Satellite self-checking system and method based on star screen

Abstract

The application discloses a satellite self-checking system and method based on a star screen, which comprises the following steps: S1, pressing a single-path self-locking switch to directly judge the on-off state of the switch through LED light-out; S2, loading a self-checking parameter set corresponding to the working condition; S3, completing the interaction collection of the whole satellite state data; S4, completing preliminary fault tracing; S5, real-time displaying the self-checking comparison result and the component operation state; and S6, automatically generating a structured self-checking log carrying a unique identification and a time stamp and writing the log into local storage. The application realizes one-key safe power-on and orderly power-off of the whole satellite without external cables by two-stage MOS pipe branches, solves the starting of the self-checking system under the state of no external power supply, simultaneously adopts a layered isolation type interaction framework, makes the star screen only responsible for the upper human-computer interaction, and makes the bottom data collection and instruction scheduling be isolatedly executed by a star service program, so that the operation overreach interference to the core control logic is effectively prevented, and the absolute safety of the software on the satellite is ensured.

Description

Technical Field

[0001] This invention belongs to the field of spacecraft autonomous testing and status monitoring technology, specifically involving an interactive satellite self-testing method based on a spaceborne touch screen. It is mainly applied to the full-process ground testing of AIT (assembly, integration, and testing) of various remote sensing satellites, communication satellites, and low-orbit networking satellites, as well as the status verification after various environmental tests, semi-physical simulation tests, and simulated flight tests. It is also suitable for rapid fault location and health status assessment, and belongs to the core technology category of intelligent spacecraft testing. Background Technology

[0002] With the rapid development of aerospace technology, the integration and complexity of satellite systems are constantly increasing, placing higher demands on the real-time performance and accuracy of onboard status monitoring and fault diagnosis. To improve the versatility and automation level of satellite testing, existing technologies have explored related approaches. For example, Chinese patent CN107769836B discloses a general-purpose automated satellite testing platform and its data interaction method. This platform consists of a peripheral device layer, an intermediate service layer, and a user terminal layer, integrating various automated testing equipment such as telemetry, control, and CAN monitoring. It uses a comprehensive testing server to achieve remote control command uplink and satellite data acquisition and processing, effectively solving the problems of weak versatility and low automation of traditional testing equipment, forming a distributed test control and integrated management system. However, this type of platform still falls under the category of ground testing, requiring external power cables and test interfaces for power-on and data acquisition. It does not integrate self-testing functions into the onboard terminal, failing to address the pain points of low integration, complex equipment dependence, and cumbersome operation procedures in current testing systems.

[0003] Current spacecraft testing methods still have shortcomings in terms of human-machine interaction safety and fault location efficiency. The introduction of ground-based testing equipment also brings certain safety risks. Furthermore, fault display relies heavily on telemetry message parsing, lacking intuitive topology visualization and linkage methods. Test personnel need specialized knowledge to quickly locate faulty components, and test logs suffer from inconsistent formats, lack of anti-counterfeiting features, and multi-channel export capabilities, making it difficult to meet the needs of closed-loop management throughout the entire lifecycle. These issues restrict the level of intelligence and engineering application efficiency of spacecraft testing, necessitating a self-testing solution more adapted to the spaceborne environment.

[0004] While ground-based automated testing platforms have improved the versatility of testing, spacecraft testing still faces a core bottleneck: traditional testing methods rely on external testing equipment for data acquisition and control, resulting in complex cable connections. For example, in scenarios such as mechanical testing, multi-axial environmental testing and verification are required. In traditional testing models, each completion of a single-axis test or switching test axes necessitates a series of complex operations, including repeated satellite hoisting and alignment, vibration fixture disassembly and adjustment, and removal and re-binding of the entire satellite's test cables. These non-experimental auxiliary operations can take several hours each time, significantly lengthening the overall cycle of mechanical testing and resulting in extremely low testing efficiency. Furthermore, the repeated manual operations of hoisting and repositioning, fixture disassembly and assembly, and repeated cable insertion and removal introduce additional safety hazards such as satellite impact damage, connector fatigue wear, and cable bending damage, further increasing satellite development risks and testing costs. Therefore, there is an urgent need to develop a satellite status self-inspection method based on satellite screens to eliminate dependence on external testing equipment, optimize spacecraft testing methods, and provide fundamental support for autonomous testing across multiple scenarios throughout the satellite's entire lifecycle. Summary of the Invention

[0005] The purpose of this invention is to overcome the shortcomings of the prior art and provide a satellite self-testing system and method based on star screens, so as to solve the technical problems of low integration, complex equipment, cumbersome operation process, lack of safety isolation mechanism for human-computer interaction, low accuracy of fault judgment, poor positioning efficiency and difficulty in closed-loop archiving of test data in traditional satellite test systems.

[0006] The objective of this invention is achieved through the following technical solution:

[0007] A satellite status self-checking method based on star screen includes the following steps:

[0008] Step S1: Press the single-channel self-locking switch integrated into the satellite touch screen panel to trigger the power-on of the entire satellite's hierarchical hardware; the self-locking switch conducts the self-starting branch composed of the first MOS transistor group, and the battery prioritizes powering the power control components and integrated electronics; after the satellite computer starts up, it drives the satellite touch screen to power on, the satellite screen microprocessor initializes and pops up the self-test interactive main interface; the self-locking switch integrates an LED indicator, and the on / off state of the switch can be intuitively judged by the on / off state of the LED;

[0009] Step S2: In response to the self-test trigger operation of the spaceborne touch screen, receive the selected test condition label and load the self-test parameter set corresponding to the test condition; the self-test parameter set includes at least a parameter judgment threshold table and a component topology mapping model;

[0010] Step S3: Adopting a layered isolation interaction architecture, the onboard touch screen establishes a dedicated upper-layer interactive communication link only with the satellite service program. The satellite service program obtains the internal operating status parameters of each hardware module and functional system of the satellite, and completes the interactive acquisition of the entire satellite status data.

[0011] Step S4: Based on the parameter judgment threshold table for the corresponding working condition, compare the real-time telemetry parameters, calculate the relative deviation rate to make compliance judgment and anomaly classification marking; locate the physical component according to the component topology mapping model based on the abnormal parameters, and complete the preliminary fault tracing; for the critical parameters in the warning interval, calculate their offset trend within the sliding time window and mark them for warning.

[0012] Step S5: Display the self-test comparison results and component operating status in real time on the onboard touch screen through topology visualization linkage; call the graphics rendering engine to draw the whole satellite topology mapping map; when the parameters exceed the fault threshold, the corresponding topology node triggers differentiated display effects and pops up a floating fault prompt box.

[0013] Step S6: Automatically generate a structured self-inspection log with a unique identifier and timestamp and write it to local storage. At the same time, convert the log into machine-readable code and display it on the Star Screen interface for external terminals to parse and export.

[0014] As a preferred embodiment, the graded power-on logic in step S1 is as follows:

[0015] After the self-locking switch is turned on, the battery is connected to the satellite bus via the first MOSFET group to complete the initial power-on. After the initial power-on is completed, the operator sends a discharge switch opening command to the satellite operation program through the onboard touch screen, which turns on the main power supply branch formed by the second MOSFET group, and the battery is connected to the bus with a large current to achieve the rated power supply of the entire satellite.

[0016] The orderly power-off logic is as follows: First, a discharge switch disconnection command is sent through the onboard touch screen to turn off the second MOS transistor group and cut off the high-current main power supply branch. Then, the self-locking switch is pressed to turn off the first MOS transistor group. The battery is completely disconnected from the bus to complete the power-off of the entire satellite, avoiding surge damage to the satellite hardware caused by the high-current cutoff.

[0017] As a preferred embodiment, in step S1, a star-screen self-starting power supply control device integrated into the star-borne touch screen panel is used to execute the hierarchical power-on logic and the orderly power-off logic. The star-screen self-starting power supply control device includes:

[0018] The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator. A single pair of contacts is connected in parallel to the power control component's power circuit. The on / off state of the LED status indicator directly reflects the switch's on / off status.

[0019] The first MOS transistor group is jointly controlled by the self-locking switch and the self-starting enable switch to form a self-starting low-current power supply branch for initial power-on.

[0020] The second MOSFET group is independently controlled by a discharge switch and forms a main power supply branch with rated high current.

[0021] As a preferred embodiment, in step S2, the test condition label includes at least one of the following: normal power-on condition, post-mechanical test condition, post-thermal test condition, post-electromagnetic compatibility test condition, post-vacuum discharge test condition, and on-orbit routine inspection condition; different test condition labels correspond to independently configured self-test instruction sequences, acquisition cycle parameters, threshold judgment criteria, and fault discrimination logic; according to the test condition label, the system moves the dedicated self-test instruction sequence, parameter judgment threshold table, and component topology mapping model from the corresponding partition of the local non-volatile memory to the running memory, and performs data integrity verification.

[0022] As a preferred approach, the layered and isolated interaction architecture in step S3 is specifically as follows:

[0023] The onboard touchscreen establishes a dedicated upper-layer interactive communication link only with the satellite mission program. The underlying instruction scheduling, data acquisition, and hardware status verification for the whole machine self-test are all uniformly coordinated and executed in isolation by the satellite mission program. The onboard touchscreen only undertakes the upper-layer application functions of triggering human-computer interaction and visualizing test results, completely isolating the underlying bus access and single-machine hardware communication permissions, thereby achieving secure decoupling between the human-computer interaction layer and the onboard hardware driver layer.

[0024] As a preferred embodiment, in step S4, the relative deviation rate of the real-time telemetry parameters is calculated. The formula is:

[0025]

[0026] in, This refers to the relative deviation rate; To collect parameter values ​​in real time; These are the standard rated values ​​for the corresponding parameters under this operating condition;

[0027] A three-level threshold judgment logic is adopted to determine the threshold. With warning threshold coefficient and fault threshold coefficient A comparison was conducted, among which :

[0028] like If it is determined to be in a normal state; If it is determined to be a warning state; This is determined to be a fault condition;

[0029] For the critical parameter that triggers the early warning state, the least squares method is used to calculate its value within the sliding time window. slope of the offset trend within The formula is:

[0030]

[0031] in, The slope of the offset trend; The first time within the sliding time window Each sampling time; To and The corresponding parameter values; The mean of all sampling times within the sliding time window; For all items within the sliding time window that are related to The mean of the corresponding parameter values; The total number of sampling points within the window; when When the value exceeds the preset trend deterioration threshold, an early warning flag is triggered.

[0032] As a preferred approach, the method further includes an anomaly backtracking and retesting steps: when the self-test detects a warning or fault state, the system automatically triggers a second high-frequency retest, shortens the telemetry acquisition cycle, increases the sampling frequency, and synchronously records the parameter change curves before and after the anomaly; the retest results are compared with the first test results to eliminate instantaneous interference errors, and the fault location is locked after confirming the validity of the anomaly.

[0033] As a preferred approach, the topology visualization linkage display method in step S5 includes:

[0034] Configure a three-level status color code system, with the first color code red to indicate the fault exceeding the limit status, the second color code yellow to indicate the parameter critical warning status, and the third color code green to indicate the parameter compliance and normal status;

[0035] The spatial layout, connection relationships, and hierarchical architecture of all physical components of the satellite are pre-entered into the onboard touch screen system, and a high-precision whole-satellite topology mapping map is generated in real time. The topology mapping map includes a multi-level node architecture at the system level and single-machine level, with each node bound to the satellite's physical hardware. When the telemetry status parameter of a certain component exceeds the fault threshold of the corresponding operating condition, the corresponding topology node automatically triggers a distinctive display effect of highlighting and flashing, thickening the border, and inverting the grayscale, and simultaneously pops up a floating fault prompt box, displaying the fault location, abnormal parameter, out-of-limit value, fault level, and preliminary tracing conclusion. When the parameter is in the warning range, the corresponding node flashes slowly and displays a warning prompt.

[0036] As a preferred approach, the execution process for mechanical vibration / shock testing scenarios includes:

[0037] Before the test, press the self-locking switch to power on the entire satellite. After completing the self-test and confirming that it is normal under normal power-on conditions, press the self-locking switch to de-power on the satellite. The satellite completes the vibration table clamping and mechanical test in a purely mechanical fixed state.

[0038] After the mechanical test is completed, there is no need to reconnect any external testing equipment. Simply press the self-locking switch to complete the graded power-on. After selecting the mechanical test condition on the onboard touch screen, perform a special self-test to check the online survival status of all satellite units, bus communication connectivity, and screen for hardware damage and link disconnection faults caused by vibration.

[0039] A satellite status self-checking system based on a star screen is provided to implement the aforementioned satellite status self-checking method based on a star screen. The system includes:

[0040] The spaceborne touchscreen module includes a touchscreen display, a microprocessor, local non-volatile memory, a bus communication interface, and physical buttons integrated into the panel. The spaceborne touchscreen module integrates a self-starting power supply control device, which includes a single-channel self-locking switch, a first MOSFET group, and a second MOSFET group. The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator. A single pair of contacts is connected in parallel to the power control component's power-on circuit, and the LED's on / off state directly reflects the switch's on / off status. The first MOSFET group is jointly controlled by the self-locking switch and a separate self-starting enable switch, forming a self-starting low-current power supply branch for initial power-on. The second MOSFET group is independently controlled by a discharge switch, forming a rated high-current main power supply branch.

[0041] The working condition initialization and parameter loading module is used to receive the selected test working condition label and load the corresponding self-test parameter set;

[0042] The command interaction and data acquisition module is used to obtain the operating status parameters of the satellite hardware modules through the satellite service program based on a layered and isolated interaction architecture, while shielding the details of reading and writing the underlying hardware.

[0043] The status determination and fault tracing module is used to perform compliance determination, anomaly classification marking, physical component tracing and early warning marking based on relative deviation rate calculation and offset trend calculation;

[0044] The Star Screen Visualization Interaction and Topology Mapping Module is used to call the graphics rendering engine to draw the whole star topology mapping map, and to trigger differentiated display effects and pop up floating fault prompt boxes for nodes when telemetry parameters are abnormal.

[0045] The structured log generation and export module is used to generate structured self-inspection logs and store them locally, and then convert them into machine-readable code for output and display.

[0046] This invention has at least the following beneficial effects: It triggers tiered power-on by pressing a single-channel self-locking switch integrated into the onboard touchscreen panel, utilizing a two-stage MOS transistor branch to achieve one-click safe power-on and orderly power-off of the entire satellite without external cables, eliminating mechanical damage and surge risks caused by test cables at the source. Simultaneously, it adopts a layered, isolated interactive architecture, ensuring the satellite screen is only responsible for upper-level human-machine interaction, while lower-level data acquisition and command scheduling are executed in isolation by the satellite administration program, effectively preventing unauthorized operations from interfering with core control logic and ensuring absolute security of the onboard software. Furthermore, the system adaptively loads a dedicated self-test parameter set based on the selected operating condition label, combining relative deviation rate judgment, topology mapping tracing, and sliding window trend warning to accurately quantify and assess the overall satellite status and predict hidden faults in advance. Finally, through topology visualization and multi-channel export of structured logs, it achieves second-level intuitive fault location and closed-loop archiving of the entire testing process, comprehensively covering the self-testing needs of multiple scenarios throughout the satellite's entire lifecycle. Attached Figure Description

[0047] To clearly illustrate the specific technical details of the present invention, the accompanying drawings involved in the embodiments will be briefly described below. It should be clearly pointed out that these drawings are only used to illustrate some embodiments of the present invention and do not constitute a limitation on the scope of protection; for those skilled in the art, other related illustrative schemes can be derived based on the existing drawings without creative effort.

[0048] Figure 1 This is a flowchart illustrating the overall technical process of the present invention.

[0049] Figure 2 This is a schematic diagram of the system layered architecture of the present invention;

[0050] Figure 3 This is a schematic diagram of a satellite status self-check threshold discrimination and visualization output process.

[0051] Figure 4 This is a schematic diagram of the circuit structure of a star screen self-starting power supply control device according to an embodiment. Detailed Implementation

[0052] The technical solution of the present invention will be further described in detail below with reference to the accompanying drawings, but the scope of protection of the present invention is not limited to the following description.

[0053] It should be noted that although detailed specifics are provided below to aid in a comprehensive understanding of the exemplary embodiments, those skilled in the art will understand that the embodiments can still be implemented even if these specific details are omitted. For example, systems are typically presented in block diagram form to avoid redundant details from interfering with overall clarity; furthermore, in some cases, well-known process, structural, and technical details may be omitted as appropriate to ensure clarity of the description.

[0054] The core hardware carrier of this invention is an onboard touch screen with an integrated self-starting power supply, a satellite processing unit, a local non-volatile memory, and multiple types of onboard data buses. All test logic, threshold parameters, and topology models are pre-programmed into the onboard local storage, requiring no external equipment support, and can independently complete the entire process of self-testing.

[0055] A satellite status self-checking method based on star screen includes the following steps:

[0056] Step S1: Press the single-channel self-locking switch integrated into the satellite touch screen panel to trigger the power-on of the entire satellite's hierarchical hardware; the self-locking switch conducts the self-starting branch composed of the first MOS transistor group, and the battery prioritizes powering the power control components and integrated electronics; after the satellite computer starts up, it drives the satellite touch screen to power on, the satellite screen microprocessor initializes and pops up the self-test interactive main interface; the self-locking switch integrates an LED indicator, and the on / off state of the switch can be intuitively judged by the on / off state of the LED;

[0057] Step S2: In response to the self-test trigger operation of the spaceborne touch screen, receive the selected test condition label and load the self-test parameter set corresponding to the test condition; the self-test parameter set includes at least a parameter judgment threshold table and a component topology mapping model;

[0058] Step S3: A layered and isolated interactive architecture is adopted. The onboard touch screen establishes a dedicated upper-level interactive communication link only with the satellite service program. The satellite service program obtains the internal operating status parameters of each hardware module and functional system of the satellite and completes the interactive acquisition of the overall satellite status data. For example, the satellite service program collects telemetry data packets of 19 core equipment such as power supply and distribution bus, battery, satellite service host, telemetry and control payload, flywheel, and thermal control at a fixed period of 100ms and pushes them to the onboard touch screen.

[0059] Step S4: Based on the parameter judgment threshold table for the corresponding working condition, compare the real-time telemetry parameters, calculate the relative deviation rate to make compliance judgment and anomaly classification marking; locate the physical component according to the component topology mapping model based on the abnormal parameters, and complete the preliminary fault tracing; for the critical parameters in the warning interval, calculate their offset trend within the sliding time window and mark them for warning.

[0060] Step S5: Display the self-test comparison results and component operating status in real time on the onboard touch screen through topology visualization linkage; call the graphics rendering engine to draw the whole satellite topology mapping map; when the parameters exceed the fault threshold, the corresponding topology node triggers differentiated display effects and pops up a floating fault prompt box.

[0061] Step S6: Automatically generate a structured self-inspection log carrying a unique identifier and timestamp and write it to local storage. Simultaneously, convert the log into machine-readable code and display it on the Star Screen interface for external terminals to parse and export. The log is compressed, error-corrected, and encoded to generate a dynamic QR code displayed in the lower right corner of the screen.

[0062] In one embodiment, Figure 1 This paper demonstrates the complete workflow architecture of the satellite screen self-test method of this invention. Starting from "one-click self-test triggering of the satellite screen," it sequentially goes through key steps such as S1 initialization, loading the selected test condition, and retrieving dedicated instructions / thresholds / topology models. The system first completes the power-on of the entire satellite-level hardware and pops up the self-test interactive main interface. After the operator selects a test condition label, the system automatically loads the dedicated self-test parameter set for the corresponding condition. In the S2 parameter matching stage, the system receives the test condition label and completes the parameter set loading. Then, in the S3 data interaction stage, the onboard touchscreen sends self-test scheduling instructions to the satellite operation program through a dedicated upper-layer isolated communication link. The satellite operation program independently executes the underlying data acquisition and pushes telemetry data packets to the processing node. In the S4 intelligent comparison stage, real-time telemetry data is compared and analyzed based on a parameter judgment threshold table. Three-level threshold comparison and anomaly grading and tracing are performed to locate the physical components of abnormal parameters. When an anomaly is detected, the system triggers a topology color highlight to indicate the fault status through differentiated visual effects; the S5 visualization output module displays the topology mapping results on the onboard touch screen in real time, intuitively presenting the operating status of each satellite component; the S6 log archiving generates structured self-test logs and stores them in encryption, while converting the logs into machine-readable code and displaying them on the interface for external terminals to parse and export. Figure 1 It clearly demonstrates the closed-loop interaction relationship between "retrieving dedicated instructions / thresholds / topology models" and "S3 data interaction", as well as the unidirectional data flow from "the satellite program pushing operational telemetry data packets" to "S4 intelligent comparison". It intuitively reflects the core characteristics of the layered and isolated interactive architecture. The onboard touch screen is only responsible for human-computer interaction and visualization output. The underlying instruction scheduling and data acquisition are completed independently by the satellite program, forming a complete self-testing closed-loop process.

[0063] In a preferred embodiment, the graded power-on logic in step S1 is as follows:

[0064] After the self-locking switch is turned on, the battery is connected to the satellite bus via the first MOSFET group to complete the initial power-on. After the initial power-on is completed, the operator sends a discharge switch opening command to the satellite operation program through the onboard touch screen, which turns on the main power supply branch formed by the second MOSFET group, and the battery is connected to the bus with a large current to achieve the rated power supply of the entire satellite.

[0065] The orderly power-off logic is as follows: First, a discharge switch disconnection command is sent through the onboard touch screen to turn off the second MOS transistor group and cut off the high-current main power supply branch. Then, the self-locking switch is pressed to turn off the first MOS transistor group. The battery is completely disconnected from the bus to complete the power-off of the entire satellite, avoiding surge damage to the satellite hardware caused by the high-current cutoff.

[0066] In one embodiment, such as Figure 4 The diagram illustrates a circuit structure of a satellite screen self-starting power supply control device provided in this embodiment, including two operating modes: a pre-starting state and a post-starting state. From left to right, the circuit structure includes a battery pack, a satellite start switch, a satellite power-on enable switch K3, an autonomous power-on enable switch K1, a discharge switch K2, limit switches, a satellite bus, and GND, among other core units. In the pre-starting state, both the satellite power-on enable switch K3 and the autonomous power-on enable switch K1 are closed, while the discharge switch K2 and the limit switch are open. The satellite start switch is also open, and the battery pack is isolated from the satellite bus. After the satellite start switch closes, the system enters the post-starting state. The satellite power-on enable switch K3 and the autonomous power-on enable switch K1 remain closed, while the discharge switch K2 and the limit switch remain open. At this time, the battery pack, via the self-starting low-current power supply branch formed by the autonomous power-on enable switch K1, is connected to the satellite bus, prioritizing power supply to the power control components and integrated electronics. Meanwhile, the diagram clearly illustrates the circuit implementation path of the ordered power-off logic: first, a discharge switch disconnect command is sent from the onboard touchscreen to turn off discharge switch K2, cutting off the high-current main power supply branch; then, the entire satellite start-up switch is disconnected, allowing the battery pack to completely disconnect from the busbar, thus completing the entire satellite power-off. This circuit design effectively avoids surge damage caused by direct high-current disconnection, solves the technical problem of electromagnetic interference and damage to satellite hardware during power-off in traditional onboard power supply systems, and provides a specific circuit implementation scheme for the "hierarchical power-on logic" and "ordered power-off logic" in step S1.

[0067] In a preferred embodiment, in step S1, a star-screen self-starting power supply control device integrated into the spaceborne touchscreen panel is used to execute the hierarchical power-on logic and the ordered power-off logic. The star-screen self-starting power supply control device includes:

[0068] The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator. A single pair of contacts is connected in parallel to the power control component's power circuit. The on / off state of the LED status indicator directly reflects the switch's on / off status, allowing for intuitive judgment of the switch's on / off state without the need for external detection circuitry.

[0069] The first MOS transistor group is jointly controlled by the self-locking switch and the self-starting enable switch to form a self-starting low-current power supply branch for initial power-on.

[0070] The second MOSFET group is independently controlled by a discharge switch and forms a main power supply branch with rated high current.

[0071] Step S1 employs a self-starting power supply control device integrated into the spaceborne touchscreen panel to execute graded power-on and orderly power-off logic. This device consists of a single-channel self-locking switch, a first MOSFET group, and a second MOSFET group. The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator connected in parallel to the power control component's power-on circuit. The on / off status is directly fed back by the LED's illumination, allowing for intuitive judgment without external detection circuitry. In terms of working principle, when the self-locking switch is pressed, its contacts close, triggering the first MOSFET group to conduct. This group is jointly controlled by the self-locking switch and the self-starting enable switch, thereby constructing a self-starting low-current power supply branch, prioritizing power supply to the power control component and... When the integrated electronics system is initially powered on, the LED inside the self-locking switch illuminates to indicate that the operation is valid. After the satellite computer starts up and powers on the onboard touchscreen, the system sends a discharge switch on command via the touchscreen to independently control the second MOSFET group to conduct. This group constitutes the rated high-current main power supply branch, achieving the rated power supply for the entire satellite. When power needs to be cut off, following an orderly power-off logic, the second MOSFET group is first turned off by sending a discharge switch off command via the touchscreen to cut off the high-current main power supply branch. Then, the self-locking switch is pressed again to turn off the first MOSFET group, completely disconnecting the battery from the bus. This step-by-step power-off method effectively avoids surge damage caused by direct high-current disconnection, thereby protecting the satellite's hardware safety.

[0072] In a preferred embodiment, in step S2, the test condition label includes at least one of the following: normal power-on condition, post-mechanical test condition, post-thermal test condition, post-electromagnetic compatibility test condition, post-vacuum discharge test condition, and on-orbit routine inspection condition. Different test condition labels correspond to independently configured self-test instruction sequences, data acquisition cycle parameters, threshold judgment criteria, and fault discrimination logic. Based on the test condition label, the system moves the dedicated self-test instruction sequence, parameter judgment threshold table, and component topology mapping model from the corresponding partition of the local non-volatile memory to the running memory and performs data integrity verification. Clicking the "One-Click Self-Test" trigger button on the interface sends a self-test scheduling instruction to the spacecraft program via a dedicated upper-layer isolated communication link.

[0073] In a preferred embodiment, the hierarchical isolation interaction architecture in step S3 is specifically as follows:

[0074] The onboard touchscreen establishes a dedicated upper-layer interactive communication link only with the satellite mission program. The underlying instruction scheduling, data acquisition, and hardware status verification for the whole machine self-test are all uniformly coordinated and executed in isolation by the satellite mission program. The onboard touchscreen only undertakes the upper-layer application functions of triggering human-computer interaction and visualizing test results, completely isolating the underlying bus access and single-machine hardware communication permissions, thereby achieving secure decoupling between the human-computer interaction layer and the onboard hardware driver layer.

[0075] like Figure 2 This diagram illustrates a layered architecture for a system provided in this embodiment. The layered architecture, from top to bottom, includes: a satellite-side human-machine interface layer (including a satellite-borne touchscreen), an upper-layer interaction channel (including a dedicated isolated interaction link), a satellite mission core coordination layer (including satellite mission programs), a bus data interaction layer (including multiple types of satellite-borne buses), and a satellite hardware layer (including individual devices such as power supply / distribution, attitude control, telemetry and control, payloads, and thermal control). In this architecture, the satellite-borne touchscreen only serves as the upper-layer application for triggering human-machine interaction and visualizing test results. It establishes a dedicated upper-layer interaction communication link with the satellite mission programs through a dedicated isolated interaction link, thus completely isolating access permissions to the underlying buses and direct communication permissions with individual hardware devices. The satellite mission programs, as the core coordination node, independently execute the underlying instruction scheduling and data acquisition tasks for system self-testing. For example, at a fixed period of 100ms, they sequentially collect telemetry data packets from 19 core devices, including the power supply bus, battery, satellite mission host, telemetry and control payload, flywheel, and thermal control, via multiple types of satellite-borne buses. Each individual device in the onboard hardware layer only responds to the low-level instructions issued by the space service program via the bus data interaction layer, and does not directly receive control signals from the onboard touch screen. Through the above-mentioned layered and isolated interaction architecture, the human-machine interaction layer and the onboard hardware driver layer are securely decoupled, providing system-level architectural support for the space service program to independently execute low-level data acquisition in step S3.

[0076] In a preferred embodiment, in step S4, the relative deviation rate of the real-time telemetry parameters is calculated. The formula is:

[0077]

[0078] in, This refers to the relative deviation rate; To collect parameter values ​​in real time; These are the standard rated values ​​for the corresponding parameters under this operating condition;

[0079] A three-level threshold judgment logic is adopted to determine the threshold. With warning threshold coefficient and fault threshold coefficient A comparison was made, among which :

[0080] like If it is determined to be in a normal state; If it is determined to be a warning state; This is determined to be a fault condition;

[0081] For the critical parameter that triggers the early warning state, the least squares method is used to calculate its value within the sliding time window. slope of the offset trend within The formula is:

[0082]

[0083] in, The slope of the offset trend; The first time within the sliding time window Each sampling time; To and The corresponding parameter values; The mean of all sampling times within the sliding time window; For all items within the sliding time window that are related to... The mean of the corresponding parameter values; The total number of sampling points within the window; when When the value exceeds the preset trend deterioration threshold, an early warning flag is triggered.

[0084] In a preferred embodiment, the method further includes an anomaly backtracking and retesting steps: when the self-test detects a warning or fault state, the system automatically triggers a second high-frequency retest, shortening the telemetry acquisition cycle, increasing the sampling frequency, and synchronously recording the parameter change curves before and after the anomaly; the retest results are compared with the initial detection results to eliminate instantaneous interference errors, and the fault location is locked after confirming the validity of the anomaly. Through three-level threshold judgment and sliding window trend warning, the hidden on-orbit hazards of slow parameter drift can be predicted in advance; by automatically retesting and comparing multiple rounds of sampling curves to filter power-on instantaneous interference, the system can distinguish between real hardware faults and random disturbances, transforming post-event fault investigation into proactive early warning, and significantly improving the accuracy of fault judgment.

[0085] In a preferred embodiment, during the anomaly backtracking and retesting steps, to accurately distinguish between transient interference caused by space single-particle flips and electromagnetic pulses and actual permanent hardware faults, the system constructs a joint judgment model of transient deviation energy integral and over-limit pulse width based on the parameter change curves acquired by high-frequency retesting. The specific calculation process is as follows:

[0086] Calculate the transient deviation energy integral within the high-frequency retest time window. The formula is:

[0087]

[0088] in, For the transient deviation energy integral; This represents the total number of sampling points within the high-frequency retest time window. The first high-frequency retest within the time window Real-time collected parameter values ​​at each sampling point; These are the standard rated values ​​for the corresponding parameters under this operating condition; The sampling time interval for high-frequency retesting; calculate the parameter exceeding the fault threshold coefficient. Cumulative over-limit pulse width corresponding to the threshold The formula is:

[0089]

[0090] in, For cumulative pulse width exceeding the limit; This is a status indicator function, used when parameter values ​​are collected in real time. The relative deviation rate is greater than the fault threshold coefficient. hour, ,otherwise ; This is the sampling time interval for high-frequency retesting; This represents the total number of sampling points within the high-frequency retest time window.

[0091] The calculated and With the preset interference energy threshold and pulse width threshold Perform joint comparison: If and If the fluctuation is determined to be a spike caused by transient interference, the system will automatically filter out the abnormal record and maintain the original normal state mark; if or If the fault is confirmed, it is a genuine hardware failure, the fault location is located, and the topology node is highlighted in red. By combining the transient energy and pulse width in the time domain for joint confirmation, the transient spatial interference with large amplitude but extremely short duration is essentially eliminated, completely solving the industry problem that traditional threshold comparison methods are prone to misjudging transient spikes as hardware damage, leading to false alarms.

[0092] In a preferred embodiment, the topology visualization linkage display method in step S5 includes (e.g.) Figure 3 (as shown)

[0093] Configure a three-level status color code system, with the first color code red to indicate the fault exceeding the limit status, the second color code yellow to indicate the parameter critical warning status, and the third color code green to indicate the parameter compliance and normal status;

[0094] The spatial layout, connection relationships, and hierarchical architecture of all physical components of the satellite are pre-entered into the onboard touchscreen system, and a high-precision whole-satellite topology mapping map is generated in real time. This topology mapping map includes a multi-level node architecture at the system and unit levels, with each node bound to the satellite's physical hardware. When the telemetry status parameter of a component exceeds the fault threshold for the corresponding operating condition, the corresponding topology node automatically triggers a distinctive display effect with highlighting, thickening of the border, and grayscale inversion, and simultaneously pops up a floating fault prompt box displaying the fault location, abnormal parameters, out-of-limit values, fault level, and preliminary tracing conclusions. When the parameter is within the warning range, the corresponding node flashes slowly and displays a warning message. Through this topology mapping visualization and linkage display method, damaged hardware can be quickly located without requiring test personnel to be proficient in telemetry protocols, effectively reducing the professional threshold for testing and achieving intuitive fault location within seconds.

[0095] In a preferred embodiment, the process of generating and exporting the structured self-inspection log in step S6 includes:

[0096] The system integrates all data, including test condition type, test start and end time, measured telemetry parameters of each component, threshold standards, judgment results, anomaly tracing information, equipment number, and operator number, to generate a standardized encrypted log file. The log file includes a timestamp anti-counterfeiting identifier and a unique test sequence number, and supports breakpoint resume and data anti-tampering.

[0097] After data compression and redundancy correction encoding of the logs, dynamic QR codes or barcodes are generated and displayed on the interface. External scanning terminals can quickly parse, export, and archive all test data. The structured self-test logs also support multiple data export methods, including NFC near-field communication, local USB export, and on-board wireless download. Log files support standardized output formats such as PDF, TXT, and Excel, adapting to automated test archiving systems. Through the above-mentioned standardized encrypted structured logs and multi-channel machine code export methods, closed-loop archiving of the entire testing process is achieved, effectively solving the industry pain points of fragmented test data, low efficiency of manual processing, and difficulty in traceability.

[0098] In a preferred embodiment, the execution flow of a mechanical vibration / shock test scenario includes:

[0099] Before the test, press the self-locking switch to power on the entire satellite. After completing the self-test and confirming that it is normal under normal power-on conditions, press the self-locking switch to de-power on the satellite. The satellite completes the vibration table clamping and mechanical test in a purely mechanical fixed state.

[0100] After the mechanical test is completed, there is no need to reconnect any external testing equipment. Simply press the self-locking switch to complete the graded power-on. After selecting the mechanical test condition on the onboard touch screen, a special self-check is performed to batch verify the online survival status of all satellite units, bus communication connectivity, and screen for hardware damage and link disconnection faults caused by vibration. This process eliminates the risk of fatigue wear and tear on wiring harnesses and connectors, and loose connections caused by vibration at the source, significantly shortening the time spent on cable disassembly and assembly before and after the test, and reducing the risk of mechanical damage to the satellite.

[0101] In a preferred embodiment, the method further includes: in a semi-physical simulation test or simulated flight test scenario, displaying dynamic data such as attitude curves, parameter comparison waveforms, timing execution progress, and spatial position trajectory in real time through the onboard touch screen, comprehensively covering the full scenario requirements of satellite ground testing.

[0102] In one embodiment, when the operator presses the self-locking switch on the spaceborne touch screen panel, the built-in LED of the switch lights up, the first MOSFET group (self-starting branch) is turned on, and the battery prioritizes powering on the power control components and integrated electronics; after the spacecraft computer starts up, it drives the spaceborne touch screen to power on, the space screen microprocessor initializes and pops up the self-test interactive main interface, the interface displays all selectable test condition labels.

[0103] When the operator selects the "Normal Power-On Condition" tab, the system retrieves the dedicated self-test instruction sequence, parameter judgment threshold table, and component topology mapping model for this condition from the corresponding partition of the local non-volatile memory, moves them to the running memory, and completes data integrity verification. When the "One-Click Self-Test" trigger button is clicked on the interface, the onboard touch screen sends a self-test scheduling instruction to the space service program through a dedicated upper-layer isolated communication link.

[0104] The underlying command scheduling and full-machine telemetry data acquisition are executed independently and in isolation by the satellite operation program. The satellite operation program sequentially collects telemetry data packets of 19 core equipment, including the power supply and distribution bus, battery, satellite operation host, telemetry and control payload, flywheel, and thermal control, at a fixed period of 100ms, and pushes them to the satellite touch screen. The satellite screen calculates the relative deviation rate δ of each parameter and completes the three-level compliance judgment with the preset α and β thresholds. All parameters without warnings or faults are displayed as green topology nodes.

[0105] If some parameters fall within the warning range, the system uses the least squares method to calculate the sliding window offset slope. If the slope exceeds the deterioration threshold, a trend warning is marked, and the corresponding topology node flashes slowly. If a fault occurs and the parameter exceeds the limit, a high-frequency retest is automatically triggered, the acquisition cycle is shortened, the sampling frequency is increased, the retest curve is compared to eliminate instantaneous interference, and after the fault is confirmed, the topology node is highlighted in red and the border is thickened, and a floating fault prompt box pops up to display the complete fault information.

[0106] When all parameters are compliant and without abnormalities, the interface will display a "Routine self-test of the entire satellite has passed" message; the system integrates all test data to generate encrypted structured PDF logs with unique serial numbers and anti-counterfeiting timestamps, and resumes local interruption; the logs are compressed, corrected, and encoded to generate a dynamic QR code displayed in the lower right corner of the screen, and operators can use a scanning terminal to parse and export the complete test report with one click; it also supports exporting TXT / Excel format logs via USB and NFC.

[0107] After the test is completed, the operator issues a discharge switch disconnect command on the onboard touch screen to shut off the main power supply branch of the second MOSFET group; press the panel self-locking switch again to disconnect the first MOSFET group, completely disconnect the battery from the bus, and the entire satellite is powered off in an orderly manner to avoid surge damage caused by direct cutting of large current.

[0108] In another embodiment, this embodiment is applied to the status verification scenario after satellite mechanical vibration and impact tests. The core purpose is to investigate onboard equipment damage and connection failures caused by vibration and impact stress, and to proactively avoid potential hazards of damaged equipment remaining in orbit. High-frequency vibration and instantaneous impact during mechanical testing can easily cause hardware damage such as damage to individual onboard equipment, board breakage, connector detachment, and bus link disconnection, directly leading to equipment disconnection and network failure. This scenario specifically performs a self-check of the survival status and communication connectivity of all satellite equipment, enabling rapid screening and identification of vibration-damaged equipment.

[0109] After the satellite completes its mechanical environment test and is moved into the cleanroom, no external testing equipment is required. Operators can directly select "Post-Mechanical Test Condition" on the onboard touchscreen. The system automatically retrieves the dedicated self-test logic adapted to the mechanical test scenario. Compared to the conventional condition, this condition focuses on "full satellite equipment survival detection, single-unit communication connectivity verification, and bus network integrity check," specifically adapted to the core testing requirements that are prone to equipment vibration damage, link disconnection, and overall network anomalies during mechanical tests. This prevents damaged equipment from being subsequently installed and used in orbit.

[0110] After the satellite display switches to the mechanical test self-test mode and issues a self-test scheduling command, the satellite administration program, following the specific acquisition strategy for this operating condition, traverses all individual devices connected to the bus across the entire satellite, batch-collecting the online survival status, link handshake status, and bus communication connectivity status of each device, and pushes standardized device communication status telemetry data packets to the satellite display. The satellite display parses the data issued by the satellite administration and verifies the network communication status of each individual device with the satellite administration. If problems such as a device being completely offline, a link being completely disconnected, or network matching anomalies occur, it is directly determined that the device is at risk of vibration damage or connection failure. The corresponding topology node on the satellite display highlights the fault, accurately locating the device with abnormal vibration damage.

[0111] The system automatically triggers multiple rounds of continuous retesting to eliminate accidental factors such as instantaneous power-on interference and temporary contact fluctuations, accurately pinpointing permanent equipment disconnection and link damage caused by vibration. Based on the satellite's visual positioning results, testers quickly verify the individual devices corresponding to the fault locations, identifying irreversible issues such as vibration-induced failure or connector detachment, and promptly replacing damaged equipment and repairing network links. After the hazard identification and repair, the topology nodes return to normal, and the system generates a dedicated self-inspection log for the mechanical test, completing a closed-loop verification of the integrity of the entire satellite equipment and the reliability of the network, completely avoiding on-orbit operational risks left by vibration-damaged equipment.

[0112] A satellite status self-checking system based on a star screen is provided to implement the aforementioned satellite status self-checking method based on a star screen. The system includes:

[0113] The spaceborne touchscreen module includes a touchscreen display, a microprocessor, local non-volatile memory, a bus communication interface, and physical buttons integrated into the panel. The spaceborne touchscreen module integrates a self-starting power supply control device, which includes a single-channel self-locking switch, a first MOSFET group, and a second MOSFET group. The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator. A single pair of contacts is connected in parallel to the power control component's power-on circuit, and the LED's on / off state directly reflects the switch's on / off status. The first MOSFET group is jointly controlled by the self-locking switch and a separate self-starting enable switch, forming a self-starting low-current power supply branch for initial power-on. The second MOSFET group is independently controlled by a discharge switch, forming a rated high-current main power supply branch.

[0114] The working condition initialization and parameter loading module is used to receive the selected test working condition label and load the corresponding self-test parameter set;

[0115] The command interaction and data acquisition module is used to obtain the operating status parameters of the satellite hardware modules through the satellite service program based on a layered and isolated interaction architecture, while shielding the details of reading and writing the underlying hardware.

[0116] The status determination and fault tracing module is used to perform compliance determination, anomaly classification marking, physical component tracing and early warning marking based on relative deviation rate calculation and offset trend calculation;

[0117] The Star Screen Visualization Interaction and Topology Mapping Module is used to call the graphics rendering engine to draw the whole star topology mapping map, and to trigger differentiated display effects and pop up floating fault prompt boxes for nodes when telemetry parameters are abnormal.

[0118] The structured log generation and export module is used to generate structured self-inspection logs and store them locally, and then convert them into machine-readable code for output and display.

[0119] A satellite status self-testing system based on a satellite screen achieves graded power-on and orderly power-off of the entire satellite through a self-starting power supply control device integrated into the onboard touch screen panel. This device uses a single-channel self-locking switch and internal LED indicators to provide intuitive status feedback. It also constructs a low-current initial power supply branch and a high-current main power supply branch through the first and second MOSFET groups, respectively, to ensure safe hardware startup. During self-testing, the condition initialization and parameter loading module first responds to the test condition label selected by the operator, accurately loading the corresponding self-test instruction sequence, threshold standards, and topology model from local non-volatile memory. Subsequently, the instruction interaction and data acquisition module, relying on a layered and isolated interaction architecture, sends scheduling instructions to the satellite administration program and obtains the operating status parameters of each hardware module through a dedicated communication link without directly accessing the underlying hardware, effectively shielding the details of underlying read / write operations. To ensure system security, after acquiring data, the status judgment and fault tracing module calculates the relative deviation rate and offset trend based on preset logic, performs compliance comparison, anomaly classification and marking, and preliminary fault tracing of physical components on telemetry data. If an anomaly is found or the overall status needs to be displayed, the star screen visualization interaction and topology mapping module will call the graphics rendering engine to draw the entire satellite topology map. Through differentiated visual effects such as node color changes, highlight flashing, and floating prompt boxes, the operational health status of each satellite component is presented intuitively. Finally, the structured log generation and export module integrates the complete test data, judgment results, and fault information into encrypted logs with timestamp anti-counterfeiting marks, and converts them into machine-readable codes such as QR codes for display. It supports multiple export methods, thus forming a complete self-inspection process from hardware secure startup, data acquisition, intelligent judgment and comparison to visualization output and archiving.

[0120] In a preferred embodiment, the power-on control logic of the self-starting power supply control device is as follows: pressing the self-locking switch turns on the first MOS transistor group, and the power control component and integrated electronics are powered on first; after the onboard touch screen issues a discharge switch opening command, the second MOS transistor group is turned on, and the entire satellite enters the rated power supply.

[0121] The power-off control logic of the self-starting power supply control device is as follows: the onboard touch screen sends a discharge switch disconnect command to turn off the second MOS transistor group, and then the self-locking switch is pressed again to turn off the first MOS transistor group, so that the battery is completely disconnected from the bus.

[0122] The self-starting power supply control device adopts a hierarchical power-on and orderly power-off logic design to ensure the safety of satellite hardware during startup and shutdown. During the power-on phase, the operator first presses the self-locking switch on the panel. This action directly connects the low-current power supply branch composed of the first MOSFET group, allowing the battery to prioritize the initial power supply of key low-power modules such as the power control components and integrated electronics. After the satellite computer and onboard touch screen start normally, the system sends a command through the touch screen to connect the rated high-current main power supply branch composed of the second MOSFET group, thereby achieving full rated power supply for the entire satellite. During the power-off phase, to avoid damage to the satellite hardware caused by the surge generated by the direct cut-off of high current, the device strictly implements the orderly power-off logic. That is, it first sends a discharge switch disconnect command through the onboard touch screen to turn off the second MOSFET group to cut off the high-current main power supply circuit. Then, it presses the self-locking switch again to turn off the first MOSFET group, finally completely disconnecting the battery from the bus and completing the complete power-off of the entire satellite.

[0123] In a preferred embodiment, the working condition initialization and parameter loading module moves the dedicated self-test instruction sequence, parameter judgment threshold table and component topology mapping model from the corresponding partition of the local non-volatile memory to the running memory according to the test working condition label, and performs data integrity verification; different test working condition labels correspond to independently configured self-test instruction sequences, acquisition cycle parameters, threshold judgment criteria and fault discrimination logic.

[0124] The operational condition initialization and parameter loading module enables flexible configuration and efficient execution of self-test tasks. When an operator selects a specific test condition tag via the onboard touchscreen, the module immediately and precisely retrieves the self-test instruction sequence, parameter judgment threshold table, and component topology mapping model specifically bound to that operational condition from the corresponding partition of the local non-volatile memory, and completely transfers this data to the running memory for subsequent processing. To ensure data reliability, the system immediately performs a strict data integrity check after data loading, and only activates the corresponding detection program after the check is successful. This design allows different test condition tags to correspond to independently configured self-test logic, including differentiated acquisition cycle parameters, targeted threshold judgment standards, and specific fault discrimination algorithms, thereby ensuring that the satellite can obtain the most suitable and accurate self-test service under different operational stages or specific needs.

[0125] In a preferred embodiment, the status determination and fault tracing module is specifically used for:

[0126] Calculate the relative deviation rate of real-time telemetry parameters The formula is:

[0127]

[0128] in, This refers to the relative deviation rate; To collect parameter values ​​in real time; These are the standard rated values ​​for the corresponding parameters under this operating condition;

[0129] The status determination and fault tracing module adopts a three-level threshold determination logic, which will... With warning threshold coefficient and fault threshold coefficient A comparison was made, among which like If it is determined to be in a normal state; If it is determined to be a warning state; This is determined to be a fault condition;

[0130] For the critical parameter that triggers the early warning state, the state determination and fault tracing module uses the least squares method to calculate its value within the sliding time window. slope of the offset trend within The formula is:

[0131]

[0132] in, The slope of the offset trend; The first time within the sliding time window Each sampling time; To and The corresponding parameter values; The mean of all sampling times within the sliding time window; For all items within the sliding time window that are related to... The mean of the corresponding parameter values; The total number of sampling points within the window; when When the value exceeds a preset trend deterioration threshold, the state determination and fault tracing module triggers an early warning flag.

[0133] The status determination and fault tracing module achieves precise monitoring of satellite hardware status through a dual mechanism of "deviation quantification + trend prediction". First, the module collects the operating parameters of each component in real time and calculates their relative deviation rate compared to the standard rated value, using this as a preliminary status assessment basis. Based on this deviation rate, the module uses a three-level threshold logic for graded determination: when the deviation is extremely small and within a safe range, it is determined to be in a normal state, requiring no intervention; when the deviation exceeds the warning threshold but does not reach the fault limit, it is determined to be in a warning state, requiring attention; and when the deviation significantly exceeds the fault threshold, it is directly determined to be in a fault state. This triggers an emergency response process. To further improve the foresight and accuracy of the judgment, for critical parameters that have entered the warning state, the module will also introduce time-dimensional analysis, using the least squares method to calculate the slope of the parameter's change trend within a sliding time window, thereby determining whether the data is stabilizing or continuing to deteriorate. Once the trend slope is detected to exceed the preset deterioration threshold, even if the current absolute value has not yet reached the fault red line, the module will trigger a warning flag in advance. This logical progression from static to dynamic and from point to surface effectively avoids false alarms and missed alarms, realizing an intelligent upgrade from single value comparison to dynamic trend analysis.

[0134] In one embodiment, such as Figure 3 The diagram illustrates a satellite status self-check threshold discrimination and visualization output process provided in this embodiment. The process, from top to bottom, includes: satellite administrators pushing full-scale equipment status telemetry data, adaptive threshold matching based on operating conditions, three-level threshold discrimination, status grading processing, and visualization output. In this process, the full-scale equipment status telemetry data pushed by the satellite administrator program, after adaptive threshold matching based on operating conditions, enters the three-level threshold discrimination stage. Status grading is performed based on the comparison between the relative deviation rate δ and the preset warning threshold coefficient α and fault threshold coefficient β: when δ≤α, it is determined to be a normal state, and the corresponding topology node is displayed normally; when α<δ≤β, it is determined to be a warning state, the node triggers low-speed flashing and adds a warning label; when δ>β, it is determined to be a fault state, the node performs high-brightness flashing and pops up a fault pop-up window. For warning and fault states, the system further binds the topology level and traces the abnormal points, ultimately achieving visualized grading output and log archiving. Through a three-level threshold discrimination mechanism and differentiated visual labels, the satellite status can be accurately graded and intuitively visualized, effectively solving the technical problems of unclear abnormal status identification and low fault location efficiency in traditional self-inspection methods.

[0135] In a preferred embodiment, the star-screen visualization interaction and topology mapping module is configured with a three-level status color code system. The first color code (red) indicates a fault exceeding the limit; the second color code (yellow) indicates a parameter critical warning state; and the third color code (green) indicates a parameter compliant and normal state. The topology mapping diagram includes a system-level and single-machine-level multi-level node architecture, with each node bound to the satellite's physical hardware. When the telemetry status parameter of a component exceeds the fault threshold of the corresponding operating condition, the corresponding topology node automatically triggers a distinctive display effect with highlight flashing, thickened borders, and grayscale inversion, and simultaneously pops up a floating fault prompt box displaying the fault location, abnormal parameter, exceeding limit value, fault level, and preliminary source tracing conclusion. When the parameter is within the warning range, the corresponding node flashes slowly and displays a warning prompt, see [reference]. Figure 3 .

[0136] In a preferred embodiment, the structured log generation and export module integrates all data, including test condition type, test start and end time, measured telemetry parameters of each component, threshold standards, judgment results, anomaly tracing information, equipment number, and operator number, to generate a standardized encrypted log file. The log file includes a timestamp anti-counterfeiting identifier and a unique test serial number, supporting breakpoint resumption and data tamper-proofing. The structured log generation and export module compresses and redundancy-correcting the log data to generate a dynamic QR code or barcode visualization displayed on the interface, allowing external scanning terminals to parse, export, and archive the full test data. The structured self-test log also supports multiple data export methods, including NFC near-field communication, local USB export, and on-board wireless download. The log file supports standardized PDF, TXT, and Excel formats for output, adapting to automated test archiving systems.

[0137] The structured log generation and export module, as the final data archiving stage of the self-inspection process, first integrates all key data, including test condition type, start and end time, measured data of each component, judgment results, and personnel and equipment information, to generate standardized encrypted log files. Built-in timestamp anti-counterfeiting identifiers and unique serial numbers ensure the authenticity and immutability of the data, while supporting breakpoint resume to guarantee data integrity. Subsequently, the module compresses and redundancy-correcting the processed log data, converting it into dynamic QR codes or barcodes, which are then displayed intuitively on the interface, allowing external terminals to quickly parse and obtain complete data by scanning. Furthermore, to adapt to different application scenarios and archiving needs, the module provides diverse data export channels, including NFC near-field communication, local USB interface export, and on-board wireless download, and supports converting logs to common standardized formats such as PDF, TXT, and Excel. This seamlessly integrates with automated test archiving systems, achieving closed-loop management of the entire process from data acquisition and secure storage to convenient sharing.

[0138] While the foregoing describes preferred embodiments of the present invention, those skilled in the art, upon understanding its core inventive principles, will obviously be able to make various changes and modifications to these embodiments. Therefore, the appended claims are intended to cover the preferred embodiments as well as all equivalent substitutions, improvements, and other variations falling within the scope of protection of this invention. The above description is merely illustrative and not restrictive; any modifications, equivalent substitutions, or improvements made within the spirit and principles of this invention should be protected by the claims.

Claims

1. A satellite status self-checking method based on star screen, characterized in that, Includes the following steps: Step S1: Press the single-channel self-locking switch integrated into the satellite touch screen panel to trigger the power-on of the entire satellite's hierarchical hardware; the self-locking switch conducts the self-starting branch composed of the first MOS transistor group, and the battery prioritizes powering the power control components and integrated electronics; after the satellite computer starts up, it drives the satellite touch screen to power on, the satellite screen microprocessor initializes and pops up the self-test interactive main interface; the self-locking switch integrates an LED indicator, and the on / off state of the switch can be intuitively judged by the on / off state of the LED; Step S2: In response to the self-test trigger operation of the spaceborne touch screen, receive the selected test condition label and load the self-test parameter set corresponding to the test condition; the self-test parameter set includes at least a parameter judgment threshold table and a component topology mapping model; Step S3: Adopting a layered isolation interaction architecture, the onboard touch screen establishes a dedicated upper-layer interactive communication link only with the satellite service program. The satellite service program obtains the internal operating status parameters of each hardware module and functional system of the satellite, and completes the interactive acquisition of the entire satellite status data. Step S4: Based on the parameter judgment threshold table for the corresponding working condition, compare the real-time telemetry parameters, calculate the relative deviation rate to make compliance judgment and anomaly classification marking; locate the physical component according to the component topology mapping model based on the abnormal parameters, and complete the preliminary fault tracing; for the critical parameters in the warning interval, calculate their offset trend within the sliding time window and mark them for warning. Step S5: Display the self-test comparison results and component operating status in real time on the onboard touch screen through topology visualization linkage; call the graphics rendering engine to draw the whole satellite topology mapping map; when the parameters exceed the fault threshold, the corresponding topology node triggers differentiated display effects and pops up a floating fault prompt box. Step S6: Automatically generate a structured self-inspection log with a unique identifier and timestamp and write it to local storage. At the same time, convert the log into machine-readable code and display it on the Star Screen interface for external terminals to parse and export.

2. The satellite status self-checking method based on star screen according to claim 1, characterized in that, The graded power-on logic in step S1 is as follows: After the self-locking switch is turned on, the battery is connected to the satellite bus via the first MOSFET group to complete the initial power-on. After the initial power-on is completed, the operator sends a discharge switch opening command to the satellite operation program through the onboard touch screen, which turns on the main power supply branch formed by the second MOSFET group, and the battery is connected to the bus with a large current to achieve the rated power supply of the entire satellite. The orderly power-off logic is as follows: First, a discharge switch disconnection command is sent through the onboard touch screen to turn off the second MOS transistor group and cut off the high-current main power supply branch. Then, the self-locking switch is pressed to turn off the first MOS transistor group. The battery is completely disconnected from the bus to complete the power-off of the entire satellite, avoiding surge damage to the satellite hardware caused by the high-current cutoff.

3. The satellite status self-checking method based on star screen according to claim 2, characterized in that, In step S1, the star-screen self-starting power supply control device integrated into the star-borne touch screen panel is used to execute the hierarchical power-on logic and the orderly power-off logic. The star-screen self-starting power supply control device includes: The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator. A single pair of contacts is connected in parallel to the power control component's power circuit. The on / off state of the LED status indicator directly reflects the switch's on / off status. The first MOS transistor group is jointly controlled by the self-locking switch and the self-starting enable switch to form a self-starting low-current power supply branch for initial power-on. The second MOSFET group is independently controlled by a discharge switch and forms a main power supply branch with rated high current.

4. The satellite status self-checking method based on star screen according to claim 1, characterized in that, In step S2, the test condition label includes at least one of the following: normal power-on condition, mechanical test post-test condition, thermal test post-test condition, and electromagnetic compatibility test post-test condition; different test condition labels correspond to independently configured self-test instruction sequences, acquisition cycle parameters, threshold judgment criteria, and fault discrimination logic; according to the test condition label, the system moves the dedicated self-test instruction sequence, parameter judgment threshold table, and component topology mapping model from the corresponding partition of the local non-volatile memory to the running memory, and performs data integrity verification.

5. The satellite status self-checking method based on star screen according to claim 1, characterized in that, The layered, isolated interaction architecture in step S3 is specifically as follows: The onboard touch screen establishes a dedicated upper-layer interactive communication link only with the satellite service program. The underlying instruction scheduling, data acquisition, and hardware status verification of the whole machine self-test are all uniformly coordinated and executed in isolation by the satellite service program. The onboard touchscreen only serves as the upper-layer application function for triggering human-computer interaction and visualizing test results, completely isolating the underlying bus access and stand-alone hardware communication permissions, thus achieving secure decoupling between the human-computer interaction layer and the onboard hardware driver layer.

6. The satellite status self-checking method based on star screen according to claim 1, characterized in that, In step S4, the relative deviation rate of the real-time telemetry parameters is calculated. The formula is: ； in, This refers to the relative deviation rate; To collect parameter values ​​in real time; These are the standard rated values ​​for the corresponding parameters under this operating condition; A three-level threshold judgment logic is adopted to determine the threshold. With warning threshold coefficient and fault threshold coefficient A comparison was conducted, among which : like If it is determined to be in a normal state; If it is determined to be a warning state; This is determined to be a fault condition; For the critical parameter that triggers the early warning state, the least squares method is used to calculate its value within the sliding time window. slope of the offset trend within The formula is: ； in, The slope of the offset trend; The first time within the sliding time window Each sampling time; To and The corresponding parameter values; The mean of all sampling times within the sliding time window; For all items within the sliding time window that are related to The mean of the corresponding parameter values; The total number of sampling points within the window; when When the value exceeds the preset trend deterioration threshold, an early warning flag is triggered.

7. A satellite status self-checking method based on a star screen according to claim 1 or 6, characterized in that, The method also includes an anomaly backtracking and retesting steps: when the self-test detects an early warning or fault state, the system automatically triggers a second high-frequency retest, shortens the telemetry acquisition cycle, increases the sampling frequency, and synchronously records the parameter change curves before and after the anomaly; the retest results are compared with the first test results to eliminate instantaneous interference errors, and the fault location is locked after confirming the validity of the anomaly.

8. The satellite status self-checking method based on star screen according to claim 1, characterized in that, The topology visualization linkage display method in step S5 includes: Configure a three-level status color code system, with the first color code red to indicate the fault exceeding the limit status, the second color code yellow to indicate the parameter critical warning status, and the third color code green to indicate the parameter compliance and normal status; The spatial layout, connection relationships, and hierarchical architecture of all physical components of the satellite are pre-entered into the onboard touch screen system, and a high-precision whole-satellite topology mapping map is generated in real time. The topology mapping map includes a multi-level node architecture at the system level and single-machine level, with each node bound to the satellite's physical hardware. When the telemetry status parameter of a certain component exceeds the fault threshold of the corresponding operating condition, the corresponding topology node automatically triggers a distinctive display effect of highlighting and flashing, thickening the border, and inverting the grayscale, and simultaneously pops up a floating fault prompt box, displaying the fault location, abnormal parameter, out-of-limit value, fault level, and preliminary tracing conclusion. When the parameter is in the warning range, the corresponding node flashes slowly and displays a warning prompt.

9. The satellite status self-checking method based on star screen according to claim 1, characterized in that, The execution process for mechanical vibration / shock test scenarios includes: Before the test, press the self-locking switch to power on the entire satellite. After completing the self-test and confirming that it is normal under normal power-on conditions, press the self-locking switch to de-power on the satellite. The satellite completes the vibration table clamping and mechanical test in a purely mechanical fixed state. After the mechanical test is completed, there is no need to reconnect any external testing equipment. Simply press the self-locking switch to complete the graded power-on. After selecting the mechanical test condition on the onboard touch screen, perform a special self-test to check the online survival status of all satellite units, bus communication connectivity, and screen for hardware damage and link disconnection faults caused by vibration.

10. A satellite status self-inspection system based on a star screen, characterized in that, The system is used to implement the satellite status self-checking method based on a star screen as described in any one of claims 1 to 9, the system comprising: The spaceborne touchscreen module includes a touchscreen display, a microprocessor, local non-volatile memory, a bus communication interface, and physical buttons integrated into the panel. The spaceborne touchscreen module integrates a self-starting power supply control device, which includes a single-channel self-locking switch, a first MOSFET group, and a second MOSFET group. The single-channel self-locking switch is a passive mechanical structure with an integrated LED status indicator. A single pair of contacts is connected in parallel to the power control component's power-on circuit, and the LED's on / off state directly reflects the switch's on / off status. The first MOSFET group is jointly controlled by the self-locking switch and a separate self-starting enable switch, forming a self-starting low-current power supply branch for initial power-on. The second MOSFET group is independently controlled by a discharge switch, forming a rated high-current main power supply branch. The working condition initialization and parameter loading module is used to receive the selected test working condition label and load the corresponding self-test parameter set; The command interaction and data acquisition module is used to obtain the operating status parameters of the satellite hardware modules through the satellite service program based on a layered and isolated interaction architecture, while shielding the details of reading and writing the underlying hardware. The status determination and fault tracing module is used to perform compliance determination, anomaly classification marking, physical component tracing and early warning marking based on relative deviation rate calculation and offset trend calculation; The Star Screen Visualization Interaction and Topology Mapping Module is used to call the graphics rendering engine to draw the whole star topology mapping map, and to trigger differentiated display effects and pop up floating fault prompt boxes for nodes when telemetry parameters are abnormal. The structured log generation and export module is used to generate structured self-inspection logs and store them locally, and then convert them into machine-readable code for output and display.

Images