Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “concurrent tools”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10
All sourcesNASA NTRSDOE OSTI
DOE OSTI2022

Resolving Away Stratocumulus Biases in Modern Global Climate Models

Abstract Increased horizontal and vertical resolution in global atmospheric models can reduce a significant amount of the biases associated with subtropical marine stratocumulus. The sensitivity of offshore and coastal marine stratocumulus to different horizontal and vertical resolutions has been investigated by using Energy Exascale Earth System Model (E3SM) coupled with the novel Framework for Improvement by Vertical Enhancement which has been demonstrated as a viable tool to improve the representation of marine stratocumulus while saving computational cost. Our study shows that high vertical resolution is the key to improve marine stratocumulus simulations in E3SM. Concurrent horizontal and vertical resolution increases are needed for substantial overall reduction of stubborn marine stratocumulus biases over the coastal region but not necessarily in the offshore area.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS2000

A Flexible Statechart-to-Model-Checker Translator

Many current-day software design tools offer some variant of statechart notation for system specification. We, like others, have built an automatic translator from (a subset of) statecharts to a model checker, for use to validate behavioral requirements. Our translator is designed to be flexible. This allows us to quickly adjust the translator to variants of statechart semantics, including problem-specific notational conventions that designers employ. Our system demonstration will be of interest to the following two communities: (1) Potential end-users: Our demonstration will show translation from statecharts created in a commercial UML tool (Rational Rose) to Promela, the input language of Holzmann's model checker SPIN. The translation is accomplished automatically. To accommodate the major variants of statechart semantics, our tool offers user-selectable choices among semantic alternatives. Options for customized semantic variants are also made available. The net result is an easy-to-use tool that operates on a wide range of statechart diagrams to automate the pathway to model-checking input. (2) Other researchers: Our translator embodies, in one tool, ideas and approaches drawn from several sources. Solutions to the major challenges of statechart-to-model-checker translation (e.g., determining which transition(s) will fire, handling of concurrent activities) are retired in a uniform, fully mechanized, setting. The way in which the underlying architecture of the translator itself facilitates flexible and customizable translation will also be evident.

Rouquette, Nicolas↗
NASA NTRS1991

Maintaining consistency in distributed systems

In systems designed as assemblies of independently developed components, concurrent access to data or data structures normally arises within individual programs, and is controlled using mutual exclusion constructs, such as semaphores and monitors. Where data is persistent and/or sets of operation are related to one another, transactions or linearizability may be more appropriate. Systems that incorporate cooperative styles of distributed execution often replicate or distribute data within groups of components. In these cases, group oriented consistency properties must be maintained, and tools based on the virtual synchrony execution model greatly simplify the task confronting an application developer. All three styles of distributed computing are likely to be seen in future systems - often, within the same application. This leads us to propose an integrated approach that permits applications that use virtual synchrony with concurrent objects that respect a linearizability constraint, and vice versa. Transactional subsystems are treated as a special case of linearizability.

Birman, Kenneth P.↗
NASA NTRS1999

Integrating Thermal Tools Into the Mechanical Design Process

The intent of mechanical design is to deliver a hardware product that meets or exceeds customer expectations, while reducing cycle time and cost. To this end, an integrated mechanical design process enables the idea of parallel development (concurrent engineering). This represents a shift from the traditional mechanical design process. With such a concurrent process, there are significant issues that have to be identified and addressed before re-engineering the mechanical design process to facilitate concurrent engineering. These issues also assist in the integration and re-engineering of the thermal design sub-process since it resides within the entire mechanical design process. With these issues in mind, a thermal design sub-process can be re-defined in a manner that has a higher probability of acceptance, thus enabling an integrated mechanical design process. However, the actual implementation is not always problem-free. Experience in applying the thermal design sub-process to actual situations provides the evidence for improvement, but more importantly, for judging the viability and feasibility of the sub-process.

