SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

All sources NASA NTRS DOE OSTI

NASA NTRS2016

Approach-Phase Precision Landing with Hazard Relative Navigation: Terrestrial Test Campaign Results of the Morpheus/ALHAT Project

The Morpheus Project began in late 2009 as an ambitious e ort code-named Project M to integrate three ongoing multi-center NASA technology developments: humanoid robotics, liquid oxygen/liquid methane (LOX/LCH4) propulsion and Autonomous Precision Landing and Hazard Avoidance Technology (ALHAT) into a single engineering demonstration mission to be own to the Moon by 2013. The humanoid robot e ort was redirected to a deploy- ment of Robonaut 2 on the International Space Station in February of 2011 while Morpheus continued as a terrestrial eld test project integrating the existing ALHAT Project's tech- nologies into a sub-orbital ight system using the world's rst LOX/LCH4 main propulsion and reaction control system fed from the same blowdown tanks. A series of 33 tethered tests with the Morpheus 1.0 vehicle and Morpheus 1.5 vehicle were conducted from April 2011 - December 2013 before successful, sustained free ights with the primary Vertical Testbed (VTB) navigation con guration began with Free Flight 3 on December 10, 2013. Over the course of the following 12 free ights and 3 tethered ights, components of the ALHAT navigation system were integrated into the Morpheus vehicle, operations, and ight control loop. The ALHAT navigation system was integrated and run concurrently with the VTB navigation system as a reference and fail-safe option in ight (see touchdown position esti- mate comparisons in Fig. 1). Flight testing completed with Free Flight 15 on December 15, 2014 with a completely autonomous Hazard Detection and Avoidance (HDA), integration of surface relative and Hazard Relative Navigation (HRN) measurements into the onboard dual-state inertial estimator Kalman lter software, and landing within 2 meters of the VTB GPS-based navigation solution at the safe landing site target. This paper describes the Mor- pheus joint VTB/ALHAT navigation architecture, the sensors utilized during the terrestrial ight campaign, issues resolved during testing, and the navigation results from the ight tests.

Crain, Timothy P.↗

NASA NTRSDate not supplied

Exploration of the Versatile Electrically Augmented Turbine Engine Gearbox Concept

Integration of electric machines with the shafts of gas turbine engines is implied in various electrified aircraft propulsion concepts. This includes implementation of the Turbine Electrified Energy Management (TEEM) concept, a motivator for the Versatile Electrically Augmented Turbine Engine (VEATE) gearbox. The VEATE gearbox is a mechanical power transmission concept that seeks to interface electric machines with a gas turbine engine in a synergistic manner. It enables a hybrid electro-mechanical approach for managing power in a gas turbine engine. It is hypothesized that the mechanical design of the VEATE gearbox could be leveraged to enhance the versatility of the present electrical hardware. The VEATE gearbox concept is first introduced and applied to an electrified two-spool advanced geared turbofan meant for powering a single-aisle commercial aircraft. A modeling approach for the gearbox is presented and studies are conducted to investigate the potential application to TEEM and power extraction. There is evidence that the VEATE gearbox could help to reduce the size of the TEEM power system, provide flexibility in power extraction implementation, and exhibit fail-safe design attributes.

Electrified Aircraft Propulsion↗

NASA NTRSDate not supplied

Exploration of the Versatile Electrically Augmented Turbine Engine Gearbox Concept

Versatile Electrically Augmented Turbine Engine Ge↗

NASA NTRSDate not supplied

Two is One, One is None: A Discussion on Redundancy

Redundancy is the duplication of critical components or functions of a system with the intention of increasing reliability of the system, usually in the form of a backup or fail-safe. But the topic of redundancy can be a contentious topic; what is too little, too much, and just right may not be readily apparent. This presentation will be a discussion on redundancy situations from different industries as well as the evolving nature of the “best” amount of redundancy.

