Layered and graded GNC subsystem high-reliability autonomous power distribution control system and method

Abstract

The invention discloses a hierarchical high-reliability autonomous power distribution control system for a GNC subsystem. The hierarchical high-reliability autonomous power distribution control system comprises a lower-level component, a GNC controller and an upper-level power distribution processing unit, wherein the GNC controller performs data processing and diagnosis on the acquired information or state of the subordinate component, and sends a power-on and power-off instruction to the subordinate component, or sends a power distribution control service request to the superior power distribution processing unit; the subordinate components comprise a plurality of autonomous controllable power distribution components and service request power distribution components; the autonomous controllable power distribution component is used for realizing power-on and power-off control according to the power-on and power-off instruction sent by the GNC controller; the service request power distribution type component realizes power-on and power-off control through a power supply bus; and the superior power distribution processing unit analyzes the power distribution control service request sent by the GNC controller and performs power-on and power-off operation on the corresponding power supply bus according to an analysis result. According to the invention, autonomous power distribution control of GNC whole system components is realized under the condition of not increasing extra hardware resources.

Description

Technical Field

[0001] The present invention relates to a hierarchical and graded GNC subsystem high-reliability autonomous power distribution control system and method, belonging to the technical field of spacecraft control system design. Background Art

[0002] As one of the most critical subsystems of a spacecraft, the reliability and robustness of the GNC subsystem directly affect the continuous operation of the entire satellite mission. During the long-term operation of a spacecraft on orbit, a component may experience single-particle lock or flip. If the fault is not eliminated in time, it may affect the GNC system and thus the continuous operation of the entire satellite. If the single-particle lock is not eliminated in time, it may cause component failure, thereby reducing the redundancy and reliability of the system.

[0003] An effective way to resolve single-particle lockout or flipping is to re-power on and off the components. Traditional GNC subsystems often only have the ability to autonomously control the power on and off of some components, and cannot achieve autonomous power distribution control for all system components, resulting in low reliability. For components without autonomous power on and off control, if single-particle lockout occurs, the component may fail due to untimely handling. Summary of the invention

[0004] The technical problem solved by the present invention is: to overcome the deficiencies of the prior art and to provide a hierarchical and graded GNC subsystem high-reliability autonomous power distribution control system and method, thereby realizing autonomous power distribution control of all GNC system components without adding additional hardware resources.

[0005] The technical solution of the present invention is:

[0006] The present invention discloses a hierarchical GNC subsystem high-reliability autonomous power distribution control system, comprising: a lower-level component, a GNC controller and an upper-level power distribution processing unit; wherein:

[0007] The GNC controller collects information or status of the lower-level components; performs data processing and diagnosis on the collected information or status of the lower-level components; sends power-on and power-off instructions to the lower-level components, or sends power distribution control service requests to the upper-level power distribution processing unit according to the diagnosis results and the types of the lower-level components;

[0008] The lower-level components include several autonomous controllable power distribution components and several service request power distribution components; each component is connected to the upper-level power distribution processing unit through the power supply bus; the autonomous controllable power distribution components implement power on and off control according to the power on and off instructions sent by the GNC controller; the service request power distribution components implement power on and off control through the power supply bus;

[0009] The upper-level power distribution processing unit analyzes the power distribution control service request sent by the GNC controller, and performs power-on and power-off operations on the corresponding power supply bus according to the analysis results.

[0010] Furthermore, in the above control system, the upper power distribution processing unit includes an integrated management unit and an integrated power distribution controller; wherein,

[0011] The integrated management unit receives the power distribution control service request sent by the GNC controller, parses the power distribution control service request, obtains the channel number of the relay channel, and sends a power-on and power-off instruction of the corresponding channel number to the integrated power distribution controller;

[0012] The integrated power distribution controller performs power-on and power-off operations on the power supply bus of the corresponding channel according to the power-on and power-off instructions of the channel number, thereby realizing power-on and power-off operations on the lower-level components.

