Autonomous control method for satellite-borne responder

By using a backup transponder and an autonomous control method, the spaceborne transponder can autonomously recover to normal working condition after a single-event upset in orbit, solving the problem of the inability to autonomously recover in existing technologies and realizing the stability and efficient autonomous control of the space-to-ground link.

CN120979516APending Publication Date: 2025-11-18AEROSPACE DONGFANGHONG SATELLITE
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202511069803.7
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-07-31
Publication Date
2025-11-18

AI Technical Summary

Technical Problem

Existing spaceborne transponders cannot autonomously return to normal operation after a single-event upset occurs in orbit, and require long-term ground intervention, which consumes transit time and poses a risk of misoperation.

Method used

Design an autonomous control method for a spaceborne transponder. By backing up the transponder, timers, and interpretation strategies, the system can autonomously restore the synchronization lock state, save and configure code groups and downlink operating states, avoid misoperation, and be compatible with both conventional and high-speed signals.

Benefits of technology

It enabled the onboard transponder to autonomously recover after a single-event upset in orbit, reducing the need for ground intervention, avoiding transit time occupation and misoperation, and ensuring the normal operation of the space-to-ground link.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120979516A_ABST
    Figure CN120979516A_ABST
Patent Text Reader

Abstract

The invention discloses a satellite-borne responder autonomous control method which is applied to a spacecraft measurement and control subsystem. Compared with a traditional satellite transit energy monitoring method, the protection time interval of autonomous control function work is designed to be 2 hours, frequent misjudgment and repeated misoperation caused by frequent misjudgment are avoided, the influence generated by in-orbit single event upset is effectively solved, use of the measurement and control function is not affected, and the measurement and control time during satellite transit is not occupied. Meanwhile, the code block state and the downlink working state of the satellite-borne responder are stored, after reloading is completed, configuration information of the code block and the downlink working state is read, configuration is carried out, the satellite-borne responder is restored to the normal working state instead of the default state, and the problem that measurement and control cannot be carried out due to mismatching of satellite-ground code blocks is avoided. The method is high in applicability, easy in engineering implementation and suitable for the satellite spread spectrum transponder.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to an autonomous control method for a spaceborne transponder, belonging to the field of satellite telemetry, tracking, and command technology. Background Technology

[0002] The existing onboard transponder's autonomous control mode involves monitoring the received energy during satellite transits. If the energy exceeds a threshold, corresponding autonomous control measures are implemented. While this mechanism can autonomously restore the transponder to its default state, the processing consumes valuable transit time from ground-based telemetry and control. Furthermore, if a single-event upset (SWE) occurs and ground-based telemetry and control tasks are not scheduled for an extended period, the SWE effect can persist on the onboard transponder without timely intervention. Summary of the Invention

[0003] The technical problem solved by this invention is to overcome the shortcomings of the prior art and provide an autonomous control method for a spaceborne transponder. When a single-event upset occurs in orbit, the spaceborne transponder can autonomously recover to normal working state without human intervention from the ground.

[0004] The technical solution of this invention is: an autonomous control method for a spaceborne transponder, comprising:

[0005] Step 1: Power on the onboard transponder; the autonomous management status flag is disabled by default. The onboard transponder includes at least two transponders that serve as backups for each other. The autonomous management status flag indicates whether the autonomous management function is enabled or disabled.

[0006] Step 2: Receive ground control commands, reset the autonomous management status flag, and enable or disable the autonomous management function; determine the autonomous management status flag; if it is enabled, proceed to step 3; otherwise, repeat step 2.

[0007] Step 3: Set the timer start flag to enabled, check the timer timing. If the timer timing is not less than the preset duration, proceed to step 4; otherwise, return to step 2.

[0008] Step 4: Sequentially determine the remote control lock status, measurement frame lock status, and high-speed frame lock status of the two transponders. If the remote control lock status, measurement frame lock status, and high-speed frame lock status of one transponder all fail simultaneously, then perform a reload and configuration operation on that transponder. If the remote control lock status, measurement frame lock status, and high-speed frame lock status of both transponders all fail simultaneously, then perform a reload and configuration operation on both transponders sequentially. Then proceed to Step 2. The reload and configuration operation includes: saving the transponder's code group status and downlink operating status; the transponder completes the reload operation; a first protection time is delayed; waiting for the transponder to load; the transponder reads the stored code group status and downlink operating status and performs status configuration, restoring the operating status before reload; a second protection time is delayed; waiting for the transponder to configure the code group status and downlink operating status.

[0009] Furthermore, the code group status refers to the code group information configured by the transponder, including two sets of code groups. When the code group configuration status of the satellite and the ground system is consistent, the satellite and ground link will work normally.

[0010] Furthermore, the preset duration is 2 hours.

[0011] Furthermore, different transponders are monitored sequentially in a time-sharing manner, and the monitoring results are independent of each other.

[0012] Furthermore, the first protection time is not less than 30 seconds; the second protection time is not less than 2 seconds.

[0013] Furthermore, the transponder includes a lower-level machine; the lower-level machine is used to receive remote control commands sent from the ground, parse the command content, control the autonomous management status flag, complete the timer function, and complete the reloading and configuration operations of the transponder; the autonomous management status flag is disabled by default when powered on, and after receiving ground command control, it maintains the previous command status unchanged.

[0014] Furthermore, the transponder includes a conventional telemetry and control channel and a high-speed uplink channel. The conventional telemetry and control channel is used for remote control position synchronization lock signal processing and measurement frame synchronization lock signal processing, while the high-speed uplink channel is used for high-speed frame synchronization lock signal processing. The transponder is compatible with both the conventional telemetry and control channel and the high-speed uplink channel, thus avoiding the problem of misoperation of the conventional telemetry and control channel when the high-speed uplink channel is working.

[0015] Furthermore, the number of times the remote control position synchronization lock status, measurement frame synchronization lock status, and high-speed frame synchronization lock status of the two transponders are judged is M times. The number of times the lock is lost in the M judgments is not less than N times before the judgment status is confirmed as a lost lock status; M and N are preset values.

[0016] A computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the autonomous control method for a spaceborne transponder.

[0017] An autonomous control device for a spaceborne transponder includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements the steps of the autonomous control method for a spaceborne transponder.

[0018] The advantages of this invention compared to the prior art are:

[0019] (1) Compared with the traditional energy monitoring method during satellite transit, the present invention designs a protection time interval of 2 hours for the autonomous control function to work. It is triggered only once every 2 hours to avoid frequent misreading and multiple misoperations. It effectively solves the impact of on-orbit single-event flip and does not affect the use of the telemetry and control function, and does not occupy the telemetry and control time during satellite transit.

[0020] (2) In traditional autonomous control methods, after reconfiguration, the code group and downlink working status of the satellite transponder are restored to the default state. This invention saves the code group status and downlink working status of the satellite transponder. After reloading, it reads the code group and downlink working status configuration information, configures it, and restores it to the normal working state, instead of the default state, thus avoiding the problem of uncontrollable measurement and control caused by the mismatch between satellite and ground code groups.

[0021] (3) Traditional satellite transponders do not have high-speed uplink functionality. In view of the new satellite transponder’s ability to handle both conventional telemetry and control signals and high-speed uplink signals, this invention designs a compatibility interpretation strategy for conventional telemetry and control channels and high-speed uplink channels to avoid the problem of misoperation of conventional telemetry and control channels when the high-speed uplink channel is working. Attached Figure Description

[0022] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0023] Figure 1 This is a schematic diagram of the method flow of the present invention. Detailed Implementation

[0024] To better understand the above technical solutions, the technical solutions of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the embodiments of the present invention and the specific features in the embodiments are detailed descriptions of the technical solutions of the present invention, rather than limitations on the technical solutions of the present invention. In the absence of conflict, the embodiments of the present invention and the technical features in the embodiments can be combined with each other.

[0025] The following description, in conjunction with the accompanying drawings, provides a more detailed explanation of an autonomous control method for a spaceborne transponder provided by an embodiment of the present invention. Figure 1 Specific implementation methods may include:

[0026] Step 1: Power on the onboard transponder; the autonomous management status flag is disabled by default. The onboard transponder includes at least two transponders that serve as backups for each other. The autonomous management status flag indicates whether the autonomous management function is enabled or disabled.

[0027] Step 2: Receive ground control commands, reset the autonomous management status flag, and enable or disable the autonomous management function; determine the autonomous management status flag; if it is enabled, proceed to step 3; otherwise, repeat step 2.

[0028] Step 3: Set the timer start flag to enabled, check the timer timing. If the timer timing is not less than the preset duration, proceed to step 4; otherwise, return to step 2.

[0029] Step 4: Sequentially determine the remote control lock status, measurement frame lock status, and high-speed frame lock status of the two transponders. If the remote control lock status, measurement frame lock status, and high-speed frame lock status of one transponder all fail simultaneously, then perform a reload and configuration operation on that transponder. If the remote control lock status, measurement frame lock status, and high-speed frame lock status of both transponders all fail simultaneously, then perform a reload and configuration operation on both transponders sequentially. Then proceed to Step 2. The reload and configuration operation includes: saving the transponder's code group status and downlink operating status; the transponder completes the reload operation; a first protection time is delayed; waiting for the transponder to load; the transponder reads the stored code group status and downlink operating status and performs status configuration, restoring the operating status before reload; a second protection time is delayed; waiting for the transponder to configure the code group status and downlink operating status.

[0030] The solution provided in the embodiments of the present invention includes the following steps:

[0031] (1) The onboard transponder is powered on, and the autonomous management status flag is disabled by default; then proceed to step (2); the onboard transponder includes a first transponder, a second transponder, and a lower-level machine. The first and second transponders are designed as primary backups, and both machines are in the same state. Each onboard transponder includes a conventional telemetry and control channel and a high-speed channel. The conventional telemetry and control channel completes the remote control position synchronization lock signal processing and the measurement frame synchronization lock signal processing, while the high-speed channel completes the high-speed frame synchronization lock signal processing. The lower-level machine is responsible for receiving remote control commands sent from the ground, parsing the command content, controlling the autonomous management status flag, completing the timer function, and completing the reloading and configuration operations for the first and second transponders. The autonomous management status flag indicates whether the autonomous management function is enabled or disabled. When the autonomous management function is enabled, the autonomous management status flag is enabled; when the autonomous management function is disabled, the autonomous management status flag is disabled. The autonomous management status flag is disabled by default.

[0032] (2) The ground sends commands to control the autonomous management function to be turned on or off. When the ground sends a command to turn on the autonomous management function, the autonomous management status flag changes to enabled; when the ground sends a command to turn off the autonomous management function, the autonomous management status flag changes to disabled. The autonomous management status flag is disabled by default when the device is powered on, and it remains unchanged after receiving ground commands. Then proceed to step (3);

[0033] (3) Determine the autonomous management status flag. If it is enabled, proceed to step (4); otherwise, proceed to step (2).

[0034] (4) Set the timer start flag to enabled, clear the timer, and then proceed to step (5). The timer is used for timing the autonomous management function.

[0035] (5) The timer counts and the timer counts. If the timer counts for ≥2 hours, the self-management function is triggered and then proceeds to step (6); otherwise, proceeds to step (5).

[0036] (6) The lower-level machine collects the remote control position synchronization lock status, measurement frame synchronization lock status and high speed lock status of the first and second transponders once per second, and increments the number of collections by 1. If the number of collections is ≥ M times, and M is not less than 60, then proceed to step (7); otherwise, proceed to step (6).

[0037] (7) The lower-level machine writes the remote control position synchronization lock status, measurement frame synchronization lock status and high-speed lock status of the first and second transponders into the cache, and at the same time clears the number of acquisitions to zero, and proceeds to step (8).

[0038] (8) Determine the synchronization lock status of the remote control position and the synchronization lock status of the measurement frame of the first transponder, and make the determination M times. When the remote control position loses synchronization lock and the measurement frame loses synchronization lock simultaneously for ≥ N times, N is not less than 30, then proceed to step (9); otherwise proceed to step (13).

[0039] (9) Determine the high-speed frame synchronization lock status of the first transponder, and read it M times. If the number of times the high-speed frame synchronization lock status is lost is ≥ N times, proceed to step (10); otherwise, proceed to step (13).

[0040] (10) Save the code group status and downlink operating status of the first transponder, and proceed to step (11); the code group status is the code group information configured for the first transponder, including two sets of code groups, namely code group 1 and code group 2. When the code group configuration status of the satellite and the ground system is consistent, the satellite and ground link can work normally; the downlink operating status is the on or off status of the transmitter inside the first transponder. The downlink operating status needs to save the operating status of the transmitter of the first transponder. When the satellite is working in orbit, only one transmitter of the first transponder and the second transponder is turned on. The default is that the transmitter of the first transponder is turned on and the transmitter of the second transponder is turned off;

[0041] (11) The first transponder completes the reload operation, delays for T1 seconds, and the value of T1 is not less than 30 seconds, and waits for transponder A to load and restore the default state. The first transponder restores to the default power-on state, the code group state is code group 1, the downlink working state is the default transmitter power-on, and proceeds to step (12);

[0042] (12) Transponder A reads the stored code group status and downlink working status, and performs status configuration. It delays for T2 seconds, with T2 being no less than 2 seconds. It waits for transponder A to configure the code group status and downlink working status, and then restores the working status before reloading. It then proceeds to step (13).

[0043] (13) Determine the synchronization lock status of the remote control position and the synchronization lock status of the measurement frame of the second transponder, and make the determination M times. If the remote control position loses synchronization lock and the measurement frame loses synchronization lock simultaneously ≥ N times, then proceed to step (14); otherwise, proceed to step (2).

[0044] (14) Determine the high-speed frame synchronization lock status of the second transponder, and read it M times. If the number of times the high-speed frame synchronization lock status is lost is ≥ N times, proceed to step (15); otherwise, proceed to step (2).

[0045] (15) Save the code group status and downlink operating status of the second transponder, and proceed to step (16); the code group status is the code group information configured for the second transponder, including two sets of code groups, namely code group 1 and code group 2. When the code group configuration status of the satellite and the ground system is consistent, the satellite and ground link can work normally; the downlink operating status is the on or off status of the transmitter inside the second transponder. The downlink operating status needs to save the operating status of the transmitter of the second transponder. When the satellite is working in orbit, only one transmitter of the first transponder and the second transponder is turned on. The default is that the transmitter of the first transponder is turned on and the transmitter of the second transponder is turned off;

[0046] (16) The second transponder completes the reload operation, delays for T1 seconds, and T1 is not less than 30 seconds, waiting for transponder B to load and restore the default state. The second transponder restores to the default power-on state, the code group state is code group 1, the downlink working state is the default transmitter power-on, and proceeds to step (17);

[0047] (17) The transponder B reads the stored code group status and downlink working status, and performs status configuration. It delays for T2 seconds, and the value of T2 is not less than 2 seconds. It waits for the transponder B to configure the code group status and downlink working status, restores the working status before reloading, and proceeds to step (2).

[0048] In one possible implementation, the first and second transponders are monitored in a time-division serial manner, with the monitoring results being independent of each other and not affecting their use.

[0049] Optionally, the protection interval T1 ≥ 30 seconds and T2 ≥ 2 seconds.

[0050] The remote control position synchronization lock status and the measurement frame synchronization lock status are judged simultaneously to avoid erroneous operation due to normal lock of the remote control channel or the measurement channel.

[0051] The self-management function operates with a protection interval of 2 hours, and is triggered only once every 2 hours to avoid frequent misreads and multiple erroneous operations.

[0052] In one possible implementation, the transponder includes a conventional telemetry and control channel and a high-speed uplink channel. The conventional telemetry and control channel is used for remote control bit synchronization lock signal processing and measurement frame synchronization lock signal processing, while the high-speed uplink channel is used for high-speed frame synchronization lock signal processing. The transponder is compatible with both the conventional telemetry and control channel and the high-speed uplink channel to avoid misoperation of the conventional telemetry and control channel when the high-speed uplink channel is working.

