CN106649173A - High-reliability in-orbit self-correction system and method for on-board computer on the basis of 1553B bus - Google Patents
High-reliability in-orbit self-correction system and method for on-board computer on the basis of 1553B bus Download PDFInfo
- Publication number
- CN106649173A CN106649173A CN201610886133.2A CN201610886133A CN106649173A CN 106649173 A CN106649173 A CN 106649173A CN 201610886133 A CN201610886133 A CN 201610886133A CN 106649173 A CN106649173 A CN 106649173A
- Authority
- CN
- China
- Prior art keywords
- spaceborne computer
- page
- backup
- address
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
- G06F13/38—Information transfer, e.g. on bus
- G06F13/40—Bus structure
- G06F13/4063—Device-to-bus coupling
- G06F13/4068—Electrical coupling
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/14—Error detection or correction of the data by redundancy in operation
- G06F11/1402—Saving, restoring, recovering or retrying
- G06F11/1446—Point-in-time backing up or restoration of persistent data
Abstract
The invention relates to a high-reliability in-orbit self-correction system and method for an on-board computer on the basis of a 1553B bus. The method comprises the following steps of: S1: the EEPROM (Electrically Erasable Programmable Read - Only Memory) of each on-board computer adopts a triple piece redundancy structure, i.e. the EEPROM comprises three code backup areas, and the same on-board software target code independently stored in each code backup area is subjected to the two-out-of-three cycle check of each page by aiming at a first on-board computer; S2: after the cycle check is finished, the on-board computer carries out independent diagnosis according to a checking result; and S3: the on-board computer transmits an independent diagnosis result to a backup second on-board computer through the 1553B bus, and carries out processing according to a response reply. By use of the method, the self-recovery operation of a satellite is realized through the cycle check, automatic diagnosis and automatic repairing on a premise that resetting is not carried out and a satellite task is not affected by aiming at each type of single event upset generated by the EEPROM of the on-board computer, and the method does not depend on ground telemetry and telecommand and has the advantages of being high in fault-tolerant capability, flexible in design, high in adaptability, good in instantaneity, high in safety and high in reliability.
Description
Technical field
The present invention relates to a kind of in-orbit self-correction system and method for spaceborne computer, specifically refers to a kind of total based on 1553B
The in-orbit self-correction system and method for highly reliable spaceborne computer of line, belongs to safety satellite fault-toleranr technique.
Background technology
Due to the complexity of space applied environment, the electronic device in spacecraft is often affected by single particle effect,
Different degrees of failure is caused to satellite function.Due to EEPROM (Electrically Erasable Programmable
Read-Only Memory, EEPROM) it is the modifiable read-only storage of user, and store after power-off
Data will not lose, therefore be largely used to space industry.Spaceborne computer is the core electron equipment on satellite, once
There is single-particle inversion in EEPROM, if On-board software abnormal race occurs and flies or reset, will directly affect the normal operation of satellite,
Even to the consequence of bringing on a disaster property of satellite.For long-life highly reliable satellite, it is necessary to consider the protection to single-particle inversion
Measure.
Existing fault-toleranr technique mainly improves radiation resistance by hardware Radiation hardening technology, but cannot avoid list
The generation of particle upset, it is impossible to by the out of order generation of function automatic detection of On-board software itself, it is impossible to sent out according to failure
Raw state is repaired automatically makes satellite transit unaffected.
The content of the invention
It is an object of the invention to provide a kind of highly reliable spaceborne computer based on 1553B buses is in-orbit to review one's lessons by oneself positive system
And method, the self- recoverage for realizing satellite by circular test, automatically diagnosis and automatic repair function runs, without the need for relying on ground
Observing and controlling, fault-tolerant ability is high, and flexible design, strong adaptability, real-time is good, safe, and reliability is high.
In order to achieve the above object, a kind of highly reliable spaceborne computer based on 1553B buses of present invention offer is in-orbit certainly
, there are various types of single-particle inversions in update the system, diagnosis automatically and reparation automatically are carried out in real time for EEPROM；Comprising：
1533B buses, with the first redundant bus and the second redundant bus；Bus control unit, respectively with the first described redundant bus
With the connection of the second redundant bus；Mutually redundant first spaceborne computer and the second spaceborne computer, respectively with described first
Redundant bus and the second redundant bus connect, and the agreement formulated by 1553B buses is carried out data transmission with bus control unit.
The memory block of each spaceborne computer includes EEPROM, using three redundancy structures, i.e., comprising three backup codes
Region, each a complete On-board software object code of backup code region storage, for carrying out two from three inspection diagnosis.
The present invention also provides that a kind of highly reliable spaceborne computer based on 1553B buses is in-orbit to review one's lessons by oneself correction method, comprising with
Lower step：
S1, the EEPROM of each spaceborne computer adopt three redundancy structures, i.e., comprising three backup code regions；Pin
To the first spaceborne computer, to being respectively stored in each backup code region in identical On-board software object code carry out each
The two from three circular test of the page；
After S2, circular test terminate, spaceborne computer is independently diagnosed according to inspection result；
S3, spaceborne computer are transmitted autonomous diagnostic result by 1553B buses to the second spaceborne computer of backup, and
Processed according to response reply.
In described S1, specifically comprise the steps of：
S11, first code backup region, the second code backup area taken out respectively in the EEPROM of the first spaceborne computer
The first page in domain and third generation code backup region initializes the array of current revised pages as current revised pages；
S12, two from three inspection diagnosis is carried out to the current revised pages of page three；If two from three in this page three current revised pages
Inspection result is consistent for data two-by-two, then continue to carry out the lower one page in three backup code regions two from three inspection diagnosis,
Until completing the two from three inspection diagnosis of all pages；If the inspection result of two from three is for two-by-two in this page three current revised pages
Data are inconsistent, then judge abnormal, continue executing with subsequent step；
If two from three inspection result is that single page is inconsistent in S13, this page three current revised pages, i.e., page three current revised pages
In, the data of certain address are consistent in certain page two wherein, inconsistent with page three, then misregistration type, and judge ground
Whether arrange is to allow selfreparing；In this way, then according to the data of two identical correct address complete to the inconsistent page from
Repair；If not, will pass under the address of mistake and data telemetry, Ground analysis are waited to process；
If two from three inspection result is inconsistent for data two-by-two in S14, this page three current revised pages, misregistration
Type, the corresponding data in mistake address and wrong address, accumulating error number counter.
In described S2, specifically comprise the steps of：
If S21, errors number counter are equal to 0, two from three inspection result is normal, puts diagnostic state mark normally,
The content of the diagnostic result bag comprising wrong address, the corresponding data in mistake address and errors number is set to 0, and and the school that calculates
Test and send to the second spaceborne computer of backup；
If S22, errors number counter are more than 0, two from three inspection result exception puts diagnostic state mark exception,
To include the diagnostic result bag of wrong address, the corresponding data in mistake address and errors number, and the verification that calculates and send to
Second spaceborne computer of backup, and wait reply response bag.
In described S3, specifically comprise the steps of：
S31, the second spaceborne computer of backup receive diagnostic result bag, and diagnostic result is analyzed, if diagnosis shape
State mark is abnormal, then the page corresponding with wrong address that three backup code regions in the second spaceborne computer are stored is entered
Row two from three is checked；As two from three checks that inspection result is consistent two-by-two, then put and can repair mark, put wrong address and mistakenly
The corresponding correct data in location is sent to the first spaceborne computer as reply response bag；As two from three checks inspection result not
Unanimously, then unrepairable mark is put as reply response bag, and send to the first spaceborne computer；
S32, the first spaceborne computer receive reply response bag, judge to repair mark；If mark can be repaired, continue to hold
Row S33；If unrepairable mark, then will pass under diagnostic result bag remote measurement, wait Ground analysis to process；
Whether S33, to judge that ground is arranged be to allow selfreparing；In this way, then read reply response bag in wrong address and
The corresponding correct data in mistake address, and selfreparing is carried out to the corresponding addresses of EEPROM in the first spaceborne computer, write is just
Exact figures evidence；If not, will pass under diagnostic result bag remote measurement, Ground analysis are waited to process.
In sum, the present invention provide the highly reliable spaceborne computer based on 1553B buses it is in-orbit review one's lessons by oneself positive system and
Method, the self- recoverage for realizing satellite by circular test, automatically diagnosis and automatic repair function runs, and surveys without the need for relying on ground
Control；Be a kind of On-board software it is long-term in orbit when, the various types of single-particles occurred for spaceborne computer EEPROM are turned over
Turn, do not resetting and completing the technology of diagnosis and automatic repair function automatically on the premise of not affecting satellite task；Fault-tolerant ability
Height, flexible design, strong adaptability, real-time is good, safe, and reliability is high.
