KR102419017B1 - Control apparatus for satellite and method thereof - Google Patents

Abstract

The present invention is a satellite control apparatus installed in a satellite to control the operation of electronic elements constituting the satellite, and a satellite control method applied thereto. More particularly, the present invention proposes an apparatus and method for controlling a satellite capable of performing processing for controlling the operation of electronic elements constituting a satellite even when an error occurs in a memory unit and a method are provided. According to the present invention, the apparatus for controlling a satellite comprises: an operation unit which performs processing for controlling the operation of electronic elements; a plurality of memory units storing first data for operating the operation unit; and a management unit for operating the operation unit with the first data stored in a selected memory unit among the plurality of memory units.

Description

CONTROL APPARATUS FOR SATELLITE AND METHOD THEREOF

The present invention relates to an apparatus and method for controlling a satellite, and more particularly, to an apparatus and method for controlling a satellite capable of performing processing for controlling the operation of electronic elements constituting a satellite even when an abnormality occurs in a memory unit.

The artificial satellite has a plurality of electronic elements to perform a desired function. Accordingly, the satellite control device is installed in order to control the plurality of electronic elements. The artificial satellite control device is a kind of computing system mounted on the artificial satellite, and is an important device corresponding to the brain of the artificial satellite that performs remote commands given to the artificial satellite by controlling the plurality of electronic elements described above.

In this case, the satellite control device performs various functions, such as performing a process for executing a remote command and processing data, as well as controlling the propulsion system of the artificial satellite and controlling the power system. Accordingly, the satellite control device requires high-performance computing power and high reliability. In addition, since the artificial satellite is operated in an environment that is difficult to be protected by the earth's atmospheric layer and magnetic field, the satellite control device must be able to operate in a harsh space environment.

Meanwhile, interest in micro-satellites has recently increased. Accordingly, numerous micro-satellites have been manufactured and launched. Here, the reality is that such a micro-satellite has many restrictions on volume, weight, etc. compared to conventional satellites. In addition, as satellite-related businesses change from the existing mission-first development policy to the pursuit of economic feasibility, efficiency and economic efficiency are strongly required for satellite development and production.

Therefore, when satellites manufactured in pursuit of economy are operated in a space environment, while maintaining the same level of reliability as the existing satellites in the satellite control device, errors do not occur, and the satellite control device can perform its functions normally. There is a need for a method to secure the reliability of a new type of control device for this purpose.

The technology underlying the present invention is disclosed in the following patent documents.

KR 10-1898641 B1 KR 10-2184658 B1 KR 10-2241874 B1

The present invention is a satellite control that can perform processing for controlling the operation of electronic elements constituting the artificial satellite even if an abnormality occurs in the memory unit, which is the part that can generate the most unexpected errors when operating the artificial satellite in a space environment An apparatus and method are provided.

An artificial satellite control apparatus according to an embodiment of the present invention is a satellite control apparatus installed in an artificial satellite to control the operation of electronic elements constituting the artificial satellite, comprising: an operation unit that performs processing for controlling the operation of the electronic elements; a plurality of memory units each storing first data for operating the operation unit; and a management unit that operates the operation unit with the first data stored in the selected memory unit among the plurality of memory units.

It may further include; a sensing unit for detecting whether the plurality of memory units are abnormal.

When an abnormality is detected in the selected memory unit, the management unit may operate the operation unit with first data stored in a memory unit other than the selected memory unit.

If there is no abnormality in the selected memory unit, the operation unit may equally store the second data generated while processing is performed in the plurality of memory units.

When an abnormality is detected in the selected memory unit, the operation unit may store the second data generated during processing in a memory unit other than the selected memory unit.

The memory unit may include a non-volatile memory and a volatile memory.

The plurality of memory units may be formed of different types of semiconductors.

When it is sensed that the abnormality is resolved in the selected memory unit, the operation unit may store the first data stored in another memory unit in the selected memory unit.

When it is detected that the abnormality is resolved in the selected memory unit, the operation unit stores second data stored in another memory unit in the selected memory unit, and the second data generated while processing is performed after the abnormality is detected may be equally stored in the plurality of memory units.

A satellite control method according to an embodiment of the present invention includes the steps of preparing a plurality of memory units in which first data for operating an operation unit of an artificial satellite control device is stored; selecting one memory unit among the plurality of memory units; and a process of operating the operation unit with the selected first data stored in the memory unit to perform processing and controlling the operation of electronic elements constituting the artificial satellite.

and storing the second data generated while the operation unit performs processing in the same manner in the plurality of memory units.

The process of selecting one memory unit among the plurality of memory units may be performed while the satellite control device is booted.

detecting abnormalities in the plurality of memory units during the booting; and operating the operation unit with first data stored in a memory unit other than the selected memory unit when abnormality is detected in the selected memory unit.

detecting whether the plurality of memory units are abnormal while the operation unit performs processing; If an abnormality is detected in the selected memory unit, storing the second data generated while the operation unit performs processing in a memory unit other than the selected memory unit; may include.

and storing the first data stored in another memory unit in the selected memory unit when it is detected that the abnormality is resolved in the selected memory unit.

