CN109742843B

CN109742843B - Power supply and distribution reconfigurable control system and method for batched flight verification

Info

Publication number: CN109742843B
Application number: CN201811608467.9A
Authority: CN
Inventors: 张绍林; 胡洪凯; 肖爱斌; 刘迎辉; 张洪伟; 刘辉; 邓峥; 魏志超; 王喆; 张竞择; 汪洋
Original assignee: China Academy of Space Technology CAST
Current assignee: China Academy of Space Technology CAST
Priority date: 2018-12-27
Filing date: 2018-12-27
Publication date: 2021-02-09
Anticipated expiration: 2038-12-27
Also published as: CN109742843A

Abstract

The invention relates to a power supply and distribution reconfigurable control system and method for batch flight verification. Aiming at the problems of power supply and distribution unit faults and dynamic power demand change in the on-orbit batch flight verification process of future components, four groups of magnetic latching relays are utilized at the power supply and distribution output end to realize the cross recombination output control of the power supply and distribution output; in the aerospace on-orbit flight test process, the on-orbit dynamic reconfiguration of power supply output control of the power supply and distribution unit can be realized through cross recombination according to the dynamic power requirement and the task fault-tolerant control requirement of the test unit. The method improves the flexibility and expansibility of power supply and distribution output control, enhances the reliability of power supply and distribution output, and provides key technical support for future on-orbit batched flight verification.

Description

Power supply and distribution reconfigurable control system and method for batched flight verification

Technical Field

The invention relates to a power supply and distribution reconfigurable control system and method for batch flight verification, and particularly provides a low-cost and high-reliability power supply and distribution reconfigurable control method based on centralized power supply on the basis of controlling hardware design cost aiming at the power supply and distribution requirements of on-orbit batch flight verification of future components.

Background

A large number of aerospace domestic components and assemblies are subjected to on-orbit flight tests to verify the applicability of the space environment. In the future, on-orbit flight verification becomes an important mode and an effective means for rapidly improving the maturity of domestic aerospace components, China also builds a first autonomous space station in about 2022 years, and in-orbit batch flight verification of the components becomes a normal test task in the next decade. The most critical support interface in on-orbit flight control for various flight test units is the power supply and distribution support unit. The power supply and distribution unit support interface needs to meet the power supply power requirements of all the test units, and meanwhile, necessary reliability measures are provided, so that the normal work of other test units cannot be influenced by the occurrence of a fault test unit. The design of the power supply and distribution unit is always an important component in the design of an aerospace flight verification support platform and is also a key element related to success or failure of a flight test task.

By researching and analyzing the design of the power supply and distribution unit, the design of the foreign spacecraft power supply and distribution unit successively goes through three stages of traditional measurement and control management, primary power supply and distribution management and intelligent autonomous management.

In the first stage, the traditional measurement and control management is mainly used for power supply and distribution management in a mode of manual ground monitoring and remote control instruction sending. The specific product design mainly adopts a fuse and a simple overcurrent protection circuit to isolate and protect power supply and distribution faults, and is the simplest hard processing mode;

the second stage is a primary power supply and distribution management stage, which mainly adopts a mode of combining software and hardware on the spacecraft to solve the autonomous management of fault isolation of a power supply and distribution subsystem, charging and discharging of a storage battery, readjustment and the like, such as a NASA space shuttle power supply fault management technology, a Harbo space telescope on-orbit power supply adjustment management technology and the like;

the third stage is an intelligent autonomous management stage of key development in the current aerospace model, and mainly faces to the requirements of complex flight tasks such as long service life, high reliability, high real-time performance and the like. At the stage, management and monitoring of power supply and distribution of the spacecraft are required, autonomous fault diagnosis and prediction are required while safety and reliability are guaranteed, and meanwhile, intelligentization and miniaturization requirements are provided for power supply and distribution units. The on-orbit spacecraft power supply and distribution management fully utilizes the advantages of on-orbit real-time processing, and completes autonomous power supply fault diagnosis, isolation and recovery without ground intervention according to power supply and distribution real-time monitoring parameters and flight stage task execution conditions. For example, the JPL jet propulsion laboratory in the United states aims at the NASA re-moon and Mars project task requirements, and provides an intelligent power supply and distribution management scheme at an equipment level and a component level on the basis of system-level power supply management.

At present, the power supply and distribution design of domestic and aerospace electronic products is designed by adopting a control mode of cold backup/hot backup and autonomous switching off, and is in a transition section from the second stage to the third stage. The cold backup is two physical modules (circuit board units) which provide input and output interfaces and have the same internal design aiming at different power supply and distribution targets, only one unit is powered on to work in actual work, the other unit is powered off to be in a power-off state, and once the working unit fails, the platform starts the backup unit through a remote control instruction or automatically shuts down the failure unit. The hot backup design is to design two identical power supply circuits aiming at the same power supply and distribution target, the output and the input of the two circuits adopt the same source design, the two circuits are simultaneously powered on to work during the actual work and are mutually backup, when a certain part is abnormal in power supply and distribution, the other part can compensate the output current, and the redundant fault-tolerant design is realized.

The development of power supply and distribution units in aerospace models in the future is developed towards miniaturization, high reliability, autonomy and long service life, and the specific analysis is as follows:

1) miniaturization

Along with the development of the spacecraft towards miniaturization and integration, the design of the power supply and distribution unit also puts forward miniaturization requirements, and the traditional power supply and distribution unit is often large in structure, weight and size and cannot meet the task requirements of the future high-integration spacecraft;

2) high reliability

Through statistics of orbit spacecrafts or deep space probes at home and abroad, the fact that most of the probes are blocked in task execution due to faults of power supply and distribution units is found, for example, the power supply fault of the No. 2 sound of a lunar vehicle transmitted by the former Soviet Union and the termination of tasks due to overheating in the vehicle are solved. In the future, the on-orbit flight of the spacecraft has higher reliability requirement on the power supply and distribution unit;

3) autonomy

With the rapid increase of the number of on-orbit spacecrafts, the ground measurement and control load and pressure become heavier and heavier, and the measurement and control period of deep space exploration such as Galileo number is as long as one hour or more, so that the task requirement cannot be met by the traditional method of completing the power supply and distribution maintenance of the on-orbit spacecrafts by depending on the ground measurement and control, and the spacecraft is urgently required to autonomously perform power supply and distribution output control and real-time monitoring to realize autonomous working capability;

4) long service life

Space navigation type tasks such as second-generation navigation, lunar exploration engineering, space stations, mars planning and the like put forward higher requirements on the on-orbit working life of the spacecraft, and the design of power supply and distribution units of future space products needs to meet the task requirements of long-time high-reliability uninterrupted work of the type tasks in the on-orbit.