Description of the drawings
Fig. 1 is that the in-orbit structure for reviewing one's lessons by oneself positive system of the highly reliable spaceborne computer based on 1553B buses in the present invention is shown
It is intended to；
Fig. 2 is the in-orbit flow chart for reviewing one's lessons by oneself correction method of the highly reliable spaceborne computer based on 1553B buses in the present invention；
Fig. 3 is the flow chart of the two from three inspection method in the present invention；
Fig. 4 is the data flow of the 1553B bus transfers in the present invention.
Specific embodiment
Below in conjunction with Fig. 1～Fig. 4, a preferred embodiment of the present invention is described in detail.
As shown in figure 1, the in-orbit self-correction system of the highly reliable spaceborne computer based on 1553B buses provided for the present invention
System, for On-board software it is long-term in orbit when, there are various types of single-particle inversions for EEPROM, carry out in real time automatically
Diagnosis and automatically reparation, and do not interrupt the current task of satellite；Comprising：1533B buses, with the first redundant bus A and second
Redundant bus B；Bus control unit BC, is connected respectively with described the first redundant bus A and the second redundant bus B；Two spaceborne
Computer (remote terminal RT), comprising the spaceborne computer A machines and spaceborne computer B machines shown in Fig. 1 in the present embodiment, and mutually
For backup, be connected with described the first redundant bus A and the second redundant bus B respectively, the agreement formulated by 1553B buses and
Bus control unit BC carries out data transmission.
Wherein, the memory block of each spaceborne computer includes：EEPROM, using three redundancy structures, i.e., comprising three generations
Code backup region, each backup code region is deposited 1 part of complete On-board software object code, is examined for carrying out two from three inspection
It is disconnected；PROM (programmable read-only memory, Programmable Read-Only Memory), it is initial for carrying out after upper electricity
Change, and run startup program；SRAM (static RAM, Static Random Access Memory), is spaceborne
Running software region.
As shown in Fig. 2 reviewing one's lessons by oneself pros for the highly reliable spaceborne computer based on 1553B buses for providing of the invention is in-orbit
Method, comprises the steps of：
S1, the EEPROM of each spaceborne computer adopt three redundancy structures, i.e., comprising three backup code regions；Pin
To the first spaceborne computer A, to being respectively stored in each backup code region in identical On-board software object code carry out often
The two from three circular test of the individual page；
After S2, circular test terminate, spaceborne computer is independently diagnosed according to inspection result；
S3, spaceborne computer are transmitted autonomous diagnostic result by 1553B buses to the second spaceborne computer B of backup,
And processed according to response reply.
In described S1, specifically comprise the steps of：
S11, first code backup region A, the second code backup taken out respectively in the EEPROM of the first spaceborne computer A
The first page (page number PageNum is 1) of region B and third generation code backup region C is initialized current as current revised pages
The array of revised pages；
S12, two from three inspection diagnosis is carried out to the current revised pages of page three；If two from three in this page three current revised pages
Inspection result is consistent for data two-by-two, then continue the lower one page to three backup code regions (three backup code region A,
Page number PageNum of B, C adds up and 1) carries out two from three inspection diagnosis, until the two from three inspection for completing all pages is examined
It is disconnected；If the inspection result of two from three is inconsistent for data two-by-two in this page three current revised pages, judge abnormal, continue to hold
Row subsequent step；
In the present embodiment, each backup code region of the EEPROM of spaceborne computer is 512K bytes, and per page is 512 words
Section, a total of 1024 pages.Therefore, spaceborne computer needs to be circulated inspection to page 1～page 1024, to three codes
Every one page in backup region carries out two from three inspection diagnosis, and the Different Results obtained according to inspection, accordingly performs subsequent step,
Complete self-repair procedure.
If S13, as shown in figure 3, in this page three current revised pages two from three inspection result be single page it is inconsistent, i.e., page three
In current revised pages, the data of certain address are consistent in certain page two wherein, inconsistent with page three, then misregistration type
, and whether judge that ground is arranged be to allow selfreparing (ErrType)；In this way, then according to the data of two identical correct address
Complete the selfreparing to the inconsistent page；If not, will pass under the address of mistake and data telemetry, Ground analysis are waited to process；
Because the write number of times of EEPROM is that have the restriction of 10,000 times, it is therefore desirable to set selfreparing switch (i.e. ground
Whether arrange is to allow selfreparing), chosen whether according to demand to start self-repair function by ground.
