A system-level satellite TT&C function autonomous health management design method

Abstract

The application discloses a kind of system-level satellite measurement and control function autonomous health management design methods, comprising: the uplink of satellite-ground measurement and control link is carried out autonomous health management, monitoring the USB responder operating state of satellite measurement and control subsystem, if monitoring finds exception, then relay spread spectrum responder is independently started;Autonomous health management is carried out to relay spread spectrum responder, the start state of power amplifier in relay spread spectrum responder is monitored, if start duration exceeds set threshold, then the power amplifier in relay spread spectrum responder is set to off state;Autonomous health management is carried out to on-duty navigation receiver, the working state of navigation receiver is monitored, if exception is found, then navigation receiver is powered off and then powered on, and interface software is started again to note program.The application is aimed at satellite measurement and control link and navigation positioning etc. Core function, completes system-level on-orbit fault diagnosis and autonomous disposal strategy design.

Description

Technical Field

[0001] This invention relates to a system-level satellite telemetry and control function autonomous health management design method, belonging to the field of satellite health management technology. Background Technology

[0002] The autonomous health management method for satellite telemetry, tracking, and command (TT&C) functions comprises three layers: the physical layer, the data link layer, and the application layer. The physical layer enhances the subsystem's adaptability to the space environment; the data link layer enables autonomous maintenance of the TT&C link; and the application layer performs more complex autonomous health management tasks to adapt to various special operating conditions. Traditional TT&C autonomous health management methods lack a layered design, focusing primarily on the physical layer while neglecting the design of the data link and application layers. This results in a limited scope and functionality of autonomous health management, lacking health management for key functions such as link autonomous maintenance and navigation function autonomous recovery.

[0003] The telemetry, tracking, and command (TT&C) functions of low-Earth orbit (LEO) civilian satellites are typically implemented by a telemetry and control subsystem. These functions mainly include remote control and telemetry, time management, ranging, positioning, and orbit determination. These functions can be broadly categorized into two types: telemetry and control link functions and navigation and positioning functions, such as... Figure 1 As shown.

[0004] (1) Measurement and control link

[0005] Satellite telemetry, tracking, and command (TT&C) links include satellite-to-ground TT&C links and relay TT&C links. The satellite-to-ground TT&C link provides a channel for transmitting remote control, telemetry, and ranging signals between the satellite and ground stations, primarily used for domestic TT&C missions. The relay TT&C link, through relay satellites, provides a channel for transmitting remote control and telemetry signals between the satellite and ground stations, primarily used for overseas TT&C missions.

[0006] The satellite-to-ground telemetry and control link primarily uses a USB telemetry and control system, including a ground-based telemetry and control antenna, a hybrid network, a USB transponder filter, a USB transponder, and corresponding RF cables. The USB transponder is the core unit responsible for demodulating satellite remote control signals, modulating telemetry signals, and forwarding ranging signals.

[0007] The relay telemetry and control link includes a relay telemetry and control receiving antenna, a relay telemetry and control transmitting antenna, a relay spread spectrum transponder, and corresponding radio frequency cables. Among them, the relay spread spectrum transponder is the core unit for demodulating satellite remote control signals and modulating telemetry signals.

[0008] (2) Navigation and Positioning

[0009] The satellite receives GNSS system signals, performs filtering and low-noise amplification, and then completes positioning and orbit determination calculations, providing positioning data, orbit determination data, and a time reference. The satellite includes a navigation receiving antenna, a dual-channel preamplifier, a navigation receiver, and corresponding high-frequency cables. The navigation receiver is the core unit responsible for realizing satellite positioning and orbit determination functions.

