A working condition adaptive power supply method for a dawn-dusk orbit computing satellite

Abstract

The application discloses a working condition self-adaptive power supply method for a dawn-dusk orbit computing power satellite, which is applied to mutually independent load and platform power supply buses, and a cross-chain bus connection unit is connected between the two buses, which unidirectionally supplies the platform bus with the electric energy of the load bus when controlled; the method comprises the following steps: collecting satellite on-orbit operation parameters in real time; identifying illumination period, eclipse period, transition period and fuzzy shadow period; sending cooperative control instructions to each power supply unit and the cross-chain bus connection unit according to the current working condition and the collected parameters, and adjusting the power supply power and voltage of the two buses to adapt to the power consumption demand of the computing power load, and realizing the following: the illumination period is dynamically adapted to the regular power and the instantaneous peak power of the computing power load, the eclipse period provides low-power stable voltage standby power supply, the transition period provides stable regular power supply, and the fuzzy shadow period provides regular power supply and prohibits peak output. Through the four types of working condition self-adaptive power supply strategies, the computing power load power supply stability and the whole-satellite energy utilization efficiency are improved.

Description

Technical Field

[0001] This invention belongs to the field of intelligent control technology for spacecraft power supplies, specifically relating to an adaptive power supply method for computing satellites in dawn-dusk orbits, applicable to power supply management of computing satellites under a dual-bus independent power supply architecture. Background Technology

[0002] During their operation in diurnal orbit computing satellites, the illumination intensity exhibits complex characteristics such as gradual changes and high-frequency fluctuations. Simultaneously, satellites carrying high-power computing payloads (hereinafter referred to as "computing payloads") operate in multiple modes, including normal power, instantaneous peak power, and low-power standby. Currently, onboard power supply systems typically employ a dual-bus architecture, with separate high-voltage payload buses and low-voltage platform buses, relying on fixed logic for power supply control. However, existing power supply control methods still have shortcomings in areas such as operational condition identification, strategy adaptation, and link coordination.

[0003] Existing methods typically distinguish only between two basic operating conditions: the illumination period and the shadow period. They fail to cover the transition period, characterized by slow changes in illumination intensity, and the ambiguous shadow period, where illumination intensity fluctuates frequently, unique to twilight orbits. The transition period is the gradual change in illumination between the illumination and shadow periods; the ambiguous shadow period is a short-term, high-frequency fluctuation caused by factors such as the satellite's own structure momentarily obstructing the solar array or rapid changes in the angle of sunlight incidence. For the transition period, there is a lack of corresponding power supply strategies, potentially leading to bus voltage fluctuations due to sudden power changes. For the ambiguous shadow period, there is a lack of targeted power compensation mechanisms, posing a risk of insufficient power supply to the computing load. Furthermore, existing power supply methods do not develop differentiated control steps for the various power modes of the computing load, failing to respond quickly to millisecond-level peak power fluctuations, and lack dedicated voltage stabilization measures during low-power standby.

[0004] In a dual-bus independent power supply architecture, existing methods often couple the two power supply links in their control logic. Power fluctuations in the load power supply link can easily be transmitted to the platform power supply link through control commands or energy interactions, affecting the stable operation of the platform load. For excess power generated by the load power supply link during the sunshine period, existing methods only handle simple energy storage or discharge, lacking cross-link energy transfer processes.

[0005] Therefore, there is an urgent need for a power supply method that can identify multiple lighting conditions, implement differentiated power supply strategies for different conditions, and achieve independent collaboration between dual links and unidirectional controllable energy, so as to improve the power supply stability and energy utilization of computing satellites in dawn-dusk orbits. Summary of the Invention

[0006] This invention provides an adaptive power supply method for computing satellites in dawn-dusk orbit, aiming to solve problems such as imprecise operating condition identification, dual-link regulation coupling, insufficient multi-mode adaptation of computing load, and low efficiency of surplus power utilization in existing power supply control methods for computing satellites in dawn-dusk orbit.

[0007] To achieve the above-mentioned objectives, the present invention adopts the following technical solution: An adaptive power supply method for a computing satellite in a dawn-dusk orbit, the method being applied to an independent payload power supply bus and a platform power supply bus, wherein a cross-link converter unit is connected between the two buses to unidirectionally supply power from the payload power supply bus to the platform power supply bus under controlled conditions, comprising: The system collects satellite on-orbit operating parameters in real time, including at least illumination intensity and its fluctuation frequency. Based on the illumination intensity and its fluctuation frequency, the current illumination condition is identified as an illumination period, a shadow period, a transition period, or a hazy shadow period. Based on the current illumination condition and other collected operating parameters, coordinated control commands are sent to each power supply unit and the cross-link merging unit to adjust the power supply power and bus voltage of the load power supply bus and the platform power supply bus, adapting them to the power demand of the computing load under the current illumination condition. Specifically, during the illumination period, the system provides dynamically adapted power supply to the computing load, matching normal power and instantaneous peak power. During the shadow period, the system provides low-power, regulated standby power supply to the computing load. During the transition period, the system provides stable normal power supply to the computing load. During the hazy shadow period, the system provides normal power supply to the computing load and prohibits instantaneous peak power output.

[0008] Compared with the prior art, the technical solution of the present invention has at least the following beneficial effects: By refining the lighting conditions into four categories—the illumination period, the ground shadow period, the transition period, and the ambiguous shadow period—and developing corresponding power supply strategies for each category, the power supply method can proactively adapt to the complex lighting changes along the dawn-dusk trajectory. The identification and power supply strategies for the transition period can reduce power jumps caused by sudden changes in operating conditions, while the identification of the ambiguous shadow period provides a specialized power supply response to sudden lighting fluctuations, improving the accuracy of power supply control.

[0009] During periods of sunshine, the power supply dynamically adapts to both normal and peak power demands, ensuring stable operation during regular computations and providing sufficient power support during sudden spikes in computing demand, while avoiding energy waste caused by continuous high power output. This differentiated power supply strategy balances the computational intensity of the computing task with the energy efficiency of the power supply system.

[0010] During the shadow period, a low-power, regulated standby power supply is provided for the computing load, enabling the computing load to maintain only the necessary data and status monitoring during periods without sunlight, reducing energy storage consumption. At the same time, the voltage of the load power supply bus is kept stable, ensuring that the computing load can quickly return to normal working status after sunlight resumes, avoiding data loss or restart delays caused by a complete power outage.

[0011] During the transition period, a stable, conventional power supply is provided to the computing load to avoid frequent fluctuations in power supply caused by gradual changes in light intensity. Peak power adaptation is not performed during this time, nor is the load entered standby mode, allowing it to operate at a stable, conventional power level during the light transition phase and reducing power supply disturbances.

[0012] During the ambiguous shadow period, normal power supply is provided to the computing load, and instantaneous peak power output is prohibited. In view of the characteristics of high-frequency fluctuations in sunlight and unstable photovoltaic output during this period, the power demand of the computing load is forcibly limited to prevent the bus voltage from collapsing due to sudden power surges combined with sunlight fluctuations, thus maintaining basic power supply stability without increasing the burden on energy storage.

[0013] By setting up independent load power supply buses and platform power supply buses, and sending independent control commands to the solar arrays and battery banks on the load side and platform side respectively, the power supply control of the two buses is separated. Power fluctuations on the load side will not be transmitted to the platform side, thereby improving the operational safety of the platform load. At the same time, the control parameters of the two buses can be set separately according to their respective load characteristics, avoiding mutual constraints.

[0014] By setting up a controlled unidirectional cross-link busbar unit between the two buses, and converting the power from the load power supply bus to replenish the platform power supply bus when needed, surplus power can be transferred across the busbars. When the load side has sufficient illumination and the battery pack is full, power that might otherwise be wasted is converted into low-voltage power usable on the platform side, thereby improving the overall energy utilization efficiency of the satellite. The unidirectional replenishment design also prevents power from flowing back from the platform side to the load side, which helps maintain the stability of the platform's power supply.

