Spacecraft Monitoring & Control Systems

Transcription

1 Spacecraft Monitoring & Control Systems TSC & CCS - Presentation, Nov

2 SATELLITE CHECKOUT & OPERATIONS SCOE TSC P/L EGSE CCS Unified Monitoring & Control data model procedures displays archives CCS MCS 2017 Terma BV 03/05/2016 2

3 TESTING FOR OPERATIONS 2017 Terma BV 03/05/2016 3

4 NEW TECHNOLOGY Standard compliant: CCSDS/ESA/ECSS TMTC ESA SCOS2000 MIB (6.9++) Both products (CCS and TSC) use same technology Based on QT, a portable SW toolkit for C++ Plugins and drivers for specific mission protocols Customer chooses protocols for a mission New MMI & Features Higher Performance Better PUS Support 2017 Terma BV 03/05/2016 4

5 HISTORY Concept: Compatibility between AIT & Operations: Successful approach in several missions (e.g. SCOS2000, OC, CGS) But: with SCOS2000 and similar maintenance increasingly expensive, becoming unfeasible flexibility not enough for new missions AIT performance not enough for new missions AIT Assuming: ESA will use SCOS2000 for operations until EGS-CC available Primes continue to deliver SCOS2000 compatible MIB Primes & payload suppliers want to work efficiently Decision: develop new compatible products for AIT TSC = single user = Instruments, Payloads & SCOE CCS = multiuser = Satellite Products: TSC for payload CCS for platform Same Technology 2017 Terma BV 03/05/2016 5

6 PORTABLE Automated daily build & test: Immediate download for Windows 32/64 bit (.exe) Linux 64 bit (.rpm) RHEL7 Functional tests run overnight, mostly functional, some user interface. Human-operated test run and recorded 3-monthly. SLES12 Windows: tested with Windows 7 Linux : tested with RHEL7 Other Windows variants work normally, we use 8, 8.1, 10, Server 2008, Server Linux distributions derived from RHEL or SLES supporting RPM should work normally; we or customers also use CentOS, Fedora, SLES12, OpenSUSE, Leap. Windows 7 If you need to use a Debian-derivative, e.g. Ubuntu please contact Terma. Note: some plugins are only available on specific platforms, dictated by 3 rd -party libraries. The main SCOE protocols EDEN & CNC are supported on all platforms Terma BV 03/05/2016 6

7 EASY TO INSTALL & SET UP Simple steps Download (.exe for Windows,.rpm for Linux) Install (CCS also needs database back-end e.g. MySQL) Configure Start Session 2017 Terma BV 03/05/2016 7

8 MODERN USER INTERFACE Based on Qt5 and QML Fluid OpenGL effects Remote desktop support Touch support User can extend animated displays using: AND drag & drop own alphanumeric displays SYN synoptic (schematic) drawings QML powerful scripting language 2017 Terma BV 03/05/2016 8

9 PERFORMANCE High performance is needed for scenarios like: Full satellite checkout with all SCOE connected and many errors reported Low latency response (e.g. events from device) Fast replay & analysis (e.g. onboard mass memory replay) High rate spacecraft interfaces (e.g. SpaceWire) Simple science processing (e.g. Quick Look display) File transfer (e.g. CFDP) X-band & Ku-band High performance applications enabled by: Core TM & TC processing in C++: as fast as we can make it Archiving approach and heartbeat mechanism (ARC) is very fast Current approximate maximum TM performance: 150,000 monitored TM parameter updates/s, with dependencies TM packet/s Bandwidth: monitored TM ~5 Mbit/s, unmonitored ~80 Mbit/s with large packets Current approximate maximum TC performance: TSC 500/s, CCS 100/s, with verification Performance needs often grow during a mission AIT 2017 Terma BV 03/05/2016 9

10 SCIENCE DATA PROCESSING Basic science data processing is possible at very high rates (e.g. multiple SpaceWire) Typically done with TSC, not CCS as part of Instrument EGSE Requires a high-end workstation (e.g. 8 cores) e.g. if instrument has multiple CCD s MATLAB is used for graphing and visualization Does minimal analysis and conversion, mostly for display purposes Dedicated development for the specific instrument data Uses heartbeat mechanism to distribute TM 2017 Terma BV 03/05/

11 ARCHIVE ACCESS CCS5 provides different ways to retrieve: Archive browsers (CCS MMI) can attach LIVE or historically CCS Tools (PART & DART) retrieve and generate reports in different formats TM can be replayed, directly by TOPE command replay, or in RPL session User-written TOPE scripts (::utope::tmprop,::utope::tcprop, etc) Access all properties of a packet, including all the parameters Access objects no longer in memory, including previous sessions Serialize any object (TM, TC, CLTU, TM Frame) RAT (Results Archive Tool) supports archive management, e.g. backup & restore Users can write or adapt own tools, in any language to access ARC ARC index is a standard RDBMS (e.g. MySQL) and raw data are plain files. Schemas are simple and no proprietary tools are used For LIVE data, the system sends out UDP heartbeats whenever new data has arrived The client reads the new data if it wants to (and only as much as it can absorb) The additional load on CCS5 for a new client is only due to what the client retrieves System archive must not be a black hole 2017 Terma BV 03/05/

12 MERGING TMTC DATABASES (MIB) MIB databases may come from different suppliers, arriving at different times, changing Need to merge from different sources (Platform, Payloads, Instruments, EGSE) Drop / load / continue (no need to restart) Online access / view current MIB Clean separation of data from different sources Flexibility: Frequent changes Quick turnaround Avoid manual work 2017 Terma BV 03/05/

13 TEST COVERAGE REPORTING End customers (e.g. ESA) sometimes ask for test evidence, e.g. usage of MIB objects Tests may involve a large number of sessions and large number of objects Some sessions are formally significant, while many sessions are scratch Due to potential data size, selecting and merging has to be very efficient Different missions and companies have different report formats Our system: (Automatically) writes coverage data when sessions stopped or switched Intermediate format is designed for efficient merging Reporting tool merges and creates the overall report Efficient merging of test results, flexible report formats 2017 Terma BV 03/05/

14 TM SIMULATION Inject or format TM, with many options: Inject raw packet data or.. Simulate packet header and use user-specified data as body Add a simulated packet body from MIB definition Simulate specific parameter values Format TM without injecting it Has a variety of applications: Local testing during preparation (e.g. check MIB, Synoptic Pictures) TM production from device inputs TM packet generation (e.g. SCOE HK or Spacecraft HK) Front End, Simulator, HW Device (e.g. MIL FE) TOPE Script acquire.tcl DB1 (internal) Data block processtmpacket TSC TMPAR01 TMPAR02 TMPAR03 TMPAR04 TMPAR05... processtmpacket SYNOPTIC PICTURES SYNOPTIC PICTURES TOPE Script simulate.tcl TOPE Scripts TOPE Scripts Flexible (MIB can change) PUS hdr TM Packet Plugin (send TM) DB2 (spacecraft) distribute 2017 Terma BV 03/05/

15 SIMULATORS & SVF MODE SVF (Software Verification Facility) Covers different kinds of mini checkout system for testing flight software. Often used with a simulator of the environment or missing elements. Simulated time is not always real time! In an SVF the onboard software may not be running in real onboard computer (often includes an emulator). It can stop, start or change speed. SVF mode allows time to Pause & resume Speed up & slow down TSEQ TSEQ SYN SYN SYN TSEQ TSC (SVF Mode) TM Model Calibrate Limit-check TM Params TM Pacets SIM Updates MIB DB Model Params ALIAS.dat OBSW Param Data Pool SCOE Plugin (e.g. EDEN) SIM Control OBT Data Dict Model Params OBSW Param Data Pool set SIM Models Start/ stop/ pause/ resume SIM AVIONICS HW (T)EMU OBSW OBSW Param Data Pool HIL SIM (RTS) System reacts correspondingly TC Verification Script delays Integration possible with common simulation kernels Allows to automate the simulation session Simulation: Real-time Simulated-time Support SVF operation 2017 Terma BV 03/05/

16 IMPROVED MIB & PUS SUPPORT Historically, most TMTC packet definitions were static But SCOS2000 allows some variability (e.g. VPD = nested groups of parameters) Manufacturers using more advanced on board software On board parameter data pool Onboard monitoring services reference onboard parameter ID, MIB defines deduced parameters, but SCOS2000 has limitations Autonomous event-actions Variable packets can be self describing : TYPES OF TMTC PACKET LAYOUT (1) FIXED (2) VARIABLE (3) DYNAMIC i.e. Nested id / value pairs. deduced parameters, (ID comes from packet) N1 N1,1 N2 N1 PID, N1,1 PID, PID, N2 ONBOARD SW PID, N2,1 PID, MISSION MISSION MISSION GROUND SW N2,1 PID, SPECIFIC SPECIFIC SERVICES ALGORITHMS N2,2 N2,2 PID, PID, PID, MISSION MISSION MISSION SPECIFIC SPECIFIC PID, Improved support for Variable Packets & Deduced Parameters Parameters from Variable Packets globally visible Deduced parameters in TC as well as TM Repeat counters can be deduced from packet length, or (de)calibrated CDF_OFFSET allows more flexible TC formatting, e.g. optional parameters SERVICES SERVICES MTL MODEL TM PARAMETERS TC <TIME> TC <TIME> PID, <STATE> TC <TIME> PID, <STATE> TC <TIME> PID, <STATE> TC <TIME> PID, <STATE> PID, <STATE> TC <TIME> PID, <STATE> GENERIC PUS TMTC ENGINE DB MTL TC <TIME> TC <TIME> TC <TIME> TC <TIME> TC <TIME> TC <TIME> GENERIC PUS TMTC ENGINE DATA POOL PID, PID, PID, PID, PID,... PID, FIXED HK DEFS DYNAMIC HK DEFS See MIB Compatibility section of the user manual New MIB fields added where technically justified. SCOS2000 would ignore them Improved support for current & near- future onboard software evolutions 2017 Terma BV 03/05/

17 EGSE AND MCS PROTOCOLS CCS5 supports Pure CCS: packet level e.g. EDEN, C&C, Pure MCS: frame level e.g. NIS, SLE, CORTEX, Both at the same time: Configure either or both A hybrid system allows a framelevel interface to the satellite computer, or ground segment, in parallel with packet-level interface to SCOE Supports CCS MCS Hybrid 2017 Terma BV 03/05/

18 CLTU & FRAMES SUPPORT Telecommand CLTU generation Segmentation & Aggregation ( blocking ) Authentication & encryption (CCSDS & ESA standards) COP1 and source-level TC flow control Control Frames Randomization BCH coding Telemetry frame processing VC filtering Frame gap detection Authentication & decryption (CCSDS standards) Low level access is suited for working with Onboard Computer at frame level (e.g. SVF) Operational Simulators at frame level Very fast TOPE statements Low level coding accessible from TOPE High level use via GSFE (next slides) Frame-level access for operations and for hybrid test rigs 2017 Terma BV 03/05/

19 GROUND SEGMENT FRONT END (GSFE) GSFE high-level interface for frame level protocols Generic core, extensible via drivers Drivers written in [incr TCL] (object-oriented Tcl) and TOPE System is delivered with standard & commercial drivers e.g. CORTEX NIS (SLE with unis package) NDIU Lite Self Test Satellite Simulators Source code of drivers fully visible & very flexible Feasible for end user to write own driver Simple to configure If there is only one ground station - configuration is when CCS is installed. Otherwise use Project settings. Settings hierarchy defines an arbitrary ground-station network one node per connection; choose driver to select protocol. Control is via the Gsfe View user interface GSFE manages a set of ground station interfaces at frame and CLTU level 2017 Terma BV 03/05/

20 EXAMPLE DRIVER CONFIGURATION GSFE allows mixed local and remote connections with different protocols 2017 Terma BV 03/05/

21 HOT REDUNDANCY For high-criticality scenarios Mission Control Critical Tests (e.g. Thermal Vacuum) S-Band Station FAILOVER Server 1 (Active) Server 2 (Standby) PLUGIN PLUGIN CCS server has a sibling redundant server IFMGR TMIDX TCIDX EVIDX SCIDX TSIDX CCS Server IFMGR TMIDX TCIDX EVIDX SCIDX TSIDX CCS Server If server fails, workstations can switch Failure status is displayed, and user decides to switch (deliberately not automatic) Heartbeat from Primary STOPS! Heartbeat from Standby CCS Indexers (IDX) replicate data Information archived in the primary is also archived in the redundant Typically, TM is not replicated, because multiple TM links are supported this can be configured Typically, Event and TC history is replicated Command verification can transfer from primary to redundant server Active server Master WS Standby server LaunchPad Switch Over Server 2! System Switch Over Server 2! Monitor Switch Over Server 2! Simple to configure Hot Redundancy allows fail-over to a standby server 2017 Terma BV 03/05/

22 LICENSING, LEGAL, & PURCHASING Terma IPR - no export restrictions Minimal use of 3 rd -party tools, e.g: Qt 5 (commercial license) Tcl 8.6 (BSD license) Database (MySQL, PostGreSQL, SQLITE) Expert customers & system integrators: License + Warranty (low cost, small quantities) Partner Licensing (reduced cost, larger quantities) End users: Full Turnkey system (add system engineering cost) Warranty ( support) 1 year included in license Subsequent years 20% of license cost Support wiki available to customers with active licenses Minimal Bureaucracy, Quick Support 2017 Terma BV 04/03/

23 SECURITY & QUALITY Enhanced security options available: Select global settings option on installation Permits: locked-down user roles & privileges restricted visibility of TM & TC structure consistent over all workstations in the system Overnight build & test automation: Building for all supported platforms Testing (TOPE-driven & user interfaces) Collection of Quality Metrics (coverage & complexity) Rebuilding & indexing of documentation Permits: Proven level of test coverage Consistency of documentation Pragmatic, efficient, automated approach 2017 Terma BV 04/03/

24 SUMMARY Problem: legacy big systems are out of date Solution: new technology developed to the same interfaces Compatible MIB and TOPE Avoids major culture shocks no new data model easy to learn Realistic for near- and medium- term needs Major performance improvements Interesting functional improvements Flexible plugins (variety of protocols and devices) CCS multi-user client-server system Supports complete team to collaborate Shared databases & results Full test session management Priorities Quick to Install Familiar Adaptable High performance Affordable TSC single-user system Payload & Instrument testing & SCOE controllers High-performance direct device access Simplified session management 2017 Terma BV 04/03/