CN114594671A - System and method for self-diagnosis and autonomous switching of faults of aerospace dual-redundancy space communication equipment - Google Patents

Abstract

The invention discloses a system and a method for self-diagnosing faults and automatically switching space communication equipment of aerospace dual redundancy, wherein the system comprises the following steps: the fault self-diagnosis module is used for self-diagnosing and judging faults and carrying out triple modular redundancy processing on the logic circuit of the fault self-diagnosis; the autonomous switching permission and prohibition control module is used for generating a control signal; the ground instruction response module is used for carrying out filtering processing and operation on the ground instruction; the fault diagnosis result response module is used for responding the self-diagnosis result; the ground instruction switching and autonomous switching control module is used for generating corresponding control signals; and the switching instruction output module is used for widening output pulses of the switching instruction, and controlling autonomous switching and ground instruction switching. Therefore, the invention adopts the method of combining the FPGA logic circuit and the combinational logic circuit, improves the precision degree of fault diagnosis and avoids the defect that the fault can not be judged due to step loss and error codes in the traditional autonomous switching method.

Description

System and method for self-diagnosis and autonomous switching of faults of aerospace dual-redundancy space communication equipment

Technical Field

The invention relates to the technical field of space communication equipment, in particular to a system and a method for self-diagnosing and autonomously switching a fault of space navigation dual-redundancy space communication equipment.

Background

In the aerospace field, in order to ensure the reliability of an electronic circuit system, a certain circuit module or system is often selected to be subjected to dual redundancy backup, so that when one system fails, the other backup system can be switched back to increase the reliability of an aerospace electronic system. During the process of back-and-forth selection and switching, the ground console is always required to send a remote control command to complete the switching operation. How to enable aerospace space equipment to be capable of automatically detecting self faults in orbit, and when faults occur, the aerospace space equipment can be automatically diagnosed and automatically switched to a backup circuit for use, and the aerospace space equipment is a difficult problem in front of aerospace system designers.

In the development process of aerospace communication equipment, a dual-computer redundancy structure is usually adopted for design. The advantage of this design is that in case of failure of the primary device, the standby device can be switched to operate in place of the primary device. Such switching functions are typically performed by remote control commands. However, since a remote switching command is sent from the ground to the space communication device operating in orbit, corresponding telemetry information is often required as a judgment basis, and cannot be sent in real time, and the ground cannot necessarily normally receive telemetry criterion information under the condition that the main device fails. This requires space communication equipment with autonomous fault diagnosis and autonomous handover functions.

At present, in the field of fault diagnosis and autonomous switching of dual redundant equipment in aerospace, the main application methods are as follows: yang Han and Fan Xiang Hui, a "1553B bus interface module design and realization that switches over voluntarily of activestandby", information communication, 2016 05 th year, designed a Remote Terminal (RT) interface module that can realize that switches over and satisfies 1553B bus standard voluntarily, under the condition of sharing 1 RT address and transceiver, transformer, realize the hot backup function of two routes 1553B buses, thus improve the reliability of subsystem 1553B bus communication. The interface module adopts SoC chips as protocol processors, the two SoC chips form two independent protocol processing circuits of the interface module A, B, and the functions of host interface time sequence access and fault autonomous switching are realized through FPGA. The method cannot meet the high reliability, single particle resistance and total dose resistance required by aerospace equipment.

Shanghai navigation sky survey and control communication institute application number CN201110366018.X, the name "satellite-borne dual-redundancy computer host computer operating condition monitoring and fault autonomous switching device", discloses a satellite-borne dual-redundancy computer host computer operating condition monitoring and fault autonomous switching device, includes: the acquisition circuit for normal signals of the host is connected with the autonomous switching logic control circuit; the anti-error switching guarantee circuit is connected with the autonomous switching logic control circuit; the autonomous switching logic control circuit determines whether to output a switching instruction signal to the autonomous switching drive circuit according to a result of the integrating circuit of the acquisition circuit. The invention adopts the circuit with the functions of autonomous fault diagnosis and switching, can implement high-reliability switching on the dual-redundancy spaceborne computer, and solves the problem of fault diagnosis and processing under the autonomous operation state of the spaceborne dual-redundancy computer and the problem of error switching under the normal working condition. The method can only diagnose abnormal voltage output conditions, and can not diagnose fault conditions caused by information step loss and error codes.

In summary, the prior art cannot enable an aerospace device to autonomously detect a fault of the aerospace device on track, and autonomously diagnose and autonomously switch to a backup circuit for use when the fault occurs.

Disclosure of Invention

The invention aims to provide a system and a method for self-diagnosing the fault and automatically switching the communication equipment of the aerospace dual-redundancy space, which achieve the aim of improving the reliability of the equipment by using an FPGA (field programmable gate array) to carry out self-diagnosis of the communication fault and using a 54-series combinational logic circuit to realize the method for automatically switching or switching the main backup by a ground instruction.

The invention provides a fault self-diagnosis and autonomous switching system of aerospace dual-redundancy space communication equipment, which comprises the following steps: the fault self-diagnosis module is used for self-diagnosing and judging faults, performing triple modular redundancy processing on the logic circuit of the fault self-diagnosis, and outputting a self-diagnosis result after triple modular redundancy to the fault diagnosis result response module; the autonomous switching permission and prohibition control module is used for generating a control signal for permitting autonomous switching or prohibiting autonomous switching; the ground instruction response module is used for outputting a response result of the ground instruction by filtering and calculating the ground instruction; the fault diagnosis result response module is used for responding the self-diagnosis result and outputting a normal feedback signal when the diagnosis result is abnormal; when the diagnosis result is normal, outputting a normal feedback signal; the ground instruction switching and autonomous switching control module is used for outputting the result of the operation of the fault diagnosis result response module to the ground instruction switching and autonomous switching control module to generate a corresponding control signal; and the switching instruction output module is used for broadening output pulses of the switching instruction to achieve the purpose of time delay and is also used for controlling autonomous switching and ground instruction switching.

Preferably, an FPGA logic circuit is combined with a combinational logic circuit of 54 series chips, wherein the FPGA logic circuit is used for fault self-diagnosis, and the combinational logic circuit of 54 series chips is used for self-switching; the autonomous switching of the device is performed by sending the result of the fault self-diagnosis to the combinational logic circuit to perform an operation.

Preferably, the fault self-diagnosis module includes a triple modular redundancy module for performing fault self-diagnosis of the dual redundant space communication apparatus by judging whether a packet header of each transmission packet of the communication apparatus meets a normal standard.

Preferably, the autonomous switching enable and disable control module comprises a D flip-flop, an output end of the D flip-flop is connected with an inverter to control the high and low of the signal, and when the control signal is at a low level, the system enables autonomous switching, that is, the autonomous switching and the ground command switching respond simultaneously; when the control signal is at a high level, the system prohibits the autonomous switching, namely, the autonomous switching function is invalid, and only responds to the ground command switching signal.

Preferably, the ground instruction response module includes a ground instruction signal, a diode, a first resistor, a first capacitor and a second capacitor, which are sequentially connected and grounded, and one end of the input of the first and gate is connected, and meanwhile, the second resistor, the third capacitor and the fourth capacitor are connected between the diode and the first resistor; the output end of the first AND gate is connected with the first inverter and the second inverter and outputs the first AND gate to the switching instruction output module; the other end of the first AND gate input is connected with the output end of the first OR gate, one end of the first OR gate input is connected with the second AND gate and the third resistor and is connected with the power supply, and the other end of the first OR gate input is connected with the third AND gate and the fourth resistor and is connected with the power supply.

Preferably, in the fault diagnosis result response module, the output signal of the fault self-diagnosis comprises a fault self-diagnosis output signal of the master and a backup fault self-diagnosis output signal, and the fault self-diagnosis output signal of the master and the backup fault self-diagnosis output signal are subjected to combinational logic operation and then sent to the ground command switching and autonomous switching control module.

Preferably, the fault diagnosis result response module includes a fault self-diagnosis output signal and a backup fault self-diagnosis output signal, the fault self-diagnosis output signal is connected with a third not gate input end, a third not gate output end is respectively connected with one end of a second or gate input and one end of a fourth and gate input, the other end of the second or gate input and the other end of the fourth and gate input are respectively connected with the backup fault self-diagnosis output signal, the output end of the second or gate and the output end of the fourth and gate are respectively connected with one end of a fifth and gate input and one end of a sixth and gate input, the other end of the fifth and gate input and the other end of the sixth and gate input are respectively connected with the switching command, and the output end of the fifth and gate and the output end of the sixth and gate and the third or gate and gate are connected to the ground command switching and autonomous switching control module.

