IPB

Welcome Guest ( Log In | Register )

45 Pages V  « < 43 44 45  
Reply to this topicStart new topic
Huygens News Thread, News as and when we find it
bobik
post Jan 16 2020, 11:42 AM
Post #661


Member
***

Group: Members
Posts: 233
Joined: 28-October 12
Member No.: 6732



15 years after the event, what do we actually know about the root causes of the loss of Channel A. As far as I know, the results of the investigation announced at that time were never openly released.

Incredibly, this still seems to be one of the most detailed accounts of the incident available in the public domain, many questions remain unanswered:
QUOTE
Arriving at the ESOC main control room full of cautiously hopeful scientists monitoring the incoming data, one couldn’t help notice the unexpectedly stern expressions on the faces of the DWE co-investigators. The cause of their uneasiness was one single bit in the data stream indicating the status of the DWE ultra-stable oscillator in the Channel A receiver. In contrast to all previous checkouts and tests, that bit was not the expected "1" (power on), but rather an incredible "0" (off). Even worse, the ultra-stable oscillator had been intentionally "selected". This had been enabled by a separate toggle switch to designate the DWE unit, rather than the powered internal oscillator, as the receiver’s active local oscillator. Without power to its local oscillator, the receiver was incapable of locking onto the incoming signal from Huygens. All of the Channel A data, including the DWE Doppler measurements, about 350 images from the Descent Imager/Spectral Radiometer (Huygens camera), and smaller pieces of data from other investigations, were lost. As later determined, the command to switch on the ultra-stable oscillator had been omitted from the critical command sequence for the probe relay event. Channel B, which functioned perfectly from beginning to end, saved the Huygens mission. On the Huygens probe side, thankfully, the matching DWE ultra-stable oscillator designated to drive the Channel A radio link was not forgotten. It was selected and powered. Indeed, it performed flawlessly and provided the ultra-stable radio signal necessary for the Earth-based detections.
Go to the top of the page
 
+Quote Post
mcaplinger
post Jan 16 2020, 03:25 PM
Post #662


Senior Member
****

Group: Members
Posts: 2504
Joined: 13-September 05
Member No.: 497



QUOTE (bobik @ Jan 16 2020, 03:42 AM) *
15 years after the event, what do we actually know about the root causes of the loss of Channel A.

http://emits.sso.esa.int/emits-doc/ESTEC/A...l-Functions.pdf

It's not a big mystery, it was just human error, no doubt exacerbated by the complex cross-organizational, international nature of the mission and the fact that the commanding was somewhat arcane and error-prone.


--------------------
Disclaimer: This post is based on public information only. Any opinions are my own.
Go to the top of the page
 
+Quote Post
bobik
post Jan 17 2020, 08:56 AM
Post #663


Member
***

Group: Members
Posts: 233
Joined: 28-October 12
Member No.: 6732



QUOTE (mcaplinger @ Jan 16 2020, 03:25 PM) *

Still no explanation why a (seemingly simple) mistake was not discovered until it was to late. In general, I would say the human operator must be allowed to make mistakes. An intriguing detail given in the above document is the non-latching character of the "USO powered on" command which may played a critical factor in forming the error, however the brief document does not elaborate much on it. A description of the whole command-test pipeline and maybe workplace conditions would be interesting. But probably this has to wait until the 50th anniversary.
Go to the top of the page
 
+Quote Post
mcaplinger
post Jan 17 2020, 04:05 PM
Post #664


Senior Member
****

Group: Members
Posts: 2504
Joined: 13-September 05
Member No.: 497



QUOTE (bobik @ Jan 17 2020, 12:56 AM) *
A description of the whole command-test pipeline and maybe workplace conditions would be interesting.

Don't hold your breath. "Success has a thousand parents but failure is an orphan." And they already documented the useful lessons learned.


--------------------
Disclaimer: This post is based on public information only. Any opinions are my own.
Go to the top of the page
 
+Quote Post
nogal
post Jan 17 2020, 10:41 PM
Post #665


Member
***

Group: Members
Posts: 871
Joined: 15-June 09
From: Lisbon, Portugal
Member No.: 4824



A recently published ESA article on the cause of the Huygens landing rotation: Huygens landing spin mystery solved
Fernando
Go to the top of the page
 
+Quote Post
rlorenz
post Jan 19 2020, 09:56 PM
Post #666


Member
***

Group: Members
Posts: 609
Joined: 23-February 07
From: Occasionally in Columbia, MD
Member No.: 1764



QUOTE (mcaplinger @ Jan 16 2020, 10:25 AM) *
it was just human error, no doubt exacerbated by the complex cross-organizational, international nature of the mission and the fact that the commanding was somewhat arcane and error-prone.


Yes, but Bobik is right, there should have been a more complete and open description of the circumstances and procedures to avoid similar occurrences in future (and IIRC David Southwood, ESA D-SCI at the time said in front of the cameras that the investigation would be published, but it never was). There are a couple of SpaceOPS papers by some of the relevant individuals 2005-2006, but these remarkably fail to mention the commanding error at all. One does note some useful background, setting the context for the missing command, but doesnt discuss the failure as such :

"The Probe Relay critical sequence only required 38 commands to set the proper spacecraft configuration and
enforce the required tracking attitude. However, in order to provide the necessary critical sequence infrastructure
and provide enforcement of the spacecraft state in response to a fault, 107 more commands were added. The
distinction of the Probe Relay critical sequence is its integration of changes to various fault protection algorithms to
achieve full autonomy and complete its objectives even in a fault scenario. The critical sequence was designed with
a “mark and rollback” logic that supported these objectives. This capability allowed the critical sequence to interact
with fault protection and adapt to the different hardware configurations and states deemed necessary by fault
protection."

(Allestad et al., Systems Overview of the Cassini-Huygens Probe Relay Critical Sequence, AIAA 2005-6388)


The guy whose job it was to assemble the PSA commands once told me it was 'headslap' moment, as soon as the telemetry started coming in, he knew what had gone wrong. And on the documentary 'Destination Titan', you can hear Robin Dutta-Roy of the Doppler Wind Experiment asking on the voicenet 'what time was the RUSO to be powered on', so the DWE team (hurt most by the failure) knew pretty quickly too.

As you note above, though, there were lots of interfaces and steps here. When there are singular events like this, it is not always possible to test things in the configuration they are going to be in. So it's easy for such things to be missed, which is why such failures should be documented for the benefit of all. At this point, there's no need for ESA to be bashful, no careers are at stake at this point, Huygens was a success and will always be considered such, warts and all.

Ralph
Go to the top of the page
 
+Quote Post

45 Pages V  « < 43 44 45
Reply to this topicStart new topic

 



RSS Lo-Fi Version Time is now: 28th March 2024 - 04:21 PM
RULES AND GUIDELINES
Please read the Forum Rules and Guidelines before posting.

IMAGE COPYRIGHT
Images posted on UnmannedSpaceflight.com may be copyrighted. Do not reproduce without permission. Read here for further information on space images and copyright.

OPINIONS AND MODERATION
Opinions expressed on UnmannedSpaceflight.com are those of the individual posters and do not necessarily reflect the opinions of UnmannedSpaceflight.com or The Planetary Society. The all-volunteer UnmannedSpaceflight.com moderation team is wholly independent of The Planetary Society. The Planetary Society has no influence over decisions made by the UnmannedSpaceflight.com moderators.
SUPPORT THE FORUM
Unmannedspaceflight.com is funded by the Planetary Society. Please consider supporting our work and many other projects by donating to the Society or becoming a member.