Method for avoiding and processing graded single event effect of GEO all-electric insertion orbit satellite TT&C channel

Abstract

The application provides a GEO all-electric push-in-orbit satellite TT&C channel graded single particle effect avoidance and processing method, which is based on key single machine telemetry parameters in a TT&C subsystem, analyzes and judges the single particle effect influence level affecting the satellite-borne TT&C channel; if it is a preset module level, it analyzes abnormal point positions in the single machine affected by the single particle effect based on the key single machine telemetry parameters, and resets the abnormal point positions, or refreshes the key board card configuration state; if it is a preset single machine level, it sends a reset or power-off instruction to the target single machine with communication abnormalities to restore the communication between interfaces or restores the link through a backup single machine; if it is a preset channel level, it performs adaptive control on the TT&C subsystem through the whole-satellite station management system to adjust the fault single machine of the TT&C channel to avoid the single particle effect. In this way, the application proposes corresponding avoidance methods and strategies for different degrees of influence to improve the response capability of the all-electric push-in-orbit satellite to the single particle effect.

Description

Technical Field

[0001] The present invention relates to the field of aerospace measurement and control technology, and in particular to a hierarchical single event effect avoidance and processing method for a measurement and control channel of a GEO all-electric propulsion satellite. Background Art

[0002] In the early stages of the transfer orbit, the ground needs to frequently operate the satellite and make precise adjustments within a very short tracking and control arc based on the actual orbital position of the satellite. For example, timely attitude adjustments are made according to the orbital altitude, and the satellite's attitude angle is adjusted to adapt to the thrust balance within the all-electric propulsion transfer orbit cycle. Or, for different electric propulsion altitudes, the status of the on-board heater needs to be judged and adjusted in real time to prevent the electric propulsion equipment from being in a state of overcooling or overheating for a long time, and to ensure the normal operation of the satellite's thrust structure.

[0003] Furthermore, due to limited space-based and ground-based resources, delayed commands are often required to operate the satellite at key locations in the invisible arc during the transfer orbit. These operations require a robust telemetry and control link. If the telemetry and control link fails within a given orbit, the satellite may run away, attitude control may be lost, or even worse, the entire all-electric propulsion mission may fail. Therefore, ensuring the smooth operation and robustness of the telemetry and control link is crucial.

[0004] During orbit changes, satellites frequently pass through the center of Earth's radiation belts (the Van Allen radiation belts), causing them to experience a high flux of captured protons. This high proton flux in this area during orbit changes is a key factor affecting the tracking and control links for all-electric propulsion satellites. Currently, the number and variety of all-electric propulsion satellites are relatively small. Therefore, based on actual on-orbit experience, it is essential to develop methods to mitigate single-event effects in the tracking and control links for all-electric propulsion satellites. Summary of the Invention

[0005] The purpose of the present invention is to provide a hierarchical single-event effect avoidance and processing method for the tracking and control channel of a GEO all-electric propulsion satellite, which is applied to the tracking and control link maintenance during the on-orbit operation of the all-electric propulsion satellite.

[0006] To achieve the above objectives, the present invention provides a hierarchical single event effect avoidance and processing method for the tracking and control channel of a GEO all-electric propulsion satellite, comprising the following steps:

[0007] Obtain key single-machine telemetry parameters within the measurement and control subsystem;

[0008] Analyze and determine the impact level of single-particle effects affecting onboard measurement and control channels based on the key single-machine telemetry parameters; wherein the single-particle effect impact levels include module level, single-machine level, and channel level. The module level indicates the phenomenon of a board state or acquisition state of related hardware equipment being upset or locked due to a single-particle effect; the single-machine level indicates the phenomenon of a data transmission interface between single machines being upset or locked due to a single-particle effect; and the channel level indicates the phenomenon of a single-particle effect causing damage-level single-particle effects on multiple single machines and / or single-particle effects on multiple measurement and control channel single machines, resulting in single-machine failure or channel interruption.

[0009] If the SEP impact level is the module level, analyzing the abnormal points within the single machine affected by the SEP based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple-module redundancy settings and timed refresh function;

[0010] If the SEP impact level is the single-machine level, determining the target single machine with the communication abnormality, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces;

[0011] If the SEP impact level is the channel level, the measurement and control subsystem is adaptively controlled by the entire satellite service system to adjust the measurement and control path and avoid single-machine failure caused by SEP.

[0012] Furthermore, the acquisition of key single-machine telemetry parameters within the measurement and control subsystem includes:

[0013] The key single-machine telemetry parameters in the measurement and control subsystem are polled and stored through the internal bus.