If S14, as shown in figure 3, two from three inspection result is inconsistent for data two-by-two in this page three current revised pages,
Then misregistration type (ErrType), the corresponding data (ErrData) of mistake address (ErrAddress) and wrong address, tire out
Plus errors number counter (ErrCnt).
In the present embodiment, as shown in figure 3, it is consistent two-by-two to work as two from three result in the current revised pages of page three, mistake is put
Type ErrType is 0x9999；When two from three result is that third generation code backup region C single pages are inconsistent, type of error is put
ErrType is 0x1111；When two from three result is that second code backup region B single pages are inconsistent, putting type of error ErrType is
0x3333；When two from three result is that first code backup region A single pages are inconsistent, type of error ErrType is put for 0x5555；When
Two from three result is inconsistent two-by-two, puts type of error ErrType for 0x7777.
In described S2, specifically comprise the steps of：
If S21, errors number counter ErrCnt=0, two from three inspection result is normal, puts diagnostic state and identifies just
Often, the content of the diagnostic result bag comprising wrong address, the corresponding data in mistake address and errors number is set to 0, and and is calculated
Verification and send to backup the second spaceborne computer B；
If S22, errors number counter ErrCnt>0, then two from three inspection result exception, puts diagnostic state mark different
Often, by the diagnostic result bag comprising wrong address, the corresponding data in mistake address and errors number, and the verification and transmission of calculating
To the second spaceborne computer B of backup, and wait reply response bag.
In described S3, specifically comprise the steps of：
S31, the second spaceborne computer B of backup receive diagnostic result bag, and diagnostic result is analyzed, if diagnosis shape
State mark is abnormal, then the page corresponding with wrong address for being stored to three backup code regions in the second spaceborne computer B
Carry out two from three inspection；As two from three checks that inspection result is consistent two-by-two, then putting can repair mark, put wrong address
Corresponding correct data CorrDate of ErrAddress and wrong address is sent to the first spaceborne calculating as reply response bag
Machine A；As two from three checks that inspection result is inconsistent, then unrepairable mark is put as reply response bag, and send to the first star
Carry computer A；
S32, the first spaceborne computer A receive reply response bag, judge to repair mark；If mark can be repaired, continue
Perform S33；If unrepairable mark, then will pass under diagnostic result bag remote measurement, wait Ground analysis to process；
Whether S33, to judge that ground is arranged be to allow selfreparing；In this way, then the wrong address replied in response bag is read
Corresponding correct data CorrData of ErrAddress and wrong address, and it is corresponding to EEPROM in the first spaceborne computer A
Address carries out selfreparing, writes correct data；If not, will pass under diagnostic result bag remote measurement, Ground analysis are waited to process.
Now need also exist for setting selfreparing switch (whether it is to allow selfreparing that i.e. ground is arranged), by ground according to demand
Choose whether to start self-repair function.
The in-orbit self-correction system and method for the highly reliable spaceborne computer based on 1553B buses that the present invention is provided, adopt
Spaceborne computer A, B machine dual-host backup redundancy, two from three mechanism and bus dual redundant structure, once break down, can be certainly
Main detection is out of order and switches to backup machine and works.Pass through 1553B bus transfer diagnostic results between spaceborne computer A, B two-shipper
Bag is replied in bag and response, and reliability is high.
As shown in figure 4, being the data flow of the 1553B bus transfers of the present invention.1553B bus marco rules are taken static total
Line traffic control, the bus control unit that only one of which is fixed realizes the control to 1553B buses, spaceborne computer A and spaceborne computer B
Between pass through RT->The mode of RT is transmitted.1553B data transfers are combined using service request mechanism, i.e. status word and vector font
Mode work.Remote terminal is asked by the service request bit in bus state word come mark data transmission, by vector font
The data type of identification request transmission is carried out in position.Remote terminal once gets out data or acquisition request class in transmission buffering area
During data, by relevant position 1 in vector font；After data are taken away or send data by bus control unit, then by phase in vector font
The position 0 answered；Bus control unit periodically organizes bus communication, and remote terminal is when receiving " transmission status word " mode and instructing
Vector font is checked, once finding the vector font of this terminal more than 0, remote terminal should be by the service request position in bus state word
1.The 1553B mode command instructions used in the present invention are：Send status word (00010), send vector font (10000).