Redundancy↗

NASA NTRSDate not supplied

NASA Efforts to Explore Additively Manufactured Thermal Protection Systems

Development of the thermal protection system (TPS) needed to protect external and internal surfaces during launch, ascent, cruise, and reentry, is a very specialized field with expertise developed over seven decades and has enabled successful robotic as well as human exploration. Well known examples are: 1) the ablative heatshield that protected Apollo Astronauts during reentry in 1960’s, 2) reusable TPS used on the Space Shuttle Orbiter, which is now sought after by commercial space industry, and 3) hot structures, such as Carbon-Carbon and other high temperature materials needed to operate control surfaces and sharp leading edges during hypervelocity flight. TPS function demands fail-safe design to ensure mission success. One TPS does not fit all, and each application requires a unique material along with manufacturing and integration approach. TPS mass is a key metric. A robust but inefficient TPS reduces payload mass. Mission- and domain-unique TPS development and flight certification efforts have been expensive with long lead times. As a result, there are limited TPS choices with high cost. For future commercial efforts to be successful, the ability to rapidly develop TPS, based on specific needs and at a lower cost, without compromising either mass efficiency or functionality is necessary. NASA is looking into this. Additive manufacturing (AM) techniques have shown their utility in making complex parts and, through automation, the potential to reduce cost and schedule in some applications. The promise of additive manufacturing to TPS, while exciting, is unexplored. In the past several years, NASA has made exploratory investments in internal development as well as in small business and universities through SBIR and STTR programs. In addition, NASA is bringing together the TPS as well as Additive Manufacturing communities to explore approaches to prioritize focus areas for broad benefits. The very first “Additively Manufactured Thermal Protection System Workshop,” to be held at NASA Johnson Space Center in Houston at the end of March of this year, is the culmination of a year-long effort to engage the research, development, and user communities involved in both TPS as well as additive manufacturing. The workshop participants include representatives from large and small commercial space industry, DoD, Federally Funded Research and Development Centers, University Researchers and NASA personnel. The proposed talk will highlight future TPS needs of both emerging commercial and Government interests, NASA’s development efforts in additively manufactured TPS, and the findings and recommendations from the first AM TPS Workshop.

Ethiraj Venkatapathy↗

NASA NTRSDate not supplied

Recent Advances in the U.S. in Ablative TPS for In-situ Exploration of Giant Planets

The Decadal Survey report released [1] prioritizes Uranus as the highest priority Flagship class mission to be explored with an orbiter and a probe and it also recommended Saturn Probe under New Frontiers mission class. Thermal protection system (TPS) is essential for Uranus and Saturn probe missions. The two cardinal requirements are that it must be fail-safe and yet be mass efficient. The Decadal Survey report also pointed out the readiness of heatshield for extreme entry environment technology (HEEET) at TRL 6 for probe missions at Gas Giants. HEEET relies on 3-D weaving and is shown to be a robust and mass efficient TPS through ground testing and analysis. HEEET was matured to TRL 6 in 2019. HEEET was reported at the Ice Giant Workshop in 2019 at Marseille. Since 2019, significant advances have been made primarily because of Mars Sample Return (MSR) mission. MSR baselined 3-D Woven TPS as its heatshield for the earth entry system. MSR earth entry system (EES) requirements and the resulting heatshield/TPS requirements are most stringent of all entry missions. This is a result of backward contamination protection which classifies MSR as a “restricted class 5” mission to safeguard the accidental release of potentially hazardous Mars Sample into Earth’s atmosphere. Complex requirements for the heatshield start with micro-meteor impact tolerance followed by the requirement for steep entry to minimize the size of the impact footprint which results in extreme heating. The heatshield is part of the impact attenuation system. The EES architecture does not use a parachute and is designed to tolerate impact loads. Hence heatshield TPS selection and design becomes one of the key challenges. After completion of the HEEET technology maturation in 2019, IRAD efforts focused on assessing the 3-D Woven family of TPS to MSR EES. After nearly two years of evaluation of alternate TPS such as carbon phenolic, C-C hot structure, PICA, and 3-D woven family of TPS, a single layer 3-D woven TPS derived from the dual-layer HEEET was down selected and is currently the baseline. A new loom capable of weaving the single-layer 3-D woven preform at 80” wide has been designed, assembled and is currently on the verge of weaving the MSR EES TPS. During the HEEET maturation and the follow-on development, the single-layer TPS has been tested at extreme heating conditions. As a result, single layer TPS was recommended and evaluated during the Planetary Mission Concept Studies funded by NASA in preparation for the Decadal committee. In addition, in anticipation of Saturn mission proposals, single layer was evaluated as well. Aerocapture can reduce the trip time, also allow bigger payload fraction and in addition, it allows for the possibility of probe delivery once the spacecraft is in orbit. This can lead to obtaining both in-situ data as well as data from orbit simultaneously. Since Aerocapture depletes energy/velocity, probe delivery from orbit reduces the demand on TPS. Aerocapture was mentioned in the Decadal Study report as ready for implementation, but due to perceived risk it is not adopted by the mission designers. Establishing TPS readiness for aerocapture missions will be addressed. Going one step beyond aerocapture is aerogravity assist if fast return is the goal. Recent studies [4] looked at aerogravity assist and the TPS readiness. This talk will highlight both aerocapture and aerogravity assist from a TPS perspective. The main objective of this proposed talk is to present a comprehensive picture of the SOA TPS technology including recent developments. The talk will highlight advances in manufacturing, results from the Decadal White Papers, PMCS and other studies, and aerocapture and aerogravity assist that could play a role in the near or far term in-situ exploration.

