公开(公告)号：US6128555A

公开(公告)日：2000-10-03

申请号：US865302

申请日：1997-05-29

申请人： Mark L. Hanson ,  Lorraine M. Fesq ,  Mai H. Nguyen

发明人： Mark L. Hanson ,  Lorraine M. Fesq ,  Mai H. Nguyen

IPC分类号： G01M17/007 ,  B64G1/24 ,  B64G1/36 ,  B64G1/52 ,  B64G1/66 ,  G05B9/02 ,  G05B23/02 ,  G06F11/00 ,  G05D1/00 ,  G05D3/00 ,  G06F17/00

CPC分类号： G05B23/0286 ,  B64G1/24 ,  G05B9/02 ,  B64G1/36 ,  B64G2001/245 ,  B64G2001/247

摘要： A fault identification, isolation and fault recovery system autonomously controls spacecraft operational systems. A fault detection and isolation module monitors the operational systems, identifies faults via such monitoring and attempts to isolate component causing the fault. Isolation may constitute a plurality of hierarchically arranged techniques that enhance speed and maximize the likelihood of identifying a correct hypothesis regarding the actual failure. The fault isolation and fault recovery modules are bounded by a severe fault override module which places the spacecraft operational systems in a safe mode or state. Thus, the override module ensures rapid entry into the safe mode while preventing an erroneous hypothesis serviced by the fault recovery module from driving the system beyond acceptable limits. A high level command processor receives command sequences from remote ground support stations and from the on-board fault recovery module. A ground based test bed attached to a ground support systems is used to generate verified high level fault recovery scripts before and during a mission to bolster fault recovery capabilities.

摘要翻译： 故障识别，隔离和故障恢复系统自主控制航天器操作系统。 故障检测和隔离模块监视操作系统，通过此类监视识别故障，并尝试隔离导致故障的组件。 隔离可以构成多个分级布置的技术，其增强速度并最大化识别关于实际故障的正确假设的可能性。 故障隔离和故障恢复模块受严重的故障覆盖模块的限制，该模块将航天器操作系统置于安全模式或状态。 因此，超控模块确保快速进入安全模式，同时防止故障恢复模块服务的错误假设驱动系统超出可接受的限制。 高级命令处理器从远程地面支持站和板上故障恢复模块接收命令序列。 连接到地面支持系统的基于地面的测试台用于在任务之前和期间生成经过验证的高级故障恢复脚本，以加强故障恢复能力。

公开(公告)号：US5951609A

公开(公告)日：1999-09-14

申请号：US865290

申请日：1997-05-29

申请人： Mark L. Hanson ,  Lorraine M. Fesq

发明人： Mark L. Hanson ,  Lorraine M. Fesq

IPC分类号： B64G1/52 ,  B64G1/24 ,  B64G1/36 ,  B64G1/66 ,  G06F17/00

CPC分类号： G05D1/0088 ,  B64G1/24 ,  B64G1/36 ,  B64G2001/245 ,  B64G2001/247

摘要： An autonomous control system supports autonomous operation of the a spacecraft in carrying out mission objective commands. The control system also provides autonomous fault detection, isolation and recovery. Performance problems and anomalies are detected and accounted for in the carrying out mission objectives. A mission manager module analyzes all incoming mission objective commands to verify that sufficient system resources are available and not already dedicated to other pending mission objective commands. A command processor is included to translate acceptable mission objective commands into lower level command sequences for delivery to a flight manager controlling the underlying spacecraft systems. The mission manager reanalyzes all pending mission objective commands whenever unexpected performance or fault conditions are detected. The mission objective commands can be constructed in a hierarchical fashion, with many sequences predefined within the spacecraft. All portions of the autonomous control system, including software and associated data, can be readily replaced, supplemented or disabled at any time before, during or after launch.

摘要翻译： 自主控制系统支持宇宙飞船执行任务目标命令的自主操作。 控制系统还提供自主的故障检测，隔离和恢复。 在执行任务目标时，发现和考虑了性能问题和异常情况。 任务管理器模块分析所有传入的任务目标命令，以验证足够的系统资源是否可用，而不是已经专用于其他待执行的任务目标命令。 包括一个命令处理器将可接受的任务目标命令翻译成较低级的命令序列，以便传送给控制底层飞船系统的飞行管理员。 在任何意外的性能或故障条件被检测到时，任务管理器重新分析所有待处理的任务目标命令。 任务目标命令可以以分层方式构建，其中许多序列在航天器内预定义。 自主控制系统的所有部分，包括软件和相关数据，可以在启动之前，期间或之后的任何时间轻松更换，补充或禁用。