Energy control system of digital satellite and autonomous management method thereof

Abstract

The invention discloses an energy control system of a digital satellite and an autonomous management method thereof, and the energy control system comprises a redundant computer group and a power supply and distribution management module, and can perform autonomous management. Wherein the redundant computer group comprises at least two heterogeneous computers, the at least two heterogeneous computers are hot backups for each other, each heterogeneous computer has a main energy management function and a satellite service management function, and the power supply and distribution management module is in communication connection with the redundant computer group through an I2C bus. Through the heterogeneous redundant computer group, a centralized control strategy is realized, and processor configuration can be simplified. And by adopting the I2C bus, the complexity of a hardware circuit is reduced, the weight and the size of the system are reduced, and the reliability and the maintainability of the system are improved.

Description

Technical Field

[0002] The present invention relates to the field of aerospace technology, and in particular to an energy control system of a digital satellite and an autonomous management method thereof. Background Art

[0003] With the diversification of payloads on spacecraft, the satellite energy management system needs to provide power distribution and monitoring management for multiple types of payloads, so it needs to collect and send a large number of command signals and status signals. In the traditional telemetry and remote control method, the remote control and telemetry signals of each module are connected to the energy lower computer and the satellite service computer in a discrete form. The number of signal interconnections between modules is large, the overall system connection is complex, the processing efficiency is relatively low, and the reliability is low. Summary of the invention

[0004] In view of some or all of the problems in the prior art, the present invention provides a digital satellite energy control system in a first aspect, comprising: A redundant computer group, comprising at least two heterogeneous computers, wherein the at least two heterogeneous computers are mutually hot backup, wherein each heterogeneous computer has an energy management function, a satellite service management function, and a power supply and distribution management module, which is connected to the network through I 2 The C bus is communicatively connected to the redundant computer group.

[0005] Furthermore, the power supply and distribution management module includes I 2 The I-C bus circuit interface has been designed differently on the command output hardware for the default powered-on units (such as the satellite computer, measurement and control module, etc.) and the default powered-off units (star sensors, flywheels, payloads, etc.). 2 C internal bus circuit interface through I 2 C to GPIO modules are connected to each power distribution electronic switch, wherein the command output end of the module powered by default includes a transistor, the base of which is connected to the I 2 C to GPIO module, and its collector is connected to the +5V power supply through a resistor so that the I 2 The C-to-GPIO module is powered on with a high resistance by default, the command output terminal is powered on with a high level by default, and the command output terminal of the module that is powered off by default is grounded through a resistor and is powered on with a low level by default.

[0006] Furthermore, the satellite management functions include: satellite management, orbit calculation, attitude control, autonomous heating and remote control telemetry, mainly realizing uplink frame decoding, downlink data transmission, orbit calculation and control, platform task scheduling, computing and storage resource allocation, thermal control algorithm, etc.

[0007] Furthermore, the satellite energy management function mainly includes: 2C bus architecture arbitration, autonomous energy entry and exit, autonomous health management, etc.

[0008] Furthermore, the power supply and distribution management module includes: a low voltage power distribution submodule, a heater control submodule, a power management submodule, a battery management submodule, a 28V power distribution function submodule, a memory alloy drive module and a magnetic torquer drive board.

[0009] Furthermore, each submodule of the power supply and distribution management module includes a main I 2 C internal bus main interface and backup interface.

[0010] Furthermore, the I 2 C includes triple redundant I 2 C bus.

[0011] Furthermore, the main interface and backup interface of each submodule of the power supply and distribution module are evenly distributed to the three redundant I 2 C bus.

[0012] Furthermore, the energy control system further comprises a backup computer, which adopts a cold backup mode, and the backup computer is communicatively connected to the redundant computer group via a CAN bus, and is connected to the redundant computer group via I 2 The C bus is communicatively connected to the power supply and distribution management module.

[0013] Furthermore, the CAN bus includes a dual redundant CAN bus.

[0014] A second aspect of the present invention provides an autonomous management method for the energy control system as described above, comprising: After the initial power-up, each computer in the redundant computer group releases I 2 C. Control; According to the heartbeat count, determine whether the communication between the computers is normal: If normal, the on-duty computer is initialized and set, and the primary and standby buses are initialized and set according to the difference between the default power-on stand-alone and the default power-off. After the setting is completed, the power output is controlled and / or the telemetry parameters are collected; and If abnormal, switch I 2 C bus.

[0015] Furthermore, switching I 2 C bus includes: Judgment I 2 Whether the C-bus autonomous switching function is enabled. If not, perform ground intervention; If enabled, when the number of faults of the same module exceeds the preset value, a reset instruction is sent to control the faulty module to reset; and After resetting, if the fault still exists, switch to the backup mode, and power off and on the Abus of the current module, and turn off the bus autonomous switching function.

[0016] Furthermore, the autonomous management method further comprises: If an abnormality is detected on the on-duty computer, the master computer is switched and the I 2 C control.

[0017] The present invention provides a digital satellite energy control system, which adopts a bus-free working mode, combines the power management and distribution functions of the onboard computer and the satellite through a heterogeneous redundant computer group and a centralized control strategy, thereby simplifying the processor configuration. 2 C bus supports the connection of multiple master devices and slave devices, using I 2 The simple hardware interface and protocol of the C bus reduces the complexity of the hardware circuit, reduces the weight and volume of the system, and can be easily connected through the I 2 C bus adds new devices and modules to expand and upgrade system functions, and adopts redundant design, error detection and correction technology to improve system reliability and maintainability. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] To further illustrate the above and other advantages and features of various embodiments of the present invention, a more specific description of various embodiments of the present invention will be presented with reference to the accompanying drawings. It will be understood that these drawings only depict typical embodiments of the present invention and are therefore not to be considered as limiting the scope thereof. In the accompanying drawings, for clarity, identical or corresponding parts will be represented by identical or similar reference numerals.

[0019] Figure 1 A schematic diagram showing the structure of an energy control system for a digital satellite according to an embodiment of the present invention; Figure 2 A triple redundancy diagram of an embodiment of the present invention is shown. 2 C bus connection diagram; Figure 3 A schematic diagram showing the circuit structure of the instruction output terminal of a single machine powered on by default according to one embodiment of the present invention; Figure 4 A schematic diagram showing the circuit structure of the command output terminal of a single machine with power off by default according to an embodiment of the present invention; Figure 5 A schematic flow chart showing an autonomous management method of an energy control system of a digital satellite according to an embodiment of the present invention; Figure 6 A schematic diagram showing a flow chart of controlling power output according to an embodiment of the present invention; Figure 7A schematic diagram showing a process of collecting telemetry parameters according to an embodiment of the present invention; Figure 8 The switching I of one embodiment of the present invention is shown 2 C bus flow diagram; and Fig. 9 A schematic diagram showing a flow chart of switching from a star service computer to an energy computer B in one embodiment of the present invention. DETAILED DESCRIPTION

[0020] In the following description, the present invention is described with reference to various embodiments. However, those skilled in the art will recognize that various embodiments can be implemented without one or more specific details or with other replacement and / or additional methods or components. In other cases, well-known structures or operations are not shown or described in detail to avoid blurring the inventive point of the present invention. Similarly, for the purpose of explanation, specific numbers and configurations are set forth to provide a comprehensive understanding of embodiments of the present invention. However, the present invention is not limited to these specific details. In addition, it should be understood that the various embodiments shown in the drawings are illustrative representations and are not necessarily drawn in correct proportions.

[0021] In this specification, reference to "one embodiment" or "the embodiment" means that a particular feature, structure, or characteristic described in conjunction with the embodiment is included in at least one embodiment of the present invention. The phrase "in one embodiment" appearing in various places in this specification does not necessarily all refer to the same embodiment.

[0022] Aerospace electronic systems are usually highly complex and integrated, requiring the use of a large number of electronic devices and chips. In order to facilitate control and management, I 2 C bus enables communication between electronic devices and chips. 2 C bus supports the connection of multiple master devices and slave devices, using I 2 The simple hardware interface and protocol of the C bus can reduce the complexity of the hardware circuit and reduce the weight and volume of the system. In addition, it can also be easily connected through the I 2 C bus to add new devices and modules to expand and upgrade system functions. However, the standard I 2 The I2C protocol only supports the connection between a single master device and multiple slave devices. For multi-master device communication, an additional arbitration mechanism is required. 2 The C-bus architecture arbitration design does not have clear fault detection and autonomous health management measures. In response to this problem, the present invention provides a digital satellite energy control system, which combines the power management and distribution functions of the onboard computer and the satellite through a heterogeneous redundant computer group and a centralized control strategy, thereby simplifying the processor configuration. Through redundant design, error detection and correction technology, the reliability and maintainability of the system can be effectively improved.

