Fault protection in a component-based spacecraft architecture

As spacecraft become more complex and autonomous, the need for reliable fault protection will become more prevalent. When coupled with the additional requirement of limiting cost, the task of implementing fault protection on spacecraft becomes extremely challenging. The current state-of-the-art Cassini fault protection software, for example, is a testament to the complexity and difficulty of implementing fault protection on spacecraft. This paper describes how domain knowledge about spacecraft fault protection can be captured and stored in a reusable, component-based spacecraft architecture. The spacecraft-level fault protection strategy for a new spacecraft can then be created by composing generic component specifications, each with component-level fault protection included. The resulting fault protection design can be validated by formal analysis and simulation before any costly implementation begins. As spacecraft technology improves, new generic fault protection logic may be added, allowing active improvements to be made to the foundation. Thesis Supervisor: Dr. Nancy G. Leveson Title: Professor of Aeronautics and Astronautics