基于“嫦娥五号”(Chang’E-5,CE-5)任务高安全性、高可靠性、高复杂度、高自主性的功能以及高实时性、强时序性的需求,开展了导航、制导与控制(Guidance,Navigation and Control,GNC)分系统应用软件高可信研制保障技术研究。针对自然...基于“嫦娥五号”(Chang’E-5,CE-5)任务高安全性、高可靠性、高复杂度、高自主性的功能以及高实时性、强时序性的需求,开展了导航、制导与控制(Guidance,Navigation and Control,GNC)分系统应用软件高可信研制保障技术研究。针对自然语言需求定义方式无法精确描述一些关键复杂时序的问题,在需求分析阶段建立了基于时序安全性属性描述的形式化建模语言模型验证技术,保证了系统时序的安全性;针对人工走查难以发现的代码深层次脆弱性缺陷,在设计编码阶段结合飞行任务剖面提取了程序切片,提高了源代码缺陷定位效率,保障了编码的规范性与软件构件的功能正确性;针对复杂软件的海量测试用例无法快速执行的问题,在确认测试阶段,研究了基于状态图和序列图的测试用例生成方法,搭建了一键测试的自动测试系统,实现了海量测试用例的快速自动执行,有效提升了测试效率与测试覆盖性。通过各阶段地面仿真实验和在轨飞行试验验证,表明所提出的高可信软件研制保障技术方法有效可行。展开更多
The Tianwen-1 probe,used in China’s first Mars exploration mission,features multiple flight phases,numerous spatial pointing constraints,and complex working modes.During the braking and capture process,it faces chall...The Tianwen-1 probe,used in China’s first Mars exploration mission,features multiple flight phases,numerous spatial pointing constraints,and complex working modes.During the braking and capture process,it faces challenges such as uplink or downlink command delay,unique capture window,post-control“occultation”,short-time significant change in speed increment,and interference caused by low-frequency and low-damping solid–liquid flexible coupling oscillations.Therefore,high reliability,high autonomy,and high precision are required for the braking and capture process.As the executor of braking and capture control,the GNC(guidance,navigation,and control)subsystem of the orbiter employs an online orbit control strategy reconstruction method based on arc loss compensation to realize high reliability,the main engine anomaly recognition and a seamless switching scheme to realize high autonomy,and the attitude–orbit coupling control algorithm with thrust direction compensation to realize high-precision speed increment control.According to the on-orbit flight validation of the Tianwen-1 probe,the GNC subsystem of the orbiter has completed the braking and capture control task reliably and autonomously with millimeter-per-second-level accuracy,effectively ensuring the successful execution of subsequent landing and patrol tasks.This paper analyzes the online orbit control strategy reconstruction method,anomaly recognition and seamless switching method,and thrust vector control method of the braking and capture process and offers valuable insights for future interplanetary exploration flight control.展开更多
文摘基于“嫦娥五号”(Chang’E-5,CE-5)任务高安全性、高可靠性、高复杂度、高自主性的功能以及高实时性、强时序性的需求,开展了导航、制导与控制(Guidance,Navigation and Control,GNC)分系统应用软件高可信研制保障技术研究。针对自然语言需求定义方式无法精确描述一些关键复杂时序的问题,在需求分析阶段建立了基于时序安全性属性描述的形式化建模语言模型验证技术,保证了系统时序的安全性;针对人工走查难以发现的代码深层次脆弱性缺陷,在设计编码阶段结合飞行任务剖面提取了程序切片,提高了源代码缺陷定位效率,保障了编码的规范性与软件构件的功能正确性;针对复杂软件的海量测试用例无法快速执行的问题,在确认测试阶段,研究了基于状态图和序列图的测试用例生成方法,搭建了一键测试的自动测试系统,实现了海量测试用例的快速自动执行,有效提升了测试效率与测试覆盖性。通过各阶段地面仿真实验和在轨飞行试验验证,表明所提出的高可信软件研制保障技术方法有效可行。
基金supported by the National Natural Science Foundation of China(Grant No.11672126).
文摘The Tianwen-1 probe,used in China’s first Mars exploration mission,features multiple flight phases,numerous spatial pointing constraints,and complex working modes.During the braking and capture process,it faces challenges such as uplink or downlink command delay,unique capture window,post-control“occultation”,short-time significant change in speed increment,and interference caused by low-frequency and low-damping solid–liquid flexible coupling oscillations.Therefore,high reliability,high autonomy,and high precision are required for the braking and capture process.As the executor of braking and capture control,the GNC(guidance,navigation,and control)subsystem of the orbiter employs an online orbit control strategy reconstruction method based on arc loss compensation to realize high reliability,the main engine anomaly recognition and a seamless switching scheme to realize high autonomy,and the attitude–orbit coupling control algorithm with thrust direction compensation to realize high-precision speed increment control.According to the on-orbit flight validation of the Tianwen-1 probe,the GNC subsystem of the orbiter has completed the braking and capture control task reliably and autonomously with millimeter-per-second-level accuracy,effectively ensuring the successful execution of subsequent landing and patrol tasks.This paper analyzes the online orbit control strategy reconstruction method,anomaly recognition and seamless switching method,and thrust vector control method of the braking and capture process and offers valuable insights for future interplanetary exploration flight control.
