SPACECRAFT COMMUNICATION SYSTEM

Abstract

A link system (100) for a spacecraft (10) comprises control and communication circuitry and is configured to communicate with subsystems (12) in the spacecraft (10) independent of an on-board computer (102) and configured to manage communication between the subsystems (12) and external entities (150, 160). The link system (100) is configured to determine that an anomaly has occurred in functionality of the on-board computer (102) and/or at least one subsystem (12). As a consequence of the determination that an anomaly has occurred, the link system (100) initiates a recovery procedure that comprises enabling the external entity (150, 160) to execute recovery actions in relation to the on-board computer (102) and/or at least one subsystem (12).

Claims

1. A link system for a spacecraft, the spacecraft comprising: a plurality of subsystems interconnected with each other, an on-board computer configured to communicate with the subsystems and to at least convey data between the subsystems and the link system, and a wireless communication system configured to communicate data between the spacecraft and at least one external entity, wherein the link system comprises control and communication circuitry and configured to: communicate with the subsystems independent of the on-board computer and configured to manage communication between the subsystems and the external entity via the wireless communication system, determine that an anomaly has occurred in functionality of the on-board computer and/or in functionality of at least one subsystem among the plurality of subsystems, and as a consequence of the determination that an anomaly has occurred, initiating a recovery procedure that comprises enabling the external entity to perform recovery actions in relation to the on-board computer and/or in relation to at least one subsystem among the plurality of subsystems.

2. The link system of claim 1, configured such that: the determination that an anomaly has occurred comprises receiving, from the external entity, information that the anomaly has occurred.

3. The link system of claim 1, configured such that: the determination that an anomaly has occurred comprises detecting that the anomaly has occurred.

4. The link system of any of claims 1 to 3 claim 1, configured such that: the determination that an anomaly has occurred comprises determining that a limitation of the on-board computer to communicate with at least one subsystem among the plurality of subsystems has occurred.

5. The link system of claim 1, configured such that: the determination that an anomaly has occurred comprises determining that a limitation of the on-board computer to execute a scheduled management task associated with at least one subsystem among the plurality of subsystems has occurred.

6. The link system of claim 1, configured such that the recovery procedure initiated by the link system comprises: storing anomaly information pertaining to the anomaly in functionality of the on-board computer, and transmitting the anomaly information to the external entity.

7. The link system of claim 1, configured such that the recovery procedure initiated by the link system comprises: receiving, from the external entity, at least one command to execute a restart procedure of the on-board computer, and executing a restart procedure of the on-board computer according to the received at least one command.

8. The link system of claim 1, configured such that the recovery procedure initiated by the link system comprises: enabling direct communication between the external entity and at least one subsystem among the plurality of subsystems.

9. The link system of claim 8, configured such that the enabling of direct communication between the external entity and at least one subsystem among the plurality of subsystems comprises: establishing a communication channel between the link system and the at least one subsystem among the plurality of subsystems, transmitting, to the external entity, information configured to enable the external entity to obtain access to the established channel and thereby enabling the external entity to communicate with the at least one subsystem among the plurality of subsystems via the channel.

10. The link system of claim 1, configured such that the recovery procedure initiated by the link system comprises: receiving, from the external entity, a request for telemetry data from at least one subsystem among the plurality of subsystems, obtaining, from the at least one subsystem among the plurality of subsystems, telemetry data, and transmitting, to the external entity, the obtained telemetry data.

11. The link system of claim 1, where: the wireless communication system is configured to communicate with at least one external entity in the form of a ground station in a fixed-satellite service system, FSS, or in the form of another spacecraft in an inter-satellite service system, ISS.

12. (canceled)

13. A method performed by a link system for a spacecraft, the spacecraft comprising a plurality of subsystems interconnected with each other, an on-board computer configured to communicate with the subsystems and to at least convey data between the subsystems and the link system, and a wireless communication system configured to communicate data between the spacecraft and at least one external entity, wherein the link system comprises control and communication circuitry that performs the steps of: determining that an anomaly has occurred in functionality of the on-board computer and/or in functionality of at least one subsystem among the plurality of subsystems, and as a consequence of the determination that an anomaly has occurred, initiating a recovery procedure that comprises enabling the external entity to perform recovery actions in relation to the on-board computer and/or at least one subsystem among the plurality of subsystems.

14. (canceled)

15. (canceled)

16. The method of claim 13, wherein: the determination that an anomaly has occurred comprises receiving, from the external entity, information that the anomaly has occurred.

