Load startup duration safety management method and system based on multi-time window slip comparison
By using a multi-time window sliding comparison method and setting multi-level duration thresholds, the problem of payload power-on duration management for multi-orbit energy-balanced satellites was solved, realizing autonomous safety management and energy balance of the satellite and improving the safety of on-orbit operation.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- SHANGHAI SATELLITE ENG INST
- Filing Date
- 2026-01-04
- Publication Date
- 2026-05-12
AI Technical Summary
Existing technologies are insufficient to effectively manage the payload operating time of multi-cycle energy-balanced satellites, and traditional methods cannot be compatible with the energy balance requirements of multi-cycle satellites, leading to the risk of onboard energy imbalance.
By employing a multi-time-window sliding comparison method, and setting time window thresholds for single cycles, single loops, and multiple loops, a three-level duration safety defense line is constructed to achieve precise control over the load start-up duration and emergency shutdown measures.
It has achieved autonomous and safe management of multi-orbit energy-balanced satellites, avoiding energy imbalance caused by exceeding the power-on time limit for single or multiple orbits, and enhancing the satellite's on-orbit safe operation capability.
Smart Images

Figure CN122009534A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of satellite autonomous safety management technology, specifically to a method and system for safe management of payload power-on duration using multi-time-window sliding comparison. Background Technology
[0002] With the rapid development of aerospace technology and the increasing number of multi-satellite constellations, autonomous and intelligent on-orbit safety management of multiple satellites has become a development trend. Traditional on-orbit satellite safety management primarily relies on ground control, monitoring satellite status through telemetry alarms and issuing commands from the ground based on fault conditions. This reliance on ground-based telemetry and control systems has led to the development of some satellites with basic autonomous safety management to alleviate ground control pressure. For satellites, ensuring energy safety is paramount and urgent. For satellites with high-power payloads, the operating time of these payloads often needs to be constrained and limited. Traditional autonomous safety management methods involve setting thresholds for single-cycle or single-cycle power-on duration to control satellite energy safety. This approach is typically only suitable for satellites with single-cycle energy balance and is not applicable to multi-cycle energy balance because it requires consideration of more factors, including not only the single-cycle or per-cycle power-on duration but also the total power-on duration across multiple cycles. This involves numerous variables and a complex process. Currently, no descriptions or reports of a technology similar to this invention have been found, nor have similar domestic or international materials been discovered.
[0003] In summary, given the problems of the existing technologies, researching a load start-up duration safety management method and system based on multi-time window sliding comparison has become a critical task that urgently needs to be addressed. Summary of the Invention
[0004] To address the shortcomings of existing technologies, the purpose of this invention is to provide a method and system for safe management of load start-up duration using multi-time-window sliding comparison.
[0005] A load start-up duration safety management method based on multi-time window sliding comparison according to the present invention includes the following steps: Single time window sliding comparison steps: Set a single-cycle start-up time threshold, and count the single-cycle start-up time of the load, and compare it with the single-cycle start-up time threshold; Single-cycle time window sliding comparison steps: Calculate the total duration of multiple startups within a single orbital cycle and compare it with the single-cycle startup duration threshold; Multi-cycle time window sliding comparison steps: Calculate the total duration of multiple cycles of power-on within an energy balance cycle and compare it with the multi-cycle power-on duration threshold.
[0006] Preferably, the single time window sliding comparison step includes: performing a single time window sliding comparison step on the load for the first power-on, and setting a single-cycle power-on duration threshold. Record the moment when the load is first powered on. And the single lap relative to the reference time Initialize to During the initial power-on process of the load, the duration of the current power-on is recorded. ,judge Does it exceed the single-cycle startup time threshold? If the threshold is exceeded, an emergency shutdown of the load is triggered; otherwise, the load is allowed to continue operating until shutdown. After the initial successful startup, the duration of the initial startup is recorded. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed .
[0007] Preferably, the single-cycle time window sliding comparison step includes: recording the second power-on time of the load. And count one orbital period Determine the interval between two load starts. Does it exceed the orbital period? If the orbital period has expired and a new orbital period has begun, then the relative reference time for a single orbit should be updated. Reset the cumulative time for a single lap. And continue the load power-on process, if the load has been powered on for the current time The single-cycle startup time threshold has been exceeded. If the orbital period has not been exceeded and the current orbital period is still within the same orbital period, the single time window sliding comparison, single orbit time window sliding comparison, and multi-orbit time window sliding comparison steps are executed simultaneously.
[0008] Preferably, the steps of synchronously performing single-time window sliding comparison, single-cycle time window sliding comparison, and multi-cycle time window sliding comparison include: during the continuous load power-on process, determining the duration of the load's current power-on operation. Has the single-cycle startup time threshold been exceeded? ,like If so, the load emergency shutdown procedure will be triggered; if Continuously determine the duration of the load's operation. Total time per lap Has the sum exceeded the threshold for single-cycle startup time? ,like If so, the load emergency shutdown procedure will be triggered; if Continuously determine the duration of the load's operation. Cumulative duration of the current period Has the sum exceeded the total uptime threshold for the current period? If the threshold is exceeded, the load emergency shutdown procedure will be triggered; if the load does not trigger any threshold during the second power-on process, it will continue to work until normal shutdown.
[0009] Preferably, the multi-cycle time window sliding comparison step includes: recording the duration of the second load startup. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed Continuously monitor the current moment Compared with the reference time Does the interval exceed the orbital period? If the limit is exceeded, it will be reset on the next boot. , Continuously monitor the current moment With the first boot moment Does the interval exceed the energy balance cycle? If the energy balance cycle is exceeded, a global reset operation will be performed to reset the reference time. Updated to the current time Reset all counters; enter the monitoring cycle for the next energy balance cycle.
[0010] This invention also provides a load power-on duration safety management system based on multi-time-window sliding comparison. This system can be implemented by executing the process steps of the load power-on duration safety management method based on multi-time-window sliding comparison. That is, those skilled in the art can understand the load power-on duration safety management method based on multi-time-window sliding comparison as a preferred embodiment of the load power-on duration safety management system based on multi-time-window sliding comparison. The system includes: Single time window sliding comparison module: used to set the threshold for single-cycle start-up time, and to count the single-cycle start-up time of the load and compare it with the single-cycle start-up time threshold; Single-cycle time window sliding comparison module: used to calculate the total duration of multiple startups within a single orbital cycle and compare it with a single-cycle startup duration threshold; Multi-cycle time window sliding comparison module: used to calculate the total duration of multiple cycles of power-on within an energy balance cycle and compare it with the multi-cycle power-on duration threshold.
[0011] Compared with existing technologies, the present invention has the following beneficial effects: For satellites with multi-orbit energy balance requirements, the present invention provides a new and feasible solution for the autonomous and safe on-orbit management of high-power onboard payloads. By comparing and contrasting the time windows of single-cycle, single-orbit, and multi-orbit cycles, a three-level duration safety threshold defense line is constructed. This avoids the risk of instantaneous overload and overheating of the payload caused by single-cycle power-on timeout, and also prevents onboard energy imbalance caused by exceeding the cumulative power-on time limit in single or multi-orbit cycles. It is not only fully compatible with and enhances the autonomous and safe management capabilities of satellites with single-orbit energy balance, but is also applicable to the autonomous and safe management of satellites with multi-orbit energy balance, providing a new technical path for the safe on-orbit operation of related satellite payloads. Attached Figure Description
[0012] Other features, objects, and advantages of the present invention will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings: Figure 1 The flowchart illustrates a load start-up duration safety management method based on multi-time window sliding comparison provided by the present invention.
[0013] Figure 2 The flowchart shows the nth monitoring cycle of a load start-up duration safety management method based on multi-time window sliding comparison provided by the present invention. Detailed Implementation
[0014] The present invention will now be described in detail with reference to specific embodiments. These embodiments will help those skilled in the art to further understand the present invention, but do not limit the invention in any way. It should be noted that those skilled in the art can make several changes and improvements without departing from the concept of the present invention. These all fall within the protection scope of the present invention.