[0023] The technical solution of the present invention is further described below in conjunction with the accompanying drawings of the embodiments.

[0024] Figure 1 FIG. 1 is a schematic diagram showing the structure of a digital satellite energy control system according to an embodiment of the present invention. Figure 1 As shown, a digital satellite energy control system includes a redundant computer group and a power supply and distribution management module, wherein the power supply and distribution management module is connected through I 2 The C bus is communicatively connected to the redundant computer group, and the redundant computer group provides a centralized control strategy to centrally control each power supply and distribution management module. The energy control system constitutes a master-slave system, and verification is performed on the master and slave ends respectively. The multi-machine verification method can effectively enhance the security of the system and improve the fault tolerance rate of the system. In addition, the I 2 C bus, the hardware only needs a data line, a clock line, and a GND three-wire interface, which can simplify the circuit design, reduce the number of signal interconnections between modules, and improve the utilization rate of the single board structure. 2 The C module device address is unique, and the registers of the multi-way switch can be used to switch the switch to complete the I 2 The selection of slave devices ensures that each slave device has a unique identifiable address on the bus, thereby facilitating system expansion and modular design.

[0025] In one embodiment of the present invention, the redundant computer group includes at least two computers, and each computer is a hot backup for each other. In one embodiment of the present invention, the onboard computer and the satellite power management and power distribution functions are combined, and each satellite service module and energy module have energy management functions, so that any computer in the redundant computer group can directly connect to the satellite through I 2 The C bus manages each power supply and distribution management module, and can also communicate and manage each load through the CAN bus. In one embodiment of the present invention, the computer may include, for example, a star service computer and an energy computer.

[0026] In one embodiment of the present invention, Figure 1As shown, the redundant computer group includes satellite computer A, satellite computer B, and energy computer A, energy computer B, wherein three heterogeneous computers: energy computer A, satellite computer A, and satellite computer B adopt hot standby design. Satellite computer A, satellite computer B, and energy computer A all have satellite management functions, such as satellite management, orbit calculation, attitude control, autonomous thermal control, telemetry and remote control, etc., and can realize uplink frame decoding, downlink data transmission, orbit calculation and control, platform task scheduling, computing and storage resource allocation, thermal control algorithm and other functions. The satellite computer A, satellite computer B, and energy computer A all have satellite energy management functions, such as I 2 C bus architecture arbitration, energy autonomous entry and exit, electricity meter management, autonomous health management, etc. On the one hand, it communicates and manages with various external devices, acquisition and command boards, and measurement and control modules through the CAN bus, and on the other hand, it communicates with various external devices, acquisition and command boards, and measurement and control modules through the I 2 The C bus controls each power supply and distribution management module. In one embodiment of the present invention, the redundant computer group also includes a universal interface such as an RS422 star bus.

[0027] In one embodiment of the present invention, the energy computer B is used as a cold backup of the redundant computer group during the on-orbit operation phase. The energy computer B communicates with the redundant computer group via the CAN bus and communicates with the redundant computer group via I 2 C communicates with the power supply and distribution management module, which converts CAN to I 2 C performs energy management and drive control. Based on energy computer B, when redundant computer group I 2 C internal interface failure, resulting in I 2 When C communication is abnormal, the redundant computer group can communicate and manage each power supply and distribution management module through the CAN bus.

[0028] In one embodiment of the present invention, the power supply and distribution management module includes a low-voltage distribution submodule, a heater control submodule, a power management submodule, a battery management submodule, a 28V distribution function submodule, a memory alloy drive submodule and a magnetic torquer drive board. The low-voltage distribution submodule includes a 15V low-voltage distribution submodule and a 5V low-voltage distribution submodule. In addition, in order to improve reliability, in one embodiment of the present invention, the power supply and distribution module may also include a backup low-voltage distribution submodule and a backup power management submodule. In addition, each power supply and distribution management module includes a main circuit and a backup circuit, that is, each power supply and distribution management includes a main interface and a backup interface, and the main interface and the backup interface are connected through I 2 The C bus is communicatively connected to the redundant computer group.