17. The method of claim 13, wherein: the determination that an anomaly has occurred comprises detecting that the anomaly has occurred.

18. The method of claim 13, wherein: the determination that an anomaly has occurred comprises determining that a limitation of the on-board computer to communicate with at least one subsystem among the plurality of subsystems has occurred.

19. The method of claim 13, wherein: the determination that an anomaly has occurred comprises determining that a limitation of the on-board computer to execute a scheduled management task associated with at least one subsystem among the plurality of subsystems has occurred.

20. The method of claim 13, wherein the recovery procedure initiated by the link system comprises: storing anomaly information pertaining to the anomaly in functionality of the on-board computer, and transmitting the anomaly information to the external entity.

21. The method of claim 13, wherein the recovery procedure initiated by the link system comprises: receiving, from the external entity, at least one command to execute a restart procedure of the on-board computer, and executing a restart procedure of the on-board computer according to the received at least one command.

23. The method of claim 13, wherein the recovery procedure initiated by the link system comprises: enabling direct communication between the external entity and at least one subsystem among the plurality of subsystems.

23. A non-transitory computer-readable storage medium having stored thereon instructions for implementing the method according to claim 13, when executed on a device having processing capabilities.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0028] FIG. 1 is a schematically illustrated spacecraft communication system,

[0029] FIGS. 2a-f are flowcharts of methods, and

[0030] FIG. 3 schematically illustrates a link computer system.

DETAILED DESCRIPTION

[0031] With reference to FIG. 1, a spacecraft communication system comprises a plurality of entities that are configured to communicate with each other in a wireless manner. A spacecraft 10 is configured to communicate with entities that are external to the spacecraft 10. The external entities are exemplified in FIG. 1 by a plurality of terrestrial entities including ground stations 150 and by one or more other spacecraft 160. Communication between the spacecraft 10 and the ground stations 150 may take place via a wireless communication interface 151 of a first type and communication between the spacecraft 10 and the spacecraft 160 may take place via a wireless communication interface 161 of a second type. A terrestrial network 153 interconnect the ground stations 150 and other communicating entities as exemplified by operator systems 152.

[0032] The spacecraft comprises a a plurality of subsystems 12 interconnected with each other, an on-board computer 102 configured to communicate with the subsystems 12 and to at least convey data between the subsystems 12 and a link system 100, which will be described in some detail below. A wireless communication system 116 is configured to communicate data between the spacecraft 10 and at least one external entity 150, 160. The wireless communication system 116 may be a radio communication system. For example, the wireless communication system 116 may be configured to communicate with at least one external entity in the form of a ground station 150 in a fixed-satellite service system (FSS). Similarly, the wireless communication system 116 may be configured to communicate with at least one external entity in the form of another spacecraft 160 in an inter-satellite service system, ISS. The International Telecommunication Union (ITU) defines such communication systems in so-called radio regulations (RR). For example, FSS is regulated in RR 1.21 and ISS is regulated in RR 1.22. The wireless communication system 116 may also or alternatively be configured to communicate by means of optical means, e.g. laser communication circuitry.

[0033] Specific examples of functionality of the subsystems 12 include payloads (scientific instruments etc.) 104, 106, solar arrays 108, a battery system 110, an attitude and orbital control system (AOCS) 112 and a power distribution unit 114. A telemetry, tracking and command (TT&C) subsystem may also be present as a separate subsystem (not illustrated in FIG. 1). The subsystems 12 are interconnected via a communications bus 101 and the on-board computer 102 is configured to manage operations of the spacecraft 10. The on-board computer 102 is responsible for managing operations of the spacecraft 10 and to communicate with the link system 100.

[0034] It is to be noted that the communications bus 101 is one example of communication means suitable in the present context. Examples of bus configurations include SpaceWire and Controller Area Network (CAN) bus. However, as the skilled person will realize other non-bus configurations may be utilized, such as mesh or star network topologies.

[0035] The link system 100 is configured to communicate with the subsystems 12 independent of the on-board computer 102 and configured to manage communication between the subsystems 12 and one or more of the external entities 150, 160 via the wireless communication system 116. The link system 100 may comprise at least one computer system 311 as exemplified in FIG. 3 that comprises control and communication circuitry in the form of a processor 302, memory 304 and input/output circuitry 306. The fact that the link system 100 is configured to communicate with the subsystems 12 independent of the on-board computer 102 is characterized by an ability to implement routing functions for establishing a direct communications channel between an external entity and any of the spacecraft subsystems, or the initiation of communications with the earth station when it determines that the satellite passes over a ground antenna.

[0036] Now with reference also to FIG. 2a, the control and communication circuitry of the link system 100 may be configured to perform a number of actions as follows:

[0037] Action 210

[0038] A determination is made that an anomaly has occurred in functionality of the on-board computer 102 and/or in functionality of at least one subsystem among the plurality of subsystems 12.

[0039] The determination in action 210 that an anomaly has occurred may comprise receiving, from the external entity 150, 160, information that the anomaly has occurred. Alternatively, the determination in action 210 that an anomaly has occurred may comprise detecting that the anomaly has occurred. In other words, the anomaly may be detected by the external entity 150, 160 and then the external entity 150, 160 informs the link system 100 in the spacecraft 10 that the anomaly has occurred; or the anomaly is determined in that the link system 100 itself detects the anomaly.

[0040] Regarding the character of the anomaly, in some embodiments the determination that an anomaly has occurred comprises determining that a limitation of the on-board computer 102 to communicate with at least one subsystem among the plurality of subsystems 12 has occurred. In some embodiments, the determination that an anomaly has occurred comprises determining that a limitation of the on-board computer 102 to execute a scheduled management task associated with at least one subsystem among the plurality of subsystems 12 has occurred. In some embodiments, the determination that an anomaly has occurred comprises determining a limitation of the on-board computer 102 to determine non optimum operational parameters for any of the subsystems 12. In some embodiments, the determination that an anomaly has occurred comprises determining a limitation of the on-board computer 102 to recognise any unpredicted condition in the system behaviour.

[0041] Action 212

[0042] As a consequence of the determination in action 210 that an anomaly has occurred, a recovery procedure is initiated that comprises enabling the external entity 150, 160 to perform recovery actions in relation to the on-board computer 102 and/or in relation to at least one subsystem among the plurality of subsystems 12.

[0043] As will be exemplified herein, the recovery procedure depends on the nature of the anomaly. The most common anomaly is related to the radiation environment of the spacecraft, especially during periods of solar flares, when a high energy particle hits an active silicon component, i.e. a field-programmable gate array (FPGA) or a processor and causes a latch up event or a single event effect/single event upset (SEE/SEU). In such cases, the recovery procedure may be realized through the power system of the spacecraft by limiting the amount of current supplied to individual subsystems (or the on-board computer) and gradually returning the spacecraft in nominal operations. Restarting the processor without removing the power altogether does not clear a latch up condition. In some cases, the damage from an event where a high energy particle hits an active silicon component is so extensive that recovery is no longer possible. In those cases, the only option is to completely shut down the malfunctioning system and manually recover functionality in the areas that are not damaged.

[0044] In some embodiments, the link system 100 is configured such that the recovery procedure initiated by the link system 100 comprises the following actions, as illustrated in FIG. 2b:

[0045] Action 241

[0046] Anomaly information pertaining to the anomaly in functionality of the on-board computer 102 is stored, for example stored in a memory 304 as exemplified in FIG. 3.

[0047] Action 243

[0048] The anomaly information is then transmitted to the external entity 150, 160.

[0049] In some embodiments, the link system 100 is configured such that the recovery procedure initiated by the link system 100 comprises the following actions, as illustrated in FIG. 2c:

[0050] Action 251

[0051] The link system 100 receives, from the external entity 150, 160, at least one command to execute a restart procedure of the on-board computer 102.

[0052] Action 253

[0053] A restart procedure of the on-board computer 102 is executed according to the received at least one command. For example, as mentioned above, the recovery procedure may be realized through the power system of the spacecraft by limiting the amount of current supplied to the on-board computer (or individual subsystems) and gradually returning the spacecraft in nominal operations. Restarting the processor without removing the power altogether does not clear a latch up condition.

[0054] In some embodiments, the link system 100 is configured such that the recovery procedure initiated by the link system 100 comprises the following action, as illustrated in FIG. 2d:

[0055] Action 261

[0056] Direct communication is enabled between the external entity 150, 160 and at least one subsystem among the plurality of subsystems 12.

[0057] In some embodiments as illustrated in FIG. 2e, the link system 100 is configured such that the enabling in action 263 of direct communication between the external entity 150, 160 and at least one subsystem among the plurality of subsystems 12 comprises the following actions:

[0058] Action 271

[0059] A communication channel 120 is established between the link system 100 and the at least one subsystem among the plurality of subsystems 12.

[0060] Action 273

[0061] Transmission is made, to the external entity 150, 160, of information configured to enable the external entity 150, 160 to obtain access to the established channel 120 and thereby enabling the external entity 150, 160 to communicate with the at least one subsystem among the plurality of subsystems 12 via the channel 120.

[0062] In other words, the link system may in such embodiments be considered as performing a router function in relation to the external entity when communicating with one or more subsystems.

[0063] In some embodiments as illustrated in FIG. 2f, the link system 100 is configured such that the recovery procedure initiated in action 212 comprises the following actions:

[0064] Action 281

[0065] The link system 100 receives, from the external entity 150, 160, a request for telemetry data from at least one subsystem among the plurality of subsystems 12.

[0066] Action 283

[0067] Telemetry data is obtained from the at least one subsystem among the plurality of subsystems 12.

[0068] Action 285

[0069] The obtained telemetry data is transmitted, to the external entity 150, 160.

[0070] As illustrated in FIG. 3, a computer program 343 may comprise instructions which, when executed on at least one processor 302 in the spacecraft link system 100, cause the link system 100 to carry out a method as exemplified by the actions described above. Furthermore, as illustrated in FIG. 3, a carrier 342, comprising such a computer program 343, may be one of an electronic signal, an optical signal, a radio signal and a computer readable storage medium.

[0071] From the above it can be summarized that the link system 100 may be in the form of a computer apparatus installed in the spacecraft 10 and a purpose is to manage all forms of communications between the spacecraft 10 and any of the nodes of the network (i.e. the external entities 150, 160). Although several functions of the link system 100 has been exemplified above, it may further be configured to fulfil similar and other functions as follows, e.g. in combination with the features described above in connection with FIGS. 1 to 3: [0072] Prioritise and manage connectivity needs of the spacecraft 10 to the network and vice versa. [0073] Serve communications needs of the spacecraft 10 payload(s) 104, 106 and/or any data handling unit in the spacecraft 10. [0074] Manage routing of communications between network (i.e. external entities 150, 160), spacecraft on-board computer 102, payload(s) 104, 106 or any of the spacecraft subsystems 12 connected to the link system 100. [0075] Negotiate availability and timing of spacecraft to network (i.e. external entities 150, 160) connection with the interfaces in the network. The spacecraft orbits earth at a certain rate. In Low Earth Orbits, this is usually every 90 mins. As a result, and depending on the spacecraft trajectory, it is only going over a ground antenna at certain times. As a result, the spacecraft can only connect to the network when it is flying over an earth station and has access to the antenna on the ground. The antenna on the ground has to point towards the satellite and track its orbit to maintain communications. [0076] Communicate the spacecraft orbital parameters (e.g. position, velocity, attitude . . . ) to the network (i.e. external entities 150, 160) in order to facilitate the estimation of available opportunities to communicate with any of the external entities 150, 160. As the spacecraft orbits earth, it only passes over an antenna on the ground at certain times. The spacecraft operators determine the time that the spacecraft will be going over the earth station and negotiate the availability of an antenna and cost for establishing the communications. When there are multiple earth stations involved, this becomes a very elaborate and tedious exercise. Such a procedure may be automated by software that enables the link system to tell the earth station computers that it will need to establish communications through a specific ground antenna at a certain time. The earth station computer will then notify the spacecraft link system if this is possible. The decision is taken based on traffic conditions, availability of antenna, spectrum bandwidth etc. In almost all cases to date, such negotiation happens manually through human exchange. A link system as disclosed herein enables automating such negotiation.

[0077] As is evident from the above, a difference between the disclosure herein and existing spacecraft configurations is the fact that the link system 100 connects directly to the spacecraft communication bus(es) and, in doing so, it allows direct communication with any of the subsystems 12 in the spacecraft 10. Moreover, expanding further on the differences with respect to existing spacecraft configurations, connectivity intelligence is no longer integrated only in the on-board-computer 102 but also in the link system 100. This allows the network (i.e. external entities 150, 160) to adapt and modernise by programming new communication protocols in the link system 100. The connectivity intelligence integrated in the link system 100 also allows it to serve each of the spacecraft subsystems 12 as if they were separate entities, by directly addressing them from any node (i.e. external entities 150, 160).

[0078] In simplified terms, the arrangements and methods described herein removes some of the intelligence from the on-board-computer 102 and moves it to the link system 100. This helps make the spacecraft a lot more resilient in terms of communicating with the ground or with other spacecraft (i.e. external entities 150, 160).