[0013] Further, in the above control system, the information or status of the lower-level components is collected, specifically: in each control cycle, the GNC controller collects information or status from the lower-level components;

[0014] Furthermore, in the above control system, the collected information or status of the lower-level components is processed and diagnosed; according to the diagnosis result and the category of the lower-level components, a power-on or power-off instruction is sent to the lower-level components, or a power distribution control service request is sent to the upper-level power distribution processing unit. The specific method is:

[0015] S1. Set the lower-level component set Ω Product ={Ψ Product_1 ,...,Ψ Product_i ,...,Ψ Product_n}, i = 1...n and the number of communication failures set Ω Cont ={Ν Cont_1 ,...,Ν Cont_i ,...,Ν Cont_n}, i = 1...n, where N Cont_i Indicates the GNC controller for component Ψ Product_i Communication failure times; component communication status set Ω State ={Φ State_1 ,...,Φ State_i ,...,Φ State_n}, i=1...n;

[0016] S2, the GNC controller sends a detection signal to each component in the lower-level component set in each control cycle, and waits for the feedback signal from the receiving component;

[0017] S3. If no feedback signal is received from a component within this control cycle, the number of communication failures N of the corresponding component is Cont_iAdd 1; if N Cont_i =N Cont_i_Lmit When Product_i The communication diagnosis result is communication failure, Φ State_i =0; where N Cont_i_Lmit For component Ψ Product_i Determine the communication failure number threshold; proceed to step S4; otherwise, the communication is successful, and return to step S2;

[0018] S4, if the component Ψ Product_i For autonomous and controllable power distribution components, Product_i Send power-on and power-off instructions; if the service request is for a power distribution component, send a power distribution control service request to the superior integrated management unit.

[0019] Furthermore, in the above control system, it also includes: Product_i After sending the power-on and power-off command, the GNC controller will inside Then continue with the components Product_i Communication, if judged with component Ψ Product_i If the communication between them fails, a corresponding power distribution control service request is sent to the superior integrated management unit to Product_i The power supply bus performs power-on and power-off operations.

[0020] Furthermore, in the above control system, 10≤Ν Cont_i_Lmit <50.

[0021] Furthermore, in the above control system, the autonomous and controllable power distribution components are components that perform tasks for more than one month and components that perform emergency tasks; the service request power distribution components are components that perform tasks for less than one month.

[0022] Furthermore, in the above-mentioned control system, the integrated power distribution controller includes a power-on and power-off instruction control unit and several power control units; wherein the power control unit includes several relay channels, each relay channel is connected to the power supply bus of a component; the power control unit realizes power on and off control of the component corresponding to the relay channel according to the power-on and power-off instructions sent by the power-on and power-off instruction control unit; the power-on and power-off instruction control unit identifies the channel number of the relay channel according to the power-on and power-off instructions sent by the integrated management unit, and then sends power-on and power-off instructions to the corresponding power control unit.

[0023] The present invention discloses a hierarchical and graded GNC subsystem high-reliability autonomous power distribution control method, comprising:

[0024] The GNC controller collects information or status of lower-level components;

[0025] Perform data processing and diagnosis on the collected information or status of the lower-level components;

[0026] According to the diagnosis results, it sends power-on or power-off instructions to the lower-level components, or sends power distribution control service requests to the upper-level power distribution processing unit;

[0027] Autonomous controllable power distribution components implement power on / off control according to the power on / off instructions sent by the GNC controller; service request power distribution components implement power on / off control through the power supply bus;

[0028] The upper-level power distribution processing unit analyzes the power distribution control service request sent by the GNC controller, and performs power-on and power-off operations on the corresponding power supply bus according to the analysis results.

[0029] The beneficial effects of the present invention and the prior art are:

[0030] (1) Based on the power supply reliability and autonomy of GNC subsystem components, the present invention proposes a two-layer power distribution control system consisting of an autonomous controllable power distribution layer and a service request power distribution layer, thereby realizing autonomous controllable power distribution of all components of the entire GNC system.

[0031] (2) The present invention proposes a hierarchical disposal strategy for component power distribution according to the impact level of GNC subsystem component failures, and designs different hierarchical control methods for long-term mission critical component level, emergency mission response component level, and short-term mission working component level. Without increasing the system hardware resources, the autonomous power distribution control of the GNC full system components is realized.

[0032] (3) The present invention proposes a hierarchical and graded high-reliability autonomous power distribution control method for the GNC subsystem, which can solve the problem of insufficient autonomous handling and power-off capabilities of the GNC subsystem for satellite long-term missions. Through autonomous power distribution control of all system components, the risk of on-orbit component failure is reduced, and the long-term on-orbit reliability and emergency response capabilities of the subsystem are improved.

[0033] (4) The present invention can improve the power supply reliability of the GNC system by distributing redundant components to different integrated power distribution controllers, that is, distributing multiple numbers of matching components of the same type or multiple numbers of matching components of different types and the same functions with the integrated power distribution controllers.

[0034] (5) The present invention realizes autonomous power on and off control of components that are unable to autonomously control power on and off or components that are not configured with relays internally through a service request power distribution method. Without changing the hardware status of the components and the controller, autonomous power distribution control of components that are unable to autonomously control power on and off is realized through this indirect control method. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 is a system block diagram of the present invention;

[0036] Figure 2 It is a block diagram of the integrated power distribution controller of the present invention;

[0037] Figure 3 Schematic diagram of system connection in an embodiment of the present invention. DETAILED DESCRIPTION

[0038] The present invention is further described in detail below with reference to the accompanying drawings and specific implementation modes.

[0039] like Figure 1 As shown, the present invention discloses a hierarchical GNC subsystem high-reliability autonomous power distribution control system, including: lower-level components, a GNC controller and an upper-level power distribution processing unit; wherein,

[0040] The GNC controller collects information or status of the lower-level components; performs data processing and diagnosis on the collected information or status of the lower-level components; sends power-on and power-off instructions to the lower-level components, or sends power distribution control service requests to the upper-level power distribution processing unit according to the diagnosis results and the types of the lower-level components;

[0041] The lower-level components include several autonomous controllable power distribution components and several service request power distribution components; each component is connected to the upper-level power distribution processing unit through the power supply bus; the autonomous controllable power distribution components implement power on and off control according to the power on and off instructions sent by the GNC controller; the service request power distribution components implement power on and off control through the power supply bus;

[0042] The upper-level power distribution processing unit analyzes the power distribution control service request sent by the GNC controller, and performs power-on and power-off operations on the corresponding power supply bus according to the analysis results.

[0043] Preferably, the upper power distribution processing unit includes an integrated management unit and an integrated power distribution controller; wherein,

[0044] The integrated management unit receives the power distribution control service request sent by the GNC controller, parses the power distribution control service request, obtains the channel number of the relay channel, and sends a power-on and power-off instruction of the corresponding channel number to the integrated power distribution controller;

[0045] The integrated power distribution controller performs power-on and power-off operations on the power supply bus of the corresponding channel according to the power-on and power-off instructions of the channel number, thereby realizing power-on and power-off operations on the lower-level components.

[0046] Preferably, the information or status of the lower-level components is collected, specifically: in each control cycle, the GNC controller collects information or status from the lower-level components;

[0047] Preferably, the collected information or status of the lower-level components is processed and diagnosed; according to the diagnosis result and the category of the lower-level components, a power-on or power-off instruction is sent to the lower-level components, or a power distribution control service request is sent to the upper-level power distribution processing unit. The specific method is:

[0048] S1. Set the lower-level component set Ω Product ={Ψ Product_1 ,...,Ψ Product_i ,...,Ψ Product_n},i=1...n and the communication failure count set Ω Cont ={Ν Cont_1 ,...,Ν Cont_i ,...,Ν Cont_n}, i = 1...n, where N Cont_i Indicates the GNC controller for component Ψ Porduc_ Communication failure times; component communication status set Ω State ={Φ State_1 ,...,Φ State_i ,...,Φ State_n}, i=1...n;

[0049] S2, the GNC controller sends a detection signal to each component in the lower-level component set in each control cycle, and waits for the feedback signal from the receiving component;

[0050] S3. If no feedback signal is received from a component within this control cycle, the number of communication failures N of the corresponding component is Cont_i Add 1; if N Cont_i =N Cont_i_Lmit When Product_i The communication diagnosis result is communication failure, Φ State_i =0; where N Cont_i_Lmit For component Ψ Product_i Determine the communication failure number threshold; proceed to step S4; otherwise, the communication is successful, and return to step S2;

[0051] S4, if the component Ψ Product_i For autonomous and controllable power distribution components, Product_i Send power-on and power-off instructions; if the service request is for a power distribution component, send a power distribution control service request to the superior integrated management unit.

[0052] Preferably, it also includes: Product_i After sending the power-on and power-off command, the GNC controller will inside Then continue with the components Product_i Communication, if judged with component Ψ Product_iIf the communication between them fails, a corresponding power distribution control service request is sent to the superior integrated management unit to Product_i The power supply bus performs power-on and power-off operations.

[0053] Preferably, 10≤N Cont_i_Lmit <50.

[0054] Preferably, autonomous and controllable power distribution components are components that perform tasks for more than one month and components that perform emergency tasks; service request power distribution components are components that perform tasks for less than one month.

[0055] Preferably, if Figure 2 As shown, the integrated power distribution controller includes a power-on and power-off instruction control unit and a plurality of power control units; wherein the power control unit includes a plurality of relay channels, each relay channel being connected to a power supply bus of a component; the power control unit realizes power-on and power-off control of the component corresponding to the relay channel according to the power-on and power-off instructions sent by the power-on and power-off instruction control unit; the power-on and power-off instruction control unit identifies the channel number of the relay channel according to the power-on and power-off instructions sent by the integrated management unit, and then sends the power-on and power-off instructions to the corresponding power control unit.

[0056] The present invention discloses a hierarchical and graded GNC subsystem high-reliability autonomous power distribution control method, comprising:

[0057] The GNC controller collects information or status of lower-level components;

[0058] Perform data processing and diagnosis on the collected information or status of the lower-level components;

[0059] According to the diagnosis results, it sends power-on or power-off instructions to the lower-level components, or sends power distribution control service requests to the upper-level power distribution processing unit;

[0060] Autonomous controllable power distribution components implement power on / off control according to the power on / off instructions sent by the GNC controller; service request power distribution components implement power on / off control through the power supply bus;

[0061] The upper-level power distribution processing unit analyzes the power distribution control service request sent by the GNC controller, and performs power-on and power-off operations on the corresponding power supply bus according to the analysis results.

[0062] Example

[0063] The present embodiment provides a hierarchical and graded GNC subsystem high-reliability autonomous power distribution control system, including lower-level components, a GNC controller, and an upper-level power distribution processing unit. The lower-level components mainly include various sensors or actuators, and the upper-level power distribution processing unit mainly includes an integrated management unit and an integrated power distribution controller. As the object of power distribution control, the information or status of the lower-level components is collected by the GNC controller; as the core of autonomous power distribution control, the GNC controller can not only realize direct power distribution control of the lower-level components, but also make power distribution control requests to the upper-level power distribution processing unit. After receiving the service request from the GNC controller, the upper-level integrated management unit forwards it to the integrated power distribution controller to realize power distribution control processing of the service request.