[0010] In summary, the telemetry, tracking, and command (TT&C) arc of low-Earth orbit (LEO) civilian satellites is limited, and they operate mostly overseas, making them more reliant on autonomous health management functions than high-Earth orbit (HEO) satellites. To ensure the on-orbit robustness of LEO civilian satellite TT&C functions, it is necessary to focus on monitoring the operational status of USB transponders, relay spread spectrum transponders, and navigation receivers, and to develop effective autonomous handling measures to ensure stable TT&C link locking, signal-to-noise ratio meeting bit error rate requirements, stable output of positioning and orbit determination data, and satisfactory time accuracy. Summary of the Invention

[0011] The technical problem solved by this invention is to overcome the shortcomings of the prior art and propose a system-level autonomous health management design method for satellite telemetry, tracking and command functions. It completes the design of system-level on-orbit fault diagnosis and autonomous handling strategies for core functions such as satellite telemetry, tracking and command links and navigation and positioning.

[0012] The technical solution of this invention is:

[0013] A system-level satellite telemetry, tracking, and command (TT&C) function autonomous health management design method includes:

[0014] Autonomous health management is performed on the uplink of the satellite-to-ground telemetry and control link, and the working status of the USB transponder of the satellite telemetry and control subsystem is monitored. If an abnormality is detected by monitoring, the relay spread spectrum transponder will be automatically powered on. The autonomous power-on operation of the relay spread spectrum transponder will not be performed until there is no abnormality in the monitoring.

[0015] The relay spread spectrum transponder is autonomously managed for health, and the power amplifier inside the relay spread spectrum transponder is monitored for power-on status. If the power-on time exceeds the set threshold, the power amplifier inside the relay spread spectrum transponder is set to the off state.

[0016] Perform autonomous health management on the navigation receivers on duty, monitor their working status, and if any abnormality is found, power off and then power on the navigation receivers, and restart the interface software uploading program.

[0017] Furthermore, autonomous health management is implemented on the uplink of the satellite-to-ground telemetry and control link, monitoring the working status of the USB transponder of the satellite telemetry and control subsystem. The working status includes the PCM lockout indication status, secondary power supply voltage value, and whether the demodulated output remote control PCM data is valid.

[0018] Furthermore, the PCM lockout indication status of the USB transponder is monitored. If the transponder continues to lose lockout within a set time, it is determined that the USB transponder's capture synchronization function is faulty. First, a "relay spread spectrum transponder power on" command is sent, followed by a "power amplifier power on" command, which enables the relay telemetry and control receiving channel and transmitting channel.

[0019] Furthermore, the secondary power supply voltage of the USB transponder is monitored. If the secondary power supply voltage continuously deviates from the nominal range within a set time, it is determined that the USB transponder power module is faulty and the USB transponder is at risk of on-orbit failure. First, a "relay spread spectrum transponder power-on" command is sent, followed by a "power amplifier power-on" command, which activates the relay telemetry and control receiving channel and the transmitting channel.

[0020] Furthermore, by monitoring the count of correctly received remote control frames output by the System Management Unit (SMU) of the Data Management Subsystem, the validity of the remote control PCM data output by the USB transponder is judged. If the count of correctly received remote control frames remains unchanged within a set time, the remote control PCM data is determined to be invalid and the USB transponder demodulation function is faulty. First, a "Relay Spread Spectrum Transponder Power On" command is sent, followed by a "Power Amplifier Power On" command, which turns on the relay telemetry and control receiving channel and the transmitting channel.

[0021] Furthermore, after sending the "Relay Spread Spectrum Transponder Power On" command and then the "Power Amplifier Power On" command, the power on / off status of the relay spread spectrum transponder and the power amplifier of the relay spread spectrum transponder are monitored. If either status is detected as not powered on, the "Relay Spread Spectrum Transponder Power On" command and the "Power Amplifier Power On" command are resent.

[0022] Furthermore, autonomous health management is implemented for the navigation receivers on duty. Under the premise that the power supply voltage of the navigation receiver is normal and the navigation receiver is online, the working status of the navigation receiver is monitored, including the power-on time of the interface board, the abnormal code identification, and the orbit determination status of the baseband module.

