Design and validation of a GNC system for missions to asteroids: the AIM scenario

Deep space missions, and in particular missions to asteroids, impose a certain level of autonomy that depends on the mission objectives. If the mission requires the spacecraft to perform close approaches to the target body (the extreme case being a landing scenario), the autonomy level must be increased to guarantee the fast and reactive response which is required in both nominal and contingency operations. The GNC system must be designed in accordance with the required level of autonomy. The GNC system designed and tested in the frame of ESA's Asteroid Impact Mission (AIM) system studies (Phase A/B1 and Consolidation Phase) is an example of an autonomous GNC system that meets the challenging objectives of AIM. The paper reports the design of such GNC system and its validation through a DDVV plan that includes Model-in-the-Loop and Hardware-in-the-Loop testing. Main focus is the translational navigation, which is able to provide online the relative state estimation with respect to the target body using exclusively cameras as relative navigation sensors. The relative navigation outputs are meant to be used for nominal spacecraft trajectory corrections as well as to estimate the collision risk with the asteroid and, if needed, to command the execution of a collision avoidance manoeuvre to guarantee spacecraft safety