All-electric propulsion satellite energy full-autonomous management method and system

Abstract

The application provides a kind of full electric satellite energy full autonomous management method, by carrying hardware operation system, to the sequential shunt adjustment module group and the charge-discharge adjustment module group, the autonomous management is executed, to the sequential shunt adjustment module, when being in protection state for 3 frames in succession, reset instruction is sent, and still protection in next period is judged as permanent fault and stops monitoring;When solar wing current is insufficient, the module is shunted for 3 frames in succession, and protection MOS tube disconnecting instruction is sent to force power supply;To the charge-discharge adjustment module, when the switch on battery side or bus side is disconnected for 3 frames in succession, auxiliary source shutdown instruction is sent to isolate fault;When the number of work is less than threshold value, open command is sent in cycle, and still insufficient after 3 times retry, then trigger whole star load reduction early warning.

Description

Technical Field

[0001] This invention relates to the field of spacecraft energy technology, and in particular to a fully autonomous energy management method and system for an all-electric propulsion satellite. Background Technology

[0002] The energy system of an all-electric propulsion satellite needs to achieve comprehensive management of batteries, power distribution and energy regulation devices. Among them, the autonomous management and reconfiguration of the core modules in the power control and distribution unit (PCDU) is crucial to maintaining the energy supply of the satellite under complex operating conditions.

[0003] For geostationary orbit all-electric propulsion satellites with long-duration transfer orbits, telemetry, tracking, and command (TT&C) resources are often scarce. The Sequential shunt regulation module (S3Ri) group and Charge / Discharge regulation module (BCDRi) group within the PCDU often employ hot backup designs. Current technologies lack sufficient capabilities for monitoring the operational status, identifying anomalies, and handling these modules. This makes it difficult for them to autonomously complete fault recovery and module reconfiguration without TT&C support, easily leading to insufficient energy utilization or fault propagation, and failing to maximize the overall satellite energy balance.

[0004] Therefore, there is an urgent need for a fully autonomous energy management strategy for all-electric propulsion satellites to overcome the shortcomings of existing technologies. Summary of the Invention

[0005] To address the shortcomings of existing technologies, this invention provides a fully autonomous energy management method and system for all-electric propulsion satellites, used to monitor and manage the power conversion module group within the power control and distribution unit, in order to achieve fault detection, diagnosis, and autonomous recovery.

[0006] To achieve the above-mentioned technical effects, on the one hand, this invention provides a fully autonomous energy management method for an all-electric propulsion satellite, comprising the following steps:

[0007] The system is equipped with a hardware operating system, which includes a power control and distribution unit, other hardware of the power supply and distribution subsystem, and an onboard computer. The power control and distribution unit includes a telemetry and remote control module, multiple hot-backup sequential shunt regulation modules, and multiple hot-backup charge and discharge regulation modules. The other hardware of the power supply and distribution subsystem includes a solar cell array connected to the sequential shunt regulation module and a battery pack connected to the charge and discharge regulation module. The onboard computer communicates with the telemetry and remote control module via a 1553B bus, and the telemetry and remote control module interacts with the sequential shunt regulation module and the charge and discharge regulation module via an internal bus.

[0008] The onboard computer acquires telemetry data from the power control and distribution unit in real time via the 1553B bus.

[0009] The onboard computer performs autonomous management of the sequential flow control module group, including:

[0010] When any of the sequential current shunting adjustment modules is detected to be in protection mode for 3 consecutive frames, a protection reset command is sent to the corresponding sequential current shunting adjustment module. If it is still in protection mode in the next cycle, it is determined to be a permanent fault and monitoring is stopped; if the state is restored, real-time monitoring continues.

[0011] When the current supplied by the solar panel is less than the sum of the bus load current and the battery charging current, a protection MOSFET disconnection command is sent to the sequential shunt adjustment module, which is in the shunt state for three consecutive frames, to force it to supply power.

[0012] After sending the protection MOSFET disconnect command, verify the command execution status;

[0013] If the operation fails, the primary telemetry and remote control module will retransmit 3 times and then switch to the backup telemetry and remote control module to retransmit.

[0014] If the backup telemetry and remote control module fails to retransmit after 3 attempts, a long-term closed abnormal alarm flag for the shunt MOS transistor will be generated.

[0015] The onboard computer performs autonomous management of the charge / discharge regulation module group, including:

[0016] When any of the battery-side or bus-side protection switches of the charge / discharge regulation modules are disconnected for three consecutive frames, an auxiliary source shutdown command is sent to isolate the fault.

[0017] After sending the auxiliary source shutdown command, the auxiliary source switch status is verified in the next cycle;

[0018] If the device is not powered off, the command will be resent. If the device fails three times, a power-off fault alarm flag for the charge / discharge regulation module will be generated.

[0019] When the number of operations of the charge and discharge regulation module is lower than a preset threshold, the auxiliary source power-on command is sent to the power-off module in a loop, and the auxiliary source power-on command is sent to each module whose auxiliary source is powered off in sequence to trigger its power-on.

[0020] After completing one round of activation, count the number of working modules in the auxiliary source in the powered-on state. If the number of working modules is still lower than a preset threshold, initiate a new round of activation.

[0021] If three rounds of activation are still insufficient, a power-on fault alarm flag for the charge / discharge regulation module and a warning of insufficient overall satellite power will be generated.

[0022] Furthermore, in the protection reset operation of the sequential current shunt adjustment module, the protection state is defined as the protection MOS transistor being disconnected;

[0023] After the protection reset command is executed, if the sequential current shunting adjustment module is still in the protection state, it is marked as a permanent fault and monitoring is stopped; if the state is restored, real-time monitoring continues.

[0024] Furthermore, the preset threshold is dynamically set according to the satellite power requirements.

[0025] On the other hand, the present invention also provides a fully autonomous energy management system for an all-electric propulsion satellite using the above-described method, comprising:

[0026] Onboard computer, used to run energy autonomous management strategy software;

[0027] The power control and distribution unit includes a hot-backup telemetry and remote control module, a sequential current shunt regulation module group, and a charge and discharge regulation module group;

[0028] The 1553B bus is used to connect the onboard computer and the telemetry and remote control module.

[0029] The solar cell array is used to connect to the sequential shunt adjustment module.

[0030] A battery pack is used to connect to the charge / discharge regulation module.

[0031] The fully autonomous energy management method for all-electric propulsion satellites described in this invention achieves autonomous energy management and operation by controlling the core PCDU (Power Conversion Unit) within the all-electric propulsion satellite energy system, especially the important power conversion groups (sequential shunt regulation module and charge / discharge regulation module), even when the all-electric propulsion satellite energy system is in a transfer orbit that repeatedly traverses the Van Allen radiation belt for extended periods. It can monitor and manage the power conversion module group within the energy system to achieve fault detection, diagnosis, and autonomous recovery, and has broad applicability. Attached Figure Description

[0032] Figure 1 A flowchart illustrating the steps of the fully autonomous energy management method for an all-electric propulsion satellite according to an embodiment of the present invention;

[0033] Figure 2 This is a schematic diagram of the hardware operation system of the fully autonomous energy management method for an all-electric propulsion satellite provided in an embodiment of the present invention;

[0034] Figure 3 This is a flowchart illustrating the autonomous control process for the abnormal protection of the sequential shunting adjustment module in the fully autonomous energy management method for an all-electric propulsion satellite according to an embodiment of the present invention.

[0035] Figure 4A flowchart illustrating the autonomous control process of the sequential shunt adjustment module changing to a constant shunt abnormal state in the fully autonomous energy management method for an all-electric propulsion satellite provided in an embodiment of the present invention.

