BS ISO 16127-2014 Space systems Prevention of break-up of unmanned spacecraft《空间系统 无人航天器破裂的预防》.pdf

1、BSI Standards PublicationBS ISO 16127:2014Space systems Preventionof break-up of unmannedspacecraftBS ISO 16127:2014 BRITISH STANDARDNational forewordThis British Standard is the UK implementation of ISO 16127:2014.The UK participation in its preparation was entrusted to TechnicalCommittee ACE/68/-/

2、1, Space systems and operations - Design,Engineering and Production.A list of organizations represented on this committee can beobtained on request to its secretary.This publication does not purport to include all the necessaryprovisions of a contract. Users are responsible for its correctapplicatio

3、n. The British Standards Institution 2014. Published by BSI StandardsLimited 2014ISBN 978 0 580 69947 4ICS 49.140Compliance with a British Standard cannot confer immunity fromlegal obligations.This British Standard was published under the authority of theStandards Policy and Strategy Committee on 28

4、 February 2014.Amendments issued since publicationDate Text affectedBS ISO 16127:2014 ISO 2014Space systems Prevention of break-up of unmanned spacecraftSystmes spatiaux Prvention de lclatement des navettes sans piloteINTERNATIONAL STANDARDISO16127First edition2014-02-15Reference numberISO 16127:201

5、4(E)BS ISO 16127:2014ISO 16127:2014(E)ii ISO 2014 All rights reservedCOPYRIGHT PROTECTED DOCUMENT ISO 2014All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying

6、, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISOs member body in the country of the requester.ISO copyright officeCase postale 56 CH-1211 Geneva 20Tel. + 41 22 749 01 11Fax + 41 22 749 09 47E-mail c

7、opyrightiso.orgWeb www.iso.orgPublished in SwitzerlandBS ISO 16127:2014ISO 16127:2014(E) ISO 2014 All rights reserved iiiContents PageForeword ivIntroduction v1 Scope . 12 Normative references 13 Terms and definitions . 14 Implementation . 24.1 Design process. 24.2 Verification . 24.3 Prevention of

8、break-ups until end of life 34.4 Prevention of break-up after end of life. 35 Stored energy sources . 35.1 Systems storing energy 35.2 Electrical systems . 45.3 Propulsion systems . 45.4 Pressurized systems . 55.5 Other energy sources 5Annex A (informative) Procedure for estimating break-up probabil

9、ity 6Bibliography 9BS ISO 16127:2014ISO 16127:2014(E)ForewordISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Ea

10、ch member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the Internatio

11、nal Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the different

12、 types of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not

13、 be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).Any trade name used in this document is info

14、rmation given for the convenience of users and does not constitute an endorsement.For an explanation on the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISOs adherence to the WTO principles in the Technical Barriers to Trade (TBT) see t

15、he following URL: Foreword - Supplementary informationThe committee responsible for this document is ISO/TC 20, Aircraft and space vehicles, Subcommittee SC 14, Space systems and operations.iv ISO 2014 All rights reservedBS ISO 16127:2014ISO 16127:2014(E)IntroductionAn ever-increasing number of man-

16、made items are orbiting the Earth and bring with them ever-increasing risk of collisions. This can have implications on the operational requirements of both manned and unmanned spacecraft.One potential source of space debris is the break-up of unmanned spacecraft both during and after the end of the

17、ir operational lives. This break-up could be due either to external collisions or to internal factors caused by the existence of stored energy sources onboard the spacecraft. A cloud of debris from a single spacecraft having broken up poses a significantly greater threat of collision than the origin

18、al spacecraft.This International Standard defines the requirements to reduce the probability of a spacecraft breaking up, both during and after its operational life. It also defines the requirements for passivation of the spacecraft, which is the process by which all sources of stored energy are rem

19、oved. ISO 2014 All rights reserved vBS ISO 16127:2014BS ISO 16127:2014Space systems Prevention of break-up of unmanned spacecraft1 ScopeThis International Standard defines the requirements to reduce the risk of in-orbit break-up of unmanned spacecraft, both during and after their operational lives.

20、The aim would be met by reducing the possibility of a break-up caused by an unplanned internally caused event and by depleting to a safe level all the sources of stored energy at the end of a spacecrafts life. This International Standard is designed for use in planning, verifying, and implementing t

21、he prevention of break-up of a spacecraft.This International Standard applies only to unmanned spacecraft operating in Earth orbit. It does not apply to manned space vehicles or launch vehicle orbital stages. Additionally, it does not cover nuclear power sources within spacecraft.This International

22、Standard is not applicable to fragmentation as a result of external particle impacts (which includes fragmentations triggered by external particle impact but powered by internal energy sources).2 Normative referencesThe following documents, in whole or in part, are normatively referenced in this doc

23、ument and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.ISO 14623, Space systems - Pressure vessels and pressurized structures Design and operationI

24、SO 24638, Space systems Pressure components and pressure system integrationISO 24113:2011, Space systems Space debris mitigation requirements3 Terms and definitionsFor the purposes of this document, the terms and definitions given in ISO 24113:2011 and the following apply.3.1acquiring organizationor

25、ganization that plans and manages the development and acquisition contracts for the space systemNote 1 to entry: The responsibilities of the acquiring organization include the engineering and technical aspects of the space systems design and operations.3.2break-up probabilitycombined probability of

26、the occurrence of all anomalous events, excluding meteoroid or debris impact, that leads to the generation of orbital debris3.3passivationelimination of all stored energy on a space system to reduce the chance of break-upNote 1 to entry: Typical passivation measures include venting or burning excess

