Satellite driving simulation method and system capable of verifying satellite flight software on basis of space mission scenario

Abstract

The present invention provides a satellite driving simulation method in which a control command generated by verification target software is received, satellite data associated with the driving of a satellite in a space environment is generated to correspond to the control command, a satellite data model indicating the driving state of the satellite is updated using the satellite data, state data associated with a subsystem of the satellite is generated using the updated satellite data model, and the state data is transmitted to the verification target software to verify the control command.

Description

Satellite operation simulation method and system capable of verifying satellite flight software based on space mission scenarios

[0001] The present invention relates to a satellite operation simulation method and system capable of verifying satellite flight software based on a space mission scenario.

[0002] Failure to successfully complete a satellite mission typically results in significant losses. In particular, once a satellite enters space, maintenance is difficult and additional repairs are virtually impossible. Therefore, satellite simulations are conducted repeatedly, with various experiments performed to ensure optimal launch conditions. To conduct these simulations, scenario-based flight software tailored to the satellite's unique characteristics and mission is being developed and utilized in experiments.

[0003] To verify the algorithms of this flight software, the onboard computer equipped with the flight software is connected to the subsystem hardware of an actual satellite to verify that the recovery procedure is performed as intended in certain situations or error situations.

[0004] Meanwhile, conventional simulators for flight software verification target small- to medium-sized satellites or larger, utilizing customized components or equipped with a control module that connects the satellite to the flight software's central interface. Therefore, conventional simulators for flight software verification are designed to configure interface devices or emulators compatible with each satellite component and connect these to the flight software.

[0005] However, due to the nature of microsatellites, which widely utilize commercial products from various manufacturers, the interfaces and protocols of each component are not unified, and updates are performed individually. Therefore, a simulator is needed to verify flight software that can operate and modify each component independently, adapting to various interfaces and protocols, and allowing multiple connections to operate depending on the specific requirements.

[0006] The present invention relates to a satellite operation simulation method and system that simulates the operation of satellite subsystems and payload hardware according to normal or abnormal mission scenarios in a space environment to enable verification of flight software.

[0007] In addition, the present invention relates to a satellite operation simulation method and system for processing a response to a command or status data so that it corresponds to each subsystem of the satellite when a response to a command or status data is requested from the flight software to each subsystem of the satellite.

[0008] In order to solve the problem discussed above, a satellite operation simulation method according to the present invention may include the steps of: receiving a control command generated from software to be verified; generating satellite data related to the operation of a satellite in a space environment based on the control command so as to simulate a mission scenario in the space environment; updating a satellite data model representing the operation status of the satellite using the satellite data; generating at least one state data related to a subsystem of the satellite using the updated satellite data model; and transmitting the at least one state data to the software to be verified so as to verify the control command.

[0009] A satellite operation simulation system according to the present invention may include a communication unit that receives a control command generated from a software to be verified; and a control unit that generates satellite data related to the operation of a satellite in a space environment based on the control command so as to simulate a mission scenario in a space environment, updates a satellite data model representing the operation status of the satellite using the satellite data, generates at least one status data related to a subsystem of the satellite using the updated satellite data model, and transmits the at least one status data to the software to be verified so as to verify the control command.

[0010] A program stored in a computer-readable recording medium according to the present invention is a program stored in a computer-readable recording medium, which is executed by one or more processes in an electronic device, and which includes instructions for performing the steps of: receiving a control command generated from software to be verified; generating satellite data related to the operation of a satellite in a space environment based on the control command so as to simulate a mission scenario in the space environment; updating a satellite data model representing the operation status of the satellite using the satellite data; generating at least one status data related to a subsystem of the satellite using the updated satellite data model; and transmitting the at least one status data to the software to be verified so as to verify the control command.

[0011] According to various embodiments of the present invention, the satellite operation simulation method and system according to the present invention can verify and check whether the verification target software can operate the satellite according to the intended algorithm by simulating the operations related to the orbit and attitude of the satellite according to a normal or abnormal mission scenario in a space environment.