[0036] Figure 5 The flowchart illustrates the autonomous management and control process of the charging and discharging regulation module in the fully autonomous energy management method for an all-electric propulsion satellite, as provided in an embodiment of the present invention. Detailed Implementation

[0037] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0038] It should be noted that references to "an embodiment," "embodiment," "example embodiment," etc., in this specification refer to the described embodiment including specific features, structures, or characteristics, but not every embodiment must include these specific features, structures, or characteristics. Furthermore, such expressions do not refer to the same embodiment. Moreover, when describing specific features, structures, or characteristics in conjunction with embodiments, whether or not explicitly described, it is indicated that incorporating such features, structures, or characteristics into other embodiments is within the knowledge of those skilled in the art.

[0039] Furthermore, certain terms are used in the specification and subsequent claims to refer to specific components or parts. Those skilled in the art will understand that manufacturers may use different names or terms to refer to the same component or part. This specification and subsequent claims do not distinguish components or parts by differences in name, but rather by differences in function. The terms "comprising" and "including" used throughout the specification and subsequent claims are open-ended and should be interpreted as "including but not limited to." Additionally, the term "connection" here includes any direct and indirect electrical connection means. Indirect electrical connection means include connections made through other means.

[0040] Figure 1 This invention illustrates a fully autonomous energy management method for all-electric propulsion satellites, particularly suitable for geostationary orbit all-electric propulsion satellites with limited telemetry and control resources for long-duration transfer orbits; the method includes the following steps:

[0041] S101: Equipped with a hardware operating system, the system includes a power control and distribution unit, other hardware of the power supply and distribution subsystem, and an onboard computer. The power control and distribution unit includes a telemetry and remote control module, multiple hot-backup sequential shunt regulation modules, and multiple hot-backup charge and discharge regulation modules. The other hardware of the power supply and distribution subsystem includes a solar cell array connected to the sequential shunt regulation module and a battery pack connected to the charge and discharge regulation module. The onboard computer communicates with the telemetry and remote control module via a 1553B bus, and the telemetry and remote control module interacts with the sequential shunt regulation module and the charge and discharge regulation module via an internal bus.

[0042] join Figure 2 In this embodiment, a primary backup telemetry and control module (TMTC) is preferably used, which can be either hot backup or cold backup. Multiple sequential current regulation modules (S3Ri, where i is a natural number and is generally ≤32) and multiple charge and discharge regulation modules (BCDRi, where i is a natural number and is generally ≤12) are used in hot backup mode. The TMTC module in the power control and distribution unit (PCDU) interacts with the S3R module and BCDR module through the internal bus. The PCDU is also equipped with power distribution, thermal control, and thermal control modules, necessary capacitor modules, and bus overvoltage protection components designed to protect the PCDU bus voltage from excessively high voltage.

[0043] Other hardware components within the power supply and distribution subsystem include battery packs (BAT) connected to the BCDR within the PCDU and solar arrays (SA) connected to the S3R within the PCDU.

[0044] The onboard computer (energy system host computer) serves as the operating terminal for the autonomous energy management strategy of the all-electric propulsion satellite in this embodiment. It interacts with the TMTC module in the PCDU via the 1553B bus, which includes command transmission and telemetry feedback.

[0045] S102: The onboard computer acquires telemetry data from the power control and distribution unit in real time via the 1553B bus.

[0046] S103: The onboard computer performs autonomous management of the sequential flow control module group, including:

[0047] When any of the sequential current shunting adjustment modules is detected to be in protection state for 3 consecutive frames, a protection reset command is sent to the corresponding sequential current shunting adjustment module. If it is still in protection state in the next cycle, it is determined to be a permanent fault and monitoring is stopped.

[0048] When the current supplied by the solar panel is less than the sum of the bus load current and the battery charging current, a protection MOSFET disconnection command is sent to the sequential shunt adjustment module, which is in the shunt state for three consecutive frames, to force it to supply power.

[0049] Furthermore, in the protection reset operation of the sequential shunt adjustment module, the protection state is defined as the protection MOS transistor being disconnected; after the protection reset command is executed, if the sequential shunt adjustment module is still in the protection state, it is marked as a permanent fault and monitoring is stopped; if the state is restored, real-time monitoring continues.

[0050] Specifically, sending a protection MOS transistor disconnect command to the sequential shunt adjustment module that is in a shunt state for three consecutive frames to force it to be powered includes:

[0051] After sending the protection MOSFET disconnect command, the command execution status is verified. If execution fails, the primary telemetry and control module retransmits the command three times, then switches to the backup telemetry and control module for retransmission. If the backup telemetry and control module still fails to retransmit after three attempts, a long-term closed shunt MOSFET abnormality alarm flag is generated. In other words, after sending the command, the execution status is verified; if unsuccessful, the primary telemetry and control module (TMTC) retransmits the command three times, then switches to the backup TMTC for retransmission. If the backup TMTC still fails to retransmit after three attempts, a long-term closed shunt MOSFET abnormality alarm flag is generated. If the command is executed correctly, the module's protection status is no longer monitored; if the command is not executed after the TMTC is switched off, monitoring continues. This strategy maximizes the utilization of solar panel power and maintains energy balance when solar panel power is insufficient.

[0052] The onboard computer autonomously manages the sequential shunt regulation module (S3Ri) group, based on the hardware characteristics of the S3R module: its internal diodes are used to isolate the 100V bus, the shunt MOSFETs achieve shunt or switching regulation under the control of the PCDU error amplification signal, and the normally closed protection MOSFETs serve as fault isolation. Specifically, this includes:

[0053] When any sequential shunt regulator module is detected to be in protection mode for three consecutive frames (protection mode refers to the protection MOSFET being disconnected, usually triggered by the internal current sampling protection circuit when the power supply isolation diode fails due to a short circuit, in order to avoid bus short circuit and ensure power input to the solar array), a protection reset command is sent to the corresponding module. This reset operation can prevent protection malfunctions (false disconnection of the shunt MOSFET) caused by single-event events in space. After the command is sent, if the module is still in protection mode in the next cycle, it is determined to be a permanent fault and monitoring is stopped; if the state recovers (i.e., the fault is due to occasional influence from the space environment), real-time monitoring continues.

[0054] When the current supplied by the solar array is less than the sum of the bus load current and the battery charging current (which may be due to insufficient power caused by the solar array being blocked, deviation of the solar angle, or loss of some solar cell arrays; in this case, all S3Ri should be in the power supply state), if a certain sequential shunt adjustment module is in the shunt state for 3 consecutive frames, it is judged as abnormal (abnormal closure of the shunt MOSFET), and a protection MOSFET disconnection command is sent to force it to supply power.

[0055] S104: The onboard computer performs autonomous management of the charge / discharge regulation module group, including:

[0056] When the battery-side or bus-side protection switch of any charge / discharge regulation module is disconnected for 3 consecutive frames, an auxiliary power-off command is sent to isolate the fault.

[0057] When the number of working operations of the charge and discharge regulation module is lower than the preset threshold, it sends auxiliary source power-on commands to the shutdown module in a loop. If it is still insufficient after 3 retries, it triggers a satellite load reduction warning.

[0058] The preset threshold is dynamically set according to the satellite power requirements.

[0059] Specifically, the fault isolation of the charge / discharge regulation module includes: after sending the auxiliary source shutdown command, verifying the auxiliary source switch status in the next cycle; if it is not shut down, resend the command, and generate the shutdown fault alarm flag of the charge / discharge regulation module after a total of 3 failures.

[0060] Furthermore, when the operating load of the charge / discharge regulation module falls below a preset threshold, it continuously sends auxiliary power-on commands to the shutdown module. If the load remains insufficient after three retries, it triggers a satellite-wide load reduction warning, including:

[0061] The auxiliary source power-on module is sent sequentially to each auxiliary source module that has been powered off; after one round of power-on is completed, the number of working modules in the auxiliary source power-on state is counted. If the number of working modules is still lower than the preset threshold, a new round of power-on is initiated; if the cumulative number of power-on is still insufficient after 3 rounds, a power-on fault alarm flag for the charge and discharge regulation module and a warning of insufficient energy for the entire satellite are generated.

[0062] The onboard computer autonomously manages the Charge-Discharge Regulation Module (BCDRi) group because the number of BCDRims, as crucial power conversion modules directly connected to the battery within the PCDU, directly impacts the energy supply from the battery to the bus. An abnormally reduced number of BCDRims can cause the remaining hot-backup BCDRims to exceed their power load limits, triggering a cascading overpower failure that damages all modules and prevents the battery from supplying energy to the bus. This is particularly detrimental to all-electric propulsion satellites equipped with a single battery bank. Specifically, this includes:

[0063] When the battery-side or bus-side protection switch of any charge / discharge regulation module is disconnected for 3 consecutive frames (indicating a short circuit or short-term overcurrent in the main power path), an auxiliary source APS shutdown command is sent to isolate the fault. After sending, the auxiliary source APS switch status is verified in the next cycle. If it is not shut down, the command is resent. If it fails 3 times, a charge / discharge regulation module shutdown fault alarm flag is generated. After shutdown, BCDRi disconnects the battery from the bus, suspends power conversion, and does not participate in group operation.

[0064] When the number of working modules in the charge / discharge regulation module falls below a preset threshold, to avoid affecting the charging and discharging capacity of the Earth Shadow Season battery, it is necessary to cyclically send auxiliary source APS power-on commands to the shutdown module: power-on commands are sent sequentially to each module in the auxiliary source APS that has been shut down, and the number of working modules in the power-on state is counted after each round of power-on; if it is still below the preset threshold, a new round of power-on is initiated; if it is still insufficient after 3 rounds of power-on, a power-on fault alarm flag for the charge / discharge regulation module and an insufficient number of power-on alarm flag are generated. At the same time, the fault flag is transmitted to the onboard computer control software to generate a Level 1 warning for insufficient energy supply, which is used by the satellite to shut down the load and reduce power consumption. In this way, the fault detection, isolation and re-power-on reconstruction of the BCDRi group in the power system PCDU are realized, maximizing the utilization of the number of BCDRi and ensuring the energy balance of the entire satellite.

[0065] This embodiment takes the 12-channel sequential shunt adjustment module (S3Ri, i=0~11) in the power control and distribution unit (PCDU) of an all-electric propulsion satellite as an example to explain in detail the autonomous management process of the S3Ri group by the onboard computer.

[0066] Each S3Ri module includes a power supply isolation diode for isolating the 100V bus, a shunt MOSFET controlled by the PCDU error amplifier signal (to achieve shunt or switching regulation), and a normally closed protection MOSFET (for fault isolation). During normal operation, the protection MOSFET is closed (telemetry value is 0, negative logic, defined as "normal state"), and the shunt MOSFET switches between power supply, shunt, or regulation states according to the error signal to ensure stable power input to the bus from the solar array during the sunshine period.

[0067] When the power supply isolation diode fails due to a short circuit, the S3Ri's internal current sampling protection circuit will disconnect the protection MOSFET (telemetry value 1, negative logic, defined as "protected state"), forcing the solar array to supply power to the bus, thus preventing a short circuit to the bus and wasting energy from the solar array. Simultaneously, to eliminate protection malfunctions caused by single-event events, the onboard computer executes the following strategies (e.g., Figure 3 As shown):

[0068] 1. Status Detection: The energy autonomous management software monitors the protection status of 12 S3Ri channels in real time. If three consecutive telemetry frames show that the protection MOS transistor of a certain S3Ri channel is in the off state (telemetry value = 1), it is determined that the channel has entered the protection state.

[0069] 2. Reset command sending: Send a protection reset command to this S3Ri channel. The command aims to close the protection MOSFET (restore the normal state).

[0070] 3. Status Verification: After the command is sent, the status of this channel is checked again in the next software control cycle.

[0071] If it is still in a protected state (telemetry value = 1), it is determined to be a real fault (such as a permanent short circuit of the diode), and the sending of reset commands and status detection are stopped;

[0072] If the system returns to normal (telemetry value = 0), it is determined to be an occasional malfunction caused by the space environment, and the protection status of that path will continue to be monitored in real time.

[0073] During periods of sunlight, all S3Ri should be in a powered state when the current supplied to the bus by the solar array is less than the sum of the bus load current and the battery charging current (i.e., the PCDU main error amplifier signal VMEA < the minimum threshold VMEA-low under sunlight conditions). If an abnormal current shunt occurs on a certain S3Ri, the following strategy should be implemented (e.g., Figure 4 As shown):

[0074] 1. Abnormal judgment: If three consecutive telemetry frames show that a certain S3Ri is in a shunt state (shunt MOSFET abnormally closed), it is judged as abnormal shunt, and an abnormal alarm flag ZFN-i (i corresponds to channels 0 to 11) for the long-term closed shunt MOSFET of that channel is established.

[0075] 2. Forced power supply command: Send a protection MOSFET disconnect command to the S3Ri circuit (force it to supply power to the bus) and verify the command execution status: If the protection MOSFET is already in the disconnected state (telemetry value = 1), the command execution is correct, and the monitoring of the protection status of the circuit is stopped; if it is still in the closed state (telemetry value = 0), the command is resent through the primary telemetry and remote control module (TMTC), and resent a total of 3 times.

[0076] 3. Master / Slave Switching and Alarm: If the master TMTC fails to send the command after 3 retransmissions, the switchover flag FAN is set, and the system is switched to the backup TMTC, which continues to send commands. If the backup TMTC fails to send the command after 3 retransmissions, the master control protection switch disconnect command abnormal alarm flag ZFN1a-i (master failure) and the backup control protection switch disconnect command abnormal alarm flag ZFN1b-i (backup failure) are set, and the switchover flag FAN is retained. If the command is still not executed after the TMTC switchover, the status of the protection channel continues to be monitored.

[0077] All alarm signs (ZFN-i, ZFN1a-i, ZFN1b-i) can only be cleared via ground control.

[0078] The above strategy enables the S3Ri power supply to be forcibly diverted when the power of the solar array is insufficient, maximizing the utilization of the solar cell array power and ensuring the overall energy balance of the satellite.

[0079] This embodiment takes the 6-channel charge / discharge regulation module (BCDRi, i=1~6) in the power control and distribution unit (PCDU) of an all-electric propulsion satellite as an example. This module group adopts a hot backup design (including 1 backup module) to ensure that the Earth Shadow Season Battery can release full power to the bus and maintain voltage stability. The following details the autonomous management process of the BCDRi group by the onboard computer.

[0080] All six BCDRi modules are directly connected to the battery pack and the bus. As the core power conversion module, their operating status directly affects the energy supply from the battery to the bus. The energy autonomous management strategy software monitors the battery-side protection switch status (disconnected means "protected") and bus-side protection switch status (disconnected means "protected") of each BCDRi in real time, and exchanges commands and status information with the PCDU's telemetry and control module (TMTC) via the 1553B bus.

[0081] When a short circuit or short-term overcurrent occurs in the main power path of the BCDRi, its battery-side or bus-side protection switch will trip (entering "protection" mode). See also Figure 5 To prevent the fault from spreading and causing a cascading overpower fault (damaging all BCDRi and preventing the battery from supplying power to the bus), the following BCDRi module fault isolation and shutdown control strategy is implemented:

[0082] 1. Anomaly Detection: If the software detects that the battery-side switch and / or bus-side switch of a certain BCDRi (such as BCDR1) is in a "protection" state (disconnected) for 3 consecutive frames of telemetry, the module is determined to be abnormal.

[0083] 2. Power-off command sending: Send an auxiliary source APS power-off command to the BCDRi. The command aims to shut down its power control and drive components, causing the module to disconnect the battery from the bus, stop power conversion, and exit group operation.

[0084] 3. Command Verification and Retry: After the command is sent, the APS power-on / off status of the BCDRi is checked in the next software control cycle: if it is already in the power-off state, the sending of commands and the monitoring of its power-on / off status are stopped, and the software continues to monitor other modules; if it is not in the power-off state, the power-off command is sent repeatedly, for a total of 3 times.

[0085] 4. Alarm generation: If the device is still not powered off after the third command is sent, a power off fault alarm flag ZFMig (i = 1 to 6, corresponding to channels 1 to 6) is generated for that BCDRi, and the power off control function of this module is no longer executed.

[0086] like Figure 5 As shown, to avoid affecting the charging and discharging capacity of the Earth Shadow Season battery due to an excessive number of BCDRi shutdowns (especially to prevent damage to remaining modules due to overload), the following group management strategy is implemented when the number of shutdowns exceeds a set threshold (the threshold is 1 in this embodiment):

[0087] 1. Quantity detection: If the software detects that the number of powered-off modules in the 6 BCDRi channels is greater than 1 for 3 consecutive frames (e.g., both BCDR2 and BCDR3 are powered off), then it is determined that module reconstruction is required.

[0088] 2. Cyclic startup operation: Send auxiliary source APS startup commands to all shutdown modules (such as BCDR2 and BCDR3) in sequence. After sending each command, verify its startup status before executing the next command. After one startup cycle is completed, count the number of BCDRi in the startup state. If there are still more than 1 shutdown modules, initiate a new startup cycle.

[0089] 3. Retry Limit and Alarm: If the number of shutdowns is still greater than 1 after a total of 3 startup operations, generate: Startup Failure Alarm Flag ZFMik (i = 1~8, indicating modules that failed to start); Insufficient Startup Quantity Failure Alarm Flag ZFM.

[0090] 4. Satellite-wide early warning response: When ZFM is detected, it is determined that the satellite load demand may not be met due to insufficient BCDRi numbers during the eclipse period, and a Level 1 early warning sign for insufficient power supply is set up. After receiving the sign, the satellite control software shuts down unnecessary loads to reduce power consumption.

[0091] All alarm indicators (ZFMig, ZFMik, ZFM) can only be cleared via ground control commands. This strategy enables fault isolation, group reconfiguration, and risk warning for the BCDRi module, maximizing battery power supply and overall satellite energy balance.

[0092] This invention also provides a fully autonomous power management system for an all-electric propulsion satellite using the above method, comprising:

[0093] Onboard computer, used to run energy autonomous management strategy software;

[0094] The power control and distribution unit includes a hot-backup telemetry and remote control module, a sequential current shunt regulation module group, and a charge and discharge regulation module group;

[0095] The 1553B bus is used to connect the onboard computer and the telemetry and remote control module.

[0096] The solar cell array is used to connect to the sequential shunt adjustment module.

[0097] A battery pack is used to connect to the charge / discharge regulation module.

[0098] In summary, to enable all-electric propulsion satellites to operate autonomously during long-term transfer orbits without telemetry and control, the energy system focuses on monitoring and managing the power conversion module group (sequential shunt regulation module and charge / discharge regulation module) within the PCDU. It actively monitors and, in the event of an abnormal fault, autonomously recovers from the fault according to the autonomous management strategy, attempting to reconfigure the system to maximize the overall satellite power requirements and ensure energy balance.

[0099] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element. Furthermore, it should be noted that the scope of the methods and apparatuses in the embodiments of the present invention is not limited to performing functions in the order shown or discussed, but may also include performing functions substantially simultaneously or in the reverse order, depending on the functions involved. For example, the described methods may be performed in a different order than described, and various steps may be added, omitted, or combined. Additionally, features described with reference to certain examples may be combined in other examples.

[0100] Of course, the present invention may have other various embodiments. Without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and modifications according to the present invention, but these corresponding changes and modifications should all fall within the protection scope of the appended claims.

