Method and system for identifying and handling abnormal power-on and power-off of satellite service system gateway devices

Abstract

The present invention provides a method and system for identifying and handling abnormal power-on and power-off of a star service system gateway device, including the following steps: S1: Collect the temperature of the transmitter of the TT&C subsystem, and preprocess this data at the gateway; S2: Fit the temperature data and power, and set a threshold for the power to determine whether the transmitter is working properly; S3: Before the transmitter shuts down, the standby transmitter determines whether it is an abnormal behavior by whether the satellite is in the low-power mode, whether the main transmitter shuts down through the satellite, whether there is a new task to execute, and whether the current task is completed. If so, it is blocked through software. The present invention can comprehensively evaluate the working state of the satellite by combining software with the power telemetry and orbit information of the transmitter, ensuring the normal operation of the transmitter. This comprehensive evaluation ability helps to improve the success rate of the mission and reduce the operation risk.

Description

Technical Field

[0001] The present invention relates to the technical field of satellite security protection, and specifically, to a method and system for identifying and processing abnormal power-on and power-off of a satellite service system gateway device. Background Art

[0002] During the on-orbit operation of a satellite, it will be affected by various complex space environments. For semiconductor electronic components, the various effects and hazards generated by the space radiation environment are more concerned. When high-energy particles in space pass through devices such as solid-state power amplifiers, various complex effects will be generated in the devices, such as ionization and non-ionization effects and the release of energy, thereby causing various radiation damages.

[0003] The main / backup transmitters of the satellite TT&C subsystem contain a large number of semiconductor electronic components, which are easily damaged by radiation, and it is necessary to pay attention to whether the main / backup transmitters are in a normal working state. The performance of a transmitter is usually closely related to temperature. As the ambient temperature changes, the characteristics of the internal components of the transmitter will also change. These changes may cause fluctuations in the transmitted power, thereby affecting the signal quality and transmission reliability. Therefore, it is necessary to establish a relationship model between temperature and power, which can help engineers predict the performance of the transmitter under different temperature conditions, thereby ensuring the stability of the system in various environments.

[0004] Secondly, the characteristics such as the gain, linearity, and efficiency of the transmitter are also affected by temperature. Under high-temperature conditions, some components of the transmitter may overheat, resulting in a decrease in gain or non-linear distortion. Under low-temperature conditions, some electronic components may not work stably. By fitting temperature and power, these influencing factors can be identified, thereby optimizing the design and operation strategy of the transmitter to ensure that its performance is within the expected range.

[0005] During the on-orbit operation of a satellite, the transmitter may malfunction due to environmental factors, equipment aging, or other unexpected events. These malfunctions may cause the transmitter to fail to work properly, thereby affecting the overall performance of the satellite and the smooth execution of the mission. The most serious of these is the abnormal shutdown instruction of the transmitter. If the transmitter is accidentally shut down at a critical moment, it may cause it to be unable to start up again, further triggering a series of chain reactions. For example, the ongoing data transmission may be interrupted, resulting in the loss of important information and affecting the completion of the mission. This situation may cause irreversible losses, seriously affecting the functions and mission objectives of the satellite, especially when conducting scientific experiments, data collection, or critical communications with the ground.

[0006] However, the current processing mechanism usually relies on manual intervention from the ground control center. This process has significant limitations, especially in terms of the reaction speed and efficiency when dealing with abnormal behaviors, and it is also vulnerable to human factors. As the complexity of satellite missions increases, the difficulty of manually handling anomalies also grows. Modern satellites often need to perform multiple tasks simultaneously, involving a large amount of data transmission, and the interdependence between tasks is also increasing day by day. In this situation, any delayed response may lead to the interruption of the task chain and even the failure of the entire mission. Therefore, a method for identifying and handling abnormal power-on and power-off of the on-board system gateway device is needed.

[0007] Patent application document CN117075579A discloses a self-check diagnosis method and device for a launch control system. The method includes: determining multiple detection points set in the launch control system; the multiple detection points include: a main power switch detection point, a power switch detection point, an anti-backflow diode detection point, a master control switch detection point, an electrical control switch detection point, and a timing switch detection point; controlling the main power switch, power switch, master control switch, electrical control switch, and timing switch of the launch control system to be turned on respectively, obtaining signals at each detection point, and detecting whether the connection of each switch and load is abnormal according to the signals at each detection point. However, this patent cannot completely solve the existing technical problems and cannot meet the requirements of the present invention. Summary of the Invention

[0008] Aiming at the deficiencies in the prior art, the purpose of the present invention is to provide a method and system for identifying and handling abnormal power-on and power-off of the on-board system gateway device.

[0009] According to the method for identifying and handling abnormal power-on and power-off of the on-board system gateway device provided by the present invention, it includes:

[0010] Step 1: Install sensors near the power amplifier, transmitting antenna, cooling system, and interface circuit of the main / backup transmitter in the TT&C subsystem to collect temperature data;

[0011] Step 2: Set a gateway device near each transmitter, dynamically adjust the working voltage of the gateway device according to the frequency of the temperature data collected by the sensor, and preprocess the received data;

[0012] Step 3: Use flash memory in the gateway device to store the preprocessed data, and regularly transmit the preprocessed data to the ground system for synchronization when the transmitter in the corresponding TT&C subsystem is in the idle time;

[0013] Step 4: The gateway device transmits the preprocessed data to the data processing unit of the measurement and control subsystem through the CAN bus. The data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the criticality of the power amplifier, cooling system, transmitting antenna, and interface circuit, and transmits the data from 0:00 on the current day to 0:00 on the next day to the ground through the space-ground link;

[0014] Step 5: After receiving the data on the ground, a line graph is plotted and statistically analyzed over a long period. Exponential fitting is performed in combination with the power telemetry of the transmitter in the working state, and a threshold is set for the power to determine whether the transmitter is working properly, including: before the transmitter shuts down, whether the standby transmitter is in the low-power mode through the satellite, whether the main transmitter shuts down through the satellite, whether a new task is executed, and whether the current task is completed to determine whether it is an abnormal behavior. If so, it is blocked through software.

[0015] Preferably, when the transmitter is in the non-working state, the power amplifier and the cooling system collect temperature data once every 1 min - 5 min, and the transmitting antenna and the interface circuit collect temperature data once every 5 min - 10 min; when the transmitter is in the working state, the power amplifier and the cooling system collect temperature data once every 30 s - 1 min, and the transmitting antenna and the interface circuit collect temperature data once every 1 min - 5 min.

[0016] Preferably, the preprocessed data is regularly transmitted to the ground system for synchronization, and the second data transmission is in an incremental manner, only transmitting the data that has changed since the last synchronization.

[0017] Preferably, the gateway device uses the CoAP protocol to receive the temperature data at each position of the sensor, retains the preset low-frequency components according to the preset cut-off frequency, and then selects the median of a group of adjacent values to replace the original value for median filtering;

[0018] The Z-score method is used to discard outliers, and the expression is: Z = (X - μ) / σ, where X represents the sensor temperature data, μ is the mean of the sensor temperature data within a day, σ is the standard deviation of the sensor temperature data within a day, and the data is discarded when the absolute value of only one Z exceeds 3.

[0019] Preferably, exponential fitting is performed in combination with the power telemetry of the transmitter in the working state, and the result is:

[0020]

[0021] In the formula, y is the output power of the transmitter of the measurement and control subsystem, with the unit of mW; a is the zero value, with the unit of mW; x is the value of the accumulated days in units of d; b is the time coefficient, with the unit of ; C is the intercept, with the unit of mW; d is the day of year, representing the number of days elapsed since a certain reference date. It represents the changing trend of power over time.

[0022] If the transmitter is in the normal working state, when any one of the main unit or the standby unit receives the transmitter shutdown instruction, resulting in the transmitter's transmission channel being in the closed state, if the standby transmitter is closed, it is determined whether the satellite is currently in the low-power mode. If so, it is executed normally. If not, this behavior is identified as an abnormal behavior by software and blocked; if the main transmitter is closed, the software queries the real-time monitoring of the command channel by the ground control center, reads the command queue, and checks whether there is a new orbit change instruction sent. Each command includes target orbit, thrust requirement, and execution time information. The software parses these commands and extracts key parameters to determine whether there is any uploaded orbit change command.

[0023] Preferably, the software receives the judgment on whether the orbit change command received by the central processing unit is valid. The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbit position, velocity vector, and attitude angle. These information are collected in real time by the sensors and TT&C system on the satellite and fed back to the central processing unit; after obtaining the current state, the central processing unit compares it with the target orbit in the orbit change command, including calculating the thrust and time required for the satellite to reach the target orbit from the current orbit; the software simulates the effect of thrust application and evaluates whether the target orbit can be reached within the given time window. If the thrust requirement of the orbit change command matches the achievable thrust in the current state and within the preset time range, the central processing unit will mark this command as executable; if a valid orbit change command is detected and it is confirmed that the state of the transmitter allows this operation, the software does not interfere with the transmitter shutdown instruction.

[0024] Preferably, if the software determines that the satellite has not executed the orbit change command, it classifies the received instruction set by software, finds the tasks that need to be executed by the TT&C subsystem transmitter by identifying the identifiers, compares the time of each instruction, and checks whether there are any unfinished tasks. If not, it checks the last data packet in the buffer. First, it confirms the sequence number of this data packet to determine whether it is the latest telemetry data; if this data packet is the last data packet received within the current time window, the shutdown task is executed normally; if the satellite has not executed the orbit change task and is executing a task or has new tasks to be executed, this behavior is identified as an abnormal behavior by software and blocked.

[0025] Preferably, the data processing unit performs a weighted average of the temperatures of different components of the same transmitter at the same time in the order of the criticality of the power amplifier, cooling system, transmitting antenna, and interface circuit. The expression is:

[0026]

[0027] Wherein, is the temperature of the transmitter, is the weight of the power amplifier, is the weight of the cooling system, is the weight of the transmitting antenna, is the weight of the interface circuit, is the temperature of the power amplifier, is the temperature of the cooling system, is the temperature of the transmitting antenna, is the temperature of the interface circuit.

[0028] Preferably, the software simulates the effect of thrust application and evaluates whether the target orbit can be reached within a given time window. The expression is:

[0029]

[0030] Wherein, is the total velocity increment, is the target orbit velocity, is the current orbit velocity, is the angle between the current orbit and the target orbit;

[0031] Time calculation:

[0032] Wherein, m is the mass of the satellite and F is the engine thrust;

[0033] Specific process of software simulating thrust:

[0034] Check the allowed time window in the orbit change command , if t is less than or equal to , then mark the command as non-executable;

[0035] Check whether the required is within the thrust capacity of the engine;

[0036] Convert the target thrust direction from the orbital coordinate system to the satellite body coordinate system to obtain the components of the target thrust direction in the satellite body coordinate system. Compare the components of the target thrust direction in the satellite body coordinate system with the limits of the engine thrust direction. If the target thrust direction is consistent with the fixed direction of the engine or the deviation is within 5°, the engine applies thrust. If not, adjust the satellite attitude to align the engine direction with the target thrust direction.

[0037] According to the star service system gateway device abnormal power-on and power-off identification and processing system provided by the present invention, the star service system gateway device abnormal power-on and power-off identification and processing method described above is adopted.

[0038] Compared with the prior art, the present invention has the following beneficial effects:

[0039] (1) The present invention combines software with the power telemetry and orbital information of the transmitter, can comprehensively evaluate the working state of the satellite, ensure the normal operation of the transmitter. This comprehensive evaluation ability helps to improve the success rate of the mission and reduce the operation risk.

[0040] (2) For the shutdown command of the transmitter, the system of the present invention can intelligently judge whether it conforms to the preset working mode, timely identify abnormal behaviors and block them. This intelligent processing reduces the need for human intervention and improves the adaptive ability of the system. Brief Description of the Drawings

[0041] By reading the detailed description of the non-restrictive embodiments with reference to the following drawings, other features, objects and advantages of the present invention will become more apparent:

[0042] Figure 1 It is a flowchart of a method for identifying and processing abnormal power-on and power-off of a star service system gateway device;

[0043] Figure 2 It is the abnormal behavior identification and processing flow of the primary transmitter. Detailed Embodiments

[0044] The present invention will be described in detail below with reference to specific embodiments. The following embodiments will help those skilled in the art to further understand the present invention, but do not limit the present invention in any form. It should be noted that those of ordinary skill in the art can make several changes and improvements without departing from the concept of the present invention. These all belong to the protection scope of the present invention.

[0045] Embodiment

[0046] 1) Fix the sensor in place with a base in advance near the power amplifier, transmitting antenna, cooling system, and interface circuit of the main / backup transmitter in the measurement and control subsystem. When the transmitter is in the non-operating state, the power amplifier and cooling system collect temperature data once every 1 min - 5 min, and the transmitting antenna and interface circuit collect temperature data once every 5 min - 10 min; when the transmitter is in the operating state, the power amplifier and cooling system collect temperature data once every 30 s - 1 min, and the transmitting antenna and interface circuit collect temperature data once every 1 min - 5 min.

[0047] 2) Set up a gateway device near each transmitter. According to the frequency of the temperature data collected by the sensor received, the gateway device dynamically adjusts the working voltage. The gateway device uses the CoAP protocol to receive the temperature data at each location of the sensor, retains the low-frequency components according to the preset cut-off frequency, and then selects the median of a group of adjacent values to replace the original value for median filtering. The Z-score method is used to discard outliers, Z = (X - μ) / σ, where X represents the sensor temperature data, μ is the mean of the sensor temperature data in one day, and σ is the standard deviation of the sensor temperature data in one day. When only the absolute value of one Z exceeds 3, the data is discarded.

[0048] 3) The gateway device stores the preprocessed data using flash memory. During the idle time of the transmitter in the corresponding measurement and control subsystem, the preprocessed data is regularly transmitted to the ground system for synchronization. The second data transmission adopts an incremental method, only transmitting the data that has changed since the last synchronization. If data inconsistency is found, the gateway device will automatically retransmit the problematic data.

[0049] 4) The gateway device transmits the preprocessed data to the data processing unit of the measurement and control subsystem through the CAN bus. The data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the key degrees of the power amplifier, cooling system, transmitting antenna, and interface circuit, and downloads the data from 0:00 of the current day to 0:00 of the next day to the ground through the space-ground link.

[0050]

[0051] Among them, is the weight of the power amplifier, is the weight of the cooling system, is the weight of the transmitting antenna, is the weight of the interface circuit. is the temperature of the power amplifier, is the temperature of the cooling system, is the temperature of the transmitting antenna, is the temperature of the interface circuit. is the temperature of the transmitter.

[0052] 5) After the ground receives the data, draw a line graph and conduct long-term statistics, and perform exponential fitting in combination with the power telemetry when the transmitter is in the working state. The results are as follows:

[0053]

[0054] In the formula, y is the output power of the transmitter of the TT&C subsystem, with the unit of mW; a is the zero value, with the unit of mW; x is the value of the day of the year in units of d, dimensionless; b is the time coefficient, with the unit of (expressed as the reciprocal here); C is the intercept, with the unit of mW; d is the day of the year, indicating the number of days passed since a certain reference date; It represents the changing trend of power over time.

[0055] For the non-working state, use the formula y = x + C for fitting, and also set a threshold to judge whether the transmitter is normal. In the formula, y is the output power of the transmitter of the TT&C subsystem, with the unit of mW; x is the value of the day of the year in units of d, dimensionless; C is the intercept, with the unit of mW.

[0056] The software judges whether the transmitter is in the normal working state through the above formula. If the transmitter is in the normal working state, when any one of the main or standby machines receives the transmitter shutdown command, resulting in the transmitter's transmission channel being in the closed state, if the standby transmitter is closed, it is judged whether the satellite is currently in the low-power mode. If so, it is executed normally; if not, the software identifies this behavior as an abnormal behavior and shields this behavior.

[0057] 6) If the main transmitter is closed, the software will query the real-time monitoring of the command channel by the ground control center, read the command queue, and check whether any new orbit change commands have been sent. Each command usually includes information such as the target orbit, thrust requirement, and execution time. The software will parse these commands and extract key parameters to judge whether there are any uploaded orbit change commands.

[0058] 7) The software will receive a judgment on whether the orbit change command received by the central processing unit is valid. The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbit position, velocity vector, and attitude angle. This information is collected in real-time through sensors and the TT&C system on the satellite and fed back to the central processing unit. After obtaining the current state, the central processing unit will compare it with the target orbit in the orbit change command. This comparison process includes calculating the thrust and time required for the satellite to move from the current orbit to the target orbit. The software will simulate the effect of thrust application and evaluate whether the target orbit can be reached within a given time window. If the thrust requirement of the orbit change command matches the achievable thrust in the current state and is within the allowed time range, the central processing unit will mark the command as executable. Finally, if a valid orbit change command is detected and it is confirmed that the state of the transmitter allows this operation, the software will not interfere with the shutdown command of the transmitter.

[0059] The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbit position, velocity vector, and attitude angle:

[0060] Use the attitude and orbit control system to measure in real-time and calculate the thrust and time required for the satellite to move from the current orbit to the target orbit. The software will simulate the effect of thrust application and evaluate whether the target orbit can be reached within a given time window:

[0061] Total velocity increment calculation:

[0062] Among them, is the target orbit velocity, is the current orbit velocity, is the angle between the current orbit and the target orbit.

[0063] Time calculation:

[0064] Among them, m is the mass of the satellite and F is the engine thrust.

[0065] The specific process of the software simulating thrust:

[0066] Check the allowed time window in the orbit change command , if t is less than or equal to , otherwise mark the command as non-executable.

[0067] Check whether the required is within the thrust capacity of the engine (i.e., whether the cumulative thrust of the engine is sufficient to complete this orbit change).

[0068] Convert the target thrust direction from the orbital coordinate system to the satellite body coordinate system to obtain the components of the target thrust direction in the satellite body coordinate system. Compare the components of the target thrust direction in the satellite body coordinate system with the limitations of the engine thrust direction. If the target thrust direction is consistent with the fixed direction of the engine or the deviation is within 5°, the engine can apply thrust. If not, the satellite attitude needs to be adjusted to align the engine direction with the target thrust direction.

[0069] 8) If the software determines that the satellite has not executed the orbit change command, the software classifies the received instruction set, finds the tasks that need to be executed by the TT&C subsystem transmitter by identifying the identifiers, compares the time of each instruction, and detects whether there are any unfinished tasks. If not, it performs a special check on the last data packet in the buffer. The system first confirms the sequence number of this data packet to determine whether it is the latest telemetry data.

[0070] 9) If this data packet is the last data packet received within the current time window, the shutdown task is executed normally. If the satellite has not executed the orbit change task and is either executing a task or has new tasks to be executed, this behavior is identified as an abnormal behavior by the software and is blocked.

[0071] As Figure 1 , the present invention provides a method for identifying and processing abnormal power-on and power-off of a satellite service system gateway device, including the following steps:

[0072] S1: Collect the temperature of the TT&C subsystem transmitter and preprocess this data at the gateway;

[0073] S2: Fit the temperature data and power, and set a threshold for power to determine whether the transmitter is working properly;

[0074] S3: Before the transmitter shuts down, the standby transmitter determines whether it is an abnormal behavior by whether the satellite is in the low power consumption mode, and the main transmitter determines whether it is an abnormal behavior by whether the satellite shuts down, whether there are new tasks executed, and whether the current task is completed. If so, it is blocked by the software.

[0075] As Figure 2 , the identification and processing process of abnormal behavior of the main transmitter is as follows:

[0076] 1) After the software determines that the transmitter is in the normal working state and receives the transmitter shutdown command, the transmitting channel of the transmitter is in the closed state;

[0077] 2) The software queries the real-time monitoring of the command channel by the ground control center, the software reads the command queue, checks whether there are any new orbit change instructions sent, the software parses the command and extracts the key parameters to determine whether there are any uploaded orbit change commands, and it is found that there are orbit change commands.

[0078] 3) The central processing unit performs calculations by combining the current orbital information, speed, and attitude to obtain the current state of the satellite, including its orbital position, velocity vector, and attitude angle. This information is collected in real-time through sensors and the TT&C system on the satellite and fed back to the central processing unit. After obtaining the current state, the central processing unit compares it with the target orbit in the orbit change command. This comparison process includes calculating the thrust and time required for the satellite to reach the target orbit from the current orbit. The software simulates the effect of thrust application and evaluates whether the target orbit can be reached within the given time window.

[0079] 4) If the thrust requirement of the resulting orbit change command matches the achievable thrust in the current state and is within the allowed time range, the central processing unit will mark the command as executable. The software receives this executable command.

[0080] 5) The software classifies the received instruction set, identifies the tasks that need to be executed by the TT&C subsystem transmitter by recognizing the identifiers, compares the time of each instruction, finds that there are tasks to be completed, marks this shutdown instruction as an abnormal behavior, and shields it, while the main transmitter executes the tasks normally.

[0081] Those skilled in the art know that in addition to implementing the systems, devices, and their respective modules provided by the present invention in the form of pure computer-readable program code, the method steps can be logically programmed to enable the systems, devices, and their respective modules provided by the present invention to be implemented in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers, etc., to achieve the same program. Therefore, the systems, devices, and their respective modules provided by the present invention can be regarded as a kind of hardware component, and the modules included therein for implementing various programs can also be regarded as the structures within the hardware component; the modules for implementing various functions can also be regarded as either software programs for implementing the methods or the structures within the hardware component.

[0082] The specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the above specific embodiments, and those skilled in the art can make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention. Without conflict, the embodiments of the present application and the features in the embodiments can be combined arbitrarily with each other.

Claims

1. A method for identifying and handling abnormal power-on and power-off of a gateway device in a satellite service system, characterized in that, Including: Step 1: Install sensors near the power amplifiers, transmitting antennas, cooling systems, and interface circuits of the main / backup transmitters in the measurement and control subsystem to collect temperature data; Step 2: Set up a gateway device near each transmitter. Dynamically adjust the working voltage of the gateway device according to the frequency of the temperature data collected by the sensors, and preprocess the received data; Step 3: Use flash memory through the gateway device to store the preprocessed data. During the idle time of the transmitter in the corresponding measurement and control subsystem, regularly transmit the preprocessed data to the ground system for synchronization; Step 4: The gateway device transmits the preprocessed data to the data processing unit of the measurement and control subsystem through the CAN bus. The data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the criticality of the power amplifier, cooling system, transmitting antenna, and interface circuit, and transmits the data from 0:00 on the current day to 0:00 on the next day to the ground through the satellite-ground link; Step 5: After the ground receives the data, draw a line chart and perform long-term statistics, and perform exponential fitting in combination with the power telemetry of the transmitter in the working state, and set a threshold for the power to judge whether the transmitter is working normally, including: before the transmitter shuts down, whether the standby transmitter is in the low-power mode through the satellite, whether the main transmitter shuts down through the satellite, whether there is a new task being executed, and whether the current task has been completed to judge whether it is an abnormal behavior. If so, shield it through software; Perform exponential fitting in combination with the power telemetry of the transmitter in the working state, and the result is: Where y is the output power of the measurement and control subsystem transmitter, with the unit of mW; a is the zero value, with the unit of mW; x is the value of the day of the year in units of d; b is the time coefficient, with the unit of ; C is the intercept, with the unit of mW; d is the day of the year, representing the number of days elapsed since a certain reference date; indicating the change trend of power over time; If the transmitter is in the normal working state and either the main or standby machine receives the transmitter shutdown command, causing the transmitter's transmission channel to be in the closed state, if the standby transmitter is closed, determine whether the satellite is currently in the low-power mode. If so, execute normally. If not, identify this behavior as an abnormal behavior through software and shield this behavior; if the main transmitter is closed, query the real-time monitoring of the command channel by the ground control center through software, read the command queue, check whether any new orbit change commands have been sent, each command includes target orbit, thrust requirement, and execution time information, and the software parses these commands and extracts key parameters to determine whether there are any uploaded orbit change commands; The software receives a judgment on whether the orbit change command received by the central processing unit is valid. The central processing unit calculates by combining the current orbit information, speed, and attitude to obtain the current state of the satellite, including its orbital position, velocity vector, and attitude angle. This information is collected in real-time by sensors and the TT&C system on the satellite and fed back to the central processing unit. After obtaining the current state, the central processing unit compares it with the target orbit in the orbit change command, including calculating the thrust and time required for the satellite to move from the current orbit to the target orbit. The software simulates the effect of thrust application and evaluates whether the target orbit can be reached within a given time window. If the thrust requirement of the orbit change command matches the achievable thrust in the current state and within the preset time range, the central processing unit marks the command as executable. If a valid orbit change command is detected and it is confirmed that the state of the transmitter allows this operation, the software does not interfere with the shutdown instruction of the transmitter. The software simulates the effect of thrust application and evaluates whether the target orbit can be reached within a given time window. The expression is: Among them, is the total velocity increment, is the target orbit velocity, is the current orbit velocity, is the angle between the current orbit and the target orbit; Time calculation: where m is the mass of the satellite and F is the engine thrust; The specific process of the software simulating thrust: Check the allowed time window in the orbit change command , if t is less than or equal to , then mark the command as non-executable; Required for inspection Whether it is within the thrust capacity of the engine; Convert the target thrust direction from the orbital coordinate system to the satellite body coordinate system to obtain the components of the target thrust direction in the satellite body coordinate system. Compare the components of the target thrust direction in the satellite body coordinate system with the limits of the engine thrust direction. If the target thrust direction is the same as the fixed direction of the engine or the deviation is within 5°, the engine applies thrust. If not, adjust the satellite attitude to align the engine direction with the target thrust direction.

