven for fastening and separating the plug and socket. This installation method minimizes the weight after separation and increases the flexibility after separation.

[0058] This invention provides an electrical interface design, such as... Figure 2 As shown in the diagram, load separation states "+" and "-" are designed at nodes 3 and 4, respectively. These two points are short-circuited at the plug, and the socket signal is sent to the separated load to provide it with a separation detection signal. Platform separation states "+" and "-" are designed at nodes 16 and 9, respectively. These two points are short-circuited at the socket, and the plug signal is sent to the satellite platform to provide it with a separation detection signal. These two signals are designed to be short-circuited, i.e., in a low-impedance state, and to exhibit a high-impedance state after separation, in order to identify the separation status between the platform and the separated load.

[0059] The cutter is a pyrotechnic explosive cutter, including explosive bolts, release nuts, bolt pullers, explosive cutters, and electric explosive valves. The cutter is fixedly installed at the end of the satellite platform and is used to cut the cable at the rear end of the plug of the electric separation connector when the separation load cannot be separated normally.

[0060] The anti-dislodgement fire lock is installed at both ends of the plug and socket of the electric disconnect connector. During installation, a certain amount of movement space is allowed, which serves to connect the plug and socket of the electric disconnect connector.

[0061] When the separation load has been properly separated, the detonation anti-drop pyrotechnic lock and the plug and socket of the electrical separation connector are disconnected.

[0062] If the electrical disconnect connector fails to disconnect properly, there is a risk that the plug of the electrical disconnect connector may become loose after the cutter cuts the cable. To prevent the plug of the loose electrical disconnect connector from colliding with the satellite platform or the disconnect load after the disconnect load is separated, the anti-disconnection pyrotechnic lock keeps the plug and socket of the electrical disconnect connector connected.

[0063] The power supply / charging management module includes a controller and power conversion devices to manage the power supply and charging of discrete payloads, enabling rapid adaptation to satellite platforms with different voltage levels. In this embodiment of the invention, a standardized module based on a four-switch topology is provided for the power supply / charging management module.

[0064] like Figure 3 As shown, the power supply / charging management module includes four MOS switches: MOS transistors g1, g2, g3, and g4, one inductor, and two capacitors.

[0065] When the bus voltage of the satellite platform is higher than the energy storage unit voltage of the separated load, the power supply / charging management module operates in buck mode, MOSFET g3 is normally open, MOSFET g4 is normally closed, and MOSFET g1 and MOSFET g2 are mutually exclusive, as shown in Figure 4(a).

[0066] When the bus voltage of the satellite platform is lower than the energy storage unit voltage of the separated load, the power supply / charging management module operates in boost mode, MOSFET g1 is normally open, MOSFET g2 is normally closed, and MOSFET g3 and MOSFET g4 are mutually exclusive, as shown in Figure 4(b).

[0067] When the bus voltage of the satellite platform is equal to the energy storage unit voltage of the separated load, MOSFETs g1 and g3 are normally on, while MOSFETs g2 and g4 are normally off, as shown in Figure 4(c).

[0068] When in fault mode, MOSFETs g1, g2, g3 and g4 are normally off, as shown in Figure 4(d).

[0069] The control logic of the power supply / charging management module when it is operating in charging mode is as follows: Figure 5 As shown.

[0070] (a) When the charging current I chargeLess than or equal to 1.5 times the maximum current i that the battery can withstand ref At the same time, the battery voltage V in Greater than the minimum battery voltage V bat_low At that time, the separation controller enters as follows Figure 6 In the charging control shown: the energy storage unit voltage reference U ref Real-time voltage U of the energy storage unit bat The comparison is performed and passed through a PI regulator, whose output is compared with the maximum charging current i that the energy storage unit can receive. ref Perform the minimum value operation, and the result of the minimum value operation is compared with the real-time charging current I of the energy storage unit. charge The waveform is compared and then processed by a PI regulator to form a pulse width modulation (PWM) waveform.

[0071] (b) When the charging current I charge Greater than 1.5 times the maximum current i that the battery can withstand ref (At this time, a short circuit fault may occur when the load is disconnected), or the battery voltage V 小 Less than or equal to the minimum battery voltage V bat_low When the controller enters a short-circuit fault or undervoltage fault mode, MOSFETs g1, g2, g3 and g4 are all turned off, as shown in Figure 4(d).

[0072] (c) When the battery is fully charged, i.e., I cbarge When the current is <0.01A, the battery charging ends and the disconnect controller outputs (0, 0, 0, 0), putting MOSFETs g1, g2, g3 and g4 into the off state.

[0073] The control logic of the power supply / charging management module when it is operating in power supply mode is as follows: Figure 7 As shown.

[0074] (a) When the bus current I of the disconnected load bus_R Less than or equal to 1.5 times the maximum current i that the load can withstand bus_ref At the same time, the bus voltage V bus_R Greater than the safe supply voltage V bus_low At that time, the separation controller executes as follows Figure 8 The operation shown converts the bus voltage V bus_R With the power supply safety voltage V bus_low The output of the comparison is passed through a PI regulator and its value is compared with the disconnected load bus current I. bus_R Comparisons and PI operations are performed to form a pulse width modulation (PWM) waveform.

[0075] (b) When the bus current I bus_R The maximum current i that can be withstood is greater than 1.5 times the load.bus_ref (At this time, a short circuit fault may occur in the separated load), or the bus voltage V bus_R Below the safe supply voltage V bus_low When the controller enters a short-circuit fault or undervoltage fault mode, MOSFETs g1, g2, g3 and g4 are all turned off, as shown in Figure 4(d).

[0076] The separate payload includes the payload's electrical equipment and energy storage unit. In this embodiment, considering the potential for a short circuit between the positive and negative wires when the cable is cut with a cutter, a unidirectional diode is designed at the power supply and charging interface between the separate payload and the satellite platform. The diode is installed at the positive power line of the separate payload, so that a short circuit will not occur in the independent power supply of the separate payload if a short circuit occurs when the cable is cut.

[0077] To ensure rapid charging and reliable separation of the separated load, this embodiment presents a power supply separation control program designed in the separation controller, such as... Figure 9 As shown. Before the load needs to be separated, the power supply / charging module enters charging mode to meet the charging requirements of the separated load; and checks whether the charging current of the separated load energy storage unit meets the requirements of I. charge A current of <0.01A is used to determine if the device is fully charged. If fully charged, power is supplied to the separated load, and the power supply / charging module enters power supply mode. When load separation is required, the power supply / charging module is disconnected, and the electrical separation connector performs "electrical separation." The satellite platform detects the platform separation status signal. If separation is not complete, the cable is cut using a cutter; if electrical separation is complete, the anti-detachment pyrotechnic lock is activated, releasing the connector plug and socket from their flexible connection.

[0078] The beneficial effects of the reliable separation system for service space separation loads of the present invention are:

[0079] (1) This invention addresses the problem that vacuum cold welding may occur when the separation load is on the track for a long time, which may prevent traditional electrical separation connectors from performing normal electrical separation. It designs a cutter as a backup method to ensure reliable separation.

[0080] (2) This invention proposes a reliable separation system for service space separation loads, including corresponding separation control procedures and fault protection design, which can prevent the impact of cable cutting from harming the overall satellite structure and power supply safety.

[0081] (3) The power supply / charging module proposed in this invention can simultaneously meet the power supply and charging requirements of the separate payload, and can quickly adapt to satellite platforms with different voltage levels, thus having the advantage of versatility.

[0082] To achieve the above objectives, the present invention also proposes a reliable separation method for service space separation payloads, the method comprising the following steps:

[0083] Step 1: Before the load needs to be separated, the power supply / charging module enters charging mode and checks whether the charging current of the separated load energy storage unit meets the requirements of I. charge <0.01A is used to determine if the battery is fully charged.

[0084] Step 2: If fully charged, power will be supplied to the separate load, and the power supply / charging module will enter power supply mode.

[0085] Step 3: When load separation is required, the power supply / charging module enters the disconnect state, and the electrical separation connector performs electrical separation.

[0086] Step 4: The satellite platform detects the platform separation status signal. If separation is not completed, the cable is cut using a cutter.

[0087] If separation is completed, the anti-dislodgement pyrotechnic lock is detonated, causing the connector plug and socket to disconnect from the flexible connection.

[0088] The beneficial effects of the reliable separation method for service space separation loads of the present invention are:

[0089] (1) This invention addresses the problem that vacuum cold welding may occur when the separation load is on the track for a long time, which may prevent traditional electrical separation connectors from performing normal electrical separation. It designs a cutter as a backup method to ensure reliable separation.

[0090] (2) This invention proposes a reliable separation system for service space separation loads, including corresponding separation control procedures and fault protection design, which can prevent the impact of cable cutting from harming the overall satellite structure and power supply safety.

[0091] (3) The power supply / charging module proposed in this invention can simultaneously meet the power supply and charging requirements of the separate payload, and can quickly adapt to satellite platforms with different voltage levels, thus having the advantage of versatility.

[0092] The above description is only a preferred embodiment of the present invention and does not limit the patent scope of the present invention. Any equivalent structural or procedural changes made based on the content of the present invention specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A reliable separation system for service space separation payloads, characterized in that, include: Electrically disconnectable connectors, cutters, anti-drop pyrotechnic locks, power supply / charging management modules, and disconnect controllers; The electrically disconnecting connector is the primary means of achieving electrical separation between the satellite platform and the separated payload, while the cutter is a backup means of achieving electrical separation between the satellite platform and the separated payload. The cutter is used to cut the cable to achieve separation when the electrically disconnecting connector cannot be properly disconnected. The anti-dislodgement pyrotechnic lock is used to connect the plug and socket of the electrical separation connector to prevent the plug of the electrical separation connector, which has become loose after the separation load is separated, from colliding with the satellite platform or the separation load. The power supply / charging management module is used to manage the charging and power supply of the separated load, so as to charge or supply power to the separated load before separation. The separation controller is used to control the electrically disconnecting connector, the cutter, and the anti-disengagement fire lock; The cutter is fixedly installed at the satellite platform end and is used to cut the cable at the rear end of the plug of the electrical separation connector when the separation load cannot be separated normally; The anti-dislodgement fire lock is installed at both ends of the plug and socket of the electrical separation connector, with a certain amount of room for movement during installation, so as to connect the plug and socket of the electrical separation connector. When the separation load has been properly separated, the anti-drop pyrotechnic lock is detonated, and the plug and socket of the electrical separation connector are disconnected. If the electrical disconnect connector fails to disconnect properly, there is a risk that the plug of the electrical disconnect connector may become loose after the cutter cuts the cable. The anti-dislodgement pyrotechnic lock keeps the plug and socket of the electrical disconnect connector connected.

2. The reliable separation system for service space separation loads according to claim 1, characterized in that, The electrically detachable connector includes the socket, the plug, and a locking mechanism. The socket is fixedly installed on the detachable load end, the plug is flexibly installed on the satellite platform end, and the locking mechanism is used for fastening and detaching the plug and the socket.

3. The reliable separation system for service space separation loads according to claim 2, characterized in that, The power supply / charging management module has a four-switch topology.

4. The reliable separation system for service space separation loads according to claim 3, characterized in that, The power supply / charging management module includes MOSFETs g1, g2, g3, and g4, an inductor, and two capacitors, wherein; When the bus voltage of the satellite platform is higher than the energy storage unit voltage of the separated load, the power supply / charging management module operates in buck mode, MOSFET g3 is normally open, MOSFET g4 is normally closed, and MOSFET g1 and MOSFET g2 are mutually exclusive. When the bus voltage of the satellite platform is lower than the energy storage unit voltage of the separated load, the power supply / charging management module operates in boost mode, MOSFET g1 is normally open, MOSFET g2 is normally closed, and MOSFET g3 and MOSFET g4 are mutually exclusive and switched off. When the bus voltage of the satellite platform is equal to the energy storage unit voltage of the separated load, MOSFETs g1 and g3 are normally on, while MOSFETs g2 and g4 are normally off. When in fault mode, MOSFETs g1, g2, g3, and g4 are normally off.

5. The reliable separation system for service space separation loads according to claim 4, characterized in that, The control logic of the power supply / charging management module when it is operating in charging mode is as follows: (a) When the charging current Icharge is less than or equal to 1.5 times the maximum current iref that the battery can withstand, and the battery voltage Vin is greater than the minimum battery voltage Vbat_low, the separation controller enters the charging control: the energy storage unit voltage reference Uref is compared with the energy storage unit real-time voltage Ubat and passed through the PI regulator. Its output is compared with the maximum charging current iref that the energy storage unit can withstand. The result of the minimum operation is compared with the energy storage unit real-time charging current Icharge and passed through the PI regulator to form a pulse width modulation (PWM) waveform. (b) When the charging current Icharge is greater than 1.5 times the maximum current iref that the battery can withstand, or when the battery voltage Vin is less than or equal to the minimum battery voltage Vbat_low, the separation controller enters the short circuit fault or undervoltage fault mode, and MOSFETs g1, g2, g3 and g4 are all in the off state. (c) When the battery is fully charged, i.e., Icharge < 0.01A, the battery charging ends, and the MOS transistors g1, g2, g3 and g4 of the separation controller are placed in the off state.

6. The reliable separation system for service space separation loads according to claim 5, characterized in that, The control logic of the power supply / charging management module when operating in power supply mode is as follows: (a) When the bus current Ibus_R of the isolated load is less than or equal to 1.5 times the maximum current ibus_ref that the load can withstand, and the bus voltage Vbus_R is greater than the power supply safety voltage Vbus_low, the bus voltage Vbus_R is compared with the power supply safety voltage Vbus_low and passed through the PI regulator. Its output is compared with the bus current Ibus_R of the isolated load and PI calculation is performed to form a pulse width modulation (PWM) waveform. (b) When the bus current Ibus_R is greater than 1.5 times the maximum current ibus_ref that the load can withstand, or the bus voltage Vbus_R is lower than the power supply safety voltage Vbus_low, the separation controller enters the short circuit fault or undervoltage fault mode, and MOSFETs g1, g2, g3 and g4 are all in the off state.

7. The reliable separation system for service space separation loads according to claim 6, characterized in that, The separate payload includes the payload's electrical equipment and energy storage unit. A unidirectional diode is designed at the power supply and charging interface between the separate payload and the satellite platform.

8. A reliable separation method for service space separation payloads, characterized in that, The method is applied to the reliable separation system as described in any one of claims 1-7, and the method includes the following steps: Before the load needs to be separated, the power supply / charging module enters the charging mode and determines whether it is fully charged by checking whether the charging current of the energy storage unit of the separated load meets the requirement of Icharge < 0.01A. If fully charged, it begins to supply power to the separated load, and the power supply / charging module enters power supply mode; when the separated load needs to be separated, the power supply / charging module enters the disconnect state, and the electrical separation connector performs electrical separation; the satellite platform detects the platform separation status signal, and if separation is not completed, the cable is cut using a cutter; if separation is completed, the anti-drop pyrotechnic lock is activated, allowing the connector plug and socket to disconnect from the soft connection.