With the 'Zhongxing event' exposing the fatal defect of localization of components, aerospace components face the urgent need for autonomous controllable requirements in the future, and the on-orbit flight verification of the components becomes an important means for solving the problem. The components and assemblies can utilize the space comprehensive stress environment to check the aerospace applicability of the components and assemblies through on-orbit flight verification, the maturity of the components is rapidly improved, and the application of the components and assemblies in model products is promoted.

The space station platform provides a batched, long-period and normalized flight verification platform for aerospace domestic components and assemblies, and meets the verification requirements of on-orbit flight tests of the components. Therefore, a high-reliability, low-cost and reconfigurable power supply and distribution scheme supporting flight verification of batch test units is designed, key technical support is provided for design of an on-orbit flight verification platform in the future, the on-orbit flight verification platform is required for future on-orbit flight verification tasks of components and the requirement for improving the autonomous flight verification level is also required.

Disclosure of Invention

The technical purpose of the invention is as follows: the system and the method are used for solving the requirements of reliability and function expansibility of power supply and distribution of a future batch flight verification test unit. Due to the remote control particularity of on-orbit flight verification, a fault unit cannot be replaced and repaired in time, and meanwhile, the development hardware cost and the product weight of a space product are increased by adding a mode of designing a backup unit.

The technical scheme adopted by the invention is as follows:

a batched flight verification-oriented power supply and distribution reconfigurable control system comprises: the power supply and distribution unit, the power supply and distribution measurement and control interface and the test unit interface are connected; the power supply and distribution measurement and control interface is used for primary power supply input and remote control instruction communication of the power supply and distribution unit and remote measurement and downloading of state parameters of the power supply and distribution unit, and the test unit interface is used for power supply output and instruction communication between the power supply and distribution unit and the test unit;

the power supply and distribution unit comprises a communication interface circuit, a memory, a DC/DC voltage conversion module, a test unit power supply and distribution cross recombination module, a current and voltage acquisition circuit, an instruction interface circuit and an FPGA module;

the primary power input through the power supply and distribution measurement and control interface is sent to the DC/DC voltage conversion module for power conversion, the generated secondary power supplies power for other modules in the power supply and distribution unit, and meanwhile, the input primary power is processed by the power supply and distribution cross recombination module of the test unit and then is sent to the interface of the test unit for power supply of the test unit;

remote control instructions and remote measurement requests input through an external load interface are sent to a communication interface circuit for data conversion and then are transmitted to an FPGA module, the FPGA module analyzes the received remote control instructions and sends instruction signals to a test unit power supply and distribution cross recombination module to realize power supply selection output of a power supply and distribution unit to the test unit, and meanwhile, the FPGA module carries out power-on or power-off control on the test unit through the instruction interface circuit; the FPGA module analyzes the received telemetry request, sends the self state parameters of the FPGA module and the power supply state parameters of the test unit acquired by the voltage and current acquisition module into a communication interface circuit, and sends the converted state parameters to a power supply and distribution measurement and control interface after the conversion of the communication interface circuit; the memory is used for storing the configuration information, the power supply and distribution unit control parameters and the test unit power supply and distribution state information of the FPGA module, and the FPGA module can read and access the information.

The power supply and distribution measurement and control interface comprises a remote control instruction interface, a remote measurement communication interface and a primary power supply input which are required by the power supply and distribution measurement and control of the spacecraft; the remote control command interface is used for realizing command communication of the power supply and distribution unit, and the remote measurement communication interface is used for periodically downloading state data of the power supply and distribution unit so as to realize satellite-ground remote data transmission.

The test unit interfaces comprise two groups of interfaces, and each group of test unit interfaces comprise a power supply output interface and an instruction interface; the power supply output interface is used for supplying power to each test unit, and the instruction interface is used for controlling the on-off of each test unit.

The control parameters of the power supply and distribution unit in the memory comprise an overcurrent threshold of the test unit and the priority of the test unit, and the overcurrent threshold and the priority of the test unit are stored in a physical isolation triple-modular redundancy mode.

The instruction interface circuit receives a test unit switching signal sent by the FPGA module, generates a test unit power-on or power-off instruction electric signal, and sends the test unit power-on or power-off instruction electric signal to the test unit to realize power-on or power-off of the test unit.

The current and voltage acquisition module comprises an AD chip, a voltage acquisition circuit and a plurality of current acquisition circuits; each current acquisition circuit corresponds to one test unit;

the current acquisition circuit comprises resistors R1-R6, an operational amplifier V1 and a diode D5;

the secondary power supply after the DC/DC conversion of the power supply and distribution unit is divided by a resistor R5 and then output to the power supply and distribution input end of the test unit, resistors R1-R4 are operational amplifier V1 amplification factor adjusting resistors, the voltage difference delta V at two ends of a resistor R5 is amplified by the operational amplifier through the divided voltage of the resistors R1-R4, so that current signals are converted into voltage signals, and the voltage signals are amplified in multiples and then are acquired by an AD acquisition chipCollecting; according to AD acquisition value V_ADAnd the magnification M is calculated to obtain a delta V, and then a current calculation formula is used for: i ═ V_AD(M × R5) obtaining the power supply current of the test unit; the resistor R6 is a protective resistor, and the diode D5 is used for realizing the pull-up of the input signal of the AD chip;

the voltage acquisition module comprises an operational amplifier V2, resistors R7-R9 and a capacitor C1; the power supply and distribution input voltage of the test unit is divided by resistors R7 and R8, amplified by an operational amplifier V2 and output to an AD acquisition chip for voltage acquisition, and according to an AD acquisition value V_ADUsing the formula: v is V_ADCalculating to obtain a power supply voltage value of the test unit by using X (R7+ R8)/R8; the resistor R9 is a protection resistor, and the capacitor C1 is connected between the output end of the operational amplifier V2 and the ground.

The test unit power supply and distribution cross recombination module comprises a pair of fuses connected in parallel, a relay K1, a cross recombination control circuit, a filter module, a first cross recombination DC/DC module, a second cross recombination DC/DC module and diodes D1-D4;

the primary power supply carries out power supply overcurrent protection through the parallel fuse, then is sent to the filtering module through the relay K1 to carry out primary power supply filtering processing, and then is simultaneously output to the first cross recombination DC/DC module and the second cross recombination DC/DC module; the two DC/DC modules are output to a cross recombination control circuit, the cross recombination control circuit comprises relays K2-K5, and under the control of control command signals output by the FPGA module, the relays K2-K5 are combined in a closed or open mode, so that the switching of different power supply modes of the test unit is realized;

the first cross recombination DC/DC module carries out reverse input prevention protection and current sharing control through diodes D1 and D2 which are connected in parallel, and the second cross recombination DC/DC module carries out reverse input prevention protection and current sharing control through diodes D3 and D4 which are connected in parallel.

The FPGA module comprises a remote control and remote measurement processing module, a test unit switch control module, a power consumption monitoring and predicting module and a cross recombination control module;

the remote control and remote measurement processing module receives a remote control instruction and a remote measurement request sent by the communication interface circuit; the remote control instruction is subjected to validity check according to a preset rule, an invalid instruction sequence is discarded, and the valid remote control instruction sequence is analyzed to obtain a specific operation type to be executed; for the remote measurement communication request, the FPGA packages and sends the self state parameters of the power supply and distribution unit and the power supply state parameters of the test unit to a communication interface circuit to realize remote measurement communication with the power supply and distribution measurement and control interface;

the cross recombination control module receives an effective remote control instruction and power consumption monitoring and system real-time power consumption data of the prediction module of the remote control and remote measurement processing module, and controls the test unit to work in different modes;

the power consumption monitoring and predicting module collects output data of the voltage and current collecting circuit in real time and monitors the total power consumption of the test unit and the power supply and distribution state of the test unit; calculating the real-time total power consumption of the two groups of test units according to the working voltage and current of the test units, and sending the real-time total power consumption to a cross recombination control module in the FPGA; if the current of the test unit exceeds the set current threshold, sending a test unit shutdown instruction through a test unit switch control module and an instruction interface circuit to perform power-off protection on the fault test unit;

the test unit switch control module receives the output data of the cross recombination control module and the power consumption monitoring and predicting module, and sends a power-on or power-off instruction to the test unit through the instruction interface circuit so as to realize the on-off control of the test unit.

The working modes of the test unit power supply and distribution cross recombination module comprise a double-machine normal power supply mode, a single-machine failure power supply mode, a double-machine centralized power supply mode, a single-machine full-load power supply mode and a double-machine failure power supply mode; the method comprises the following specific steps:

the dual-machine normal power supply mode: the mode is a default working mode after the power supply and distribution unit is electrified and initialized, and is divided into two conditions: the first mode is that the relays K2, K5 are closed and the relays K3, K4 are open; the second mode is that the relays K3, K4 are closed and the relays K2, K5 are open; two DC/DC modules in the test unit power supply and distribution cross recombination module are respectively output to two test unit interfaces, and the outputs of the two DC/DC modules are mutually isolated and respectively supply power to two groups of test units;

single machine failure power supply mode: in the single-machine failure power supply mode, only one relay of the relays K2-K5 is in a closed state at the same time, the relays connected with the fault DC/DC module are in an open state, and the healthy DC/DC module only supplies power to a single test unit interface; after the system runs for a fixed period, the healthy DC/DC module switches an output relay switch to supply power to an interface of another test unit, and the two groups of test units are alternately electrified to carry out an on-orbit test and carry out a flight verification task;

single-machine full-load power supply mode: in the state, the relays connected with the DC/DC module in the healthy state are switched to the closed state, namely the relays K2 and K3 are closed, the relays K4 and K5 are opened, or the relays K2 and K3 are opened, and the relays K4 and K5 are closed; the healthy DC/DC module supplies power and outputs the power to two test unit interfaces, and the power consumption monitoring and predicting module and the test unit switch control module sequentially start the test units to work according to the priority of the test units until the output power of the healthy DC/DC module reaches the upper limit of the rated output power;

double-machine centralized power supply mode: the two DC/DC modules in the test unit power supply and distribution cross-connection recombination module and the relay connected with the same test unit interface are both in a closed state, and the relay connected with the other test unit interface is opened, namely the relays K2 and K4 are closed, the relays K3 and K5 are opened, or the relays K3 and K5 are closed, and the relays K2 and K4 are opened; in the mode, the two DC/DC modules simultaneously supply power to a single test unit interface to meet the power supply requirement of the test unit connected with the interface; the other test unit interface is not powered on and inputs power, and the corresponding test units are in a power-off state;

dual-machine failure mode: two DC/DC modules in the test unit power supply and distribution cross recombination module are both failed, the relays K2-K5 are all in a disconnected state, the two groups of test units are all powered off, and the power supply and distribution unit restarts the test unit power supply and distribution cross recombination module through the relay K1; if the two DC/DC output voltages in the cross recombination module after restarting are both recovered to be normal, switching to a dual-machine normal power supply mode to work, and if the two DC/DC output voltages in the cross recombination module after restarting are only recovered to be normal by a single module, switching to a single-machine failure power supply mode; and if the output voltages of the two DC/DC modules in the cross recombination module are kept abnormal after the system is restarted for three times, the K1 is powered off, and the system works again after the fault is further repaired.

A control method realized according to the power supply and distribution reconfigurable control system for batch flight verification comprises the following steps:

(1) after the power supply and distribution unit is powered on, the DC/DC voltage conversion module starts to work, a primary power supply is converted into a secondary power supply to be supplied to other modules of the power supply and distribution unit to work, and the FPGA finishes configuration file loading and initialization work; turning to the step (2) when the relays K1-K5 are all in an off state;

(2) the FPGA sends a remote control instruction to close the relay K1 and activate the test unit power supply and distribution cross recombination module;

(3) the FPGA sends a remote control command to the test unit power supply and distribution cross recombination module, the relays K2 and K5 are closed in sequence, and the relays K3 and K4 are in an open state; or the relays K3 and K4 are closed in sequence, and the relays K2 and K5 are in an open state; the power supply and distribution unit works in a dual-machine normal power supply mode, secondary power supplies generated by two DC/DC modules in the power supply and distribution cross-connection reconfiguration module of the test unit are respectively output to two test unit interfaces, and the step (4) is carried out;

