Saturn Orbit Insertion is a time of nervous anticipation
BY WILLIAM HARWOOD
STORY WRITTEN FOR CBS NEWS "SPACE PLACE" & USED WITH PERMISSION
Posted: June 12, 2004
Trajectory Correction Maneuver 20 was a relatively short, but critical rocket firing because it marked the first use of the main engine system since the Deep Space Maneuver back in 1998. To everyone's relief, TCM-20 came off without a hitch. The helium latch valve opened 70 seconds before ignition and the leaky regulator worked as required to maintain the proper pressure.
"We've got a real nice propulsion system," said lead propulsion engineer Todd Barber. "It's a plumber's nightmare, there are so many valves and alternate paths and contingency paths available that basically, we're able to handle a lot of anomalies. And the regulator leak we saw was right after launch and we've been able to accommodate that with the way we time the opening of valves, etc."
Even so, Barber will feel much better after Cassini successfully brakes into orbit. "It's been a long time coming and the hopes and dreams of thousands of engineers are resting on that one evening. When we get the signal back is when we'll all go take a deep breath. Hold your ears, because they might pop."
To get into the desired orbit around Saturn, Cassini's main engine must fire for 96.4 minutes beginning at 10:35:42 p.m. EDT on June 30 (0235:42 GMT July 1). An underburn, or early cutoff, could doom the mission. Rocket Engine Assembly A - REA-A - must fire for more than 85 minutes to put Cassini into any kind of usable orbit. Asked what keeps him awake at night, program manager Bob Mitchell gave the obvious answer.
"In general, just worrying that SOI is going to work," he said in an interview. "The confidence that it will is very high, just based on all of the testing, all the elaborate work that we have put into this, as well as our experience with the spacecraft to date. We've done 15 or 16 maneuvers using the main engine ... and so we have every reason to believe this thing is going to work just fine."
But, he added, "the software the thing flies is all complex and I just worry about what bugs are still in there. I think it must be inevitable that there are still bugs in there for something this complex. We've tested it extensively, we have a test bed here in the basement of our building that is a quite high fidelity spacecraft simulator and the sequences have been run through there many, many times. We have injected faults, we've had various components break, where we simulated a break in the test bed and looked to see what response we got. And at the moment, everything works. All the tests that we've done, all the simulations indicate that everything is just fine."
Pioneers 10 and 11, along with Voyager 2, flew through the gap with no problems but Cassini flight planners are taking no chances. Before traversing the ring plane, the spacecraft will be oriented with its high-gain dish antenna facing the direction of travel to act as a shield.
Voyager 2 went through outer edge of the G ring and its instruments recorded "lots of evidence of micrometeoroid hits when going through, but nothing serious," said Voyager veteran Torrence Johnson, a Cassini imaging team member and chief scientist for the Galileo mission.
"So we have that maneuvering to do and then there's the fact that the place is just a junky system," he said in an interview. "We're going in close, we're skimming right over the rings, everybody thinks we've modeled all this right and we're being reasonably cautious. But I told some of the guys early on, if they're going to be scared of ring particles they ought to remember John Paul Jones' letter to Congress, 'give me a fast ship for I intend to sail in harm's way.'
"I don't think anybody's real complacent about this thing," Johnson said. "I think we've done everything we can to make sure we don't have any human or systems screw ups, but nature can still get you."
Jerry Jones, Cassini's chief navigator, said flying through the ring plane relatively close to Saturn will save propellant and makes the rocket firing more efficient. "But the real clincher, given all that, is the science in that close. We're going to be sitting there looking right down on those rings."
"We've got one class-A camera on this spacecraft," he said in an interview. "It's a beautiful telescope, it has great resolution, very sharp edges and for optical navigation, I'm just pleased as punch. ... The science opportunity going over the rings should be just fantastic, to say nothing of showing the public what they've paid for."
Once safely through the ring plane, Cassini will re-orient itself once again, swapping ends to put the main engine forward for the SOI burn. NASA originally planned to carry out the rocket firing "in the blind," with Cassini focusing on science observations while the engine put on the brakes. But in the wake of back-to-back Mars mission failures in 1999, NASA management ordered engineers to figure out a way for Cassini to provide at least some information about the start of the burn, its progress and its termination.
While no actual data will be transmitted to Earth, analysis of the Doppler shift of a carrier signal from the spacecraft will tell engineers when the burn started, the precise deceleration it produces and when it stops.
"There were two key things we wanted to be sure we could differentiate between," Mitchell said. "One was in the event we just lost it entirely and never saw it again, we wanted to be able to differentiate between whether we had a problem going through the ring plane or whether we did that successfully and had a problem during the course of the burn itself. So with the data we have, we will know that quite well."
After re-orienting itself for SOI, Cassini will begin transmitting a carrier signal. Six minutes later, the burn will begin, showing up on computer screens at the Jet Propulsion Laboratory as a change in the slope of the carrier frequency. Thirty minutes later, the signal is expected to fade out for 25 minutes or so as Cassini passes behind Saturn's A ring as viewed from Earth.
Engineers then expect six minutes of carrier through the Cassini division before another 28-minute communications blackout while the spacecraft passes behind the broad B ring. Closest approach to Saturn - 12,400 miles from the planet's cloud tops - is expected at 12:03 a.m. EDT (0403 GMT) July 1, nine minutes before the SOI burn comes to an end. The first images and other data from the orbit insertion maneuver are expected around 8:39 a.m. EDT (1239 GMT).
Here is an edited timeline of critical events in the SOI maneuver for the evening of June 30 through the morning of July 1 (all times in EDT):
"Then when we turn back to go to the burn attitude, at about the time we get to that attitude, which is six minutes prior to the burn start, we will crank up a signal that comes from one of the low gain antennas. There's no telemetry, it's just a carrier.
"But that carrier will allow us to get Doppler and that'll tell us if the spacecraft is operating fine and has not had any safing events. And then during the course of the burn, that Doppler will let us see quite accurately what the acceleration levels are. So if the system is performing nominally or over performing or under performing, the Doppler will show that very well."
The day after orbit insertion, Cassini will pass within 205,000 miles of Titan, the first official Titan encounter of the mission and one that could prove, one way or the other, whether the spacecraft's cameras will be able to penetrate the hazy atmosphere as scientists hope. Between July 4 and 11, Cassini will be out of contact with Earth as Saturn passes behind the sun. The SOI sequence will end on July 30 as tour sequence No. 3 begins.
Sometime around Aug. 23, Cassini's main engine is scheduled to fire in what will be the last fully helium-regulated burn of the mission: a 51-minute maneuver that will change the spacecraft's velocity by 877 mph. The Perigee Raise Maneuver, or PRM, will raise the low point of Cassini's orbit and set up the first close flyby of Titan in October. After another flyby in December, the Huygens probe will be released for atmospheric entry during the mission's third Titan encounter in January.
SOI is "the only maneuver that we will do throughout the entire course of the mission where we just absolutely have to do this burn right now," Mitchell said at a news briefing. "If this burn doesn't work, then we would have a Saturn flyby and that's not what we're here about. So we have designed what we refer to as a critical sequence where no matter what fault might occur, the spacecraft will not let the burn halt. Now in some modes it will stop the burn, swap to the other engine and then continue on with the burn. But the burn will continue even in the presence of faults."
During normal operations, a problem with a spacecraft system would trigger fault-protection software that would shut down unnecessary activity, a condition known as safe mode. There are numerous variations, depending on the nature and timing of the fault and whether the spacecraft still knows its orientation in space. The end result, however, is the same: Cassini shuts down, finds the sun (Earth will never be more than six degrees away), switches to low-data-rate communications and awaits instructions from Earth.
Because of Saturn's great distance and the slow-speed radio link used in safe mode, engineers would need at least 48 hours to restore Cassini to normal operations. Such a fault during the SOI maneuver would shut the main engine down, interrupting the all-important rocket firing and possibly dooming the mission. But in critical sequence mode, that will not be allowed to happen.
"In critical mode, if the spacecraft detects a fault - we get a glint in the eye of the star scanner or the thrusters don't like what they're doing or a piece of hardware doesn't work right - the spacecraft will detect a fault," said Julie Webster, lead spacecraft engineer. "The sequence will halt and the spacecraft is allowed through its autonomous fault protection to go off and fix the fault.
"And then it will come back and say I've detected a fault, I've fixed the fault. And then it'll come back and say OK, critical sequence, you can restart. And the critical sequence will say Oh, but I've gotta remember where I was. We have what we call a mark and rollback strategy. So it'll roll back to the last good mark point and it will resend all the commands necessary to execute the next states that it needs to be in. It'll recommend all of those and continue on. And so, if there's a fault anytime during the critical sequence, it'll stop, halt, detect the fault, correct the fault and then restart the sequence."
That's where Cassini's second main engine comes in. If a fault of any kind interrupts the SOI sequence, the computer will fire up Rocket Engine Assembly B and continue the burn.
"It would detect a fault in where it's pointing or the propulsion system wasn't acting right, maybe under thrusting or over thrusting. If there's a fault during the burn, then we terminate the burn. We try to fix the fault and then we mark and roll back, pick up where we did, restart but we're going to restart on the second engine. It takes at least two hours to cool down one engine. So 10 minutes later, we can restart on engine B and minimize our overall cost."
But any safe mode that would necessitate firing REA-B also would terminate priceless SOI science operations, a small price to pay if survival of the mission is at stake. Cassini has a seven-hour window in which to complete the SOI maneuver and "as long as we got the correct amount of burn at any time in that seven-hour period, we would get into orbit," Webster said. "We might not like the orbit, but we'd get into orbit."
While outwardly confident, many project officials are naturally anxious going into the make-or-break maneuver. But not Carolyn Porco. To her, the real issue is collecting the science required to meet Cassini's enormously challenging objectives.
"Everything's working very well. Cassini is a very robust spacecraft, the instruments are working very well and I have personally no worries about Saturn orbit insertion at all," she said. "That's not what worries me about Cassini. What worries me about Cassini is the magnitude of the job. It's absolutely enormous.
"What needs to be conveyed to people is the magnitude of this mission. It is not a Discovery-class mission. The breadth of its scientific objectives is tremendous. What we are going to do at Saturn will ultimately reach well beyond Saturn itself. It will teach us about the behavior of disk systems all throughout the universe. The processes going on in the disks of material from which planets are forming around other stars, it will tell us about what's going on in spiral galaxies, because the kind of things we find in Saturn's rings are directly applicable to what we find in galaxies.
"The study of Titan, it's the place to go in the solar system to find a body that is the most Earth-like. And so what we find at Titan will inform us about many aspects of the Earth and the behavior of its atmosphere, possibly processes that were part of the run up to the origin of life on Earth. On and on. It is really, truly the flagship mission of our time."