Long-term on-orbit operation manned spacecraft safety state monitoring system

Abstract

The invention relates to a safety state monitoring system for a manned spacecraft in long-term in-orbit operation. The system comprises a telemetry data receiving module, a dangerous event monitoring module and a dangerous source state monitoring module, the telemetry data receiving module is used for receiving downlink telemetry parameters of the manned spacecraft running in orbit; the dangerous event monitoring module is used for judging whether a dangerous event occurs or not according to environment monitoring telemetry parameters, corresponding to the dangerous event, of the manned spacecraft, and sending a dangerous event judgment result to the comprehensive evaluation module; the danger source state monitoring module is used for judging the safety state of the danger source according to whether the telemetering parameters of the danger source are within a preset value range or not; and the comprehensive evaluation module is used for judging whether the manned spacecraft is in a safe state or not according to the dangerous event judgment result, the consequence severity degree of the dangerous source and the safe state of the dangerous source.

Description

Technical Field

[0001] The present invention relates to the technical field of overall spacecraft design, and in particular to a safety status monitoring method and a monitoring system for a manned spacecraft operating in orbit for a long period of time. Background Art

[0002] The primary task of manned spacecraft in orbit is to ensure safety. As manned spacecraft develop towards complexity, large-scale and long-term orbital flight, there are more and more dangerous sources that can lead to serious consequences. If a catastrophic accident occurs, it will cause casualties and major property losses. During the design stage of a manned spacecraft, safety control measures are used to control and eliminate hazards to ensure that the safety of the spacecraft is at an acceptable level.

[0003] During the in-orbit operation phase of a manned spacecraft, it is necessary to monitor in real time the telemetry parameters of the equipment corresponding to the identified hazardous sources and the state change parameters caused by dangerous events, so as to ensure that the unsafe states of the hazardous sources in the manned spacecraft and possible dangerous events are discovered in time, and in the event of a failure or danger, the on-orbit and ground personnel can be promptly reminded to deal with it or complete the fault disposal autonomously, so as to ensure that the safety of the manned spacecraft is at an acceptable level throughout its entire life cycle of in-orbit operation.

[0004] Although my country has experience in on-orbit operation of various types of manned spacecraft in the past, due to differences in on-orbit flight time, mission types, and continuous on-orbit stay time of personnel, simply applying the methods in the existing technology to long-term on-orbit operation of manned spacecraft may cause the following problems:

[0005] 1. Due to the long flight time in orbit and the many factors that affect the safety status of spacecraft, judging the status of hazard sources based on whether a single hazard source device can work normally and then assessing whether a manned spacecraft is safe will ignore the severity and urgency of the consequences caused by the hazard source, fail to reflect the role of manned spacecraft safety control measures, and fail to obtain accurate safety status assessment results;

[0006] 2. Manned spacecraft have designed on-orbit autonomous handling procedures for emergency and major failures. The entry conditions of the autonomous handling procedures require a comprehensive judgment of multiple parameters related to emergency and major failures. Judging by a single telemetry parameter will result in an inability to accurately reflect the safety status of the autonomous handling system. Summary of the invention

[0007] The technical problem solved by the present invention is: to overcome the shortcomings of the prior art, to provide a method for monitoring the safety status of a manned spacecraft in long-term orbit, and a monitoring system for implementing this monitoring method, to solve the problem of whether the manned spacecraft assembly is in a safe state based on the monitoring results of the dangerous sources, dangerous events, autonomous handling of emergency major failures and the working status of emergency support equipment in the manned spacecraft, and to comprehensively evaluate whether the manned spacecraft assembly is in a safe state, and to issue an alarm prompt for an unsafe state.

[0008] The solution to the technical problem of the present invention is: a safety status monitoring system for a manned spacecraft in long-term orbit, the system comprising a telemetry data receiving module, a dangerous event monitoring module, and a dangerous source status monitoring module;

[0009] A telemetry data receiving module is used to receive downlink telemetry parameters of manned spacecraft in orbit;

[0010] The dangerous event monitoring module determines whether a dangerous event has occurred based on the environmental monitoring telemetry parameters corresponding to the manned spacecraft and the dangerous event, and sends the dangerous event judgment result to the comprehensive assessment module;

[0011] The hazard source status monitoring module determines the safety status of the hazard source based on whether the telemetry parameters of the hazard source are within the preset value range;

[0012] The comprehensive assessment module determines whether the manned spacecraft is in a safe state based on the judgment results of dangerous events, the severity of the consequences of the dangerous sources, and the safety status of the dangerous sources.

[0013] Preferably, the method for determining the safety status of a hazardous source is:

[0014] If any telemetry parameter of the hazardous source is outside the preset value range, the hazardous source is considered to be in an unsafe state; otherwise, the hazardous source is considered to be in a safe state.

[0015] Preferably, the dangerous events include fire in the sealed cabin and depressurization of the sealed cabin.

[0016] Preferably, for a sealed cabin fire hazard event, the corresponding environmental monitoring telemetry parameters are the amount of smoke or the air temperature change rate transmitted by N fire sensors arranged in the sealed cabin of the spacecraft and the carbon monoxide concentration values ​​transmitted by N carbon monoxide sensors, and the judgment condition is: if the amount of smoke or the air temperature change rate transmitted by at least two fire sensors exceeds the corresponding threshold and the carbon monoxide concentration transmitted by at least two carbon monoxide sensors exceeds the corresponding threshold, it is considered that a sealed cabin fire event has occurred, and N is greater than 1.

[0017] Preferably, for a dangerous event of depressurization of a sealed cabin, the corresponding environmental monitoring telemetry parameter is the ambient pressure or pressure change rate transmitted by N pressure sensors arranged in the sealed cabin of the spacecraft, and the judgment condition is: if the ambient pressure or pressure change rate transmitted by at least two fire sensors exceeds the corresponding threshold, it is considered that a dangerous event of depressurization of a sealed cabin has occurred, and N is greater than 1.

[0018] Preferably, if any of the following conditions is met, the manned spacecraft is determined to be in an unsafe state:

[0019] When any hazard source with the severity of disaster and severe consequences is in an unsafe state;

[0020] Any dangerous incident occurs.

[0021] Preferably, the manned spacecraft control computer autonomously monitors and judges key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions. After monitoring that the key parameters are out of limit and meet the conditions for fault handling, it autonomously makes a fault handling decision, obtains a fault handling strategy, handles the fault according to the selected fault handling strategy, and notifies the on-orbit personnel of the autonomous judgment results of the key parameters, the fault handling strategy and the progress of the current handling strategy in the form of an alarm, and transmits them down in the form of telemetry parameters.

[0022] Preferably, the above-mentioned long-term on-orbit manned spacecraft safety status monitoring system further includes an autonomous fault handling status monitoring module;

[0023] The autonomous fault status monitoring module extracts key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions from the telemetry parameters, and makes autonomous judgments on the results, fault handling strategies and the progress of the handling strategies, and notifies the ground support personnel in the form of alarm information.

[0024] Preferably, the conditions for determining that the manned spacecraft is in an unsafe state also include:

[0025] Any of the manned environment control, information management, energy management, control propulsion and thermal management functions is in the process of autonomous fault handling.

[0026] Preferably, the above-mentioned long-term on-orbit manned spacecraft safety status monitoring system further includes an emergency support equipment status monitoring module;

[0027] The emergency support equipment status monitoring module confirms whether it is possible to promptly remind the on-orbit personnel when a manned spacecraft fails, based on the working status telemetry parameters of the emergency residence support equipment and fault alarm prompt equipment configured in the manned spacecraft, and whether it can support the on-orbit personnel to evacuate the manned spacecraft and isolate the danger after an emergency major failure occurs in the manned spacecraft.

[0028] The beneficial effects of the present invention compared with the prior art are:

[0029] (1) The present invention implements safety status monitoring of emergency major faults caused by key functions of manned spacecraft by using key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions of manned spacecraft to determine autonomous judgment results, fault handling strategies and fault handling processes. Compared with the method of judging the safety status by telemetry parameters corresponding to a single device in the prior art, while meeting the safety status monitoring requirements, the present invention adds monitoring of the evolution process of the emergency major fault status, thereby improving the accuracy of safety monitoring.

[0030] (2) The emergency support equipment status monitoring module of the present invention confirms the ability to promptly remind on-orbit personnel and ensure the safety of on-orbit personnel when a fault occurs by monitoring the working status of the emergency resident support equipment and fault alarm prompt equipment configured in the manned spacecraft, and uses it as the monitoring content of the manned spacecraft safety status, thereby ensuring the comprehensiveness of the safety status. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0032] Figure 1 The flowchart schematically shows the method for monitoring the safety status of a manned spacecraft according to the present invention. DETAILED DESCRIPTION

[0033] The description of the embodiments of this specification should be combined with the corresponding drawings, which should be considered as part of the complete specification. In the drawings, the shape or thickness of the embodiments may be enlarged and indicated for simplification or convenience. Furthermore, the parts of each structure in the drawings will be described separately. It is worth noting that the elements not shown in the drawings or not described in words are in a form known to ordinary technicians in the relevant technical field.

[0034] The description of the embodiments herein and any reference to directions and orientations are only for the convenience of description and are not to be construed as any limitation on the scope of protection of the present invention. The following description of the preferred embodiments may involve combinations of features, which may exist independently or in combination, and the present invention is not particularly limited to the preferred embodiments. The scope of the present invention is defined by the claims.

[0035] Figure 1 The following is a schematic diagram showing a process flow chart of a manned spacecraft safety status monitoring system according to the present invention. Figure 1 As shown, the present invention provides a safety status monitoring system for manned spacecraft in long-term orbit, which is used to solve the problem of dangerous risk control during the long-term orbit operation of large manned spacecraft. The system includes a telemetry data receiving module, a dangerous event monitoring module, a dangerous source status monitoring module, an autonomous fault handling status monitoring module, an emergency support equipment status monitoring module, and a comprehensive assessment module.

[0036] The following is a detailed introduction to each module:

[0037] (1) Telemetry data receiving module

[0038] The telemetry data receiving module is used to receive the downlink telemetry parameters of the manned spacecraft in orbit; for example, the telemetry parameter of the high-pressure container is the pressure value, the telemetry parameter of the control computer is its power supply status and working status, the telemetry parameters of the sealed cabin fire are the smoke volume transmitted by the fire sensor, the rate of change of the air temperature in the sealed cabin and the carbon monoxide concentration value transmitted by the carbon monoxide sensor, and the monitoring parameter of the sealed cabin depressurization is the total pressure value in the sealed cabin.

[0039] (2) Dangerous event monitoring module

[0040] The dangerous event monitoring module determines whether a dangerous event has occurred based on the environmental monitoring telemetry parameters corresponding to the manned spacecraft and the dangerous event, and sends the dangerous event judgment result to the comprehensive assessment module;

[0041] Dangerous events are multi-factor induced dangers that may occur during the long-term operation of manned spacecraft in orbit, directly threaten the safety of personnel and spacecraft, and include fire in sealed cabins and depressurization of sealed cabins.

[0042] For the dangerous event of sealed cabin fire, the corresponding environmental monitoring telemetry parameters are the smoke volume or air temperature change rate transmitted by N fire sensors arranged in the sealed cabin of the spacecraft and the carbon monoxide concentration value transmitted by N carbon monoxide sensors. The judgment condition is: if the smoke volume or air temperature change rate transmitted by at least 2 fire sensors exceeds the corresponding threshold and the carbon monoxide concentration transmitted by at least 2 carbon monoxide sensors exceeds the corresponding threshold, it is considered that a sealed cabin fire event has occurred, and N is greater than 1.

[0043] For the dangerous event of sealed cabin depressurization, the corresponding environmental monitoring telemetry parameter is the ambient pressure or pressure change rate transmitted by N pressure sensors arranged in the sealed cabin of the spacecraft, and the judgment condition is: if the ambient pressure or pressure change rate transmitted by at least two fire sensors exceeds the corresponding threshold, it is considered that a dangerous event of sealed cabin depressurization has occurred, and N is greater than 1.

[0044] (3) Hazard source status monitoring module

[0045] Hazard sources include general hazards and fault hazards. They are determined based on the severity and urgency of the hazard. For example, the danger caused by the general hazard source high-pressure container is regional and will not immediately cause the failure of the spacecraft or casualties. The severity level is minor and the urgency level is not urgent. The failure of the control computer of the fault hazard source can immediately cause the spacecraft to lose control, seriously affecting the safety of the spacecraft and personnel. The severity level is severe and the urgency level is urgent. After a sealed cabin fire or sealed cabin depressurization occurs, it will immediately cause the risk of loss of control of the manned environment and serious damage to the equipment. The severity level is catastrophic and the urgency level is urgent.

[0046] The hazard source status monitoring module associates all general hazard sources and fault hazard sources with telemetry parameters based on the identified general hazard source list and fault hazard source list of manned spacecraft, and determines the safety status of the hazard source according to whether the telemetry parameter of the hazard source is within the preset value range;

[0047] The method for judging the safety status of hazardous sources is:

[0048] If any telemetry parameter of the hazardous source is outside the preset value range, the hazardous source is considered to be in an unsafe working state; otherwise, the hazardous source is considered to be in a safe working state.

[0049] When a monitoring parameter of a hazardous source with a severity level of minor and an urgency level of non-urgent exceeds the limit, a low-level alarm is issued as a prompt; when a parameter exceeds the limit with a severity level of catastrophic and an urgency level of urgent, a high-level alarm is issued as a prompt; when the monitored hazardous source parameter value does not exceed the limit but shows a trend of deviating from the normal state, a prompt is issued in the form of a reminder message; when no parameter exceeding the limit and no trend of deviating from the normal state is monitored, the hazardous source is displayed as a controllable safe state.

[0050] (4) Autonomous fault status monitoring module

[0051] The manned spacecraft control computer autonomously monitors and judges the key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions. When it detects that the key parameters are out of limit and meet the conditions for fault handling, it autonomously makes a fault handling decision, obtains a fault handling strategy, handles the fault according to the selected fault handling strategy, and notifies the on-orbit personnel of the autonomous judgment results of the key parameters, the fault handling strategy and the progress of the current handling strategy in the form of an alarm, and transmits them down in the form of telemetry parameters.

[0052] The autonomous fault status monitoring module extracts key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions from the telemetry parameters, and makes autonomous judgments on the results, fault handling strategies and the progress of the handling strategies, and notifies the ground support personnel in the form of alarm information.

[0053] (5) Emergency support equipment status monitoring module

[0054] The emergency support equipment status monitoring module confirms whether it is possible to promptly remind the on-orbit personnel when a manned spacecraft fails, based on the working status telemetry parameters of the emergency residence support equipment and fault alarm prompt equipment configured in the manned spacecraft, and whether it can support the on-orbit personnel to evacuate the manned spacecraft and isolate the danger after an emergency major failure occurs in the manned spacecraft.

[0055] Monitor the remaining resources in the emergency resident support equipment. When the remaining resources decrease, issue a reminder message, check the status of the equipment in time and replenish resources. Monitor the working status and online status of the alarm prompt equipment in the spacecraft. When the equipment is offline or the working status is abnormal, issue a reminder message, check the status of the alarm equipment in time and replace it when necessary to ensure that the alarm information can be prompted in real time.

[0056] (6) Comprehensive assessment module

[0057] The comprehensive assessment module determines whether the manned spacecraft is in a safe state based on the judgment results of dangerous events, the severity of the consequences of the dangerous sources, and the safety status of the dangerous sources.

[0058] If any of the following conditions is met, the manned spacecraft is judged to be in an unsafe state:

[0059] When any hazard source with the severity of disaster and severe consequences is in an unsafe working state;

[0060] Any dangerous incident occurs.

[0061] Any of the manned environment control, information management, energy management, control propulsion and thermal management functions is in the process of autonomous fault handling.

[0062] When it is monitored that all the criteria for autonomous fault handling are not met and the autonomous fault handling process has not been entered, it is displayed as a safe state where no autonomous fault handling has occurred; when it is monitored that the autonomous handling function is not enabled, a prompt is issued in the form of a reminder message, indicating that the spacecraft is in an unsafe state where it is unable to autonomously handle major faults.

[0063] Please refer to the following table for the above emergency and major failures.

[0064] Table 1 Classification of severity of dangers for manned spacecraft

[0065]

[0066] According to a solution of the present invention, the severity of the consequences caused by the possible danger sources, dangerous events, and serious failures during the long-term on-orbit operation of the manned spacecraft is comprehensively considered, and the dangerous factors that affect the safety status of the manned spacecraft are identified. On the basis of judging the values ​​of the associated telemetry parameters, the safety status of the manned spacecraft is comprehensively determined to ensure that the safety monitoring conclusions during the long-term operation are accurate and the cost is low, thereby achieving maximum efficiency. In addition, the solution of the present invention is simple, easy to implement, fast and convenient to operate, and can support equipment updates or data updates during the long-term operation of the manned spacecraft.

[0067] According to one scheme of the present invention, by adopting the method of safety system engineering for hazard analysis, the factors affecting the safety status of manned spacecraft can be analyzed comprehensively and systematically to prevent one-sidedness and inversion of importance; by identifying risk factors and confirming related parameters, the safety status of manned spacecraft can be grasped in real time, so as to be prepared for any eventuality; the most direct safety monitoring effect can be obtained in a simple way; the accumulation of various data required for monitoring the safety status of manned spacecraft can be promoted, and the monitoring capability of the safety status of manned spacecraft can be improved.

[0068] According to one solution of the present invention, each module in the manned spacecraft safety status monitoring system has a clear division of labor, the system layout is simple and clear, and the safety status of the manned spacecraft during long-term on-orbit operation is confirmed accurately and efficiently.

[0069] The various modules in the manned spacecraft safety status monitoring system according to the present invention have clear division of labor, a simple and clear system layout, and accurate and efficient confirmation of the safety status of the manned spacecraft during long-term on-orbit operation.

[0070] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

[0071] Comprehensively consider the severity of the consequences of possible danger sources, dangerous events, and serious failures that may occur during the long-term on-orbit operation of manned spacecraft, identify the dangerous factors that affect the safety status of the manned spacecraft, and make a comprehensive judgment on the safety status of the manned spacecraft based on the judgment of the associated telemetry parameter values ​​to ensure that the safety monitoring conclusions during long-term operation are accurate and cost-effective.

[0072] Although the present invention has been disclosed as above in the form of a preferred embodiment, it is not intended to limit the present invention. Any person skilled in the art may make possible changes and modifications to the technical solution of the present invention by using the methods and technical contents disclosed above without departing from the spirit and scope of the present invention. Therefore, any simple modifications, equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention shall fall within the protection scope of the technical solution of the present invention.

Claims

1. A safety status monitoring system for manned spacecraft in long-term orbit, characterized in that It includes telemetry data receiving module, dangerous event monitoring module and dangerous source status monitoring module; A telemetry data receiving module is used to receive downlink telemetry parameters of manned spacecraft in orbit; The dangerous event monitoring module determines whether a dangerous event has occurred based on the environmental monitoring telemetry parameters corresponding to the manned spacecraft and the dangerous event, and sends the dangerous event judgment result to the comprehensive assessment module; The hazard source status monitoring module determines the safety status of the hazard source based on whether the telemetry parameters of the hazard source are within the preset value range; The comprehensive assessment module determines whether the manned spacecraft is in a safe state based on the judgment results of dangerous events, the severity of the consequences of the dangerous sources, and the safety status of the dangerous sources.

