CN107203399A - A kind of in-orbit program re-injection system of satellite - Google Patents

Abstract

The invention discloses a satellite on-orbit program re-injection system, which includes a switching signal generation circuit for receiving a switching program instruction sent by a ground control center, and outputting a corresponding guidance identification signal to a main controller; the main controller uses After receiving the reset signal, the control system performs a reset operation; after the reset, the boot program in the original program memory is read to run, and the boot program guides the refill program in the refill program memory or the original program memory according to the received boot identification signal. The original program runs in the memory; the reset circuit is used to generate a reset signal and send it to the main controller after receiving the reset program instruction sent by the ground control center. The invention can avoid the influence on the system reset function and the program switching function caused by the integration of multiple functions as far as possible, and has high reliability.

Description

A satellite in-orbit program re-injection system

technical field

The invention relates to the technical field of satellite program maintenance, in particular to a satellite on-orbit program reinjection system.

Background technique

The space payload of the satellite refers to the instruments and equipment that directly execute the satellite mission (including the main controller, the memory used to store the program and the memory for executing the program, etc.), because the embedded software of the space payload is the center of the work, if due to Changes in the on-orbit application environment make some functions of the embedded software invalid, which will affect the normal operation of the space payload. At this time, it is necessary to update or replace the program of the embedded software by re-injecting the on-orbit program to restore the function of the space payload. normal work.

The method of on-orbit program re-injection is to transmit the re-injection program from the ground control center to the satellite platform through the space-ground link, and then the satellite platform transmits it to the space payload through the internal data bus of the satellite. The space payload receives the re-injection program and passes the verification. After storage, the reinjection program can overwrite the original program, or can be stored separately, and then the ground control center sends a switch program command to switch the space payload to the guided reinjection program, and then perform a system reset operation, and run the reinjection program directly after reset.

At present, in the space payload, the component that receives the switching program instruction and converts it into a corresponding switching signal and sends it to the main controller for program switching is the FPGA. At the same time, the FPGA is also responsible for receiving the reset instruction sent by the ground control center to generate the reset signal and A function to send to the main controller, and some other functions. Due to the many functions undertaken by the FPGA and the complex programs, there may be mutual influence between different programs, that is, after a functional part of the FPGA fails, it may affect the function of the program switching part or reset part, resulting in switching failure or reset failure, making The space payload cannot guide the re-injection program to run, that is, the use of an FPGA with multiple functions as a functional component of the reset part and the program switching part has a relatively high risk and low reliability.

Therefore, how to provide a satellite on-orbit program re-injection system with high reliability is a problem that those skilled in the art need to solve at present.

Contents of the invention

The purpose of the present invention is to provide a satellite on-orbit program re-injection system, which can avoid the impact on the system reset function and program switching function caused by integrating multiple functions as much as possible, and has high reliability.

In order to solve the above technical problems, the present invention provides a satellite on-orbit program re-injection system, comprising a main controller and a switching signal generating circuit connected to the main controller respectively, a memory, an original program memory, a re-injection program memory and reset circuit;

An original program and a boot program are stored in the original program memory;

The switching signal generating circuit is configured to output a corresponding guidance identification signal to the main controller after receiving the switching program instruction sent by the ground control center;

The main controller is used to control the system to perform a reset operation after receiving a reset signal; after the reset, read the boot program in the original program memory to run, and the boot program guides the reset according to the received boot identification signal. Inject the reinjection program in the program memory or the original program in the original program memory to run in the memory;

The reset circuit is configured to generate the reset signal and send it to the main controller after receiving the reset program instruction sent by the ground control center.

Preferably, it also includes:

A fault-tolerant circuit for filtering the reset program instructions, the input end of the fault-tolerant circuit is used to receive the reset program instruction sent by the ground control center, and the output end is connected to the input end of the reset circuit.

Preferably, the fault-tolerant circuit is specifically an RC circuit.