Claims

1. A method for fully autonomous energy management of an all-electric propulsion satellite, characterized in that, Including the following steps: The system is equipped with a hardware operating system, which includes a power control and distribution unit, other hardware of the power supply and distribution subsystem, and an onboard computer. The power control and distribution unit includes a telemetry and remote control module, multiple hot-backup sequential shunt regulation modules, and multiple hot-backup charge and discharge regulation modules. The other hardware of the power supply and distribution subsystem includes a solar cell array connected to the sequential shunt regulation module and a battery pack connected to the charge and discharge regulation module. The onboard computer communicates with the telemetry and remote control module via a 1553B bus, and the telemetry and remote control module interacts with the sequential shunt regulation module and the charge and discharge regulation module via an internal bus. The onboard computer acquires telemetry data from the power control and distribution unit in real time via the 1553B bus. The onboard computer performs autonomous management of the sequential flow control module group, including: When any of the sequential current shunting adjustment modules is detected to be in protection mode for 3 consecutive frames, a protection reset command is sent to the corresponding sequential current shunting adjustment module. If it is still in protection mode in the next cycle, it is determined to be a permanent fault and monitoring is stopped; if the state is restored, real-time monitoring continues. When the current supplied by the solar panel is less than the sum of the bus load current and the battery charging current, a protection MOSFET disconnection command is sent to the sequential shunt adjustment module, which is in the shunt state for three consecutive frames, to force it to supply power. After sending the protection MOSFET disconnect command, verify the command execution status; If the operation fails, the primary telemetry and remote control module will retransmit 3 times and then switch to the backup telemetry and remote control module to retransmit. If the backup telemetry and remote control module fails to retransmit after 3 attempts, a long-term closed abnormal alarm flag for the shunt MOS transistor will be generated. The onboard computer performs autonomous management of the charge / discharge regulation module group, including: When any of the battery-side or bus-side protection switches of the charge / discharge regulation modules are disconnected for three consecutive frames, an auxiliary source shutdown command is sent to isolate the fault. After sending the auxiliary source shutdown command, the auxiliary source switch status is verified in the next cycle; If the device is not powered off, the command will be resent. If the device fails three times, a power-off fault alarm flag for the charge / discharge regulation module will be generated. When the number of operations of the charge and discharge regulation module is lower than a preset threshold, the auxiliary source power-on command is sent to the power-off module in a loop, and the auxiliary source power-on command is sent to each module whose auxiliary source is powered off in sequence to trigger its power-on. After completing one round of activation, count the number of working modules in the auxiliary source in the powered-on state. If the number of working modules is still lower than a preset threshold, initiate a new round of activation. If three rounds of activation are still insufficient, a power-on fault alarm flag for the charge / discharge regulation module and a warning of insufficient overall satellite power will be generated.

2. The fully autonomous energy management method for an all-electric propulsion satellite according to claim 1, characterized in that, In the protection reset operation of the sequential current shunt adjustment module, the protection state is defined as the protection MOS transistor being disconnected; After the protection reset command is executed, if the sequential current shunting adjustment module is still in the protection state, it is marked as a permanent fault and monitoring is stopped; if the state is restored, real-time monitoring continues.

3. The fully autonomous energy management method for an all-electric propulsion satellite according to claim 1, characterized in that, The preset threshold is dynamically set according to the satellite power requirements.

4. A fully autonomous power management system for an all-electric propulsion satellite, used to implement the method as described in any one of claims 1 to 3, characterized in that, Including: Onboard computer, used to run energy autonomous management strategy software; The power control and distribution unit includes a hot-backup telemetry and remote control module, a sequential current shunt regulation module group, and a charge and discharge regulation module group; The 1553B bus is used to connect the onboard computer and the telemetry and remote control module; The solar cell array is used to connect to the sequential shunt adjustment module. A battery pack is used to connect to the charge / discharge regulation module.

Images