Grading single event effect avoiding and processing method for GEO all-electric push orbit injection satellite measurement and control channel

Abstract

The invention provides a hierarchical single event effect evading and processing method for a GEO full-electric injection satellite measurement and control channel, and the method comprises the steps: analyzing and judging a single event effect influence level which affects a satellite-borne measurement and control channel based on key single-machine telemetering parameters in a measurement and control subsystem; if the module level is the preset module level, analyzing an abnormal point location in a single machine influenced by a single event effect based on a key single machine telemetering parameter, and resetting the abnormal point location, or configuring a state refreshing device in a key board card; if the target stand-alone level is the preset stand-alone level, sending a reset or power-on and power-off instruction to the target stand-alone with abnormal communication so as to recover communication between interfaces or recover a link through the backup stand-alone; and if the channel level is the preset channel level, self-adaptive control is carried out on the measurement and control subsystem through the whole-satellite on-board management system so as to adjust the measurement and control channel to avoid the fault single machine with the single event effect. Therefore, corresponding avoiding methods and strategies are provided for different degrees of influences, so that the coping capacity of the all-electric propulsion satellite for the single event effect is improved.

Description

Technical Field

[0001] The present invention relates to the field of aerospace measurement and control technology, and in particular to a hierarchical single particle effect avoidance and processing method for a measurement and control channel of a GEO all-electric propulsion satellite. Background Art

[0002] In the early stage of the transfer orbit, the ground needs to frequently operate the satellite and make precise adjustments within a very short tracking and control arc according to the actual orbital position of the satellite. For example, timely attitude adjustments are made according to the orbital altitude, and the satellite's attitude angle is adjusted to adapt to the thrust balance within the all-electric propulsion transfer orbit cycle. Or, for different electric propulsion altitudes, the status of the on-board heater needs to be judged and adjusted in real time to prevent the electric propulsion equipment from being in a state of overcooling or overheating for a long time, so as to ensure the normal operation of the satellite's thrust structure.

[0003] In addition, due to the limited space-based / ground-based resources, it is often necessary to send delayed instructions to operate the satellite at key positions in the invisible arc in the transfer orbit. These operations can only be performed based on a robust measurement and control link. Once the measurement and control link is not guaranteed within a certain circle, the satellite may run away, the attitude may be out of control, or even worse, the entire all-electric propulsion mission may fail directly. Therefore, it is very important to ensure the smoothness of the measurement and control link and improve the robustness of the measurement and control link.

[0004] During the orbit change process, the satellite needs to frequently cross the center of the Earth's radiation belt (Van Allen radiation belt), which results in a large proton flux for the all-electric satellite during this stage. The proton flux in this part is relatively high during the orbit change, which is a key point affecting the tracking and control link of the all-electric satellite. At present, the number and types of all-electric satellites are relatively small. Therefore, combined with actual on-orbit experience, it is very necessary to avoid single particle effects for the tracking and control link of all-electric satellites. Summary of the invention

[0005] The purpose of the present invention is to provide a hierarchical single particle effect avoidance and processing method for the measurement and control channel of a GEO all-electric propulsion satellite, which is applied to the measurement and control link maintenance during the on-orbit operation of the all-electric propulsion satellite.

[0006] In order to achieve the above object, the present invention provides a hierarchical single event effect avoidance and processing method for the measurement and control channel of a GEO all-electric propulsion satellite, comprising the steps of:

[0007] Obtain key single-machine telemetry parameters within the measurement and control subsystem;

[0008] According to the key single-machine telemetry parameters, the single-particle effect impact level that affects the satellite-borne measurement and control channel is analyzed and determined; wherein the single-particle effect impact level includes module level, single-machine level and channel level, the module level represents the phenomenon that the board state or acquisition state of the relevant hardware equipment is overturned or locked due to the single-particle effect, the single-machine level represents the phenomenon that the data transmission interface between the single machines is overturned or locked due to the single-particle effect, and the channel level represents the phenomenon that the damage-level single-particle effect occurs in multiple single machines and / or the single-particle effect occurs in multiple measurement and control channel single machines, causing the single machine failure or channel interruption;

[0009] If the single particle effect impact level is the module level, analyzing the abnormal points in the single machine affected by the single particle effect based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple module redundancy settings and timed refresh functions;

[0010] If the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces;

[0011] If the single particle effect impact level is the channel level, the measurement and control subsystem is adaptively controlled through the entire satellite service system to adjust the measurement and control path and avoid single faulty machines that have single particle effects.

[0012] Furthermore, the acquisition of key single-machine telemetry parameters in the measurement and control subsystem includes:

[0013] The key single-machine telemetry parameters in the measurement and control subsystem are polled and stored through the internal bus.