[0014] Furthermore, the analysis and determination of the impact level of single event effects affecting the onboard tracking and control channels based on the key single-machine telemetry parameters includes:

[0015] Based on the key stand-alone telemetry parameters, determine whether there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the stand-alone machine;

[0016] If there is an abnormality in the software execution logic health status flag or the telemetry data collected by some modules in a single machine is abnormal, the single event effect impact level of the onboard measurement and control channel is determined to be the module level.

[0017] Furthermore, the analyzing and determining the impact level of single event effects affecting the onboard tracking and control channels based on the key single-machine telemetry parameters further includes:

[0018] If there is no abnormality in the software execution logic health status flag or abnormality in the telemetry data collected by some modules in the single machine, then based on the overall status telemetry parameters of the key single machine or the uplink command and telemetry reception conditions of the ground measurement and control, it is determined whether the telemetry downlink or uplink remote control function of any measurement and control link is abnormal;

[0019] If a single downlink telemetry or uplink telecontrol function of any measurement and control link is abnormal, the single event effect impact level of the onboard measurement and control channel is determined to be the single-machine level.

[0020] Furthermore, the analyzing and determining the impact level of single event effects affecting the onboard tracking and control channels based on the key single-machine telemetry parameters further includes:

[0021] If the telemetry downlink or uplink remote control functions of any default configuration measurement and control link are not abnormal at the same time, it is determined based on the telemetry parameters of the key stand-alone machine whether the relevant telemetry of the key stand-alone machine has disappeared / is invalid or the corresponding processing measures at the stand-alone machine level have failed;

[0022] If the relevant telemetry of a key single machine disappears / is invalid or the corresponding processing measures at the single machine level fail, the single event effect impact level of the onboard measurement and control channel is determined to be the channel level.

[0023] Furthermore, if the SEP impact level is the module level, analyzing the abnormal points within the single machine affected by the SEP based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple-module redundancy settings and timed refresh functions, including:

[0024] If the SEP impact level is the module level, analyzing whether the software in the single machine affected by the SEP is running abnormally based on the key single machine telemetry parameters;

[0025] If the software runs abnormally, the software status will be automatically detected and refreshed based on the pre-configured timed refresh function;

[0026] If the software is not running abnormally, the abnormal module in the single machine affected by the single event effect will be reset autonomously through the pre-configured triple-module redundancy setting.

[0027] Furthermore, if the single event effect impact level is the single machine level, determining the target single machine with the communication abnormality, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces, including:

[0028] If the SEP impact level is the single-machine level, determining the target single machine with the communication abnormality, and sending a reset instruction to the target single machine to control the target single machine to perform a reset operation;

[0029] Determining whether the target stand-alone machine has returned to normal based on the reset operation;

[0030] If the target stand-alone machine does not return to normal based on the reset operation, sending a power-on / off instruction to control the power on / off of the target stand-alone machine;

[0031] Determining whether the target stand-alone machine has returned to normal based on power-on and power-off control;

[0032] If the target stand-alone machine does not return to normal based on the power-on / off control, the single event effect impact level is corrected, and it is further determined whether the single event effect impact level is the channel level.

[0033] Furthermore, if the single event effect impact level is the single machine level, determining the target single machine with the communication abnormality, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces, further comprising:

[0034] If the single event effect impact level is the single machine level, the path is adaptively adjusted to start the backup single machine based on the multiple groups of same-frequency configurations pre-set by the measurement and control transponder.

[0035] Furthermore, if the SEP impact level is the channel level, adaptively controlling the measurement and control subsystem through the entire satellite service system to adjust the measurement and control path and avoid a single faulty machine experiencing a SEP includes:

[0036] If the SEP impact level is the channel level, based on the time of occurrence of the fault, the measurement and control link configuration state of the previous frame is read to identify the faulty unit where the SEP occurs;

[0037] Adaptive control is performed on the filter circuit, switch and transponder in the measurement and control subsystem to adjust the measurement and control path to avoid the faulty single machine.

[0038] Furthermore, if the SEP impact level is the channel level, adaptively controlling the measurement and control subsystem through the entire satellite service system to adjust the measurement and control path and avoid a single faulty machine experiencing a SEP, further comprising:

[0039] If the faulty single machine cannot be avoided based on the adaptive control of the measurement and control subsystem, the measurement and control path is maintained by borrowing the load channel.

