CN112731793B - Redundant system of space mechanism controller - Google Patents
Redundant system of space mechanism controller Download PDFInfo
- Publication number
- CN112731793B CN112731793B CN202011410147.XA CN202011410147A CN112731793B CN 112731793 B CN112731793 B CN 112731793B CN 202011410147 A CN202011410147 A CN 202011410147A CN 112731793 B CN112731793 B CN 112731793B
- Authority
- CN
- China
- Prior art keywords
- module
- backup
- arbitration
- processor
- motor drive
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The invention discloses a redundant system of a space mechanism controller, which comprises: the motor drive control module assembly, the processor module assembly and the arbitration backup module assembly are sequentially connected; the motor drive control module component comprises a pair of motor drive control modules which are arranged in a backup way; the processor module assembly comprises a pair of processor modules which are mutually arranged in a backup way; the arbitration backup module component comprises a pair of arbitration backup modules which are arranged for backing up each other.
Description
Technical Field
The invention relates to the field of space vehicle actuating mechanism controllers, in particular to a redundant system of a space vehicle actuating mechanism controller.
Background
The conventional space mechanism controller generally adopts a main/standby machine redundancy design mode, and the main/standby machine switching is carried out through an external instruction.
The conventional spacecraft mechanism controller generally adopts a main and standby machine redundancy design mode, the redundancy design mode adopts a cold backup working mode, once a fault occurs, the mechanism needs to be switched by upper layer single machine or ground judgment, in the fault process, the mechanism is in an out-of-control state, and after the switching is finished, because the current mechanism does not have various data, the mechanism control is interrupted, and the continuous operation of the mechanism control is not facilitated.
Disclosure of Invention
The invention aims to provide a redundant system of a space mechanism controller, which realizes the on-orbit automatic cutting machine and fault recovery of the mechanism controller and greatly improves the reliability of products.
In order to achieve the purpose, the invention is realized by the following technical scheme:
a redundant system of a space mechanism controller is characterized by comprising: the motor drive control module assembly, the processor module assembly and the arbitration backup module assembly are sequentially connected;
the motor drive control module component comprises a pair of motor drive control modules which are arranged in a backup way;
the processor module assembly comprises a pair of processor modules which are mutually arranged in a backup way;
the arbitration backup module component comprises a pair of arbitration backup modules which are arranged for backing up each other.
Each motor driving control module is respectively connected with each processor module;
each processor module is connected to each arbitration backup module.
Each module is connected with an independent relay and controls the power supply of the relay.
And data interaction is carried out among the modules in a serial port mode.
One processor module carries out data interaction with any one motor drive control module; if the communication between the processor module and the motor drive control module fails or the content returned to the processor module by the motor drive control module is wrong, the processor module controls one of the motor drive control modules to be powered off and controls the other motor drive control module to be powered on.
One arbitration backup module performs data interaction with any processor module; if the communication between the arbitration backup module and the processor modules fails or the contents returned by the processor modules to the arbitration backup module are wrong, the arbitration backup module controls one of the processor modules to be powered off and controls the other processor module to be powered on.
The arbitration backup module is also connected with a superior single machine; if the communication between the arbitration backup module and the superior single machine fails or the content returned by the arbitration backup module to the superior single machine is wrong, the superior single machine controls one arbitration backup module to be powered off and controls the other arbitration backup module to be powered on.
The upper level single machine is also used for receiving the communication error state of the processor module and the arbitration backup module.
Compared with the prior art, the invention has the following advantages:
the reliability of the product adopting the scheme is greatly higher than that of the conventional scheme; meanwhile, because the modules are subjected to data interactive backup, when a single module breaks down, the fault module can be quickly positioned and the cutting machine can be implemented, and then the continuous control of the mechanism is realized through data backup and recovery.
Drawings
Fig. 1 is a schematic structural diagram of a redundancy system of a spatial mechanism controller according to the present invention.