[0023] Furthermore, if the monitoring interface board stops operating during its power-on time, it is determined that the navigation receiver is malfunctioning. The system first sends "Navigation receiver power off", then "Navigation receiver power on", and finally "Start interface software uploading program" to restore the navigation receiver's operating status.

[0024] Furthermore, monitor the abnormal code indicators. If an abnormality is detected, it is determined that there is a communication failure between the baseband board and the interface board inside the navigation receiver. First, send "Navigation receiver power off", then send "Navigation receiver power on", and then send "Start interface software uploading program" to complete the restoration of the navigation receiver's working status.

[0025] Furthermore, the orbit determination status of the baseband module is monitored. If the orbit determination status of all baseband modules continues to show abnormality within a threshold time, it is determined that the autonomous fault clearance of the navigation receiver baseband module has failed. First, "Navigation receiver power off" is sent, then "Navigation receiver power on" is sent, and then "Start interface software uploading program" is sent to complete the restoration of the navigation receiver's working status.

[0026] The advantages of this invention compared to the prior art are:

[0027] (1) This invention solves the problem of improving the robustness of the current low-orbit civil satellite telemetry and control link by adopting a health management design that combines the physical layer, data link layer and application layer, and realizes the autonomous reconstruction of the telemetry and control link under hardware failure, software failure and poor link status.

[0028] (2) This invention monitors the core status of the navigation receiver remotely and takes measures to deal with the navigation receiver in abnormal situations. This solves the problem that the current low-orbit civilian satellite navigation function cannot be effectively and autonomously restored when interrupted overseas. In conjunction with the single-machine-level autonomous health management strategy, it ensures the continuous and stable realization of the navigation function.

[0029] (3) By monitoring the working time of the relay telemetry and control transmission link and taking measures to shut down the relay telemetry and control transmission link in case of timeout, the present invention effectively controls the risk of long-term over-temperature of high-power telemetry and control equipment on the satellite and improves the reliability of the relay telemetry and control transmission link in orbit. Attached Figure Description

[0030] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the invention. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings:

[0031] Figure 1 A classification diagram of measurement and control functions;

[0032] Figure 2 This is a schematic diagram of the satellite-to-ground telemetry and control link implementation scheme according to an embodiment of the present invention;

[0033] Figure 3 This is a schematic diagram of the relay measurement and control link implementation scheme in an embodiment of the present invention;

[0034] Figure 4 This is a schematic diagram illustrating the navigation and positioning function implementation scheme of an embodiment of the present invention;

[0035] Figure 5 This is a flowchart illustrating the autonomous monitoring and handling of USB transponder capture and synchronization function faults according to an embodiment of the present invention.

[0036] Figure 6 This is a flowchart illustrating the autonomous monitoring and handling of USB transponder power module faults according to an embodiment of the present invention.

[0037] Figure 7 This is a flowchart illustrating the autonomous monitoring and handling of faults in the PSK demodulation function of a USB transponder according to an embodiment of the present invention.

[0038] Figure 8 This is a flowchart illustrating the autonomous monitoring and handling process for the health management of the relay spread spectrum transponder in this embodiment of the invention.

[0039] Figure 9 This is a flowchart illustrating the autonomous monitoring and handling process for abnormal navigation receiver interface software malfunctions in an embodiment of the present invention.

[0040] Figure 10 This is a flowchart illustrating the process of handling and resolving the issue of unresolved abnormalities after a navigation receiver interface software reset, as described in this embodiment of the invention.

[0041] Figure 11 This is a flowchart illustrating the autonomous monitoring and handling process for the failure of autonomous fault resolution in the baseband module of the navigation receiver, as described in an embodiment of the present invention. Detailed Implementation

[0042] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

[0043] The low-orbit civilian remote sensing satellite in this embodiment primarily uses a USB telemetry and control system for its space-to-ground telemetry and control link. The onboard implementation scheme is as follows: Figure 2 As shown, the telemetry and control scheme mainly includes four ground-based telemetry and control antennas, two hybrid networks, two USB transponder filters, two USB transponders, and corresponding radio frequency cables. The USB transponder is the core unit for demodulating satellite remote control signals, modulating telemetry signals, and forwarding ranging signals.

