Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
ISO 29770: Space Systems — EEE Parts
Selection, qualification, procurement and management of electrical electronic and electromechanical parts for spacecraft
EEE Parts (Electrical, Electronic and Electromechanical components) account for 60–80% of all spacecraft anomalies. A single counterfeit part or latent manufacturing defect can compromise a mission costing hundreds of millions of dollars.
1. Part Selection and Qualification Framework
ISO 29770 establishes a codified framework for the selection, qualification, procurement, and management of EEE parts for space applications. The standard defines three primary quality levels: ESCC (European Space Components Coordination) Class 1 for mission-critical applications (failure consequences include loss of mission or life), Class 2 for high-reliability applications, and Class 3 for enhanced plastic encapsulant commercial-off-the-shelf (COTS) devices qualified for limited mission profiles. The trend towards NewSpace constellations has driven significant interest in Class 3 qualification pathways that allow commercial-grade parts to be used with risk mitigation measures.
Qualification testing per ISO 29770 includes: life testing (1,000–10,000 hours at maximum rated temperature), temperature cycling (−55 to +125 °C for 500–2,000 cycles), humidity resistance, mechanical shock (1,500 g, 0.5 ms, half-sine), vibration (20–2,000 Hz at 20 g), PIND (particle impact noise detection) testing for hermetically sealed packages, and radiation testing (total ionising dose, displacement damage, single-event effects). The standard requires that all test data be documented in a qualification test report and that any change in manufacturing process, material, or design triggers requalification.
| Part Category | ESCC Level | COTS Level | Typical Screening | Application Domain |
|---|---|---|---|---|
| Microprocessors / FPGAs | Class 1 (radiation-hard) | Class 3 (with TID test) | 100% burn-in at 125 °C / 240 h | On-board computers, payload processors |
| Power MOSFETs / IGBTs | Class 1 | Class 2–3 | 100% power cycling, RDS(on) drift test | Power supplies, motor drives |
| Operational amplifiers | Class 1–2 | Class 3 | 100% parametric, 5-unit life test | Analog signal conditioning, telemetry |
| Connectors (D-sub, circular) | Class 1 | Class 2 | 100% contact resistance, insertion/extraction | All spacecraft harnessing |
| Crystals / oscillators | Class 1 | Class 2 | 100% frequency stability vs. temperature | Clock generation, RF synthesisers |
Counterfeit parts are a growing threat to the space supply chain. ISO 29770 mandates a minimum set of counterfeit detection measures: external visual inspection (per AS6171), X-ray fluorescence (XRF) material analysis for lead-free versus tin-lead termination verification, and destructive physical analysis (DPA) on a sample basis (typically 3–5 units per procurement lot).
2. Radiation Hardness Assurance
Radiation effects are the single greatest environment-related risk for EEE parts in space. ISO 29770 specifies a three-element RHAP: Total Ionising Dose (TID) testing (typically 50–300 krad(Si) for GEO, 20–100 krad(Si) for LEO missions), Displacement Damage Dose (DDD) testing (for optoelectronics and power devices), and Single-Event Effects (SEE) characterisation (heavy-ion testing at fluences of 1 × 10⁷ ions/cm² per test condition). The standard defines acceptable SEE rates based on mission criticality: for Class 1 systems, the predicted upset rate must be below 1 × 10⁻⁷ upsets/bit/day, and latch-up must be eliminated through design (current-limiting or power-cycling recovery) with a maximum allowed latch-up rate of 1 × 10⁻⁸ events/device/day.
The use of triple modular redundancy (TMR) in FPGA designs, combined with scrubbing of configuration memory, can reduce the single-event upset (SEU) cross-section by a factor of 10³–10⁵ compared to unprotected designs. ISO 29770 provides a decision tree for determining whether TMR, EDAC (Error Detection And Correction), or watchdog-based recovery is appropriate for a given mission class.
3. Procurement, Verification and Obsolescence Management
The standard provides detailed procurement specifications including: source control drawings (SCDs) for custom hybrid circuits, standardised procurement schedules (72-point inspection plan for Class 1 parts), lot acceptance testing (LAT) on each manufacturing lot, and bonded stock management for mission-critical long-lead items. Obsolescence management is a critical concern — the typical space mission development cycle (5–10 years from design to launch) often exceeds the commercial availability window of many semiconductor devices. ISO 29770 recommends a two-pronged strategy: (i) lifetime buy of sufficient devices to cover the programme plus 100% spares, and (ii) second-source qualification to ensure at least two qualified suppliers exist for each critical part type.
The 2015 loss of the SpaceX CRS-7 mission, while primarily a launch vehicle structural failure, highlighted a broader concern: the mission’s COTS pressure transducer had a latent manufacturing defect (a flawed weld joint in the sensor diaphragm) that escaped standard acceptance testing. ISO 29770 requires that all COTS parts used in safety-critical applications undergo additional destructive physical analysis (DPA) and accelerated life testing beyond the manufacturer’s standard qualification to detect such latent defects.
Frequently Asked Questions
Q: Why are space-grade parts so much more expensive than commercial equivalents?
A: Space-grade parts require comprehensive qualification testing, 100% screening (burn-in, temperature cycling, radiography), extended life testing, and radiation characterisation. The limited production volumes (hundreds to thousands per year versus millions for commercial parts) also prevent economies of scale. A space-grade RAD750 processor costs approximately $200,000 compared to $500 for a commercial equivalent.
A: Space-grade parts require comprehensive qualification testing, 100% screening (burn-in, temperature cycling, radiography), extended life testing, and radiation characterisation. The limited production volumes (hundreds to thousands per year versus millions for commercial parts) also prevent economies of scale. A space-grade RAD750 processor costs approximately $200,000 compared to $500 for a commercial equivalent.
Q: Can commercial-grade FPGAs be used in space?
A: Yes, with appropriate mitigation measures. Several CubeSat missions have flown Xilinx Zynq and Microchip PolarFire FPGAs with TMR, configuration scrubbing, and radiation testing to the expected mission TID. However, total ionising dose tolerance of commercial-grade devices is typically 10–30 krad(Si) versus 300–1,000 krad(Si) for rad-hard equivalents, limiting their use to short-duration LEO missions.
A: Yes, with appropriate mitigation measures. Several CubeSat missions have flown Xilinx Zynq and Microchip PolarFire FPGAs with TMR, configuration scrubbing, and radiation testing to the expected mission TID. However, total ionising dose tolerance of commercial-grade devices is typically 10–30 krad(Si) versus 300–1,000 krad(Si) for rad-hard equivalents, limiting their use to short-duration LEO missions.
Q: What is the most common cause of EEE part failure in orbit?
A: Statistical analysis of on-orbit anomaly reports shows that electrostatic discharge (ESD) damage and single-event effects (SEE) account for approximately 45% of electronics anomalies. Wire bond failures and solder joint fatigue each account for about 15%, while the remainder is distributed across connector issues, PCB failures, and unknown causes.
A: Statistical analysis of on-orbit anomaly reports shows that electrostatic discharge (ESD) damage and single-event effects (SEE) account for approximately 45% of electronics anomalies. Wire bond failures and solder joint fatigue each account for about 15%, while the remainder is distributed across connector issues, PCB failures, and unknown causes.
Q: How is tin whisker formation mitigated for space electronics?
A: Tin whiskers pose a serious short-circuit risk. Mitigation strategies include: using tin-lead solder (Sn63Pb37) which suppresses whisker growth, conformal coating of all PCB assemblies (parylene-C or urethane at 25–75 μm thickness), and tin whisker acceptance testing (1,000–4,000 hours at 55 °C/85% RH). Pure tin terminations on components are generally prohibited unless covered by a fused tin-lead hot-solder dip.
A: Tin whiskers pose a serious short-circuit risk. Mitigation strategies include: using tin-lead solder (Sn63Pb37) which suppresses whisker growth, conformal coating of all PCB assemblies (parylene-C or urethane at 25–75 μm thickness), and tin whisker acceptance testing (1,000–4,000 hours at 55 °C/85% RH). Pure tin terminations on components are generally prohibited unless covered by a fused tin-lead hot-solder dip.