Preferably, it also includes:

A shaping circuit connected between the output end of the reset circuit and the reset input end of the main controller, the shaping circuit is used for shaping the reset signal.

Preferably, the shaping circuit is specifically a Schmitt trigger.

Preferably, it also includes:

A watchdog circuit for generating redundant reset signals;

Logic circuits for performing an OR operation;

The output end of the watchdog circuit and the output end of the shaping circuit are respectively connected to two input ends of the logic circuit, and the output end of the logic circuit is connected to the reset input end of the main controller.

Preferably, the switching signal generating circuit is specifically a magnetic latching relay.

Preferably, the reset circuit is an electromagnetic relay.

Preferably, the memory specifically includes:

an operating module, configured to run the re-injection program or the original program;

The re-injection module is used to receive the CCSDS coded re-injection program data packets sent by the ground control center for sequential verification and storage. After receiving the tail packet, integrate the programs in each data packet to obtain the re-injection program And check, after the check is passed, write the refill program into the refill program memory.

The invention provides a satellite on-orbit program re-injection system, comprising a main controller and a switching signal generation circuit, a memory, an original program memory, a re-injection program memory and a reset circuit respectively connected to the main controller; the switching signal generation After the circuit receives the switching program instruction sent by the ground control center, it outputs the corresponding electrical guidance identification signal to the main controller. After the main controller is reset, it reads the guidance program and runs it. During the operation of the guidance program, it will The boot logo carried by the identification signal selectively guides the re-injection program in the re-injection program memory or the original program in the original program memory to run in the memory. It can be seen that the system of the present invention separates the reset circuit from the switch signal generation circuit, the reset signal and the switch signal are generated by different circuits, and the reset circuit is only used for the generation of the reset signal, while the switch signal generation circuit is only used for the switch signal The generation of the switching signal generation avoids the interaction between the switching signal generation part and the reset part as much as possible, and also reduces the occurrence of faults caused by the influence of other functions due to the integration of the above two functional parts with other functions, improving This ensures the reliability of the satellite in-orbit program re-injection process.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the prior art and the accompanying drawings that need to be used in the embodiments. Obviously, the accompanying drawings in the following description are only some of the present invention. Embodiments, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

Fig. 1 is a schematic structural view of a satellite on-orbit program re-injection system provided by the present invention;

Fig. 2 is the structural representation of another kind of satellite on-orbit program re-injection system provided by the present invention;

Fig. 3 is a schematic diagram of the data packet format of a CCSDS coding re-injection program provided by the present invention.

detailed description

The core of the present invention is to provide a satellite on-orbit program re-injection system, which can avoid the influence on the system reset function and program switching function caused by the integration of multiple functions as far as possible, and has high reliability.

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

The present invention provides a satellite on-orbit program re-injection system, as shown in Fig. 1, Fig. 1 is a schematic structural diagram of a satellite on-orbit program re-injection system provided by the present invention; The switching signal generating circuit 5, memory 4, original program memory 3, refill program memory 2 and reset circuit 6 connected to the main controller 1;

The original program and the boot program are stored in the original program memory;

Among them, the original program memory 3 and the re-injected program memory 2 are independent of each other, and the two memories can specifically use EEPROM (the model can be 3DEE5M40VS5257), adopt different chip select signals of the main controller 1, and have different address spaces. Of course, the present invention does not limit the specific models of the two memories.

The switching signal generation circuit 5 is used to output the corresponding guidance identification signal to the main controller 1 after receiving the switching program instruction sent by the ground control center;

The switching signal generating circuit 5 here can adopt a magnetic latching relay 2JB1-910, and the guide identification signal is a high-low level signal, and different guide identifications are represented by different levels, for example, a high level indicates a guide re-injection program, and a low level Indicates the boot original program. Of course, the specific high-level boot program can be set by yourself, which is not limited in the present invention. In addition, the switching signal generation circuit 5 can also use other circuits that can realize the above functions.

The main controller 1 is used to control the system to perform a reset operation after receiving the reset signal; after the reset, read the boot program in the original program memory to run, and the boot program guides the boot program according to the received boot identification signal. Re-inject the re-injection program in the program memory 2 or the original program in the original program memory 3 to run in the memory 4;

Wherein, main controller 1 can adopt BM3803 processor, wherein, the PI07 pin of BM3803 processor is connected with the output end of switching signal generating circuit 5 as the input of switching signal (first level signal and second level signal). Wherein, the memory 4 of the main controller 1 stores a boot program, and the boot program runs automatically after being powered on. Its function is to guide different application programs to be loaded into the memory 4 to run. After the main controller 1 is initialized, it reads the PI07 pin input The data of the switching signal, when the switching signal is a low-level signal, the read data is 0, at this time, the boot program guides the refill program to the memory 4, and when the switching signal is a high-level signal, the read data is 1 , at this time, the boot program guides the original program into the memory 4; of course, the refill program can also be guided when the signal is high, and the original program can be guided otherwise, which method is not specifically limited in the present invention.

The reset circuit 6 is configured to generate a reset signal and send it to the main controller 1 after receiving the reset program instruction sent by the ground control center.

Among them, the reset circuit 6 here can also use a magnetic latching relay 2JB1-910, which is used to reset when receiving a low-level signal (80ms±10ms). Of course, it can also be set as a high-level signal to trigger reset. The circuit 6 may also use other types of circuits, which are not specifically limited in the present invention.

In addition, the memory 4 here is an SRAM, which may specifically be a model 3DSR20M40VS6507. Of course, the present invention does not limit the model of the memory 4 .

It should be noted that the boot program is located at 0 of the PROM, and the program is run first after each power-on or reset, and it decides to boot the original program or re-inject the program into the memory to run according to the received boot logo. Since the re-injection program may be overwritten multiple times, in order to avoid the boot program from being overwritten, the boot program is stored in the original program memory.

The invention provides a satellite on-orbit program re-injection system, comprising a main controller and a switching signal generation circuit, a memory, an original program memory, a re-injection program memory and a reset circuit respectively connected to the main controller; the switching signal generation After the circuit receives the switching program instruction sent by the ground control center, it outputs the corresponding electrical guidance identification signal to the main controller. After the main controller is reset, it reads the guidance program and runs it. During the operation of the guidance program, it will The boot logo carried by the identification signal selectively guides the re-injection program in the re-injection program memory or the original program in the original program memory to run in the memory. It can be seen that the system of the present invention separates the reset circuit from the switch signal generation circuit, the reset signal and the switch signal are generated by different circuits, and the reset circuit is only used for the generation of the reset signal, while the switch signal generation circuit is only used for the switch signal The generation of the switching signal generation avoids the interaction between the switching signal generation part and the reset part as much as possible, and also reduces the occurrence of faults caused by the influence of other functions due to the integration of the above two functional parts with other functions, improving This ensures the reliability of the satellite in-orbit program re-injection process.

For the convenience of understanding, the workflow of the above system is introduced as follows:

Step s101: The ground control center sends the refill program to the satellite platform through the space-ground link, and the satellite platform then sends it to the refill program memory 2 in the space payload through the 1553B bus or CAN bus inside the satellite for verification and storage;

Step s102: the switching signal generating circuit 5 generates a first level signal to the main controller 1 after receiving the refill switching program instruction sent by the ground control center;

Step s103: After the reset circuit 6 receives the reset program instruction sent by the ground control center, it generates a reset signal and sends it to the main controller 1;

The guide here is the copy operation.

Step s104: After the memory 4 is initialized, the main controller 1 runs the read boot program, and the boot program guides the refill program in the refill program memory 2 to the memory 4 according to the received first level signal;

Step s105: the refilling program in the memory 4 runs automatically to complete the refilling operation.

It can be understood that the present invention can repeatedly switch the program source in the memory 4 and realize multiple re-injection operations.

In a preferred embodiment, memory 4 specifically includes:

Run module for running the re-injection program or the original program;

The re-injection module is used to receive the CCSDS coded re-injection program data packets sent by the ground control center for sequential verification and storage. After receiving the last packet, integrate the programs in each data packet to obtain the re-injection program and perform verification After the verification is passed, the refill program is written into the refill program memory 2.

It can be understood that, in the process of sending the re-registration program to the space payload and storing it in step s101, the re-registration program needs to be decomposed into multiple re-registration program data packets.

Wherein, the size of the re-injection program data packet is 64 bytes per packet, and the CCSDS code is a code based on the CCSDS standard. FIG. 3 is a schematic diagram of the format of a CCSDS-encoded re-injection program data packet provided by the present invention.

Version number: 3-digit binary, fixed to b"000";

Packet type: 1-bit binary, fixed to b"0", representing re-injection packet;

Auxiliary head sign: 1-bit binary, b"0" means no auxiliary head; b"1" means there is an auxiliary head;

Application process ID: 11-bit binary, identifying each back-end device;

Sequence sign: 2-bit binary, identifying the above-mentioned program

b"00" represents the tundish of the above-mentioned procedure;

b"01" represents the starting package of the above-mentioned program;

b"10" represents the end packet of the above-mentioned program;

b"11" represents the independent package of the above-mentioned program.

Packet sequence count: 14-bit binary, which is the sequence of the current packet in all sequences, counting from 0, the maximum value is 16383 (b”11111111111111”);

Packet data length: 16-bit binary, the unit is byte, the value is equal to the packet data length (including sub-header and valid data area)-1;

Valid data area: hexadecimal data content, the data length should be an even number, which is the above-mentioned program + 2-byte checksum;

CRC check: 4 bytes, the check range includes the entire source package, that is, check the leading header and the package data area.

It can be further seen that in step s101, the process of sending the re-injection program to the space payload and storing it is as follows:

Step s201: SRAM receives the transmitted refill program data packet through the satellite's internal 1553B bus or CAN bus and performs the first verification. If the verification is passed, it receives it, reads the valid data in the refill program data packet, and then presses the refill program The order of the data packet serial number is stored in the re-injection module, if the verification fails, it will be discarded and an error message will be returned to the satellite platform, and the satellite platform will be notified to retransmit;

Step s202: After the re-injection module detects that the tail packet is received, it integrates the valid data in each received data packet, obtains the complete re-injection program, and performs the second verification. After the verification is passed, the re-injection in the SRAM The note program is written into the re-note program memory 2;

Step s203: The refilling program memory 2 performs a third check on the stored refilling program. After the check is passed, the ground control center is notified that the receiving of the refilling program is completed, and the subsequent refilling program can be switched and guided to run.

It can be understood that the first verification is to verify the transmitted re-injection program data packet, the purpose is to judge the eligibility of the whole package; the second verification is to verify the content of the re-injection program, the purpose is to judge whether An error occurs during the reading or integration process of valid data; the third verification is to verify the refill program transmitted to the refill program memory 2, and the purpose is to judge that the refill program is written from the SRAM to the refill program memory 2 whether an error occurred during the process. Through the above three checks, the occurrence of refill program transmission errors can be basically avoided, the occurrence of refill failures caused by refill program errors is reduced, and the reliability of refill operations is improved.

Preferably, the system also includes:

A fault-tolerant circuit for filtering the reset program instructions. The input end of the fault-tolerant circuit is used to receive the reset program instructions sent by the ground control center, and the output end is connected to the input end of the reset circuit 6 .

It can be understood that the function of the fault-tolerant circuit here is to filter the noise in the reset program instruction, prevent false reset operation caused by noise, and improve the reliability of the system.

Preferably, the fault-tolerant circuit here is specifically an RC circuit, capable of filtering low-level noise less than 20 ms.

Preferably, the system also includes:

The shaping circuit connected between the output end of the reset circuit 6 and the reset input end of the main controller 1 is used for shaping the reset signal.

Specifically, the shaping circuit here is specifically a Schmitt trigger, and its model may be SNJ54AHC14W. Of course, the present invention does not limit the specific type of shaping circuit.

Preferably, the system also includes:

A watchdog circuit for generating redundant reset signals;

Logic circuits for performing an OR operation;

The output end of the watchdog circuit and the output end of the shaping circuit are respectively connected to two input ends of the logic circuit, and the output end of the logic circuit is connected to the reset input end of the main controller 1 .

It can be understood that the input terminal of the watchdog circuit also receives the reset program instruction sent by the ground control center, thereby controlling the watchdog circuit to generate a reset signal, and the input signal of the watchdog circuit is ORed with the reset signal output by the reset circuit 6 Then connect to the reset input terminal of the main controller 1. The watchdog circuit is a redundant circuit, which is used to generate a redundant reset signal to ensure the successful execution of the reset operation and improve the reliability of the system.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and for the related information, please refer to the description of the method part.

It should also be noted that in this specification, relative terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that these entities or operations There is no such actual relationship or order between the operations. Furthermore, the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes elements not expressly listed. other elements of or also include elements inherent in such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

The above description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (9)

1. a kind of in-orbit program re-injection system of satellite, it is characterised in that including master controller and respectively with the master controller Switching signal generative circuit, internal memory, original program memory, re-injection procedure memory and the reset circuit of connection；

The original program memory internal memory contains original program and bootstrap；

The switching signal generative circuit, after the changeover program instruction for receiving ground control centre transmission, output is corresponding Id signal is guided to the extremely master controller；

The master controller, reset operation is carried out for receiving control system after reset signal；After reset, the original journey is read Bootstrap in sequence memory is run, and the bootstrap guides the re-injection according to the guiding id signal received Run in original program to the internal memory in re-injection procedure or the original program memory in program storage；

The reset circuit, for receiving after the reset routine instruction that the ground control centre is sent, generates described reset and believes Number and send to the master controller.

2. system according to claim 1, it is characterised in that also include：

The fault tolerable circuit of filter operation is carried out for being instructed to reset routine, the input of the fault tolerable circuit is used to receive described The reset routine instruction that ground control centre is sent, output end connects the input of the reset circuit.

3. system according to claim 2, it is characterised in that the fault tolerable circuit is specially RC circuits.

4. system according to claim 2, it is characterised in that also include：

The shaping circuit between the RESET input of the output end of the reset circuit and the master controller is connected to, it is described whole Shape circuit is used to carry out shaping operation to the reset signal.

5. system according to claim 4, it is characterised in that the shaping circuit is specially Schmidt trigger.

6. system according to claim 4, it is characterised in that also include：

Watchdog circuit for producing redundant reset signal；

For the logic circuit for carrying out or operating；

The output end of the watchdog circuit with the output end of the shaping circuit is connected the logic circuit respectively two it is defeated Enter end, the output end of the logic circuit connects the RESET input of the master controller.

7. the system according to claim any one of 1-6, it is characterised in that the switching signal generative circuit is specially magnetic Guard relay.

8. system according to claim 1, it is characterised in that the reset circuit is electromagnetic relay.

9. system according to claim 1, it is characterised in that the internal memory is specifically included：

Module is run, for running the re-injection procedure or the original program；

Re-injection module, the re-injection procedure packet for receiving the use CCSDS codings that the ground control centre is sent is carried out Verify and store successively, after tail bag is received, the program in each packet of integrating obtains the re-injection procedure and carries out school Test, after verification passes through, the re-injection procedure is write in the re-injection procedure memory.