Abstract: A fault identification, isolation and fault recovery system autonomously controls spacecraft operational systems. A fault detection and isolation module monitors the operational systems, identifies faults via such monitoring and attempts to isolate component causing the fault. Isolation may constitute a plurality of hierarchically arranged techniques that enhance speed and maximize the likelihood of identifying a correct hypothesis regarding the actual failure. The fault isolation and fault recovery modules are bounded by a severe fault override module which places the spacecraft operational systems in a safe mode or state. Thus, the override module ensures rapid entry into the safe mode while preventing an erroneous hypothesis serviced by the fault recovery module from driving the system beyond acceptable limits. A high level command processor receives command sequences from remote ground support stations and from the on-board fault recovery module.

Abstract: An autonomous control system supports autonomous operation of the a spacecraft in carrying out mission objective commands. The control system also provides autonomous fault detection, isolation and recovery. Performance problems and anomalies are detected and accounted for in the carrying out mission objectives. A mission manager module analyzes all incoming mission objective commands to verify that sufficient system resources are available and not already dedicated to other pending mission objective commands. A command processor is included to translate acceptable mission objective commands into lower level command sequences for delivery to a flight manager controlling the underlying spacecraft systems. The mission manager reanalyzes all pending mission objective commands whenever unexpected performance or fault conditions are detected. The mission objective commands can be constructed in a hierarchical fashion, with many sequences predefined within the spacecraft.