|
Command Loss Timer Resets are part of the CCSDS communications system to spacecraft either in Earth orbit or beyond Earth orbit. The Command Loss Timer Reset, if it is not received in a timely manner by the spacecraft generally forces the spacecraft to engage in safety and self-protection procedures. * Command Loss Timer Reset systems involve both hardware and software, whereas watchdog timers are essentially hardware only affairs. * Most spacecraft have more than one Command Loss Timer Reset for subsystem level safety reasons, with the Voyager craft using at least 7 of these timers. * Technically the Command Loss Timer Reset is a glorified array of Watchdog timers, each with different settings. Overall spacecraft safety is very important for missions of multi-year duration. This means that the Command Loss Timer Reset subsystem has to be used to avoid multiple computer reboot events. Generally speaking, when a computer reboots it decreases the overall safety of the spacecraft for a very brief time. == General concepts == The Command Loss Timer Reset can be used for computer system rebooting, but only when multiple timers have not been reset—like the classical "Dead man's switch" of industrial transport use. Embedded systems need to be inherently self-reliant, as this is fundamentally part of their design. Embedded systems (like those on spacecraft) can't be constantly watched by a human. It is simply not possible to wait for someone to reboot the embedded system if the software or hardware hangs. * Embedded designs, such as robotic spacecraft—are simply not accessible to human operators by any means but command telemetry for 99.9% of their expected mission life. * If spacecraft software or hardware ever hangs, the spacecraft would in essence be permanently disabled. The Command Loss Timer Reset subsystem acts to partly resolve hardware-software problems in Solar System or Earth orbital operating conditions. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Command Loss Timer Reset」の詳細全文を読む スポンサード リンク
|