Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Prediction of muscle performance during dynamic repetitive movement

BACKGROUND: During long-duration spaceflight, astronauts experience progressive muscle atrophy and often perform strenuous extravehicular activities. Post-flight, there is a lengthy recovery period with an increased risk for injury. Currently, there is a critical need for an enabling tool to optimize muscle performance and to minimize the risk of injury to astronauts while on-orbit and during post-flight recovery. Consequently, these studies were performed to develop a method to address this need. METHODS: Eight test subjects performed a repetitive dynamic exercise to failure at 65% of their upper torso weight using a Lordex spinal machine. Surface electromyography (SEMG) data was collected from the erector spinae back muscle. The SEMG data was evaluated using a 5th order autoregressive (AR) model and linear regression analysis. RESULTS: The best predictor found was an AR parameter, the mean average magnitude of AR poles, with r = 0.75 and p = 0.03. This parameter can predict performance to failure as early as the second repetition of the exercise. CONCLUSION: A method for predicting human muscle performance early during dynamic repetitive exercise was developed. The capability to predict performance to failure has many potential applications to the space program including evaluating countermeasure effectiveness on-orbit, optimizing post-flight recovery, and potential future real-time monitoring capability during extravehicular activity.

Physical Endurance/physiology↗

Redesign of the Extravehicular Mobility Unit Airlock Cooling Loop Recovery Assembly

During EVA (Extravehicular Activity) 23 aboard the ISS (International Space Station) on 07/16/2013 an episode of water in the EMU (Extravehicular Mobility Unit) helmet occurred, necessitating a termination of the EVA (Extravehicular Activity) shortly after it began. The root cause of the failure was determined to be ground-processing short-comings of the ALCLR (Airlock Cooling Loop Recovery) Ion Beds which led to various levels of contaminants being introduced into the Ion Beds before they left the ground. The Ion Beds were thereafter used to scrub the failed EMU cooling water loop on-orbit during routine scrubbing operations. The root cause investigation identified several areas for improvement of the ALCLR Assembly which have since been initiated. Enhanced washing techniques for the ALCLR Ion Bed have been developed and implemented. On-orbit cooling water conductivity and pH analysis capability to allow the astronauts to monitor proper operation of the ALCLR Ion Bed during scrubbing operation is being investigation. A simplified means to acquire on-orbit EMU cooling water samples have been designed. Finally, an inherently cleaner organic adsorbent to replace the current lignite-based activated carbon, and a non-separable replacement for the separable mixed ion exchange resin are undergoing evaluation. These efforts are undertaken to enhance the performance and reduce the risk associated with operations to ensure the long-term health of the EMU cooling water circuit.

Steele, John↗

Redesign of the Extravehicular Mobility Unit Airlock Cooling Loop Recovery Assembly

During EVA (Extravehicular Activity) 23 aboard the ISS (International Space Station) on 07/16/2013 an episode of water in the EMU (Extravehicular Mobility Unit) helmet occurred, necessitating a termination of the EVA (Extravehicular Activity) shortly after it began. The root cause of the failure was determined to be ground-processing short-comings of the ALCLR (Airlock Cooling Loop Recovery) Ion Beds which led to various levels of contaminants being introduced into the Ion Beds before they left the ground. The Ion Beds were thereafter used to scrub the failed EMU cooling water loop on-orbit during routine scrubbing operations. The root cause investigation identified several areas for improvement of the ALCLR Assembly which have since been initiated. Enhanced washing techniques for the ALCLR Ion Bed have been developed and implemented. On-orbit cooling water conductivity and pH analysis capability to allow the astronauts to monitor proper operation of the ALCLR Ion Bed during scrubbing operation is being investigated. A simplified means to acquire on-orbit EMU cooling water samples has been designed. Finally, an inherently cleaner organic adsorbent to replace the current lignite-based activated carbon, and a non-separable replacement for the separable mixed ion exchange resin are undergoing evaluation. These efforts are undertaken to enhance the performance and reduce the risk associated with operations to ensure the long-term health of the EMU cooling water circuit.

Steele, John↗

Microstructural Changes to Thermally Sprayed Materials Subjected to Dynamic Compression

Dynamic compression of materials can induce a variety of microstructural changes. As thermally-sprayed materials have highly complex microstructures, the expected pressure at which changes occur cannot be predicted a priori. In addition, typical in-situ measurements such as velocimetry are unable to adequately diagnose microstructural changes such as failure or pore collapse. Quasi-isentropic compression experiments with sample recovery were conducted to examine microstructural changes in thermally sprayed tantalum and tantalum-niobium blends up to 8 GPa pressure. Spall fracture was observed in all tests, and post-shot pore volume decreased relative to the initial state. The blended material exhibited larger spall planes with fracture occurring at interphase boundaries. An estimate of the pressure at which pore collapse is complete was determined to be ~26 GPa for pure tantalum and ~19 GPa for the tantalumniobium blend under these loading conditions.

36 MATERIALS SCIENCE↗

Reduction Of Sizes Of Semi-Markov Reliability Models

Trimming technique reduces computational effort by order of magnitude while introducing negligible error. Error bound depends on only three parameters from semi-Markov model: maximum sum of rates for failure transitions leaving any state, maximum average holding time for recovery-mode state, and operating time for system. Error bound computed before any model generated, enabling modeler to decide immediately whether or not model can be trimmed. Trimming procedure specified by precise and easy description, making it easy to include trimming procedure in program generating mathematical models for use in assessing reliability. Typical application of technique in design of digital control systems required to be extremely reliable. In addition to aerospace applications, fault-tolerant design has growing importance in wide range of industrial applications.

White, Allan L.↗

Site Partitioning for Redundant Arrays of Distributed Disks

Redundant arrays of distributed disks (RADD) can be used in a distributed computing system or database system to provide recovery in the presence of disk crashes and temporary and permanent failures of single sites. In this paper, we look at the problem of partitioning the sites of a distributed storage system into redundant arrays in such a way that the communication costs for maintaining the parity information are minimized. We show that the partitioning problem is NP-hard. We then propose and evaluate several heuristic algorithms for finding approximate solutions. Simulation results show that significant reduction in remote parity update costs can be achieved by optimizing the site partitioning scheme.

Mourad, Antoine N.↗

Designing Fault-Injection Experiments for the Reliability of Embedded Systems

This paper considers the long-standing problem of conducting fault-injections experiments to establish the ultra-reliability of embedded systems. There have been extensive efforts in fault injection, and this paper offers a partial summary of the efforts, but these previous efforts have focused on realism and efficiency. Fault injections have been used to examine diagnostics and to test algorithms, but the literature does not contain any framework that says how to conduct fault-injection experiments to establish ultra-reliability. A solution to this problem integrates field-data, arguments-from-design, and fault-injection into a seamless whole. The solution in this paper is to derive a model reduction theorem for a class of semi-Markov models suitable for describing ultra-reliable embedded systems. The derivation shows that a tight upper bound on the probability of system failure can be obtained using only the means of system-recovery times, thus reducing the experimental effort to estimating a reasonable number of easily-observed parameters. The paper includes an example of a system subject to both permanent and transient faults. There is a discussion of integrating fault-injection with field-data and arguments-from-design.

White, Allan L.↗

Lessons Learned in Space Life Support System Testing

The earlier problems can be found and corrected, the easier and cheaper it is to fix them. Doing less testing saves cost and time but doing too little testing increases the risk of operational failures causing large costs and delays. Integrated test is necessary to determine if the subsystems work together and the overall architecture performs as intended. This report reviews the testing lessons learned from the NASA Systems Engineering Handbook, a National Research Council report, and five reviews of International Space Station (ISS) lessons learned. The five reviews all mention two important points. First, that testing should be performed on the final integrated system, one as close as possible to the intended flight system. Second, “test as you fly,” while operating as planned in an environment as close as possible to the expected flight environment. Other lessons are the need for extensive preflight ground testing, the need to establish and defend an adequate budget, the problems using protoflight hardware on ISS, and the benefit of having ISS as a zero gravity test bed. The major ISS life support systems, carbon dioxide, water recycling, and oxygen recovery, were protoflight systems with little testing before launch to ISS. The failure rates these systems have been much greater than predicted and this has caused dissatisfaction with the protoflight approach. The more costly traditional approach is building qualification and test units in addition to flight units. The test units are used to test, analyze, and fix failure modes. Other work shows that there is an optimum cost-effective intuitive appeal of a human ecosystem in space.

Life support↗

Lessons Learned in Space Life Support System Testing

The earlier problems can be found and corrected, the easier and cheaper it is to fix them. Doing less testing saves cost and time but doing too little testing increases the risk of operational failures causing large costs and delays. Integrated test is necessary to determine if the subsystems work together and the overall architecture performs as intended. This report reviews the testing lessons learned from the NASA Systems Engineering Handbook, a National Research Council report, and five reviews of International Space Station (ISS) lessons learned. The five reviews all mention two important points. First, that testing should be performed on the final integrated system, one as close as possible to the intended flight system. Second, “test as you fly,” while operating as planned in an environment as close as possible to the expected flight environment. Other lessons are the need for extensive preflight ground testing, the need to establish and defend an adequate budget, the problems using protoflight hardware on ISS, and the benefit of having ISS as a zero gravity test bed. The major ISS life support systems, carbon dioxide removal, water recycling, and oxygen recovery, were protoflight systems with little testing before launch to ISS. The failure rates of these systems have been much greater than predicted and this has caused dissatisfaction with the protoflight approach. The more costly traditional approach builds qualification and test units in addition to flight units. The test units are used to find, analyze, and fix failure modes. Other work shows that there is an optimum cost-effective amount of testing when redundant systems must have a specified reliability and confidence.

Harry W. Jones↗

The recovery of the HEAO-2 observatory

In August 1980, the Second High Energy Astronomy Observatory suffered the simultaneous double failure of two gyros, leaving the observatory with one gyro less than what is required for operation. The function of the missing gyro was replaced to allow restoration of spacecraft operation by reprogramming the on-board computer to derive rate from star and sun sensors, and by utilizing complex procedures. Large sun sensor quantization, jump characteristics of the star tracker, and extremely limited computer memory capacity further complicated the problem. Recovery attempts continued for over three months, during which time a suitable rate algorithm was derived. Final verification of the technique was never completed, however, due to the unexpected revival of one of the failed gyros.

Rose, R. E.↗

Catastrophic Fault Recovery with Self-Reconfigurable Chips

Mission critical systems typically employ multi-string redundancy to cope with possible hardware failure. Such systems are only as fault tolerant as there are many redundant strings. Once a particular critical component exhausts its redundant spares, the multi-string architecture cannot tolerate any further hardware failure. This paper aims at addressing such catastrophic faults through the use of 'Self-Reconfigurable Chips' as a last resort effort to 'repair' a faulty critical component.

fault tolerance↗

Log-Based Recovery in Asynchronous Distributed Systems

A log-based mechanism is described for restoring consistent states to replicated data objects after failures. Preserving a causal form of consistency based on the notion of virtual time is focused upon in this report. Causal consistency has been shown to apply to a variety of applications, including distributed simulation, task decomposition, and mail delivery systems. Several mechanisms have been proposed for implementing causally consistent recovery, most notably those of Strom and Yemini, and Johnson and Zwaenepoel. The mechanism proposed here differs from these in two major respects. First, a roll-forward style of recovery is implemented. A functioning process is never required to roll-back its state in order to achieve consistency with a recovering process. Second, the mechanism does not require any explicit information about the causal dependencies between updates. Instead, all necessary dependency information is inferred from the orders in which updates are logged by the object servers. This basic recovery technique appears to be applicable to forms of consistency other than causal consistency. In particular, it is shown how the recovery technique can be modified to support an atomic form of consistency (grouping consistency). By combining grouping consistency with casual consistency, it may even be possible to implement serializable consistency within this mechanism.

Kane, Kenneth Paul↗

Contact detection and contact motion for error recovery in the presence of uncertainties

Due to various kinds of uncertainties, a robot motion may fail and result in some unintended contact between the object held by the robot and the environment, which greatly hampers robotics applications on tasks with high-precision requirements, such as assembly tasks. Aiming at automatically recovering a robotic task from such a failure, this paper discusses, in the presence of uncertainties, contact detection based on contact motion for recovery. It presents a framework for on-line recognizing contacts using multiple sensor modalities in the presence of sensing uncertainties and means for ensuring successful compliant motions in the presence of sensing and control uncertainties.

Xiao, Jing↗

Non-destructive electrochemical diagnosis of failure mechanisms in aqueous zinc batteries

The early detection of secondary reactions that affect the life and performance of zinc manganese oxide batteries requires a shift from conventional time-consuming and often destructive procedures to rapid lifetime-predictive techniques. In this work, an electrochemical approach is employed to elucidate independent signatures for four common types of failure mechanisms in zinc manganese dioxide (Zn||MnO2) batteries—namely, the loss of zinc inventory, the loss of active material at the cathode, electrolyte depletion, and increased cell impedance. Our findings, specific to coin cell configurations, reveal that each induced failure mechanism can be distinctively modeled and identified based on responses from the rest voltage and columbic-efficiency data for prompt detection. For instance, electrolyte depletion response manifests a distinctive abrupt (>80 %) decrease in columbic efficiency (CE) and charge-rest voltage (Vc) while the discharge-rest voltage remained constant at ~1.3 V. Furthermore, electrolyte rejuvenation of the cell increased the CE to >95 % and restored Vc from ~0.3 to >1.7 V. Recovery experiments and reference performance tests demonstrated consistency between electrochemical descriptors and their associated failure mechanisms. Further, the outcomes of this work provide valuable insights and data models for some of the dominant failure mechanisms present in zinc manganese battery chemistries, which are beneficial to accelerated early-lifetime diagnosis and advancement of Zn batteries development.

25 ENERGY STORAGE↗

Source term analysis of FeCrAl accident tolerant fuel using MELCOR

It has been established that incremental improvements in beyond design basis accident performance can be achieved through accident tolerant fuel (ATF). However, they have the potential to recover margin with respect to conventional fuel and therefore enhance plant economics through uprate or cycle length increase. To realize this potential, it is necessary to quantify the reduction in source term due to use of ATF, and correspondingly how this is affected by increasing the cycle length and/or burnup. This requires development of a risk informed analysis methodology for ATF under high burnup conditions, which is being developed within LWRS. To this end, a MELCOR simulation of FeCrAl ATF in a recovered Large Break LOCA (LBLOCA) scenario has been developed, using a model based on the Zion Pressurized Water Reactor (PWR). The new user defined material capability, along with the inclusion of detailed neutronics- and depletion-derived parameters such as core power distribution, decay heat behavior, and fission product inventories, allows a more detailed simulation of FeCrAl clad material properties and behavior than has previously been possible using MELCOR. These detailed FeCrAl results were compared with a zircaloy clad model to investigate the differences between the two clad types and quantify the benefits of FeCrAl ATF with an 18-month cycle. Next, the fuel cycle with ATF was extended to 24 months, to determine whether any additional safety margin provided by FeCrAl ATF could be leveraged to implement high burnup FeCrAl-clad fuel while retaining the same operating and safety limits as current zircaloy-clad fuel. For the particular scenario analyzed, the delay to fuel failure from using ATF was of the same order as the LOCA recovery time, and hence significant in reducing fission product release, with the 24-month FeCrAl core performing better than the 18-month zircaloy core. It is noted that for other transients, the reduction in release due to using FeCrAl may be less significant. Furthermore, the material model developed here can be used in such further studies in support of determining the overall source term.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

Resilience of Urban Transport Network-of-Networks under Intense Flood Hazards Exacerbated by Targeted Attacks

Natural hazards including floods can trigger catastrophic failures in interdependent urban transport network-of-networks (NoNs). Population growth has enhanced transportation demand while urbanization and climate change have intensified urban floods. However, despite the clear need to develop actionable insights for improving the resilience of critical urban lifelines, the theory and methods remain underdeveloped. Furthermore, as infrastructure systems become more intelligent, security experts point to the growing threat of targeted cyber-physical attacks during natural hazards. Here we develop a hypothesis-driven resilience framework for urban transport NoNs, which we demonstrate on the London Rail Network (LRN). We find that topological attributes designed for maximizing efficiency rather than robustness render the network more vulnerable to compound natural-targeted disruptions including cascading failures. Our results suggest that an organizing principle for post-disruption recovery may be developed with network science principles. Our findings and frameworks can generalize to urban lifelines and more generally to real-world spatial networks.

54 ENVIRONMENTAL SCIENCES↗

Impact Testing and Analysis of Modified Metal Slugs

This report summarizes initial results from a series of gun experiments which were conducted at the DICE facility. The target of these experiments was a modified metal slug composed of a tantalum/tungsten alloy (Ta-10W). The general geometry of the slug was a right circular cylinder with a through-hole cut normal to the cylinder's axis. In all experiments, hardened steel impactors were used, the desired impact velocity was 200 m/s, the slug was preheated to a target temperature of 175° C, photon doppler velocimetry (PDV) was used to measure the projectile velocity before and after impact, and the impact event was recorded with high-speed video. In two of the impacts the slug was oriented perpendicular to the projectile, while in the remaining two it was tilted 8° from normal. Initial high-speed speed video results showed slug failure in the tilted impact case, while the slug survived normal impacts. Recovery fixtures were used to preserve impacted slugs for future postmortem analysis. Discussions are included regarding improvements to potential future experiments involving these slugs.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Impact of coverage on the reliability of a fault tolerant computer

A mathematical reliability model is established for a reconfigurable fault tolerant avionic computer system utilizing state-of-the-art computers. System reliability is studied in light of the coverage probabilities associated with the first and second independent hardware failures. Coverage models are presented as a function of detection, isolation, and recovery probabilities. Upper and lower bonds are established for the coverage probabilities and the method for computing values for the coverage probabilities is investigated. Further, an architectural variation is proposed which is shown to enhance coverage.

Bavuso, S. J.↗