The invention relates to the technical field of
spacecraft control, in particular to a
satellite-borne computer on-
orbit software multi-
version management method which comprises the following steps: dividing a storage space in a multi-
version management system into a physical area and a
file system area; the method comprises the following steps: dividing a program of on-
orbit software into a factory program and an updating program, and storing the factory program in a physical area and packaging the factory program into an ROMFS
mirror image file; the updating program is generated through dynamic compiling, the updating program serves as a main program, and a redundant copy is copied to serve as a
backup program to be stored in the
file system area; and judging the starting type of the
satellite-borne computer
system based on the register information, and determining the program loading position of the on-
orbit software according to the starting type. Through the dual
storage structure of the physical area and the
file system area, it is ensured that even if a certain software copy goes wrong,
recovery can still be conducted through a redundant copy, and single-point faults are avoided. The
fault tolerance of the
system is enhanced by adopting CRC (
Cyclic Redundancy Check) and two-out-of-three operation, so that the system can still be recovered and normally started even if a plurality of copies have errors.