An approach to the design and implementation of spacecraft attitude control systems

Over 39 years and a long list of missions, the guidance, navigation, and control (GN&C) groups at the Goddard Space Flight Center have gradually developed approaches to the design and implementation of successful spacecraft attitude control systems. With the recent creation of the Guidance, Navigation, and Control Center at Goddard, there is a desire to document some of these design practices to help to ensure their consistent application in the future. In this paper, we will discuss the beginnings of this effort, drawing primarily on the experience of one of the past attitude control system (ACS) groups at Goddard (what was formerly known as Code 712, the Guidance, Navigation, and Control Branch). We will discuss the analysis and design methods and criteria used, including guidelines for linear and nonlinear analysis, as well as the use of low- and high-fidelity simulation for system design and verification of performance. Descriptions of typical ACS sensor and actuator hardware will be shown, and typical sensor/actuator suites for a variety of mission types detailed. A description of the software and hardware test effort will be given, along with an attempt to make some qualitative estimates on how much effort is involved. The spacecraft and GN&C subsystem review cycles will be discussed, giving an outline of what design reviews are typically held and what information should be presented at each stage. Finally, we will point out some of the lessons learned at Goddard

Use of the MATRIXx Integrated Toolkit on the Microwave Anisotropy Probe Attitude Control System

Recent advances in analytical software tools allow the analysis, simulation, flight code, and documentation of an algorithm to be generated from a single source, all within one integrated analytical design package. NASA's Microwave Anisotropy Probe project has used one such package, Integrated Systems' MATRIXx suite, in the design of the spacecraft's Attitude Control System. The project's experience with the linear analysis, simulation, code generation, and documentation tools will be presented and compared with more traditional development tools. In particular, the quality of the flight software generated will be examined in detail. Finally, lessons learned on each of the tools will be shared

Development of a Two-Wheel Contingency Mode for the MAP Spacecraft

In the event of a failure of one of MAP's three reaction wheel assemblies (RWAs), it is not possible to achieve three-axis, full-state attitude control using the remaining two wheels. Hence, two of the attitude control algorithms implemented on the MAP spacecraft will no longer be usable in their current forms: Inertial Mode, used for slewing to and holding inertial attitudes, and Observing Mode, which implements the nominal dual-spin science mode. This paper describes the effort to create a complete strategy for using software algorithms to cope with a RWA failure. The discussion of the design process will be divided into three main subtopics: performing orbit maneuvers to reach and maintain an orbit about the second Earth-Sun libration point in the event of a RWA failure, completing the mission using a momentum-bias two-wheel science mode, and developing a new thruster-based mode for adjusting the inertially fixed momentum bias. In this summary, the philosophies used in designing these changes is shown; the full paper will supplement these with algorithm descriptions and testing results

Using Automation to Improve the Flight Software Testing Process

One of the critical phases in the development of a spacecraft attitude control system (ACS) is the testing of its flight software. The testing (and test verification) of ACS flight software requires a mix of skills involving software, knowledge of attitude control, and attitude control hardware, data manipulation, and analysis. The process of analyzing and verifying flight software test results often creates a bottleneck which dictates the speed at which flight software verification can be conducted. In the development of the Microwave Anisotropy Probe (MAP) spacecraft ACS subsystem, an integrated design environment was used that included a MAP high fidelity (HiFi) simulation, a central database of spacecraft parameters, a script language for numeric and string processing, and plotting capability. In this integrated environment, it was possible to automate many of the steps involved in flight software testing, making the entire process more efficient and thorough than on previous missions. In this paper, we will compare the testing process used on MAP to that used on other missions. The software tools that were developed to automate testing and test verification will be discussed, including the ability to import and process test data, synchronize test data and automatically generate HiFi script files used for test verification, and an automated capability for generating comparison plots. A summary of the benefits of applying these test methods on MAP will be given. Finally, the paper will conclude with a discussion of re-use of the tools and techniques presented, and the ongoing effort to apply them to flight software testing of the Triana spacecraft ACS subsystem

The Space Technology-7 Disturbance Reduction Systems

The Space Technology 7 Disturbance Reduction System (DRS) is an in-space technology demonstration designed to validate technologies that are required for future missions such as the Laser Interferometer Space Antenna (LISA) and the Micro-Arcsecond X-ray Imaging Mission (MAXIM). The primary sensors that will be used by DRS are two Gravitational Reference Sensors (GRSs) being developed by Stanford University. DRS will control the spacecraft so that it flies about one of the freely-floating Gravitational Reference Sensor test masses, keeping it centered within its housing. The other GRS serves as a cross-reference for the first as well as being used as a reference for .the spacecraft s attitude control. Colloidal MicroNewton Thrusters being developed by the Busek Co. will be used to control the spacecraft's position and attitude using a six degree-of-freedom Dynamic Control System being developed by Goddard Space Flight Center. A laser interferometer being built by the Jet Propulsion Laboratory will be used to help validate the results of the experiment. The DRS will be launched in 2008 on the European Space Agency (ESA) LISA Pathfinder spacecraft along with a similar ESA experiment, the LISA Test Package

The Attitude Control System for the Wilkinson Microwave Anisotropy Probe

The Wilkinson Microwave Anisotropy Probe mission produces a map of the cosmic microwave background radiation over the entire celestial sphere by executing a fast spin and a slow precession of its spin axis about the Sun line to obtain a highly interconnected set of measurements. The spacecraft attitude is sensed and controlled using an inertial reference unit, two star trackers, a digital sun sensor, twelve coarse sun sensors, three reaction wheel assemblies, and a propulsion system. Sufficient attitude knowledge is provided to yield instrument pointing to a standard deviation (l sigma) of 1.3 arc-minutes per axis. In addition, the spacecraft acquires and holds the sunline at initial acquisition and in the event of a failure, and slews to the proper orbit adjust orientations and to the proper off-sunline attitude to start the compound spin. This paper presents an overview of the design of the attitude control system to carry out this mission and presents some early flight experience

Restoring Redundancy to the MAP Propulsion System

The Microwave Anisotropy Probe is a follow-on to the Differential Microwave Radiometer instrument on the Cosmic Background Explorer. Sixteen months before launch, it was discovered that from the time of the critical design review, configuration changes had resulted in a significant migration of the spacecraft's center of mass. As a result, the spacecraft no longer had a viable backup control mode in the event of a failure of the negative pitch axis thruster. Potential solutions to this problem were identified, such as adding thruster plume shields to redirect thruster torque, adding mass to, or removing it from, the spacecraft, adding an additional thruster, moving thrusters, bending thrusters (either nozzles or propellant tubing), or accepting the loss of redundancy for the thruster. The impacts of each solution, including effects on the mass, cost, and fuel budgets, as well as schedule, were considered, and it was decided to bend the thruster propellant tubing of the two roll control thrusters, allowing that pair to be used for back-up control in the negative pitch axis. This paper discusses the problem and the potential solutions, and documents the hardware and software changes that needed to be made to implement the chosen solution. Flight data is presented to show the propulsion system on-orbit performance

Mode Transitions for the ST7 Disturbance Reduction System Experiment

The Space Technology 7 Disturbance Reduction System experiment will perform an on-orbit system-level validation of two technologies: a gravitational reference sensor employing a free-floating test mass and a set of colloidal micronewton thrusters. The Disturbance Reduction System is designed to maintain the spacecraft s position with respect to a free floating test mass to less than 10 nm/& over the frequency range of 1 to 30 m= mi paper presents the modes that compose the Disturbance Reduction System spacecraft control as well as the strategy used to transition between modes. A high-fidelity model of the system, which incorporates rigid-body models of the spacecraft and two test masses (18 degrees of freedom), is developed and used to evaluate the performance of each mode and the efficacy of the transition strategy

Microwave Anisotrophy Probe Launch and Early Operations

The Microwave Anisotropy Probe (MAP), a follow-on to the Differential Microwave Radiometer (DMR) instrument on the Cosmic Background Explorer (COBE), was launched from the Kennedy Space Center at 19:46:46 UTC on June 30, 2001. The powered flight and separation from the Delta II appeared to go as designed, with the launch placing MAP well within sigma launch dispersion and with less than 7 Nms of tip-off momentum. Because of this relatively low momentum, MAP was able to acquire the sun within only 15 minutes with a battery state of charge of 94%. After MAP's successful launch, a six week period of in-orbit checkout and orbit maneuvers followed. The dual purpose of the in-orbit checkout period was to validate the correct performance of all of MAP's systems and, from the attitude control system (ACS) point of view, to calibrate the performance of the spacecraft ACS sensors and actuators to maximize system performance. In addition to the checkout activities performed by the MAP team, the other critical activity taking place during the first six weeks after launch were a series of orbit maneuvers necessary to get the spacecraft from its launch orbit out to its desired orbit about L2, the second Earth-Sun Lagrange point. As MAP continues its standard operations, its ACS design is meeting all of its requirements to successfully complete the mission. This paper will describe the launch and early operations summarized above in greater detail, and show the performance of the attitude control and attitude determination system versus its requirements. Additionally, some of the unexpected events that occurred during this period will be discussed, including two events which dropped the spacecraft into its Safehold Mode and the presence of an "anomalous force" observed during each of the perigee orbit maneuvers that had the potential to cause these critical maneuvers to be prematurely aborted

An Anomalous Force on the Map Spacecraft

The Microwave Anisotropy Probe (MAP) orbits the second Earth-Sun libration point (L2)-about 1.5 million kilometers outside Earth's orbit-mapping cosmic microwave background radiation. To achieve orbit near L2 on a small fuel budget, the MAP spacecraft needed to swing past the Moon for a gravity assist. Timing the lunar swing-by required MAP to travel in three high-eccentricity phasing loops with critical maneuvers at a minimum of two, but nominally all three, of the perigee passes. On the approach to the first perigee maneuver, MAP telemetry showed a considerable change in system angular momentum that threatened to cause on-board Failure Detection and Correction (FDC) to abort the critical maneuver. Fortunately, the system momentum did not reach the FDC limit; however, the MAP team did develop a contingency strategy should a stronger anomaly occur before or during subsequent perigee maneuvers, Simultaneously, members of the MAP team developed and tested various hypotheses for the cause of the anomalous force. The final hypothesis was that water was outgassing from the thermal blanketing and freezing to the cold side of the solar shield. As radiation from Earth warmed the cold side of the spacecraft, the uneven sublimation of frozen water created a torque on the spacecraft