PCU single-particle fault autonomous detection method

Abstract

A PCU single-particle fault autonomous detection method is used for monitoring a BCDR state abnormity problem caused by a single particle, can autonomously detect a BCDR startup and shutdown state, a charging state and a discharging state, realizes fault detection and recovery, ensures that a storage battery pack normally charges and discharges in orbit, is successfully applied to a plurality of related task designs, and improves the reliability of a system. The method can be popularized to a space high-orbit satellite power supply system configured with a new generation of domestic PCU, and a brand new detection means is provided for realizing autonomous detection and recovery of single-particle faults of the power supply controller.

Description

Technical Field

[0001] The invention relates to an autonomous detection method for a PCU single particle fault, and belongs to the field of satellite energy autonomous management design. Background Art

[0002] With the continuous development of space technology, higher requirements are placed on the carrier-to-noise ratio of satellites. Therefore, a new generation of domestic PCUs with modular and integrated designs are gradually applied to satellite platforms, greatly improving the power density of the power supply system. The new generation of domestic PCUs consists of a telemetry and remote control module (TMTC), a shunt regulation module (SUN), a charge and discharge regulation module (BCDR), a capacitor module (CAP), a backplane module (BP), etc. A comprehensive FMEA analysis was carried out on the new generation of domestic PCUs, and for the first time, three new single-particle failure modes related to the BCDR module were identified for the new generation of products. Once this failure occurs, it will affect the charging and discharging functions of the battery pack. Therefore, effective measures must be taken to identify and handle the fault to ensure that the battery pack can be charged and discharged normally on orbit. Summary of the invention

[0003] The technical problem solved by the present invention is: in view of the problem that the current prior art lacks a method capable of timely identifying power controller faults and recovering or marking them, an autonomous detection method for PCU single particle faults is proposed.

[0004] The present invention solves the above technical problems by the following technical solutions:

[0005] A method for autonomously detecting a PCU single particle fault, comprising:

[0006] Continuously collect telemetry signals output by the power controller, and determine the control state of the charge and discharge regulation module in the power controller according to the telemetry signals;

[0007] Sending control instructions to the charge and discharge regulation module according to the control state of the charge and discharge regulation module;

[0008] After sending a control instruction for a control cycle, the correctness of the instruction execution is judged;

[0009] Continuously obtain the judgment results. If the judgment results are all correct, then the next charge and discharge regulation module is automatically tested. If the judgment results are wrong, then the current charge and discharge regulation module is set as a fault flag;

[0010] After traversing all the charge and discharge regulation modules, the state of the charge and discharge regulation module with the fault mark is restored by adjusting the state parameters.

[0011] The number of frames collected for continuously collecting the telemetry signal output by the power controller is 3 consecutive frames of telemetry data. The control state of the power controller includes the power on / off state, charging state, and discharging state. The power on / off state has a higher priority than the charging state and the discharging state.

[0012] The control state determination method of the charge and discharge regulation module is:

[0013] The state of the power controller is judged according to the APS state in the telemetry signal, including the power-on state and the power-off state; after determining the power-on and power-off state of the power controller, the charging state and the discharging state of the power controller are judged. When the telemetry value is 0, the charging state or the discharging state is not enabled, and when the telemetry value is not 0, the charging state or the discharging state is enabled.

[0014] The power on / off state of the power controller, the charging state and the discharging state of the power controller are detected independently according to the detection requirements, or the power on / off state detection is performed first and then the charging state and the discharging state detection is performed.

[0015] The method for selecting the control instruction is:

[0016] If the APS on / off state of the discharge regulation module is off, an APS on / off instruction is sent to the discharge regulation module to control the APS to start up;

[0017] If the APS on / off state of the discharge regulation module is on and the charging state is not enabled, a charging enable instruction is sent to the charge and discharge regulation module to enable charging of the charge and discharge regulation module;

[0018] If the APS on / off state of the discharge regulating module is on and the discharge state is not enabled, a discharge enable instruction is sent to the charge and discharge regulating module to enable the charge and discharge regulating module to discharge.

[0019] After the control instruction is sent for one control cycle, the telemetry signal of the charge and discharge regulation module is collected again, and the control state of the charge and discharge regulation module is judged according to the continuous telemetry signal. If the control state of the charge and discharge regulation module changes under the action of the control instruction, the instruction is executed correctly; otherwise, the same control instruction is sent again, and the correctness of the instruction execution is continued to be judged until the judgment result shows that the instruction is executed correctly.

[0020] The control instruction is sent less than or equal to 3 times. If the result of judging the correctness of instruction execution is still incorrect after the same control instruction is sent for the third time, the corresponding charge and discharge regulation module is set as a fault flag.

[0021] The number of charge and discharge regulation modules in the power supply controller is not unique, and the control state is controlled simultaneously or in a time sequence according to the work task requirements of the power supply controller.

[0022] The fault mark displays different types of fault states according to the type of fault state in the control state, including a power-on state fault, a charging state fault, and a discharging state fault.

[0023] All charge and discharge regulation modules with fault signs are collectively marked, and the relevant parameters of the charge and discharge regulation modules are reset according to the type of fault state. After the setting is completed, self-detection is performed again.

[0024] The advantages of the present invention compared with the prior art are:

[0025] The present invention provides an autonomous detection method for PCU single-particle faults, which can eliminate the adverse effects of single-particle events on the charge and discharge control of battery packs, effectively solve the BCDR state abnormality problem caused by single particles, and can autonomously detect the BCDR on / off state, charging state, and discharge state, realize fault detection and recovery, and ensure that the battery pack is charged and discharged normally on orbit. This strategy has been applied to multiple models, and the relevant research results can be extended to the space high-orbit satellite power supply system equipped with a new generation of domestic PCUs. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 A real-time monitoring logic diagram of abnormal on / off state reversal of the BCDR module provided by the present invention;

[0027] Figure 2 A real-time monitoring logic diagram of abnormal reversal of charging enable state of the BCDR module provided by the present invention;

[0028] Figure 3 A real-time monitoring logic diagram of abnormal reversal of the discharge enable state of the BCDR module provided by the present invention. DETAILED DESCRIPTION

[0029] An autonomous detection method for PCU single-particle faults is used to monitor BCDR status abnormalities caused by single particles. It can autonomously detect the BCDR on / off status, charging status and discharging status, realize fault detection and recovery, and ensure that the battery pack is charged and discharged normally on orbit. It has been successfully applied to multiple related mission designs and can be extended to space high-orbit satellite power supply systems equipped with a new generation of domestic PCUs. It proposes a new detection method for realizing autonomous detection and recovery of single-particle faults in power supply controllers.

[0030] In the current embodiment, the autonomous detection method of PCU single particle failure has the following specific steps:

[0031] Continuously collect telemetry signals output by the power controller, and determine the control state of the charge and discharge regulation module in the power controller according to the telemetry signals;

[0032] Sending control instructions to the charge and discharge regulation module according to the control state of the charge and discharge regulation module;

[0033] After sending a control instruction for a control cycle, the correctness of the instruction execution is judged;

[0034] Continuously obtain the judgment results. If the judgment results are all correct, then the next charge and discharge regulation module is automatically tested. If the judgment results are wrong, then the current charge and discharge regulation module is set as a fault flag;

[0035] After traversing all the charge and discharge regulation modules, the state of the charge and discharge regulation module with the fault mark is restored by adjusting the state parameters.

[0036] The number of frames collected for continuously collecting the telemetry signal output by the power controller is 3 consecutive frames of telemetry data. The control state of the power controller includes the power on / off state, charging state, and discharging state. The power on / off state has a higher priority than the charging state and the discharging state.

[0037] The control state determination method of the charge and discharge regulation module is:

[0038] The state of the power controller is judged according to the APS state in the telemetry signal, including the power-on state and the power-off state; after determining the power-on and power-off state of the power controller, the charging state and the discharging state of the power controller are judged. When the telemetry value is 0, the charging state or the discharging state is not enabled, and when the telemetry value is not 0, the charging state or the discharging state is enabled.

[0039] The power on / off state of the power controller, the charging state and the discharging state of the power controller are independently detected according to the detection requirements, or the power on / off state detection is performed first and then the charging state and the discharging state detection is performed.

[0040] The method for selecting control instructions is:

[0041] If the APS on / off state of the discharge regulation module is off, an APS on / off instruction is sent to the discharge regulation module to control the APS to start up;

[0042] If the APS on / off state of the discharge regulation module is on and the charging state is not enabled, a charging enable instruction is sent to the charge and discharge regulation module to enable charging of the charge and discharge regulation module;

[0043] If the APS on / off state of the discharge regulating module is on and the discharge state is not enabled, a discharge enable instruction is sent to the charge and discharge regulating module to enable the charge and discharge regulating module to discharge.

[0044] After the control instruction is sent for one control cycle, the telemetry signal of the charge and discharge regulation module is collected again, and the control state of the charge and discharge regulation module is judged according to the continuous telemetry signal. If the control state of the charge and discharge regulation module changes under the action of the control instruction, the instruction is executed correctly; otherwise, the same control instruction is sent again, and the correctness of the instruction execution is continued to be judged until the judgment result shows that the instruction is executed correctly.

[0045] The number of times the control instruction is sent is less than or equal to 3. If the result of judging the correctness of instruction execution is still incorrect after the same control instruction is sent for the third time, the corresponding charge and discharge regulation module is set as a fault flag.

[0046] The number of charge and discharge regulation modules in the power supply controller is not unique. The control state is controlled simultaneously or by timing according to the working task requirements of the power supply controller.

[0047] The fault sign displays different types of fault states according to the type of fault state in the control state, including power-on state fault, charging state fault, and discharging state fault.

[0048] All charge and discharge regulation modules with fault signs are collectively marked, and the relevant parameters of the charge and discharge regulation modules are reset according to the type of fault state. After the setting is completed, self-detection is performed again.

[0049] Further, the following is further described in conjunction with the accompanying drawings and preferred embodiments of the specification:

[0050] The new generation of domestic PCU is generally equipped with multiple BCDR modules, which are divided into two groups (BCDRiA and BCDRiB (i=1~n)). Each group of modules corresponds to a group of batteries to complete the charge and discharge regulation function of the battery group. All BCDR modules on track should work in the power-on state, charge-enabled state, and discharge-enabled state. If a BCDR module is in the power-off state, the module cannot perform charge and discharge regulation; if a BCDR module is in the power-on and charge-prohibited state, the module cannot perform charge regulation; if a BCDR module is in the power-on and discharge-prohibited state, the module cannot perform discharge regulation.

[0051] (1) Real-time monitoring of abnormal on / off status of BCDR module

[0052] like Figure 1 As shown, under normal circumstances, the APS on / off state of the BCDR module should always be on (telemetry value is 1). In order to prevent the BCDR module from being abnormally shut down in orbit due to reasons such as single particles in space, it is necessary to monitor the on / off state of the BCDR module in real time and restore the APS on state of the BCDR module in time to avoid unbalanced charging and discharging of the two battery groups.

[0053] (2) Real-time monitoring of abnormal reversal of charging enable status of BCDR module

[0054] like Figure 2 As shown, under normal circumstances, the charging status of the BCDR module should always be charging enabled (telemetry value is 1). In order to prevent the BCDR module from being disabled due to reasons such as single particles in space, it is necessary to monitor the charging enable status of the BCDR module in real time and restore the charging enable status of the BCDR module in time to avoid unbalanced charging of the two battery groups.

[0055] (3) Real-time monitoring of abnormal reversal of BCDR module discharge enable status

[0056] like Figure 3 As shown, under normal circumstances, the discharge state of the BCDR module should always be discharge enabled (telemetry value is 1). In order to prevent the BCDR module from being prohibited from discharging due to reasons such as single particles in space, it is necessary to monitor the discharge enable state of the BCDR module in real time and restore the discharge enable state of the BCDR module in time to avoid unbalanced discharge of the two battery groups.

