Figure 5: Descent Imager Head (Actual Size)

4. INSTRUMENTATION

    4.1. Instrument Description
      4.1.1. Functional Requirements
        4.1.1.1. Field of view
        4.1.1.2. Frame rate
        4.1.1.3. Signal capacity
        4.1.1.4. Nesting ratio
        4.1.1.5. Image compression
      4.1.2. Optics
      4.1.3. Electronics
        4.1.3.1. FPA and Detectors
        4.1.3.2. Data Acquisition System
        4.1.3.3. Power Supply
      4.1.4. Software
        4.1.4.1. Control Software
        4.1.4.2. Data Editing/Compression
      4.1.5. Fault Protection
    4.2. Advanced Technology
    4.3. Payload/Instrument Integration Requirements
      4.3.1. General
      4.3.2. Power
      4.3.3. Thermal
      4.3.4. Mechanical
      4.3.5. Telemetry
      4.3.6. Command
      4.3.7. Attitude
      4.3.8. Integration and Ground Operations/ Testing
    4.4. Test and Calibration
      4.4.1. Instrument-level
      4.4.2. System-level ATLO
    4.5. Ground and Flight Operations

4.1. Instrument Description

The descent imager design consists of a small (5 X 5 X 10 cm, 420 gm) camera subdivided into optics, focal plane assembly (FPA), Data Acquisition Subsystem (DAS) and power supply. The optics module consists of the optical elements and their housing. The FPA module incorporates all circuit elements that are tightly coupled to the CCD, notably the CCD and CCD clock drivers, the clock voltage regulators, and the video front end. The DAS module incorporates all the circuit elements required for sourcing the CCD clocks at logic levels, digitizing pixel values from a standardized (1 V full scale) video signal, and passing the digitized data on to the camera body. In addition, the DAS collects and transmits various engineering and health and welfare (H&W) data. Figure 5 shows a cross-section drawing of the descent camera, incorporating the optical design ray-trace, at 1:1 scale.

4.1.1. Functional Requirements

Functional requirements translate science objectives and mission constraints into a set of capabilities that act as the initial starting point for the design team, and to which the design is compared for performance validation. The functional requirements for MARDI are listed in Table 4, and specific aspects are further discussed below.

Table 4: MARDI Functional Requirements/Performance


FOV                         73.4°                                       

Exposure Time (smear        250 us (1/4 pixel @ 10 m/sec horizontal        
limit)                      velocity (near-surface))                       

Focal ratio                 f/2                                            

Frame Rate                  0.5 frames/sec (2 sec/frame)                   

Signal-to-noise             >= 20:1, for Albedo = 0.10, at aphelion,       
                            with illumination angle (i) <= 75° (sun     
                            elevation >= 15° )

Signal capacity             30 e- noise floor (250 usec, A = 0.10, i <=    
                            75° , at aphelion) 30,000 e- full well (A    
                            = 0.50, i = 0° , at perihelion)              

Modulation Transfer         > 0.10 @ Nyquist                               
Function                                                                   

Nesting Ratio               2:1 or better                                  

Image Compression           2:1 realtime (< 2 sec) in DSP; 10:1            
                            non-realtime in S/C CPU                        

4.1.1.1. Field of view

The science requirement that the camera must view the landing site throughout the descent is the principal driver on field-of-view (FOV). For some combinations of horizontal velocity and pendulum swing of the descending vehicle, this requirement can be easily accommodated, while for others it can be accommodated at some but not all altitudes. For other combinations, unreasonably wide FOVs result. Fortunately, the Mars Surveyor '98 Lander descent profile is more or less vertically oriented. The MARDI requirement will be drawn from the optics designed as part of the PIDDP study (FOV = 73.4° ). This design accommodates modest pendulum swing (~5° ) and horizontal velocity (20 m/s) at 8,000 m altitude; the powered descent below 1.4 km permits the landing site to always be in view below that altitude.

4.1.1.2. Frame rate

MARDI must be able to acquire images at a rate of one frame every two seconds, limited by the data rate from the instrument to the lander's mass storage. Two seconds is the fastest the camera will be required to operate (8 Mb/2 sec/2:1 compression = 2 Mbps = 2 X 1 Mbps/RS-422 channel). The camera must be able to work more slowly if only one RS-422 channel is available.

4.1.1.3. Signal capacity

The exposure time of 250 us, focal ratio less than f/2, and the signal to noise ratio described above lead to a detector/analog electronics noise floor requirement of less than 30 electrons (e-). By analogous reasoning to the signal to noise statement above, the camera must also provide unsaturated images of a target of albedo 0.50, at perihelion, and at a solar incidence angle of 0° . This, too, permits acquisition of useful images over a range of target locations and seasons, at high signal levels. Given these requirements, the detector must have a full-well capacity of greater than 30,000 e-.

4.1.1.4. Nesting ratio

A nesting ratio of 2:1 will allow the location of each frame to be identified in the previous frame with relative ease, and reduces the number of frames needed to cover a given range in altitude, thus reducing the downlink data volume. This factor can be traded against other requirements through the use of image acquisition and data compression software.

4.1.1.5. Image compression

Data compression will be absolutely essential to the success of the MARDI investigation, given the restrictive data return and data storage availability. As noted in Section 3.4. (above) and described in Section 4.1.3.2. (below), the available data storage is insufficient to record all required images, even with altimeter-cueing. Realtime compression (i.e., compression within 2 seconds of the 8 Mb image) is required, and additional capability to decompress and recompress at a higher compression factor (~10:1) will be needed to optimize downlink utilization.

4.1.2. Optics

The requirement for short exposures of low brightness scenes leads to a f/2 optical system with minimal vignetting. The descent profile and the desire to image the landing site at all times during the descent similarly compels a wide field (nominal design of 73.4° across the 9.22 mm CCD). To maintain resolution throughout the image further requires that the point spread function (PSF) of the optics be smaller than the 9 um pixel pitch across the entire field, and that the effective focal length of the lens not vary across the field by more than 30%. The lens also must not darken in the space radiation environment.

A detailed design of the requisite lens was generated (the ray-trace is shown in Figure 5). The lens has an effective focal length of 7.135 mm, is f/2.0, and weighs 50 gm (of which 30 gm is the titanium housing). There are 9 elements, including two cemented doublets. All the surfaces are spheres except for the one immediately after the aperture stop, which deviates less than 3 waves at 633 nm from spherical. The optical performance properties (
Figure 6: Optical Performance of MARDI Optics

The lens barrel threads into the camera head and abuts a keyed, ground spacer ring which sets registration and focus. This makes adjusting focus and/or changing lenses (in the event of a problem) straightforward operations. The optics module is approximately 5 X 5 X 5 cm (including baffle and threads). When assembled with the other components of the camera, the optics contribute 4 cm to the overall length.

4.1.3. Electronics

4.1.3.1. FPA and Detectors

The FPA module includes the CCD detector and its related electronics: clock voltage regulators, clock drivers, and video compander. The housing is titanium to athermalize the system focus, and the substrate is ceramic to match the coefficient of thermal expansion (CTE) of the titanium housing. Principal packaging considerations were effective radiation shielding of the CCD, and electronics miniaturization. Daughter submodules are used for the clock drivers, which include an ASIC, as well as for the video buffer. These mount in cavities in the titanium housing. Figure 7 (left) shows the block diagram of the FPA module; the FPA connects to the DAS through a connector on the edge of the boards, outside the housings to allow ease of access. Figure 5 shows the position of the FPA within the camera head, and Figure 8 (left) shows a photograph of the mechanical prototype FPA developed under the Planetary Instrument Definition and Development Program (PIDDP).


Figure 7: Block Diagram of Descent Imager Electronics

The heart of the focal plane is a Kodak KAI-1001 CCD. This detector has 1024 X 1024 9-micron pixels (1018 X 1008 photoactive), and uses interline transfer to implement electronic shuttering. The KAI-1001's fill factor of 20% causes its quantum efficiency to be low, especially red-ward of 700 nm. These effects combine to make the detector comparatively poor in sensitivity, but the optics are sufficiently fast to compensate, allowing this compact CCD to be used.

Two capabilities of the detector can be used to reduce the raw data rate from the camera. First, on-chip 2X summing can be used to add adjacent lines together in the charge domain. Second, the CCD's fast-dump feature can be used to read out only selected portions of the detector.


JPG = 58 KBytes
GIF = 165 KBytes
Figure 8: FPA (left) & DAS (right) Mechanical Prototypes and Clock Drivers (bottom) (Boards are 5 cm by 4.6 cm)

The FPA incorporates three innovative characteristics. First, the clock drivers and their supporting voltage regulators, which ordinarily represent the largest and most complex FPA circuit block, have been implemented in an analog application-specific integrated circuit (ASIC), designed as part of the PIDDP effort and manufactured by ABB Hafo using an inherently-radhard, CMOS mixed-mode process. This device takes logic-level clock patterns from the digital electronics and converts them into the voltages appropriate for the detector. The basic ASIC is used singly or in pairs to generate the individual clock signals required by the detector (Figure 8, bottom). Detector-specific tuning is accomplished by adding a small number of discrete "select" components; for the KAI-1001 family, this tuning has already been designed and tested as part of the PIDDP development effort.

Second, a nonlinear system gain has been implemented to compress/expand the video signal strength to the counting statistics. The detector outputs an analog signal level for each pixel clocked out; this signal must be digitized for further processing and ultimately, transmission. With linear encoding, a 12-bit Analog-to-Digital Converter (ADC) would be required to capture the full dynamic range of the detector, but such devices use significantly more power than 8-bit devices. The MOC used an 8-bit ADC and programmable gain and offset modes to select the analog range to be digitized, but this resulted in both electronic and operational complexity. However, since CCDs are photon-counting devices, the statistical error for each pixel increases with the square root of the signal level, and thus, linear encoding is wasteful. As a much simpler alternative, the MARDI design uses charge-domain square root encoding. This encoding is performed by a differential MOSFET pair, encoding the full well of the KAI-1001 (~30,000 e-) into a 1-volt range, which is then digitized by a CA3318 8-bit flash ADC. This approach has the performance of 12-bit linear encoding but with lower power requirements.

Finally, a fast (30 MIPS) digital signal processor (DSP) is used to emulate the remaining video processing while embedding the CCD clock transitions directly in software. This component of the DAS (see next section) greatly reduces the complexity of the FPA.

The FPA weighs 150 gm (including 70 gm for radiation shielding), and is 4.6 X 5 X ~3 cm in size.

4.1.3.2. Data Acquisition System

The DAS module (Figures 5, 7 (right), and 8 (right)) extracts the analog pixel data from the FPA, digitizes it, corrects for various FPA drifts and pattern errors, and passes the resulting data to the spacecraft under CPU control. All normal pixel-related processing is performed in realtime.

The DAS permits the descent camera head to act in a largely autonomous manner. To minimize the bandwidth of the CPU/DAS communications link, the DAS is capable of sustained operation with a minimum of command.

VLSI components make a highly-integrated, low-part-count digital design possible. The digital electronics use only two major components: a Digital Signal Processor (DSP) and a Field-Programmable Gate Array (FPGA).

The DSP in the DAS permits full speed software emulation of much of the usual analog processing, including correlated double sampling (CDS). Using software emulation, the zero reference ("reset") level for each pixel is digitized and stored in a register, the sum of the video plus zero reference ("video") level is then digitized, and an arithmetic subtraction is performed to produce the final result. The CCD output only requires scaling to the ADC range; no analog sampling, delay or differencing is required. In order to minimize the range of values consumed by the reset level and its noise, mean and variance statistics are accumulated along each line, line-to-line results are digitally filtered, and a control value is written to a DAC as feedback to the analog electronics.

The Motorola DSP56166 was selected because it can process 3 Mpixels/sec (30 MIPS), incorporates 2K X 16-bit data and 2K X 16-bit program memory on-chip, has two <= 15 Mb/sec serial ports that can be used simultaneously for a throughput of <= 30 Mb/sec, and its firmware can be booted over these serial lines. For the nominal frame period of 2 sec, it executes up to 40 arithmetic instructions per pixel. These performance characteristics enable this DSP to generate the CCD clocks, invert the square root transfer function implemented before quantization, perform the correlated double sampling subtraction, re-encode the video, apply lossless (2:1) first-difference Huffman compression, and transmit it digitally with handshaking over the serial communication interface to the spacecraft CPU.

The DAS also includes a field-programmable gate array (a Xilinx 3190A FPGA), used to implement high-speed logic functions such as high-speed clock patterning and interface logic; additional capacity remains for adaptation to the spacecraft interface.

The DAS mass is about 100 gm (of which 30 gm is radiation shielding). It is 4.6 X 5 X ~1.7 cm in size.

4.1.3.3. Power Supply

The PIDDP breadboard uses the Interpoint MTO2815T power converter, which produces isolated +5v and +/-15v from a nominal 28v input. The ripple on the +/-15v is excessive for the front-end video circuitry, so it is downregulated with series-pass regulators (LP2951 for +12V and LM2990 for -12V) to remove ripple. The flight units will use the MRH2815T, which is a radiation-hard (105 rads Si) version in the same form-factor. Total mass, including regulators and 50 gm of radiation shielding, is under 120 grams. The dimensions of the PWR module are 5 X 3.5 X 1.3 cm.

4.1.4. Software

4.1.4.1. Control Software

Software for the descent imager runs on two processors: the main spacecraft CPU and the DAS DSP. The CPU will be responsible for instrument operational commands and image post-processing and compression. The DSP is responsible for generating the CCD clocks, emulating the required analog processing and transmitting the data output to the CPU.

MARDI does not provide persistent storage for the DSP firmware or the FPGA configuration--when power is applied, the camera loads the DSP and FPGA code from the CPU over the serial interface (total volume of loaded code is ~12 KB). The DSP then waits for image acquisition commands over the serial input. The DSP only has 4 KB of program storage, so the software running in the DSP will be quite simple, and all DSP code will be handwritten in assembly language. Most of the DSP code will be devoted to running the camera hardware, consisting of per-frame initialization and the main loop of clock generation/pixel readout/software CDS/pixel transmission. Lossless predictive compression will also be implemented as part of the DSP firmware. The algorithm to be employed compresses each image line independently by encoding first differences with a single, fixed Huffman table. Selective readout and pixel summing can also be performed by the DSP software. The result of an imaging command will be a stream of raw or compressed 8-bit pixels.

If a timeout is detected by the CPU, it will power-cycle the system, wait for a specified period, and send the initialization sequence again.

The two Reduced Serial Interface (RSI) ports of the DSP each provide a three-signal interface (receive, transmit, and clock) at up to 15 Mbps per port. RS-422 line drivers will be used to communicate with the spacecraft through these RSI ports.

The operations part of the CPU program is relatively straightforward. Commanding code will be small (<<128 KB).

4.1.4.2. Data Editing/Compression

Experience has shown that the volume of data likely to be returned from a spacecraft often evolves during the development phase of a mission. Implementing data compression in software on the spacecraft computer provides the maximum flexibility for the science and spacecraft team to trade-off data return and buffer space usage. The compression modes to be provided are lossless predictive (capable of application by the DSP in realtime, i.e., < 2 sec), relatively fast discrete cosine transform (applied by the spacecraft CPU during descent in "near-realtime," i.e., 5-10 sec), and high-quality lossy wavelet (for example, a zerotree wavelet compressor[2], applied by the CPU after landing), each with optional pixel summing.

Aspects of the descent of the Mars Surveyor '98 lander create the need for both fast and slow data compression capabilities. Assuming observations during approximately 70 seconds of descent (starting about 10 seconds after parachute deployment), about ten images should be taken to provide a resolution ratio of 2:1. The PIP indicates that only 37 Mbits (roughly 4 images at 8 bits/pixel) are available for data storage. Thus, compression of somewhat over 2:1 is needed. However, while the first image has tens of seconds to be processed, the last images do not. Thus, higher compression is needed early, in order to preserve memory to hold the last images, and fast compression at the end of the descent is highly desired.

There are two ways of insuring the properly spaced (in resolution) acquisition of images. The preferred way would be to trigger each image acquisition using the descent altimeter. Thus, only those images destined to be returned to Earth would be acquired. This would also have the advantage of reducing the space needed for image storage, and hence the compression factor. For example, a 10-image sequence would require a compression factor of only 2.2:1 to meet the buffer volume limitation. Since the altitude from the radar altimeter is probably already available within the spacecraft computer (for terminal descent sequencing), either the control software could inform the camera acquisition task with, or the camera task could look at a specific location to read the present value of, the current time and altitude. This activity could run at reduced priority so as not to interfere with other, more critical functions. The acquisition software would then compare the altitude against a list of altitudes at which imaging should be performed, and trigger image acquisitions at the appropriate altitudes.

However, in order to insure that the appropriate images are acquired even if access to the altimeter is not possible, or if the software cannot provide the information in a timely manner, an alternative capability is available. If the camera acquires images continuously (e.g., once every 2 seconds), a sieving algorithm (developed during the PIDDP activity) can be used to retain select images at specified increments that will approximate the desired resolutions, even in the absence of any knowledge of altitude. The challenge is to fit these images into the available memory. All images will initially be compressed losslessly by a factor of about 2:1; this essentially doubles the available memory. As each image passes through the sieve, it is either discarded or decompressed and recompressed using the DCT compressor. The last images are stored losslessly compressed. Table 3 shows how a 10-image sequence fits within the available buffer.

4.1.5. Fault Protection

Both the FPGA and the DSP are subject to infrequent radiation-induced upset. The DSP software will periodically check program and data memory integrity via checksums, and enter a standby state if a loss of data integrity is detected. The gate array will provide "watchdog timer" functions in case the DSP enters a program loop due to upset. If the processor fails to provide the keepalive signal, it will be interrupted and forced into the standby state. When the system enters the standby state for any reason, monitoring from the spacecraft CPU will detect this, and perform power-cycling to force reinitialization. Potentially destructive latchups of the DSP and/or FPGA (which are possible, but not expected with the selected devices) will be detected and cleared by overcurrent detection circuitry similar to that used in the MOC.

4.2. Advanced Technology

As described earlier, MARDI incorporates "state-of-the-art" imaging technologies without requiring new developments. The advanced technologies it uses have been validated by the PIDDP effort. Among the new technologies used are: flip-chip surface mounting of components using conductive adhesives (conductive surface mount adhesives, or CSMA), analog application specific integrated circuits, signal companding in the analog domain using a differential MOSFET pair, use of a megapixel electronically-shuttered CCD detector, Correlated Double Sampling in the digital domain using a digital signal processor, and clock signal patterning using an FPGA. Use of these technologies results in a highly capable, very low-mass instrument that is reliable (through the use of small numbers of standard components), reprogrammable (through extensive use of firmware and FPGA "logicware" to replace hardware), and easily manufactured (due to low part count and advanced fabrication techniques). These technologies are enabling, allowing imaging instruments to be used in circumstances traditionally thought too constrained for them.

4.3. Payload/Instrument Integration Requirements

4.3.1. General

The only radiation sensitive part in the design is the CCD, which will require spot shielding to < 2-4 Krad. Other portions of the electronics are radiation tolerant, but possibly prone to single event upsets or latchups (SEU or SEL). As noted in Section 4.1.5., latchup detection and reset circuitry will be used to protect against SEL, and software will be used to mitigate SEU.

MARDI has no concerns about magnetic fields, and does not generate any field.

MARDI uses no calibration targets during flight. MARDI requires a field of view of ~75° . The preferred orientation biases this FOV away from the descent propulsion system plume, towards the horizon, but includes the ground immediately beneath the spacecraft during terminal descent. For further discussion, see Section 4.3.4., below.

4.3.2. Power

MARDI uses +/-5V and +/-12V regulated power, provided by its own power supply, which draws 2 W operating, 0.1 W standby from the spacecraft unregulated 28 V power supply.

4.3.3. Thermal

The MARDI operating temperature range is -40° to +70° C. Survival temperature range is -80° to +100° C. Multilayer insulation (MLI) will maintain survival and operating temperature during cruise and descent. MARDI will not, of course, need power after landing.

4.3.4. Mechanical

It is recognized that the mounting of the descent camera will require trades with spacecraft requirements, and selection and design of the appropriate mounting for the camera will clearly involve interaction with the spacecraft designers. Two mounting locations have been examined to demonstrate that such locations are feasible.

Under ideal circumstances, the descent imager is mounted on a small bracket on either the south or northeast footpad, and views generally downward through a cutout in the footpad approximately 3.5 cm in diameter. Figure 9 illustrates this mounting position. The electrical and data cable, connecting the camera to the spacecraft, runs through or along the leg strut, but is not structurally attached to the leg. A service loop approximately 10% longer than the maximum leg extension in included to avoid deployment mechanisms.


Figure 9: Lander Footpad Mounting Concept

The second location is on the bottom panel inboard of the northeast landing leg (between panels 1 and 2). From this location, the interface cable can be routed directly into the main spacecraft enclosure.

Footpad mounting is best for descent imaging, as it is nominally farthest from the plume of the descent propulsion system. The optical properties of the engine plumes are likely to permit imaging, although potentially degraded (hydrazine should be transparent, but thermal- and pressure-induced turbulence may produce optical distortion). The short exposure time (250 usec) mitigates some of the problems associated with the plume, but mounting the instrument as far from the effects as possible will be of great benefit.

4.3.5. Telemetry

The descent camera requires as high a data rate from the instrument to the spacecraft as can be accommodated. The spacecraft description in the PIP indicates that two RS-422 ports, capable of supporting 1 Mbps each, are available to the payload. MARDI would like to use both ports during its 80 second period of operation. The DSP chip within the instrument provides two Reduced Serial Interface ports that can be run with external clock lines and 8- or 16-bit framing at data rates of up to 15 Mbits/sec per port. If this protocol is acceptable, RS-422 line drivers will be directly attached to provide 2 three-signal interfaces (receive, transmit, and clock) each running at 1 Mbps. If an incompatible synchronous or asynchronous protocol is required, it will be implemented using the spare capacity of the FPGA.

A single port would reduce the volume and quality of the highest resolution images returned (roughly 2 fewer images, a terminal nesting scale ratio of roughly 4 rather than 2, and the two highest resolution images would have resolutions of 10 and 2.4 cm/pixel rather than 2.4 and 0.9 cm/pixel).

If possible, non-operating temperature values should be returned for health/welfare monitoring during cruise.

4.3.6. Command

MARDI requires no uplink commands. The descent imaging sequence is predetermined prior to launch by the use of the descent altimeter or the sieving algorithm. Similarly, the compression applied to each image is predetermined in order to permit the data to fit within the available buffer memory.

MARDI will need one bi-level command (Descent camera on/off).

4.3.7. Attitude

MARDI places no constraints on the orientation of the landing. The descent camera has a 73.4° FOV that must be oriented towards the ground during descent.

4.3.8. Integration and Ground Operations/ Testing

MARDI should be relatively simple to integrate with the spacecraft, provided interfaces are established early. Interface connections consist of 28 V power and 2 three-signal data interfaces.

No targets will be needed during spacecraft testing, and none will be used during flight.

The MARDI team will fully support spacecraft system-level integration and testing (I&T). The MARDI Flight Model (FM) will support flight-level testing. Details of the MARDI team support of system-level I&T will be established after selection in compliance with Mars Surveyor '98 Program requirements.

4.4. Test and Calibration

4.4.1. Instrument-level

Tests will be performed to verify correct functioning of the instrument. These tests will include board-level verification of each major subsystem, system-level tests after board integration, and environmental testing (thermal/vacuum and vibration.) The Ground Support Equipment and breadboard developed for PIDDP will be used to support standalone operation.

Concurrent with testing, calibration will also be performed. Calibration will measure, as a function of temperature where appropriate: