Platform communication management stand-alone autonomous task management method

Abstract

The invention discloses an autonomous task management method for a platform communication management single machine, which aims at a reset management method after the platform communication management single machine is powered off and restarted and a reset management method when the platform communication management single machine works, and adopts an important data backup and recovery scheme as the platform communication management single machine for 24-hour service operation in orbit. By implementing the method, automatic reset can be realized, the latest state can be recovered after power-off restart, and automatic operation is realized in the running program switching and solid memory erasing processes. The backup frequency of the important data is shortened to be within 20 times per second, and the important data is stored in order, so that the storage space disorder is avoided, the storage space is saved, and the safety and reliability of the system are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of satellite communications, and in particular to a platform communication management stand-alone autonomous task management method. Background Art

[0002] Satellite on-orbit equipment is increasingly demanding an improvement in the degree of on-orbit autonomous management. After the platform communication management unit is reset or powered off and restarted, it can be restored to the previous state autonomously, and ground control intervention is minimized. The main business of the platform communication management unit is completed in the processing FPGA, and it is necessary to regularly back up the operating status and parameters during the operation process in real time. Since the platform communication management unit is generally not powered off and restarted when the satellite is in orbit, most of the time only the FPGA processing reset operation is performed on orbit (generally once per orbit). In order to continue the previous operating state after power off and restart and reset, it is necessary to restore the state from the important data to maintain the continuity of the task and the order of the data. However, some important parameters, such as the persistent read and write address, change very quickly, which requires a fast backup frequency when backing up important data. In particular, the requirements for important data recovery after power off and restart are high, because the general non-volatile memory has a limited operating life for the same stored address (the operating life of the Flash memory is limited), and cannot meet the requirements of such high-frequency important data backup and recovery.

[0003] In the past, the conventional practice was to store important data in a fixed NandFlash location. Considering the erase and write life of NandFlash, the backup frequency of important data can usually only be designed to be once every 15 minutes. This backup frequency is too high and generally results in failure to restore to the latest state after power failure and restart, which often leads to disordered business data storage and / or waste of storage space.

[0004] Therefore, designing a platform communication management stand-alone autonomous task management method can realize the platform communication management stand-alone autonomous reset, shorten the backup frequency of important data, and improve the security and reliability of the system, which becomes the direction of further improvement. Summary of the invention

[0005] In order to solve the above technical problems, the present invention provides a platform communication management stand-alone autonomous task management method, a platform communication management stand-alone autonomous task management method, characterized in that: it includes a reset management method after the platform communication management stand-alone is powered off and restarted and a reset management method when the platform communication management stand-alone is working, and the reset management method after the platform communication management stand-alone is powered off and restarted includes the following steps:

[0006] S1.1, at T0, the satellite service computer powers on the platform communication management stand-alone machine, and the platform communication management stand-alone machine processes the FPGA program loading. From T0 to T0+6 seconds, the monitoring FPGA takes the program for processing the FPGA from the program memory and writes it to the on-chip configuration memory of the processing FPGA through the SelectMap interface of the processing FPGA to realize the processing FPGA program loading;

[0007] S1.2, based on S1.1, after the FPGA program is run, important data is restored from NandFlash. At this time, all external interfaces except CAN and air interface are closed. CAN commands and air interface direct commands can still be received during the important data recovery period;

[0008] S1.3. Based on S1.2, at T0+8.2 seconds, important data is successfully recovered, and the FPGA releases all communication interface modules with the satellite service, and immediately starts RS422 asynchronous communication to receive engineering telemetry data and other business data sent by the satellite service computer;

[0009] S1.4, based on S1.3, the platform communication management stand-alone starts to run the business, the monitoring FPGA starts to back up important data, and the processing FPGA will completely erase the real-time NandFlash;

[0010] S1.5. Based on S1.4, the erasure is completed in T0+(11.2~20) seconds. After the RT-NandFlash is erased, the platform communication management unit backs up important data to the RT-NandFlash again.

