CN109831242B - Recovery method and system for on-orbit latch of satellite-borne transponder - Google Patents
Recovery method and system for on-orbit latch of satellite-borne transponder Download PDFInfo
- Publication number
- CN109831242B CN109831242B CN201910064295.1A CN201910064295A CN109831242B CN 109831242 B CN109831242 B CN 109831242B CN 201910064295 A CN201910064295 A CN 201910064295A CN 109831242 B CN109831242 B CN 109831242B
- Authority
- CN
- China
- Prior art keywords
- satellite
- responder
- transponder
- instruction
- latch
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Landscapes
- Radio Relay Systems (AREA)
Abstract
The invention provides a recovery method and a system for on-orbit latch of a satellite-borne transponder, which comprises the following steps: the ground station or the relay satellite sends a remote control uplink instruction or data injection to the satellite; determining whether two transponders on the satellite are latched: if no response exists on the satellite, the two answering machines are latched simultaneously and enter a double-channel fault mode; if the satellite responds, the two answering machines work normally, or one of the answering machines A and B latches, and a single-channel fault mode is entered under the condition that one answering machine latches; restarting the fault responder B after power failure; the ground station or the relay satellite transmits a remote control uplink instruction or data injection to the satellite by using the transponder channel restarted after power failure; if the satellite normally receives the instruction or the data, the fact that the responder restarted after the power failure recovers normal work is indicated. According to the invention, when two transponders are latched, the satellite can automatically judge, and the latch transponder is subjected to autonomous power-off restarting to recover the measurement and control communication function.
Description
Technical Field
The invention relates to a satellite measurement and control communication system, in particular to a recovery method and a recovery system for on-orbit latch of a satellite-borne transponder.
Background
When the satellite operates in orbit, two transponders are generally adopted to communicate with the ground measurement and control system, the two transponders are mutually backup, namely when one transponder breaks down, the other transponder is used for normal communication. With the development of digital technology, a large number of digital elements such as FPGA, DSP, PROM and the like are adopted in the design of two answering machines, and the use of the digital elements can greatly simplify the design, production and debugging of the answering machines, reduce the weight of the answering machines and achieve the purposes of miniaturization and lightening. However, when the satellite runs in orbit, the components are sensitive to space single particles, especially a transponder loaded in a satellite platform, due to the adoption of a digital chip, single particle function interruption can be generated due to the interference of the single particles, especially control circuits in the transponder, such as a peripheral control circuit, a phase-locked loop circuit, a power-on reset circuit, an interface circuit and the like, when the circuits work abnormally under the influence of the single particles, a reset state or 'dead halt' occurs in a processing chip, and the communication function of the transponder and a ground measurement and control system cannot be failed in the state. The transponder needs to be brought back into function by a power-off restart operation.
For the two responders, the two responders are subjected to single-particle interference, or single-particle latching occurs simultaneously for some unknown reason, namely the in-orbit communication functions of the two responders fail simultaneously, at the moment, the ground measurement and control system sends a remote control command to the satellite, the satellite cannot normally receive and execute, and the satellite loses control in orbit.
Disclosure of Invention
Aiming at the defects in the prior art, the invention aims to provide a recovery method and a recovery system for on-orbit latch of a satellite-borne transponder, which can realize the aim of normal function by a power-off restart method under the condition that the transponder latches when a satellite operates in an orbit.
According to one aspect of the invention, a method for recovering an on-orbit latch of a satellite-borne transponder is provided, which comprises the following steps:
step 1: the ground station or the relay satellite sends a remote control uplink instruction or data injection to the satellite;
step 2: determining whether two transponders on the satellite are latched: if no response exists on the satellite, the two answering machines are latched simultaneously and enter a double-channel fault mode; if the satellite responds, the two answering machines work normally, or one of the answering machines A and B latches, and a single-channel fault mode is entered under the condition that one answering machine latches;
and step 3: powering off and restarting the responder A and/or the responder B;
and 4, step 4: the ground station or the relay satellite transmits a remote control uplink instruction or data injection to the satellite by using the transponder channel restarted after power failure; if the satellite normally receives the instruction or the data, the responder which is restarted after the power failure is indicated to recover to work normally; if the satellite cannot normally receive the data, the fact that the responder restarted after power failure does not work normally is indicated, and the reason is further analyzed.
Preferably, the dual channel failure mode in step 2 includes the following steps:
step 2.1.1: the end time T of the last instruction or data injection sent by the satellite computer through the responder channel0Starting timing;
step 2.1.2: the responder does not send an uplink instruction or data injection to the on-board computer in the first time period, the computer automatically executes the step 3, sends an instruction of turning off the responder B, and after the second time period, the on-board computer sends an instruction of turning on the responder B;
step 2.1.3: and (3) after a third time interval, automatically executing the step (3) again by the on-board computer, and sending the command of turning off the responder A by the on-board computer, and after a fourth time interval, sending the command of turning on the responder A by the on-board computer.
Preferably, the first period of time is longer than the third period of time, the third period of time is longer than the fourth period of time, and the fourth period of time is equivalent to the second period of time.
Preferably, the single channel failure mode in step 2 includes the following steps:
step 2.2.1: judging a fault responder by remote measuring the working state of an interpretation on-board computer;
step 2.2.2: determining whether the responder with the fault is a responder A or a responder B;
step 2.2.3: and remotely controlling to send out the command of turning off the responder B or the responder A by using the responder A or the responder B which normally works, and remotely controlling to send out the command of turning on the responder B or the responder A after a fifth period of time.
Preferably, the faulty transponder is determined on the basis of the priority of the transponder output data.
Preferably, the fifth period of time is comparable to the fourth period of time of step 2.1.3 in step 2.
Preferably, the method adopts transponder downlink telemetering to judge whether the satellite has response or not and whether the satellite transponder works normally, and adopts satellite remote control instruction counting, satellite data injection counting, transponder AGC level or transponder SNR telemetering parameters to judge a signal channel.
According to another aspect of the invention, a recovery system of the on-orbit latch of the satellite-borne transponder is provided, and the recovery system of the on-orbit latch of the satellite-borne transponder adopts the recovery method of the on-orbit latch of the satellite-borne transponder.
Preferably, more than two transponders are included, one for each signal channel.
Preferably, the carrier of the transponder is a product with wireless transceiving function.
Compared with the prior art, the invention has the following beneficial effects:
according to the invention, when the ground station or the relay satellite cannot send a remote control uplink instruction or data injection to the satellite after the transponders are all in fault latching, the problem of latching can be autonomously solved by the satellite, the satellite is prevented from losing control in orbit, and the method has great use value.
Drawings
Other features, objects and advantages of the invention will become more apparent upon reading of the detailed description of non-limiting embodiments with reference to the following drawings:
fig. 1 is a schematic block diagram of a satellite-borne transponder connection.
FIG. 2 is a flow chart of single event latch fault processing for a measurement and control channel.
Detailed Description
The present invention will be described in detail with reference to specific examples. The following examples will assist those skilled in the art in further understanding the invention, but are not intended to limit the invention in any way. It should be noted that variations and modifications can be made by persons skilled in the art without departing from the spirit of the invention. All falling within the scope of the present invention.
When the satellite operates in orbit, the transponders loaded in the satellite platform generate single-particle function interruption due to the adoption of the digital chip to the interference of single particles, namely the in-orbit communication functions of the two transponders are simultaneously invalid, at the moment, the ground measurement and control system sends a remote control command to the satellite, the satellite cannot be normally received, and the satellite loses control. According to the invention, when the two transponders are latched and the ground measurement and control system cannot go up, the on-board computer does not receive an uplink instruction or data injection within a specified time to judge, and the latch transponder is subjected to autonomous power-off restart to recover the measurement and control communication function.
The invention provides a recovery method of an on-orbit latch of a satellite-borne transponder, which comprises the following steps:
step 1: the ground station or the relay satellite sends a remote control uplink instruction or data injection to the satellite;
step 2: determining whether two transponders on the satellite are latched: if no response exists on the satellite, the two answering machines are latched simultaneously and enter a double-channel fault mode; if the satellite responds, the two answering machines work normally, or one of the answering machines A and B latches, and a single-channel fault mode is entered under the condition that one answering machine latches;
and step 3: powering off and restarting the responder A and/or the responder B;
and 4, step 4: the ground station or the relay satellite transmits a remote control uplink instruction or data injection to the satellite by using the transponder channel restarted after power failure; if the satellite normally receives the instruction or the data, the responder which is restarted after the power failure is indicated to recover to work normally; if the satellite cannot normally receive the data, the fact that the responder restarted after power failure does not work normally is indicated, and the reason is further analyzed.
The dual-channel fault mode in the step 2 comprises the following steps:
step 2.1.1: the end time T of the last instruction or data injection sent by the satellite computer through the responder channel0Starting timing;
step 2.1.2: the responder does not send an uplink instruction or data injection to the on-board computer in the first time period, the computer automatically executes the step 3, sends an instruction of turning off the responder B, and after the second time period, the on-board computer sends an instruction of turning on the responder B;
step 2.1.3: and (3) after a third time interval, automatically executing the step (3) again by the on-board computer, and sending the command of turning off the responder A by the on-board computer, and after a fourth time interval, sending the command of turning on the responder A by the on-board computer.
The first period of time is longer than the third period of time, the third period of time is longer than the fourth period of time, and the fourth period of time is equivalent to the second period of time. Preferably, the first period of time is 30 hours, the second period of time is 10 seconds, the third period of time is 2 hours, and the fourth period of time is 10 seconds.
The single channel failure mode in the step 2 comprises the following steps:
step 2.2.1: judging a fault responder by remote measuring the working state of an interpretation on-board computer;
step 2.2.2: determining whether the responder with the fault is a responder A or a responder B;
step 2.2.3: and remotely controlling to send out the command of turning off the responder B or the responder A by using the responder A or the responder B which normally works, and remotely controlling to send out the command of turning on the responder B or the responder A after a fifth period of time.
And judging the fault responder according to the priority of the data output by the responder. The fifth period of time corresponds to the fourth period of time of step 2.1.3 in step 2. Preferably, the fifth period of time is 10 seconds.
Preferably, the method adopts transponder downlink telemetering to judge whether the satellite has response or not and whether the satellite transponder works normally, and adopts satellite remote control instruction counting, satellite data injection counting, transponder AGC level or transponder SNR telemetering parameters to judge a signal channel.
According to the recovery system of the on-orbit latch of the satellite-borne transponder, the recovery method of the on-orbit latch of the satellite-borne transponder is adopted. The system comprises more than two transponders, and each transponder corresponds to one signal channel. The carrier of the transponder is a product with a wireless transceiving function.
As shown in fig. 1, the satellite-borne integrated spread spectrum transponder is mounted on a satellite, and is connected with an antenna through a cable, the antenna converts a microwave signal into an electric signal, and the satellite-borne integrated spread spectrum transponder is responsible for processing the electric signal, including a remote control uplink instruction or a data injection signal sent by a ground station and a relay satellite to the satellite.
Through the above design measures, the subsystem generates single event latch on the rail, the processing flow is shown in fig. 2, and the processing steps are as follows:
1. dual channel failure mode: the ground station and the relay satellite send remote control uplink instructions or data injection signals to the satellite, no response is made on the satellite, both the two answering machines are necessarily locked, at the moment, the satellite computer autonomously counts for 30 hours, no uplink instructions or data injection is received within 30 hours, the satellite computer autonomously sends instructions of powering off the answering machine B and powering on the answering machine B, after 2 hours, the instructions of powering off the answering machine A and powering on the answering machine A are sent again, and the dual-channel fault mode processing is finished. The ground station or the relay satellite transmits a remote control uplink instruction or data injection to the satellite by using the transponder channel restarted after power failure; if the satellite normally receives the instruction or the data, the responder which is restarted after the power failure is indicated to recover to work normally; if the satellite cannot normally receive the data, the fact that the responder restarted after power failure does not work normally is indicated, and the reason is further analyzed.
2. Single-channel failure mode: the ground station and the relay satellite transmit remote control uplink instructions or data injection signals to the satellite, the satellite responds, the state of the satellite computer is telemetered, and whether the channel A responds or the channel B responds can be seen according to the priority of data output by the responder; taking the channel A not responding and the channel B responding as an example, the normal responder B is utilized to send a command of powering off the responder A and powering on the responder A, the telemetering transmitted by the satellite is observed, and if the channel A returns to normal, the problem of single-channel latch is proved to be solved; if the channel A does not return to normal, the reason is further analyzed.
The foregoing description of specific embodiments of the present invention has been presented. It is to be understood that the present invention is not limited to the specific embodiments described above, and that various changes or modifications may be made by one skilled in the art within the scope of the appended claims without departing from the spirit of the invention. The embodiments and features of the embodiments of the present application may be combined with each other arbitrarily without conflict.
Claims (8)
1. A recovery method for on-orbit latch of a satellite-borne transponder is characterized by comprising the following steps:
step 1: the ground station or the relay satellite sends a remote control uplink instruction or data injection to the satellite;
step 2: determining whether two transponders on the satellite are latched: if no response exists on the satellite, the two answering machines are latched simultaneously and enter a double-channel fault mode; if the satellite responds, the two answering machines work normally, or one of the answering machines A and B latches, and a single-channel fault mode is entered under the condition that one answering machine latches;
and step 3: when entering a double-channel fault mode, the responder A and the responder B are restarted after power failure; when entering a single-channel fault mode, powering off and restarting the responder A or the responder B;
and 4, step 4: the ground station or the relay satellite transmits a remote control uplink instruction or data injection to the satellite by using the transponder channel restarted after power failure; if the satellite normally receives the instruction or the data, the responder which is restarted after the power failure is indicated to recover to work normally; if the satellite cannot normally receive the data, the fact that the responder restarted after the outage does not work normally is indicated, and the reason is further analyzed;
the dual-channel fault mode in the step 2 comprises the following steps:
step 2.1.1: the end time T of the last instruction or data injection sent by the satellite computer through the responder channel0Starting timing;
step 2.1.2: the responder does not send an uplink instruction or data injection to the on-board computer in the first time period, the computer automatically executes the step 3, sends an instruction of turning off the responder B, and after the second time period, the on-board computer sends an instruction of turning on the responder B;
step 2.1.3: after a third time interval, the on-board computer automatically executes the step 3 again, and sends an instruction of turning off the responder A, and after a fourth time interval, the on-board computer sends an instruction of turning on the responder A;
the single channel failure mode in the step 2 comprises the following steps:
step 2.2.1: judging a fault responder by remote measuring the working state of an interpretation on-board computer;
step 2.2.2: determining whether the responder with the fault is a responder A or a responder B;
step 2.2.3: and remotely controlling to send out the command of turning off the responder B or the responder A by using the responder A or the responder B which normally works, and remotely controlling to send out the command of turning on the responder B or the responder A after a fifth time period.
2. The method for recovering on-orbit latch of a satellite-borne transponder according to claim 1, wherein the first period of time is greater than a third period of time, the third period of time is greater than a fourth period of time, and the fourth period of time is equivalent to the second period of time.
3. The on-board transponder on-orbit latch recovery method according to claim 1, wherein the failed transponder is determined according to the priority of the transponder output data.
4. The method for recovering on-orbit latch of satellite-borne transponder according to claim 1, characterized in that said fifth time period is equivalent to the fourth time period of step 2.1.3 in step 2.
5. The method for recovering on-orbit latch of a satellite-borne transponder according to claim 1, characterized in that the downlink telemetry of the transponder is adopted to judge whether the satellite has a response or not and whether the on-satellite transponder normally works or not, and the on-satellite remote control instruction counting, the on-satellite data injection counting, the AGC level of the transponder or the SNR telemetry parameter of the transponder is adopted to judge a signal channel.
6. A recovery system for on-board transponder latch, characterized in that the recovery system for on-board transponder latch adopts the recovery method for on-board transponder latch of any one of claims 1 to 5.
7. A recovery system for on-board satellite transponder on-orbit latches as claimed in claim 6, comprising more than two transponders, one for each signal channel.
8. A recovery system for on-board transponder on-track latches according to claim 6, characterized in that the carrier of the transponder is a product with wireless transceiving function.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910064295.1A CN109831242B (en) | 2019-01-23 | 2019-01-23 | Recovery method and system for on-orbit latch of satellite-borne transponder |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910064295.1A CN109831242B (en) | 2019-01-23 | 2019-01-23 | Recovery method and system for on-orbit latch of satellite-borne transponder |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109831242A CN109831242A (en) | 2019-05-31 |
| CN109831242B true CN109831242B (en) | 2021-05-11 |
Family
ID=66862229
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910064295.1A Active CN109831242B (en) | 2019-01-23 | 2019-01-23 | Recovery method and system for on-orbit latch of satellite-borne transponder |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109831242B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111628819B (en) * | 2020-05-28 | 2021-05-28 | 中国人民解放军32039部队 | Relay satellite system forward link detection method and device and electronic equipment |
| CN112367107B (en) * | 2020-09-11 | 2022-07-05 | 中国空间技术研究院 | Method and system for autonomously processing satellite measurement and control equipment fault on satellite |
| CN112688729B (en) * | 2020-12-18 | 2022-08-12 | 航天东方红卫星有限公司 | Satellite-borne full-digital USB transponder on-orbit autonomous recovery method |
| CN116488711B (en) * | 2023-06-15 | 2023-08-22 | 上海航天空间技术有限公司 | Method and system for establishing satellite-ground emergency communication |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5414833A (en) * | 1993-10-27 | 1995-05-09 | International Business Machines Corporation | Network security system and method using a parallel finite state machine adaptive active monitor and responder |
| KR20030054453A (en) * | 2001-12-26 | 2003-07-02 | 한국항공우주연구원 | Latch-up simulator |
| US7091855B2 (en) * | 2003-09-12 | 2006-08-15 | Simplexgrinnell Lp | Fire alarm with distinct alarm reset threshold |
| CN103135465A (en) * | 2013-01-25 | 2013-06-05 | 北京空间飞行器总体设计部 | Method for removing on-track latch faults of spread spectrum responder of spacecraft |
| CN103777135A (en) * | 2012-10-18 | 2014-05-07 | 北京圣涛平试验工程技术研究院有限责任公司 | Single particle latch monitoring method and apparatus of FPGA |
| CN104021051A (en) * | 2014-06-06 | 2014-09-03 | 上海航天电子通讯设备研究所 | Monitoring and correcting device for single event upset fault of satellite borne spread spectrum responder |
| CN109104233A (en) * | 2018-06-15 | 2018-12-28 | 上海卫星工程研究所 | A kind of method that low orbit spacecraft prevents double response machine from failing |
-
2019
- 2019-01-23 CN CN201910064295.1A patent/CN109831242B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5414833A (en) * | 1993-10-27 | 1995-05-09 | International Business Machines Corporation | Network security system and method using a parallel finite state machine adaptive active monitor and responder |
| KR20030054453A (en) * | 2001-12-26 | 2003-07-02 | 한국항공우주연구원 | Latch-up simulator |
| US7091855B2 (en) * | 2003-09-12 | 2006-08-15 | Simplexgrinnell Lp | Fire alarm with distinct alarm reset threshold |
| CN103777135A (en) * | 2012-10-18 | 2014-05-07 | 北京圣涛平试验工程技术研究院有限责任公司 | Single particle latch monitoring method and apparatus of FPGA |
| CN103135465A (en) * | 2013-01-25 | 2013-06-05 | 北京空间飞行器总体设计部 | Method for removing on-track latch faults of spread spectrum responder of spacecraft |
| CN104021051A (en) * | 2014-06-06 | 2014-09-03 | 上海航天电子通讯设备研究所 | Monitoring and correcting device for single event upset fault of satellite borne spread spectrum responder |
| CN109104233A (en) * | 2018-06-15 | 2018-12-28 | 上海卫星工程研究所 | A kind of method that low orbit spacecraft prevents double response machine from failing |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109831242A (en) | 2019-05-31 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109831242B (en) | Recovery method and system for on-orbit latch of satellite-borne transponder | |
| CN102053882A (en) | Heterogeneous satellite-borne fault-tolerant computer based on COTS (Commercial Off The Shelf) device | |
| CN105955299A (en) | Reconfigurable integrated measurement-control, navigation, flight control system and reconstruction method thereof | |
| CN101501584B (en) | Modem for submarine electric cable communication | |
| CN109598982B (en) | Airborne monitoring system based on multilink | |
| US11012150B2 (en) | Autonomous failure recovery method and system for fiber-optic communication system | |
| US20120147757A1 (en) | Method, System and Apparatus for Diagnosing Physical Downlink Failure | |
| CN109104233B (en) | Method for preventing double-transponder failure of low-orbit spacecraft | |
| US20050200520A1 (en) | Power saving operation in a GPS-based asset tracking unit | |
| CN111308513B (en) | Navigation satellite signal and telegraph text autonomous integrated monitoring system and method | |
| US6735501B1 (en) | Satellite commanding using remotely controlled modulation of satellite on-board telemetry parameters | |
| CN117421270B (en) | Self-adaptive clock system | |
| CN104898477A (en) | Method for satellite spread-spectrum transponder to independently resist space single-event upset fault | |
| JPH0716274B2 (en) | Wireless telemeter system | |
| CN112380036B (en) | Cab signal host software system | |
| CN104590584A (en) | Satellite on-orbit embedded type test system | |
| US20170293274A1 (en) | Apparatus for managing dual level reset of microgrid gateway for new regeneration energy management system and method thereof | |
| CN108616591B (en) | Interface device and method for data exchange | |
| CN114665987A (en) | Antenna health management system based on artificial intelligence | |
| KR100237186B1 (en) | Method of remote control using autonomous monitoring for the low earth orbit satellites | |
| CN219259226U (en) | Elevator operation monitoring device with self-checking function | |
| CN112000078B (en) | Method for recovering state of redundancy flight control computer after fault | |
| CN111474914B (en) | Fault code big data storage system | |
| CN215912095U (en) | Short message communication system | |
| CN116400580B (en) | Multi-redundancy control integrated electronic system and implementation method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |