Spacecraft on-orbit fault recovery system and recovery method

Abstract

The invention discloses a spacecraft on-orbit fault recovery system and recovery method. The fault recovery system comprises a relay module, a control module, a communication module, a first power supply module, a second power supply module and a third power supply module. The first power supply module, the second power supply module and the third power supply module are connected with a power supply bus, a first power output end of the first power supply module is connected with the relay module, a first power output end of the second power supply module is connected with the control module, and a first power output end of the third power supply module is connected with the communication module. At least one of the first power supply module, the second power supply module and the third power supply module comprises a second power output end, and the second power output end is used for outputting power when the voltage provided by the first power output end in the power supply module is smaller than a preset voltage value. And the control module and / or the communication module controls line connection between the power supply bus and the second power supply output end, and supplies power through the second power supply output end. The reliability of the spacecraft can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of spacecraft power supply and distribution, and in particular to a spacecraft on-orbit fault recovery system and recovery method. Background Art

[0002] Satellite spacecraft components are susceptible to space radiation exposure in space, and countless satellites have experienced component failures due to space radiation exposure. Therefore, current satellite power supply solutions rely on a primary / secondary hot standby system for backup, ensuring that failure of one power supply does not affect overall operation. However, due to the close proximity of the two power supplies during long-term in-orbit operation, damage from space radiation exposure can cause both power supplies to fail one after another, compromising spacecraft reliability. Summary of the Invention

[0003] The present invention provides a spacecraft on-orbit fault recovery system and recovery method to improve the reliability of the spacecraft.

[0004] According to one aspect of the present invention, there is provided a spacecraft on-orbit fault recovery system, comprising: a relay module, a control module, a communication module, a first power supply module, a second power supply module, and a third power supply module;

[0005] The input end of the first power supply module, the input end of the second power supply module and the input end of the third power supply module are all connected to the power supply bus, the first power output end of the first power supply module is connected to the relay module, the first power output end of the second power supply module is connected to the control module, and the first power output end of the third power supply module is connected to the communication module. At least one of the first power supply module, the second power supply module and the third power supply module includes a second power output end. When the voltage provided by the first power output end in the power supply module in which the second power output end is located is less than a preset voltage value, the control module and / or the communication module controls the line between the power supply bus and the second power output end to be connected, so that at least one of the first power supply module, the second power supply module and the third power supply module is supplied with power through the second power output end.

[0006] Optionally, the preset voltage value includes a first preset voltage value;

[0007] When the first power supply module includes a second power output terminal, the first power supply module includes a first power supply unit, a second power supply unit and a first switch unit;

[0008] The input end of the first power supply unit is connected to the input end of the first power supply module, the output end of the first power supply unit is connected to the first power output end of the first power supply module, and the first power supply unit is used to supply power to the relay module;

[0009] The input end of the second power supply unit is connected to the input end of the first power supply module through the first switch unit, the output end of the second power supply unit is connected to the second power supply output end of the first power supply module, and the control end of the first switch unit is connected to the control module and the communication module. The control module and / or the communication module is used to control the first switch unit to conduct when the first voltage provided by the first power supply unit is less than the first preset voltage value.

[0010] Optionally, the second power supply unit includes a first voltage converter and a first diode, and the first switch unit includes a first transistor;

[0011] The input end of the first voltage converter is connected to the first electrode of the first transistor, and the output end of the first voltage converter is connected to the output end of the second power supply unit through the first diode; the second electrode of the first transistor is connected to the power supply bus, and the control electrode of the first transistor is connected to the control module and the communication module.

[0012] Optionally, the preset voltage value includes a second preset voltage value;

[0013] When the second power supply module includes a second power output terminal, the second power supply module includes a third power supply unit, a fourth power supply unit, a second switch unit and a third switch unit;

[0014] The input end of the third power supply unit is connected to the input end of the second power supply module, the output end of the third power supply unit is connected to the first power output end of the second power supply module, and the third power supply unit is used to supply power to the control module in the form of active hot standby;

[0015] The second switch unit and the third switch unit are connected in parallel between the input end of the second power supply module and the input end of the fourth power supply unit, the output end of the fourth power supply unit is connected to the second power supply output end of the second power supply module, and the control end of the second switch unit and the control end of the third switch unit are both connected to the communication module; the communication module is used to control the second switch unit or the third switch unit to be turned on when the second voltage provided by the third power supply unit is less than the second preset voltage value.

[0016] Optionally, the fourth power supply unit includes a second voltage converter and a second diode, the second switch unit includes a second transistor, and the third switch unit includes a first relay;

[0017] The input end of the second voltage converter is respectively connected to the first electrode of the second transistor and the first end of the first relay, the output end of the second voltage converter is connected to the output end of the fourth power supply unit through the second diode, the second electrode of the second transistor and the second end of the first relay are both connected to the input end of the fourth power supply unit, and the control electrode of the second transistor and the control end of the first relay are connected to the communication module.

[0018] Optionally, the preset voltage value includes a third preset voltage value;

[0019] When the third power supply module includes a second power output terminal, the third power supply module includes a fifth power supply unit, a sixth power supply unit, a fourth switch unit and a fifth switch unit;

[0020] The input end of the fifth power supply unit is connected to the input end of the third power supply module, the output end of the fifth power supply unit is connected to the first power output end of the third power supply module, and the fifth power supply unit is used to supply power to the communication module in the form of active hot standby;

[0021] The fourth switch unit and the fifth switch unit are connected in parallel between the input end of the third power supply module and the input end of the sixth power supply unit, the output end of the sixth power supply unit is connected to the second power supply output end of the third power supply module, and the control end of the fourth switch unit and the control end of the fifth switch unit are both connected to the control module, and the control module is used to control the fourth switch unit or the fifth switch unit to be turned on when the third voltage provided by the fifth power supply unit is less than the third preset voltage value.

[0022] Optionally, the sixth power supply unit includes a third voltage converter and a third diode, the fourth switch unit includes a third transistor, and the fifth switch unit includes a second relay;

[0023] The input end of the third voltage converter is respectively connected to the first electrode of the third transistor and the first end of the second relay, the output end of the third voltage converter is connected to the output end of the sixth power supply unit through the third diode, the second electrode of the third transistor and the second end of the second relay are both connected to the input end of the sixth power supply unit, and the control electrode of the third transistor and the control end of the second relay are connected to the control module.

[0024] Optionally, the spacecraft on-orbit fault recovery system further includes a first voltage acquisition module, a second voltage acquisition module and a third voltage acquisition module;

[0025] The first voltage acquisition module is connected between the output end of the first power supply module and the ground, the output end of the first voltage acquisition module is connected to the control module and the communication module, and the first voltage acquisition module is used to acquire a first voltage at the output end of the first power supply module; the second voltage acquisition module is connected between the output end of the second power supply module and the ground, the output end of the second voltage acquisition module is connected to the control module and the communication module, and the second voltage acquisition module is used to acquire a second voltage at the output end of the second power supply module; the third voltage acquisition module is connected between the output end of the third power supply module and the ground, the output end of the third voltage acquisition module is connected to the control module and the communication module, and the third voltage acquisition module is used to acquire a third voltage at the output end of the third power supply module.

[0026] According to another aspect of the present invention, a method for recovering a spacecraft on-orbit fault is provided, which is applied to the spacecraft on-orbit fault recovery system provided by any embodiment of the present invention;

[0027] The method comprises:

[0028] When the voltage provided by the first power output end in the power supply module to which the second power output end belongs is less than the preset voltage value, the control module and / or the communication module controls the connection of the line between the power supply bus and the second power output end, so that at least one of the first power supply module, the second power supply module and the third power supply module is supplied with power through the second power output end.

[0029] Optionally, the first power supply module includes a second power output end, the first power supply module includes a first power supply unit, a second power supply unit and a first switch unit; the input end of the first power supply unit is connected to the input end of the first power supply module, and the output end of the first power supply unit is connected to the first power output end of the first power supply module; the input end of the second power supply unit is connected to the input end of the first power supply module through the first switch unit, the output end of the second power supply unit is connected to the second power output end of the first power supply module, and the control end of the first switch unit is connected to the control module and the communication module; and / or, the second power supply module includes a second power end; the second power supply module includes a third power supply unit, a fourth power supply unit, a second switch unit and a third switch unit; the input end of the third power supply unit is connected to the input end of the second power supply module, and the output end of the third power supply unit is connected to the first power output end of the second power supply module; the second switch unit and the third switch unit are connected in parallel between the input end of the second power supply module and the input end of the fourth power supply unit, the output end of the fourth power supply unit is connected to the second power output end of the second power supply module, and the control end of the second switch unit and the control end of the third switch unit are both connected to the communication module;

[0030] The method comprises:

[0031] After the communication module sends the telemetry signal to the remote sensing satellite ground station, receiving the control instruction sent by the remote sensing satellite ground station;

[0032] When the first voltage provided by the first power supply unit is lower than a first preset voltage value, the communication module controls the first switch unit to be turned on according to the control instruction, so that the second power supply unit supplies power;

[0033] and / or,

[0034] When the second voltage provided by the third power supply unit is less than a second preset voltage value, the communication module controls the second switch unit or the third switch unit to be turned on according to the control instruction, so that the fourth power supply unit supplies power.

