BepiColombo — Building a robust data management subsystem utilising SpaceWire networks: Missions and applications, long paper

This paper presents the approach used by the BepiColombo data management subsystem and its SpaceWire network to handle system resets following major anomalies and to ensure availability of communication with the payload and platform units. The system autonomy requirements are presented with a discussion on how they drive the robust implementation of the data management subsystem. Two on-board SpaceWire networks are presented accompanied by an overview of the SpaceWire links, the link failure scenarios, and a description of the functions needed to manage the network. The network management functions are mapped to specific nodes in the SpaceWire network which enables the data management subsystem to initialize the network, detect failures, perform recovery actions, ensure network availability for critical nodes; and that the data transmission performance is acceptable with specific protection against excessive data transfer to the on-board computer. The role of each unit in the SpaceWire network and their contribution to the overall data management subsystem is described.