Method and system for identifying and processing abnormal startup and shutdown of gateway equipment of satellite service system

Abstract

The invention provides a satellite service system gateway equipment abnormal startup and shutdown identification and processing method and system, and the method comprises the following steps: S1, collecting the temperature of a measurement and control subsystem transmitter, and carrying out the preprocessing of the data at a gateway; s2, fitting the temperature data and the power, and setting a threshold value for the power to judge whether the transmitter works normally or not; and S3, before the transmitter is turned off, whether the standby transmitter is in a low-power-consumption mode through the satellite, whether the main transmitter is turned off through the satellite, whether a new task is executed and whether the current task is executed are judged to be abnormal behaviors, and if yes, shielding is carried out through software. According to the method, the working state of the satellite can be comprehensively evaluated through software in combination with power telemetering and orbit information of the transmitter, and normal operation of the transmitter is ensured. The comprehensive assessment capability is helpful for improving the success rate of tasks and reducing operation risks.

Description

Technical Field

[0001] The present invention relates to the technical field of satellite safety protection, and specifically, to a method and system for identifying and processing abnormal power-on and power-off of a satellite service system gateway device. Background Art

[0002] During the on-orbit operation of a satellite, it will be affected by various complex space environments. For semiconductor electronic components, the various effects and hazards generated by the space radiation environment are more concerned. When high-energy particles in space pass through devices such as solid-state power amplifiers, various complex effects will be generated in the devices, such as ionization and non-ionization effects and the release of energy, thereby causing various radiation damages.

[0003] The main / backup transmitters of the satellite TT&C subsystem contain a large number of semiconductor electronic components and are vulnerable to radiation damage. It is necessary to pay attention to whether the main / backup transmitters are in a normal working state. The performance of a transmitter is usually closely related to temperature. As the ambient temperature changes, the characteristics of the internal components of the transmitter will also change. These changes may cause fluctuations in the transmit power, thereby affecting the signal quality and transmission reliability. Therefore, it is necessary to establish a relationship model between temperature and power, which can help engineers predict the performance of the transmitter under different temperature conditions, thereby ensuring the stability of the system in various environments.

[0004] Secondly, the characteristics such as the gain, linearity, and efficiency of the transmitter are also affected by temperature. Under high-temperature conditions, some components of the transmitter may overheat, resulting in a decrease in gain or non-linear distortion. Under low-temperature conditions, some electronic components may operate unstably. By fitting temperature and power, these influencing factors can be identified, thereby optimizing the design and operation strategy of the transmitter to ensure that its performance is within the expected range.

[0005] During the on-orbit operation of a satellite, the transmitter may malfunction due to environmental factors, equipment aging, or other unexpected events. These malfunctions may cause the transmitter to fail to work properly, thereby affecting the overall performance of the satellite and the smooth execution of the mission. The most serious of these is the abnormal shutdown command of the transmitter. If the transmitter is accidentally shut down at a critical moment, it may cause it to fail to power on again, further triggering a series of chain reactions. For example, the ongoing data transmission may be interrupted, resulting in the loss of important information and affecting the completion of the mission. This situation may cause irreversible losses, seriously affecting the functions and mission objectives of the satellite, especially when conducting scientific experiments, data collection, or critical communication with the ground.

[0006] However, the current processing mechanism usually relies on manual intervention from the ground control center. This process has significant limitations, especially in terms of the response speed and efficiency when dealing with abnormal behaviors, and it is vulnerable to human factors. As the complexity of satellite missions increases, the difficulty of manually handling anomalies also grows. Modern satellites often need to perform multiple tasks simultaneously, involving a large amount of data transmission, and the interdependence between tasks is also increasing. In such a situation, any delayed response may lead to the interruption of the task chain and even cause the failure of the entire mission. Therefore, a method for identifying and handling abnormal power-on and power-off of the on-board system gateway device is needed.