[0040] The hierarchical single-particle effect avoidance and handling method for the tracking and control channel of a GEO all-electric propulsion satellite, described in the present invention, analyzes and determines the impact level of the single-particle effect affecting the onboard tracking and control channel based on the key single-unit telemetry parameters within the tracking and control subsystem; if it is a preset module level, the single-particle effect is analyzed based on the key single-unit telemetry parameters to determine the abnormal points within the single unit, and the abnormal points are reset; if it is a preset single-unit level, a reset or power-off command is sent to the target single unit with communication anomaly to restore communication between interfaces; if it is a preset channel level, the tracking and control channel is adjusted to avoid the faulty single unit that has experienced the single-particle effect through adaptive control of the tracking and control subsystem. In this way, the present invention analyzes the impact level of single-particle effects on the onboard tracking and control channel of a GEO all-electric propulsion satellite, divides the impact into three categories: module level, single unit level, and channel level, and proposes corresponding solutions and strategies for the impact at different levels, thereby improving the all-electric propulsion satellite's ability to cope with single-particle effects. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A flowchart of the steps of the hierarchical single event effect avoidance and processing method for the tracking and control channel of the GEO all-electric propulsion satellite provided in one embodiment of the present invention;

[0042] Figure 2 A flowchart of the steps for performing impact level analysis for the hierarchical single event effect avoidance and treatment method for the GEO all-electric propulsion orbiting satellite tracking and control channel provided in one embodiment of the present invention;

[0043] Figure 3 A flowchart of the steps of a specific application example of the hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion orbit satellite tracking and control channel provided in one embodiment of the present invention. DETAILED DESCRIPTION

[0044] In order to make the purpose, technical solutions and advantages of the present invention more clearly understood, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0045] It should be noted that references to "one embodiment," "an embodiment," "an example embodiment," etc., in this specification indicate that the described embodiment may include specific features, structures, or characteristics, but not every embodiment must include these specific features, structures, or characteristics. Furthermore, such references do not necessarily refer to the same embodiment. Furthermore, when specific features, structures, or characteristics are described in conjunction with an embodiment, whether or not explicitly described, it is understood that incorporating such features, structures, or characteristics into other embodiments is within the knowledge of those skilled in the art.

[0046] In addition, certain words are used in the specification and subsequent claims to refer to specific components or parts. It should be understood by those with ordinary knowledge in the relevant field that manufacturers may use different nouns or terms to refer to the same component or part. This specification and subsequent claims do not use differences in names as a way to distinguish components or parts, but rather use differences in the functions of components or parts as the criteria for distinction. The words "including" and "comprising" mentioned throughout the specification and subsequent claims are open-ended terms and should be interpreted as "including but not limited to". In addition, the word "connect" here includes any direct and indirect electrical connection means. Indirect electrical connection means include connection through other devices.

[0047] During the initial stages of a GEO (Geostationary Earth Orbit) transfer, the ground-based tracking and control system must determine the satellite's orbit according to plan and conduct remote control and telemetry interpretation to ensure precise orbit insertion according to the mission plan. During this initial period, the satellite frequently crosses the Van Allen radiation belts. The onboard tracking and control channels, implemented using digital, large-scale integrated circuits, are subject to a high probability of single-event effects (SEEs), posing a risk of interrupting the continuous execution of the tracking and control mission, compromising satellite tracking and control safety. By eliminating the chemical propulsion process, low-thrust orbit transfers for all-electric satellites require longer missions. Furthermore, due to hardware limitations, electric propulsion requires periodic cooling. Consequently, all-electric satellites undergo more transfer orbits and spend more time in the Van Allen radiation belts than conventional chemical propulsion satellites. This results in a higher flux of trapped protons and a higher probability of SEEs onboard, a critical issue affecting the tracking and control links of all-electric satellites.

[0048] In this regard, the present invention analyzes the impact of single-particle effects on different levels of the onboard measurement and control channels of GEO all-electric propulsion satellites, and specifically proposes a hierarchical single-particle effect avoidance and processing method for the measurement and control channels of GEO all-electric propulsion satellites, which is applied to the measurement and control link maintenance during the on-orbit operation of all-electric propulsion satellites.

[0049] Figure 1 A hierarchical single event effect avoidance and processing method for a GEO all-electric propulsion satellite tracking and control channel is provided in accordance with an embodiment of the present invention, including the following steps:

[0050] S101: Acquire telemetry parameters of key units within the measurement and control subsystem. These key units include, but are not limited to, transponders, telemetry transmitter modules, remote control receiver modules, and onboard amplifiers. The telemetry parameters generated by these units (such as uplink and downlink data, operating status parameters, etc.) are the target parameters to be acquired in step S101.

[0051] In specific implementations, step S101 includes polling and storing key individual unit telemetry parameters within the measurement and control subsystem via an internal bus or acquisition equipment within the subsystem. The internal bus is a crucial channel for data transmission and communication between satellite subsystems and individual units. The internal buses used in this embodiment include, but are not limited to, 1553B, CAN, and SpaceWire. The acquisition equipment includes, for example, a payload integrated service unit.