(4) the power supply and distribution unit sends an instruction to the test unit in the power-off state through the instruction interface circuit, all groups of test units are sequentially powered up according to priority, an on-orbit flight test is started, meanwhile, a voltage and current acquisition circuit in the power supply and distribution unit acquires power supply voltage and current of the test units in real time, the power supply voltage and current are sent to a power consumption monitoring and predicting module of the FPGA module, dynamic power consumption of the test units is calculated in real time, and whether the power supply voltage and the power supply current of the test units are abnormal or not is monitored;

if the power supply current of the test unit exceeds the current threshold value of the test unit preset in the FPGA, the test unit switch control module sends a remote control command through the command interface circuit to carry out power-off protection on the test unit and wait for fault repair; other test units continue to be powered up to work;

if one relay to be closed in the relays K2-K5 cannot be closed or is abnormally opened, another relay in a closed state is closed through a remote control command, and then the relay in an opened state in the relays K2-K5 is closed, so that the switching between two normal power supply modes of the double-machine is realized;

if the input power supply voltage of the test unit is abnormal and no current overcurrent is sent at a certain time, the DC/DC module in the power supply and distribution cross-connection reconfiguration module of the connected test unit fails, the FPGA sends a remote control power-off instruction to the group of test units through the test unit switch control module and the instruction interface circuit, and all the test units of the group are closed; then, a relay connected with the fault DC/DC module is disconnected to realize single-machine failure power supply, and the step (5) is carried out;

if a group of test units need the test units to supply power to two DC/DC modules in the power supply and distribution cross-recombination module at the same time so as to complete the execution of the on-orbit test task, at the moment, a remote control command is sent to the power supply and distribution unit on the ground, the FPGA sends a power-off command through the test unit switch control module and the command interface circuit, the other group of test units and the connected relay are closed, the power outputs of the two groups of DC/DC modules of the cross-recombination module are all switched to the test unit interface connected with the group of test units, the centralized power supply of the double units is realized, and the step (6) is entered;

(5) the power supply and distribution unit receives a ground remote control instruction or switches an output control relay of the healthy DC/DC module according to preset period parameters, and periodically supplies power to the two groups of test units alternately; the two groups of test units alternately perform on-orbit flight tests;

if the fault DC/DC module in the single-machine failure power supply mode is repaired through resetting and restarting operations and the voltage output is normal, the power supply and distribution unit closes a relay between the repaired DC/DC module and the test unit interface in the power failure state, recovers the double-machine normal power supply mode and returns to the step (4);

if the power supply and distribution unit monitors that the output voltage of the healthy DC/DC module is abnormal in the single-machine failure power supply mode, the power supply and distribution unit firstly sends an instruction to close all test units, then the DC/DC output relay in the closed state is disconnected, the double-machine failure working mode is entered, and the step (8) is switched;

if two groups of test units need to carry out tests simultaneously, sending a remote control instruction to the power supply and distribution unit from the ground, firstly closing all the test units, and then closing two relays connected with the healthy DC/DC module, so that the DC/DC module simultaneously supplies power to the two groups of test units, entering a single-machine full-load working mode, and entering the step (7);

(6) switching relay switches by sending remote control commands according to test task requirements, so that the two groups of test units are powered on alternately to work, and the diodes at the power output ends in the cross recombination modules carry out current sharing adjustment on the outputs of the two DC/DC modules;

when the task execution of the test unit is finished, the ground sends a remote control command to the power supply and distribution unit, the power supply and distribution unit switches the output of a group of DC/DC modules to the power failure state test unit interface for power supply, the normal power supply mode of the double units is recovered, and the step (4) is turned;

if the output voltage of a single DC/DC module is abnormal at the moment, the power supply and distribution unit disconnects an output relay of the DC/DC module when monitoring the fault, and enters a single-machine failure power supply mode, and then the step (5) is carried out;

(7) under a single-machine full-load working mode, a single DC/DC module supplies power to two groups of test units through two test unit interfaces, and a power supply and distribution unit sequentially sends test unit remote control starting instructions to power up the test units through a test unit switch control and instruction interface circuit according to preset test unit priorities until the output power of the DC/DC module in a healthy state reaches the rated output upper limit;

if the DC/DC module which normally works in the mode has a fault, the power supply and distribution unit automatically closes the corresponding test unit, an output relay of the DC/DC module is disconnected, the double-machine failure power supply mode is entered, and the step (8) is switched;

if the fault DC/DC module finishes fault recovery after restarting and resetting and the output voltage is normal, the power supply and distribution unit sends an instruction pulse to disconnect any output control relay of the DC/DC module which works at present, and the power supply and distribution unit is switched to a single-machine failure power supply mode, and then the step (5) is carried out;

(8) all the test units are in a power-off mode under a double-machine failure working mode, two DC/DC modules in a cross recombination module of a power supply and distribution unit break down, the power supply and distribution unit sends a remote control command to close a relay K1, the two DC/DC modules in the cross recombination module are both powered off, an FPGA sends the remote control command to the cross recombination module to close the relay K1 again, the cross recombination module is restarted, whether the output of the two DC/DC modules is normal or not is monitored, and whether the repair is completed or not is confirmed;

if the two DC/DC modules are repaired at the same time, a remote control command is sent to the power supply and distribution unit through the ground, the FPGA module sends a command to the test unit power supply and distribution cross recombination module, the relays K2 and K5 or K3 and K4 are closed, the test unit returns to the double-machine normal power supply mode, and the step (4) is carried out;

if the fault recovery of the single DC/DC module is finished, sending a remote control instruction to the power supply and distribution unit through the ground, sending an instruction to the cross recombination module by the FPGA module, closing any relay connected with the repaired DC/DC module, and turning to the step (5);

and if the two DC/DC modules in the cross recombination module can not be repaired after three power-on and power-off attempts of the cross recombination module, terminating the test task, closing the relay K1 and waiting for further repair.

Compared with the prior art, the invention has the advantages that:

(1) the invention provides a power supply and distribution reconfigurable control system design oriented to batch flight verification on the basis of controlling the design cost of a power supply and distribution system based on the cross recombination power supply control of a magnetic latching relay and aiming at the power supply and distribution requirements of a future on-orbit batch flight verification task, and introduces the system composition and the working principle of a power supply and distribution unit in detail;

(2) the invention breaks through the traditional power supply and distribution output control design idea, and realizes on-track reconfiguration of power supply and distribution output control by arranging 4 magnetic latching relays between two DC/DC modules in the power supply and distribution cross-reconfiguration module of the test unit and the test unit group. By means of redundancy backup and power supply and distribution output reconstruction based on the magnetic latching relay, the function expansibility and reliability of the power supply and distribution unit are improved on the basis of controlling the cost of the system;

(3) a power supply mode definition and a control method of a power supply and distribution reconfigurable control system are provided. The invention provides five power supply modes of a power supply and distribution unit, which are as follows: the power supply system comprises a dual-machine normal power supply mode, a single-machine failure power supply mode, a dual-machine centralized power supply mode, a single-machine full-load power supply mode and a dual-machine failure power supply mode, wherein five modes are defined. And combining the dynamic demand of the on-rail power of the test unit and the possible faults of the power supply and distribution unit, a control method for switching five power supply modes of the power supply and distribution unit is provided, and the on-rail power supply and distribution output reconstruction process of the power supply and distribution unit is introduced according to steps. The power supply and distribution unit can autonomously control or receive an external remote control instruction, and autonomously or receive the external remote control instruction to complete the on-orbit switching of the working mode, so that the high reliability and expansibility requirements of on-orbit flight verification are met.