[0035] The technical solution of the embodiment of the present invention is to set up a spacecraft on-orbit fault recovery system including a relay module, a control module, a communication module, a first power supply module, a second power supply module and a third power supply module, and to set up at least one of the first power supply module, the second power supply module and the third power supply module to include a second power supply output terminal. When the voltage provided by the first power supply output terminal in the power supply module including the second power supply output terminal is less than a preset voltage value, the control module and / or the communication module controls the power supply module to supply power through the second power supply output terminal to ensure the normal operation of the functional module connected to the power supply module. In summary, the embodiment of the present invention is to set up at least one of the first power supply module, the second power supply module and the third power supply module to include a second power supply output terminal, which is equivalent to adding a controlled second power supply output terminal on the basis of the original first power supply output terminal of the first power supply module, the second power supply module and the third power supply module. When the voltage provided by the first power supply output terminal in the power supply module including the second power supply output terminal is less than a preset voltage value, the control module and / or the communication module controls the power supply module to supply power through the second power supply output terminal to ensure the normal operation of the functional module connected to the power supply module, thereby improving the reliability of the spacecraft. At the same time, since the second power supply output terminal only starts to work when the voltage provided by the first power supply output terminal is less than the preset voltage value, and remains in the off state when the first power supply output terminal is powered normally, it can prevent the second power supply output terminal from aging and causing the problem of short life. In addition, compared with setting the second power supply output terminal to be in a power supply state at all times, it is less affected by the reduction of space radiation, and can further improve the reliability of the second power supply output terminal, thereby further improving the reliability of the spacecraft.

[0036] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present invention, nor is it intended to limit the scope of the present invention. Other features of the present invention will become readily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0038] Figure 1 A schematic structural diagram of a spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0039] Figure 2 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0040] Figure 3 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0041] Figure 4 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0042] Figure 5 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0043] Figure 6 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0044] Figure 7 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0045] Figure 8 A schematic structural diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention;

[0046] Figure 9 A flowchart of a method for recovering a spacecraft on-orbit fault provided by an embodiment of the present invention;

[0047] Figure 10 A flowchart of a method for recovering from a fault of a first power supply module provided by an embodiment of the present invention;

[0048] Figure 11 A flowchart of a second power supply module fault recovery method provided by an embodiment of the present invention;

[0049] Figure 12 This is a flowchart of a third power supply module fault recovery method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0050] In order to enable those skilled in the art to better understand the solutions of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of the present invention.

[0051] It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or precedence. It should be understood that the numbers used in this manner are interchangeable where appropriate so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and their variations are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or that are inherent to these processes, methods, products, or apparatus.

[0052] An embodiment of the present invention provides a spacecraft on-orbit fault recovery system. Figure 1 A schematic diagram of the structure of a spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 1 The spacecraft on-orbit fault recovery system includes: a relay module 10, a control module 20, a communication module 30, a first power supply module 40, a second power supply module 50 and a third power supply module 60.

[0053] Among them, the input end of the first power supply module 40, the input end of the second power supply module 50 and the input end of the third power supply module 60 are all connected to the power supply bus L, the first power output end of the first power supply module 40 is connected to the relay module 10, the first power output end of the second power supply module 50 is connected to the control module 20, and the first power output end of the third power supply module 60 is connected to the communication module 30. At least one of the first power supply module 40, the second power supply module 50 and the third power supply module 60 includes a second power output end. When the voltage provided by the first power output end in the power supply module in which it is located is less than a preset voltage value, the control module 20 and / or the communication module 30 controls the line between the power supply bus L and the second power output end to be connected, so that at least one of the first power supply module 40, the second power supply module 50 and the third power supply module 60 is supplied with power through the second power output end.

[0054] The relay module 10 includes a relay switch and its corresponding control circuit. As a type of load switch in a spacecraft, the relay switch maintains its on / off state during a power outage. The first power supply module 40 can be the spacecraft command power supply, which provides the relay command power for controlling the relay switch. This power supply is supplied to the relays separately. Here, the relay module 10 can refer to the power supply for all relays in the spacecraft. The control module 20 can be an integrated electronic standalone unit, serving as the core control system for the spacecraft. It can send various commands based on various operating conditions and control the spacecraft's status. It also receives all telemetry signals from the spacecraft, monitors the status of each unit in the spacecraft, and controls all spacecraft commands. The communication module 30 can be a measurement and control / data transmission unit, connecting the spacecraft to the remote sensing satellite ground station. If the measurement and control / data transmission unit fails, the spacecraft loses communication. Furthermore, the measurement and control / data transmission unit can send various control commands to control the spacecraft's status. Unlike a single integrated electronic unit, this measurement and control / data transmission unit generally only controls a few important commands. This prevents the unit from temporarily controlling the spacecraft in the event of an anomaly in the single integrated electronic unit, and then relinquishing control once the single integrated electronic unit recovers. The preset voltage value is the maximum voltage within the range where the power supply module cannot function properly, or the maximum voltage within the range where the functional modules connected to the power supply module cannot function properly. It is understood that if the voltage provided by the first power output terminal is less than the preset voltage value, this indicates that the power supply module cannot function properly, and the functional modules connected to the first power output terminal cannot function properly.

[0055] For ease of explanation, Figure 1 For example, two of the first power supply module 40, the second power supply module 50, and the third power supply module 60 include second power output terminals. This is not intended to limit the present invention. For example, if the first power supply module 40 and the second power supply module 50 both include second power output terminals, then the control terminal of the first power supply module 40 is connected to the control module 20 and the communication module 30, and the control terminal of the second power supply module 50 is connected to the communication module 30.

[0056] Specifically, the control module 20 and the communication module 30 can detect in real time the voltages provided by the first power output terminal of the first power supply module 40, the first power output terminal of the second power supply module 50, and the first power output terminal of the third power supply module 60. When the voltage provided by the first power output terminal of a power supply module that includes both the first power output terminal and the second power output terminal is less than a preset voltage value, the control module 20 and / or the communication module 30 outputs a control signal so that the line between the power supply bus L and the second power output terminal of the power supply module is connected. Exemplarily, when the voltage provided by the first power output terminal of the first power supply module 40 is less than a preset voltage value, the control module 20 and / or the communication module 30 outputs a control signal so that the line between the power supply bus L and the second power output terminal of the first power supply module 40 is connected, so that the first power supply module 40 supplies power to the relay module 10 through the second power output terminal. When the voltage provided by the first power output terminal of the second power supply module 50 is less than a preset voltage value, the communication module 30 outputs a control signal to connect the line between the power supply bus L and the second power output terminal of the second power supply module 50, so that the second power supply module 50 supplies power to the control module 20 through the second power output terminal. When the voltage provided by the first power output terminal of the first power supply module 40 and the first power output terminal of the second power supply module 50 are both less than the preset voltage values, the communication module 30 outputs a control signal to connect the line between the power supply bus L and the second power output terminal of the first power supply module 40 and the second power output terminal of the second power supply module 50, respectively, so that the first power supply module 40 supplies power to the relay module 10 through the second power output terminal, and the second power supply module 50 supplies power to the control module 20 through the second power output terminal.

[0057] The technical solution of the embodiment of the present invention is to provide a spacecraft on-orbit fault recovery system including a relay module 10, a control module 20, a communication module 30, a first power supply module 40, a second power supply module 50, and a third power supply module 60, wherein at least one of the first power supply module 40, the second power supply module 50, and the third power supply module 60 includes a second power output terminal. When the voltage provided by the first power output terminal of a power supply module including the second power output terminal is less than a preset voltage value, the control module 20 and / or the communication module 30 controls the power supply module to supply power through the second power output terminal, thereby ensuring the normal operation of the functional modules connected to the power supply module. In summary, the embodiments of the present invention provide at least one of the first power supply module 40, the second power supply module 50, and the third power supply module 60 with a second power output terminal. This is equivalent to adding a controlled second power output terminal to the existing first power output terminals of the first power supply modules 40, the second power supply module 50, and the third power supply module 60. In a power supply module including a second power output terminal, when the voltage provided by the first power output terminal is less than a preset voltage value, the control module 20 and / or the communication module 30 controls the power supply module to supply power through the second power output terminal, ensuring the normal operation of the functional modules connected to the power supply module, thereby improving the reliability of the spacecraft. Furthermore, because the second power output terminal only begins to operate when the voltage provided by the first power output terminal is less than a preset voltage value and remains off when the first power output terminal is supplying power normally, the second power output terminal can be prevented from aging and resulting in a shortened lifespan. Furthermore, compared to a case where the second power output terminal is always in a power supply state, the second power output terminal is less susceptible to the effects of space radiation, further improving the reliability of the second power output terminal, thereby further improving the reliability of the spacecraft.