[0014] Furthermore, the analyzing and determining the impact level of the single-particle effect affecting the satellite-borne measurement and control channel according to the key single-machine telemetry parameters includes:

[0015] According to the key stand-alone telemetry parameters, determine whether there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the stand-alone machine;

[0016] If there is an abnormality in the software execution logic health status flag or the telemetry data collected by some modules in a single machine is abnormal, the single particle effect impact level of the onboard measurement and control channel is determined to be the module level.

[0017] Furthermore, the analyzing and determining the impact level of the single-particle effect affecting the satellite-borne measurement and control channel according to the key single-machine telemetry parameters also includes:

[0018] If there is no abnormality in the software execution logic health status flag or abnormality in the telemetry data collected by some modules in the single machine, it is determined whether the telemetry downlink or uplink remote control function of any measurement and control link is abnormal based on the overall status telemetry parameters of the key single machine or based on the uplink command and telemetry reception of the ground measurement and control;

[0019] If a single downlink telemetry or uplink telecontrol function of any measurement and control link is abnormal, the single particle effect impact level of the satellite-borne measurement and control channel is determined to be the single-machine level.

[0020] Furthermore, the analyzing and determining the impact level of the single-particle effect affecting the satellite-borne measurement and control channel according to the key single-machine telemetry parameters also includes:

[0021] If there is no simultaneous abnormality in the telemetry downlink or uplink remote control function of any default configuration measurement and control link, it is determined based on the telemetry parameters of the key stand-alone machine whether the relevant telemetry of the key stand-alone machine has disappeared / is invalid or the corresponding processing measures at the stand-alone machine level have failed;

[0022] If the relevant telemetry of a key single machine disappears / is invalid or the corresponding processing measures at the single machine level fail, the single particle effect impact level of the satellite-borne measurement and control channel is determined to be the channel level.

[0023] Further, if the single particle effect impact level is the module level, the single particle effect affects the abnormal point in the single machine based on the key single machine telemetry parameters, and the abnormal point is reset based on the pre-configured triple module redundancy setting and the timed refresh function, including:

[0024] If the single-particle effect impact level is the module level, analyzing whether the software in the single machine affected by the single-particle effect runs abnormally based on the key single-machine telemetry parameters;

[0025] If the software runs abnormally, the software status will be automatically detected and refreshed based on the pre-configured timed refresh function;

[0026] If the software is not running abnormally, the abnormal module in the single machine affected by the single particle effect will be reset autonomously through the pre-configured triple-module redundancy setting.

[0027] Further, if the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces, including:

[0028] If the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset instruction to the target single machine to control the target single machine to perform a reset operation;

[0029] Determining whether the target stand-alone machine has returned to normal based on the reset operation;

[0030] If the target stand-alone machine does not return to normal based on the reset operation, sending a power-on / off instruction to control the power-on / off of the target stand-alone machine;

[0031] Determine whether the target stand-alone machine has returned to normal based on power-on and power-off control;

[0032] If the target stand-alone machine does not return to normal based on the power-on and power-off control, the single-particle effect impact level is corrected, and it is further determined whether the single-particle effect impact level is the channel level.

[0033] Further, if the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces, further comprising:

[0034] If the single particle effect impact level is the single machine level, based on the multiple groups of same-frequency configurations pre-set by the measurement and control transponder, the path is adaptively adjusted to start the backup single machine.

[0035] Furthermore, if the single-particle effect impact level is the channel level, the whole satellite service system is used to adaptively control the measurement and control subsystem to adjust the measurement and control path and avoid the single fault machine where the single-particle effect occurs, including:

[0036] If the single event effect impact level is the channel level, based on the occurrence time of the fault, the measurement and control link configuration state of the previous frame is read to identify the faulty single machine where the single event effect occurs;

[0037] Adaptive control is performed on the filter circuit, switch and transponder in the measurement and control subsystem to adjust the measurement and control path to avoid the faulty single machine.

[0038] Furthermore, if the single-particle effect impact level is the channel level, the whole satellite service system is used to adaptively control the measurement and control subsystem to adjust the measurement and control path and avoid the single fault machine where the single-particle effect occurs, and further includes:

[0039] If the faulty single machine cannot be avoided based on the adaptive control of the measurement and control subsystem, the measurement and control path is maintained by borrowing the load channel.

