cubesat architecturefor reliable on-orbit cots parts …

18
C UBE S AT A RCHITECTURE FOR R ELIABLE O N - O RBIT COTS P ARTS U SE Space Micro Inc. Cal Poly CubeSat Developers Workshop April 2021 Dr. Dave Hansen, Dr. Bert Vermeire, Michael Jacox, Dave Strobel www.spacemicro.com 1

Upload: others

Post on 10-Jun-2022

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

CUBESAT ARCHITECTURE FORRELIABLE ON-ORBIT COTS

PARTS USE

Space Micro Inc.Cal Poly CubeSat Developers Workshop

April 2021

Dr. Dave Hansen, Dr. Bert Vermeire, Michael Jacox, Dave Strobelwww.spacemicro.com

1

Page 2: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Outline

ØThe Threat – Space Radiation Effects♦ The Environment♦ Satellites do fail in orbit

ØThe Response ♦ Rad Hard Parts vs. COTS ♦ Hardening Techniques

ØThe Solutions - Case Studies in Radiation Hardening♦ The CubeSat Space Processor (CSP)♦ Alternative approaches

2

Page 3: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

September 18, 1941

With the score tied 0-0 in the 4th inning the broadcast was lost for 15 minutes ...

…when the broadcast resumed, the Pirates had 4 runs.

3

https://eos.org/features/the-geomagnetic-blitz-of-september-1941

vs.

Irate Brooklyn fans found “little satisfaction” with the explanation that sunspots were to blame

Page 4: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Radiation Induced Failures

Radiation has been an issue for satellites since the beginning of the Space Age

4

Telstar I (1962) – First Satellite to fail due to radiation (Total Dose)

Hubble Space Telescope (1990) - Six status monitors fail in the South Atlantic Anomaly

Meteosat (2006) – Satellite enters safe mode after single event upset

Page 5: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

CubeSat Failure Rates2019 Data from Michael Swartwout (St. Louis University)

5

https://sites.google.com/a/slu.edu/swartwout/

CubeSats: historically have very high failure rates; Need cost effective radiation solution.

Page 6: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

SOHO Satellite

Solar protons upset the imager following a solar flare

6

https://sohowww.nascom.nasa.gov/bestofsoho/Movies/flares.html

Ø EIT 195Å ImagerØ Flare

♦ “White” FlashØ Coronal Mass Ejection

♦ “Scratches” on the image

♦ Due to ejected ions (mostly protons)

Page 7: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Space Weather, Volume: 11, Issue: 4, Pages: 169-186, First published: 22 January 2013, DOI: (10.1002/swe.20023)

Distance from Space Micro to San Francisco

Orbit and Radiation

Radiation Belts are More Severe for Navigational Orbits

Page 8: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

1.E-02

1.E-01

1.E+00

1.E+01

1.E+02

1.E+03

1.E+04

1.E+05

0 30 60 90

Rate

Coe

ffic

ient

Inclination (degree)

8000 km4000 km2000 km1000 km500 km

Orbit Severity

Radiation Type and Severity Changes with Orbit

8

1.E-02

1.E-01

1.E+00

1.E+01

1.E+02

1.E+03

1.E+04

1.E+05

0 30 60 90

Rate

Coe

ffic

ient

Inclination (degree)

GEO16000 km8000 km4000 km2000 km500 km

Heavy IonProton

Petersen 1998 IEEE Trans. Nucl. Science

Page 9: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

1.E-02

1.E-01

1.E+00

1.E+01

1.E+02

1.E+03

1.E+04

1.E+05

0 30 60 90

Rate

Coe

ffic

ient

Inclination (degree)

8000 km4000 km2000 km1000 km500 km

How Bad is it?

LEO, MEO – “Mostly” Protons = Lightly IonizingGEO – Heavy Ions = Highly Ionizing

9

GEO

MEOLEO

1.E-02

1.E-01

1.E+00

1.E+01

1.E+02

1.E+03

1.E+04

1.E+05

0 30 60 90

Rate

Coe

ffic

ient

Inclination (degree)

GEO16000 km8000 km4000 km2000 km500 km

Heavy IonProton

Petersen 1998 IEEE Trans. Nucl. Science

Page 10: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Part Selection

10

Part Class Quality / Reliability

Radiation Cost Capability Availability

QMLV –Space Grade

QMLQ – MIL Grade

Enhanced products

Automotive

Commercial

Cost

Cheap

Quality / R

eliability

Low FIT

Screen +Test

RadiationGood Luck!