E. Venkatapathy↗

NASA NTRS2023

Technological and Medical Human Health and Well-Being Options in Deep Space

Zeroth order, maintenance of human health requires supportive protection from the hazards of space, including supplying breathable air, comfortable temperatures, a supportive diet/nutrition, radiation protection, and sufficient gravity to avoid the combinatorial impacts of such effecting human operability and health. Spacecraft operability must be “fail-safe” to ensure these basic human life support conditions are maintained throughout the mission and the mission(s) must be affordable. There are known effects and unknowns effects regarding aspects of human health for Mars duration missions. Mars has the order of a third g. We have no data regarding the health impacts of this on humans or the combinatorial effects associated with 45% GCR on the Martian surface over time. There is a suspicion that if humans survive such conditions over long times they will evolve to living at reduced g and become “Martians”. Cascading failures and subcritical degradations in systems of systems causing an overall unrecoverable failure are a potential issue. There are two exremely complex systems associated with humans-Mars missions: the technical, engineering, and architectural system of systems that enable the mission and the humans. Both need to be mutually configured and operated to mitigate the overall risks and hazards of the mission. Regarding the humans that mitigation includes both the mission risks and supporting-to-increasing the human immune and other concomitant physiological systems. This report will summarize the risks, current mitigation approaches, and putative approaches including lifestyle, nutrition, and “wellness” approaches to possibly improve the human capacity to withstand the large number of combinatorial human physiological rigors of the missions. The wellness observations also apply to and are derived from Earth terrestrial applicable research.

Dennis M Bushnell↗

DOE OSTI2023

A National Secure-by-Design Strategy

The US National Cybersecurity Strategy published March 2, 2023 uses plain language to communicate that the US is calling for a major change in how we prioritize the security of software systems used in critical infrastructure. It acknowledges that our current approach, which is essentially, “let the buyer beware,” leaves entities who are least able to assess or defend vulnerable software responsible for the impacts of designed-in weaknesses while the makers of the technology bear no liability. The strategy recommends a security-by-design approach, recommending that software vendors be held liable to uphold a “duty of care” to consumers and for systems to be designed to “fail safely and recover quickly” . For energy infrastructure, the strategy calls out the need to implement the National Cyber-Informed Engineering Strategy to achieve higher confidence security for energy infrastructures. The Idaho National Laboratory, a pioneer in cyber-informed engineering concepts, is at the forefront of organizations educating others in industry, academia, and government on how to apply these concepts to real-world challenges. In this brief, we'll outline some of the basic principles of security-by-design and offer examples of how, in a water sector context, they're being put into successful practice.

