Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Accident Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

Test and Analysis Correlation of High Speed Impacts of Ice Cylinders

During the space shuttle return-to-flight preparations following the Columbia accident, finite element models were needed that could predict the threshold of critical damage to the orbiter s wing leading edge from ice debris impacts. Hence, an experimental program was initiated to provide crushing data from impacted ice for use in dynamic finite element material models. A high-speed drop tower was configured to capture force time-histories of ice cylinders for impacts up to approximately 100 ft/s. At low velocity, the force-time history depended heavily on the internal crystalline structure of the ice. However, for velocities of 100 ft/s and above, the ice fractured on impact, behaved more like a fluid, and the subsequent force-time history curves were much less dependent on the internal crystalline structure.

Fasanella, Edwin L.↗

Safety status of space radioisotope and reactor power sources

The current overall safety criterion for both radioisotope and reactor power sources is containment or immobilization in the case of a reentry accident. In addition, reactors are designed to remain subcritical under conditions of land impact or water immersion. A very extensive safety test and analysis program was completed on the radioisotope thermoelectric generators (RTGs) in use on the Galileo spacecraft and planned for use on the Ulysses spacecraft. The results of this work show that the RTGs will pose little or no risk for any credible accident. The SP-100 space nuclear reactor program has begun addressing its safety criteria, and the design is planned to be such as to ensure meeting the various safety criteria. Preliminary mission risk analyses on SP-100 show the expected value population dose from postulated accidents on the reference mission to be very small. It is concluded that the current US nuclear power sources are the safest flown.

Bennett, Gary L.↗

An Approach for Defining IASMS Services, Functions, and Capabilities

Assuring safety in the NAS with the inclusion of new entrants, such as Advanced Air Mobility (AAM), will require overcoming unique safety challenges that result from combining innovative technologies with novel airspace concepts for moving people and cargo using autonomous vehicles. The focus of the In-time Aviation Safety Management System (IASMS) is to overcome AAM’s safety assurance challenges. The IASMS Concept of Operations (ConOps) describes an interconnected set of services, functions, and capabilities (SFCs) designed to manage operational risks, identify unknown risks, and inform system designs. This paper describes an approach for defining SFCs based on technology trends in research, assessment of known and unknown risks in voluntary safety reports, and causal and contributing factors in aviation accidents and incidents. This approach would identify potential SFCs that further expand the Monitor, Assess, and Mitigate (M-A-M) functionality that represents the enabling framework of the IASMS. Safety implications that will result from integration of AAM in the transformation of the National Airspace System (NAS) were addressed in National Academies committees reports on AAM and IASMS. Development of a ConOps for IASMS was a top recommendation and can be represented as a reframing of safety assurance that builds on real-time alerting such as the Traffic Alert and Collision Avoidance System, and adds the more encompassing in-time temporal parameter in recognition of the different timelines for collecting and assessing safety data for risk mitigations. For example, mining for safety trends from data sources such as the Aviation Safety Information Analysis and Sharing system occurs over a longer time period. Research on AAM operations poses that SFCs can be designed to monitor the safety margin appropriate for AAM including with regards to the distance between current flight parameters and nominal ideal conditions. These in-time comparisons will become more complex as the density of operations increases at least in certain areas and can include planned and actual 4D trajectory, and in-time comparisons having implications on conflict modeling and prediction including expected and actual departure time, fix/waypoint crossing times, and arrival time. These comparisons would be integrated as part of SFCs that redefine and inform new safety margin. An increased safety margin improves management of operational risks while reducing the potential for anomalies. An increased safety margin also has implications for operator confidence in the certainty of its operations and trust in automation. Technology trends in research could be used to refine existing SFCs and define needs for additional SFCs that provide safety improvements to the design and operation of vehicles, airspace design, and operator performance requirements. NASA is developing innovative approaches to safeguard against major accidents and incidents that have occurred in the NAS and those anticipated with the inclusion of envisioned AAM operations. The innovations use operational performance data to monitor, detect, and predict flight variations exceeding safe nominal patterns, such as would be caused by navigational error, severe weather complications, or hijacking of UAS controls. These innovative approaches have high potential to prevent accidents and incidents in the new AAM era. It is anticipated that elements of the innovations will evolve into SFCs for the IASMS. Voluntary safety reports can be monitored to identify anomalies related to design or operational performance risks. Reports could be periodically monitored and assessed for specific topics. Reports might serve as weak signals or precursors indicative of emergent risk such as when combined with other safety information. The architecture could include SFCs that are based on voluntary safety reports recognizing the periodic temporal nature of data analysis. As previously mentioned, aviation accidents with their causal and contributing precursors can inform the need for SFCs in the IASMS. Accidents and incidents at San Francisco International Airport such as Asiana 214 and Air Canada 759 illustrate how combinations of different factors lead to increased risk. These types of precursors and different factors have implications on the types of SFCs that could be needed to monitor and manage different sources and types of design and operational risk. Continuing to assure the safety of AAM as designs and operations gain in complexity can be accompanied by defining SFCs that also increase in complexity. These SFCs can leverage information from findings and recommendations synthesized across on-going research, voluntary safety reports, and accident and incident reports. These SFCs can serve to refine accuracy of algorithms and resolve limitations with current practices. The IASMS architecture represents the framework for the SFCs and their critical role in safety assurance.

In-Time Aviation Safety Management System↗

Design, analysis, and control of large transport aircraft utilizing engine thrust as a backup system for the primary flight controls

A review of accidents that involved the loss of hydraulic flight control systems serves as an introduction to this project. In each of the accidents--involving transport aircraft such as the DC-10, the C-5A, the L-1011, and the Boeing 747--the flight crew attempted to control the aircraft by means of thrust control. Although these incidents had tragic endings, in the absence of control power due to primary control system failure, control power generated by selective application of engine thrust has proven to be a viable alternative. NASA Dryden has demonstrated the feasibility of controlling an aircraft during level flight, approach, and landing conditions using an augmented throttles-only control system. This system has been successfully flown in the flight test simulator for the B-720 passenger transport and the F-15 air superiority fighter and in actual flight tests for the F-15 aircraft. The Douglas Aircraft Company is developing a similar system for the MD-11 aircraft. The project's ultimate goal is to provide data for the development of thrust control systems for mega-transports (600+ passengers).

Gerren, Donna S.↗

Navier-Stokes Analysis of the Flowfield Characteristics of an Ice Contaminated Aircraft Wing

An analytical study was performed as part of the NASA Lewis support of a National Transportation Safety Board (NTSB) aircraft accident investigation. The study was focused on the performance degradation associated with ice contamination on the wing of a commercial turbo-prop-powered aircraft. Based upon the results of an earlier numerical study conducted by the authors, a prominent ridged-ice formation on the subject aircraft wing was selected for detailed flow analysis using 2-dimensional (2-D), as well as, 3-dimensional (3-D) Navier-Stokes computations. This configuration was selected because it caused the largest lift decrease and drag increase among all the ice shapes investigated in the earlier study. A grid sensitivity test was performed to find out the influence of grid spacing on the lift, drag, and associated angle-of-attack for the maximum lift (C(sub lmax)). This study showed that grid resolution is important and a sensitivity analysis is an essential element of the process in order to assure that the final solution is independent of the grid. The 2-D results suggested that a severe stability and control difficulty could have occurred at a slightly higher angle-of-attack (AOA) than the one recorded by the Flight Data Recorder (FDR). This stability and control problem was thought to have resulted from a decreased differential lift on the wings with respect to the normal loading for the configuration. The analysis also indicated that this stability and control problem could have occurred whether or not natural ice shedding took place. Numerical results using an assumed 3-D ice shape showed an increase of the angle at which this phenomena occurred of about 4 degrees. As it occurred with the 2-D case, the trailing edge separation was observed but started only when the AOA was very close to the angle at which the maximum lift occurred.

Chung, J.↗

Another Approach to Enhance Airline Safety: Using Management Safety Tools

The ultimate goal of conducting an accident investigation is to prevent similar accidents from happening again and to make operations safer system-wide. Based on the findings extracted from the investigation, the "lesson learned" becomes a genuine part of the safety database making risk management available to safety analysts. The airline industry is no exception. In the US, the FAA has advocated the usage of the System Safety concept in enhancing safety since 2000. Yet, in today s usage of System Safety, the airline industry mainly focuses on risk management, which is a reactive process of the System Safety discipline. In order to extend the merit of System Safety and to prevent accidents beforehand, a specific System Safety tool needs to be applied; so a model of hazard prediction can be formed. To do so, the authors initiated this study by reviewing 189 final accident reports from the National Transportation Safety Board (NTSB) covering FAR Part 121 scheduled operations. The discovered accident causes (direct hazards) were categorized into 10 groups Flight Operations, Ground Crew, Turbulence, Maintenance, Foreign Object Damage (FOD), Flight Attendant, Air Traffic Control, Manufacturer, Passenger, and Federal Aviation Administration. These direct hazards were associated with 36 root factors prepared for an error-elimination model using Fault Tree Analysis (FTA), a leading tool for System Safety experts. An FTA block-diagram model was created, followed by a probability simulation of accidents. Five case studies and reports were provided in order to fully demonstrate the usefulness of System Safety tools in promoting airline safety.

Lu, Chien-tsug↗

U.S. Space Shuttle Solid Rocket Booster - Return to flight

The Space Shuttle Solid Rocket Booster (SRB) redesign program instituted in the wake of the Challenger accident encompassed a design requirements review, a failure modes effect analysis/critical items list determination, a hazards analysis, an operational maintenance and requirements specification study, the definition of operational maintenance instructions and launch commit criteria, and design certification and flight readiness reviews. Attention is presently given to the SRB's thrust vector control, separation, and recovery functions, as well as its electrical and instrumentation systems and its case assembly and hardware interfaces.

Coates, K. D.↗

Techniques and Tools of NASA's Space Shuttle Columbia Accident Investigation

The Space Shuttle Columbia accident investigation was a fusion of many disciplines into a single effort. From the recovery and reconstruction of the debris, Figure 1, to the analysis, both destructive and nondestructive, of chemical and metallurgical samples, Figure 2, a multitude of analytical techniques and tools were employed. Destructive and non-destructive testing were utilized in tandem to determine if a breach in the left wing of the Orbiter had occurred, and if so, the path of the resultant high temperature plasma flow. Nondestructive analysis included topometric scanning, laser mapping, and real-time radiography. These techniques were useful in constructing a three dimensional virtual representation of the reconstruction project, specifically the left wing leading edge reinforced carbon/carbon heat protectant panels. Similarly, they were beneficial in determining where sampling should be performed on the debris. Analytic testing included such techniques as Energy Dispersive Electron Microprobe Analysis (EMPA), Electron Spectroscopy Chemical Analysis (ESCA), and X-Ray dot mapping; these techniques related the characteristics of intermetallics deposited on the leading edge of the left wing adjacent to the location of a suspected plasma breach during reentry. The methods and results of the various analyses, along with their implications into the accident, are discussed, along with the findings and recommendations of the Columbia Accident Investigation Board. Likewise, NASA's Return To Flight efforts are highlighted.

McDanels, Steve J.↗

Structural Analysis of the Right Rear Lug of American Airlines Flight 587

A detailed finite element analysis of the right rear lug of the American Airlines Flight 587 - Airbus A300-600R was performed as part of the National Transportation Safety Board s failure investigation of the accident that occurred on November 12, 2001. The loads experienced by the right rear lug are evaluated using global models of the vertical tail, local models near the right rear lug, and a global-local analysis procedure. The right rear lug was analyzed using two modeling approaches. In the first approach, solid-shell type modeling is used, and in the second approach, layered-shell type modeling is used. The solid-shell and the layered-shell modeling approaches were used in progressive failure analyses (PFA) to determine the load, mode, and location of failure in the right rear lug under loading representative of an Airbus certification test conducted in 1985 (the 1985-certification test). Both analyses were in excellent agreement with each other on the predicted failure loads, failure mode, and location of failure. The solid-shell type modeling was then used to analyze both a subcomponent test conducted by Airbus in 2003 (the 2003-subcomponent test) and the accident condition. Excellent agreement was observed between the analyses and the observed failures in both cases. The moment, Mx (moment about the fuselage longitudinal axis), has significant effect on the failure load of the lugs. Higher absolute values of Mx give lower failure loads. The predicted load, mode, and location of the failure of the 1985- certification test, 2003-subcomponent test, and the accident condition are in very good agreement. This agreement suggests that the 1985-certification and 2003-subcomponent tests represent the accident condition accurately. The failure mode of the right rear lug for the 1985-certification test, 2003-subcomponent test, and the accident load case is identified as a cleavage-type failure. For the accident case, the predicted failure load for the right rear lug from the PFA is greater than 1.98 times the limit load of the lugs.