[0053] A fault-tolerant judgment mechanism is designed. The number of judgments is M, M≥60. If the number of lock loss in the M judgments is ≥N, N≥30, then the judgment state is confirmed as a lost lock state.

[0054] Furthermore, the transponder includes a lower-level machine; the lower-level machine is used to receive remote control commands sent from the ground, parse the command content, control the autonomous management status flag, complete the timer timing, and complete the reloading and configuration operations of the transponder; the autonomous management status flag is disabled by default when powered on, and after receiving ground command control, it maintains the previous command status unchanged.

[0055] This invention provides a computer-readable storage medium storing computer instructions that, when executed on a computer, cause the computer to perform... Figure 1 The method described.

[0056] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.

[0057] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0058] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0059] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0060] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus.

[0061] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

[0062] The contents not described in detail in this specification are common knowledge to those skilled in the art.

Claims

1. A method for autonomous control of a spaceborne transponder, characterized in that, include: Step 1: Power on the onboard transponder; the autonomous management status flag is disabled by default. The onboard transponder includes at least two transponders that serve as backups for each other. The autonomous management status flag is a flag indicating whether the autonomous management function is enabled or disabled; Step 2: Receive ground control commands, reset the autonomous management status flag, enable or disable the autonomous management function; determine the autonomous management status flag; If enabled, proceed to step 3; Otherwise, repeat step 2; Step 3: Set the timer start flag to enabled, check the timer timing, and if the timer timing is not less than the preset duration, proceed to step 4; Otherwise, return to step 2; Step 4: Sequentially determine the remote control lock status, measurement frame lock status, and high-speed frame lock status of the two transponders. If the remote control lock status, measurement frame lock status, and high-speed frame lock status of a transponder all fail simultaneously, then perform a reload and configuration operation on that transponder. If the remote control lock status, measurement frame lock status, and high-speed frame lock status of both transponders all fail simultaneously, then perform a reload and configuration operation on both transponders in sequence. Then proceed to Step 2. The reloading and configuration operation includes: saving the transponder's code group status and downlink operating status; the transponder completing the reloading operation; delaying the first protection time; waiting for the transponder to load; the transponder reading the stored code group status and downlink operating status and configuring the status to restore the operating status before reloading; delaying the second protection time; and waiting for the transponder to configure the code group status and downlink operating status.

2. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, The code group status refers to the code group information configured on the transponder, which includes two sets of code groups. When the code group configuration status of the satellite and the ground system is consistent, the satellite and ground link will work normally.

3. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, The preset duration is 2 hours.

4. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, Different transponders are monitored in a time-sharing serial manner, and the monitoring results are independent of each other.

5. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, The first protection time is not less than 30 seconds; the second protection time is not less than 2 seconds.

6. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, The transponder includes a lower-level machine; the lower-level machine is used to receive remote control commands sent from the ground, parse the command content, control the autonomous management status flag, complete the timer timing, and complete the reloading and configuration operations of the transponder; the autonomous management status flag is disabled by default when powered on, and after receiving ground command control, it maintains the previous command status unchanged.

7. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, The transponder includes a conventional telemetry and control channel and a high-speed uplink channel. The conventional telemetry and control channel is used for remote control bit synchronization lock signal processing and measurement frame synchronization lock signal processing, while the high-speed uplink channel is used for high-speed frame synchronization lock signal processing. It can interpret both conventional telemetry and control channels and high-speed uplink channels, thus avoiding misoperation of conventional telemetry and control channels when the high-speed uplink channel is working.

8. The autonomous control method for a spaceborne transponder according to claim 1, characterized in that, The number of times the remote control position synchronization lock status, measurement frame synchronization lock status, and high-speed frame synchronization lock status of the two transponders are judged is M. The number of times the lock is lost in the M judgments is not less than N, and the judgment status is confirmed as a lost lock status; M and N are preset values.

9. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method as described in any one of claims 1 to 8.

10. An autonomous control device for a spaceborne transponder, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, it implements the steps of the method as described in any one of claims 1 to 8.