According to the bottom basic agreement of 1553B buses, spaceborne computer A and spaceborne computer B in the present invention is formulated and has led to
Cross the high-rise communications protocol of 1553B bus transfers：Bag is replied in diagnostic result bag and response.The diagnostic result bag that wherein the machine sends
Length is defined as 20 bytes, the resultant content comprising two from three diagnosis, specifically includes packet header, diagnostic marker, local state mark
Knowledge, mistake address, the corresponding data in mistake address, errors number and verification and.Bag length is replied in the response of other side's backup machine feedback
Degree is defined as 16 bytes, respectively packet header, repair mark, mistake address, the corresponding correct data in mistake address and verify and.
Because the packet byte number for sending is less than 32 words, therefore by the way of single message interruption.
The in-orbit self-correction system and method for the highly reliable spaceborne computer based on 1553B buses that the present invention is provided, it is and existing
There is technology to compare, with advantages below and beneficial effect：
1 fault-tolerant ability is high；Star load computer hardware adopts multiple duplication, i.e. dual-host backup, two from three mechanism and bus double
Redundancy backup combines, and is capable of achieving by On-board software self-repair function to resist nearly all type on the basis of hardware redundancy
The harm that brings of single-particle inversion, greatly improve the fault-tolerant ability of satellite.
2 flexible designs, strong adaptability；On-board software design selfreparing switch, according to the specific factor of space environment, by ground
Face chooses whether to start self-repair function according to demand, and flexible working mode is changeable, to adapt to the service life of EEPROM.
3 real-times are good, safe；On-board software in orbit when, once EEPROM is overturned by single-particle inversion, can
Repair immediately, and be independent of ground observing and controlling, real-time is good；In repair process On-board software do not reset and do not affect satellite task,
Do not interrupt the in-orbit normal function of satellite, it is safe.
4 reliabilities are high；1553B bus protocols are instruction/response type, and transmitting-receiving has strict Handshake Protocol, data transfer
Accuracy rate it is high；1553B buses adopt digital communication mode, with higher antijamming capability and reliability；To satellite to having
Capacity of will and failure-survival capability development, possess Failure detection and recovery recombination function there is important function.
Although present disclosure has been made to be discussed in detail by above preferred embodiment, but it should be appreciated that above-mentioned
Description is not considered as limitation of the present invention.After those skilled in the art have read the above, for the present invention's
Various modifications and substitutions all will be apparent.Therefore, protection scope of the present invention should be limited to the appended claims.
Claims (5)
1. a kind of highly reliable spaceborne computer based on 1553B buses is in-orbit reviews one's lessons by oneself positive system, occurs for EEPROM various types of
The single-particle inversion of type, carries out in real time diagnosis automatically and reparation automatically；Characterized in that, including：
1533B buses, with the first redundant bus and the second redundant bus；
Bus control unit, is connected respectively with described the first redundant bus and the second redundant bus；
Mutually redundant first spaceborne computer and the second spaceborne computer, it is superfluous with the first described redundant bus and second respectively
Remaining bus connection, the agreement formulated by 1553B buses is carried out data transmission with bus control unit；
The memory block of each spaceborne computer includes EEPROM, using three redundancy structures, i.e., comprising three backup code regions,
Each a complete On-board software object code of backup code region storage, for carrying out two from three inspection diagnosis.
2. a kind of highly reliable spaceborne computer based on 1553B buses is in-orbit reviews one's lessons by oneself correction method, it is characterised in that using such as right
It is required that the update the system described in 1 is realized, comprise the steps of：
S1, the EEPROM of each spaceborne computer adopt three redundancy structures, i.e., comprising three backup code regions；For
One spaceborne computer, to being respectively stored in each backup code region in identical On-board software object code carry out each page
Two from three circular test；
After S2, circular test terminate, spaceborne computer is independently diagnosed according to inspection result；
S3, spaceborne computer are transmitted autonomous diagnostic result by 1553B buses to the second spaceborne computer of backup, and according to
Response reply is processed.
