基于有限状态机的操作系统需求层形式化验证

操作系统是航天器必备的基本软件，操作系统的可靠性和安全性直接关系航天型号任务的成败.虽然目前已采用多种手段对操作系统进行可靠性和安全性保障，但仍存在不能完全排除缺陷的情况，因此对空间操作系统开展形式化验证研究势在必行.需求层验证是操作系统形式化验证的一部分，本文在分析操作系统需求的基础上，采用有限状态机在操作系统需求层进行形式化描述，并针对应用在某航天器上的SpaceOS2在需求层进行了建模，相应地在定理证明工具Coq中进行了描述建模；然后定义了六条操作系统应满足的全局性质并进行了形式化描述，给出了系统模型满足这些性质的机器可检查的证明.证明结果表明采用有限状态机方法对操作系统需求层进行形式化验证是可行的，为进一步全面形式化验证奠定了基础.     

The fundamental physics explorer: An ESA technology reference study

ESA technology reference studies are used as a process to identify key technologies and technical challenges of potential future missions not yet in the science programme. This paper reports on the study of the Fundamental Physics Explorer (FPE), a re-usable platform targeted to small missions testing fundamental laws of physics in space. The study addresses three specific areas of interest: special and general relativity tests based on atomic clocks, experiments on the Weak Equivalence Principle (WEP), and studies of Bose–Einstein condensates under microgravity conditions. Starting from preliminary science objectives and payload requirements, three reference missions in the small/medium class range are discussed, based on a re-adaptation of the LISA Pathfinder spacecraft. A 700/3600 km elliptic orbit has been selected to conduct clock tests of special and general relativity, a 700 km circular orbit to perform experiments on the Weak Equivalence Principle and to study Bose–Einstein condensates, each mission being based on a three-axis stabilised spacecraft. It was determined that adaptation of LISA Pathfinder would be required in order to meet the demands of the FPE missions. Moreover it was established that specific payload and spacecraft technology development would be required to realise such a programme.     

空间碎片及其危害

围绕地球轨道的人造物体的数量日益增加,促使航天器的运行和飞行任务计划必须考虑到有碰撞的危险,特别对于载人飞行尤为重要。文内推演了空间碎片未来发展的情况和碰撞概率。空间飞行物体数目的进一步增长,必将导致和加快碰撞链式反应过程。     

An alternative approach to solar system exploration providing safety of human mission to Mars.

For systematic human Mars exploration, meeting crew safety requirements, it seems perspective to assemble into a spacecraft: an electrical rocket, a well-shielded long-term life support system, and a manipulator-robots operating in combined "presence effect" and "master-slave" mode. The electrical spacecraft would carry humans to the orbit of Mars, providing short distance (and low signal time delay) between operator and robot-manipulators, which are landed on the surface of the planet. Long-term hybrid biological and physical/chemical LSS could provide environment supporting human health and well being. Robot-manipulators operating in "presence effect" and "master-slave" mode exclude necessity of human landing on Martian surface decreasing the level of risk for crew. Since crewmen would not have direct contact with the Martian environment then the problem of mutual biological protection is essentially reduced. Lightweight robot-manipulators, without heavy life support systems and without the necessity of returning to the mother vessel, could be sent as scouts to different places on the planet surface, scanning the most interesting for exobiological research site. Some approximate estimations of electric spacecraft, long-term hybrid LSS, radiation protection and mission parameters are conducted and discussed.     

长寿命通信卫星的可靠性研究

通信（广播）卫星是典型的有长寿命要求的卫星。在广泛调查国内外通信卫星工程资料的基础上，考察了它们的轨道性能与寿命情况，并分析了影响卫星寿命和可靠性的因素，空间环境是影响卫星性能和寿命的一个重要因素。对为了避免和减少环境效应影响的工程方法进行了探究。结合工程实际问题研究了长寿命卫星的设计策略，并对需进一步研究的课题作了探索。     

卫星相对空间目标任意位置悬停的方法研究

介绍了卫星相对空间目标悬停的相关研究情况,然后,进行了卫星相对空间目标任意位置实现悬停的受力分析,给出了实现任意位置悬停的非开普勒轨道开环控制方案,分析了对不同高度目标在不同相对位置实施悬停的能量消耗代价。最后,给出了对典型目标实施悬停的仿真计算结果,表明这一方法是可行的。     

基于电磁力与力矩的航天器运动控制的研究进展

电磁力与力矩是一种非接触式的相互作用力与力矩.将通电线圈或磁铁放在磁场中会受到电磁力与力矩的作用.多个通电线圈或磁铁相互作用时，在彼此构成的磁场中也会受到电磁力与力矩的作用.作为一种非接触的力与力矩，电磁力与力矩在航天器的姿态与相对位置控制系统中已有了广泛和深入的应用.本文主要介绍近年来由航天器上电磁装置受到地磁场作用产生电磁力矩在姿态控制中的应用，和带有电磁机构的多航天器间相互作用控制多航天器间相对位姿的应用等.     

基于DSP平台的航天器软件在轨维护实现方法研究*

摘要： DSP（数字信号处理器）在空间领域的应用越来越广泛,面对复杂的空间环境和长时间可靠运行的要求,基于DSP处理器平台的航天器软件,其在轨维护能力成为了一个迫切需要解决的问题.设计一种DSP软件的航天器在轨动态维护方案,并提出两种在轨注入指令码的生成方法.该在轨维部方案通过在航天器软件中预埋钩子功能,经遥控指令注入在轨维护指令码,实现在轨运行软件模块的动态替换功能.通过系统测试,证明该方案的可行性,具有良好的工程应用价值.     

一种面向航天器综合电子的ASIC芯片设计

航天器综合电子系统通用功能集成并芯片化是目前航天器电子系统的发展趋势. 针对中国航天器电子系统小型化、综合化的应用需求,提出一种面向航天器综合电子的ASIC芯片设计方案,分析了ASIC芯片设计中的关键技术,包括芯片系统工作模式、IP核的开发应用、可靠性和低功耗设计,1553B简易终端控制模式是芯片的技术特色和典型应用. ASIC芯片的功能设计、系统仿真验证、FPGA验证和物理设计均已完成,进入流片状态. 芯片的FPGA验证结果证明了芯片设计的有效性和可靠性. ASIC芯片旨在达到国军标548S的要求,应用场景是航天器内数据总线接口单元和遥测遥控.      

航天器测试需求描述及其自动生成

航天器作为一个典型的安全苛刻系统,其可信性研究需求迫切,支持可信性评估的数据来自于航天器测试用例的执行,而航天器测试需求是测试用例生成的重要依据.在实际应用中,对航天器这类复杂系统,面临测试需求庞杂、测试需求编制周期长、人工经验编制方式难以保证测试需求的充分性、完备性及可复用性等问题.针对这些问题,通过分析航天器组织结构特点,建立航天器形式化模型,基于航天器测试任务流程,给出了航天器静态测试需求和动态测试需求形式化描述规范,并给出航天器测试需求自动生成方法,保证了测试需求的充分性和完备性,提高了测试需求复用性,与人工编制方式相比,缩短了测试需求编制周期.最后设计并实现航天器测试需求生成应用系统,验证所提出方法的有效性.      

Generic procedure for designing and implementing plan management systems for space science missions operations

This paper is one of the components of a larger framework of activities whose purpose is to improve the performance and productivity of space mission systems, i.e. to increase both what can be achieved and the cost effectiveness of this achievement. Some of these activities introduced the concept of Functional Architecture Module (FAM); FAMs are basic blocks used to build the functional architecture of Plan Management Systems (PMS). They also highlighted the need to involve Science Operations Planning Expertise (SOPE) during the Mission Design Phase (MDP) in order to design and implement efficiently operation planning systems. We define SOPE as the expertise held by people who have both theoretical and practical experience in operations planning, in general, and in space science operations planning in particular. Using ESA’s methodology for studying and selecting science missions we also define the MDP as the combination of the Mission Assessment and Mission Definition Phases. However, there is no generic procedure on how to use FAMs efficiently and systematically, for each new mission, in order to analyse the cost and feasibility of new missions as well as to optimise the functional design of new PMS; the purpose of such a procedure is to build more rapidly and cheaply such PMS as well as to make the latter more reliable and cheaper to run. This is why the purpose of this paper is to provide an embryo of such a generic procedure and to show that the latter needs to be applied by people with SOPE during the MDP. The procedure described here proposes some initial guidelines to identify both the various possible high level functional scenarii, for a given set of possible requirements, and the information that needs to be associated with each scenario. It also introduces the concept of catalogue of generic functional scenarii of PMS for space science missions. The information associated with each catalogued scenarii will have been identified by the above procedure and will be relevant only for some specific mission requirements. In other words, each mission that shares the same type of requirements that lead to a list of specific catalogued scenarii can use this latter list of scenarii (regardless of whether the mission is a plasma, planetary, astronomy, etc. mission). The main advantages of such a catalogue are that it speeds-up the execution of the procedure and makes the latter more reliable. Ultimately, the information associated to each relevant scenario (from the catalogue or freshly generated by the procedure) will then be used by mission designers to make informed decisions, including the modification of the mission requirements, for any missions. In addition, to illustrate the use of such a procedure, the latter is applied to a case study, i.e. the Cross-Scale mission. One of the outcomes of this study is an initial set of generic functional scenarii. Finally, although border line with the above purpose of this paper, we also discuss multi-spacecraft specific issues and issues related to the on-board execution of the plan update system (PUS). In particular, we show that the operation planning cost of N spacecraft is not equal to N times the cost of 1 spacecraft and that on-board non-synchronised operation will not require inter-spacecraft communication. We also believe that on-board PUS should be made possible for all missions as a standard.     

嫦娥四号着陆器载荷电控箱地面测试系统设计

航天器电子设备的地面综合测试是航天器研制过程中的重要环节,对设备功能验证及性能评估具有重要作用.传统的地面综合测试系统可重用性差,导致研制周期长且人力、设备投入较大.嫦娥四号着陆器载荷电控箱的地面测试系统采用模块化、可重用和CPU+FPGA单机集成体系结构,是集供配电测试、1553B通信总线仿真测试、间接指令测试、异步串口通信测试、实时数据处理等功能于一体的综合测试系统,适用于航天器电子设备单板调试、单机测试、软件配置项测试以及环境模拟试验等不同类型的测试.通过嫦娥四号着陆器载荷电控箱各项接口、功能、性能指标等的测试,证明该系统满足支持设备单机调试、软件配置项测试、状态确认和问题排查等测试需求,有力支撑了嫦娥四号着陆器载荷电控箱的单机设备研发,为嫦娥四号着陆器任务实施提供了有效保障.      

主带小行星采样返回任务中的离子电推进应用方案

由于离子电推进的高比冲特性,采用它执行小行星探测器巡航阶段轨道机动任务时,将使探测器在同样的有效载荷下的发射重量大大减轻。针对我国规划中的主带小行星采样返回任务,调研了国外离子电推进在深空探测任务中的应用情况,在借鉴国外成功经验和任务需求分析的基础上,设计了主带小行星探测器离子电推进系统方案和应用策略,计算了在目前离子推力器寿命水平下,既定探测任务对离子电推进推力、比冲、推进剂量以及功耗需求。研究表明,目前研制的离子推力器可以满足规划中的主带小行星探测任务需求。研究成果对探测器的方案设计有参考价值。     

航天器表面充电模型研究:Ⅱ—航天器表面电势模型和计算

处于空间电环境条件下的航天器表面会出现电荷积累,形成高的电势值。已提出不少模型和计算方法以求评估航天器的电势绝对值。对此本文作了较详细的介绍和讨论。     

Dynamics and control for contactless interaction between spacecraft and tumbling debris

Tumbling debris has become a great threat to orbit activities. Contactless interaction is a novel concept for active debris removal, through which the tumbling debris no longer rotates freely but is under control. The contactless interaction method aims to de-tumble the debris and then maintain desired relative states between the spacecraft and debris. The spacecraft is simultaneously stabilized through three-axis attitude control, which makes the de-tumbling and capture operation much safer, more effective and accurate. The dynamics and control for the contactless interaction have been little studied in the past years. This paper considers a generic dynamics and control problem for contactless interaction between a spacecraft and debris. A translational and rotational dynamics model of contactless interaction is proposed and the 6-DOF equations are established. The contactless interaction control law is designed with the backstepping method, and the spacecraft three-axis control law is designed with the PD control. Simulation results show that the angular momentum is transferred from the debris to the spacecraft and the debris is thus de-tumbled. The desired relative states are achieved efficiently. Significantly, the spacecraft and debris no longer rotate in the inertial frame and, hence, the safety and accuracy for capture operation are guaranteed.     

Development of a thin section device for space exploration: Overview and system performance estimates

In this paper we present a conceptual design of a spaceborne instrument for the in situ production of rock thin sections on planetary surfaces. The in situ Automated Rock Thin Section Instrument (IS-ARTS) conceptual design demonstrates that the in situ production of thin sections on a planetary body is a plausible new instrument capability for future planetary exploration. Thin section analysis would reduce much ambiguity in the geological history of a sampled site that is present with instruments currently flown. The technical challenge of producing a thin section device compatible with the spacecraft environment is formidable and has been thought too technically difficult to be practical. Terrestrial thin section preparation requires a skilled petrographist, several preparation instruments that individually exceed typical spacecraft mass and power limits, and consumable materials that are not easily compatible with spaceflight. In two companion papers we present research and development work used to constrain the capabilities of IS-ARTS in the technical space compatible with the spacecraft environment. For the design configuration shown we conclude that a device can be constructed that is capable of 50 sample preparations over a 2 year lifespan with mass, power, and volume constraints compatible with current landed Mars mission configurations. The technical requirements of IS-ARTS (mass, power and number of samples produced) depend strongly on the sample mechanical properties, sample processing rate, the sample size and number of samples to be produced.     

U.S. planetary protection program: Implementation highlights

The implementation of planetary protection in the United States space program has reflected the trend in policy from an absolute to a probabilistic prohibition of the contamination of the celestial bodies of the solar system. The early emphasis on spacecraft sterilization (e.g. Ranger) was replaced by the imposition of contamination control procedures on later missions such as Pioneer, Viking, and Voyager. Similarly, analytical and laboratory techniques were developed to demonstrate compliance with probabilistic requirements. Microbial burden reduction methods that are not hazardous for spacecraft reliability supplanted the abstract concept of sterilization. The United States implementation of planetary protection has been completely successful. In an exploration program that has included Mercury, Venus, Mars, the Jovian system, and the Saturnian system, there have been no accidental impacts or detection of false positives (terrestrial microbes). Further, the contamination control and microbial burden procedures have proved beneficial to spacecraft systems and on-board science instruments. We review in this paper the implementation of planetary protection procedures by the Pioneer (10 and 11), Viking and Voyager projects.     

载人运输飞船流体回路方案研究

流体回路是载人运输飞船热控分系统的重要组成部分,结合飞船所采取的其他热控措施,流体回路必须满足各种可能出现的热工况要求,同时尽量少占用飞船的资源。在进行分析和比较的基础上,确定流体回路的方案和系统配置,结合对接目标的热设计,重点解决与目标停靠期间的热控问题。文中介绍了载人运输飞船流体回路的主要设计要求及考虑重点,在能量平衡分析的基础上设计了两种流体回路方案,并进行了热分析计算和性能比较,对流体工质的选择也提出了建议。     

面向航天型号软件的混成建模语言研究

随着我国航天事业的快速发展，软件在航天器中的作用和地位越来越突出，航天软件逐渐成为航天型号任务成败的关键之一.航天型号软件普遍具有实时性高、可靠性要求高、运行环境复杂以及航天器结构复杂、资源受限等特点，这给航天型号软件的描述、设计、分析和实现带来了巨大的挑战.嵌入式周期控制系统语言(SPARDL)仅关注了离散时间的动力系统，为了描述物理世界的连续行为，希望发展一种面向航天型号软件建模特征的混成描述语言(HSPARDL)，使其能够统一地描述其运行的物理过程与软件的控制行为，以及它们之间的协同交互机制，同时，为其提供严格的形式语义模型确保嵌入式软件设计的正确性和可靠性，最终为航天型号软件的设计和实现提供坚实的理论基础和方法支撑.