SEARCH · Engineering Papers

Results for “Hardness Assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

All sources NASA NTRS DOE OSTI

NASA NTRS1990

Survivability characteristics of composite compression structure

Test and evaluation was performed to determine the compression residual capability of graphite reinforced composite panels following perforation by high-velocity fragments representative of combat threats. Assessments were made of the size of the ballistic damage, the effect of applied compression load at impact, damage growth during cyclic loading and residual static strength. Several fiber/matrix systems were investigated including high-strain fibers, tough epoxies, and APC-2 thermoplastic. Additionally, several laminate configurations were evaluated including hard and soft laminates and the incorporation of buffer strips and stitching for improved damage resistance of tolerance. Both panels (12 x 20-inches) and full scale box-beam components were tested to assure scalability of results. The evaluation generally showed small differences in the responses of the material systems tested. The soft laminate configurations with concentrated reinforcement exhibited the highest residual strength. Ballistic damage did not grow or increase in severity as a result of cyclic loading, and the effects of applied load at impact were not significant under the conditions tested.

Avery, John G.↗

NASA NTRS1993

Multi-Angle Imaging SpectroRadiometer (MISR) Design Issues Influenced by Performance Requirements

The design of an Earth remote sensing sensor, such as the Multi-angle Imaging SpectroRadiometer (MISR), begins with a set of science requirements that determine a set of instrument specifications. It is required that the sensor meet these specifications across the image field, over a range of sensor operating temperatures, and throughout mission life. In addition, data quality must be maintained irrespective of bright objects, such as clouds, within the scene, or out-of-field glint sources. During the design phase of MISR, many refinements to the conceptual design have been made to insure that these performance criteria are met. These design considerations are the focus of this paper. Spectral stability with field angle, scene polarization insensitivity, and LTV exposure hardness have, for example, been enabled through a telecentric optical design, a gaussian shaped filter spectral profile used in conjunction with a Lyot depolarizer, and contamination prevention through consideration of material choices and handling procedures. Spectral, radiometric, and MTF stability of the instrument assures the scientific community that MISR imagery can be used for highly accurate aerosol, bi-directional reflectance distribution function (BRDF), and cloud studies.

Bruegge, Carol J.↗

NASA NTRS2010

Altitude Testing of Large Liquid Propellant Engines

The National Aeronautics and Space Administration entered a new age on January 14, 2004 with President Bush s announcement of the creation the Vision for Space Exploration that will take mankind back to the Moon and on beyond to Mars. In January, 2006, after two years of hard, dedicated labor, engineers within NASA and its contractor workforce decided that the J2X rocket, based on the heritage of the Apollo J2 engine, would be the new engine for the NASA Constellation Ares upper stage vehicle. This engine and vehicle combination would provide assured access to the International Space Station to replace that role played by the Space Shuttle and additionally, would serve as the Earth Departure Stage, to push the Crew Excursion Vehicle out of Earth Orbit and head it on a path for rendezvous with the Moon. Test as you fly, fly as you test was chosen to be the guiding philosophy and a pre-requisite for the engine design, development, test and evaluation program. An exhaustive survey of national test facility assets proved the required capability to test the J2X engine at high altitude for long durations did not exist so therefore, a high altitude/near space environment testing capability would have to be developed. After several agency concepts the A3 High Altitude Testing Facility proposal was selected by the J2X engine program on March 2, 2007 and later confirmed by a broad panel of NASA senior leadership in May 2007. This facility is to be built at NASA s John C. Stennis Space Center located near Gulfport, Mississippi. 30 plus years of Space Shuttle Main Engine development and flight certification testing makes Stennis uniquely suited to support the Vision For Space Exploration Return to the Moon. Propellant handling infrastructure, engine assembly facilities, a trained and dedicated workforce and a broad and varied technical support base will all ensure that the A3 facility will be built on time to support the schedule needs of the J2X engine and the ultimate flight of the first Ares I vehicle. The A3 facility will be able to simulate pre-ignition altitude from sea-level to 100,000 feet and maintain it up to 650 seconds. Additionally the facility will be able to accommodate initial ignition, shutdown and then restart test profiles. A3 will produce up to 5000 lbm/sec of superheated steam utilizing a Chemical Steam generation system. Two separate inline steam ejectors will be used to produce a test cell vacuum to simulate the 100,000 ft required altitude. Operational capability will ensure that the facility can start up and shutdown without producing adverse pressure gradients across the J2X nozzle. The facility will have a modern thrust measurement system for accurate determination of engine performance. The latest advances in data acquisition and control will be incorporated to measure performance parameters during hotfire testing. Provisions are being made in the initial design of the new altitude facility to allow for testing of other, larger engines and potential upper stage launch vehicles that might require vacuum start testing of the engines. The new facility at Stennis Space Center will be complete and ready for hotfire operations in late 2010.

Maynard, Bryon T.↗

NASA NTRS1990

Computer aided system engineering and analysis (CASE/A) modeling package for ECLS systems - An overview

An overview of the CASE/A-ECLSS series modeling package is presented. CASE/A is an analytical tool that has supplied engineering productivity accomplishments during ECLSS design activities. A components verification program was performed to assure component modeling validity based on test data from the Phase II comparative test program completed at the Marshall Space Flight Center. An integrated plotting feature has been added to the program which allows the operator to analyze on-screen data trends or get hard copy plots from within the CASE/A operating environment. New command features in the areas of schematic, output, and model management, and component data editing have been incorporated to enhance the engineer's productivity during a modeling program.

Dalee, Robert C.↗

DOE OSTI2024

The Mu2e Digitizer ReAdout Controller (DiRAC): characterization and radiation hardness

The Mu2e experiment at Fermilab will search for the neutrino-less coherent conversion of a muon into an electron in the field of a nucleus. Mu2e detectors comprise a straw tracker, an electromagnetic calorimeter and a veto for cosmic rays. The calorimeter employs 1348 Cesium Iodide crystals readout by silicon photo-multipliers and fast front-end, and digitization electronics. The digitization board is named DiRAC (Digitizer ReAdout Controller) and 140 cards are needed for the readout of the full calorimeter. The DiRACs are hosted in crates located on the external surface of calorimeter disks, inside the detector solenoid cryostat and must sustain very high radiation and magnetic field so it was necessary to fully qualify it. Several version of prototypes were validated for operation in a high-vacuum (10−4 Torr) and under a 1T magnetic field. An extensive radiation hardness qualification campaign, carried out with photons, 14 MeV neutron beams, and 200 MeV protons, certified the DiRAC design to sustain doses up to 12 Krad, neutron fluences up to ∼ 1011 1 MeV neq/cm2, and very low occurrences of single-event effects. The qualification campaigns and quality assurance procedures will be reviewed.

43 PARTICLE ACCELERATORS↗

NASA NTRS2005

NASA's Software Safety Standard

NASA (National Aeronautics and Space Administration) relies more and more on software to control, monitor, and verify its safety critical systems, facilities and operations. Since the 1960's there has hardly been a spacecraft (manned or unmanned) launched that did not have a computer on board that provided vital command and control services. Despite this growing dependence on software control and monitoring, there has been no consistent application of software safety practices and methodology to NASA's projects with safety critical software. Led by the NASA Headquarters Office of Safety and Mission Assurance, the NASA Software Safety Standard (STD-18l9.13B) has recently undergone a significant update in an attempt to provide that consistency. This paper will discuss the key features of the new NASA Software Safety Standard. It will start with a brief history of the use and development of software in safety critical applications at NASA. It will then give a brief overview of the NASA Software Working Group and the approach it took to revise the software engineering process across the Agency.

Ramsay, Christopher M.↗

NASA NTRS2006

Infusing Software Assurance Research Techniques into Use

Research in the software engineering community continues to lead to new development techniques that encompass processes, methods and tools. However, a number of obstacles impede their infusion into software development practices. These are the recurring obstacles common to many forms of research. Practitioners cannot readily identify the emerging techniques that may benefit them, and cannot afford to risk time and effort evaluating and trying one out while there remains uncertainty about whether it will work for them. Researchers cannot readily identify the practitioners whose problems would be amenable to their techniques, and, lacking feedback from practical applications, are hard-pressed to gauge the where and in what ways to evolve their techniques to make them more likely to be successful. This paper describes an ongoing effort conducted by a software engineering research infusion team established by NASA s Software Engineering Initiative to overcome these obstacles. .

Pressburger, Thomas↗

NASA NTRS2015

Use of Proton SEE Data as a Proxy for Bounding Heavy-Ion SEE Susceptibility

Although heavy-ion single-event effects (SEE) pose serious threats to semiconductor devices in space, many missions face difficulties testing such devices at heavy-ion accelerators. Low-cost missions often find such testing too costly. Even well funded missions face issues testing commercial off the shelf (COTS) due to packaging and integration. Some missions wish to fly COTS systems with little insight into their components. Heavy-ion testing such parts and systems requires access to expensive and hard-to-access ultra-high energy ion accelerators, or significant system modification. To avoid these problems, some have proposed using recoil ions from high-energy protons as a proxy to bound heavy-ion SEE rates.

reliability estimation↗

DOE OSTI2022

Development, construction and tests of the Mu2e electromagnetic calorimeter mechanical structures

The “muon-to-electron conversion” (Mu2e) experiment at Fermilab will search for the charged lepton flavour violating neutrino-less coherent conversion of a muon into an electron in the field of an aluminum nucleus. The observation of this process would be the unambiguous evidence of the existence of physics beyond the standard model. Mu2e detectors comprise a straw-tracker, an electromagnetic calorimeter and an external veto for cosmic rays. In particular, the calorimeter provides excellent electron identification, a fast calorimetric online trigger, and complementary information to aid pattern recognition and track reconstruction. The detector has been designed as a state-of-the-art crystal calorimeter and employs 1348 pure Cesium Iodide (CsI) crystals readout by UV-extended silicon photosensors and fast front-end and digitization electronics. A design consisting of two identical annular matrices (named “disks”) positioned at the relative distance of 70 cm downstream the aluminum target along the muon beamline satisfies the Mu2e physics requirements. The hostile Mu2e operational conditions, in terms of radiation levels (total expected ionizing dose of 12 krad and a neutron fluence of 5 × 10$^{10}$ n/cm$^{2}$ @ 1 MeV$_{eq}$ (Si)/y), magnetic field intensity (1 T) and vacuum level (10$^{-4}$ Torr) have posed tight constraints on scintillating materials, sensors, electronics and on the design of the detector mechanical structures and material choice. The support structure of each 674 crystal matrix is composed of an aluminum hollow ring and parts made of open-cell vacuum-compatible carbon fiber. The photosensors and front-end electronics for the readout of each crystal are inserted in a machined copper holder and make a unique mechanical unit. The resulting 674 mechanical units are supported by a machined plate of vacuum-compatible plastic material. The plate also integrates the cooling system made of a network of copper lines flowing a low temperature radiation-hard fluid and placed in thermal contact with the copper holders to constitute a low resistance thermal bridge. The data acquisition electronics are hosted in aluminum custom crates positioned on the external lateral surface of the disks. The crates also integrate the electronics cooling system as lines running in parallel to the front-end system. In this paper we report on the calorimeter mechanical structure design, the mechanical and thermal simulations that have determined the design technological choices, and the status of component production, quality assurance tests and plans for assembly at Fermilab.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2022

Development, construction and qualification tests of the mechanical structures of the electromagnetic calorimeter of the Mu2e experiment at Fermilab