When it is detected that the abnormality is resolved in the selected memory unit, the second data stored in the other memory unit is stored in the selected memory unit, and the second data generated while processing is performed after the abnormality is detected is stored in the plurality of It may include a process of storing the same in the memory unit.

updating the first data stored in the selected memory unit; detecting an abnormality in the selected memory unit during update; operating the operation unit with first data stored in a memory unit other than the selected memory unit when an abnormality is detected in the selected memory unit; and storing the first data stored in another memory unit in the selected memory unit when it is detected that the abnormality is resolved in the selected memory unit.

According to an embodiment of the present invention, when operating the artificial satellite, by selecting a memory unit to be used for operating the operation unit from among a plurality of memory units in which data for operating the artificial satellite is stored, the operation unit with the first data stored in the selected memory unit can make it work

Therefore, even if an abnormality occurs in one memory unit, it is possible to select a memory unit in which an abnormality does not occur and to stably operate the operation unit. From this, it is possible to prevent the operation of the operation unit from being stopped or the operation unit from operating abnormally due to an abnormality of one memory unit. Accordingly, by multiplexing the entire satellite control device into a plurality, the reliability of the satellites can be secured at the same level as providing additional satellite control devices for the spare without further providing the satellite control device for the spare. In addition, since it is not necessary to provide a spare satellite control device to secure the reliability of the artificial satellite, the structure of the artificial satellite can be simplified, and thus the cost can be reduced.

1 is a conceptual diagram of a satellite control apparatus according to an embodiment of the present invention.
2 is a view exemplarily showing a state in which the satellite control apparatus according to a comparative example of the present invention is installed on an artificial satellite.

Hereinafter, with reference to the accompanying drawings, an embodiment of the present invention will be described in detail. However, the present invention is not limited to the embodiments disclosed below, and will be implemented in various different forms. Only the embodiments of the present invention are provided to complete the disclosure of the present invention, and to completely inform those of ordinary skill in the art the scope of the invention. In order to explain the embodiment of the present invention, the drawings may be exaggerated, parts not related to the description may be omitted from the drawings, and the same reference numerals in the drawings refer to the same elements.

The present invention relates to an apparatus and method for controlling a satellite, and an embodiment of the present invention will be described in detail by exemplifying a case where it is applied to a micro-satellite that does not use a redundant structure. Of course, the apparatus and method for controlling a satellite according to an embodiment of the present invention may be applied to the apparatus and method for controlling various types of devices having electronic elements to be controlled.

1 is a conceptual diagram of a satellite control apparatus according to an embodiment of the present invention.

First, an artificial satellite in which the satellite control device according to an embodiment of the present invention is installed will be described.

An artificial satellite (not shown) according to an embodiment of the present invention is an artificial satellite used in the military, and may be a miniature satellite that cannot use a redundant structure for various reasons. Satellites can perform missions such as communication, weather observation, and reconnaissance.

Of course, the operating subject of the satellite may be an institution, a research institute, a company, a private organization, or the like. In addition, the artificial satellite may be a medium or large satellite. In addition, the tasks assigned to the satellites may vary. The satellite may be operated by receiving a remote command from a control center (not shown), and may be operated according to a command input in advance to the satellite.

Here, the redundant structure constitutes two physical satellite control devices capable of performing the same function on one satellite, so that even if an error occurs in one satellite control device, the other satellite control device can sustain the control of the satellite. can be referred to

A satellite may include electronic and mechanical components to perform its assigned mission. Electronic elements and mechanical elements may be disposed in each system of the artificial satellite, such as a propulsion system, a power system, an attitude control system, a telemetry system, a command system, a thermal control system, and may operate to perform each function.

The satellite control apparatus 100 according to an embodiment of the present invention may be installed in the artificial satellite. The operation of the mechanical elements provided in the satellite may be controlled by the electronic elements, and the operation of the electronic elements may be controlled by the satellite control device 100 .

Satellites can be affected by electromagnetic radiation, particle radiation, plasma atmosphere, Earth's magnetic field, and cosmic radiation. In this case, an abnormality may occur in the memory unit provided in the satellite control apparatus 100 . Single-event effects, such as single-event upsets, can be caused by cosmic radiation. In addition, an abnormality may occur in the memory unit provided in the satellite control apparatus according to an embodiment of the present invention due to the single event effect.

It may be difficult to read and write data normally in the memory unit where an error has occurred. That is, there may be an error in the data read from the memory unit in which the error occurred. Also, there may be an error in data written to the memory unit in which the error has occurred.

If there is an error in the data, it may be difficult for the operator to operate normally. That is, if there is an error in the data, the operation unit may not be able to normally perform the processing for controlling the operation of the electronic elements of the artificial satellite. Therefore, the function of the artificial satellite in charge of the processing may not operate normally, and the artificial satellite may malfunction.

