ABSTRACT
Landing on the moon stably is the first condition of performing exploration mission. If the strike load exceeds the limit or the lander tips over, the explorer will be destroyed, not to conducting the mission of exploration. The function of the landing and buffering mechanism (Referred to as buffer) is to reduce the strike load in the process of landing, and to ensure the lander landing on the moon stably and safely. To achieve this goal, the risk analysis based on PRA has been carried out during the process of the product development. First, the analysis objectives and the end states are defined. Second, the initiating events are identified through MLD and FMEA. Third, the analysis models are created, including event sequence diagrams, event trees and fault trees. Finally, the risk of landing and buffering mechanism existed in touchdown and landing is identified. According to the cause and effected area of the risk, we have adopted the risk control measure, including critical item set in the development process and provide more test verification suggestion.
