This section shall describe the customized solution for the MASCOT deployment system in detail and trace to the requirements as defined above. To do this, we will analyze the system architecture in the next section, followed by a detailed design description of the subunits of the deployment system.
System architecture
The MASCOT space system (Fig. 5) as installed on the HY2 carrier consisted of two main elements: (i) the landing module (LM) and (ii) the mechanical electrical support system (MESS). These two elements were the compounds of the main system elements, which contributed to the deployment functionality. The physical breakdown (in terms of system blocks) and functional allocation is displayed in Fig. 4. To understand the peculiarities of the design of these elements, in addition to the functions as mentioned earlier, it is important to mention that the MASCOT system was bound to very strict volume and mass constraints given by JAXA responsible for the design of the carrier HY2.
To meet these, structural interfaces were minimized. The fixation of the LM to the MESS (Fig. 6) and its associated deployment functionality was based on four cup–cone-shaped stand-off elements shown in Fig. 7 (right), which were held in place by a single load-bearing bolt to be released at separation. In this way, the LM walls and edges were decoupled from the MESS-structure and no guiding rails were required which is common for regular CubeSat dispenser pods. Fig. 7 (left and center) shows a CAD sketch of the overall system and the physical locations of the main components contributing to the deployment functionality. The ejection energy resulting in a deployment velocity as required was realized by the MASCOT Separation Mechanism (MSM). To meet the tight mass and volume budget, this system was custom built and designed as a robust single-shot device with high reliability. This MSM consisted of four main subunits, namely the preload release mechanism (PRM, Fig. 8), a hold down and release mechanism (HDRM, Fig. 9), an umbilical connector (UMC, Fig. 10) and a miniaturized spring-loaded push-off mechanism (POM, Fig. 11). The PRM was designed to reduce the required preload for a save launch lock, but which were inherently stored in the CFRP-structure. The HDRM fulfilled the function of coupling and de-coupling the lander to the MESS. The UMC transmitted the decoupling signal to the HDRM and served also as a separation sense line, while the POM finally provided the delta-v of the release activity. In addition to these functionalities, the MESS structure served as a guidance while the lander made its way out of the cradle. It also provided the overall mounting interface towards the HY2 carrier system.
All elements were designed according to ECSS standards for the minimization of misalignment errors and cold welding risk and the total mass of the MSM was < 290 g, including PRM 85 g, HDRM 75 g, UMC 65 g, POM 52 g and harness respectively. The functionality and performance of the MSM has been verified by system level tests (presented in detail in [2]), extensive sub-unit tests (e.g. low temperature or even thermal-vacuum and shock/vibration for the PRM, UMC and POM), as well as in dedicated microgravity campaigns using parabolic flights and drop tower experiments (presented in Sect. 4). The design and operational principle of these four subunits are explained in more detail in the following.
Subunit description and operational principle
The MSM operated as a two-stage system. The first stage (preload release) was activated and controlled by MASCOT during one of the cruise check-out activities. The second stage (eject maneuver) was triggered by HY2 at the asteroid with an automated timer initiating the terminal separation sequence while being below 60 m above and on a free-fall trajectory towards the surface (cf. Figs. 1 and 12).
Preload release mechanism
To withstand the high stresses of shock and vibration during launch, the LM was “locked” with a high preload of approximately 2500 N. This was to ensure that the lander stayed in place within the MESS and neither to harm the main spacecraft nor changing the pre-adjusted configuration for the separation. However, through initial multi-body simulations (Sect. 5) it was found that the preload was elastically stored within the CFRP structure and would have been transferred to kinetic energy of the lander upon release. In this case, the separation velocity would have been too high which could have caused the LM to rebounce from the surface and drift off into space. To guarantee a smooth separation and to avoid an excessive eject velocity, the preload of the structure was required to be reduced by a dedicated mechanism.
The concept of the PRM (shown in Figs. 13, 14) was based on two polyacetal thermoplastic disks with heating foils in between stacked to a sandwich inside two opposing titanium pans. Two temperature sensors measured the heating process by which the discs were mechanically weakened. This initiated a fast creeping process and consequently a movement of the pans towards each other, which was driven by the initially set preload. To keep a small remaining load for the cruise phase and the following separation process, four adjustable closing contacts did stop the motion and at the same time detected electrically the successful preload release process. A successful activation was given, when contact was detected by two diagonal opposing contacts. The required activation time had to be pre-selected based on ground test results (Fig. 15)
After activation of the PRM, the LM was left with a minimal load of approximately 100 N. This assured physical contact within the stand-offs and was sufficient to compensate structural distortions due to temperature gradients during cruise.
Hold down and release mechanism
For releasing the LM from the MESS and therefore from its mother spacecraft HY2, the HDRM comprised of a non-explosive actuator (NEA) 9100 from \(\hbox {NEA}^{\textregistered }\) Electronics, Inc. and a custom-made steel separation bolt. The NEA is based on a split spool principle. The operation involves a tensile load (preload) applied through a release rod held in place by two separable spool halves which are in turn held together by a tight winding of restraining wire. The restraint wire is held in place by redundant electrical fuse wires (Fig. 16 a). Actuation of either circuit allows release. When sufficient electrical current is applied, the restraint wire unwinds allowing the spool halves to separate (Fig. 16 b) releasing the rod and the associated preload (Fig. 16 c).
To initiate the terminal eject maneuver the NEA was triggered by a main-spacecraft command (Fig. 17). This command was sent by ground via the HY2 on-board Telemetry Command Interface Unit (TCIU). The TCIU delivered a pulsed command to the HY2 Igniter (IG) Box closing the redundant trigger channels and firing the redundant fuse wires of the NEA. A fuse current of approximately 3 A was needed on one of the channels and respective fuse filaments for roughly 30 ms to activate the release. But since the possible range of the IG box was given to be 2.65 – 5.55 A, the current was provided for 1 s to account for possible lower currents.
Since the NEA was a commercial of the shelf product and has well demonstrated its performance and reliability on other missions, no dedicated qualification tests for this unit was necessary. However, its capability and environmental performance was confirmed during the MASCOT system level qualification tests presented in Sect. 4
Umbilical connector
The electrical interface for this command was the UMC which provided also a feedback signal to indicate MASCOT’s separation upon disconnect. The connector design (shown in Figs. 18, 19) was based on a MIL standard Matrix KJ type body with spring-loaded pins. The material selection (coatings) was determined by the prevention of cold welding during the 4-year cruise phase. Gold-coated pogo-type pins on the LM side (connector part B) and concave platinum counter-faces on the MESS side (connector part A). The combined force of the spring contacts was sufficient to push the two connector bodies apart at release. The design principle was taken from Philae lander heritage, but due to lack of a full comprehensive documentation, the connector had to be entirely re-engineered and a full qualification process was necessary including fit checks and mating cycles, push force and misalignment measurements as well as environmental testing in thermal vacuum and for shock and vibration.
Push-off mechanism
When the NEA was triggered releasing its hold-down pressure, the compression spring drove the push-off plate (POP) which pushed the LM into its eject trajectory. The energy stored in the compressed spring needed to correspond to the LM’s required kinetic energy at ejection (completely leaving its support frame) of \(v_{\mathrm{rel}} \approx\) 5 ± 0.5 cm/s. The POP was made of CFRP-foam sandwich, 4.5 mm in thickness. At the interface of the separation bush, the foam was replaced by an aluminum flange which provided a robust interconnection. The POP was shaped to fit on the struts of the LM to evenly distribute the pushing force. As long as the CoG of the LM resided within the effective area of the POP, the introduction of rotational moments was minimized.
A detailed sketch of the POM is seen in Fig. 21. The external support structure was placed in the MESS main truss and fixed with a washer on its top and a small collar at the bottom side. Placed within the moveable separation bushing was the separation spring with and unloaded length of \(L_0=70\,\hbox {mm}\) (Fig. 20). When the bushing was put and locked in the external support structure, the spring was compressed and preloaded to \(L_1=53.3\,\hbox {mm}\). When the LM was installed in the MESS, the spring was compressed further to \(L_2=47.8\,\hbox {mm}\). The push length dl was, therefore, 4.5 mm (Fig. 20).
The spring stiffness k and actuation/push length \({\mathrm{dl}} = L_1-L_2 = s_0-s_1\) was estimated for the requirement, that the energy stored in the compressed spring shall not exceed the maximum allowed kinetic energy of the LM after deployment.
$$\begin{aligned} E_{\mathrm{spring}} \le E_{\mathrm{kin,max}} \Leftrightarrow \frac{1}{2} k \cdot {\mathrm{dl}}^2 \le \frac{1}{2} m v^2. \end{aligned}$$
(1)
The verification and necessary adjustment of the compression spring is further explained in Sect. 4.
The successful deployment of the lander out of its MESS cavity was key to mission success and the most critical activity in the functional chain between in-cruise activation and landing. For such mission-critical mechanisms, ECSS typically demands the avoidance of single point of failure, e.g. by implementing redundancy. As this was not possible within the given strict volume and mass budget, the MSM had to be designed non-redundantly. To keep risk at a minimum, the NEA was chosen as a highly reliable component with built-in redundancy. Further design guidelines included ECSS advised aspects of material selection, tribology, thermal and structural design and sizing for mechanisms.
As described above, the POM was designed as a linear motion system with the separation bush gliding within the external support structure. This relative movement was intended for integration and separation purposes, but not at other times. In launch configuration, the loaded spring pushed the separation bush with the attached POP against the fixed LM. But although the mechanism’s movable mass was low, micro-movements could not be excluded during launch phase. This could have led to cold welding of the external support structure with the separation bush and its corresponding guiding and end-stop bolts/pins, respectively (cf Fig. 21).
In accordance with the standards ECSS-E-ST-33-01C and ECSS-Q-ST-70C, potential material pairings shown in Table 4 were evaluated based on the requirements listed in Table 3 to prevent cold welding between the aforementioned parts of the POM.
Table 3 Sub-system requirements (SSR) driving the push-off mechanism design The selected basic material pairing was titanium, 3.7035 (Ti99.4—Grade 2), for the External Support Structure and aluminum, EN-AW 5083 (AlMg4.5Mn0.7), for the separation bushing. Based on this, the aluminum part was suitable to receive various surface coatings and dry lubricants as listed in Table 4.
Table 4 Material parings traded for the application of parts with gliding contact (external support structure vs. separation bushing and bolts) *3.7035 (Ti99.4—Grade 2), **EN-AW 5083 (AlMg4.5Mn0.7) Eventually, the last three material pairings from Table 4 were pre-selected for further investigation of possible cold welding and wear of the lubricated surface. In a dedicated experimental setup (cf. Fig. 22), a pin, made of titanium, was loaded with 9 N and moved in \(50\,\upmu \hbox {m}\)-long strokes over a flat disc, made of aluminum and treated by one of the three pre-selected surface coatings each. The pin movement was continued for 10 s with a frequency of 200 Hz, then the pin–disc contact was opened and the separation force measured. For each pin–disc pairing, this cycle was repeated consecutively 30 times at 1013 hPa, 30 times at 10 hPa and 30 times at high vacuum, to simulate the rocket launch. For reliability purposes, this was repeated for a second set of the same pin–disc material combinations and intervals. As described in [12], it was concluded that the material combination Ti + Al/Anodisation + PTFE performs the best under the given requirements. Hence, the QM and FM units of the external support structure were made of titanium, 3.7035 (Ti99.4—Grade 2), and the separation bushing as well the guiding pins were made of aluminum, EN-AW 5083 (AlMg4.5Mn0.7), coated by a sulfuric acid anodizing (SAA) layer with embedded PTFE (provided by: Fraunhofer Institute for Surface Engineering and Thin Films, Braunschweig).