Computer control system machine control method for aerospace industry

Abstract

The invention discloses a computer control system machine control method for the aerospace industry, and the method comprises the following operation steps: setting a multi-stage reset mechanism for a computer control system machine, recovering from any undefined and unnecessary exceptions in flight software, and solving any problems caused by single event upset; autonomous reset of the SoM of the computer control system machine is set, whenever the operating system card is in any software routine; a complete autonomous reset of a computer control system machine is set. According to the computer control system machine control method for the aerospace industry, a multi-stage reset mechanism is designed, a key requirement for powerful reset mechanism computer control is met, recovery from any undefined and unnecessary exceptions in flight software is facilitated, any problems caused by single event upset are solved, and the computer control system machine control method for the aerospace industry has high practicability. The method has enough capability to operate a typical computer system, and has greater advantages and competitiveness.

Description

Technical Field

[0001] The present invention relates to the technical field of aerospace industry, and in particular to a machine control method of a computer control system for the aerospace industry. Background Art

[0002] The computer control system machine control method is a method for monitoring and controlling the computer controller. As a typical knowledge and technology intensive industry with high added value, the aerospace industry was led by the government at the beginning of its development. The purpose of space exploration is mainly to serve the needs of national security. The development level of the aerospace industry is a reflection of a country's comprehensive strength and national defense strength. In recent years, driven by a new round of global industrial revolution, the development of the global aerospace industry has ushered in a new stage of great development and great change. Commercial aerospace has become an important new force to promote the rapid development of the aerospace industry. With the continuous development of science and technology, people's requirements for computer control system machine control methods are getting higher and higher.

[0003] With the continuous development of applications such as satellite communications and satellite navigation, the demand for high-performance and high-reliability onboard computers is also increasing. These computers are mainly used for tasks such as satellite system control, data processing and communication, and play a key role in ensuring the performance and functionality of satellite systems. According to data and market observations, the satellite onboard computer industry is currently in a transition period from the early stage to the mature stage. Due to the rapid development of satellite communications and aerospace technology, the emergence of emerging markets and applications has brought a large number of opportunities to the industry. To this end, we propose a machine control method for computer control systems used in the aerospace industry. Summary of the invention

[0004] Technical problems solved: In view of the shortcomings of the prior art, the present invention provides a machine control method for a computer control system for the aerospace industry, designs a multi-level reset mechanism, and possesses a powerful reset mechanism, which is a key requirement for computer control. It helps to recover from any undefined and unwanted exceptions in the flight software and solve any problems caused by single particle flips. It has sufficient capacity to run a typical computer system, has greater advantages and competitiveness, and can effectively solve the problems in the background technology.

[0005] Technical solution: To achieve the above purpose, the technical solution adopted by the present invention is: a machine control method of a computer control system for aerospace industry, comprising the following operating steps: S1: The computer control system machine sets a multi-level reset mechanism to recover from any undefined and unwanted anomalies in the flight software and resolve any problems caused by single event upsets; S2: Sets an autonomous reset of the SoM of the computer controlled system machine, generated whenever the operating system gets stuck in any software routine; S3: Setting up a complete autonomous reset of the computer control system machinery, the spacecraft will involve sending a signal to the satellite’s power system to generate a reset; S4: Set the reset based on the ground station command in the computer control system machine. The complete spacecraft requires a hardware and software routine that can be used to generate a spacecraft reset using telecontrol commands; S5: Integrate the above reset methods and use a multi-level reset mechanism to control the computer control system machine.

[0006] As a preferred technical solution of the present application, the multi-level reset mechanism in step S5 specifically includes the following operations: A: A processor monitoring IC containing a watchdog timer and connected to a SoM module that provides a first-level reset; B: If the watchdog timer in this IC does not receive a switching signal from the SoM within the programmable watchdog window, a reset signal to the SoM is generated. If the reset of the SoM alone does not restore the spacecraft to a recognizable state, the next step will be to reset the entire spacecraft. C: A dual 4-bit counter is added to the reset mechanism. The reset output of the processor monitoring IC is connected to the first clock input of the dual 4-bit counter. The MSB output of the counter is used to send a signal to the satellite's power system to generate a spacecraft reset. After a total of eight internal resets are counted, a complete spacecraft reset is automatically generated. D: To provide a spacecraft reset from a ground station command, a dedicated GPIO line from the SoM module is connected to a 4-bit counter IC; E: Write a software routine in the flight software that can be triggered from the ground to toggle this GPIO eight times. The GPIO is not used directly to trigger the EPS to prevent false triggering that could occur due to permanent latching of this line. F: Both reset trigger signals sent to the EPS are passed through the OR gate, so the spacecraft reset can be triggered automatically or by a command from the ground station.