2. The method for identifying and handling abnormal power-on and power-off of the satellite service system gateway device according to claim 1, characterized in that When the transmitter is in the non-operating state, the power amplifier and the cooling system collect temperature data once every 1 min - 5 min, and the transmitting antenna and the interface circuit collect temperature data once every 5 min - 10 min. When the transmitter is in the operating state, the power amplifier and the cooling system collect temperature data once every 30 s - 1 min, and the transmitting antenna and the interface circuit collect temperature data once every 1 min - 5 min.

3. The method for identifying and handling abnormal power-on and power-off of the on-orbit service system gateway device according to claim 1, characterized in that, Regularly transmit the preprocessed data to the ground system for synchronization. The second data transmission is in an incremental manner, only transmitting the data that has changed since the last synchronization.

4. The method for identifying and handling abnormal power-on and power-off of the satellite service system gateway device according to claim 1, characterized in that, The gateway device uses the CoAP protocol to receive the temperature data at each position of the sensor, retains the preset low-frequency components according to the preset cut-off frequency, and then selects the median of a group of adjacent values to replace the original value for median filtering; Use the Z-score method to discard outliers. The expression is: Z = (X - μ) / σ, where X represents the sensor temperature data, μ is the mean of the sensor temperature data within a day, and σ is the standard deviation of the sensor temperature data within a day. Discard the data when the absolute value of only one Z exceeds 3.

5. The method for identifying and handling abnormal power-on and power-off of the satellite service system gateway device according to claim 1, characterized in that, If the software determines that the satellite has not executed the orbit change command, the software classifies the received instruction set, identifies the tasks that need to be executed by the TT&C subsystem transmitter by recognizing the identifiers, compares the time of each instruction, and detects whether there are any unfinished tasks. If not, it checks the last data packet in the buffer. First, it confirms the sequence number of this data packet to determine whether it is the latest telemetry data. If this data packet is the last data packet received within the current time window, it normally executes the shutdown task. If the satellite has not executed the orbit change task and is either executing a task or has new tasks to be executed, the software identifies this behavior as an abnormal behavior and masks this behavior.

6. The method for identifying and handling abnormal power-on and power-off of the on-orbit service system gateway device according to claim 1, characterized in that, The data processing unit performs weighted averaging on the temperatures of different components of the same transmitter at the same time in the order of the criticality of the power amplifier, cooling system, transmitting antenna, and interface circuit. The expression is: wherein, is the temperature of the transmitter, is the weight of the power amplifier, is the weight of the cooling system, is the weight of the transmitting antenna, is the weight of the interface circuit, is the temperature of the power amplifier, is the temperature of the cooling system, is the temperature of the transmitting antenna, is the temperature of the interface circuit.

7. A system for identifying and handling abnormal power-on and power-off of a star service system gateway device, characterized in that, The method for identifying and processing abnormal power-on and power-off of the on-board system gateway device according to any one of claims 1 to 6 is adopted.

Images