CN113934624A - System and method for on-orbit maintenance and verification of satellite-borne program of deep space exploration system - Google Patents
System and method for on-orbit maintenance and verification of satellite-borne program of deep space exploration system Download PDFInfo
- Publication number
- CN113934624A CN113934624A CN202111088604.2A CN202111088604A CN113934624A CN 113934624 A CN113934624 A CN 113934624A CN 202111088604 A CN202111088604 A CN 202111088604A CN 113934624 A CN113934624 A CN 113934624A
- Authority
- CN
- China
- Prior art keywords
- program
- satellite
- data packet
- program data
- borne
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012423 maintenance Methods 0.000 title claims abstract description 86
- 238000012795 verification Methods 0.000 title claims abstract description 80
- 238000000034 method Methods 0.000 title claims abstract description 39
- 230000006870 function Effects 0.000 claims abstract description 41
- 238000004806 packaging method and process Methods 0.000 claims abstract description 14
- 238000005538 encapsulation Methods 0.000 claims abstract description 6
- 230000004048 modification Effects 0.000 claims description 41
- 238000012986 modification Methods 0.000 claims description 37
- 238000012545 processing Methods 0.000 claims description 10
- 238000001914 filtration Methods 0.000 claims description 2
- 238000002347 injection Methods 0.000 abstract description 11
- 239000007924 injection Substances 0.000 abstract description 11
- 238000007781 pre-processing Methods 0.000 abstract description 4
- 238000004088 simulation Methods 0.000 abstract description 3
- 238000012790 confirmation Methods 0.000 abstract description 2
- 230000006872 improvement Effects 0.000 abstract description 2
- 230000002708 enhancing effect Effects 0.000 abstract 1
- 230000008569 process Effects 0.000 description 5
- 238000001514 detection method Methods 0.000 description 4
- 230000008859 change Effects 0.000 description 3
- 230000002159 abnormal effect Effects 0.000 description 2
- 238000004891 communication Methods 0.000 description 2
- 238000005259 measurement Methods 0.000 description 2
- 230000008023 solidification Effects 0.000 description 2
- 230000003068 static effect Effects 0.000 description 2
- 238000010200 validation analysis Methods 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 230000019771 cognition Effects 0.000 description 1
- 238000005520 cutting process Methods 0.000 description 1
- 238000007405 data analysis Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 230000004069 differentiation Effects 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 230000007774 longterm Effects 0.000 description 1
- 238000002715 modification method Methods 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 238000011056 performance test Methods 0.000 description 1
- 230000002035 prolonged effect Effects 0.000 description 1
- 230000008929 regeneration Effects 0.000 description 1
- 238000011069 regeneration method Methods 0.000 description 1
- 239000000523 sample Substances 0.000 description 1
- 238000007711 solidification Methods 0.000 description 1
- 238000003860 storage Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3457—Performance evaluation by simulation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/36—Preventing errors by testing or debugging software
- G06F11/3668—Software testing
- G06F11/3672—Test management
- G06F11/3692—Test management for test results analysis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Computer Hardware Design (AREA)
- Quality & Reliability (AREA)
- Computer Security & Cryptography (AREA)
- Radio Relay Systems (AREA)
Abstract
The invention relates to an on-orbit maintenance and verification system and method for a satellite-borne program of a deep space exploration system, which provide three on-orbit maintenance types of byte level, function level and full-text level according to an updating mode of satellite-borne software. And ground terminal systems are adopted to realize ground preprocessing and verification. The DATA slicer (systols DATA Splitter) and the encapsulation Function (Function Config) automatically split and encapsulate the program to be executed according to the injection protocol. And a digital tube analog (OBDH simulator) module and a GNC subsystem parallel verification module in the ground digital twin system complete the verification of the packaging instruction and ground 1:1 simulation verification, and finally, a sequence comparison algorithm system is utilized to automatically complete the confirmation of the on-orbit maintenance result. The method is an effective way for effectively enhancing the reliability of the spacecraft, expanding the practicability of the spacecraft and prolonging the service life of the spacecraft, provides a good platform environment for the improvement of the follow-up functions and performances of spacecraft software, and provides powerful support for improving the on-orbit maintenance intelligence degree of the spacecraft.
Description
Technical Field
The invention relates to an on-orbit maintenance and verification system and method for a satellite-borne program of a deep space exploration system.
Background
When the space-inquiry Mars I enters the cabin GNC subsystem, the computer is controlled to be powered on intermittently in the ground fire transfer and ring fire stages, and the self-checking of each single machine and the performance test of the subsystem are completed. The performance of the product and subsystem is evaluated using data during the on-track period, which may involve on-track maintenance of program memory. The on-orbit maintenance of the program memory means that in the operation process of the spacecraft, the detection of data errors in the memory and the modification of memory data are realized through the reading and writing operations of data in the program memory area, so as to support the long-term reliable operation of the on-orbit spacecraft and the change of task functions. And by updating the program, the upgrading, the expansion, the change of the system function and the like of the software are realized.
The control computer software is divided into boot sector software, system software and application software. The boot area software is solidified in a Programmable Read Only Memory (PROM) of the single machine, and the system software and the application software are solidified in an Electrically Erasable Programmable Read Only Memory (EEPROM) of the single machine after being jointly compiled. After the computer is powered on, the software in the EEPROM is carried into a Static Random Access Memory (SRAM) by boot area software for operation.
The conventional on-orbit modification method for the satellite-borne program mainly comprises two methods: read-only memory type (SRAM) on-track modification and programmable memory type (EEPROM) on-track program modification. Both methods are realized based on a hook function pre-embedded in an onboard program. And the SRAM area program is modified, the operation process is simple, and the safety is high. When the operation is wrong, the original program can be loaded from the EEPROM by sending a command for controlling the computer to be powered off or reset, so that the normal operation of the system is ensured. The method has the disadvantages that the method does not support the on-orbit solidification function, the on-board program state depends on the on-orbit state of the control computer, and the maintainability of software is poor. Another method is EERPOM program modification, the program is solidified in EEPROM, and the hook function is reloaded from the EEPROM after the software is reset, so that ground refilling is not needed. The method has the disadvantages of complex operation and low safety, and once an operation process is abnormal, a satellite-borne program can be mistakenly executed, and even the work of the whole system is abnormal.
The satellite-borne program on-track maintenance is realized through the traditional hook function, the number of the traditional hook function is generally 8-16, only a certain number of function modules can be modified, and the method is not suitable for large-scale program modification. In addition, the preset hook function often depends on previous experience, has incomplete expandability and poor flexibility, and is difficult to adapt to the continuously increasing differentiation requirements.
In addition to command injection, ground pre-processing and validation are key to improving reliability and efficiency in on-track maintenance. The traditional preprocessing needs manual splitting of a compiled program according to fixed bytes, and then packaging of split instructions according to an injection protocol, so that the traditional preprocessing has the advantages of large workload, poor reliability and low efficiency, and is not suitable for large-scale program modification and on-orbit emergency processing. In addition, ground verification is not sufficient enough, the completeness of verification cannot be guaranteed within a limited time, the formats and contents of various instructions are verified only in a manual or semi-manual mode, the reliability is low, the consumed time is long, the operation flow is complex, and the operation and implementation of designers and testers are not facilitated.
Considering the first Mars detection task in China, certain limitation exists on the prior cognition of the space environment and the like. Meanwhile, the on-orbit time is long, and the on-satellite program is required to be modified, upgraded and even integrally replaced. The traditional on-orbit maintenance method cannot meet the requirements of a mars detector system. Therefore, how to realize on-orbit maintenance and verification of the satellite-borne program becomes a necessary function of the Mars detection system.
Disclosure of Invention
The technical problem solved by the invention is as follows: aiming at the defects of the prior art, the system and the method for on-orbit maintenance and verification of the satellite-borne program of the deep space exploration system are provided, the reliability of the spacecraft can be effectively enhanced, the practicability of the spacecraft is expanded, the service life of the spacecraft is prolonged, a good platform environment is provided for continuous improvement of the follow-up functions and performances of spacecraft software, and powerful support is provided for improving the on-orbit maintenance intelligence degree of the spacecraft.
The technical scheme of the invention is as follows:
an on-orbit maintenance and verification system for a satellite-borne program of a deep space exploration system comprises: the system comprises a ground digital twin system, an on-orbit maintenance module and a ground sequence rapid comparison verification module;
ground digital twinning system: the packaged program data packet is injected to a ground control computer, and the ground control computer verifies instructions in the packaged program data packet; transmitting the program data packet with correct verification result to an on-orbit maintenance module;
an on-track maintenance module: receiving a program data packet transmitted by a ground digital twin system and a program data packet transmitted by a ground sequence quick comparison verification module, injecting the program data packet to an on-board control computer, and updating and upgrading the on-board software; obtaining a program data packet unloaded by an on-board control computer and transmitting the program data packet to a ground sequence rapid comparison verification module;
ground sequence fast comparison verification module: acquiring a downloaded program data packet, and performing matching and comparison processing according to the data characteristics of the packaging module to obtain a comparison result; if the comparison result is wrong, transmitting a program data packet corresponding to the wrong comparison result to an on-orbit maintenance module; and if the comparison result is correct, completing the on-orbit maintenance and verification work of the satellite-borne program.
A method for performing on-orbit maintenance and verification of a satellite-borne program by using the on-orbit maintenance and verification system of the satellite-borne program of the deep space exploration system comprises the following steps:
1) the packaged program data packet is injected to a ground control computer;
2) the ground control computer verifies the instructions in the encapsulated program data packet, and the program data packet with the correct verification result is obtained and transmitted to the on-orbit maintenance module;
3) the on-orbit maintenance module receives a program data packet transmitted by the ground digital twin system, and the program data packet is injected to the on-satellite control computer to update and upgrade the on-satellite software;
4) the on-orbit maintenance module obtains a program data packet unloaded from an on-board control computer and transmits the program data packet to the ground sequence rapid comparison verification module;
5) the ground sequence rapid comparison verification module obtains a program data packet downloaded and unloaded from an onboard control computer, and performs matching and comparison processing according to the data characteristics of the packaging module to obtain a comparison result; if the comparison result is wrong, transmitting the program data packet corresponding to the wrong comparison result to the on-orbit maintenance module, and entering the step 6); and if the comparison result is correct, completing the on-orbit maintenance and verification work of the satellite-borne program.
6) The on-orbit maintenance module injects the program data packet to the on-satellite control computer to update and upgrade the on-satellite software; the on-orbit maintenance module obtains a program data packet unloaded from an on-board control computer and transmits the program data packet to the ground sequence rapid comparison verification module; and returns to step 5).
Compared with the prior art, the invention has the advantages that:
1) on-orbit maintenance is a combined optimization problem, the traditional method depends on a pre-embedded hook function, and due to the limited number of the hook functions, the traditional method cannot modify and upgrade codes of any part of satellite-borne software, and the on-orbit maintenance is poor. According to the on-orbit modification requirement, three on-orbit maintenance types of byte level, function level and full-text level are provided, and all requirements of on-orbit modification of the spacecraft are met. The function-level on-orbit maintenance is used in deep space exploration tasks more frequently, the on-orbit modification of the satellite-borne program is completed by utilizing the jump function, and the problem that the traditional method cannot modify and upgrade codes of any part of satellite-borne software is solved.
2) On-orbit maintenance needs the support of a ground terminal, the traditional verification method is insufficient in verification, and the command injection error can cause the abnormity of the whole system. The method utilizes the ground terminals such as automatic cutting and packaging software, a ground digital twin system, a sequence comparison algorithm system and the like to automatically generate the on-orbit injection instruction and automatically verify the on-orbit injection result, and the intelligence, reliability and flexibility of on-orbit maintenance are greatly improved. The problems of low efficiency and low reliability of the traditional method are solved.
Drawings
FIG. 1 is a flow chart of an on-orbit program maintenance system.
Fig. 2 is a flow chart of an on-track maintenance and verification system.
Fig. 3 is a package format.
Detailed Description
The invention relates to an on-orbit maintenance and verification system for a satellite-borne program of a deep space exploration system, which comprises the following components: the system comprises a ground digital twin system, an on-orbit maintenance module and a ground sequence rapid comparison verification module.
Ground digital twinning system: the packaged program data packet is injected to a ground control computer, and the ground control computer verifies instructions in the packaged program data packet; transmitting the program data packet with correct verification result to an on-orbit maintenance module;
an on-track maintenance module: receiving a program data packet transmitted by a ground digital twin system and a program data packet transmitted by a ground sequence quick comparison verification module, injecting the program data packet to an on-board control computer, and updating and upgrading the on-board software; obtaining a program data packet unloaded by an on-board control computer and transmitting the program data packet to a ground sequence rapid comparison verification module;
the method for updating and upgrading the satellite-borne software specifically comprises the following steps: byte level modifications, function level modifications, and full-text level modifications.
The byte level modification is specifically:
for the condition that parameters or immediate data in the satellite-borne program need to be upgraded, a program data packet is injected into an SRAM area of the satellite-borne control computer, and satellite-borne software in the SRAM area is directly modified, so that the update and upgrade of the satellite-borne software are completed;
the function-level modification specifically comprises:
for the condition that the self-defined function in the satellite-borne program needs to be upgraded, a program data packet is injected into a program injection default area of the on-board computer, and the jump between the EEPROM area program and the program injection default area software is completed through a 'start' function, so that the update and upgrade of the satellite-borne software are completed;
the full-level modification specifically comprises the following steps:
for the situation that the spacecraft cannot normally run due to the accidental accident in the orbit, in order to prolong the service life of the spacecraft or for the situation that a task target needs to be expanded or changed in the orbit, a program data packet is injected into an EEPROM (electrically erasable programmable read-only memory) area of the on-board computer, and the on-board program of the original version is directly replaced and upgraded, so that the updating and upgrading of the on-board software are completed.
Ground sequence fast comparison verification module: acquiring a downloaded program data packet, and performing matching and comparison processing according to the data characteristics of the packaging module to obtain a comparison result; if the comparison result is wrong, transmitting a program data packet corresponding to the wrong comparison result to an on-orbit maintenance module; and if the comparison result is correct, completing the on-orbit maintenance and verification work of the satellite-borne program.
And performing matching and comparison processing according to the data characteristics of the packaging module, and adopting a sequence quick comparison algorithm.
The sequence rapid comparison algorithm specifically comprises the following steps:
1) filtration treatment
Receiving program data packets unloaded from the star by using a plurality of ground stations during the on-orbit period of the inter-satellite-A Mars detector, deleting the repeated program data packets unloaded from the star when the program data packets are repeated, and obtaining filtered program data packets;
2) search processing
When a plurality of subsystems of an inter-space Mars probe work simultaneously in an on-orbit period, if unloading program data packets obtained by a ground survey station comprise unloading program packets of an entry GNC subsystem and other subsystems, listing data characteristics of an encapsulation module by taking the program data packets as a reference sequence, searching all unloading program data packets, and searching a sequence matched with the data characteristics from the unloading program packets so as to find the position of each unloading program data packet in the reference sequence;
3) extension treatment
And after the position of the unloading data packet in the reference sequence is found, comparing the non-data characteristic sequence parts except the sequence matched with the data characteristics in the unloading program data packet byte by byte.
A method for performing on-orbit maintenance and verification of a satellite-borne program by using the on-orbit maintenance and verification system of the satellite-borne program of the deep space exploration system comprises the following steps:
1) the packaged program data packet is injected to a ground control computer;
2) the ground control computer verifies the instructions in the encapsulated program data packet, and the program data packet with the correct verification result is obtained and transmitted to the on-orbit maintenance module;
3) the on-orbit maintenance module receives a program data packet transmitted by the ground digital twin system, and the program data packet is injected to the on-satellite control computer to update and upgrade the on-satellite software;
4) the on-orbit maintenance module obtains a program data packet unloaded from an on-board control computer and transmits the program data packet to the ground sequence rapid comparison verification module;
5) the ground sequence rapid comparison verification module obtains a program data packet downloaded and unloaded from an onboard control computer, and performs matching and comparison processing according to the data characteristics of the packaging module to obtain a comparison result; if the comparison result is wrong, transmitting the program data packet corresponding to the wrong comparison result to the on-orbit maintenance module, and entering the step 6); and if the comparison result is correct, completing the on-orbit maintenance and verification work of the satellite-borne program.
6) The on-orbit maintenance module injects the program data packet to the on-satellite control computer to update and upgrade the on-satellite software; the on-orbit maintenance module obtains a program data packet unloaded from an on-board control computer and transmits the program data packet to the ground sequence rapid comparison verification module; and returns to step 5).
The invention relates to an on-orbit maintenance and verification method for a satellite-borne program of a deep space exploration system, which provides three on-orbit maintenance types of byte level, function level and full-text level according to an updating mode of satellite-borne software. The system comprises: and the ground terminal automatically divides the compiled program to be executed into a plurality of program upgrading packets according to the instruction protocol and automatically completes encapsulation by using the function Config. And the packaged program upgrading packet is sent to a ground digital twin system through a network port, and the system is divided into two modules, namely an OBDH simulator module and a GNC subsystem parallel verification module. And the OBDH simulator module is used for simulating the digital pipe subsystem to send uplink data or instructions to the GNC subsystem parallel verification module. Before the instruction is filled, the instruction is subjected to packaging verification, wherein the packaging verification comprises instruction format, content length, checksum and the like. And the GNC subsystem parallel verification module completes the simulation verification with the on-orbit control computer 1:1 according to the flight program. The sequence comparison algorithm system automatically matches the on-board software according to a set sequence, and performs global comparison after matching is successful; and the control computer sends the on-board program to the ground terminal for checking and rechecking after receiving the on-orbit maintenance instruction and the software read-back instruction.
The invention discloses an on-orbit maintenance and verification method for a satellite-borne program of a deep space exploration system, and system components and flow charts are shown in figures 1 and 2.
(ii) Systools DATA Splitter and Function Config
And after the satellite-borne software is determined to need on-orbit maintenance, compiling to generate a file to be executed. Because the length of the instruction for injecting is limited, the program to be executed needs to be split into multiple packets for transmission. In a traditional manual unpacking mode, a file to be executed needs to be split into a plurality of packets according to the byte length required by a protocol, and manual filling needs to be performed if the byte length does not meet the requirement. After the data content is split, the encapsulation work needs to be completed manually. And adding frame headers, frame lengths, packet identifiers, checksums and the like which meet the injection requirements according to the injection requirements. The workload is large and the operation is complex. The traditional manual method has low efficiency and poor reliability, and cannot meet the high-efficiency and high-quality requirements of on-orbit maintenance. The invention provides a Systools DATA Splitter software which is used for reading a local file to be updated, automatically splitting the local file according to a set byte length, automatically packaging the local file according to a communication protocol format requirement by using a function Config, and finally saving the local file as a program upgrading DATA packet. Wherein the packaging format is shown in figure 3.
Ground digital twinning system
With the Mars detection task as the background, the spacecraft system has extremely high requirements on the accuracy and reliability of all in-orbit injection instructions, and the consequences caused by any instruction error are immeasurable. The invention provides a ground digital twin system which is divided into two modules, namely an OBDH simulator module and a GNC subsystem parallel verification module. And the OBDH simulator module is used for simulating the digital pipe subsystem to send uplink data or instructions to the GNC subsystem parallel verification module. Before the instruction is injected, the instruction is subjected to encapsulation check, including instruction type, packet header, content length, checksum and the like. If the verification is correct, the uplink data or instruction operation is executed, and the instruction count is increased. Otherwise, a false alarm occurs and the cause of the error is given. At this time, the instruction for injecting the upper note needs to be analyzed, and the instruction meeting the injection requirement is regenerated. And the GNC subsystem parallel verification module completes the simulation verification with the on-orbit control computer 1:1 according to the flight program. The correctness of the content of the upper note is verified again. And simultaneously, an EEPROM program read-back instruction is sent to the GNC subsystem parallel verification module by using the OBDH simulator module, the on-orbit maintenance result of the satellite is confirmed, if the on-orbit maintenance result is inconsistent, the Data analysis and regeneration of the upper note content are required to be carried out again, and after all the instruction blocks are consistent, the on-orbit maintenance result is sent to a Data Sender.
(III) Data Sender
The verified instruction block is sent to a Data Sender, then a control command or a Data instruction is sent to an on-orbit control computer, taking the on-orbit operation of a mars entering cabin GNC subsystem as an example, the control computer is composed of 3 single machine hot backup units which are respectively marked with three machines A, B and C, the priority of the single machine is sequentially reduced, a communication interface is shared, and an EEPROM of each machine adopts main backup redundant storage. According to the on-board software updating mode, three on-orbit maintenance types, namely byte level, function level and full-text level, are provided.
1) Byte level modification
The current on-orbit modification uses a more on-orbit maintenance mode, and is particularly suitable for parameter modification and immediate modification in a program. The basic principle is to compile the upgraded satellite-borne software and then compare the compiled satellite-borne software with the on-orbit software, find the difference between the two, and modify the SRAM area program. The operation flow can be summarized into the following steps:
step 1: compiling the upgraded software to generate an executable program, comparing the executable program with an on-orbit satellite-borne program, finding out a place with a code difference, and forming a program upgrading data packet by using the data content and the address of a target position;
step 2: sending the program upgrading data packet to an onboard control computer, and modifying the SRAM area program;
and step 3: and (5) performing unloading confirmation on the on-satellite program.
2) Function level modification
And finishing the upgrading and updating of the on-track software by using the jump function. And injecting a newly generated file to be executed into a program injection default area of the control computer, then completing the jump between the satellite-borne software and the program injection default area software through a 'starting' function instruction, solidifying the jump in an EEPROM, and transporting the software in the EEPROM to an SRAM for operation through boot area software so as to realize on-orbit modification of the on-satellite program. In addition, in order to improve the reliability in the on-orbit process of the software, a control instruction is designed to realize program switching, and the original satellite-borne software is recovered by injecting a cancel modification instruction. The operation flow of the part is as follows:
step 1: the ground sends a direct power-on instruction to designate one computer to be powered on, designates the computer to be on duty, and executes the step 2 when the other two computers are in a power-off state;
step 2: transmitting an on-orbit modification instruction on the ground, injecting a program upgrading data packet i into an SRAM, then programming the SRAM modification content into a backup EEPROM, judging whether the execution is finished through on-satellite remote measurement, and if the execution is finished, if so, executing a step 3, wherein i is i + 1;
and step 3: judging that i < ═ n (n is the total number of the program upgrading data packets), if yes, executing the step 2, otherwise, executing the step 4;
and 4, step 4: the ground sends a power-off command to the airliner, and then when the airliner is powered on, step 5 is executed.
And 5: sending a backup EEPROM read-back instruction i, i is 1,2, n on the ground, judging whether the content of the read-back instruction is correct, and if so, judging that the content of the read-back instruction is correct, i is i +1
(m1Initially null), if so, executing step 7, if (i is less than or equal to n) is satisfied, executing step 5, otherwise, executing step 6;
step 6: storing the code number of the instruction block i with inconsistent comparison to m1Judging that i is larger than or equal to n, if so, executing the step 2, otherwise, executing the step 5;
and 7: sending a program upgrading packet i to an SRAM (static random access memory), programming the content of a modified part in the SRAM to a master EEPROM (electrically erasable programmable read-only memory), checking whether the satellite telemetry judgment operation is finished, and if so, executing a step 8 if i is i + 1;
and 8: judging that i < ═ n, if yes, executing step 7, otherwise executing step 9;
and step 9: the ground sends a power-off command to the flight, and then powers on again, and step 10 is executed.
Step 10: sending a main part EEPROM read-back instruction i, i is 1,2, n on the ground, checking whether the content of the read-back instruction is correct, if so, i is i +1, and judging
(m2Initially null), if so, executing step 12, if (i is less than or equal to n) is satisfied, executing step 10, otherwise, executing step 11;
step 11: storing the code number of the instruction block i with inconsistent comparison to m2Judging that i is more than or equal to n, if so, executing the step 7, otherwise, executing the step10；
Step 12: and (3) when the computer is powered off, judging whether the computer is the machine A or not, if so, ending, and otherwise, executing the step 1.
The whole control computer on-track modification is sequentially operated according to the sequence of backup first and then primary backup, C machine first and then B machine and A machine last, and the method ensures the safety of on-track operation.
3) Full text level modification
In order to prolong the service life of the spacecraft or to expand or change the mission target during the in-orbit period, the mission can be continued by full-text modification. Compiling the upgraded satellite-borne software, directly modifying the program in the SRAM without injecting the program into a default area, and programming the program in the SRAM into the EEPROM to finish on-orbit program solidification. The operation flow is consistent with the function level modification.
(IV) sequence comparison algorithm system
On-track maintenance requires adequate ground validation. And after the instruction injection is finished, performing byte-by-byte comparison on the cured on-orbit satellite program and the source code of the file to be executed. This task puts higher demands on the correctness and efficiency of execution. In order to solve the problems of low efficiency and low reliability in the manual comparison process, the subsection provides a sequence comparison algorithm, taking the Mars entering the GNC subsystem as an example, a read-back file on the planet is stored in a ground database, and the same instruction operation of other subsystems may occur during the read-back. In addition, in the period, the multi-observation station is used for receiving the on-satellite remote measurement, so that data repetition is caused, and the problems of large data volume, multiple types and complex search of the database are caused. The traditional manual method has extremely low efficiency and is easy to generate the conditions of multiple packets and packet loss. The system extracts database data and stores the database data into a local file, automatically deletes repeated items, automatically matches according to a set sequence, and then carries out global comparison.
Although the present invention has been described with reference to the preferred embodiments, it is not intended to limit the present invention, and those skilled in the art can make variations and modifications of the present invention without departing from the spirit and scope of the present invention by using the methods and technical contents disclosed above.
Those skilled in the art will appreciate that those matters not described in detail in the present specification are well known in the art.
Claims (10)
1. An on-orbit maintenance and verification system for a satellite-borne program of a deep space exploration system is characterized by comprising the following components: the system comprises a ground digital twin system, an on-orbit maintenance module and a ground sequence rapid comparison verification module;
ground digital twinning system: the packaged program data packet is injected to a ground control computer, and the ground control computer verifies instructions in the packaged program data packet; transmitting the program data packet with correct verification result to an on-orbit maintenance module;
an on-track maintenance module: receiving a program data packet transmitted by a ground digital twin system and a program data packet transmitted by a ground sequence quick comparison verification module, injecting the program data packet to an on-board control computer, and updating and upgrading the on-board software; obtaining a program data packet unloaded by an on-board control computer and transmitting the program data packet to a ground sequence rapid comparison verification module;
ground sequence fast comparison verification module: obtaining a program data packet downloaded from an on-board control computer, and matching and comparing the program data packet according to the data characteristics of the packaging module to obtain a comparison result; if the comparison result is wrong, transmitting a program data packet corresponding to the wrong comparison result to an on-orbit maintenance module; and if the comparison result is correct, completing the on-orbit maintenance and verification work of the satellite-borne program.
2. The deep space exploration system on-orbit program maintenance and verification system according to claim 1, wherein the method for updating and upgrading on-board software specifically comprises: byte level modifications, function level modifications, and full-text level modifications.
3. The deep space exploration system on-board program on-track maintenance and verification system according to claim 2, wherein the byte level modification is specifically:
and for the condition that parameters or immediate data in the satellite-borne program need to be upgraded, a program data packet is injected into an SRAM area of the satellite-borne control computer, and satellite-borne software in the SRAM area is directly modified, so that the update and upgrade of the satellite-borne software are completed.
4. The deep space exploration system on-board program on-orbit maintenance and verification system according to claim 3, wherein the function-level modification specifically comprises:
for the condition that the self-defined function in the satellite-borne program needs to be upgraded, a program data packet is injected into a program injection default area of the satellite-borne computer, and the jump between the EEPROM area program and the program injection default area software is completed through a 'start' function, so that the update and upgrade of the satellite-borne software are completed.
5. The deep space exploration system satellite-borne program on-track maintenance and verification system according to claim 4, wherein the full-text-level modification specifically comprises:
for the situation that the spacecraft cannot normally run due to the accidental accidents in the orbit or the situation that the task target needs to be expanded or changed in the in-orbit period, the program data packet is injected into an EEPROM (electrically erasable programmable read-only memory) area of the on-board computer, and the on-board program of the original version is directly replaced and upgraded, so that the updating and upgrading of the on-board software are completed.
6. The in-orbit maintenance and verification system for the deep space exploration system satellite-borne program according to any one of claims 2 to 4, wherein the ground sequence fast comparison verification module performs matching and comparison processing according to data characteristics of the encapsulation module, and a sequence fast comparison algorithm is adopted.
7. The deep space exploration system satellite-borne program on-orbit maintenance and verification system according to claim 6, wherein the sequence fast alignment algorithm specifically comprises:
1) filtration treatment
Receiving program data packets unloaded from the satellite by using a plurality of ground stations during the on-orbit period of the detector, deleting the repeated program data packets unloaded from the satellite when the program data packets are repeated, and obtaining filtered program data packets;
2) search processing
When a plurality of subsystems work simultaneously during the on-orbit period of the detector, if the unloading program data packets obtained by the ground survey station comprise unloading program packets of the entry GNC subsystem and other subsystems, the program data packets are taken as a reference sequence, the data characteristics of the packaging module are listed, all the unloading program data packets are searched, a sequence matched with the data characteristics is searched from the unloading program packets, and therefore the position of each unloading program data packet in the reference sequence is found;
3) extension treatment
And after the position of the unloading data packet in the reference sequence is found, comparing the non-data characteristic sequence parts except the sequence matched with the data characteristics in the unloading program data packet byte by byte.
8. A method for performing on-orbit maintenance and verification of a satellite-borne program by using the on-orbit maintenance and verification system of the satellite-borne program of the deep space exploration system according to claim 1, which is characterized by comprising the following steps:
1) the packaged program data packet is injected to a ground control computer;
2) the ground control computer verifies the instructions in the encapsulated program data packet, and the program data packet with the correct verification result is obtained and transmitted to the on-orbit maintenance module;
3) the on-orbit maintenance module receives a program data packet transmitted by the ground digital twin system, and the program data packet is injected to the on-satellite control computer to update and upgrade the on-satellite software;
4) the on-orbit maintenance module obtains a program data packet unloaded from an on-board control computer and transmits the program data packet to the ground sequence rapid comparison verification module;
5) the ground sequence rapid comparison verification module obtains a program data packet downloaded and unloaded from an onboard control computer, and performs matching and comparison processing according to the data characteristics of the packaging module to obtain a comparison result; if the comparison result is wrong, transmitting the program data packet corresponding to the wrong comparison result to the on-orbit maintenance module, and entering the step 6); and if the comparison result is correct, completing the on-orbit maintenance and verification work of the satellite-borne program.
6) The on-orbit maintenance module injects the program data packet to the on-satellite control computer to update and upgrade the on-satellite software; the on-orbit maintenance module obtains a program data packet unloaded from an on-board control computer and transmits the program data packet to the ground sequence rapid comparison verification module; and returns to step 5).
9. The method for performing on-orbit maintenance and verification of a satellite borne program according to claim 8, wherein the method for updating and upgrading the satellite borne software specifically comprises: byte level modifications, function level modifications, and full-text level modifications.
10. The method for on-orbit maintenance and verification of a satellite borne program according to claim 9, wherein the byte level modification is specifically:
for the condition that parameters or immediate data in the satellite-borne program need to be upgraded, a program data packet is injected into an SRAM area of the satellite-borne control computer, and satellite-borne software in the SRAM area is directly modified, so that the update and upgrade of the satellite-borne software are completed;
the function level modification specifically comprises:
for the condition that the self-defined function in the satellite-borne program needs to be upgraded, a program data packet is injected into a program injection default area of the on-board computer, and the jump between the EEPROM area program and the program injection default area software is completed through a 'start' function, so that the update and upgrade of the satellite-borne software are completed;
the full-level modification specifically comprises the following steps:
for the situation that the spacecraft cannot normally run due to the accidental accidents in the orbit or the situation that the task target needs to be expanded or changed in the in-orbit period, the program data packet is injected into an EEPROM (electrically erasable programmable read-only memory) area of the on-board computer, and the on-board program of the original version is directly replaced and upgraded, so that the updating and upgrading of the on-board software are completed.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111088604.2A CN113934624A (en) | 2021-09-16 | 2021-09-16 | System and method for on-orbit maintenance and verification of satellite-borne program of deep space exploration system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111088604.2A CN113934624A (en) | 2021-09-16 | 2021-09-16 | System and method for on-orbit maintenance and verification of satellite-borne program of deep space exploration system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113934624A true CN113934624A (en) | 2022-01-14 |
Family
ID=79275999
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111088604.2A Pending CN113934624A (en) | 2021-09-16 | 2021-09-16 | System and method for on-orbit maintenance and verification of satellite-borne program of deep space exploration system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113934624A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114942777A (en) * | 2022-04-06 | 2022-08-26 | 北京控制工程研究所 | On-orbit maintenance method for compressed storage in EEPROM |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102799502A (en) * | 2012-06-28 | 2012-11-28 | 航天恒星科技有限公司 | On-orbit maintenance method of satellite-borne embedded software |
| CN103116546A (en) * | 2013-02-21 | 2013-05-22 | 北京控制工程研究所 | Automatic ground verification system for satellite on-orbit large-scale program modification |
| CN112241270A (en) * | 2020-09-03 | 2021-01-19 | 中国空间技术研究院 | System and method for on-orbit maintenance of satellite-borne software in satellite constellation system |
-
2021
- 2021-09-16 CN CN202111088604.2A patent/CN113934624A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102799502A (en) * | 2012-06-28 | 2012-11-28 | 航天恒星科技有限公司 | On-orbit maintenance method of satellite-borne embedded software |
| CN103116546A (en) * | 2013-02-21 | 2013-05-22 | 北京控制工程研究所 | Automatic ground verification system for satellite on-orbit large-scale program modification |
| CN112241270A (en) * | 2020-09-03 | 2021-01-19 | 中国空间技术研究院 | System and method for on-orbit maintenance of satellite-borne software in satellite constellation system |
Non-Patent Citations (2)
| Title |
|---|
| 韦涌泉;董振辉;张红军;: "一种基于文件的嵌入式星载软件在轨升级方法", 单片机与嵌入式***应用, no. 05, 1 May 2018 (2018-05-01), pages 32 - 35 * |
| 高建军等: "星载操作***可信计算与度量认证技术研究", 《西北工业大学学报》, no. 5, 31 October 2020 (2020-10-31), pages 1063 - 1067 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114942777A (en) * | 2022-04-06 | 2022-08-26 | 北京控制工程研究所 | On-orbit maintenance method for compressed storage in EEPROM |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108089876B (en) | On-orbit updating method for satellite-borne DSP software | |
| CN108052355B (en) | Satellite-borne load unit software on-orbit weight composing method | |
| JP6755158B2 (en) | Computer system, how to update software by computer system, and programs for that | |
| CN107957874B (en) | Recoverable resident type on-orbit programming method for satellite-borne software | |
| CN112988204B (en) | Method for remotely upgrading and rolling back software of unmanned aerial vehicle | |
| CN111158751B (en) | Windows environment deployment method, electronic device and storage medium | |
| CN113934624A (en) | System and method for on-orbit maintenance and verification of satellite-borne program of deep space exploration system | |
| CN108920168B (en) | Bootloader method supporting simultaneous upgrading of multiple similar ECUs and having function of preventing program mismatching | |
| CN111953403B (en) | On-orbit reconstruction system and method for navigation satellite load | |
| CN110308920B (en) | Method for modifying on-orbit product software without affecting normal operation | |
| CN112099833B (en) | Remote updating method for firmware of spaceborne computer | |
| CN113315797A (en) | Method, system and node for remote upgrading of local area network in batches | |
| CN107479924B (en) | Software upgrading verification method based on Android system | |
| CN112241270B (en) | System and method for on-orbit maintenance of satellite-borne software in satellite constellation system | |
| WO2009055131A1 (en) | System, method, and computer software code for determining whether a change in a subsystem is compatible with a system | |
| CN100359485C (en) | Testing device and method for flush-bonding system | |
| CN110474673B (en) | Dynamic on-orbit thermal updating method supporting breakpoint continuous transmission | |
| CN112328303B (en) | Spacecraft software on-orbit increment reconstruction method based on differentiation algorithm | |
| CN112558990A (en) | Maintenance and upgrading method and system for vehicle-mounted safety computer | |
| CN107967160B (en) | Method and device for updating operating system file through Boot Loader | |
| CN112567339A (en) | Method for updating software on a target device | |
| CN111506330A (en) | Program updating method and device, star affair computer and storage medium | |
| CN113407221B (en) | Autonomous upgrading method for networking satellite-borne software | |
| CN113190510B (en) | Method, device and system for uploading large-scale neural network oriented to software defined satellite | |
| CN117931256A (en) | Satellite constellation software on-orbit upgrading and maintaining system and method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |