通信卫星系统潜在故障识别与应对方法

针对新一代高集成度、高复杂度通信卫星系统应用背景，以通信卫星平台长寿命、高可靠设计需求为牵引，提出一种基于系统理论事故模型与过程（STAMP）的系统级潜在故障识别与分析方法，在总体设计早期即提出对卫星平台各分系统的可靠性设计需求。以某地球同步轨道（GEO）通信卫星为例介绍该方法，通过构建系统控制逻辑架构自上至下地分析潜在的不安全控制过程，通过检查控制与反馈回路的各环节确定故障发生场景，提出对控制过程的约束条件以消除或降低故障发生的可能，最终形成有针对性的分系统可靠性设计需求。

Method for potential fault identification and countermeasures of communication satellite systems

In view of the application background of the new generation communication satellite systems with high integration and high complexity, a system-level potential fault identification and analysis method based on the system theoretical accident model and process (STAMP) was proposed driven by the long-life and high reliability design requirements of the communication satellite platforms. The reliability design requirements for each subsystem of the satellite platform were put forward at the early stage of the overall design. A geosynchronous Earth orbit (GEO) communication satellite was taken as an example to introduce the method. The potentially unsafe control process was analyzed from top to bottom by constructing the system control logic architecture, the fault occurrence scenario was determined by checking each link of the control and feedback loop, and the constraint conditions of the control process were given to eliminate or reduce the possibility of fault. Finally the targeted reliability design requirements of the subsystem were formed.