[0011] Preferably, the reset management method when the platform communication management unit works alone comprises the following steps:

[0012] S2.1. When the satellite service computer resets or cuts the program of the platform communication management unit through indirect or direct instructions at time T0, the platform communication management unit will delay the execution of the instruction for 2 seconds. During this 2-second period, all external interfaces except CAN and air interface will be closed. At the same time, a default push cache operation will be performed inside the platform communication management unit;

[0013] S2.2, based on S2.1, at T0+2 seconds, the monitoring FPGA starts to reload the processing FPGA program. During the period from T0+2 seconds to T0+8 seconds, the platform communication management stand-alone machine will not make any response or receive any instructions to the CAN of the satellite service computer;

[0014] S2.3, based on S2.2, the FPGA program starts running at T0+8 seconds, and the platform communication management single machine executes to recover important data from the monitoring FPGA. Before the important data is successfully recovered, all interfaces to the satellite except CAN and air interface are kept closed. During the recovery of important data, CAN commands and air interface direct commands can be received;

[0015] S2.4. Based on S2.3, at T0+9 seconds, important data is successfully restored, the FPGA program is run, important data starts to be backed up, the FPGA releases all communication interface modules with the satellite service computer, and the platform communication management unit immediately starts communication and business operations.

[0016] Preferably, the process of platform communication management of single machine power off includes the following steps:

[0017] a) Set the time T1, and the satellite service computer informs the platform communication management stand-alone through the indirect command "power-off notification" that the platform communication management stand-alone will be powered off in 3 seconds. When the platform communication management stand-alone receives this indirect command, it will immediately shut down all satellite interfaces except CAN and air interface. During the shutdown period, it can still receive CAN instructions and air interface direct instructions, and continue to back up important data; when receiving the power-off notification, it will default to a push cache operation;

[0018] b) Based on step a, at T1+3 seconds, the satellite service computer will power off the platform communication management unit;

[0019] c) Based on step b, if the satellite service computer does not power off the platform communication management machine within the specified time, the platform communication management machine will re-enable all communication interfaces at T1+5 seconds to restore normal interface communication and services.

[0020] Preferably, in the reset management method after power failure and restart of a single platform communication management machine, in step S1.2, the process of recovering important data from NandFlash includes a process of recovering high-frequency important data and a process of recovering low-frequency important data.

[0021] Preferably, the process of restoring high-frequency important data includes the following steps:

[0022] S1.2.1, T0+1.2 seconds to T0+2.2 seconds: FPGA searches for the index numbers of high-frequency important data twice from RT-NandFlash for difference comparison;

[0023] S1.2.2. Based on S1.2.1, if the difference between the index numbers of two high-frequency important data is less than 1300, continue to search for the maximum index frame of the two high-frequency important data until all important data are searched;

[0024] S1.2.3, based on S1.2.2, if the difference between the maximum index numbers of two high-frequency important data is less than 10, the latest high-frequency important data is searched;

[0025] S1.2.4. Based on S1.2.3, the latest high-frequency important data is restored to the processing FPGA, and the new high-frequency important data index is restored from the RT-nandFlash. The high-frequency important data storage address starts from 0. Before restarting the important data backup, the RT-NandFlash is fully erased.

[0026] Preferably, the process of recovering low-frequency important data includes the following steps:

[0027] S1.2.5, recover important data from the spread spectrum code groups stored at positions N and N+1, respectively, where N is an integer MB storage address with an index number greater than 1360;

[0028] S1.2.6. Based on S1.2.5, read the spread spectrum code group at position N;

[0029] S1.2.7, based on S1.2.6, the effective identification of the successfully recovered low-frequency important data is recorded as A, and the criterion for successful recovery is that the checksum SUM16 is correct;

[0030] S1.2.8, based on S1.2.7, T0+1.0 seconds to T0+1.1 seconds, the FPGA is processed to recover the spread spectrum code group from position N;

[0031] S1.2.9, based on S1.2.8, read the spread spectrum code group at position N+1;

[0032] S1.2.10. Based on S1.2.9, the effective identification of the successfully recovered low-frequency important data is recorded as A. The criterion for successful recovery is that the checksum SUM16 is correct.

[0033] S1.2.11. Based on S1.2.10, from T0+1.1 seconds to T0+1.2 seconds, the FPGA recovers the spread spectrum code group from the N+1 position.

[0034] Preferably, in step S2.4, the important data is successfully restored, the EPGA program is run, and the specific contents of starting to back up the important data include: processing the FPGA to restore the important data from the monitoring EPGA within T0+8 seconds to T0+9 seconds, processing the EPGA to set the valid flag of the successfully restored important data to A, and according to the RT-NandFlash write address and index number of the restored important data, processing the FPGA to perform a new important data backup without completely erasing the RT-NandFlash.