Rad Hard

Capability

Old Tech

Modern

Availability

Later

Now

Expensive

Architecture can Mitigate Risks of Lower Grade PartsBaumann SEE Symposium 2016

Page 11: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

The Cubesat Space Processor

11

Multiple Systems, Multiple Modes of hardening

Cubesat Space Processor (CSP)

Ø Single board computer♦ Xilinx's Zynq 7020 SoC♦ reconfigurable I/O ♦ 32 Gbit NAND Flash

Ø Small form factor (1U) Ø Radiation-tolerant

C.M. Wilson, Dissertation U. Florida, 2018

Page 12: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

The Case Study

12

Case Study Will Look at Consequences of Different Radiation Hardening Choices

Mitigation

TMRUnhardened

ECC

RH Component

Unhardened

Page 13: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Memory

Ø Bit Errors♦ Manufacturing “Weak” bits♦ Radiation

• Total Dose• Single Events

Ø Device Level Failure♦ Functional Interrupt♦ Latchup

13

Part Class Qual / Rel Radiation Cost Capability Availability“Space Grade” Upscreen Same $10,000 2-10 year

lag Months

Unhardened -- Same $100 Same Days

No Rad-Hard, Modern Memory

Smaller heavy ion threat in LEO/MEO missions

makes device level failure modes less

likely

Page 14: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Memory – The Solutions

14

Hansen et al., 2017 Radiation Effects Data WorkshopAllen et al., 2010 IEEE Trans. Nucl. Sci.

Using Modern Memory Requires Hardening by Architecture

Die

Voter

512 bytes 28 bytesData Check

Voter

Die BCHECC

Ø 95% Memory DensityØ 10-8 better upset rateØ Same Device level effects

Ø 1/3 Memory DensityØ 1/10-5 better upset rateØ Same Device level effects

Ø 1/3 Memory DensityØ 10-8 better upset rateØ 10-6 Device level effects

BCH Error Correction Code (ECC)

Triple Mode Redundancy (TMR)

TMR + ECC

Page 15: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

FPGA

15

Part Class Qual / Rel Radiation Cost Capability Availability

Space Grade QML-VRugedized

1Mrad / No SEL

$20,000-$200,000

Old Technology 6-8 Months

Unhardened -- 30 krad / SEL LET= 15 $2000 Lower power

Better tools Weeks

Device Node SEU Rate Improvement

Virtex-II 130 nm 1.0Virtex-4 90 nm 1.5Virtex-7 28 nm 28.3

UltraScale 20 nm 52.8Virtex -5Q 65 nm 1000

Lee, SAND2017-5703C, “Commercial Field-Programmable Gate Arrays”

Available FPGAs Span a Range of Rad Requirements

Page 16: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

FPGAs – The Solutions

16

Internal Architecture Provides Tunable Hardening but Doesn’t Address Device Level Effects

Ø 3x Resource PenaltyØ 100x better upset rateØ No Device Level Mitigation

Ø Tuneable HardnessØ Trade Upset Rate for

Resource and Dead Time Penalty

Ø No Device Level Mitigation

Internal TMR

Scrubbing

MitigatedUnmitigated

FPGA Layout

M. Wirthlin, et al., SEU Mitigation and Validation of the LEON3 Soft Processor Using Triple ModularRedundancy for Space Processing

Lee, SAND2017-5703C, “Commercial Field-Programmable Gate Arrays”

Li et al., 2013 SEE Symposium

Page 17: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

Watchdog Timer

Ø External to FPGA♦ Monitors FPGA “heartbeat”♦ Resets the processor to an

operational state following a “hang”

Ø Built with Rad-Hard Parts♦ SEL threshold LET=86 MeV cm2/mg♦ Cheaper than Rad-Hard FPGA

17

FPGA Hardness is outsourced to External Circuitry

Mitigated with Watchdog for ARM Cores (Patent Number 7,237,148 plus ReExamination Certificate number RE42,314 C1)

Page 18: CUBESAT ARCHITECTUREFOR RELIABLE ON-ORBIT COTS PARTS …

ConclusionØ The Cubesat Space Processor provides a useful case study in

how to apply architectural hardening to satellite electronicsØ Satellite radiation requirements are highly dependent on the

mission profile♦ LEO – Low dose, proton rich, short duration♦ MEO – High dose, proton rich, long duration♦ GEO – Mid dose, heavy ion rich, long duration

Ø There are a variety of different approaches to achieve circuit hardness♦ ECC♦ TMR♦ Scrubbing♦ Watchdog Timer

Ø The best approach trades reliability, cost and function.

18