Fault monitoring and autonomous processing method for satellite-borne measurement and control responder

Abstract

The invention belongs to the technical field of satellite equipment, and discloses a satellite-borne measurement and control responder fault monitoring and autonomous processing method, the fault monitoring task of the method is independently executed by taking one second as a period, and the method comprises the following specific steps: step 1, initial state judgment; 2, monitoring a communication state; step 3, judging a telemetering state; 4, monitoring an uplink channel instruction; and step 5, resource allocation and priority adjustment. According to the invention, fault monitoring is carried out on the satellite-borne measurement and control responder by taking one second as a monitoring period, so that the system can quickly discover and respond to the abnormal state of the measurement and control responder without ground intervention, the response speed is greatly improved, and the system has autonomous fault monitoring, processing and recovery capabilities, and is convenient to use. According to the method, the operation of basic functions can be ensured even if the method cannot communicate with the ground, the complexity of manual operation and the risk of misoperation are reduced, and meanwhile, the operation cost is saved.

Description

Technical Field

[0001] The invention belongs to the technical field of satellite equipment, and in particular relates to a method for monitoring and autonomously processing faults of a satellite-borne measurement and control transponder. Background Art

[0002] In the era of satellite communication explosion, with the participation of many commercial aerospace companies, the occupation of low-Earth orbit has been accelerated and the launch cycle has been greatly shortened. Based on the complex considerations of the satellite space environment, the operating status of onboard equipment is a focus that needs to be paid attention to at all times.

[0003] The TT&C transponder is a key device that links the satellite-to-ground channel. It is responsible for receiving ground commands and reporting information to the ground to ensure the normal operation of the spacecraft and ground control. The transponder communicates with the ground through a radio wave receiving and transmitting device, providing functions such as target identification, positioning and special code identification. In key links such as spacecraft launch and rendezvous and docking, the transponder works in coordination with the ground TT&C station to provide accurate external measurement data. It is a bridge to ensure normal flight and guarantee communication between the satellite and the ground. Therefore, it is an indispensable function of satellite software to monitor the working status of the TT&C transponder at all times and make autonomous processing.

[0004] In the existing technology, the monitoring and troubleshooting of the TT&C transponder usually rely on manual intervention or ground station support, and its effectiveness is limited by the response speed of ground commands and the satellite-to-ground communication conditions. It is impossible to effectively monitor the working status of the TT&C transponder, quickly respond to the satellite's fault status, and ensure the normal operation of the satellite's uplink and downlink channels. Therefore, it is necessary to improve and optimize it. Summary of the invention

[0005] The object of the present invention is to provide a method for monitoring and autonomously processing faults of a satellite-borne measurement and control transponder to solve the problems raised in the above-mentioned background technology.

[0006] In order to achieve the above-mentioned object, the present invention provides the following technical solution: a method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder, wherein the fault monitoring task of the method is independently executed with a cycle of one second, and the specific steps are as follows:

[0007] Step 1: Initial status judgment: judge the power-on status of the onboard tracking and control transponder and whether the onboard computer has successfully read the telemetry data;

[0008] Step 2: Communication status monitoring: When the satellite-borne TT&C transponder is powered on and has read telemetry data, check whether the onboard communication status is normal;

[0009] Step 3, telemetry status judgment: When the communication status is normal, check whether the telemetry quantity represents the remote control injection path and whether the 24-hour no remote control warning status is valid;

[0010] Step 4: Uplink channel command monitoring: monitor the measurement and control uplink channel through the satellite system to see if there is any remote control command output;

[0011] Step 5: Resource allocation and priority adjustment: When a communication failure occurs, the system dynamically adjusts resource allocation based on the priority of the current task, the load of the onboard computer, and the urgency of the measurement and control task.

[0012] Preferably, after the judgment of step one is completed, when the onboard tracking and control transponder is powered on and has read the telemetry data, step two is executed; when the onboard tracking and control transponder is not powered on, autonomous fault processing and autonomous power-on processing tasks are executed.

[0013] Preferably, when the autonomous fault handling and autonomous power-on handling tasks are executed, it is necessary to monitor the power-off flag of the measurement and control transponder, and set the threshold to 60s, and monitor this state once every 1s. If it reaches 60s, it is regarded as no power, and a power-off and restart operation is performed.

[0014] Preferably, the communication module of the satellite-borne tracking and control transponder is provided with redundant channel dual buses canA and canB. When one channel fails, the system will automatically switch to another communication channel to ensure uninterrupted communication.

[0015] Preferably, in step 2, when abnormal communication is detected in the on-board communication status, the dual-bus redundancy design is enabled, and the communication abnormality is handled through the redundant mechanism of the CAN bus to ensure that communication is not interrupted.

[0016] Preferably, in step three, when it is monitored that no remote control warning state is valid for 24 hours, a power-off restart and reset operation is performed on the satellite-borne measurement and control transponder. If it is invalid, the single fault monitoring task is terminated.

[0017] Preferably, the execution steps of step 4 are:

[0018] A1, when the system detects that there is no new remote control command, it counts the number of no remote control commands;

[0019] A2, when the system detects a new remote control command, the count of no remote control command will be cleared;

[0020] A3: With the accumulation of no remote control commands, when the onboard uplink channel has no remote control command timer for 48 hours, it is considered that the onboard tracking and control transponder is working abnormally, and the power-off and restart operation is executed;

[0021] A4, when multiple power-off and restart attempts fail, switch to the backup measurement and control transponder through redundant backup.

[0022] Preferably, when the step 5 is executed, the system will dynamically adjust resource allocation according to the priority of the current task, the load of the onboard computer, and the urgency of the measurement and control task;

[0023] When a communication failure occurs, the system will increase the priority of the communication recovery task according to the preset rules, prioritize the allocation of bus bandwidth, ensure the smooth completion of the communication task, and reduce the risk of system resource contention.

[0024] The beneficial effects of the present invention are as follows:

[0025] 1. The present invention uses one second as the monitoring cycle to perform fault monitoring on the satellite-borne tracking and control transponder, so that the system can quickly discover and respond to the abnormal state of the tracking and control transponder without ground intervention, greatly improving the response speed. In addition, the system has the ability to monitor, process and recover from faults autonomously, and supports functions such as automatic power-on, reset, and communication switching. This method can ensure the operation of basic functions even when it is unable to communicate with the ground, reducing the complexity of manual operation and the risk of misoperation, while saving operating costs, and meeting the needs of rapid deployment and high-density launch of commercial aerospace.

[0026] 2. The present invention adopts a dual-bus redundant design so that the measurement and control transponder can use canA and canB dual channels for communication, and can switch immediately when a single channel fails to avoid communication interruption. This method provides multi-level fault tolerance protection when executing the process of abnormal communication switching, power off and restart, and then switching to the backup device, thereby ensuring the stability of the communication channel.

[0027] 3. The present invention uses the system's dynamic resource allocation function to dynamically allocate resources according to task priority, onboard computer load and task urgency to ensure that key tasks are completed first. At the same time, through 24-hour telemetry status monitoring and 48-hour uplink command detection mechanism, the long-term stability of the communication channel is guaranteed. Finally, when a communication failure occurs, the priority of the communication recovery task is increased and the bus bandwidth is allocated first to ensure that communication recovery is not interfered with by other tasks, thereby improving the efficiency of autonomous fault handling. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 This is a flow chart of the fault monitoring task of the present invention. DETAILED DESCRIPTION

[0029] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0030] like Figure 1As shown, the embodiment of the present invention provides a method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder. The fault monitoring task of the method is independently executed in a cycle of one second, and the specific steps are:

[0031] Step 1: Initial status judgment: judge the power-on status of the onboard tracking and control transponder and whether the onboard computer has successfully read the telemetry data;

[0032] The entire fault monitoring task cycle is 1s, and by executing system tasks independently, the reliability of communication is guaranteed to avoid conflicts with other tasks and preemption of bus communication.

[0033] Step 2, communication status monitoring: When the satellite-borne TT&C transponder is powered on and has read the telemetry data, check whether the onboard communication status (not the internal working status of the transponder) is normal;

[0034] Step 3, telemetry status judgment: When the communication status is normal, check whether the telemetry quantity represents the remote control injection path and whether the 24-hour no remote control warning status is valid;

[0035] Step 4: Uplink channel command monitoring: monitor the measurement and control uplink channel through the satellite system to see if there is any remote control command output;

[0036] Step 5: Resource allocation and priority adjustment: When a communication failure occurs, the system dynamically adjusts resource allocation based on the priority of the current task, the load of the onboard computer, and the urgency of the measurement and control task.

[0037] The working principle of the satellite measurement and control transponder mainly includes two processes: uplink and downlink. In the uplink process, the ground terminal equipment frames the remote control signal and injects it into the uplink modulator. After spread spectrum and carrier modulation, the intermediate frequency signal is obtained, and then it is sent to the on-board transponder by the antenna through up-conversion and power amplification. After receiving these signals, the transponder undergoes low-noise amplification, down-conversion, captures and tracks the pseudo code, completes despreading and demodulation, and extracts the frame identification and remote control information from them.

[0038] In the downlink process, the telemetry data from the satellite is also framed, spread and modulated to obtain the intermediate frequency signal, and then sent out by the antenna through up-conversion and power amplification. The ground terminal receives these signals, completes pseudo code capture and tracking, despreading and demodulation, and extracts the frame identifier and telemetry data.

[0039] The present invention performs fault monitoring on the satellite-borne tracking and control transponder with a monitoring period of one second, so that the system can quickly discover and respond to abnormal conditions of the tracking and control transponder without ground intervention, greatly improving the response speed. In addition, the system has autonomous fault monitoring, processing and recovery capabilities, and supports automatic power-on, reset, communication switching and other functions. This method can ensure the operation of basic functions even when it is unable to communicate with the ground, reducing the complexity of manual operation and the risk of misoperation, while saving operating costs, and can meet the rapid deployment and high-density launch needs of commercial aerospace.

[0040] Among them, after the judgment of step one is completed, when the onboard measurement and control transponder is powered on and has read the telemetry data, step two is executed; when the onboard measurement and control transponder is not powered on, autonomous fault processing and autonomous power-on processing tasks are executed.

[0041] Among them, when the autonomous fault processing and autonomous power-on processing tasks are executed, it is necessary to monitor the power-off mark of the measurement and control transponder, and set the threshold to 60s, and monitor this state once every 1s. If it reaches 60s, it is considered that there is no power, and the power-off and restart operation is performed.

[0042] This task is based on the premise that the entire fault monitoring task cycle is 1s. When it reaches 60s, the transponder will be powered off and restarted.

[0043] The communication module of the satellite-borne tracking and control transponder is provided with multiple redundant channel dual buses canA and canB. When one channel fails, the system will automatically switch to another communication channel to ensure uninterrupted communication.

[0044] Through the dual-bus redundant design, the measurement and control transponder can use canA and canB dual channels for communication, and can switch immediately when a single channel fails to avoid communication interruption. This method provides multi-level fault tolerance protection when executing the process of abnormal communication switching, power failure and restart, and then switching to backup equipment, thereby ensuring the stability of the communication channel.

[0045] Among them, in step 2, when the communication status on the satellite is monitored to be abnormal, the dual bus redundancy design is enabled, and the communication abnormality is handled through the redundancy mechanism of the CAN bus to ensure that the communication is not interrupted.

[0046] Among them, in step three, when it is monitored that there is no remote control warning status valid for 24 hours, the satellite-borne measurement and control transponder is powered off and restarted to reset. If it is invalid, the single fault monitoring task is terminated.

[0047] The execution steps of step 4 are as follows:

[0048] A1, when the system detects that there is no new remote control command, it counts the number of no remote control commands;

[0049] A2, when the system detects a new remote control command, the count of no remote control command will be cleared;

[0050] A3: With the accumulation of no remote control commands, when the onboard uplink channel has no remote control command timer for 48 hours, it is considered that the onboard tracking and control transponder is working abnormally, and the power-off and restart operation is executed;

[0051] A4, when multiple power-off and restart attempts fail, switch to the backup measurement and control transponder through redundant backup.

[0052] Through 24-hour telemetry status monitoring and 48-hour uplink command detection mechanism, the onboard measurement and control transponder can be powered off and restarted when it works abnormally, ensuring timely response of the onboard measurement and control transponder.

[0053] Wherein, when the step 5 is executed, the system will dynamically adjust resource allocation according to the priority of the current task, the load of the onboard computer, and the urgency of the measurement and control task;

[0054] When a communication failure occurs, the system will increase the priority of the communication recovery task according to the preset rules, prioritize the allocation of bus bandwidth, ensure the smooth completion of the communication task, and reduce the risk of system resource contention.

[0055] Through the system's dynamic resource allocation function, the system can dynamically allocate resources according to task priority, onboard computer load and task urgency to ensure that key tasks are completed first. At the same time, through 24-hour telemetry status monitoring and 48-hour uplink command detection mechanism, the long-term stability of the communication channel is guaranteed. Finally, when a communication failure occurs, the system can increase the priority of the communication recovery task and allocate bus bandwidth first to ensure that communication recovery is not interfered with by other tasks, thereby improving the efficiency of autonomous fault handling.

[0056] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0057] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder, characterized in that: The fault monitoring task of this method is executed independently with a period of one second, and the specific steps are: Step 1: Initial status judgment: judge the power-on status of the onboard tracking and control transponder and whether the onboard computer has successfully read the telemetry data; Step 2: Communication status monitoring: When the satellite-borne TT&C transponder is powered on and has read telemetry data, check whether the onboard communication status is normal; Step 3, telemetry status judgment: When the communication status is normal, check whether the telemetry quantity represents the remote control injection path and whether the 24-hour no remote control warning status is valid; Step 4: Uplink channel command monitoring: monitor the measurement and control uplink channel through the satellite system to see if there is any remote control command output; Step 5: Resource allocation and priority adjustment: When a communication failure occurs, the system dynamically adjusts resource allocation based on the priority of the current task, the load of the onboard computer, and the urgency of the measurement and control task.

2. A method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 1, characterized in that: After the judgment of step 1 is completed, when the onboard tracking and control transponder is powered on and has read the telemetry data, step 2 is executed; when the onboard tracking and control transponder is not powered on, autonomous fault processing and autonomous power-on processing tasks are executed.

3. A method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 2, characterized in that: When the autonomous fault handling and autonomous power-on handling tasks are executed, it is necessary to monitor the power-off flag of the measurement and control transponder, set the threshold to 60s, and monitor this state once every 1s. If it reaches 60s, it is considered that there is no power, and a power-off and restart operation is performed.

4. A method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 1, characterized in that: The communication module of the satellite-borne tracking and control transponder is provided with redundant channel dual buses canA and canB. When one channel fails, the system will automatically switch to another communication channel to ensure uninterrupted communication.

5. The method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 1, characterized in that: In step 2, when abnormal communication is detected in the satellite communication status, the dual bus redundancy design is enabled, and the communication abnormality is handled through the redundancy mechanism of the CAN bus to ensure that the communication is not interrupted.

6. A method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 1, characterized in that: In the step three, when it is detected that no remote control warning state is valid for 24 hours, the satellite-borne measurement and control transponder is powered off and restarted to reset. If it is invalid, the single fault monitoring task is terminated.

7. A method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 1, characterized in that: The execution steps of step 4 are: A1, when the system detects that there is no new remote control command, it counts the number of no remote control commands; A2, when the system detects a new remote control command, the count of no remote control command will be cleared; A3: With the accumulation of no remote control commands, when the onboard uplink channel has no remote control command timer for 48 hours, it is considered that the onboard tracking and control transponder is working abnormally, and the power-off and restart operation is executed; A4, when multiple power-off and restart attempts fail, switch to the backup measurement and control transponder through redundant backup.

8. The method for monitoring and autonomously handling faults of a satellite-borne TT&C transponder according to claim 1, characterized in that: When the step 5 is executed, the system will dynamically adjust resource allocation according to the priority of the current task, the load of the onboard computer, and the urgency of the measurement and control task; When a communication failure occurs, the system will increase the priority of the communication recovery task according to the preset rules, prioritize the allocation of bus bandwidth, ensure the smooth completion of the communication task, and reduce the risk of system resource contention.

Images