Detailed Description
The present invention will now be further described by way of the following detailed description of a preferred embodiment thereof, taken in conjunction with the accompanying drawings.
As shown in fig. 1, a redundant system of a spatial mechanism controller includes: the motor drive control module assembly, the processor module assembly and the arbitration backup module assembly are sequentially connected; the motor drive control module component comprises a pair of motor drive control modules which are arranged in a backup way; the processor module assembly comprises a pair of processor modules which are mutually arranged in a backup way; the arbitration backup module component comprises a pair of arbitration backup modules which are arranged for backing up each other.
Each motor driving control module is respectively connected with each processor module; each processor module is connected to each arbitration backup module.
Each module is connected with an independent relay and controls the power supply of the relay.
And data interaction is carried out among the modules in a serial port mode.
One processor module carries out data interaction with any one motor drive control module; if the communication between the processor module and the motor drive control module fails or the content returned to the processor module by the motor drive control module is wrong, the processor module controls one of the motor drive control modules to be powered off and controls the other motor drive control module to be powered on.
One arbitration backup module performs data interaction with any processor module; if the communication between the arbitration backup module and the processor modules fails or the contents returned by the processor modules to the arbitration backup module are wrong, the arbitration backup module controls one of the processor modules to be powered off and controls the other processor module to be powered on.
The arbitration backup module is also connected with a superior single machine; if the communication between the arbitration backup module and the upper stand-alone machine fails or the content returned to the upper stand-alone machine by the arbitration backup module is wrong, the upper stand-alone machine controls one arbitration backup module to be powered off and controls the other arbitration backup module to be powered on.
The upper level single machine is also used for receiving the communication error state of the processor module and the arbitration backup module.
Further, the motor drive control module component comprises a main motor drive control module and a standby motor drive control module; the processor module assembly comprises a main processor module and a standby processor module; the arbitration backup module component comprises a main arbitration backup module and a backup arbitration backup module. The main motor drive control module is connected with the standby motor drive control module through a data serial port, the main processor module is simultaneously connected with the main motor drive control module and the standby motor drive control module, the standby processor module is simultaneously connected with the main motor drive control module and the standby motor drive control module, a relay is arranged between the main processor module and the main motor drive control module, a cutter instruction is sent out by the corresponding processor module when the communication between the main motor drive module and the main processor module or the standby processor module fails or the content returned to the main processor module or the standby processor module is wrong, the relay cuts off the power supply of the main motor drive module after receiving the cutter instruction and controls the standby motor drive module to be electrified; the backup and switching principle between the backup motor driving control module and the main/backup processor module is similar to that of the main motor driving control module, and is not described again here.
The main processor module and the standby processor module are connected through a data serial port, the main arbitration backup module is simultaneously connected with the main/standby processor module, the standby arbitration backup module is simultaneously connected with the main/standby processor module, a relay is arranged between the main arbitration backup module and the main processor module, and a relay is arranged between the standby arbitration backup module and the standby processor module; when the communication between the standby processor module and the main arbitration backup module or the standby arbitration backup module fails or the content returned to the main/standby arbitration backup module is wrong, the state of the communication error with the standby processor module is fed back to a superior single machine through remote measurement, so that the phenomenon that the processor module is not shut down due to the fault of the current arbitration backup module is prevented, and finally the complete machine cannot work.
The main/standby arbitration backup module is connected with the upper stand-alone machine through a relay, when the main arbitration backup module fails to communicate with the upper stand-alone machine or has a state error, the upper stand-alone machine controls the main arbitration backup module to be powered off and controls the standby arbitration backup module to be powered on, and when the standby arbitration backup module fails to communicate with the upper stand-alone machine or has a state error, the upper stand-alone machine controls the standby arbitration backup module to be powered off and controls the main arbitration backup module to be powered on.
Furthermore, the arbitration backup module adopts a simple and reliable circuit design to improve the reliability of the module as much as possible, and simultaneously, external instructions are reserved to switch the module.
