The radiation environment in space can pose a serious risk to both humans and space systems. Widespread and continuous monitoring of this environment is essential to mitigate risks associated with radiation exposure. Miniaturization and use of commercial-off-the-shelf components have enabled significant advances in space technology. These trends can be leveraged to develop innovative radiation sensing and monitoring technologies. However, dosimeters that can effectively measure radiation levels while minimizing their impact on size, power, mass, and cost are required. Floating gate dosimeters (FGDOSs) possess these characteristics, but rigorous testing is needed to ensure their accuracy in spacecraft applications. In this study, we conducted an extensive characterization campaign for an FGDOS chip using a proton beam, increasing the available information on the sensor. The behavior of the dosimeter with respect to resolution, dose rate, beam energy, total ionizing dose (TID), power consumption, annealing, temperature, and single-event effects (SEEs) was experimentally studied. Notably, we observed a previously unseen phenomenon, which we termed 'frequency surge' (FS). This phenomenon is likely to have implications for the dosimeter's performance under real spacecraft conditions. Our findings show that the dosimeter is able to combine small power consumption with high dose resolution but also highlight the need for testing against other radiation source types and intensities.

@en

This paper introduces an adaptive Convolutional Neural Network (CNN)-based Unscented Kalman Filter for the pose estimation of uncooperative spacecraft. The validation is carried out at Stanford's robotic Testbed for Rendezvous and Optical Navigation on the Satellite Hardware-In-the-loop Rendezvous Trajectories (SHIRT) dataset, which simulates vision-based rendezvous trajectories of a servicer spacecraft to PRISMA's Tango spacecraft. The proposed navigation system is stress-tested on synthetic as well as realistic lab imagery by simulating space-like illumination conditions on-ground. The validation is performed at different levels of the navigation system by first training and testing the adopted CNN on SPEED+, Stanford's spacecraft pose estimation dataset with specific emphasis on domain shift between a synthetic domain and an Hardware-In-the-Loop domain. A novel data augmentation scheme based on light randomization is proposed to improve the CNN robustness under adverse viewing conditions, reaching centimeter-level and 10 degree-level pose errors in 80% of the SPEED+ lab images. Next, the entire navigation system is tested on the SHIRT dataset. Results indicate that the inclusion of a new scheme to adaptively scale the heatmaps-based measurement error covariance based on filter innovations improves filter robustness by returning centimeter-level position errors and moderate attitude accuracies, suggesting that a proper representation of the measurements uncertainty combined with an adaptive measurement error covariance is key in improving the navigation robustness.

@en

This paper evaluates the Single Event Upset (SEU) susceptibility of the NOEL-V processor, a novel and highly modular Intellectual Property (IP) Core by Cobham Gaisler on the Xilinx Kintex Ultrascale SRAM FPGA. The processor is based on the promising RISC-V architecture, an open source Instruction Set Architecture (ISA) that is quickly rising in popularity. In order to characterize the performance of the NOEL-V IP Core in the space radiation environment, the KCU105 development board is used as Device Under Test (DUT) and irradiated with medium and high energy protons. Thanks to the NOEL-V configurability, several versions of the NOEL-V were tested and microarchitectural differences could be exposed. The biggest influence on user logic upsets is observed to be related to the use of an operating system. For a single-core, high-performance configuration, a foreseen in-orbit failure rate of one failure every 395 days is found for for a 51.6° circular orbit at 420 km altitude. Findings indicate that the NOEL-V processor, with the implementation of targeted fault tolerant measures, can be a viable choice for space missions even as soft-core in SRAM FPGA. Due to its modularity, the processor can be used for a multitude of mission types ranging from high performance general-purpose to low-end microcontroller applications. Error Detection And Correction, which is not available in open source versions, will be needed to protect user memory and make sure upsets in caches and Configuration RAM (CRAM) do not lead to a failure of the processor.

@en

The state of Mars' present day atmosphere is integral to forming a complete understanding of its climate, including the possible emergence and evolution of biological life. Investigating atmospheric characteristics at various scales is essential for enabling an effective, holistic understanding of the Martian climate, surface environment and habitability. Additionally, the ionizing radiation environment is one of the main factors impacting surface habitability and atmospheric loss. Long-term exposure to ionizing radiation poses concerns for future human exploration. However, given the sparse and incomplete nature of present environmental datasets, creating sufficiently accurate, detailed and complete models of atmospheric processes and interactions is not feasible. Till now, most investigations of Mars' atmosphere have been limited to orbiters and solitary landers or rovers, which leaves a considerable gap in the ability to acquire datasets with satisfactory surface coverage and spatio-temporal resolution. This paper describes various aspects of a novel science & exploration mission equipped with payloads aimed at the acquisition of these much-needed datasets. The proposed Ultimate Tumbleweed Mission will consist of a swarm of wind-driven mobile impactors with the ability to morph into measurement stations, so as to explore the Martian surface and collect measurements of near-surface meteorological parameters. Following a brief description of the notional mission concept and spacecraft design, we describe the scientific value that can be returned during the mobile and stationary phases of said mission. Datasets from a networked set of Tumbleweed Measurement Stations would enable the refinement of Martian climate and weather models. Through various in-situ measurements, micro- and meso-scale atmospheric phenomena and processes involving interaction between water, dust, and carbon dioxide can be constrained and studied in order to fill existing knowledge gaps. The swarm would help in investigating the ionizing radiation environment on Mars by acquiring direct measurements of flux, absorbed dose, spectral distribution, and angular distribution of various high-energy particles and their secondaries. Atmospheric modulation of incident cosmic rays and solar energetic particles, the nature and abundance of secondary particles, exposures and hazards for electronic and biological systems, and the shielding properties of the Martian regolith as well as natural landscape can be understood further, in order to prepare for future human and robotic exploration missions to the Red Planet. Preliminary formulation of the science case - including a set of candidate instruments - indicates that a network of Tumbleweed Measurement Stations can deliver holistic in-situ characterization of various near-surface atmospheric phenomena as well as the ionizing radiation environment on Mars.

@en

This paper describes the work carried out to extend the NOEL-V platform to include data-level parallelism (DLP) by implementing an integer subset of the RISC-V Vector Extension. The performance and resource utilization efficiency of the resulting vector processor for different levels of DLP (i.e., number of lanes) have been compared to the baseline scalar processor on a Xilinx Kintex Ultrascale field-programmable gate array, employing typical kernels for compute-intensive applications. The role of the memory subsystem has also been investigated, comparing the results obtained with a low-latency and a high-latency main memory. The results show that the speed-up due to the use of the vector pipeline increases with the number of lanes in the vector processor, achieving up to 23.0× the performance of the scalar processor with only 4.3× the resources of the baseline scalar processor. Using an implementation with 32 lanes increases performance even for problem sizes larger than the number of lanes, achieving up to more than 11.7× the performance of the scalar processor with just 1.9× its resource utilization for 128 × 128 matrix multiplications. This work proves that implementations of the selected subset are easily scalable and fit for small-processor implementations in highly constrained space embedded systems.

@en

The Delft University of Technology has been working on Delfi-PQ, a 3 P P ocketQube d eveloped b y Aerospace Engineering students during their education. The satellite, while being only 50x50x178 mm and having a mass of 545 g, shares the same problems and requirements of bigger satellites. This paper presents the design concept, development, and testing of Delfi-PQ to help other teams in their development. All the combined information will help to generate a big picture for institutions to start their own small satellite mission.@en

The last years saw the diffusion of nano, pico and femto satellite missions launched by multiple entities thanks to the launch cost reduction and the electronics miniaturization. Such missions usually present limited capabilities in terms of precise orbit determination and extremely small radar and optical cross-sections. Often these missions carry one or more laser retro-reflectors for precise orbit determination but precise orbital measurements cannot be found in the literature. Miniaturized GNSS receivers are also often carried out but due to the experimental nature of such missions, the reliability and time span of such measurements is limited, leaving radar tracking as the only reliable tracking method. Due to the size of such satellites, the signal-to-noise ratio of such radar measurements is typically low and satellite identification (when launched on ride-share launches with a hundred or more other satellites) proves difficult and time-consuming. Being these very small satellites at the edge of the radar detection capabilities and not providing independent orbit determination means, their position uncertainty could be quite significant, leading to an increased orbit collision perceived risk. With this paper, we present a dedicated small satellite formation, made by multiple nano and pico satellites to evaluate the space surveillance network tracking capabilities and limits. The formation is made by a 3U CubeSat to be deployed as part of a rideshare launch. The satellite would be equipped with multiple means to track it, including a GNSS receiver, a set of multiple laser retro-reflectors, and LEDs for optical, laser, and radar tracking, allowing to characterize also different detection means in terms of capabilities. Such a satellite is made of two independent smaller satellites that can be un-docked in orbit upon command, reducing the satellite size and cross-section. This would push the detection limit for the space surveillance networks starting from an already acquired object and with limited clutter around it. Independent laser and GNSS tracking would allow ground measurement validation and validate position estimations. Further pico-satellites would be deployed by each sub-satellite to further push the detection limits and validate up to which size objects are trackable (still optically, radar and GNSS), thanks to miniaturized GNSS receivers already flown by several other missions. Sub-satellite separation is implemented upon command to ensure the process can be followed and executed at lower altitudes to limit the orbital lifetime of eventually hard-to-track small objects that could worsen the space debris problem. Ground characterization (in terms of optical and radar properties) will be performed, also including polarimetric measurements used to identify the separate satellites. All these technologies together would contribute to creating a unique tool to estimate the tracking capabilities of multiple instruments, specifically tailored for very small objects, the hardest to track, as compared to other characterization activities performed on much bigger objects.@en

This chapter provides an overview of the command and data handling system (CDHS) in small satellites and CubeSats. The chapter presents first analysis of radiation effects, specifically targeted at this subsystem, to justify components and architecture choices. Improvements in radiation testing strategies are also presented, specifically for small satellites. State-of-the-art components are then presented, providing an overview of the current market and the most common architectures. An overview of past and current missions is also presented, providing a clear mapping of the presented state-of-the-art components and architectures to guide future designs. High-level design considerations are also presented to help the reader follow some of the current trends in the sector. This chapter, overall, aims at presenting the most common approaches for the CDHS system and comparing this with traditional satellites, showing where the main differences lay with component selection and testing strategies being the fundamental points driving the architecture choices.

@en

The Earth-Moon system is constantly bombarded by meteoroids of different size and impact speed. Observation of the impacts on the Moon can enable thorough characterization of the Lunar meteoroid flux, which is similar to that of the Earth. While Earth-based Lunar observations are restricted by weather, geometric and illumination conditions, a Lunar-based observation campaign can improve the detection rate and, when observing the Lunar far side, complement in both space and time the observations taken from Earth. The Lunar Meteoroid Impact Observer (LUMIO), one of the two winning concepts of the ESA SysNova Lunar CubeSats for Exploration challenge, is a mission designed to observe, quantify, and characterize the micro-meteoroid impacts on the Lunar far side. It is based on a 12U CubeSat that carries the LUMIO-Cam, a custom-designed optical instrument capable of detecting light flashes in the visible spectrum. The spacecraft is placed on a halo orbit about the Earth–Moon L2 point, where permanent full-disk observation of the Lunar far side can be performed with excellent quality, given the absence of Earth background noise. After passing Phase 0 and an independent feasibility study in the ESA Concurrent Design Facility, the mission has successfully completed its Phase A in March 2021. Although the Phase 0 design of the LUMIO spacecraft was assessed as feasible by the ESA CDF study, a number of critical issues were identified, which have been tackled by the Phase A design. The paper presents the outcome of this Phase A design effort for the LUMIO spacecraft. Particularly relevant changes or updates in the spacecraft design include: a consolidated design of the LUMIO-Cam, with longer baffle for straylight protection; a set of ADCS sensors and actuators with increased redundancy; a combination of Direct-to-Earth communication and inter-satellite link with a mothership in Lunar orbit; use of Earth ranging to complement and validate the current innovative autonomous navigation strategy based on optical observations of the Moon by means of the LUMIO-Cam; re-assessment of the COTS components selection for the power and propulsion systems.

@en

The Lunar Meteoroid Impact Observer (LUMIO) is a CubeSat mission at the Earth-Moon Lagrangian point 2 (L2) designed to observe, quantify, and characterize the meteoroid impacts by detecting their flashes on the Lunar farside. LUMIO can be deployed as one of the payloads in the NASA Commercial Lunar Payload System or from Artemis-2 mission to a low Lunar orbit and to demonstrate autonomous navigation capabilities to reach its operational orbit around the Earth-Moon L2. From there, its scientific mission to map and investigate the spatial and temporal characteristics of meteoroids impacting the Lunar surface will start and is expected to last for one year. LUMIO is a 12U CubeSat including a dedicated camera to monitor impact flashes in the visible and near-infrared spectrum, and also allows estimating the impact of temperature and energy. Optical navigation using the payload camera will also demonstrate increased on-board autonomy and drastically reduced mission costs. Navigation validation will be carried out using standard ground-based radiometric techniques enabled by a miniaturized X-band coherent transponder on-board. LUMIO can also use an inter-satellite link for telemetry and control via a commercial Lunar data relay system, providing a redundant communication system and lowering the need for high-gain ground stations for routine operations. The satellite bus derives from a commercial version designed for Low Earth Orbit and it will feature several improvements to operate in the Lunar environment, including a more advanced thermal control and radiation shielding. Commercial Off-The-Shelf systems will require a radiation screening and this will contribute to maintain the mission budget low and aim at a launch date in 2024.@en

RISC-V is an open and modular Instruction Set Architecture(ISA) which is rapidly growing in popularity in terrestrial applications. This paper presents the place in future space embedded systems ESA's roadmap for RISC-V based processors. In order to satisfy different applications with contrasting requirements in satellite data systems, four different types of processors are identified: 1) General-Purpose (GP) processors for payloads 2) main platform On-Board Computers (OBCs) controllers 3) low-area/low-power microcontrollers (uCs), 4) enhanced payload processors with support for Artificial Intelligence (AI). We also describe the state of the art of the RISC-V software ecosystem, including the currently available hardware platforms, with a focus on developments for space applications and what has already been done in the European Space Industry. Finally, planned activities are presented, with a focus on the role of the European ecosystem.@en

The objective of this paper is to investigate which approach would lead to more reliable CubeSats: full subsystem redundancy or improved testing. Based on data from surveys, the reliability of satellites and subsystems is estimated using a Kaplan–Meier estimator. Subsequently, a variety of reliability models is defined and their maximum likelihood estimates are compared. A product of a Lognormal distribution addressing immaturity failure and a Gompertz distribution addressing wear-out is found to best represent CubeSat reliability. Bayesian inference is used to find realistic wear-out parameters by using failure data of small satellites. Subsystem reliability estimates are subsequently found using a similar approach. A reliability model for CubeSats with redundant subsystems is established, verified and applied in a Monte Carlo simulation. The results are compared with a model for reduced immaturity failure. Allocating resources to reduction of immaturity failures through improved testing is considered to be superior to allocating these resources to the implementation of subsystem redundancy.@en

The Lunar Meteoroid Impacts Observer (LUMIO) is a CubeSat mission to observe, quantify, and characterize the meteoroid impacts on the lunar farside by detecting their flashes. This complements the knowledge gathered by Earth-based observations of the lunar nearside, thus synthesizing global information on the lunar meteoroid environment and contributing to the lunar situational awareness. The goal of LUMIO is to advance our current knowledge of meteoroid models in the solar system. In this work, we present the methodology devised to predict the scientific contribution of LUMIO. Our approach relies on combined modeling and simulation of payload, orbit, and environment. The analyses carried out have been used to drive the design of the LUMIO mission and its payload, the LUMIO-Cam. A payload radiometric model is derived and exploited to assess the quality of the scientific measurements. A dedicated study about straylight rejection is carried out to assess how straylight noise affects LUMIO-Cam measurements. Our results indicate that a 150 mm baffle grants good performance when the Sun angle is between 20° and 90°. Furthermore, the present-day LUMIO mission has the potential to detect more than 6000 impact flashes during the activity peak of the Geminids in 2024 in the range of the equivalent impact kinetic energy at Earth of [10 ⁻⁶,10 ⁻¹]kton TNT Equivalent. Compared to previous programmes, LUMIO could refine information and fill the knowledge gap about the meteoroid population in the ranges of the equivalent impact kinetic energy at Earth of [10 ⁻⁶,10 ⁻⁴]kton TNT Equivalent and [10 ⁻⁴,10 ⁻¹]kton TNT Equivalent, respectively.

@en

Integrated circuits employed in space applications generally have very low-volume production and high performance requirements. Therefore, the adoption of Commercial-Off-The-Shelf (COTS) components and Third Party Intellectual Property cores (3PIPs) is of extreme interest to make system design, implementation and deployment cost-effective and viable w.r.t. performance. On the other hand, this design paradigm exposes the system to a number of security threats both at design-time and at runtime. In this paper, we discuss the security issues related to space applications mainly focusing on threats that come from the adoption of the well-known RISCV microprocessor. We highlight how Hardware Trojan horses (HTHs) and Microarchitectural Side-Channel Attacks (MSCAs) may compromise the overall system operation by either altering its nominal behavior or by stealing secret information. We discuss the security extensions provided by the RISC-V architecture as well as their limitations. The paper is concluded by an overview of the issues that are still open regarding the security of such microprocessor in the space domain.

@en

The estimation of the relative pose of an inactive spacecraft by an active servicer spacecraft is a critical task for close-proximity operations, such as In-Orbit Servicing and Active Debris Removal. Among all the challenges, the lack of available space images of the inactive satellite makes the on-ground validation of current monocular camera-based navigation systems a challenging task, mostly due to the fact that standard Image Processing (IP) algorithms, which are usually tested on synthetic images, tend to fail when implemented in orbit. In response to this need to guarantee a reliable validation of pose estimation systems, this paper presents the most recent advances of ESA's GNC Rendezvous, Approach and Landing Simulator (GRALS) testbed for close-proximity operations around uncooperative spacecraft. The proposed testbed is used to validate a Convolutional Neural Network (CNN)-based monocular pose estimation system on representative rendezvous scenarios with special focus on solving the domain shift problem which characterizes CNNs trained on synthetic datasets when tested on more realistic imagery. The validation of the proposed system is ensured by the introduction of a calibration framework, which returns an accurate reference relative pose between the target spacecraft and the camera for each lab-generated image, allowing a comparative assessment at a pose estimation level. The VICON Tracker System is used together with two KUKA robotic arms to respectively track and control the trajectory of the monocular camera around a scaled 1:25 mockup of the Envisat spacecraft. After an overview of the facility, this work describes a novel data augmentation technique focused on texture randomization, aimed at improving the CNN robustness against previously unseen target textures. Despite the feature detection challenges under extreme brightness and illumination conditions, the results on the high exposure scenario show that the proposed system is capable of bridging the domain shift from synthetic to lab-generated images, returning accurate pose estimates for more than 50% of the rendezvous trajectory images despite the large domain gaps in target textures and illumination conditions.

@en

Soft errors in embedded systems' memories like single-event upsets and multiple-bit upsets lead to data and instruction corruption. Therefore, devices deployed in harsh environments, such as space, use fault-tolerant processors or redundancy methods to ensure critical application dependability. Another rising concern in secure, critical space applications is the possible introduction of hardware Trojans in an untrusted phase of the manufacturing process. Besides environmental side-effects, an adversary that has injected a malicious mechanism e.g., in the processor or memory can trigger unwanted behavior or leak sensitive information. Techniques to prevent or mitigate hardware Trojans are important to ensure hardware security. Leveraging the openness of the RISC-V ISA, this paper introduces a novel solution to improve the security and dependability of softcores with a low area and latency overhead. The instruction validator which is the first part of this solution can effectively detect hardware Trojans and multiple-bit upsets in the instruction memory by checking instruction/address pairs using a Bloom filter probabilistic data structure. The second part of the solution is the proposal of an error correction code instruction memory using Hamming single-error correction to detect and correct single-event upsets. It has also been proven that the Hamming decoder improves the detection performance of the instruction validator.

@en

The estimation of the relative pose of an inactive spacecraft by an active servicer spacecraft is a critical task for close-proximity operations, such as In-Orbit Servicing and Active Debris Removal. Among all the challenges, the lack of available space images of the inactive satellite makes the on-ground validation of current monocular camera-based navigation systems a challenging task, mostly due to the fact that standard Image Processing (IP) algorithms, which are usually tested on synthetic images, tend to fail when implemented in orbit. In response to this need to guarantee a reliable validation of pose estimation systems, this paper presents the on-ground validation of a Convolutional Neural Network (CNN)-based monocular pose estimation system on representative rendezvous scenarios recreated in ESA's GNC Rendezvous, Approach and Landing Simulator (GRALS) testbed. Special focus is given on solving the domain shift problem which characterizes CNNs trained on synthetic datasets when tested on more realistic imagery. The validation of the proposed system is ensured by the introduction of a calibration framework, which returns an accurate reference relative pose between the target spacecraft and the camera for each lab-generated image, allowing a comparative assessment at a pose estimation level. The VICON Tracker System is used together with two KUKA robotic arms to respectively track and control the trajectory of the monocular camera around a scaled 1:25 mockup of the Envisat spacecraft. After an overview of the facility, this work describes a novel data augmentation technique focused on texture randomization, aimed at improving the CNN robustness against previously unseen target textures. Despite the feature detection challenges under extreme brightness and illumination conditions, the results on the high exposure scenario show that the proposed system is capable of bridging the domain shift from synthetic to lab-generated images, returning accurate pose estimates for more than 50% of the rendezvous trajectory images despite the large domain gaps in target textures and illumination conditions.

@en

This paper discusses principles and techniques to evaluate processors for dependable computing in space applications. The focus is on soft errors, which dominate the failure rate of processors in space. Error, failure and propagation models from literature are selected and employed to estimate the failure rate due to soft errors in typical processor designs. A similar approach can be followed for applications with different radiation environments (e.g. automotive, servers, experimental instrumentation exposed to radiation on ground), by adapting the error models. This detailed white-box analysis is possible only for open-source Intellectual Property (IP) cores and in this work it will be applied to several open-source IP cores based on the RISC-V Instruction Set Architecture (ISA). For these case studies, several types of redundancy described in literature for space processors will be evaluated in terms of their cost-effectiveness and expected final in-orbit behavior. This work provides a comprehensive framework to assess efficacy and cost-effectiveness of redundancy, instead of listing and categorizing the techniques described in literature without assessing their relevance to state-of-the-art designs in space applications.

@en

The use of deep neural networks (DNNs) in terrestrial applications went from niche to widespread in a few years, thanks to relatively inexpensive hardware for both training and inference, and large datasets available. The applicability of this paradigm to space systems, where both large datasets and inexpensive hardware are not readily available, is more difficult and thus still rare. This paper analyzes the impact of DNNs on the system-level capabilities of space systems in terms of on-board decision making (OBDM) and identifies the specific criticalities of deploying DNNs on satellites. The workload of DNNs for on-board image and telemetry analysis is analyzed, and the results are used to drive the preliminary design of a RISC-V vector processor to be employed as a generic platform to enable energy-efficient OBDM for both payload and platform applications. The design of the memory subsystem is carried out in detail to allow full exploitation of the computational resources in typically resource-constrained space systems.

@en

The Lunar Meteoroid Impact Observer (LUMIO) is a mission designed to observe, quantify, and characterize the meteoroid impacts by detecting their flashes on the lunar far side. Earth-based lunar observations are restricted by weather, geometric and illumination conditions, while a lunar orbiter can improve the detection rate of lunar meteoroid impact flashes, as it would allow for longer monitoring periods. This paper will focus on the communications and radio navigation system of the mission, designed for the ESA roadmap for lunar exploration. LUMIO has been designed to operate autonomously after deployment from a lunar mother spacecraft in a low inclination lunar orbit and to reach without human intervention his final destination orbit close to the Earth-Moon L2 point, where science can be carried out. Being the destination orbit always in view from Earth (despite a distance of 460000 - 480000 km), Direct-to-Earth communication was added to the mission as a mean to reduce risk and allow independent verification of several of the innovative technologies that would be demonstrated, first of all autonomous navigation. A detailed link budget analysis will be presented for all mission phases for both the link with the mother spacecraft in low lunar orbit and the link with Earth. Beside defining the achievable data transfer, we will focus also on evaluating the available ground stations to better evaluate mission cost with respect to science return. Radio-navigation performances will also be evaluated to estimate the position and relative velocity accuracy, given also the limited performances available for the on-board navigation transponder. This will help also better defining the on-board autonomous navigation system, constraining the total error budget. Further strategies, such as beacon tones, will be evaluated to lower the overall operational cost by employing continuous monitoring with a low performances ground station and, only when needed, perform high speed downlink using a deep-space class ground station. This strategy is considered of extreme importance, especially for small missions, to allow opportunistic operations on high gain antennas, given their very busy schedule. Keywords: LUMIO, CubeSat, Lunar, Radio, link @en