{"id":90600,"date":"2026-10-12T14:06:09","date_gmt":"2026-10-12T06:06:09","guid":{"rendered":"https:\/\/wp-productionenv-bjg9h2g2bgg5b8aa.southeastasia-01.azurewebsites.net\/?p=90600"},"modified":"2026-10-12T14:07:38","modified_gmt":"2026-10-12T06:07:38","slug":"can-satellites-crash-software-and-updates-in-orbit","status":"publish","type":"post","link":"https:\/\/starpath.global\/blog\/can-satellites-crash-software-and-updates-in-orbit\/","title":{"rendered":"Can Satellites Crash? Software and Updates in Orbit"},"content":{"rendered":"

When an expensive AI server in a ground-based data center develops a bug, engineers can usually reboot it remotely. But put that server in orbit, 400 kilometers above Earth, circling the planet roughly every 90 minutes\u2014and who handles the restart?<\/p>\n

Difference One: Software Needs Armor<\/h2>\n

If an app crashes on Earth, you can usually just reopen it. If onboard satellite software crashes, the consequences can range from losing contact with a payload to losing control of the entire spacecraft. That makes defensive design<\/strong> a central principle of flight software.<\/p>\n

    \n
  1. Watchdog timers:<\/strong> If the software freezes, an independent hardware circuit detects that it has stopped responding. Once a preset timeout expires, it triggers a reset without waiting for a command from the ground.<\/li>\n
  2. Two-out-of-three voting:<\/strong> Critical calculations can run on three redundant processing channels. A result is accepted when at least two agree, helping protect against a single-event upset that flips a bit from 0 to 1.<\/li>\n
  3. Worst-case timing:<\/strong> For critical real-time tasks, engineers must establish worst-case execution times and ensure that deadlines can be met. \u201cIt might occasionally run a little slowly\u201d is not an acceptable assumption for a safety-critical control function.<\/li>\n<\/ol>\n

    In plain English: writing satellite software is closer to developing an airliner\u2019s flight-control system than building an app for your phone.<\/p>\n

    Difference Two: Updates Arrive Over the Air\u2014but Require Extreme Care<\/h2>\n

    Traditional satellites were generally designed around a fixed mission, with limited scope for changing their capabilities after launch\u2014even when software patches were possible. A new generation of software-defined satellites<\/strong> makes in-orbit reconfiguration a much larger part of the design. Through over-the-air (OTA) software updates<\/strong>, ground teams can upload new code, replace software modules, fix bugs, deploy new algorithms and adjust tasks without replacing hardware.<\/p>\n

    But updating a satellite requires far more caution than updating a phone. Before deployment, new software must undergo extensive testing on ground-based simulators or representative hardware. Depending on the spacecraft\u2019s architecture, a staged update may load the new version into a backup partition, verify it, and only then switch it into active use. A tested rollback path is essential.<\/strong> A failed phone update may require a factory reset; a failed satellite update can put an investment worth hundreds of millions of yuan at risk.<\/p>\n

    Jargon Card: Software-Defined Satellites<\/h3>\n

    A software-defined satellite uses software to configure a substantial share of its functions, while the hardware provides the underlying capabilities. It might run a remote-sensing analysis today, deploy a new algorithm tomorrow, or reconfigure a communications service later\u2014provided its installed payloads and hardware support those tasks.<\/strong> Software alone cannot turn an imaging-only satellite into a communications satellite.<\/p>\n

    In plain English: instead of remaining tied to its original configuration, a satellite can gain capabilities throughout its operational life.<\/p>\n

    Difference Three: One Satellite, Multiple Roles\u2014and a New Cost Equation<\/h2>\n

    The ultimate value of software-defined architecture is its potential to turn a dedicated satellite into a more versatile platform<\/strong>. One example is Pengcheng Nanke-1, launched on September 20, 2026. The 150-kilogram satellite combines a 5G non-terrestrial network (NTN) base station and core network, a 100 Gbps satellite-to-ground laser communications payload, and an AI computing payload. It was described as integrating communications, sensing, intelligence and computing, while exploring \u201cmultiple uses and integrated functions on a single satellite\u201d (China Securities Journal, September 20, 2026).<\/p>\n

    Return to the total cost of ownership (TCO) discussion. If a satellite can take on additional roles through software updates, its development cost can be spread across more services, increasing the value delivered over its lifetime. Hardware lowers costs through production at scale; software adds value through reuse.<\/strong> These are two complementary routes to improving constellation economics.<\/p>\n

    Key Figures<\/h2>\n
      \n
    1. Pengcheng Nanke-1:<\/strong> A 150-kilogram satellite integrating a 5G NTN base station and core network, a 100 Gbps satellite-to-ground laser communications payload, and an AI computing payload to explore multiple uses and integrated functions on one spacecraft (China Securities Journal, September 20, 2026).<\/li>\n
    2. Orbital period:<\/strong> Roughly 90 minutes per orbit for a satellite at the low-Earth-orbit altitude used in this example\u2014a basic reference point from the 101 series. The precise period depends on orbital altitude.<\/li>\n
    3. Three-Body Computing Constellation:<\/strong> Peak computing capability reaches up to 744 TOPS, or 744 trillion operations per second, on a single satellite, according to Zhejiang Lab. As onboard computing capabilities and workloads expand, software reliability remains essential.<\/li>\n<\/ol>\n

      Further Thinking<\/h2>\n

      There is a security question worth remembering: if a satellite supports OTA updates, attempts to install unauthorized software become part of the threat landscape.<\/strong> Cyberattacks are already a constant concern on Earth. What could happen if an attacker compromised a satellite in orbit?<\/p>\n

      One Sentence to Remember<\/h2>\n

      Earlier satellites were largely defined at launch; software-defined satellites can keep evolving in orbit\u2014reshaping the value they deliver throughout their lifecycle.<\/strong><\/p>\n

      That lifecycle perspective also matters when procuring a satellite: the platform, payloads and upgrade strategy need to support the services you intend to deliver. STARPATH GLOBAL draws on China\u2019s expanding satellite manufacturing capacity to offer international customers competitively priced satellite, payload and assembly, integration and test (AIT) solutions. To explore a configuration that fits your mission and budget, discuss your requirements with STARPATH GLOBAL<\/a>, including the hardware capabilities needed to support future software upgrades.<\/p>\n","protected":false},"excerpt":{"rendered":"

      When an expensive AI server in a ground-based data center develops a bug, engineers can usually reboot it remotely. But put that server in orbit, 400 kilometers above Earth, circling the planet roughly every 90 minutes\u2014and who handles the restart? Difference One: Software Needs Armor If an app crashes on Earth, you can usually just […]<\/p>\n","protected":false},"author":1,"featured_media":90601,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[3],"tags":[130,135,635,10587,5856,451,10402,425,10015],"class_list":["post-90600","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-artificial-intelligence","tag-china","tag-cybersecurity","tag-flight-software","tag-laser-communications","tag-satellite-communications","tag-software-defined-satellites","tag-space-computing","tag-three-body-computing-constellation"],"acf":[],"_links":{"self":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/90600"}],"collection":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/comments?post=90600"}],"version-history":[{"count":4,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/90600\/revisions"}],"predecessor-version":[{"id":90605,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/90600\/revisions\/90605"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media\/90601"}],"wp:attachment":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media?parent=90600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/categories?post=90600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/tags?post=90600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}