1 Ariane 5 1 Ariane 5 Flight 501 1 2 History 2 3 Why Ariane - - PowerPoint PPT Presentation

1 ariane 5
SMART_READER_LITE
LIVE PREVIEW

1 Ariane 5 1 Ariane 5 Flight 501 1 2 History 2 3 Why Ariane - - PowerPoint PPT Presentation

1 Ariane 5 1 Ariane 5 Flight 501 1 2 History 2 3 Why Ariane 5? 3 Why Ariane 5? Program initiated in 1987 3 Why Ariane 5? Program initiated in 1987 Evolutive 3 Why Ariane 5? Program initiated in 1987


slide-1
SLIDE 1

1

slide-2
SLIDE 2

Ariane 5

1

slide-3
SLIDE 3

Ariane 5

Flight 501

1

slide-4
SLIDE 4

2

slide-5
SLIDE 5

History

2

slide-6
SLIDE 6

3

slide-7
SLIDE 7
  • Why Ariane 5?

3

slide-8
SLIDE 8
  • Why Ariane 5?
  • Program initiated in 1987

3

slide-9
SLIDE 9
  • Why Ariane 5?
  • Program initiated in 1987
  • Evolutive

3

slide-10
SLIDE 10
  • Why Ariane 5?
  • Program initiated in 1987
  • Evolutive
  • Now number one world luncher

3

slide-11
SLIDE 11

4

slide-12
SLIDE 12

4

slide-13
SLIDE 13

5

slide-14
SLIDE 14

Costs

5

slide-15
SLIDE 15

Costs

  • 130 000 000 € / 10 000 kg

5

slide-16
SLIDE 16

Costs

  • 130 000 000 € / 10 000 kg
  • US$370 million

5

slide-17
SLIDE 17

6

slide-18
SLIDE 18

What happened?

6

slide-19
SLIDE 19

7

slide-20
SLIDE 20

7

slide-21
SLIDE 21

8

slide-22
SLIDE 22

Architecture

8

slide-23
SLIDE 23

Inertial Platform

Architecture

8

slide-24
SLIDE 24

IGC 2 Inertial Platform

Architecture

8

slide-25
SLIDE 25

IGC 2 IGC 1 Inertial Platform

Architecture

8

slide-26
SLIDE 26

IGC 2 IGC 1 Inertial Platform OBC 2

Data Bus

Architecture

8

slide-27
SLIDE 27

IGC 2 IGC 1 Inertial Platform OBC 2 OBC 1

Data Bus

Architecture

8

slide-28
SLIDE 28

9

slide-29
SLIDE 29

Chronology

9

slide-30
SLIDE 30

Chronology

  • H0 + 37 : Trajectory angle > 20°

9

slide-31
SLIDE 31

Chronology

  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation

9

slide-32
SLIDE 32

10

slide-33
SLIDE 33

10

slide-34
SLIDE 34
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation

11

slide-35
SLIDE 35
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!

11

slide-36
SLIDE 36

12

slide-37
SLIDE 37
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!

12

slide-38
SLIDE 38
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!
  • Brutal Nozzle Inclination

12

slide-39
SLIDE 39

13

slide-40
SLIDE 40

Ariane 5 - Vulcain 2

13

slide-41
SLIDE 41

14

slide-42
SLIDE 42
  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!

14

slide-43
SLIDE 43
  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!
  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations which were

misinterpreted.

14

slide-44
SLIDE 44

15

slide-45
SLIDE 45
  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations, which were

misinterpreted.

  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!

15

slide-46
SLIDE 46
  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations, which were

misinterpreted.

  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • Solid Rocket Booster Separation
  • Self destruction!
  • IGC 2 sends a sequence of bits which meant

IGC failure

15

slide-47
SLIDE 47

16

slide-48
SLIDE 48
  • IGC 2 sends a sequence of bits which

meant IGC failure

  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations, which were

misinterpreted.

  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • ....
  • Self destruction!

16

slide-49
SLIDE 49
  • IGC 2 sends a sequence of bits which

meant IGC failure

  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations, which were

misinterpreted.

  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • ....
  • Self destruction!
  • IGC 2 shuts down thanks to a software
  • exception. It tries to switch on IGC 1.

16

slide-50
SLIDE 50

17

slide-51
SLIDE 51
  • SRI 2 shuts down thanks to a software
  • exception. It tries to switch on SRI 1.
  • SRI 2 sends a sequence of bits which meant

SRI failure

  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations, which were

misinterpreted.

  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • ....

17

slide-52
SLIDE 52
  • SRI 2 shuts down thanks to a software
  • exception. It tries to switch on SRI 1.
  • SRI 2 sends a sequence of bits which meant

SRI failure

  • OBC gives Nozzle Inclination Order based
  • n IGC2’s informations, which were

misinterpreted.

  • Brutal Nozzle Inclination
  • H0 + 37 : Trajectory angle > 20°
  • ....
  • SRI 1 already down thanks to the

same software exception.

17

slide-53
SLIDE 53

18

slide-54
SLIDE 54

The software failure

18

slide-55
SLIDE 55

The software failure

declare vertical_veloc_sensor: float; horizontal_veloc_sensor: float; vertical_veloc_bias: integer; horizontal_veloc_bias: integer; ... begin declare pragma suppress(numeric_error, horizontal_veloc_bias); begin sensor_get(vertical_veloc_sensor); sensor_get(horizontal_veloc_sensor); vertical_veloc_bias := integer(vertical_veloc_sensor); horizontal_veloc_bias := integer(horizontal_veloc_sensor); ... exception when numeric_error => calculate_vertical_veloc(); when others => use_irs1(); end; end irs2;

18

slide-56
SLIDE 56

19

slide-57
SLIDE 57

The unprotected variable

19

slide-58
SLIDE 58

The unprotected variable

  • 80% maximum charge for the IGC

19

slide-59
SLIDE 59

The unprotected variable

  • 80% maximum charge for the IGC
  • Need to find out which variables to protect

19

slide-60
SLIDE 60

The unprotected variable

  • 80% maximum charge for the IGC
  • Need to find out which variables to protect
  • The HVB variable was not considered

dangerous...

19

slide-61
SLIDE 61

The unprotected variable

  • 80% maximum charge for the IGC
  • Need to find out which variables to protect
  • The HVB variable was not considered

dangerous...

  • ...but the Ariane 5 trajectory data was not

in the IGC’s spec file!

19

slide-62
SLIDE 62

20

slide-63
SLIDE 63

Ariane’s reaction to exceptions

20

slide-64
SLIDE 64

Ariane’s reaction to exceptions

  • Send a sequence of bits on the bus defining

the error

20

slide-65
SLIDE 65

Ariane’s reaction to exceptions

  • Send a sequence of bits on the bus defining

the error

  • Save the context in an EEPROM

20

slide-66
SLIDE 66

Ariane’s reaction to exceptions

  • Send a sequence of bits on the bus defining

the error

  • Save the context in an EEPROM
  • /!\ Shut down the IGC /!\

20

slide-67
SLIDE 67

21

slide-68
SLIDE 68
  • Untreated exceptions are obviously

raised because of a hardware failure...

21

slide-69
SLIDE 69
  • Untreated exceptions are obviously

raised because of a hardware failure...

  • ...but not this time!

21

slide-70
SLIDE 70

22

slide-71
SLIDE 71

The Mistakes

22

slide-72
SLIDE 72

23

slide-73
SLIDE 73

Ariane 4 code Re-use

23

slide-74
SLIDE 74

Ariane 4 code Re-use

  • IGC code was re-used code from Ariane 4

23

slide-75
SLIDE 75

Ariane 4 code Re-use

  • IGC code was re-used code from Ariane 4
  • Software exception caused by a useless

program!

23

slide-76
SLIDE 76

24

slide-77
SLIDE 77

...and one missing test

24

slide-78
SLIDE 78

...and one missing test

  • ...which was not considered useful, because

the ariane 5 trajectory not mentioned in the IGC’s spec file!

24

slide-79
SLIDE 79

25