Assuming that the reliability of the processor module, the motor drive control module and the arbitration backup module are R1, R2 and R3 respectively, the reliability of the conventional mechanism controller R =1- (1-R1R 2R 3) 2 And the reliability R' = (1- (1-R1) by adopting the scheme 2 )*(1-(1-R2) 2 )*(1-(1-R3) 2 ) Obviously, the reliability of the product adopting the scheme is greatly higher than that of the conventional scheme; meanwhile, because the modules are subjected to data interactive backup, when a single module breaks down, the fault module can be quickly positioned and the cutting machine can be implemented, and then the continuous control of the mechanism is realized through data backup and recovery.
While the present invention has been described in detail with reference to the preferred embodiments, it should be understood that the above description should not be taken as limiting the invention. Various modifications and alterations to this invention will become apparent to those skilled in the art upon reading the foregoing description. Accordingly, the scope of the invention should be limited only by the attached claims.
Claims (6)
1. A redundant system of a space mechanism controller, comprising: the motor drive control module assembly, the processor module assembly and the arbitration backup module assembly are sequentially connected;
the motor drive control module component comprises a pair of motor drive control modules which are arranged in a backup way;
the processor module assembly comprises a pair of processor modules which are mutually arranged in a backup way;
the arbitration backup module component comprises a pair of arbitration backup modules which are mutually in backup setting;
one processor module carries out data interaction with any one motor drive control module; if the communication between the processor module and the motor drive control module fails or the content returned to the processor module by the motor drive control module is wrong, the processor module controls one of the motor drive control modules to be powered off and controls the other motor drive control module to be powered on;
one arbitration backup module performs data interaction with any processor module; if the communication between the arbitration backup module and the processor modules fails or the contents returned by the processor modules to the arbitration backup module are wrong, the arbitration backup module controls one of the processor modules to be powered off and controls the other processor module to be powered on.
2. The space mechanism controller redundancy system of claim 1, wherein each of the motor drive control modules is connected to each of the processor modules;
each of the processor modules is connected to each of the arbitration backup modules.
3. The space mechanism controller redundancy system of claim 1, wherein each module is connected to a separate relay and controls its power supply.
4. The space mechanism controller redundancy system of claim 1, wherein the modules interact with each other in a serial mode.
5. The spatial mechanism controller redundancy system as set forth in claim 1, wherein said arbitration backup module is further connected to a superior stand-alone; if the communication between the arbitration backup module and the upper stand-alone machine fails or the content returned to the upper stand-alone machine by the arbitration backup module is wrong, the upper stand-alone machine controls one arbitration backup module to be powered off and controls the other arbitration backup module to be powered on.
6. The spatial mechanism controller redundancy system as set forth in claim 5, wherein said upper level single machine is further adapted to receive a communication error status of the processor module and the arbitration backup module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011410147.XA CN112731793B (en) | 2020-12-03 | 2020-12-03 | Redundant system of space mechanism controller |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011410147.XA CN112731793B (en) | 2020-12-03 | 2020-12-03 | Redundant system of space mechanism controller |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112731793A CN112731793A (en) | 2021-04-30 |
| CN112731793B true CN112731793B (en) | 2022-12-23 |
Family
ID=75599170
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011410147.XA Active CN112731793B (en) | 2020-12-03 | 2020-12-03 | Redundant system of space mechanism controller |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112731793B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115857399A (en) * | 2022-12-02 | 2023-03-28 | 之江实验室 | Many rotor unmanned aerial vehicle flight control system and many rotor unmanned aerial vehicle based on centralized redundancy |
Family Cites Families (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5808921A (en) * | 1996-01-12 | 1998-09-15 | Hughes Aircraft Company | Interface emulation system and method for applications utilizing embedded processors |
| US7236738B2 (en) * | 2003-08-01 | 2007-06-26 | Pathfire, Inc. | Multicast control systems and methods for dynamic, adaptive time, bandwidth,frequency, and satellite allocations |
| US7877627B1 (en) * | 2008-12-18 | 2011-01-25 | Supercon, L.L.C. | Multiple redundant computer system combining fault diagnostics and majority voting with dissimilar redundancy technology |
| CN101833536B (en) * | 2010-04-16 | 2012-02-08 | 北京航空航天大学 | Reconfigurable on-board computer of redundancy arbitration mechanism |
| CN102053882B (en) * | 2011-01-11 | 2013-08-21 | 北京航空航天大学 | Heterogeneous satellite-borne fault-tolerant computer based on COTS (Commercial Off The Shelf) device |
| CN102122276B (en) * | 2011-01-31 | 2013-02-06 | 哈尔滨工业大学 | Double-processor borne computer |
| CN103823362A (en) * | 2014-02-17 | 2014-05-28 | 南京航空航天大学 | Arbitration mechanism-based similar dual-redundancy flight control computer and redundancy control method |
| CN104015939A (en) * | 2014-05-26 | 2014-09-03 | 中国科学院长春光学精密机械与物理研究所 | Comprehensive management system for platform and load integrated satellite |
| CN104111881B (en) * | 2014-07-25 | 2016-03-30 | 中国航天科工集团第二研究院七〇六所 | A kind of arbitration device for dual-computer redundancy Hot Spare computing machine |
| CN204028586U (en) * | 2014-07-25 | 2014-12-17 | 北京航天自动控制研究所 | A kind of aircraft redundancy control circuit based on relay |
| CN107247644A (en) * | 2017-07-03 | 2017-10-13 | 上海航天控制技术研究所 | A kind of reconstruct down method of triple redundance computer system |
| CN109194213A (en) * | 2018-09-27 | 2019-01-11 | 上海航天测控通信研究所 | A kind of warm back-up control circuit of spaceborne stepper motor driving circuit |
-
2020
- 2020-12-03 CN CN202011410147.XA patent/CN112731793B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN112731793A (en) | 2021-04-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103838230B (en) | The failure switching method of the digital rudder controller control system of a kind of extendible redundance and the number of axle | |
| US10875571B2 (en) | Motor control system and electric power steering system | |
| CN100559749C (en) | A kind of implementation method of star network bus redundancy backup | |
| CN102331786A (en) | Dual-computer cold-standby system of attitude and orbit control computer | |
| CN107757593A (en) | A kind of electronic parking control system and its control method with redundancy parking function | |
| CN109733461A (en) | The redundant electronic steering system and control method of automatic driving vehicle | |
| CN103647781A (en) | Mixed redundancy programmable control system based on equipment redundancy and network redundancy | |
| CN112731793B (en) | Redundant system of space mechanism controller | |
| CN104579029A (en) | Tri-redundancy brushless DC servo drive controller | |
| CN108698630A (en) | The calculating of fail safe for improving servo steering device and function structure system | |
| CN115257911A (en) | Steer-by-wire control system, steer-by-wire control method, vehicle, and storage medium | |
| CN110654239A (en) | Automobile parking system with redundancy backup function and failure processing method thereof | |
| CN112249151B (en) | Steering-by-wire system, control method and automobile | |
| CN107499374B (en) | A kind of double redundancy steer-by-wire system | |
| CN109094641A (en) | Corner controls assembly electronic control unit | |
| CN107317533A (en) | The online switching device of double servo-drivers and method based on magnetic latching contactor | |
| CN212220125U (en) | Redundant line control system for electric vehicle | |
| CN112660158A (en) | Driving assistance control system | |
| CN105550077A (en) | Backup control system | |
| CN113753223A (en) | Undercarriage control method and device, electronic equipment and storage medium | |
| CN117002461A (en) | Brake control system and brake control method for single-side EPB redundancy | |
| EP2638556B1 (en) | Combination switch | |
| CN212861612U (en) | Drive-by-wire steering system and automobile | |
| CN114940183A (en) | Distributed power backup control system meeting automatic driving and vehicle | |
| KR101275027B1 (en) | Man machine interface apparatus for railway car |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |