火星环绕器GNC计算机的冗余管理软件系统设计  

Design of Redundancy Management Software System for GNC Computers of Mars Orbiter

作　　者：谭晓宇 周誌元 马瑞 聂钦博 朱庆华 TAN Xiaoyu;ZHOU Zhiyuan;MA Rui;NIE Qinbo;ZHU Qinghua(Shanghai Aerospace Control Technology Institute,Shanghai 201109,China;Shanghai Key Laboratory of Aerospace Intelligent Control Technology,Shanghai 201109,China)

机构地区：[1]上海航天控制技术研究所,上海201109 [2]上海市空间智能控制技术重点实验室,上海201109

出　　处：《上海航天（中英文）》2022年第S01期125-132,共8页Aerospace Shanghai（Chinese&English）

摘　　要：针对火星探测高可靠性的需求,设计了一种冗余管理软件系统,对三余度制导、导航和控制(GNC)计算机进行实时管理。冗余管理软件系统由控制器管理软件、表决软件、决策软件3个配置项组成,分别运行在3个独立的硬件环境中。3个配置项协同、同步工作。冗余管理软件系统对GNC计算机A、B、C三机的软硬件运行情况进行检查和维护,及时将故障的计算机隔离出GNC计算机系统,从而保证GNC计算机运行稳定。对软件系统进行软件故障树分析(SFTA)、可靠性分析和可靠性增强设计。实际在轨应用表明,此软件系统在整个火星探测任务中运行稳定无故障。In response to the demand for high reliability,a redundancy management software system is designed to perform real-time management of triple-redundancy GNC computer system.The redundancy management software system consists of three configuration items,i.e.,controller management software,voting software,and decision software,running in three independent hardware environments.These software configuration items work coordinately and synchronously.The redundancy management software system checks and maintains the software and hardware operations of the A,B,and C computers of the GNC computer system,and isolates the malfunctioning computers from the GNC computer system in time to ensure the stable operation of the GNC computer system.The software fault tree analysis(SFTA),reliability analysis,and reliability enhancement design are carried out for the software system.The actual on-orbit application shows that,this software system operates stably and correctly throughout the Mars exploration mission.

关 键 词：火星探测 冗余管理 软件系统 同步 表决 软件故障树分析 

分 类 号：V476.4[航空宇航科学与技术—飞行器设计] V446