3. the highly reliable spaceborne computer based on 1553B buses as claimed in claim 2 is in-orbit reviews one's lessons by oneself correction method, and its feature exists
In in described S1, specifically comprising the steps of：
S11, take out respectively in the EEPROM of the first spaceborne computer first code backup region, second code backup region and
The first page in third generation code backup region initializes the array of current revised pages as current revised pages；
S12, two from three inspection diagnosis is carried out to the current revised pages of page three；If the inspection of two from three in this page three current revised pages
As a result it is consistent for data two-by-two, then continue to carry out the lower one page in three backup code regions two from three inspection diagnosis, until
Complete the two from three inspection diagnosis of all pages；If the inspection result of two from three is data two-by-two in this page three current revised pages
It is inconsistent, then judge abnormal, continue executing with subsequent step；
If two from three inspection result is that single page is inconsistent in S13, this page three current revised pages, i.e., in page three current revised pages,
The data of certain address are consistent in certain page two wherein, inconsistent with page three, then misregistration type, and judge that ground is arranged
Whether it is to allow selfreparing；In this way, then according to the data of two identical correct address the selfreparing to the inconsistent page is completed；
If not, will pass under the address of mistake and data telemetry, Ground analysis are waited to process；
If two from three inspection result is inconsistent for data two-by-two in S14, this page three current revised pages, misregistration class
Type, the corresponding data in mistake address and wrong address, accumulating error number counter.
4. the highly reliable spaceborne computer based on 1553B buses as claimed in claim 3 is in-orbit reviews one's lessons by oneself correction method, and its feature exists
In in described S2, specifically comprising the steps of：
If S21, errors number counter are equal to 0, two from three inspection result is normal, puts diagnostic state mark normally, will wrap
The content of the diagnostic result bag containing wrong address, the corresponding data in mistake address and errors number sets to 0, and and calculate verification and
Send to the second spaceborne computer of backup；
If S22, errors number counter are more than 0, two from three inspection result exception puts diagnostic state mark exception, will wrap
Diagnostic result bag containing wrong address, the corresponding data in mistake address and errors number, and calculate verification and send to backup
The second spaceborne computer, and wait reply response bag.
5. the highly reliable spaceborne computer based on 1553B buses as claimed in claim 4 is in-orbit reviews one's lessons by oneself correction method, and its feature exists
In in described S3, specifically comprising the steps of：
S31, the second spaceborne computer of backup receive diagnostic result bag, diagnostic result are analyzed, if diagnostic state mark
Know abnormal, then three are carried out to the page corresponding with wrong address that three backup code regions in the second spaceborne computer are stored
Take two inspections；As two from three checks that inspection result is consistent two-by-two, then put and can repair mark, put wrong address and wrong address pair
The correct data answered is sent to the first spaceborne computer as reply response bag；As two from three checks that inspection result is inconsistent,
Unrepairable mark is then put as reply response bag, and is sent to the first spaceborne computer；
S32, the first spaceborne computer receive reply response bag, judge to repair mark；If mark can be repaired, continue executing with
S33；If unrepairable mark, then will pass under diagnostic result bag remote measurement, wait Ground analysis to process；
Whether S33, to judge that ground is arranged be to allow selfreparing；In this way, then wrong address and the mistake replied in response bag is read
The corresponding correct data in address, and selfreparing is carried out to the corresponding addresses of EEPROM in the first spaceborne computer, write positive exact figures
According to；If not, will pass under diagnostic result bag remote measurement, Ground analysis are waited to process.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610886133.2A CN106649173B (en) | 2016-10-10 | 2016-10-10 | The in-orbit self-correction system and method for highly reliable spaceborne computer based on 1553B bus |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610886133.2A CN106649173B (en) | 2016-10-10 | 2016-10-10 | The in-orbit self-correction system and method for highly reliable spaceborne computer based on 1553B bus |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106649173A true CN106649173A (en) | 2017-05-10 |
| CN106649173B CN106649173B (en) | 2019-04-09 |
Family
ID=58854412
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610886133.2A Active CN106649173B (en) | 2016-10-10 | 2016-10-10 | The in-orbit self-correction system and method for highly reliable spaceborne computer based on 1553B bus |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106649173B (en) |
Cited By (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107368373A (en) * | 2017-07-19 | 2017-11-21 | 上海航天电子通讯设备研究所 | A kind of method of the software bus data communication management based on static programming |
| CN107515800A (en) * | 2017-07-17 | 2017-12-26 | 上海卫星工程研究所 | On-board software dependability design system and method based on software redundancy |
| CN107844407A (en) * | 2017-11-06 | 2018-03-27 | 南京航空航天大学 | A kind of reliability verification method of the anti-SEU based on PRISM |
| CN108021473A (en) * | 2017-11-29 | 2018-05-11 | 山东航天电子技术研究所 | The aerospace computer system and safe starting method that a kind of more backups start |
| CN108762970A (en) * | 2018-06-12 | 2018-11-06 | 上海航天计算机技术研究所 | A kind of highly reliable spaceborne computer program storage device |
| CN110737482A (en) * | 2019-10-08 | 2020-01-31 | 浙江大学 | On-line two-out-of-three starting device and method for satellite star service system |
| CN110865902A (en) * | 2019-10-25 | 2020-03-06 | 上海航天控制技术研究所 | Batch processing method for storage and upfilling diagnosis of pipeline navigation reference track |
| CN111176890A (en) * | 2019-12-16 | 2020-05-19 | 上海航天控制技术研究所 | Data storage and exception recovery method for satellite-borne software |
| CN111290885A (en) * | 2020-03-04 | 2020-06-16 | 上海航天控制技术研究所 | Multi-computer two-stage data backup and hierarchical recovery method for Mars detection |
| CN111404750A (en) * | 2020-03-20 | 2020-07-10 | 上海航天测控通信研究所 | Centralized parameter management device and method for advanced on-orbit system |
| CN113268367A (en) * | 2021-04-26 | 2021-08-17 | 北京控制工程研究所 | 1553B bus RT terminal address lookup table on-track monitoring and maintaining method |
| CN113946532A (en) * | 2021-08-26 | 2022-01-18 | 西安空间无线电技术研究所 | Satellite-borne 1553B control bus failure protection method |
| CN113946532B (en) * | 2021-08-26 | 2024-05-03 | 西安空间无线电技术研究所 | Satellite-borne 1553B control bus failure protection method |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2007058777A2 (en) * | 2005-11-14 | 2007-05-24 | Idaho Research Foundation, Inc. | Radiation tolerant combinational logic cell |
| CN102270162A (en) * | 2011-07-29 | 2011-12-07 | 中国航天科技集团公司第五研究院第五一三研究所 | Fault-tolerant guide method applied to SPARCV8 structure computer |
| CN102521059A (en) * | 2011-11-15 | 2012-06-27 | 北京空间飞行器总体设计部 | On-board data management system self fault-tolerance method |
| CN103984630A (en) * | 2014-05-27 | 2014-08-13 | 中国科学院空间科学与应用研究中心 | Single event upset fault processing method based on AT697 processor |
| CN105446783A (en) * | 2015-12-25 | 2016-03-30 | 浙江大学 | DSP (Digital Signal Processor) program rapid loading method for pico satellite |
-
2016
- 2016-10-10 CN CN201610886133.2A patent/CN106649173B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2007058777A2 (en) * | 2005-11-14 | 2007-05-24 | Idaho Research Foundation, Inc. | Radiation tolerant combinational logic cell |
| CN102270162A (en) * | 2011-07-29 | 2011-12-07 | 中国航天科技集团公司第五研究院第五一三研究所 | Fault-tolerant guide method applied to SPARCV8 structure computer |
| CN102521059A (en) * | 2011-11-15 | 2012-06-27 | 北京空间飞行器总体设计部 | On-board data management system self fault-tolerance method |
| CN103984630A (en) * | 2014-05-27 | 2014-08-13 | 中国科学院空间科学与应用研究中心 | Single event upset fault processing method based on AT697 processor |
| CN105446783A (en) * | 2015-12-25 | 2016-03-30 | 浙江大学 | DSP (Digital Signal Processor) program rapid loading method for pico satellite |
Non-Patent Citations (1)
| Title |
|---|
| 付剑: ""星载计算机的硬件容错设计与可靠性分析"", 《中国优秀硕士学位论文全文数据库 工程科技Ⅱ辑》 * |
Cited By (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107515800A (en) * | 2017-07-17 | 2017-12-26 | 上海卫星工程研究所 | On-board software dependability design system and method based on software redundancy |
| CN107368373A (en) * | 2017-07-19 | 2017-11-21 | 上海航天电子通讯设备研究所 | A kind of method of the software bus data communication management based on static programming |
| CN107844407A (en) * | 2017-11-06 | 2018-03-27 | 南京航空航天大学 | A kind of reliability verification method of the anti-SEU based on PRISM |
