This paper proposes a generic high-performance and low-time-overhead software control flow checking solution, graph-tree-based control flow checking （GTCFC） for space-borne commercial-off-the-shelf （COTS） processo...This paper proposes a generic high-performance and low-time-overhead software control flow checking solution, graph-tree-based control flow checking （GTCFC） for space-borne commercial-off-the-shelf （COTS） processors. A graph tree data structure with a topology similar to common trees is introduced to transform the control flow graphs of target programs. This together with design of IDs and signatures of its vertices and edges allows for an easy check of legality of actual branching during target program execution. As a result, the algorithm not only is capable of detecting all single and multiple branching errors with low latency and time overheads along with a linear-complexity space overhead, but also remains generic among arbitrary instruction sets and independent of any specific hardware. Tests of the algorithm using a COTS-processor-based onboard computer （OBC） of in-service ZDPS-1A pico-satellite products show that GTCFC can detect over 90% of the randomly injected and all-pattern-covering branching errors for different types of target programs, with performance and overheads consistent with the theoretical analysis; and beats well-established preeminent control flow checking algorithms in these dimensions. Furthermore, it is validated that GTCGC not only can be accommodated in pico-satellites conveniently with still sufficient system margins left, but also has the ability to minimize the risk of control flow errors being undetected in their space missions. Therefore, due to its effectiveness, efficiency, and compatibility, the GTCFC solution is ready for applications on COTS processors on pico-satellites in their real space missions.展开更多
Abstract Single event upset （SEU） effect, caused by highly energized particles in aerospace, threatens the reliability and security of small satellites composed of commercialofftheshelves （COTS）. SEU induced contr...Abstract Single event upset （SEU） effect, caused by highly energized particles in aerospace, threatens the reliability and security of small satellites composed of commercialofftheshelves （COTS）. SEU induced control flow errors （CFEs） may cause unpredictable behavior or crashes of COTSbased small satellites. This paper proposes a generic softwarebased control flow checking technique （CFC） and bipartite graphbased control flow checking （BGCFC）. To simplify the types of illegal branches, it transforms the conventional control flow graph into the equivalent bipartite graph. It checks the legal ity of control flow at runtime by comparing a global signature with the expected value and introduces consecutive IDs and bitmaps to reduce the time and memory overhead. Theoretical analysis shows that BGCFC can detect all types of internode CFEs with constant time and memory overhead. Practical tests verify the result of theoretical analysis. Compared with previous techniques, BGCFC achieves the highest error detection rate, lower time and memory overhead; the composite result in evaluation fac tor shows that BGCFC is the most effective one among all these techniques. The results in both theory and practice verify the applicability of BGCFC for COTSbased small satellites.展开更多
为了提高指令输出的稳定性和指挥控制的自动化水平,提出基于商用成熟技术(Commenial Off The Shelf,COTS)的船载指控系统设计方法。设计的船载指控系统包括指令传输模块、指令加载模块、信息处理模块、接口控制模块以及人机交互模块。首...为了提高指令输出的稳定性和指挥控制的自动化水平,提出基于商用成熟技术(Commenial Off The Shelf,COTS)的船载指控系统设计方法。设计的船载指控系统包括指令传输模块、指令加载模块、信息处理模块、接口控制模块以及人机交互模块。首先,构建船载指控系统的输出控制单元,利用socket函数创建套接字进行输出变量控制;其次,考虑输出不稳定,调用closesocket函数实对信息加载和输出稳定性控制,通过Microsoft基础类(Microsoft Foundation Class,MFC)建立用户数据包协议(User Datagram Protocol,UDP);最后,采用UDP协议建立船载指控系统的网络通信体系,实现船载指控系统的优化设计。测试结果表明,基于COTS的船载指控系统能够有效提高舰载指控的自动化程度。展开更多
针对纳级卫星的任务需求,设计了一种基于商用货架器件(commercial off the shelf components、COTS)、模块化的低成本反作用飞轮方案。采用非密闭式结构,无刷电机驱动轮缘式轮盘,两者之间振动模态分析结果表明不存在共振问题;控制器采...针对纳级卫星的任务需求,设计了一种基于商用货架器件(commercial off the shelf components、COTS)、模块化的低成本反作用飞轮方案。采用非密闭式结构,无刷电机驱动轮缘式轮盘,两者之间振动模态分析结果表明不存在共振问题;控制器采用积分分离控制算法,基于超低功耗处理器捕获霍尔信号测速,驱动MOSFET桥换相。所研制飞轮成功通过了地面性能与环境试验测试,实测结果:重量63 g,尺寸/mm为36×36×28,最大转速9 000 r/min,最大角动量≥5.5 m Nms,输出力矩为≥0.2 m Nm,功耗≤500 mW。2016年6月25日,该飞轮随世界首颗12U立方星"翱翔之星"即西北工业大学首颗卫星,搭载"长征7号"发射入轨,在轨服役99天直到卫星坠入大气层,工作状态良好。地面测试与飞行验证结果均表明:基于COTS的飞轮设计方案有效可行,满足卫星任务需求。展开更多
对动态电压调节(Dynamic Voltage Scaling,DVS)开关变换器的定频导通时间(Constant Frequency Turn-On Time,CFOT)控制技术进行了研究,在恒定导通时间(Constant On-Time,COT)基础上,通过引入输入电压前馈和输出参考电压反馈环路,实现不...对动态电压调节(Dynamic Voltage Scaling,DVS)开关变换器的定频导通时间(Constant Frequency Turn-On Time,CFOT)控制技术进行了研究,在恒定导通时间(Constant On-Time,COT)基础上,通过引入输入电压前馈和输出参考电压反馈环路,实现不同输入、输出电压条件下DVS开关变换器保持开关频率恒定。研究结果表明,CFOT控制不仅继承了传统COT控制环路设计简单、无需误差放大器及其相应的补偿网路、瞬态响应快的优点,而且消除了输入、输出电压变动对开关频率的影响。展开更多
基金supported by National Natural Science Foundation of China (No. 60904090)
文摘This paper proposes a generic high-performance and low-time-overhead software control flow checking solution, graph-tree-based control flow checking （GTCFC） for space-borne commercial-off-the-shelf （COTS） processors. A graph tree data structure with a topology similar to common trees is introduced to transform the control flow graphs of target programs. This together with design of IDs and signatures of its vertices and edges allows for an easy check of legality of actual branching during target program execution. As a result, the algorithm not only is capable of detecting all single and multiple branching errors with low latency and time overheads along with a linear-complexity space overhead, but also remains generic among arbitrary instruction sets and independent of any specific hardware. Tests of the algorithm using a COTS-processor-based onboard computer （OBC） of in-service ZDPS-1A pico-satellite products show that GTCFC can detect over 90% of the randomly injected and all-pattern-covering branching errors for different types of target programs, with performance and overheads consistent with the theoretical analysis; and beats well-established preeminent control flow checking algorithms in these dimensions. Furthermore, it is validated that GTCGC not only can be accommodated in pico-satellites conveniently with still sufficient system margins left, but also has the ability to minimize the risk of control flow errors being undetected in their space missions. Therefore, due to its effectiveness, efficiency, and compatibility, the GTCFC solution is ready for applications on COTS processors on pico-satellites in their real space missions.
基金support from the National Natural Science Foundation of Chinathe Fundamental Research Funds for the Central Universities of China
文摘Abstract Single event upset （SEU） effect, caused by highly energized particles in aerospace, threatens the reliability and security of small satellites composed of commercialofftheshelves （COTS）. SEU induced control flow errors （CFEs） may cause unpredictable behavior or crashes of COTSbased small satellites. This paper proposes a generic softwarebased control flow checking technique （CFC） and bipartite graphbased control flow checking （BGCFC）. To simplify the types of illegal branches, it transforms the conventional control flow graph into the equivalent bipartite graph. It checks the legal ity of control flow at runtime by comparing a global signature with the expected value and introduces consecutive IDs and bitmaps to reduce the time and memory overhead. Theoretical analysis shows that BGCFC can detect all types of internode CFEs with constant time and memory overhead. Practical tests verify the result of theoretical analysis. Compared with previous techniques, BGCFC achieves the highest error detection rate, lower time and memory overhead; the composite result in evaluation fac tor shows that BGCFC is the most effective one among all these techniques. The results in both theory and practice verify the applicability of BGCFC for COTSbased small satellites.
文摘为了提高指令输出的稳定性和指挥控制的自动化水平,提出基于商用成熟技术(Commenial Off The Shelf,COTS)的船载指控系统设计方法。设计的船载指控系统包括指令传输模块、指令加载模块、信息处理模块、接口控制模块以及人机交互模块。首先,构建船载指控系统的输出控制单元,利用socket函数创建套接字进行输出变量控制;其次,考虑输出不稳定,调用closesocket函数实对信息加载和输出稳定性控制,通过Microsoft基础类(Microsoft Foundation Class,MFC)建立用户数据包协议(User Datagram Protocol,UDP);最后,采用UDP协议建立船载指控系统的网络通信体系,实现船载指控系统的优化设计。测试结果表明,基于COTS的船载指控系统能够有效提高舰载指控的自动化程度。
文摘针对纳级卫星的任务需求,设计了一种基于商用货架器件(commercial off the shelf components、COTS)、模块化的低成本反作用飞轮方案。采用非密闭式结构,无刷电机驱动轮缘式轮盘,两者之间振动模态分析结果表明不存在共振问题;控制器采用积分分离控制算法,基于超低功耗处理器捕获霍尔信号测速,驱动MOSFET桥换相。所研制飞轮成功通过了地面性能与环境试验测试,实测结果:重量63 g,尺寸/mm为36×36×28,最大转速9 000 r/min,最大角动量≥5.5 m Nms,输出力矩为≥0.2 m Nm,功耗≤500 mW。2016年6月25日,该飞轮随世界首颗12U立方星"翱翔之星"即西北工业大学首颗卫星,搭载"长征7号"发射入轨,在轨服役99天直到卫星坠入大气层,工作状态良好。地面测试与飞行验证结果均表明:基于COTS的飞轮设计方案有效可行,满足卫星任务需求。
文摘对动态电压调节(Dynamic Voltage Scaling,DVS)开关变换器的定频导通时间(Constant Frequency Turn-On Time,CFOT)控制技术进行了研究,在恒定导通时间(Constant On-Time,COT)基础上,通过引入输入电压前馈和输出参考电压反馈环路,实现不同输入、输出电压条件下DVS开关变换器保持开关频率恒定。研究结果表明,CFOT控制不仅继承了传统COT控制环路设计简单、无需误差放大器及其相应的补偿网路、瞬态响应快的优点,而且消除了输入、输出电压变动对开关频率的影响。
