The Command and Data Handling (CDH) subsystem is composed of custom-made on-board computers for the satellite. The preliminary design of the CDH is built upon the Iris cubesat. An impact assessment showing the requirements that are new to Li Bus (compared to Iris), potential design changes, their impacts to the system, and new risks (present with proposed changes) are summarized here.
See the Iris CDH design page for the Iris CDH mechanical and electrical design.
The current CDH design is in its flight model phase. Scroll down to UMS-0802 for the flight model design.
The engineering model design (UMS-0586) of the CDH system is derived from the Iris CDH.
The flight model design (UMS-0802) of the CDH system is derived from through testing of the engineering model design (UMS-0586).
The CDH subsystem provides the hardware required to run the flight software (for the onboard computer).
The CDH subsystem model philosophy is shown in Fig. 1.
Fig. 1: CDH Model Philosophy
Engineering Model (EM): Built from the Iris CDH design, with updates dictated by LISSA requirements, on a printed circuit board, such that it mimics the flight model. EM will be used to verify the preliminary design of CDH and identify and fix bugs for the flight model.
Developed in: Phase A
Used in: Phase A and Phase B
EM FlatSat: Built from the CDH EM once all EM testing is completed.
Developed in: Phase C
Used in: Phase C and Phase D
Flight Model (FM): CDH model that will fly to space on the satellite. It will be an updated version of the EM with all bugs fixed.
Developed in: Phase C
Used in: Phase D
FM FlatSat: Built from an extra/backup CDH FM. It will be used for (a) full CubeSat level and subsystem integration tests in Phase D; and (b) flight software development beyond Phase D.
Developed in: Phase D
Used in: Phase D and after launch
The functional block diagram in Fig. 2 shows the overall functions provided by the CDH subsystem.Â
Fig. 2: CDH Functional Block Diagram
The CDH module handles all control computations on the satellite. All hardware is mounted onto a printed circuit board, forming the CDH circuit card assembly. The CDH system block diagram is shown in Fig. 3. Details pertaining to the CDH computer, such as specific components and memory sizes, are defined in the following sections.Â
Fig. 3: CDH System Block Diagram
The CDH hardware consists of the processor that runs the flight software command and control tasks as well as its associated peripherals. The SmartFusion 2 system on a chip (Soc) embeds the ARM processor, FPGA fabric, Control Area Network (CAN), and Serial Peripheral Interface (SPI) modules.
The SoC is responsible for the main functionality of the CDH and is supported by memory chips (FLASH and RAM), an Analog to Digital Converter (ADC), a Real Time Clock (RTC), CAN transceiver, crystal oscillators (XTAL), and DC/DC regulators. Power is provided from the POW subsystem and data is exchanged between CDH, POW, and PLD subsystems over CAN. Communication with the AODCS subsystem is over SPI, and communication with the COMMS subsystem is over RS-485.
The CDH hardware consists of the processor that runs the flight software command and control tasks as well as its associated peripherals. All CDH parts are mounted on the CDH control board, forming the UMS-0586 assembly. The following design is the Engineering Model (EM) which will undergo rigorous functional testing in Phase B and will provide a reference for the future flight model.Â
Fig. 4 shows the electrical interfaces between the CDH control board and other subsystem boards and the hardware block diagram of the CDH, built around the SmartFusion 2 system on a chip (Soc). SoC embeds the ARM processor, FPGA fabric, Control Area Network (CAN), and Serial Peripheral Interface (SPI) modules.
Fig. 4: CDH EM Hardware Block Diagram
Microsemi's SmartFusion2 SoC is the main processing unit, this SmartFusion 2 is an ultra-low power, radiation tolerant SoC, with proven flight heritage [1]. The processing unit contains both a microcontroller subsystem (MSS) containing ARM Cortex-M3 as the hard-core processor and FPGA fabric, both of which are immune to single-event upsets.Â
Flight software will run on ARM Cortex M3, which is a 32-bit processor that can execute 1.25 DMIPS/MHz. Running at 166-MHz, it can execute 207 DMIPS, which is sufficient for performing satellite operations with a high margin. MSS also has a 64 KB embedded SRAM (eSRAM) as the general work memory, which has a Single Error Correction and Double Error Detection (SECDED) feature. As well as a 256 KB embedded nonvolatile memory (eNVM) as the boot Memory. The FPGA fabric provides a highly flexible platform for loading custom IP cores for SPI and CAN. The TQGI144I package allows for thermal expansion of the chip.Â
The CDH also provides 2 MB (16 Mb) of Avalanche's AS3016101 MRAM memory for data processing, and 0.5 MB (4 Mb) of Everspin's MR25H40MDF MRAM for safeguard and system register memory which is intrinsically immune to Single Event Upset (SEU) and qualified under AEC-Q100 [2]. The CDH also provides 2 MB (16 Mb) of Winbond's W25Q16JVZPIQ FLASH memory for in-system programming and storage of updated flight images received over the air, and a 125 MB (1 Gb) of Winbond's W25N01GVZEIG FLASH memory for mass data, logs, and sensor measurement storage.
The RTC is the central timekeeper and has a backup UL-certified coin-cell battery to power the RTC when there is no power supplied through the satellite's power bus. One SPI soft-core in the FPGA fabric will interface with the 8-channel ADC, MRAM, SRAM, flash memory, and RTC.
The parts list for the CDH EM design is shown below, including the part designator matching that on the electrical schematics and a supplier part number.
Note that where possible, the CDH uses automotive grade parts to ensure high reliability. However, the majority of the passive components on the CDH subsystem are commercial or industrial grade parts. Critical components such as the SmartFusion SoC, Everspin's MRAM, Avalanche's MRAM, and both NOR and NAND flash memory are also industrial or commercial grade.Â
Temperature
All parts on the CDH meet the thermal operation and environment minimum and maximum temperature requirements.
Vibration
The CDH design for LiBus is the same as the Iris CDH design which underwent random vibration testing prior to launch. The Iris CDH was tested before and after the full satellite random vibration test and the Iris CDH was fully functional after the vibration test and in space after deployment from the ISS. Given that the LiBus CDH design is identical and manufactured from the same manufacturer, it is expected that the LiBus CDH will also be reliable under launch vibrations.
Radiation
SmartFusion SoC: Tests performed by Microsemi on the SmartFusion2 family of FPGA have shown resilience to single event upsets with no upsets detected [1]. Further, TID testing on SmartFusion2 family in [2] shows that the FPGA remains functional after exposure to TID of 100 krad(Si). Further studies on SmartFusion2 SoC show that the radiation tolerance is in the range of 65 krad(Si) to 80 krad(Si) [3, 4], which is significantly higher than the expected 10 krad(Si)Â dose for LiBus based on the SPENVIS analysis.
Everspin's MRAM: Multiple tests on MRAM part of the MR25H family have shown no SEU, SEL, or other destructive effects [5, 6]. Further, in [6] they show that the MRAM functionally failed at 65 krad(Si) of proton dose, which is significantly higher than the 10 krad(Si) dose expected for LiBus based on the SPENVIS analysis.
Avalanche MRAM: A TID test on Avalanche Technologies' ASV016204 40nm MRAM, which is a similar architecture to the AS3016101 used on the CDH, showed no memory errors or read or write failures [7].
NOR and NAND Flash memory: TID tests by NASA on NOR and NAND flash memory, with radiation dose up to 225 krad(Si), have shown that both NOR and NAND flash memory devices were functional [8]. Further, tests on Winbond W29Q family NAND flash show that they are tolerant to TID radiation of 30 krad(Si) [9].
The BOM for UMS-0586 (CDH EM) board is shown below.
It should be noted that while the material contents of some electrical hardware are unknown, all electrical components will be conformally coated using Arathane 5750 (or equivalent conformal coating material) allowing compliance with outgassing from non-metallic components and hazardous materials that may have not been identified.
The CDH hardware consists of the processor that runs the flight software command and control tasks as well as its associated peripherals. All CDH parts are mounted on the CDH control board, forming the UMS-0802 assembly. The following design is the Flight Model (FM) which is an updated version of the UMS-0586 Engineering Model (EM) with changes that fix any issues identified during Phase B and Phase C testing of UMS-0586.
Fig. 5 shows the electrical interfaces between the CDH control board and other subsystem boards and the hardware block diagram of the CDH, built around the SmartFusion 2 system on a chip (Soc). SoC embeds the ARM processor, FPGA fabric, Control Area Network (CAN), and Serial Peripheral Interface (SPI) modules.
Note: All key hardware (MCU/FPGA, Flash memory, RAM memory, RTC, watchdog, thermistor) on the CDH FM are the same as from the CDH EM. The only new additions are the hardware needed to provide the RS-485 interface. Further, all the interfaces are the same as with the CDH EM (UMS-0586), but this diagram shows all interfaces in more details as the design is finalized in the CDH FM. More details on the hardware are provided below.
Fig. 5: CDH FM Hardware Block Diagram
The Microsemi SmartFusion2 SoC does not natively have the hardware needed for a RS-485 line. Hence, the CDH FM uses two UART to RS-485 converters to allow the CDH to communicate with the star tracker and the communications transceiver. The RS-485 lines for the star tracker and communications transceiver are also different at a hardware level:
Communications RS-485: half duplex Analog Devices Inc. ADM2461EBRWZ
Star tracker RS-485: full duplex Analog Devices Inc. ADM2463EBRWZ
Key changes from UMS-0586 (engineering model) to UMS-0802 (flight model):
Addition of one UART to a half duplex RS-485 module to allow CDH to communicate between its MCU/FPGA and the communications transceiver
Addition of one UART to a full duplex RS-485 module to allow CDH to communicate between its MCU/FPGA and the star tracker
Addition of four ENABLE output pins on the main bus harnessing to allow CDH to enable/disable each reaction wheel in the cluster
Addition of four Chip Select (CS) pins on the main bus harnessing to allow CDH to specifically control each reaction wheel on the shared SPI bus (SPI bus shared between AODCS and four reaction wheels)
Change the single harnessing connector on UMS-0586 to two harnessing connectors: one 34-pin data connector and one 2-pin power connector
Addition of a mounting hole at the center of the board to allow an additional spacer to support the CDH from its center and reduce effects of vibration
Addition of one digital input pin to allow CDH to receive PPS signal (from the GNSS receiver) included in the main bus 34-pin harnessing connector. Note that this connection is only active if the signal's trace is physically jumped/shorted on CDH. For LiBus, this connection will not be shorted/jumped/enabled since the PPS signal from the GNSS is used by the payload avionics and not the CDH
The parts list for the CDH FM design is shown below, including the part designator matching that on the electrical schematics and a supplier part number.
The BOM for UMS-0802 (CDH FM) board is shown below.
It should be noted that while the material contents of some electrical hardware are unknown, all electrical components will be conformally coated using Arathane 5750 (or equivalent conformal coating material) allowing compliance with outgassing from non-metallic components and hazardous materials that may have not been identified.