RU2653670C1 - Method of testing the control channel of space vehicle on-board equipment. - Google Patents

Abstract

FIELD: space.

SUBSTANCE: invention relates to control of space vehicles (SV). In the method for testing the control channel of onboard spacecraft equipment, they form a complex of models of hardware and software means for simulating equipment and SV systems capable of receiving control commands and generating TM information, not distinguishable for the MCC operator from real TM information, close to the model-simulators real hardware and software of the MCC for managing the spacecraft and receiving TM information and in accordance with the documentation for the control of the spacecraft, from the regular terminal of the MCC issue control commands, which determine any modes of functioning of the satellite provided for in the documentation, and analyze the corresponding TM information. In order to improve the quality and reliability of testing the control channel, the used in the testing model of the on-board control system (OCS) with real on-board software (OS) of the OS are used. At the same time, an emulator of the on-board computer is developed for the functioning of a real OS.

EFFECT: invention technical result is increase in accuracy and reliability of thermal control.

3 cl

Description

The invention relates to the field of remote control of multi-purpose equipment according to the results of reception and analysis of the corresponding telemetric (TM) information, in particular to the field of control of spacecraft (SC).

US 4,545,013, Advanced Communication Network Testing and Control System, describes a standard method for testing a communications network. According to the patent, a central control system associated with many remote points of contact automatically monitors the network, including all its constituent elements, and regularly adjusts the state of each element. The central control system performs automatic testing at selected points of communication in the network without the need for operator intervention. In addition, there is the provision of manual operator commands to perform certain tests and controls.

As described above, standard testing methods monitor each point of contact using a central control system associated with multiple points of contact. Standard testing methods, however, are difficult to apply in a system that includes complex subsystems and many elements. In addition, the method does not allow testing many systems at the same time and outputting results that are not classified according to the system before outputting the data.

A known method for the diagnosis of complex electronic devices (RU 2265236, G05B 23/02), based on the alternate supply to the inputs of the monitored device of pre-formed sets of input test signals and the use of equivalent sets of response signals at the outputs of the controlled device as the serviceability criteria for the device circuit. For each set of input test signals, equivalent sets of response signals for intermediate points corresponding to the outputs of the cascades of branches of the circuit of the controlled device are pre-formed, the sets of response signals are identified with the type of component of the controlled device, with the geometric position of this component on the surface of the printed circuit board of the controlled device and with branch of the functional diagram of the controlled device, for the intermediate points of which are formed these signals provide combinations of test input signals to the input contacts of the device to be monitored, receive equivalent response signals from the output contacts of the device to be monitored, compare the parameters of the measured response signals with the parameters of the preformed reference response signals for this type of controlled device, determine the degree of coincidence of the measured and reference response signals , when detecting mismatches, fix the numbers of output contacts with mismatched signals and determine lyayut functional circuit branch controlled device having the fault.

The disadvantage of this method is the inability to test the software components of the complex.

A known method for monitoring and diagnosing a pneumohydraulic object (RF Patent No. 2133055, G05B 23/00, 1999), which consists in the fact that during the control process parameters are cyclically measured at the main control points of the object, compare them with threshold values. When parameters go beyond the threshold values at the main control points, they record the failure and localize it, i.e. search for a failed node, for which they fix the time sequence of parameter output and in this sequence measure the parameters at additional control points, calculate the generalized characteristics of the nodes making up the object from them, compare them with their threshold values. Based on the results of the comparison, a failed node is determined, the generalized characteristic of which has gone beyond threshold values.

The disadvantage of this method is the need to process a significant amount of information and the need to determine a significant number of primary and secondary control points.

There is also a method for determining the state of digital devices (RF Patent No. 2120656, G05B 23/00, H05K 13/08, 1998), which includes generating a random digital sequence, converting it in accordance with the established law in a digital device, and performing signal transformations, the results of which make a decision about the status of the device. The method proposes signal transformations that allow to detect failures and intermittent single and multiple failures.

The disadvantage of this method is the need for complex mathematical calculations, as well as the ability to determine the status of only the hardware of digital devices.

A device and method for monitoring the control program of the calculator (RF patent No. 2300795, G05B 23/00), adopted as a prototype. The method consists in the fact that the vector of control actions generated by the modified program is fed to the information model of the control object, which, as its initial state, presents state vectors taken from the base of test cases as the initial control program, characterized in that they continue to control the object unmodified program, protection of the control object from the effects of possible software errors provide through the use of an information model and the control object, implemented as an artificial neural network, provide automatic generation of test cases based on the training set for the neural network to test the modified control program, set the testing process, in which the values of the parameters that adequately describe the state of the control object are determined, and the complex performance indicators make a decision on the formulation of a modified control program for execution to manage the object.

The disadvantage of this method is the inability to determine the state of the hardware of the control complex.

The objective of the invention is to reduce the cost and timing of preflight tests, improve the quality and reliability of testing the control channel, as well as the use of real control tools and means of simulators of equipment and systems of the spacecraft (SC) to solve problematic situations of functioning of a real SC during its operation.

The problem is solved due to the fact that in the present invention form a complex of models of hardware and software simulators of equipment and spacecraft systems that are able to receive control commands and generate TM information that is not distinguishable to the operator of the flight control center (MCC) from real TM information , they close on the simulator models the real hardware and software of the MCC for controlling the spacecraft and receiving TM information and, in accordance with the documentation for controlling the spacecraft, issue control commands from the standard terminal of the MCC, op assigning any satellite operating modes provided for in the documentation, and analyze the corresponding TM information.

The control channel for the spacecraft’s onboard equipment includes hardware and software for the flight control center, hardware and software for the ground-based control complex (GCC), and hardware and software for the spacecraft, specifically for the onboard control complex (BCC) with real-time on-board software (BPO ), worked out during testing of BPO during ground preflight preparation and testing.

BKU is an integral part of each spacecraft and is intended to control the spacecraft equipment. BKU provides the implementation of autonomous control and monitoring of onboard spacecraft systems in real time, continuously monitors the performance of all onboard systems, their hardware and functional redundancy, as well as optimizing their performance. In order to reduce the flow of control and diagnostic information, the control unit is built according to the hierarchical principle, and the equipment of the lower level control unit is included directly in the on-board systems and is the control unit of the latter.

The method is as follows.

The hardware-software models of satellite systems (APMSS) should provide sufficient means to verify the readiness of the ground-based operating system to perform its main functions of telemetry processing, issuing commands and displaying data. In order to accept and verify the APMSS, the possibility of operational tracking should be provided, with the recording of the necessary data and conditions for subsequent analysis. And appropriate means should be provided for this analysis.

APMSS should fully represent the characteristics of the spacecraft in the form in which the spacecraft looks for the MCC operator at all stages of the flight following the completion of the separation stage from the launch vehicle, and respond to all commands and give an appropriate response in telemetry. The telemetric data stream should have sufficient realism to develop a correct understanding of the spacecraft’s behavior in regular and emergency situations for the MCC personnel.

APMSS should realistically simulate a subset of failures and non-working modes defined in the spacecraft control documentation. Failure simulation should be implemented by simply issuing commands from the console of the MCC operator. The level of required realism varies for each subsystem of the spacecraft. The effect of failures in one subsystem on another subsystem or subsystems should be realistically modeled. The interdependence between the subsystems can be modeled at the simplest level (for example, temperature rise when the equipment is turned on, increased power consumption, etc.) since the simulated characteristics of the spacecraft are determined in normal and emergency situations and are described in the control documentation. APMSS should have an interface with the ground system at the level of transmission of telemetry frames and commands.

All models must work in real time. Real time refers to the generation of a telemetric data stream expected by the MCC operator and corresponding to the stream from a real spacecraft. You can set the slow or fast mode.

It is required to simulate all stages of the spacecraft functioning, from the moment after separation from the launch vehicle to the end of its existence. It should be possible to set any era and orbit elements for initialization by changing the default data in the menu. As a result, the simulation must comply with these conditions.

For a good understanding of the reaction of control loops, a thorough simulation of position control and position dynamics is required to ensure correct telemetry of sensors and actuators in the same way that spacecraft automation works.

APMSS should simulate all modes of operation of spacecraft systems, both autonomous and with control from the NKU. All telemetry data must be generated. All programmable functions of the on-board computers should be fully imitated, as required in regular and emergency situations, provided for in the control documentation.

Telemetry and telecommand encoding functions require accurate simulation, especially with respect to time ticks. All command monitoring functions must be accurately simulated. All command protocols must be supported. In the event of a team error, if the spacecraft rejects it, then the spacecraft hardware models must also reject it.

The temperature of those units whose characteristics depend on temperature should be calculated.

Models are controlled through a block of display screens, allowing to display all on-board data, telemetric data and to control data streams and input information. The terminals used for these purposes do not have to be local to the simulation computer. The following functions should be feasible from the console of the MCC operator:

- start, pause, shutdown of the models as a whole or simulation software modules taking into account the interaction of spacecraft systems;

- control of the current simulation by manual entry into the simulation process, such as entering telecommands using command function codes defined in the spacecraft control documentation.

It should be possible to group telecommands during the simulation. It should be possible to issue telecommands without going through any echo of the telecom subsystem in telemetry, in order to make invisible telecommands invisible to the MCC operator involved in the simulation process. Models should be executed only by those telecommands that are executed by a real spacecraft in the same state.

All failures must have an appropriate cause. For example, an excess voltage on the bus should be caused by a special unit, turning off which removes overvoltage, and turning it on causes.

There must be a log file that contains all the input information that influences the simulation process, such as telecommands, activation and removal of faults, coverage of ground stations, entry and exit of the eclipse, changed TM values, initialization, etc. Monitoring tools should provide the ability to display in graphical and textual form the processed telemetry of the spacecraft in real time in the simulation mode. It should be possible for the models to work offline, i.e. without joining the GCC.

Thus, the difference of the proposed method is that in order to improve the quality and reliability of testing the control channel, an equipment model of the onboard control complex (BCC) is used with real on-board software (BPO) worked out during BPO testing. At the same time, for the functioning of a real BPO, an on-board computer emulator model is developed, often different for different satellites.

The presence of high-precision models of hardware and software simulators of equipment and systems of spacecraft allows you to play options for controlling a real spacecraft during its operation in emergency situations and in case of failure of onboard spacecraft equipment.

Claims (3)

1. A method for testing the control channel of the spacecraft (SC) onboard equipment, which consists in issuing control commands (KU), receiving and analyzing telemetric (TM) information, characterized in that they form a complex of models of hardware and software simulators of equipment and systems of spacecraft, able to receive control commands and generate TM information, indistinguishable for the operator of the flight control center (MCC) from real TM information, close the real hardware and software of the MCC for control w AC and TM-receiving information and in accordance with the documentation for the AC management DRM terminal with regular issue control commands that define the functioning of the satellite modes, and analyze information corresponding to the TM. 2. The method according to p. 1, characterized in that especially complex situations are modeled from the standard control center terminal, then the corresponding control sequences of the real spacecraft are formed. 3. The method according to p. 1, characterized in that when forming a complex of models of hardware and software simulators of equipment and systems of spacecraft use the model of the on-board computer and equipment of the on-board control complex (BKU) with real on-board software (BPO) worked out during testing BPO.