[0012] Through this, in the present invention, it is possible to verify through simulation whether the control command output from the software to be verified is normally operated.

[0013] More specifically, the satellite operation simulation method and system according to the present invention simulates the operation of satellite subsystems and payload hardware in a space environment based on control commands from the software to be verified, and transmits status data about the satellite to the software to be verified based on the simulation results, thereby enabling verification and examination of whether the flight software can normally operate the satellite subsystems according to the user's intention. The user receives the status data and confirms the simulation results, thereby enabling verification of various operations of the software that runs in a space environment from the ground.

[0014] Figure 1 illustrates a satellite drive simulation system according to the present invention.

[0015] Figure 2 is a flowchart showing a satellite driving simulation method according to the present invention.

[0016] FIGS. 3 and 4 illustrate one embodiment of a plurality of simulators included in a satellite drive simulation system according to the present invention.

[0017] Figure 5 illustrates one embodiment of a process for generating satellite data.

[0018] Figure 6 illustrates one embodiment of a process for updating a satellite data model.

[0019] Figure 7 illustrates one embodiment of a process for generating status data.

[0020] Hereinafter, embodiments disclosed in this specification will be described in detail with reference to the attached drawings. Regardless of the drawing numbers, identical or similar components will be given the same reference numbers, and redundant descriptions thereof will be omitted. The suffixes "module" and "part" used for components in the following description are assigned or used interchangeably only for the convenience of writing the specification, and do not in themselves have distinct meanings or roles. In addition, when describing the embodiments disclosed in this specification, if it is determined that a specific description of a related known technology may obscure the gist of the embodiments disclosed in this specification, a detailed description thereof will be omitted. In addition, the attached drawings are only intended to facilitate easy understanding of the embodiments disclosed in this specification, and the technical ideas disclosed in this specification are not limited by the attached drawings, and should be understood to include all modifications, equivalents, and substitutes included in the spirit and technical scope of the present invention.

[0021] Terms that include ordinal numbers, such as first, second, etc., may be used to describe various components, but the components are not limited by these terms. These terms are used solely to distinguish one component from another.

[0022] When a component is referred to as being "connected" or "connected" to another component, it should be understood that it may be directly connected or connected to that other component, but that there may be other components intervening. Conversely, when a component is referred to as being "directly connected" or "connected" to another component, it should be understood that there are no other components intervening.

[0023] Singular expressions include plural expressions unless the context clearly indicates otherwise.

[0024] In this application, terms such as “include” or “have” are intended to specify the presence of a feature, number, step, operation, component, part or combination thereof described in the specification, but should be understood not to exclude in advance the possibility of the presence or addition of one or more other features, numbers, steps, operations, components, parts or combinations thereof.

[0025] Figure 1 illustrates a satellite drive simulation system according to the present invention.

[0026] Referring to FIG. 1, when a control command generated from the verification target software (10) based on a predetermined space mission scenario is received, the satellite drive simulation system (100) performs a simulation related to a satellite in a space environment, generates satellite data, and updates a satellite data model (111) using the satellite data. Accordingly, the satellite drive simulation system (100) can generate status data using the satellite data model.

[0027] Through this, the satellite drive simulation system (100) can transmit status data to the software to be verified (10) so as to verify the control command received from the software to be verified (10). At this time, the satellite drive simulation system (100) transmitting the status data to the software to be verified (10) may be transmitting a response to the control command received from the software to be verified (10).

[0028] Here, satellite data may include information related to the satellite's operation (e.g., changes in orbit and attitude). For example, satellite data may include changes in solar panel deployment, battery charging progress, and panel angle changes.

[0029] A satellite data model can be implemented to represent the operational status of a satellite or at least one subsystem constituting the satellite. In other words, the satellite data model can be implemented to represent the results of the operation of a satellite or at least one subsystem based on satellite data.

[0030] Status data may include information related to the status of multiple subsystems and payloads that make up the satellite. For example, status data may include responses to control commands, power generation, power consumption, and battery temperature.

[0031] Meanwhile, the software to be verified (10) may be software that requires verification, such as whether the procedure performed according to a command based on a predetermined space mission scenario normally corresponds to the intent of the command.

[0032] At this time, the given space mission scenario may include a normal mission scenario planned according to the design purpose of the satellite and an abnormal mission scenario arising from a sudden situation in the space environment.

[0033] In addition, verification of the software to be verified (10) can be performed by inputting a control command generated in the software to be verified (10) into the satellite drive simulation system (100) and outputting status data corresponding to the control command, and then the software to be verified (10) receives the status data and compares the received status data with the control command.

[0034] For example, the software to be verified (10) may be flight software implemented to control a satellite. In this case, the flight software may generate control commands for the satellite, such as deploying solar panels, starting payload photography, switching on / off, and requesting battery temperature values, and may be implemented to receive, in response, a response (Ack, Acknowledge Character) to the control commands and status data, such as battery temperature values, from the satellite.

[0035] As such, the software to be verified (10) may be implemented to be mounted on a satellite driving simulation system (100) and transmit and receive data within a single system, or the software to be verified (10) may be mounted on a separate terminal and implemented to transmit and receive data through a wired or wireless network between the satellite driving simulation system (100) and the terminal.

[0036] Additionally, depending on the embodiment, the software to be verified (10) may be included in an onboard computer (or system) that can be installed on a satellite. In this case, the satellite drive simulation system (100) may be implemented to correspond to multiple subsystems and payloads of the satellite connected to the onboard computer.

[0037] That is, the satellite drive simulation system (100) may include a plurality of modules implemented for each payload and a plurality of subsystems of the satellite connected to the onboard computer, and each module may simulate the drive of a plurality of different subsystems and payloads connected to the onboard computer.

[0038] Through this, the satellite drive simulation system (100) can verify whether the software to be verified (10) operates normally on hardware implemented by simulating an actual satellite onboard computer, in addition to software verification of the software to be verified (10).

[0039] For this purpose, the satellite drive simulation system (100) may include a storage unit (110), a communication unit (130), and a control unit (150).

[0040] The storage unit (110) can store data and commands required for the operation of the satellite drive simulation system (100). For example, the storage unit (110) can store a satellite data model (111) indicating the operation status of the satellite.

[0041] The communication unit (130) can be connected to a terminal equipped with the software to be verified (10) via a wired or wireless network. Accordingly, the control unit (150) can receive control commands generated by the software to be verified (10) and transmit status data to the software to be verified (10) via the communication unit (130). However, the communication unit (130) may be omitted when the software to be verified (10) is equipped in the satellite drive simulation system (100).

[0042] Alternatively, the control unit (150) may receive control commands and status data generated from the software to be verified (10) through the communication unit (130) when the software to be verified (10) is included in an onboard computer that can be loaded onto a satellite.

[0043] Additionally, the communication unit (130) may receive status data from multiple subsystems and payloads of the satellite connected to the onboard computer.

[0044] The control unit (150) can control the overall operation of the satellite drive simulation system (100) according to the present invention. For example, when a control command generated from the verification target software (10) is received, the control unit (150) can perform a simulation related to a satellite in a space environment, generate satellite data, and use the same to update the satellite data model (111).

[0045] In addition, the control unit (150) may receive control commands and status data from the software to be verified (10) and use these to perform verification on the software to be verified (10). Alternatively, the control unit (150) may receive control commands from the software to be verified (10), receive status data from multiple subsystems and payloads of the satellite connected to the onboard computer, and use these to perform verification on the software to be verified (10).

[0046] Meanwhile, the satellite driving simulation system (100) may be implemented to be provided through user terminals such as tablets, personal computers, and smart phones, and for example, the satellite driving simulation system (100) may be provided in the form of an application or software, or may be provided on a web page.

[0047] Through the above configurations, the satellite operation simulation system (100) according to the present invention can verify and check whether the flight software can operate the components mounted on the micro-satellite according to the intended algorithm by simulating the operation of the satellite's sub-system and payload hardware in a space environment.

[0048] Based on the configuration of the satellite drive simulation system (100) discussed above, the satellite drive simulation method will be described in more detail below.

[0049] Figure 2 is a flowchart illustrating a satellite drive simulation method according to the present invention. Figures 3 and 4 illustrate one embodiment of a plurality of simulators included in a satellite drive simulation system according to the present invention. Figure 5 illustrates one embodiment of a process for generating satellite data. Figure 6 illustrates one embodiment of a process for updating a satellite data model. Figure 7 illustrates one embodiment of a process for generating status data.

[0050] Referring to FIG. 2, when a control command generated from the verification target software (10) is received (S100), the satellite drive simulation system (100) according to the present invention can generate satellite data related to the drive of a satellite in a space environment based on the control command so as to simulate a mission scenario in a space environment (S200).

[0051] In this regard, referring to FIG. 3, the satellite operation simulation system (100) may include a first simulator module (151), a second simulator module (152), and a third simulator module (153). Accordingly, the first simulator module (151) generates satellite data related to the operation of a satellite in a space environment in response to a control command, the second simulator module (152) updates a satellite data model (111) indicating the operation status of the satellite using the satellite data, and the third simulator module (153) may generate at least one status data related to a subsystem of the satellite using the updated satellite data model (111).

[0052] Referring to FIG. 4, for example, the first simulator module (151) is a space dynamics simulator module that can generate satellite data by simulating the operation of a satellite (e.g., orbit and attitude) in a space environment. The second simulator module (152) is a satellite data model simulator module that can manage the operation status of a satellite data model based on satellite data. The third simulator module (153) is a subsystem simulator module that can generate status data by simulating a plurality of subsystems constituting a satellite (e.g., attitude control module, power system module, communication system module, and payload module).

[0053] Meanwhile, the first simulator module (151), the second simulator module (152), and the third simulator module (153) described above conceptually divide the satellite drive simulation system (100), and the satellite drive simulation system (100) can be implemented to include the physically independent first simulator module (151), the second simulator module (152), and the third simulator module (153), but two or more of the first simulator module (151), the second simulator module (152), and the third simulator module (153) can also be implemented in an integrated form.

[0054] Accordingly, when a control command is received from the software to be verified (10), the third simulator module (153) can convert the control command based on a preset command set corresponding to a plurality of subsystems constituting the satellite.

[0055] Here, the command set may include a matching relationship between commands used in the software to be verified (10) and commands used in the satellite drive simulation system (100). That is, the satellite drive simulation system (100) may use the command set to convert commands used in the software to be verified (10) into commands used in the satellite drive simulation system (100).

[0056] In this regard, a plurality of command sets may be provided to correspond to each of the plurality of components constituting the satellite, and at this time, the satellite may be a satellite to be controlled through the software to be verified (10). That is, the software to be verified (10) may generate control commands through different commands so as to be compatible with each of the plurality of components of the satellite to be controlled. Accordingly, the satellite drive simulation system (100) may utilize the command sets to process the control commands generated through different commands.

[0057] Through the above configurations, the satellite drive simulation system (100) can smoothly process control commands for different components constituting the satellite by converting control commands of the verification target software (10) provided through different interfaces and protocols.

[0058] In this regard, the satellite drive simulation system (100) may include multiple independent hardware pieces for each satellite subsystem connected to an onboard computer. In this case, the onboard computer may be equipped with the software to be verified (10).

[0059] In this case, each of the plurality of hardwares included in the satellite drive simulation system (100) can be connected to an onboard computer via a satellite communication interface, and at least one of a first simulator module, a second simulator module, and a third simulator module corresponding to each hardware can be included.

[0060] For example, among the subsystems of the satellite, specific hardware equipped to correspond to a solar panel may include at least one of a first simulator module, a second simulator module, and a third simulator module implemented to simulate the operation of a solar panel in response to a control command from the software to be verified (10).

[0061] Accordingly, when the satellite drive simulation system (100) receives a control command generated from the software to be verified (10), it can check the type of subsystem corresponding to the control command and process the control command based on the verification result.