42 ENGINEERING↗

DOE OSTI2020

Development of a Reference Design for a Cyber-Physical System

The purpose of this thesis is to develop a reference design to assist in the selection of security practices in power electronics design. A prototype will be developed from this reference design for evaluation. This evaluation will include a brief cost/benefit analysis to gauge the efficacy of implementing each layer of security throughout the power electronics design process. This thesis will also describe the obstacles and effectiveness of integrating a Trusted Platform Module (TPM) into a cyber-hardened grid-connected device. The TPM device is a secured crypto processor that assists in generating, storing, and restricting the use of cryptographic keys. The emphasis of this research is to establish integrity, authenticity, and confidentiality within a system by providing a baseline of security concerns for segments of the system. This research considers communication, control, and hardware level securities. The scope of this thesis will review the necessary security methods as well as consider the effects these methods have on the embedded system, to assess the desired security to responsiveness trade off. Applying this approach to a design process will alleviate various unknowns of appending security to a power electronics design. This thesis describes the specific vulnerabilities introduced within this grid-edge environment, and how the liabilities within the system can be mitigated. Initially, common security techniques will be considered to establish a guideline to benchmark performance and resource costs of the system. The foundation will be a non-hardened power electronic system platform with industry standard communication protocols. Several security techniques and attack vectors will then be evaluated to contribute to the base level platform. Other fail-safe features take place to gauge progress of the selected approach, non-inclusive to the TPM. Collectively, this investigation will determine a valid experiment by appraising and categorizing resource allocation, performance overhead, and monetary cost analysis results into a reference design. The prototype will then demonstrate methods to relieve common threats that are purposefully implemented into the design.

Blair, Nicholas Paul↗

DOE OSTI2025

Power Electronics and Electric Machines for Advanced Aircraft

Power electronics and electric machines are critical components of efficient, high-performance aircraft - from fixed-wing turbine to electric vertical takeoff and landing aircraft and beyond. Improvements to these components create enormous energy efficiencies, enable cost savings, and ensure fail-safe operations. National Renewable Energy Laboratory researchers are developing innovative power electronics, electric motors, integrated electric traction drives, and thermal management systems to build highly efficient, lightweight, ultrareliable powertrains for aircraft.

42 ENGINEERING↗

DOE OSTI2025

Cyber-Informed Engineering (CIE) – Engineered Controls Database and Use

Cyber-Informed Engineering (CIE) addresses the reality that cyber-attacks on engineered systems can have consequences far beyond data loss or disruption of digital networks. When control systems are compromised, safety, reliability, and performance of the physical process itself may be threatened. This database is meant to establish clear examples and guidance for defining and applying engineered controls in CIE. It explains what engineered controls are, how they differ from information security measures, and how they are integrated into system design. The goal is to ensure that resilience is engineered into systems from the outset. Unlike cybersecurity protections that defend the digital layer, engineered controls act directly at the physical and algorithmic levels to guarantee that unacceptable consequences are prevented or limited. CIE keeps the consequences of a cyber attack from impacting the safety, reliability, and performance of engineered systems.

42 - ENGINEERING↗

NASA NTRS1975

Shuttle avionics system

The avionics system of the Space Shuttle is designed in a fail operational/fail safe architecture. The guidance, navigation and control system is implemented, through the onboard Orbiter digital computers. Guidance, navigation and control sensors are triplex, while the flight control effectors are mechanized either in load sharing or quad structure. Two sets of basic flight instruments and controls are provided along with electronic interfaces to allow for multiple selection of input destination and display source selection. Communications, tracking and instrumentation subsystems are mechanized as a dual hardware design for key operational elements. The data processing system allows for quad, triplex, dual or single computer operation. The power distribution subsystem provides a triple bus system with appropriate tie elements. A functional description is given of the computer system, the data bus, the mass memory unit, the multiplexer/demultiplexer and the CRT display system.

Gardiner, R. A.↗

NASA NTRS1985

Evolution of shuttle avionics redundancy management/fault tolerance

The challenge of providing redundancy management (RM) and fault tolerance to meet the Shuttle Program requirements of fail operational/fail safe for the avionics systems was complicated by the critical program constraints of weight, cost, and schedule. The basic and sometimes false effectivity of less than pure RM designs is addressed. Evolution of the multiple input selection filter (the heart of the RM function) is discussed with emphasis on the subtle interactions of the flight control system that were found to be potentially catastrophic. Several other general RM development problems are discussed, with particular emphasis on the inertial measurement unit RM, indicative of the complexity of managing that three string system and its critical interfaces with the guidance and control systems.

Boykin, J. C.↗

NASA NTRS1985

Man-machine interface and control of the shuttle digital flight system

The space shuttle main engine (SSME) presented new requirements in the design of controls for large pump fed liquid rocket engine systems. These requirements were the need for built in full mission support capability, and complexity and flexibility of function not previously needed in this type of application. An engine mounted programmable digital control system was developed to meet these requirements. The engine system and controller and their function are described. Design challenges encountered during the course of development included accommodation for a very severe engine environment, the implementation of redundancy and redundancy management to provide fail operational/fail safe capability, removal of heat from the package, and significant constraints on computer memory size and processing time. The flexibility offered by programmable control reshaped the approach to engine design and development and set the pattern for future controls development in these types of applications.

Burghduff, R. D.↗

NASA NTRS1985

Main propulsion system design recommendations for an advanced Orbit Transfer Vehicle

Various main propulsion system configurations of an advanced OTV are evaluated with respect to the probability of nonindependent failures, i.e., engine failures that disable the entire main propulsion system. Analysis of the life-cycle cost (LCC) indicates that LCC is sensitive to the main propulsion system reliability, vehicle dry weight, and propellant cost; it is relatively insensitive to the number of missions/overhaul, failures per mission, and EVA and IVA cost. In conclusion, two or three engines are recommended in view of their highest reliability, minimum life-cycle cost, and fail operational/fail safe capability.

Redd, L.↗

NASA NTRS1985

Design optimization for a space based, reusable orbit transfer vehicle

Future NASA and DOD missions will benefit from high performance, reusable orbit transfer vehicles. With the advent of a space station, advanced engine technology, and various new vehicle concepts, reusable orbit transfer vehicles that provide significant economic benefits and mission capability improvements will be realized. Engine and vehicle design criteria previously have lacked definition with regard to issues such as space basing and servicing, man-rating and reliability, performance, mission flexibility, and life cycle cost for a reusable vehicle. The design study described here has resulted in the definition of a reusable orbit transfer vehicle concept and subsequent recommendations for the design criteria of an advanced LO2/LH2 engine. These design criteria include number of engines per vehicle, nozzle design, etc. The major characteristics of the vehicle preliminary design include low lift to drag aerocapture capability, a main propulsion system failure criteria of fail operational/fail safe, and either two main engines with a high performance attitude control system for back-up or three main engines with which to meet this failure criteria. In addition, a maintenance approach has been established for the advanced vehicle concept.

Redd, L.↗

NASA NTRS1985

Advanced orbit transfer vehicle propulsion system study

A reuseable orbit transfer vehicle concept was defined and subsequent recommendations for the design criteria of an advanced LO2/LH2 engine were presented. The major characteristics of the vehicle preliminary design include a low lift to drag aerocapture capability, main propulsion system failure criteria of fail operational/fail safe, and either two main engines with an attitude control system for backup or three main engines to meet the failure criteria. A maintenance and servicing approach was also established for the advanced vehicle and engine concepts. Design tradeoff study conclusions were based on the consideration of reliability, performance, life cycle costs, and mission flexibility.

Cathcart, J. A.↗

NASA NTRS2011

The Legacy of Space Shuttle Flight Software

The initial goals of the Space Shuttle Program required that the avionics and software systems blaze new trails in advancing avionics system technology. Many of the requirements placed on avionics and software were accomplished for the first time on this program. Examples include comprehensive digital fly-by-wire technology, use of a digital databus for flight critical functions, fail operational/fail safe requirements, complex automated redundancy management, and the use of a high-order software language for flight software development. In order to meet the operational and safety goals of the program, the Space Shuttle software had to be extremely high quality, reliable, robust, reconfigurable and maintainable. To achieve this, the software development team evolved a software process focused on continuous process improvement and defect elimination that consistently produced highly predictable and top quality results, providing software managers the confidence needed to sign each Certificate of Flight Readiness (COFR). This process, which has been appraised at Capability Maturity Model (CMM)/Capability Maturity Model Integration (CMMI) Level 5, has resulted in one of the lowest software defect rates in the industry. This paper will present an overview of the evolution of the Primary Avionics Software System (PASS) project and processes over thirty years, an argument for strong statistical control of software processes with examples, an overview of the success story for identifying and driving out errors before flight, a case study of the few significant software issues and how they were either identified before flight or slipped through the process onto a flight vehicle, and identification of the valuable lessons learned over the life of the project.

Hickey, Christopher J.↗