The Gravity Recovery and Climate Experiment (GRACE) mission is a breakthrough Earth science mission launched in the spring of 2002 that uses satellite-to-satellite tracking (SST) to map the Earth gravity field. In this framework, the non-uniform gravity distribution is inferred using the range change experienced between two satellites. The range change is measured using a microwave K-band ranging system, and non-gravitational forces are accounted for using accelerometer (ACC) data. The vector-offset between the satellite center of mass (CM) and the K-band phase center represents the correction between measured and modeled ranging data. In addition, the offset between the satellite CM and the ACC proof-mass multiplies the attitude angles, rates, and jitter which in turn add spurious signals to the ACC output. For both of these reasons, proper knowledge and control of attitude behavior is vital to successful mission performance. An examination of the GRACE attitude control system (ACS) is presented in this study. The GRACE ACS system is composed of a PD control law, star camera sensing as the knowledge source, cold-gas thrusters as primary actuators, and magnetic torque rods as supplementary actuators. The dependencies inherent in the ACS are inferred using a sensitivity analysis performed on a simulation model of the GRACE science mode ACS. The results from this sensitivity study are applicable to the general controller class of which the GRACE ACS system is an exemplar. In this study, the modeled attitude data quality is most sensitive to star camera measurement noise. It is hypothesized that this is because star cameras are used as the sole knowledge source in the ACS scheme. In contrast, the experimental results associated with magnetometer, thruster, and magnetic torque rod perturbations did not significantly affect attitude quality. However, these perturbations do cause thruster activity to significantly magnify. This results in higher attitude acceleration PSD for the frequency band in which time-variable gravity components are captured. A number of future experiments can be performed to improve both attitude quality performance and frequency-based magnifications. Examples include sensor fusion studies, reaction wheel versus thruster assessment, and gravity field estimation sensitivity in response to attitude quality degradation. / text

A three-rotational degree of freedom attitude control system has been developed for the NASA Jet Propulsion Laboratory’s INSPIRE Project by the Texas Spacecraft Laboratory at The University of Texas at Austin. Using 3D plastic printing manufacturing techniques, a cold gas thruster system was created in order to detumble and maintain the attitude of two 3U CubeSats traveling through interplanetary space. A total of four thruster units were produced, including two engineering designs and two flight units. The units feature embedded sensors and millisecond level thrust control while using an inert, commercially-available refrigerant as a propellant. The thrust, minimum impulse bit, and specific impulse performance of the cold gas units was characterized using a ballistic pendulum test stand within a microtorr vacuum chamber. A heating element was used to change the temperature conditions of the propellant and determine the relationship between temperature and performance. The flight units were delivered in January of 2014 and the INSPIRE satellites are expected to launch in the upcoming year. / text

In this thesis, the kinematic properties of Single Gimballed Control Moment Gyroscopes (SGCMGs) are investigated. Singularity phenomenon inherent to them is explained. Furthermore, existing steering laws with their derivations are given. A novel steering law is developed that may provide singularity avoidance or may be used for quick transition through a singularity with small torque errors. To avoid singularity angular momentum trajectory of the maneuver is to be simulated in advance for the calculation of singularity free gimbal histories. The steering law, besides accurately generating required torques, also pushes the system to follow trajectories closely if there is a small difference between the planned and the realized momentum histories. Thus, it may be used in a feedback system. Also presented are number of approaches for singularity avoidance or quick transition through a singularity. The application of these ideas to the feedback controlled spacecraft is also presented. Existing steering laws and the proposed method are compared through computer simulations. It is shown that the proposed steering law is very effective in singularity avoidance and quick transition through singularities. Furthermore, the approach is demonstrated to be repeatable even singularity is encountered.

Reliability and safety of complex software-intensive systems are proved to be a crucial matter since most of these systems fulfil tasks, where a failure could lead to catastrophic consequences. For example, in space systems such as satellites, a failure could result in the loss of the satellite. Therefore, a certain level of reliability and safety must be assured for such systems to trust the services they provide. Standards set this level and put requirements for the analysis and assurance of these properties using documented evidence. In particular, European Cooperation for Space Standardization (ECSS) standards for space systems require Fault Tree Analysis(FTA) for identifying the causes of system failure and consequently safety hazards, as well as fault trees as evidence for the assurance of reliability and safety. In this thesis, we present a tool supported model-based approach to generate fault tree automatically from an existing system modelling and analysis toolset. CHESS is a system and dependability modelling toolset and integrates Concerto-FLA to enable the support of failure logic analysis. We proposed a model-based transformation from Concerto-FLA to fault tree model and implemented it as an Eclipse plugin in CHESS toolset. A case study is performed in the aerospace domain; more specifically we modelled Attitude Control System (ACS) and automatically generated IEC-61025-compliant fault trees. / AMASS project

In this thesis novel feedback attitude control algorithms and attitude estimation algorithms are developed for a three-axis stabilised spacecraft attitude control system. The spacecraft models considered include a rigid-body spacecraft equipped with (i) external control torque devices, and (ii) a redundant reaction wheel configuration. The attitude sensor suite comprises a three-axis magnetometer and three-axis rate gyroscope assembly. The quaternion parameters (also called Euler symmetric parameters), which globally avoid singularities but are subject to a unity-norm constraint, are selected as the primary attitude coordinates. There are four novel contributions presented in this thesis. The first novel contribution is the development of a robust control strategy for spacecraft attitude tracking maneuvers, in the presence of dynamic model uncertainty in the spacecraft inertia matrix, actuator magnitude constraints, bounded persistent external disturbances, and state estimation error. The novel component of this algorithm is the incorporation of state estimation error into the stability analysis. The proposed control law contains a parameter which is dynamically adjusted to ensure global asymptotic stability of the overall closedloop system, in the presence of these specific system non-idealities. A stability proof is presented which is based on Lyapunov's direct method, in conjunction with Barbalat's lemma. The control design approach also ensures minimum angular path maneuvers, since the attitude quaternion parameters are not unique. The second novel contribution is the development of a robust direct adaptive control strategy for spacecraft attitude tracking maneuvers, in the presence of dynamic model uncertainty in the spacecraft inertia matrix. The novel aspect of this algorithm is the incorporation of a composite parameter update strategy, which ensures global exponential convergence of the closed-loop system. A stability proof is presented which is based on Lyapunov's direct method, in conjunction with Barbalat's lemma. The exponential convergence results provided by this control strategy require persistently exciting reference trajectory commands. The control design approach also ensures minimum angular path maneuvers. The third novel contribution is the development of an optimal control strategy for spacecraft attitude maneuvers, based on a rigid body spacecraft model including a redundant reaction wheel assembly. The novel component of this strategy is the proposal of a performance index which represents the total electrical energy consumed by the reaction wheel over the maneuver interval. Pontraygin's minimum principle is applied to formulate the necessary conditions for optimality, in which the control torques are subject to timevarying magnitude constraints. The presence of singular sub-arcs in the statespace and their associated singular controls are investigated using Kelley's necessary condition. The two-point boundary-value problem (TPBVP) is formulated using Pontrayagin's minimum principle. The fourth novel contribution is an attitude estimation algorithm which estimates the spacecraft attitude parameters and sensor bias parameters from three-axis magnetometer and three-axis rate gyroscope measurement data. The novel aspect of this algorithm is the assumption that the state filtering probability density function (PDF) is Gaussian distributed. This Gaussian PDF assumption is also applied to the magnetometer measurement model. Propagation of the filtering PDF between sensor measurements is performed using the Fokker-Planck equation, and Bayes theorem incorporates measurement update information. The use of direction cosine matrix elements as the attitude coordinates avoids any singularity issues associated with the measurement update and estimation error covariance representation.

Motivée par les besoins du domaine spatial en termes de diagnostic embarqué et d’autonomie, cette thèse s’intéresse aux problèmes de diagnostic, de diagnosticabilité et de diagnostic actif des systèmes hybrides. Un formalisme hybride est proposé pour représenter les deux dynamiques, continues et discrètes, du système. En s’appuyant sur ce modèle, une approche de diagnostic passif est proposée en mariant les techniques des systèmes à événements discrets et des systèmes continus. Un cadre formel pour la diagnosticabilité des systèmes hybrides a également été établi proposant des définitions et des critères pour la diagnosticabilité hybride. Suite à un diagnostic passif ambigu, le diagnostic actif est nécessaire afin de désambiguïser l’état du système. Cette thèse propose donc une approche de diagnostic actif, qui partant d’un état de croyance incertain, fait appel aux propriétés de diagnosticabilité du système pour déterminer la configuration où les fautes peuvent être discriminées. Une nouvelle machine à états finis appelée diagnostiqueur actif est introduite permettant de formaliser le diagnostic actif comme un problème de planification conditionnelle. Un algorithme d’exploration de graphes ET-OU est proposé pour calculer les plans de diagnostic actif. Finalement, l’approche de diagnostic a été testée sur le Système de Contrôle d’Attitude (SCA) d’un satellite de Thales Alenia Space. Le module de diagnostic a été intégré dans la boucle fermée de commande. Des scénarios de faute ont été testés donnant des résultats très satisfaisants. / Motivated by the requirements of the space domain in terms of on-board diagnosis and autonomy, this thesis addresses the problems of diagnosis, diagnosability and active diagnosis of hybrid systems. Supported by a hybrid modeling framework, a passive approach for model-based diagnosis mixing discrete-event and continuous techniques is proposed. The same hybrid model is used to define the diagnosability property for hybrid systems and diagnosability criteria are derived. When the diagnosis provided by the passive diagnosis approach is ambiguous, active diagnosis is needed. This work provides a method for performing such active diagnosis. Starting with an ambiguous belief state, the method calls for diagnosability analysis results to determine a new system configuration in which fault candidates can be discriminated. Based on a new finite state machine called the diagnoser, the active diagnosis is formulated as a conditional planning problem and an AND-OR graph exploration algorithm is proposed to determine active diagnosis plans. Finally, the diagnosis approach is tested on the Attitude Control System (ACS) of a satellite simulator provided by Thales Alenia Space. The diagnosis module is successfully tested on several fault scenarios and the obtained results are reported.