Preferably, the switching instruction output module adopts a D trigger to access a response signal of the ground manual control instruction to the signal input end, and executes ground instruction switching or output of an autonomous switching signal through high-low level conversion of the signal input end or linkage change of a control signal.

Preferably, in the ground command switching and autonomous switching control module, when the output is a response of the ground command, the width of the output signal is 2 times the width of the CLK signal output by the ground command response module.

The invention also provides a fault self-diagnosis and autonomous switching method of the aerospace dual-redundancy space communication equipment, which comprises the following steps:

step S1, the fault self-diagnosis module carries out fault self-diagnosis and discrimination, the logic circuit of the fault self-diagnosis is processed by triple modular redundancy, and the self-diagnosis result after triple modular redundancy is output to the fault diagnosis result response module;

step S2, generating a control signal for allowing or forbidding the autonomous switching through the autonomous switching allowing and forbidding control module;

step S3, filtering and calculating the ground command through a ground command response module, and outputting a response result of the ground command;

step S4, the self-diagnosis result is responded by the fault diagnosis result responding module, and when the diagnosis result is abnormal, a normal feedback signal is output; when the diagnosis result is normal, outputting a normal feedback signal;

step S5, outputting the result of the fault diagnosis result response module to the ground command switching and autonomous switching control module through the ground command switching and autonomous switching control module, and generating a corresponding control signal;

and step S6, the output pulse of the switching instruction is widened through the switching instruction output module to achieve the aim of time delay, and meanwhile, the autonomous switching and the ground instruction switching are controlled.

Compared with the prior art, the invention has the following beneficial effects:

firstly, the invention adopts the method of combining the FPGA logic circuit and the combinational logic circuit, thereby improving the precision degree of fault diagnosis and avoiding the defect that the fault can not be judged due to step loss and error codes in the traditional autonomous switching method.

Secondly, the invention has the function of switching the redundant backup equipment by the ground remote control instruction while having the function of autonomous real-time switching, and can autonomously switch the redundant backup equipment by internal autonomous logical judgment under the condition of ensuring that the ground control function is completely unchanged, thereby improving the switching efficiency and enhancing the reliability of the equipment.

Thirdly, the invention uses the triple modular redundancy design on the key module, when the fault self-diagnosis module in the FPGA generates abnormal phenomena such as on-track single event upset and the like or other abnormal problems, the correctness of the fault self-diagnosis function can be ensured through the triple modular redundancy, and the probability of the abnormal fault diagnosis after the triple modular redundancy is greatly reduced, thereby improving the on-track reliability of the equipment.

Fourthly, the invention has simple structure and convenient use, all uses domestic devices, has controllable cost, uses aerospace high-quality level components, has the characteristics of single particle effect resistance and total dose effect resistance, and further improves the adaptability and reliability of the fault diagnosis module in severe environment.

Drawings

FIG. 1 is a logic diagram of an FPGA for fault self-diagnosis in an embodiment of the present invention;

FIG. 2 is a core circuit diagram of autonomous handover control according to an embodiment of the present invention;

FIG. 3 is a logic diagram of autonomous handover signal generation in accordance with an embodiment of the present invention;

fig. 4 is a logic diagram of processing a fault diagnosis signal according to an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

As shown in fig. 1, the present invention provides a system for self-diagnosing a failure and autonomously switching an aerospace dual-redundant space communication device, comprising: the fault self-diagnosis module is used for self-diagnosing and judging faults, performing triple modular redundancy processing on the logic circuit of the fault self-diagnosis, and outputting a self-diagnosis result after triple modular redundancy to the fault diagnosis result response module; the autonomous switching permission and prohibition control module is used for generating a control signal for permitting autonomous switching or prohibiting autonomous switching; the ground instruction response module is used for outputting a response result of the ground instruction by filtering and calculating the ground instruction; the fault diagnosis result response module is used for responding the self-diagnosis result and outputting a normal feedback signal when the diagnosis result is abnormal; when the diagnosis result is normal, outputting a normal feedback signal; the ground instruction switching and autonomous switching control module is used for outputting the result of the operation of the fault diagnosis result response module to the ground instruction switching and autonomous switching control module to generate a corresponding control signal; and the switching instruction output module is used for broadening output pulses of the switching instruction to achieve the purpose of time delay and is also used for controlling autonomous switching and ground instruction switching.

