ERC32 processor-based satellite-borne software system and reentry method thereof

Abstract

An ERC32 processor-based satellite-borne software system comprises an exception trap entry, a fault information saving module, a faulty booting identifier setting module, a fault type judgment and processing module, a soft resetting module and an interrupt return module. When an exception trap interrupt enters the exception trap entry, the faulty booting identifier setting module is called to set a faulty booting identifier as a fixed value, and the fault type judgment and processing module is called to judge the fault trap type of an ERC32 processor; if the fault trap type belongs to an unrecoverable error, then soft resetting instruction rebooting is executed; if the fault trap type belongs to a recoverable error, then interrupt return is executed; after soft resetting instruction rebooting, a main program is started, a faulty booting identifier reading module is called to read the faulty booting identifier, and a faulty booting identifier judgment module is then called to judge the faulty booting identifier. The invention solves the problem on how to save system data after the satellite-borne software is abnormal, thus enhancing the fault-tolerant ability of the satellite-borne software, and moreover, on-orbit faults can be corrected in time.

Description

technical field [0001] The invention relates to an on-board software system, in particular to an on-board software system based on an ERC32 processor and a reentry method thereof. Background technique [0002] When the spaceborne software is running in orbit in the space environment, due to the existence of high-energy particle radiation, vacuum, atomic oxygen, and large temperature differences, various abnormalities may occur in the processor. In this case, the spaceborne software using the ERC32 processor The software should take appropriate handling of these abnormalities by classification to restore the system to normal operation. [0003] The ERC32 processor includes an integer unit (IU), a floating point unit (FPU), a memory controller, and a DMA controller. For real-time applications, the TSC695 provides a high-security watchdog timer, 2 timing Device and an interrupt controller, parallel / serial communication interface, you can choose the parity check and EDAC check ...

AI Technical Summary

Problems solved by technology

[0006] (2) An unrecoverable error requires restarting to re-enter the system

[0008] The ERC32 processor-based on-board software currently in orbit and under development mainly adopts the method of directly resetting and re-entering the system, but this cannot distinguish between power-on initialization and fault initialization. Since all variables are cleared, the attitude control software needs to start from Re-establish the control state by means of the initial state-to-sun orientation or full-attitude capture, resulting in discontinuity of attitude control and potential safety hazards of system instability

Images