Raju, Ivatury S.↗

Fracture mapping and strip mine inventory in the Midwest by using ERTS-1 imagery

Analysis of the ERTS-1 imagery and high-altitude infrared photography indicates that useful fracture data can be obtained in Indiana and Illinois despite a glacial till cover. ERTS MSS bands 5 and 7 have proven most useful for fracture mapping in coal-bearing rocks in this region. Preliminary results suggest a reasonable correlation between image-detected fractures and mine roof-fall accidents. Information related to surface mined land, such as disturbed area, water bodies, and kind of reclamation, has been derived from the analysis of ERTS imagery.

Wier, C. W.↗

Analysis of Adverse Events in Identifying GPS Human Factors Issues

The purpose of this study was to analyze GPS related adverse events such as accidents and incidents (A/I), Aviation Safety Reporting System (ASRS) reports and Pilots Deviations (PDs) to create a framework for developing a human factors risk awareness program. Although the occurrence of directly related GPS accidents is small the frequency of PDs and ASRS reports indicated there is a growing problem with situational awareness in terminal airspace related to different types of GPs operational issues. This paper addresses the findings of the preliminary research and a brief discussion of some of the literature on related GPS and automation issues.

Adams, Catherine A.↗

Software Safety Analysis of a Flight Guidance System

This document summarizes the safety analysis performed on a Flight Guidance System (FGS) requirements model. In particular, the safety properties desired of the FGS model are identified and the presence of the safety properties in the model is formally verified. Chapter 1 provides an introduction to the entire project, while Chapter 2 gives a brief overview of the problem domain, the nature of accidents, model based development, and the four-variable model. Chapter 3 outlines the approach. Chapter 4 presents the results of the traditional safety analysis techniques and illustrates how the hazardous conditions associated with the system trace into specific safety properties. Chapter 5 presents the results of the formal methods analysis technique model checking that was used to verify the presence of the safety properties in the requirements model. Finally, Chapter 6 summarizes the main conclusions of the study, first and foremost that model checking is a very effective verification technique to use on discrete models with reasonable state spaces. Additional supporting details are provided in the appendices.

Butler, Ricky W.↗

Portable Wireless LAN Device and Two-Way Radio Threat Assessment for Aircraft VHF Communication Radio Band

This document summarizes the safety analysis performed on a Flight Guidance System (FGS) requirements model. In particular, the safety properties desired of the FGS model are identified and the presence of the safety properties in the model is formally verified. Chapter 1 provides an introduction to the entire project, while Chapter 2 gives a brief overview of the problem domain, the nature of accidents, model based development, and the four-variable model. Chapter 3 outlines the approach. Chapter 4 presents the results of the traditional safety analysis techniques and illustrates how the hazardous conditions associated with the system trace into specific safety properties. Chapter 5 presents the results of the formal methods analysis technique model checking that was used to verify the presence of the safety properties in the requirements model. Finally, Chapter 6 summarizes the main conclusions of the study, first and foremost that model checking is a very effective verification technique to use on discrete models with reasonable state spaces. Additional supporting details are provided in the appendices.

Nguyen, Truong X.↗

Practices in Adequate Structural Design

Structural design and verification of space vehicles and space systems is a very tricky and awe inspiring business, particularly for manned missions. Failures in the missions with loss of life is devastating personally and nationally. The scope of the problem is driven by high performance requirements which push state-of-the-art technologies, creating high sensitivites to small variations and uncertainties. Insurance of safe, reliable flight dictates the use of sound principles, procedures, analysis, and testing. Many of those principles which were refocused by the Space Shuttle Challenger (51-L) accident on January 26, 1986, and the activities conducted to insure safe shuttle reflights are discussed. The emphasis will be focused on engineering, while recognizing that project and project management are also key to success.

Ryan, Robert S.↗

The Evolution of Stellar Dynamos; Survey for Low Mass Members of NGC2232; An X-Ray Survey of the Open Cluster CR140; Towards a Better Understanding of the Rotation-Activity Relation for Solar-Type Members of the Pleiades

This grant was originally awarded to Dr. Charles Prosser, who died tragically in a car accident in Tucson in 1998. We had hoped to finish the work Charles had started, which involved analysis of ROSAT data for three programs (observations of the clusters NGC2232, Crl4O and the Pleiades) and also analysis of optical data for each cluster in order to allow interpretation of the ROSAT observations. The Pleiades portion of the program was completed during the past year, and a paper published. We have obtained optical imaging of the other two clusters, and those data are being analyzed. Dr. Brian Patten intends to complete analysis of the ROSAT observations and to combine those data with the optical photometry, but progress on those efforts has been slow due to the press of other work (Dr. Patten is responsible for the pipeline processing of data from SWAS). We intend to publish those results as soon as we can, but it will now be completed without further support from this grant.

Stauffer, John R.↗

Stochastic Models of Human Errors

Humans play an important role in the overall reliability of engineering systems. More often accidents and systems failure are traced to human errors. Therefore, in order to have meaningful system risk analysis, the reliability of the human element must be taken into consideration. Describing the human error process by mathematical models is a key to analyzing contributing factors. Therefore, the objective of this research effort is to establish stochastic models substantiated by sound theoretic foundation to address the occurrence of human errors in the processing of the space shuttle.

Elshamy, Maged↗

Resilient Space Habitat Design Using Safety Controls

Space habitats will involve a complex and tightly coupled combination of hardware, software, and humans, while operating in challenging environments that pose many risks, both known and unknown. It will not be possible to design habitats that are immune to failure, nor will it be possible to foresee all possible failures. Rather than aiming for designs where ―failure is not an option,‖ habitats must be resilient to disruptions. We propose an approach to resilient design for space habitats based on the concept of safety controls from system safety engineering. We model disruptions using a state-and-trigger approach, where the space habitat is in one of three distinct states at each time instance: nominal, hazardous, or accident. We use safety controls as ways of preventing a system from entering or remaining in a hazardous or accident state. We develop a safety control option space for the habitat, from which designers can select the set of safety controls that best meet resilience, performance, and other system goals. The safety control option space is likely to be large, accordingly, we design a database that links safety controls to the applicable states and triggers. We demonstrate our approach on the early design stage of a Martian space habitat.

Safety↗

Analysis of Complexity Evolution Management and Human Performance Issues in Commercial Aircraft Automation Systems

Autoflight systems in the current generation of aircraft have been implicated in several recent incidents and accidents. A contributory aspect to these incidents may be the manner in which aircraft transition between differing behaviours or 'modes.' The current state of aircraft automation was investigated and the incremental development of the autoflight system was tracked through a set of aircraft to gain insight into how these systems developed. This process appears to have resulted in a system without a consistent global representation. In order to evaluate and examine autoflight systems, a 'Hybrid Automation Representation' (HAR) was developed. This representation was used to examine several specific problems known to exist in aircraft systems. Cyclomatic complexity is an analysis tool from computer science which counts the number of linearly independent paths through a program graph. This approach was extended to examine autoflight mode transitions modelled with the HAR. A survey was conducted of pilots to identify those autoflight mode transitions which airline pilots find difficult. The transitions identified in this survey were analyzed using cyclomatic complexity to gain insight into the apparent complexity of the autoflight system from the perspective of the pilot. Mode transitions which had been identified as complex by pilots were found to have a high cyclomatic complexity. Further examination was made into a set of specific problems identified in aircraft: the lack of a consistent representation of automation, concern regarding appropriate feedback from the automation, and the implications of physical limitations on the autoflight systems. Mode transitions involved in changing to and leveling at a new altitude were identified across multiple aircraft by numerous pilots. Where possible, evaluation and verification of the behaviour of these autoflight mode transitions was investigated via aircraft-specific high fidelity simulators. Three solution approaches to concerns regarding autoflight systems, and mode transitions in particular, are presented in this thesis. The first is to use training to modify pilot behaviours, or procedures to work around known problems. The second approach is to mitigate problems by enhancing feedback. The third approach is to modify the process by which automation is designed. The Operator Directed Process forces the consideration and creation of an automation model early in the design process for use as the basis of the software specification and training.

Vakil, Sanjay S.↗