Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “design for safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Manned space flight nuclear system safety. Volume 3: Reactor system preliminary nuclear safety analysis. Part 1: Reference Design Document (RDD)

The Reference Design Document, of the Preliminary Safety Analysis Report (PSAR) - Reactor System provides the basic design and operations data used in the nuclear safety analysis of the Rector Power Module as applied to a Space Base program. A description of the power module systems, facilities, launch vehicle and mission operations, as defined in NASA Phase A Space Base studies is included. Each of two Zirconium Hydride Reactor Brayton power modules provides 50 kWe for the nominal 50 man Space Base. The INT-21 is the prime launch vehicle. Resupply to the 500 km orbit over the ten year mission is provided by the Space Shuttle. At the end of the power module lifetime (nominally five years), a reactor disposal system is deployed for boost into a 990 km high altitude (long decay time) earth orbit.

Source record↗

Human Factors Research Needs for In-Time Aviation Safety Management Systems (IASMS) Design: Enabling the NASA “Sky for All” Future Airspace Vision

Integrated safety management will be paramount for safely enabling the envisioned transformations of the future National Airspace System. Addressing the increasing need for advanced data analytics and fusion of aviation safety data, managed by human decision-makers, is essential for realizing the vision. The proposal, if accepted, will discuss safety management system challenges and how the concept of In-time Aviation Safety Management Systems addresses the need. It will also discuss human factors challenges involved in future integrated safety management, including trust, over-reliance, human-optimized data visualization, human-autonomy teaming, training, communication and dissemination of data, situation awareness, task load, and accountability.

Lawrence J Prinzel III↗

System-Theoretic Analysis of Unsafe Collaborative Control in Teaming Systems

The interactions that occur in human-teaming are inspiring novel aerospace designs aimed at improving how humans and machines, or multiple machines, work together. Unfortunately, current Systems Engineering processes are ill-equipped to handle these complex relationships and are unable to design and assure the safety for these systems. To close part of this gap, this paper introduces a novel system-theoretic analytical process to identify unsafe collaborative control actions. It is part of a broader set of techniques that extend the state-of-the-art in hazard analysis, System Theoretic Process Analysis (STPA), to systematically address collaboration. The method rigorously expresses the different ways multiple commands may be unsafe together. Using Systems Theory, it employs abstraction to manage the combinatorial complexity in enumerating control contributions from multiple collaborating components. An algorithm integrates these concepts into an end-to-end process and is supported by automation to enumerate, refine, prune, and prioritize unsafe combinations of control actions. The output of the method feeds the specification of system requirements to implement safety-guided design starting early in concept development. The process is demonstrated on a manned-unmanned aircraft teaming case study and finds new causal factors that were not previously found in a past hazard analysis of the same system.

System Safety↗

Advanced Vehicle Concepts and Implications for NextGen

This report presents the results of a major NASA study of advanced vehicle concepts and their implications for the Next Generation Air Transportation System (NextGen). Comprising the efforts of dozens of researchers at multiple institutions, the analyses presented here cover a broad range of topics including business-case development, vehicle design, avionics, procedure design, delay, safety, environmental impacts, and metrics. The study focuses on the following five new vehicle types: Cruise-efficient short takeoff and landing (CESTOL) vehicles Large commercial tiltrotor aircraft (LCTRs) Unmanned aircraft systems (UAS) Very light jets (VLJs) Supersonic transports (SST). The timeframe of the study spans the years 2025-2040, although some analyses are also presented for a 3X scenario that has roughly three times the number of flights as today. Full implementation of NextGen is assumed.

Air traffic control↗

Preliminary Results from the Saffire VI Experiment

The preliminary results are presented for one test of the last flight of the Spacecraft Fire Experiment (Saffire VI) which was conducted on an orbiting Cygnus spacecraft. These experiments directly address the risks associated with our understanding of spacecraft fire behavior at practical length scales and geometries. The lack of this experimental data has forced spacecraft designers to base their designs and safety precautions on 1-g understanding of flame spread, flame self-extinguishment, fire detection, and suppression. The Saffire experiment was developed by an international team of investigators with the goal of addressing open issues in spacecraft fire safety. NASA’s Spacecraft Fire Safety Demonstration Project was designed with the goal of conducting a series of large-scale experiments in spacecraft environments that represent practical spacecraft fires. The final flight examined concurrent spread over large samples (all 41 cm wide) including a thin sheet of flammable fuel (cotton/fiberglass 50 cm long); 2-sided spread over 1 cm thick polymethyl methacrylate (PMMA) (18 cm long) ; 1-sided spread over 0.5 cm thick (18 cm long); and Nomex fabric (7 cm long). This paper focusses on the two-sided PMMA sample. The flame heat release is determined and is compared to the overall temperature rise in the spacecraft and the change in the concentration of carbon dioxide and carbon monoxide in the spacecraft.

fire↗

Design for Reliability and Safety Approach for the New NASA Launch Vehicle

The United States National Aeronautics and Space Administration (NASA) is in the midst of a space exploration program intended for sending crew and cargo to the international Space Station (ISS), to the moon, and beyond. This program is called Constellation. As part of the Constellation program, NASA is developing new launch vehicles aimed at significantly increase safety and reliability, reduce the cost of accessing space, and provide a growth path for manned space exploration. Achieving these goals requires a rigorous process that addresses reliability, safety, and cost upfront and throughout all the phases of the life cycle of the program. This paper discusses the "Design for Reliability and Safety" approach for the NASA new launch vehicles, the ARES I and ARES V. Specifically, the paper addresses the use of an integrated probabilistic functional analysis to support the design analysis cycle and a probabilistic risk assessment (PRA) to support the preliminary design and beyond.

Safie, Fayssal M.↗

NASA Systems Engineering and Safety Culture: Aerospace Project Design and Implementation Challenges

Using Systems Engineering principles and the NASA Glenn Safety procedures and protocols, a rigorous method was developed to ensure safe testing and operation of a small, commercial off the shelf turbofan engine at the Aero-Acoustic Propulsion Laboratory (AAPL). The DGEN380 is a small, ~500-lbf thrust class, high-bypass, geared- turbofan engine with a separate flow nozzle. It is a modular, compact, lightweight turbofan with Full-Authority Digital Engine Control. It’s general characteristics make it an ideal candidate for utilization as a testbed for engine aero-acoustic technology maturation in a relevant performance environment. The DGEN380 is the core component of the DGEN Aero-propulsion Research Turbofan (DART) mobile test rig. The full presentation will describe the risk assessment and mitigation process applied to the DART by the project team. The identification and analysis of failure modes led to the development of risk mitigation plans, which include administrative, engineering, and physical controls for the safe operation of the DART test rig at the AAPL facility.

Systems Engineering, Aeronautics, safety↗

Grid-scale Energy Storage Hazard Analysis & Design Objectives for System Safety

Battery based energy storage systems are becoming a critical part of a modernized, resilient power system. However, batteries have a unique combination of hazards that can make design and engineering of battery systems difficult. This report presents a systematic hazard analysis of a hypothetical, grid scale lithium-ion battery powerplant to produce sociotechnical "design objectives" for system safety. We applied system's theoretic process analysis (STPA) for the hazard analysis which is broken into four steps: purpose definition, modeling the safety control structure, identifying unsafe control actions, and identifying loss scenarios. The purpose of the analysis was defined as to prevent event outcomes that can result in loss of battery assets due to fires and explosions, loss of health or life due to battery fires and explosions, and loss of energy storage services due to non- operational battery assets. The STPA analysis resulted in identification of six loss scenarios, and their constituent unsafe control actions, which were used to define a series of design objectives that can be applied to reduce the likelihood and severity of thermal events in battery systems. These design objectives, in all or any subset, can be utilized by utilities and other industry stakeholders as "design requirements" in their storage request for proposals (RFPs) and for evaluation of proposals. Further, these design objectives can help to protect firefighters and bring a system back to full functionality after a thermal event. We also comment on the hazards of flow battery technologies.

24 POWER TRANSMISSION AND DISTRIBUTION↗

The Role of Probabilistic Design Analysis Methods in Safety and Affordability

For the last several years, NASA and its contractors have been working together to build space launch systems to commercialize space. Developing commercial affordable and safe launch systems becomes very important and requires a paradigm shift. This paradigm shift enforces the need for an integrated systems engineering environment where cost, safety, reliability, and performance need to be considered to optimize the launch system design. In such an environment, rule based and deterministic engineering design practices alone may not be sufficient to optimize margins and fault tolerance to reduce cost. As a result, introduction of Probabilistic Design Analysis (PDA) methods to support the current deterministic engineering design practices becomes a necessity to reduce cost without compromising reliability and safety. This paper discusses the importance of PDA methods in NASA's new commercial environment, their applications, and the key role they can play in designing reliable, safe, and affordable launch systems. More specifically, this paper discusses: 1) The involvement of NASA in PDA 2) Why PDA is needed 3) A PDA model structure 4) A PDA example application 5) PDA link to safety and affordability.

Safie, Fayssal M.↗

Integrated Handling Qualities Safety Analysis For Conceptual Design of Urban Air Mobility Vehicles

The recent emergence of distributed electric propulsion Vertical Takeoff and Landing (VTOL) aircraft has created a rapid introduction of new design concepts with unique stability and control characteristics. A challenge to realizing the full potential of these vehicles for urban transportation is to gain public acceptance which is largely driven by flight safety. This paper describes ongoing research to address the feasibility of integrating flying qualities safety metrics into conceptual design of VTOL Urban Air Mobility (UAM) vehicles. The discussion is composed of the approach and progress toward a toolbox that integrates with existing NASA rotorcraft design software and processes. Several key challenges are highlighted including modeling requirements for failures, identification of critical failures, and capturing critical failures, with robustness to model uncertainty. A discussion of requirements for safety metrics, specific to UAM vehicles, as well as the effects of the control system design is also included. Results to date have demonstrated the degradation in flying qualities metrics due to propulsion failures.

George Altamirano↗

Evolution of Space Shuttle Range Safety Ascent Flight Envelope Design

For every space vehicle launch from the Eastern Range in Florida, the range user must provide specific Range Safety (RS) data products to the Air Force's 45th Space Wing in order to obtain flight plan approval. One of these data products is a set of RS ascent flight envelope trajectories that define the normal operating region of the vehicle during powered flight. With the Shuttle Program launching 135 manned missions over a 30-year period, 135 envelope sets were delivered to the range. During this time, the envelope methodology and design process evolved to support mission changes, maintain high data quality, and reduce costs. The purpose of this document is to outline the shuttle envelope design evolution and capture the lessons learned that could apply to future spaceflight endeavors.

Brewer, Joan↗

Safety considerations in the design of Spacelab refrigerator/freezer

A vapor compression refrigerator/freezer has been designed for Spacelab to conduct life sciences experiments. It is equipped with different safety features to eliminate all probable types of failures. The whole Freon loop is enclosed in a second containment so that any leakage of Freon can be contained. The unit is provided with an 'Emergency On' switch to actuate during backup mode which provides the spacecraft power directly to the compressor and the cooling fans while removing the power supply and all normal control elements from the circuit. During this mode, the compressor runs continuously when operating as a freezer (-22 C) and is controlled by a thermostat to cycle when operating as a refrigerator (4 C). It has a push button switch at the front panel to momentarily power the thermometer by a battery to monitor the inside temperature during an emergency. It has a door switch which shuts off the internal cooling fans when the door is opened. All the important critical performance data will be downlinked through a data connector to monitor during mission.

Hye, A.↗

Assessing Factors of Safety, Margins of Safety, and Reliability of Thermal Protection Systems

This paper provides formally derived definitions for Thermal Protection Systems (TPS) factors of safety and margins of safety borrowing from machine design approaches. The new factors of safety and margins of safety definitions are quite simple and easy to use, and should provide improved comparison of design safety and margins of past, present and future vehicles, These definitions are then applied to several entry vehicles, including Apollo, the Space Shuttle, the Mars Viking and Pathfinder vehicles, and the Pioneer Venus entry vehicle for example and clarity, and to aid in developing a database of previous TPS design experience. In addition to the factors and margins of safety, definitions of computed reliabilities incorporation the reliability index used in machine design are also developed and presented. Adoption and use of the reliability index will hopefully considerably aid the optimization of TPS design for future vehicles.

Rasky, Daniel J.↗

On Automating Failure Mode Analysis and Enforcing its Integrity

This paper reports our experience on the development of a design-for-safety (DFS) workbench called Risk Assessment and Management Environment (RAME) for microelectronic avionics systems. Our objective is to transform DFS practice from an ad-hoc, inefficient, error-prone approach to a stringent engineering process such that DFS can keep up with the rapidly growing complexity of avionics systems. In particular, RAME is built upon an information infrastructure that comprises a fault model, a knowledge base, and a failure reporting/tracking system. This infrastructure permits systematic learning from prior projects and enables the automation of failure modes, effects and criticality analysis (FMECA). Among other unique features, the most important advantage of RAME is its capability of directly accepting design source code in hardware description languages (HDLs) for automated failure mode analysis, which enables RAME to be compatible and to evolve with most electronic-computer-aided-design systems. Through an initial experimental evaluation of the RAME prototype, we show that our approach to FMECA automation improves failure mode analysis turn-around-time, completeness, and accuracy.

design for safety↗

Advanced Software V&V for Civil Aviation and Autonomy

With the advances in high-computing platform (e.g., advanced graphical processing units or multi-core processors), computationally-intensive software techniques such as the ones used in artificial intelligence or formal methods have provided us with an opportunity to further increase safety in the aviation industry. Some of these techniques have facilitated building safety at design time, like in aircraft engines or software verification and validation, and others can introduce safety benefits during operations as long as we adapt our processes. In this talk, I will present how NASA is taking advantage of these new software techniques to build in safety at design time through advanced software verification and validation, which can be applied earlier and earlier in the design life cycle and thus help also reduce the cost of aviation assurance. I will then show how run-time techniques (such as runtime assurance or data analytics) offer us a chance to catch even more complex problems, even in the face of changing and unpredictable environments. These new techniques will be extremely useful as our aviation systems become more complex and more autonomous.

software assurance↗

Effects of Trigger Method on Fire Propagation during the Thermal Runaway Process in Li-ion Batteries

Lithium-ion batteries are prone to fire hazards due to the possibility of thermal runaway propagation. During battery product development and subsequent safety tests for design validation and safety certification, the thermal runaway onset is triggered by various test methods such as nail penetration, thermal ramp, or external short circuit. This failure initiation method affects the amount of heat contributions and the composition of gas generations. This study compares two such trigger methods, external heating and using a thermally-activated internal short circuit device (ISCD). The effects of the trigger method on total heat generation are experimentally investigated within 18650 cylindrical cells at single cell level as well as at multiple cell configuration level. The severity of failure was observed to be worse for cells with ISCDs at single cell level, whereas quite the opposite results were observed at multiple cell configuration level. A preliminary numerical analysis was performed to better understand the battery safety performance with respect to thermal runaway trigger methods and heat transfer conditions.

25 ENERGY STORAGE↗

(ODIN): An Open Source, Low-Latency Data Integration & Visualization Framework for the NASA System Wide Safety Project's Disaster Response Safety Demonstration Series

The Open Data Integration Framework (ODIN) is an open source, low latency data integration and visualization framework (https://github.com/NASARace/race-odin) developed under NASA’s System WideSafety Program to demonstrate new safety capabilities designed to improve US airspace operations. Safety demonstrations are a set of increasingly complex (from public safety perspective) disaster response scenarios under which air systems must operate with increased capacity and include: 1) Wildland fire response, 2) Hurricane relief and recovery, 4) Emergency medical delivery via UAS and 4) Urban disaster relief. To accommodate disaster response, ODIN is field deployable and can scale on one or more multi-core, commodity laptops operating with full to limited or intermittent internet connectivity, conditions likely encountered during operations. ODIN runs as webserver with local, persistent data storage to serve either public or a secured, ad hoc network (e.g., an incident command post). The current released ODIN, ODIN-Fire is tailored for wildland fire management incorporating information on satellite overpasses with links to the near real-time data and imagery from the respective agencies. Included are winds data, an important variable for emergency responders and airspace operations, and high-resolution wind forecasts generated by super-computing resources and ingested into ODIN. As an open-source project, ODIN has attracted interest from multiple entities. We will show how 1) a commercial field instrument and data provider uses ODIN to help users visualize, publish and integrate their in-situ sensor network data and 2) ODIN’s capabilities to ingest, integrate and display near-real time satellite data with air traffic and a USFS winds forecast model used in fire response and post-fire assessment. Within NASA ODIN demonstrated novel, near terminal airspace safety capabilities for a project close-out event and previously it monitored the national airspace in real-time to meet an agency milestone. ODIN is presently under development for the anticipated hurricane relief and response demonstration notionally scheduled for the 2025-27 time frame and is available from NASA's github at the above link.

Aeronautics↗