Drawings

FIG. 1 is a block diagram of a power supply and distribution design system of the present invention;

FIG. 2 is a schematic diagram of the design principle of a power supply and distribution cross recombination module of the test unit of the present invention;

FIG. 3 is a schematic diagram of the voltage current acquisition circuit design of the present invention;

FIG. 4 is a schematic diagram of a dual-device normal power supply mode according to the present invention;

FIG. 5 is a schematic diagram of a single-unit failure power supply mode of the present invention;

FIG. 6 is a schematic diagram of a single-machine full-load power supply mode according to the present invention;

FIG. 7 is a schematic diagram of a dual-unit centralized power supply mode according to the present invention;

FIG. 8 is a schematic diagram of a dual-device failure power supply mode of the present invention;

fig. 9 is a state machine for controlling the switching of the operating modes of the power supply and distribution unit according to the present invention.

Detailed Description

The invention provides a power supply and distribution reconfigurable control system and method based on power supply and distribution output cross recombination, aiming at dynamic power change and a DC/DC module failure mode faced by a batch test unit on-orbit flight test. The following detailed description is made in three aspects of implementation flow of a power supply and distribution reconfigurable control method based on cross recombination, and implementation of a power supply and distribution unit system and a cross reconfiguration power supply and distribution principle.

As shown in fig. 1, the present invention provides a power supply and distribution reconfigurable control system for batch flight verification, including: the power supply and distribution unit, the power supply and distribution measurement and control interface and the test unit interface are connected; the power supply and distribution measurement and control interface is used for primary power supply input and remote control instruction communication of the power supply and distribution unit and remote measurement and downloading of state parameters of the power supply and distribution unit, and the test unit interface is used for power supply output and instruction communication between the power supply and distribution unit and the test unit;

the FPGA module is a core control module of the reconfigurable system and is realized by adopting an antifuse A54SX72 type FPGA so as to improve the radiation resistance of the power supply and distribution unit. The memory is realized by adopting NOR FLASH and SRAM packaged by 3D with EDAC verification, the DC/DC adopts HDCD/100-12R-30/SP and HDCD/100-5R-30/SP power supply conversion modules with 100V input and +/-12V output to realize +5V and +/-12V power supply input required by the work of the power supply and distribution unit. The communication interface adopts a standard 1553B bus as a remote control command interface and a telemetering communication interface to finish command transmission and telemetering data downloading in a time-sharing manner, the interface circuit adopts a BM65170 chip as an interface control chip of the 1553B bus, and two B3226 type transformers are arranged for receiving and transmitting 1553B bus information;

primary power input through the power supply and distribution measurement and control interface is sent to a DC/DC voltage conversion module (HDCD/100-12R-30/SP and HDCD/100-5R-30/SP) for power conversion, generated secondary power (+5V and +/-12V) supplies power for other modules in the power supply and distribution unit, meanwhile, the input primary power is processed by the power supply and distribution cross recombination module of the test unit to generate +12V voltage required by the work of the test unit, and the voltage is respectively sent to two test unit interfaces to supply power for 1-8 of the test unit;

The power supply and distribution measurement and control interface comprises a remote control instruction interface, a remote measurement communication interface and a primary power supply input which are required by the power supply and distribution measurement and control of the spacecraft; the remote control command interface is used for realizing command communication of the power supply and distribution unit, and the remote measurement communication interface is used for periodically downloading state data of the power supply and distribution unit so as to realize satellite-ground remote data transmission. The remote control command interface and the telemetering communication interface are realized by sharing a dual-redundancy standard 1553B bus interface, and the power supply and distribution unit works in an RT mode with an RT address of 0x 7.

As shown in fig. 3, the current and voltage collecting module includes an AD chip, a voltage collecting circuit, and a plurality of current collecting circuits; each current acquisition circuit corresponds to one test unit; this supply and distribution unit output voltage can satisfy a plurality of test unit power supply demands simultaneously, supplies the distribution unit unanimous to the output voltage of each test unit, can only monitor the secondary power supply voltage of power module output. For each test unit, a separate current acquisition circuit needs to be designed to monitor the working current of the test unit. Because the DC/DC module is formed inside the power supply and distribution unit, particularly the aerospace level module has higher reliability, the invention mainly considers the problems of monitoring of the working current of the test unit and overcurrent protection.

The power supply and distribution unit monitors the power supply state of the test unit through a current monitoring circuit, wherein voltage monitoring is mainly used for collecting power supply voltage generated by a power supply module of the power supply and distribution unit, and current monitoring is used for collecting working current of the input end of each test unit; in the implementation of the system, a group of voltage acquisition circuits and a plurality of groups of test unit current acquisition circuits are required to be arranged for all test units (the specific number is consistent with the number of the test units); the current collection precision error is required to be <3mA, and the voltage collection precision error is required to be <3 mV.

The current acquisition circuit comprises resistors R1-R6, an operational amplifier V1 and a diode D5. The secondary power supply subjected to DC/DC conversion of the power supply and distribution unit is divided by a resistor R5 and then is output to the power supply and distribution input end of the test unit, resistors R1-R4 are operational amplifier V1 amplification factor adjusting resistors, the voltage difference delta V between two ends of a resistor R5 is VCC _ OUT-VCC _ IN by the voltage division of the resistors R1-R4, wherein VCC _ IN is the test unit power supply voltage converted and output by a power module for the test unit IN the power supply and distribution unit, and VCC _ OUT is the secondary power supply voltage output to the test unit after passing through a voltage division resistor R5; the delta V is amplified through the operational amplifier, so that a current signal is converted into a voltage signal, and the voltage signal is acquired by an AD acquisition chip after being amplified in multiples; according to AD acquisition value V_ADAnd the magnification M is calculated to obtain a delta V, and then a current calculation formula is used for: i ═ V_AD(M × R5) obtaining the power supply current of the test unit; the diode D5 is used for realizing the pull-up of the input signal of the AD chip;

the AD acquisition chip is realized by adopting an SAD0808RH chip, R6 is a protective resistor and is realized by adopting a high-grade resistor of 100K omega; the operational amplifier V1 is realized by F158A, and the power supply terminal VCC of F158A is connected with +12V input; the diode D5 is an aerospace grade diode with the specification of 2CK 84F; because the current of the test unit is small, the acquisition precision is ensuredIn the figure, R0 is a divider resistor, and a precision resistor smaller than 1 omega is generally selected. The amplification factor is determined by four resistance values of R1, R2, R3 and R4, and can be specifically adjusted according to the actual current. The current acquisition circuit can specifically realize that divider resistance R1-R4 can be adjusted according to the size of different test unit operating currents to make the signal amplified by the operational amplifier satisfy the rated input voltage range of AD, and the resistance R1 and the resistance R3 select the resistance of 10K omega under the default condition, and the resistance R2 and the resistance R4 adopt the resistance of 90K omega, and then the amplification factor M of the voltage difference between the two ends of the resistance R5 is 9 times. The resistance value of the divider resistor R5 selects the low-resistance precision resistor of the aerospace grade, and the resistance value of the resistor R5 is recommended to be 0.1 omega. Based on the above embodiment, the current calculation formula of the current acquisition circuit is as follows: i ═ 10 xv_AD) /9 (in amperes);

the voltage acquisition module comprises an operational amplifier V2, resistors R7-R9 and a capacitor C1; the power supply and distribution input voltage of the test unit is divided by resistors R7 and R8, amplified by an operational amplifier V2 and output to an AD acquisition chip for voltage acquisition, and according to an AD acquisition value V_ADUsing the formula: v is V_ADAnd calculating to obtain the power supply voltage value of the test unit by using the multiplied (R7+ R8)/R8, wherein the resistor R9 is a protection resistor, and the capacitor C1 is connected between the output end of the operational amplifier V2 and the ground. The voltage acquisition circuit AD acquisition chip is realized by adopting an SAD0808RH chip, R9 is a protective resistor and is realized by adopting a high-grade resistor of 100K omega, C1 is realized by adopting a 30PF container capacitor, and V2 is realized by adopting an LM108A operational amplifier. VCC _ IN is a test unit power supply generated by a power supply module of a power supply and distribution unit, the selection of the voltage dividing resistors R7 and R8 is determined according to the actual working voltage and the rated input range of the operational amplifier V2, the resistance value of R7 is 20K omega, the resistance value of R8 is 30K omega, and a precision resistor is required. The calculation formula of the voltage acquisition is as follows: v ═ 3 xv_{AD acquisition})/5。

As shown in fig. 2, the test unit power supply and distribution cross recombination module comprises a pair of fuses connected in parallel, a relay K1, a cross recombination control circuit, a filter module, a first cross recombination DC/DC module, a second cross recombination DC/DC module, and diodes D1-D4; the diodes D1-D4 are realized by Schottky diodes with specification models of 2DK1080S and are used for carrying out output current sharing control and current isolation protection of the DC/DC module. The diodes D1 and D2 adopt a parallel connection mode to reduce the single-point failure probability, and similarly, the diodes D3 and D4 also adopt a parallel connection design; the filter circuit is realized by a standard filter module with the specification of HFE-100-. The relay K1 is realized by adopting a 2JB 1-910-.

The relays K2-K5 are realized by 2JB 1-910-. The magnetic latching relay is a new type relay developed in recent years, and is also an automatic switch. As with other electromagnetic relays, it acts to automatically turn on and off the circuit. The normally closed and normally open states of the magnetic latching relay completely depend on the action of permanent magnetic steel, and the switching state of the magnetic latching relay is triggered by pulse electric signals with certain width. When the contact is in the holding state, the coil does not need to be electrified, and the state of the relay can be maintained only by the magnetic force of the permanent magnet. Therefore, the output control state of the power supply and distribution unit is not affected by power on and power off until a new relay switch remote control command is received, and the design has the advantages of power saving, stable performance and high bearing capacity, and is particularly suitable for the design of an on-orbit flight test output control circuit.

As shown in FIG. 2, the rated power output of the DC/DC modules M1 and M2 in the cross recombination module is 30W, and the maximum power consumption of each test unit is 7.5W, so that each module can support 4 test units to be tested on the rail simultaneously. The DC/DC module is respectively connected with two groups of test units (4 in each group) at the rear end through magnetic latching relays K2-K5, and power supply access control is carried out through a switch instruction. As shown in FIG. 2, 4 sets of relays are arranged at the rear end of the DC/DC in the cross-connection reconfiguration module, the DC/DC module M1 supplies power to the test units 1-4, and the DC/DC module M2 supplies power to the test units 5-8.

The working modes of the test unit power supply and distribution cross recombination module comprise a double-machine normal power supply mode, a single-machine failure power supply mode, a double-machine centralized power supply mode, a single-machine full-load power supply mode and a double-machine failure power supply mode; switching of the power supply and distribution unit among five power supply and distribution working modes is achieved by controlling the relays K2-K5 and S, the comparison table of the closing relations between the five power supply and distribution modes and the relays K2, K3, K4 and K5 is shown as follows, and each mode is specifically defined as follows:

relation table of five power supply modes and relay states

The five power supply modes are as follows:

the dual-machine normal power supply mode: as shown in fig. 4, the mode is a default operating mode after the power supply and distribution unit is powered on and initialized, and is divided into two cases: the first mode is that the relays K2 and K5 are closed and the relays K3 and K4 are opened, so that the power supply of the DC/DC module M1 is output to the test units 1-4, and the power supply of the DC/DC module M2 is output to the test units 5-8; the second mode is that the relays K3 and K4 are closed and the relays K2 and K5 are opened, so that the power supply of the DC/DC module M2 is output to the test units 1-4, and the power supply of the DC/DC module M1 is output to the test units 5-8; two DC/DC modules in the test unit power supply and distribution cross recombination module are respectively output to two test unit interfaces, and the outputs of the two DC/DC modules are mutually isolated and respectively supply power to two groups of test units;

single machine failure power supply mode: as shown in fig. 5, in the single-machine failure power supply mode, only one of the relays K2-K5 at the same time is in a closed state, the relays connected to the fault DC/DC module are in an open state, and the healthy DC/DC module only supplies power to a single test unit interface; after the system runs for a fixed period, the healthy DC/DC module switches an output relay switch (from a mode A to a mode B in fig. 5 or from a mode C to a mode D in fig. 5) to supply power to an interface of another test unit, and the two groups of test units are powered on in turn to perform an on-orbit test and carry out a flight verification task;

single-machine full-load power supply mode: as shown in fig. 6, in this state, the relays connected to the healthy DC/DC module are all switched to the closed state, i.e. the relays K2 and K3 are closed, the relays K4 and K5 are open (left side connection mode diagram of fig. 6), or the relays K2 and K3 are open, and the relays K4 and K5 are closed (right side connection mode diagram of fig. 6); the healthy DC/DC module supplies power and outputs the power to two test unit interfaces, the power consumption monitoring and predicting module and the test unit switch control module sequentially start the test units to work according to the priority of the test units until the output power of the healthy DC/DC module reaches the rated output power upper limit of 30W, and the reference value is 29W +/-5W;

double-machine centralized power supply mode: as shown in fig. 7, the two DC/DC modules M1 and M2 in the test unit power supply and distribution cross-connection reconfiguration module are both in a closed state with the relay connected to the same test unit interface, and the relay connected to another test unit interface is opened, i.e., the relays K2 and K4 are closed, the relays K3 and K5 are opened (left power supply schematic diagram in fig. 7), or the relays K3 and K5 are closed, and the relays K2 and K4 are opened (right power supply schematic diagram in fig. 7); in the mode, the two DC/DC modules simultaneously supply power to a single test unit interface to meet the power supply requirement of the test unit connected with the interface; the other test unit interface is not powered on and inputs power, and the corresponding test units are in a power-off state; the power supply and distribution unit in the mode can meet the short-term high-power test task of the test unit, and the normal power supply mode is recovered after the high-power processing test task is executed.

Dual-machine failure mode: as shown in fig. 8, two DC/DC modules in the test unit power supply and distribution cross-recombination module are both failed, the relays K2-K5 are all in a disconnected state, the two groups of test units are all powered off, and the power supply and distribution unit restarts the test unit power supply and distribution cross-recombination module through the relay K1; if the two DC/DC output voltages in the cross recombination module after restarting are both recovered to be normal, switching to a dual-machine normal power supply mode to work, and if the two DC/DC output voltages in the cross recombination module after restarting are only recovered to be normal by a single module, switching to a single-machine failure power supply mode; and if the output voltages of the two DC/DC modules in the cross recombination module are kept abnormal after the system is restarted for three times, the K1 is powered off, and the system works again after the fault is further repaired.

The power supply and distribution unit switches power supply modes according to dynamic power requirements of the test units, the output state of the DC/DC module and an external remote control instruction, the on-orbit power supply and distribution requirements of the two groups of test units are met to the maximum extent, and on-orbit reconstruction of output control of the power supply and distribution unit is realized; the external remote control instruction comprises a test unit DC/DC module power-on instruction, a test unit DC/DC module power-off instruction, a dual-machine normal power supply mode switching instruction, a dual-machine centralized power supply mode switching instruction, a single-machine failure power supply mode switching instruction and a single-machine full-load power supply mode switching instruction; and switching among the rest modes. The implementation steps of the control method implemented by the power supply and distribution reconfigurable control system facing batched flight verification are as follows:

(3) the FPGA sends a remote control command to the test unit power supply and distribution cross recombination module, the relays K2 and K5 are closed in sequence, and the relays K3 and K4 are in an open state; or closing the relays K3 and K4 in sequence, and keeping the relays K2 and K5 in an open state (shown in FIG. 4); the power supply and distribution unit works in a dual-machine normal power supply mode, secondary power supplies generated by two DC/DC modules in the power supply and distribution cross-connection reconfiguration module of the test unit are respectively output to two test unit interfaces, and the step (4) is carried out;

if one relay to be closed in the relays K2-K5 cannot be closed or is abnormally opened, another relay in a closed state is closed through a remote control instruction, and then the relay in an opened state in the relays K2-K5 is closed, so that switching between two normal power supply modes of the double-machine is realized (fig. 3); the magnetic latching relay has higher reliability, and the engineering practice shows that the fault probability is extremely low, so that the invention only considers the failure problem of a single magnetic latching relay;

because the test unit interfaces supply power to all the test units in a single group, the power supply input voltage is the same, and the power supply voltage of the test units is actually the output voltage of the DC/DC module in the cross-connection reconfiguration module; if the input power supply voltage of the test unit is abnormal and no current overcurrent is sent at a certain time, the DC/DC module in the power supply and distribution cross-connection reconfiguration module of the connected test unit fails, the FPGA sends a remote control power-off instruction to the group of test units through the test unit switch control module and the instruction interface circuit, and all the test units of the group are closed; then, a relay connected with the fault DC/DC module is disconnected to realize single-machine failure power supply, and the step (5) is carried out;

if a group of test units need the test units to supply power to two DC/DC modules in the power distribution cross-connection reconfiguration module at a certain time, so as to complete the execution of the on-orbit test task. For example, in some power-class and high-speed operation-type test units, the power is low in a rated working state, but a short-time high-power supply is needed when a specific flight test task application is operated. At the moment, a remote control instruction is sent to the power supply and distribution unit from the ground, the FPGA sends a power-off instruction through the test unit switch control module and the instruction interface circuit, the other group of test units and the connected relays are closed, the power outputs of the two groups of DC/DC modules of the cross recombination module are switched to the test unit interfaces connected with the test units, the centralized power supply of the double units is realized, and the step (6) is entered;

(5) only one of the two sets of test units is powered on, and the other set of test units is powered off (as shown in fig. 5). The power supply and distribution unit receives a ground remote control instruction or switches an output control relay of the healthy DC/DC module according to preset period parameters, and periodically supplies power to the two groups of test units alternately (from a mode A to a mode B in the graph 5 or from a mode C to a mode D in the graph 5); the two groups of test units alternately perform on-orbit flight tests, so that normal development of on-orbit flight test tasks is ensured to a certain extent;

(6) the two DC/DC modules supply power to a single group of test units in a parallel connection mode, and the short-term high-power input requirement of the group of test units is met. The relay switches are switched by sending remote control instructions according to test task requirements, so that the two groups of test units are powered on alternately to work, the diodes at the power output ends in the cross reconfiguration modules carry out current sharing adjustment on the outputs of the two DC/DC modules, the reasonable distribution of power to the two DC/DC modules is ensured, the mode mainly aims at the high-power task processing requirements of the test units in a short period, and the duration is short.

(7) under a single-machine full-load working mode, a single DC/DC module supplies power to two groups of test units through two test unit interfaces, and a power supply and distribution unit sequentially sends test unit remote control starting instructions to power up the test units through a test unit switch control and instruction interface circuit according to preset test unit priorities until the output power of the DC/DC module in a healthy state reaches the rated output upper limit; in the mode, the DC/DC module supplies power to a plurality of test units to the maximum extent, and the test tasks with higher priority can work in an on-orbit mode.

if the fault DC/DC module finishes fault recovery after restarting and resetting and the output voltage is normal, the power supply and distribution unit sends an instruction pulse to close a group of test units, then a relay connected with the current working DC/DC module and the group of test unit interfaces is disconnected, the system is switched to a single-machine failure power supply mode (the single-machine failure power supply mode is subsequently recovered to a double-machine normal power supply mode), and the step (5) is carried out;

if the two DC/DC modules are repaired at the same time, a remote control command is sent to the power supply and distribution unit through the ground, the FPGA module sends a command to the test unit power supply and distribution cross recombination module, the relays K2 and K5 are closed (or the relays K3 and K4 are closed), the test unit returns to the normal power supply mode of the double motors, and the step (4) is carried out;

if the fault recovery of the single DC/DC module is finished, sending a remote control instruction to the power supply and distribution unit through the ground, sending an instruction to the cross recombination module by the FPGA module, closing any relay connected with the repaired DC/DC module, realizing a single-machine failure power supply mode, and turning to the step (5);

In summary, the power supply and distribution reconfigurable control system and method for batch flight verification provided by the invention realize dynamic reconfigurable control of power supply and distribution of the test unit by using the test unit power supply and distribution cross recombination design based on the magnetic latching relay aiming at the power supply and distribution requirements of future aerospace on-orbit batch flight verification tasks. The invention firstly introduces the design of a reconfigurable control system of a power supply and distribution unit and the principle of cross recombination of power supply and distribution circuits, and defines five working modes of the power supply and distribution reconfigurable control system. The power supply and distribution on-rail reconfiguration control flow based on the cross recombination control is described in detail according to steps. Through the on-orbit dynamic reconfiguration of the power supply and distribution control of the plurality of test units, the problems of output faults of the DC/DC module of the power supply and distribution unit, short-term high-power supply and distribution requirements of the test units and the like can be solved to a certain extent, the normal development of on-orbit flight verification tasks is ensured, and the reliability, flexibility and expansibility of the power supply and distribution output control are improved.

Claims

1. A batched flight verification-oriented power supply and distribution reconfigurable control system is characterized by comprising: the power supply and distribution unit, the power supply and distribution measurement and control interface and the test unit interface are connected; the power supply and distribution measurement and control interface is used for primary power supply input and remote control instruction communication of the power supply and distribution unit and remote measurement and downloading of state parameters of the power supply and distribution unit, and the test unit interface is used for power supply output and instruction communication between the power supply and distribution unit and the test unit;

2. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 1, wherein: the power supply and distribution measurement and control interface comprises a remote control instruction interface, a remote measurement communication interface and a primary power supply input which are required by the power supply and distribution measurement and control of the spacecraft; the remote control command interface is used for realizing command communication of the power supply and distribution unit, and the remote measurement communication interface is used for periodically downloading state data of the power supply and distribution unit so as to realize satellite-ground remote data transmission.

3. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 1, wherein: the test unit interfaces comprise two groups of interfaces, and each group of test unit interfaces comprise a power supply output interface and an instruction interface; the power supply output interface is used for supplying power to each test unit, and the instruction interface is used for controlling the on-off of each test unit.

4. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 1, wherein: the control parameters of the power supply and distribution unit in the memory comprise an overcurrent threshold of the test unit and the priority of the test unit, and the overcurrent threshold and the priority of the test unit are stored in a physical isolation triple-modular redundancy mode.

5. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 1, wherein: the instruction interface circuit receives a test unit switching signal sent by the FPGA module, generates a test unit power-on or power-off instruction electric signal, and sends the test unit power-on or power-off instruction electric signal to the test unit to realize power-on or power-off of the test unit.

6. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 1, wherein: the current and voltage acquisition module comprises an AD chip, a voltage acquisition circuit and a plurality of current acquisition circuits; each current acquisition circuit corresponds to one test unit;

the secondary power supply subjected to DC/DC conversion of the power supply and distribution unit is subjected to voltage division through a resistor R5 and then is output to the power supply and distribution input end of the test unit, resistors R1-R4 are operational amplifier V1 amplification factor adjusting resistors, and the voltage difference delta V at two ends of a resistor R5 is amplified through the operational amplifier through the voltage division of the resistors R1-R4, so that a current signal is converted into a voltage signal, and the voltage signal is acquired by an AD acquisition chip after being amplified in multiples; according to AD acquisition value V_ADAnd the magnification M is calculated to obtain a delta V, and then a current calculation formula is used for: i ═ V_AD(M × R5) obtaining the power supply current of the test unit; the resistor R6 is a protective resistor, and the diode D5 is used for realizing the pull-up of the input signal of the AD chip;

7. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 1, wherein: the test unit power supply and distribution cross recombination module comprises a pair of fuses connected in parallel, a relay K1, a cross recombination control circuit, a filter module, a first cross recombination DC/DC module, a second cross recombination DC/DC module and diodes D1-D4;

8. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 7, wherein: the FPGA module comprises a remote control and remote measurement processing module, a test unit switch control module, a power consumption monitoring and predicting module and a cross recombination control module;

9. The batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 8, wherein: the working modes of the test unit power supply and distribution cross recombination module comprise a double-machine normal power supply mode, a single-machine failure power supply mode, a double-machine centralized power supply mode, a single-machine full-load power supply mode and a double-machine failure power supply mode; the method comprises the following specific steps:

10. A control method implemented by a batched flight verification-oriented power supply and distribution reconfigurable control system according to claim 9, characterized by comprising the following steps:

if one group of test units needs the test units to supply power to two DC/DC modules in the power supply and distribution cross-recombination module at a certain time so as to complete the execution of the on-orbit test task, at the moment, a remote control command is sent to the power supply and distribution unit on the ground, the FPGA sends a power-off command through the test unit switch control module and the command interface circuit, the other group of test units and the connected relay are disconnected, the power outputs of the two groups of DC/DC modules of the cross-recombination module are switched to the test unit interface connected with the test unit, the centralized power supply of the double units is realized, and the step (6) is entered;

(8) all the test units are in a power-off mode under a double-machine failure working mode, two DC/DC modules in a cross recombination module of a power supply and distribution unit break down, the power supply and distribution unit sends a remote control command to disconnect a relay K1, the two DC/DC modules in the cross recombination module are both powered off, the FPGA sends the remote control command to the cross recombination module to close the relay K1 again, the cross recombination module is restarted, whether the output of the two DC/DC modules is normal or not is monitored, and whether the repair is completed or not is confirmed;

if the two DC/DC modules are repaired at the same time, a remote control command is sent to the power supply and distribution unit through the ground, the FPGA module sends a command to the test unit power supply and distribution cross recombination module, the relays K2 and K5 or K3 and K4 are disconnected, the test unit returns to the double-machine normal power supply mode, and the step (4) is carried out;

if the fault recovery of the single DC/DC module is finished, sending a remote control instruction to the power supply and distribution unit through the ground, sending an instruction to the cross recombination module by the FPGA module, disconnecting any relay connected with the repaired DC/DC module, and turning to the step (5);