2. A long-term on-orbit manned spacecraft safety status monitoring system according to claim 1, characterized in that: The method for judging the safety status of the hazardous source is as follows: If any telemetry parameter of the hazardous source is outside the preset value range, the hazardous source is considered to be in an unsafe state; otherwise, the hazardous source is considered to be in a safe state.

3. The safety status monitoring system for a manned spacecraft in long-term orbit according to claim 1, characterized in that: The dangerous events include fire in the sealed cabin and loss of pressure in the sealed cabin.

4. A long-term on-orbit manned spacecraft safety status monitoring system according to claim 3, characterized in that: For the dangerous event of sealed cabin fire, the corresponding environmental monitoring telemetry parameters are the smoke volume or air temperature change rate transmitted by N fire sensors arranged in the sealed cabin of the spacecraft and the carbon monoxide concentration value transmitted by N carbon monoxide sensors. The judgment condition is: if the smoke volume or air temperature change rate transmitted by at least 2 fire sensors exceeds the corresponding threshold and the carbon monoxide concentration transmitted by at least 2 carbon monoxide sensors exceeds the corresponding threshold, it is considered that a sealed cabin fire event has occurred, and N is greater than 1.

5. A long-term on-orbit manned spacecraft safety status monitoring system according to claim 3, characterized in that For the dangerous event of sealed cabin depressurization, the corresponding environmental monitoring telemetry parameter is the ambient pressure or pressure change rate transmitted by N pressure sensors arranged in the sealed cabin of the spacecraft, and the judgment condition is: if the ambient pressure or pressure change rate transmitted by at least two fire sensors exceeds the corresponding threshold, it is considered that a dangerous event of sealed cabin depressurization has occurred, and N is greater than 1.

6. A safety status monitoring system for a manned spacecraft in long-term orbit according to any one of claims 1 to 4, characterized in that: If any of the following conditions is met, the manned spacecraft is judged to be in an unsafe state: When any hazard source with the severity of disaster and severe consequences is in an unsafe state; Any dangerous incident occurs.

7. The long-term on-orbit manned spacecraft safety status monitoring system according to claim 1 is characterized in that: The manned spacecraft control computer autonomously monitors and judges key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions. Upon detecting that a key parameter has exceeded a limit and that the conditions for fault handling are met, the computer autonomously makes a fault handling decision, obtains a fault handling strategy, handles the fault according to the selected fault handling strategy, and notifies the on-orbit personnel of the autonomous judgment results of the key parameters, the fault handling strategy and the progress of the current handling strategy in the form of an alarm, and transmits them down in the form of telemetry parameters.

8. A safety status monitoring system for a manned spacecraft in long-term orbit according to claim 7, characterized in that It also includes an autonomous fault status monitoring module; The autonomous fault status monitoring module extracts key parameters of manned environment control, information management, energy management, control propulsion and thermal management functions from the telemetry parameters, and makes autonomous judgments on the results, fault handling strategies and the progress of the handling strategies, and notifies the ground support personnel in the form of alarm information.

9. The long-term on-orbit manned spacecraft safety status monitoring system according to claim 1 is characterized in that: The conditions for determining that a manned spacecraft is in an unsafe state also include: Any of the manned environment control, information management, energy management, control propulsion and thermal management functions is in the process of autonomous fault handling.

10. The safety status monitoring system for a manned spacecraft in long-term orbit according to claim 1, characterized in that It also includes an emergency support equipment status monitoring module; The emergency support equipment status monitoring module confirms whether it is possible to promptly remind the on-orbit personnel when a manned spacecraft fails, based on the working status telemetry parameters of the emergency residence support equipment and fault alarm prompt equipment configured in the manned spacecraft, and whether it can support the on-orbit personnel to evacuate the manned spacecraft and isolate the danger after an emergency major failure occurs in the manned spacecraft.

Images