[0015] In summary, this invention, through the identification of four types of lighting conditions and differentiated power supply strategies, independent control of dual buses, and unidirectional controllable cross-link merging, can provide stable power supply to computing loads that matches their operating modes according to the complex lighting changes of the dawn and dusk orbits, while improving the overall energy utilization efficiency of the satellite and ensuring the safe operation of the platform load. Attached Figure Description

[0016] The accompanying drawings, which form part of this specification, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings: Figure 1A flowchart illustrating an adaptive power supply method for a computing satellite in a dawn-dusk orbit, provided in an embodiment of the present invention; Figure 2 This is a schematic diagram of a fault handling process provided by an embodiment of the present invention; Figure 3 This is a schematic diagram of a processing flow under insufficient power conditions provided by an embodiment of the present invention; Figure 4 A schematic diagram of a dynamic adjustment and protection process for computing load power provided in an embodiment of the present invention; Figure 5 This is a schematic diagram of a satellite-to-ground interaction and remote control process provided in an embodiment of the present invention. Detailed Implementation

[0017] Before describing the technical solution of the present invention in detail, a brief explanation will be given of the power supply control requirements of the dawn-dusk orbit computing satellite and the basis of existing methods.

[0018] During the operation of satellites in dawn-dusk orbits, the light intensity exhibits characteristics such as gradual changes and high-frequency fluctuations. The computing load typically includes multiple power modes, including regular steady-state operations, instantaneous peak bursts, and low-power standby. Existing power supply control methods usually only distinguish between two basic operating conditions: the illumination period and the shadow period, and adopt a uniform control process, without developing differentiated strategies for the gradual transition period of illumination and the short-term ambiguous shadow period. At the same time, for dual-bus independent power supply architectures, the control logic often couples the two power supply links, and power fluctuations on the load side can easily be transmitted to the platform side. In addition, surplus power during the illumination period is mostly discharged using a single mechanism, lacking cross-link energy transfer and graded absorption processes.

[0019] Based on the above background, the design concept of this invention is as follows: taking working condition identification as the starting point of control logic, the lighting conditions are subdivided into four categories: the lighting period, the ground shadow period, the transition period, and the blurred shadow period, and a corresponding power supply strategy is formulated for each type of working condition; under the dual-bus independent power supply architecture, independent control commands are sent to the solar cell array and battery pack on the load side and the platform side, respectively, and a unidirectional controllable cross-chain merging process is set up to selectively replenish the platform side with the surplus power on the load side; through the above-mentioned procedural control steps, the power supply method can actively adapt to the complex lighting changes of the dawn and dusk orbit and provide the computing load with power supply that matches its operating mode.

[0020] The technical solution of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0021] See Figure 1This invention provides an adaptive power supply method for a computing satellite in a dawn-dusk orbit. This method is applied to two independent load power supply buses and a platform power supply bus, with a cross-link converter unit connecting the two buses to unidirectionally supply power from the load power supply bus to the platform power supply bus under controlled conditions. The method includes: S1, real-time acquisition of satellite on-orbit operating parameters, including at least light intensity and its fluctuation frequency.

[0022] The collected satellite on-orbit operating parameters include at least light intensity and its fluctuation frequency, and may also include bus voltage, power, generator output, storage unit status and load requirements, providing input for subsequent operating condition identification and command generation.

[0023] S2, based on the light intensity and its fluctuation frequency, identify the current lighting condition as a lighting period, a ground shadow period, a transition period, or a blurred shadow period.

[0024] This identification process is accomplished by comparing the light intensity with a preset threshold and detecting the fluctuation frequency with a preset frequency threshold. For example, when the light intensity exceeds a first threshold, it is determined to be a period of illumination; when it is below a second threshold, it is determined to be a period of shadow; when it is in the middle range and the fluctuation frequency is low, it is determined to be a transition period; and when it is in the middle range and the fluctuation frequency is high, it is determined to be a period of ambiguous shadow. This division of operating conditions provides a basis for subsequent differentiated power supply.

[0025] S3, based on the current lighting conditions and other collected operating parameters, sends coordinated control commands to each power supply unit and cross-link combiner unit to adjust the power supply power and bus voltage of the load power supply bus and the platform power supply bus, so as to adapt them to the power demand of the computing load under the current lighting conditions, and achieve: S01 provides dynamically adapted power supply for computing loads during periods of sunlight, adapting to both normal power and instantaneous peak power. S02 provides low-power regulated standby power for computing loads during the shadow period; S03 provides stable conventional power supply for computing loads during the transition period; S04, during the fuzzy shadow period, provides normal power supply to the computing load and prohibits instantaneous peak power output.

[0026] By designing differentiated power supply strategies, the computing load can operate smoothly during normal operations in the sunshine period, obtain sufficient power support during instantaneous peak periods, and avoid energy waste caused by continuous high power output. During the shadow period, the computing load only maintains necessary data storage and status monitoring, reducing energy storage consumption and keeping the bus voltage stable, allowing for rapid resumption of normal operation after sunshine resumes. During the transition period, the computing load operates at a stable, normal power, reducing power supply disturbances caused by gradual changes in sunshine levels. During the ambiguous shadow period, the power demand of the computing load is limited to prevent sudden peak surges combined with sunshine fluctuations from causing bus voltage collapse. Furthermore, independent control of the dual buses eliminates mutual interference between links, and unidirectional cross-link merging provides a foundation for subsequent utilization of surplus power.

[0027] In summary, the power supply method of this embodiment, through the identification of four types of illumination conditions and differentiated power supply strategies, independent control of dual buses, and unidirectional controllable cross-link merging, can provide stable power supply to the computing payload that matches its operating mode according to the complex illumination changes of the dawn and dusk orbit. This achieves adaptive power supply under all operating conditions, improving the power supply stability of the computing payload and the overall energy utilization efficiency of the satellite.

[0028] In some implementations, the satellite's on-orbit operating parameters acquired in real time during step S1 specifically include the following parameters: light intensity and its fluctuation frequency, voltage and power of the payload power supply bus and platform power supply bus, output voltage and current of each solar cell array, terminal voltage, remaining capacity, and charging / discharging current of each battery bank, and real-time power demand signals of the computing load and each load on the platform. These parameters cover five aspects: lighting environment, power generation capacity, energy storage status, bus operation, and load demand.

[0029] Illumination intensity and its fluctuation frequency are used to distinguish between the illumination period, the shadow period, the transition period, and the ambiguous shadow period. Illumination intensity alone cannot distinguish between the transition period and the ambiguous shadow period. By introducing fluctuation frequency, when the illumination intensity is within a preset range, the fluctuation frequency can be detected to determine whether the current transition is gradual or a sudden high-frequency fluctuation. The voltage and power of the load power supply bus and the platform power supply bus reflect the actual operating status of the bus, used to determine whether the power supply meets the load demand, and to provide a basis for power regulation and current charging. The output voltage and current of each solar cell array directly reflect its working status, and can be used for fault diagnosis when the values ​​are abnormal. The terminal voltage, remaining capacity, and charging / discharging current of each battery bank are used to determine whether it has the ability to continue charging or whether the depth of discharge needs to be limited. For example, current charging is initiated when the remaining capacity is close to full charge, and the peak power of the computing load is limited when the remaining capacity is below a threshold. The real-time power demand signal of the computing load is acquired at a millisecond sampling frequency to quickly track its jump from normal power to instantaneous peak power; the real-time power demand signal of each load on the platform is used to assess the power consumption trend on the platform side and to predict in advance whether power shortage will occur.

[0030] In the specific implementation, the light intensity sensor outputs an analog voltage signal, which is then converted from analog to digital and read by the control unit. The fluctuation frequency is obtained by counting the zero-crossings or peak values ​​of the light intensity signal within a certain time window. Bus voltage and power are acquired through voltage transformers and current sensors, and then sent to the control unit via signal conditioning circuitry. The output parameters of the solar array are obtained through their respective voltage and current detection circuits. The parameters of the battery pack are read through the battery management chip (BMS), including individual cell voltage, total voltage, remaining charge (SOC), and charging / discharging current. The power requirements of the computing load are obtained through the power feedback signal provided by its power management interface, with a sampling frequency of no less than 1kHz; the power requirements of the platform load are obtained by summing the current detection data of each load. All acquired parameters are stored in digital form in the control unit's memory for subsequent processing.

[0031] By collecting the aforementioned multi-dimensional on-orbit operating parameters, this method provides a complete data foundation for operating condition identification, power regulation, busbar control, fault diagnosis, and power management. The introduction of light intensity fluctuation frequency enables accurate differentiation between transition periods and ambiguous shadow periods, avoiding misjudgments based solely on light intensity. Millisecond-level acquisition of computing load power demand signals provides the capability for rapid tracking of subsequent power fluctuations. The status parameters of each solar array and battery bank provide direct evidence for fault location and energy storage management. This parameter collection set balances comprehensiveness and specificity, ensuring the accurate execution of subsequent power supply control processes.

[0032] In some implementations, step S2 identifies the current lighting condition as a period of illumination, a period of shadow, a transition period, or a period of blurred shadow based on the collected light intensity and its fluctuation frequency. This includes: determining a period of illumination when the light intensity exceeds a first light threshold; determining a period of shadow when the light intensity is lower than a second light threshold, wherein the second light threshold is lower than the first light threshold; determining a transition period when the light intensity is within a preset light range and its fluctuation frequency is lower than a preset fluctuation frequency threshold; wherein the lower limit of the preset light range is higher than the second light threshold and the upper limit is lower than the first light threshold; and determining a period of blurred shadow when the light intensity is within the preset light range and its fluctuation frequency reaches or exceeds the preset fluctuation frequency threshold.

[0033] The above-mentioned operating condition determination employs a multi-dimensional determination method combining dual thresholds and fluctuation frequency. It uses a first illumination threshold, a second illumination threshold (the second threshold being lower than the first), a preset illumination range, and a preset fluctuation frequency threshold as the basis for determination, distinguishing between the illumination period, the shadow period, the transition period, and the blurred shadow period. For example, the first illumination threshold can be set to 1000 W / m², the second illumination threshold to 800 W / m², the preset illumination range to 800 W / m² to 1000 W / m², and the preset fluctuation frequency threshold to 10 Hz. These values ​​are merely examples; in practical applications, they can be adjusted according to satellite orbit parameters and the characteristics of the illumination sensor.

[0034] The aforementioned operational condition determination logic is based on the observation and analysis of the actual illumination variation patterns in the twilight orbit. In the twilight orbit, illumination intensity does not jump instantaneously between the illumination period and the shadow period, but rather exists in a slowly decreasing or increasing transition range (e.g., 800W / m² to 1000W / m²). Within this range, if the fluctuation frequency is low, it indicates that the illumination intensity is changing steadily, and the power supply system needs to gradually transition from one steady-state power supply mode to another. Therefore, it is necessary to identify this as a transition period. However, when the illumination intensity is also within this range but the fluctuation frequency is high, it is not a steady-state transition, but rather a sudden, instantaneous shadow interference. In this case, the power supply system should not completely switch power supply modes, but only perform instantaneous power compensation. Therefore, the operational condition identification module introduces both illumination intensity thresholds and fluctuation frequency thresholds, which can accurately distinguish between the two different types of illumination changes: the transition period and the ambiguous shadow period, thus providing a correct basis for the differentiated processing of subsequent power supply strategies.

[0035] When the light intensity exceeds the first light threshold, it is determined to be a sunny period. At this time, sunlight is abundant, the solar array's output power is stable and exceeds the load demand, and the power supply system enters normal power supply mode. When the light intensity is below the second light threshold, it is determined to be a shadow period. At this time, the light is extremely weak, the solar array's output power is close to zero, and it cannot meet the load's power supply needs. The power supply system switches to independent battery power supply mode.

[0036] When the light intensity is within a preset light range (between the second and first light thresholds) and the fluctuation frequency is lower than a preset fluctuation frequency threshold, it is considered a transition period. The transition period characterizes the gradual change in light intensity between the illuminated and shadowed periods, such as a slow decrease or a slow increase from the illuminated period to the shadowed period. Within this range, the light intensity changes gradually, the fluctuation frequency is low, and although the output power of the solar array decreases somewhat, it does not completely disappear. The power supply system needs to adopt a gradual power handover strategy to avoid sudden power changes.

[0037] When the light intensity is within a preset light range and its fluctuation frequency reaches or exceeds a preset fluctuation frequency threshold, it is determined to be a period of ambiguous shadowing. This stage is usually caused by short-term high-frequency fluctuations due to factors such as the satellite's own structure momentarily blocking the solar array or rapid changes in the angle of sunlight incidence. The light intensity oscillates rapidly within the preset range, with a high fluctuation frequency, and the duration is usually between several seconds and tens of seconds. During this ambiguous shadowing period, the output power of the solar array fluctuates rapidly with the light intensity. The power supply system needs to activate the instantaneous power compensation mechanism to maintain the stability of the bus voltage while limiting the peak power demand of the computing load.

[0038] In its implementation, the control unit continuously samples light intensity values ​​using a light sensor. The sampled values ​​are compared with a first and a second light threshold to determine their corresponding interval. Simultaneously, frequency analysis is performed on the light intensity signal, such as calculating the number of zero-crossings or peak fluctuations per unit time to obtain the fluctuation frequency. When the intensity is within a preset light interval, the fluctuation frequency is further compared with a preset fluctuation frequency threshold: if it is below the threshold, a transition period flag is output; if it reaches or exceeds the threshold, a blurred shadow period flag is output. A timer can assist in recording the duration; if the blurred shadow duration exceeds a preset duration (e.g., 30 seconds), it can be reclassified as a transition period or a light period to avoid prolonged misjudgment.

[0039] Using the aforementioned quantitative judgment method, this method can accurately distinguish four typical lighting conditions occurring on the dawn-dusk track. The distinction between the transition period and the blurred shadow period relies on a fluctuation frequency threshold, avoiding the misjudgment of gradual transitions as sudden shadows or vice versa due to relying solely on light intensity. This judgment logic provides accurate triggering conditions for differentiated power supply strategies under subsequent conditions, ensuring that the power supply method can execute adapted control flows in different lighting environments.

[0040] In some implementations, during the sunlight period in step S3, the coordinated control instructions sent to each power supply unit and cross-chain merging unit specifically include: instructing the solar array on the load side to prioritize powering the computing load with its output power, and using the surplus power to charge the battery pack on the load side, and dynamically adjusting the output power of the solar array to adapt to the conventional power mode and instantaneous peak power mode of the computing load; at the same time, instructing the solar array on the platform side to prioritize powering the platform load with its output power, and using the surplus power to charge the battery pack on the platform side.

[0041] During periods of sunshine, the output power of the solar array typically exceeds the real-time consumption of the load. Prioritizing the power from the solar array on the load side ensures the basic power needs of computing tasks, preventing insufficient power supply due to excessive power generation from battery charging. The remaining surplus power is used to charge the battery bank on the load side, gradually replenishing energy storage while meeting real-time computing power needs, and reserving energy for periods of shadow or no sunshine. Dynamically adjusting the output power of the solar array to adapt to changes in computing load power from normal to instantaneous peak power allows for supporting short-term peak operations using the array's own capacity without increasing the burden on energy storage, reducing the number of battery charge-discharge cycles. On the platform side, the solar array's power is prioritized for the platform load, with the remainder used to charge the platform's batteries, also following the principle of "meeting real-time power needs first, then replenishing energy storage," ensuring a stable power supply to the platform's critical loads.

[0042] In its implementation, the control unit sends commands to the power regulator (such as a maximum power point tracking controller or shunt regulator) of the solar array on the load side, setting a target value for its output power. When the computing load is in normal power mode, the control unit instructs the solar array to match the real-time power of the computing load, with the remaining power automatically flowing to the battery charging circuit. When the computing load requests instantaneous peak power, the control unit detects the jump in the power demand signal and immediately sends a power increase command to the power regulator, causing the solar array to increase its output power within milliseconds to support peak computing. After the peak operation ends, the output power returns to the normal level. The solar array on the platform side operates at a fixed power or constant voltage, with its output preferentially passing through the platform load interface, and excess energy stored in the platform battery through the charging circuit. The regulation of the two links is independent, with control commands sent to their respective power regulators.

[0043] Through the aforementioned sunlight-controlled regulation commands, this method achieves orderly allocation of power generation during periods of sufficient sunlight: real-time power consumption for computing loads is prioritized, instantaneous peak power is dynamically supported, and surplus energy is efficiently stored. The platform side also follows the principle of prioritizing load before energy storage, avoiding platform bus voltage fluctuations caused by excessive charging current. This regulation method balances the computational intensity of computing tasks with the energy efficiency of the power supply system, reserving sufficient energy for potential cross-chain confluence or shadow period power supply.

[0044] In some implementations, the coordinated control command sent during the illumination period in step S3 further includes: when the battery pack on the load side is fully charged and there is still surplus power on the load side, activating the cross-chain busbar unit to convert the high-voltage DC voltage of the load power supply bus to the low-voltage DC voltage adapted to the platform power supply bus, and supplying power to the platform power supply bus in a constant voltage and constant current mode.

[0045] Once the battery pack on the load side is fully charged, if the solar array still has excess power generation capacity, continuing to charge the battery will damage its lifespan, while directly discarding the excess energy will result in energy waste. At this point, the cross-chain combiner unit is activated to convert the potentially wasted high-voltage energy into usable low-voltage energy on the platform side, replenishing the platform's power supply bus. This combiner process employs a constant voltage and constant current mode, meaning the output voltage is stabilized near the rated voltage of the platform bus, and the output current is limited to a preset safety range to avoid voltage surges or overcurrent risks to the platform bus during the energy replenishment process.

[0046] In practice, the control unit monitors the remaining charge and charging current of the load-side battery pack in real time. When the remaining charge reaches the full charge threshold (e.g., 100%) and the charging current is below the preset current lower limit, the battery is considered fully charged. Simultaneously, it checks whether the voltage of the load power supply bus is still higher than the platform bus's rated voltage (e.g., 270V for the load bus, 32V for the platform bus) and whether the solar array still has excess output power. Once these conditions are met, the control unit sends a start command to the cross-link bus unit, activating its internal step-down converter circuit. The power replenishment process continues until there is no more excess power on the load side (e.g., the solar array's output power decreases) or the platform side no longer needs power replenishment (e.g., the platform battery is full or the platform load decreases). At this point, the control unit sends a stop command, shutting down the cross-link bus unit.

[0047] Through the aforementioned power replenishment command, this method enables the secondary utilization of surplus energy after the load-side battery is fully charged. It transfers potentially wasted energy to the platform power supply bus, reducing the depth of discharge of the platform battery and thus improving the overall satellite energy utilization efficiency. The constant voltage and constant current mode ensures that the power replenishment process has no impact on the platform bus, avoiding voltage overshoot or current surges and guaranteeing the stable operation of the platform load. This power replenishment step, as a supplement to the illumination period regulation, is automatically executed after basic power supply and energy storage are completed, requiring no manual intervention.

[0048] In some implementations, the cross-chain bus unit, when under control, converts the electrical energy from the load power supply bus and supplies it unidirectionally to the platform power supply bus. Specifically, this includes the following steps: First, the cross-chain bus unit acquires the surplus electrical energy from the load power supply bus; then, it converts the high-voltage electrical energy from the load power supply bus into low-voltage electrical energy suitable for the platform power supply bus through at least two series-connected step-down circuits; finally, it stabilizes the converted voltage and limits the current output to the platform power supply bus.

[0049] In its implementation, the input of the cross-link busbar is connected to the load power supply bus, acquiring surplus power through voltage detection and switch control. When the control unit determines that current needs to be combined, it sends a start command to the cross-link busbar, turning on the input switch inside the cross-link busbar to draw power from the load busbar. To ensure a smooth conversion process, the high-voltage DC power is first fed into the first-stage step-down circuit, for example, reducing 270V to approximately 60V, and then fed into the second-stage step-down circuit, reducing the 60V to the 32V required by the platform busbar. Each step-down circuit can use a switching power supply topology (such as a Buck circuit), using pulse width modulation to control the duty cycle of the switching transistor to achieve voltage adjustment. The two-stage series connection reduces the voltage stress of each stage, improving conversion efficiency and reliability. The stepped-down power then passes through a voltage regulator circuit, using a voltage feedback loop to lock the output voltage near the rated voltage of the platform busbar (e.g., 32V ± 0.5V), preventing voltage drift caused by load changes or input fluctuations. Meanwhile, the current limiting circuit monitors the output current in real time. When the current exceeds a preset safety threshold (e.g., 15A), it automatically reduces the output or shuts down to prevent overcurrent damage to the platform-side equipment. The electrical energy, after voltage regulation and current limiting, is ultimately supplied to the platform power supply bus through the output terminal.

[0050] Through the above steps, the cross-chain busbar unit achieves a smooth power transfer from the high-voltage busbar to the low-voltage busbar. The multi-stage step-down structure reduces the voltage stress of a single-stage step-down, and the voltage stabilization and current limiting measures ensure that the busbar does not experience voltage or current surges during the busbar connection. This busbar connection process, as a means of absorbing surplus power during periods of sunshine, is used in conjunction with the aforementioned busbar triggering conditions to form a complete cross-chain replenishment method.

[0051] In some implementations, the coordinated control command sent during the illumination period in step S3 also includes: during the power supply process, when the platform power supply bus cannot fully absorb the surplus power on the load side, shutting down the cross-chain power supply unit and instructing the load side to divert and discharge the remaining surplus power.

[0052] The platform power supply bus may be unable to fully absorb excess power from the load side when the platform battery is fully charged, the platform load power is low, or the cross-link bus unit has reached its maximum transmission capacity. Continuing to supply power to the platform power supply bus in this situation could cause the platform bus voltage to rise continuously, triggering overvoltage protection or damaging the load. Therefore, the cross-link bus unit should be shut down first to cut off the power transmission path from the load side to the platform side. Then, the load-side shunt discharge should be activated to dissipate the remaining excess power through the shunt resistor, thereby stabilizing the load bus voltage.

[0053] In practice, the control unit monitors the voltage and bus current of the platform's power supply bus in real time. When the platform bus voltage rises to near a preset upper limit (e.g., 33V) and the bus current drops below the current limit, it is determined that the platform side can no longer absorb more power. At this time, the control unit sends a shutdown command to the cross-link bus unit, turning off its internal power switch and stopping the extraction of power from the load bus. Subsequently, the control unit sends a shunt command to the power regulation unit on the load side, turning on the switch connected in series with the shunt resistor. Based on the difference between the load bus voltage and the target value, the shunt current is adjusted using pulse width modulation to dissipate excess power on the shunt resistor until the load bus voltage falls back to the target range. If the platform's absorption capacity recovers (e.g., due to a sudden increase in platform load or a drop in battery voltage), the control unit can restart the cross-link bus unit to restore power supply.

[0054] Through the above steps, when the platform can no longer receive additional energy, this method first shuts down the busbar and then initiates diversion and discharge, forming a two-stage absorption sequence of priority for busbars and backup for diversion. Shutting down the busbar avoids the risk of overvoltage on the platform bus and reduces ineffective energy conversion; the subsequent diversion and discharge ensures the stability of the load bus voltage and prevents the accumulation of excess energy. This process improves the closed-loop management of excess energy during the solar sunshine period, taking into account both energy utilization efficiency and system safety.

[0055] In some implementations, during the shadow period in step S3, the coordinated control instructions sent to each power supply unit and the cross-link merging unit specifically include: instructing the battery pack on the load side to independently supply power to the load power supply bus and control the computing load to enter standby mode; instructing the battery pack on the platform side to independently supply power to the platform power supply bus and continuously output constant power for on-orbit insulation of the satellite platform; and simultaneously shutting down the cross-link merging unit.

[0056] During the shadow period, when sunlight intensity drops below the second illumination threshold, the solar array ceases power generation, and the system relies solely on the battery banks on both sides for power. The payload-side battery banks independently supply power to the payload power bus, while simultaneously switching the computing load to standby mode, maintaining only essential data retention and status monitoring. Power consumption can be reduced to 10% to 20% of normal operating power, thus extending the battery bank's power supply duration. The platform-side battery banks independently supply power to the platform power bus and continuously output constant power for on-orbit thermal insulation of the satellite platform, ensuring that basic loads such as attitude control, telemetry, tracking, and command (TT&C) communication, and thermal control can operate normally during periods without sunlight. The cross-link busbar is shut down, cutting off the energy exchange channel between the two buses, preventing circulating currents or backflows that may occur due to voltage differences between the buses during the shadow period, and also preventing voltage fluctuations on the payload side from being conducted to the platform side through the busbar.

[0057] In its implementation, after receiving the shadow period determination signal, the control unit sends a command to the battery pack discharge control circuit on the load side, instructing it to turn on its discharge switch and deliver battery power to the load power supply bus. Simultaneously, it sends a standby command to the computing load's power management interface, reducing its operating frequency and shutting down unnecessary peripherals, while maintaining memory data refresh. On the platform side, the control unit sends a command to the platform's battery pack discharge control circuit, instructing it to output in constant power mode. This means adjusting the discharge current to maintain the output power at a preset insulation power value (e.g., 200W or higher, calibrated according to satellite thermal control requirements). This constant power output is unaffected by bus voltage fluctuations and is achieved through closed-loop control. The control unit also sends a shutdown command to the cross-link bus unit, keeping its internal switch in the off state.

[0058] Through the aforementioned shadow period control commands, this method achieves independent power supply to the battery banks on both sides during periods of no sunlight. The computing payload enters low-power standby to reduce energy consumption, while the platform receives continuous and stable thermal insulation power to maintain the satellite's survivability. The shutdown of the cross-link bus eliminates electrical coupling between the two buses, avoiding circulating currents or disturbances caused by voltage differences during the shadow period, thus ensuring the independence and security of power supply during this time. The computing payload retains critical data in standby mode and can be quickly woken up after sunlight resumes, reducing restart latency.

[0059] In some implementations, during the transition period in step S3, the coordinated control instructions sent to each power supply unit and the cross-chain merging unit specifically include: predicting the target illumination conditions on the load side and platform side based on the changing trend of light intensity; when predicting the entry into the shadow period, gradually reducing the output power of the solar cell arrays on both sides and simultaneously increasing the discharge power of the battery packs on both sides, while simultaneously shutting down the cross-chain merging unit; when predicting the entry into the illumination period, gradually increasing the output power of the solar cell arrays on both sides and simultaneously increasing the charging power of the battery packs on both sides, while simultaneously shutting down the cross-chain merging unit; when the light intensity reaches the target illumination condition threshold, instructing each power supply unit to smoothly switch to the power supply mode of the corresponding condition.

[0060] The transition period is the gradual change in light intensity between the sunshine period and the shadow period. Light intensity changes slowly within a preset range, and the output power of the solar array gradually decreases or increases accordingly. If the power supply mode is switched directly before the light intensity reaches the target operating condition threshold, the sudden power change will cause drastic fluctuations in the bus voltage. By predicting the target operating condition and adjusting the power of the solar array and battery banks in advance, a smooth handover of power supply can be achieved. If the shadow period is predicted to begin, and the light intensity is decreasing, the output power of the solar array will gradually decrease. At this time, the output power of the solar arrays on both sides is gradually reduced, while the discharge power of the battery banks on both sides is simultaneously increased, allowing the battery banks to gradually take over the power supply. If the sunshine period is predicted to begin, and the light intensity is increasing, the output power of the solar array will gradually recover. At this time, the output power of the solar arrays on both sides is gradually increased, while the charging power of the battery banks on both sides is simultaneously increased, allowing the solar arrays to gradually take over the power supply and storing excess energy in the battery banks. In both predicted directions, the cross-link bus unit is shut down to avoid unexpected energy interaction between the two buses during the transition period, or the introduction of additional voltage disturbances due to the conduction of the bus unit.

[0061] In its implementation, the control unit acquires the real-time value of light intensity and its rate of change. When the light intensity is within a preset light range and the fluctuation frequency is below a preset frequency threshold, it determines that the current period is a transition period. The trend of change is determined based on the sign of the rate of change of light intensity: a positive rate of change indicates an increase in light intensity, and the target operating condition is predicted to be the sunshine period; a negative rate of change indicates a decrease in light intensity, and the target operating condition is predicted to be the shadow period. When the shadow period is predicted, the control unit sends instructions to the power regulators of the solar arrays on both sides, requiring them to reduce the output power in fixed steps (e.g., 100W per second) within a preset time length. At the same time, it sends instructions to the discharge control circuits of the battery banks on both sides to increase the discharge power in the same step length, so as to keep the total power supply stable. When the output power of the solar array drops to zero, the battery banks take over the power supply completely. When the sunshine period is predicted, instructions are sent to the power regulators of the solar arrays on both sides to gradually increase the output power. At the same time, instructions are sent to the charging control circuits of the battery banks on both sides to gradually reduce the discharge power and switch to charging mode. During this process, the cross-chain bus unit remains in the off state. When the light intensity actually reaches the threshold of the target operating condition (e.g., drops below the second light threshold or rises above the first light threshold), the control unit sends a mode switching completion signal, and the system switches to the power supply mode of the corresponding steady-state operating condition.

[0062] Through the aforementioned transitional control commands, this method achieves a smooth power transfer between the solar array and the battery bank during the gradual change of light intensity. Gradually reducing the output power of the solar array while simultaneously increasing the discharge power of the battery bank eliminates bus voltage drops or overshoots caused by sudden power changes. Gradually increasing the output power of the solar array while simultaneously increasing the charging power of the battery bank avoids power overshoot. The shutdown of the cross-link bus unit cuts off the energy interaction between the two buses during the transition period, reducing potential sources of disturbance. Once the light intensity reaches the target operating condition threshold, the system can enter the power supply mode during the illumination period or the shadow period with stable electrical parameters, ensuring the continuity of power supply for the computing load during the operating condition transition phase.

[0063] In some implementations, during the fuzzy shadow period, step S3, the coordinated control instructions sent to each power supply unit and cross-chain combiner unit, specifically includes: instructing the battery pack on the load side to discharge instantaneously to compensate for fluctuations in the output power of the solar array on that side, maintain the stability of the load power supply bus voltage, and simultaneously control the computing load to maintain normal power operation, prohibiting switching to instantaneous peak power mode; instructing the battery pack on the platform side to discharge instantaneously to compensate for fluctuations in the output power of the solar array on that side, maintain the stability of the platform power supply bus voltage; and simultaneously shutting down the cross-chain combiner unit.

[0064] The characteristic of the hazy shadow period is that the light intensity fluctuates frequently within a short period of time, and the output power of the solar array fluctuates rapidly accordingly. During this stage, the solar array itself cannot provide a stable power output, and the battery banks on both sides fill the power gap of the solar array by instantaneous discharge, keeping the voltage of the load power supply bus and the platform power supply bus within the allowable fluctuation range. The computing load is limited to normal power operation and is prohibited from switching to instantaneous peak power mode to avoid the superposition of sudden power demand when the bus voltage is already fluctuating, which would further aggravate the power instability. The cross-link bus unit is in a turned-off state to prevent the energy interaction between the two buses during instantaneous discharge from introducing additional disturbances, and also to avoid frequent operation of the bus unit due to bus voltage fluctuations.

[0065] In its implementation, the control unit receives a fuzzy shadow flag signal. Upon determining that a fuzzy shadow period has begun, the control unit immediately sends an instantaneous compensation command to the discharge control circuit of the load-side battery pack. This command rapidly activates the discharge switch, dynamically adjusting the discharge current based on the fluctuations in the solar array's output power. Battery power is then injected into the load's power supply bus to fill the power gap. Simultaneously, a similar command is sent to the discharge control circuit of the platform-side battery pack to compensate for power fluctuations in the platform-side solar array. The response time for discharge compensation is typically in the microsecond to millisecond range, sufficient to track the frequency of light fluctuations (e.g., above 10Hz). The control unit also sends a power limit signal to the computing load's power management interface, locking the computing load's power limit at a normal value and blocking instantaneous peak power request signals. The cross-chain bus unit uses control signals to keep its internal power switch off, cutting off the electrical path between the two buses. When the light intensity stabilizes and the fluctuation frequency remains below a preset threshold for a preset time (e.g., 5 seconds), the fuzzy shadow power supply mode exits, and the system returns to the normal power supply mode during the sunshine period.

[0066] By employing the aforementioned fuzzy shadow period control commands, this method maintains voltage stability on both buses during periods of high-frequency light fluctuations by utilizing the instantaneous discharge capacity of the battery banks on both sides, thus preventing abnormal shutdowns of the computing load due to voltage drops. Limiting the power mode of the computing load prevents bus collapse caused by peak current superposition fluctuations. Disabling the cross-link bus unit eliminates potential disturbances from energy interaction between buses, resulting in a cleaner compensation process. This control procedure ensures the system maintains power supply continuity during fuzzy shadow periods, providing stable conventional power support for the computing load.

[0067] In some embodiments, the method of the present invention further includes a handling process for fault conditions. See also Figure 2 The handling procedure under this fault condition includes: S21, monitor the operating parameters of each power supply unit. When the operating parameters of any power supply unit exceed the preset fault threshold, it is determined to be a fault condition.

[0068] Operating parameters of the power supply unit may include output voltage, output current, temperature, or communication status. For example, if the output current of the solar cell array abnormally drops to near zero and the voltage decreases, it can be determined as a solar cell array fault; if the battery bank terminal voltage is lower than the undervoltage protection threshold or the charging current cannot be established, it can be determined as a battery bank fault. The fault threshold is pre-calibrated according to the normal operating range of each power supply unit and stored in the control unit. Real-time monitoring values ​​are compared with the thresholds, and a fault flag is triggered if the value exceeds the range.

[0069] S22, identify the fault type and fault location, and cut off the fault circuit according to the identified fault type and fault location.