[0040] The hierarchical single-particle effect avoidance and processing method of the GEO all-electric propulsion orbiting satellite measurement and control channel described in the present invention analyzes and determines the impact level of the single-particle effect that affects the onboard measurement and control channel based on the key single-machine telemetry parameters in the measurement and control subsystem; if it is a preset module level, the single-particle effect affects the abnormal points in the single machine based on the key single-machine telemetry parameters, and resets the abnormal points; if it is a preset single-machine level, a reset or power-off instruction is sent to the target single machine with communication abnormality to restore communication between interfaces; if it is a preset channel level, the measurement and control channel is adjusted to avoid the faulty single machine with single-particle effect through adaptive control of the measurement and control subsystem. In this way, the present invention analyzes the impact level of single-particle effect on the onboard measurement and control channel of GEO all-electric propulsion satellite, divides the impact into three categories: module level, single machine level and channel level, and proposes corresponding solutions and strategies for the impact of different levels, so as to improve the response capability of all-electric propulsion satellites to single-particle effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A flowchart of the steps of the hierarchical single event effect avoidance and processing method of the GEO all-electric propulsion orbiting satellite tracking and control channel provided in one embodiment of the present invention;

[0042] Figure 2 A flowchart of the steps for performing impact level analysis of the hierarchical single-event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel provided in one embodiment of the present invention;

[0043] Figure 3 A flowchart of the steps of a specific application example of the hierarchical single-particle effect avoidance and processing method for the GEO all-electric propulsion orbital satellite tracking and control channel provided in one embodiment of the present invention. DETAILED DESCRIPTION

[0044] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0045] It should be noted that references to "one embodiment", "embodiment", "example embodiment", etc. in this specification refer to the embodiment described, which may include specific features, structures or characteristics, but not every embodiment must include these specific features, structures or characteristics. In addition, such expressions do not refer to the same embodiment. Furthermore, when describing specific features, structures or characteristics in conjunction with an embodiment, whether or not there is an explicit description, it has been shown that it is within the knowledge of those skilled in the art to combine such features, structures or characteristics into other embodiments.

[0046] In addition, certain words are used in the specification and subsequent claims to refer to specific components or parts. Those with ordinary knowledge in the relevant field should understand that manufacturers can use different nouns or terms to refer to the same component or part. This specification and subsequent claims do not use differences in names as a way to distinguish components or parts, but use differences in the functions of components or parts as the criteria for distinction. "Including" and "including" mentioned throughout the specification and subsequent claims are open-ended terms and should be interpreted as "including but not limited to". In addition, the word "connected" here includes any direct and indirect electrical connection means. Indirect electrical connection means include connection through other devices.

[0047] In the early stage of GEO (Geostationary Earth Orbit) all-electric propulsion satellite transfer orbit, the ground measurement and control system needs to determine the satellite orbit according to the plan and perform remote control and telemetry interpretation to ensure that the satellite electric propulsion orbit change can achieve accurate orbit entry according to the mission plan. In the early stage of orbit change, the satellite needs to frequently cross the Van Allen radiation belt. The satellite-borne measurement and control channel implemented by digital and large-scale integrated circuit design is more likely to be affected by single particle effects, and there is a risk that the measurement and control mission cannot be performed continuously, affecting the safety of satellite measurement and control. Due to the cancellation of the chemical propulsion orbit change process, the orbit change time of the all-electric propulsion satellite mission based on low thrust is longer, and due to hardware limitations, the electric propulsion orbit change needs to be cooled regularly, so the all-electric propulsion satellite has more transfer orbits and stays in the Van Allen radiation belt longer than ordinary chemical propulsion orbit change satellites. This means that the all-electric propulsion satellite will encounter a larger captured proton flux, and the probability of being affected by single particle effects on the satellite is higher, which is a key point affecting the measurement and control link of the all-electric propulsion satellite.

[0048] In this regard, the present invention analyzes the impact of single-particle effects on different levels of onboard measurement and control channels of GEO all-electric propulsion satellites, and specifically proposes a hierarchical single-particle effect avoidance and processing method for the measurement and control channels of GEO all-electric propulsion satellites, which is applied to the measurement and control link maintenance during the on-orbit operation of all-electric propulsion satellites.

[0049] Figure 1 A hierarchical single-event effect avoidance and processing method for a GEO all-electric propulsion orbiting satellite tracking and control channel provided by an embodiment of the present invention is shown, comprising the following steps:

[0050] S101: Acquire telemetry parameters of key units in the measurement and control subsystem. The key units include but are not limited to transponders, telemetry transmitter modules, remote control receiver modules, satellite amplifiers, etc. The telemetry parameters (such as uplink and downlink data, working status parameters, etc.) generated in these units are the target parameters to be acquired in step S101.

