A dual bus coordinated power supply system of dawn-dusk orbit computing satellite

Abstract

The application discloses a dual-bus cooperative power supply system of a dawn-dusk orbit computing power satellite. The system comprises a load power supply link and a platform power supply link which are independent of each other, the former provides high-voltage power supply for a computing power load, and the latter provides low-voltage power supply for a platform load; a cross-link bus connection unit is connected between the two power supply buses and is used for unidirectionally supplementing the platform power supply bus with power from the load power supply bus when controlled; a cooperative control unit collects real-time on-orbit operation parameters, identifies illumination periods, earth shadow periods, transition periods and fuzzy shadow periods, and adjusts the power supply power and voltage of the two buses according to the same, adapts to the power consumption demand of the computing power load, and realizes dynamic adaptation of regular and peak power in the illumination period, low-power standby in the earth shadow period, stable regular power in the transition period, regular power supply and peak output prohibition in the fuzzy shadow period. Through the dual-bus independent architecture, cross-link bus connection and working condition self-adaptive power supply strategy, the application improves the power supply stability of the computing power load and the energy utilization efficiency of the whole satellite.

Description

Technical Field

[0001] This invention belongs to the field of spacecraft power system technology, specifically relating to a dual-bus cooperative power supply system suitable for computing satellites in dawn-dusk orbits, used to provide cooperative power supply for computing payloads and platform loads under complex lighting conditions. Background Technology

[0002] During their operation, satellites in dawn-dusk orbits experience gradual changes in light intensity and frequent alternations of shadows. In recent years, dedicated satellites have been deployed in these orbits to carry high-power computing payloads (such as onboard AI computing units and large-scale data processors, hereinafter referred to as "computing payloads"). These computing payloads need to handle various power modes during their operating cycles, including regular steady-state operations, bursts of instantaneous peak power, and low-power standby, placing higher demands on the stability, dynamic response capabilities, and energy efficiency of the power supply system.

[0003] Currently, spaceborne power supply systems often employ a dual-bus architecture, with separate high-voltage payload buses and low-voltage platform buses to accommodate the different power supply needs of high-power payloads and conventional platform loads. However, in existing dual-bus power supply systems, there is typically a lack of strict electrical isolation between the high-voltage payload bus and the low-voltage platform bus. Voltage and current fluctuations generated during the operation of computing payloads can easily be transmitted to the platform power supply link through coupling paths, affecting the safe operation of the platform load. Furthermore, the absence of a controllable energy exchange channel between the two buses means that excess power generated by the payload power supply link under sufficient sunlight cannot be transferred to the platform power supply link for utilization, resulting in low overall satellite energy efficiency.

[0004] Regarding operating condition identification and power supply strategies, existing systems typically only distinguish between two basic operating conditions: the illumination period and the shadow period. They fail to cover the transition period of slowly changing illumination intensity and the ambiguous shadow period with high-frequency fluctuations in illumination intensity, unique to twilight orbits. The transition period is the gradual change in illumination between the illumination and shadow periods; the ambiguous shadow period is a short-term, high-frequency fluctuation caused by factors such as the satellite's own structure momentarily obstructing the solar array or rapid changes in the angle of sunlight incidence. For the transition period, the lack of a corresponding power supply strategy may cause power supply jumps; for the ambiguous shadow period, the lack of a targeted power control mechanism makes the computing load prone to insufficient power supply. Furthermore, existing power supply logic does not differentiate for the various power modes of the computing load. For example, instantaneous peak surges may cause a drop in bus voltage, and there is a lack of dedicated voltage stabilization measures during low-power standby.

[0005] Therefore, there is an urgent need for a dual-bus cooperative power supply system that can solve the problems mentioned above, such as bus coupling crosstalk, imprecise division of operating conditions, insufficient multi-mode adaptation of computing load, and low energy utilization. Summary of the Invention

[0006] This invention provides a dual-bus cooperative power supply system for a computing satellite in a dawn-dusk orbit, aiming to solve the problems existing in the dual-bus power supply system for computing satellites in a dawn-dusk orbit, such as bus coupling crosstalk, imprecise division of operating conditions, insufficient multi-mode adaptation of computing load, and low efficiency of surplus power utilization.

[0007] To achieve the above-mentioned objectives, the present invention adopts the following technical solution: A dual-bus cooperative power supply system for a dawn-dusk orbit computing satellite includes two independent power supply links: a payload power supply link and a platform power supply link. The payload power supply link includes a main solar array, a payload battery bank, a payload power control unit, and a payload power supply bus, providing high-voltage power to the computing payload. The platform power supply link includes an auxiliary solar array, a platform battery bank, a platform power control unit, and a platform power supply bus, providing low-voltage power to the platform load. The system also includes a cross-link converter unit connected between the payload power supply bus and the platform power supply bus, used to convert and unidirectionally supply power from the payload power supply bus to the platform power supply bus under controlled conditions. Furthermore, the system includes a cooperative management and control unit connected to the payload power control unit, the platform power control unit, and the cross-link converter unit. The collaborative control unit is used to collect satellite on-orbit operating parameters in real time. These parameters include at least illumination intensity and its fluctuation frequency. Based on the illumination intensity and its fluctuation frequency, the current illumination condition is identified as an illumination period, a shadow period, a transition period, or a hazy shadow period. Furthermore, based on the current illumination condition and other collected operating parameters, collaborative control commands are sent to the payload power control unit, the platform power control unit, and the cross-link merging unit to adjust the power supply power and bus voltage of the payload power supply bus and the platform power supply bus, adapting them to the power demand of the computing load under the current illumination condition. Specifically, during the illumination period, dynamically adapted power supply to the computing load is provided, matching normal power and instantaneous peak power; during the shadow period, low-power regulated standby power supply is provided; during the transition period, stable normal power supply is provided; and during the hazy shadow period, normal power supply is provided to the computing load, and instantaneous peak power output is prohibited.

[0008] Compared with the prior art, the technical solution of the present invention has at least the following beneficial effects: By setting up independent power supply links for the load and the platform, and configuring independent power generation units, energy storage units, control units, and buses respectively, the high-voltage computing power supply and the low-voltage platform power supply are electrically independent. This effectively blocks the transmission of instantaneous power fluctuations from the computing load to the platform power supply link, improving the operational safety of the platform load. Simultaneously, the independent link design allows for the optimization of power supply parameters for the computing load and the platform load respectively, avoiding mutual constraints that occur when sharing a bus.

[0009] By setting up a cross-link combiner unit between the two power supply buses, and enabling it to unidirectionally replenish the power from the load power supply bus to the platform power supply bus under controlled conditions, the transfer of surplus power across links is achieved. When the load power supply link has sufficient illumination and its batteries are full, power that might otherwise be wasted can be converted into low-voltage power usable by the platform power supply link, thereby improving the overall energy utilization efficiency of the satellite. This unidirectional replenishment design also prevents power from flowing back from the platform power supply link to the load power supply link, ensuring that the power in the platform power supply link is not lost due to reverse flow, which is beneficial for maintaining the stability of the platform power supply.

[0010] The collaborative control unit identifies the periods of illumination, shadow, transition, and ambiguous shadow in real time, and sends differentiated control commands for different operating conditions, enabling the power supply system to proactively adapt to the complex illumination changes along the twilight path. The identification of the transition period avoids power supply jumps caused by sudden changes in operating conditions, while the identification of the ambiguous shadow period provides a specific basis for dealing with temporary illumination fluctuations, improving the accuracy of operating condition switching.

[0011] During periods of sunshine, the system provides dynamically adapted power to both normal and peak power for computing loads. This ensures stable operation during normal computations and provides sufficient power support during sudden spikes in computing demand, while avoiding energy waste caused by continuous high power output. This differentiated power supply strategy balances the computational intensity of computing tasks with the energy efficiency of the power supply system.

[0012] During the shadow period, the system provides low-power, regulated standby power to the computing load, enabling the computing load to maintain only the necessary data and status monitoring during periods without sunlight, significantly reducing energy consumption. At the same time, it maintains stable bus voltage, ensuring that the computing load can quickly return to normal operation after sunlight resumes, avoiding data loss or restart delays caused by a complete power outage.

[0013] During the transition period, the system provides stable, conventional power to the computing load, avoiding frequent fluctuations in power supply caused by gradual changes in illumination. Peak power adaptation is not performed during this time, nor is the system placed into standby mode, allowing the computing load to operate at a stable, conventional power level. This eliminates potential power supply disturbances during the illumination transition period and ensures the continuity of computing tasks.

[0014] During periods of ambiguous shadowing, the system provides conventional power to computing loads and prohibits instantaneous peak power output. Addressing the characteristics of high-frequency fluctuations in sunlight and unstable photovoltaic output during this phase, the system forcibly limits the power demand of computing loads to prevent sudden power surges combined with sunlight fluctuations from causing bus voltage collapse, thereby maintaining basic power supply stability without increasing the burden on energy storage.