[0058] It will be understood that in the above embodiment, the first power supply module 40 and the second power supply module 50 include a second power output terminal. In other embodiments, the first power supply module 40 and the third power supply module 60 may also include a second power output terminal. For example, when the voltage provided by the first power output terminal of the third power supply module 60 is less than a preset voltage value, the control module 20 outputs a control signal to connect the line between the power supply bus L and the second power output terminal of the third power supply module 60, so that the third power supply module 60 supplies power to the communication module 30 through the second power output terminal. When the voltage provided by the first power output terminal of the first power supply module 40 and the first power output terminal of the third power supply module 60 are both less than the preset voltage value, the control module 20 outputs a control signal to connect the power supply bus L to the line between the second power output terminal of the first power supply module 40 and the second power output terminal of the third power supply module 60, respectively, so that the first power supply module 40 supplies power to the relay module 10 through the second power output terminal, and the third power supply module 60 supplies power to the communication module 30 through the second power output terminal.

[0059] Based on the above embodiments, in another embodiment, the second power supply module 50 and the third power supply module 60 may be provided to include a second power supply output terminal. For the specific control process of the second power supply module 50 and the third power supply module 60 provided with the second power supply output terminal, please refer to the description of any of the above embodiments.

[0060] Figure 2 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 2 Based on the above embodiments, optionally, only the first power supply module 40 may include the second power output terminal, and both the second power supply module 50 and the third power supply module 60 may include only the first power output terminal. However, this is not intended to limit the present invention.

[0061] In other embodiments, only the second power supply module 50 may include a second power output terminal, while both the first power supply module 40 and the third power supply module 60 include only a first power output terminal. Alternatively, only the third power supply module 60 may include a second power output terminal, while both the first power supply module 40 and the second power supply module 50 include only a first power output terminal. The specific control process for a power supply module provided with a second output terminal is described in the description of any of the above embodiments and will not be repeated here.

[0062] Figure 3 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 3Based on the above embodiment, the preset voltage value optionally includes a first preset voltage value. The first preset voltage value is a maximum voltage value within a range where the first power supply module 40 cannot supply power normally, or a maximum voltage value within a range where the relay module 10 cannot operate normally. The range where the first power supply module 40 cannot supply power normally is, for example, 0-0.5V, and the range where the relay module 10 cannot operate normally is, for example, 0-0.5V.

[0063] Specifically, when the first power supply module 40 includes the second power output terminal, the first power supply module 40 includes a first power supply unit 41 , a second power supply unit 42 and a first switch unit 43 .

[0064] The input end of the first power supply unit 41 is connected to the input end of the first power supply module 40, and the output end of the first power supply unit 41 is connected to the first power supply output end of the first power supply module 40. The first power supply unit 41 is used to supply power to the relay module 10 in the form of active-standby hot backup. The input end of the second power supply unit 42 is connected to the input end of the first power supply module 40 through the first switch unit 43, and the output end of the second power supply unit 42 is connected to the second power supply output end of the first power supply module 40. The control end of the first switch unit 43 is connected to the control module 20 and the communication module 30. The control module 20 and / or the communication module 30 is used to control the first switch unit 43 to conduct when the first voltage provided by the first power supply unit 41 is less than the first preset voltage value.

[0065] In this embodiment, the power supply bus L includes a first bus L1 and a second bus L2. The input end of each power supply unit includes a first input end and a second input end. The first input end of each power supply unit is connected to the first bus L1, and the second input end of each power supply unit is connected to the second bus L2. Exemplarily, the voltage transmitted on the first bus L1 is greater than the voltage transmitted on the second bus L2.

[0066] The first power supply unit 41 can serve as the main power supply for the relay module 10, and the second power supply unit 42 can serve as a backup power supply for the relay module 10. Specifically, the control module 20 and / or the communication module 30 receives a first voltage at the output end of the first power supply unit 41, and when the first voltage is less than a first preset voltage value, the control module 20 and / or the communication module 30 outputs a control signal to turn on the first switch unit 43, thereby connecting the line between the power supply bus L and the second power supply unit 42, and supplying power to the relay module 10 through the second power supply unit 42.

[0067] It is understandable that the initial state of the first switch unit 43 is the off state. The reason is that the radiation impact on the on-orbit device in the off state is much smaller than that on the device with long-term power supply, so the reliability is high.

[0068] The technical solution of the embodiment of the present invention is to connect a second power supply unit 42 that is disconnected from the power supply for a long time in parallel on the basis of the original first power supply unit 41, and control the first switch unit 43 to be turned on when the first voltage provided by the first power supply unit 41 is insufficient to ensure the normal operation of the relay module 10 or the first power supply unit 41 is abnormal through the control module 20 and / or the communication module 30, so that the power supply bus L can normally supply power to the relay module 10 through the second power supply unit 42. The first power supply module 40 is of vital importance as the command power supply of the spacecraft and controls the power distribution switch of the spacecraft platform and payload. By setting the first power supply module 40 to be connected in parallel with the second power supply unit 42 that is disconnected from the power supply for a long time on the basis of the original first power supply unit 41, it is possible to avoid the problem that the spacecraft cannot complete the mission normally when the first power supply unit 41 fails, and the problem that the battery energy is discharged and the spacecraft is damaged due to energy imbalance.

[0069] Continue to see Figure 3 Based on the above embodiments, optionally, the second power supply unit 42 includes a first voltage converter 421 and a first diode D1, and the first switch unit 43 includes a first transistor Q1. The input end of the first voltage converter 421 is connected to the first electrode of the first transistor Q1, and the output end of the first voltage converter 421 is connected to the output end of the second power supply unit 42 via the first diode D1. The second electrode of the first transistor Q1 is connected to the power supply bus L, specifically the first bus L1, and the control electrode of the first transistor Q1 is connected to the control module 20 and the communication module 30.

[0070] Optionally, the first power supply unit 41 includes a fourth voltage converter 411, a fifth voltage converter 412, a fourth diode D4, and a fifth diode D5. The input end of the fourth voltage converter 411 and the input end of the fifth voltage converter 412 are both connected to the input end of the first power supply unit 41, the output end of the fourth voltage converter 411 is connected to the output end of the first power supply unit 41 via the fourth diode D4, and the output end of the fifth voltage converter 412 is connected to the output end of the first power supply unit 41 via the fifth diode D5.

[0071] The fourth voltage converter 411 , the fifth voltage converter 412 , and the first voltage converter 421 all include DCDC converters, and the fourth diode D4 , the fifth diode D5 , and the first diode D1 are used for isolation.

[0072] Specifically, the fourth voltage converter 411 and the fifth voltage converter 412 jointly power the relay module 10 through the fourth diode D4 and the fifth diode D5, and when one of the fourth voltage converter 411 and the fifth voltage converter 412 is abnormal, the diode isolation will not cause the other voltage converter to have power supply abnormalities.

[0073] When at least one of the fourth voltage converter 411 and the fifth voltage converter 412 is supplying power normally, the first voltage output by the first power supply unit 41 is greater than a fourth preset voltage value, which is, for example, 2V. The control module 20 and / or the communication module 30 outputs a control signal to keep the first transistor Q1 in the off state. The fourth preset voltage value represents the minimum voltage value within the normal power supply range of the first power supply module 40, or the minimum voltage value within the normal operating range of the relay module 10. The normal power supply range of the first power supply module 40 is, for example, 2-5V, and the normal operating range of the relay module 10 is, for example, 2-5V.

[0074] When both the fourth voltage converter 411 and the fifth voltage converter 412 are abnormal, the voltage output by the first power supply unit 41 is less than a first preset voltage value, such as 0.5 V. The control module 20 and / or the communication module 30 outputs a control signal to turn on the first transistor Q1, so that the power supply bus L normally supplies power to the relay module 10 through the first voltage converter 421.

[0075] The technical solution of the embodiments of the present invention, by providing a first transistor Q1 and a backup first voltage converter 421, can address the problem in conventional spacecraft where failures in both the primary and backup power sources (fourth voltage converter 411 and fifth voltage converter 412) originally used to power the relay module 10 can affect spacecraft reliability. Furthermore, compared to solutions that add multiple backup power sources in addition to the primary and backup hot backup power sources, the addition of the first voltage converter 421, which is initially disconnected, can save costs, reduce power consumption, and reduce the size of the spacecraft. Furthermore, by providing the first switch unit 43 with the first transistor Q1, failures in the first power supply unit 41 can prevent power supply anomalies to the relay module 10, leading to failure to properly control the relay switch and thus affecting spacecraft reliability.