[0064] This embodiment provides a hierarchical and graded GNC subsystem high-reliability autonomous power distribution control method based on the following principles:

[0065] (1) Design the overall power supply and distribution bus allocation method based on the number of subsystem components;

[0066] (2) Based on the functions of subsystem components, the subsystem hierarchical power supply and distribution method is designed to be a two-layer power supply and distribution method combining an autonomous controllable power distribution layer and a service request power distribution layer;

[0067] (3) According to the different impact levels of subsystem component failures, different hierarchical power-off control methods are designed for the long-term mission critical component level, emergency mission response component level, and short-term mission working component level;

[0068] The method for designing the subsystem hierarchical power supply and distribution is as follows:

[0069] (1) For components with internal relays and command interfaces, the GNC controller can be used for direct autonomous control of power distribution. The steps are as follows:

[0070] Step 1, the GNC controller collects the signal or status of the lower-level components;

[0071] GNC controller control cycle T cyc = 200ms, that is, the GNC controller communicates with the lower-level components every 200 milliseconds, and the lower-level components are combined with Ω Product ={Ψ Product_1 ,...,Ψ Product_i ,...,Ψ Product_n}, i = 1...n, a lower-level component is represented by Ψ Product_i express.

[0072] Step 2, the GNC controller processes and diagnoses the collected component information;

[0073] GNC controller for components Product_iDuring information collection, if the component does not respond, the GNC controller Product_i The number of communication failures is represented by Ω Cont ={Ν Cont_1 ,...,Ν Cont_i ,...,Ν Cont_n}, i=1...n means, N Cont_i Indicates the GNC controller for component Ψ Product_i Communication failure times. If the component does not feedback GNC controller data within this cycle, then N Cont_i =N Cont_i +1, where the default number of initial communication failures is N Cont_i 0. The component communication status uses the set Ω State ={Φ State_1 ,...,Φ State_i ,...,Φ State_n}, i = 1...n, Φ State_ i is the component Ψ Product_i The communication status, Φ State_i The default value is 1 (indicating successful communication). Cont_i =N Cont_i_Lmit ,10≤Ν Cont_i_Lmit <50, GNC controller considers that the component Ψ Product_i Communication diagnosis is Φ State_i =0, indicating communication failure, where N Cont_i_Lmit For component Ψ Product_i Determine the communication failure threshold.

[0074] Step 3: GNC controller sends corresponding power-on and power-off instructions to the lower level components according to the diagnosis results. Product_i ;

[0075] Step 4, lower level component Ψ Product_i After receiving the power-on and power-off command, the relay is operated to realize the power on and off of the component. Product_i Add power-off control;

[0076] Step 5: GNC controller adjusts the component Φ State_i After ΔT inside Restore communication, if component Φ State_i If the communication is still in a failed state, the GNC controller sends a corresponding power-on / off service request instruction to the superior integrated management unit;

[0077] Step 6: After receiving the service request instruction from the GNC controller, the integrated management unit sends a power-on / off instruction to the integrated power distribution controller;

[0078] Step 7: After receiving the command, the integrated power distribution controller performs power-on and power-off operations on the corresponding channel, thereby realizing the power-off of the component. State_iThe power supply bus plus power-off operation.

[0079] GNC controller for components State_i After ΔT inside Restore communication and repeat step 2 to process and diagnose the component.

[0080] (2) For components that are not equipped with relays and command interfaces or for which the GNC controller does not directly and autonomously control power distribution, the service request to the superior controller can be used for indirect power distribution control. The steps are as follows:

[0081] Step 1, the GNC controller collects the signal or status of the lower-level components;

[0082] GNC controller control cycle T cyc = 200ms, that is, the GNC controller communicates with the lower-level components once every 200 milliseconds, and the lower-level components are combined with Ω Product ={Ψ Product_1 ,...,Ψ Product_i ,...,Ψ Product_n}, i = 1...n represents a lower-level component with Ψ Product_i express.

[0083] Step 2, the GNC controller processes and diagnoses the collected component information;

[0084] GNC controller for components Product_i During information collection, if the component does not respond, the GNC controller Product_i The number of communication failures is represented by Ω Cont ={Ν Cont_1 ,...,Ν Cont_i ,...,Ν Cont_n}, i=1...n means, N Cont_i Indicates the GNC controller for component Ψ Product_i Communication failure times. If the component does not feedback GNC controller data within this cycle, then N Cont_i =N Cont_i +1, where the default number of initial communication failures is N Cont_i 0. The component communication status uses the set Ω State ={Φ State_1 ,...,Φ State_i ,...,Φ State_n}, i = 1...n, Φ State_i For component Ψ Product_i The communication status, Φ State_i The default value is 1 (indicating successful communication). Cont_i =N Cont_i_Lmit ,10≤Ν Cont_i_Lmit<50, GNC controller considers that the component Ψ Product_i Communication diagnosis is Φ State_i =0, indicating communication failure, where N Cont_i_Lmit For component Ψ Product_i Determine the communication failure threshold.

[0085] Step 3: The GNC controller sends a corresponding power-on / off service request instruction to the superior integrated management unit according to the diagnosis result;

[0086] Step 4, after receiving the service request instruction from the GNC controller, the integrated management unit sends a power-on and power-off instruction to the integrated power distribution controller;

[0087] Step 5: After receiving the command, the integrated power distribution controller performs power-on and power-off operations on the corresponding channel, thereby realizing the power-off of the component. State_i The power supply bus plus power-off operation.

[0088] GNC controller for components State_i After ΔT outside Restore communication and repeat step 2 to process and diagnose the component.

[0089] Through two layers of autonomous power distribution control, autonomous power distribution control of all GNC system components can be achieved.

[0090] The method for subsystem hierarchical power-off control is as follows:

[0091] According to the characteristics of the GNC subsystem task mode and the impact level of component failure, the GNC subsystem component power-off control method is divided into three levels, namely, long-term mission critical component level, emergency mission response component level, and short-term mission working component level.

[0092] (1) For components required for long-term missions, the GNC subsystem needs to have extremely high autonomy and reliability during the mission. If a component fails, the GNC subsystem needs to handle it autonomously and directly on orbit, resetting the faulty component, powering it on and off, or autonomously powering it on and switching to a cold standby component. Therefore, for key components with long-term mission requirements, the GNC controller directly uses autonomous controllable power distribution. The GNC controller can directly send power-on and power-off commands to implement power-on and power-off control of each component.

[0093] (2) If the entire cabin fails due to a system failure, the GNC subsystem must switch to safe mode to ensure the safety of the entire satellite. This is the emergency task of the GNC subsystem. In order to ensure that the GNC subsystem responds promptly and has high reliability in emergency situations, the components involved in the emergency task adopt the GNC controller's direct and autonomous controllable power distribution method.

[0094] (3) For components involved in short-term tasks or within the measurement and control area during short-term power-on, the component workflow is relatively fixed and the GNC subsystem does not need to autonomously control the component to power off. The GNC subsystem can use service requests to the superior controller for indirect power distribution control according to the working mode requirements.

[0095] In order to further improve system reliability, the overall power supply and distribution busbar allocation design method is as follows:

[0096] Multiple matching components of the same type or multiple matching components of different types with the same function are dispersedly combined with the overall multi-channel power control unit. If the overall one-way power distribution unit fails, the GNC subsystem can still operate normally, thereby further improving system reliability. Figure 2 The measuring sensors are divided into three groups, which are respectively connected to the power control units a / b / c.

[0097] like Figure 3 As shown, a long-term on-orbit mission is a sky survey mission, and also has a regular rendezvous and docking function. The system of this embodiment is applied to the GNC subsystem.

[0098] 1) Subsystem product power distribution architecture

[0099] The overall circuit provides 30 100V primary power supplies for the GNC subsystem. The primary power bus operating voltage is 95V-110V and the safety voltage is 80V-120V.

[0100] The GNC subsystem hierarchical power distribution product architecture is as follows:

[0101] Table 1 GNC subsystem hierarchical power distribution product architecture

[0102]

[0103] 2) Subsystem autonomous power-off control strategy

[0104] As sky survey observation missions are long-term and require high control accuracy, the GNC subsystem needs to have high autonomy and reliability during the mission. If a component fails, the GNC subsystem needs to directly and autonomously deal with it on orbit. Therefore, key components required for long-term sky survey observation missions, such as gyroscopes, CMGs, star sensors, etc., need to be autonomous and controllable.

[0105] For emergency tasks, if the entire cabin fails due to a system failure, the control must switch to a safe mode to ensure cabin safety. At this time, the attitude of the celestial body may fluctuate over a large range. The gyroscope used in long-term sky survey missions has high angular velocity measurement accuracy, but a small range, so a fiber-optic IMU is required to measure the attitude of the celestial body. In order to ensure that the emergency control system responds promptly and has high reliability, the components working in emergency tasks should be directly controlled by the GNC subsystem, and power on and off operations should be performed according to the system working mode word.

[0106] For short-term major tasks of rendezvous and docking, the working hours of the rendezvous and docking execution components are relatively fixed and are within the measurement and control area. The power-on and power-off control of the components can be achieved through program-controlled instructions sent by the CMU according to the flight program, direct ground intervention or service requests sent by the GNC controller.

[0107] The GNC subsystem components plus power-off design table and the GNC subsystem power supply and distribution architecture implementation diagram are as follows:

[0108] Table 2 GNC subsystem components plus power-off design

[0109]

[0110]

[0111] Although the content of the present invention has been described in detail through the above preferred embodiments, it should be appreciated that the above description should not be considered as a limitation of the present invention. After reading the above content, it will be apparent to those skilled in the art that various modifications and substitutions of the present invention will occur. Therefore, the protection scope of the present invention should be limited by the appended claims.

[0112] The contents not described in detail in the specification of the present invention belong to the common knowledge of the professionals in this field.

Claims

1. A hierarchical GNC subsystem high-reliability autonomous power distribution control system, characterized in that: include: Lower level components, GNC controller and upper level power distribution processing unit; among them, The GNC controller collects information or status of the lower-level components; performs data processing and diagnosis on the collected information or status of the lower-level components; sends power-on and power-off instructions to the lower-level components, or sends power distribution control service requests to the upper-level power distribution processing unit according to the diagnosis results and the types of the lower-level components; The lower-level components include several autonomous controllable power distribution components and several service request power distribution components; each component is connected to the upper-level power distribution processing unit through the power supply bus; the autonomous controllable power distribution components implement power on and off control according to the power on and off instructions sent by the GNC controller; the service request power distribution components implement power on and off control through the power supply bus; The upper-level power distribution processing unit analyzes the power distribution control service request sent by the GNC controller, and performs power-on and power-off operations on the corresponding power supply bus according to the analysis results.

2. A hierarchical GNC subsystem high-reliability autonomous power distribution control system according to claim 1, characterized in that: The upper power distribution processing unit includes a comprehensive management unit and a comprehensive power distribution controller; wherein, The integrated management unit receives the power distribution control service request sent by the GNC controller, parses the power distribution control service request, obtains the channel number of the relay channel, and sends a power-on and power-off instruction of the corresponding channel number to the integrated power distribution controller; The integrated power distribution controller performs power-on and power-off operations on the power supply bus of the corresponding channel according to the power-on and power-off instructions of the channel number, thereby realizing power-on and power-off operations on the lower-level components.

3. The hierarchical GNC subsystem high-reliability autonomous power distribution control system according to claim 1 is characterized in that: Collect information or status of lower-level components. Specifically, in each control cycle, the GNC controller collects information or status from lower-level components.

