Spacecraft rendezvous problem
High-level description
We wish to drive a spacecraft (Deputy) towards another spacecraft (Chief) for docking. This problem is known as the spacecraft rendezvous and docking problem. It is a common requirement for maintenance and resupply missions in space applications. Due to sensing constraints, we wish that the Deputy stays within a line-of-sight cone with respect to Chief. Further, we wish to achieve the docking in a pre-specified time interval while obeying the physical laws that govern the system and constraints on actuation (limited thrust).
We model the Deputy satellite dynamics in the relative coordinate frame of the Chief. Loosely, we have the following constraints we wish to satisfy apart from the dynamics and control constraints,
- Reach constraint: Reaching a target set centered at the origin. This set can encode relative velocity constraints (should dock slowly) and tolerances in relative position at the time of rendezvous.
- Avoid constraint: We wish to stay within a safe set, given by a stationary cone (line-of-sight cone) with the tip at the origin.
Formal specification
Drive the Deputy satellite such that it
- reaches the target set at a pre-specified time,
- stays within the safe set (staying out of the avoid set) during the time interval,
- satisfies the dynamics constraints, and
- satisfies the control constraints.
Safety problem
Identify the set of initial states and synthesize an admissible controller that achieves the given specification with a probability above a pre-specified likelihood threshold. Such initial states will be declared safe.
Results
SReachTools can address this question, and generate underapproximations of the set of safe initial states.
Figure 2 shows various underapproximations of the set of initial locations obtained using SReachTools. These are the safe initial states from which the Deputy can be driven to satisfy the specification with a likelihood no smaller than 0.8. A Monte-Carlo simulation of the safe trajectory is shown from one of the safe initial states under the synthesized controller. Out of 5 randomly chosen trajectories, only one fails (violates terminal velocity constraints).