[0015] Figure 1 A flowchart of a load start-up duration safety management method based on multi-time window sliding comparison provided by the present invention is shown in the figure, including: Set control parameters and monitoring variables, including: : Load single-cycle start-up time threshold, used to limit the maximum working time within a single orbital cycle; : The relative reference time of the total start-up time of a single load cycle; : Orbital period, used to define the length of the time window for single-cycle statistics; Energy balance cycle, used for long-term power consumption balance statistics; Total operating time threshold within the energy balance cycle; : Each time the computer is powered on; : Duration of power-on time each time the device is turned on; : Actual duration of each power-on cycle; : Total cumulative startup time per lap; Total operating time during the current energy balance cycle; : Current system time.
[0016] Step 1: Record the moment of the load's first power-on. And the single lap relative to the reference time Initialize to .
[0017] Step 2: During the initial power-on process of the load, calculate the duration of the current power-on. ,judge Does it exceed the single-cycle startup time threshold? ,if This will trigger the load emergency shutdown procedure.
[0018] Step 3: After the initial power-on is completed normally, record the duration of the initial power-on of the load. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed .
[0019] Step 4: Record the time of the load's second power-on. .
[0020] Step 5: Determine the interval between two load starts. Does it exceed the orbital period? ;like If a new orbital cycle has begun, proceed to step 6; otherwise, proceed to step 8.
[0021] Step 6: Update the single-lap relative reference time Reset the cumulative time for a single lap. And determine the duration the load has been running this time. Has the single-cycle startup time threshold been exceeded? ,like If the load is not detected, then emergency shutdown measures will be triggered; otherwise, proceed to step 7.
[0022] Step 7: Determine whether the total power-on time in the current cycle exceeds the total power-on time threshold within the energy balance cycle. If... Record the duration of the second power-on of the load. Update the current cumulative variable. , ;like Proceed to step 14.
[0023] Step 8: During the continuous load power-on process, determine the duration of the load power-on operation. Has the single-cycle startup time threshold been exceeded? ,like If the load is not detected, then emergency shutdown measures will be triggered; otherwise, proceed to step 9.
[0024] Step 9: Continuously check whether the total startup time of the current cycle exceeds the single-cycle startup time threshold. If... If the load is not detected, then emergency shutdown measures will be triggered; otherwise, proceed to step 10.
[0025] Step 10: Continuously determine whether the total power-on time in the current cycle exceeds the total power-on time threshold within the energy balance cycle. If... If the load fails to shut down, then emergency shutdown measures will be triggered; otherwise, proceed to step 11.
[0026] Step 11: Determine whether the interval between the current time and the reference time for a single orbit exceeds the orbital period. If... Update the single-lap relative reference time Reset the cumulative time for a single lap. If the condition is met, proceed to step 12; otherwise, proceed to step 15.
[0027] Step 12: Determine the duration the load has been running this time. Has the single-cycle startup time threshold been exceeded? ,like If the load is not activated, then emergency shutdown measures will be triggered; otherwise, proceed to step 13.
[0028] Step 13: Determine whether the total power-on time in the current cycle exceeds the total power-on time threshold within the energy balance cycle. If... Record the load shutdown time Update the current cumulative variable. , ;like Proceed to step 14.
[0029] Step 14: Determine if the interval between the current time and the first power-on time exceeds the energy balance cycle. If... Perform a global reset operation to reset the reference time. Updated to the current time ,Will Reset to zero.
[0030] Step 15: Record the duration of the second load power-on. Record the total start-up time per load cycle. Total uptime of load in the current cycle .
[0031] Step 16: Repeat the above steps to enter the monitoring cycle of the next energy balance cycle.
[0032] It is important to note that starting from the second load startup, after each startup, single-time-window sliding comparison, single-cycle time-window sliding comparison, and multi-cycle time-window sliding comparison are executed simultaneously in parallel. The monitoring cycle for the nth energy balance period is as follows: Figure 2 As shown.
[0033] This invention also provides a load power-on duration safety management system based on multi-time-window sliding comparison. This system can be implemented by executing the process steps of the load power-on duration safety management method based on multi-time-window sliding comparison. That is, those skilled in the art can understand the load power-on duration safety management method based on multi-time-window sliding comparison as a preferred embodiment of the load power-on duration safety management system based on multi-time-window sliding comparison. The system includes: Single time window sliding comparison module: used to set the threshold for single-cycle start-up time, and to count the single-cycle start-up time of the load and compare it with the single-cycle start-up time threshold; Single-cycle time window sliding comparison module: used to calculate the total duration of multiple startups within a single orbital cycle and compare it with a single-cycle startup duration threshold; Multi-cycle time window sliding comparison module: used to calculate the total duration of multiple cycles of power-on within an energy balance cycle and compare it with the multi-cycle power-on duration threshold.
[0034] Those skilled in the art will understand that, besides implementing the system and its various devices, modules, and units provided by this invention in the form of purely computer-readable program code, the same functions can be achieved entirely through logical programming of the method steps, making the system and its various devices, modules, and units of this invention function in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers. Therefore, the system and its various devices, modules, and units provided by this invention can be considered as a hardware component, and the devices, modules, and units included therein for implementing various functions can also be considered as structures within the hardware component; alternatively, the devices, modules, and units for implementing various functions can be considered as both software modules implementing the method and structures within the hardware component.
[0035] Specific embodiments of the present invention have been described above. It should be understood that the present invention is not limited to the specific embodiments described above, and those skilled in the art can make various changes or modifications within the scope of the claims, which do not affect the essence of the present invention. Unless otherwise specified, the embodiments and features described in this application can be arbitrarily combined with each other.
Claims
1. A method for safe management of load start-up duration based on multi-time window sliding comparison, characterized in that, include: Single time window sliding comparison steps: Set a single-cycle start-up time threshold, and count the single-cycle start-up time of the load, and compare it with the single-cycle start-up time threshold; Single-cycle time window sliding comparison steps: Calculate the total duration of multiple startups within a single orbital cycle and compare it with the single-cycle startup duration threshold; Multi-cycle time window sliding comparison steps: Calculate the total duration of multiple cycles of power-on within an energy balance cycle and compare it with the multi-cycle power-on duration threshold.
2. The load start-up duration safety management method based on multi-time window sliding comparison according to claim 1, characterized in that, The single time window sliding comparison step includes: For the initial power-on load, a single time window sliding comparison step is performed, and a threshold for a single-cycle power-on duration is set. Record the moment when the load is first powered on. And the single lap relative to the reference time Initialize to ; During the initial power-on process of the load, the duration of the current power-on is recorded. ,judge Does it exceed the single-cycle startup time threshold? If the threshold is exceeded, the load emergency shutdown procedure is triggered; otherwise, the load is allowed to continue operating until shutdown. After the initial power-on is completed normally, record the duration of the initial power-on of the load. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed .
3. The load start-up duration safety management method based on multi-time window sliding comparison according to claim 1, characterized in that, The single-loop time window sliding comparison step includes: Record the second power-on time of the load And count one orbital period Determine the interval between two load starts. Does it exceed the orbital period? ; If the orbital period has expired and a new orbital period has begun, then the single-cycle relative reference time should be updated. Reset the cumulative time for a single lap. And continue the load power-on process, if the load has been powered on for the current time The single-cycle startup time threshold has been exceeded. This will trigger the load emergency shutdown procedure; If the orbital period has not been exceeded, and the current period is still within the same orbital period, the single time window sliding comparison, single orbit time window sliding comparison, and multi-orbit time window sliding comparison steps are executed synchronously.
4. The load start-up duration safety management method based on multi-time window sliding comparison according to claim 3, characterized in that, The steps of synchronously performing single-time window sliding comparison, single-lap time window sliding comparison, and multi-lap time window sliding comparison include: During the continuous load power-on process, determine the duration of the load's current power-on time. Has the single-cycle startup time threshold been exceeded? ,like This will trigger the load emergency shutdown procedure; like Continuously determine the duration of the load's operation. Total time per lap Has the sum exceeded the threshold for single-cycle startup time? ,like This will trigger the load emergency shutdown procedure; like Continuously determine the duration of the load's operation. Cumulative duration of the current period Has the sum exceeded the total uptime threshold for the current period? If the threshold is exceeded, an emergency shutdown of the load will be triggered. If the load does not trigger any threshold during the second power-on process, it will continue to operate until normal shutdown.
5. The load start-up duration safety management method based on multi-time window sliding comparison according to claim 1, characterized in that, The multi-cycle time window sliding comparison step includes: Record the duration of the second power-on of the load. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed ; Continuously monitor the current moment Compared with the reference time Does the interval exceed the orbital period? If the limit is exceeded, it will be reset on the next boot. , ; Continuously monitor the current moment With the first boot moment Does the interval exceed the energy balance cycle? If the energy balance cycle is exceeded, a global reset operation will be performed to reset the reference time. Updated to the current time Reset all counters; The monitoring cycle for the next energy balance period begins.
6. A load start-up duration safety management system based on multi-time window sliding comparison, characterized in that, include: Single time window sliding comparison module: Set a threshold for single-cycle startup time, and count the single-cycle startup time of the load, and compare it with the single-cycle startup time threshold; Single-cycle time window sliding comparison module: Calculates the total duration of multiple startups within a single cycle of an orbital period and compares it with the single-cycle startup duration threshold; Multi-cycle time window sliding comparison module: Calculates the total startup time of multiple cycles within an energy balance cycle and compares it with the multi-cycle startup time threshold.
7. The load start-up duration safety management system based on multi-time window sliding comparison according to claim 6, characterized in that, The single-time-window sliding comparison module includes: For the initial power-on load, a single time window sliding comparison step is performed, and a threshold for a single-cycle power-on duration is set. Record the moment when the load is first powered on. And the single lap relative to the reference time Initialize to ; During the initial power-on process of the load, the duration of the current power-on is recorded. ,judge Does it exceed the single-cycle startup time threshold? If the threshold is exceeded, the load emergency shutdown procedure is triggered; otherwise, the load is allowed to continue operating until shutdown. After the initial power-on is completed normally, record the duration of the initial power-on of the load. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed .
8. The load start-up duration safety management system based on multi-time window sliding comparison according to claim 6, characterized in that, The single-loop time window sliding comparison module includes: Record the second power-on time of the load And count one orbital period Determine the interval between two load starts. Does it exceed the orbital period? ; If the orbital period has expired and a new orbital period has begun, then the single-cycle relative reference time should be updated. Reset the cumulative time for a single lap. And continue the load power-on process, if the load has been powered on for the current time The single-cycle startup time threshold has been exceeded. This will trigger the load emergency shutdown procedure; If the orbital period has not been exceeded, and the current period is still within the same orbital period, the single time window sliding comparison, single orbit time window sliding comparison, and multi-orbit time window sliding comparison modules will be triggered synchronously.
9. The load start-up duration safety management system based on multi-time window sliding comparison according to claim 3, characterized in that, The synchronous triggering of single-time window sliding comparison, single-lap time window sliding comparison, and multi-lap time window sliding comparison modules includes: During the continuous load power-on process, determine the duration of the load's current power-on time. Has the single-cycle startup time threshold been exceeded? ,like This will trigger the load emergency shutdown procedure; like Continuously determine the duration of the load's operation. Total time per lap Has the sum exceeded the threshold for single-cycle startup time? ,like This will trigger the load emergency shutdown procedure; like Continuously determine the duration of the load's operation. Cumulative duration of the current period Has the sum exceeded the total uptime threshold for the current period? If the threshold is exceeded, an emergency shutdown of the load will be triggered. If the load does not trigger any threshold during the second power-on process, it will continue to operate until normal shutdown.
10. The load start-up duration safety management system based on multi-time window sliding comparison according to claim 1, characterized in that, The multi-cycle time window sliding comparison module includes: Record the duration of the second power-on of the load. And update the cumulative variable to include the cumulative time for a single lap of operation. and cumulative duration of energy balance cycle All superimposed ; Continuously monitor the current moment Compared with the reference time Does the interval exceed the orbital period? If the limit is exceeded, it will be reset on the next boot. , ; Continuously monitor the current moment With the first boot moment Does the interval exceed the energy balance cycle? If the energy balance cycle is exceeded, a global reset operation will be performed to reset the reference time. Updated to the current time Reset all counters; The monitoring cycle for the next energy balance period begins.