1、Lessons Learned Entry: 1489Lesson Info:a71 Lesson Number: 1489a71 Lesson Date: 2003-07-01a71 Submitting Organization: LARCa71 Submitted by: Leslie J. JohnsonSubject: Instrument Simulators/Engineering Models Abstract: With the advent of on-orbit reprogrammable remote sensing instruments, the need for
2、 high fidelity hardware capable of executing an identical copy of flight software or firmware for Field Programmable Gate Arrays (FPGA)-based designs to verify and validate flight software changes prior to implementation on orbit has become a necessity. The SAGE III simulator proved itself to be an
3、invaluable tool in expediting instrument development as well as meeting the requirement to verify and validate flight software changes prior to execution during on-orbit operations.Description of Driving Event: With the advent of on-orbit reprogrammable remote sensing instruments, the need for high
4、fidelity hardware capable of executing an identical copy of flight software or firmware for Field Programmable Gate Arrays (FPGA)- based designs to verify and validate flight software changes prior to implementation on orbit has become a necessity. An engineering model or spread system (engineering
5、hardware spread-out on a table) created to support the development for the Halogen Occultation Experiment (HALOE) proved to be an extremely useful tool used to support flight software changes made early in the mission (Upper Atmospheric Research Satellite, 1991). Subsequent flight projects such as t
6、he Stratospheric Aerosol and Gas Experiment (SAGE III) project addressed this requirement directly by adding a statement of work requirement for a deliverable high-fidelity engineering model as part of the program specifically to support on-orbit flight software maintenance and ground-based anomaly
7、troubleshooting. The SAGE III high-fidelity engineering model was developed by Ball Aerospace and Technologies Corporation, the SAGE III instrument prime contractor. The prototype was constructed using flight-design electronics using commercial parts, engineering model mechanisms, and executed ident
8、ical flight software to the flight instrument. The system was integrated using lower fidelity mechanical parts and left over flight hardware from the SAGE II program. Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-Lesson(s) Learned: The high-fidelit
9、y SAGE III simulator proved itself to be an invaluable tool in expediting instrument development as well as meeting the requirement to verify and validate flight software changes prior to execution during on-orbit operations. Specific lessons learned follow: 1. The SAGE III high-fidelity simulator w
10、as used to verify and validate designs prior to committing to a flight hardware build. This approach allowed designers to test their design in a less restrictive environment than required for flight hardware and correct design problems prior to building flight hardware. We believe that this approach
11、 saved time and flight hardware rework.2. The SAGE III high-fidelity simulator facilitated flight software development. SAGE III flight software was developed in parallel with flight hardware using the high fidelity simulator. Significant schedule and costs were saved using this approach because the
12、 hardware and software development was a parallel rather than serial activity.3. Development risk was reduced by testing flight software on engineering hardware rather than flight hardware. This approach avoided the potential situation where critical and high value flight hardware was operated using
13、 unproven flight software. The likelihood of damage to critical flight systems by errant software was avoided using this approach.4. The high fidelity simulator proved to be invaluable during anomaly troubleshooting during integration and test. For instance, the simulator was used to isolate a hardw
14、are problem and to develop a software fix for an interface communications problem that occurred infrequently (two-three times) when the instrument was tested at cold temperatures during thermal vacuum testing. This ability allowed the environmental test program to continue in parallel with the anoma
15、ly investigation and work-around solution development.5. The simulator was used to develop, verify, and validate flight software changes during on-orbit operations. The simulator was needed to work around problems with spacecraft provided data (navigation data and attitude data) and other problems w
16、ith the flight code found during on-orbit operations but not identified during integration and testing.6. The instrument operations team assumed responsibility for primary flight software sustaining engineering during spacecraft integration. Formal training and “behind-the-wheel” operation of the si
17、mulator was performed to ensure the operations team was capable and ready to perform these functions.7. Configuration management of the simulator is required. Particular emphasis should be placed on verifying that the ground simulator configuration and software image match the flight configuration t
18、o the greatest extent possible.Recommendation(s): 1. NASA Announcement of Opportunities for flight instrument development should require that proposals address plans for engineering model development and their approach for on-orbit Provided by IHSNot for ResaleNo reproduction or networking permitted
19、 without license from IHS-,-,-flight software maintenance.2. 3. Project managers should plan and budget engineering model hardware/ high fidelity simulators as part of the instrument development to expedite development and maintain flight software during on-orbit operations.Evidence of Recurrence Co
20、ntrol Effectiveness: N/ADocuments Related to Lesson: Remote sensing experiment implementation: Lessons LearnedMission Directorate(s): a71 ScienceAdditional Key Phrase(s): a71 Configuration Managementa71 Flight Equipmenta71 Ground Equipmenta71 Policy & Planninga71 Risk Management/Assessmenta71 Softwa
21、rea71 Test & Verificationa71 Training EquipmentAdditional Info: Approval Info: a71 Approval Date: 2004-11-18a71 Approval Name: Leslie Johnsona71 Approval Organization: LARCa71 Approval Phone Number: 757-864-9409Provided by IHSNot for ResaleNo reproduction or networking permitted without license from IHS-,-,-