[0015] In summary, this invention provides a stable power supply to the computing payload that matches its operating mode under the complex lighting changes of the dawn-dusk orbit by adopting an independent dual-link power supply architecture, a unidirectional controllable cross-link merging unit, and identification and differentiated power supply strategies for four types of lighting conditions. At the same time, it improves the overall energy utilization efficiency of the satellite and ensures the safe operation of the platform load. Attached Figure Description

[0016] The accompanying drawings, which form part of this specification, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings: Figure 1 This is a schematic diagram of the structure of a dual-bus cooperative power supply system for a dawn-dusk orbit computing satellite, provided in an embodiment of the present invention. Figure 2 This is a schematic diagram of the structure of a collaborative control unit provided in an embodiment of the present invention; Figure 3 This is a schematic diagram of the structure of a cross-chain merge unit provided in an embodiment of the present invention; Figure 4 This is a schematic diagram of the structure of a computing power distribution unit provided in an embodiment of the present invention. Detailed Implementation

[0017] Before describing the technical solution of the present invention in detail, it is necessary to briefly explain the power supply requirements of the dawn-dusk orbit computing satellite and the existing technical basis.

[0018] During their operation, satellites in diurnal orbits exhibit typical characteristics of gradually changing illumination intensity and frequent alternation of shadows. Computing satellites in such orbits typically display multiple power modes during their operational cycles, including regular steady-state computation, bursts of instantaneous peak power, and low-power standby. To balance the power supply requirements of high-power computing payloads and conventional platform loads, existing onboard power supply systems often employ a dual-bus architecture, with separate high-voltage payload buses and low-voltage platform buses. However, this architecture still requires improvement in areas such as bus isolation, operational condition classification, multi-mode adaptation, and energy utilization. For example, electrical coupling between the two buses can lead to computing power fluctuations being transmitted to the platform power supply link; coarse-grained classification of illumination conditions is difficult to adapt to complex illumination changes such as transition periods and blurred shadows; fixed power supply logic cannot match the differentiated power requirements of computing payloads; and there is a lack of effective ways to recover and utilize excess energy in the payload power supply link.

[0019] Based on the above background, the design concept of this invention is as follows: By constructing independent load power supply links and platform power supply links, the electrical coupling between high and low voltage buses is blocked at the hardware level, avoiding interference from computing power fluctuations on the platform load. A unidirectional controllable cross-link merging unit is added between the two links to convert surplus power from the load power supply link into low-voltage power usable in the platform power supply link, achieving efficient cross-link energy utilization. Simultaneously, a collaborative management and control unit is introduced to identify real-time periods of illumination, shadow, transition, and ambiguous shadow, and sends differentiated control commands to the control units in the links for each operating condition. This enables the power supply system to proactively adapt to complex illumination changes, providing the computing load with a power supply strategy that matches its current operating mode.

[0020] The technical solution of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0021] See Figure 1 This invention provides a dual-bus cooperative power supply system for a dawn-dusk orbit computing satellite, comprising: Independent load power supply links and platform power supply links; The load power supply link includes a main solar cell array, a load battery pack, a load power control unit, and a load power supply bus, which are used to provide high-voltage power supply for the computing load. The platform power supply link includes an auxiliary solar cell array, a platform battery pack, a platform power control unit, and a platform power supply bus, which are used to provide low-voltage power supply to the platform load; A cross-chain busbar unit is connected between the load power supply busbar and the platform power supply busbar, and is used to convert the electrical energy of the load power supply busbar and unidirectionally supply it to the platform power supply busbar when under control. The collaborative control unit, connected to the load power control unit, the platform power control unit, and the cross-chain combiner unit, is used for: Real-time acquisition of satellite on-orbit operating parameters, including at least light intensity and its fluctuation frequency; and identification of the current lighting conditions as a period of illumination, a period of shadow, a transition period, or a period of blurred shadow based on the light intensity and its fluctuation frequency. Based on the current lighting conditions and other collected operating parameters, coordinated control commands are sent to the load power control unit, platform power control unit, and cross-link bus unit to adjust the power supply and voltage of the load power supply bus and platform power supply bus, so as to adapt them to the power demand of the computing load under the current lighting conditions, and to achieve the following: During periods of sunlight, it provides a power supply that dynamically adapts to both normal power and instantaneous peak power for computing loads; During the shadow period, it provides low-power regulated standby power for computing loads; During the transition period, a stable conventional power supply will be provided for computing loads; During the fuzzy shadow period, provide normal power to the computing load and prohibit instantaneous peak power output.

[0022] In this embodiment, the load power supply link and the platform power supply link are electrically independent, with their respective power generation units, energy storage units, control units, and buses all separately installed. Under this structure, voltage and current fluctuations generated during the operation of the computing load will not be transmitted to the platform power supply link through a shared bus or control loop, protecting the platform load from the impact of instantaneous power surges. Furthermore, the independent links allow for separate voltage levels and power capacities to be designed for the high-voltage, high-power demands of the computing load and the low-voltage, conventional demands of the platform load, without the need for compromises on the same bus.

[0023] The payload power supply bus is a high-voltage bus, adapted to the high-power requirements of computing loads; the platform power supply bus is a low-voltage bus, adapted to the conventional power requirements of platform loads. Computing loads typically require higher voltages to reduce transmission current, thereby reducing cable loss and heat generation; while platform loads (such as attitude control, telemetry and communication, thermal control, etc.) are mostly designed according to the traditional 28V or 32V standards of spacecraft, and excessively high voltages can damage components or increase isolation costs. Therefore, setting the payload bus to high voltage and the platform bus to low voltage balances high-power transmission of computing power with compatibility with platform equipment. The voltage difference between the two buses also creates electrical asymmetry, facilitating unidirectional power transfer through voltage reduction by the cross-link bus unit. For example, the payload power supply bus uses a 270V high-voltage DC bus, and the platform power supply bus uses a 32V low-voltage DC bus. The 270V option meets the low current transmission requirements (approximately 25.6A) of computing loads at instantaneous peak power (e.g., 6.9kW), and low-loss power supply can be achieved by using cables of appropriate wire diameter. The 32V option is compatible with the input voltage range (24V~36V) of conventional satellite platform equipment, eliminating the need for an additional buck converter.

[0024] The cross-link combiner unit connects between the two power supply buses and can convert the electrical energy from the load power supply bus to unidirectionally supply the platform power supply bus under controlled conditions. This unit only supports unidirectional power transmission from the load power supply link to the platform power supply link. The power from the platform power supply link will not flow back to the load power supply link, thereby avoiding energy loss due to reverse flow in the platform power supply link's energy storage and power supply, which is beneficial to maintaining the stability of the platform power supply.

[0025] The collaborative control unit is the core of this system. Its inputs are connected to the parameter acquisition interfaces, and its outputs are connected to the payload power control unit, the platform power control unit, and the cross-link merging unit, respectively. This unit collects the satellite's on-orbit operating parameters in real time. The collected operating parameters include at least the light intensity and its fluctuation frequency, and the current lighting conditions are identified based on the collected light parameters. In this embodiment, the lighting conditions are divided into four categories: the illumination period, the shadow period, the transition period, and the blurred shadow period.

[0026] Based on the identified current illumination conditions and other collected operating parameters, the collaborative management and control unit sends collaborative control commands to the load power control unit, platform power control unit, and cross-chain merging unit to adjust the power supply power and voltage of the load power supply bus and platform power supply bus, ensuring that the power supply parameters match the power demand of the computing load under the current illumination conditions. During the illumination period, the collaborative management and control unit's command system provides dynamically adapted power supply to the computing load, adjusting for both normal and instantaneous peak power, while simultaneously supplying power to the platform load and charging its respective battery banks. During the shadow period, the collaborative management and control unit instructs the load battery banks to independently discharge to the load power supply bus, putting the computing load into a low-power, regulated standby mode, while the platform battery banks independently discharge to the platform power supply bus. During the transition period, the collaborative management and control unit's command system provides stable normal power supply to the computing load. During the ambiguous shadow period, the collaborative management and control unit's command system provides normal power supply to the computing load and prohibits instantaneous peak power output, while simultaneously compensating for power fluctuations in the solar array through instantaneous discharge of the battery banks. Under each of the above illumination conditions, the collaborative management and control unit automatically executes the corresponding power supply strategy based on the real-time identified conditions.

[0027] Through an independent dual-link architecture, a unidirectional controllable cross-link merging unit, and differentiated power supply strategies for four types of lighting conditions, the power supply system of this invention provides a stable power supply to the computing payload that matches its operating mode in the complex lighting environment of the dawn-dusk orbit, while improving the overall energy utilization efficiency of the satellite and ensuring the safe operation of the platform load.

[0028] In some implementations, see Figure 2 The collaborative control unit contains an operational parameter acquisition module. This module connects to various onboard sensors and detection circuits to acquire key electrical and environmental parameters during the satellite's on-orbit operation in real time. Specifically acquired parameters include: light intensity and its fluctuation frequency; voltage and power of the payload power supply bus and platform power supply bus; output voltage and current of the main and auxiliary solar arrays; terminal voltage, remaining capacity, and charging / discharging current of the payload and platform battery banks; and real-time power demand signals for the computing load and various platform loads. These parameters cover five aspects: light environment, power generation status, energy storage status, bus status, and load demand, forming the data foundation for subsequent operating condition identification, power supply strategy allocation, bus control, and power management.

