초록 ▼

A fault identification, isolation and fault recovery system autonomously controls spacecraft operational systems. A fault detection and isolation module monitors the operational systems, identifies faults via such monitoring and attempts to isolate component causing the fault. Isolation may constitu

A fault identification, isolation and fault recovery system autonomously controls spacecraft operational systems. A fault detection and isolation module monitors the operational systems, identifies faults via such monitoring and attempts to isolate component causing the fault. Isolation may constitute a plurality of hierarchically arranged techniques that enhance speed and maximize the likelihood of identifying a correct hypothesis regarding the actual failure. The fault isolation and fault recovery modules are bounded by a severe fault override module which places the spacecraft operational systems in a safe mode or state. Thus, the override module ensures rapid entry into the safe mode while preventing an erroneous hypothesis serviced by the fault recovery module from driving the system beyond acceptable limits. A high level command processor receives command sequences from remote ground support stations and from the on-board fault recovery module. A ground based test bed attached to a ground support systems is used to generate verified high level fault recovery scripts before and during a mission to bolster fault recovery capabilities.

대표청구항 ▼

[ What is claimed is:] [1.] In a spacecraft system comprising a plurality of differing components operating in multiple modes of operation and conditions including fault conditions, the spacecraft system exhibiting operating characteristics indicating said fault conditions, apparatus comprising:a fa

[ What is claimed is:] [1.] In a spacecraft system comprising a plurality of differing components operating in multiple modes of operation and conditions including fault conditions, the spacecraft system exhibiting operating characteristics indicating said fault conditions, apparatus comprising:a fault detect module monitoring said operating characteristics of the spacecraft system and detecting said fault conditions of said components based on said operating characteristics of the spacecraft system; anda fault recovery module storing a plurality of fault recovery command scripts, disabling or modifying said fault recovery command scripts involving said detected fault conditions, selecting said plurality of fault recovery command scripts based on an output from said fault detect module and the mode of operation of said system, and performing a recovery process with said selected fault recovery command scripts to attempt to recover from said fault condition.