Mutually Exclusive Design of Control System and Fault Disposal

The thruster need to be switched if some kind of fault in spacecraft control system occurs. Spacecraft thruster switching takes multiple software control cycles to complete, so it can’t be interrupted during execution. The sequence conflict and failure of thruster switching due to crosscoupled occurrence of multiple fault disposals are fully analyzed. A software mutually exclusive design method is presented in this paper for thruster switch failure. Simulation results show that this method is feasible.