[0035] Compared with the prior art, the present invention has the following beneficial effects:

[0036] (1) The present invention manages autonomous tasks by targeting two different reset modes that occur during the operation of the platform communication management stand-alone machine, distinguishing its important data backup and recovery schemes. As a platform communication management stand-alone machine that operates 24 hours a day on track, by implementing this method, the platform communication management stand-alone machine can automatically reset, and after power failure and restart, it can automatically recover to the latest state before reset or power failure, and ensure the autonomous recovery of the entire business. The backup frequency of important data is shortened to within 20 times / second, and the recovery of important data can ensure that user data is stored in an orderly manner, avoid storage space disorder, save storage space, and improve the security and reliability of the system.

[0037] (2) The reset management method of the platform communication management stand-alone machine after power failure and restart of the present invention is that the platform communication management stand-alone machine after power failure and restart performs high-frequency and low-frequency sequential storage and backup of important parameters that change according to the start of business operation, thereby improving the security of the platform communication management stand-alone machine. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 The present invention is a flow chart of a reset management method for a platform communication management stand-alone after power failure and restart.

[0039] Figure 2 The present invention is a flow chart of the reset management method when the platform communication management unit works alone. DETAILED DESCRIPTION

[0040] The present invention will be further described below in conjunction with the accompanying drawings and specific implementation methods.

[0041] In the description of the present invention, unless otherwise specified, "plurality" means two or more than two; the orientations or positional relationships indicated by the terms "upper", "lower", "left", "right", "inner", "outer", "front end", "rear end", "head", "tail", etc. are based on the orientations or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operate in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first", "second", "third", etc. are only used for descriptive purposes and cannot be understood as indicating or implying relative importance.

[0042] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "connected" and "connection" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0043] like Figure 1 to Figure 2 As shown, the platform communication management stand-alone autonomous task management method includes a reset management method for the platform communication management stand-alone after power failure and restart and a reset management method for the platform communication management stand-alone when working. As a platform communication management stand-alone that operates 24 hours a day in orbit, through the implementation of this method, the platform communication management stand-alone can reset itself, and after power failure and restart, it can autonomously recover to the latest state before reset or power failure, and ensure the autonomous recovery of the entire business. The backup frequency of important data is shortened to 20 times / second. The recovery of important data can ensure the orderly storage of user data, avoid storage space disorder, save storage space, and improve the security and reliability of the system.

[0044] The reset management method of the platform communication management stand-alone after power failure and restart includes the following steps:

[0045] S1.1, at T0, the satellite service computer powers on the platform communication management stand-alone machine, and the platform communication management stand-alone machine processes the FPGA program loading. From T0 to T0+6 seconds, the monitoring FPGA takes the program for processing the FPGA from the program memory and writes it to the on-chip configuration memory of the processing FPGA through the SelectMap interface of the processing FPGA to realize the processing FPGA program loading;

[0046] S1.2, based on S1.1, after the FPGA program is run, important data is restored from NandFlash. At this time, all external interfaces except CAN and air interface are closed. CAN commands and air interface direct commands can still be received during the important data recovery period;

[0047] S1.3. Based on S1.2, at T0+8.2 seconds, important data is successfully recovered, and the FPGA releases all communication interface modules with the satellite service, and immediately starts RS422 asynchronous communication to receive engineering telemetry data and other business data sent by the satellite service computer;

[0048] S1.4, based on S1.3, the platform communication management stand-alone starts to run the business, the monitoring FPGA starts to back up important data, and the processing FPGA will completely erase the real-time NandFlash;

[0049] S1.5. Based on S1.4, the erasure is completed in T0+(11.2~20) seconds. After the RT-NandFlash is erased, the platform communication management unit backs up important data to the RT-NandFlash again.

[0050] After the platform communication management unit is powered off and restarted, the software defaults to loading from the 9th area (copy 9 program). When the platform communication management unit is reset, the software loads from the current working copy location, such as: the current working copy 10 is in the 10th area, after reset, the program will still work in the 10th area, which has the corresponding telemetry "current program working copy".

[0051] For step S1.4, in this embodiment, high-frequency important data (10 times per second) is backed up to the monitoring FPGA and RT-NandFlash. The high-frequency important data backup of RT-NandFlash adopts a rolling backup method (sequentially writing into 4GB storage space), rather than repeatedly backing up in a fixed location. Low-frequency important data is backed up in a fixed storage location only when the corresponding instructions are received, causing the important data to change, such as code group 1 setting, code group 2 setting, star code setting and other instructions.

[0052] The important data is managed hierarchically through the reset management method after the platform communication management stand-alone is powered off and restarted, and the important parameters that play a key role in the business functions of the platform communication management stand-alone are stored in an independent location. The stored important data will be erased and written only when the corresponding parameters are changed through indirect instructions. Specifically, after the power is off and restarted, the platform communication management stand-alone performs high-frequency and low-frequency sequential storage and backup of important parameters that change according to the start of business operation. The backup NandFlash space selected in this embodiment can reach 4GB. The hierarchical storage scheme of important data divided into high-frequency important data and low-frequency important data improves the security of the platform communication management stand-alone.

[0053] The reset management method when the platform communication management is working alone includes the following steps:

[0054] S2.1. When the satellite service computer resets or cuts the program of the platform communication management unit through indirect or direct instructions at time T0, the platform communication management unit will delay the execution of the instruction for 2 seconds. During this 2-second period, all external interfaces except CAN and air interface will be closed. At the same time, a default push cache operation will be performed inside the platform communication management unit;

[0055] S2.2, based on S2.1, at T0+2 seconds, the monitoring FPGA starts to reload the processing FPGA program. During the period from T0+2 seconds to T0+8 seconds, the platform communication management stand-alone machine will not make any response or receive any instructions to the CAN of the satellite service computer;

[0056] S2.3, based on S2.2, the FPGA program starts running at T0+8 seconds, and the platform communication management single machine executes to recover important data from the monitoring FPGA. Before the important data is successfully recovered, all interfaces to the satellite except CAN and air interface are kept closed. During the recovery of important data, CAN commands and air interface direct commands can be received;

[0057] S2.4. Based on S2.3, at T0+9 seconds, important data is successfully restored, the FPGA program is run, important data starts to be backed up, the FPGA releases all communication interface modules with the satellite service computer, and the platform communication management unit immediately starts communication and business operations.

[0058] Specifically, in step S2.4, the important data is successfully restored, the EPGA program is run, and the specific contents of starting to back up the important data include: within T0+8 seconds to T0+9 seconds, the FPGA is processed to restore the important data from the monitoring EPGA, the EPGA sets the valid flag of the successfully restored important data to A, and according to the RT-NandFlash write address and index number of the restored important data, the FPGA performs a new important data backup without completely erasing the RT-NandFlash.

[0059] It should be noted that the important data backed up by the processing FPGA to the monitoring FPGA is backed up every 333ms. The processing FPGA is backed up once it is loaded successfully. The monitoring FPGA also performs frame header and important data valid identification and checksum judgment on the important data received from the processing FPGA. The important data is backed up to RT-Nandflash in real time and backed up every 333ms. The backup starts when the important data valid identification of the processing FPGA is set to A.

[0060] The reset management of the platform communication management when working alone does not distinguish between high-frequency important data and low-frequency important data. All important data are restored from the monitoring FPGA.

[0061] Important data include but are not limited to: satellite orbit number, satellite number, 143 storage partitions, read and write addresses of each partition, record / playback status, two sets of measurement and control code groups, etc.

[0062] The process of platform communication management single machine power outage includes the following steps:

[0063] a) Set the time T1, and the satellite service computer informs the platform communication management stand-alone through the indirect command "power-off notification" that the platform communication management stand-alone will be powered off in 3 seconds. When the platform communication management stand-alone receives this indirect command, it will immediately shut down all satellite interfaces except CAN and air interface. During the shutdown period, it can still receive CAN instructions and air interface direct instructions, and continue to back up important data; when receiving the power-off notification, it will default to a push cache operation;

[0064] b) Based on step a, at T1+3 seconds, the satellite service computer will power off the platform communication management unit;

[0065] c) Based on step b, if the satellite service computer does not power off the platform communication management machine within the specified time, the platform communication management machine will re-enable all communication interfaces at T1+5 seconds to restore normal interface communication and services.

[0066] In the reset management method after the platform communication management single machine is powered off and restarted, in step S1.2, the process of recovering important data from NandFlash includes the process of recovering high-frequency important data and the process of recovering low-frequency important data.

[0067] The process of recovering high-frequency important data includes the following steps:

[0068] S1.2.1, T0+1.2 seconds to T0+2.2 seconds: FPGA searches for the index numbers of high-frequency important data twice from RT-NandFlash for difference comparison;

[0069] S1.2.2. Based on S1.2.1, if the difference between the index numbers of two high-frequency important data is less than 1300, continue to search for the maximum index frame of the two high-frequency important data until all important data are searched;

[0070] S1.2.3, based on S1.2.2, if the difference between the maximum index numbers of two high-frequency important data is less than 10, the latest high-frequency important data is searched;

[0071] S1.2.4. Based on S1.2.3, the latest high-frequency important data is restored to the processing FPGA, and the new high-frequency important data index is restored from the RT-nandFlash. The high-frequency important data storage address starts from 0. Before restarting the important data backup, the RT-NandFlash is fully erased.

[0072] The process of recovering low-frequency important data includes the following steps:

[0073] S1.2.5, recover important data from the spread spectrum code groups stored at positions N and N+1, respectively, where N is an integer MB storage address with an index number greater than 1360;

[0074] S1.2.6. Based on S1.2.5, read the spread spectrum code group at position N;

[0075] S1.2.7, based on S1.2.6, the effective identification of the successfully recovered low-frequency important data is recorded as A, and the criterion for successful recovery is that the checksum SUM16 is correct;

[0076] S1.2.8, based on S1.2.7, T0+1.0 seconds to T0+1.1 seconds, the FPGA is processed to recover the spread spectrum code group from position N;

[0077] S1.2.9, based on S1.2.8, read the spread spectrum code group at position N+1;

[0078] S1.2.10. Based on S1.2.9, the effective identification of the successfully recovered low-frequency important data is recorded as A. The criterion for successful recovery is that the checksum SUM16 is correct.

[0079] S1.2.11. Based on S1.2.10, from T0+1.1 seconds to T0+1.2 seconds, the FPGA recovers the spread spectrum code group from the N+1 position.

[0080] The above-mentioned embodiments are only preferred embodiments of the present invention and cannot be used to limit the scope of rights of the present invention. Therefore, modifications, equivalent changes, improvements, etc. made according to the scope of the patent application of the present invention are still within the scope covered by the present invention.

Claims

1. A platform communication management stand-alone autonomous task management method, characterized by: The present invention comprises a reset management method after a platform communication management stand-alone is powered off and restarted, and a reset management method when the platform communication management stand-alone is working. The reset management method after a platform communication management stand-alone is powered off and restarted comprises the following steps: S1.1, at T0, the satellite service computer powers on the platform communication management stand-alone machine, and the platform communication management stand-alone machine processes the FPGA program loading. From T0 to T0+6 seconds, the monitoring FPGA takes the program for processing the FPGA from the program memory and writes it to the on-chip configuration memory of the processing FPGA through the SelectMap interface of the processing FPGA to realize the processing FPGA program loading; S1.2, based on S1.1, after the FPGA program is run, important data is restored from NandFlash. At this time, all external interfaces except CAN and air interface are closed. CAN commands and air interface direct commands can still be received during the important data recovery period; S1.

3. Based on S1.2, at T0+8.2 seconds, important data is successfully recovered, and the FPGA releases all communication interface modules with the satellite service, and immediately starts RS422 asynchronous communication to receive engineering telemetry data and other business data sent by the satellite service computer; S1.4, based on S1.3, the platform communication management stand-alone starts to run the business, the monitoring FPGA starts to back up important data, and the processing FPGA will completely erase the real-time NandFlash; S1.

5. Based on S1.4, the erasure is completed in T0+(11.2~20) seconds. After the RT-NandFlash is erased, the platform communication management unit backs up important data to the RT-NandFlash again.

2. A platform communication management stand-alone autonomous task management method according to claim 1, characterized in that: The reset management method when the platform communication management unit works comprises the following steps: S2.

1. When the satellite service computer resets or cuts the program of the platform communication management unit through indirect or direct instructions at time T0, the platform communication management unit will delay the execution of the instruction for 2 seconds. During this 2-second period, all external interfaces except CAN and air interface will be closed. At the same time, a default push cache operation will be performed inside the platform communication management unit; S2.2, based on S2.1, at T0+2 seconds, the monitoring FPGA starts to reload the processing FPGA program. During the period from T0+2 seconds to T0+8 seconds, the platform communication management stand-alone machine will not make any response or receive any instructions to the CAN of the satellite service computer; S2.3, based on S2.2, the FPGA program starts running at T0+8 seconds, and the platform communication management single machine executes to recover important data from the monitoring FPGA. Before the important data is successfully recovered, all interfaces to the satellite except CAN and air interface are kept closed. During the recovery of important data, CAN commands and air interface direct commands can be received; S2.

4. Based on S2.3, at T0+9 seconds, important data is successfully restored, the FPGA program is run, important data starts to be backed up, the FPGA releases all communication interface modules with the satellite service computer, and the platform communication management unit immediately starts communication and business operations.

3. A platform communication management stand-alone autonomous task management method according to claim 2, characterized in that: The process of platform communication management single machine power outage includes the following steps: a) Set the time T1, and the satellite service computer informs the platform communication management stand-alone through the indirect command "power-off notification" that the platform communication management stand-alone will be powered off in 3 seconds. When the platform communication management stand-alone receives this indirect command, it will immediately shut down all satellite interfaces except CAN and air interface. During the shutdown period, it can still receive CAN instructions and air interface direct instructions, and continue to back up important data; when receiving the power-off notification, it will default to a push cache operation; b) Based on step a, at T1+3 seconds, the satellite service computer will power off the platform communication management unit; c) Based on step b, if the satellite service computer does not power off the platform communication management machine within the specified time, the platform communication management machine will re-enable all communication interfaces at T1+5 seconds to restore normal interface communication and services.

4. A platform communication management stand-alone autonomous task management method according to claim 2, characterized in that: In the platform communication management method for reset management after a single machine is powered off and restarted, in step S1.2, the process of recovering important data from NandFlash includes a process of recovering high-frequency important data and a process of recovering low-frequency important data.

5. A platform communication management stand-alone autonomous task management method according to claim 4, characterized in that: The process of recovering high-frequency important data includes the following steps: S1.2.1, T0+1.2 seconds to T0+2.2 seconds: FPGA searches for the index numbers of high-frequency important data twice from RT-NandFlash for difference comparison; S1.2.

2. Based on S1.2.1, if the difference between the index numbers of two high-frequency important data is less than 1300, continue to search for the maximum index frame of the two high-frequency important data until all important data are searched; S1.2.3, based on S1.2.2, if the difference between the maximum index numbers of two high-frequency important data is less than 10, the latest high-frequency important data is searched; S1.2.

4. Based on S1.2.3, the latest high-frequency important data is restored to the processing FPGA, and the new high-frequency important data index is restored from the RT-nandFlash. The high-frequency important data storage address starts from 0. Before restarting the important data backup, the RT-NandFlash is fully erased.

6. A platform communication management stand-alone autonomous task management method according to claim 4, characterized in that: The process of recovering low-frequency important data includes the following steps: S1.2.5, recover important data from the spread spectrum code groups stored at positions N and N+1, respectively, where N is an integer MB storage address with an index number greater than 1360; S1.2.

6. Based on S1.2.5, read the spread spectrum code group at position N; S1.2.7, based on S1.2.6, the effective identification of the successfully recovered low-frequency important data is recorded as A, and the criterion for successful recovery is that the checksum SUM16 is correct; S1.2.8, based on S1.2.7, T0+1.0 seconds to T0+1.1 seconds, the FPGA is processed to recover the spread spectrum code group from position N; S1.2.9, based on S1.2.8, read the spread spectrum code group at position N+1; S1.2.

10. Based on S1.2.9, the effective identification of the successfully recovered low-frequency important data is recorded as A. The criterion for successful recovery is that the checksum SUM16 is correct. S1.2.

11. Based on S1.2.10, from T0+1.1 seconds to T0+1.2 seconds, the FPGA recovers the spread spectrum code group from the N+1 position.

7. A platform communication management stand-alone autonomous task management method according to claim 2, characterized in that: In the step S2.4, the important data is successfully restored, the EPGA program is run, and the specific contents of starting to back up the important data include: within T0+8 seconds to T0+9 seconds, the FPGA is processed to restore the important data from the monitoring EPGA, the EPGA sets the valid flag of the successfully restored important data to A, and according to the RT-NandFlash write address and index number of the restored important data, the FPGA performs a new important data backup without completely erasing the RT-NandFlash.

Images