[0051] In specific implementation, step S101 includes: polling and storing the key single-machine telemetry parameters in the measurement and control subsystem through the internal bus or the acquisition equipment inside the subsystem. The internal bus is an important channel for data transmission and communication between the subsystems and single machines inside the satellite. The internal bus used in this embodiment includes but is not limited to the 1553B bus, CAN bus and SpaceWire bus. The acquisition equipment includes the payload integrated service unit, etc.

[0052] The key single-machine telemetry parameters obtained are specifically the telemetry parameters currently generated by the satellite, such as the parameters obtained at the current moment and in previous continuous historical periods.

[0053] S102: Analyze and determine the single-particle effect impact level that affects the satellite-borne measurement and control channel based on the key single-machine telemetry parameters; wherein the single-particle effect impact levels include module level, single-machine level, and channel level; the module level represents the phenomenon that the board state or acquisition state of the relevant hardware equipment is overturned or locked due to the single-particle effect; the single-machine level represents the phenomenon that the data transmission interface between the single machines is overturned or locked due to the single-particle effect; the channel level represents the phenomenon that multiple single machines have damage-level single-particle effects and / or multiple measurement and control channel single machines have single-particle effects that cause single-machine failure or channel interruption.

[0054] This embodiment specifically divides the single particle effect impact levels corresponding to different levels according to the impact of the single particle effect at different levels, including the module level, the single machine level and the channel level in order from small to large. After obtaining the key single machine telemetry parameters, the single particle effect impact level currently suffered is determined based on the analysis of these parameters.

[0055] Different single event effect impact levels will correspond to different processing strategies, and the specific processing measures will be explained later.

[0056] See also Figure 2 In an optional implementation, step S102 includes:

[0057] S201: Based on the key stand-alone telemetry parameters, determine whether there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the stand-alone machine.

[0058] S202: If there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the single machine, it is determined that the single particle effect impact level of the onboard measurement and control channel is the module level.

[0059] Furthermore, step S102 further includes:

[0060] S203: If there is no abnormality in the software execution logic health status flag or the telemetry data collected by some modules in the single machine is abnormal, then based on the overall status telemetry parameters of the key single machine or according to the uplink command and telemetry reception of ground measurement and control, it is determined whether the telemetry downlink or uplink remote control function of any measurement and control link is abnormal.

[0061] S204: If a single downlink telemetry or uplink telecontrol function of any measurement and control link is abnormal, it is determined that the single particle effect impact level of the satellite-borne measurement and control channel is at the single-machine level.

[0062] Furthermore, step S102 further includes:

[0063] S205: If the telemetry downlink or uplink remote control function of any default configuration measurement and control link is abnormal at the same time, it is determined based on the telemetry parameters of the key single machine whether the relevant telemetry of the key single machine has disappeared / invalid or the corresponding processing measures at the single machine level have failed.

[0064] S206: If the relevant telemetry of a key single machine disappears / is invalid or the corresponding processing measures at the single machine level fail, it is determined that the single particle effect impact level of the satellite-borne measurement and control channel is the channel level.

[0065] That is, based on the specific impact characteristic manifestations of each single-particle effect impact level, various abnormal conditions reflected in the key single-machine telemetry parameters are classified into three main levels, which correspond to the judgment basis in the above-mentioned implementation mode respectively; therefore, if the currently acquired key single-machine telemetry parameters show that the software execution logic health status flag is abnormal or the telemetry data collected by some modules in the single machine is abnormal, it is determined that there is currently a module-level single-particle impact; if there is a module-level impact manifestation, it is further determined whether there is an abnormality in the telemetry downlink or uplink remote control function of any measurement and control link, and if so, it is determined that there is currently a single-particle impact at the single machine level; if there is still no single-machine-level impact manifestation, it is further determined whether the relevant telemetry of the key single machine disappears or the corresponding processing measures at the single machine level fail, and if so, it is determined that there is currently a channel-level single-particle impact; since the manifestations of single-particle impact are mainly the above-mentioned three types, if the above-mentioned three phenomena do not exist, it indicates that there is no single-particle impact, and no subsequent processing is required for this.

[0066] After analyzing and determining the corresponding single particle impact level, the corresponding single particle effect avoidance processing strategy can be further implemented according to the corresponding single particle impact level.

[0067] If the analysis determines that the current single particle effect impact level is at the module level, then go to step S103; if the analysis determines that the current single particle effect impact level is at the stand-alone level, then go to step S104; if the analysis determines that the current single particle effect impact level is at the channel level, then go to step S105.

[0068] S103: If the single particle effect impact level is the module level, then the single particle effect impacts the abnormal points in the single machine based on the key single machine telemetry parameters, and the abnormal points are reset based on the pre-configured triple-module redundancy settings and timed refresh functions. That is, in step S103, the specific abnormal points in the single machine affected by the single particle effect are further analyzed and determined. The single machine affected by the single particle effect is a key single machine whose software or internal hardware is affected by the single particle effect. The abnormal points include software and hardware levels, such as software operation abnormalities or abnormalities in some modules in the single machine.