[0052] The key single-machine telemetry parameters obtained are specifically the telemetry parameters currently generated by the satellite, such as the parameters obtained at the current moment and in previous continuous historical periods.

[0053] S102: Analyze and determine the impact level of single-particle effects that affect the satellite-borne measurement and control channels based on the key single-machine telemetry parameters; wherein the single-particle effect impact levels include module level, single-machine level, and channel level. The module level represents the phenomenon that the board status or acquisition status of the relevant hardware equipment is overturned or locked due to the single-particle effect. The single-machine level represents the phenomenon that the data transmission interface between the single machines is overturned or locked due to the single-particle effect. The channel level represents the phenomenon that multiple single machines have damage-level single-particle effects and / or multiple measurement and control channel single machines have single-particle effects, causing single machine failure or channel interruption.

[0054] This embodiment specifically categorizes the impact of single event effects at different levels, specifically the module level, the individual machine level, and the channel level, in ascending order. After acquiring key individual machine telemetry parameters, the current single event effect impact level is determined based on analysis of these parameters.

[0055] Different SEE impact levels correspond to different treatment strategies, and specific treatment measures will be described later.

[0056] See also Figure 2 In an optional implementation, step S102 includes:

[0057] S201: Based on the key stand-alone telemetry parameters, determine whether there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the stand-alone machine.

[0058] S202: If there is an abnormality in the software execution logic health status flag or abnormality in the telemetry data collected by some modules in the single machine, it is determined that the single event effect impact level of the onboard measurement and control channel is the module level.

[0059] Furthermore, step S102 further includes:

[0060] S203: If there is no abnormality in the software execution logic health status flag or the telemetry data collected by some modules in the single machine is abnormal, then based on the overall status telemetry parameters of the key single machine or according to the uplink command and telemetry reception of ground measurement and control, it is determined whether the telemetry downlink or uplink remote control function of any measurement and control link is abnormal.

[0061] S204: If a single downlink telemetry or uplink telecontrol function of any measurement and control link is abnormal, the single event effect impact level of the onboard measurement and control channel is determined to be a single-machine level.

[0062] Furthermore, step S102 further includes:

[0063] S205: If the telemetry downlink or uplink remote control function of any default configuration measurement and control link is abnormal at the same time, it is determined based on the telemetry parameters of the key stand-alone machine whether the relevant telemetry of the key stand-alone machine has disappeared / is invalid or the corresponding processing measures at the stand-alone machine level have failed.

[0064] S206: If the relevant telemetry of a key single unit disappears / is invalid or the corresponding processing measures at the single unit level fail, the single event effect impact level of the onboard measurement and control channel is determined to be the channel level.

[0065] That is, based on the specific impact characteristics of each single-particle effect impact level, the various abnormal conditions reflected in the key single-machine telemetry parameters are classified into three main levels in advance, which correspond to the judgment basis in the above-mentioned implementation method respectively; therefore, if the currently acquired key single-machine telemetry parameters show that the software execution logic health status flag is abnormal or the telemetry data collected by some modules in the single machine is abnormal, it is determined that there is currently a module-level single-particle impact; if there is a module-level impact, it is further determined whether there is an abnormality in the telemetry downlink or uplink remote control function of any measurement and control link. If so, it is determined that there is currently a single-particle impact at the single machine level; if there is still no single-machine-level impact, it is further determined whether the relevant telemetry of the key single machine has disappeared or the corresponding processing measures at the single machine level have failed. If so, it is determined that there is currently a channel-level single-particle impact; since the manifestations of single-particle impact are mainly the above-mentioned three types, if the above-mentioned three phenomena do not exist, it indicates that there is no single-particle impact, and no subsequent processing is required.

[0066] After analyzing and determining the corresponding single event impact level, the corresponding single event effect avoidance processing strategy can be further implemented according to the corresponding single event impact level.

[0067] If the analysis determines that the current SEP impact level is at the module level, the process proceeds to step S103 ; if the analysis determines that the current SEP impact level is at the machine level, the process proceeds to step S104 ; if the analysis determines that the current SEP impact level is at the channel level, the process proceeds to step S105 .

[0068] S103: If the single event effect impact level is the module level, an abnormal point in the single event effect impact module is analyzed based on the key single machine telemetry parameter, and the abnormal point is reset based on a pre-configured triple module redundancy setting and a timing refresh function. That is, in step S103, a specific abnormal point in the single event effect impact module is further analyzed and determined, and the single event effect impact module is a key single machine that is affected by the single event effect, and the abnormal point includes a software level and a hardware level, such as software running abnormity or partial module abnormity in the single machine.