[0044] The relay telemetry and control link adopts a non-coherent spread spectrum system, and the on-board implementation scheme is as follows: Figure 3 As shown, the telemetry and control scheme mainly includes one relay telemetry and control receiving antenna, one relay telemetry and control transmitting antenna, one relay spread spectrum transponder, and corresponding radio frequency cables. Among them, the relay spread spectrum transponder is the core unit for demodulating satellite remote control signals and modulating telemetry signals.

[0045] The satellite receives GNSS system signals, performs filtering and low-noise amplification, and then completes positioning and orbit determination calculations, providing positioning data, orbit determination data, and a time reference. The onboard implementation scheme is as follows: Figure 4As shown, the scheme mainly includes two navigation receiving antennas, one dual-channel preamplifier, two navigation receivers, and corresponding high-frequency cables. Among them, the navigation receiver is the core unit for realizing satellite positioning and orbit determination functions.

[0046] This invention proposes a system-level autonomous health management design method for satellite telemetry, tracking, and command (TT&C) functions, including satellite uplink health management design, relay spread spectrum transponder health management design, and navigation receiver health management design, which respectively realize the health management of satellite uplink, relay spread spectrum transponder, and navigation receiver.

[0047] (1) Satellite uplink health management design

[0048] The satellite uplink function involves the telemetry, tracking, and command (TT&C) subsystem and the data management subsystem. It is necessary to design the status monitoring and autonomous fault handling of the core single-unit USB transponder related to the TT&C subsystem and the core single-unit system management unit (SMU) related to the data management subsystem.

[0049] The status monitoring of the above-mentioned single unit includes: the PCM lock indication status of the USB transponder, the hardware health status of the USB transponder, and the demodulation output status of the USB transponder.

[0050] Satellite uplink health management refers to the SMU initiating an autonomous power-on operation for the relay spread spectrum transponder when relevant criteria are met. Each time this autonomous management function is triggered, the system re-enters the next condition judgment until the fault is cleared or the autonomous management function is disabled.

[0051] This function is enabled by default on the satellite and can only be disabled via ground commands; it is not disabled automatically on the satellite.

[0052] a) USB transponder PCM lockout indicator status

[0053] The PCM lock-in indication status of the satellite USB transponder directly reflects the implementation status of filtering, AGC loop amplification, carrier lock-on tracking, and demodulation output functions of the entire onboard telemetry, tracking, and command (TT&C) receiving link, and is a comprehensive status indication. Failure of any of these modules will cause an abnormal PCM lock-in indication status on the USB transponder, meaning the satellite USB transponder will be unable to provide remote control PCM data to the System Management Unit (SMU), affecting the uplink remote control function. Typically, a satellite is equipped with two USB transponders, and reliable on-orbit operation requires at least one TT&C receiving link to be in normal working order. Therefore, the PCM lock-in indication status of both transponders must be monitored simultaneously. When an abnormality is detected in the status indication of either transponder, fault handling measures must be taken.

[0054] In response to the above anomaly, the fault handling measures adopted were to set the relay telemetry and control receiving channel to the normally open state and to briefly open the relay telemetry and control transmitting channel.

[0055] Figure 5 The implementation logic diagram corresponding to this design is as follows:

[0056] The SMU monitors the "USB transponder a remote PCM lock indicator status" and "USB transponder b remote PCM lock indicator status". If either USB transponder a or USB transponder b remains unlocked for a specific number of hours (i.e., the telemetry value is 0 for a specific number of hours), then the capture and synchronization function of either USB transponder a or USB transponder b is determined to be faulty. At this time, a "relay spread spectrum transponder power on" command is sent, followed by a "power amplifier power on" command after a 10-second interval.

[0057] After the above operations, monitor the "Relay Spread Spectrum Transponder Power Amplifier ...

[0058] The default duration of this specific hour discrimination condition is set to 27 hours (1620 min). Data management provides internal instructions to modify the duration setting. The specific hour discrimination condition can be modified according to the actual situation of testing or operation in orbit. It is recommended that the specific hour discrimination condition cover 10 min to 72 hours (4320 min).

[0059] Note: When the autonomous handling procedure is executed, it will proceed to the next condition judgment after the first "power amplifier power on" command is issued, until the fault is cleared or the autonomous management function is disabled.

[0060] b) USB transponder hardware health status

[0061] The hardware health status of a satellite's USB transponder directly determines the normal operation of the device. The secondary power supply voltage of the USB transponder directly and comprehensively reflects the working status of its internal modules. When the secondary power supply voltage exceeds the nominal range, the USB transponder is at risk of on-orbit failure, and a reliable telemetry and control (TT&C) channel cannot be guaranteed. Satellites are typically equipped with two USB transponders, and reliable on-orbit operation requires at least one TT&C receiving link to be in normal working condition. Therefore, it is necessary to monitor the hardware health status of both USB transponders simultaneously, and take fault-handling measures when either transponder's status indication is found to be abnormal.

[0062] In response to the above anomaly, the fault handling measures adopted were to set the relay telemetry and control receiving channel to the normally open state and to briefly open the relay telemetry and control transmitting channel.

[0063] Figure 6The implementation logic diagram corresponding to this design is as follows:

[0064] The SMU monitors the "USB transponder a secondary +12V power supply telemetry" and "USB transponder b secondary +12V power supply telemetry". If the secondary power supply voltage of USB transponder a or USB transponder b is abnormal within a specific number of hours (i.e., continuously less than 2.5V within a specific number of hours), then the power module of USB transponder a or USB transponder b is determined to be faulty. At this time, a "relay spread spectrum transponder power-on" command is sent, followed by a "power amplifier power-on" command at 10-second intervals.

[0065] After the above operations, monitor the "Relay Spread Spectrum Transponder Power Amplifier ...

[0066] The default duration of this specific hour discrimination condition is set to 27 hours (1620 minutes). Data management provides internal instructions that can modify the duration setting, allowing modification of the specific hour discrimination condition based on actual testing or on-orbit operation conditions.

[0067] c) USB transponder demodulation output status

[0068] The demodulation output status of the satellite USB transponder directly determines the validity of the remote control PCM data. Since the USB transponder cannot directly determine the validity of the output remote control PCM data, it is necessary to monitor the receiving end of the remote control PCM data. The validity of the USB transponder's output remote control PCM data is indirectly confirmed by judging the number of correct remote control frames received by the System Management Unit (SMU) of the Data Management Subsystem, i.e., whether the bit error rate requirement is met. Typically, a satellite is equipped with two USB transponders, and reliable on-orbit operation requires at least one telemetry and control receiving link to be in normal working condition. Therefore, it is necessary to monitor the demodulation output status of both USB transponders simultaneously. When both transponders show abnormal status indications, fault handling measures are taken.

[0069] In response to the above anomaly, the fault handling measures adopted were to set the relay telemetry and control receiving channel to the normally open state and to briefly open the relay telemetry and control transmitting channel.

[0070] Figure 7 The implementation logic diagram corresponding to this design is as follows:

[0071] The SMU monitors the "Count of Received Correct Remote Control Frames (Low-Speed ​​Channel Telemetry, Channel 1)" and "Count of Received Correct Remote Control Frames (Low-Speed ​​Channel Telemetry, Channel 2)". If both remain unchanged within a specific number of hours, the PSK demodulation function of USB transponders a and b is determined to be faulty. At this time, a "Relay Spread Spectrum Transponder Power On" command is sent, followed by a "Power Amplifier Power On" command every 10 seconds.

[0072] After the above operations, monitor the "Relay Spread Spectrum Transponder Power Amplifier ...

[0073] The default duration of this specific hour discrimination condition is set to 27 hours (1620 min). Data management provides internal instructions to modify the duration setting. The specific hour discrimination condition can be modified according to the actual situation of testing or operation in orbit. It is recommended that the specific hour discrimination condition cover 10 min to 72 hours (4320 min).

[0074] Note: During the autonomous handling procedure, after the first "Power Amplifier Power On" command is issued, the next condition judgment will be initiated until the fault is resolved or the autonomous management function is disabled. Furthermore, since the health management strategies in a), b), and c) above are independently designed, and the handling measures for the three health management strategies are identical, when at least two fault judgment conditions are triggered simultaneously, the handling measure corresponding to any of the triggered management strategies can be executed once.

[0075] (2) Health Management of Relay Spread Spectrum Transponders

[0076] Health management of relay spread spectrum transponders focuses on monitoring the operating status of the power amplifier inside the relay spread spectrum transponder to prevent the power amplifier from operating for a long time, which could cause the unit's temperature to exceed the limit and affect the unit's reliability and safety.

[0077] When the power amplifier inside the relay spread spectrum transponder is operating, its corresponding power amplifier power-on / off status telemetry display will show an "on" state. The duration of this status indication is monitored, and fault handling measures are triggered when it exceeds a set threshold. The duration can be determined based on the results of single-unit or whole-satellite thermal tests.

[0078] In response to the above anomaly, the fault handling measure taken was to keep the power amplifier inside the relay spread spectrum transponder in the off state.

[0079] Figure 8 The implementation logic diagram corresponding to this design is as follows:

[0080] After the SMU determined the operating time of the monitoring power amplifier and found that it had been working continuously for 40 minutes, the satellite autonomously sent a "power amplifier shutdown" command.

[0081] This function is enabled by default and can only be disabled via ground commands; it is not disabled automatically on the satellite.

[0082] (3) Navigation receiver health management

[0083] The health management function of the navigation receiver needs to be designed to monitor the status of the core single navigation receivers related to the measurement and control subsystem and enable autonomous fault handling.

[0084] The status monitoring of the navigation receiver includes: interface board power-on time, error code identification, and baseband module orbit determination status.

[0085] The autonomous management system for navigation receivers addresses the shortcomings of existing autonomous monitoring strategies and focuses on monitoring the operational status of key software. When relevant criteria are met, the data management system (SMU) initiates an autonomous power-on operation for the navigation receiver on duty.

[0086] The following detailed explanation uses a single navigation receiver (navigation receiver a) as an example.

[0087] a) Interface board power-on and operating time

[0088] The power-on time of the interface board directly reflects the operating status of the navigation receiver software. When the software is running normally, the power-on time accumulates normally. However, when the software malfunctions or crashes, the power-on time will stop. Therefore, monitoring the power-on time of the interface board can help determine if the navigation receiver software is malfunctioning.

[0089] In response to the above anomaly, the troubleshooting measures were to power off and then power on the navigation receiver in operation, and then restart the interface software uploading program.

[0090] Figure 9 The implementation logic diagram corresponding to this design is as follows:

[0091] The SMU monitors that the "Navigation Receiver A Power Supply +5.5V Voltage" is ≥1V and that the navigation receiver A bus is online, and monitors the telemetry parameter "Interface Board Power-on Working Time".

[0092] If the "interface board power-on time" remains unchanged for 5 minutes, it is determined that the interface software of navigation receiver A is malfunctioning. At this time, send "Navigation receiver A power off", wait 1 minute, send "Navigation receiver A power on", and then wait 30 seconds before sending "Start interface software uploading program" to restore the working status of navigation receiver A.

[0093] Following this malfunction, the aforementioned autonomous response measures were implemented only once. Subsequent activation of the monitoring function requires ground intervention.

[0094] b) Abnormal code identifier

[0095] Anomaly codes directly reflect the inter-board communication status between the baseband board and interface board within the navigation receiver. When inter-board communication is abnormal, this can be determined by checking the anomaly code results, and this fault cannot be recovered independently by a single unit. Therefore, monitoring anomaly codes can help determine if the navigation receiver is experiencing an inter-board communication failure.

[0096] In response to the above anomaly, the troubleshooting measures were to power off and then power on the navigation receiver in operation, and then restart the interface software uploading program.

[0097] Figure 10 The implementation logic diagram corresponding to this design is as follows:

[0098] The SMU monitors that the "Navigation Receiver A Power Supply +5.5V Voltage" is ≥1V and that the Navigation Receiver A bus is online, and monitors the "Abnormal Code Identifier" of the telemetry parameters:

[0099] If the "abnormal code identifier" remains "0xA5A5" for 1 minute (using this as an example), it is determined that the abnormality cannot be resolved after the interface software reset of navigation receiver A. At this time, send "Navigation receiver A power off", wait 1 minute, send "Navigation receiver A power on", and then wait 30 seconds before sending "Start interface software uploading program" to complete the restoration of the working state of navigation receiver A.

[0100] Following this malfunction, the aforementioned autonomous response measures were implemented only once. Subsequent activation of the monitoring function requires ground intervention.

[0101] c) Baseband module orbit determination status

[0102] The orbit determination status of the baseband module directly reflects the orbit determination function of the navigation receiver. This status is a comprehensive status indicator, reflecting the working status of the entire process of acquisition, positioning calculation, and orbit determination calculation. Currently, low-Earth orbit satellite navigation receivers often employ a hot-backup design for their internal baseband modules. Therefore, when both baseband modules are determined to be experiencing orbit determination anomalies, fault handling measures are taken.

[0103] In response to the above anomaly, the troubleshooting measures were to power off and then power on the navigation receiver in operation, and then restart the interface software uploading program.

[0104] Figure 11 The implementation logic diagram corresponding to this design is as follows:

[0105] The SMU monitors that the "Navigation Receiver A Power Supply +5.5V Voltage" is ≥1V and the Navigation Receiver A bus is online, and monitors the telemetry parameters "Baseband Module 1 Orbit Determination Status" and "Baseband Module 2 Orbit Determination Status".

[0106] If neither "Baseband Module 1 Orbit Determination Status" nor "Baseband Module 2 Orbit Determination Status" is "11b" for 40 minutes, it is determined that the autonomous fault clearance of Baseband Module 1 and Baseband Module 2 of navigation receiver a has failed. At this time, "Navigation Receiver a Power Off" is sent, followed by "Navigation Receiver a Power On" after a 1-minute interval, and then "Start Interface Software Upload Program" after a 30-second interval, completing the restoration of the working status of navigation receiver a.

[0107] Following this malfunction, the aforementioned autonomous response measures were implemented only once. Subsequent activation of the monitoring function requires ground intervention.

[0108] The embodiments described above are merely preferred embodiments of the present invention. Ordinary variations and substitutions made by those skilled in the art within the scope of the technical solution of the present invention should be included within the protection scope of the present invention.

Claims

1. A system-level satellite telemetry, tracking, and command (TT&C) function autonomous health management design method, characterized in that, include: Autonomous health management is performed on the uplink of the satellite-to-ground telemetry and control link, and the working status of the USB transponder of the satellite telemetry and control subsystem is monitored. If an abnormality is detected by monitoring, the relay spread spectrum transponder will be automatically powered on. The relay spread spectrum transponder is autonomously managed for health, and the power amplifier inside the relay spread spectrum transponder is monitored for power-on status. If the power-on time exceeds the set threshold, the power amplifier inside the relay spread spectrum transponder is set to the off state. Perform autonomous health management on the navigation receivers on duty, monitor the working status of the navigation receivers, and if an abnormality is found, power off the navigation receivers and then power them back on, and restart the interface software uploading program. Autonomous health management is performed on the uplink of the satellite-to-ground telemetry and control link, and the working status of the USB transponder of the satellite telemetry and control subsystem is monitored. The working status includes the PCM lockout indication status, the secondary power supply voltage value, and whether the demodulated output remote control PCM data is valid. Perform autonomous health management on the navigation receiver on duty. Under the premise that the power supply voltage of the navigation receiver is normal and the navigation receiver is online, monitor the working status of the navigation receiver, including the power-on working time of the interface board, the abnormal code mark and the orbit determination status of the baseband module.

2. The system-level satellite telemetry and control function autonomous health management design method according to claim 1, characterized in that, Monitor the PCM lockout indication status of the USB transponder. If it remains unlocked for a set time, the USB transponder's capture synchronization function is deemed faulty. First, send the "Relay Spread Spectrum Transponder Power On" command, then send the "Power Amplifier Power On" command, which will activate the relay telemetry and control receiving and transmitting channels.

3. The system-level satellite telemetry and control function autonomous health management design method according to claim 1, characterized in that, The secondary power supply voltage of the USB transponder is monitored. If the secondary power supply voltage continuously deviates from the nominal range within a set time, it is determined that the USB transponder power module is faulty and the USB transponder is at risk of on-orbit failure. First, a "Relay Spread Spectrum Transponder Power On" command is sent, followed by a "Power Amplifier Power On" command, which turns on the relay telemetry and control receiving channel and the transmitting channel.

4. The system-level satellite telemetry and control function autonomous health management design method according to claim 1, characterized in that, The validity of the remote control PCM data output by the USB transponder demodulation output is judged by monitoring the count of correctly received remote control frames output by the System Management Unit (SMU) of the Data Management Subsystem. If the count of correctly received remote control frames remains unchanged within a set time, the remote control PCM data is determined to be invalid and the USB transponder demodulation function is faulty. The "Relay Spread Spectrum Transponder Power On" command is sent first, followed by the "Power Amplifier Power On" command, which enables the relay telemetry and control receiving and transmitting channels.

5. A system-level satellite telemetry and control function autonomous health management design method according to any one of claims 2 to 4, characterized in that, First, send the "Relay spread spectrum transponder power on" command, then send the "Power amplifier power on" command. Monitor the power on / off status of the relay spread spectrum transponder and the power amplifier. If either status is detected as not powered on, resend the "Relay spread spectrum transponder power on" command and the "Power amplifier power on" command.

6. The system-level satellite telemetry and control function autonomous health management design method according to claim 1, characterized in that, If the monitoring interface board stops operating during its power-on time, it is determined that the navigation receiver is malfunctioning. The system first sends "Navigation receiver power off", then "Navigation receiver power on", and finally "Start interface software uploading program" to restore the navigation receiver's operating status.

7. The system-level satellite telemetry and control function autonomous health management design method according to claim 1, characterized in that, If the monitoring error code indicates an error, it is determined that there is a communication failure between the baseband board and the interface board inside the navigation receiver. First, "Navigation receiver power off" is sent, then "Navigation receiver power on" is sent, and then "Start interface software uploading program" is sent to complete the restoration of the navigation receiver's working status.

8. The system-level satellite telemetry and control function autonomous health management design method according to claim 1, characterized in that, If the orbit determination status of all baseband modules continues to show abnormalities within a threshold time, it is determined that the autonomous fault clearance of the navigation receiver baseband module has failed. First, send "Navigation receiver power off", then send "Navigation receiver power on", and then send "Start interface software uploading program" to complete the restoration of the navigation receiver's working status.

Images