27、 propellant, discharging batteries, and relieving pressure vessels.INTERNATIONAL STANDARD ISO 16127:2014(E) ISO 2014 All rights reserved 1BS ISO 16127:2014ISO 16127:2014(E)4 Implementation4.1 Design processIn accordance with ISO 24113, the spacecraft shall be designed to prevent break-ups while in o

28、rbit, both before end of life and after the end of life.The spacecraft shall be designed to prevent break-ups while in orbit until its end of life, in accordance with probability levels defined in ISO 24113:2011, 6.2.2.1, and to enable passivation before its end of life. Calculations shall be perfor

29、med to determine the accidental break-up probability. Annex A reports an example of an acceptable detailed evaluation approach.The design process and the definition of the operations (including operational and disposal phases) shall prevent potential failures which could occur during operational lif

30、e, but also after the end of life. All onboard sources of stored energy, such as residual propellants, batteries, high-pressure vessels, self-destructive devices, flywheels, and momentum wheels, shall be depleted or safed and permanently deactivated once they are no longer required for the mission o

31、peration.The spacecraft provider shall produce a break-up prevention plan. This plan shall be reviewed and updated as part of the normal spacecraft design review process. The acquiring organization/operator shall be involved with these design reviews and approve the proposed solutions. All managemen

32、t shall be done in accordance with ISO 24113.When producing the break-up prevention plan, a system level risk assessment approach shall be used. Each source of stored energy shall be considered: what potential failure modes could result in an in-orbit break-up of the spacecraft (including post-dispo

33、sal phase) and what can be performed to mitigate the risk in the design, operational, and disposal phases of the mission as well as after the end of life. Annex A provides further details regarding producing the plan.The plan shall be developed by considering each item containing stored energy. The

34、design shall take into account the following influences: the environmental extremes expected to be encountered during the operational life and following passivation, but excluding re-entry phase; mechanical degradation during the mission and following passivation; chemical decomposition; the effect

35、of potential failure modes of the spacecraft during the mission, and what effect they would have on the ability to passivate the spacecraft.The robustness of the design shall be confirmed during the design review process, to ensure that adequate reliability and quality control has been performed to

36、inhibit any failure that could lead to a break-up event with a probability as defined in ISO 24113.4.2 VerificationThroughout the ground phases of a mission, i.e. design, manufacture, AIT (Assembly, Integration, and Test), and launch, the implementation of the break-up prevention plan shall be revie

37、wed. All the hardware and software designed specifically for the purpose of break-up prevention should be verified either by test, demonstration, analysis, or simulation (in that order of preference).2 ISO 2014 All rights reservedBS ISO 16127:2014ISO 16127:2014(E)4.3 Prevention of break-ups until en

38、d of life4.3.1 Monitoring during operationsFor the operations of the spacecraft, procedures should be defined to allow monitoring of the relevant parameters of each subsystem, which has been identified as a possible source of space debris generation, in order to detect malfunctions.The risk of poten

39、tial malfunctions shall be considered within the break-up prevention plan, which shall include a contingency plan to mitigate against the risk of the malfunction causing a break-up.The following items should, as a minimum, be monitored from the ground, if applicable: pressure and temperature in the

40、tanks; parameters (temperature and voltage) of batteries to detect failures; parameters to detect failure modes of the orbit and attitude control system.4.3.2 Debris mitigation measures in the case of malfunctionIn the event of in-orbit malfunctions which could lead to 1) break-up or 2) the loss of

41、operating function, possible debris mitigation measures should be studied and implemented (reduction of orbital lifetime or removal from a protected orbit region and passivation at the end of disposal).At the time when satellite operation is concluded either purposefully or due to malfunction and ot

42、her disposal actions have been completed, passivation shall be performed.4.4 Prevention of break-up after end of lifePrevention of break-up after mission is guaranteed through the passivation process, which shall be completed at an appropriate point during the disposal phase. A passivation procedure

43、 shall be produced prior to the end of the design phase. Prior to the disposal phase, this shall be updated to take into account any failures that have occurred during the mission and that affect the ability to passivate the spacecraft.No operations that will generate orbital debris of greater than

44、1 mm in size shall be performed during the passivation process, excepting the release of frozen propellant.5 Stored energy sources5.1 Systems storing energyThe following systems are most likely to cause the break-up of a spacecraft: electrical systems, especially batteries; propulsion systems and as

45、sociated components; pressurized systems; rotating mechanisms.It should be noted that this International Standard does not cover nuclear power sources on spacecraft. ISO 2014 All rights reserved 3BS ISO 16127:2014ISO 16127:2014(E)5.2 Electrical systems5.2.1 BatteriesThe design of each battery pressu

46、re vessel and its margins of safety shall be in accordance with a standard that defines the safe in-orbit operation of this type of vessel. See Bibliography for examples of such standards.Batteries should be adequately designed and manufactured, both structurally and electrically, to prevent break-u

47、ps and to allow the maximum reduction of the stored energy at the end of the disposal phase (unless these measures cause an excessive reduction of mission assurance). Pressure increase in battery cells and assemblies could be prevented by mechanical measures unless these measures cause an excessive

48、reduction of mission assurance. At the end of operations, battery charging lines should be deactivated.5.3 Propulsion systems5.3.1 System designThe design of each propulsion pressure vessel and its margins shall be in accordance with a standard that defines the safe in-orbit operation of this type o

49、f vessel. See Bibliography for examples of such standards.The break-up prevention plan shall detail the sources of stored energy within the propulsion system.For a bipropellant propulsion system, especially with hypergolic propellants, tanks and lines should be so designed that any single-point failure will not cause the unplanned mixture or combustion of the propellants.5.3.2 Propulsion system passivationBefore end of life, as part of the disposal phase, the spacecraft should have consumed or vented any residual liquid propellants