Modular Spacecraft Avionics With Dynamic Processor Failover

Solution Overview

Problem

Spacecraft systems face increased complexity and cost due to the need for redundant sub-systems to handle failures, which add mass and expense without being actively utilized until a primary sub-system fails.

Innovation Solution

A distributed computer system with multiple computer nodes, each controlling different aspects of the spacecraft's mission, utilizes a router processor and programmable processor architecture that allows one processor to take over the functions of another in case of failure, eliminating the need for redundant systems by enabling dynamic task allocation and remote control through high-speed data links.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If redundant sub-systems are included to handle failures, then system reliability is improved, but spacecraft mass and cost increase

Engineering Contradiction:

Improvesystem reliabilityVSAvoidspacecraft mass

Core Design Contradiction:

ReliabilityVSWeight of moving object

Solution Approach 1:

Each computer node is designed with universal capabilities to perform multiple functions. The computer nodes can dynamically assume the roles of failed nodes, allowing any operational node to take over failed functions rather than requiring dedicated redundant hardware for each function.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent merges the functions of primary and redundant sub-systems into a single integrated computer node architecture. Instead of maintaining separate primary and backup hardware, the system combines failover capabilities within the same hardware resources, allowing dynamic role assignment.

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If redundant sub-systems are included to handle failures, then system reliability is improved, but spacecraft cost increases

Engineering Contradiction:

Improvesystem reliabilityVSAvoidspacecraft cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

Each computer node is designed with universal capabilities to perform multiple functions. The computer nodes can dynamically assume the roles of failed nodes, allowing any operational node to take over failed functions rather than requiring dedicated redundant hardware for each function.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent merges the functions of primary and redundant sub-systems into a single integrated computer node architecture. Instead of maintaining separate primary and backup hardware, the system combines failover capabilities within the same hardware resources, allowing dynamic role assignment.

Inventive Principle:

Principle #5Merging (Combining)

3Reliability

If more computer nodes are added to eliminate single points of failure, then system reliability is improved, but device complexity increases

Engineering Contradiction:

Improvesystem reliabilityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system implements dynamic role assignment where computer nodes can change functions based on operational status. The router processor dynamically routes commands to appropriate nodes, and nodes can transition between primary and backup roles without manual intervention or complex reconfiguration.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The computer nodes automatically detect failures and self-organize to maintain system functionality. The router processor and nodes autonomously manage failover without requiring external control, reducing the complexity of manual redundancy management.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS12431961B2Modular architecture avionics

Publication Date: 2025.09.30 LANTERIS SPACE LLC

AI summary

A distributed computer system for a spacecraft is disclosed. The system has multiple computer nodes, each controlling a different aspect of a mission of the spacecraft. Each node includes a control circuit(s) that controls a set of components, a router processor, and a programmable processor. The programmable processor of each respective computer node issue commands to the control circuit(s) of the respective computer node to carry out an aspect of the mission associated with the respective computer node. Upon failure of the programmable processor in a particular computer node, a healthy programmable processor send commands to the router processor in the particular computer node The router processor of the particular computer node routes the commands received from the remote programmable processor to the control circuit(s) in the particular computer node to control the set of components to carry out the aspect of the mission associated with particular computer node.