However, the satellite control apparatus 100 according to an embodiment of the present invention is operated using the memory unit 120 in which an abnormality does not occur even if an abnormality occurs in one of the plurality of memory units 120 . The unit 110 may be operated normally.

Accordingly, the satellite control apparatus 100 according to an embodiment of the present invention reads data (ie, error data) stored in the memory unit 120 in which the operation unit 100 that performs the processing for operating the artificial satellite has an abnormality can be prevented, and it is possible to prevent the operation of the operation unit 100 from being interrupted by the operation of the memory unit 120 .

1. Satellite control device

Hereinafter, the satellite control apparatus 100 according to an embodiment of the present invention will be described in detail with reference to FIG. 1 .

Referring to FIG. 1 , an artificial satellite control device 100 according to an embodiment of the present invention is a satellite control device 100 installed in an artificial satellite to control the operation of electronic elements constituting the artificial satellite, and controls the operation of the electronic elements. The operation unit 110 that performs the processing for controlling the operation unit 110 , the plurality of memory units 120 storing first data for operating the operation unit 110 , and the second memory unit stored in the selected memory unit among the plurality of memory units 120 . 1 includes a management unit 130 that operates the operation unit 110 with data.

In addition, the satellite control apparatus 100 according to an embodiment of the present invention has a decoder unit 150 that interprets commands exchanged between the operation unit 110 and the plurality of memory units 120 so that the connection between the operation unit 110 and the plurality of memory units 120 can be smooth. ), an interface (not shown) that converts second data to be used for control of an electronic element among the second data generated while the operation unit 110 performs processing into a control signal and outputs it to the outside, the operation unit 110 and The plurality of memory units 120 , the management unit 130 , the decoder unit 150 , and the interface may include a transmission unit for connecting the interface and the sensing unit 140 to be described later.

In this case, the transmitter may include an address bus (Address-Bus), a data bus (Data-Bus), and a control bus. In addition, the control bus may include a signal line connected to the RD (read) pin of the operation unit 110, a signal line connected to the WR (write) pin, a signal line connected to the MREQ (memory request) pin, etc. .

However, the above-described decoder unit 150, the transmission unit and the interface may not specifically limit the configuration and method in the embodiment of the present invention. Therefore, detailed descriptions thereof will be omitted below.

Meanwhile, the satellite control apparatus 100 according to an embodiment of the present invention may further include a sensing unit 140 for detecting whether a plurality of memory units 120 are abnormal.

1.1. operation department

The operation unit 110 may serve as a central processing unit (CPU) of the satellite control device 100 . The operation unit 110 may perform processing for the operation of electronic elements constituting the artificial satellite.

The operation unit 110 may operate with the first data stored in the selected memory unit among the plurality of memory units 120 . Also, the operation unit 110 may operate with the first data stored in a memory unit other than the selected memory unit. The operation of the operation unit 110 may mean that the operation unit 110 performs a process for controlling the operation of the electronic elements with the first data. When the operation unit 110 operates with the first data stored in the selected memory unit, the second data generated during processing may be equally stored in the plurality of memory units 120 . Also, when the operation unit 110 operates with the first data stored in the other memory unit, the operation unit 110 may store the second data generated during the processing in the other memory unit. Meanwhile, the operation unit 110 may store the first data stored in the other memory unit at a predetermined time in the selected memory unit while operating with the first data stored in the other memory unit. In addition, the operation unit 110 stores the second data stored in the other memory unit at a predetermined point in time while operating with the first data stored in the other memory unit, and then stores the second data stored in the other memory unit in the selected memory unit, and thereafter, generated during processing. The second data may be equally stored in the plurality of memory units 120 . In this case, the management unit 130 may operate the operation unit 110 , and the management unit 130 may manage storage of the first data and the second data.

Meanwhile, the above-described selected memory unit may be referred to as a main memory unit or a memory unit operating in a main memory mode. Also, the aforementioned other memory unit may be referred to as a sub-memory unit or a memory unit operating in a sub-memory mode.

Of course, expressions for designating each of the selected memory units and other memory units may be varied so that the selected memory units can be distinguished from each other.

1.2. first data and second data

The first data may include booting information, an operating system, an application program, and the like. That is, the first data may be various data enabling booting and operation of the operation unit 110 . In addition, the second data may be various data generated during booting and operation of the operation unit 110 .

1.3. memory unit

The plurality of memory units 120 serve to store the first data for operating the operation unit 110 and the second data generated during the operation of the operation unit 110 . The plurality of memory units 120 may be connected to the operation unit 110 in a parallel structure.

The plurality of memory units 120 may be formed of different types of semiconductors. Here, the semiconductor type may include DRAM, SDRAM, RDRAM, DDRSDRAM, SRAM, EEPROM, NAND, NOR, and the like. Of course, the meaning of the semiconductor type may vary. For example, semiconductors having different manufacturer identification codes, production dates, etc. in the lot numbers may be referred to as different types of semiconductors.