[0069] Specifically, when the single event effect accumulates to a certain degree, it may overturn a telemetry-related collection hardware such as an AD chip in the single machine. When an AD chip module in the single machine is overturned by the single event effect, it will cause an abnormal chip selection signal of the telemetry collection, thereby causing an abnormal state of the telemetry data output. That is, the telemetry that should change with time collected by the same AD chip in the entire single machine is not refreshed with time, while other telemetry in the single machine is normal. At this time, although the telemetry and remote control functions of the entire satellite are not affected, this condition may affect the analysis and judgment of the on-orbit state by the ground personnel. To this end, the embodiment specifically adds a timing reset function inside the board of the AD chip, and a simple top-level logic is inserted in the software inside the single machine to achieve: when no uplink is detected within a certain time, the single machine is automatically reset. That is, when no uplink signal is detected within a certain time inside the single machine, the single machine autonomously executes a reset instruction, thereby effectively avoiding such single event effect while avoiding affecting the ground task.

[0070] The FPGA chip inside the single machine is a weak link of the single event effect, and is prone to be overturned during on-orbit operation. When a read-write gate circuit in the chip is overturned during on-orbit operation, it will cause software running abnormity. To this end, the embodiment specifically configures a refresh detection FPGA inside the single machine, which immediately refreshes and reallocates the software when detecting software abnormity. Preferably, the embodiment needs to make a triple module redundancy design for the key chip when designing each single machine module on the ground. The parameter program of the triple module redundancy system is stored three times, and the three programs simultaneously perform the same task. During the running process, the output results of the three programs are compared and voted. If one program fails and the output results of the other two programs are normal, the correct output of the system can be determined through the voting mechanism. In addition, the design and ground verification of the refresh strategy need to be completed in the design stage.

[0071] In this way, for the single event effect impact level of the module level, the embodiment can reset the abnormal point by using the pre-configured triple module redundancy setting and the timing refresh function, that is, by adding an automatic refresh function design inside the single machine to avoid the single event effect of the module level.

[0072] In an optional implementation, step S103 specifically includes:

[0073] If the SPE impact level is at the module level, the SPE will analyze whether the software in the single machine affected by the SPE is running abnormally based on the key single machine telemetry parameters; if the software is running abnormally, the software status will be automatically detected and refreshed based on the pre-configured timed refresh function; if the software is not running abnormally, the abnormal module in the single machine affected by the SPE will be automatically reset through the pre-configured triple-module redundancy setting. Figure 3 As shown in the figure, the module level is divided into software-level impact and non-software-level impact. The software-level impact is such as the situation in which a read-write gate circuit in the FPGA chip inside the single machine is overturned during on-track operation, resulting in abnormal software operation. For this situation, a refresh mechanism can be designed to regularly detect and refresh the software status; if it is a non-software-level impact, the impact of a single bit overturning in the abnormal module in the single machine can be restored by designing an autonomous reset function.

[0074] S104: If the SEP impact level is the stand-alone machine level, determine the target stand-alone machine with the communication abnormality, and send a reset or power-off instruction to the target stand-alone machine to restore communication between interfaces.

[0075] Because interfaces between individual devices require complex mechanical structures, it's difficult to implement high-level single-event effect (SEP) mitigation measures, such as the triple-module redundancy (TMR) described in step S103. When a single event disrupts a critical data transmission interface between key measurement and control devices, the interface will continuously output a high or low level, causing abnormal telemetry downlink or uplink remote control functions on a particular path. In this case, the subsystem level of this embodiment performs a comprehensive inspection of the onboard link, sending a reset or power-off command to the device experiencing a communication anomaly (breakpoint) to restore normal communication between the interfaces.

[0076] In an optional embodiment, if Figure 3 In the embodiment, the step S104 includes:

[0077] If the SPE impact level is at the single-machine level, a target single machine with a communication abnormality is determined, and a reset instruction is sent to the target single machine to control the target single machine to perform a reset operation; whether the target single machine has returned to normal based on the reset operation is determined; if the target single machine has not returned to normal based on the reset operation, a power-on / off instruction is sent to control the power-on / off of the target single machine; whether the target single machine has returned to normal based on the power-on / off control is determined; if the target single machine has not returned to normal based on the power-on / off control, the SPE impact level is corrected, and it is further determined whether the SPE impact level is at the channel level.

[0078] Furthermore, step S104 further includes:

[0079] If the single event effect impact level is a single machine level, based on the multiple groups of same-frequency configurations pre-set by the measurement and control transponder, the path is adaptively adjusted to start the backup single machine.

[0080] From a design perspective, this embodiment designs the configuration of the measurement and control transponders to be multiple groups of same-frequency configurations. During actual on-orbit applications, they normally operate in a non-same-frequency combination to meet the needs of space-based / ground-based measurement and control. When a single particle knocks over a certain path or the interface between single machines, the subsystem can adaptively adjust the remaining two transponders to continue to maintain the measurement and control link, that is, switch the second backup transponder and / or the third backup transponder to the working state and frequency point to ensure the continuity of the measurement and control channel.

[0081] In specific implementation, when communication anomalies occur between single machines, the subsystem first adjusts the measurement and control channel and uses the backup single machine to ensure the measurement and control channel; then, based on the key telemetry criteria, the location of the breakpoint is detected and determined, and the reset instruction is executed on the corresponding single machine.

[0082] Preferably, when the subsystem detects that a single machine fails to successfully execute the reset instruction, the subsystem level can send the reset instruction to these faulty single machines again through the internal bus, thereby achieving double insurance to avoid single-particle effects at the single-machine level.

[0083] Furthermore, when it is detected that a single machine abnormality at the single machine level fails to be automatically reset, the subsystem can also send instructions from the external monitoring single machine to the predetermined lower machine where the failure occurs.

[0084] S105: If the SEP impact level is the channel level, adaptively control the measurement and control subsystem through the entire satellite service system to adjust the measurement and control path and avoid single faulty machines that may experience SEP.

[0085] When the damage level single event occurs, at this time, the transient current generated by the single particle is large, which will directly over-current burn the key devices of diodes or MOS tubes responsible for telemetry transmission and collection in the single machine, and destroy the devices from the physical layer. This damage level single event cannot be repaired by timing refresh and single machine reset. In addition, when multiple single machines in the entire telemetry and control subsystem occur damage level single event, or multiple telemetry channel single machines cause reset and refresh function failure at the same time, the processing measures at the module level and single machine level are unable to solve the problem. Therefore, the above two situations need to rely on the whole star service from the channel level to solve the link interruption caused by single event and quickly recover the telemetry path between the ground and the satellite. In specific implementation, when multiple single machines occur single machine level or subsystem single event flip at the same time, the system level star service will directly control the telemetry and control subsystem, use the healthy single machine to build a chain, and recover the telemetry channel. When the star service judges that the existing single machine state of the telemetry and control subsystem cannot meet the task requirements, it will urgently borrow the load channel to perform the telemetry task, and ensure the telemetry link between the satellite and the ground.

[0086] In the system level star service software of the whole satellite, all possible combinations of telemetry and control subsystem paths are embedded. In the normal transfer orbit and on-orbit operation, the configuration of the telemetry channel is a certain normal fixed configuration, for example, transponder A and filter A, antenna A, transponder B and filter B, antenna B. Therefore, the embodiment can determine the abnormal point position to be avoided based on the analysis of the key single machine telemetry parameters, and adaptively adjust the current telemetry path combination to avoid the abnormal point position.

[0087] Specifically, when multiple single machine level or module level single particle faults occur at the same time, step S105 includes:

[0088] If the SPE impact level is at the channel level, based on the time of fault occurrence, the measurement and control link configuration status of the previous frame is read to identify the faulty unit experiencing the SPE; adaptive control is performed on the filter circuits, switches, and transponders in the measurement and control subsystem to adjust the measurement and control pathway to avoid the faulty unit. Specifically, to identify the faulty unit, a normal range of telemetry parameters can be pre-set for all key measurement and control units. The health status of the existing unit can then be determined based on the proportion and duration of all telemetry measurements of the key measurement and control units exceeding the normal set range. The satellite service configuration is read, and the entire satellite service is used to promptly adjust the available measurement and control link. This embodiment preferably embeds the status control and timed status recording functions of the measurement and control subsystem into the satellite service software of the entire satellite. The telemetry of the key single machine involved in the measurement and control link is bound to the normal value range in advance. When these telemetry measurements are abnormal (that is, they exceed the normal value range for a certain period of time), a channel-level single-particle effect occurs. At this time, the entire star service reads the measurement and control link configuration status of the previous frame based on the time of fault occurrence, identifies the single machine with the single-particle effect, and adaptively controls the filter circuits, switches, transponders, etc. of the measurement and control subsystem to adjust the measurement and control path to avoid the single machine with the single-particle effect.

[0089] In the early stages of ground-based design, it is necessary to predict and design the configurations of various possible measurement and control subsystem pathways, and directly install them in the satellite's system-level software as key configuration items. When a channel-level single-particle effect occurs, the entire satellite service can read these configuration items and execute configurations based on the health status of each unit to avoid channel-level single-particle effects.

