CN109815055A - Satellite program management system and satellite program management method - Google Patents
Satellite program management system and satellite program management method Download PDFInfo
- Publication number
- CN109815055A CN109815055A CN201910058178.4A CN201910058178A CN109815055A CN 109815055 A CN109815055 A CN 109815055A CN 201910058178 A CN201910058178 A CN 201910058178A CN 109815055 A CN109815055 A CN 109815055A
- Authority
- CN
- China
- Prior art keywords
- program
- application
- backup
- satellite
- memory
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000015654 memory Effects 0.000 claims abstract description 62
- 230000008439 repair process Effects 0.000 claims abstract description 21
- 238000012795 verification Methods 0.000 claims description 5
- 238000005259 measurement Methods 0.000 claims 4
- 238000012544 monitoring process Methods 0.000 description 10
- 238000000034 method Methods 0.000 description 9
- 238000003860 storage Methods 0.000 description 8
- 230000006870 function Effects 0.000 description 4
- 230000001965 increasing effect Effects 0.000 description 4
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 230000002159 abnormal effect Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000004458 analytical method Methods 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000002708 enhancing effect Effects 0.000 description 1
- 238000002474 experimental method Methods 0.000 description 1
- 230000014759 maintenance of location Effects 0.000 description 1
- 230000008569 process Effects 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
Landscapes
- Stored Programmes (AREA)
- Techniques For Improving Reliability Of Storages (AREA)
Abstract
本发明提供一种卫星程序管理系统，包括应用存储器，被配置为可读可写，存储应用程序和第一备份应用程序；引导存储器，被配置为只读，存储引导程序和第二备份应用程序；和控制器，控制所述第二备份应用程序修复所述应用程序和/或所述第一备份应用程序，其中，所述引导存储器和所述应用存储器是或非型闪存NOR FLASH。本发明还进一步综合了备份、修复、加载控制、切块等技术手段，大大提高了应用程序存储和加载的可靠性，节省了应用程序开发的工作量。
The present invention provides a satellite program management system, comprising an application memory, which is configured to be readable and writable, and stores the application program and the first backup application program; the boot memory, which is configured to be read-only, stores the boot program and the second backup application program. and a controller to control the second backup application to restore the application and/or the first backup application, wherein the boot memory and the application memory are NOR FLASH. The invention further integrates technical means such as backup, repair, loading control, dicing, etc., which greatly improves the reliability of application program storage and loading, and saves the workload of application program development.
Description
Technical field
The present invention relates to satellite fields, especially satellite program management system and satellite program management method.
Background technique
After satellite computer booting, bootstrap (Boot Loader) automatic running, the hardware for completing computer is initial
Change.Then, the application program on memory is loaded into memory by bootstrap, and hereafter, application program is responsible for managing computer
The specified task with execution.Application program can be the application based on the general-purpose operating system, be also possible to dedicated software systems.
Satellite program management system is responsible for managing boot program, application program and storage equipment.Existing program manager
Formula is divided into backup mode and backup plus simplifies mode.
One, backup mode
Under backup mode, bootstrap is stored on bootstrap memory.Application program and its backup, which are stored in apply, deposits
On reservoir.
After bootstrap completes initialization, boot program loads application program is run into memory.If bootstrap
Can not loading application programs, then the backup of loading application programs.
Under backup mode, if application memory failure, all application programs can not all be loaded, computer system without
Method operation can not restore.
Two, backup, which adds, simplifies mode
In the case where backup plus simplifying mode, bootstrap is stored on bootstrap memory；Application program and its backup are stored in
On application memory；It simplifies application program also to be stored on bootstrap memory, simplifies application program and only support to tie up in application program
Hold the necessary function of system operation.
After bootstrap completes initialization, boot program loads application program is run into memory；If bootstrap
Can not loading application programs, then the backup of loading application programs.If bootstrap can not loading application programs backup, draw
Application program is simplified in the load of lead sequence.
In the case where backup plus simplifying mode, if application memory failure, computer system can only be loaded and be simplified using journey
Sequence supports basic function；Computer system can only issue application data by Satellite Monitoring and Control Centre and be restored, and uplink
Rate is usually very low, therefore resume speed is very slow.