[0062] That is, based on the confirmation result for the control command, the satellite drive simulation system (100) processes the control command using at least one of the first simulator module, the second simulator module, and the third simulator module when the type of the subsystem corresponding to the control command and the type of the subsystem corresponding to at least one of the first simulator module, the second simulator module, and the third simulator module mounted on the hardware that received the control command are the same, and when the types of the subsystems are different, the control command can be ignored or removed.

[0063] Furthermore, when a control command is received, the third simulator module (153) generates a detailed control command related to one or more subsystems among the plurality of subsystems constituting the satellite in response to the control command by considering the satellite data model (111), and the second simulator module (152) can transmit the satellite data model (111) and the detailed control command to the third simulator module (153).

[0064] Here, the detailed control command may be a driving command for each subsystem that is required to be driven according to the control command.

[0065] Additionally, the third simulator module (153) may include a plurality of subsystem modules (154). At this time, each subsystem module (154) may simulate the operation of each of the plurality of subsystems constituting the satellite.

[0066] Through this, each subsystem module (154) can generate at least one of detailed control commands and status data to correspond to the control command by considering the satellite data model (111).

[0067] Additionally, the first simulator module (151) can simulate the operation of one or more subsystems in a space environment according to a satellite data model (111) and detailed control commands, thereby generating satellite data corresponding to the control commands.

[0068] Referring to FIG. 5, for example, when a deployment command for a solar panel is received as a control command, the third simulator module (153) can generate a deployment command for the solar panel as a detailed control command related to a subsystem for attitude control, taking into account the deployment state of the solar panel according to the satellite data model (111).

[0069] Accordingly, the second simulator module (152) transmits the satellite data model (111) and detailed control commands to the first simulator module (151), and the first simulator module (151) can simulate the operation of a satellite deploying a solar panel in a space environment based on the satellite data model (111) and the deployment command for the solar panel. Through this, the first simulator module (151) can generate satellite data for deploying the solar panel.

[0070] As another example, when a command to start shooting for a payload is received as a control command, the satellite drive simulation system (100) can check whether shooting is possible and the shooting status according to the satellite data model (111). At this time, the satellite drive simulation system (100) can generate a shooting start command for the payload as a detailed control command based on the confirmed shooting possibility and shooting status and the control command. Accordingly, the satellite drive simulation system (100) can perform a simulation for starting the shooting of the satellite's payload in a space environment based on the shooting start command for the payload. Through this, the satellite drive simulation system (100) can generate satellite data for the start of shooting.

[0071] Through the above configurations, the satellite operation simulation system (100) can verify and check whether the verification target software (10) can operate the satellite according to the intended algorithm by simulating the operations related to the orbit and attitude of the satellite in the space environment.

[0072] Furthermore, the first simulator module (151) can generate satellite data corresponding to a user command when a user command indicating an event for a change in at least one of the satellite and space environment is input.

[0073] Here, the user command may be a command that generates an event related to a failure of a component constituting the satellite, a change in the space environment, etc. In other words, the event specified by the user may indicate a failure of a component constituting the satellite, a change in the space environment, etc.

[0074] Accordingly, when a user command is input, the third simulator module (153) can generate detailed control commands related to one or more subsystems among the plurality of subsystems constituting the satellite in response to the user command by considering the satellite data model (111).

[0075] Accordingly, the second simulator module (152) transmits the satellite data model (111) and detailed control commands to the third simulator module (153), and the first simulator module (151) can generate satellite data corresponding to a user command by performing a simulation of changes in at least one of the satellite and space environment according to the satellite data model (111) and detailed control commands.

[0076] Furthermore, after the satellite data model (111) is updated based on an event according to a user command, the second simulator module (152) can generate a detailed control command for the operation of the satellite by considering the satellite data model (111) to which the above event is applied when a control command is received from the software to be verified (10).

[0077] Through this, the first simulator module (151) can generate satellite data corresponding to a control command in an event situation.

[0078] Through the above configurations, the satellite operation simulation system (100) can verify and check whether the verification target software (10) can operate the satellite according to the intended algorithm under various conditions by simulating specific events or error situations for the space environment and satellite.

[0079] Referring again to FIG. 2, the satellite drive simulation system (100) can update a satellite data model indicating the operation status of the satellite using satellite data (S300).

[0080] Specifically, when satellite data is generated by the first simulator module (151), the second simulator module (152) can update the satellite data model (111) using the satellite data.

[0081] Referring to FIG. 6, for example, the satellite drive simulation system (100) may store a satellite data model (111) in a pre-provisioned shared memory (110a). Accordingly, when satellite data is generated by the first simulator module (151), the second simulator module (152) may use the generated satellite data to update the satellite data model (111) stored in the shared memory (110a).

[0082] At this time, the shared memory (110a) can be implemented so that access is permitted to at least one of the first simulator module (151), the second simulator module (152), and the third simulator module (153).

[0083] As another example, when satellite data on solar panel deployment is generated by the first simulator module (151), the second simulator module (152) can use the satellite data on solar panel deployment to update the satellite data model (111) to indicate the status of the satellite's solar panel deployment.

[0084] As another example, when satellite data for the start of shooting is generated, the satellite driving simulation system (100) can update the satellite data model (111) to indicate the status of ongoing shooting for the payload using the satellite data for the start of shooting.

[0085] Referring again to FIG. 2, the satellite drive simulation system (100) can generate at least one state data related to a subsystem of the satellite using the updated satellite data model (111) (S400) and transmit at least one state data to the verification target software (10) to verify the control command (S500).

[0086] Specifically, the third simulator module (153) can identify at least one subsystem among a plurality of subsystems constituting the satellite that is requested to respond in response to a control command (or user command).

[0087] Accordingly, the third simulator module (153) can generate at least one state data corresponding to at least one subsystem identified previously using the previously updated satellite data model (111).

[0088] Referring to FIG. 7, for example, the second subsystem module (154b) can generate status data corresponding to the second subsystem among the multiple subsystems constituting the satellite using the satellite data model (111). Accordingly, the satellite drive simulation system (100) can transmit the status data generated by the second subsystem module (154b) to the verification target software (10).

[0089] As another example, the third simulator module (153) may be configured to receive a deployment command for a solar panel as a control command, and at least one subsystem that is requested to respond in response to the control command may be identified as a subsystem module related to attitude control and a subsystem module related to a power system.

[0090] In this case, the subsystem module related to attitude control can generate status data to indicate a deployment completion response for the solar panel in response to a control command, and the subsystem module related to the power system can generate status data to indicate the amount of power generated according to the deployment of the solar panel in response to the control command.

[0091] As another example, when a command to start shooting for a payload is received as a control command in the satellite drive simulation system (100), a subsystem module related to the payload can be identified as at least one subsystem that is requested to respond in response to the control command.

[0092] In such cases, the subsystem module associated with the payload may generate status data to indicate a start / complete response for the payload in response to the control command.

[0093] Furthermore, the satellite drive simulation system (100) can transmit at least one state data to the verification target software (10) when at least one state data is generated by the third simulator module (153).

[0094] At this time, the satellite drive simulation system (100) can convert at least one state data using a command set corresponding to the software to be verified (10). For example, the satellite drive simulation system (100) can reverse convert the state data using a command set used in the process of converting the control command.

[0095] Through the above configurations, the satellite drive simulation system (100) according to the present invention simulates the operation of the satellite's subsystems and payload hardware in a space environment based on control commands from the verification target software (10), and transmits status data about the satellite to the verification target software (10) according to the simulation result, thereby confirming and checking whether the flight software can normally drive the satellite's subsystems according to the user's intention.

[0096] Furthermore, the present invention discussed above can be implemented as computer-readable code or instructions on a program-recorded medium. That is, the various control methods according to the present invention can be provided in the form of programs, either integrated or individually.

[0097] Meanwhile, computer-readable media include all types of recording devices that store data that can be read by a computer system. Examples of computer-readable media include hard disk drives (HDDs), solid-state disk drives (SSDs), silicon disk drives (SDDs), ROMs, RAMs, CD-ROMs, magnetic tapes, floppy disks, and optical data storage devices.

[0098] Furthermore, the computer-readable medium may include a storage device and may be a server or cloud storage device accessible via communication. In this case, the computer may download the program according to the present invention from the server or cloud storage device via wired or wireless communication.

[0099] Furthermore, in the present invention, the computer described above is an electronic device equipped with a processor, i.e., a CPU (Central Processing Unit), and there is no particular limitation on its type.

[0100] Meanwhile, the above detailed description should not be construed as limiting in any respect and should be considered illustrative. The scope of the present invention should be determined by a reasonable interpretation of the appended claims, and all modifications within the equivalent scope of the present invention are intended to be included within the scope of the present invention.

Claims

1. A step of receiving a control command generated from the software to be verified; A step of generating satellite data related to the operation of a satellite in a space environment based on the control command to simulate a mission scenario in a space environment; A step of updating a satellite data model indicating the operation status of the satellite using the satellite data; A step of generating at least one state data related to a subsystem of the satellite using the updated satellite data model; and A satellite drive simulation method comprising the step of transmitting at least one state data to the verification target software to verify the control command.

2. In paragraph 1, A satellite operation simulation method further comprising the step of generating satellite data corresponding to a user command when a user command indicating an event for a change in at least one of a satellite and a space environment is input.

3. In the second paragraph, the step of generating satellite data corresponding to the user command is: A step of generating a detailed control command related to one or more subsystems among a plurality of subsystems constituting a satellite in response to the user command by considering the satellite data model; and A satellite operation simulation method, comprising the step of generating satellite data related to changes in at least one of the satellite and the space environment based on the satellite data model and the detailed control command.

4. In the third paragraph, the step of generating satellite data related to the operation of the satellite in the space environment is as follows: A satellite operation simulation method, wherein after the satellite data model is updated based on an event according to the user command, when a control command is received from the software to be verified, the satellite data related to the operation of the satellite is generated by considering the satellite data model to which the event is applied.

5. In the first paragraph, the step of generating satellite data related to the operation of the satellite in the space environment is as follows: A satellite driving simulation method, comprising the step of converting the control command based on a preset command set corresponding to a plurality of subsystems constituting the satellite when the control command is received.

6. In the first paragraph, the step of generating satellite data related to the operation of the satellite in the space environment is as follows: A step of generating a detailed control command related to one or more subsystems among a plurality of subsystems constituting the satellite, in response to the control command, taking into account the satellite data model; and A satellite operation simulation method comprising the step of generating satellite data related to operation of the one or more subsystems using the satellite data model and the detailed control command.

7. In the first paragraph, the step of generating at least one state data related to the subsystem of the satellite, A step of identifying at least one subsystem among a plurality of subsystems constituting the satellite that is requested to respond in response to the control command; and A satellite operation simulation method comprising the step of generating at least one state data corresponding to at least one identified subsystem using the updated satellite data model.

8. In the first paragraph, the step of receiving the control command comprises: A satellite drive simulation method comprising a step of checking the type of subsystem corresponding to the above control command and processing the control command based on the result of the checking.

9. A communication unit that receives control commands generated from the software to be verified; and A satellite operation simulation system comprising a control unit that generates satellite data related to the operation of a satellite in a space environment based on the control command to simulate a mission scenario in a space environment, updates a satellite data model representing the operation status of the satellite using the satellite data, generates at least one status data related to a subsystem of the satellite using the updated satellite data model, and transmits the at least one status data to the verification target software to verify the control command.

10. A program that is executed by one or more processes in an electronic device and stored in a computer-readable recording medium, The above program is, A step of receiving a control command generated from the software to be verified; A step of generating satellite data related to the operation of a satellite in a space environment based on the control command to simulate a mission scenario in a space environment; A step of updating a satellite data model indicating the operation status of the satellite using the satellite data; A step of generating at least one state data related to a subsystem of the satellite using the updated satellite data model; and A program stored on a computer-readable recording medium, characterized in that it includes commands for causing the verification target software to perform a step of transmitting the at least one state data to verify the control command.

Images