A comprehensive fault logic decision circuit and method for space vehicles

Abstract

The invention discloses a comprehensive fault logic judgment circuit and method for space vehicles. The CPU and MIO fault detection of the control computer in the system is based on the detection among the three machines of the CPU module on the one hand, and on the other hand, the detection of the CPU based on the MIO. , finally, combining the self-test and mutual-test results between the CPUs and the MIO-to-CPU test results to determine the current CPU and MIO on duty. Once a CPU module or IO module fails, the distributed fault through self-test + mutual The detection method intelligently judges the three CPUs of the current normal module on duty, which is responsible for the fault judgment between the CPUs and the fault judgment of the MIO module. The MIO receiving fault logic judgment unit ensures the correctness of the CPU information received by the MIO. The MIO output interface controls Logic, to complete the input and output control of the correct module to the MIO short circuit; to realize the distributed comprehensive judgment of system faults, redundancy at the fault channel level, simpler judgment, maximize the use of system resources, and relatively improve the life reliability of the product.

Description

technical field [0001] The invention belongs to the technical field of space vehicle control, and in particular relates to a comprehensive failure logic judgment circuit and method for space vehicles. Background technique [0002] At present, space vehicles generally can only realize the detection and recovery of the single fault mode. The master control right of the shift is determined through the mode of taking out of three and second. When the single mode of the master-control plane fails, only the current priority module can be formulated, and the two-out-of-three fault judgment of the master-control plane cannot be realized, resulting in a decrease in system reliability. [0003] In terms of redundancy depth, it is currently at the module level. If a single module has a partial function failure, the functions of the entire module will be eliminated, and the limited resources that cannot be maximized can be used to realize function backup. Contents of the invention ...

AI Technical Summary

Problems solved by technology

[0002] At present, space vehicles generally can only realize the detection and recovery of the single fault mode. The master control right of the shift is determined through the mode of taking the second out of three. After the master control right is determined, the flight with the master control right controls the input and output of the IO port. When the single mode of the master-control plane fails, only the current priority module can be formulated, and the two-out-of-three fault judgment of the master-control plane cannot be realized, resulting in a decrease in system reliability

[0003] In terms of redundancy depth, it is currently at the module level. If a single module has a partial function failure, the entire module function will be eliminated, and the limited resources that cannot be maximized can be used to realize function backup.

Images