A Generic Spacecraft FDIR System

Abstract

One of the challenges with implementing a Fault Detection Isolation and Recovery (FDIR) System is the need to accommodate varying telemetry inputs and various fault monitor logic on a spacecraft to spacecraft basis. Creating a customized solution for each spacecraft incurs design, development, coding, validation, and testing costs which are not amortized over multiple spacecraft. A generic FDIR (GFDIR) system which accepts a customizable configuration of telemetry monitoring and evaluation logic allows for an initial development and validation of a generic design which may be re-used on multiple spacecraft where solely the telemetries, input filter characteristics, and evaluation logic are tailored - the underlying code remains the same. Such a system has been developed at Maxar and validated with over 1.5 Mhrs of on-orbit operation on 26 spacecraft. Up to 792 telemetry detectors may feed into up to 384 monitors where each monitor may trip upon a logic. Careful selection of detection telemetries and how they are combined may yield sophisticated FDIR responses, particularly when multiple monitors are combined in a waterfall design. This paper summarizes the design of this GFDIR system and provides some examples of its use.