[0057] in:

[0058] (1) Real-time monitoring of abnormal on / off status of BCDR module

[0059] During the on-orbit flight, once the power management software detects that the APS power-on / off state of a BCDR module is off (telemetry value is 0) through three consecutive frames of telemetry, the corresponding BCDR module APS power-on command is immediately sent to realize the APS power-on of the module.

[0060] After the instruction is sent, it is necessary to judge the correctness of the instruction execution after a software control cycle, that is, to check whether the corresponding BCDR module APS is turned on.

[0061] If yes, no more instructions will be sent and the software function will continue;

[0062] If not, send the power-on command again and continue to judge the correctness of the command execution;

[0063] A single instruction can be sent up to 3 times cumulatively. If the instruction execution is still incorrect after the third instruction is sent, the corresponding BCDR module power-on fault alarm flag is set to "fault". The BCDR module will no longer be monitored for abnormal power-on and power-off status flips, and the software functions of other BCDR modules will continue.

[0064] (2) Real-time monitoring of abnormal reversal of charging enable status of BCDR module

[0065] During the on-orbit flight, once the power management software detects through three consecutive frames of telemetry that the APS of a BCDR module is in the on state (APS on / off state is 1) and the charging state is not enabled (telemetry value is 0), the corresponding BCDR module charging enable instruction is immediately sent to enable charging of the module.

[0066] After the instruction is sent, the correctness of the instruction execution needs to be judged after a software control cycle, that is, to check whether the corresponding BCDR module charging is enabled.

[0067] If yes, no more instructions will be sent and the software function will continue;

[0068] If not, send the enable command again and continue to judge the correctness of the command execution;

[0069] A single instruction can be sent up to 3 times cumulatively. If the instruction execution is still incorrect after the third instruction is sent, the corresponding BCDR module charging enable fault alarm flag is set to "fault". The charging enable state abnormal flip monitoring of the BCDR module will no longer be performed, and the software functions of the other BCDR modules will continue.

[0070] (3) Real-time monitoring of abnormal reversal of BCDR module discharge enable status

[0071] During the on-orbit flight, once the software detects that the APS of a BCDR module is in the on state (APS on / off state is 1) and the discharge state is not enabled (telemetry value is 0) for three consecutive frames of telemetry, the corresponding BCDR module discharge enable instruction is immediately sent to enable the discharge of the module.

[0072] After the instruction is sent, the correctness of the instruction execution needs to be judged after a software control cycle, that is, to check whether the discharge of the corresponding BCDR module is enabled.

[0073] If yes, no more instructions will be sent and the software function will continue;

[0074] If not, send the enable command again and continue to judge the correctness of the command execution;

[0075] A single instruction can be sent up to 3 times cumulatively. If the instruction execution is still incorrect after the third instruction is sent, the corresponding BCDR module discharge enable fault alarm flag is set to "fault". The BCDR module will no longer be monitored for abnormal discharge enable state flip, and the software functions of other BCDR modules will continue.

[0076] The autonomous detection and recovery strategy for the single-particle fault of the new generation of domestic PCU can effectively solve the BCDR state abnormality problem caused by single particles, and can autonomously detect the BCDR power on / off state, charging state and discharging state, realize fault detection and recovery, and ensure the normal charging and discharging of the battery pack on orbit. This strategy has been applied to multiple models, and the relevant research results can be extended to the space high-orbit satellite power supply system equipped with the new generation of domestic PCU.

[0077] Although the present invention has been disclosed as above in the form of a preferred embodiment, it is not intended to limit the present invention. Any person skilled in the art may make possible changes and modifications to the technical solution of the present invention by using the methods and technical contents disclosed above without departing from the spirit and scope of the present invention. Therefore, any simple modifications, equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention shall fall within the protection scope of the technical solution of the present invention.

[0078] The contents not described in detail in the specification of the present invention belong to the common knowledge of those skilled in the art.

Claims

1. An autonomous detection method for PCU single particle failure, characterized in that include: Continuously collect telemetry signals output by the power controller, and determine the control state of the charge and discharge regulation module in the power controller according to the telemetry signals; Sending control instructions to the charge and discharge regulation module according to the control state of the charge and discharge regulation module; After sending a control instruction for a control cycle, the correctness of the instruction execution is judged; Obtain the judgment result of the correctness of the execution of the instruction of any charge and discharge regulation module. If the judgment results are all correct, then the next charge and discharge regulation module is autonomously tested. If there is an error in the judgment result, then the current charge and discharge regulation module is set as a fault flag; After traversing all the charge and discharge regulation modules, the state of the charge and discharge regulation module with the fault mark is restored by adjusting the state parameters.

2. The method for autonomous detection of a PCU single particle failure according to claim 1, characterized in that: The number of frames collected for continuously collecting the telemetry signal output by the power controller is 3 consecutive frames of telemetry data. The control state of the power controller includes the power on / off state, charging state, and discharging state. The power on / off state has a higher priority than the charging state and the discharging state.

3. The method for autonomous detection of a PCU single particle failure according to claim 1, characterized in that: The control state determination method of the charge and discharge regulation module is: The state of the power controller is judged according to the APS state in the telemetry signal, including the power-on state and the power-off state; after determining the power-on and power-off state of the power controller, the charging state and the discharging state of the power controller are judged. When the telemetry value is 0, the charging state or the discharging state is not enabled, and when the telemetry value is not 0, the charging state or the discharging state is enabled.

4. The method for autonomous detection of a PCU single particle failure according to claim 3, characterized in that: The power on / off state of the power controller, the charging state and the discharging state of the power controller are detected independently according to the detection requirements, or the power on / off state detection is performed first and then the charging state and the discharging state detection is performed.

5. The method for autonomous detection of PCU single particle failure according to claim 3, characterized in that: The method for selecting the control instruction is: If the APS on / off state of the discharge regulation module is off, an APS on / off instruction is sent to the discharge regulation module to control the APS to start up; If the APS on / off state of the discharge regulation module is on and the charging state is not enabled, a charging enable instruction is sent to the charge and discharge regulation module to enable charging of the charge and discharge regulation module; If the APS on / off state of the discharge regulating module is on and the discharge state is not enabled, a discharge enable instruction is sent to the charge and discharge regulating module to enable the charge and discharge regulating module to discharge.

6. The method for autonomous detection of PCU single particle failure according to claim 1, characterized in that: After the control instruction is sent for one control cycle, the telemetry signal of the charge and discharge regulation module is collected again, and the control state of the charge and discharge regulation module is judged according to the continuous telemetry signal. If the control state of the charge and discharge regulation module changes under the action of the control instruction, the instruction is executed correctly; otherwise, the same control instruction is sent again, and the correctness of the instruction execution is continued to be judged until the judgment result shows that the instruction is executed correctly.

7. The method for autonomous detection of PCU single particle failure according to claim 6, characterized in that: The control instruction is sent less than or equal to 3 times. If the result of judging the correctness of instruction execution is still incorrect after the same control instruction is sent for the third time, the corresponding charge and discharge regulation module is set as a fault flag.

8. The method for autonomous detection of PCU single particle failure according to claim 1, characterized in that: The number of charge and discharge regulation modules in the power supply controller is not unique, and the control state is controlled simultaneously or in a time sequence according to the work task requirements of the power supply controller.

9. The method for autonomous detection of PCU single particle failure according to claim 1, characterized in that: The fault mark displays different types of fault states according to the type of fault state in the control state, including a power-on state fault, a charging state fault, and a discharging state fault.

10. The method for autonomous detection of PCU single particle failure according to claim 9, characterized in that: All charge and discharge regulation modules with fault signs are collectively marked, and the relevant parameters of the charge and discharge regulation modules are reset according to the type of fault state. After the setting is completed, self-detection is performed again.

Images