[0076] Continue to see Figure 3 Optionally, the first switch unit 43 further includes a first resistor R1, a second resistor R2, and a third resistor R3. The first resistor R1 is connected between the control electrode of the first transistor Q1 and the first end of the third resistor R3. The second resistor R2 is connected between the first electrode of the first transistor Q1 and the first end of the third resistor R3. The second end of the third resistor R3 is connected to the control module 20 and the communication module 30. The first resistor R1 is used to limit the control electrode current of the first transistor Q1, the second resistor R2 is used for feedback of the first electrode of the first transistor Q1, and the third resistor R3 is a pull-down resistor.

[0077] Figure 4 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 4 , based on the above embodiments, optionally, the preset voltage value includes a second preset voltage value. The second preset voltage value is the maximum voltage value in the range where the second power supply module 50 cannot supply power normally, or the maximum voltage value in the range where the control module 20 cannot work normally. The range where the second power supply module 50 cannot supply power normally may be the same as or different from the range where the first power supply module 40 cannot supply power normally; then, the second preset voltage value may be the same as or different from the first preset voltage value. For example, the second preset voltage value is the same as the first preset voltage value.

[0078] Specifically, when the second power supply module 50 includes a second power output terminal, the second power supply module 50 includes a third power supply unit 51 , a fourth power supply unit 52 , a second switch unit 53 and a third switch unit 54 .

[0079] The input end of the third power supply unit 51 is connected to the input end of the second power supply module 50, and the output end of the third power supply unit 51 is connected to the first power output end of the second power supply module 50. The third power supply unit 51 is used to supply power to the control module 20 in the form of active-standby hot backup. The second switch unit 53 and the third switch unit 54 are connected in parallel between the input end of the second power supply module 50 and the input end of the fourth power supply unit 52. The output end of the fourth power supply unit 52 is connected to the second power output end of the second power supply module 50. The control end of the second switch unit 53 and the control end of the third switch unit 54 are both connected to the communication module 30; the communication module 30 is used to control the second switch unit 53 or the third switch unit 54 to be turned on when the second voltage provided by the third power supply unit 51 is less than the second preset voltage value.

[0080] The third power supply unit 51 can serve as the main power supply for the control module 20, and the fourth power supply unit 52 serves as a backup power supply for the control module 20. Specifically, the control module 20 and the communication module 30 receive the second voltage at the output end of the third power supply unit 51. When the second voltage is less than a second preset voltage value, the communication module 30 outputs a control signal to turn on the second switch unit 53 or the third switch unit 54, thereby connecting the line between the power supply bus L and the fourth power supply unit 52, and supplying power to the control module 20 through the fourth power supply unit 52.

[0081] It is understandable that the initial states of the second switch unit 53 and the third switch unit 54 are off states, so as to improve the reliability of the fourth power supply unit 52 .

[0082] The technical solution of the embodiment of the present invention is to connect a fourth power supply unit 52 that is out of power for a long time in parallel on the basis of the original third power supply unit 51. When the second voltage provided by the third power supply unit 51 is insufficient to ensure the normal operation of the control module 20 or the power supply of the third power supply unit 51 is abnormal, the communication module 30 controls the second switch unit 53 or the third switch unit 54 to be turned on, so that the power supply bus L can normally supply power to the control module 20 through the fourth power supply unit 52, thereby improving the reliability of the spacecraft.

[0083] Continue to see Figure 4 Based on the above embodiments, optionally, the fourth power supply unit 52 includes a second voltage converter 521 and a second diode D2, the second switch unit 53 includes a second transistor Q2, and the third switch unit 54 includes a first relay JD1. The input end of the second voltage converter 521 is respectively connected to the first electrode of the second transistor Q2 and the first end of the first relay JD1. The output end of the second voltage converter 521 is connected to the output end of the fourth power supply unit 52 via the second diode D2. The second electrode of the second transistor Q2 and the second end of the first relay JD1 are both connected to the input end of the fourth power supply unit 52. The control electrode of the second transistor Q2 and the control end of the first relay JD1 are connected to the communication module 30.

[0084] Optionally, the third power supply unit 51 includes a sixth voltage converter 511, a seventh voltage converter 512, a sixth diode D6, and a seventh diode D7. The input end of the sixth voltage converter 511 and the input end of the seventh voltage converter 512 are both connected to the input end of the third power supply unit 51, the output end of the sixth voltage converter 511 is connected to the output end of the third power supply unit 51 via the sixth diode D6, and the output end of the seventh voltage converter 512 is connected to the output end of the third power supply unit 51 via the seventh diode D7.

[0085] The sixth voltage converter 511 , the seventh voltage converter 512 , and the second voltage converter 521 all include DCDC converters, and the sixth diode D6 , the seventh diode D7 , and the second diode D2 are used for isolation.

[0086] Specifically, the sixth voltage converter 511 and the seventh voltage converter 512 jointly power the control module 20 through the sixth diode D6 and the seventh diode D7, and when one of the sixth voltage converter 511 and the seventh voltage converter 512 is abnormal, the diode isolation will not cause the other voltage converter to have power supply abnormality.

[0087] When at least one of the sixth voltage converter 511 and the seventh voltage converter 512 is supplying power normally, the second voltage output by the third power supply unit 51 is greater than the fifth preset voltage value. The communication module 30 outputs a control signal so that the second transistor Q2 and the first relay JD1 remain in the off state. The fifth preset voltage value is the minimum voltage value in the normal power supply range of the second power supply module 50, or the minimum voltage value in the normal working range of the control module 20. The normal power supply range of the second power supply module 50 can be the same as or different from the normal power supply range of the first power supply module 40; then, the fifth preset voltage value can be the same as or different from the fourth preset voltage value. For example, the fifth preset voltage value is the same as the fourth preset voltage value.

[0088] When both the sixth voltage converter 511 and the seventh voltage converter 512 are abnormal, the second voltage output by the third power supply unit 51 is less than a second preset voltage value, for example, 0.5 V. The communication module 30 outputs a control signal to turn on the second transistor Q2 or the first relay JD1, allowing the power supply bus L to normally supply power to the control module 20 through the second voltage converter 521. For example, when the first power supply module 40 is normal, the communication module 30 can issue a control instruction to control the state of the first relay JD1; when the first power supply module 40 is abnormal, the communication module 30 can issue a control instruction to control the state of the second transistor Q2.

[0089] The technical solution of the embodiments of the present invention, by providing a second transistor Q2, a first relay JD1, and a backup second voltage converter 521, can address the problem in conventional spacecraft where failures in both the primary and backup power sources (the sixth voltage converter 511 and the seventh voltage converter 512) originally used to power the control module 20 can affect spacecraft reliability. Furthermore, compared to solutions that add multiple backup power sources in addition to the primary and backup hot backup power sources, the addition of the second voltage converter 521, which is initially disconnected, can save costs, reduce power consumption, and reduce the size of the spacecraft. Furthermore, by providing the second switch unit 53 with the second transistor Q2 and the third switch unit 54 with the first relay JD1, the switch units can be backed up in addition to the backup power source, further improving their reliability. This can prevent a failure in the third power supply unit 51 from causing malfunctions in the control module 20, thereby impacting spacecraft reliability.

[0090] Continue to see Figure 4Optionally, the second switch unit 53 further includes a fourth resistor R4, a fifth resistor R5, and a sixth resistor R6. The fourth resistor R4 is connected between the control electrode of the second transistor Q2 and the first end of the sixth resistor R6. The fifth resistor R5 is connected between the first electrode of the second transistor Q2 and the first end of the sixth resistor R6. The second end of the sixth resistor R6 is connected to the communication module 30. The fourth resistor R4 is used to limit the current of the control electrode of the second transistor Q2. The fifth resistor R5 is used for feedback of the first electrode of the second transistor Q2. The sixth resistor R6 is a pull-down resistor.

[0091] Figure 5 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 5 Based on the above embodiments, optionally, the first power supply module 40, the second power supply module 50, and the third power supply module 60 all include a second power output terminal. When the third power supply module 60 includes the second power output terminal, the control terminal of the third power supply module 60 is connected to the control module 20.

[0092] Figure 6 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 6 On the basis of the above embodiments, optionally, the preset voltage value includes a third preset voltage value. The third preset voltage value is the maximum voltage value in the range where the third power supply module 60 cannot supply power normally, or the maximum voltage value in the range where the communication module 30 cannot operate normally. The range where the third power supply module 60 cannot supply power normally may be the same as or different from the range where the first power supply module 40 cannot supply power normally; then, the third preset voltage value may be the same as or different from the first preset voltage value. For example, the third preset voltage value is the same as the first preset voltage value.