[0069] Specifically, when the single particle effect accumulates to a certain extent, it may knock over a certain AD chip or other telemetry-related acquisition hardware inside the stand-alone machine. When a certain AD chip module in the stand-alone machine is knocked over by a single particle, the chip select signal of the telemetry acquisition will be abnormal, thereby causing the telemetry data output to be abnormal, that is, the telemetry that should change with time collected by the same AD chip inside the entire stand-alone machine is not refreshed with time, while other telemetry in the stand-alone machine is normal. At this time, although the telemetry and remote control functions of the entire satellite will not be affected, this situation may affect the analysis and judgment of the on-board status by ground personnel; in this regard, this embodiment specifically controls the AD chip board to add a timed reset function, and inserts a simple top-level logic in the internal software of the stand-alone machine to achieve: when no uplink is detected within a certain period of time, the stand-alone machine is automatically reset; that is, when no uplink signal is detected within a certain period of time inside the stand-alone machine, the stand-alone machine autonomously executes the reset instruction, while avoiding affecting the ground mission, thereby effectively avoiding such single particle effects.

[0070] The FPGA chip inside the stand-alone machine is a single-particle weak link, which is prone to flipping during on-orbit operation. When a read-write gate circuit in the chip is overturned during on-orbit operation, it will cause the software to run abnormally. In this regard, the present embodiment can specifically configure a refresh detection FPGA inside the stand-alone machine, and when a software abnormality is detected, the software is immediately refreshed and reconfigured. Preferably, the present embodiment requires a three-module redundant design for key chips when designing each stand-alone module on the ground. The parameter program composition of the three-module redundant system is stored three times, and the three programs perform the same task at the same time. During operation, the output results of the three programs are compared and voted on; if one of the programs fails and the output results of the other two programs are normal, the correct output of the system can be determined through a voting mechanism. In addition, the design of the refresh strategy and ground verification must be completed during the design phase.

[0071] In this way, for the module-level single particle effect impact level, this embodiment can use the pre-configured triple-module redundancy setting and timed refresh function to reset the abnormal point, that is, by adding an automatic refresh function design inside the single machine to avoid the module-level single particle effect.

[0072] In an optional implementation, step S103 specifically includes:

[0073] If the SPE impact level is at the module level, the SPE impact on the single machine is analyzed based on the key single machine telemetry parameters to determine whether the software in the single machine is running abnormally; if the software is running abnormally, the software status is automatically detected and refreshed based on the pre-configured timed refresh function; if the software is not running abnormally, the abnormal module in the single machine affected by the SPE is reset autonomously through the pre-configured triple-module redundancy setting. Figure 3 As shown, the module level is divided into software-level impact and non-software-level impact. The software-level impact is such as the situation in which a read-write gate circuit in the FPGA chip inside the single machine is overturned during on-track operation, resulting in abnormal software operation. In this case, a refresh mechanism can be designed to regularly detect and refresh the software status. If it is not a software-level impact, the impact of a single bit overturning in the abnormal module in the single machine can be restored by designing an autonomous reset function.

[0074] S104: If the SPE impact level is the single machine level, determine the target single machine with abnormal communication, and send a reset or power-off instruction to the target single machine to restore communication between interfaces.

[0075] Since the interface between the single machines needs to be supported by a complex mechanical structure, it is difficult to implement a high-level single-particle effect resistance measure such as the triple-module redundancy in the aforementioned step S103. When a single particle knocks over an important data transmission interface between key measurement and control single machines, the data transmission interface will continuously output a high / low level, thereby causing the telemetry downlink or uplink remote control function on a certain path to be abnormal; at this time, the embodiment specifically performs a comprehensive inspection of the satellite link at the subsystem level, and sends a reset or power-off command from the outside to the single machine with communication abnormality (breakpoint) to restore normal communication between the interfaces.

[0076] In an optional embodiment, if Figure 3 In the embodiment, the step S104 includes:

[0077] If the single-particle effect impact level is at the single-machine level, determine the target single machine with communication abnormality, and send a reset instruction to the target single machine to control the target single machine to perform a reset operation; judge whether the target single machine returns to normal based on the reset operation; if the target single machine does not return to normal based on the reset operation, send a power-on / off instruction to perform power-on / off control on the target single machine; judge whether the target single machine returns to normal based on the power-on / off control; if the target single machine does not return to normal based on the power-on / off control, correct the single-particle effect impact level, and further judge whether the single-particle effect impact level is at the channel level.

[0078] Furthermore, step S104 further includes:

[0079] If the single particle effect impact level is a single machine level, based on multiple groups of same-frequency configurations pre-set by the measurement and control transponder, the path is adaptively adjusted to start the backup single machine.

[0080] From a design perspective, in this embodiment, the measurement and control transponders are designed to be configured as multiple groups of co-frequency configurations. During actual on-orbit applications, they normally work in a non-co-frequency combination to meet the space-based / ground-based measurement and control requirements. When a single particle knocks over a certain path or the interface between single machines, the subsystem can adaptively adjust the remaining two transponders to continue to maintain the measurement and control link, that is, switch the second backup transponder and / or the third backup transponder to the working state and frequency to ensure the continuity of the measurement and control channel.

[0081] In specific implementation, when communication abnormalities occur between single machines, the subsystem first adjusts the measurement and control channel and uses the backup single machine to ensure the measurement and control channel; then, based on the key telemetry criteria, the location of the breakpoint is detected and determined, and a reset command is executed on the corresponding single machine.

[0082] Preferably, when the subsystem detects that a single machine fails to successfully execute a reset instruction, the subsystem level can resend a reset instruction to these faulty single machines through the internal bus, thereby achieving double insurance for avoiding single-particle effects at the single-machine level.

[0083] Furthermore, when it is detected that the single machine abnormality at the single machine level fails to be automatically reset, the subsystem can also send instructions from the external monitoring single machine to the predetermined lower machine where the fault occurs.

[0084] S105: If the single particle effect impact level is the channel level, adaptively control the measurement and control subsystem through the entire satellite service system to adjust the measurement and control path and avoid single faulty machines that have single particle effects.

[0085] When a damaging single particle effect occurs, the transient current generated by the single particle is large, which will directly burn the diodes or MOS tubes responsible for telemetry transmission and collection in the measurement and control unit, and physically destroy the device. This damaging single particle effect cannot be repaired by timed refresh and single-machine reset. In addition, when multiple units in the entire measurement and control subsystem have damaging single particle effects, or single particle flips in multiple measurement and control channel units cause the reset and refresh functions to fail at the same time, the module-level and unit-level processing measures cannot solve the problem. Therefore, the above two situations require the whole satellite service to solve the link interruption caused by the single particle effect at the channel level and quickly restore the measurement and control path with the ground. In specific implementation, when multiple units have single particle flips or damage at the unit level or subsystem level at the same time, the system-level satellite service will directly control the measurement and control subsystem, use the healthy units to establish links, and restore the measurement and control channel. When the satellite service determines that the existing single-machine status of the measurement and control subsystem cannot meet the mission requirements, it will urgently borrow the payload channel to perform the measurement and control mission to ensure the measurement and control link between the satellite and the ground.

[0086] All possible combinations of channels in the measurement and control subsystem are embedded in the system-level satellite service software of the whole satellite; in the case of normal transfer orbit and on-orbit operation, the configuration of the measurement and control channels is a normalized fixed configuration, such as transponder A and filter A, antenna A, transponder B and filter B, antenna B. Therefore, this embodiment can determine the abnormal points that need to be avoided based on the analysis of key single-machine telemetry parameters, so as to adaptively adjust the current measurement and control channel combination to avoid the abnormal points.

[0087] Specifically, when multiple single-particle faults at the stand-alone machine level or module level occur simultaneously, step S105 includes:

[0088] If the single particle effect impact level is the channel level, based on the time of occurrence of the fault, the measurement and control link configuration status of the previous frame is read to identify the faulty unit where the single particle effect occurs; the filter circuit, switch and transponder in the measurement and control subsystem are adaptively controlled to adjust the measurement and control path to avoid the faulty unit. Among them, for the identification of the faulty unit, the normal value range of the telemetry parameters can be set in advance for all key measurement and control units, and then the health status of the existing unit can be judged according to the proportion and duration of all telemetry of the key measurement and control units exceeding the normal setting range, and the satellite service configuration can be read to timely adjust the available measurement and control link using the satellite service of the entire satellite. This embodiment preferably embeds the state control and timed status recording functions of the measurement and control subsystem in the satellite service software of the entire satellite. The telemetry of the key single machine involved in the measurement and control link is bound to the normal value range in advance. When these telemetry are abnormal (that is, they exceed the normal value range for a certain period of time), a channel-level single-particle effect occurs. At this time, the entire star service reads the measurement and control link configuration status of the previous frame based on the time of fault occurrence, identifies the single machine with the single-particle effect, and adaptively controls the filter circuit, switch, transponder, etc. of the measurement and control subsystem, adjusts the measurement and control path, and avoids the single machine with the single-particle effect.