The invention mainly aims at double redundant space communication equipment used by aerospace products, and comprises but not limited to fault diagnosis and autonomous switching methods of other double redundant equipment used for military, civil, commercial or industrial use and the like.

Further, an FPGA logic circuit is combined with a combinational logic circuit of 54 series chips, the FPGA logic circuit is used for fault self-diagnosis, and the combinational logic circuit of 54 series chips is used for autonomous switching; the autonomous switching of the device is completed by sending the result of the fault self-diagnosis to the combinational logic circuit to perform an operation.

Further, the fault self-diagnosis module comprises a triple modular redundancy module for performing fault self-diagnosis of the dual redundant space communication device by judging whether the packet header of each transmission packet of the communication device meets a normal standard.

As can be understood by those skilled in the art, as shown in fig. 1, the fault self-diagnosis determining and triple modular redundancy module realizes fault self-diagnosis of the dual-redundancy spatial communication device by determining whether the packet header of each transmission packet of the communication device meets the normal standard. For example: the header of the transmission packet is DA87, when the header is found not to be DA87 during communication, the communication transmission is judged to be error, otherwise, the transmission is considered to be normal. When the space communication equipment has a fault problem due to a single event effect or other reasons such as chip burning, device failure, sudden rise or sudden drop of voltage and current and the like, deviation of information transmission between space communication equipment is inevitably caused, and the packet head of communication is inevitably wrong.

Since the fault self-diagnosis module occupies a very important position in the whole system. Therefore, the fault self-diagnosis module is subjected to triple modular redundancy processing, namely three same modules simultaneously perform the same operation, and the majority of the same output is taken as the correct output of the voting system, so that the anti-interference capability and the reliability of the space communication equipment are improved. As shown in fig. 1, by judging whether the packet header of each transmission packet of the communication apparatus meets the normal standard, the fault self-diagnosis of the dual redundant space communication apparatus is realized. When the space communication equipment has a fault problem due to a single event effect or other reasons such as chip burning, device failure, sudden rise or sudden drop of voltage and current and the like, deviation of information transmission between space communication equipment is inevitably caused, and the packet head of communication is inevitably wrong.

Further, the autonomous switching enable and disable control module comprises a D flip-flop, an output end of the D flip-flop is connected with an inverter to control the signal level, and when the control signal is at a low level, the system enables autonomous switching, that is, the autonomous switching and the ground command switching respond simultaneously; when the control signal is at a high level, the system prohibits the autonomous switching, namely, the autonomous switching function is invalid, and only responds to the ground command switching signal.

As shown in fig. 2 and 3, the autonomous switching enable and disable control module controls the high and low of the NZS signal by controlling the output of pin 6 of the 54HC74 chip, and when the NZS signal is low, the system enables autonomous switching, that is, the autonomous switching and the ground command switching can be simultaneously responded, and when the NZS signal is high, the system disables autonomous switching, that is, the autonomous switching function is disabled, and only responds to the ground command switching signal.

Further, the ground command response module includes a ground command signal K _ TRANS, a diode V30, a first resistor R20, a first capacitor C319, and a second capacitor C320, which are sequentially connected to ground, and a pin 9 at an input end of the first and gate D7C is connected, and meanwhile, a second resistor R109, a third capacitor C24, and a fourth capacitor C25 are connected between the diode V30 and the first resistor R20; the pin 8 of the output end of the first and gate D7C is connected to the first inverter D3A and the second inverter D3B, and outputs the output to the switching instruction output module DIB; the pin 10 at the other end of the input of the first and gate D7C is connected with the pin 3 at the output end of the first or gate D20A, the pin 1 at the one end of the input of the first or gate D20A is connected with the second and gate D8B and the third resistor R902 and is connected with the power supply, and the pin 2 at the other end of the input of the first or gate D20A is connected with the third and gate D8A and the fourth resistor R903 and is connected with the power supply.

