8
\$\begingroup\$

What additional constraints do we face when designing electronics/microsystems for use in orbit?

What kinds of shielding techniques are employed? Is it common to enclose all electronics in a faraday cage, or are other shielding methods preferred?

How are aerospace grade components tested, and how does their reliability stack up against 'off-the-shelf' parts? Can properly shielded standard components compete from a reliability standpoint?

What types of mechanical support/bracing/damping are used to protect electrical systems during take-off/landing and for the high thermal stress expected?

\$\endgroup\$
3
  • 2
    \$\begingroup\$ Some things are easier in space. Radio transmission between spacecraft is significantly more predictable and "fading" is virtually non-existent. \$\endgroup\$
    – Andy aka
    Commented Apr 21, 2016 at 9:27
  • \$\begingroup\$ Removing the points about specific shielding, reliability statistics and specific mechanical solutions could narrow this question to be viable again IMO. \$\endgroup\$
    – Grebu
    Commented Apr 21, 2016 at 20:06
  • \$\begingroup\$ Grebu the original was flagged as too broad. While I agree with the sentiment, there are very few answers relating specifically to this field - I preferred it more broad as well. Perhaps I'll circle back and reedit in a bit. \$\endgroup\$
    – RYS
    Commented Apr 21, 2016 at 20:08

2 Answers 2

16
\$\begingroup\$

This is what I do! Many, many excellent books have been written on the subject, but as a brief bullet-point list, focused particular on embedded systems for space usage:

  • In general, we use many of the high-reliability design practices learned over many decades of hard-learned lessons from the defense, aviation and even automotive (brake controllers, ABS). This includes methods of fault tolerance (n-redundancy, fail-safe, etc.), rigorous analysis and quality-control of software and hardware, and observance of the many standards written on the subject.(Especially critical if you work for a traditional space environment).

  • For electronics specifically, ionizing radiation and the lack of Earth's magnetosphere is the big one. As gross oversimplification, we can split into two-classes: total-ionizing dose (TID) and single-event effects. Both have mitigations that range from throwing lots of money at specialized hardware, and clever software/design solutions that can mitigate the effects enough in a much cheaper fashion.

  • TID is exactly what it sounds like -- over time, you accumulate damage from ionizing radiation and eventually your semiconductors cease to become semiconductors. The effects vary hugely based on process-size, makeup and many other device-level effects but effects you may see include MOSFET threshold voltage shift -- picture a N-channel MOSFET who's Vt slowly drifts downwards until it is always on. Some incredibly hardened-processes have been developed to support very high dose amounts -- the Jupiter-destined Juno mission has some incredible hardware inside a massive, literal vault.

  • A side-note on TID, since of course radiation-effects are also of interest for terrestrial applications such as nuclear weapons, testing is often done at high and low dose rates. Some semiconductor devices express different results for both -- for example, a paper I read subjected a LDO to both high and low-dose rates. One degraded the Brokaw band-gap circuit, drooping the output voltage over time. The other degraded the beta of the output transistor, reducing the output current over time.

  • Single-event effects can actually also be observed on Earth -- most people are familiar with ECC DDR memories for critical applications, for example. Additionally, most commercial aircraft must factor this in due to their operating altitude being high-enough that high-energy neutrons can cause electronic circuit malfunction. This is popularly referred to as 'bit-flips' -- an energetic particle travels through a circuit, imparting a linear energy-transfer (LET) that may be sufficient to cause a bit-upset (SEU), a latch-up condition (SEL) that leads to high-current draw due to parasitic BJT behavior, MOSFET gate rupture (SEGR) and burn-out (SEB). You could broadly class any event that results in a system failure as a SEFI -- single-event functional interrupt.

  • I'll call out latch-up specifically. There are terrestrial specifications for latch-up that fall under JESD78, but those are not designed for radiation-induced latch-up conditions. The mechanism is similar between the two -- a parasitic NPN structure can be energized in conventional CMOS construction, causing a low impedance path from power to ground to be created. This of course will result in large amounts of currents flowing through a part of the chip that was never designed for it. Remembering the current-densities bond-wires and various portions of the dies are designed for, if this situation is not remedied, that chip will die a fiery death. A common mitigation is an upstream current sensor that reacts to cut off the power supply and remove the latch-up.

  • In terms of software and processors, I distill it down to two major issues. One is protecting volatile memory -- register files, RAM (SRAM/DRAM), etc. It would be unfortunate if your PC register took a SEU and suddenly skipped somewhere else. Second, is protecting non-volatile memory -- your software is useless if it gets corrupted and cannot execute. The usual volatile protection is ECC (SECDED usually) plus scrubbing continuously for errors. For non-volatile, it is much harder -- large quantities of hardened memory is incredibly expensive to purchase, much to the detriment of NASA/ESA science missions. Some folks use n-redundancy, others use natively-hardened technologies like MRAM or FRAM (to a degree, for COTS work) and others pay vendors upwards of six-figures for high-reliability, mission-critical storage.

  • Mechanically, at least in LEO orbit, you're thermal cycling between sun and darkness every 45 minutes. This is in addition to needing to survive the rigors of launch -- my mechanical colleagues have a set of requirements they design too (I believe part of it is GEVS) to make sure we survive the high-G launch of a rocket. They do an impressive amount of analysis and pre-launch testing to make sure we don't become pieces of flotsam on the way up. In assembly, we avoid using lead-free solders and conformal coat all electrical assemblies.

  • Thermally, there's no convection in space. For high-power ICs, the only path for heat transfer is radiation, and conduction. Interesting heat-sink designs must be considered to effectively remove heat from a device using only those two methods. Additionally, testing on the ground becomes hardware because not only do you need a thermal chamber, you need a vacuum chamber as well. Here are some pictures of JPL's TVAC chambers.

  • Working in "new space", where folks aren't building massive GEO/MEO birds that support critical national security or commercial needs, often COTS parts are flown after undergoing testing / analysis on the ground to see how they fare. While one can purchase a flight-ready, several hundred-krad tolerant 74xx00 quad-NAND gate for a few hundred bucks, some folks may test lots of 74LVC00 or similar parts to see how they fare as well. It's all in the amount of risk you're willing to tolerate.

My background is in designing automotive, consumer and industrial electronics, before I entered space work. So, often my thought process is "man, I'm going to use that awesome monolithic, low-power, state of the art part! Oh, wait -- space.". That is usually then replaced by thinking about how discretized, and how minimized I can make that solution for a stable of radiation-tolerant or radiation-hardened components based on knowledge (either from testing, or predictions based on process-technology) of their radiation performance.

Some good books / resources to read:

If this answer picks up more interest, I'll likely swing back around to fill it out / edit it to be cleaner.

\$\endgroup\$
9
  • \$\begingroup\$ This was what I was looking for. I'm interviewing at an aerospace company, so this info is much appreciated for preparation. I look forward to possible edits you may do. \$\endgroup\$
    – RYS
    Commented Apr 21, 2016 at 7:25
  • \$\begingroup\$ +1 Say, have you happened to get a quote (lead time/price) on the ATmegaS128? (rad hard in mil/space versions) In process, but would love to have some info faster. \$\endgroup\$ Commented Apr 21, 2016 at 23:11
  • 1
    \$\begingroup\$ I added some more notes on various aspects of the systems I work on -- haven't done FPGAs yet. @SpehroPefhany I have not quoted that part yet and haven't heard down the grapevine what the pricing would be, but I think rumor had it maxing at four-figures. IIRC though, it's close enough to the COTS ATMega that hopefully system designers can easily dual-footprint or modularize such that they can save money by using the COTS ATMegas for some engineering / test mules, and only use the proto-flow / space-grade ATmegas on the flight vehicles or EDUs. \$\endgroup\$ Commented Apr 21, 2016 at 23:14
  • \$\begingroup\$ @KrunalDesai Thanks, that's my plan- it's that or use something that is prehistoric because flight heritage..<sigh> \$\endgroup\$ Commented Apr 21, 2016 at 23:15
  • 1
    \$\begingroup\$ There’s a few reasons for the relatively low clock speeds. Power dissipation / thermal management is of concern and generally lower clocks will make that easier, all else being equivalent. Second, most of these rad tolerant by design processors are as you said, older and lag behind their commercial brethren significant. In terms of radiation, in some FPGA designs, the propagation delay may increase as the total dosage climbs. Depending on how much margin you had at timing closure, this may present an issue. Closing a 50MHz design w/ 100MHz constraints buys you huge margin. \$\endgroup\$ Commented May 15, 2018 at 8:10
2
\$\begingroup\$

Thermal considerations, mechanical considerations and outgassing if operating in a vacuum, radiation and related upsets and damage, vibration and shock during launch, export controls on devices and documentation. Limited or nonexistent ability to effect repairs or physical upgrades.

\$\endgroup\$
5
  • \$\begingroup\$ Also cosmic radiation I guess. \$\endgroup\$
    – Alper91
    Commented Apr 21, 2016 at 5:51
  • \$\begingroup\$ @Alper91 Yes, all kinds of radiation, depending on the situation. \$\endgroup\$ Commented Apr 21, 2016 at 5:55
  • \$\begingroup\$ Bottom line - just quit \$\endgroup\$
    – user76844
    Commented Apr 21, 2016 at 6:00
  • 1
    \$\begingroup\$ You have to use components with "aerospace" rating. They are about 20 times more expensive than industrial ones. Many component manufacturers plainly do not make components with such ratings. \$\endgroup\$
    – Master
    Commented Apr 21, 2016 at 6:10
  • \$\begingroup\$ Therefore you are very limited with component selection. \$\endgroup\$
    – Master
    Commented Apr 21, 2016 at 6:11

Not the answer you're looking for? Browse other questions tagged or ask your own question.