For example, if the plurality of memory units 120 are formed of the same type of semiconductor, they may be equally damaged for the same reason when they are exposed to the same cosmic radiation. On the other hand, if the plurality of memory units 120 are formed of different types of semiconductors, the same damage can be prevented even when they are exposed to the same cosmic radiation.

Meanwhile, each of the plurality of memory units 120 may include a non-volatile memory 121 and a volatile memory 122 . When the plurality of memory units 120 include the first memory unit and the second memory unit, the first memory unit also includes the non-volatile memory 121 and the volatile memory 122 , and the second memory unit also includes the non-volatile memory 121 . ) and a volatile memory 122 . Also, the number of the plurality of memory units 120 may vary. For example, the plurality of memory units 120 may include a plurality of memory units such as a first memory unit, a second memory unit, and a third memory unit. Even at this time, each of the memory units may include a non-volatile memory 121 and a volatile memory 122 .

The nonvolatile memory 121 may store the first data regardless of whether the power of the satellite control device 100 is turned on or off. Also, the volatile memory 122 may store the first data and the second data when the power of the satellite control device 100 is turned on. Both the non-volatile memory 121 and the volatile memory 122 may read and write data.

Meanwhile, the nonvolatile memory 121 of the first memory unit and the nonvolatile memory 121 of the second memory unit may be formed of different types of semiconductors. Similarly, the volatile memory 122 of the first memory unit and the volatile memory 122 of the second memory unit may be formed of different types of semiconductors. For example, if the semiconductor type of the nonvolatile memory 121 of the first memory unit is NAND, the semiconductor type of the nonvolatile memory 121 of the second memory unit may be NOR. This is to prevent simultaneous occurrence of abnormalities in the nonvolatile memory 121 of the first memory unit and the nonvolatile memory 121 of the second memory unit when charged particles, cosmic radiation, etc. pass through the satellite control device 100 . is the purpose For example, semiconductors of different types may not have the same circuit stack structure, material, and the like. Accordingly, semiconductors of different types may not be damaged in the same area under the same circumstances or for the same reason, and at least one of them may avoid damage.

1.4. Management

The management unit 130 serves to manage the operation of the operation unit 110 and the storage of the first data and the second data in the memory unit 120 based on the detection result of the sensing unit 140 . Of course, the management unit 130 manages the operation of the operation unit 110 and the storage of the first data and the second data in the memory unit 120 according to a predetermined management schedule for each situation, altitude, or time. You may. Hereinafter, based on the operation of the operation unit 110 based on the detection result of the sensing unit 140 and the management unit 130 that manages storage of the first data and the second data for the memory unit 120, Explain. In this case, the content to be described below is when the management unit 130 manages the operation of the operation unit 110 and the storage of the first data and the second data in the memory unit 120 according to a predetermined management schedule. The same or similar can be applied to

1.4.1. How the management unit selects the memory unit (before booting the operation unit)

The management unit 130 may select one memory unit among the plurality of memory units 120 and designate it as a “selected memory unit”. In addition, a memory unit other than the selected one memory unit among the plurality of memory units 120 may be designated as "another memory unit".

Here, when the number of memory units 120 is three or more, the number of memory units designated as “other memory units” may be plural. In addition, if the number of memory units designated as “different memory units” is plural, different numbers may be assigned to each to distinguish them.

Meanwhile, the management unit 130 selects one memory unit among the plurality of memory units 120 at a time when the satellite control device 100 is first set, or before or during booting of the operating unit 110 . It may be a predetermined time point. Of course, there may be various methods for determining the corresponding time point. In addition, selection criteria for the management unit 130 to select one memory unit among the plurality of memory units 120 may vary. For example, based on the address allocated to the memory unit 120 , a memory unit having an earlier address or a memory unit having a slow address may be selected. Also, the memory unit selected by the management unit 130 may be preferentially tested by the inspection unit 140 .

Meanwhile, the management unit 130 may give the operation unit 110 a read right and a write right for the memory unit 120 . Here, the management unit 130 may grant only the write permission to the operation unit 110 for the memory unit in which the abnormality is detected. In addition, the management unit 130 may give both the read permission and the write permission to the operation unit 110 for the memory unit in which no abnormality is detected and the memory unit in which a predetermined time has elapsed after the abnormality is detected as being resolved. . That is, the management unit 130 may manage the data storage of the memory unit 120 by granting such authority to the operation unit 110 .

1.4.2. How the management unit operates the operation unit (when the operation unit is booted)

The management unit 130 operates the operation unit 110 with the first data stored in the selected memory unit when no abnormality is detected in the selected memory unit while the operating unit 110 is booted, that is, when the selected memory unit is normally detected. can do it In this case, the management unit 130 may operate the selected memory unit to read the first data stored in the non-volatile memory 121 of the selected memory unit and write the read first data to the volatile memory 122 of the selected memory unit. Also, the management unit 130 may operate the operation unit 110 with the first data written to the volatile memory 122 of the selected memory unit.

