A method for warm backup of network devices adapted to space environment

Abstract

This invention discloses a warm backup method for network devices adapted to the space environment, relating to the field of manned spacecraft overall design. The method configures identical primary and backup devices with identical hardware and software within a switch. The primary and backup devices share network port connectors but have independent power conversion modules, 1553B bus communication modules, network data exchange modules, and network interface modules. During operation, both the primary and backup devices simultaneously power on and activate their 1553B bus communication and network data exchange modules, but only the primary device's network interface module is activated to forward data. The spacecraft information system periodically synchronizes the network configuration information of the primary device to the backup device. When the primary device fails, its power supply is disconnected, and the backup device's network interface module is activated. The backup device then takes over data forwarding based on the synchronized network configuration. This invention solves the problems of excessively long cold backup recovery times and the complexity of hot backup systems.

Description

Technical Field

[0001] This invention relates to the field of overall design technology for manned spacecraft, and in particular to a method for thermal backup of network equipment adapted to the space environment. Background Technology

[0002] With the development of Ethernet and wireless communication technologies, terrestrial networks have extended into space, and the number of aerospace products using Ethernet technology is gradually increasing, especially in the field of manned spacecraft. A large number of network terminals have been used in orbit, and a high-speed information transmission network for spacecraft has been established with aerospace Ethernet switches using Ethernet technology as the core.

[0003] Due to space radiation effects such as single-event upsets in the space environment, electronic devices, especially high-density integrated switches, are prone to intermittent failures. To ensure the reliability of the network system, aerospace Ethernet switches typically employ a dual-machine backup mechanism. The current mainstream solution is dual-machine cold backup, which involves configuring identical primary and backup devices within the switch, sharing the external interface. During normal operation, the primary device runs while the backup device is powered off; when the primary device fails, the backup device is activated and takes over the operation.

[0004] However, due to the complexity of the protocols loaded by the switches and the long startup time of the devices (usually 5-10 minutes), the above-mentioned dual-machine cold backup method suffers from excessively long system recovery time. As network systems assume more and more functions in spacecraft information systems, their tolerance for data interruption is constantly decreasing. Once critical platform data is interrupted, it will affect the safety of the spacecraft; once critical payload data is interrupted, it may affect the effectiveness of the entire space experiment. Therefore, the traditional dual-machine cold backup method can no longer meet the usage requirements.

[0005] If a hot backup method with two machines operating at full load simultaneously is used, a series of problems need to be solved, such as data aggregation from the same source, identification of valid data, and processing of backup data. This will inevitably increase the complexity and difficulty of implementation of the system, consume the computing power and system resources of the switch, and reduce the reliability of the system. Therefore, it is not suitable for use in aerospace systems. Summary of the Invention

[0006] In view of this, the present invention aims to provide a warm backup method for network equipment adapted to the space environment. It utilizes the unique 1553B bus communication function of the aerospace Ethernet switch and the external interface in the original cold backup mode to realize the warm backup function of the aerospace Ethernet switch, which greatly shortens the recovery time when the equipment fails with a small increase in system overhead.

[0007] To achieve the above objectives, the technical solution created by this invention is implemented as follows:

[0008] A method for warm backup of network devices adapted to the space environment includes the following steps:

[0009] The aerospace Ethernet switch has network port connectors on its external casing. Inside, it houses a primary and backup device with identical hardware and software. The primary and backup devices each include a power conversion module, a 1553B bus communication module, a network data exchange module, and a network interface module. The power conversion module connects to the spacecraft's power supply system to convert the voltage provided by the spacecraft to the voltage required by the internal components of the aerospace Ethernet switch. The 1553B bus communication module connects to the spacecraft's information system for monitoring and controlling the switch's own status and for data communication with the spacecraft's information system. The network interface module performs low-level protocol conversion for external network data communication. The network data exchange module forwards and exchanges network data; interfaces with the same number on the network data exchange modules of both the primary and backup devices connect to the same network port connector.

[0010] The spacecraft power supply system supplies power to both the primary and backup devices simultaneously. The power conversion modules, 1553B bus communication modules, and network data exchange modules of the primary and backup devices are activated, while the network interface modules of the primary and backup devices are turned off. At this time, the primary and backup devices send necessary status information to the spacecraft information system through the 1553B bus to indicate that the basic functions of the devices are normal.

[0011] According to the preset shift rules, the spacecraft information system sends bus commands to the primary device via the 1553B bus to enable it to enter shift mode and start the network interface module. The primary device sends all status information to the spacecraft information system via the 1553B bus. Among them, all status information includes device working status information and network configuration information. The device working status information is used to indicate whether the device itself is working normally, and the network configuration information is used to indicate the current network configuration status of the aerospace Ethernet switch.

[0012] The spacecraft information system periodically sends network configuration information to the backup device to synchronize the network configuration information of the backup device and the primary device;

[0013] When the spacecraft information system identifies that the primary device has failed to return all status information in the predetermined mode and determines that the primary device is faulty, it disconnects the power supply to the primary device and sends a bus command to the backup device via the 1553B bus to enable it to enter the on-duty mode, start the network interface module, and take over the data forwarding task from the primary device according to the synchronized network configuration information.

[0014] Furthermore, the primary and backup devices have different 1553B bus addresses, and the spacecraft information system identifies the primary and backup devices based on the bus addresses.

[0015] Furthermore, the primary and backup devices have adjacent 1553B bus addresses, and by default, the device with the smaller bus address is the primary device.

[0016] Furthermore, when the primary equipment is working normally, if the spacecraft information system identifies that the backup equipment has not fed back the necessary status information in the predetermined mode and determines that the backup equipment is faulty, it disconnects the power supply to the backup equipment, reconnects the backup equipment after a predetermined interval, and determines its working status based on whether it has returned to normal and fed back the necessary status information.

[0017] Furthermore, the predetermined interval is 30 seconds.

[0018] Furthermore, when the primary device fails and is taken over by the backup device, the spacecraft information system repowers the failed primary device and, based on whether it has returned to normal, feeds back the necessary status information to determine its working status.

[0019] Furthermore, the outer casing of the aerospace Ethernet switch is also equipped with a 1553B bus interface connector and a power supply interface connector. The 1553B bus interface connector is used to connect the 1553B bus communication modules of the primary and backup devices to the spacecraft information system, and the power supply interface connector is used to connect the power conversion modules of the primary and backup devices to the spacecraft power supply system.

[0020] Furthermore, data ports are configured on the network data exchange modules of the primary device and the backup device, and data transformers are configured on the network interface modules of the primary device and the backup device. The number of data ports, data transformers and network port connectors are the same, and the three correspond one-to-one.

[0021] Furthermore, the power conversion modules of the primary and backup devices each include a power conversion chip and a filter circuit; the 1553B bus communication modules of the primary and backup devices each include a CPU and a 1553B bus communication chip; the network data exchange modules of the primary and backup devices each include a switching chip and peripheral circuits; and the network interface modules of the primary and backup devices each include a PHY chipset and a transformer.

[0022] Furthermore, the necessary status information includes the heartbeat signal of the CPU in the 1553B bus communication module of the primary and backup devices, the working status of the switching chip in the network data exchange module of the primary and backup devices, and the watchdog status of the system software installed on the primary and backup devices respectively; network configuration information includes routing table information, configuration information and working status of each data port, loading status and / or enabling status of each network protocol; device working status information includes the heartbeat signal of the CPU in the 1553B bus communication module of the primary and backup devices, the working status of the switching chip in the network data exchange module of the primary and backup devices, the working status of the network interface module of the primary and backup devices, the watchdog status and version of the system software installed on the primary and backup devices respectively, the MAC address of the primary and backup devices, and the system reset count.

[0023] Compared with the prior art, the present invention can achieve the following beneficial effects:

[0024] 1. This invention employs a warm backup method, where the core components of the backup device are always operational, with only the network interface module being powered off. When the primary device fails, the backup device only needs to activate the network interface module to resume operation. The switching time is reduced from 5-10 minutes in traditional cold backup to just a few seconds, significantly reducing data interruption time, minimizing the risk of losing critical platform and payload data, and effectively ensuring the continuous and stable operation of the spacecraft information system.

[0025] 2. Compared to the hot backup method, which requires solving complex problems such as the aggregation of data from the same source, identification of valid data, and processing of backup data, this invention makes full use of the unique 1553B bus communication function of the aerospace Ethernet switch and the external interface of the original cold backup mode. It does not require the addition of additional data synchronization and processing mechanisms, the system structure is simple, the implementation difficulty is low, and the consumption of switch computing power and system resources is low, which meets the design requirements of high reliability and low complexity of aerospace systems.

[0026] 3. Through this invention, after the backup device takes over from the faulty primary device, the faulty primary device can be handled and evaluated in orbit. Without affecting network system performance, it allows for timely assessment of whether the fault has caused permanent damage to the equipment, providing a basis for further decision-making. If the faulty primary device recovers after a reboot, it can be quickly restored to a primary / backup redundant state, significantly improving the system's maintainability and task adaptability. Attached Figure Description

[0027] The accompanying drawings, which form part of this invention, are used to provide a further understanding of the invention. The illustrative embodiments and descriptions of the invention are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings:

[0028] Figure 1 This is a schematic diagram of the internal logic structure of an aerospace Ethernet switch for a network device temperature backup method adapted to the space environment, as described in an embodiment of the present invention. Detailed Implementation

[0029] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and do not constitute a limitation thereof.

[0030] It should be noted that, unless otherwise specified, the embodiments and features described in the present invention can be combined with each other.

[0031] In the description of this invention, it should be understood that the terms "center," "longitudinal," "lateral," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," and "outer," etc., indicating orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, are only for the convenience of describing this invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation on this invention. Furthermore, the terms "first," "second," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, features defined with "first," "second," etc., may explicitly or implicitly include one or more of that feature. In the description of this invention, unless otherwise stated, "a plurality of" means two or more.

[0032] In the description of this invention, it should be noted that, unless otherwise explicitly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art will understand the specific meaning of the above terms in this invention based on the specific circumstances.

[0033] The invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0034] This invention provides a method for warm backup of network devices adapted to the space environment. It utilizes the unique 1553B bus communication function of the aerospace Ethernet switch and the external interface in the original cold backup mode to realize the warm backup function of the aerospace Ethernet switch.

[0035] The structure of an aerospace Ethernet switch is as follows Figure 1 As shown, the outer casing of the aerospace Ethernet switch is equipped with network port connectors, 1553B bus interface connectors, and power supply interface connectors. Inside the aerospace Ethernet switch, there are identical primary and backup devices with identical hardware and software. The primary and backup devices each include a power conversion module, a 1553B bus communication module, a network data exchange module, and a network interface module. The power conversion module of the primary and backup devices connects to the spacecraft's power supply system via the power supply interface connector to convert the voltage provided by the spacecraft's power supply system to the voltage required by the internal components of the aerospace Ethernet switch. The 1553B bus communication module of the primary and backup devices connects to the 1553B bus interface connector via the 1553B bus interface connector. The wired interface connector connects to the spacecraft's information system to enable data communication. The network interface modules of the primary and backup devices convert voltage between the internal data signals of the aerospace Ethernet switch and the network port connectors. The network data exchange modules of the primary and backup devices forward and exchange network data. Interfaces with the same number on the network interface modules connect to the same network port connector. There are two connection methods: one is to directly short-circuit the signal lines of the interfaces with the same number on the network interface modules of the primary and backup devices and connect them to the same network port connector; the other is to use an analog switch to select interfaces with the same number to connect to the same network port connector. For example, the first interface on the network interface module of the primary device and the first interface on the network interface module of the backup device can both be connected to the first network port connector. In this way, regardless of which network port connector an external network device connects to, it is actually connected to the corresponding port of the primary or backup device. However, only the network interface module of the device in duty mode is active at any given time, thus preventing signal conflicts.

