ETTC'2003 - SEE

mimics from CCS ones. The objective is to be even more independent from the control center
and to validate offline FCPs together with ground control mimics.
4. Because testing is automatic, verifications are restricted to specified properties specified. In
general, only the expected states are specified in procedures and not the forbidden ones. For
instance, it is theoretically possible (though unlikely) that procedure execution leads to an
unwanted on-board reconfiguration which is not seen through specified TM effects. To limit
this risk, ground monitoring are systematically computed and checked. For SPOT5 satellite,
more than 1200 ground monitoring were defined. A strong point of SINUS is to take into
account the same monitoring as the ones checked by the ground control centre.
9. Conclusion
A new technique for the validation of Flight Control Procedures has been introduced for SPOT5
satellite qualification. In order to gain all benefits of this new technique, it was particularly
important to integrate it in our process. This new process was presented in this paper. It has already
enabled to reduce FCP definition and validation cost.
A main characteristic of automatic validation tool is that it is light, easy to use, requiring few
facilities (a laptop running SINUS is sufficient to define and validate a FCP offline).
The main use of this technique is during satellite qualification. But the use in operation is also
important.
Indeed, automatic validation tools improve operational staff reactivity: first to investigate after
satellite anomalies; second to define or adapt and validate FCPs to enable, as soon as possible,
mission recovery.
Another important advantage of the approach is that it leads to a better formalisation of satellite
Command/Control expertise. Operational and testing data are largely reusable for future satellite of
the same product line (HELIOS 2). The difficulty is more organisational than technical : reuse such
as automatic validation require to make existing processes and ways of doing evolve and it is not
always well accepted.
Abréviations
CCS Satellite Ground Control Center (Centre de Contrôle Satellite)
FCP Flight Control Procedure (also called Operational Procedure)
SINUS Satellite Numeric Simulator (Simulateur Numérique Satellite)
TM / TC Telemetry / TeleCommand
Références
[Lloret] Automatic Validation of Operational Procedures
J.C. Lloret, N. Champsavoir. DASIA 2002
[Sinus] Manuel utilisateur du logiciel Sinus, ed 01 rév 1
CNES, réf. C2.MU.0H3.862.CN
9