This work presents the analysis, design and simulation of the
reconfigurable control architecture for the contingency mode of the
MultiMission Platform (MMP). The MMP is a generic service module
currently under design at INPE. Its control system can be switched
among nine main Modes of Operation and other Sub-Modes, according
to ground command or information coming from the control system,
mainly alarms.
The implementation followed the specifications when they were
found, otherwise it was designed. They cover operations from
detumbling after launcher separation and solar acquisition, to
achieving payload nominal attitude and orbital corrections
maneuvers. The manager block of the control system was implemented
as a finite state machine.
The tests are based in simulations with the MatriX/SystemBuild
software. They focused mainly on the worst cases that the satellite
is supposed to endure in its mission, be it during modes or
transitions between modes and submodes. The tests show that the
model used satisfies the specifications.