Power distribution maintaining system and power distribution maintaining method based on satellite dual-machine system switching

Abstract

The application discloses a power distribution maintaining system and method based on satellite double-machine system switching, which comprises a host computer A, a host computer B, a signal locking module A, a signal locking module B, a power distribution module and a control component, the host computer A and the host computer B control power distribution through output level and locking pulse of the signal locking module A and the signal locking module B respectively, the signal locking module A and the signal locking module B adopt level control to the power distribution module respectively, the host computer A and the host computer B enable and control switching of the signal locking module A and the signal locking module B through double-module control logic, the power distribution module performs power distribution output according to received level control signals, and the control component performs power distribution operation according to power distribution output. The application combines FPGA logic and hardware design, completes a set of independent switching power distribution function, reduces control time, and thus reduces the risk of satellite out of control caused by too long switching power distribution time.

Description

Technical Field

[0001] This invention belongs to the field of satellite computer technology, specifically relating to a power distribution and holding system and method for switching between satellite dual-machine systems. Background Technology

[0002] When a satellite is in orbit, it operates in a dual-system mode. In case of unforeseen circumstances, if the primary satellite malfunctions, the system switches to the backup satellite. During this switchover process, the onboard control components must not lose power; otherwise, attitude divergence will occur, leading to satellite loss of control. Therefore, maintaining power distribution during the switchover is crucial. Currently, the method for maintaining power distribution during a microsatellite switchover typically involves the new primary satellite detecting the power-on / off status of onboard components during CPU software initialization after the switchover and restoring power to each component individually, while simultaneously unlocking the power distribution channels of the original primary satellite. This method requires both low-level FPGA software operation and coupling with upper-level CPU software, and the time control is relatively long, still carrying the risk of satellite loss of control. Summary of the Invention

[0003] To address the aforementioned problems, this invention provides a power distribution maintenance system and method based on satellite dual-machine system switching, aiming to achieve power distribution recovery entirely based on FPGA, and applicable to onboard computers with both warm and cold standby designs.

[0004] According to an embodiment of this disclosure, a power distribution and maintenance system based on satellite dual-system switching is provided. The system includes a host A, a host B, a signal locking module A, a signal locking module B, a power distribution module, and a control unit. The host A and host B control power distribution by outputting level signals and locking pulses to the signal locking modules A and B respectively. The signal locking modules A and B respectively control the power distribution module by level signals. The host A and host B utilize dual-module control logic to enable and control the switching of the signal locking modules A and B. The power distribution module outputs power distribution based on the received level control signals from the signal locking modules A and B. The control unit executes power distribution operations based on the power distribution output.

[0005] The dual-module control logic includes: both host A and host B enable control switching of signal locking module A or signal locking module B, and the switching of signal locking module A or signal locking module B will only be activated when the outputs of host A and host B to signal locking module A or signal locking module B satisfy the NOR gate condition.

[0006] In some embodiments, host A and host B detect changes in the on-duty machine flag in real time. If the on-duty machine flag remains unchanged, host A or host B sends a power distribution command to the power distribution module normally. When a change in the on-duty machine flag is detected, the new on-duty machine reads the current power supply and distribution status and sends a power distribution command based on the current power supply and distribution status. The new on-duty machine outputs a locking pulse to the new on-duty machine signal locking module. After maintaining the lock for a period of time, it outputs a reset pulse to the original on-duty machine's signal locking module and releases the original on-duty machine's signal locking status.

[0007] In some embodiments, error prevention logic is designed for host A and host B to detect the on-duty machine. The error prevention logic includes: the detected machine is determined to be the real on-duty machine only when the on-duty machine flag and the identity machine flag are the same.

[0008] In some embodiments, the on-duty machine flag is filtered and detected. When the most recent N consecutive on-duty machine flags are all tag X, host A is set as the on-duty machine. When the most recent N consecutive on-duty machine flags are all tag Y, host B is set as the on-duty machine. The identity machine flag is filtered and detected. When the Mth level cache flags are all tag Z, the identity is set as host A. When the Mth level cache flags are not tag Z, the identity is set as host B.

[0009] In some embodiments, the dual-module logic is specifically implemented as follows:

[0010] The switching of signal locking module A or signal locking module B will only be activated when both host A and host B send control signals of 0 or 1 to signal locking module A or signal locking module B.

[0011] According to another embodiment of this disclosure, a power distribution maintenance method based on satellite dual-machine system switching includes:

[0012] Host A and host B control power distribution by outputting level and locking pulses to signal locking module A and signal locking module B respectively. Signal locking module A and signal locking module B respectively use level control to control the power distribution module. Host A and host B use dual-module control logic to enable and control the switching of signal locking module A and signal locking module B. The power distribution module outputs power distribution according to the received level control signals from signal locking module A and signal locking module B. The control unit executes the power distribution operation according to the power distribution output.

[0013] The dual-module control logic includes: both host A and host B enable control switching of signal locking module A or signal locking module B, and the switching of signal locking module A or signal locking module B will only be activated when the outputs of host A and host B to signal locking module A or signal locking module B satisfy the NOR gate condition.

[0014] In some embodiments, host A and host B detect changes in the on-duty machine flag in real time. If the on-duty machine flag remains unchanged, host A or host B sends a power distribution command to the power distribution module normally. When a change in the on-duty machine flag is detected, the new on-duty machine reads the current power supply and distribution status and sends a power distribution command based on the current power supply and distribution status. The new on-duty machine outputs a locking pulse to the new on-duty machine signal locking module. After maintaining the lock for a period of time, it outputs a reset pulse to the original on-duty machine's signal locking module and releases the original on-duty machine's signal locking status.

[0015] In some embodiments, error prevention logic is designed for host A and host B to detect the on-duty machine. The error prevention logic includes: the detected machine is determined to be the real on-duty machine only when the on-duty machine flag and the identity machine flag are the same.

[0016] In some embodiments, the on-duty machine flag is filtered and detected. When the most recent N consecutive on-duty machine flags are all tag X, host A is set as the on-duty machine. When the most recent N consecutive on-duty machine flags are all tag Y, host B is set as the on-duty machine. The identity machine flag is filtered and detected. When the Mth level cache flags are all tag Z, the identity is set as host A. When the Mth level cache flags are not tag Z, the identity is set as host B.

[0017] In some embodiments, the dual-module logic is specifically implemented as follows:

[0018] The switching of signal locking module A or signal locking module B will only be activated when both host A and host B send control signals of 0 or 1 to signal locking module A or signal locking module B.

[0019] The technical solution provided in this disclosure is a power distribution and maintenance system and method based on satellite dual-system switching. Its advantages include: it eliminates the need for low-level FPGA coupling with upper-level CPU software for joint operation; it is entirely based on a combination of FPGA logic and hardware design to complete an autonomous switching power distribution function. This is suitable for both warm and cold standby designs of the onboard computer, reducing control time and thus lowering the risk of satellite loss of control due to excessively long switching power distribution times. This invention has achieved good results in practical on-orbit operation.

[0020] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit this disclosure. Attached Figure Description

[0021] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0022] Figure 1 This is a schematic diagram of the power distribution and maintenance system structure based on satellite dual-machine system switching in an embodiment of the present invention;

[0023] Figure 2 This is a schematic diagram of the control logic of the signal locking module in an embodiment of the present invention;

[0024] Figure 3 This is a schematic diagram of the power distribution module control logic in an embodiment of the present invention;

[0025] Figure 4 This is a schematic diagram of the on-duty flight sign detection logic in an embodiment of the present invention. Detailed Implementation

[0026] The present invention will now be described in further detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of the invention. Furthermore, it should be noted that, for ease of description, only the parts relevant to the present invention are shown in the drawings, not the entire structure.

[0027] Before discussing the exemplary embodiments in more detail, it should be noted that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although the flowcharts describe the steps as sequential processes, many of these steps can be performed in parallel, concurrently, or simultaneously. Furthermore, the order of the steps can be rearranged. The process can be terminated when its operation is complete, but may also have additional steps not included in the figures. The process can correspond to a method, function, procedure, subroutine, subroutine, etc.

[0028] In this application, the terms "host A," "host B," "machine A," "machine B," "signal locking module A," and "signal locking module A" appear for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Therefore, a feature defined as "host A," "host B," or "machine A," "machine B" may explicitly or implicitly include at least one of that feature, and a feature defined as "signal locking module A" or "signal locking module B" may explicitly or implicitly include at least one of that feature. In the description of this application, the term "multiple" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0029] This invention provides the following embodiments for a power distribution holding system and method based on satellite dual-machine system switching:

[0030] One embodiment illustrates a power distribution and maintenance system based on satellite dual-machine system switching, such as... Figure 1 As shown, the system includes:

[0031] The system comprises a host A, a host B, a signal locking module A, a signal locking module B, a power distribution module, and a control unit. Host A and host B control power distribution by outputting level signals and locking pulses to signal locking modules A and B, respectively. Signal locking modules A and B control the power distribution module using level signals. Host A and host B utilize dual-module control logic to enable and control the switching of signal locking modules A and B. The power distribution module outputs power based on the received level control signals from signal locking modules A and B. The control unit executes power distribution operations based on the power distribution outputs.

[0032] The dual-module control logic includes: both host A and host B enable control switching of signal locking module A or signal locking module B, and the switching of signal locking module A or signal locking module B will only be activated when the outputs of host A and host B to signal locking module A or signal locking module B satisfy the NOR gate condition.

[0033] In the specific implementation process, the power distribution hardware design of the satellite system is as follows: Figure 1 As shown, it mainly consists of two parts. The first is the level control of the components, with the front-end using a signal locking module for level locking. Therefore, during control, a control level must be sent first, followed by a signal locking pulse. The second is the enable control of the signal locking module. Both machine A and machine B can have two signal locking modules, which facilitates machine switching control.

[0034] The specific implementation of the dual-module logic is as follows: when both host A and host B have a control signal of 0 or 1 for signal locking module A or signal locking module B, the switching of signal locking module A or signal locking module B will be activated.

[0035] The control logic circuits of the two locking modules are as follows: Figure 2 As shown, the signal lockout module consists of a NOR gate that outputs two signals from machines A and B. If either machine outputs a 1, the signal lockout module is off. The module is only on when both machines output a 0.

[0036] Host A and Host B monitor in real time whether there is a change in the duty machine flag. If there is no change in the duty machine flag, Host A or Host B sends a power distribution command to the power distribution module normally. When a change in the duty machine flag is detected, the new duty machine reads the current power supply and distribution status and sends a power distribution command according to the current power supply and distribution status. The new duty machine outputs a locking pulse to the new duty machine signal locking module. After holding the pulse for a period of time, it outputs a reset pulse to the original duty machine's signal locking module and releases the original duty machine's signal locking status.

[0037] The corresponding FPGA implementation logic is as follows Figure 3 As shown, this logic is the same for both host A and host B. Each host checks in real time whether its on-duty host flag has become valid (this flag is valid only on one host, and invalid on the other). When the ground sends a command to switch hosts, the on-duty host flag is updated.

[0038] If the on-duty machine flag of a certain machine does not change, there is no need to execute the power distribution restoration procedure. Just follow the normal power distribution command and execute the corresponding power distribution I / O port to output a high or low level.

[0039] If the on-duty machine flag of a certain machine is valid, 1) first read the power supply and distribution status (the status shared by both machines), and then output a high or low level to the relevant I / O port of the machine according to the read power supply and distribution status; 2) output a latching pulse (a 200us wide positive pulse; only when the latching pulse is output can the output level of the power supply and distribution I / O port take effect) to the corresponding signal latching module (e.g., signal latching module A corresponding to host A) through the relevant latching I / O port of the machine, and wait for 10ms; 3) output a reset pulse through the machine I / O (the reset signal is a 1s wide positive pulse to ensure a full reset), and then... Figure 2 The logic circuit shown transmits the signal locking module to the other machine (if the machine on duty is host A, then the other machine is host B, corresponding to signal locking module B), thereby releasing the signal locking state of the other machine.

[0040] Design error-proofing logic for host A and host B to detect the machine on duty. The error-proofing logic includes: the machine being detected is only identified as the real machine on duty if the machine on duty flag and the machine identification flag are the same.

[0041] The on-duty machine flag detection is quite important, so error-proofing design is necessary to prevent the detection of erroneous signals. On-duty machine detection consists of two flags: an on-duty machine flag (indicating whether machine A or machine B is currently on duty) and an identity machine flag (indicating whether the machine is machine A or machine B). Only when the identity flag and the on-duty machine flag are the same (i.e., the machine is both machine A and on-duty machine A) can it be determined that the current code logic is running on the on-duty machine, and only then can the on-duty machine flag switch be performed.

[0042] Perform filtering and detection on the on-duty machine flag. If the on-duty machine flag has been the same as tag X for the most recent N consecutive times, set host A as the on-duty machine. If the on-duty machine flag has been the same as tag Y for the most recent N consecutive times, set host B as the on-duty machine. Perform filtering and detection on the identity machine flag. If the Mth level cache flag has been the same as tag Z, set the identity as host A. Otherwise, set the identity as host B.

[0043] like Figure 4 As shown, the on-duty machine flag is filtered and detected. When the on-duty machine flag is tag 1 for the most recent 3 consecutive times, host A is set as the on-duty machine. When the on-duty machine flag is tag 0 for the most recent 3 consecutive times, host B is set as the on-duty machine. The identity machine flag is filtered and detected. When the third-level cache flag is tag 1 for all of them, the identity is set as host A. Otherwise, the identity is set as host B.

[0044] It should be noted that, in addition to the above module, the power distribution and maintenance system based on the satellite dual-machine system switching may also include other components. However, since these components are not related to the content of the embodiments of this disclosure, their illustrations and descriptions are omitted here.

[0045] Example 2 illustrates a power distribution maintenance method based on satellite dual-machine system switching, the method comprising:

[0046] Host A and host B control power distribution by outputting level and locking pulses to signal locking module A and signal locking module B respectively. Signal locking module A and signal locking module B respectively use level control to control the power distribution module. Host A and host B use dual-module control logic to enable and control the switching of signal locking module A and signal locking module B. The power distribution module outputs power distribution according to the received level control signals from signal locking module A and signal locking module B. The control unit executes the power distribution operation according to the power distribution output.

[0047] The dual-module control logic includes: both host A and host B enable control switching of signal locking module A or signal locking module B, and the switching switching of signal locking module A or signal locking module B will only be activated when the outputs of host A and host B to signal locking module A or signal locking module B satisfy the NOR gate condition.

[0048] Host A and Host B monitor in real time whether there is a change in the duty machine flag. If there is no change in the duty machine flag, Host A or Host B sends a power distribution command to the power distribution module normally. When a change in the duty machine flag is detected, the new duty machine reads the current power supply and distribution status and sends a power distribution command according to the current power supply and distribution status. The new duty machine outputs a locking pulse to the new duty machine signal locking module. After holding the pulse for a period of time, it outputs a reset pulse to the original duty machine's signal locking module and releases the original duty machine's signal locking status.

[0049] Design error-proofing logic for host A and host B to detect the machine on duty. The error-proofing logic includes: the machine being detected is only identified as the real machine on duty if the machine on duty flag and the machine identification flag are the same.

[0050] Perform filtering and detection on the on-duty machine flag. If the on-duty machine flag has been the same as tag X for the most recent N consecutive times, set host A as the on-duty machine. If the on-duty machine flag has been the same as tag Y for the most recent N consecutive times, set host B as the on-duty machine. Perform filtering and detection on the identity machine flag. If the Mth level cache flag has been the same as tag Z, set the identity as host A. Otherwise, set the identity as host B.

[0051] The specific implementation of the dual-module logic is as follows: when both host A and host B have a control signal of 0 or 1 for signal locking module A or signal locking module B, the switching of signal locking module A or signal locking module B will be activated.

[0052] Other specific working processes of the power distribution retention method based on satellite dual-machine system switching are described in the above embodiment of the power distribution retention system based on satellite dual-machine system switching, and will not be repeated here.

[0053] The technical solution provided in this disclosure is a power distribution and maintenance system and method based on satellite dual-system switching. Its advantages include: it eliminates the need for low-level FPGA coupling with upper-level CPU software for joint operation; it is entirely based on a combination of FPGA logic and hardware design to complete an autonomous switching power distribution function. This is suitable for both warm and cold standby designs of the onboard computer, reducing control time and thus lowering the risk of satellite loss of control due to excessively long switching power distribution times. This invention has achieved good results in practical on-orbit operation.

[0054] In this document, the terms “comprising,” “including,” or any other variations thereof are intended to cover non-exclusive inclusion, such that a step or method that comprises a list of elements includes not only those elements but also other elements not expressly listed or inherent to such a step or method.

[0055] The above description, in conjunction with specific preferred embodiments, provides a further detailed explanation of the present invention. It should not be construed that the specific implementation of the present invention is limited to these descriptions. For those skilled in the art, various simple deductions or substitutions can be made without departing from the concept of the present invention, and all such modifications and substitutions should be considered within the scope of protection of the present invention.

Claims

1. A power distribution and maintenance system based on satellite dual-machine system switching, characterized in that, The system includes a host A, a host B, a signal locking module A, a signal locking module B, a power distribution module, and a control unit. Host A and host B control power distribution by outputting level signals and locking pulses to signal locking modules A and B, respectively. Signal locking modules A and B control the power distribution module using level signals. Host A and host B utilize dual-module control logic to enable and control the switching of signal locking modules A and B. The power distribution module outputs power based on the received level control signals from signal locking modules A and B. The control unit executes power distribution operations based on the power distribution outputs. The dual-module control logic includes: both host A and host B enable control switching of signal locking module A or signal locking module B, and the switching of signal locking module A or signal locking module B will only be activated when the outputs of host A and host B to signal locking module A or signal locking module B satisfy the NOR gate condition. The host A and the host B detect changes in the duty machine flag in real time. If the duty machine flag remains unchanged, the host A or the host B sends a power distribution command to the power distribution module normally. When a change in the duty machine flag is detected, the new duty machine reads the current power supply and distribution status and sends a power distribution command based on the current power supply and distribution status. The new duty machine outputs a locking pulse to the new duty machine signal locking module. After maintaining the lock for a period of time, it outputs a reset pulse to the original duty machine's signal locking module and releases the original duty machine's signal locking status. The specific implementation of the dual-module control logic is as follows: when both the control signals of host A and host B to signal locking module A or signal locking module B are 0, the switching of signal locking module A or signal locking module B will be activated. The power distribution hardware of the satellite system is divided into two parts. The first part is the level control of the components. The front-end uses a signal locking module for level locking. During control, the control level must be sent first, and then the signal locking pulse must be sent. The second part is the enable control of the signal locking module. Both A and B units can control two signal locking modules, which helps with switching control.

2. The power distribution and maintenance system based on satellite dual-machine system switching according to claim 1, characterized in that, Error prevention logic is designed for host A and host B to detect the on-duty machine. The on-duty machine detection consists of two flags: an on-duty machine flag, which indicates whether host A or host B is the on-duty machine, and an identity machine flag, which indicates whether the machine is host A or host B. The error prevention logic includes: the detected machine is determined to be the real on-duty machine only when the on-duty machine flag and the identity machine flag are the same.

3. The power distribution and maintenance system based on satellite dual-machine system switching according to claim 2, characterized in that, Perform filtering and detection on the on-duty machine flag. If the on-duty machine flag has been the same as tag X for the most recent N consecutive times, set host A as the on-duty machine. If the on-duty machine flag has been the same as tag Y for the most recent N consecutive times, set host B as the on-duty machine. Perform filtering and detection on the identity machine flag. If the Mth level cache flag has been the same as tag Z, set the identity as host A. Otherwise, set the identity as host B.

4. A power distribution maintenance method based on satellite dual-machine system switching, characterized in that, The method includes: Host A and host B control power distribution by outputting level and locking pulses to signal locking module A and signal locking module B respectively. Signal locking module A and signal locking module B respectively use level control to control the power distribution module. Host A and host B use dual-module control logic to enable and control the switching of signal locking module A and signal locking module B. The power distribution module outputs power distribution according to the received level control signals from signal locking module A and signal locking module B. The control unit executes the power distribution operation according to the power distribution output. The dual-module control logic includes: both host A and host B enable control switching of signal locking module A or signal locking module B, and the switching of signal locking module A or signal locking module B will only be activated when the outputs of host A and host B to signal locking module A or signal locking module B satisfy the NOR gate condition. The host A and the host B detect changes in the duty machine flag in real time. If the duty machine flag remains unchanged, the host A or the host B sends a power distribution command to the power distribution module normally. When a change in the duty machine flag is detected, the new duty machine reads the current power supply and distribution status and sends a power distribution command based on the current power supply and distribution status. The new duty machine outputs a locking pulse to the new duty machine signal locking module. After maintaining the lock for a period of time, it outputs a reset pulse to the original duty machine's signal locking module and releases the original duty machine's signal locking status. The specific implementation of the dual-module control logic is as follows: when both the control signals of host A and host B to signal locking module A or signal locking module B are 0, the switching of signal locking module A or signal locking module B will be activated. The power distribution hardware of the satellite system is divided into two parts. One part is the level control of the components. The front-end uses a signal locking module to lock the level. During control, the control level must be sent first, and then the signal locking pulse must be sent. Secondly, the enable control of the signal locking module allows both machine A and machine B to control two signal locking modules, which is helpful for machine switching control.

5. The power distribution and maintenance method based on satellite dual-machine system switching according to claim 4, characterized in that, Error prevention logic is designed for host A and host B to detect the on-duty machine. The on-duty machine detection consists of two flags: an on-duty machine flag, which indicates whether host A or host B is the on-duty machine, and an identity machine flag, which indicates whether the machine is host A or host B. The error prevention logic includes: the detected machine is determined to be the real on-duty machine only when the on-duty machine flag and the identity machine flag are the same.

6. The power distribution maintenance method based on satellite dual-machine system switching according to claim 5, characterized in that, Perform filtering and detection on the on-duty machine flag. If the on-duty machine flag has been the same as tag X for the most recent N consecutive times, set host A as the on-duty machine. If the on-duty machine flag has been the same as tag Y for the most recent N consecutive times, set host B as the on-duty machine. Perform filtering and detection on the identity machine flag. If the Mth level cache flag has been the same as tag Z, set the identity as host A. Otherwise, set the identity as host B.

Images