[0089] In the early stage of ground design, it is necessary to predict and design the configurations of various possible measurement and control subsystem pathways, and directly install them in the satellite's system-level software as key configuration items. When a channel-level single-particle effect occurs, the entire satellite service can read these configuration items and execute the configuration based on the health status of each unit, thereby avoiding the channel-level single-particle effect.

[0090] Furthermore, step S105 also includes: if the faulty single machine cannot be avoided based on the adaptive control of the measurement and control subsystem, the measurement and control path is maintained by borrowing the load channel. Figure 3 As shown, this embodiment designs the payload channel multiplexing function in emergency mode. When two key single machines have large-scale abnormal telemetry or abnormal communication status telemetry at the same time, that is, in an extreme case where they are damaged by single particle effects and cannot be repaired, the entire satellite service can allocate payload channels at the channel level and system level, so as to continue to perform measurement and control tasks to ensure communication between the space / ground base; that is, when the satellite service determines that the existing measurement and control single machine status of the measurement and control subsystem cannot meet the task requirements, it will urgently borrow the payload channel to perform the measurement and control task to ensure the measurement and control link between the satellite and the ground.

[0091] Subsequently, based on the key telemetry parameter detection after the execution of the above-mentioned different levels of avoidance methods, the health status of the onboard measurement and control link can be judged and analyzed.

[0092] In summary, the hierarchical single-particle effect avoidance and processing method of the GEO all-electric propulsion orbiting satellite measurement and control channel described in the present invention analyzes and determines the impact level of the single-particle effect that affects the onboard measurement and control channel based on the key single-machine telemetry parameters in the measurement and control subsystem; if it is a preset module level, the single-particle effect affects the abnormal points in the single machine based on the key single-machine telemetry parameters, and the abnormal points are reset; if it is a preset single-machine level, a reset or power-off instruction is sent to the target single machine with communication abnormality to restore communication between interfaces; if it is a preset channel level, the measurement and control channel is adjusted to avoid the faulty single machine where the single-particle effect occurs through adaptive control of the measurement and control subsystem. In this way, the present invention analyzes the impact level of the single-particle effect on the onboard measurement and control channel of the GEO all-electric propulsion satellite, divides the impact into three categories: module level, single machine level and channel level, and proposes corresponding solutions and strategies for the impacts of different levels, so as to improve the response capability of the all-electric propulsion satellite to single-particle effects.

[0093] It should be noted that the present application can be implemented in software and / or a combination of software and hardware, for example, can be implemented using an application specific integrated circuit (ASIC), a general purpose computer or any other similar hardware device. In one embodiment, the software program of the present application can be executed by a processor to implement the above steps or functions. Similarly, the software program of the present application (including relevant data structures) can be stored in a computer-readable recording medium, for example, a RAM memory, a magnetic or optical drive or a floppy disk and similar devices. In addition, some steps or functions of the present application can be implemented using hardware, for example, as a circuit that cooperates with a processor to perform each step or function.

[0094] The method according to the present invention can be implemented on a computer as a computer-implemented method, or implemented in dedicated hardware, or implemented in a combination of the two. The executable code or part thereof for the method according to the present invention can be stored on a computer program product. The example of a computer program product includes a memory device, an optical storage device, an integrated circuit, a server, online software, etc. Preferably, the computer program product includes a non-temporary program code component stored on a computer-readable medium so as to perform the method according to the present invention when the program product is executed on a computer.

[0095] Of course, the present invention may have many other embodiments. Without departing from the spirit and essence of the present invention, those skilled in the art may make various corresponding changes and modifications based on the present invention, but these corresponding changes and modifications should all fall within the scope of protection of the claims attached to the present invention.

Claims

1. A hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel, characterized in that: Includes steps: Obtain key single-machine telemetry parameters within the measurement and control subsystem; According to the key single-machine telemetry parameters, the single-particle effect impact level that affects the satellite-borne measurement and control channel is analyzed and determined; wherein the single-particle effect impact level includes module level, single-machine level and channel level, the module level represents the phenomenon that the board state or acquisition state of the relevant hardware equipment is overturned or locked due to the single-particle effect, the single-machine level represents the phenomenon that the data transmission interface between the single machines is overturned or locked due to the single-particle effect, and the channel level represents the phenomenon that the damage-level single-particle effect occurs in multiple single machines and / or the single-particle effect occurs in multiple measurement and control channel single machines, causing the single machine failure or channel interruption; If the single particle effect impact level is the module level, analyzing the abnormal points in the single machine affected by the single particle effect based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple module redundancy settings and timed refresh functions; If the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces; If the single particle effect impact level is the channel level, the measurement and control subsystem is adaptively controlled through the entire satellite service system to adjust the measurement and control path and avoid single faulty machines that have single particle effects.

2. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 1 is characterized in that: The acquisition of key single-machine telemetry parameters in the measurement and control subsystem includes: The key single-machine telemetry parameters in the measurement and control subsystem are polled and stored through the internal bus.

3. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 1 is characterized in that: The analyzing and determining the impact level of the single-particle effect affecting the satellite-borne measurement and control channel according to the key single-machine telemetry parameters includes: According to the key stand-alone telemetry parameters, determine whether there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the stand-alone machine; If there is an abnormality in the software execution logic health status flag or the telemetry data collected by some modules in a single machine is abnormal, the single particle effect impact level of the onboard measurement and control channel is determined to be the module level.

4. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 3 is characterized in that: The analyzing and determining the impact level of the single-particle effect affecting the satellite-borne measurement and control channel according to the key single-machine telemetry parameters also includes: If there is no abnormality in the software execution logic health status flag or abnormality in the telemetry data collected by some modules in the single machine, it is determined whether the telemetry downlink or uplink remote control function of any measurement and control link is abnormal based on the overall status telemetry parameters of the key single machine or based on the uplink command and telemetry reception of the ground measurement and control; If a single downlink telemetry or uplink telecontrol function of any measurement and control link is abnormal, the single particle effect impact level of the satellite-borne measurement and control channel is determined to be the single-machine level.

5. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 4 is characterized in that: The analyzing and determining the impact level of the single-particle effect affecting the satellite-borne measurement and control channel according to the key single-machine telemetry parameters also includes: If the telemetry downlink or uplink remote control functions of any default configuration measurement and control link are abnormal at the same time, it is determined based on the telemetry parameters of the key stand-alone machine whether the relevant telemetry of the key stand-alone machine has disappeared / is invalid or the corresponding processing measures at the stand-alone machine level have failed; If the relevant telemetry of a key single machine disappears / is invalid or the corresponding processing measures at the single machine level fail, the single particle effect impact level of the satellite-borne measurement and control channel is determined to be the channel level.

6. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 1 is characterized in that: If the single particle effect impact level is the module level, analyzing the abnormal points in the single machine affected by the single particle effect based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple module redundancy settings and the timed refresh function, including: If the single-particle effect impact level is the module level, analyzing whether the software in the single machine affected by the single-particle effect runs abnormally based on the key single-machine telemetry parameters; If the software runs abnormally, the software status will be automatically detected and refreshed based on the pre-configured timed refresh function; If the software is not running abnormally, the abnormal module in the single machine affected by the single particle effect will be reset autonomously through the pre-configured triple-module redundancy setting.

7. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 1 is characterized in that: If the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces, including: If the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset instruction to the target single machine to control the target single machine to perform a reset operation; Determining whether the target stand-alone machine has returned to normal based on the reset operation; If the target stand-alone machine does not return to normal based on the reset operation, sending a power-on / off instruction to control the power-on / off of the target stand-alone machine; Determine whether the target stand-alone machine has returned to normal based on power-on and power-off control; If the target stand-alone machine does not return to normal based on the power-on and power-off control, the single-particle effect impact level is corrected, and it is further determined whether the single-particle effect impact level is the channel level.

8. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 1 is characterized in that: If the single-particle effect impact level is the single-machine level, determining the target single machine with abnormal communication, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces, further comprising: If the single particle effect impact level is the single machine level, based on the multiple groups of same-frequency configurations pre-set by the measurement and control transponder, the path is adaptively adjusted to start the backup single machine.

9. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel according to claim 1 is characterized in that: If the single-particle effect impact level is the channel level, the measurement and control subsystem is adaptively controlled by the whole star service system to adjust the measurement and control path and avoid the single fault machine where the single-particle effect occurs, including: If the single event effect impact level is the channel level, based on the occurrence time of the fault, the measurement and control link configuration state of the previous frame is read to identify the faulty single machine where the single event effect occurs; Adaptive control is performed on the filter circuit, switch and transponder in the measurement and control subsystem to adjust the measurement and control path to avoid the faulty single machine.

10. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbiting satellite tracking and control channel according to claim 9 is characterized in that: If the single-particle effect impact level is the channel level, the measurement and control subsystem is adaptively controlled by the whole star service system to adjust the measurement and control path and avoid the single fault machine where the single-particle effect occurs, and further includes: If the faulty single machine cannot be avoided based on the adaptive control of the measurement and control subsystem, the measurement and control path is maintained by borrowing the load channel.

Images