A menu-type design method based on optimized information fusion applied to a GEO satellite control system, comprising: step, configuring four inertial attitude sensor gyroscopes having a long service life (A1, A2, A3 and A4) for a GEO satellite control system having a long service life, wherein three of the four gyroscopes (A1, A2, A3 and A4) are configured for Kalman filtering, the other one of the four gyroscopes (A1, A2, A3 and A4) is configured for cold backup, and measurement values outputted by each of the gyroscopes during normal operation comprises attitude angle components and attitude angular velocity components along three axes; step, configuring sensors required by a user according to user requirements on hardware configuration, wherein sensors capable of measuring three-axis attitude with required attitude measurement accuracy are configured for the GEO satellite control system having a long service life, the inertial attitude sensor gyroscopes having a long service life (A1, A2, A3 and A4) and the sensors capable of measuring three-axis attitude are combined by satellite-borne computer application software to form three types of Kalman filters, each of which is capable of independently determining attitude, acquiring attitude measurement redundancy information, autonomously performing calibration, and autonomously performing compensation of angular velocity constant drift of the gyroscope; step, filling a two-out-of-three hardware configuration table, a main operation state table, a backup operation state table and a health word in the satellite-borne computer application software based on the configured sensors, and autonomously sorting, by the satellite-borne computer application software on initialization, the Kalman filters acquired in step; and step, in a case where a Fault detection-Isolation-Reorganization, FDIR, module in the satellite-borne computer application software detects a fault, which comprises an optical attitude sensor being interfered by sun light or moon light, being shadowed or being subject to other failures within a short period of time, or one of the inertial attitude sensor gyroscopes having a long service life (A1, A2, A3 and A4) being failed, autonomously generating, by the FDIR module, an alarm corresponding to the fault, and autonomously performing, by a currently selected Kalman filter, reduced-order filtering, and in a case where the fault is not eliminated within a set time period, sending, by the FDIR module, a series of macro instructions, to implement autonomous reorganization, to ensure attitude determination performance of the control system, wherein the long service life indicates a service life longer than or equal to 15 years. step, configuring four inertial attitude sensor gyroscopes having a long service life (A1, A2, A3 and A4) for a GEO satellite control system having a long service life, wherein three of the four gyroscopes (A1, A2, A3 and A4) are configured for Kalman filtering, the other one of the four gyroscopes (A1, A2, A3 and A4) is configured for cold backup, and measurement values outputted by each of the gyroscopes during normal operation comprises attitude angle components and attitude angular velocity components along three axes; step, configuring sensors required by a user according to user requirements on hardware configuration, wherein sensors capable of measuring three-axis attitude with required attitude measurement accuracy are configured for the GEO satellite control system having a long service life, the inertial attitude sensor gyroscopes having a long service life (A1, A2, A3 and A4) and the sensors capable of measuring three-axis attitude are combined by satellite-borne computer application software to form three types of Kalman filters, each of which is capable of independently determining attitude, acquiring attitude measurement redundancy information, autonomously performing calibration, and autonomously performing compensation of angular velocity constant drift of the gyroscope; step, filling a two-out-of-three hardware configuration table, a main operation state table, a backup operation state table and a health word in the satellite-borne computer application software based on the configured sensors, and autonomously sorting, by the satellite-borne computer application software on initialization, the Kalman filters acquired in step; and step, in a case where a Fault detection-Isolation-Reorganization, FDIR, module in the satellite-borne computer application software detects a fault, which comprises an optical attitude sensor being interfered by sun light or moon light, being shadowed or being subject to other failures within a short period of time, or one of the inertial attitude sensor gyroscopes having a long service life (A1, A2, A3 and A4) being failed, autonomously generating, by the FDIR module, an alarm corresponding to the fault, and autonomously performing, by a currently selected Kalman filter, reduced-order filtering, and in a case where the fault is not eliminated within a set time period, sending, by the FDIR module, a series of macro instructions, to implement autonomous reorganization, to ensure attitude determination performance of the control system, wherein the long service life indicates a service life longer than or equal to 15 years.