As can be understood by those skilled in the art, as shown in fig. 3, the ground manual control command signal K _ TRANS is filtered by the diode V30, the resistor R20, the capacitors C319 and C320, then processed by the combinational logic and gate and the two not gates, and then sent to the output module of the switching command.

Further, the output signal of the fault self-diagnosis comprises a fault self-diagnosis output signal of the master and a backup fault self-diagnosis output signal, and the fault self-diagnosis output signal of the master and the backup fault self-diagnosis output signal are sent to the ground instruction switching and autonomous switching control module after being subjected to combinational logic operation.

It will be understood by those skilled in the art that, as shown in fig. 4, there are two output signals for the fault self-diagnosis, which are the fault self-diagnosis output signal CHECKA of the master and the fault self-diagnosis output signal CHECKB of the backup, respectively. The CHECKA and CHECKB signals are sent to the ground command switching and autonomous switching control module after being subjected to the combined logic operation of 54HC08 and 54HC 32.

As shown in fig. 4, the ground command switching and autonomous switching control module generates two control signals CLRTRANS and PRETRANS according to the signal output by the fault self-diagnosis module. When the NZS signal is low and the RST signal is high, the CLRTRANS and PRETRANS signals are opposite in high-low level, which is the autonomous switching response mode. When the NZS signal is high and the RST signal is high, the CLRTRANS and PRETRANS signals are necessarily high at the same time, which is the response mode of the ground command switch.

The fault diagnosis result response module comprises a main fault self-diagnosis output signal (CHECKA) and a backup fault self-diagnosis output signal (CHECKB), the CHECKA is connected with a 5-pin input end of a third NOT gate D5C, a 6-pin output end of the third NOT gate D5C is respectively connected with a 5-pin input end of a second OR gate D9B and a 1-pin input end of a fourth AND gate D6A, a 4-pin input end of the second OR gate D9B and a 2-pin input end of the fourth AND gate D6A are respectively connected with the backup fault self-diagnosis output signal CHECKB, a 6-pin output end of the second OR gate D9B and a 3-pin output end of the fourth AND gate D6A are respectively connected with a 13-pin input end of a fifth AND gate D6D and a 4-pin input end of a sixth AND gate D6B, a 12-pin input end of the fifth AND gate D6D and a 5-pin input end of the sixth AND gate D6B are respectively connected with a switching command, a TRANS 3811 and a sixth ground-pin output end of a fifth AND gate D42 and a fifth AND gate D6-gate D73711 and a fifth AND gate D C are respectively connected with a switching command output end of a fifth AND gate D6 and a switch command switch And switching and autonomously switching the control module.

As will be understood by those skilled in the art, as shown in fig. 4, the ground command switching and autonomous switching control module generates two control signals CLRTRANS and PRETRANS according to the signal output by the fault self-diagnosis module. When the NZS signal is low and the RST signal is high, the CLRTRANS and PRETRANS signals are opposite in high-low level, which is the autonomous switching response mode. When the NZS signal is high and the RST signal is high, the CLRTRANS and PRETRANS signals are necessarily high at the same time, which is the response mode of the ground command switch.

Further, the switching instruction output module adopts a 54HC74 trigger.

As shown in fig. 2 and 3, through the output characteristic of 54HC74, the response signal of the ground manual command is connected to CLK terminal of 54HC74, and the CLRTRANS and PRETRANS signals are connected to clr (cd) terminal and pre (sd) terminal of D flip-flop 54HC74, respectively, and then the D pin and Q' pin are connected and output. The output of ground command switching or autonomous switching signals is realized by controlling the high-low level conversion of a CLK end or controlling the linkage change of CLRTRANS and PRETRANS signals.

Furthermore, when the output is the response of the ground command, the width of the output signal is 2 times of the width of the CLK signal output by the ground manual command signal response module, so that the width of the output signal is widened, the response time for switching the main and standby devices is also prolonged, and the smooth response of the switching function is effectively ensured.

The idea for realizing the purpose of the invention is as follows:

first, the switching command is outputted in response to the control signals from the CLK terminal, the clr (cd) terminal, the pre (sd) terminal and the D terminal of the 54HC74, and the output signals are shaped by two 54HC14 not gates and then outputted to the master device and the backup device, respectively. As shown in table 1.

TABLE 154 HC74 SERIES CHIP truth TABLE

When both PRE and CLR signals are high, the D pin and Q' pin are connected, and when the CLK signal has a pulse response, the output follows the CLK signal and the D signal. When the signals PRE and CLR are high and low, the output Q' terminal is only dependent on the high and low levels of the PRE signal, independent of the signals at CLK and D terminals.

Second, as shown in fig. 2 and 3, the output of the disable/enable autonomous switching signal is realized by controlling 54 the CLK terminal, the clr (cd) terminal, the pre (sd) terminal, and the D terminal of the HC 74. And the D terminal is connected with a high level to the PRE terminal, the CLK terminal is connected with a manual command control response signal, and the RST reset terminal is connected with the CLR terminal. As can be seen from Table 1, when the power is turned on, the PRE terminal is high, the CLR terminal reset signal is low, and the Q' terminal of 54HC74 is not affected by the CLK terminal and the D terminal, and the output is high, resulting in a low NZS signal. After the start-up is completed, the RST returns to the high level, which causes the NZS signal to flip as long as the CLK has any level fluctuation effect. Thereby, control of the autonomous switching signal is enabled/disabled.

Thirdly, as shown in fig. 4, in the ground command switching and autonomous switching control module, when the NZS signal is at a high level, the CLRTRANS signal and the PRETRANS signal are output without being interfered by any other signal, and both signals output at a high level. When the NZS signal is low, the outputs of the CLRTRANS signal and the PRETRANS signal are affected by the 8-pin output signal of the D9 chip 54HC 32. At this time, when the 8 pin output of the D9 chip 54HC32 is high, the CLRTRANS output is low and the PRETRANS output is high; when the 8 pin output of the D9 chip 54HC32 is low, the CLRTRANS output is high and the PRETRANS output is low;

based on the system embodiment, the invention also provides a method for self-diagnosing the fault and autonomously switching the space navigation dual-redundancy space communication equipment, which comprises the following steps:

step S1, the fault self-diagnosis module carries out fault self-diagnosis and discrimination, the logic circuit of the fault self-diagnosis is processed by triple modular redundancy, and the self-diagnosis result after triple modular redundancy is output to the fault diagnosis result response module;

step S2, generating a control signal for allowing or forbidding the autonomous switching through the autonomous switching allowing and forbidding control module;

step S3, filtering and calculating the ground command through a ground command response module, and outputting a response result of the ground command;

step S4, the self-diagnosis result is responded by the fault diagnosis result responding module, and when the diagnosis result is abnormal, a normal feedback signal is output; when the diagnosis result is normal, outputting a normal feedback signal;

step S5, outputting the operation result of the fault diagnosis result response module to the ground instruction switching and autonomous switching control module through the ground instruction switching and autonomous switching control module, and generating a corresponding control signal;

and step S6, the output pulse of the switching instruction is widened through the switching instruction output module to achieve the aim of time delay, and meanwhile, the autonomous switching and the ground instruction switching are controlled.

It will be appreciated by those skilled in the art that the method is carried out with the following steps:

the method comprises the following steps: preparing an aerospace standard high-quality-grade FPGA chip and a 54-series logic gate chip, and selecting other peripheral circuit components as aerospace high-quality-grade components.

Step two: as shown in fig. 1, the function of FPGA fault self-diagnosis is completed according to the corresponding logic, and at the same time, the triple modular redundancy processing is performed on the logic of fault self-diagnosis, and the result of fault diagnosis is output to the fault self-diagnosis result response module.

Step three: as shown in fig. 4, the failure self-diagnosis result CHECKA of the aerospace communication device master is connected to the 5 pin of the D5 chip 54HC14, and the 6 pin of the D5 chip 54HC14 is connected to the 1 pin of the D6 chip 54HC 08. The fault self-diagnosis result CHECKB of the 2-pin backup of the D6, pin 3 of the D6 is connected to pin 4, pin 5 switching command YC _ TRANS, pin 12 switching command TRANS, pin 13 is connected to pin 6 of the HC32 of the D9 chip 54. The fault self-diagnosis result CHECKB of the 4-pin backup of the D9 chip 54HC32, the 5-pin of the D5 chip 54HC14, the 9-pin of the D6 chip 54HC08, and the 10-pin of the D6 chip 54HC 08.