[0007] Patent application document CN117075579A discloses a self-check diagnosis method and device for a launch control system. The method includes: determining multiple detection points set in the launch control system; the multiple detection points include: a main power switch detection point, a power switch detection point, an anti-backflow diode detection point, a master control switch detection point, an electrical control switch detection point, and a timing switch detection point; controlling the main power switch, power switch, master control switch, electrical control switch, and timing switch of the launch control system to be turned on respectively, obtaining the signals at each detection point, and detecting whether the connection of each switch and load is abnormal according to the signals at each detection point. However, this patent cannot completely solve the existing technical problems and cannot meet the requirements of the present invention. Summary of the Invention

[0008] Aiming at the defects in the prior art, the purpose of the present invention is to provide a method and system for identifying and handling abnormal power-on and power-off of the on-board system gateway device.

[0009] The method for identifying and handling abnormal power-on and power-off of the on-board system gateway device provided by the present invention includes: Step 1: Install sensors near the power amplifier, transmitting antenna, cooling system, and interface circuit of the main / backup transmitter in the TT&C subsystem to collect temperature data; Step 2: Set a gateway device near each transmitter, dynamically adjust the working voltage of the gateway device according to the frequency of the temperature data collected by the sensor, and preprocess the received data; Step 3: Use flash memory in the gateway device to store the preprocessed data, and regularly transmit the preprocessed data to the ground system for synchronization when the transmitter in the corresponding TT&C subsystem is in the idle time; Step 4: The gateway device transmits the preprocessed data to the data processing unit of the TT&C subsystem through the CAN bus. The data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the key degrees of the power amplifier, cooling system, transmitting antenna, and interface circuit, and transmits the data from 0:00 on the current day to 0:00 on the next day to the ground through the space-ground link; Step 5: After the ground receives the data, draw a line chart and perform long-term statistics. Combine the power telemetry when the transmitter is in the working state for exponential fitting, and set a threshold for the power to determine whether the transmitter is working properly, including: before the transmitter shuts down, whether the standby transmitter is in the low-power mode through the satellite, whether the main transmitter shuts down through the satellite, whether there is a new task being executed, and whether the current task has been completed to determine whether it is an abnormal behavior. If so, shield it through software.

[0010] Preferably, when the transmitter is in the non-working state, the power amplifier and the cooling system collect temperature data once every 1 min - 5 min, and the transmitting antenna and the interface circuit collect temperature data once every 5 min - 10 min; when the transmitter is in the working state, the power amplifier and the cooling system collect temperature data once every 30 s - 1 min, and the transmitting antenna and the interface circuit collect temperature data once every 1 min - 5 min.

[0011] Preferably, regularly transmit the preprocessed data to the ground system for synchronization. The second data transmission adopts an incremental method, and only transmits the data that has changed since the last synchronization.

[0012] Preferably, the gateway device uses the CoAP protocol to receive the temperature data at each position of the sensor, retains the preset low-frequency components according to the preset cut-off frequency, and then selects the median of a group of adjacent values to replace the original value for median filtering; Use the Z-score method to discard outliers. The expression is: Z = (X - μ) / σ, where X represents the sensor temperature data, μ is the mean of the sensor temperature data within a day, σ is the standard deviation of the sensor temperature data within a day, and discard the data when the absolute value of only one Z exceeds 3.

[0013] Preferably, combine the power telemetry when the transmitter is in the working state for exponential fitting, and the result is:

[0014] In the formula, y is the output power of the transmitter of the TT&C subsystem, with the unit of mW; a is the zero value, with the unit of mW; x is the value of the day number in days; b is the time coefficient, with the unit of ; C is the intercept, with the unit of mW; d is the day number, indicating the number of days passed since a certain reference date; represents the change trend of power over time; If the transmitter is in a normal operating state and any one of the main unit or the standby unit receives a transmitter shutdown command, resulting in the transmitter's transmission channel being in a closed state, if the standby transmitter is closed, it is determined whether the satellite is currently in the low-power mode. If so, it is executed normally; if not, this behavior is identified as an abnormal behavior by software and blocked; if the main transmitter is closed, software queries the real-time monitoring of the command channel by the ground control center, reads the command queue, and checks whether any new orbit change commands have been sent. Each command includes target orbit, thrust requirement, and execution time information. The software parses these commands and extracts key parameters to determine whether any uploaded orbit change commands exist.

[0015] Preferably, the software receives a judgment on whether the orbit change command received by the central processing unit is valid. The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbit position, velocity vector, and attitude angle. These information are collected in real time by sensors and the TT&C system on the satellite and fed back to the central processing unit; after obtaining the current state, the central processing unit compares it with the target orbit in the orbit change command, including calculating the thrust and time required for the satellite to move from the current orbit to the target orbit; the software simulates the effect of thrust application and evaluates whether the target orbit can be reached within the given time window. If the thrust requirement of the orbit change command matches the achievable thrust in the current state and within the preset time range, the central processing unit marks the command as executable; if a valid orbit change command is detected and it is confirmed that the state of the transmitter allows this operation, the software does not interfere with the transmitter shutdown command.

[0016] Preferably, if the software determines that the satellite has not executed the orbit change command, it classifies the received instruction set by software, finds the tasks that need to be executed by the TT&C subsystem transmitter by identifying the identifiers, compares the time of each instruction, and checks whether there are any unfinished tasks. If not, it checks the last data packet in the buffer. First, it confirms the sequence number of this data packet to determine whether it is the latest telemetry data; if this data packet is the last data packet received within the current time window, the shutdown task is executed normally; if the satellite has not executed the orbit change task and is executing a task or has new tasks to be executed, this behavior is identified as an abnormal behavior by software and blocked.

[0017] Preferably, the data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the criticality of the power amplifier, cooling system, transmitting antenna, and interface circuit. The expression is:

[0018] where is the temperature of the transmitter is the weight of the power amplifier, is the weight of the cooling system, is the weight of the transmitting antenna, is the weight of the interface circuit, is the temperature of the power amplifier, is the temperature of the cooling system, is the temperature of the transmitting antenna, is the temperature of the interface circuit.

[0019] Preferably, the software simulates the effect of thrust application to evaluate whether the target orbit can be reached within a given time window, and the expression is:

[0020] where, is the total velocity increment, is the target orbit velocity, is the current orbit velocity, is the angle between the current orbit and the target orbit; Time calculation:

[0021] where m is the mass of the satellite and F is the engine thrust; The specific process of software simulating thrust: Check the allowed time window in the orbit change command , if t is less than or equal to , then mark the command as non-executable; Check whether the required is within the thrust capacity of the engine; Convert the target thrust direction from the orbit coordinate system to the satellite body coordinate system to obtain the components of the target thrust direction in the satellite body coordinate system, and compare the components of the target thrust direction in the satellite body coordinate system with the limitations of the engine thrust direction. If the target thrust direction is consistent with the fixed direction of the engine or the deviation is within 5°, the engine applies thrust. If not, adjust the satellite attitude to align the engine direction with the target thrust direction.

[0022] According to the on-board system gateway device abnormal power-on and power-off identification and processing system provided by the present invention, the on-board system gateway device abnormal power-on and power-off identification and processing method is adopted.

[0023] Compared with the prior art, the present invention has the following beneficial effects: (1) The present invention combines software with the power telemetry and orbit information of the transmitter, can comprehensively evaluate the working state of the satellite, ensure the normal operation of the transmitter, and this comprehensive evaluation ability helps to improve the success rate of the mission and reduce the operation risk; (2)For the shutdown instruction of the transmitter, the system of the present invention can intelligently determine whether it conforms to the preset working mode, timely identify abnormal behaviors and block them. This intelligent processing reduces the need for human intervention and improves the adaptive ability of the system. Description of the Drawings

[0024] By reading the following detailed description of the non-restrictive embodiments with reference to the accompanying drawings, other features, objectives and advantages of the present invention will become more apparent: Figure 1 It is a flowchart of a method for identifying and processing abnormal power-on and power-off of a satellite service system gateway device; Figure 2 It is the process of identifying and processing abnormal behaviors of the primary transmitter. Detailed Embodiments

[0025] The present invention will be described in detail below with reference to specific embodiments. The following embodiments will help those skilled in the art to further understand the present invention, but do not limit the present invention in any form. It should be noted that those of ordinary skill in the art can make several changes and improvements without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0026] Embodiment 1) Fix the sensors in appropriate positions in advance with bases near the power amplifiers, transmitting antennas, cooling systems and interface circuits of the main / backup transmitters in the TT&C subsystem. When the transmitter is in the non-working state, the power amplifier and the cooling system collect temperature data once every 1 min - 5 min, and the transmitting antenna and the interface circuit collect temperature data once every 5 min - 10 min; when the transmitter is in the working state, the power amplifier and the cooling system collect temperature data once every 30 s - 1 min, and the transmitting antenna and the interface circuit collect temperature data once every 1 min - 5 min.

[0027] 2) Set a gateway device near each transmitter. According to the frequency of the temperature data collected by the sensors received, the gateway device dynamically adjusts the working voltage. The gateway device uses the CoAP protocol to receive the temperature data of each position from the sensors, retains the low-frequency components according to the preset cut-off frequency, and then selects the median of a group of adjacent values to replace the original value for median filtering. The Z-score method is used to discard outliers, Z = (X - μ) / σ, where X represents the sensor temperature data, μ is the mean of the sensor temperature data within one day, and σ is the standard deviation of the sensor temperature data within one day. When the absolute value of only one Z exceeds 3, the data is discarded.

[0028] 3) The gateway device stores the preprocessed data using flash memory. During the idle time of the transmitter in the corresponding TT&C subsystem, it periodically transfers the preprocessed data to the ground system for synchronization. The second data transfer is incremental, only transferring the data that has changed since the last synchronization. If data inconsistency is detected, the gateway device will automatically retransmit the problematic data.

[0029] 4) The gateway device transfers the preprocessed data to the data processing unit of the TT&C subsystem via the CAN bus. The data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the criticality of the power amplifier, cooling system, transmitting antenna, and interface circuit, and transfers the data from 0:00 of the current day to 0:00 of the next day to the ground via the space-ground link.

[0030]

[0031] Among them, is the weight of the power amplifier, is the weight of the cooling system, is the weight of the transmitting antenna, is the weight of the interface circuit. is the temperature of the power amplifier, is the temperature of the cooling system, is the temperature of the transmitting antenna, is the temperature of the interface circuit. is the temperature of the transmitter.

[0032] 5) After receiving the data, the ground plots a line graph and performs long-term statistics, and combines the power telemetry of the transmitter in the working state for exponential fitting. The results are as follows:

[0033] In the formula, y is the output power of the transmitter in the TT&C subsystem, with the unit of mW; a is the zero value, with the unit of mW; x is the value of the day number in days, dimensionless; b is the time coefficient, with the unit of (expressed as the reciprocal here); C is the intercept, with the unit of mW; d is the day number, indicating the number of days elapsed since a certain reference date; represents the change trend of power over time.

[0034] For the non-working state, the formula y = x + C is used for fitting, and the threshold is also set to determine whether the transmitter is normal. In the formula, y is the output power of the transmitter in the TT&C subsystem, with the unit of mW; x is the value of the day number in days, dimensionless; C is the intercept, with the unit of mW.

[0035] The software determines whether the transmitter is in a normal operating state through the above formula. If the transmitter is in a normal operating state, when any one of the main or standby machines receives a transmitter shutdown command, causing the transmitter's transmission channel to be in a closed state, if the standby transmitter is the one that is closed, it is determined whether the satellite is currently in the low-power mode. If it is, it is executed normally; if not, the software identifies this behavior as an abnormal behavior and blocks this behavior.

[0036] 6) If the main transmitter is the one that is closed, the software will query the real-time monitoring of the command channel by the ground control center, read the command queue, and check whether any new orbit change commands have been sent. Each command usually includes information such as the target orbit, thrust requirements, and execution time. The software will parse these commands and extract the key parameters to determine whether there are any uploaded orbit change commands.

[0037] 7) The software will receive a judgment on whether the orbit change command received by the central processing unit is valid. The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbital position, velocity vector, and attitude angle. This information is collected in real time through the sensors and TT&C system on the satellite and fed back to the central processing unit. After obtaining the current state, the central processing unit will compare it with the target orbit in the orbit change command. This comparison process includes calculating the thrust and time required for the satellite to reach the target orbit from the current orbit. The software will simulate the effect of thrust application and evaluate whether the target orbit can be reached within a given time window. If the thrust requirement of the orbit change command matches the achievable thrust in the current state and is within the allowed time range, the central processing unit will mark this command as executable. Finally, if a valid orbit change command is detected and it is confirmed that the state of the transmitter allows this operation to be executed, the software will not interfere with the transmitter shutdown command.

[0038] The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbital position, velocity vector, and attitude angle: Use the attitude and orbit control system to measure in real time and calculate the thrust and time required for the satellite to reach the target orbit from the current orbit. The software will simulate the effect of thrust application and evaluate whether the target orbit can be reached within a given time window: Total velocity increment calculation:

[0039] Among them, is the target orbit velocity, is the current orbit velocity, is the angle between the current orbit and the target orbit.

[0040] Time calculation:

[0041] Among them, m is the mass of the satellite, and F is the engine thrust.

[0042] The specific process of software-simulated thrust: Check the allowed time window in the orbit change command , if t is less than or equal to , otherwise mark the command as unexecutable.

[0043] Check the required Is it within the thrust capacity of the engine (i.e., whether the cumulative thrust of the engine is sufficient to complete this orbit change).

[0044] Convert the target thrust direction from the orbital coordinate system to the satellite body coordinate system, obtain the components of the target thrust direction in the satellite body coordinate system, and compare the components of the target thrust direction in the satellite body coordinate system with the restrictions on the engine thrust direction. If the target thrust direction is consistent with the fixed direction of the engine or the deviation is within 5°, the engine can apply thrust. If not, the satellite attitude needs to be adjusted to align the engine direction with the target thrust direction.

[0045] 8) If the software determines that the satellite has not executed the orbit change command, the software classifies the received instruction set, finds the tasks that need to be executed by the TT&C subsystem transmitter by identifying the identifiers, compares the time of each instruction, detects whether there are unfinished tasks, and if not, performs a special check on the last data packet in the buffer. The system will first confirm the sequence number of this data packet to determine whether it is the latest telemetry data.

[0046] 9) If this data packet is the last data packet received within the current time window, the shutdown task is executed normally. If the satellite has not executed the orbit change task and is executing a task or has new tasks to be executed, this behavior is identified as an abnormal behavior by the software and this behavior is blocked.

[0047] Such as Figure 1 , the present invention provides a method for identifying and processing abnormal power-on and power-off of a satellite service system gateway device, including the following steps: S1: Collect the temperature of the TT&C subsystem transmitter and preprocess this data at the gateway; S2: Fit the temperature data and power, and set a threshold for the power to determine whether the transmitter is working normally; S3: Before the transmitter shuts down, the standby transmitter determines whether it is an abnormal behavior by whether the satellite is in the low-power mode, and the main transmitter determines whether it is an abnormal behavior by whether the satellite shuts down, whether there are new tasks executed, and whether the current task is completed. If so, it is blocked by the software.

[0048] Such as Figure 2, the abnormal behavior recognition and handling process of the primary transmitter is as follows: 1) After the software determines that the transmitter is in a normal working state and receives a transmitter shutdown command, the transmitter's transmission channel is in a closed state. 2) The software queries the real-time monitoring of the command channel by the ground control center, reads the command queue, checks whether any new orbit change commands are sent, parses the commands and extracts key parameters to determine whether there are any uploaded orbit change commands, and it is found that there are orbit change commands.

[0049] 3) The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbital position, velocity vector, and attitude angle. This information is collected in real time by the sensors and TT&C system on the satellite and fed back to the central processing unit. After obtaining the current state, the central processing unit compares it with the target orbit in the orbit change command. This comparison process includes calculating the thrust and time required for the satellite to reach the target orbit from the current orbit. The software simulates the effect of thrust application and evaluates whether the target orbit can be reached within the given time window.

[0050] 4) If the thrust requirement of the orbit change command matches the achievable thrust in the current state and is within the allowed time range, the central processing unit will mark the command as executable. The software receives this executable command.

[0051] 5) The software classifies the received instruction set, finds the tasks that need to be executed by the TT&C subsystem transmitter by identifying the identifiers, compares the time of each instruction, finds that there are tasks to be completed, marks this shutdown command as an abnormal behavior and shields it, and the primary transmitter executes the tasks normally.

[0052] Those skilled in the art know that in addition to implementing the system, device, and their respective modules provided by the present invention in the form of pure computer-readable program code, the method steps can be logically programmed to enable the system, device, and their respective modules provided by the present invention to be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers, etc. to achieve the same program. Therefore, the system, device, and their respective modules provided by the present invention can be considered as a kind of hardware component, and the modules included therein for implementing various programs can also be regarded as the structure within the hardware component; the modules for implementing various functions can also be regarded as both software programs for implementing the method and the structure within the hardware component.

[0053] The specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention. Without conflict, the embodiments of the present application and the features in the embodiments can be arbitrarily combined with each other.

Claims

1. A method for identifying and processing abnormal power on and off of a gateway device in a star service system, characterized in that: include: Step 1: Install sensors near the power amplifier, transmitting antenna, cooling system and interface circuit of the main / standby transmitter of the measurement and control subsystem to collect temperature data; Step 2: Set up a gateway device near each transmitter, dynamically adjust the working voltage of the gateway device according to the frequency of the temperature data collected by the sensor, and pre-process the received data; Step 3: The pre-processed data is stored in the flash memory through the gateway device, and the pre-processed data is periodically transmitted to the ground system for synchronization when the transmitter of the corresponding measurement and control subsystem is in idle time; Step 4: The gateway device transmits the pre-processed data to the data processing unit of the measurement and control subsystem through the CAN bus. The data processing unit performs weighted average of the temperatures of different components of the same transmitter at the same time according to the criticality of the power amplifier, cooling system, transmitting antenna and interface circuit, and transmits the data from 0:00 on the current day to 0:00 on the next day to the ground through the satellite-to-ground link; Step 5: After receiving the data on the ground, a line graph is drawn and long-term statistics are collected. An exponential fit is performed in combination with the power telemetry of the transmitter in working state, and a threshold is set for the power to determine whether the transmitter is working normally, including: before the transmitter is turned off, whether the backup transmitter is in low power mode through the satellite, whether the main transmitter is turned off through the satellite, whether there is a new task to be executed, and whether the current task is completed to determine whether it is abnormal behavior. If so, it is blocked through software.

2. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 1, characterized in that: When the transmitter is not in working state, the power amplifier and cooling system collect temperature data once every 1min-5min, and the transmitting antenna and interface circuit collect temperature data once every 5min-10min; when the transmitter is in working state, the power amplifier and cooling system collect temperature data once every 30s-1min, and the transmitting antenna and interface circuit collect temperature data once every 1min-5min.

3. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 1, characterized in that: The pre-processed data is periodically transmitted to the ground system for synchronization. The second transmission of data is incremental, transmitting only the data that has changed since the last synchronization.

4. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 1, characterized in that: The gateway device uses the CoAP protocol to receive the temperature data of each location of the sensor, retains the preset low-frequency component according to the preset cutoff frequency, and then selects the median of a group of adjacent values ​​to replace the original value for median filtering; The Z-score method is used to discard outliers. The expression is: Z=(X-μ) / σ, where X represents the sensor temperature data, μ is the mean of the sensor temperature data within a day, and σ is the standard deviation of the sensor temperature data within a day. When only one Z absolute value exceeds 3, the data is discarded.

5. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 1, characterized in that: Combined with the power telemetry of the transmitter in working state, the exponential fitting result is: Where y is the output power of the transmitter of the measurement and control subsystem, in mW; a is zero value, in mW; x is the value of the product day in d; b is the time coefficient, in ; C is the intercept, in mW; d is the cumulative day, which means the number of days that have passed since a certain base date; Indicates the trend of power change over time; If the transmitter is in normal working condition, and either the main machine or the backup machine receives a transmitter shutdown command, causing the transmitter's transmission channel to be closed, if the one that is shut down is the backup transmitter, it will determine whether the satellite is currently in low power consumption mode. If so, it will execute normally. If not, the behavior will be identified as abnormal behavior through software and blocked. If the one that is shut down is the main transmitter, the software will query the ground control center's real-time monitoring of the command channel, read the command queue, and check whether any new orbit change instructions have been sent. Each command includes the target orbit, thrust requirement and execution time information. The software parses these commands, extracts key parameters, and determines whether there are any uploaded orbit change commands.

6. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 5, characterized in that: The software receives a judgment from the central processing unit on whether the orbit change command received is valid. The central processing unit calculates the current state of the satellite based on the current orbit information, velocity and attitude, including its orbital position, velocity vector and attitude angle. This information is collected in real time by the sensors and measurement and control system on the satellite and fed back to the central processing unit; After obtaining the current state, the central processing unit compares it with the target orbit in the orbit change command, including calculating the thrust and time required for the satellite to move from the current orbit to the target orbit; the software simulates the effect of thrust application and evaluates whether the target orbit can be reached within a given time window. If the thrust requirement of the orbit change command matches the thrust achievable in the current state and is within the preset time range, the central processing unit will mark the command as executable; if a valid orbit change command is detected and it is confirmed that the status of the transmitter allows the operation to be executed, the software will not interfere with the transmitter's shutdown command.

7. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 6, characterized in that: If the software determines that the satellite has not executed the orbit change command, the software will classify the received instruction set, find out the task that needs to be executed by the measurement and control subsystem transmitter by identifying the identifier, compare the time of each instruction, and detect whether there is an unfinished task. If not, the last data packet in the buffer will be checked. First, the serial number of this data packet will be confirmed to determine whether it is the latest telemetry data; if this data packet is the last data packet received in the current time window, the shutdown task will be executed normally; if the satellite has not executed the orbit change task, and is executing a task or has a new task to be executed, the software will identify this behavior as abnormal behavior and block this behavior.

8. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 1, characterized in that: The data processing unit performs weighted average of the temperatures of different components of the same transmitter at the same time according to the criticality of the power amplifier, cooling system, transmitting antenna and interface circuit. The expression is: in, is the temperature of the transmitter, is the weight of the power amplifier, is the weight of the cooling system, is the weight of the transmitting antenna, is the weight of the interface circuit, is the temperature of the power amplifier, is the temperature of the cooling system, is the temperature of the transmitting antenna, is the temperature of the interface circuit.

9. The method for identifying and processing abnormal power on and off of a star service system gateway device according to claim 6, characterized in that: The software simulates the effect of thrust application and evaluates whether the target orbit can be reached within a given time window. The expression is: in, is the total speed increment, is the target orbital velocity, is the current orbital velocity, is the angle between the current track and the target track; Time calculation: Where m is the mass of the satellite and F is the engine thrust; The specific process of software simulating thrust: Check the allowed time window in track change commands , if t is less than or equal to , then mark the command as unexecutable; Check the required Is it within the thrust capability of the engine? The target thrust direction is converted from the orbital coordinate system to the satellite body coordinate system to obtain the component of the target thrust direction in the satellite body coordinate system. The component of the target thrust direction in the satellite body coordinate system is compared with the restriction of the engine thrust direction. If the target thrust direction is consistent with the fixed direction of the engine or the deviation is within 5°, the engine applies thrust. If not, the satellite attitude is adjusted to align the engine direction with the target thrust direction.

10. A system for identifying and processing abnormal power on and off of a gateway device in a star service system, characterized in that: A method for identifying and processing abnormal power on and off of a star service system gateway device as described in any one of claims 1 to 9 is adopted.

Images