The invention provides a
satellite-borne control computer and a
safety control method thereof, and relates to the technical field of
satellite-borne equipment. The dual-redundancy FPGA security gateway comprises a dual-CPU hot
backup master control module, a dual-redundancy FPGA security gateway module and a
peripheral module group, wherein the main control module integrates a dual-core
lockstep kernel and an
application processor kernel, and constructs a CPU redundant architecture combining a static
lockstep pool and a dynamic
lockstep pool; the state of the
system is judged in real time by
polling a PMU register and utilizing a health degree fusion
algorithm, and then the ranges of the lock step part and the non-lock step part in the dynamic lock step
pool are dynamically regulated and controlled. Meanwhile, a traditional full-static redundancy mode is broken through, task allocation is carried out according to work importance classification of instructions, and it is ensured that high-critical tasks preferentially obtain lock step redundancy protection; in addition, according to the invention, different
satellite-borne control algorithms are subjected to local analogue
simulation by using an idle kernel, and seamless switching of the satellite-borne control algorithms is realized by using switching between the master CPU and the slave CPU.