[0029] The twilight orbit contains not only steady-state periods of illumination and shadow, but also transitional periods and ambiguous shadow periods. The latter two cannot be distinguished solely by illumination intensity thresholds. By introducing a fluctuation frequency parameter, the system can differentiate between these periods based on the frequency of illumination intensity fluctuations within a preset range: fluctuations below a preset threshold indicate a transitional period, while fluctuations at or above the preset threshold indicate an ambiguous shadow period. Simultaneously, real-time data on bus voltage and power are used to determine whether the current power supply meets load requirements. The output voltage and current of the main and auxiliary solar arrays reflect the operating status of the power generation units, providing a basis for fault diagnosis.

[0030] In a DC power supply system, the terminal voltage, remaining capacity, and charging / discharging current of the battery bank are key parameters for determining whether the energy storage unit has the capacity to supply power or has sufficient charging margin. The operation parameter acquisition module acquires these three data points from both the load battery bank and the platform battery bank in real time to determine whether the batteries are fully charged, whether continued charging is permitted, whether they have discharge support capacity, and whether it is necessary to limit the computing load power or initiate cross-chain merging. For example, when the load battery bank has nearly full charge and still has surplus power generation, the cross-chain merging unit can be triggered to supply power to the platform power supply link; when the remaining capacity drops below a preset threshold, the peak power demand of the computing load needs to be limited.

[0031] The real-time power demand signals of the computing load and various platform loads directly reflect the power consumption intensity of the current task. The operation parameter acquisition module obtains the power demand of the computing load at a millisecond-level sampling frequency, enabling the system to promptly detect jumps from normal power to instantaneous peak power, thereby adjusting the output of the main solar array or initiating battery collaborative discharge in advance. The power demand signals of various platform loads are used to assess the power consumption trend of the platform's power supply links. When the platform load power suddenly increases, the system can predict whether a power shortage will occur and limit non-core loads or initiate cross-chain merging replenishment in advance.

[0032] All the aforementioned collected parameters are ultimately aggregated into the collaborative management and control unit. Specifically, light intensity and its fluctuation frequency are used to determine the current lighting conditions; bus voltage, power, and remaining battery power are used to determine whether the power supply is sufficient and whether the cross-chain combiner unit needs to be activated; the output voltage and current of the generator unit are used to monitor its operating status; and the load power demand signal is used to adjust the power supply strategy for the computing load. By integrating these parameters, the collaborative management and control unit achieves operating condition identification, power supply adaptation, combiner control, and fault early warning.

[0033] By configuring the parameter acquisition module, this system can comprehensively and in real-time perceive the power supply environment and operational status of computing satellites in dawn-dusk orbits. The collected parameter set not only covers the power generation, energy storage, and bus parameters required by conventional onboard power systems, but also specifically incorporates signals unique to computing satellites, such as illumination fluctuation frequency and millisecond-level power requirements of the load. These parameters provide the necessary input data for subsequent accurate identification of four types of illumination conditions, dynamic tracking of instantaneous peak power of the computing load, timely initiation of cross-link power replenishment, and tiered load limiting under fault and power shortage scenarios, thereby supporting the intelligent operation of the entire dual-bus collaborative power supply system at the hardware level.

[0034] In some implementations, see Figure 2 The collaborative control unit is equipped with a working condition identification module. This module is configured to determine the current environment into four different lighting conditions based on real-time collected light intensity and fluctuation frequency signals: when the light intensity exceeds a first light threshold, it is determined to be a lit period; when the light intensity is below a second light threshold, it is determined to be a shadow period, where the second light threshold is lower than the first light threshold; when the light intensity is within a preset lighting range and its fluctuation frequency is lower than a preset fluctuation frequency threshold, it is determined to be a transition period between the lit period and the shadow period; when the light intensity is within the preset lighting range and its fluctuation frequency reaches or exceeds the preset fluctuation frequency threshold, it is determined to be a blurred shadow period; wherein, the lower limit of the preset lighting range is higher than the second light threshold, and the upper limit is lower than the first light threshold.

[0035] For example, when the light intensity exceeds 1000 W / m², it is defined as the illumination period; when the light intensity is below 800 W / m², it is defined as the shadow period; when the light intensity is between 800 W / m² and 1000 W / m² and the fluctuation frequency is below 10 Hz, it is defined as the transition period; when the light intensity is also between 800 W / m² and 1000 W / m², but the fluctuation frequency reaches or exceeds 10 Hz, it is defined as the ambiguous shadow period. The transition period characterizes the gradual change in illumination between the illumination period and the shadow period, while the ambiguous shadow period is defined as a short-term, high-frequency fluctuation period caused by factors such as the satellite's own structure momentarily blocking the solar array or rapid changes in the angle of sunlight incidence, typically lasting from several seconds to tens of seconds.

[0036] The aforementioned operating condition judgment logic is based on the observation and analysis of the actual illumination variation patterns in the twilight orbit. In the twilight orbit, illumination intensity does not jump instantaneously between the illumination period and the shadow period, but rather exists in a slowly decreasing or increasing transition range (e.g., 800W / m² to 1000W / m²). Within this range, if the fluctuation frequency is low, it indicates that the illumination intensity is changing steadily, and the system needs to gradually transition from one steady-state power supply mode to another; therefore, it is necessary to identify this as a transition period. However, when the illumination intensity is also within this range but the fluctuation frequency is high, it is not a steady-state transition, but rather a sudden, instantaneous shadow interference. In this case, the system should not completely switch power supply modes, but only perform instantaneous power compensation. Therefore, the operating condition identification module introduces both illumination intensity thresholds and fluctuation frequency thresholds, which can accurately distinguish between the two different types of illumination changes: the transition period and the ambiguous shadow period, thus providing a correct basis for the differentiated processing of subsequent power supply strategies.

[0037] In practical implementation, the working condition identification module can be implemented using analog comparators, digital logic circuits, or software algorithms. Taking this embodiment as an example, firstly, the light intensity value is obtained by continuously sampling through a light sensor. This value is then sent to two comparators and compared with 1000W / m² and 800W / m² respectively to determine the current intensity range. Simultaneously, the light intensity signal is input to a frequency detection circuit to calculate the number of zero-crossings or peak fluctuations per unit time, thus obtaining the fluctuation frequency. When the intensity is ≥1000W / m², a lighting period flag is directly output; when the intensity is <800W / m², a shadow period flag is output; when the intensity is between 800W / m² and 1000W / m², the fluctuation frequency is further determined: if the frequency is <10Hz, a transition period flag is output; if the frequency is ≥10Hz, a blurred shadow period flag is output. In addition, a timing circuit can be used to record the duration of the blurred shadow. When its duration exceeds a preset range (e.g., 30 seconds), it can be reclassified as a transition period or a lighting period to avoid long-term erroneous judgments.

[0038] Through the aforementioned operational condition identification module, the power supply system can automatically, in real-time, and accurately distinguish four typical lighting conditions that may occur on the dawn / dusk track. The precise differentiation between the transition period and the blurred shadow period avoids confusing gradual lighting changes with sudden shadows, allowing subsequent power supply strategies to employ either gradual power handover or instantaneous power compensation. This ensures a smooth power transition during slow lighting changes and enables rapid power recovery during sudden high-frequency fluctuations, effectively improving the continuity and stability of power supply for computing loads under complex lighting conditions.

[0039] In some implementations, see Figure 2The collaborative control unit is equipped with a solar power supply module. This module is configured to: instruct the load power control unit to prioritize powering the computing load with the output of the main solar array, using surplus power to charge the load's battery bank, and dynamically adjust the output power of the main solar array to adapt to the computing load's normal power mode and instantaneous peak power mode; instruct the platform power control unit to prioritize powering the platform load with the output of the auxiliary solar array, using surplus power to charge the platform's battery bank; when the load's battery bank is fully charged and the load power supply link still has surplus power, activate the cross-link combiner unit to convert the high-voltage DC voltage of the load power supply bus to a low-voltage DC voltage adapted to the platform power supply bus, and replenish the platform power supply bus in a constant voltage and constant current mode. When the operating condition identification module determines that the current operating condition is solar power supply, the solar power supply module executes the above instructions.

[0040] During periods of sunshine, the output power of the solar array typically exceeds the real-time consumption of the load. Prioritizing the power from the main solar array to supply computing loads ensures the basic power needs of computing tasks, preventing insufficient power supply due to excessive power generation consumed by battery charging. The remaining surplus power is used to charge the load's battery bank, gradually replenishing energy storage while meeting real-time computing power needs, and reserving energy for periods of shadow or no sunshine. Simultaneously, dynamically adjusting the output power of the main solar array to adapt to changes in computing load power from normal to instantaneous peak power allows for short-term peak computation using the inherent capacity of photovoltaics without increasing the burden on energy storage, reducing the number of battery charge-discharge cycles. For the platform power supply link, the power from the auxiliary solar array is prioritized to supply the platform load, with the remainder used to charge the platform's batteries, also following the principle of "first meeting real-time power needs, then replenishing energy storage," ensuring a stable power supply to the platform's critical loads.

[0041] After the load battery bank is fully charged, if the main solar array still has excess power generation capacity, continuing to charge the battery at this time would damage its lifespan, while discarding the excess energy would be wasteful. In this situation, the power supply module activates the cross-link combiner unit during the solar power period. The cross-link combiner unit uses a constant voltage and constant current mode during the combiner process, meaning the output voltage is stabilized near the rated voltage of the platform bus, and the output current is limited to a preset safety range. This avoids voltage surges or overcurrent risks to the platform bus during the power replenishment process. This combiner operation continues until the load power supply link no longer has excess power or the platform power supply link no longer needs power replenishment.

[0042] The aforementioned power supply strategy during periods of sufficient sunlight independently controls the power supply links for the payload and the platform, reflecting a dual-bus independent power supply architecture. Dynamic adjustment of the main solar array output adapts to peak computing loads, enabling high-performance computing tasks during periods of sufficient sunlight without heavy reliance on batteries. Combined power supply transfers potentially wasted surplus photovoltaic energy to the platform power supply link, reducing the depth of discharge of platform batteries and improving overall satellite energy efficiency. Through unified coordination of the power supply modules during periods of sufficient sunlight, the system achieves efficient power supply to the computing payload, reasonable replenishment of energy storage, and cross-link energy recovery and utilization during periods of abundant sunlight.

[0043] In some implementations, see Figure 3 The cross-chain bus unit includes: a bus acquisition module for acquiring surplus power from the load power supply bus; a multi-stage step-down conversion module with at least two series-connected step-down circuits for converting the high-voltage power from the load power supply bus into low-voltage power suitable for the platform power supply bus; a voltage regulator module for regulating the converted voltage; and a current limiting module for limiting the output current and supplying it to the platform power supply bus. The input terminal of the bus acquisition module is connected to the load power supply bus; the input terminal of the multi-stage step-down conversion module is connected to the output terminal of the bus acquisition module, using two or more series-connected step-down circuits to progressively reduce the high voltage to a low voltage level; and the voltage regulator module and the current limiting module are connected in series at the output terminal of the multi-stage step-down conversion module.

[0044] The busbar acquisition module extracts power when there is excess power in the load power supply link without significantly affecting the normal voltage stability of the load bus. Due to the large voltage difference between the high-voltage and low-voltage buses, a single-stage step-down circuit would experience high voltage stress and potentially generate electromagnetic interference. A multi-stage step-down circuit progressively reduces the high voltage, with each stage bearing a portion of the voltage drop, thereby reducing the voltage stress on each stage and improving conversion efficiency. The voltage regulator module uses closed-loop feedback to stabilize the output voltage near the rated value required by the platform bus. The current limiting module limits the maximum busbar current to prevent excessive current output from the busbar unit in the event of a short circuit or overload in the platform power supply link.

[0045] In this embodiment, the specific parameters of the cross-link converter unit can be set according to the overall satellite power level. For example, when the payload power supply bus is a 270V high-voltage bus and the platform power supply bus is a 32V low-voltage bus, the multi-stage step-down conversion module can use a two-stage series step-down circuit. The first stage reduces 270V to approximately 60V, and the second stage reduces 60V to 32V. The voltage regulator module stabilizes the output voltage within the range of 32V ± 0.5V, and the current limiting module limits the bus current to within 15A. After the voltage levels of the two buses are determined, the multi-stage step-down conversion module in the cross-link converter unit is designed with a specific number of step-down stages and duty cycle based on the 270V / 32V transformation ratio. Depending on the power level of different satellite platforms and computing payloads, the payload bus can also use high-voltage values ​​such as 200V or 300V, and the platform bus can use 28V or 36V. When the excess power of the payload power supply link exceeds the processing capacity of the converter unit, the system does not start the converter and remains in standby mode. The cross-chain confluence unit achieves high-voltage to low-voltage conversion through the aforementioned hardware structure, providing a hardware foundation for cross-chain energy recycling of the entire satellite.

[0046] In some implementations, see also Figure 2 The collaborative control unit is equipped with a shadow period power supply module, which is configured to: instruct the payload power control unit to independently supply power to the payload power bus from the payload battery pack and control the computing load to enter standby mode; instruct the platform power control unit to independently supply power to the platform power bus from the platform battery pack and continuously output constant power for on-orbit insulation of the satellite platform; and simultaneously shut down the cross-link combiner unit. When the operating condition identification module determines that the current operating condition is the shadow period, the shadow period power supply module executes the above instructions.

[0047] During the shadow period, the solar array ceases power generation, and the system relies solely on the battery bank for power. The battery bank's capacity must simultaneously meet the low-power standby requirements of the computing load during the shadow period and the transient energy demands of the computing load during its restart at the initial solar illumination period after the shadow period ends. Switching the computing load to standby mode reduces its power consumption to 10% to 20% of its normal operating power, thereby extending the battery bank's power supply duration. The platform's battery bank needs to provide continuous and relatively stable power to the platform's basic loads, such as attitude control, telemetry and communication, and thermal control and insulation. The platform's power supply bus adopts a non-regulating bus architecture, and its voltage naturally decreases with the platform's battery bank terminal voltage. However, the platform load itself is allowed to operate within a certain voltage range, so no additional voltage regulation circuit is required. The cross-chain bus unit is turned off at this time to avoid unnecessary energy interaction between the two buses. During the shadow period, the load bus voltage may gradually decrease due to battery discharge. If the bus unit is in the conducting state, the power of the platform power supply link may flow back to the load power supply link, or the voltage fluctuation of the load power supply link may be conducted to the platform power supply link through the cross-chain bus unit. Both situations will affect the stability of the platform power supply.

[0048] In this embodiment, the duration of the shadow period is determined based on orbital parameters; for example, the shadow period for a dawn-dusk orbit is approximately 23 minutes. The capacity of the payload battery pack is configured based on this duration and the standby power consumption of the computing load. The capacity of the platform battery pack must simultaneously meet the platform's thermal insulation power (e.g., 3kW) and the needs of other basic loads on the platform. The "standby mode" command issued by the power supply module during the shadow period includes operations such as reducing the main frequency of the computing load, shutting down unnecessary peripheral interfaces, and maintaining memory data refresh, but without completely cutting off power so that it can be quickly woken up after sunlight resumes. After receiving the command, the platform power control unit controls the output power by adjusting the conduction state of the MOSFETs in the discharge circuit to keep it near a preset constant power value, which is pre-calibrated according to the requirements of the satellite thermal control system.

[0049] With the above configuration of the power supply module during the shadow period, the system can be independently powered by two sets of batteries. The computing load enters a low-power standby state to reduce energy consumption, while the platform load receives continuous insulation power to maintain the normal operating temperature of the satellite. The shutdown of the cross-link bus unit cuts off the electrical path between the two buses, thereby eliminating the risk of circulating current or backflow that may occur due to bus voltage differences during the shadow period, ensuring the independence and safety of the power supply during the shadow period.

[0050] In some implementations, see Figure 2 The collaborative control unit is equipped with a transitional power supply module. This module is configured to: predict the target illumination condition based on the trend of light intensity changes; when the shadow period is predicted, instruct the load power control unit and the platform power control unit to gradually reduce the output power of the solar array and simultaneously increase the discharge power of the battery pack, while shutting down the cross-link combiner unit; when the illumination period is predicted, instruct the load power control unit and the platform power control unit to gradually increase the output power of the solar array and simultaneously increase the charging power of the battery pack, while shutting down the cross-link combiner unit; when the light intensity reaches the target illumination condition threshold, instruct the load power control unit and the platform power control unit to smoothly switch to the corresponding power supply mode. When the condition identification module determines that the current condition is a transition period, the transitional power supply module executes the above instructions.

[0051] The transition period lies between the sunshine period and the shadow period. During this phase, the light intensity rises or falls slowly, and the output power of the solar array changes accordingly. If the power supply mode is switched directly before the light intensity reaches the target operating condition threshold, the sudden power change will cause fluctuations in the bus voltage. Adjusting the power gradually after anticipating the target sunshine condition can avoid sudden changes. When the shadow period is anticipated, the light intensity tends to decrease, and the output power of the solar array will gradually decrease until it reaches zero. Gradually reducing the output power of the solar array while simultaneously increasing the discharge power of the battery bank allows for a smooth transition from the solar array to the battery bank, avoiding a precipitous drop in power. When the sunshine period is anticipated, the light intensity tends to increase, and the output power of the solar array gradually recovers. At this time, gradually increasing the output power of the solar array while simultaneously increasing the charging power of the battery bank allows excess energy to be stored in the battery bank as the solar array power increases, preventing power overshoot. In both predicted directions, the cross-link bus unit is shut down to avoid unexpected energy interaction between the two buses during the transition period, or the introduction of additional voltage disturbances due to the conduction of the bus unit.

[0052] In its implementation, the transition period power supply module first acquires the real-time value of the irradiance and its rate of change (i.e., the amount of change per unit time) output by the operating condition identification module. When the irradiance is within a preset irradiance range (e.g., 800W / m² to 1000W / m²) and the fluctuation frequency is below a preset threshold, the current period is determined to be the transition period. The trend of change is judged based on the sign of the rate of change of irradiance: a positive rate of change indicates an increase in irradiance, and the target operating condition is predicted to be the irradiance period; a negative rate of change indicates a decrease in irradiance, and the target operating condition is predicted to be the shadow period. After determining the prediction result, the transition period power supply module sends a gradual change command to the load power control unit and the platform power control unit, requiring them to adjust the output power of the solar array and the charging and discharging power of the battery pack in fixed steps within a preset time length. For example, during the transition from the irradiance period to the shadow period, the output power of the solar array decreases at a rate of 100W per second, while the discharge power of the battery pack increases at the same rate, until the output power of the solar array drops to zero and the battery pack completely takes over the power supply. During this process, the cross-chain merging unit receives a shutdown command, and its internal switching transistor remains in the off state. When the actual light intensity reaches the threshold of the target operating condition (e.g., dropping below 800W / m² or rising above 1000W / m²), the transition power supply module sends a mode switching completion signal, and the system switches to the power supply mode of the corresponding steady-state operating condition.

[0053] Through the aforementioned configuration of the transitional power supply module, the system achieves a smooth power handover between the solar array and the battery bank during the gradual change in light intensity. The method of gradually reducing the output power of the solar array while simultaneously increasing the charging and discharging power of the battery bank eliminates bus voltage drops or overshoots caused by sudden power fluctuations. The shutdown of the cross-link bus unit avoids unnecessary energy interaction during the transition period, reducing sources of disturbance. Once the light intensity reaches the target operating condition threshold, the system can then re-enter the power supply mode during the illumination or shadow period with stable electrical parameters, thus ensuring the continuity of power supply for the computing load during the operating condition transition phase.

[0054] In some implementations, see Figure 2 The collaborative control unit is equipped with a fuzzy shadow period power supply module. This module is configured to: send commands to the load power control unit, instructing it to control the load battery pack to discharge instantaneously to compensate for fluctuations in the output power of the main solar array and maintain stable load power bus voltage; simultaneously control the computing load to maintain normal power operation and prohibit it from switching to instantaneous peak power mode; send commands to the platform power control unit, instructing it to control the platform battery pack to discharge instantaneously to compensate for fluctuations in the output power of the auxiliary solar array and maintain stable platform power bus voltage; and simultaneously send commands to the cross-chain merging unit to put it in a shutdown state. When the operating condition identification module determines that the current period is a fuzzy shadow period, the fuzzy shadow period power supply module executes the above commands.

[0055] The characteristic of the fuzzy shadow period is that the light intensity fluctuates frequently within a short period of time, causing the output power of the main and auxiliary solar arrays to fluctuate rapidly accordingly. Under this condition, the solar arrays themselves cannot provide stable power output. The load battery bank and platform battery bank fill the power gap of the solar array by instantaneous discharge, keeping the voltage of the load power supply bus and platform power supply bus within the allowable fluctuation range. The computing load is limited to normal power operation and is prohibited from switching to instantaneous peak power mode to avoid the superposition of sudden power demand when the bus voltage is already fluctuating, which would further aggravate the power supply instability. The cross-link bus unit is in a turned-off state to prevent the energy interaction between the two buses during instantaneous discharge from introducing additional disturbances, and also to avoid frequent operation of the bus unit due to bus voltage fluctuations.

[0056] In its implementation, the fuzzy shadow period power supply module receives the fuzzy shadow flag signal and fluctuation frequency value output by the operating condition identification module. When the fluctuation frequency reaches or exceeds a preset threshold (e.g., 10Hz) and the light intensity is within a preset light range (e.g., 800W / m² to 1000W / m²), the fuzzy shadow period power supply module immediately starts. Upon receiving the instruction, the load power control unit turns on the discharge switch of the load battery pack, allowing the battery pack to inject power into the load power supply bus at a set current value (e.g., a compensation current dynamically adjusted according to the fluctuation amplitude). The platform power control unit performs a similar operation, turning on the discharge circuit of the platform battery pack. The instantaneous discharge response time of the battery pack is typically in the microsecond to millisecond range, sufficient to track the frequency of light fluctuations. Simultaneously, the load power control unit sends a power limit signal to the management circuit of the computing load, locking the upper limit of the computing load's power at a normal power value and blocking peak power request signals. The cross-chain bus unit keeps its internal power switch off through control signals, cutting off the electrical path between the two buses. When the light intensity returns to a stable state and the fluctuation frequency remains below the preset threshold for a period of time (e.g., 5 seconds), the power supply module for the fuzzy shadow period exits the instantaneous compensation state, and the system returns to the normal power supply mode for the light period.

[0057] Through the above configuration, the power supply module for the fuzzy shadow period maintains stable voltage on both buses during periods of high-frequency light fluctuations by utilizing the instantaneous discharge capability of the battery pack, preventing abnormal shutdowns of the computing load due to voltage drops. Limiting the power mode of the computing load prevents bus failures caused by peak current superposition fluctuations. Disabling the cross-link bus unit eliminates potential disturbances caused by energy interaction between buses. The application of this fuzzy shadow period power supply module ensures continuous power supply during fuzzy shadow periods, providing stable, regular power support for the computing load.

[0058] In some implementations, see Figure 2 The collaborative management and control unit also includes a fault handling module, which is configured to: determine a fault condition when the operating parameters of any power supply unit exceed a preset fault threshold; identify the fault type and fault location; and, based on the identified fault type and fault location, instruct the load power control unit or the platform power control unit to cut off the fault circuit, and link the non-faulty power supply units and cross-chain combiner units to execute a power distribution strategy that prioritizes the platform's basic load over the computing load and the computing load over the platform's non-core load.

[0059] During operation, power supply units (including the main solar array, auxiliary solar array, load battery bank, and platform battery bank) may experience faults such as abnormal output, short circuit, open circuit, or performance degradation. The fault handling module continuously receives voltage, current, and temperature data from the operating parameter acquisition module and compares this data with pre-stored fault thresholds. When any parameter of any power supply unit exceeds the corresponding threshold, the system is deemed to have entered a fault condition. The identification of fault type and location depends on the specific values ​​and combinations of the parameters exceeding the limits. For example, if the main solar array output voltage drops below a certain percentage of its rated value and the output current is abnormally low, it can be determined that the main solar array is faulty; if the load battery bank's terminal voltage is below the undervoltage protection threshold and the charging current cannot recover, it can be determined that the battery bank is faulty. This fault determination method based on thresholds and parameter characteristics can quickly locate the fault source without adding additional hardware.

[0060] Once a faulty circuit is identified, the fault handling module issues a disconnect command to the control unit (load power control unit or platform power control unit) connected to the corresponding power supply unit. Disconnecting the faulty circuit involves breaking the series switch or fuse in the circuit to prevent the fault current from spreading to the bus and other healthy units. Linking non-faulty power supply units and cross-link combiner units refers to reconfiguring the remaining healthy power generation units and battery banks according to the fault type to maintain power supply to the core loads. The power distribution strategy follows a fixed priority order: platform foundation loads (such as attitude control, telemetry and communication, and thermal control and insulation) have the highest priority, followed by computing loads, and finally platform non-core loads (such as some scientific instruments and backup equipment). Under this priority, when the total power supply is insufficient, platform non-core loads are disconnected first, then computing load power is limited, and only then is the power quality of the platform foundation loads considered for degrading.

[0061] In this embodiment, the specific implementation of the fault handling module includes the following steps: First, the output parameters of each power supply unit are collected through voltage transformers and current transformers, and compared with a set threshold through a comparator circuit. If the threshold is exceeded, an interrupt signal is triggered. The main control chip (MCU or FPGA) determines the fault type based on the interrupt source and parameter values. For recoverable temporary faults (such as instantaneous overcurrent), the system can attempt automatic reclosing; for permanent faults (such as open circuit or short circuit), isolation is performed. The isolation command controls a solid-state relay or contactor to disconnect the fault circuit through a drive circuit. The linkage of non-faulty power supply units is achieved through power redistribution commands. For example, when the main solar array fails, the system commands the load battery pack to increase the depth of discharge, and at the same time commands the platform power control unit to reduce the power supply to non-core loads of the platform. Under the command of the fault handling module, if the load power supply link has surplus power and the platform power supply link needs to be replenished, the cross-link combiner unit is activated; if the fault causes insufficient power in the load power supply link, the combiner unit is shut down.

[0062] Through the above configuration of the fault handling module, the system can quickly disconnect the fault circuit when a power supply unit fails, preventing the fault from spreading. Power supply to healthy units is reconfigured according to the fault type, and power is allocated according to a fixed priority, ensuring that the platform's basic load and computing load are given priority protection. This maintains the satellite's basic survivability and preserves critical data for computing tasks even under fault conditions. The application of this fault handling module reduces the power supply system's sensitivity to single-point failures and improves the overall reliability of the satellite's on-orbit operation.

[0063] In some implementations, see Figure 2 The collaborative control unit also includes a power management module, which is configured to: determine in real time whether the total power supply of the load power supply link and the platform power supply link is sufficient; when the total power supply of any power supply link is insufficient, according to a preset priority strategy, or instruct the load power control unit to limit the power supply of the computing load, and / or instruct the platform power control unit to limit the power supply of non-core loads, and if the total power supply of the platform power supply link is still insufficient, activate the cross-link merging unit to replenish the available power of the load power supply bus to the platform power supply bus.

[0064] The power management module determines whether the power supply is sufficient as follows: It calculates the real-time total power supply capacity of the load power supply links (the sum of the real-time output power of the main solar array and the discharge capacity of the load battery pack) and the real-time total power demand of the computing load, as well as the real-time total power supply capacity of the platform power supply links (the sum of the real-time output power of the auxiliary solar array and the discharge capacity of the platform battery pack) and the real-time total power demand of the platform load. When the real-time total power supply capacity of a link is lower than its total power demand, it is determined that the total power supply capacity of that link is insufficient. This determination can be performed independently for the load links and the platform links, or both links can be evaluated simultaneously. The power management module executes subsequent measures individually or simultaneously based on the determination results.

[0065] The preset priority strategy specifies the order in which different loads will have their power reduced or cut off when power supply is limited. In this embodiment, the priorities from high to low are: platform base load, computing load, and platform non-core load. According to this priority, when the total power supply of the load power supply link is insufficient, the power management module instructs the load power control unit to reduce the power supply of the computing load, for example, by limiting the computing load from peak power mode to normal power mode, or further to standby power mode. If necessary, some non-critical computing units of the computing load can be temporarily shut down. When the total power supply of the platform power supply link is insufficient, the power management module instructs the platform power control unit to first reduce or cut off the power supply of the platform non-core loads (such as backup measurement and control equipment, and some non-critical sensors). If the power is still insufficient, the power management module activates the cross-link merging unit to supply the platform power supply bus with the available power from the load power supply bus after step-down conversion, while continuing to limit the power of the computing load based on the power supply margin of the load link.

[0066] In its implementation, the power management module receives real-time power supply capacity and load power data for each link from the operation parameter acquisition module. When the total power supply of the platform's power supply links is insufficient, the module sends a priority cutoff command to the platform power control unit. The platform power control unit then cuts off non-core loads according to the load priority list. If the platform's power supply is still insufficient after the cutoff, the power management module sends a start command to the cross-link merging unit and simultaneously sends a command to the load power control unit, requesting it to calculate the surplus power available from the load power supply links. The load power control unit adjusts the upper limit of the computing load's power based on the current power supply margin of the load power supply links (surplus power of the main solar array and the discharge capacity of the load battery pack) and transfers the available power to the platform bus through the cross-link merging unit. This merging process also follows a constant voltage and constant current mode to avoid impacting the platform bus. When the load power supply links also have insufficient power, the power management module prioritizes ensuring the minimum maintenance power supply of the computing load to the load links, only considering transferring a small amount of power from the load links when the platform's basic loads face the risk of power outage.

[0067] Through the above configuration of the power management module, the system can allocate power according to a defined priority when the total power supply is insufficient, avoiding indiscriminate power outages. In scenarios where the platform power supply link power is insufficient, activating the cross-link merging unit to transfer surplus power from the payload power supply bus to the platform power supply bus can delay or avoid cutting off the platform's basic loads, thereby improving the satellite platform's survivability under power shortage conditions. In scenarios where the payload power supply link power is insufficient, limiting the computing payload power can prioritize ensuring the power supply safety of the platform's basic loads. The application of this power management module enables the system to maintain the continued execution of critical tasks even when power supply capacity is limited.

[0068] In some implementations, see Figure 1 The load power supply link also includes a computing power distribution unit, which is connected between the load power supply bus and the computing load to realize power distribution and regulation of the computing load. See also Figure 4 The computing power distribution unit includes: a power transistor for controlling the power output to the computing load; a power detection module for real-time acquisition of the power demand signal of the computing load; and a drive control module connected to the power detection module and the load power control unit for rapidly adjusting the conduction state of the power transistor according to the feedback signal of the power detection module and the control signal of the load power control unit to adapt to the instantaneous peak power fluctuation demand of the computing load, and performing overcurrent, overtemperature and short circuit protection during the adjustment process.

[0069] During its operating cycle, the computing load instantaneously switches from a normal power mode to a peak power mode, with its power demand potentially fluctuating within milliseconds. The power detection module acquires the computing load's power demand signal in real time at a high sampling rate (e.g., at least 1kHz) and sends this signal as feedback to the drive control module. The drive control module simultaneously receives the expected power setpoint or voltage regulation command from the load power control unit. Internally, the drive control module includes a comparator, PID controller, or hysteresis control circuit. Based on the difference between the feedback signal and the control signal, it rapidly adjusts the duty cycle of the PWM drive signal output to the power transistor, thereby changing the power transistor's on-time and regulating the average voltage and current output to the computing load. Since the switching frequency of the power transistor is typically above tens of kilohertz, its on-state change can be completed in microseconds. Therefore, the overall power regulation response time can be controlled within milliseconds, meeting the requirement of tracking the instantaneous peak power fluctuations of the computing load.

[0070] The power transistor can be a MOSFET or an IGBT, with its drain-source or collector connected in series between the load power supply bus and the computing load. Its gate or base receives the PWM signal output from the drive control module. The power detection module includes a current sensing resistor or Hall effect current sensor and a voltage divider circuit. It converts the acquired analog signal into a digital signal using an analog-to-digital converter for use by the drive control module. The drive control module is typically integrated into a microcontroller or dedicated power management chip, featuring an overcurrent comparator, an overtemperature detection input, and short-circuit protection logic. When the current detected by the power detection module exceeds a preset overcurrent threshold, the drive control module immediately blocks the PWM output and turns off the power transistor. Similarly, when the temperature sensor detects that the temperature of the power transistor or surrounding circuitry exceeds a preset temperature threshold, it also performs a shutdown operation. Short-circuit protection is determined by detecting a rapid drop in output voltage or a sudden surge in current, with a response time typically in the microsecond range.

[0071] With the above configuration, the computing power distribution unit can sense changes in the power demand of the computing load in real time and quickly adjust the conduction state of the power transistors. This allows the output power to follow the jump from normal power to instantaneous peak power of the computing load within milliseconds, preventing bus voltage drops or computing load restarts due to insufficient power supply. Simultaneously, the integrated overcurrent, overtemperature, and short-circuit protection functions quickly disconnect the power transistors in case of abnormal operating conditions, preventing damage to the computing power distribution unit or computing load due to overload. This improves the hardware reliability of the load power supply link, enabling the computing load to receive timely and stable power support during sudden high-computing-power tasks, and also provides fault protection capabilities.

[0072] In some implementations, the load power control unit integrates a shunt regulation module. This shunt regulation module is activated only when the cross-link combiner unit cannot fully absorb the excess power of the load power supply link. It is used to shunt and discharge the power of the main solar array that exceeds the load and energy storage requirements, thereby stabilizing the load power supply bus voltage.

[0073] When sunlight is abundant and the computing load is operating at its normal power level, the output power of the main solar array may exceed the sum of the real-time demand of the computing load and the charging power of the load's battery pack, resulting in surplus energy. The system first replenishes this surplus energy to the platform power bus via a cross-link combiner unit, achieving energy recovery and utilization. However, when the platform bus no longer needs replenishment, the platform battery is full, or the cross-link combiner unit has reached its maximum transmission capacity, the surplus energy cannot be fully utilized. If not addressed promptly, the load power bus voltage will continue to rise, potentially exceeding permissible limits, damaging other equipment connected to the bus, or shortening the load's battery life. In this situation, the shunt regulation module is activated, dissipating excess power generation as heat through the shunt resistor, maintaining the load power bus voltage near its rated value.

[0074] In practical implementation, the shunt regulation module typically uses a pulse-width modulation (PWM) controlled switching transistor connected in series with a shunt resistor, and the entire module is connected in parallel between the positive and negative terminals of the load power supply bus. The collaborative management unit or load power control unit monitors the voltage value of the load power supply bus in real time, while simultaneously acquiring the operating status of the cross-link bus unit (e.g., whether it is operating at full power or has been turned off). When the load bus voltage exceeds the set upper limit of regulation and the cross-link bus unit can no longer increase the transmission power, the control circuit adjusts the current absorbed by the shunt branch by adjusting the duty cycle of the switching transistor, so that the excess power is consumed in the shunt resistor. When the load bus voltage falls below the lower limit of regulation, the shunt is reduced or stopped. The shunt regulation module only activates when the cross-link bus unit has tried its best but still cannot absorb the excess power, ensuring that energy recovery takes precedence over energy dissipation.

[0075] With the above configuration of the shunt regulation module, the load power supply bus will not experience overvoltage risk due to the inability to absorb surplus power during the solar sunshine period. The shunt discharge, as a backup protection mechanism for the cross-link combiner unit, intervenes when the combiner's replenishment reaches its limit, prioritizing the use of surplus power to improve energy efficiency while ensuring that the bus voltage remains within a safe range. The integration of this module improves the system's adaptability to photovoltaic power fluctuations and enhances the voltage stability of the power supply link.

[0076] In some embodiments, the load power control unit also integrates a boost converter module. This boost converter module is used to convert the low-voltage output of the main solar array (e.g., a rated output of 55V to 100V) to the high voltage required by the load power supply bus (e.g., a 270V high-voltage bus). Simultaneously, the boost converter module employs a redundant configuration, such as dual-module hot backup or N+1 parallel redundancy, to improve the reliability of the load power supply link.

[0077] The output voltage of the main solar array is typically lower than the voltage level required by the load power supply bus. A triple-junction gallium arsenide solar array has a rated output voltage of approximately 55V to 100V under standard illumination conditions, while the computing load requires a 270V high-voltage DC power supply to reduce transmission losses and accommodate high-voltage input power modules. Therefore, a boost converter module must be installed within the load power control unit to raise the low voltage output from the photovoltaic array to the nominal bus voltage.

[0078] The boost converter module can employ a Boost topology or an isolated DC-DC converter (such as push-pull or full-bridge). Non-isolated Boost circuits are suitable for applications with relatively low input-output voltage ratios, offering a simple structure and high efficiency. If input-output electrical isolation is required, a high-frequency transformer-isolated topology is chosen to prevent mutual interference between the high-voltage and low-voltage sides during faults. In this embodiment, the boost converter module consists of a power switch, an energy storage inductor (or transformer), a rectifier diode, and an output filter capacitor. Pulse width modulation (PWM) controls the switching on and off of the power switch to convert the low-voltage input to a set high-voltage output. The output is connected to the load power supply bus.

[0079] Redundancy configurations are as follows: Two or more identical boost converter submodules are configured in the load power control unit. Their inputs are connected in parallel to the output bus of the main solar array, and their outputs are connected in parallel to the load power supply bus via ideal diodes or solid-state relays. During normal operation, all submodules participate in power sharing, with each module bearing a portion of the load current. When one submodule fails (e.g., a short circuit or open circuit in the switching transistor, or abnormal output voltage), the fault detection circuit identifies the fault and sends a signal, controlling the corresponding isolation device to disconnect the submodule from the bus. The remaining healthy submodules continue to bear the full load power, maintaining a stable load power supply bus voltage. Another redundancy method is cold backup: one module is primary, and one module is backup. When the primary module is working normally, the backup module is in standby mode; when the primary module fails, the backup module starts up and takes over the output within milliseconds.

[0080] Through the aforementioned boost converter module and its redundant configuration, the low-voltage output of the main solar array can be boosted to the high-voltage level required by the load power supply bus, adapting to the high-power demand of the computing load. The redundant design avoids the risk of a complete power outage of the computing load due to the failure of a single boost module, significantly improving the continuity of the power supply link. This allows the system to be compatible with low-voltage photovoltaic modules while ensuring a stable power supply to the high-voltage bus, reducing the probability of the computing load shutting down due to a single point of failure in power conversion.

[0081] In some implementations, see also Figure 2The collaborative control unit also includes a communication module. This communication module is used to upload operating condition information, the voltage of the load power supply bus and the platform power supply bus, the current collection power of the cross-link combiner unit, and fault signals to the satellite platform or ground operation and maintenance system, and to receive external control commands sent by the satellite platform or ground operation and maintenance system.

[0082] During satellite operation, ground maintenance personnel need to understand the real-time status of the power supply system to intervene promptly in case of anomalies. The communication module connects to the satellite platform via the onboard data bus or establishes an indirect link with the ground station via the telemetry, tracking, and command (TT&C) transponder. It packages key operational data generated within the collaborative management unit (including current illumination status indicators, measured voltage values ​​of the two busbars, transmission power of the combiner unit, and fault codes detected by the fault handling module) into telemetry frames, which are then sent to the satellite platform at a preset cycle and forwarded to the ground. Simultaneously, the communication module continuously listens for remote control command frames from the platform or ground, parses them, and transmits them to the corresponding functional modules for execution, such as adjusting power limit thresholds, forcibly switching power supply modes, and resetting fault isolation circuits.

[0083] In this embodiment, the communication module uses a CAN bus interface, with its physical and link layers conforming to aerospace-grade CAN specifications. The module internally includes a receive buffer and a transmit buffer, used to temporarily store telemetry data to be uploaded and external commands to be processed, respectively. The collaborative management unit fills the transmit buffer with the operating condition code output by the operating condition identification module, the bus voltage sample value, the bus power calculation value, and the fault code generated by the fault handling module, according to a fixed data frame format. The communication module actively transmits these commands to the bus at a frequency of 1Hz to 10Hz. After receiving external control commands via the bus, the communication module verifies and parses them, then transmits the command opcode and parameters to other modules within the collaborative management unit. For example, when the ground sends a command to "set the load bus voltage upper limit to 280V," the communication module forwards this command to the power management module, which adjusts the overvoltage protection threshold.

[0084] Through the communication module, the operating status of the power supply system can be monitored remotely in real time, and fault information can be reported in a timely manner. Ground personnel can send instructions to adjust the power supply strategy or intervene in the fault handling process as needed, thereby improving the flexibility and rapid response capability of the power supply system's on-orbit operation and maintenance, enabling the system to adapt to unexpected task changes or on-orbit anomalies.

[0085] In summary, the dual-bus cooperative power supply system for a dawn-dusk orbit computing satellite provided in this embodiment of the invention has the following beneficial effects compared with the prior art: 1) By setting up independent power supply links for the load and the platform, and configuring independent power generation units, energy storage units, control units, and buses for each, electrical separation between high-voltage computing power supply and low-voltage platform power supply is achieved. This structure can effectively block the transmission of instantaneous power fluctuations of the computing load to the platform load, improving the operational safety of the platform load; at the same time, it allows for independent optimization of voltage levels and power capacity for different load characteristics, avoiding mutual constraints when sharing a bus.

[0086] 2) By setting up a unidirectional controllable cross-link combiner unit between the load power supply bus and the platform power supply bus, the surplus power of the load power supply link can be recovered and utilized across links. This design improves the overall energy utilization efficiency of the satellite, and at the same time, due to the use of unidirectional transmission, it avoids the backflow of power from the platform power supply link to the load power supply link, thus ensuring the stability of the platform power supply.

[0087] 3) The collaborative management unit identifies the illumination period, shadow period, transition period, and ambiguous shadow period in real time, and configures differentiated power supply strategies for each of these four operating conditions. This allows the power supply system to proactively adapt to the complex illumination changes during dawn and dusk. During the illumination period, the system provides dynamic adaptation between normal power and instantaneous peak power for the computing load. During the shadow period, it provides low-power, regulated standby power for the computing load. During the transition period, it maintains stable normal power supply. During the ambiguous shadow period, it limits peak output and uses batteries to instantaneously compensate for power fluctuations. This strategy avoids the insufficient adaptability of a single power supply mode in varying illumination environments, ensuring that the computing load receives power supply matching its operating mode under each condition, while reducing energy storage consumption during the shadow period.

[0088] 4) By setting up a computing power distribution unit with millisecond-level response capability in the load power supply link, and utilizing a power detection module to collect the power demand signal of the computing load in real time, and rapidly adjusting the conduction state of the power transistors through a drive control module, the instantaneous peak power fluctuation of the computing load is tracked and adjusted. This computing power distribution unit can complete power adjustment within milliseconds, meeting the rapid jump requirements of the computing load from normal power to peak power. It also integrates overcurrent, overtemperature, and short-circuit protection functions, improving the dynamic response capability and hardware reliability of the computing power supply link.

[0089] 5) By incorporating a shunt regulation module within the load power control unit and configuring it to activate only when the cross-chain busbar unit cannot fully absorb excess power, redundant power of the main solar array is diverted and discharged, thus achieving stable control of the bus voltage. This priority design (busbar priority, shunt backup) prioritizes the recovery of excess power while ensuring overvoltage protection of the bus, avoiding the risk of voltage exceeding limits caused by power accumulation.

[0090] 6) By integrating redundant boost converter modules into the payload power control unit, the low-voltage output of the main solar array is boosted to the high-voltage level required by the payload power supply bus. Employing a hot backup or N+1 redundancy structure significantly reduces the risk of power outages due to the failure of a single boost module. This redundancy design enhances the continuous power supply capability of the computing power link, meeting the high reliability requirements of computing satellites.

[0091] 7) By setting up fault handling and power management modules, and implementing a fixed priority strategy of prioritizing platform basic loads over computing loads and computing loads over platform non-core loads, fault isolation and power allocation are ensured to guarantee critical loads in the event of power supply unit failure or insufficient overall satellite power. In case of fault conditions, the fault circuit is quickly disconnected and the power supply to the healthy unit is reconfigured. When power is insufficient, non-core loads and computing loads are subject to tiered restrictions, and cross-link merging units are activated for supplemental power when necessary. This maximizes the maintenance of the satellite platform's basic survivability and the preservation of critical mission data for the computing loads.

[0092] 8) By setting up a communication module, operating condition information, bus voltage, bus power and fault signals are uploaded to the satellite platform or ground operation and maintenance system, and external control commands are received. This enables remote real-time monitoring and on-orbit control of the power supply system status, improves the flexibility of system operation and maintenance and the ability to handle anomalies, and enables ground personnel to intervene in troubleshooting in a timely manner or adjust the power supply strategy according to mission requirements.

[0093] The above are merely preferred embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in the present invention should be included within the scope of protection of the present invention.

Claims

1. A dual-bus cooperative power supply system for a computing satellite in a dawn-dusk orbit, characterized in that, include: Independent load power supply links and platform power supply links; The load power supply link includes a main solar cell array, a load battery pack, a load power control unit, and a load power supply bus, which are used to provide high-voltage power supply for the computing load. The platform power supply link includes an auxiliary solar cell array, a platform battery pack, a platform power control unit, and a platform power supply bus, which are used to provide low-voltage power supply to the platform load; A cross-chain busbar unit is connected between the load power supply busbar and the platform power supply busbar, and is used to convert the electrical energy of the load power supply busbar and unidirectionally supply it to the platform power supply busbar when under control. The collaborative control unit, connected to the load power control unit, the platform power control unit, and the cross-chain combiner unit, is used for: Real-time acquisition of satellite on-orbit operating parameters, including at least light intensity and its fluctuation frequency; Based on the light intensity and its fluctuation frequency, the current lighting condition is identified as a lit period, a shadow period, a transition period, or a hazy shadow period. Specifically, a lit period is defined as the light intensity exceeding a first light threshold; a shadow period is defined as the light intensity falling below a second light threshold, where the second light threshold is lower than the first light threshold; a transition period between a lit period and a shadow period is defined as the light intensity within a preset light range and its fluctuation frequency falling below a preset fluctuation frequency threshold; wherein the lower limit of the preset light range is higher than the second light threshold, and the upper limit is lower than the first light threshold; and a hazy shadow period is defined as the light intensity within the preset light range and its fluctuation frequency reaching or exceeding the preset fluctuation frequency threshold. Based on the current lighting conditions and other collected operating parameters, coordinated control commands are sent to the load power control unit, platform power control unit, and cross-link bus unit to adjust the power supply and voltage of the load power supply bus and platform power supply bus, so as to adapt them to the power demand of the computing load under the current lighting conditions, and to achieve the following: During periods of sunlight, it provides a power supply that dynamically adapts to both normal power and instantaneous peak power for computing loads; During the shadow period, it provides low-power regulated standby power for computing loads; During the transition period, a stable conventional power supply will be provided for computing loads; During the fuzzy shadow period, provide normal power to the computing load and prohibit instantaneous peak power output.

2. The system according to claim 1, characterized in that, The collaborative management and control unit includes an operation parameter acquisition module. The on-orbit operation parameters of the satellite acquired by the operation parameter acquisition module include: light intensity and its fluctuation frequency, voltage and power of the payload power supply bus and the platform power supply bus, output voltage and current of the main solar cell array and the auxiliary solar cell array, terminal voltage, remaining power and charging and discharging current of the payload battery pack and the platform battery pack, and real-time power demand signals of the computing power payload and each load of the platform.

3. The system according to claim 1, characterized in that, The collaborative management and control unit includes a power supply module for the sunshine period, which is configured as follows: The load power control unit described in the instruction controls the electrical energy output by the main solar cell array, prioritizes powering the computing load, uses surplus electrical energy to charge the load battery pack, and dynamically adjusts the output power of the main solar cell array to adapt to the computing load's normal power mode and instantaneous peak power mode. The platform power control unit described in the instruction controls the electrical energy output by the auxiliary solar cell array, prioritizing power supply to the platform load, and using surplus electrical energy to charge the platform battery pack; Furthermore, when the load battery pack is fully charged and the load power supply link still has surplus power, the cross-link converter unit is activated to convert the high-voltage DC voltage of the load power supply bus into a low-voltage DC voltage adapted to the platform power supply bus, and to replenish the platform power supply bus in a constant voltage and constant current mode.

4. The system according to claim 1, characterized in that, The collaborative management and control unit includes a shadow period power supply module, which is configured as follows: The load power control unit described in the instruction controls the load battery pack to independently supply power to the load power bus and controls the computing load to enter standby mode; The platform power control unit described in the instruction controls the platform battery pack to independently supply power to the platform power bus and continuously output constant power for on-orbit insulation of the satellite platform; Simultaneously shut down the cross-chain confluence unit.

5. The system according to claim 1, characterized in that, The collaborative management and control unit includes a transitional power supply module, which is configured as follows: Predict the target lighting conditions based on the changing trend of light intensity; When it is predicted that the shadow period will begin, the load power control unit and the platform power control unit are instructed to: gradually reduce the output power of the solar cell array and simultaneously increase the discharge power of the battery pack, while shutting down the cross-chain combiner unit; When it is predicted that the solar radiation period will begin, the load power control unit and the platform power control unit are instructed to: gradually increase the output power of the solar cell array and simultaneously increase the charging power of the battery pack, while shutting down the cross-chain combiner unit; When the light intensity reaches the target light condition threshold, the load power control unit and the platform power control unit are instructed to smoothly switch to the power supply mode corresponding to the operating condition.

6. The system according to claim 1, characterized in that, The collaborative control unit includes a fuzzy shadow period power supply module, which is configured as follows: The load power control unit described in the instruction controls the instantaneous discharge of the load battery pack to compensate for fluctuations in the output power of the main solar array, maintains the stability of the load power supply bus voltage, and controls the computing load to maintain normal power operation, prohibiting switching to instantaneous peak power mode. The platform power control unit described in the instruction controls the platform battery pack to discharge instantaneously in order to compensate for fluctuations in the output power of the auxiliary solar array and maintain the stability of the platform power supply bus voltage. Simultaneously shut down the cross-chain confluence unit.

7. The system according to claim 1, characterized in that, The collaborative control unit further includes a fault handling module, which is configured as follows: When the operating parameters of any power supply unit exceed the preset fault threshold, it is determined to be a fault condition. Identify the fault type and fault location. Based on the identified fault type and fault location, instruct the load power control unit or the platform power control unit to cut off the fault circuit, and link the non-fault power supply unit and cross-link combiner unit to execute the power distribution strategy that prioritizes the platform's basic load over the computing load and the computing load over the platform's non-core load.

8. The system according to claim 1, characterized in that, The collaborative control unit further includes a power management module, which is configured as follows: Real-time assessment of whether the total power supply of the load power supply link and the platform power supply link is sufficient; When the total power supply of any power supply link is insufficient, the load power control unit is instructed to limit the power supply of the computing load according to the preset priority strategy, and / or the platform power control unit is instructed to limit the power supply of non-core loads. If the total power supply of the platform power supply link is still insufficient, the cross-link merging unit is activated to replenish the available power of the load power supply bus to the platform power supply bus.

9. The system according to claim 1, characterized in that, The cross-chain confluence unit includes: The busbar acquisition module is used to acquire the surplus electrical energy of the load power supply busbar; The multi-stage step-down converter module has at least two stages of step-down circuits connected in series to convert the high-voltage power from the load power supply bus into low-voltage power adapted to the platform power supply bus. A voltage regulator module is used to regulate the converted voltage. The current limiting module is used to limit the current output to the power supply bus of the platform.

10. The system according to claim 1, characterized in that, The load power supply link also includes a computing power distribution unit, which is connected between the load power supply bus and the computing load to realize the power distribution and regulation of the computing load; The computing power distribution unit includes: Power transistors are used to control the power output to the computing load. The power detection module is used to collect the power demand signal of the computing load in real time; The drive control module is connected to the power detection module and the load power control unit. It is used to quickly adjust the conduction state of the power transistor according to the feedback signal of the power detection module and the control signal of the load power control unit to adapt to the instantaneous peak power fluctuation requirements of the computing load. During the adjustment process, it performs overcurrent, overtemperature and short circuit protection.

11. The system according to claim 1, characterized in that, The load power control unit integrates a shunt regulation module. The shunt regulation module is activated only when the cross-link combiner unit cannot fully absorb the excess power of the load power supply link. It is used to shunt and discharge the power of the main solar cell array that exceeds the load and energy storage requirements in order to stabilize the load power supply bus voltage.

12. The system according to claim 1, characterized in that, The load power control unit also integrates a boost converter module, which is used to convert the low-voltage output of the main solar cell array into the high voltage required by the load power supply bus. The boost converter module is redundantly configured.

13. The system according to claim 1, characterized in that, The collaborative control unit also includes a communication module, which is used to upload operating condition information, bus voltage, bus power, and fault signals to the satellite platform or ground operation and maintenance system, and to receive external control commands sent by the satellite platform or ground operation and maintenance system.

Images