The “muon-to-electron conversion” (Mu2e) experiment at Fermilab will search for the Charged Lepton Flavour Violating neutrino-less coherent conversion of a muon into an electron in the field of an aluminum nucleus. The observation of this process would be the unambiguous evidence of physics beyond the Standard Model. Mu2e detectors comprise a straw-tracker, an electromagnetic calorimeter and an external veto for cosmic rays. The calorimeter provides excellent electron identification, complementary information to aid pattern recognition and track reconstruction, and a fast calorimetric online trigger. The detector has been designed as a state-of-the-art crystal calorimeter and employs 1340 pure Cesium Iodide (CsI) crystals readout by UV-extended silicon photosensors and fast front-end and digitization electronics. A design consisting of two identical annular matrices (named “disks”) positioned at the relative distance of 70 cm downstream the aluminum target along the muon beamline satisfies the Mu2e physics requirements.The hostile Mu2e operational conditions, in terms of radiation levels (total ionizing dose of 12 krad and a neutron fluence of 5x1010 n/cm2 @ 1 MeVeq (Si)/y), magnetic field intensity (1 T) and vacuum level (10$^{-4}$ Torr) have posed tight constraints on the design of the detector mechanical structures and materials choice. The support structure of the two 670 crystal matrices employs two aluminum hollow rings and parts made of open-cell vacuum-compatible carbon fiber. The photosensors and service front-end electronics for each crystal are assembled in a unique mechanical unit inserted in a machined copper holder. The 670 units are supported by a machined plate made of vacuum-compatible plastic material. The plate also integrates the cooling system made of a network of copper lines flowing a low temperature radiation-hard fluid and placed in thermal contact with the copper holders to constitute a low resistance thermal bridge. The data acquisition electronics is hosted in aluminum custom crates positioned on the external lateral surface of the two disks. The crates also integrate the electronics cooling system as lines running in parallel to the front-end system.The constraints on the calorimeter mechanical structures design, the development from the conceptual design to the specifications of all the structural components, the status of components production and the components quality assurance tests are presented.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

NASA NTRS2013

Open Source Subtitle Editor Software Study for Section 508 Close Caption Applications

This paper will focus on a specific item within the NASA Electronic Information Accessibility Policy - Multimedia Presentation shall have synchronized caption; thus making information accessible to a person with hearing impairment. This synchronized caption will assist a person with hearing or cognitive disability to access the same information as everyone else. This paper focuses on the research and implementation for CC (subtitle option) support to video multimedia. The goal of this research is identify the best available open-source (free) software to achieve synchronized captions requirement and achieve savings, while meeting the security requirement for Government information integrity and assurance. CC and subtitling are processes that display text within a video to provide additional or interpretive information for those whom may need it or those whom chose it. Closed captions typically show the transcription of the audio portion of a program (video) as it occurs (either verbatim or in its edited form), sometimes including non-speech elements (such as sound effects). The transcript can be provided by a third party source or can be extracted word for word from the video. This feature can be made available for videos in two forms: either Soft-Coded or Hard-Coded. Soft-Coded is the more optional version of CC, where you can chose to turn them on if you want, or you can turn them off. Most of the time, when using the Soft-Coded option, the transcript is also provided to the view along-side the video. This option is subject to compromise, whereas the transcript is merely a text file that can be changed by anyone who has access to it. With this option the integrity of the CC is at the mercy of the user. Hard-Coded CC is a more permanent form of CC. A Hard-Coded CC transcript is embedded within a video, without the option of removal.

Murphy, F. Brandon↗

NASA NTRSDate not supplied

Machine-Learning for Safety Critical Airborne Applications Part II: Case Study

The exceptional progress in the field of Artificial Intelligence (AI) systems, enabled by Machine Learning (ML) technology in recent years provides historic opportunities for the aviation industry. Current certification standards for avionics were developed prior to the ML renaissance and have several fundamental incompatibilities with the ML technology. WG-114 is working hard to release a new standard as soon as possible but for now there is no recognized means of compliance for ML based systems even of low criticality. In this talk, we present the custom ML workflow that can be used comply with all objectives of the current certification standards for a low-criticality (DAL D and C) ML-based system. To illustrate the practical application of the custom ML workflow we present a case study of a system based on a Deep Neural Network (DNN) intended to detect and identify airport runway signs. We present the system design, data generation, training, and verification in detail and describe how the design assurance objectives can be met for a DAL D and DAL C systems.

Johann Schumann↗

NASA NTRS1982

Space Shuttle External Tank Gaseous Oxygen Vent System

Two problems had to be solved to assure successful elimination of ice on the External Tank (ET). First, an access/support structure was provided from the Launch Complex 39A Fixed Service Structure to the vicinity of the nose cone on the ET approximately 82.3 meters (270 feet) above the surface of the pad and 22.9 meters (75 feet) from the face of the FSS. Second, an umbilical was designed and tested that would seal around the ET gaseous oxygen (GOX) vent louvers and not allow ice to form on the tank or the umbilical. A modified Apollo service arm was chosen. An inflatable vent seal subsystem was chosen, providing a cloth seal around each vent louver with an internal annulus to provide a path for the gaseous oxygen from the ET to a hard duct on the swing arm.

Franklin, W. G.↗

NASA NTRS2012

Telescope Alignment From Sparsely Sampled Wavefront Measurements Over Pupil Subapertures

Alignment of two-element telescopes is a classic problem. During recent integration and test of the Space Interferometry Mission s (SIM s) Astrometric Beam Combiner (ABC), the innovators were faced with aligning two such telescope subsystems in the presence of a further complication: only two small subapertures in each telescope s pupil were accessible for measuring the wavefront with a Fizeau interferometer. This meant that the familiar aberrations that might be interpreted to infer system misalignments could be viewed only over small sub-regions of the pupil, making them hard to recognize. Further, there was no contiguous surface of the pupil connecting these two subapertures, so relative phase piston information was lost; the underlying full-aperture aberrations therefore had an additional degree of ambiguity. The solution presented here is to recognize that, in the absence of phase piston, the Zygo measurements primarily provide phase tilt in the subaperture windows of interest. Because these windows are small and situated far from the center of the (inaccessible) unobscured full aperture, any aberrations that are higher-order than tilt will be extremely high-order on the full aperture, and so not necessary or helpful to the alignment. Knowledge of the telescope s optical prescription allows straightforward evaluation of sensitivities (subap mode strength per unit full-aperture aberration), and these can be used in a predictive matrix approach to move with assurance to an aligned state. The technique is novel in every operational way compared to the standard approach of alignment based on full-aperture aberrations or searching for best rms wavefront. This approach is closely grounded in the observable quantities most appropriate to the problem. It is also more intuitive than inverting full phase maps (or subaperture Zernike spectra) with a ray-tracing program, which must certainly work in principle, but in practice met with limited success. Even if such classical alignment techniques became practical, the techniques reported here form a reassuringly transparent and intuitive check on the course of the alignment with very little computational effort.

Bloemhof, Eric E.↗

NASA NTRS2020

Building a standardized Observing System Simulation Experiment (OSSE) framework for Mars

