Sree Alvarado

Today’s satellites use complex, high-power field-programmable gate arrays (FPGAs) and processors, challenging power-supply design engineers to create robust power supplies. Many designers end up with complicated designs meant to achieve redundancy (the duplication of critical components to increase reliability), involving dozens of discrete components like field-effect transistors (FETs) to continuously monitor and enable specific power rails.

Since not all of these high-power devices will be on all the time, the ability to turn the power to the payload or processor on and off can not only help simplify designs but also lower power consumption. In addition, if a latch-up or a transient occurs in a power device, power-supply designers have to consider how to contain that failure until power can be restored to that rail, or have a redundant power rail take over.

Using an eFuse to simplify your design

Discrete metal-oxide semiconductor FETs (MOSFETs), comparators, amplifiers and references that provide input power to the satellite payload are just some examples of devices that are needed to achieve redundant inputs to the satellite payload, with appropriate monitoring and protection. This type of power-supply design implementation results in larger solutions with many potential radiation and electrical failure points. Figure 1 shows an example of such a complex implementation.

Figure 1 Discrete implementation of a load-switch redundancy application with reverse-current protection, overvoltage protection and overcurrent protection

An eFuse like the TPS7H2201-SP load switch has additional monitoring and protection features like reverse-current protection, over- and undervoltage protection, programmable current limiting, fault timer, and configurable rise time. It can reduce complex designs down to a single monolithic, radiation-hardened device.

Redundancy

In the event of a complete failure, if there are two fully autonomous power supplies, an eFuse can enable one power supply and turn off the other. This configuration is known as redundancy, and provides protection for both downstream and upstream components. Figure 2 and Figure 3 show different implementations of cold sparing.

Figure 2 Redundant input voltages with the TPS7H2201-SP eFuse, including RCP, OVP, OCP, and automatic reset of a tripped power rail

Figure 3 Redundant input and output voltages with eFuse, including RCP, OVP, OCP, and automatic reset of a tripped power rail

While it is possible to achieve simple on/off functionality with a MOSFET controlled by a processor, a critical component for reliable operation is the reverse-current protection. Reverse current (V_OUT > V_IN) can occur in cold sparing applications when the secondary switch is off. A design with two FETs back to back can protect against the reverse current propagating to upstream components. TI’s TPS7H2201-SP dual-FET design allows for reverse-current protection when the device is enabled or disabled, a necessary feature for a highly reliable point-of-load power design. Other discrete or integrated load switch solutions available on the market may use a single FET design, and are limited in reverse-current protection capability.

Failure containment

To ensure a power-supply design with dependable performance, another key design consideration is failure containment. The goal of failure containment is to prevent a random failure (like a short circuit or radiation-caused transient) from propagating to downstream components (like an FPGA, data converter or interface device). Placing an integrated eFuse downstream from a critical power component (Figure 4) can help contain failures. An eFuse with programmable current and voltage limits will help enable the detection of overvoltage or overcurrent events so that they do not propagate to downstream components.

Figure 4 Downstream eFuse with overvoltage protection

Conclusion

Adding functionality to monitor critical payload power components (like a DC/DC converter) and planning for failure with redundancy for input components can help ensure a power supply that can withstand harsh environments. Instead of complex circuitry with several active components and increased processor involvement, devices such as the TPS7H2201-SP integrate the functionality of the switch FETs, overvoltage protection circuitry, overcurrent protection circuitry, reverse-current production circuitry, and programmable voltage and current limits in a single device. Additionally, the Qualified Manufacturers List Class V-radiation-hardness-assured eFuse is fully characterized for low-earth-, medium-earth- and geosynchronous-orbit missions.

Additional resources:

• For more information on failure containment, read the application report, “Failure Containment in Spacecraft Point-of-Load Power Supplies.”
• Check out the technical article, “When failure isn’t an option: power up your next satellite with integrated functionality and protection.”
• To learn more about the radiation performance of the TP7H2201, see these reports:
• • “TPS7H2201-SP Total Ionizing Dose (TID) Report.”
  • “Single-Event Effects Test Report of the TPS7H2201-SP eFuse.”
  • “TPS7H2201-SP Neutron Displacement Damage Characterization.”