4. The hierarchical GNC subsystem high-reliability autonomous power distribution control system according to claim 1, characterized in that: Perform data processing and diagnosis on the collected information or status of the lower-level components; send power-on and power-off instructions to the lower-level components, or send power distribution control service requests to the upper-level power distribution processing unit according to the diagnosis results and the categories of the lower-level components. The specific methods are as follows: S1. Set the lower-level component set Ω Product ={Ψ Product_1 ,...,Ψ Product_i ,...,Ψ Product_n }, i = 1...n and the number of communication failures set Ω Cont ={Ν Cont_1 ,...,Ν Cont_i ,...,Ν Cont_n }, i = 1...n, where N Cont_i Indicates the GNC controller for component Ψ Pordu Communication failure times; component communication status set Ω State ={Φ State_1 ,...,Φ State_i ,...,Φ State_n }, i=1...n; S2, the GNC controller sends a detection signal to each component in the lower-level component set in each control cycle, and waits for the feedback signal from the receiving component; S3. If no feedback signal is received from a component within this control cycle, the number of communication failures N of the corresponding component is Cont_i Add 1; if N Cont_i =N Cont_i_Lmit When Product_i The communication diagnosis result is communication failure, Φ State_i =0; where N Cont_i_Lmit For component Ψ Product_i Determine the communication failure number threshold; proceed to step S4; otherwise, the communication is successful, and return to step S2; S4, if the component Ψ Product_i For autonomous and controllable power distribution components, Product_i Send power-on and power-off instructions; if the service request is for a power distribution component, send a power distribution control service request to the superior integrated management unit.

5. The hierarchical GNC subsystem high-reliability autonomous power distribution control system according to claim 4, characterized in that: Also includes: Towards component Product_i After sending the power-on and power-off command, the GNC controller will inside Then continue with the components Product_i Communication, if judged with component Ψ Product_i If the communication between them fails, a corresponding power distribution control service request is sent to the superior integrated management unit to Product_i The power supply bus performs power-on and power-off operations.

6. The hierarchical and graded GNC subsystem high-reliability autonomous power distribution control system according to claim 4, characterized in that: 10≤Ν Cont_i_Lmit <50。 7. The hierarchical GNC subsystem high-reliability autonomous power distribution control system according to claim 1, characterized in that: The autonomous and controllable power distribution components are components that perform tasks for more than one month and components that perform emergency tasks; the service request power distribution components are components that perform tasks for less than one month.

8. The hierarchical and graded GNC subsystem high-reliability autonomous power distribution control system according to claim 1, characterized in that: The integrated power distribution controller comprises a power-on and power-off instruction control unit and a plurality of power control units; wherein the power control unit comprises a plurality of relay channels, each of which is connected to a power supply bus of a component; the power control unit implements power-on and power-off control of the component corresponding to the relay channel according to the power-on and power-off instructions sent by the power-on and power-off instruction control unit; the power-on and power-off instruction control unit identifies the channel number of the relay channel according to the power-on and power-off instructions sent by the integrated management unit, and then sends the power-on and power-off instructions to the corresponding power control unit.

9. A hierarchical GNC subsystem high-reliability autonomous power distribution control method, characterized in that: include: The GNC controller collects information or status of lower-level components; Perform data processing and diagnosis on the collected information or status of the lower-level components; According to the diagnosis results, it sends power-on or power-off instructions to the lower-level components, or sends power distribution control service requests to the upper-level power distribution processing unit; Autonomous controllable power distribution components implement power on / off control according to the power on / off instructions sent by the GNC controller; service request power distribution components implement power on / off control through the power supply bus; The upper-level power distribution processing unit analyzes the power distribution control service request sent by the GNC controller, and performs power-on and power-off operations on the corresponding power supply bus according to the analysis results.

Images