We advocate that the Decadal Survey recommends the NASA Science Mission Directorate to develop a rigorous Observing System Simulation Experiment (OSSE) framework for Mars, to optimize future atmospheric observations. Atmospheric conditions on Mars are a potential hazard source for landing missions. Errors in the estimates of atmospheric density profiles, inadequate knowledge of wind vertical structure and dust concentration as a function of height are likely causes of uncertainty at the landing site on the order of kilometers. An operational real-time weather forecasting capability for Mars would reduce such uncertainties, carrying enormous benefits to future robotic missions, and would be an invaluable prerequisite for human missions.A real-time forecasting capability relies upon three fundamental components: a critical mass of observing systems, a data assimilation system (DAS), and a global forecast model. The DAS allows the model to ingest the data effectively, optimizing the observational information content,and transforming them into a gridded representation of the atmosphere at a given time, called an ‘analysis’. The analysis is the best estimate of the atmospheric state for that time, and also represents a set of ‘initial conditions’ from which a global model can be initialized, to predict a future state of the atmosphere. The connection between analysis and forecast represents the foundation of modern weather forecasting. However, from the point of view of a forecast system,not all observations are equally impactful, partially because of the problem of “observational error correlation”, one important research topic in data assimilation development. For the Earth, partly due to the spontaneous and deregulated development of observations and forecast capabilities worldwide for more than half a century,the use of observations in contemporary operational forecast systems is suboptimal, with many potentially useful data being underutilized. On the contrary, Mars atmospheric scientists are in the unique situation of designing the next-generation observing systems by learning from the experience gathered on the Earth, so as to assure that the future instruments are specifically optimized to give the maximum benefit to a future weather forecast capability.An immensely powerful tool that has been firmly established by atmospheric scientists on the Earth is represented by a properly designed OSSE framework. A realistic OSSE framework cannot only quantify the benefit of future data types, be them surface based or space borne, but can also help design and optimize an entire observational network. Furthermore, OSSEs can provide deep insights into an atmosphere’s behavior, by addressing conceptual problems of its intrinsic predictability and delineating the regions or features of the atmosphere which are more sensitive to additional data and would benefit from a denser sampling. The difficulties posed by OSSEs are fundamentally different for Earth and Mars. For Earth, the enormous data volume imposes a tremendous constraint on any innovation in the observing systems: it is very hard for a single sensor to impact the skill. For Mars, the problem is the opposite: almost any additional instrument will exert some impact. However, OSSEs can help to evaluate the cost/benefit for every sensor and suggest optimal data configuration and density.The purpose of this white paper is to provide an introduction to a rigorously designed OSSE framework, explain the underlying problems and challenges, and engage the Mars community to collaborate with Earth Atmospheric scientists in order to develop a joint-OSSE framework for Mars with the largest consensual basis possible. An OSSE infrastructure would increase the understanding of the Martian atmosphere, would help NASA to optimize instrument specifications and orbit choice, providing the maximium benefit for a given expenditure of resources, and could even help establishing a roadmap for a future real-time weather forecasting capability.

Oreste Reale↗

NASA NTRSDate not supplied

Low-Earth Orbit Flight Test of an Inflatable Decelerator (LOFTID) Mission Overview, Science Return, and Future Applications of This Technology

The Low-Earth Orbit (LEO) Flight Test of an Inflatable Decelerator (LOFTID) mission was the culmination of two decades of research and development for Hyper-sonic Inflatable Aerodynamic Decelerator (HIAD) technology. LOFTID was a project overseen by the Technology Demonstration Mission (TDM) program within NASA’s Space Technology Mission Directorate. The success of the LOFTID mission could enable new NASA missions to Mars, Venus, and most solar-system destinations with atmospheres, as well as cost-effective payload returns to Earth, including in-space manufactured materials and launch vehicle asset recovery. LOFTID, with its unique inflatable heat shield, was the first-of-a-kind orbital reentry flight, and the largest blunt body atmospheric entry of any kind. On November 10, 2022, just over 10 years since the previous flight test of the smaller sub-orbital Inflatable Reentry Vehicle Experiment-3 (IRVE-3) [1], NASA Langley Research Center, with partner United Launch Alliance (ULA), successfully launched and achieved reentry and recovery of the LOFTID Reentry Vehicle (RV), further demonstrating the viability of the HIAD technology for large-diameter, inflatable heat shields to safely and accurately deliver large payloads through an atmosphere via a controlled descent and landing. Launching as a secondary payload with the Joint Polar Satellite System 2 (JPSS-2) from Vandenberg Space Force Base, California, stowed inside an ex-tended payload adapter of the Atlas V 401 launch vehicle, the LOFTID mission officially began after the JPSS-2 payload was delivered to its orbit by the Centaur second stage. The LOFTID RV was flying solo on its spin-stabilized ballistic reentry trajectory about one hour after launch, and the flight ended approximately one hour later with a gentle splashdown under parachute in the Pacific Ocean off the east coast of Hawaii, where the RV was recovered and later shipped back to NASA Langley. LOFTID endured the harsh environments of atmospheric reentry while demonstrating stable aerodynamics through the entire spectrum of hypersonic, supersonic, transonic, and subsonic flight. The LOFTID RV was exposed to an aeroheating environment representative of many Mars and LEO HIAD applications, while successfully demonstrating the ability of the heat-affected inflatable structure to with-stand aerodynamic forces that exceeded those expected at Mars. This flight demonstration of a 6m diameter HIAD confirmed the technology structural and thermal performance as it protected the 1100kg RV entering Earth’s atmosphere at 8 km/s, reaching Mach 30, and experiencing 9g deceleration before deploying parachutes and splashing down in the Pacific Ocean. HIAD technology involves an aeroshell that can be hard packed into a small volume for launch and then deployed prior to atmospheric entry for a controlled deceleration through the atmosphere. Large deployable heat shields enable spacecraft to carry bigger, heavier payloads, including scientific instruments and human support systems for planetary landing and exploration. Much larger than traditional fixed diameter aeroshells that are constrained by the size of launch vehicle shrouds, inflatable decelerators create more drag and start the deceleration process in the upper reaches of the atmosphere with greater efficiency and stability. LOFTID’s successful demonstration of the HIAD technology has greatly expanded NASA’s options for future planetary missions and opened new commercial opportunities for lower-cost mission pay-load recovery including recovery of launch vehicle assets, or as a delivery system to return cargo from the International Space Station or cislunar space. The developments for some of these applications are al-ready underway. While LOFTID was indeed a first-of-a-kind flight for an inflatable heatshield, the largest blunt-body entry ever, its remarkable performance assured that it will not be the last of its kind.

John DiNonno↗

NASA NTRS2007

NASA's Software Safety Standard

NASA relies more and more on software to control, monitor, and verify its safety critical systems, facilities and operations. Since the 1960's there has hardly been a spacecraft launched that does not have a computer on board that will provide command and control services. There have been recent incidents where software has played a role in high-profile mission failures and hazardous incidents. For example, the Mars Orbiter, Mars Polar Lander, the DART (Demonstration of Autonomous Rendezvous Technology), and MER (Mars Exploration Rover) Spirit anomalies were all caused or contributed to by software. The Mission Control Centers for the Shuttle, ISS, and unmanned programs are highly dependant on software for data displays, analysis, and mission planning. Despite this growing dependence on software control and monitoring, there has been little to no consistent application of software safety practices and methodology to NASA's projects with safety critical software. Meanwhile, academia and private industry have been stepping forward with procedures and standards for safety critical systems and software, for example Dr. Nancy Leveson's book Safeware: System Safety and Computers. The NASA Software Safety Standard, originally published in 1997, was widely ignored due to its complexity and poor organization. It also focused on concepts rather than definite procedural requirements organized around a software project lifecycle. Led by NASA Headquarters Office of Safety and Mission Assurance, the NASA Software Safety Standard has recently undergone a significant update. This new standard provides the procedures and guidelines for evaluating a project for safety criticality and then lays out the minimum project lifecycle requirements to assure the software is created, operated, and maintained in the safest possible manner. This update of the standard clearly delineates the minimum set of software safety requirements for a project without detailing the implementation for those requirements. This allows the projects leeway to meet these requirements in many forms that best suit a particular project's needs and safety risk. In other words, it tells the project what to do, not how to do it. This update also incorporated advances in the state of the practice of software safety from academia and private industry. It addresses some of the more common issues now facing software developers in the NASA environment such as the use of Commercial-Off-the-Shelf Software (COTS), Modified OTS (MOTS), Government OTS (GOTS), and reused software. A team from across NASA developed the update and it has had both NASA-wide internal reviews by software engineering, quality, safety, and project management. It has also had expert external review. This presentation and paper will discuss the new NASA Software Safety Standard, its organization, and key features. It will start with a brief discussion of some NASA mission failures and incidents that had software as one of their root causes. It will then give a brief overview of the NASA Software Safety Process. This will include an overview of the key personnel responsibilities and functions that must be performed for safety-critical software.

Ramsay, Christopher M.↗

DOE OSTI2020

Application and Certification of Comparative Vacuum Monitoring Sensors for Structural Health Monitoring of 737 Wing Box Fittings

Multi-site fatigue damage, hidden cracks in hard-to-reach locations, disbonded joints, erosion, impact, and corrosion are among the major flaws encountered in today's extensive fleet of aging aircraft and space vehicles. The use of in-situ sensors for real-time health monitoring of aircraft structures are a viable option to overcome inspection impediments stemming from accessibility limitations, complex geometries, and the location and depth of hidden damage. Reliable, structural health monitoring systems can automatically process data, assess structural condition, and signal the need for human intervention. Prevention of unexpected flaw growth and structural failure can be improved if on-board health monitoring systems are used to continuously assess structural integrity. Such systems are able to detect incipient damage before catastrophic failures occurs. Condition-based maintenance practices could be substituted for the current time-based maintenance approach. Other advantages of on-board distributed sensor systems are that they can eliminate costly, and potentially damaging, disassembly, improve sensitivity by producing optimum placement of sensors and decrease maintenance costs by eliminating more time- consuming manual inspections. This report presents a Sandia Labs-aviation industry effort to move SHM into routine use for aircraft maintenance. This program addressed formal SHM technology validation and certification issues so that the full spectrum of concerns, including design, deployment, performance and certification were appropriately considered. The Airworthiness Assurance NDI Validation Center (AANC) at Sandia Labs, in conjunction with Boeing, Delta Air Lines, Structural Monitoring Systems Ltd., Anodyne Electronics Manufacturing Corp. and the Federal Aviation Administration (FAA) carried out a certification program to formally introduce Comparative Vacuum Monitoring (CVM) as a structural health monitoring solution to a specific aircraft wing box application. Validation tasks were designed to address the SHM equipment, the health monitoring task, the resolution required, the sensor interrogation procedures, the conditions under which the monitoring will occur, the potential inspector population, adoption of CVM into an airline maintenance program and the document revisions necessary to allow for routine use of CVM as an alternate means of performing periodic structural inspects. To carry out the validation process, knowledge of aircraft maintenance practices was coupled with an unbiased, independent evaluation. Sandia Labs designed, implemented, and analyzed the results from a focused and statistically-relevant experimental effort to quantify the reliability of the CVM system applied to the Boeing 737 Wing Box fitting application. All factors that affect SHM sensitivity were included in this program: flaw size, shape, orientation and location relative to the sensors, as well as operational and environmental variables. Statistical methods were applied to performance data to derive Probability of Detection (POD) values for CVM sensors in a manner that agrees with current nondestructive inspection (NDI) validation requirements and also is acceptable to both the aviation industry and regulatory bodies. This report presents the use of several different statistical methods, some of them adapted from NDI performance assessments and some proposed to address the unique nature of damage detection via SHM systems, and discusses how they can converge to produce a confident quantification of SHM performance An important element in developing SHM validation processes is a clear understanding of the regulatory measures needed to adopt SHM solutions along with the knowledge of the structural and maintenance characteristics that may impact the operational performance of an SHM system. This report describes the major elements of an SHM validation approach and differentiates the SHM elements from those found in NDI validation. The activities conducted in this program demonstrated the feasibility of routine SHM usage in general and CVM in particular for the application selected. They also helped establish an optimum OEM-airline-regulator process and determined how to safely adopt SHM solutions. This formal SHM validation will allow aircraft manufacturers and airlines to confidently make informed decisions about the proper utilization of CVM technology. It will also streamline the regulatory actions and formal certification measures needed to assure the safe application of SHM solutions.

42 ENGINEERING↗