Abstract: The present application provides a three-mode storage method for program blocks based on check, comprising: first dividing the program to be injected into N blocks and checking each block to obtain the first checksum; then injecting the program to be injected and the first checksum twice in the program storage area, and the two injected programs are noted as the main program and the backup program, respectively; dividing the main program into N blocks, and checking each program block to obtain the second checksum during program run; dividing the backup program into N blocks and checking each block to obtain the third checksum; and comparing the checksum, second checksum and third checksum: if the three are consistent, performing no operation; updating the program or checksum and checking again, if the three are inconsistent.

Abstract: A navigation satellite time system and its autonomous recovery method are provided, including a load time system, the load time system is configured to generate and maintain the load time, and the load time system comprises an space borne atomic clock, a time-frequency processing unit and a plurality of load time backups module, the time information of the load time is obtained from the ground station time; the pulse-per-second signals of the load time are generated and maintained by the space borne atomic clock and the time-frequency processing unit; when the time-frequency processing unit fails, the first-level recovery state is triggered: the time-frequency processing unit compares the time information and the pulse-per-second signals reversely output by the multiple load time backup modules to perform load time recovery.

Abstract: The present invention provides an orbit design system for a global carbon inventory satellite, comprising: a long residence unit in the northern hemisphere, configured to enable the global carbon inventory satellite operates in a mid-orbit elliptical orbit, and enable the global carbon inventory satellite to be located above the latitude of the human activity intensive region when it operates to its apogee.

Abstract: The present invention discloses a method for autonomous mission planning of Carbon Satellite, which triggers autonomous mission planning for the satellite when it detects the satellite switching from a shadow area to a light area, comprising: determining planning time sequence, wherein the planning time sequence comprise several time nodes; and then, for each time node, carrying out a prediction of the ground attributes of the sub-satellite point, and setting observation arc segment according to the prediction result; and finally, determining the load power-on-off time sequence according to the observation arc segment.

Abstract: The present application provides a three-mode storage method for program blocks based on check, comprising: first dividing the program to be injected into N blocks and checking each block to obtain the first checksum; then injecting the program to be injected and the first checksum twice in the program storage area, and the two injected programs are noted as the main program and the backup program, respectively; dividing the main program into N blocks, and checking each program block to obtain the second checksum during program run; dividing the backup program into N blocks and checking each block to obtain the third checksum; and comparing the checksum, second checksum and third checksum: if the three are consistent, performing no operation; updating the program or checksum and checking again, if the three are inconsistent.

Abstract: A navigation satellite time system and its autonomous recovery method are provided, including a load time system, the load time system is configured to generate and maintain the load time, and the load time system comprises an space borne atomic clock, a time-frequency processing unit and a plurality of load time backups module, the time information of the load time is obtained from the ground station time; the pulse-per-second signals of the load time are generated and maintained by the space borne atomic clock and the time-frequency processing unit; when the time-frequency processing unit fails, the first-level recovery state is triggered: the time-frequency processing unit compares the time information and the pulse-per-second signals reversely output by the multiple load time backup modules to perform load time recovery.