Tsuyuki, Glenn T.↗
NASA NTRS1991

Lessons learned for composite structures

Lessons learned for composite structures are presented in three technology areas: materials, manufacturing, and design. In addition, future challenges for composite structures are presented. Composite materials have long gestation periods from the developmental stage to fully matured production status. Many examples exist of unsuccessful attempts to accelerate this gestation period. Experience has shown that technology transition of a new material system to fully matured production status is time consuming, involves risk, is expensive and should not be undertaken lightly. The future challenges for composite materials require an intensification of the science based approach to material development, extension of the vendor/customer interaction process to include all engineering disciplines of the end user, reduced material costs because they are a significant factor in overall part cost, and improved batch-to-batch pre-preg physical property control. Historical manufacturing lessons learned are presented using current in-service production structure as examples. Most producibility problems for these structures can be traced to their sequential engineering design. This caused an excessive emphasis on design-to-weight and schedule at the expense of design-to-cost. This resulted in expensive performance originated designs, which required costly tooling and led to non-producible parts. Historically these problems have been allowed to persist throughout the production run. The current/future approach for the production of affordable composite structures mandates concurrent engineering design where equal emphasis is placed on product and process design. Design for simplified assembly is also emphasized, since assembly costs account for a major portion of total airframe costs. The future challenge for composite manufacturing is, therefore, to utilize concurrent engineering in conjunction with automated manufacturing techniques to build affordable composite structures. Composite design experience has shown that significant weight savings have been achieved, outstanding fatigue and corrosion resistance have been demonstrated, and in-service performance has been very successful. Currently no structural design show stoppers exist for composite structures. A major lesson learned is that the full scale static test is the key test for composites, since it is the primary structural 'hot spot' indicator. The major durability issue is supportability of thin skinned structure. Impact damage has been identified as the most significant issue for the damage tolerance control of composite structures. However, delaminations induced during assembly operations have demonstrated a significant nuisance value. The future challenges for composite structures are threefold. Firstly, composite airframe weight fraction should increase to 60 percent. At the same time, the cost of composite structures must be reduced by 50 percent to attain the goal of affordability. To support these challenges it is essential to develop lower cost materials and processes.

Whitehead, R. S.↗
NASA NTRS2000

Computer accelerated conceptual design and development of spacecraft

The Next Generation Payload Development Team (NPDT), also called Team I, at the Jet Propulsion Laboratory provides a customer with a state-of-the-art Concurrent Design and Analysis environment for the early Design stages and emphasizes a total Systems approach, and features Multi-Disciplinary design teams, and interconnected high-end Analysis and Design tools.

NPDT design payload spacecraft↗
NASA NTRS2005

Collaborative Mission Design at NASA Langley Research Center

NASA Langley Research Center (LaRC) has developed and tested two facilities dedicated to increasing efficiency in key mission design processes, including payload design, mission planning, and implementation plan development, among others. The Integrated Design Center (IDC) is a state-of-the-art concurrent design facility which allows scientists and spaceflight engineers to produce project designs and mission plans in a real-time collaborative environment, using industry-standard physics-based development tools and the latest communication technology. The Mission Simulation Lab (MiSL), a virtual reality (VR) facility focused on payload and project design, permits engineers to quickly translate their design and modeling output into enhanced three-dimensional models and then examine them in a realistic full-scale virtual environment. The authors were responsible for envisioning both facilities and turning those visions into fully operational mission design resources at LaRC with multiple advanced capabilities and applications. In addition, the authors have created a synergistic interface between these two facilities. This combined functionality is the Interactive Design and Simulation Center (IDSC), a meta-facility which offers project teams a powerful array of highly advanced tools, permitting them to rapidly produce project designs while maintaining the integrity of the input from every discipline expert on the project. The concept-to-flight mission support provided by IDSC has shown improved inter- and intra-team communication and a reduction in the resources required for proposal development, requirements definition, and design effort.

Gough, Kerry M.↗
DOE OSTI2026

Tailoring Thermal and Mechanical Performance Through Multimaterial Laser Powder Directed Energy Deposition of Copper and 17-4PH Stainless Steel

This study investigates the additive manufacturing (AM) processing, microstructural evolution, and resulting mechanical and thermal properties of multimaterial components combining 17-4PH stainless steel and pure copper (Cu) fabricated via laser powder directed energy deposition (LP-DED). Conventional tooling steels exhibit limited thermal conductivity, significantly constraining production throughput in high-volume processes. Incorporating Cu, with its superior thermal conductivity, could significantly enhance tool performance, though Cu and steel present metallurgical incompatibilities when processed via AM. A systematic investigation was conducted across compositions ranging from 0 to 100 wt% Cu, revealing critical thresholds influencing solidification behavior, defect formation, microstructure, hardness, and thermal transport. Optical microscopy, electron backscatter diffraction (EBSD), hardness testing, and thermal conductivity measurements provided comprehensive process–structure–property correlations. Severe hot cracking occurred at low-Cu contents (6–25 wt%), aligning generally well with crack susceptibility modeling, with an unexpected discrepancy at 25 wt%. Porosity remained low (≥99% dense) throughout the compositional spectrum. EBSD analysis revealed a transformation from columnar martensitic structures at low-Cu contents to equiaxed FCC Cu-dominated structures at higher Cu concentrations, highlighting the complex microstructural transitions driven by Cu-induced changes in solidification and phase stability. Hardness decreased from 330 HV (pure 17-4PH) to 62 HV (pure Cu), consistent with microstructural changes. Concurrently, thermal conductivity improved substantially from 13.5 W/m K to 367.9 W/m K, emphasizing Cu’s dominant role in thermal transport. The findings highlight the feasibility of leveraging compositional gradients between 17-4PH and Cu to achieve tailored tooling with optimized thermal and mechanical performance.

17-4PH↗
DOE OSTI2023

Using heterogeneous GPU nodes with a Cabana-based implementation of MPCD

In this study, the Kokkos based library Cabana, which has been developed in the Co-design Center for Particle Applications (CoPA), is used for the implementation of Multi-Particle Collision Dynamics (MPCD), a particle-based description of hydrodynamic interactions. Cabana allows for a function portable implementation, which has been used to study the interplay between CPU and GPU usage on a multi-node system as well as analysis of said interplay with performance analysis tools. As a result, we see most advantages in a homogeneous GPU usage, but we also discuss the extent to which heterogeneous applications might be more performant, using both CPU and GPU concurrently.

97 MATHEMATICS AND COMPUTING↗
NASA NTRS1986

Modified Petri net model sensitivity to workload manipulations

Modified Petri Nets (MPNs) are investigated as a workload modeling tool. The results of an exploratory study of the sensitivity of MPNs to work load manipulations in a dual task are described. Petri nets have been used to represent systems with asynchronous, concurrent and parallel activities (Peterson, 1981). These characteristics led some researchers to suggest the use of Petri nets in workload modeling where concurrent and parallel activities are common. Petri nets are represented by places and transitions. In the workload application, places represent operator activities and transitions represent events. MPNs have been used to formally represent task events and activities of a human operator in a man-machine system. Some descriptive applications demonstrate the usefulness of MPNs in the formal representation of systems. It is the general hypothesis herein that in addition to descriptive applications, MPNs may be useful for workload estimation and prediction. The results are reported of the first of a series of experiments designed to develop and test a MPN system of workload estimation and prediction. This first experiment is a screening test of MPN model general sensitivity to changes in workload. Positive results from this experiment will justify the more complicated analyses and techniques necessary for developing a workload prediction system.

White, S. A.↗
NASA NTRS1990

A development framework for artificial intelligence based distributed operations support systems

Advanced automation is required to reduce costly human operations support requirements for complex space-based and ground control systems. Existing knowledge based technologies have been used successfully to automate individual operations tasks. Considerably less progress has been made in integrating and coordinating multiple operations applications for unified intelligent support systems. To fill this gap, SOCIAL, a tool set for developing Distributed Artificial Intelligence (DAI) systems is being constructed. SOCIAL consists of three primary language based components defining: models of interprocess communication across heterogeneous platforms; models for interprocess coordination, concurrency control, and fault management; and for accessing heterogeneous information resources. DAI applications subsystems, either new or existing, will access these distributed services non-intrusively, via high-level message-based protocols. SOCIAL will reduce the complexity of distributed communications, control, and integration, enabling developers to concentrate on the design and functionality of the target DAI system itself.

Adler, Richard M.↗
NASA NTRS2012

How Did I Get Here?

What country was responsible for much of the early work in laser altimetry, who was the first scientist to look at a vegetation profile generated by a laser, who first related laser ranges to forest structure? The purpose of this paper is to look back 3+ decades ago when forestry lidar was in its formative years and to give credit to those who first thought to employ a laser to measure the Earth's surface. As with much scientific research, advances were often made independently and concurrently in a number of countries. Functioning lasers were first demonstrated in 1960 in the USA and in 1961 in the USSR, but research into the use of lasers as forest measurement tools did not begin for another IS years. Initially, with respect to Earth resources, lasers were employed to measure sea ice surface roughness, to make near-shore bathymetric measurements, to penetrate forests to make detailed topographic measurements, and to fluoresce oceanic phytoplankton for surface current studies. Some of these early studies noted that forest profiles were evident but in fact added noise to topographic retrievals. Trees became the signal rather than noise in 1976 when researchers in the Canadian Forest Service went to an IUFRO conference in Oslo and reported on efforts to better estimate timber volume in tropical forests. They employed large-scale airphotos (1:500 up to 1:4000) to measure the top of the tropical canopy, an avionic radar to measure the location of the ground beneath the canopy, and a barometric sensor to record aircraft/radar height above a datum (e.g., sea level). Their radar did not work well in dense vegetation and mentioned in passing that a laser altimeter had worked well in Canadian forests. But in a report 2 years later they reported that, on a study area in Costa Rica, the radar ground line was much improved and no mention is made of a lidar altimeter. In the USSR in 1977, Russian researchers felled a birch and a spruce, aimed a helium-neon, 0.63 micron laser with a spot size of approx 25mm, at the horizontal trees, produced a profilograph, compared it to tape measurements, and concluded that, with increased power, such a laser could be mounted on an aircraft to remotely measure forest canopies. In 1979, they mounted their He-Ne laser on an AN-2 biplane and acquired their fIrSt airborne profiles. Scientists with TRANARG, a mapping/surveying company in Caracas, Venezuela, reported on 1976 flights employing a helium-neon lidar to collect over 11,000 km of lidar profiles spaced 1.5 km apart in order to construct a topographic map to help site a new reservoir. They noted 35-40 m median canopy heights with emergents up to 55 m in their profiles. These studies and others that utilize these height and canopy density metrics for forest mensuration are reviewed in this glance backwards at the history of forestry lidar.

Nelson, Ross↗
NASA NTRS2019

Development and Analysis of the Automated Object Reentry Survival Analysis Tool Parametric Study Wrapper

The NASA Orbital Debris Program Office (ODPO) Safety Group at the Johnson Space Center analyzes reentering spacecraft at the end of life. The program primarily used by ODPO in this effort is the Object Reentry Survival Analysis Tool (ORSAT). ORSAT utilizes shape primitives as well as a variety of other parameters (material, size, thickness, aerodynamic mass, orbit inclination, etc.) to simulate the reentry process and ultimately, to determine if a spacecraft could be hazardous to the population on the ground. The NASA ODPO plans to automate the ORSAT process to run multiple ORSAT input files either concurrently or consecutively. This type of automation program will provide several benefits. First, there is a need to run large parametric studies for ORSAT analysts to gain a greater understanding of reentering object’s sensitivity to certain input variables. Secondly, a database of pre-run ORSAT cases will be used to develop a survivability model, which could be made available to spacecraft developers as a design for demise (D4D) tool. The recently completed Automated Object Reentry Survival Analysis Tool (AutoORSAT) Wrapper is currently being used to build a survivability database, the first step in developing a survivability model. Already, the data that AutoORSAT has produced provides a greater understanding of the sensitivity of variables such as the initial temperature of the spacecraft, spacecraft breakup altitude, and the aerodynamic mass of spacecraft.

Smith, Andrew N.↗
NASA NTRS2006

Recent trends in digital human modeling and the concurrent issues that face human modeling approach

Tremendous strides have been made in the recent years to digitally represent human beings in computer simulation models ranging from assembly plant maintenance operations to occupants getting in and out of vehicles to action movie scenarios. While some of these tools are being actively pursued by the engineering communities, there is still a lot of work that remains to be done for the newly planned planetary exploration missions. For example, certain unique and several common challenges are seen in developing computer generated suited human models for designing the next generation space vehicle. The purpose of this presentation is to discuss NASA s potential needs for better human models and to show also many of the inherent yet not too obvious pitfalls that still are left unresolved in this new arena of digital human modeling. As part of NASA s Habitability and Human Factors Branch, the Anthropometry and Biomechanics Facility has been engaged in studying the various facets of computer generated human physical performance models; for instance, it has been engaged in utilizing three-dimensional laser scan data along with three dimensional video based motion and reach data to gather suited anthropometric and shape and size information that are not available yet in the form of computer mannequins. Our goal is to bring in new approaches to deal with heavily clothed humans (such as, suited astronauts) and to overcome the current limitations of wrongly identifying humans (either real or virtual) as univariate percentiles. We are looking at whole-body posture based anthropometric models as a means to identify humans of significantly different shapes and sizes to arrive at mathematically sound computer models for analytical purposes.

Rajulu, Sudhakar↗
DOE OSTI2026

Microchannel-based Membrane-less Extraction of Li from Unconventional Lithium Sources & the Separation of REE

This final report provides an overview of the Project's entire duration, covering July 1, 2021 to December 31, 2023. It primarily focuses on the achievements, technological developments, and unique challenges the team faced while working on separating and extracting Lithium from produced waters. The project's primary aim was to create an integrated, high-throughput, membrane-less, and modular microfluidic platform that could extract Lithium from unconventional sources. We have successfully met all goals and milestones envisioned in the SOPO document. The most critical primary milestones, including the Go-No-Go milestone (refer to the Gantt chart in the Appendices), were successfully accomplished. We demonstrated phase separation (>90%) and extraction (>85%) performance in the MPSE using synthetic, and representative produced water composition feed at 50 ml/min total flow through MPSE 36. We have also performed a parametric study of the MPSE operations, beyond the scope of SOPO, exploring operating conditions of current and broader interest. The extended investigation of operational parameters is concurrent with our efforts to seek further development of the MPSE technology beyond the scope of the Project. Along these lines of development, we have made efforts to be responsive to DOE calls for technological developments of other types of resources (beyond PW) for the recovery of Critical Materials and higher TRL development (beyond TRL 4). During the work on this Project, we developed and implemented three innovative technical approaches that emerged from our efforts to successfully meet the Project milestones. The innovative & original technical approaches developed and implemented in this Project are now the contributions to process engineering that could be clearly credited to the Project. First, Convergent Design Approach is a comprehensive feedforward & feedback loop of four design phases: i) design for functionality, ii) design for manufacturing, iii) design for sustainability, and iv) design for market. Next was Process Intensification. A major aim of this Project was to create an innovative phase separation & extraction microscale-based technology for Li separation – thus the words microchannel-based in the Project title. A microscale-based technology is intrinsically in the center of the Process Intensification domain as defined by its unique principles. Therefore, Process Intensification was implicitly envisioned in the Project’s SOPO. Lastly, Time Scale Analysis is a novel tool for discovering the needs and directions of Process Intensification implementations in any process technology. This Project is fully credited for developing and implementing the three novel technical approaches mentioned above. These are general contributions to process engineering that emerged from this Project. Beyond the original SOPO scope, the OSU-U.Pitt research group utilized a Convergent Design methodology, integrating first-principles mathematical modeling with experimental validation on the Minimum Development Vehicle. By creating these Digital Twins, the team rapidly assessed manufacturing iterations to support TEA analysis. This framework further enabled the development of advanced Surface Modification Techniques, where hydrophobic and oleophobic coating strategies were optimized via Digital Twin tools and validated through rigorous 100-hour longevity testing. TEA Analysis: The closing efforts of this Project were focused on the TEA analysis. TEA analysis had two primary functions: i) enabling critical assessments of design variations withing 10 the Concurrent Design Approach, thus enabling evolution of the MPSE design to reach faster- better-cheaper alternatives; and ii) to create a bridge between the accomplishments of this Project and future projects of higher TRL, beyond TRL 6 level. It is important to note that the TEA model created in the Project stirred the technological solutions for the recovery of critical materials toward a vision of a very profitable modular plant that has unique zero-waste water discharge signature. More importantly, thanks to our experimental performance data and conservative assumptions, the TEA model predicts minimal technological and investment risks. Low cost of a modular unit of a nominal capacity of [1000 tons of Li 2 CO 3 /year] positions the MPSE based technology within the reach of community investors, thus offering a paradigm shift in the development of critical technologies. The project successfully navigated two primary challenges: solvent selection and manufacturing adaptation. Restricted by the SOPO to existing literature for lithium recovery, the team identified a critical need for a "material excellence program" to develop next-generation solvents, eventually concluding with a preliminary investigation into promising Ionic Liquids (ILs). Simultaneously, COVID-19 supply chain disruptions forced a pivot from traditional manufacturing to advanced additive methods at ATAMI-OSU. By transitioning from stainless steel to 3D-printed polymer substrates, the team achieved a transformative three-order-of- magnitude reduction in manufacturing costs and compressed prototyping timelines from several months to just two days. The MPSE technology offers significant energy, environmental, and economic advantages by overcoming the traditional bottlenecks of phase-separation hardware and contactor size. Unlike conventional mixer-settlers or membrane-based systems, MPSE operates without moving parts or fouling-prone membranes, achieving robust performance even with challenging, viscous, or particulate-heavy feeds. Key performance metrics include an energy intensity reduction of 5–50x (3–40 kJ/m 3 ) compared to incumbent technologies and a dramatic reduction of processing time to under 60 seconds, which drastically reduces the physical plant footprint. These technical efficiencies translate into superior economic outcomes; for a 100 t/year Li 2 CO 3 facility, implementing MPSE is projected to nearly halve contactor CAPEX (from $\$$6.08M to $\$$3.01M) and significantly increase the project's Net Present Value (NPV), derisking new investment and enabling distributed critical-mineral processing configurations. The commercialization of MPSE technology is being spearheaded by Vigsur Dynamics Inc., which has adopted a structured, parallel approach to technical and business development since its formation in January 2026. Following extensive customer discovery and engagement with the Oregon State University accelerator, Vigsur Dynamics is working to establish a business model that transitions from pilot demonstrations to modular hardware sales, ultimately aiming for a "build-own-operate" service strategy. Current technical milestones—including 100 hours of continuous operation, superior energy efficiency, and successful 6-unit modular scale-up— provide a foundation for this transition. Backed by ongoing IP licensing and a growing network of industrial and venture advisors, the company is actively de-risking the platform to replace conventional mixer-settler systems in the critical minerals market.

37 INORGANIC, ORGANIC, PHYSICAL, AND ANALYTICAL CH↗
NASA NTRS1989

Transputer parallel processing at NASA Lewis Research Center

The transputer parallel processing lab at NASA Lewis Research Center (LeRC) consists of 69 processors (transputers) that can be connected into various networks for use in general purpose concurrent processing applications. The main goal of the lab is to develop concurrent scientific and engineering application programs that will take advantage of the computational speed increases available on a parallel processor over the traditional sequential processor. Current research involves the development of basic programming tools. These tools will help standardize program interfaces to specific hardware by providing a set of common libraries for applications programmers. The thrust of the current effort is in developing a set of tools for graphics rendering/animation. The applications programmer currently has two options for on-screen plotting. One option can be used for static graphics displays and the other can be used for animated motion. The option for static display involves the use of 2-D graphics primitives that can be called from within an application program. These routines perform the standard 2-D geometric graphics operations in real-coordinate space as well as allowing multiple windows on a single screen.

Ellis, Graham K.↗
NASA NTRS2021

Remote Concurrent Engineering: A-Team Studies in the Virtual World

NASA Jet Propulsion Laboratory’s (JPL’s)Architecture Team (A-Team) has nearly a decade of experiencein maturing early formulation mission and technology conceptsby combining innovative collaborative engineering methodswith cutting-edge subject matter expertise and advancedanalysis tools in an in-person environment. When COVID-19forced JPL’s workforce to work remotely in March 2020, ATeamhad to quickly pivot from an in-person collaborativeenvironment to a remote working environment.Through introspection, careful planning, and considerablepractice, A-Team was able to develop new operating proceduresto effectively continue early formulation studies in a virtualenvironment. A-Team has held over 57 remote studies in the 10months since the start of mandatory telework at JPL in March2020. In the remote setting, A-Team conducts studies in half-daysessions with clients and subject matter experts (SMEs) viavideoconferencing, shared computer screens, and digitalcollaborative tools.The key lesson is that increased staffing and planning is neededto prepare and successfully run remote A-Team studies. RemoteA-Team studies require careful selection of the appropriatetools for security, accessibility, and usability within theNASA/JPL environment. Knowledge capture methods andtemplates need to be thought out and agreed upon in advance asthere is less room for improvising in a remote format. Variouscommunication channels have to be monitored to allow for teamcoordination while maintaining fruitful participant engagementduring a session. In addition, technical backup for all roleswithin the A-Team have to be identified to allow the study tocontinue even if a team member’s connectivity is temporarilyinterrupted. Finally, careful thought has to be put into methodsand processes to create a collaborative environment in a virtualspace such that a group of experts who are only connected viathe internet can experience the creative spark and flow of a greatcollaborative and innovative study.

Zusack, Steven↗
DOE OSTI2024

Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)

The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)

42 ENGINEERING↗