[0029] In order to improve reliability, in one embodiment of the present invention, the CAN bus and I 2The I C bus adopts a redundant design, and the CAN bus adopts dual redundancy, including CAN-A and CAN-B. In order to ensure that there is no conflict in the address on the bus and that the bus access can be balanced to a certain extent, the I 2 C bus adopts triple redundant design, including I 2 CA, I 2 CB, I 2 CC three buses, for each power supply management module main and standby circuit separate power supply. 2 The C bus is an OD / OC bus. When the signal goes high, a pull-up resistor is required. The pull-up resistor provides a pull-up current. Since each device has an equivalent capacitor, the rising edge of the signal is formed according to the time constant of RC charging. The time of the rising edge is I 2 C bus to ensure stable operation. To ensure that the device addresses on the bus do not conflict and that bus access is balanced to avoid multiple masters and I 2 C hangs up and causes I 2 The C bus communication is abnormal, and the main and backup interfaces of each power supply and distribution management module are evenly distributed to 3 buses, such as Figure 2 As shown, the I 2 The power supply of C equipment is supplied by independent control. In case of abnormality, the main / backup BUS can be powered off and restarted to restore the status.

[0030] In one embodiment of the present invention, the power supply and distribution management module includes: 2 C internal bus circuit interface, connected to the downstream bus through bus buffers and multi-way switches. The bus buffer can effectively disperse the bus capacitance, reduce communication interference, and enhance the chip driving capability. The registers configured with the multi-way switch can switch the switch to complete the I 2 C slave device selection ensures that each device has a unique identifiable address on the bus, and also facilitates system expansion and modular design. 2 C internal bus circuit interface through I 2 The C-to-GPIO module is connected to each power distribution electronic switch. After receiving the control signal output from the command output terminal, the electronic switch outputs based on the control signal. At the same time, the electronic switch also has overcurrent and short-circuit protection functions. Specifically, during operation, the electronic switch can detect the current and provide overcurrent or short-circuit protection based on the current detection result. In one embodiment of the present invention, for the default powered-on units such as the satellite service computer and the measurement and control module, and the default powered-off units such as the star sensor, the flywheel, and the load, in I 2 The instruction output hardware of the C internal bus circuit is designed differently.

[0031] Figure 3FIG. 1 is a schematic diagram showing the circuit structure of the command output terminal of a single machine powered on by default according to an embodiment of the present invention. Figure 3 As shown, the command output terminal of the default powered stand-alone includes a transistor, the base of which is connected to the I 2 C to GPIO module, and its collector is connected to the +5V power supply through a resistor so that the I 2 The C to GPIO module is turned on with a high resistance by default. The command output terminal is turned on with a high level by default. When power is turned off, the I 2 The C to GPIO module outputs a high level, the command output terminal outputs a low level, and the DCDC and electronic switch are disconnected.

[0032] Figure 4 FIG. 1 is a schematic diagram showing a circuit structure of a command output terminal of a single machine with power off by default according to an embodiment of the present invention. Figure 4 As shown, the command output terminal of the module that is powered off by default is grounded through a resistor, and the default power-on is low level. When it needs to be turned on, the I 2 The C to GPIO module outputs a high level, the command end outputs a high level, and the DCDC and electronic switches are turned on. Different settings are made for different units during initialization to ensure that each unit works normally.

[0033] Based on the energy management system described above, the satellite stores the GPIO status of the received command and the single-machine switch status in real time. The entire satellite will read the GPIO status of the current TCA control register in real time. Through the GPIO command status stored on the satellite, mutual verification can be performed as a ground I 2 C bus status. To maintain stable and reliable communication, I 2 The C-ADC current / voltage acquisition chip will reset and initialize the chip after each communication cycle, and collect telemetry in the pre-set module acquisition sequence after 20ms. Taking data throughput into consideration, the telemetry acquisition part is optimized, with time-sharing and partition control, collecting 2 modules in 1s and collecting all modules in 4s.

[0034] As mentioned above, the energy management system also has autonomous management capabilities, which can achieve seamless switching when any bus or computer fails. Figure 5 A schematic flow chart showing an autonomous management method of a digital satellite energy control system according to an embodiment of the present invention is shown. Figure 5 As shown, the autonomous management method of the energy management system as described above includes: First, in step 501, I 2 After the initial power-on, each computer in the redundant computer group releases I 2 C. Control; Next, in step 502, it is determined whether the communication is normal. According to the heartbeat count, it is determined whether the communication of each computer is normal. If it is normal, it proceeds to step 531 to initialize the settings, initialize the computer on duty, and initialize the primary and standby buses according to the difference between the default power-on stand-alone and the default power-off. In one embodiment of the present invention, the default on-duty computer is energy computer A, that is, I is preferentially performed through energy computer A. 2 C bus control, and then determine whether to use I 2 In one embodiment of the present invention, each accessed device provides status and control operations in the form of register mapping. It should be noted that when the computer executing the satellite service processing is switched, I 2 The control right of I C bus also needs to be switched accordingly. If the computer communication is found to be abnormal based on the heartbeat count, the process proceeds to step 532 to switch I C bus. 2 C device.

[0035] In step 531, during the initialization setting, the device address of each submodule of the power supply and distribution management module needs to be configured by the on-duty computer.

[0036] Next, in step 504, energy control. After the initialization is completed, energy control can be performed. In one embodiment of the present invention, during the operation of the energy system, it is possible to periodically or in real time detect whether the communication is normal. As mentioned above, in the embodiment of the present invention, the redundant computer group can control the power distribution module to control the power output of each platform and a single machine, and can also read the energy-related telemetry parameter values ​​stored in the corresponding port register. Different functions use different specific operations. Based on this, after the initialization is completed, each electronic switch is connected to I 2 C bus connection relationship to select the I 2 C to GPIO or I 2 C to ADC function, if I 2 C to GPIO output can control the output switch of each power distribution. If I 2 C to ADC function, the current, switch status, etc. can be collected.

[0037] Figure 6 FIG. 2 is a schematic diagram showing a flow chart of controlling power output according to an embodiment of the present invention. Figure 6 As shown, controlling the power output includes: First, in step 601, a parameter configuration instruction is received. 2 After C is converted to GPIO output, the software needs to configure the configuration register first. Specifically, the on-duty computer uses I 2The C bus distributes parameter configuration instructions to the submodules of each power supply and distribution management module according to the device address of the submodule; Next, in step 602, parameters are configured. After receiving the parameter configuration instruction, each submodule performs parameter configuration based on the parameter configuration instruction; Next, in step 603, an operation instruction is received. After the parameter configuration is successful, the on-duty computer 2 C bus sends operation instructions to each submodule; and Finally, in step 604, the power output is controlled. 2 The C-to-GPIO module controls the output switches of each power distribution channel, thereby controlling the power output of each platform load unit.

[0038] Figure 7 The schematic diagram of the process of collecting telemetry parameters according to an embodiment of the present invention is shown. The telemetry parameters mainly include the current and switch status of each platform and a single machine. Figure 7 As shown, the collected telemetry parameters include: First, in step 701, a parameter configuration instruction is received. 2 After the C to ADC function, the software needs to configure the configuration register first. Specifically, the on-duty computer 2 The C bus distributes parameter configuration instructions to the submodules of each power supply and distribution management module according to the device address of the submodule; Next, in step 702, parameters are configured. After receiving the parameter configuration instruction, each submodule performs parameter configuration based on the parameter configuration instruction; and Finally, in step 703, the telemetry parameters are read. 2 C bus reads the telemetry parameter value stored in the corresponding port register. In one embodiment of the present invention, since I 2 The C to ADC collects a 12-bit telemetry signal, so a time-sharing reading method is required, that is, the source code is divided into 2 bytes for transmission, the upper eight bits are stored in byte 1, the lower four bits are stored in byte 2, and the idle bits are filled with 0.

[0039] Before initialization and during operation, if communication abnormalities occur, consider switching the active / standby I 2 C bus. Figure 8 The switching I of one embodiment of the present invention is shown 2 C bus flow chart. Figure 8 As shown, switch I 2 C bus includes: First, in step 801, determine I 2C bus autonomous switching function is enabled. 2 The I C bus is a shared bus. If any device on the bus has an abnormal SDA / SCL signal, the normal operation of the entire bus will be affected. Therefore, in one embodiment of the present invention, when reading and writing I C bus, the SDA / SCL signal of any device on the bus is abnormal. 2 When there is no response from the C bus or the waiting timeout occurs, it is considered that the I 2 C bus fails. At this time, we first need to determine whether the I 2 Whether the C bus autonomous switching function is enabled, if not enabled, then go to step 802 for ground intervention, if enabled, then go to step 831 for autonomous switching; In step 831, it is determined whether the number of faults exceeds a preset value. In one embodiment of the present invention, a fault determination is performed every specified time interval, and the number of faults is counted each time a fault occurs. Specifically, an I 2 C instruction or reads the telemetry data of a module, the fault count is increased by 1, and the fault count is performed for each module separately. At the same time, when a communication abnormality is monitored, subsequent operations are stopped and the operation is repeated in the next cycle. In one embodiment of the present invention, the specified time interval is 10s. It should be understood that different time intervals can be selected according to actual needs, such as 5s, 15s, 20s, etc. In one embodiment of the present invention, once the error count of the same module exceeds the preset value, step 832 is entered and the device is reset. In one embodiment of the present invention, the preset value is 5 times. It should be understood that different preset values ​​can be selected according to actual needs, such as 1, 10, 15, etc.; In step 832, the device is reset. When the number of faults exceeds a preset value, a reset instruction is sent to control the faulty device to reset; Next, in step 833, it is determined whether the fault still exists. After sending the reset command and waiting for a period of time, continue to detect whether there is a fault. If the fault still exists, go to step 834 and switch I 2 C equipment; In step 834, switch I 2 C device. After the device is reset, if the fault still exists, it will switch to the backup I 2 C device, specifically, is to cut off and power on the Abus of the current device. At the same time, in order to prevent repeated fault handling process, after powering off and powering on, the bus autonomous switching function must be turned off, and the autonomous switching function can be enabled after the ground confirms that the handling is successful.

[0040] As mentioned above, in the case of computer anomalies or according to mission requirements, the main control computer may need to be switched. To ensure seamless switching of the entire satellite, in one embodiment of the present invention, the satellite will store the GPIO status of the received command and the single machine switch status. Fig. 9FIG. 1 is a flow chart showing the process of switching from the star service computer to the energy computer B in one embodiment of the present invention. Fig. 9 As shown, when the star service computer switches to the energy computer B, the main control computer will also switch to I 2 C control. Fig. 9 As shown, when it is necessary to switch to energy computer B: First, in step 901, the energy computer B is started. The energy computer B is powered on and its software starts to work. 2 The C working status bit is not working, and its PCA does not select a channel; Next, in step 902, the energy collection channel is switched to the CAN bus. The satellite computer sends an "energy collection using CAN channel" instruction and disables the I 2 C controls, releases I 2 C takes control and returns the acquisition flag; Next, in step 903, the state of the energy computer B is confirmed. The star service computer sends a telemetry request through the CAN bus to confirm whether the energy computer B is powered on normally. After receiving the telemetry request, the energy computer B returns the telemetry data; Next, in step 904, the energy computer B stores the single machine power on / off status. The star service computer sends a "lower machine energy status" instruction via the CAN bus, sends the currently stored single machine power on / off status to the energy computer B, and the energy computer B stores the current single machine power on / off status; and Finally, in step 905, switch I 2 The satellite computer sends the "lower computer control I 2 C bus enable" command, after receiving the command, the energy computer B sets I 2 C is in working state and is the main channel. At this time, the energy computer B takes over I 2 C control, corresponding output I / O expander and special purpose with I 2 The ADC monitor of the C acquisition function is set accordingly to ensure seamless switching. Specifically, the GPIO3 of the acquisition chip is configured as high impedance, and the I 2 C to GPIO chip for configuration.

[0041] At this point, the switch from the star service computer to the energy computer B is completed. It can be seen that the entire process is completed autonomously to ensure seamless switching of the entire star.

[0042] The energy management system is mainly aimed at the satellite power control and distribution task requirements. In order to control the various types of payloads on the satellite, it is necessary to obtain and send command status signals in real time, and then effectively control the electronic switches and relays of multiple modules. Based on the CPU+FPGA architecture, the energy management system realizes the control and corresponding status acquisition of ≥50 power distributions, 12 solenoid valves, and 40 heaters. All power distribution and heater controls are controlled by hot standby switches.

[0043] In order to verify the effect of the energy management system, the reliability test of the communication interface was carried out, and the communication rate was adjusted to 150% of the upper limit of the index, and the tolerance and fault tolerance test was carried out. The test results are shown in Table 1. It can be seen that based on I 2 The energy management system and method of the C bus have good communication efficiency and high reliability.

[0044] Table 1 Although various embodiments of the present invention are described above, it should be understood that they are presented as examples only and not as limitations. It is obvious to those skilled in the relevant art that various combinations, modifications and changes can be made thereto without departing from the spirit and scope of the present invention. Therefore, the breadth and scope of the present invention disclosed herein should not be limited by the exemplary embodiments disclosed above, but should only be defined according to the attached claims and their equivalents.

Claims

1. A digital satellite energy control system, characterized in that: include: A redundant computer group, comprising at least two heterogeneous computers, wherein the at least two heterogeneous computers serve as hot backups for each other, and each heterogeneous computer is configured to implement satellite energy management functions and satellite affairs management functions; as well as Power supply and distribution management module, which is connected to the power supply 2 The C bus is communicatively connected to the redundant computer group.

2. The energy control system according to claim 1, characterized in that: The power supply and distribution management module includes I 2 C internal bus circuit interface, and connected to the downlink bus through a bus buffer and a multiplexer, the I 2 C bus circuit interface through I 2 The C to GPIO module is connected to each power distribution electronic switch of the digital satellite, wherein the I of the module powered on by default and the module powered off by default are connected to each other. 2 The circuit structure of the instruction output end of the C internal bus circuit is different: The command output terminal of the module powered by default includes a transistor, the base of which is connected to the I 2 C to GPIO module, the collector of the transistor is connected to the +5V power supply through a resistor, so that the I 2 The C-to-GPIO module is set to high resistance by default when it is powered on, and the command output terminal is set to high level by default when it is powered on; and The command output of the module that is powered off by default is grounded through a resistor, and the default level is low when it is powered on.

3. The energy control system according to claim 1, wherein: Each submodule of the power supply and distribution management module includes a main I 2 C internal bus main circuit interface and backup circuit interface.

4. The energy control system according to claim 3, characterized in that: I 2 C bus includes triple redundant I 2 C bus.

5. The energy control system according to claim 4, characterized in that: The main circuit interface and backup circuit interface of each submodule of the power supply and distribution management module are evenly distributed to the three redundant I 2 C bus.

6. The energy control system according to claim 1, wherein: It also includes a backup computer, which adopts a cold backup mode, and the backup computer is communicatively connected to the redundant computer group via a CAN bus and is connected to the redundant computer group via I 2 The C bus is communicatively connected to the power supply and distribution management module.

7. The energy control system according to claim 6, characterized in that: The CAN bus includes a dual redundant CAN bus.

8. An autonomous management method for an energy control system according to any one of claims 1 to 7, characterized in that: Including steps: After the initial power-up, each computer in the redundant computer group releases I 2 C. Control; According to the heartbeat count, it is determined whether the communication between the computers is normal: If normal, initialize the computer on duty and initialize the primary and standby buses according to the default power-on standalone and default power-off settings. After the settings are completed, control the power output and / or collect telemetry parameters. as well as If abnormal, switch I 2 C bus.

9. The autonomous management method according to claim 8, characterized in that: Switch I 2 C bus includes the steps: Judgment I 2 Whether the C-bus autonomous switching function is enabled. If not, perform ground intervention; If enabled, when the number of faults on the same module exceeds the preset value, a reset command is sent to control the faulty module to reset; as well as After reset, if the fault still exists, switch to the backup mode, and perform Abus power off and power on for the current module, while disabling the bus autonomous switching function.

10. The autonomous management method according to claim 8, wherein: Also includes the steps: If an abnormality is detected on the on-duty computer, the master computer will be switched and the I 2 C control.

Images