[0007] As a preferred technical solution of the present application, the solid-state relay drive in the computer control system machine is designed with external on-board redundancy. The computer control system machine includes two 128GbSD cards for storing scientific and housekeeping data before downlink. The two SD cards are connected to the SoM module using a separate SPI bus to ensure that one failure will not cause another failure. Using two can also provide redundancy in case one of them fails. The power supply of the SD card is controlled by a solid-state relay, and the solid-state relay switch provides the ability to reset the SD card in the event of a SD card failure.

[0008] As a preferred technical solution of the present application, the computer control system machine protects the SoM module from abnormal conditions. The computer control system machine includes a standard PC104 bus to connect to different subsystems, and four RS422 converter ICs are added to convert the UART line into RS422 logic levels. In addition, the interface lines of different subsystems pass through the bus transceiver. The IC provides hardware control and can put any interface with the external subsystem into a three-state state. The VCC isolation function of the IC also ensures that if any VCC input is at GND, both ports are in a high impedance state, protecting the SoM module from any type of abnormal behavior of other subsystems.

[0009] As a preferred technical solution of the present application, a database tool is set in the computer control system machine, and the database contains parameters of different subsystem components based on a survey of commercial nano- and micro-satellite products and a catalog of space heritage components. The analytical estimation of the relationship between them provides satellite mass, volume, power, sensor and actuator types, pointing accuracy, transmission power, data rate and cost parameters, and the parameters can be easily scaled according to the selected variables to estimate the first-order calculation of satellite mass, size, power, data rate and pointing accuracy.

[0010] As a preferred technical solution of the present application, the computer control system machine sets power consumption analysis test, environmental test and radiation tolerance test when performing control, and monitors in real time whether the control configuration is abnormal.

[0011] As a preferred technical solution of the present application, the computer control system machine includes a SoM module, an external watchdog timer, an SD card for data storage, a bus transceiver and an RS422 transceiver.

[0012] As a preferred technical solution of the present application, the computer control system machine setting control monitoring and reset system includes a status monitoring module, a power consumption monitoring module, an environmental monitoring module, a radiation monitoring module, a central processing module, a display module, a control module and a reset module. The status monitoring module, the power consumption monitoring module, the environmental monitoring module and the radiation monitoring module transmit data to the central processing module through a transceiver, and the central processing module controls the display module, the control module and the reset module.

[0013] Beneficial effects: Compared with the prior art, the present invention provides a method for controlling a computer control system for the aerospace industry, which has the following beneficial effects: the method for controlling a computer control system for the aerospace industry designs a multi-level reset mechanism, has a powerful reset mechanism, which is a key requirement for computer control, helps to recover from any undefined and unwanted exceptions in the flight software, and solves any problems caused by single-particle upsets, has sufficient capacity to run typical computer systems, has greater advantages and competitiveness, and a processor monitoring IC containing a watchdog timer is connected to a SoM module that provides a first-level reset. If the watchdog timer in this IC does not receive a switching signal from the SoM within the programmable watchdog window, a reset signal for the SoM is generated. If the reset of the SoM alone cannot restore the spacecraft to a recognizable state, the next step will be to reset the entire spacecraft. To achieve this, a dual 4-bit counter is added to the reset mechanism. The reset output of the processor monitoring IC is connected to the first clock input of the dual 4-bit counter. The MSB output of the counter is used to send a signal to the satellite's power system to generate a spacecraft reset. After a total of eight internal resets are counted, a complete spacecraft reset is automatically generated. Finally, to provide a spacecraft reset from a ground station command, a dedicated GPIO line from the SoM is connected to a 4-bit counter IC. A software routine is written in the flight software that can be triggered from the ground to toggle this GPIO eight times. The GPIO is not used directly to trigger the EPS to prevent false triggering that could occur due to permanent latching of this line. Both reset trigger signals sent to the EPS are passed through an OR gate, so the spacecraft reset can be triggered automatically or by a command from the ground station. The entire computer control system machine control method is simple in structure, easy to operate, and the effect of use is better than the traditional method. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 The overall structural diagram of a machine control method of a computer control system for aerospace industry according to the present invention.

[0015] Figure 2 The present invention is a flowchart of a multi-level reset method in a machine control method of a computer control system for the aerospace industry. DETAILED DESCRIPTION

[0016] The technical scheme of the present invention will be clearly and completely described below in conjunction with the accompanying drawings and specific embodiments, but it will be understood by those skilled in the art that the following described embodiments are part of embodiments of the present invention, rather than all embodiments, and are only used to illustrate the present invention, and should not be considered as limiting the scope of the present invention. Based on the embodiments in the present invention, all other embodiments obtained by those of ordinary skill in the art without making creative work are within the scope of protection of the present invention. If specific conditions are not specified in the embodiments, they are carried out according to normal conditions or conditions recommended by the manufacturer. If the manufacturer is not specified in the reagents or instruments used, they are all conventional products that can be purchased commercially.

[0017] In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc., indicating the orientation or positional relationship, are based on the orientation or positional relationship shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and cannot be understood as indicating or implying relative importance.

[0018] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0019] like Figure 1 , 2 As shown, a method for controlling a machine of a computer control system for the aerospace industry includes the following steps: S1: The computer control system machine sets a multi-level reset mechanism to recover from any undefined and unwanted anomalies in the flight software and resolve any problems caused by single event upsets; S2: Sets an autonomous reset of the SoM of the computer controlled system machine, generated whenever the operating system gets stuck in any software routine; S3: Setting up a complete autonomous reset of the computer control system machinery, the spacecraft will involve sending a signal to the satellite’s power system to generate a reset; S4: Set the reset based on the ground station command in the computer control system machine. The complete spacecraft requires a hardware and software routine that can be used to generate a spacecraft reset using telecontrol commands; S5: Integrate the above reset methods and use a multi-level reset mechanism to control the computer control system machine.

[0020] Designing a multi-level reset mechanism and having a powerful reset mechanism is a key requirement for computer control, which helps to recover from any undefined and unwanted exceptions in the flight software and solve any problems caused by single-particle upsets. It has sufficient capacity to run typical computer systems and has greater advantages and competitiveness.

[0021] Furthermore, the multi-level reset mechanism in step S5 specifically includes the following operations: A: A processor monitoring IC containing a watchdog timer and connected to a SoM module that provides a first-level reset; B: If the watchdog timer in this IC does not receive a switching signal from the SoM within the programmable watchdog window, a reset signal to the SoM is generated. If the reset of the SoM alone does not restore the spacecraft to a recognizable state, the next step will be to reset the entire spacecraft. C: A dual 4-bit counter is added to the reset mechanism. The reset output of the processor monitoring IC is connected to the first clock input of the dual 4-bit counter. The MSB output of the counter is used to send a signal to the satellite's power system to generate a spacecraft reset. After a total of eight internal resets are counted, a complete spacecraft reset is automatically generated. D: To provide a spacecraft reset from a ground station command, a dedicated GPIO line from the SoM module is connected to a 4-bit counter IC; E: Write a software routine in the flight software that can be triggered from the ground to toggle this GPIO eight times. The GPIO is not used directly to trigger the EPS to prevent false triggering that could occur due to permanent latching of this line. F: Both reset trigger signals sent to the EPS are passed through the OR gate, so the spacecraft reset can be triggered automatically or by a command from the ground station.

[0022] Furthermore, the solid-state relays in the computer controlled system machine drive an external onboard redundancy design. The computer controlled system machine contains two 128GbSD cards for storing scientific and housekeeping data before going downlink. The two SD cards are connected to the SoM module using separate SPI buses to ensure that the failure of one will not cause the failure of the other. Using two also provides redundancy in case one of them fails. The power supply to the SD card is controlled by a solid-state relay. The solid-state relay switch provides the ability to reset the SD card in the event of a SD card failure.

[0023] Further, the computer control system machine is protected against abnormal conditions of the SoM module. The computer control system machine contains a standard PC104 bus to connect to different subsystems. Four RS422 converter ICs are added to convert the UART lines to RS422 logic levels. In addition, the interface lines of different subsystems pass through the bus transceiver. The IC provides hardware control to put any interface with the external subsystem into a tri-state. The VCC isolation function of the IC also ensures that if either VCC input is at GND, both ports are in a high impedance state, protecting the SoM module from any type of abnormal behavior of other subsystems.

[0024] Furthermore, a database tool is set up in the computer control system machine. The database contains parameters of different subsystem components based on a survey of commercial nano- and micro-satellite products and a catalog of space heritage components. The analytical estimation of the relationship between them provides satellite mass, size, power, sensor and actuator type, pointing accuracy, transmission power, data rate and cost parameters. The parameters can be easily scaled to estimate the first-order calculation of satellite mass, size, power, data rate and pointing accuracy according to the selected variables.

[0025] Furthermore, the computer control system machine sets power consumption analysis test, environmental test and radiation tolerance test when performing control, and monitors in real time whether the control configuration is abnormal.

[0026] Further, the computer controlled system machine includes a SoM module, an external watchdog timer, an SD card for data storage, a bus transceiver and an RS422 transceiver.

[0027] Furthermore, the computer control system machine is set to control the monitoring and reset system, including a status monitoring module, a power consumption monitoring module, an environmental monitoring module, a radiation monitoring module, a central processing module, a display module, a control module and a reset module. The status monitoring module, the power consumption monitoring module, the environmental monitoring module and the radiation monitoring module transmit data to the central processing module via a transceiver, and the central processing module controls the display module, the control module and the reset module.

[0028] One of the main highlight features of the computer controlled system machine is its multi-level reset mechanism. Having a robust reset mechanism is a key requirement for computer controlled system machines as it helps to recover from any undefined and unwanted exceptions in the flight software and resolve any issues caused by single event upsets. In order to develop a robust mechanism for computer controlled system machine control, the resets are first divided into the following categories: Autonomous Reset of the SoM of a Computer Controlled System Machine Generated whenever the operating system gets stuck in any software routine.

[0029] Complete autonomous reset The spacecraft will be involved in sending a signal to the satellite's power system to generate a reset.

[0030] Reset based on ground station command A complete spacecraft, this will require a special hardware and software routine that can be used to generate a spacecraft reset using telecontrol commands. In order to implement all three of the above reset methods, a unique reset mechanism is designed, such as Figure 1 shown.

[0031] A processor supervisor IC containing a watchdog timer is connected to the SoM module that provides the first level of reset. If the watchdog timer in this IC does not receive a toggle signal from the SoM within the programmable watchdog window, a reset signal to the SoM is generated. If a reset of the SoM alone does not restore the spacecraft to a recognizable state, the next step will be to reset the entire spacecraft. To achieve this, a dual 4-bit counter is added to the reset mechanism. The reset output of the processor supervisor IC is connected to the first clock input of the dual 4-bit counter. The MSB output of the counter is used to signal the satellite's power system to generate a spacecraft reset. After a total of eight internal resets are counted, a full spacecraft reset is automatically generated. Finally, to provide a spacecraft reset from a ground station command, a dedicated GPIO line from the SoM is connected to the 4-bit counter IC. A software routine is written in the flight software that can be triggered from the ground to toggle this GPIO eight times. The GPIO is not used directly to trigger the EPS to prevent false triggering that could occur due to permanent latching of this line. Both reset trigger signals to the EPS are passed through an OR gate so that a spacecraft reset can be triggered automatically or by a command from the ground station.

[0032] It should be noted that, in this article, relational terms such as first and second (number one, number two), etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "including one..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0033] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited by the above embodiments, and the above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, and these changes and improvements all fall within the scope of the present invention to be protected.

Claims

1. A method for controlling a machine in a computer control system for the aerospace industry, characterized in that: The steps include: S1: The computer control system machine sets a multi-level reset mechanism to recover from any undefined and unwanted anomalies in the flight software and resolve any problems caused by single event upsets; S2: Sets an autonomous reset of the SoM of the computer controlled system machine, generated whenever the operating system gets stuck in any software routine; S3: Setting up a complete autonomous reset of the computer control system machinery, the spacecraft will involve sending a signal to the satellite’s power system to generate a reset; S4: Set the reset based on the ground station command in the computer control system machine. The complete spacecraft requires a hardware and software routine that can be used to generate a spacecraft reset using telecontrol commands; S5: Integrate the above reset methods and use a multi-level reset mechanism to control the computer control system machine.

2. The method for controlling a computer control system for aerospace industry according to claim 1, characterized in that: The multi-level reset mechanism in step S5 specifically includes the following operations: A: A processor monitoring IC containing a watchdog timer and connected to a SoM module that provides a first-level reset; B: If the watchdog timer in this IC does not receive a switching signal from the SoM within the programmable watchdog window, a reset signal to the SoM is generated. If the reset of the SoM alone does not restore the spacecraft to a recognizable state, the next step will be to reset the entire spacecraft. C: A dual 4-bit counter is added to the reset mechanism. The reset output of the processor monitoring IC is connected to the first clock input of the dual 4-bit counter. The MSB output of the counter is used to send a signal to the satellite's power system to generate a spacecraft reset. After a total of eight internal resets are counted, a complete spacecraft reset is automatically generated. D: To provide a spacecraft reset from a ground station command, a dedicated GPIO line from the SoM module is connected to a 4-bit counter IC; E: Write a software routine in the flight software that can be triggered from the ground to toggle this GPIO eight times. The GPIO is not used directly to trigger the EPS to prevent false triggering that could occur due to permanent latching of this line. F: Both reset trigger signals sent to the EPS are passed through the OR gate, so the spacecraft reset can be triggered automatically or by a command from the ground station.

3. The method for controlling a computer control system for aerospace industry according to claim 1, characterized in that: The solid state relays in the computer controlled system machine drive an external onboard redundancy design. The computer controlled system machine contains two 128Gb SD cards for storing scientific and housekeeping data before going down. The two SD cards are connected to the SoM module using separate SPI buses to ensure that the failure of one will not cause the failure of the other. Using two also provides redundancy in case one of them fails. The power supply to the SD card is controlled by a solid state relay. The solid state relay switch provides the ability to reset the SD card in the event of a SD card failure.

4. The method for controlling a computer control system for aerospace industry according to claim 1, characterized in that: The computer control system machine is protected against abnormal conditions of the SoM module. The computer control system machine includes a standard PC104 bus to connect to different subsystems. Four RS422 converter ICs are added to convert the UART lines into RS422 logic levels. In addition, the interface lines of different subsystems pass through the bus transceiver. The IC provides hardware control and can put any interface with the external subsystem into a three-state state. The VCC isolation function of the IC also ensures that if any VCC input is at GND, both ports are in a high impedance state, protecting the SoM module from any type of abnormal behavior of other subsystems.

5. The method for controlling a computer control system for aerospace industry according to claim 1, characterized in that: A database tool is set in the computer control system machine, and the database contains different subsystem component parameters based on a survey of commercial nano- and micro-satellite products and a catalog of space heritage components. The analytical estimation of the relationship between them provides satellite mass, size, power, sensor and actuator type, pointing accuracy, transmission power, data rate and cost parameters. The parameters can be easily scaled according to the selected variables to estimate the first-order calculation of satellite mass, size, power, data rate, and pointing accuracy.

6. The method for controlling a machine of a computer control system for aerospace industry according to claim 1, characterized in that: The computer control system machine sets power consumption analysis test, environmental test and radiation tolerance test when performing control, and monitors in real time whether the control configuration is abnormal.

7. The method for controlling a computer control system for aerospace industry according to claim 1, characterized in that: The computer controlled system machine includes a SoM module, an external watchdog timer, an SD card for data storage, a bus transceiver and an RS422 transceiver.

8. The method for controlling aerospace industry computer control system according to claim 1, characterized in that: The computer control system machine setting control monitoring and reset system includes a status monitoring module, a power consumption monitoring module, an environment monitoring module, a radiation monitoring module, a central processing module, a display module, a control module and a reset module. The status monitoring module, the power consumption monitoring module, the environment monitoring module and the radiation monitoring module transmit data to the central processing module via a transceiver, and the central processing module controls the display module, the control module and the reset module.

Images