[0036] The power conversion modules of the primary and backup devices each include a power conversion chip and a filter circuit. The 1553B bus communication modules of the primary and backup devices each include a CPU and a 1553B bus communication chip. The network data exchange modules of the primary and backup devices each include a switching chip and peripheral circuits. The network interface modules of the primary and backup devices each include a PHY chipset and a transformer.

[0037] There are two power supply interface connectors. One connector connects via an internal cable to the input of the primary device's power conversion module, drawing power from the spacecraft's power supply system to this module. The primary module then performs voltage conversion to power the primary device's 1553B bus communication module, network data exchange module, and network interface module. Similarly, the other connector connects via an internal cable to the input of the backup device's power conversion module, drawing power from the spacecraft's power supply system to this module as well. The backup device's module then performs voltage conversion to power the backup device's 1553B bus communication module, network data exchange module, and network interface module.

[0038] There are two 1553B bus interface connectors. One connector connects via an internal cable to the bus transceiver pin of the 1553B bus communication module on the primary device, and the other connects via an internal cable to the bus transceiver pin of the 1553B bus communication module on the backup device. The spacecraft information system communicates with the aerospace Ethernet switch via the 1553B bus. Commands and data on the 1553B bus are transmitted to the 1553B bus communication module through the 1553B bus interface connectors.

[0039] The network data switching module is equipped with data ports, and the network interface module is equipped with data transformers. The number of data ports, data transformers, and network port connectors are the same, and the three correspond one-to-one. For example, a 24-port aerospace Ethernet switch will have 24 network port connectors on its outer casing, 24 data transformers on the network interface modules of the primary and backup devices, and 24 data ports on the network data switching modules of both the primary and backup devices.

[0040] Data transformers serve the following functions:

[0041] (1) Electrical isolation

[0042] The data transformer is used to achieve electrical isolation between the internal circuitry of the aerospace Ethernet switch and the external network cables, preventing external interference signals from directly entering the aerospace Ethernet switch and protecting the core processing chip and circuitry.

[0043] (2) Signal coupling and transmission

[0044] The data transformer is responsible for coupling the data processed internally by the aerospace Ethernet switch to the network port connector, enabling data to be sent out; at the same time, it receives externally transmitted data and couples it to the internal circuitry of the aerospace Ethernet switch, thereby completing the bidirectional transmission function of internal and external data.

[0045] (3) Supports short-circuit design for primary and backup devices

[0046] The data transformers on the network interface module of the primary device and the network interface module of the backup device are shorted together via signal lines with the same interface number and connected to the same network port connector. This design ensures that when the primary device is working, its data transformer drives the network port connector, while the backup device's data transformer does not generate a signal due to power failure. During primary / backup device switching, only the backup device's network interface module needs to be powered on, and its data transformer will immediately start working.

[0047] (4) Enable fast switching between primary and backup devices

[0048] The data transformer can operate simply by being powered on, without the need for complex protocol loading and route learning like the core processing chip inside an aerospace Ethernet switch. This is a crucial foundation for the backup device to take over from the primary device within seconds.

[0049] The primary and backup devices have identical network configurations, but different 1553B bus addresses. The spacecraft information system identifies the primary and backup devices based on their bus addresses. For example, if the primary and backup devices have adjacent 1553B bus addresses, the device with the smaller bus address is identified as the primary device by default.

[0050] The implementation of a warm backup method for network devices adapted to the space environment is divided into a workflow and a fault handling workflow. These two workflows are described in detail below.

[0051] Workflow:

[0052] 1. Initial power-on and startup

[0053] When the aerospace Ethernet switch is installed on the spacecraft and begins operation, the spacecraft power supply system simultaneously supplies power to the power conversion modules of both the primary and backup devices. At this time, the power conversion modules, 1553B bus communication modules, and network data exchange modules of both the primary and backup devices are powered on and operational, but the network interface modules of both the primary and backup devices are in a disabled state.

[0054] 2. Initial Status Reporting

[0055] The primary and backup devices transmit only a very limited amount of essential status information via the 1553B bus, reporting that their basic functions are normal. The spacecraft information system monitors this essential status information to confirm whether the primary and backup devices are functioning correctly.

[0056] The necessary status information includes the CPU heartbeat signal in the 1553B bus communication module of the primary and backup devices, the working status of the switching chip in the network data exchange module of the primary and backup devices, and the watchdog status of the system software installed on the primary and backup devices respectively.

[0057] 3. The primary and secondary equipment enter shift mode.

[0058] The spacecraft information system, based on pre-defined duty rules (e.g., defaulting to the primary device having the smaller bus address), sends bus commands to the primary device via the 1553B bus, instructing the primary device to enter duty mode. Upon receiving the bus command, the primary device immediately activates its network interface module to power on the data transformer and begins normal data forwarding. Simultaneously, the primary device sends all status information to the spacecraft information system via the 1553B bus. This all status information includes device operational status and network configuration information. The length of this all status information is typically several tens of times longer than the necessary status information.

[0059] Network configuration information includes routing table information, configuration information and working status of each data port, and loading and / or enabling status of each network protocol.

[0060] The device operating status information includes the CPU heartbeat signal in the 1553B bus communication module of the primary and backup devices, the operating status of the switching chip in the network data exchange module of the primary and backup devices, the operating status of the network interface module of the primary and backup devices, the watchdog status and version of the system software installed on the primary and backup devices respectively, the MAC address of the primary and backup devices, and the system reset count.

[0061] 4. Network configuration synchronization

[0062] The spacecraft information system periodically sends the network configuration information of the primary device to the backup device via the 1553B bus. The backup device receives and saves this configuration information, updates its local routing table, etc., but keeps its network interface module closed. In this way, the backup device always maintains configuration synchronization with the primary device, and can immediately use the latest network configuration if the backup device needs to take over from the primary device.

[0063] 5. Normal working conditions

[0064] During normal operation of the primary device, data is continuously forwarded, and all status information is periodically sent through the 1553B bus; the backup device is always in backup mode, only periodically sending necessary status information to the spacecraft information system. The network interface module is powered off and does not participate in data forwarding, thus consuming no network resources and causing no signal interference.

[0065] Troubleshooting process:

[0066] 1. Backup device malfunction

[0067] If the backup device malfunctions while the primary device is operating normally, its 1553B bus interface will be unable to send necessary status information. If the spacecraft information system fails to receive the necessary status information from the backup device for several consecutive cycles, it determines that the backup device has failed. The spacecraft information system autonomously sends a command to the spacecraft power supply system to disconnect the power supply to the backup device (i.e., cut off the input to its power conversion module), and then re-energizes the backup device after a predetermined interval (e.g., 30 seconds). After the backup device restarts, if it can send the necessary status information normally, it is determined to be a transient fault (such as caused by a single-event upset), and the backup device has recovered. The spacecraft information system will then reinstate the backup device into backup management. If the backup device still cannot send the necessary status information, it is determined to be a persistent fault. The spacecraft information system will then transmit the fault information to the ground, where ground personnel will decide on subsequent actions (such as maintaining current standalone operation or arranging maintenance). During this process, the primary device continues to operate, and network communication remains unaffected.

[0068] 2. Main unit malfunction

[0069] When the primary device malfunctions, its 1553B bus communication module cannot transmit all status information (or necessary status information) normally. After failing to receive all status information (or necessary status information) from the primary device for several consecutive cycles, the spacecraft information system determines that the primary device has malfunctioned. The spacecraft information system immediately performs the following operations:

[0070] (1) Send a command to the spacecraft power supply system to disconnect the power supply to the main equipment;

[0071] (2) Send bus commands to the backup device via the 1553B bus to enable the backup device to enter the on-duty mode.

[0072] Upon receiving the bus command, the backup device immediately activates its network interface module and begins forwarding data based on the previously synchronized network configuration information. Since the backup device's core components, such as the 1553B bus communication module and network data exchange module, are always operational, only the network interface module needs to be activated (powering on the data transformer). The entire process can be completed within seconds, far faster than the 5-10 minutes required for a cold backup. After taking over from the primary device, the backup device continues to send all status information to the spacecraft information system via the 1553B bus.

[0073] 3. Primary equipment restoration and assessment

[0074] After the backup device takes over from the primary device, the spacecraft information system powers on and restarts the primary device (similar to the procedure in case of backup device failure). If the primary device can send necessary status information normally after restarting (while the network interface module remains closed), it indicates that the primary device has recovered. The spacecraft information system then treats it as the new backup device, placing it in backup mode and continuing to receive network configuration information to synchronize its network configuration with the backup device. If the primary device still cannot send necessary status information, it indicates that the primary device has not recovered, and the spacecraft information system transmits the fault information to the ground.

[0075] 4. Subsequent fault loop

[0076] In subsequent operations, if the currently active backup device malfunctions again, the spacecraft information system will repeat the above fault handling procedure and switch the other device (the original primary backup device, if it has been restored) to active mode. The system will always maintain at least one set of devices in normal operation to ensure the continuity of network communication to the greatest extent possible.

[0077] In summary, this invention cleverly utilizes the 1553B bus of the aerospace Ethernet switch for status monitoring and network configuration synchronization, combined with independent power supply control of the network interface modules, to achieve a warm backup scheme that falls between cold and hot backup. When the primary device fails, the backup device can take over within seconds without relearning the routing table, significantly shortening network downtime and reducing data loss. Simultaneously, the system adds only a small amount of software control and configuration synchronization overhead, without increasing hardware complexity, maintaining the simple interface and low power consumption characteristics of the original cold backup. This method effectively solves the problem of excessively long switching times in traditional cold backup without excessively increasing system complexity, significantly improving the reliability of spacecraft networks. Furthermore, this method allows for on-orbit reset and evaluation of faulty devices, improving system maintainability and reliability.

[0078] It should be understood that the various forms of processes shown above can be used to reorder, add, or delete steps. For example, the steps described in this invention disclosure can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution disclosed in this invention can be achieved, and this is not limited herein.

[0079] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A method for warm backup of network equipment adapted to the space environment, characterized in that, Includes the following steps: The aerospace Ethernet switch has network port connectors on its external casing. Inside, it houses a primary and backup device with identical hardware and software. The primary and backup devices each include a power conversion module, a 1553B bus communication module, a network data exchange module, and a network interface module. The power conversion module connects to the spacecraft's power supply system to convert the voltage provided by the spacecraft to the voltage required by the internal components of the aerospace Ethernet switch. The 1553B bus communication module connects to the spacecraft's information system for monitoring and controlling the switch's own status and for data communication with the spacecraft's information system. The network interface module performs low-level protocol conversion for external network data communication. The network data exchange module forwards and exchanges network data; interfaces with the same number on the network data exchange modules of both the primary and backup devices connect to the same network port connector. The spacecraft power supply system supplies power to both the primary and backup devices simultaneously. The power conversion modules, 1553B bus communication modules, and network data exchange modules of the primary and backup devices are activated, while the network interface modules of the primary and backup devices are turned off. At this time, the primary and backup devices send necessary status information to the spacecraft information system through the 1553B bus to indicate that the basic functions of the devices are normal. According to the preset shift rules, the spacecraft information system sends bus commands to the primary device via the 1553B bus to enable it to enter shift mode and start the network interface module. The primary device sends all status information to the spacecraft information system via the 1553B bus. Among them, all status information includes device working status information and network configuration information. The device working status information is used to indicate whether the device itself is working normally, and the network configuration information is used to indicate the current network configuration status of the aerospace Ethernet switch. The spacecraft information system periodically sends network configuration information to the backup device to synchronize the network configuration information of the backup device and the primary device; When the spacecraft information system identifies that the primary device has failed to return all status information in the predetermined mode and determines that the primary device is faulty, it disconnects the power supply to the primary device and sends a bus command to the backup device via the 1553B bus to enable it to enter the on-duty mode, start the network interface module, and take over the data forwarding task from the primary device according to the synchronized network configuration information.

2. The method for warm backup of network equipment adapted to the space environment according to claim 1, characterized in that, The primary and backup devices have different 1553B bus addresses, and the spacecraft information system identifies the primary and backup devices based on the bus addresses.

3. The method for warm backup of network equipment adapted to the space environment according to claim 2, characterized in that, The primary and backup devices have adjacent 1553B bus addresses, and by default, the device with the smaller bus address is the primary device.

4. The method for warm backup of network equipment adapted to the space environment according to claim 1, characterized in that, When the primary equipment is working normally, if the spacecraft information system identifies that the backup equipment has not fed back the necessary status information in the predetermined mode and determines that the backup equipment is faulty, it disconnects the power supply to the backup equipment, reconnects the power supply to the backup equipment after a predetermined interval, and determines its working status based on whether it has returned to normal and fed back the necessary status information.

5. A method for warm backup of network equipment adapted to the space environment according to claim 4, characterized in that, The scheduled interval is 30 seconds.

6. The method for warm backup of network equipment adapted to the space environment according to claim 1, characterized in that, When the primary device fails and is taken over by the backup device, the spacecraft information system repowers the failed primary device and, based on whether it has returned to normal, feeds back the necessary status information to determine its working status.

7. A method for warm backup of network equipment adapted to the space environment according to claim 1, characterized in that, The outer casing of the aerospace Ethernet switch is also equipped with a 1553B bus interface connector and a power supply interface connector. The 1553B bus interface connector is used to connect the 1553B bus communication modules of the primary and backup devices to the spacecraft information system, and the power supply interface connector is used to connect the power conversion modules of the primary and backup devices to the spacecraft power supply system.

8. A method for warm backup of network equipment adapted to the space environment according to claim 1, characterized in that, Data ports are configured on the network data exchange modules of the primary and backup devices, and data transformers are configured on the network interface modules of the primary and backup devices. The number of data ports, data transformers and network port connectors are the same, and the three correspond one-to-one.

9. A method for warm backup of network equipment adapted to the space environment according to claim 8, characterized in that, The power conversion modules of the primary and backup devices each include a power conversion chip and a filter circuit. The 1553B bus communication modules of the primary and backup devices each include a CPU and a 1553B bus communication chip. The network data exchange modules of the primary and backup devices each include a switching chip and peripheral circuits. The network interface modules of the primary and backup devices each include a PHY chipset and a transformer.

10. A method for warm backup of network equipment adapted to the space environment according to claim 9, characterized in that, Essential status information includes the heartbeat signal of the CPU in the 1553B bus communication module of the primary and backup devices, the working status of the switching chip in the network data exchange module of the primary and backup devices, and the watchdog status of the system software installed on the primary and backup devices respectively; network configuration information includes routing table information, configuration information and working status of each data port, and loading and / or enabling status of each network protocol; device working status information includes the heartbeat signal of the CPU in the 1553B bus communication module of the primary and backup devices, the working status of the switching chip in the network data exchange module of the primary and backup devices, the working status of the network interface module of the primary and backup devices, the watchdog status and version of the system software installed on the primary and backup devices respectively, the MAC address of the primary and backup devices, and the system reset count.

Images