[0090] Furthermore, step S105 also includes: if the faulty single machine cannot be avoided based on the adaptive control of the measurement and control subsystem, the measurement and control path is maintained by borrowing the load channel. Figure 3 As shown, this embodiment designs a payload channel reuse function in emergency mode. If two critical single-unit machines simultaneously experience widespread abnormal telemetry or communication status telemetry anomalies, i.e., extreme situations where damage from single-event effects is irreparable, the entire satellite service can systematically deploy payload channels at the channel level to continue performing TT&C tasks and ensure communication between the space and ground bases. Specifically, if the satellite service determines that the existing TT&C subsystem's single-unit state cannot meet mission requirements, it will urgently borrow payload channels to perform TT&C tasks, ensuring the TT&C link between the space and the ground.

[0091] Subsequently, based on the key telemetry parameter detection after the execution of the above-mentioned different levels of avoidance methods, the health status of the onboard measurement and control link can be judged and analyzed.

[0092] In summary, the hierarchical single-particle effect avoidance and handling method for the tracking and control channel of a GEO all-electric propulsion satellite described in the present invention analyzes and determines the impact level of the single-particle effect affecting the onboard tracking and control channel based on the key single-machine telemetry parameters within the tracking and control subsystem; if it is a preset module level, the abnormal points within the single-machine affected by the single-particle effect are analyzed based on the key single-machine telemetry parameters, and the abnormal points are reset; if it is a preset single-machine level, a reset or power-off command is sent to the target single-machine with communication abnormality to restore communication between interfaces; if it is a preset channel level, the tracking and control channel is adjusted to avoid the faulty single-machine that has experienced the single-particle effect through adaptive control of the tracking and control subsystem. In this way, the present invention analyzes the impact level of single-particle effects on the onboard tracking and control channel of GEO all-electric propulsion satellites, divides the impact into three categories: module level, single-machine level, and channel level, and proposes corresponding solutions and strategies for the impact at different levels, thereby improving the all-electric propulsion satellite's ability to cope with single-particle effects.

[0093] It should be noted that the present application can be implemented in a combination of software and / or software and hardware, for example, can be implemented using an application specific integrated circuit (ASIC), a general purpose computer or any other similar hardware device. In one embodiment, the software program of the present application can be executed by a processor to implement the above steps or functions. Similarly, the software program of the present application (including relevant data structures) can be stored in a computer-readable recording medium, for example, a RAM memory, a magnetic or optical drive or a floppy disk and similar devices. In addition, some steps or functions of the present application can be implemented using hardware, for example, as a circuit that cooperates with a processor to perform each step or function.

[0094] The method according to the present invention can be implemented on a computer as a computer-implemented method, or implemented in dedicated hardware, or implemented in a combination of the two. The executable code for the method according to the present invention, or parts thereof, can be stored on a computer program product. Examples of computer program products include memory devices, optical storage devices, integrated circuits, servers, online software, etc. Preferably, the computer program product includes non-transitory program code components stored on a computer-readable medium so that when the program product is executed on a computer, the method according to the present invention is executed.

[0095] Of course, the present invention may have many other embodiments. Without departing from the spirit and essence of the present invention, those skilled in the art may make various corresponding changes and modifications based on the present invention, but these corresponding changes and modifications should all fall within the scope of protection of the claims attached to the present invention.

Claims

1. A hierarchical single event effect avoidance and processing method for the tracking and control channel of a GEO all-electric propulsion satellite, characterized in that: Including steps: Obtain key single-machine telemetry parameters within the measurement and control subsystem; Analyze and determine the impact level of single-particle effects affecting onboard measurement and control channels based on the key single-machine telemetry parameters; wherein the single-particle effect impact levels include module level, single-machine level, and channel level. The module level indicates the phenomenon of a board state or acquisition state of related hardware equipment being upset or locked due to a single-particle effect; the single-machine level indicates the phenomenon of a data transmission interface between single-machines being upset or locked due to a single-particle effect; and the channel level indicates the phenomenon of a single-particle effect causing damage-level single-particle effects on multiple single-machines and / or single-particle effects on multiple measurement and control channel single-machines, resulting in single-machine failure or channel interruption. If the SEP impact level is the module level, analyzing the abnormal points within the single machine affected by the SEP based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple-module redundancy settings and timed refresh function; If the SEP impact level is the single-machine level, determining the target single machine with the communication abnormality, and sending a reset or power-off instruction to the target single machine to restore communication between interfaces; If the SEP impact level is the channel level, the measurement and control subsystem is adaptively controlled by the entire satellite service system to adjust the measurement and control path and avoid single-machine failure caused by SEP.

2. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 1 is characterized in that: The acquisition of key single-machine telemetry parameters in the measurement and control subsystem includes: The key single-machine telemetry parameters in the measurement and control subsystem are polled and stored through the internal bus.

3. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 1 is characterized in that: The analyzing and determining the impact level of single event effects affecting the satellite-borne measurement and control channel based on the key single-machine telemetry parameters includes: Based on the key stand-alone telemetry parameters, determine whether there is an abnormality in the software execution logic health status flag or an abnormality in the telemetry data collected by some modules in the stand-alone machine; If there is an abnormality in the software execution logic health status flag or the telemetry data collected by some modules in a single machine is abnormal, the single event effect impact level of the onboard measurement and control channel is determined to be the module level.

4. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 3 is characterized in that: The analyzing and determining the impact level of single event effects affecting the onboard tracking and control channel based on the key single-machine telemetry parameters further includes: If there is no abnormality in the software execution logic health status flag or abnormality in the telemetry data collected by some modules in the single machine, then based on the overall status telemetry parameters of the key single machine or the uplink command and telemetry reception conditions of the ground measurement and control, it is determined whether the telemetry downlink or uplink remote control function of any measurement and control link is abnormal; If a single downlink telemetry or uplink telecontrol function of any measurement and control link is abnormal, the single event effect impact level of the onboard measurement and control channel is determined to be the single-machine level.

5. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 4 is characterized in that: The analyzing and determining the impact level of single event effects affecting the onboard tracking and control channel based on the key single-machine telemetry parameters further includes: If the telemetry downlink or uplink remote control functions of any default configuration measurement and control link are abnormal at the same time, it is determined based on the telemetry parameters of the key stand-alone machine whether the relevant telemetry of the key stand-alone machine has disappeared / is invalid or the corresponding treatment measures at the stand-alone machine level have failed; If the relevant telemetry of a key single machine disappears / is invalid or the corresponding processing measures at the single machine level fail, the single event effect impact level of the onboard measurement and control channel is determined to be the channel level.

6. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 1 is characterized in that: If the SEP impact level is the module level, analyzing the abnormal points within the single machine affected by the SEP based on the key single machine telemetry parameters, and resetting the abnormal points based on the pre-configured triple-module redundancy settings and the timed refresh function, including: If the SEP impact level is the module level, analyzing whether the software in the single machine affected by the SEP is running abnormally based on the key single machine telemetry parameters; If the software runs abnormally, the software status will be automatically detected and refreshed based on the pre-configured timed refresh function; If the software is not running abnormally, the abnormal module in the single machine affected by the single event effect will be reset autonomously through the pre-configured triple-module redundancy setting.

7. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 1 is characterized in that: If the SEP impact level is the stand-alone machine level, determining a target stand-alone machine with abnormal communication, and sending a reset or power-off instruction to the target stand-alone machine to restore communication between interfaces, including: If the SEP impact level is the single-machine level, determining the target single machine with the communication abnormality, and sending a reset instruction to the target single machine to control the target single machine to perform a reset operation; Determining whether the target stand-alone machine has returned to normal based on the reset operation; If the target stand-alone machine does not return to normal based on the reset operation, sending a power-on / off instruction to control the power on / off of the target stand-alone machine; Determining whether the target stand-alone machine has returned to normal based on power-on and power-off control; If the target stand-alone machine does not return to normal based on the power-on / off control, the single event effect impact level is corrected, and it is further determined whether the single event effect impact level is the channel level.

8. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 1 is characterized in that: If the SEP impact level is the stand-alone machine level, determining a target stand-alone machine with abnormal communication, and sending a reset or power-off instruction to the target stand-alone machine to restore communication between interfaces, further comprising: If the single event effect impact level is the single machine level, the path is adaptively adjusted to start the backup single machine based on the multiple groups of same-frequency configurations pre-set by the measurement and control transponder.

9. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 1 is characterized in that: If the SEP impact level is the channel level, adaptively controlling the measurement and control subsystem through the entire satellite service system to adjust the measurement and control path and avoid a single faulty machine causing the SEP, including: If the SEP impact level is the channel level, based on the time of occurrence of the fault, the measurement and control link configuration state of the previous frame is read to identify the faulty unit where the SEP occurs; Adaptive control is performed on the filter circuit, switch and transponder in the measurement and control subsystem to adjust the measurement and control path to avoid the faulty single machine.

10. The hierarchical single event effect avoidance and processing method for the GEO all-electric propulsion satellite tracking and control channel according to claim 9 is characterized in that: If the SEP impact level is the channel level, the system adaptively controls the measurement and control subsystem through the entire satellite service system to adjust the measurement and control path and avoid single faulty machines that experience SEP, further comprising: If the faulty single machine cannot be avoided based on the adaptive control of the measurement and control subsystem, the measurement and control path is maintained by borrowing the load channel.

Images