Step four: as shown in fig. 4, the output end of the fault diagnosis result response module, that is, pin 8 of the D9 chip 54HC32 is connected to pin 2, pin 1 is connected to pin 13 of D9 and pin 10 of the D3 chip 54HC14, pin 8 is further connected to pin 13 of D3, pin 12 is connected to pin 12 of D3, pin 3 is connected to pin 1 of the D4 chip 54HC14, and pin 11 is connected to pin 9 of the D6 chip 54HC 08. Pin 10 of D6 is connected to the RST reset signal terminal, and pin 8 is connected to pin 13 of D1 chip 54HC74 for output signal CLRTRANS. The pin 12 of the D7 chip 54HC08 is connected to the RST reset signal terminal, and the pin 11 is connected to the pin 3 of the D4. Pin 2 of D4 is connected to pin 13 of D7, and pin 4 is connected to pin 10 of D1 for the output signal PRETRANS.

Step five: as shown in FIG. 3, the ground manual control command signal TRANS is connected to a V30 diode and is pulled up to 5V through a resistor R109 and capacitors C24 and C25, while the other end of V30 is connected to the 9 pin of the D7 chip 54HC08 through R20, and two capacitors C319 and C320 with the same capacitance value are connected in series near the 9 pin of D7 for filtering. If the 10 feet of the D7 have no other purposes, the D7 can be directly used by pulling up.

Step six: as shown in fig. 3, the disable/enable autonomous switching module, pin 8 of the D7 chip 54HC08, is connected to pin 1 of the D3 chip 54HC 14. Leg 2 of D3 is connected to leg 3 and to leg 3 of D1. Pin 2 of D1 is connected to 5V pull-up through R23, pin 2 is connected to pin 4, pin 1 is connected to RST reset signal terminal, and pin 6 is connected to pin 11 of D3. The 10 pin output signal NZS of D3 is connected to pins 1 and 13 of D9.

Step seven: as shown in fig. 3, the switching command output module has pin 11 of D1 connected to pin 4 of D3, pin 13 connected to CLRTRANS signal terminal, pin 10 connected to PRETRANS signal terminal, and pin 12 connected to pin 8 and connected to pin 9 of D3. The 8-pin of D3 outputs signal YC _ TRANS and is connected to its 5-pin, the 6-pin outputs the TRANS signal.

Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims (10)

1. A system for self-diagnosing and autonomously switching a failure of an aerospace dual-redundancy space communication device, comprising: the fault self-diagnosis module is used for self-diagnosing and judging faults, performing triple modular redundancy processing on the logic circuit of the fault self-diagnosis, and outputting a self-diagnosis result after triple modular redundancy to the fault diagnosis result response module; the autonomous switching permission and prohibition control module is used for generating a control signal for permitting autonomous switching or prohibiting autonomous switching; the ground instruction response module is used for outputting a response result of the ground instruction by filtering and calculating the ground instruction; the fault diagnosis result response module is used for responding the self-diagnosis result and outputting a normal feedback signal when the diagnosis result is abnormal; when the diagnosis result is normal, outputting a normal feedback signal; the ground instruction switching and autonomous switching control module is used for outputting the result of the operation of the fault diagnosis result response module to the ground instruction switching and autonomous switching control module to generate a corresponding control signal; and the switching instruction output module is used for broadening output pulses of the switching instruction to achieve the purpose of time delay and is also used for controlling autonomous switching and ground instruction switching.

2. The system for self-diagnosis of failure and autonomous switching of aerospace dual-redundant space communication devices of claim 1, wherein FPGA logic is combined with combinational logic of 54 series chips, the FPGA logic is used for self-diagnosis of failure and the combinational logic of 54 series chips is used for autonomous switching; the autonomous switching of the device is performed by sending the result of the fault self-diagnosis to the combinational logic circuit to perform an operation.

3. The system for self-diagnosis of failure and autonomous switching of aerospace dual-redundant space communication devices of claim 1, wherein the failure self-diagnosis module comprises a triple modular redundancy module for performing the self-diagnosis of failure of the dual-redundant space communication device by judging whether a packet header of each transmission packet of the communication device meets a normal standard.

4. The system for self-diagnosing a failure and autonomously switching an aerospace dual-redundant space communication device of claim 1, wherein the autonomous switching enable and disable control module comprises a D flip-flop having an output terminal connected to an inverter for controlling a high level and a low level of a signal, the system enabling autonomous switching when the control signal is at a low level, the autonomous switching and the ground command switching being simultaneously responded; when the control signal is at a high level, the system prohibits the autonomous switching, namely, the autonomous switching function is invalid, and only responds to the ground command switching signal.

5. The system for self-diagnosis of failure and autonomous switching of aerospace dual-redundant space communication equipment of claim 1, wherein the ground command response module comprises a ground command signal and a diode, a first resistor, a first capacitor and a second capacitor connected in sequence and grounded, and wherein one end of the first and gate input is connected, and simultaneously a second resistor, a third capacitor and a fourth capacitor are connected between the diode and the first resistor; the output end of the first AND gate is connected with the first inverter and the second inverter and outputs the first AND gate to the switching instruction output module; the other end of the first AND gate input is connected with the output end of the first OR gate, one end of the first OR gate input is connected with the second AND gate and the third resistor and is connected with the power supply, and the other end of the first OR gate input is connected with the third AND gate and the fourth resistor and is connected with the power supply.

6. The system for self-diagnosing and autonomously switching the failure of an aerospace dual-redundant space communication apparatus as claimed in claim 1, wherein the output signals of the failure self-diagnosis in the failure diagnosis result response module include a failure self-diagnosis output signal of the master and a failure self-diagnosis output signal of the backup, and the failure self-diagnosis output signal of the master and the failure self-diagnosis output signal of the backup are subjected to the combinational logic operation and then fed into the ground command switching and autonomous switching control module.

7. The system for self-diagnosis of failure and autonomous switching of an aerospace dual redundant space communication device of claim 1, it is characterized in that the fault diagnosis result response module comprises a fault self-diagnosis output signal and a backup fault self-diagnosis output signal, the fault self-diagnosis output signal is connected with an input end of a third NOT gate, an output end of the third NOT gate is respectively connected with one end of a second OR gate input and one end of a fourth AND gate input, the other end of the second OR gate input and the other end of the fourth AND gate input are respectively connected with a backup fault self-diagnosis output signal, the output end of the second OR gate and the output end of the fourth AND gate are respectively connected with one end of the fifth AND gate input and one end of the sixth AND gate input, the other end of the fifth AND gate input and the other end of the sixth AND gate input are respectively connected with a switching instruction, and the output end of the fifth AND gate and the output end of the sixth AND gate and the third OR gate are connected to a ground instruction switching and autonomous switching control module.

8. The system for self-diagnosis of failure and autonomous switching of aerospace dual-redundant space communication equipment of claim 1, wherein the switching command output module employs a D flip-flop to switch a response signal of a ground manual command to a signal input terminal, and performs ground command switching or output of an autonomous switching signal by switching of high and low levels of the signal input terminal or by linkage change of a control signal.

9. The system for self-diagnosing a failure and autonomously switching an aerospace dual-redundant space communication apparatus as claimed in claim 1, wherein in the ground command switching and autonomous switching control module, when a response to the ground command is outputted, the width of the output signal is 2 times the width of the CLK signal outputted through the operation of the ground command response module.

10. A method for self-diagnosing and autonomously switching a failure of aerospace dual-redundancy space communication equipment is characterized by comprising the following steps:

step S1, the fault self-diagnosis module carries out fault self-diagnosis and discrimination, the logic circuit of the fault self-diagnosis is processed by triple modular redundancy, and the self-diagnosis result after triple modular redundancy is output to the fault diagnosis result response module;

step S2, generating a control signal for allowing or forbidding the autonomous switching through the autonomous switching allowing and forbidding control module;

step S3, filtering and calculating the ground command through a ground command response module, and outputting a response result of the ground command;

step S4, the response processing is carried out on the self-diagnosis result through the fault diagnosis result response module, and when the diagnosis result is abnormal, a normal feedback signal is output; when the diagnosis result is normal, outputting a normal feedback signal;

step S5, outputting the result of the fault diagnosis result response module to the ground command switching and autonomous switching control module through the ground command switching and autonomous switching control module, and generating a corresponding control signal;

and step S6, the output pulse of the switching instruction is widened through the switching instruction output module to achieve the aim of time delay, and meanwhile, the autonomous switching and the ground instruction switching are controlled.

Images