| CN108021473A (en) * | 2017-11-29 | 2018-05-11 | 山东航天电子技术研究所 | The aerospace computer system and safe starting method that a kind of more backups start |
| CN108762970A (en) * | 2018-06-12 | 2018-11-06 | 上海航天计算机技术研究所 | A kind of highly reliable spaceborne computer program storage device |
| CN110737482A (en) * | 2019-10-08 | 2020-01-31 | 浙江大学 | On-line two-out-of-three starting device and method for satellite star service system |
| CN110865902B (en) * | 2019-10-25 | 2023-06-02 | 上海航天控制技术研究所 | Batch processing method for pipeline navigation reference track storage uploading diagnosis |
| CN110865902A (en) * | 2019-10-25 | 2020-03-06 | 上海航天控制技术研究所 | Batch processing method for storage and upfilling diagnosis of pipeline navigation reference track |
| CN111176890A (en) * | 2019-12-16 | 2020-05-19 | 上海航天控制技术研究所 | Data storage and exception recovery method for satellite-borne software |
| CN111176890B (en) * | 2019-12-16 | 2023-09-05 | 上海航天控制技术研究所 | Satellite-borne software data storage and anomaly recovery method |
| CN111290885A (en) * | 2020-03-04 | 2020-06-16 | 上海航天控制技术研究所 | Multi-computer two-stage data backup and hierarchical recovery method for Mars detection |
| CN111404750B (en) * | 2020-03-20 | 2022-11-01 | 上海航天测控通信研究所 | Centralized parameter management device and method for advanced on-orbit system |
| CN111404750A (en) * | 2020-03-20 | 2020-07-10 | 上海航天测控通信研究所 | Centralized parameter management device and method for advanced on-orbit system |
| CN113268367A (en) * | 2021-04-26 | 2021-08-17 | 北京控制工程研究所 | 1553B bus RT terminal address lookup table on-track monitoring and maintaining method |
| CN113268367B (en) * | 2021-04-26 | 2023-07-14 | 北京控制工程研究所 | On-orbit monitoring and maintaining method for 1553B bus RT terminal address lookup table |
| CN113946532A (en) * | 2021-08-26 | 2022-01-18 | 西安空间无线电技术研究所 | Satellite-borne 1553B control bus failure protection method |
| CN113946532B (en) * | 2021-08-26 | 2024-05-03 | 西安空间无线电技术研究所 | Satellite-borne 1553B control bus failure protection method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106649173B (en) | 2019-04-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106649173A (en) | High-reliability in-orbit self-correction system and method for on-board computer on the basis of 1553B bus | |
| US3950729A (en) | Shared memory for a fault-tolerant computer | |
| CN107347018B (en) | Three-redundancy 1553B bus dynamic switching method | |
| CN102521059B (en) | On-board data management system self fault-tolerance method | |
| JPS59183437A (en) | Self-inspection circuit for computer | |
| CN108847879B (en) | Double-machine fault detection and recovery method based on bus controller | |
| CN104579313B (en) | A kind of in-orbit SRAM type FPGA fault detects and restorative procedure based on configuration frame | |
| CN110895874A (en) | Acquisition module of RS485 interface sensor and acquisition method thereof | |
| CN106774280A (en) | Method for automatic fault diagnosis on a kind of counteraction flyback star | |
| CN103838656A (en) | Computer system and method for operating computer system | |
| CN108563166A (en) | The in-orbit healthy integrated management terminal of moonlet based on FPGA and management method | |
| CN101126773A (en) | Electronic type transformer high voltage side redundant backup circuit and failure detection method | |
| CN111693806B (en) | Method, device and system for anti-radiation test of components | |
| CN108983682A (en) | A kind of redundancy voting control method based on dual bus | |
| Misbahuddin | Fault tolerant remote terminal units (RTUs) in SCADA systems | |
| US10210033B2 (en) | Managing component errors with a common software sensor based diagnostic method | |
| CN113973025A (en) | CAN bus-based satellite-borne computer communication reliability and fault tolerance design method | |
| KR101631631B1 (en) | Method for failure check and recovery of Protective relay | |
| Grunske | Transformational patterns for the improvement of safety properties in architectural specification | |
| CN108427044A (en) | A kind of test method of failure protection function, device, equipment and storage medium | |
| CN103605593A (en) | Fault diagnosis and recovery method and device for heterogeneous system | |
| CN111679928B (en) | Master-Slave base framework-based system fault detection and recovery method | |
| CN114257500B (en) | Fault switching method, system and device for super-fusion cluster internal network | |
| CN107276812B (en) | Fault diagnosis device, system and method for Level2 layer redundant equipment of nuclear power station | |
| CN112769591B (en) | Effective anti-interference and error-proof daisy chain communication processing method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |