CAJ | 학술논문

为了减少对测控通道的占用时间，提高在轨更新过程的安全性和可靠性，提出基于增量链接、并可回滚至更新前状态的星载软件在轨更新方法。通过固定未修改的函数和变量内存空间，降低软件修改前、后内存空间布局的差异，将更新操作归结为对内存空间的写入和删除操作，减少上注补丁数据量，简化星上更新操作过程；针对安全性和可靠性，星上生成更新操作的逆操作补丁用于回滚，提供应对更新出错的回滚策略。试验结果表明，利用该方法进行更新，卫星无需重启，补丁上注时间短，更新操作正确，回滚操作有效，并成功应对各种更新出错情况。
위료감소대측공통도적점용시간，제고재궤경신과정적안전성화가고성，제출기우증량련접、병가회곤지경신전상태적성재연건재궤경신방법。통과고정미수개적함수화변량내존공간，강저연건수개전、후내존공간포국적차이，장경신조작귀결위대내존공간적사입화산제조작，감소상주보정수거량，간화성상경신조작과정；침대안전성화가고성，성상생성경신조작적역조작보정용우회곤，제공응대경신출착적회곤책략。시험결과표명，이용해방법진행경신，위성무수중계，보정상주시간단，경신조작정학，회곤조작유효，병성공응대각충경신출착정황。
A rollback‐able on‐board software upgrade method based on the incremental link was proposed in order to reduce the occupied time of T T&C channel and improve the safety and reliability for on‐board software upgrade process .The method reduced the memory space layout difference between the original and modified software by fixing the memory space of unmodified functions and variables .The uploaded patch size was reduced and on‐board software upgrade process was simplified by attributing the upgrade operations to memory write and read operations .An inverse operation patch was generated for each upgrade operation for rolling back to the previous state , and the corresponding rollback scheme was provided in order to enhance safety and reliability .Experimental results show that the method shortens the time of uploading patches ,performs correct upgrade and rollback functionalities and effectively deals with exceptions without rebooting the satellite .