When an abnormality is detected in the selected memory unit while booting the operation unit 110 , the management unit 130 may operate the operation unit 110 with the first data stored in another memory unit. The management unit 130 may operate another memory unit to read the first data stored in the non-volatile memory 121 of the other memory unit and write the read first data to the volatile memory 122 of the other memory unit. Also, the management unit 130 may operate the operation unit 110 with the first data written to the volatile memory 122 of another memory unit.

Meanwhile, while the operation unit 110 is booting, an abnormality may be detected in another memory unit. In this case, the management unit 130 may operate the operation unit 110 with the first data stored in the selected memory unit.

1.4.3. A method in which the management unit operates the operation unit and manages the storage of data in the memory unit (during operation of the operation unit)

The management unit 130 operates the operation unit 110 with the first data stored in the selected memory unit when no abnormality is detected in the selected memory unit while the operating unit 110 is operated, that is, if there is no abnormality in the selected memory unit. continue to do In addition, if there is no abnormality in the selected memory unit while operating the operation unit 110 , the management unit 130 stores the second data generated while the operation unit 110 performs processing in the plurality of memory units 120 . catalog can be managed. Here, the second data may be equally stored in the volatile memory 122 of each of the plurality of memory units 120 .

When an abnormality is detected in the selected memory unit while operating the operation unit 110 , the management unit 130 may operate the operation unit 110 with the first data stored in another memory unit. In addition, if an abnormality is detected in the selected memory unit while operating the operation unit 110 , the management unit 130 manages to store the second data generated while the operation unit 110 is processing in another memory unit. can In this case, the second data may be stored in the volatile memory 122 of the other memory unit.

Meanwhile, while the management unit 130 operates the operation unit 110 , an abnormality may be detected in another memory unit. At this time, the management unit 130 continues to operate the operation unit 110 with the first data stored in the selected memory unit. In addition, the management unit 130 may manage to store the second data generated while the operation unit 110 performs processing in another memory unit.

When it is detected that the abnormality is resolved in the selected memory unit while the operation unit 110 is operating, the management unit 130 may manage to store the first data stored in another memory unit in the selected memory unit. For example, the management unit 130 may manage to read the first data stored in the non-volatile memory 121 of another memory unit and write the read first data to the non-volatile memory 121 of the selected memory unit. Also, the management unit 130 may manage to read the first data written to the non-volatile memory 121 of the selected memory unit and write the read first data to the volatile memory 122 of the selected memory unit. In this case, the management unit 130 may operate the operation unit 110 with the first data written to the volatile memory 122 of the selected memory unit. In addition, when it is detected that the abnormality is resolved in the selected memory unit while the operation unit 110 is operated, the management unit 130 transfers the second data stored in the volatile memory 122 of the other memory unit to the selected memory unit volatile memory 122 . From a point in time after it is detected that the abnormality is resolved, the second data generated during processing can be managed to be equally stored in the volatile memories 122 of the plurality of memory units 120, respectively. have.

Meanwhile, while the management unit 130 operates the operation unit 110 , it may be detected that an abnormality has been resolved in another memory unit. At this time, the management unit 130 continues to operate the operation unit 110 with the first data stored in the selected memory unit. Also, the management unit 130 may manage to store the first data stored in the selected memory unit in another memory unit. In addition, the management unit 130 stores the second data stored in the volatile memory 122 of the selected memory unit in the volatile memory 122 of the other memory unit, and is generated during processing from a point in time after it is detected that the abnormality is resolved. The second data may be managed to be equally stored in the volatile memories 122 of the plurality of memory units 120 .

1.5. sensing unit

The sensing unit 140 may detect whether a plurality of memory units 120 are abnormal. There may be various ways in which the sensing unit 140 detects whether there is an abnormality. For example, the sensing unit 140 may detect whether an abnormality has occurred in each of the memories included in the plurality of memory units 120 by performing checksum at predetermined time intervals. The detection result detected by the inspection unit 150 is transmitted to the management unit 130 , and the management unit 130 may be utilized to operate the operation unit 110 and manage data storage of the memory unit 120 . Meanwhile, the sensing unit 140 may also detect whether the plurality of memory units 120 are normal by detecting whether the plurality of memory units 120 are abnormal.

1.6. recovery department

Meanwhile, the satellite control apparatus 100 according to an embodiment of the present invention may include a recovery unit (not shown) for resolving an abnormality occurring in the memory unit. For example, when physical damage occurs in a predetermined location of the memory unit 120 , the recovery unit may resolve the abnormality occurring in the memory unit by writing-protecting the corresponding location. Of course, there may be various ways in which the recovery unit can heal the abnormal portion of the memory unit in which the abnormality has occurred.

2. Satellite Control Method

Hereinafter, a satellite control method according to an embodiment of the present invention will be described with reference to FIG. 1 .

In the satellite control method according to an embodiment of the present invention, a plurality of first data is stored in order to operate the operation unit 110 of the satellite control device 100 capable of performing a process for controlling the operation of electronic elements constituting the artificial satellite. The process of preparing the memory units 120, the process of booting the satellite control device 100, the process of selecting one memory unit among the plurality of memory units 120, and the process of using the first data stored in the selected memory unit It includes the process of operating the operation unit 110 to perform processing and to control the operation of electronic elements.

In addition, the satellite control method according to an embodiment of the present invention may include a process of equally storing the second data generated while the operation unit 110 performs the processing in the plurality of memory units 120 . In addition, the satellite control method according to an embodiment of the present invention prevents abnormalities from occurring for the same reason or at the same time in the plurality of memory units 120 by using different types of semiconductors of the plurality of memory units 120 . process may be included.

First, a process of preparing a plurality of memory units 120 in which first data is stored in order to operate the operation unit 110 of the satellite control device 100 capable of performing a process for controlling the operation of electronic elements constituting the artificial satellite carry out

That is, after the satellite control device 100 according to the embodiment of the present invention is installed on the satellite, the satellite control device 100 is initially set to an operable state, and the power is turned off.

Thereafter, a process of booting the operation unit 110 is performed.

By turning on or resetting the power of the satellite control device 100 , power is supplied to the operation unit 110 . Thereafter, booting information stored in the nonvolatile memory 121 of the selected memory unit among the plurality of memory units 120 is read by the operation unit 110 , and booting is performed according to the read booting information.

Thereafter, a process of selecting one memory unit among the plurality of memory units 120 is performed. The process of selecting one memory unit may be performed during the process of booting the operation unit 110 . Of course, the memory unit may be selected before booting the operation unit 100 .

That is, the management unit 130 selects one memory unit among the plurality of memory units 120 and designates it as a “selected memory unit”. In addition, a memory unit other than the selected one memory unit among the plurality of memory units 120 is designated as "another memory unit".

The satellite control method according to an embodiment of the present invention is a process of detecting abnormalities in the plurality of memory units 120 while booting the operation unit 110, and when an abnormality is detected in the selected memory unit, memory other than the selected memory unit It may include a process of operating the operation unit 110 with the first data stored in the unit. In this case, these processes may be performed after the process of selecting one memory unit among the plurality of memory units 120 .

The process of detecting whether the plurality of memory units 120 are abnormal while the operation unit 110 is booting may be performed by the sensing unit 140 . That is, while the operation unit 110 is booting, the detection unit 140 may detect whether a selected memory unit among the plurality of memory units 120 is abnormal, and may detect abnormalities in other memory units except for the selected memory unit. have.

In this case, when an abnormality is detected in the selected memory unit, a process of operating the operation unit 110 with the first data stored in another memory unit may be performed. That is, it is possible to perform processing by operating the operation unit 110 with the first data stored in another memory unit, and to control the operation of electronic elements. In addition, the process of operating the operation unit 110 with the first data stored in another memory unit to perform processing and control the operation of electronic elements includes reading the first data stored in the non-volatile memory of the other memory unit and reading the first data stored in the second memory unit. 1 It may include a process of writing data to a volatile memory of another memory unit. In this case, the operation unit 110 may be operated with the first data written to the volatile memory of the other memory unit.

On the other hand, when an abnormality is detected in the selected memory unit and a process of operating the operation unit 110 with the first data stored in another memory unit is performed, the operation unit 110 stores the second data generated while the processing is performed. Instead of performing the same process of storing the plurality of memory units 120 , a process of storing the second data generated while the operation unit performs the processing may be performed in a memory unit other than the selected memory unit. At this time, a process of writing the second data to the volatile memory of the other memory unit may be performed.

Meanwhile, an abnormality may be detected in another memory unit, or it may be detected that all memory units are normal. At this time, by operating the operation unit 110 with the first data stored in the selected memory unit, the process is performed and the process of controlling the operation of the electronic elements is performed. In the process of operating the operation unit 110 with the first data stored in the selected memory unit to perform processing and control the operation of electronic elements, the first data stored in the non-volatile memory of the selected memory unit is read, and the read first data is performed. It may include a process of writing data to the volatile memory of the selected memory unit. In this case, the operation unit 110 may be operated with the first data written to the volatile memory of the selected memory unit. On the other hand, when the operation of the operation unit 110 is performed with the first data stored in the selected memory unit, the second data generated while the operation unit 110 performs the processing is transferred to the plurality of memory units 120 . The same saving process can be performed. In this case, the process of writing the second data to the volatile memory of the selected memory unit and writing the second data to the volatile memory of another memory may be performed in the same manner.

The satellite control method according to an embodiment of the present invention includes a process of detecting whether a plurality of memory units are abnormal while an operation unit performs processing, and when an abnormality is detected in a selected memory unit, the operation unit generated while performing the processing 2 It may include a process of storing data in a memory unit other than the selected memory unit.

In this case, when it is sensed that the abnormality is resolved in the selected memory unit, a process of storing the first data stored in the other memory unit may be performed in the selected memory unit.

In addition, when it is detected that the abnormality is resolved in the selected memory unit, second data stored in another memory unit is stored in the selected memory unit, and after the abnormality is detected, the second data generated while processing is performed may include the process of equally storing in the plurality of memory units.

Meanwhile, when it is sensed that the abnormality is resolved in the other memory unit, a process of storing the first data stored in the selected memory unit may be performed in the other memory unit.

In addition, when it is detected that the abnormality is resolved in the other memory unit, the second data stored in the selected memory unit is stored in the other memory unit, and after the abnormality is detected, the second data generated while processing is performed may include the process of equally storing in the plurality of memory units.

In addition, if all of the plurality of memory units are detected as normal while the operation unit performs processing, the operation unit 110 is operated with the first data stored in the selected memory unit to perform the processing and continue the process of controlling the operation of electronic elements do. In addition, the process of equally storing the second data generated while the operation unit 110 performs processing in the plurality of memory units 120 continues.

On the other hand, the satellite control method according to the embodiment of the present invention, the process of updating the first data stored in the selected memory unit, the process of detecting whether the selected memory unit is abnormal during the update, and when an abnormality is detected in the selected memory unit , the process of operating the operation unit 110 with the first data stored in a memory unit other than the selected memory unit, and when it is detected that the abnormality is resolved in the selected memory unit, the first data stored in the other memory unit is transferred to the selected memory unit It may include the process of storing.

That is, while operating the satellite, an update command of the first data may be received from a control center (not shown). At this time, a process of updating the first data stored in the selected memory unit is performed. That is, the first data stored in the non-volatile memory of the selected memory unit is deleted, and new first data is stored in the non-volatile memory of the selected memory unit, and the first data is updated.

While performing the above process, a process of detecting whether there is an abnormality in the selected memory unit during update is performed. That is, the detection unit 140 detects whether the selected memory unit is abnormal. When an abnormality is detected in the selected memory unit, a process of operating the operation unit 110 with the first data stored in a memory unit other than the selected memory unit is performed. Thereafter, when it is sensed that the abnormality is resolved in the selected memory unit, a process of storing the first data stored in another memory unit may be performed in the selected memory unit.

On the other hand, if the selected memory unit is normally detected in the process of detecting whether the selected memory unit is abnormal during the update, the process of updating the first data stored in the selected memory unit is completed, and the operation unit 110 uses the updated first data It operates the process and performs the process of controlling the operation of electronic elements.

At this time, a process of detecting whether another memory unit is abnormal is performed. If the other memory unit is normally detected, a process of updating the first data stored in the other memory unit is performed. When it is detected that an abnormality has occurred in the other memory unit, the process of updating the first data stored in the other memory unit is suspended until it is detected that the abnormality in the other memory unit is resolved. Thereafter, when it is sensed that the abnormality of the other memory unit is resolved, a process of updating the first data stored in the other memory unit is performed.

On the other hand, according to the above-described embodiment of the present invention, when installing the artificial satellite control device to the artificial satellite, even without dual installation, it is possible to achieve the same effect as the redundant installation.

In order to explain this, first, installing the satellite control device in duplicate on the satellite is taken as a comparative example, and compared with the embodiment of the present invention.

2 is a view exemplarily showing a state in which the satellite control apparatus according to a comparative example of the present invention is installed on an artificial satellite.

Referring to FIG. 2 , in the comparative example of the present invention, the satellite control devices 10A and 10B are duplicated and installed in the artificial satellite. Duplicating the satellite control devices 10A and 10B means configuring two physical satellite control devices 10A and 10B on one satellite, and even if an abnormality occurs in one satellite control device 10A, another satellite control device (10B) means that the control of the satellite is sustainable. In this case, the satellite control devices 10A and 10B may have a redundant structure, for example, an active-standby structure of a failover method or an active-active structure of a load balancing method. In addition, each of the duplexed satellite control devices (10A, 10B) may have the same configuration, for example, each of the operation unit 11, the decoder unit 12, the memory units 13 and 14, the interface and the transmission unit. include

The method of this comparative example may correspond to the satellite control devices 10A and 10B manufactured under the mission-first development policy and installed on the artificial satellite. For example, the method of the comparative example may correspond to the existing method.

However, if the satellite control devices 10A and 10B are duplicated in the comparative example method (ie, the conventional method), the manufacturing cost of the artificial satellite increases, the design of the structure and operation algorithm of the artificial satellite becomes complicated, and the weight of the artificial satellite increases. There is a problem of

Accordingly, it is difficult to install the satellite control device in duplicate as in the comparative example in a micro-satellite, which is strongly required for efficiency and economic feasibility.

On the other hand, the satellite control apparatus according to the embodiment of the present invention can provide a level of reliability similar to or the same as that of the comparative example while remarkably reducing the weight, volume, cost, etc., thus controlling the satellite according to the embodiment of the present invention. The device can be applied to a micro-satellite that requires strong efficiency and economic feasibility, and furthermore, it can be used in all kinds of satellites in various fields.

As described above, in the embodiment of the present invention, one satellite control device is physically installed in the micro-satellites, but the memory unit, which is the part where the most errors can occur, is plural as described above, and the management unit and the sensing unit are provided. By providing it, it is possible to achieve the same effect as that provided by duplicating the satellite control device.

That is, when an abnormality occurs in the memory unit, it is possible to prevent the processing of the operation unit from being interrupted by switching to another memory unit. From this, even if an error occurs in the memory unit of the satellite control device during operation of the satellite, it is possible to prevent the function of the satellite control device from being stopped. Accordingly, even if the satellite control device is not installed on the artificial satellite by duplicating the satellite control device, it can have an effect corresponding to the duplication of the satellite control device and installation on the artificial satellite. From this, the reliability of the satellite can be improved even if the satellite control device is not duplicated.

The above embodiments of the present invention are intended to illustrate the present invention, not to limit the present invention. It should be noted that the configurations and methods disclosed in the above embodiments of the present invention may be combined and modified in various forms by combining or crossing each other, and modifications thereof may also be considered as the scope of the present invention. That is, the present invention will be embodied in various different forms within the scope of the claims and equivalent technical spirits, and those skilled in the art to which the present invention pertains can implement various embodiments within the scope of the technical spirit of the present invention. will be able to understand

100: satellite control device
110: operation unit
120: memory unit
130: management
140: detection unit

Claims (17)

An artificial satellite control device installed in an artificial satellite to control the operation of electronic elements constituting the artificial satellite,
an operation unit that performs processing for controlling the operation of the electronic elements;
a plurality of memory units each storing first data for operating the operation unit;
a management unit for operating the operation unit with the first data stored in the selected memory unit among the plurality of memory units; and
The plurality of memory units include a first memory unit and a second memory unit,
Each of the first memory unit and the second memory unit includes a non-volatile memory and a volatile memory,
The non-volatile memory of the first memory unit and the non-volatile memory of the second memory unit are formed of different types of semiconductors. The method according to claim 1,
The satellite control apparatus further comprising a; sensing unit for detecting whether the plurality of memory units are abnormal. 3. The method according to claim 2,
When an abnormality is detected in the selected memory unit, the management unit operates the operation unit with first data stored in a memory unit other than the selected memory unit. 3. The method according to claim 2,
If there is no abnormality in the selected memory unit, the operation unit stores second data generated during processing in the same manner in the plurality of memory units. 3. The method according to claim 2,
When an abnormality is detected in the selected memory unit, the operation unit stores second data generated during processing in a memory unit other than the selected memory unit. delete The method according to claim 1,
The volatile memory of the first memory unit and the volatile memory of the second memory unit are formed of different types of semiconductors. 4. The method according to claim 3,
When the operation unit detects that the abnormality is resolved in the selected memory unit, the satellite control device stores the first data stored in the other memory unit in the selected memory unit. 6. The method of claim 5,
When it is detected that the abnormality is resolved in the selected memory unit, the operation unit stores second data stored in another memory unit in the selected memory unit, and the second data generated while processing is performed after the abnormality is detected A satellite control device for equally storing the plurality of memory units. preparing a plurality of memory units storing first data for operating the operation unit of the satellite control device;
selecting one memory unit among the plurality of memory units;
The process of operating the operation unit to operate the operation unit with the first data stored in the selected memory unit, and controlling the operation of electronic elements constituting the artificial satellite;
The process of preparing the plurality of memory units,
In order to prevent the plurality of memory units from being damaged for the same reason, a plurality of nonvolatile memories formed of different types of semiconductors and a plurality of volatile memories formed of different types of semiconductors are used, respectively, respectively. The process of preparing a plurality of memory units to include a; satellite control method comprising a. 11. The method of claim 10,
and storing the second data generated while the operation unit performs processing in the same manner in the plurality of memory units. 12. The method of claim 11,
The process of selecting one memory unit from among the plurality of memory units is performed while the satellite control device is booted. 13. The method of claim 12,
detecting abnormalities in the plurality of memory units during the booting;
and operating the operation unit with first data stored in a memory unit other than the selected memory unit when an abnormality is detected in the selected memory unit. 12. The method of claim 11,
detecting whether the plurality of memory units are abnormal while the operation unit performs processing;
When an abnormality is detected in the selected memory unit, storing the second data generated while the operation unit performs processing in a memory unit other than the selected memory unit; 14. The method of claim 13,
When it is sensed that the abnormality is resolved in the selected memory unit, storing the first data stored in the other memory unit in the selected memory unit; 15. The method of claim 14,
When it is detected that the abnormality is resolved in the selected memory unit, the second data stored in the other memory unit is stored in the selected memory unit, and the second data generated while processing is performed after the abnormality is detected is stored in the plurality of The process of storing the same in the memory unit; satellite control method comprising a. 15. The method according to claim 13 or 14,
updating the first data stored in the selected memory unit;
detecting an abnormality in the selected memory unit during update;
when an abnormality is detected in the selected memory unit, operating the operation unit with first data stored in a memory unit other than the selected memory unit;
When it is sensed that the abnormality is resolved in the selected memory unit, storing the first data stored in the other memory unit in the selected memory unit;

Images