Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

Failure analysis and modeling of a VAXcluster system

This paper discusses the results of a measurement-based analysis of real error data collected from a DEC VAXcluster multicomputer system. In addition to evaluating basic system dependability characteristics such as error and failure distributions and hazard rates for both individual machines and for the VAXcluster, reward models were developed to analyze the impact of failures on the system as a whole. The results show that more than 46 percent of all failures were due to errors in shared resources. This is despite the fact that these errors have a recovery probability greater than 0.99. The hazard rate calculations show that not only errors, but also failures occur in bursts. Approximately 40 percent of all failures occur in bursts and involved multiple machines. This result indicates that correlated failures are significant. Analysis of rewards shows that software errors have the lowest reward (0.05 vs 0.74 for disk errors). The expected reward rate (reliability measure) of the VAXcluster drops to 0.5 in 18 hours for the 7-out-of-7 model and in 80 days for the 3-out-of-7 model.

Tang, Dong↗

Galileo spacecraft power distribution and autonomous fault recovery

There is a trend in current spacecraft design to achieve greater fault tolerance through the implemenation of on-board software dedicated to detecting and isolating failures. A combination of hardware and software is utilized in the Galileo power system for autonomous fault recovery. Galileo is a dual-spun spacecraft designed to carry a number of scientific instruments into a series of orbits around the planet Jupiter. In addition to its self-contained scientific payload, it will also carry a probe system which will be separated from the spacecraft some 150 days prior to Jupiter encounter. The Galileo spacecraft is scheduled to be launched in 1985. Attention is given to the power system, the fault protection requirements, and the power fault recovery implementation.

Detwiler, R. C.↗

Water vapor diffusion membranes, 2

Transport mechanisms were investigated for the three different types of water vapor diffusion membranes. Membranes representing porous wetting and porous nonwetting structures as well as dense diffusive membrane structures were investigated for water permeation rate as a function of: (1) temperature, (2) solids composition in solution, and (3) such hydrodynamic parameters as sweep gas flow rate, solution flow rate and cell geometry. These properties were measured using nitrogen sweep gas to collect the effluent. In addition, the chemical stability to chromic acid-stabilized urine was measured for several of each type of membrane. A technology based on the mechanism of vapor transport was developed, whereby the vapor diffusion rates and relative susceptibility of membranes to fouling and failure could be projected for long-term vapor recovery trials using natural chromic acid-stabilized urine.

Holland, F. F.↗

Solar effects associated with the cosmic ray modulation spectrum

Various indicators of solar activity are examined with reference to the changes observed in the rigidity dependence of cosmic ray modulation between 1969 and 1972. The heliolatitude dependence and the N-S asymmetry of solar activity, as deduced from the distribution of sunspots and sunspot groups, appeared to be related to cosmic ray variations during earlier epochs. The failure of such a relationship to continue during the recovery of cosmic ray intensity is discussed. The heliolatitude dependence of the solar wind velocity, as deduced from IPS observations is also discussed in terms of cosmic ray events and of the long term modulation of cosmic ray intensity.

Mendell, R. B.↗

International Space Station (ISS) Low Pressure Intramodule Quick Disconnect Failures

A failure of an ISS intermodule Quick Disconnect (QD) during protoflight vibration testing of ISS regenerative Environmental Control and Life Support (ECLS) hardware led to the discovery of QD design, manufacturing, and test flaws which can yield the male QD susceptible to failure of the secondary housing seal and inadequate housing assembly locking mechanisms. Discovery of this failure had large implications when considering that currently there are 399 similar units on orbit and approximately 1100 units on the ground integrated into flight hardware. Discovery of the nature of the failure required testing and analysis and implementation of a recovery plan requiring part screening and review of element level and project hazard analysis to determine if secondary seals are required. Implementation also involves coordination with the Nodes and MPLM project offices, Regenerative ECLS Project, ISS Payloads, JAXA, ESA, and ISS Logistics and Maintenance.

Lewis, John F.↗

Community Coordinated Modeling Center Support of Operations: Real-Time Simulations and V & V.

In support of Operations Community Coordinated Modeling Center (CCMC) performing validation and verification of space weather models. To identify suitable metrics the CCMC focus on parameters most useful to operations that CCMC resident models can provide. The real time simulations carried out at CCMC are an essential tool to test model performance and stability by using input conditions that may occur in nature at any time. Since 2001, the magnetospheric MHD model BATSRUS has been run in real time using ACE real time data. CCMC staff developed an experimental real-time system that controls uploading of the real-time ACE data, monitors continuous model execution, initiates automatic recovery procedure in case of data gaps or hardware failures, synchronizes BATSRUS and FRC runs, and periodically runs IDL based visualization software.

Kuznetsova, M.↗

Aircraft Loss-of-Control Accident Prevention: Switching Control of the GTM Aircraft with Elevator Jam Failures

Switching control, servomechanism, and H2 control theory are used to provide a practical and easy-to-implement solution for the actuator jam problem. A jammed actuator not only causes a reduction of control authority, but also creates a persistent disturbance with uncertain amplitude. The longitudinal dynamics model of the NASA GTM UAV is employed to demonstrate that a single fixed reconfigured controller design based on the proposed approach is capable of accommodating an elevator jam failure with arbitrary jam position as long as the thrust control has enough control authority. This paper is a first step towards solving a more comprehensive in-flight loss-of-control accident prevention problem that involves multiple actuator failures, structure damages, unanticipated faults, and nonlinear upset regime recovery, etc.

Chang, Bor-Chin↗

Failure analysis of a tool steel torque shaft

A low design load drive shaft used to deliver power from an experimental exhaust heat recovery system to the crankshaft of an experimental diesel truck engine failed during highway testing. An independent testing laboratory analyzed the failure by routine metallography and attributed the failure to fatigue induced by a banded microstructure. Visual examination by NASA of the failed shaft plus the knowledge of the torsional load that it carried pointed to a 100 percent ductile failure with no evidence of fatigue. Scanning electron microscopy confirmed this. Torsional test specimens were produced from pieces of the failed shaft and torsional overload testing produced identical failures to that which had occurred in the truck engine. This pointed to a failure caused by a high overload and although the microstructure was defective it was not the cause of the failure.

Reagan, J. R.↗

Failure analysis of a tool steel torque shaft

A low design load drive shaft used to deliver power from an experimental exhaust heat recovery system to the crankshaft of an experimental diesel truck engine failed during highway testing. An independent testing laboratory analyzed the failure by routine metallography and attributed the failure to fatigue induced by a banded microstructure. Visual examination by NASA of the failed shaft plus the knowledge of the torsional load that it carried pointed to a 100 percent ductile failure with no evidence of fatigue. Scanning electron microscopy confirmed this. Previously announced in STAR as N82-11184

Reagan, J. R.↗

An elastic failure model of indentation damage

A mechanistically consistent model for indentation damage based on elastic failure at tensile or shear overloads, is proposed. The model accommodates arbitrary crack orientation, stress relaxation, reduction and recovery of stiffness due to crack opening and closure, and interfacial friction due to backward sliding of closed cracks. This elastic failure model was implemented by an axisymmetric finite element program which was used to simulate progressive damage in a silicon nitride plate indented by a tungsten carbide sphere. The predicted damage patterns and the permanent impression matched those observed experimentally. The validation of this elastic failure model shows that the plastic deformation postulated by others is not necessary to replicate the indentation damage of brittle structural ceramics.

Liaw, B. M.↗

Performance Losses and Current-Driven Recovery from Cation Contaminants in PEM Water Electrolysis

Water contaminants are a common cause of failure for polymer electrolyte membrane (PEM) electrolyzers in the field as well as a confounding factor in research on cell performance and durability. In this study, we investigated the performance impacts of feed water containing representative tap water cations at concentrations ranging from 0.5–500 μ M, with conductivities spanning from ASTM Type II to tap-water levels. We present multiple diagnostic signatures to help identify the presence of contaminants in PEM electrolysis cells. Through analysis of polarization curves and impedance spectroscopy to understand the origins of performance losses, we found that a switch from the acidic to alkaline hydrogen evolution mechanism is a key factor in contaminated cell behavior. Finally, we demonstrated that this mechanism switching can be harnessed to remove cation contaminants and recover cell performance without the use of an acid wash. We demonstrated near-complete recovery of cells contaminated with sodium and calcium, and partial recovery of a cell contaminated with iron, which was further investigated by post-mortem microscopy. The improved understanding of contaminant impacts from this work can inform development of strategies to mitigate or recover performance losses as well as improve the consistency and rigor of electrolysis research.

30 DIRECT ENERGY CONVERSION↗

Evaluation of Technologies to Prevent Precipitation During Water Recovery from Urine

The International Space Station (ISS) Urine Processor Assembly (UPA) experienced a hardware failure in the Distillation Assembly (DA) in October 2010. Initially the UPA was operated to recover 85% of the water from urine through distillation, concentrating the contaminants in the remaining urine. The DA failed due to precipitation of calcium sulfate (gypsum) which caused a loss of UPA function. The ISS UPA operations have been modified to only recover 70% of the water minimizing gypsum precipitation risk but substantially increasing water resupply needs. This paper describes the feasibility assessment of several technologies (ion exchange, chelating agents, threshold inhibitors, and Lorentz devices) to prevent gypsum precipitation. The feasibility assessment includes the development of assessment methods, chemical modeling, bench top testing, and validation testing in a flight-like ground UPA unit. Ion exchange technology has been successfully demonstrated and has been recommended for further development. The incorporation of the selected technology will enable water recovery to be increased from 70% back to the original 85% and improve the ISS water balance.

Broyan, James L., Jr.↗

Piloted Simulation Tests of Propulsion Control as Backup to Loss of Primary Flight Controls for a B747-400 Jet Transport

Partial failures of aircraft primary flight control systems and structural damages to aircraft during flight have led to catastrophic accidents with subsequent loss of lives (e.g. DC-10, B-747, C-5, B-52, and others). Following the DC-10 accident at Sioux City, Iowa in 1989, the National Transportation Safety Board recommended 'Encourage research and development of backup flight control systems for newly certified wide-body airplanes that utilize an alternate source of motive power separate from that source used for the conventional control system.' This report describes the concept of a propulsion controlled aircraft (PCA), discusses pilot controls, displays, and procedures; and presents the results of a PCA piloted simulation test and evaluation of the B747-400 airplane conducted at NASA Ames Research Center in December, 1996. The purpose of the test was to develop and evaluate propulsion control throughout the full flight envelope of the B747-400 including worst case scenarios of engine failures and out of trim moments. Pilot ratings of PCA performance ranged from adequate to satisfactory. PCA performed well in unusual attitude recoveries at 35,000 ft altitude, performed well in fully coupled ILS approaches, performed well in single engine failures, and performed well at aft cg. PCA performance was primarily limited by out-of-trim moments.

Bull, John↗

An operating system for future aerospace vehicle computer systems

The requirements for future aerospace vehicle computer operating systems are examined in this paper. The computer architecture is assumed to be distributed with a local area network connecting the nodes. Each node is assumed to provide a specific functionality. The network provides for communication so that the overall tasks of the vehicle are accomplished. The O/S structure is based upon the concept of objects. The mechanisms for integrating node unique objects with node common objects in order to implement both the autonomy and the cooperation between nodes is developed. The requirements for time critical performance and reliability and recovery are discussed. Time critical performance impacts all parts of the distributed operating system; e.g., its structure, the functional design of its objects, the language structure, etc. Throughout the paper the tradeoffs - concurrency, language structure, object recovery, binding, file structure, communication protocol, programmer freedom, etc. - are considered to arrive at a feasible, maximum performance design. Reliability of the network system is considered. A parallel multipath bus structure is proposed for the control of delivery time for time critical messages. The architecture also supports immediate recovery for the time critical message system after a communication failure.

Foudriat, E. C.↗

The Galileo high gain antenna deployment anomaly

On April 11, 1991, the Galileo spacecraft executed a sequence that would open the spacecraft's High Gain Antenna. The Antenna's launch restraint had been released just after deployment sequence, the antenna, which opens like an umbrella, never reached the fully deployed position. The analyses and tests that followed allowed a conclusive determination of the likely failure mechanisms and pointed to some strategies to use for recovery of the high gain antenna.

Johnson, Michael R.↗

Contingency Trajectory Design for a Lunar Orbit Insertion Maneuver Failure by the LADEE Spacecraft

This paper presents results from a contingency trajectory analysis performed for the Lunar Atmosphere & Dust Environment Explorer (LADEE) mission in the event of a missed lunar-orbit insertion (LOI) maneuver by the LADEE spacecraft. The effects of varying solar perturbations in the vicinity of the weak stability boundary (WSB) in the Sun-Earth system on the trajectory design are analyzed and discussed. It is shown that geocentric recovery trajectory options existed for the LADEE spacecraft, depending on the spacecraft's recovery time to perform an Earth escape-prevention maneuver after the hypothetical LOI maneuver failure and subsequent path traveled through the Sun-Earth WSB. If Earth-escape occurred, a heliocentric recovery option existed, but with reduced science capacapability for the spacecraft in an eccentric, not circular near-equatorial retrograde lunar orbit.

LADEE↗

Contingency Trajectory Design for a Lunar Orbit Insertion Maneuver Failure by the LADEE Spacecraft

This paper presents results from a contingency trajectory analysis performed for the Lunar Atmosphere Dust Environment Explorer (LADEE) mission in the event of a missed lunar-orbit insertion (LOI) maneuver by the LADEE spacecraft. The effects of varying solar perturbations in the vicinity of the weak stability boundary (WSB) in the Sun-Earth system on the trajectory design are analyzed and discussed. It is shown that geocentric recovery trajectory options existed for the LADEE spacecraft, depending on the spacecrafts recovery time to perform an Earth escape-prevention maneuver after the hypothetical LOI maneuver failure and subsequent path traveled through the Sun-Earth WSB. If Earth-escape occurred, a heliocentric recovery option existed, but with reduced science capability for the spacecraft in an eccentric, not circular near-equatorial retrograde lunar orbit.

Genova, Anthony L.↗

Failure Analysis Results and Corrective Actions Implemented for the Extravehicular Mobility Unit 3011 Water in the Helmet Mishap

Water entered the Extravehicular Mobility Unit (EMU) helmet during extravehicular activity (EVA) no. 23 aboard the International Space Station on July 16, 2013, resulting in the termination of the EVA approximately 1 hour after it began. It was estimated that 1.5 liters of water had migrated up the ventilation loop into the helmet, adversely impacting the astronaut's hearing, vision, and verbal communication. Subsequent on-board testing and ground-based test, tear-down, and evaluation of the affected EMU hardware components determined that the proximate cause of the mishap was blockage of all water separator drum holes with a mixture of silica and silicates. The blockages caused a failure of the water separator degassing function, which resulted in EMU cooling water spilling into the ventilation loop, migrating around the circulating fan, and ultimately pushing into the helmet. The root cause of the failure was determined to be ground-processing shortcomings of the Airlock Cooling Loop Recovery (ALCLR) Ion Filter Beds, which led to various levels of contaminants being introduced into the filters before they left the ground. Those contaminants were thereafter introduced into the EMU hardware on-orbit during ALCLR scrubbing operations. This paper summarizes the failure analysis results along with identified process, hardware, and operational corrective actions that were implemented as a result of findings from this investigation.

Steele, John↗