[0093] Specifically, when the third power supply module 60 includes the second power output terminal, the third power supply module 60 includes a fifth power supply unit 61 , a sixth power supply unit 62 , a fourth switch unit 63 and a fifth switch unit 64 .

[0094] The input end of the fifth power supply unit 61 is connected to the input end of the third power supply module 60, and the output end of the fifth power supply unit 61 is connected to the first power output end of the third power supply module 60. The fifth power supply unit 61 is used to power the communication module 30 in the form of active-standby hot backup. The fourth switch unit 63 and the fifth switch unit 64 are connected in parallel between the input end of the third power supply module 60 and the input end of the sixth power supply unit 62. The output end of the sixth power supply unit 62 is connected to the second power output end of the third power supply module 60. The control end of the fourth switch unit 63 and the control end of the fifth switch unit 64 are both connected to the control module 20. The control module 20 is used to control the fourth switch unit 63 or the fifth switch unit 64 to be turned on when the third voltage provided by the fifth power supply unit 61 is less than the third preset voltage value.

[0095] The fifth power supply unit 61 can serve as the main power supply for the communication module 30, and the sixth power supply unit 62 serves as a backup power supply for the communication module 30. Specifically, the control module 20 and the communication module 30 receive the third voltage at the output end of the fifth power supply unit 61. When the third voltage is less than a third preset voltage value, the control module 20 outputs a control signal to turn on the fourth switch unit 63 or the fifth switch unit 64, thereby connecting the line between the power supply bus L and the sixth power supply unit 62, and powering the communication module 30 through the sixth power supply unit 62.

[0096] It is understandable that the initial states of the fourth switch unit 63 and the fifth switch unit 64 are off states, so as to improve the reliability of the sixth power supply unit 62 .

[0097] The technical solution of the embodiment of the present invention is to connect a sixth power supply unit 62 that is powered off for a long time in parallel on the basis of the original fifth power supply unit 61. When the third voltage provided by the fifth power supply unit 61 is insufficient to ensure the normal operation of the communication module 30 or the power supply of the fifth power supply unit 61 is abnormal, the control module 20 controls the fourth switch unit 63 or the fifth switch unit 64 to be turned on, so that the power supply bus L can normally supply power to the communication module 30 through the sixth power supply unit 62, thereby improving the reliability of the spacecraft.

[0098] Continue to see Figure 6Based on the above embodiments, optionally, the sixth power supply unit 62 includes a third voltage converter 621 and a third diode D3, the fourth switch unit 63 includes a third transistor Q3, and the fifth switch unit 64 includes a second relay JD2; the input end of the third voltage converter 621 is respectively connected to the first electrode of the third transistor Q3 and the first end of the second relay JD2, the output end of the third voltage converter 621 is connected to the output end of the sixth power supply unit 62 through the third diode D3, the second electrode of the third transistor Q3 and the second end of the second relay JD2 are both connected to the input end of the sixth power supply unit 62, and the control electrode of the third transistor Q3 and the control end of the second relay JD2 are connected to the control module 20.

[0099] Optionally, the fifth power supply unit 61 includes an eighth voltage converter 611, a ninth voltage converter 612, an eighth diode D8, and a ninth diode D9. The input end of the eighth voltage converter 611 and the input end of the ninth voltage converter 612 are both connected to the input end of the fifth power supply unit 61, the output end of the eighth voltage converter 611 is connected to the output end of the fifth power supply unit 61 via the eighth diode D8, and the output end of the ninth voltage converter 612 is connected to the output end of the fifth power supply unit 61 via the ninth diode D9.

[0100] The eighth voltage converter 611 , the ninth voltage converter 612 and the third voltage converter 621 all include DCDC converters, and the eighth diode D8 , the ninth diode D9 and the third diode D3 are used for isolation.

[0101] Specifically, the eighth voltage converter 611 and the ninth voltage converter 612 jointly power the communication module 30 through the eighth diode D8 and the ninth diode D9. When one of the eighth voltage converter 611 and the ninth voltage converter 612 is abnormal, the diode isolation will not cause the other voltage converter to have power supply abnormality.

[0102] When at least one of the eighth voltage converter 611 and the ninth voltage converter 612 is supplying power normally, the third voltage output by the fifth power supply unit 61 is greater than the sixth preset voltage value. The control module 20 outputs a control signal so that the third transistor Q3 and the second relay JD2 remain in the off state. The sixth preset voltage value is the minimum voltage value in the normal power supply range of the third power supply module 60, or the minimum voltage value in the normal working range of the communication module 30. The normal power supply range of the third power supply module 60 can be the same as or different from the normal power supply range of the first power supply module 40. In this case, the sixth preset voltage value can be the same as or different from the fourth preset voltage value. For example, the sixth preset voltage value is the same as the fourth preset voltage value.

[0103] When both the eighth voltage converter 611 and the ninth voltage converter 612 are abnormal, the third voltage output by the fifth power supply unit 61 is less than a third preset voltage value, for example, 0.5 V. The control module 20 outputs a control signal to turn on the third transistor Q3 or the second relay JD2, allowing the power supply bus L to normally supply power to the communication module 30 via the third voltage converter 621. For example, when the first power supply module 40 is operating normally, the control module 20 can issue a control instruction to control the state of the second relay JD2; when the first power supply module 40 is abnormal, the control module 20 can issue a control instruction to control the state of the third transistor Q3.

[0104] The technical solution of the embodiments of the present invention, by providing a third transistor Q3, a second relay JD2, and a backup third voltage converter 621, can address the problem in conventional spacecraft where failures in both the primary and backup power sources (eighth voltage converter 611 and ninth voltage converter 612) originally used to power the communication module 30 can lead to spacecraft failures, thereby impacting spacecraft reliability. Furthermore, compared to solutions that add multiple backup power sources in addition to the primary and backup hot backup power sources, the addition of the third voltage converter 621, initially disconnected, can save costs, reduce power consumption, and reduce the size of the spacecraft. Furthermore, by providing the fourth switch unit 63 with the third transistor Q3 and the fifth switch unit 64 with the second relay JD2, the switch units can be backed up in addition to the backup power source, further improving their reliability. This can prevent a failure in the fifth power supply unit 61 from causing malfunctions in the communication module 30, thereby impacting spacecraft reliability.

[0105] Continue to see Figure 6 Optionally, the fourth switch unit 63 further includes a seventh resistor R7, an eighth resistor R8, and a ninth resistor R9. The seventh resistor R7 is connected between the control electrode of the third transistor Q3 and the first end of the ninth resistor R9. The eighth resistor R8 is connected between the first electrode of the third transistor Q3 and the first end of the ninth resistor R9. The second end of the ninth resistor R9 is connected to the control module 20. The seventh resistor R7 is used to limit the control electrode current of the third transistor Q3, the eighth resistor R8 is used for feedback to the first electrode of the third transistor Q3, and the ninth resistor R9 is a pull-down resistor.

[0106] Optionally, based on the above embodiments, in one embodiment, the first relay JD1 includes at least two switches, the two switches being connected in parallel between the first busbar L1 and the input end of the second voltage converter 521, and the control ends of the two switches being connected to the communication module 30. By providing at least two switches, redundancy can be achieved in the line between the first busbar L1 and the input end of the second voltage converter 521, thereby improving reliability. And / or, the second relay JD2 includes at least two switches, the two switches being connected in parallel between the first busbar L1 and the input end of the third voltage converter 621, and the control ends of the two switches being connected to the communication module 30. By providing at least two switches, redundancy can be achieved in the line between the first busbar L1 and the input end of the third voltage converter 621, thereby improving reliability.

[0107] Alternatively, in another embodiment, the third switch unit 54 may include at least one first relay JD1, for example, two first relays JD1, to provide a backup for the first relay JD1 and further improve reliability. And / or, the fifth switch unit 64 may include at least one second relay JD2, for example, two second relays JD2, to provide a backup for the second relay JD2 and further improve reliability.

[0108] Optionally, the first transistor Q1 , the second transistor Q2 and the third transistor Q3 may all be MOS transistors.

[0109] Figure 7 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 7 On the basis of the above embodiments, optionally, the spacecraft on-orbit fault recovery system further includes a first voltage acquisition module 70 , a second voltage acquisition module 80 and a third voltage acquisition module 90 .

[0110] Among them, the first voltage acquisition module 70 is connected between the output end of the first power supply module 40 and the ground, the output end of the first voltage acquisition module 70 is connected to the control module 20 and the communication module 30, and the first voltage acquisition module 70 is used to collect the first voltage of the output end of the first power supply module 40; the second voltage acquisition module 80 is connected between the output end of the second power supply module 50 and the ground, the output end of the second voltage acquisition module 80 is connected to the control module 20 and the communication module 30, and the second voltage acquisition module 80 is used to collect the second voltage of the output end of the second power supply module 50; the third voltage acquisition module 90 is connected between the output end of the third power supply module 60 and the ground, the output end of the third voltage acquisition module 90 is connected to the control module 20 and the communication module 30, and the third voltage acquisition module 90 is used to collect the third voltage of the output end of the third power supply module 60.

[0111] Figure 7For example, the first power supply module 40 , the second power supply module 50 and the third power supply module 60 all include a second power supply terminal.

[0112] Specifically, the control module 20 and the communication module 30 can receive in real time the first voltage collected by the first voltage acquisition module 70, the second voltage collected by the second voltage acquisition module 80, and the third voltage collected by the third voltage acquisition module 90. Based on the first voltage being less than a first preset voltage value, the control module 20 and / or the communication module 30 determines that the first power output terminal of the first power supply module 40 has failed. The control module 20 and / or the communication module 30 can promptly control the first power supply module 40 to supply power to the relay module 10 via the second power output terminal. Based on the first voltage being greater than a fourth preset voltage value, the control module 20 and / or the communication module 30 determines that the first power output terminal of the first power supply module 40 is supplying power normally.

[0113] In addition, the communication module 30 determines that the first power output end of the second power supply module 50 has failed based on the second voltage being less than the second preset voltage value. The communication module 30 can promptly control the second power supply module 50 to supply power to the control module 20 through the second power output end; and when the second voltage is greater than the fifth preset voltage value, it is determined that the first power output end of the second power supply module 50 is supplying power normally.

[0114] In addition, the control module 20 determines that the first power output end of the third power supply module 60 has failed based on the third voltage being less than the third preset voltage value, and the control module 20 can promptly control the third power supply module 60 to supply power to the communication module 30 through the second power output end; and when the third voltage is greater than the sixth preset voltage value, it is determined that the first power output end of the third power supply module 60 is supplying power normally.

[0115] Furthermore, when the first voltage collected by the first voltage acquisition module 70 is less than the first preset voltage value, and the second voltage collected by the second voltage acquisition module 80 is less than the second preset voltage value, the communication module 30 can promptly control the first power supply module 40 to power the relay module 10 through the second power supply output end, and control the second power supply module 50 to power the control module 20 through the second power supply output end.

[0116] Furthermore, when the first voltage collected by the first voltage acquisition module 70 is less than the first preset voltage value, and the third voltage collected by the third voltage acquisition module 90 is less than the third preset voltage value, the control module 20 can promptly control the first power supply module 40 to power the relay module 10 through the second power output end, and control the third power supply module 60 to power the communication module 30 through the second power output end.

[0117] According to the technical solution of the embodiment of the present invention, the control module 20 and / or the communication module 30 can dynamically adjust the first power supply module 40, the second power supply module 50 and the third power supply module 60 based on real-time voltage data to ensure continuous power supply to each functional module.

[0118] Figure 8 A schematic diagram of another spacecraft on-orbit fault recovery system provided by an embodiment of the present invention is shown in FIG. Figure 8 Based on the above embodiments, optionally, a spacecraft on-orbit fault recovery system includes a relay module 10, a control module 20, a communication module 30, a first power supply module 40, a second power supply module 50, a third power supply module 60, a first voltage acquisition module 70, a second voltage acquisition module 80, and a third voltage acquisition module 90. The first power supply module 40, the second power supply module 50, and the third power supply module 60 all include a second power output terminal.

[0119] The working process of the spacecraft on-orbit fault recovery system is as follows: the control module 20 and the communication module 30 can receive the first voltage collected by the first voltage acquisition module 70, the second voltage collected by the second voltage acquisition module 80 and the third voltage collected by the third voltage acquisition module 90 in real time.

[0120] When the first voltage is greater than the fourth preset voltage value, the control module 20 and / or the communication module 30 determines that at least one of the fourth voltage converter 411 and the fifth voltage converter 412 is supplying power normally, and the control module 20 and / or the communication module 30 outputs a control signal to keep the first transistor Q1 in the off state. When the first voltage is less than the first preset voltage value, the control module 20 and / or the communication module 30 determines that both the fourth voltage converter 411 and the fifth voltage converter 412 are supplying power abnormally, and the control module 20 and / or the communication module 30 outputs a control signal to turn on the first transistor Q1, connecting the line between the first bus L1 and the input end of the first voltage converter 421, thereby powering the relay module 10 through the first voltage converter 421.

[0121] When the second voltage is greater than the fifth preset voltage value, the control module 20 and / or the communication module 30 determines that at least one of the sixth voltage converter 511 and the seventh voltage converter 512 is supplying power normally, and the communication module 30 outputs a control signal to keep the second transistor Q2 and the first relay JD1 in the off state. When the second voltage is less than the second preset voltage value, the communication module 30 determines that both the sixth voltage converter 511 and the seventh voltage converter 512 are supplying power abnormally, and the communication module 30 outputs a control signal to turn on the second transistor Q2 or the first relay JD1, connecting the line between the first bus L1 and the input end of the second voltage converter 521, thereby supplying power to the control module 20 through the second voltage converter 521.

[0122] When the third voltage is greater than the sixth preset voltage value, the control module 20 and / or the communication module 30 determines that at least one of the eighth voltage converter 611 and the ninth voltage converter 612 is supplying power normally, and the control module 20 outputs a control signal to keep the third transistor Q3 and the second relay JD2 in the off state. When the third voltage is less than the third preset voltage value, the control module 20 determines that both the eighth voltage converter 611 and the ninth voltage converter 612 are supplying power abnormally, and the control module 20 outputs a control signal to turn on the third transistor Q3 or the second relay JD2, connecting the line between the first bus L1 and the input end of the third voltage converter 621, thereby supplying power to the communication module 30 through the third voltage converter 621.

[0123] When the first voltage is less than the first preset voltage value and the second voltage is less than the second preset voltage value, the communication module 30 outputs a control signal to turn on the first transistor Q1 and turn on the second transistor Q2 or the first relay JD1, thereby powering the relay module 10 through the first voltage converter 421 and powering the control module 20 through the second voltage converter 521.

[0124] When the first voltage is less than the first preset voltage value and the third voltage is less than the third preset voltage value, the control module 20 outputs a control signal to turn on the first transistor Q1 and the third transistor Q3 or the second relay JD2, thereby powering the relay module 10 through the first voltage converter 421 and powering the communication module 30 through the third voltage converter 621.

[0125] Continue to see Figure 8 Optionally, the first voltage acquisition module 70 includes a tenth resistor R10 and an eleventh resistor R11, and a common end of the tenth resistor R10 and the eleventh resistor R11 serves as the output end of the first voltage acquisition module 70. The second voltage acquisition module 80 includes a twelfth resistor R12 and a thirteenth resistor R13, and a common end of the twelfth resistor R12 and the thirteenth resistor R13 serves as the output end of the second voltage acquisition module 80. The third voltage acquisition module 90 includes a fourteenth resistor R14 and a fifteenth resistor R15, and a common end of the fourteenth resistor R14 and the fifteenth resistor R15 serves as the output end of the third voltage acquisition module 90.

[0126] The normal power supply range and the abnormal power supply range of each power supply module can be set by configuring the resistance value of the resistor. For example, the normal power supply range of each power supply module can be 2-5V, and the abnormal power supply range of each power supply module can be 0-0.5V.

[0127] In summary, the embodiments of the present invention solve the problem of spacecraft failure when both the main and backup power supply modules in the spacecraft are abnormal. By setting the backup power supply with an initial state of off, the reliability is improved compared with multiple backups, which can save costs, reduce power consumption, and reduce volume. Moreover, by setting the control module and the communication module to control each other, and the switch unit in its backup power supply unit is also backed up, the system reliability is further improved.

[0128] It will be understood that the transistors and relays mentioned in the above embodiments are all spacecraft payload switches. Typically, spacecraft payload switches are categorized as relay switches and MOS transistor switches, depending on whether they need to maintain their power after a power outage. Relay switches maintain their on / off state after a power outage, while MOS transistors restore their off / off state after a power outage. Both types of switch control are irreplaceable during satellite operation and therefore required in the system. The spacecraft command power supply refers to the relay command power that controls the relay. In spacecraft, this power supply is used solely for the relay. The MOS transistor power distribution switch is controlled by an integrated electronics unit or a measurement, control, and data transmission unit.

[0129] An embodiment of the present invention also provides a method for recovering a spacecraft on-orbit fault. Figure 9 A flowchart of a method for recovering a spacecraft on-orbit fault provided by an embodiment of the present invention is provided in FIG. Figure 9 , spacecraft on-orbit fault recovery methods include:

[0130] S110. When the voltage provided by the first power output terminal in the power supply module to which the second power output terminal belongs is less than a preset voltage value, the control module and / or the communication module controls the line between the power supply bus and the second power output terminal to be connected, so that at least one of the first power supply module, the second power supply module and the third power supply module is supplied with power through the second power output terminal.

[0131] The technical solution of the embodiments of the present invention, by providing at least one of the first, second, and third power supply modules with a second power output terminal, is equivalent to adding a controlled second power output terminal to the existing first power output terminals of the first, second, and third power supply modules. In a power supply module including a second power output terminal, when the voltage provided by the first power output terminal is less than a preset voltage value, the control module and / or the communication module controls the power supply module to supply power through the second power output terminal, ensuring the normal operation of the functional modules connected to the power supply module, thereby improving the reliability of the spacecraft. Furthermore, because the second power output terminal only begins to operate when the voltage provided by the first power output terminal is less than a preset voltage value and remains off when the first power output terminal is supplying power normally, it can prevent the second power output terminal from aging and resulting in a shortened lifespan. Furthermore, compared to arranging the second power output terminal to be in a constantly powered state, the second power output terminal is less affected by reduced space radiation, further improving the reliability of the second power output terminal, thereby further improving the reliability of the spacecraft.

[0132] Figure 10 A flowchart of a method for recovering a fault of a first power supply module provided by an embodiment of the present invention is provided. Figure 10 The first power supply module includes a second power supply end, and the first power supply module includes a first switch unit; the first power supply module fault recovery method is executed by the control module and / or the communication module, and the method includes:

[0133] S201. Determine whether the first voltage provided by the first power output terminal of the first power supply module is greater than a fourth preset voltage value; if so, end; if not, execute S202.

[0134] S202 , determining whether the first voltage is less than a first preset voltage value; if so, executing S203 ; if not, executing S201 .

[0135] S203: Send a control instruction to the first switch unit.

[0136] Specifically, the instruction may be a MOS tube control instruction.

[0137] S204, determine whether the first voltage provided by the second power output terminal of the first power supply module is greater than the fourth preset voltage value; if so, end; if not, execute S203.

[0138] S203 and S204 are executed cyclically to detect the first voltage until the first voltage provided by the second power output terminal of the first power supply module is greater than the fourth preset voltage value, and then the current process is exited.

[0139] Figure 11A flowchart of a second power supply module fault recovery method provided by an embodiment of the present invention is provided. Figure 11 The second power supply module includes a second power supply terminal, and the second power supply module includes a second switch unit and a third switch unit; the second power supply module fault recovery method is executed by the communication module, and the method includes:

[0140] S301. Determine whether the second voltage provided by the first power output terminal of the second power supply module is greater than a fifth preset voltage value; if so, end; if not, execute S302.

[0141] S302, determine whether the second voltage is less than a second preset voltage value; if so, execute S303; if not, execute S301.

[0142] S303: Send a control instruction to the second switch unit or the third switch unit.

[0143] S304: Determine whether the second voltage provided by the second power output terminal of the second power supply module is greater than the fifth preset voltage value; if so, end; if not, execute S303.

[0144] S303 and S304 are executed cyclically to detect the second voltage until the second voltage provided by the second power output terminal of the second power supply module is greater than the fifth preset voltage value, and then the current process is exited.

[0145] Figure 12 A flowchart of a third power supply module fault recovery method provided by an embodiment of the present invention is provided. Figure 12 The third power supply module includes a second power supply terminal, and the third power supply module includes a fourth switch unit and a fifth switch unit. The third power supply module fault recovery method is executed by the control module, and the method includes:

[0146] S401. Determine whether the third voltage provided by the first power output terminal of the third power supply module is greater than a sixth preset voltage value; if so, end; if not, execute S402.

[0147] S402 , determining whether the third voltage is less than a third preset voltage value; if so, executing S403 ; if not, executing S401 .

[0148] S403: Send a control instruction to the fourth switch unit or the fifth switch unit.

[0149] S404, determine whether the third voltage provided by the second power output terminal of the third power supply module is greater than the sixth preset voltage value; if so, end; if not, execute S403.

[0150] S403 and S404 are executed cyclically to detect the third voltage until the third voltage provided by the second power output terminal of the third power supply module is greater than the sixth preset voltage value, and then the current process is exited.

[0151] The above embodiments provide methods for self-control on a spacecraft to recover from its own faults. In other embodiments, after a spacecraft fails and the communication module is working normally, it can also be controlled by a remote sensing satellite ground station, which is described in detail below.

[0152] Based on the above embodiment, in one embodiment, optionally, the first power supply module includes a second power supply output end, and the first power supply module includes a first power supply unit, a second power supply unit and a first switch unit; the input end of the first power supply unit is connected to the input end of the first power supply module, and the output end of the first power supply unit is connected to the first power supply output end of the first power supply module; the input end of the second power supply unit is connected to the input end of the first power supply module through the first switch unit, and the output end of the second power supply unit is connected to the second power supply output end of the first power supply module, and the control end of the first switch unit is connected to the control module and the communication module;

[0153] Then, the spacecraft on-orbit fault recovery methods include:

[0154] 1) After the communication module sends the telemetry signal to the remote sensing satellite ground station, it receives the control command sent by the remote sensing satellite ground station.

[0155] Among them, telemetry signals refer to electromagnetic wave signals collected by sensors of various subsystems of the spacecraft, which are encoded, modulated, and transmitted to the ground station in real time through wireless links as digital or analog information carriers. They are used to characterize the spacecraft's own status, environmental parameters, and mission execution status.

[0156] Specifically, the communication module transmits the telemetry signal to the remote sensing satellite ground station. The remote sensing satellite ground station determines the status of the first power supply module and the second power supply module based on the received telemetry signal, and transmits a control instruction to the communication module when there is a power supply abnormality in the first power supply module.

[0157] Optionally, the communication module and the control module may exchange information, so that both the communication module and the control module may receive control instructions sent by the remote sensing satellite ground station.

[0158] 2) When the first voltage provided by the first power supply unit is less than the first preset voltage value, the communication module controls the first switch unit to be turned on according to the control instruction, so that the second power supply unit supplies power.

[0159] Specifically, the communication module receives a first voltage at the output end of the first power supply unit, and when the first voltage is less than a first preset voltage value, the communication module responds to a control instruction transmitted by the remote sensing satellite ground station to turn on the first switch unit to connect the line between the power supply bus and the second power supply unit, and power the relay module through the second power supply unit.

[0160] It can be understood that while the first power supply module is supplying power through the second power output terminal, the communication module and the control module will continue to detect whether the second power output terminal of the first power supply module is supplying power normally. If it is normal, the first power supply module will supply power normally through the second power output terminal. If it is abnormal, the remote sensing satellite ground station will continue to transmit control instructions to the communication module until the first power supply module is supplying power normally through the second power output terminal.

[0161] In another embodiment, optionally, the second power supply module includes a second power supply end; the second power supply module includes a third power supply unit, a fourth power supply unit, a second switch unit and a third switch unit; the input end of the third power supply unit is connected to the input end of the second power supply module, and the output end of the third power supply unit is connected to the first power output end of the second power supply module; the second switch unit and the third switch unit are connected in parallel between the input end of the second power supply module and the input end of the fourth power supply unit, the output end of the fourth power supply unit is connected to the second power output end of the second power supply module, and the control end of the second switch unit and the control end of the third switch unit are both connected to the communication module;

[0162] Then, the spacecraft on-orbit fault recovery methods include:

[0163] 1) After the communication module sends the telemetry signal to the remote sensing satellite ground station, it receives the control command sent by the remote sensing satellite ground station.

[0164] Specifically, the communication module transmits the telemetry signal to the remote sensing satellite ground station. The remote sensing satellite ground station determines the status of the first power supply module and the second power supply module based on the received telemetry signal, and transmits a control instruction to the communication module when there is a power supply abnormality in the second power supply module.

[0165] 2) When the second voltage provided by the third power supply unit is less than the second preset voltage value, the communication module controls the second switch unit or the third switch unit to be turned on according to the control instruction, so that the fourth power supply unit supplies power.

[0166] Specifically, the communication module receives the second voltage at the output end of the third power supply unit, and when the second voltage is less than the second preset voltage value, the communication module responds to the control instruction transmitted by the remote sensing satellite ground station to make the second switch unit or the third switch unit conductive, so as to connect the line between the power supply bus and the fourth power supply unit, and power the control module through the fourth power supply unit.

[0167] It can be understood that while the second power supply module is supplying power through the second power output terminal, the communication module will continue to detect whether the second power output terminal of the second power supply module is supplying power normally. If it is normal, the second power supply module will supply power normally through the second power output terminal. If it is abnormal, the remote sensing satellite ground station will continue to transmit control instructions to the communication module until the second power supply module is supplying power normally through the second power output terminal.

[0168] In yet another embodiment, optionally, the first power supply module and the second power supply module both include a second power supply terminal;

[0169] Then, the spacecraft on-orbit fault recovery methods include:

[0170] 1) After the communication module sends the telemetry signal to the remote sensing satellite ground station, it receives the control command sent by the remote sensing satellite ground station.

[0171] 2) When the first voltage provided by the first power output terminal of the first power supply module is less than the first preset voltage value, the communication module controls the first switch unit to be turned on according to the control instruction, so that the first power supply module supplies power through the second power output terminal.

[0172] 3) When the second voltage provided by the first power output terminal of the second power supply module is less than the second preset voltage value, the communication module controls the second switch unit or the third switch unit to be turned on according to the control instruction, so that the second power supply module supplies power through the second power output terminal.

[0173] It should be understood that the various forms of the processes shown above can be used to reorder, add, or delete steps. For example, the steps described in the present invention can be performed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved. This is not limited herein.

[0174] The above specific embodiments do not limit the scope of protection of the present invention. Those skilled in the art will appreciate that various modifications, combinations, sub-combinations, and substitutions may be made based on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention are intended to be included within the scope of protection of the present invention.

Claims

1. A spacecraft on-orbit fault recovery system, characterized in that: include: Relay module, control module, communication module, first power supply module, second power supply module and third power supply module; The input end of the first power supply module, the input end of the second power supply module and the input end of the third power supply module are all connected to the power supply bus, the first power output end of the first power supply module is connected to the relay module, the first power output end of the second power supply module is connected to the control module, and the first power output end of the third power supply module is connected to the communication module. At least one of the first power supply module, the second power supply module and the third power supply module includes a second power output end. When the voltage provided by the first power output end in the power supply module in which the second power output end is located is less than a preset voltage value, the control module and / or the communication module controls the line between the power supply bus and the second power output end to be connected, so that at least one of the first power supply module, the second power supply module and the third power supply module is supplied with power through the second power output end.

2. The spacecraft on-orbit fault recovery system according to claim 1, characterized in that: The preset voltage value includes a first preset voltage value; When the first power supply module includes a second power output terminal, the first power supply module includes a first power supply unit, a second power supply unit and a first switch unit; The input end of the first power supply unit is connected to the input end of the first power supply module, the output end of the first power supply unit is connected to the first power output end of the first power supply module, and the first power supply unit is used to supply power to the relay module; The input end of the second power supply unit is connected to the input end of the first power supply module through the first switch unit, the output end of the second power supply unit is connected to the second power supply output end of the first power supply module, and the control end of the first switch unit is connected to the control module and the communication module. The control module and / or the communication module is used to control the first switch unit to conduct when the first voltage provided by the first power supply unit is less than the first preset voltage value.

3. The spacecraft on-orbit fault recovery system according to claim 2, characterized in that: The second power supply unit includes a first voltage converter and a first diode, and the first switch unit includes a first transistor; The input end of the first voltage converter is connected to the first electrode of the first transistor, and the output end of the first voltage converter is connected to the output end of the second power supply unit through the first diode; the second electrode of the first transistor is connected to the power supply bus, and the control electrode of the first transistor is connected to the control module and the communication module.

4. The spacecraft on-orbit fault recovery system according to claim 1, characterized in that: The preset voltage value includes a second preset voltage value; When the second power supply module includes a second power output terminal, the second power supply module includes a third power supply unit, a fourth power supply unit, a second switch unit and a third switch unit; The input end of the third power supply unit is connected to the input end of the second power supply module, the output end of the third power supply unit is connected to the first power output end of the second power supply module, and the third power supply unit is used to supply power to the control module in the form of active hot standby; The second switch unit and the third switch unit are connected in parallel between the input end of the second power supply module and the input end of the fourth power supply unit, the output end of the fourth power supply unit is connected to the second power supply output end of the second power supply module, and the control end of the second switch unit and the control end of the third switch unit are both connected to the communication module; the communication module is used to control the second switch unit or the third switch unit to be turned on when the second voltage provided by the third power supply unit is less than the second preset voltage value.

5. The spacecraft on-orbit fault recovery system according to claim 4, characterized in that: The fourth power supply unit includes a second voltage converter and a second diode, the second switch unit includes a second transistor, and the third switch unit includes a first relay; The input end of the second voltage converter is respectively connected to the first electrode of the second transistor and the first end of the first relay, the output end of the second voltage converter is connected to the output end of the fourth power supply unit through the second diode, the second electrode of the second transistor and the second end of the first relay are both connected to the input end of the fourth power supply unit, and the control electrode of the second transistor and the control end of the first relay are connected to the communication module.

6. The spacecraft on-orbit fault recovery system according to claim 1, characterized in that: The preset voltage value includes a third preset voltage value; When the third power supply module includes a second power output terminal, the third power supply module includes a fifth power supply unit, a sixth power supply unit, a fourth switch unit and a fifth switch unit; The input end of the fifth power supply unit is connected to the input end of the third power supply module, the output end of the fifth power supply unit is connected to the first power output end of the third power supply module, and the fifth power supply unit is used to supply power to the communication module in the form of active hot standby; The fourth switch unit and the fifth switch unit are connected in parallel between the input end of the third power supply module and the input end of the sixth power supply unit, the output end of the sixth power supply unit is connected to the second power supply output end of the third power supply module, and the control end of the fourth switch unit and the control end of the fifth switch unit are both connected to the control module, and the control module is used to control the fourth switch unit or the fifth switch unit to be turned on when the third voltage provided by the fifth power supply unit is less than the third preset voltage value.

7. The spacecraft on-orbit fault recovery system according to claim 6, characterized in that: The sixth power supply unit includes a third voltage converter and a third diode, the fourth switch unit includes a third transistor, and the fifth switch unit includes a second relay; The input end of the third voltage converter is respectively connected to the first electrode of the third transistor and the first end of the second relay, the output end of the third voltage converter is connected to the output end of the sixth power supply unit through the third diode, the second electrode of the third transistor and the second end of the second relay are both connected to the input end of the sixth power supply unit, and the control electrode of the third transistor and the control end of the second relay are connected to the control module.

8. The spacecraft on-orbit fault recovery system according to any one of claims 1 to 7, characterized in that: It also includes a first voltage acquisition module, a second voltage acquisition module and a third voltage acquisition module; The first voltage acquisition module is connected between the output end of the first power supply module and the ground, the output end of the first voltage acquisition module is connected to the control module and the communication module, and the first voltage acquisition module is used to acquire a first voltage at the output end of the first power supply module; The second voltage acquisition module is connected between the output end of the second power supply module and the ground, the output end of the second voltage acquisition module is connected to the control module and the communication module, and the second voltage acquisition module is used to acquire the second voltage at the output end of the second power supply module; The third voltage acquisition module is connected between the output end of the third power supply module and the ground, the output end of the third voltage acquisition module is connected to the control module and the communication module, and the third voltage acquisition module is used to acquire the third voltage of the output end of the third power supply module.

9. A method for recovering a spacecraft on-orbit fault, characterized in that: A spacecraft on-orbit fault recovery system applied to any one of claims 1-8; The method comprises: When the voltage provided by the first power output end in the power supply module to which the second power output end belongs is less than the preset voltage value, the control module and / or the communication module controls the connection of the line between the power supply bus and the second power output end, so that at least one of the first power supply module, the second power supply module and the third power supply module is supplied with power through the second power output end.

10. The method for recovering a spacecraft on-orbit fault according to claim 9, characterized in that: The first power supply module includes a second power output end, and the first power supply module includes a first power supply unit, a second power supply unit and a first switch unit; the input end of the first power supply unit is connected to the input end of the first power supply module, and the output end of the first power supply unit is connected to the first power output end of the first power supply module; the input end of the second power supply unit is connected to the input end of the first power supply module through the first switch unit, the output end of the second power supply unit is connected to the second power output end of the first power supply module, and the control end of the first switch unit is connected to the control module and the communication module; and / or, the second power supply module includes a second power end; the second power supply module includes a third power supply unit, a fourth power supply unit, a second switch unit and a third switch unit; the input end of the third power supply unit is connected to the input end of the second power supply module, and the output end of the third power supply unit is connected to the first power output end of the second power supply module; the second switch unit and the third switch unit are connected in parallel between the input end of the second power supply module and the input end of the fourth power supply unit, the output end of the fourth power supply unit is connected to the second power output end of the second power supply module, and the control end of the second switch unit and the control end of the third switch unit are both connected to the communication module; The method comprises: After the communication module sends the telemetry signal to the remote sensing satellite ground station, receiving the control instruction sent by the remote sensing satellite ground station; When the first voltage provided by the first power supply unit is lower than a first preset voltage value, the communication module controls the first switch unit to be turned on according to the control instruction, so that the second power supply unit supplies power; and / or, When the second voltage provided by the third power supply unit is less than a second preset voltage value, the communication module controls the second switch unit or the third switch unit to be turned on according to the control instruction, so that the fourth power supply unit supplies power.

Images