Application program is simplified due to increasing, is also required to increase accordingly a large amount of R&D work.
Programmable read only memory (PROM), Erasable Programmable Read Only Memory EPROM are used on existing satellite computer
(EEPROM) it is used as memory, stores bootstrap and application program.The usual capacity very little of PROM and EEPROM, this just limits it
Using, especially need by it is multiple backup come when improving reliability.Or/no type flash memory (NOR FLASH) is relatively emerging
Memory device, capacity is big, and can be with randow addressing, suitable for storing the application program for needing to load after powering.
Summary of the invention
The technical problem to be solved by the present invention is to improve the reliability of satellite application program, supports quickly to repair and apply journey
Sequence simplifies application development.
In order to solve the above technical problems, the present invention provides a kind of satellite program management system, comprising: application memory, quilt
It is configured to readable writeable, storage application program and the first backup application；Bootstrap memory, is configured as read-only, and storage is drawn
Lead sequence and the second backup application；And controller, control second backup application repair the application program and/
Or first backup application, wherein the bootstrap memory and the application memory are or/no type flash memory (NOR
FLASH)。
Further, the controller, which is configured as executing, repairs operation, comprising: is newly answered with what Satellite Monitoring and Control Centre issued
The application program and/or first backup application are repaired with program；Or with the first backup application reparation
The application program；Or first backup application is repaired with the application program.
Further, the controller is configured as repairing operation described in the instruction execution according to Satellite Monitoring and Control Centre.
Further, the bootstrap memory is set as read-only with hardware jumper, is such as realized by hardware jumper.
Further, the bootstrap be configured according to Satellite Monitoring and Control Centre instruct or according to default loading rule it is automatic
Load one of the application program, first backup application and described second backup application.
Further, it after the default loading rule includes: electric on computers or initialization, loads described using journey
Sequence；When the application checks fail or it is resetted within a preset time more than preset times, then it is standby to load described first
Part application program；When first stand-by program verifies failure or it is resetted within a preset time more than preset times, load
Second backup application；When second stand-by program verify failure or its to reset within a preset time be more than default secondary
When number, the application program is loaded.
Further, the application program, first backup application, second backup application all in accordance with
Same way cutting is program block；The program block of the application program and the program block of first backup application are one by one
Program block in corresponding and identical and described second backup application corresponds and identical；The bootstrap choosing
It selects a school and tests successful described program block assembly program is made, the assembly program is identical as the application program；The guidance journey
Sequence loads the assembly program.
The present invention also provides a kind of satellite program management methods, comprising: storage bootstrap and the second backup application
To bootstrap memory；Application program and the first backup application are stored to application memory；With the second backup program
The application program and/or first backup application are repaired, wherein the bootstrap memory and the application memory
It is or/no type flash memory (NOR FLASH).
Further, the satellite program management method, further includes: the new application issued with Satellite Monitoring and Control Centre
Repair the application program and/or first backup application；Or it is answered described in the first backup application reparation
Use program；Or first backup application is repaired with the application program.
Further, the satellite program management method, further includes: after electric on computers or initialization, load institute
State application program；Application checks failure or its resets within a preset time more than after preset times, described in load
First backup application；Failure is verified in first stand-by program or it is resetted within a preset time more than preset times
Afterwards, second backup application is loaded；Failure is verified in second stand-by program or it resets surpass within a preset time
After crossing preset times, the application program is loaded.
In conclusion satellite program management system provided by the invention and satellite program management method, combine backup, repair
The technological means such as multiple, load control, stripping and slicing, substantially increase the reliability of application program storage and load, save using journey
The workload of sequence exploitation.
Detailed description of the invention
Fig. 1 is a kind of system construction drawing of embodiment of satellite program management system of the invention；
Fig. 2 is the program stripping and slicing and assembling figure of satellite program management system of the invention.
Specific embodiment
A specific embodiment of the invention is described in further details with reference to the accompanying drawing.Following embodiment will be helpful to
Those skilled in the art further understands the present invention, but the invention is not limited in any way.It should be pointed out that ability
For the those of ordinary skill in domain, without departing from the inventive concept of the premise, several variations and modifications can also be made.These
Belong to protection scope of the present invention.
One, the backup and reparation of application program
Satellite program management system guarantees the reliability of program storage by the method for backing up and repairing.
In one embodiment, as shown in Figure 1, satellite program management system of the invention includes: bootstrap memory 1, quilt
It is configured to read-only, storage bootstrap 50 and the second backup application 53；Application memory 2, is configured as readable writeable, deposits
Store up application program 51 and the first backup application 52；With controller 3, it is configured as being repaired with second backup application 53
The multiple application program 51 and/or first backup application 52, wherein the bootstrap memory 1 and the application are deposited
Reservoir 2 is or/no type flash memory (NOR FLASH).
Application program 51, the first backup application 52, the second backup application 53 are identical programs, pass through storage three
The identical program of part, avoids single program exception.
Two memories, bootstrap memory 1 and application memory 2 are set, three parts of identical programs are distributed to two storages
In device, the extremely caused program exception of single memory is avoided.
Bootstrap memory 1 is arranged to read-only, and the program that can protect thereon is not modified.
Application memory 2 be it is writeable, if controller 3 detects the program exception on application memory 2, deposited with guidance
Program on reservoir 1 repairs the program on application memory 2, such as directly replicates a normal procedure.Since the reparation operates
The data on satellite are only used, may be implemented quickly to repair, the slow transmission from satellite control center 4 to satellite is avoided and repairs
The process of data.
Or/no type flash memory (NOR FLASH) is relatively emerging memory device, and capacity is big, and can with randow addressing,
Suitable for storing the application program for needing to load after powering.Or/no type flash memory is applied to satellite technology field, then can greatly be increased
The memory capacity of strong satellite application program.
In one embodiment, the controller 3, which is configured as executing, repairs operation, comprising: satellite control center 4 issues
New application repair the application program 51 and/or first backup application 52；Or it is answered with first backup
The application program 51 is repaired with program 52；Or first backup application 52 is repaired with the application program 51.
More restorative procedures are supported in the embodiment, further increase the reliability for repairing operation.
Also, even if the application program on satellite can also can be uploaded by Satellite Monitoring and Control Centre 4 and newly be answered with reliability service
With in program to satellite, to increase new program function or modification bugs.
In one embodiment, controller 3 is configured as repairing behaviour described in the instruction execution according to Satellite Monitoring and Control Centre 4
Make.Satellite Monitoring and Control Centre 4 can further increase the reliability for repairing operation with the program repair process on manual intervention satellite.
In one embodiment, it is read-only for the bootstrap memory 1 being arranged with hardware jumper.Hardware setting is read-only to protect
The reliability of program storage will not be further increased by mistake write-in or bug patch by hindering bootstrap memory 1.
Two, application program loads
Satellite program management system improved by successively attempting to load each application program or its backup load at
Function probability.
In one embodiment, the bootstrap 50 is configured as loading the application program 51, first backup
One of application program 52 and second backup application 53.
Because bootstrap can choose normal procedure load therein, thus program there are more parts of identical programs
It loads success rate to rise, reliability enhancing.
In one embodiment, the bootstrap 50 is configured as: after electric on computers or initialization, described in load
Application program 51；When the application program 51 verifies failure or it is resetted within a preset time more than preset times, then load
First backup application 52；When first stand-by program 52 verify failure or its to reset within a preset time be more than default secondary
When number, the second backup application 53 is loaded；When second stand-by program 53 verify failure or its reset within a preset time
When more than preset times, the application program 51 is loaded.
Bootstrap 50 is by specified loading sequence, and circulation is attempted to load each program, until loading successfully.In this way may be used
Effectively to avoid single program load abnormal.
Three, application program stripping and slicing and assembling
The success rate of the reliability and load that can further be stored after application program stripping and slicing with assembling.
In one embodiment, the application program 51, first backup application 52, second back-up application
Program 53 is program block all in accordance with same way cutting；The program block of the application program 51 and the first back-up application journey
The program block of sequence 52 corresponds and the program block in identical and described second backup application 53 corresponds and phase
Together；Assembly program, the assembly program and the application is made in the successful described program block of 50 selection check of bootstrap
Program 51 is identical；The bootstrap 50 loads the assembly program.
If not stripping and slicing, a program can only complete verification success or complete verification failure.If stripping and slicing, one
A program only has abnormal block check failure, and other pieces all verify successfully.Since each piece there are corresponding multiple backups, go back in this way
It is that very high probability assembles normal application program.Therefore this method, can further enhance system counter memory and locally deposit
Store up the ability of block exception and the ability of success loading application programs.
For example, in one embodiment, as shown in Fig. 2, application program 51, the first backup application 52 and the second backup
Application program 53 is divided into identical program block A, B, C, saves respectively on a memory.Bootstrap 50 to each program block into
Row verification, and be grouped together the block that verification passes through to form a complete application program.Such as by the journey of application program 51
Sequence block A, the block B in the first backup application 52, the block C in the second backup application 53, are combined into a complete journey
Sequence.It should be noted that each program is also segmented into two pieces, four pieces or four pieces or more in the embodiment.
In one embodiment, Satellite Monitoring and Control Centre 4 can further be increased with the program loading procedure on manual intervention satellite
The reliability for adding program to load.
Four, satellite program management method
In one embodiment, satellite program management method of the invention, comprising: storage bootstrap and the second backup are answered
With program to bootstrap memory；Application program and the first backup application are stored to application memory；With second backup
The application program and/or first backup application are repaired with program, wherein the bootstrap memory and the application
Memory is or/no type flash memory (NOR FLASH).
In one embodiment, satellite program management method of the invention, comprising: newly answered with what Satellite Monitoring and Control Centre issued
The application program and/or first backup application are repaired with program；Or with the first backup application reparation
The application program；Or first backup application is repaired with the application program.
In one embodiment, satellite program management method of the invention, comprising: after electric on computers or initialization,
Load the application program；Fail in the application checks or it is resetted within a preset time more than after preset times, adds
Carry the first backup application；Failure is verified in first stand-by program or it is resetted within a preset time more than preset times
Afterwards, second backup application is loaded；Failure is verified in second stand-by program or it resets surpass within a preset time
After crossing preset times, the application program is loaded.
The preferred embodiment of the present invention has been described in detail above.It should be appreciated that under the teachings of the present invention, this field
Those of ordinary skill many modifications and variations can be made to the present invention.Therefore, all technician in the art are according to this
The design of invention passes through the available technical side of logical analysis, reasoning, or a limited experiment on the basis of existing technology
Case, all should be within the scope of protection determined by the claims.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910058178.4A CN109815055B (en) | 2019-01-22 | 2019-01-22 | Satellite program management system and satellite program management method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910058178.4A CN109815055B (en) | 2019-01-22 | 2019-01-22 | Satellite program management system and satellite program management method |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109815055A true CN109815055A (en) | 2019-05-28 |
| CN109815055B CN109815055B (en) | 2021-12-10 |
Family
ID=66603526
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910058178.4A Active CN109815055B (en) | 2019-01-22 | 2019-01-22 | Satellite program management system and satellite program management method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109815055B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113434208A (en) * | 2021-06-09 | 2021-09-24 | 山东航天电子技术研究所 | Satellite software self-adaptive loading method |
| CN114327659A (en) * | 2021-12-29 | 2022-04-12 | 飞依诺科技(苏州)有限公司 | Equipment starting method and wireless ultrasonic equipment |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1549131A (en) * | 2003-05-06 | 2004-11-24 | ���루����������˾ | A method for repairing computer operating system |
| US20060236198A1 (en) * | 2005-04-01 | 2006-10-19 | Dot Hill Systems Corporation | Storage system with automatic redundant code component failure detection, notification, and repair |
| CN103297482A (en) * | 2012-03-05 | 2013-09-11 | 联想(北京)有限公司 | Information processing method and device |
| CN106598780A (en) * | 2016-11-22 | 2017-04-26 | 深圳中科讯联科技股份有限公司 | System backup and recovery method and device |
| CN108763146A (en) * | 2018-04-24 | 2018-11-06 | 华东计算技术研究所（中国电子科技集团公司第三十二研究所） | High-reliability on-satellite computer based on normally-powered working mode |
| CN108920308A (en) * | 2018-07-16 | 2018-11-30 | 郑州云海信息技术有限公司 | A kind of method, apparatus and computer storage medium of data recovery process |
-
2019
- 2019-01-22 CN CN201910058178.4A patent/CN109815055B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1549131A (en) * | 2003-05-06 | 2004-11-24 | ���루����������˾ | A method for repairing computer operating system |
| US20060236198A1 (en) * | 2005-04-01 | 2006-10-19 | Dot Hill Systems Corporation | Storage system with automatic redundant code component failure detection, notification, and repair |
| CN103297482A (en) * | 2012-03-05 | 2013-09-11 | 联想(北京)有限公司 | Information processing method and device |
| CN106598780A (en) * | 2016-11-22 | 2017-04-26 | 深圳中科讯联科技股份有限公司 | System backup and recovery method and device |
| CN108763146A (en) * | 2018-04-24 | 2018-11-06 | 华东计算技术研究所（中国电子科技集团公司第三十二研究所） | High-reliability on-satellite computer based on normally-powered working mode |
| CN108920308A (en) * | 2018-07-16 | 2018-11-30 | 郑州云海信息技术有限公司 | A kind of method, apparatus and computer storage medium of data recovery process |
Non-Patent Citations (1)
| Title |
|---|
| 许志宏: "面向星载一体化综合电子系统的固态存储技术研究", 《CNKI博士学位论文全文库》 * |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113434208A (en) * | 2021-06-09 | 2021-09-24 | 山东航天电子技术研究所 | Satellite software self-adaptive loading method |
| CN114327659A (en) * | 2021-12-29 | 2022-04-12 | 飞依诺科技(苏州)有限公司 | Equipment starting method and wireless ultrasonic equipment |
| CN114327659B (en) * | 2021-12-29 | 2024-02-20 | 飞依诺科技股份有限公司 | Equipment startup method and wireless ultrasound equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109815055B (en) | 2021-12-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102298529B (en) | Providing silicon integrated code for a system | |
| US6018629A (en) | Multitasking computer system having a boot process rewrite program | |
| JP2006527423A (en) | Computer operation system repair method | |
| JP2003196105A (en) | System for high availability firmware load | |
| CN102830990A (en) | Computer system starting method and computer terminal | |
| TW202207027A (en) | Computer and system bootup method | |
| CN104360952A (en) | A software testing system and method | |
| CN114647455B (en) | A method, device and computer equipment compatible with operating system and network card | |
| CN113934471A (en) | Baseboard management controller of computer system and starting method | |
| CN109189485A (en) | A kind of system starting management of embedded device, operating system configuration method | |
| CN100370749C (en) | Method for Ensuring that the Software Versions of Each Board of a Switch Are Consistent | |
| CN112328358A (en) | Dual-system starting method based on virtual machine and storage medium | |
| CN112905375A (en) | Self-recovery method and device of double-core intelligent ammeter management unit and computer equipment | |
| CN113127035A (en) | Traceable upgrading method based on single chip microcomputer | |
| CN109815055A (en) | Satellite program management system and satellite program management method | |
| WO2015184732A1 (en) | Bootstrap storage method, bootstrap fault recovery method and device, and computer storage medium | |
| US20070101328A1 (en) | Sequencing a single task sequence across multiple operating environments | |
| JPH11514124A (en) | How to load an operating system | |
| CN111124749A (en) | Method and system for automatically repairing BMC (baseboard management controller) system of tightly-coupled high-performance computer system | |
| US9953293B2 (en) | Method for controlling changes of replication directions in a multi-site disaster recovery environment for high available application | |
| US20220229719A1 (en) | Error logging during system boot and shutdown | |
| US8689048B1 (en) | Non-logging resumable distributed cluster | |
| CN107341024B (en) | System upgrading method and system upgrading device | |
| US20060130039A1 (en) | Update control program, update control method, and update control device | |
| CN120010890A (en) | A server management system upgrade method, product, device and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |