Thursday, October 6, 2016

Blue Origin In-Flight Escape Test

Super proud "dad mode" on.

I work for Blue Origin. I had the honor and privilege of representing the company as one of the co-hosts for the live webcast. The full webcast is here, if the director's cut (below) gets your blood pumping you should definitely watch the entire flight.


I've spent the last four and a half years working on the propulsion modules' aerodynamics and integrated simulation. It's my baby. I'm glad to have her back from space after five successful missions, including a triggered in-flight escape. 

More cool footage: here's a frame-by-frame of the escape event:


While I enjoy playing with SDR in my free time - this is my passion. Gradatim Ferociter! 

Tuesday, September 27, 2016

Navigation bit plot

Inspired by http://kom.aau.dk/project/softgps/galileoSdr.php the following plot shows the bits sent by PRN-31 over the course of one hour, recorded about a month ago. Each row is a single subframe (6 seconds) and a total of 300 columns represents the bits from each subframe.


Thursday, August 25, 2016

SoftGNSS w/5 Satellites

I fixed a few small bugs and added a few features. In addition, I played around with skipping the initial few milliseconds of sample time and I'm now able to get a fix with five satellites. This gets a better fix and removes the noise we saw in the last post. We now get a pretty clean trajectory without the 'jitter' until after apogee where the nose cone deploys and the radio is dangling under drogue.





The speed of sound is 343 m/sec at sea level; the flight briefly but clearly passed the speed of sound. 

I posted my fork of the SoftGNSS code on GitHub so you can attempt to reconstruct the flight for yourself and play with the data. You can also look at other data sources. I'm sure there are still improvements to be made, but the code is usable. The code requires Matlab. To use,
  1. cd to \SoftGNSS\GNSS_SDR
  2. edit initSettings.m, line 60 to point to the data file (you can download it here, 1.3GB)
  3. run 'init'
This code is flexible enough to work with a variety of file formats; a close inspection of initSettings will show you the options you can play with. The Matlab documentation for fread will provide insight into which format type to use for different data types. Experiment boldly!

One thing I haven't teased out yet: The number of satellites acquired varies depending on the number of bytes skipped. A small jump in a file will change the number of satellites seen, which shouldn't happen, barring a satellite moving out of the visible horizon, but in this case I can step through the file every couple of milliseconds and see satellites come and go. My first instinct is to suspect this is due to automatic gain control (AGC) and changes in the AGC may influence whether or not you pick up the weaker satellites. I don't know for sure; it may also be the way the satellite search is performed, but it's something I'd like to tease out in the near future. 

Tuesday, July 5, 2016

Paul Breed Rocket Test Flight Data #4: SoftGNSS

So where we last left off, I had successfully tracked the last 15 seconds of coast before apogee using GNSS-SDR. We discovered thanks to a little help from jddes on reddit that there was a loud burst of RF noise (confirmed by Paul to be due to a 900 MHz wireless igniter) which caused GNSS-SDR to lose lock on the GPS signal. It had to reacquire and could not do so for ~ 15 seconds

To quote myself:
There are 30 seconds from ignition to apogee, gnss-sdr loses lock during motor firing (~6 seconds) assuming that is insurmountable there is a maximum of 18 seconds of valid GPS data. Assuming perfection, you could start tracking on the next subframe and have a maximum of 20 seconds of flight data, (if you miss that subframe, 15 seconds) so we're over halfway there.

The assumption, in bold, is incorrect! There is no need to wait for a valid subframe of data to resume calculating pseudoranges, rather, the only thing required is that we are locked onto the signal, ie, that our DLL and PLL are actively and correctly tracking the signals. I am still investigating, but this appears to be due to the way gnss-sdr performs the acquisition and tracking: re-acquisition occurs shortly after the noise source goes away, but tracking doesn't occur until after the next subframe is acquired. I believe this is an implicit assumption in the code which doesn't perform a tracking check until that subframe comes in but I am still investigating and will update this post when I determine the exact culprit.

Earlier this year I read the book A Software-Defined GPS and Galileo Receiver: A Single-Frequency Approach. With the book came an accompanying CD with a Matlab-based GPS receiver (GPLv2 licensed) and there are several updates available online. I was unable to run the example data provided with the book and felt gnss-sdr was a far more mature solution. I cached the code for later. After a few months it was gnawing at me that the code wasn't working and I wanted to try and get Paul's data working in another code. It took a week of evenings to get the code up and running, primarily due to Matlab language changes to legacy functions and several bugs in the code. I will document this in an upcoming post along with a link to my repository of the updated code.

It took another evening or two to get Paul's data fed in, as the data type was different (8 bit I/Q instead of 8 bit real) and there were a number of hardcoded assumptions in the code (including file seek operations and FFT bin sizes) that had to be exposed as parameters to get the data working...





...But work it did! The code tracks through the entire ascent until the nose cone jettisons to deploy drogues at apogee, and a few seconds beyond that although it becomes very noisy as the receiver suffers from multipath and the GPS constellation coming in and out of view as the cone tumbles. You will notice the signal is pretty noisy in the east and up components with up to 200 meters of error - this is due to the GPS constellation orientation (bottom right). All of the satellites are in the east quadrant and thus we get excellent resolution in the north direction but poor (ambiguous, one-sided) resolution in the east and up directions. There is a satellite to the west (PRN13) which gnss-sdr picks up. SoftGNSS will acquire it but not successfully track it - if I can get that tracking, the noise in the E/U channels will go away.

Coplotted with the GNSS-SDR data and the Big Red Bee GPS tracker, things fit nicely.



The BRB, gnss-sdr and SoftGNSS all agree on the location of the launch site. gnss-sdr (yellow) loses it at ignition but reacquires near apogee. SoftGNSS tracks all the way past apogee into reentry when the nose cone is swinging under drogue and the BRB reacquires satellites all the way to the ground. Between SoftGNSS and the BRB tracker we have end-to-end GPS coverage for the flight, with gnss-sdr confirmation at liftoff and apogee. The max speed according to SoftGNSS (with generous filtering) is 350 m/s... right about Mach 1. Still below the CoCOM limit for velocity, but as we see the COTS GPS solution loses lock where we are able to tease out a PVT solution.

So why did this work where gnss-sdr failed? Basically, the naivete of the SoftGNSS program design alowed it happen. SoftGNSS only acquires satellites at the start of file (plus specified offset). It then processes the data, tracking the signals with DLL/PLL for the duration of the file. Once all the file is processed it looks for the first subframe and decodes the next 30 seconds of transmission (five subframes at 6 seconds/subframe) to propagate the ephemeris for each satellite. It then takes the timing information from signal that was tracked to calculate pseudoranges. So long as the DLL/PLL retains a lock we get valid pseudoranges and there's no signal saying "We lost lock, stop calculating pseudoranges." More or less. The figure below shows tracking for PRN22. On the bottom left you see the filtered PLL discriminator which stays tight until liftoff where there's notable jump due to doppler (and likely RTLSDR cystal drift due to acceleration).






    Files
    1. Big Red Bee GPS tracker KML file
    2. GNSS-SDR KML file
    3. SoftGNSS KML file


    Action Item List
    1. Update post on cause of gnss-sdr delay in tracking after losing acquisition
    2. Post on SoftGNSS with links to my github repo

    Tuesday, April 12, 2016

    GNURadio XMLRPC hints

    If you are like me with a Windows computer using GNURadio in a VMware virtual machine, here's what you need to know to XMLRPC from a remote computer into your VMware instance on your local machine.

    First, you need to make sure your VMWare instance is using a bridged connection. A bridged connection will present your VMware instance as a separate computer to your router giving it a unique IP address on the LAN (note: it is possible to use NAT, where the VMware instance appears on a private LAN to your PC, but the configuration gets messy for port forwarding)


    Now, you should be able to use XMLRPC on your LAN. Download the example scripts from the GNURadio repository. In your virtual machine open up 'xmlrpc_server.grc' in grc. Open up the XMLRPC server block and change the IP address from 'localhost' to '0.0.0.0' and the port to whatever port you want to use.


    If you use 'localhost' you will default to the local loopback device and will not be able to reach it from outside the VM instance. Execute the diagram and start the server - you should see a window pop up with a scope and FFT. 

    You will need to get your VMware instances' IP address using ifconfig or some other tool. In my case it is 192.168.1.10.

    On your client machine, download the example scripts and open up 'xmlrpc_client.grc' and edit the XMLRPC client blocks to use the IP address of your VMware instance and the same port


    Execute the diagram and move the slider - you should see it update on the server.

    Now, if you want remote access from outside your LAN we need to configure the router. First off for convenience' sake give the VMware instance a static or reserved IP address so that the MAC address of the VMware instance will always get the same IP address on the local network. Now, we can configure port forwarding, in which your router will take incoming traffic on a certain port and forward it to your virtual machine. My configuration looks like this:


    Now you need to determine your routers' IP address or - better yet - set up a dynamic DNS address so that you can use a URL to always hit your router. I'm not telling you mine :) but I use a free one from freedns.afraid.org. Now go to your off-the-lan computer and update the XMLRPC client as above, but with your router IP address or dynamic DNS. If you did everything right it will work!





    Friday, April 8, 2016

    Paul Breed Rocket Test Flight Data #3: MOAR RESULTS!


    I got a little help on Reddit. Thanks to PE1NUT for identify a way to visualize the crystal drift in the data and jddes for doing some sleuthing: he identified some On Off Keying (OOK) right at ignition. Sure enough; I loadded the data up in Inspectrum (which I should have done in the first place!):


    Turns out Paul is using a 900 MHz wireless transmitter to ignite the rocket which sends OOK for about 1.5 seconds, which leave its mark at 1.5 GHz! There are peaks at ~ -300kHz and ~ +650kHz.

    So I played around with filtering the data with mixed success initially. When you look at the data, the intermediate frequency (IF) is 110 Hz, or damn near zero, so half the spectrum is negative in frequency and the other half is positive. In order to filter just one half of the spectrum you need to have complex taps on your FIR filter. Now, the problem is most of the GNURadio filter blocks don't expose complex taps! The generic FIR filter and the band pass filter do but you have to provide the taps. Fair enough... but the gui to firdes (Finite Impulse Response Design tool) doesn't expose complex taps either! Ideally we'd want two band reject or notch filter. But since the band pass filter does work with complex taps we can add (n+1) band pass filters together to do the same thing - we just band pass two chunks instead of band rejecting one. Ultimately the flowgraph looks like this:


    I also put in an automatic gain control block to try and deal with the jumps in the spectrum (horizontal lines). You can download the flowgraph if you like.

    The easiest way to just filter a chunk of time is to split up the data file into three - the first part, the noisy part, and the last part. A combination of "split -b" and "head -c" are used on the command line, then the files are re-merged with CAT.

    Here's the cleaned-up spectrum. There's still some jumps in the spectrum but the peaks are nulled out. We lose data, but the hope is that the data lost is outweighed by the interference removed.


    I still don't get a valid fix during engine firing but I do reacquire satellites a bit quicker... meaning more data in flight!  Updated trendline in black. Tracking from ~ 3500m to 5000m, covering 12 seconds of flight. There are 30 seconds from ignition to apogee, gnss-sdr loses lock during motor firing (~6 seconds) assuming that is insurmountable there is a maximum of 18 seconds of valid GPS data. Assuming perfection, you could start tracking on the next subframe and have a maximum of 20 seconds of flight data, (if you miss that subframe, 15 seconds) so we're over halfway there. Of course, not losing it during the motor firing would be ideal!

    Money shot

    Tuesday, April 5, 2016

    Paul Breed Rocket Flight Test Data #2: PROGRESS!

    I GOT A gnss-sdr PVT SOLUTION IN FLIGHT!

    Success kid is successful.

    So I managed to get a valid navigation solution for ~ 7 seconds in flight close to what I presume is apogee, absent additional information. Paul flew an IMU but lost the SD card and a Big Red Bee GPS tracker which is, of course, subject to CoCom limits. Below I plotted both the RTLSDR (in red) and the Big Red Bee (in yellow... in retrospect this should have been red!)




    I removed spurious readings from the GPS tracker: these are easy to identify because the GPS time is out of sync. The long red and yellow lines connect the dots from the last good reading on the pad to the first good reading in flight, and are not representative paths per see. If we assume data to be correct it appears the RTLSDR acquires a navigation solution at a higher altitude than the BRB, which based on the speed and drift is operating under chutes. Next up I extracted the the lat/lon/alt from the PVT solution generated by GNSS-SDR (again, the blue line is just connecting the last good fix on the pad with  the first good fix in flight). The data is aligned with the last good fixes for both the RTLSDR and BRB. 










    Now we get confirmation that the RTLSDR does indeed acquire before the BRB, and a little mental extrapolation can connect the dots between the last RTLSDR sample and the first BRB sample post-launch if we presume the rocket is drifting steadily under a drogue parachute. (The inflection in the BRB is likely going from drogues to main chute - awaiting confirmation.)

    The rocket pops the nosecone at apogee to deploy a drogue chute, at which time the nosecone is swinging in the breeze and we don't anticipate getting any data from the RTLSDR because the directional antenna is no longer pointed up. However the BRB is expected to get a fix under chutes, when within the CoCom limits. My thesis is that we get a valid GPS solution about 7 seconds before popping the nosecone and deploying the drogue, which then causes us to lose track on most of the satellites and thus lose our navigation solution. Indeed, the rest of the flight is filled with messages of acquiring and subsequently losing acquisition of satellites.

    Here's an excerpt of the output from just before liftoff to just after apogee:
    Current input signal time = 145 [s]
    NAV Message: received subframe 3 from satellite GPS PRN 22 (Block IIR)
    NAV Message: received subframe 3 from satellite GPS PRN 31 (Block IIR-M)
    NAV Message: received subframe 3 from satellite GPS PRN 1 (Block IIF)
    NAV Message: received subframe 3 from satellite GPS PRN 14 (Block IIR)
    NAV Message: received subframe 3 from satellite GPS PRN 3 (Block IIF)
    NAV Message: received subframe 3 from satellite GPS PRN 10 (Block IIA)
    NAV Message: received subframe 3 from satellite GPS PRN 25 (Block IIF)
    Position at 2016-Feb-06 18:45:47 UTC is Lat = 35.34828164793844 [deg], Long = -117.8089714500355 [deg], Height= 646.4366382388398 [m]
    Current input signal time = 146 [s]
    Position at 2016-Feb-06 18:45:48 UTC is Lat = 35.34792485975112 [deg], Long = -117.8090110485498 [deg], Height= 653.1580742103979 [m]
    Current input signal time = 147 [s]
    Position at 2016-Feb-06 18:45:49 UTC is Lat = 35.34836233536886 [deg], Long = -117.8087743892498 [deg], Height= 622.0710280425847 [m]
    Current input signal time = 148 [s]
    Position at 2016-Feb-06 18:45:50 UTC is Lat = 35.34776621261069 [deg], Long = -117.8090573844694 [deg], Height= 649.063727453351 [m]
    Current input signal time = 149 [s]
    Position at 2016-Feb-06 18:45:51 UTC is Lat = 35.34842555835016 [deg], Long = -117.8087875236563 [deg], Height= 634.0006730658934 [m]
    Current input signal time = 150 [s]
    Position at 2016-Feb-06 18:45:52 UTC is Lat = 35.34802741910629 [deg], Long = -117.808877076439 [deg], Height= 641.1753705441952 [m]
    Current input signal time = 151 [s]
    NAV Message: received subframe 4 from satellite GPS PRN 22 (Block IIR)
    NAV Message: received subframe 4 from satellite GPS PRN 10 (Block IIA)
    Loss of lock in channel 5!
    Tracking start on channel 5 for satellite GPS PRN 11 (Block IIR)
    Current input signal time = 152 [s]
    Loss of lock in channel 6!
    Loss of lock in channel 3!
    Tracking start on channel 6 for satellite GPS PRN 31 (Block IIR-M)
    Tracking start on channel 3 for satellite GPS PRN 14 (Block IIR)
    Loss of lock in channel 0!
    Tracking start on channel 0 for satellite GPS PRN 1 (Block IIF)
    Loss of lock in channel 4!
    Tracking start on channel 4 for satellite GPS PRN 22 (Block IIR)
    Current input signal time = 153 [s]
    Loss of lock in channel 5!
    Tracking start on channel 5 for satellite GPS PRN 11 (Block IIR)
    Loss of lock in channel 6!
    Tracking start on channel 6 for satellite GPS PRN 31 (Block IIR-M)
    Loss of lock in channel 3!
    Tracking start on channel 3 for satellite GPS PRN 14 (Block IIR)
    Loss of lock in channel 0!
    Tracking start on channel 0 for satellite GPS PRN 1 (Block IIF)
    Loss of lock in channel 4!
    Tracking start on channel 4 for satellite GPS PRN 22 (Block IIR)
    Current input signal time = 154 [s]
    Current input signal time = 155 [s]
    Loss of lock in channel 4!
    Tracking start on channel 4 for satellite GPS PRN 22 (Block IIR)
    Current input signal time = 156 [s]
    Current input signal time = 157 [s]
    Loss of lock in channel 4!
    Tracking start on channel 4 for satellite GPS PRN 22 (Block IIR)
    Current input signal time = 158 [s]
    Current input signal time = 159 [s]
    Current input signal time = 160 [s]
    Current input signal time = 161 [s]
    Current input signal time = 162 [s]
    Current input signal time = 163 [s]
    NAV Message: received subframe 1 from satellite GPS PRN 11 (Block IIR)
    NAV Message: received subframe 1 from satellite GPS PRN 14 (Block IIR)
    Current input signal time = 164 [s]
    Current input signal time = 165 [s]
    Current input signal time = 166 [s]
    Current input signal time = 167 [s]
    Current input signal time = 168 [s]
    Current input signal time = 169 [s]
    NAV Message: received subframe 2 from satellite GPS PRN 11 (Block IIR)
    Current input signal time = 170 [s]
    Current input signal time = 171 [s]
    Current input signal time = 172 [s]
    Current input signal time = 173 [s]
    Current input signal time = 174 [s]
    Current input signal time = 175 [s]
    NAV Message: received subframe 3 from satellite GPS PRN 1 (Block IIF)
    NAV Message: received subframe 3 from satellite GPS PRN 11 (Block IIR)
    NAV Message: received subframe 3 from satellite GPS PRN 14 (Block IIR)
    NAV Message: received subframe 3 from satellite GPS PRN 3 (Block IIF)
    Current input signal time = 176 [s]
    Position at 2016-Feb-06 18:46:18 UTC is Lat = 35.3536423978743 [deg], Long = -117.8154004936006 [deg], Height= 4891.649443297647 [m]
    Current input signal time = 177 [s]
    Position at 2016-Feb-06 18:46:19 UTC is Lat = 35.35313826705141 [deg], Long = -117.8151172574466 [deg], Height= 4786.770911485888 [m]
    Current input signal time = 178 [s]
    Position at 2016-Feb-06 18:46:20 UTC is Lat = 35.35361800624526 [deg], Long = -117.8156283909009 [deg], Height= 4907.156536793336 [m]
    Current input signal time = 179 [s]
    Position at 2016-Feb-06 18:46:21 UTC is Lat = 35.35351364315449 [deg], Long = -117.815566988265 [deg], Height= 4801.439769400284 [m]
    Current input signal time = 180 [s]
    Position at 2016-Feb-06 18:46:22 UTC is Lat = 35.35325156470748 [deg], Long = -117.8156706709576 [deg], Height= 4741.917847431265 [m]
    Current input signal time = 181 [s]
    NAV Message: received subframe 4 from satellite GPS PRN 22 (Block IIR)
    NAV Message: received subframe 4 from satellite GPS PRN 1 (Block IIF)
    NAV Message: received subframe 4 from satellite GPS PRN 31 (Block IIR-M)
    NAV Message: received subframe 4 from satellite GPS PRN 11 (Block IIR)
    NAV Message: received subframe 4 from satellite GPS PRN 3 (Block IIF)
    Loss of lock in channel 7!
    Current input signal time = 182 [s]
    Tracking start on channel 7 for satellite GPS PRN 23 (Block IIR)
    Loss of lock in channel 3!
    Tracking start on channel 3 for satellite GPS PRN 26 (Block IIF)
    Current input signal time = 183 [s]


    Therefore, based on the output and plots, I believe liftoff takes place at 151 seconds, engine burns for ~ 5-6 seconds (highlighted in yellow), with apogee occurring at 182 seconds, or roughly 30 seconds on ascent. Apogee of ~ 4850 meters ASL.

    The numerous subframes from 163-182 seconds show we are still getting some meaningful data which could be interpreted by a fft-based approach like fastpgs.


    So what did you change?

    I lowered the bandwidth of all 3 tracking loops by roughly half. Previously I had increased the bandwidth on the loops figuring more bandwidth = ability to deal with rapid shifts in phase/frequency but my intuition was incorrect. I'm still a DSP newbie but I am learning.

    To Do
    1. Continue playing with tracking loops 
    2. Investigate fastgps fft-based solutions

    Files
    1. BRB.kml - Big Red Bee GPS Logger
    2. RTLSDR.kml - RTLSDR tracking