Orion Flight Computer

The Orion Flight Computer is the central “brain” of NASA’s Orion spacecraft — the deep-space capsule that carries astronauts toward the Moon on the Artemis missions. Its single most important job is simple to say and hard to do: keep working, even when struck by radiation, so the crew stays safe.

Quick facts

• Used on: NASA’s Orion spacecraft (also called the Multi-Purpose Crew Vehicle, or MPCV) for the Artemis Moon program.
• Made by: Honeywell Aerospace, and built into the spacecraft by prime contractor Lockheed Martin for NASA.
• Heritage: descended from the Integrated Modular Avionics — the shared electronics system — that Honeywell developed for the Boeing 787 airliner.
• Processor: a radiation-tolerant IBM PowerPC 750FX chip, the same chip family once used in Apple’s iBook G3.
• Network: a triple-redundant, roughly 1 Gb/s Time-Triggered Gigabit Ethernet data network, co-developed by Honeywell and TTTech of Austria — a deterministic, radiation-hardened Ethernet for crewed deep-space flight.
• Versus Apollo: each computer is about 20,000 times faster, holds about 128,000 times more memory, and weighs roughly 75% of Apollo’s single flight computer.

What it is and how it works

The flight computer is Orion’s central nervous system. It acts as the “vehicle manager,” reading data from sensors — inertial measurement units (motion-and-orientation sensors), GPS receivers, and star trackers (cameras that fix position by the stars) — and then commanding the engines, thrusters, power, life support, and crew displays. All of this travels over one shared data network instead of separate wires for every device, the “integrated modular” idea borrowed from modern airliners to cut weight and wiring.

Reliability comes from layered backups, not exotic parts. The system holds two Vehicle Management Computers; each contains two Flight Control Modules, for four modules total. Inside each module, two processors run the exact same software on the exact same inputs and constantly compare answers — eight processors working in parallel.

If the two ever disagree — usually because a cosmic ray or solar particle flipped a single bit of data, an event called a single-event upset — the pair “fails silent.” Rather than risk sending a wrong command, it stops commanding, reboots in about 20 seconds, and rejoins. During that reset, the capsule keeps flying on the other modules. The system can lose three of its four modules over roughly 22 seconds and still fly on the last one. Healthy modules are chosen by a fixed priority order rather than by majority vote.

Beneath all of this sits a completely separate Backup Flight Software system, running on different hardware, a different operating system, and simpler code written independently. This “dissimilar redundancy” means a single hidden bug cannot disable both systems at once.

Why it matters

Orion flies astronauts far beyond low Earth orbit, through the Van Allen radiation belts — bands of charged particles trapped by Earth’s magnetism — and into deep space, where there is no quick return and far more radiation than the International Space Station faces. A computer crash there could be fatal. So the design deliberately trades raw speed for proven, radiation-tolerant parts and extreme fault tolerance. The guiding rule is that it must never fail.

That makes it one of the most fault-tolerant flight computers ever built for a crewed vehicle. To gauge the odds, engineers estimated that losing both primary computers at once would be about a 1-in-8,500 risk — small, but high enough that early test flights flew with an extra backup computer as insurance, and that the chance of losing all three at once drops to roughly 1 in 1,870,000. The design also proves two ideas that matter for all future deep-space travel: self-checking, fail-silent backups that recover from radiation hits instead of crashing, and airliner-style modular avionics on a time-triggered network that keeps strict timing while cutting weight and complexity.

Where it’s used and notable examples

• Exploration Flight Test-1 (2014): an uncrewed Orion flew through the Van Allen belts to validate the avionics, carrying a third backup flight computer as extra radiation insurance.
• Artemis I (2022): an uncrewed Orion looped around the Moon and back, giving the vehicle management computers, sensors, and Time-Triggered Gigabit Ethernet network a full deep-space shakedown.
• Artemis II (crewed lunar flyby): the configuration profiled as one of the most fault-tolerant computers built for spaceflight.
• Artemis III (Moon landing, targeted around 2027): Orion’s flight computers were powered on for the first time during assembly at Lockheed Martin, a milestone toward the crewed landing.