[0070] Fault types include solar array faults and battery bank faults; the fault location specifies whether it is a particular unit on the load side or the platform side. Identification can be achieved by analyzing characteristic combinations of out-of-limit parameters; for example, if only one side of the solar array has abnormal parameters, it is determined that the power generation unit on that side is faulty. When the fault circuit is disconnected, the control unit sends a disconnect command to the corresponding power switch (such as a switch tube or contactor connected in series in the output circuit of the faulty unit), isolating the faulty unit from the bus and preventing the fault from spreading to healthy units or affecting the bus voltage.

[0071] S23, in conjunction with the non-faulty power supply unit and the cross-chain combiner unit, implements a power distribution strategy that prioritizes platform basic load over computing load and computing load over platform non-core load.

[0072] The non-faulty power supply unit includes a normal solar array on the other side, normal battery banks on both sides, and a cross-link merging unit. The specific execution method of the power distribution strategy is as follows: when the total power supply capacity is insufficient, the power supply to the platform's basic loads (such as attitude control, telemetry and communication, and thermal control and insulation) is guaranteed first; after meeting the platform's basic load needs, the remaining power is prioritized for the computing loads to maintain their necessary data retention and minimum power consumption operation; finally, power is considered for non-core loads on the platform. If the power supply on the platform side is insufficient, the cross-link merging unit can be activated to supplement the platform bus with surplus power from the load side; if the power supply on the load side is insufficient, the power of the computing loads is limited or they are put into a low-power mode. Through this priority strategy, the basic survivability of the satellite platform and the critical mission data of the computing loads are ensured to be preserved under fault conditions.

[0073] In its implementation, the control unit collects parameters from each power supply unit in real time using voltage and current sensors. When a parameter exceeds a preset threshold, an interrupt service routine is triggered, recording the fault type and location. For example, if the output voltage of the load-side solar array is consistently more than 20% below its rated value and the output current is close to zero, the solar array is determined to be faulty. The control unit sends a disconnect signal to the solid-state relay in the circuit, isolating it from the load power supply bus. Subsequently, the total power supply capacity and load demand of the currently healthy units are assessed. If the total power of the healthy units is insufficient, power is cut off or limited in stages according to the platform's basic load, computing load, and non-core loads. When the platform-side power is insufficient, the control unit activates the cross-chain combiner unit to step down the power from the load-side battery pack or remaining solar array and supply it to the platform bus. The entire fault handling process is completed within milliseconds to seconds, preventing fault escalation and core load power outages.

[0074] Through the above fault handling process, the method in this embodiment can quickly locate the fault source and cut off the fault circuit when the power supply unit is abnormal, preventing the fault from spreading. By linking non-faulty units and cross-link merging units, power is redistributed according to fixed load priorities, ensuring priority power supply to the platform's basic load and computing load, thereby improving the reliability and fault survivability of the satellite in orbit.

[0075] In some embodiments, the method of the present invention further includes a process for handling insufficient power conditions. See also Figure 3 The handling process under insufficient power conditions includes: S31 determines in real time whether the total power supply on the load side and the platform side is sufficient.

[0076] The method for comparing whether the total power supply is sufficient is as follows: the total available power generation capacity of each side (the sum of the real-time output power of the solar array and the discharge capacity of the battery pack) is compared with the current total load demand power of that side (the sum of the computing load and the real-time power of each load on the platform). When the total available power of a certain side is lower than its total load demand, it is determined that the total power supply power of that side is insufficient.

[0077] S32, when the total power supply on either side is insufficient, the power supply to non-core loads and / or the power supply to computing loads are limited according to a preset priority strategy.

[0078] The preset priority strategy is typically as follows: platform basic loads (attitude control, telemetry and communication, thermal control and insulation) have the highest priority, followed by computing loads, and platform non-core loads have the lowest priority. Based on this priority, if the total power supply on the load side is insufficient, the control unit sends instructions to the power management circuit on the load side to limit the power supply to the computing load, for example, by limiting it from instantaneous peak power mode to normal power mode, or further reducing it to standby power level. If necessary, some non-critical computing units of the computing load can be temporarily shut down. If the total power supply on the platform side is insufficient, the control unit first sends instructions to the power management circuit on the platform side to limit or cut off the power supply to the platform non-core loads; if the power is still insufficient after the above limitations, the power supply to the computing load is further limited (through cross-link coordination instructions).

[0079] S33, when the total power supply on the platform side is still insufficient, the cross-chain combiner unit is activated to replenish the available power of the load power supply bus to the platform power supply bus.

[0080] If the power supply on the platform side is still insufficient after limiting non-core loads, the system issues a bus start command. The cross-chain bus unit converts the high-voltage power of the load bus into low-voltage power adapted to the platform bus and supplies it to the platform bus in a constant voltage and constant current mode. The amount of power supplied is dynamically adjusted according to the power supply margin on the load side (the difference between the current available power of the load bus and the minimum sustaining power of the computing load) to avoid power outages on the load side due to excessive bus operation.

[0081] In its implementation, the control unit reads the output power of each power generation unit and the dischargeable power of each battery pack at fixed intervals (e.g., 0.5 seconds) to calculate the total power supply capacity on each side; simultaneously, it reads the real-time power demand of each load. If the total power supply capacity on the load side is less than the total demand, the control unit sends a command to the DC / DC converter or power divider on the load side to reduce the power limit of the computing load to the currently available power value. If the total power supply capacity on the platform side is less than the total demand, the control unit first sends a command to the load management circuit on the platform side to cut off the power supply to non-core loads (such as backup sensors and experimental equipment); if this is still insufficient, the cross-chain combiner unit is activated to draw power from the load bus, which is then stepped down, regulated, and current-limited before being injected into the platform bus. At the same time, the power limit of the computing load is appropriately reduced according to the power supply margin on the load side. When both sides are insufficient, the above operations are performed simultaneously. Once the power supply is restored to sufficient levels, the control unit gradually removes the power limit and restores the normal power supply mode.

[0082] Through the aforementioned power shortage control process, the method in this embodiment allocates power in an orderly manner according to a fixed priority when power supply capacity is scarce, avoiding indiscriminate power outages and achieving refined management of power supply and optimal allocation of resources. Specifically, in scenarios where the platform side has insufficient power, the cross-link merging unit is activated to transfer surplus power from the payload side to the platform side, delaying or avoiding the disconnection of the platform's basic load and improving the satellite platform's survivability under power shortage conditions. In scenarios where the payload side has insufficient power, the computing power load is limited to prioritize ensuring the power supply safety of the platform's basic load.

[0083] In some embodiments, the method of the present invention further includes a dynamic adjustment and protection process for computing power load power. See also Figure 4 The dynamic adjustment and protection process includes: S41 collects power demand signals from computing loads in real time.

[0084] The power demand signal is obtained through power feedback output from the computing load power management interface, with a sampling frequency of no less than 1kHz to capture millisecond-level power fluctuations. When the computing load switches from the normal power mode to the instantaneous peak power mode, the power demand signal rises rapidly within a few milliseconds.

[0085] S42, based on the collected power demand signal, instructs the power supply unit on the load side to quickly adjust the power output to the computing load in order to adapt to the instantaneous peak power fluctuation demand of the computing load.

[0086] The power supply unit on the load side includes a power regulator for the solar array and a discharge control circuit for the battery pack. The regulation process is achieved by changing the duty cycle of the DC / DC converter or the on-time of the battery discharge switch, with a response time controllable in milliseconds, ensuring that the output power closely follows changes in the computing load's demand. For example, when a power demand jumps from 800W to 1500W, the control unit increases the output power of the power supply unit to the target value within 1 millisecond, providing sufficient power support for the instantaneous peak computing load. When the peak demand ends, the output power is quickly restored to normal levels to avoid energy waste.

[0087] S43, during the adjustment process, simultaneously performs overcurrent, overtemperature and short-circuit protection.

[0088] Overcurrent protection is achieved by real-time monitoring of the output current. When the current exceeds a preset safety threshold (e.g., 1.2 times the maximum operating current of the computing load), the control unit immediately shuts off the power switch in the power supply circuit, cutting off the power output. Overtemperature protection is achieved through temperature sensors located near the power transistors and bus capacitors. When the temperature exceeds a set threshold (e.g., 85°C), a shutdown operation is also performed. Short-circuit protection is determined by detecting a rapid drop in output voltage combined with a sudden rise in current. Once a short circuit is detected, the drive signal is blocked within microseconds to protect the power supply unit and computing load from damage. All protection actions can lock the fault state, and can be restored via external command or automatically after the anomaly is cleared.

[0089] Through the aforementioned dynamic adjustment and protection process, this embodiment achieves high-precision tracking of millisecond-level power fluctuations in computing load, ensuring uninterrupted power supply and stable voltage during peak computation periods. Simultaneously, integrated overcurrent, overtemperature, and short-circuit protection activates rapidly under abnormal operating conditions, preventing hardware damage due to overload or short circuits and improving the reliability and safety of the computing power supply link. This process, combined with the method of dynamically adapting to normal and peak power during illumination periods, constitutes a power management mechanism for computing loads under all operating conditions.

[0090] In some embodiments, the method of the present invention further includes a satellite-to-ground interaction and remote control process. See also Figure 5 The satellite-to-ground interaction and remote control process includes: S51 uploads operating information, bus voltage, bus power, and fault signals to the satellite platform or ground operation and maintenance system.

[0091] Operating status information, bus voltage, bus power, and fault signals, among other key operational data, are packaged into telemetry frames according to a preset format and uploaded to the satellite platform or ground maintenance system via the onboard data bus or telemetry and control transponder. The upload frequency can be set according to mission requirements, such as once every 1 second or every 5 seconds. Operating status information includes identifiers for the currently identified illumination period, shadow period, transition period, or ambiguous shadow period; bus voltage includes the real-time voltage values ​​of the load power supply bus and the platform power supply bus; bus power is the actual electrical power transmitted by the cross-link bus unit; and fault signals include the fault type code, fault occurrence time, and fault location. This data provides ground maintenance personnel with real-time visibility of the power supply system status.

[0092] S52 receives external control commands sent by the satellite platform or ground operation and maintenance system, and adjusts the power supply strategy according to the external control commands.

[0093] The control unit also receives external control commands from the satellite platform or ground operation and maintenance system via the onboard data bus or telemetry and control link, and adjusts the power supply strategy accordingly. External control commands may include: modifying threshold parameters for determining illumination conditions (e.g., first illumination threshold, second illumination threshold, fluctuation frequency threshold), adjusting the power limit value of the combiner unit, forcibly switching power supply modes (e.g., forcibly entering the shadow standby mode or the normal mode during illumination periods), and modifying priority strategies when power is insufficient (e.g., adjusting the power supply sequence of the platform's basic load and computing load). After receiving the external control commands, the control unit verifies and parses them, writing the parsed parameters or commands into the corresponding control register, thereby changing subsequent power supply control behavior. For example, after the ground sends a command to "set the upper limit of the load bus voltage to 275V", the control unit updates the overvoltage protection threshold, and executes protection actions when the bus voltage exceeds this value during subsequent operation.

[0094] In practical implementation, a communication module is integrated within the control unit or a separate communication interface circuit is set up. Uplink and downlink communication follow the CAN bus, 1553B bus, or dedicated telemetry and control protocols commonly used in spacecraft. To ensure command reliability, external control commands typically employ checksum or CRC verification and support command retransmission mechanisms. After receiving a valid command, the control unit returns an execution confirmation frame; if the command verification fails or cannot be executed, an error code is returned. Through this interaction process, ground maintenance personnel can flexibly adjust the power supply strategy according to actual operating conditions or mission requirements during satellite in-orbit operation, such as increasing the power limit of the computing load during special mission phases or forcing entry into a low-power protection mode under abnormal circumstances.

[0095] Through the aforementioned space-to-ground interaction and remote control process, this embodiment achieves remote monitoring of the power supply system's operational status and online adjustment of the power supply strategy. Ground personnel can intervene in power supply control without relying on the onboard autonomous logic, improving the system's maintainability and fault response capabilities. Simultaneously, telemetry data provides historical data support for subsequent power supply strategy optimization, enhancing the adaptability and scalability of the power supply method.

[0096] In summary, the adaptive power supply method for computing satellites in dawn-dusk orbit provided by this invention has the following beneficial effects compared with the prior art: 1) By refining the lighting conditions into four categories—lit period, shadow period, transition period, and ambiguous shadow period—and employing a multi-dimensional identification method combining light intensity and fluctuation frequency, the power supply system can accurately distinguish between the gradual light change phase and the sudden high-frequency fluctuation phase in the twilight orbit. This condition identification method avoids the misjudgments caused by traditional methods relying solely on a single intensity threshold, providing precise triggering conditions for subsequent differentiated power supply strategies, thereby improving the accuracy of condition switching and the targeting of power supply control.

[0097] 2) During periods of sunshine, the solar array on the command payload side prioritizes power supply to the computing load and dynamically adjusts its output power to adapt to both normal and peak demand modes. Simultaneously, the solar array on the command platform side prioritizes power supply to the platform load, achieving prioritized allocation of sunlight resources and rapid adaptation to peak computing power. This strategy ensures stable power supply to the computing load during normal operations and provides sufficient power support during peak demand, while avoiding energy waste caused by continuous high power output, thus balancing the computational intensity of the computing task with the energy efficiency of the power supply system.

[0098] 3) During the solar-powered energy replenishment process, when the load-side battery is fully charged and still has surplus energy, the cross-link current collector is activated to convert high-voltage energy into low-voltage energy suitable for the platform side, and replenishes the platform power supply bus in a constant voltage and constant current mode. If the platform side cannot fully absorb the energy, the current collector is shut down and the load-side current shunt discharge is initiated. This two-stage absorption sequence prioritizes the recovery of surplus energy, and discharges it only when it cannot be recovered, thereby improving the overall satellite energy utilization efficiency and ensuring the stability of the load bus voltage, avoiding the risk of overvoltage.

[0099] 4) During the shadow period, independent power is supplied to the battery banks on both sides via commands. The computing load on the payload side enters a low-power standby mode, while the platform side continuously outputs constant power for on-orbit insulation, and the cross-link bus unit is shut down. This strategy minimizes energy consumption during periods without sunlight, ensuring that the computing load maintains critical data without loss, while also meeting the temperature control requirements of the satellite platform. The independent power supply of the dual buses eliminates crosstalk between links, improving the safety and reliability of power supply during the shadow period.

[0100] 5) During the transition period, the target operating conditions are predicted based on the changing trend of sunlight intensity. The power transfer direction between the solar array and the battery bank is gradually adjusted, and the cross-link combiner unit is shut down throughout the transition period. This method uses gradual control instead of hard switching, eliminating the bus voltage surge caused by sudden power changes, enabling a smooth transition of the power supply mode between the sunlight period and the shadow period, and ensuring the continuity of power supply for computing loads during the gradual change of sunlight.

[0101] 6) During periods of ambiguous shadowing, the power fluctuations of the solar array are compensated by instantaneously discharging the battery banks on both sides of the command, while the computing load is limited to maintain normal power, peak output is prohibited, and the cross-link combiner unit is shut down. This process utilizes the rapid response capability of the batteries to fill the power gap caused by high-frequency fluctuations in sunlight, stabilizes the bus voltage, and avoids bus collapse caused by the superposition of peak computing demand fluctuations, thus maintaining stable power supply without increasing the long-term burden on energy storage.

[0102] 7) In case of a fault, by monitoring power supply unit parameters in real time, the system determines the fault location and disconnects the faulty circuit when limits are exceeded. It then coordinates with non-faulty units and cross-link combiner units to implement a power distribution strategy that prioritizes platform basic loads, followed by computing loads, and finally non-core platform loads. This fault handling process quickly isolates the fault source, prevents fault propagation, and reallocates power according to aerospace safety priorities. This ensures the basic survivability of the satellite platform and the preservation of critical computing load data, thereby improving the fault tolerance of the power supply system.

[0103] 8) In situations of insufficient power, by assessing whether the total power supply on each side is sufficient, the power of computing loads or non-core loads is limited according to the same priority strategy. If the power supply on the platform side is insufficient, the cross-link merging unit is activated to replenish the platform bus with available power from the load side. This control process achieves orderly degradation when power supply is scarce, avoiding indiscriminate power outages. By delaying or preventing the disconnection of the platform's basic loads through cross-link power transfer, it improves the satellite's survivability under extreme power shortage conditions.

[0104] 9) Regarding dynamic power adjustment for computing loads, by collecting power demand signals in real time, the power supply unit on the load side is instructed to quickly adjust its output power to achieve millisecond-level response, while simultaneously implementing overcurrent, overtemperature, and short-circuit protection. This process enables the power supply system to accurately follow the millisecond-level jumps in computing load power from normal power to instantaneous peak power, ensuring uninterrupted power supply and stable voltage during peak operations. Furthermore, multiple protection mechanisms prevent overload damage, improving the dynamic reliability and safety of the computing power supply link.

[0105] 10) In the cross-link merging process, surplus power from the load bus is acquired, and at least two series-connected step-down circuits are used to gradually convert high voltage to low voltage. The voltage is then stabilized and the output current is limited. This merging method reduces the voltage stress on each step-down circuit, improves conversion efficiency and reliability, and the voltage stabilization and current limiting measures eliminate voltage surges and overcurrent risks to the platform bus during power replenishment, providing a safe and stable technical means for cross-link energy transfer.

[0106] 11) Through the satellite-to-ground interaction process, operating status information, bus voltage, bus power, and fault signals are uploaded to the satellite platform or ground operation and maintenance system, and external control commands are received to adjust the power supply strategy. This process enables remote visualization of the power supply system's operating status and online adjustability of the power supply strategy, allowing ground personnel to flexibly intervene and control the system according to actual mission requirements or abnormal situations, thus improving the convenience and adaptability of the power supply method's operation and maintenance.

[0107] The above are merely preferred embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in the present invention should be included within the scope of protection of the present invention.

Claims

1. A condition-adaptive power supply method for a computing satellite in a dawn-dusk orbit, characterized in that, The method is applied to independent load power supply buses and platform power supply buses, and a cross-link busbar unit is connected between the two buses to unidirectionally supply power from the load power supply bus to the platform power supply bus under controlled conditions, including: Real-time acquisition of satellite on-orbit operating parameters, including at least light intensity and its fluctuation frequency; Based on the light intensity and its fluctuation frequency, the current lighting conditions are identified as a period of illumination, a period of ground shadow, a transition period, or a period of blurred shadow. Based on the current lighting conditions and other collected operating parameters, coordinated control commands are sent to each power supply unit and the cross-link merging unit to adjust the power supply power and bus voltage of the load power supply bus and the platform power supply bus, so as to adapt them to the power demand of the computing load under the current lighting conditions, and to achieve: During periods of sunlight, it provides a power supply that dynamically adapts to both normal power and instantaneous peak power for computing loads; During the shadow period, it provides low-power regulated standby power for computing loads; During the transition period, a stable conventional power supply will be provided for computing loads; During the fuzzy shadow period, provide normal power to the computing load and prohibit instantaneous peak power output.

2. The method according to claim 1, characterized in that, The real-time acquired satellite on-orbit operating parameters include: light intensity and its fluctuation frequency, voltage and power of the payload power supply bus and platform power supply bus, output voltage and current of each solar cell array, terminal voltage, remaining power and charging / discharging current of each battery pack, and real-time power demand signals of computing load and each load of the platform.

3. The method according to claim 1, characterized in that, The step of identifying the current lighting condition as a period of illumination, a period of shadow, a transition period, or a period of blurred shadow based on the light intensity and its fluctuation frequency includes: A period of illumination is defined as when the light intensity exceeds the first light threshold. When the light intensity is lower than the second light threshold, it is determined to be the shadow period, where the second light threshold is lower than the first light threshold; When the light intensity is within a preset light intensity range and its fluctuation frequency is lower than a preset fluctuation frequency threshold, it is determined to be a transition period; wherein, the lower limit of the preset light intensity range is higher than the second light intensity threshold, and the upper limit is lower than the first light intensity threshold. When the light intensity is within the preset light range and its fluctuation frequency reaches or exceeds the preset fluctuation frequency threshold, it is determined to be a period of blurred shadow.

4. The method according to claim 1, characterized in that, During periods of sunlight, the coordinated control commands sent to each power supply unit and cross-link combiner unit include: The solar array on the command load side prioritizes the output power to power the computing load, and the surplus power is used to charge the battery pack on the load side. The output power of the solar array is dynamically adjusted to adapt to the normal power mode and instantaneous peak power mode of the computing load. The power output from the solar array on the command platform side is prioritized to power the platform load, and the surplus power is used to charge the battery pack on the platform side.

5. The method according to claim 4, characterized in that, During periods of sunlight, the coordinated control commands sent to each power supply unit and cross-link combiner unit also include: When the battery pack on the load side is fully charged and there is still surplus power on the load side, the cross-chain combiner unit is activated to convert the high-voltage DC voltage of the load power supply bus into a low-voltage DC voltage that is compatible with the platform power supply bus, and then replenishes the power to the platform power supply bus in a constant voltage and constant current mode.

6. The method according to claim 5, characterized in that, During periods of sunlight, the coordinated control commands sent to each power supply unit and cross-link combiner unit also include: During the power supply process, when the platform power supply bus cannot fully absorb the surplus power on the load side, the cross-chain power supply unit is shut down, and the load side is instructed to divert and discharge the remaining surplus power.

7. The method according to claim 1, characterized in that, During the shadow period, the coordinated control instructions sent to each power supply unit and cross-link combiner unit include: The battery pack on the command load side independently supplies power to the load power bus and controls the computing load to enter standby mode; The battery pack on the command platform side independently supplies power to the platform power bus and continuously outputs constant power for on-orbit insulation of the satellite platform; Simultaneously shut down the cross-chain confluence unit.

8. The method according to claim 1, characterized in that, During the transition period, the coordinated control instructions sent to each power supply unit and cross-link combiner unit include: Predict the target lighting conditions on the load side and platform side based on the changing trend of light intensity; When it is predicted that the shadow period will begin, the command will gradually reduce the output power of the solar cell arrays on both sides and simultaneously increase the discharge power of the battery packs on both sides, while shutting down the cross-chain combiner unit. When it is predicted that the solar radiation period will begin, the command will gradually increase the output power of the solar cell arrays on both sides and simultaneously increase the charging power of the battery packs on both sides, while shutting down the cross-chain bus unit. When the light intensity reaches the target light condition threshold, each power supply unit is instructed to smoothly switch to the corresponding power supply mode.

9. The method according to claim 1, characterized in that, During the period of blurred shadows, the coordinated control instructions sent to each power supply unit and cross-link combiner unit include: The battery pack on the command load side discharges instantaneously to compensate for the fluctuations in the output power of the solar array on that side, maintain the stability of the load power supply bus voltage, and control the computing load to maintain normal power operation, prohibiting switching to instantaneous peak power mode. The command platform's battery pack discharges instantaneously to compensate for fluctuations in the output power of the solar array on that side, thus maintaining a stable platform power supply bus voltage. Simultaneously shut down the cross-chain confluence unit.

10. The method according to claim 1, characterized in that, The method further includes: Monitor the operating parameters of each power supply unit. When the operating parameters of any power supply unit exceed the preset fault threshold, it is determined to be a fault condition. Identify the fault type and location, and disconnect the fault circuit based on the identified fault type and location; The system coordinates non-faulty power supply units and cross-chain combiner units to implement a power distribution strategy that prioritizes platform basic loads over computing loads and computing loads over platform non-core loads.

11. The method according to claim 1, characterized in that, The method further includes: Real-time assessment of whether the total power supply on the load side and platform side is sufficient; When the total power supply on either side is insufficient, the power supply to non-core loads and / or the power supply to computing loads will be limited according to the preset priority strategy. When the total power supply on the platform side is still insufficient, the cross-chain combiner unit is activated to replenish the available power of the load power supply bus to the platform power supply bus.

12. The method according to claim 1, characterized in that, When controlled, the cross-chain bus unit converts the electrical energy from the load power supply bus and unidirectionally supplies it to the platform power supply bus, including: The cross-chain merging unit acquires the surplus electrical energy of the load power supply bus; The high-voltage power from the load power supply bus is converted into low-voltage power suitable for the platform power supply bus by at least two stages of series step-down circuits. The converted voltage is regulated, and the current output to the power supply bus of the platform is limited.

13. The method according to claim 1, characterized in that, The method further includes: Real-time acquisition of power demand signals from computing loads; Based on the collected power demand signal, the power supply unit on the command load side quickly adjusts the power output to the computing load to adapt to the instantaneous peak power fluctuation demand of the computing load. During the adjustment process, overcurrent, overtemperature and short-circuit protection are implemented.

14. The method according to claim 1, characterized in that, The method further includes: Upload operating condition information, bus voltage, bus power, and fault signals to the satellite platform or ground operation and maintenance system; Receive external control commands sent by the satellite platform or ground operation and maintenance system, and adjust the power supply strategy according to the external control commands.

Images