CN107203399B - A satellite in-orbit program refocusing system - Google Patents

Abstract

The invention discloses a satellite on-orbit program reinjection system, which comprises a switching signal generation circuit, a main controller and a satellite on-orbit program reinjection circuit, wherein the switching signal generation circuit is used for outputting a corresponding guide identification signal to the main controller after receiving a switching program instruction sent by a ground control center; the main controller is used for controlling the system to perform reset operation after receiving the reset signal; after resetting, reading a bootstrap program in the original program memory for running, and guiding the remark program in the remark program memory or the original program in the original program memory to run in the memory by the bootstrap program according to the received bootstrap identification signal; and the reset circuit is used for generating a reset signal and sending the reset signal to the main controller after receiving a reset program instruction sent by the ground control center. The invention can avoid the influence on the system reset function and the program switching function caused by integrating a plurality of functions as much as possible, and has high reliability.

Description

A satellite in-orbit program refocusing system

technical field

The invention relates to the technical field of satellite program maintenance, in particular to a satellite on-orbit program refocusing system.

Background technique

The space payload of the satellite refers to the instruments and equipment (including the main controller, the memory for storing the program and the memory for executing the program, etc.) that directly perform the satellite mission. Since the embedded software of the space payload is the center of the work, if due to the Changes in the on-orbit application environment make some functions of the embedded software fail, which will affect the normal operation of the space payload. At this time, it is necessary to update or replace the embedded software program by re-introducing the on-orbit program to restore the space payload. normal work.

The method of on-orbit program re-injection is to transmit the re-injection program from the ground control center to the satellite platform through the space-ground link, and then the satellite platform transmits it to the space payload through the satellite internal data bus, and the space payload receives the re-injection program and passes the verification. After storage, the re-injection program can overwrite the original program, or it can be stored separately, and then the ground control center sends a switching program instruction to switch the space payload to the guided re-injection program, and then perform a system reset operation, and directly run the re-injection program after reset.

At present, in the space payload, the component that receives the switching program command and converts it into a corresponding switching signal and sends it to the main controller for program switching is the FPGA. At the same time, the FPGA is also responsible for receiving the reset command sent by the ground control center. function sent to the main controller, and some other functions. Because the FPGA has many functions and the program is complex, there may be mutual influence between different programs, that is, if a functional part of the FPGA fails, it may affect the function of the program switching part or the reset part, resulting in the failure of switching or reset, making the The space payload cannot guide the refocusing program to run, that is, the use of FPGA with multiple functions as the functional component of the reset part and the program switching part has great risks and low reliability.

Therefore, how to provide a highly reliable satellite on-orbit program re-introduction system is a problem that those skilled in the art need to solve at present.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a satellite on-orbit program re-injection system, which can avoid the influence on the system reset function and the program switching function caused by integrating multiple functions together as much as possible, and has high reliability.

In order to solve the above technical problems, the present invention provides a satellite on-orbit program re-injection system, which includes a main controller, a switching signal generation circuit, a memory, an original program memory, a re-injection program memory and a switching signal generation circuit respectively connected to the main controller. reset circuit;

An original program and a boot program are stored in the original program memory;

The switching signal generating circuit is used for outputting the corresponding guidance identification signal to the main controller after receiving the switching program instruction sent by the ground control center;

The main controller is used to control the system to perform a reset operation after receiving the reset signal; after reset, read the boot program in the original program memory to run, and the boot program guides the reset according to the received boot identification signal. Inject the re-injected program in the program memory or the original program in the original program memory to run in the memory;

The reset circuit is configured to generate the reset signal and send it to the main controller after receiving the reset program instruction sent by the ground control center.

Preferably, it also includes:

A fault-tolerant circuit for filtering reset program instructions, the input terminal of the fault-tolerant circuit is used for receiving the reset program instructions sent by the ground control center, and the output terminal is connected to the input terminal of the reset circuit.

Preferably, the fault-tolerant circuit is specifically an RC circuit.

Preferably, it also includes:

A shaping circuit is connected between the output terminal of the reset circuit and the reset input terminal of the main controller, and the shaping circuit is used for shaping the reset signal.

Preferably, the shaping circuit is a Schmitt trigger.

Preferably, it also includes:

A watchdog circuit for generating redundant reset signals;

logic circuits for performing OR operations;

The output end of the watchdog circuit and the output end of the shaping circuit are respectively connected to two input ends of the logic circuit, and the output end of the logic circuit is connected to the reset input end of the main controller.

Preferably, the switching signal generating circuit is specifically a magnetic latching relay.

Preferably, the reset circuit is an electromagnetic relay.

Preferably, the memory specifically includes:

an operation module for running the re-injection program or the original program;

The re-injection module is used to receive the CCSDS-encoded re-injection program data packets sent by the ground control center for verification and storage in turn, and after receiving the tail packet, integrate the programs in each data packet to obtain the re-injection program and perform verification, and after the verification is passed, write the re-injection program into the re-injection program memory.

The invention provides a satellite on-orbit program re-injection system, comprising a main controller and a switching signal generation circuit, a memory, an original program memory, a re-injection program memory and a reset circuit respectively connected with the main controller; the switching signal generation circuit After the circuit receives the switching program command sent by the ground control center, it outputs the corresponding electric guidance identification signal to the main controller. After the main controller is reset, it reads the guidance program to run. During the operation of the guidance program, it will follow the received guidance. The boot flag carried by the flag signal selectively guides the reprogrammed program in the reprogrammed memory or the original program in the original program memory to run in the memory. It can be seen that the system of the present invention separates the reset circuit and the switching signal generation circuit, the reset signal and the switching signal are generated by different circuits, and the reset circuit is only used for the generation of the reset signal, and the switching signal generation circuit is only used for the switching signal The generation of the switch signal generation part and the reset part are avoided as much as possible, and the occurrence of failures caused by the influence of other functions due to the integration of the above two functional parts with other functions is also reduced. The reliability of the satellite in-orbit program refocusing process is improved.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the prior art and the accompanying drawings required in the embodiments. Obviously, the drawings in the following description are only some of the present invention. In the embodiments, for those of ordinary skill in the art, other drawings can also be obtained according to these drawings without any creative effort.

Fig. 1 is the structural representation of a kind of satellite in-orbit program re-injection system provided by the present invention;

Fig. 2 is the structural representation of another kind of satellite in-orbit program re-injection system provided by the present invention;

FIG. 3 is a schematic diagram of a data packet format of a CCSDS coding re-injection program provided by the present invention.

Detailed ways

The core of the invention is to provide a satellite on-orbit program re-injection system, which can avoid the influence on the system reset function and the program switching function caused by integrating multiple functions together as much as possible, and has high reliability.

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

The present invention provides a satellite in-orbit program re-injection system, as shown in FIG. 1 , which is a schematic structural diagram of a satellite in-orbit program re-injection system provided by the present invention; the system includes a main controller 1 and a A switching signal generation circuit 5, a memory 4, an original program memory 3, a refill program memory 2 and a reset circuit 6 connected to the main controller 1;

The original program and the boot program are stored in the original program memory;

Among them, the original program memory 3 and the remarked program memory 2 are independent of each other, and the two memories can use EEPROM (the model can be 3DEE5M40VS5257), use different chip select signals of the main controller 1, and have different address spaces. Of course, the present invention does not limit the specific models of the two memories.

The switching signal generating circuit 5 is used for outputting the corresponding guidance identification signal to the main controller 1 after receiving the switching program instruction sent by the ground control center;

The switching signal generation circuit 5 here can use the magnetic latching relay 2JB1-910, the guide identification signal is a high and low level signal, and different guide signs are represented by different levels. It represents the booting of the original program. Of course, the specific high-level boot program can be set by itself, which is not limited in the present invention. In addition, the switching signal generating circuit 5 can also adopt other circuits that can realize the above functions.

The main controller 1 is used to control the system to perform a reset operation after receiving a reset signal; after reset, read the bootstrap program in the original program memory to run, and the bootstrap program guides the Re-inject the re-injection program in the program memory 2 or the original program in the original program memory 3 to run in the memory 4;

The main controller 1 can use the BM3803 processor, wherein the PI07 pin of the BM3803 processor is used as the input of the switching signal (the first level signal and the second level signal) and is connected to the output end of the switching signal generating circuit 5 . Among them, the main controller 1's memory 4 stores a boot program, and the boot program runs automatically after power-on. Its function is to guide different applications to be loaded into the memory 4 to run. After the main controller 1 is initialized, it reads the input from the PI07 pin. The data of the switching signal, when the switching signal is a low-level signal, the read data is 0, at this time, the bootloader guides the re-injection program to the memory 4, when the switching signal is a high-level signal, the read data is 1 , at this time, the boot program guides the original program to the memory 4; of course, the re-injection program can also be guided when the signal is high, otherwise the original program is guided, and the specific method used is not specifically limited in the present invention.

The reset circuit 6 is used to generate a reset signal and send it to the main controller 1 after receiving the reset program instruction sent by the ground control center.

Among them, the reset circuit 6 here can also use the magnetic latching relay 2JB1-910, which is used to reset when a low-level signal (80ms±10ms) is received. Of course, it can also be set to a high-level signal to trigger the reset, and the reset The circuit 6 may also adopt other types of circuits, which are not specifically limited in the present invention.

In addition, the memory 4 here is SRAM, and specifically, the model can be 3DSR20M40VS6507. Of course, the present invention does not limit the model of the memory 4 .

It should be noted that the boot program is located at 0 of the PROM. After each power-on or reset, the program is run first. It decides to boot the original program or reload the program to the memory according to the received boot ID. Since the re-injection program may be overwritten multiple times, the boot program is stored in the original program memory in order to avoid the boot program being overwritten.

The invention provides a satellite on-orbit program re-injection system, comprising a main controller and a switching signal generation circuit, a memory, an original program memory, a re-injection program memory and a reset circuit respectively connected with the main controller; the switching signal generation circuit After the circuit receives the switching program command sent by the ground control center, it outputs the corresponding electric guidance identification signal to the main controller. After the main controller is reset, it reads the guidance program to run. During the operation of the guidance program, it will follow the received guidance. The boot flag carried by the flag signal selectively guides the reprogrammed program in the reprogrammed memory or the original program in the original program memory to run in the memory. It can be seen that the system of the present invention separates the reset circuit and the switching signal generation circuit, the reset signal and the switching signal are generated by different circuits, and the reset circuit is only used for the generation of the reset signal, and the switching signal generation circuit is only used for the switching signal The generation of the switch signal generation part and the reset part are avoided as much as possible, and the occurrence of failures caused by the influence of other functions due to the integration of the above two functional parts with other functions is also reduced. The reliability of the satellite in-orbit program refocusing process is improved.

For ease of understanding, the workflow of the above system is described below:

Step s101: the ground control center sends the re-injection program to the satellite platform through the sky-earth link, and the satellite platform then sends it to the re-injection program memory 2 in the space payload through the satellite internal 1553B bus or CAN bus for verification and storage;

Step s102: the switching signal generation circuit 5 generates a first level signal to the main controller 1 after receiving the re-note switching program instruction sent by the ground control center;

Step s103: after the reset circuit 6 receives the reset program instruction sent by the ground control center, it generates a reset signal and sends it to the main controller 1;

The boot here is the copy operation.

Step s104: after the memory 4 is initialized, the main controller 1 runs the read bootstrap program, and the bootstrap program guides the refill program in the refill program memory 2 to the memory 4 according to the received first level signal;

Step s105: the refilling program in the memory 4 runs automatically to complete the refilling operation.

It can be understood that, the present invention can repeatedly switch the program source in the memory 4, and can realize multiple re-injection operations.

In a preferred embodiment, the memory 4 specifically includes:

Run module, used to run the re-injected program or the original program;

The re-injection module is used to receive the CCSDS-encoded re-injection program data packets sent by the ground control center for sequential verification and storage. After receiving the tail packet, integrate the programs in each data packet to obtain the re-injection program and verify it. , after the verification is passed, write the refilling program into the refilling program memory 2 .

It can be understood that, in the process of sending the refilling program to the space payload and storing it in step s101, the refilling program needs to be decomposed into a plurality of refilling program data packets.

Wherein, the size of the re-note program data packet is 64 bytes per packet, and the CCSDS encoding is a code based on the CCSDS standard.

Version number: 3-bit binary, fixed as b"000";

Packet type: 1-bit binary, fixed as b"0", which means re-injection packet;

Sub-pilot flag: 1-bit binary, b"0" means no sub-pilot; b"1" means there is sub-pilot;

Application process ID: 11-bit binary, identifying each back-end device;

Serial flag: 2-bit binary, marking the betting program

b"00" represents the intermediate package of the betting program;

b"01" represents the starting package of the betting program;

b"10" represents the end packet of the betting procedure;

b"11" represents the independent package of the betting program.

Packet sequence count: 14-bit binary, which is the order of the current packet in all sequences, starting from 0, and the maximum value is 16383 (b"11111111111111");

Packet data length: 16-bit binary, the unit is byte, the value is equal to the packet data length (including sub-preamble and valid data area)-1;

Valid data area: hexadecimal data content, the data length should be an even number, which is the above-mentioned program + 2-byte checksum;

CRC check: 4 bytes, the check range includes the entire source packet, that is, the main header and the packet data area are checked.

It can be further known that, in step s101, the process of sending the re-injection program to the space payload and storing it is as follows:

Step s201: SRAM receives the transmitted re-note program data packet through the satellite internal 1553B bus or CAN bus and performs the first verification. If the verification is qualified, it is received, and the valid data in the re-note program data packet is read, and then presses the re-note program. The sequence of the data packet sequence numbers is stored in the re-note module. If the verification fails, it will be discarded and an error message will be returned to the satellite platform to notify the satellite platform to retransmit;

Step s202: After the re-injection module detects that the tail packet is received, it integrates the valid data in each received data packet, obtains a complete re-injection program, and performs a second verification. The remark program is written into the remark program memory 2;

Step s203: The refilling program memory 2 performs a third verification on the stored refilling program. After the verification is passed, the ground control center is notified that the refilling program has been received, and the subsequent refilling program switching and guiding operation can be performed.

It can be understood that the first check is to check the transmitted re-note program data packet, the purpose is to judge the eligibility of the whole package; the second check is to check the content of the re-note program, the purpose is to determine whether An error occurs in the process of reading or integrating valid data; the third check is to verify the refill program transferred to the refill program memory 2, and the purpose is to determine that the refill program is written from the SRAM to the refill program memory 2 whether an error occurred during the process. Through the above three verifications, it is possible to basically avoid the occurrence of a transmission error of the re-injection program, reduce the occurrence of the re-injection failure caused by the error of the re-injection program, and improve the reliability of the re-injection operation.

Preferably, the system also includes:

The fault-tolerant circuit is used for filtering the reset program instructions. The input terminal of the fault-tolerant circuit is used to receive the reset program instructions sent by the ground control center, and the output terminal is connected to the input terminal of the reset circuit 6 .

It can be understood that the function of the fault-tolerant circuit here is to filter the noise in the reset program instruction, to prevent the false reset operation caused by the noise, and to improve the reliability of the system.

Preferably, the fault-tolerant circuit here is specifically an RC circuit, which can filter low-level noise less than 20ms.

Preferably, the system also includes:

The shaping circuit is connected between the output terminal of the reset circuit 6 and the reset input terminal of the main controller 1, and the shaping circuit is used for shaping the reset signal.

Specifically, the shaping circuit here is specifically a Schmitt trigger, and its model can be SNJ54AHC14W. Of course, the present invention does not limit the specific type of the shaping circuit.

Preferably, the system also includes:

A watchdog circuit for generating redundant reset signals;

logic circuits for performing OR operations;

The output end of the watchdog circuit and the output end of the shaping circuit are respectively connected to the two input ends of the logic circuit, and the output end of the logic circuit is connected to the reset input end of the main controller 1 .

It can be understood that the input terminal of the watchdog circuit also receives the reset program command sent by the ground control center, thereby controlling the watchdog circuit to generate a reset signal, and the input signal of the watchdog circuit and the reset signal output by the reset circuit 6 are ORed. Then connect to the reset input terminal of main controller 1. The watchdog circuit is a redundant circuit and is used for generating redundant reset signals to ensure the successful execution of the reset operation and improve the reliability of the system.

The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant part can be referred to the description of the method.

It should also be noted that, in this specification, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply these entities or operations. There is no such actual relationship or sequence between operations. Moreover, the terms "comprising", "comprising" or any other variation thereof are intended to encompass a non-exclusive inclusion such that a process, method, article or device that includes a list of elements includes not only those elements, but also includes not explicitly listed or other elements inherent to such a process, method, article or apparatus. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in a process, method, article or apparatus that includes the element.

The above description of the disclosed embodiments enables any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (8)

1. A satellite on-orbit program reinjection system is characterized by comprising a main controller, a switching signal generation circuit, a memory, an original program memory, a reinjection program memory and a reset circuit, wherein the switching signal generation circuit, the memory, the original program memory, the reinjection program memory and the reset circuit are respectively connected with the main controller;

an original program and a bootstrap program are stored in the original program memory;

the switching signal generating circuit is used for outputting a corresponding guiding identification signal to the main controller after receiving a switching program instruction sent by a ground control center;

the main controller is used for controlling the system to perform reset operation after receiving a reset signal; after resetting, reading a bootstrap program in the original program storage to run, wherein the bootstrap program guides the re-injection program in the re-injection program storage or the original program in the original program storage to run in the memory according to the received bootstrap identification signal;

the reset circuit is used for generating the reset signal and sending the reset signal to the main controller after receiving a reset program instruction sent by the ground control center; wherein, the reset circuit is an electromagnetic relay.

2. The system of claim 1, further comprising:

the fault-tolerant circuit is used for filtering reset program instructions, the input end of the fault-tolerant circuit is used for receiving the reset program instructions sent by the ground control center, and the output end of the fault-tolerant circuit is connected with the input end of the reset circuit.

3. The system according to claim 2, characterized in that the fault tolerant circuit is embodied as an RC circuit.

4. The system of claim 2, further comprising:

and the shaping circuit is connected between the output end of the reset circuit and the reset input end of the main controller and is used for shaping the reset signal.

5. The system according to claim 4, characterized in that the shaping circuit is embodied as a Schmitt trigger.

6. The system of claim 4, further comprising:

a watchdog circuit for generating a redundant reset signal;

logic circuitry for performing an OR operation;

the output end of the watchdog circuit and the output end of the shaping circuit are respectively connected with two input ends of the logic circuit, and the output end of the logic circuit is connected with the reset input end of the main controller.

7. System according to any one of claims 1 to 6, characterized in that the switching signal generating circuit is embodied as a magnetic latching relay.

8. The system of claim 1, wherein the memory specifically comprises:

the operation module is used for operating the remark program or the original program;

and the reinjection module is used for receiving the reinjection program data packets which are sent by the ground control center and adopt the CCSDS codes for sequential verification and storage, integrating the programs in the data packets to obtain the reinjection program and verify the reinjection program after receiving the tail packet, and writing the reinjection program into the reinjection program storage after the verification is passed.

Images