A design method of dual cold sparing system of attitude and orbit control computer

The attitude and orbit control computer system bears in orbit attitude control, orbit control and other tasks. It is one of the most important and most complex systems in the satellite, and is also easiest to conk in all systems. This paper presents a dual cold sparing system of attitude and orbit control computer, which includes the dual switch control module, the dual power management module, the CPU module, and the watchdog module; The architecture of CPU module is “ARM + FPGA”, and the TMR voting module of FPGA vote for the signal in SRAM to correct error, which improves the reliability of the running program in ARM. In normal mode, the backup CPU module is in the state without power, and the dual switch control module detects fault of the host CPU module. When the host CPU module is detected that irreversible fault occurs, the dual power management module switch the power of the host CPU module and the backup CPU module. At the same time, the on-site information when the host CPU module is running and the interrelated parameters of application program, real-time saved by the dual communication RAM module, are used by the backup CPU module to achieve inheritance of control process.