| 2.3.17-2-1 PLACEHOLDER |
Phase A |
Phase B |
Phase C |
|
PLACEHOLDER
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-2 PLACEHOLDER |
Phase A |
Phase B |
Phase C |
|
PLACEHOLDER
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-3 Ensure any satellite autonomous DBR function faults will not endanger the satellite |
Phase A |
Phase B |
Phase C |
|
Ensure unintended activation of DBR functions could not possibly result in a compromise or loss of mission.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-4 Ensure no single command, or command sequence, originating from the ground can initiate DBR functions that would place the satellite in an unsafe or potentially hazardous state |
Phase A |
Phase B |
Phase C |
|
Ensure unintended activation of DBR functions could not possibly result in a compromise or loss of mission.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-5 Ensure all autonomous DBR functions can be selectively enabled or disabled by the Ground |
Phase A |
Phase B |
Phase C |
|
Ensure Ground Segment has the capability of modifying or deactivating the satellites response to dead bus events during satellite testing or operations. After a dead bus event, the satellite should default to an ENABLE state for all DBR functions.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-6 Ensure all DBR threshold values are reprogrammable unless justification provided by contractor and accepted by customer |
Phase A |
Phase B |
Phase C |
|
Ensure all DBR threshold values are reprogrammable on orbit unless justification provided by contractor and accepted by customer. The DBR threshold values may or may not be the same as the fault management trigger values. The fault management trigger values can be used to control the order of components/units being turned OFF. The DBR threshold values can be used to control the order of components/units being turn ON during DBR.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-7 Ensure the satellite is capable of autonomous recovery to the primary satellite bus voltage when sufficient solar array power becomes available, or when the battery is sufficiently charged |
Phase A |
Phase B |
Phase C |
|
Ensure power recovery is possible since no component can operate without power.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-8 PLACEHOLDER |
Phase A |
Phase B |
Phase C |
|
PLACEHOLDER
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-9 Ensure telemetry downlink contains sufficient telemetry to determine the state of the satellite |
Phase A |
Phase B |
Phase C |
|
Ensure sufficient telemetry are transmitted to Ground after a dead bus event. Ground needs to know the state of the satellite to determine the optimum path for DBR.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-10 PLACEHOLDER |
Phase A |
Phase B |
Phase C |
|
PLACEHOLDER
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-11 Ensure fault management includes load shed in response to an abnormal bus under voltage event or an abnormally low battery state of charge (SOC) |
Phase A |
Phase B |
Phase C |
|
Ensure various levels of load shed capability depending on battery SOC severity. This is also a fault management item as well as a dead bus recovery item.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-12 Ensure all noncritical loads are latched OFF until Ground commands back to ON |
Phase A |
Phase B |
Phase C |
|
Ensure the satellite is at the minimum power consumption state following a dead bus event.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-13 Ensure fault management includes protecting the battery from an abnormal low battery SOC that drops below a predetermined minimum threshold, and protecting the battery cells from permanent degradation or damage due to over discharge or polarity reversal |
Phase A |
Phase B |
Phase C |
|
Ensure fault management is sufficient to avoid a dead bus occurrence.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-14 Ensure the response to an abnormal bus under voltage event includes all satellite loads categorized as critical are automatically turn off when the bus voltage decreases below their prescribed under voltage threshold voltages and they are automatically turn back on within a prescribed hysteresis voltage that is greater than their under voltage load shed threshold voltage |
Phase A |
Phase B |
Phase C |
|
Ensure an orderly transition from dead bus entry to DBR.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-15 Ensure the satellite is capable of autonomously performing battery charge management when excess power is available that is not required to support the spacecraft critical loads |
Phase A |
Phase B |
Phase C |
|
Ensure autonomous battery charging capability is included in DBR.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-16 Ensure battery charge management includes enabling the battery recovery heaters |
Phase A |
Phase B |
Phase C |
|
Ensure battery charge management considers the battery temperature being sufficiently warm before charging the batteries.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-17 PLACEHOLDER |
Phase A |
Phase B |
Phase C |
|
PLACEHOLDER
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-18 Ensure restoring the satellite to mission operations or performing satellite disposal operations shall only be commanded by the satellite ground segment |
Phase A |
Phase B |
Phase C |
|
Ensure return to payload operation can only be commanded by Ground after a dead bus event.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|
| 2.3.17-2-19 Ensure the satellite is capable of being autonomously re-enabling battery discharge to the main power bus when sufficient charge has been returned to the battery |
Phase A |
Phase B |
Phase C |
|
Ensure the batteries can be autonomously switched to support the main power bus after batteries are sufficient charged.
|
NA
|
NA
|
TOR-2018-00316TOR-2018-00319
|