SEARCH · Engineering Papers

Results for “logical reasoning”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

216 records · Page 12

All sources NASA NTRS DOE OSTI

NASA NTRS2004

A Holding Function for Conflict Probe Appiications

Conflict Alerts for aircraft in holding patterns are often missed or in error due to fact that holding trajectories are not modeled in Conflict Alert or Conflict Probe logic. In addition, a controller in one sector may not know when aircraft are holding in a neighboring sector. These factors can lead to an increased potential for loss of separation while aircraft are flying in holding patterns. A holding function for conflict probe applications has been developed and tested with air traffic data from Fort Worth Center. The holding function automatically determines when an aircraft enters a holding pattern, builds a holding region around the pattern and then probes the region for conflict with other traffic. The operational concept of use assumes that air traffic controllers are very busy during periods when aircraft are in holding and therefore don't have time to manually enter information which defines a holding pattern and activates conflict probing. For this reason, it is important the holding function automatically detect aircraft in holding and compute a holding region for conflict analysis. The controller is then alerted if other aircraft are predicted to fly through the holding region at the holding altitude.

McNally, Dave↗

NASA NTRS2018

The Fusion Driven Rocket: Nuclear Propulsion through Direct Conversion of Fusion Energy

The future of manned space exploration and development of space depends critically on the creation of a dramatically more efficient propulsion architecture for in-space transportation. A very persuasive reason for investigating the applicability of nuclear power in rockets is the vast energy density gain of nuclear fuel when compared to chemical combustion energy. The Fusion Driven rocket (FDR) represents a revolutionary approach to fusion propulsion where the power source releases its energy directly into the propellant, not requiring conversion to electricity. It employs a solid lithium propellant that requires no significant tankage mass. The propellant is rapidly heated and accelerated to high exhaust velocity (> 30 km/s), while having no substantial physical interaction with the spacecraft thereby avoiding damage to the rocket and limiting both the thermal heat load and radiator mass. The key to achieving this stems from research at MSNW and the UW on the magnetically driven implosion of metal foils onto a magnetized plasma target to obtain fusion conditions. A logical extension of this work leads to a method that utilizes these metal shells (or liners) to not only achieve fusion conditions, but to serve as the propellant as well. Several low-mass, magnetically driven metal liners are inductively driven to converge radially and axially and form a thick blanket surrounding the target plasmoid and compress the plasmoid to fusion conditions. Virtually all of the radiant, neutron and particle energy from the plasma is absorbed by the encapsulating, thick metal blanket thereby isolating the spacecraft from the fusion. This energy, in addition to the intense Ohmic heating at peak magnetic field compression, is adequate to vaporize and ionize the metal blanket. The expansion of this hot, ionized metal propellant through a magnetically insulated nozzle produces high thrust at the optimal Isp. The energy from the fusion process, along with the waste heat, is thus utilized at very high efficiency. The basic scheme for FDR is illustrated and described in the report (see Fig. 2) The two most critical issues in meeting challenges introduced employing magneto-inertial fusion as the power source is driver efficiency and “stand-off” – the ability to isolate and protect fusion and thruster from the resultant fusion energy. By employing metal shells for compression, it is possible to produce the desired convergent motion inductively by inserting the metal sheets along the inner surface of cylindrical or conically tapered coils. Both stand-off and energy efficiency issues are solved by this arrangement. 3 This two year effort focused on achieving three key criteria for the Fusion Driven Rocket to move forward for technological development: (1) the physics of the FDR must be fully understood and validated, (2) the design and technology development for the FDR required for its implementation in space must be fully characterized, and (3) an in-depth analysis of the rocket design and spacecraft integration as well as mission architectures enabled by the FDR need to be performed. A subscale, laboratory liner compression test facility was assembled at the University of Washington Plasma Dynamics Laboratory with sufficient liner kinetic energy (~ 0.5 MJ) to reach conditions required for fusion breakeven conditions. Detailed experimental studies of the dynamic behavior of the driven liners as well as liner convergence and magnetic compression were performed. The development of both the 1D liner dynamics code and the full 3D ANSYS® liner calculations was achieved. The characterization of both the FDR and spacecraft as well as a design architecture analysis was conducted that included an examination of a wide range of mission architectures and destinations for which this fusion propulsion system would be enabling or critical. In particular a rapid, single launch manned Mars mission was developed.

Energy↗

NASA NTRS2011

NASA System Safety Handbook: System Safety Framework and Concepts for Implementation - Volume 1

System safety assessment is defined in NPR 8715.3C, NASA General Safety Program Requirements as a disciplined, systematic approach to the analysis of risks resulting from hazards that can affect humans, the environment, and mission assets. Achievement of the highest practicable degree of system safety is one of NASA's highest priorities. Traditionally, system safety assessment at NASA and elsewhere has focused on the application of a set of safety analysis tools to identify safety risks and formulate effective controls.1 Familiar tools used for this purpose include various forms of hazard analyses, failure modes and effects analyses, and probabilistic safety assessment (commonly also referred to as probabilistic risk assessment (PRA)). In the past, it has been assumed that to show that a system is safe, it is sufficient to provide assurance that the process for identifying the hazards has been as comprehensive as possible and that each identified hazard has one or more associated controls. The NASA Aerospace Safety Advisory Panel (ASAP) has made several statements in its annual reports supporting a more holistic approach. In 2006, it recommended that "... a comprehensive risk assessment, communication and acceptance process be implemented to ensure that overall launch risk is considered in an integrated and consistent manner." In 2009, it advocated for "... a process for using a risk-informed design approach to produce a design that is optimally and sufficiently safe." As a rationale for the latter advocacy, it stated that "... the ASAP applauds switching to a performance-based approach because it emphasizes early risk identification to guide designs, thus enabling creative design approaches that might be more efficient, safer, or both." For purposes of this preface, it is worth mentioning three areas where the handbook emphasizes a more holistic type of thinking. First, the handbook takes the position that it is important to not just focus on risk on an individual basis but to consider measures of aggregate safety risk and to ensure wherever possible that there be quantitative measures for evaluating how effective the controls are in reducing these aggregate risks. The term aggregate risk, when used in this handbook, refers to the accumulation of risks from individual scenarios that lead to a shortfall in safety performance at a high level: e.g., an excessively high probability of loss of crew, loss of mission, planetary contamination, etc. Without aggregated quantitative measures such as these, it is not reasonable to expect that safety has been optimized with respect to other technical and programmatic objectives. At the same time, it is fully recognized that not all sources of risk are amenable to precise quantitative analysis and that the use of qualitative approaches and bounding estimates may be appropriate for those risk sources. Second, the handbook stresses the necessity of developing confidence that the controls derived for the purpose of achieving system safety not only handle risks that have been identified and properly characterized but also provide a general, more holistic means for protecting against unidentified or uncharacterized risks. For example, while it is not possible to be assured that all credible causes of risk have been identified, there are defenses that can provide protection against broad categories of risks and thereby increase the chances that individual causes are contained. Third, the handbook strives at all times to treat uncertainties as an integral aspect of risk and as a part of making decisions. The term "uncertainty" here does not refer to an actuarial type of data analysis, but rather to a characterization of our state of knowledge regarding results from logical and physical models that approximate reality. Uncertainty analysis finds how the output parameters of the models are related to plausible variations in the input parameters and in the modeling assumptions. The evaluation of unrtainties represents a method of probabilistic thinking wherein the analyst and decision makers recognize possible outcomes other than the outcome perceived to be "most likely." Without this type of analysis, it is not possible to determine the worth of an analysis product as a basis for making decisions related to safety and mission success. In line with these considerations the handbook does not take a hazard-analysis-centric approach to system safety. Hazard analysis remains a useful tool to facilitate brainstorming but does not substitute for a more holistic approach geared to a comprehensive identification and understanding of individual risk issues and their contributions to aggregate safety risks. The handbook strives to emphasize the importance of identifying the most critical scenarios that contribute to the risk of not meeting the agreed-upon safety objectives and requirements using all appropriate tools (including but not limited to hazard analysis). Thereafter, emphasis shifts to identifying the risk drivers that cause these scenarios to be critical and ensuring that there are controls directed toward preventing or mitigating the risk drivers. To address these and other areas, the handbook advocates a proactive, analytic-deliberative, risk-informed approach to system safety, enabling the integration of system safety activities with systems engineering and risk management processes. It emphasizes how one can systematically provide the necessary evidence to substantiate the claim that a system is safe to within an acceptable risk tolerance, and that safety has been achieved in a cost-effective manner. The methodology discussed in this handbook is part of a systems engineering process and is intended to be integral to the system safety practices being conducted by the NASA safety and mission assurance and systems engineering organizations. The handbook posits that to conclude that a system is adequately safe, it is necessary to consider a set of safety claims that derive from the safety objectives of the organization. The safety claims are developed from a hierarchy of safety objectives and are therefore hierarchical themselves. Assurance that all the claims are true within acceptable risk tolerance limits implies that all of the safety objectives have been satisfied, and therefore that the system is safe. The acceptable risk tolerance limits are provided by the authority who must make the decision whether or not to proceed to the next step in the life cycle. These tolerances are therefore referred to as the decision maker's risk tolerances. In general, the safety claims address two fundamental facets of safety: 1) whether required safety thresholds or goals have been achieved, and 2) whether the safety risk is as low as possible within reasonable impacts on cost, schedule, and performance. The latter facet includes consideration of controls that are collective in nature (i.e., apply generically to broad categories of risks) and thereby provide protection against unidentified or uncharacterized risks.

Dezfuli, Homayoon↗

NASA NTRS2022

The Earth Model Column Collaboratory (EMC2) v1.1: An Open-Source Ground-Based Lidar and Radar Instrument Simulator and Subcolumn Generator for Large-Scale Models

Climate models are essential for our comprehensive understanding of Earth's atmosphere and can provide critical insights on future changes decades ahead. Because of these critical roles, today's climate models are continuously being developed and evaluated using constraining observations and measurements obtained by satellites, airborne, and ground-based instruments. Instrument simulators can provide a bridge between the measured or retrieved quantities and their sampling in models and field observations while considering instrument sensitivity limitations. Here we present the Earth Model Column Collaboratory (EMC2), an open-source ground-based lidar and radar instrument simulator and subcolumn generator, specifically designed for large-scale models, in particular climate models, but also applicable to high-resolution model output. EMC2 provides a flexible framework enabling direct comparison of model output with ground-based observations, including generation of subcolumns that may statistically represent finer model spatial resolutions. In addition, EMC2 emulates ground-based (and air- or space-borne) measurements while remaining faithful to large-scale models' physical assumptions implemented in their cloud or radiation schemes. The simulator uses either single particle or bulk particle size distribution lookup tables, depending on the selected scheme approach, to perform the forward calculations. To facilitate model evaluation, EMC2 also includes three hydrometeor classification methods, namely, radar- and sounding-based cloud and precipitation detection and classification, lidar-based phase classification, and a Cloud Feedback Model Intercomparison Project Observational Simulator Package (COSP) lidar simulator emulator. The software is written in Python, is easy to use, and can be straightforwardly customized for different models, radars, and lidars. Following the description of the logic, functionality, features, and software structure of EMC2, we present a case study of highly supercooled mixed-phase cloud based on measurements from the U.S. Department of Energy Atmospheric Radiation Measurement (ARM) West Antarctic Radiation Experiment (AWARE). We compare observations with the application of EMC2 to outputs from four configurations of the NASA Goddard Institute for Space Studies (GISS) climate model (ModelE3) in single-column model (SCM) mode and from a large-eddy simulation (LES) model. We show that two of the four ModelE3 configurations can form and maintain highly supercooled precipitating cloud for several hours, consistent with observations and LES. While our focus is on one of these ModelE3 configurations, which performed slightly better in this case study, both of these configurations and the LES results post-processed with EMC2 generally provide reasonable agreement with observed lidar and radar variables. As briefly demonstrated here, EMC2 can provide a lightweight and flexible framework for comparing the results of both large-scale and high-resolution models directly with observations, with relatively little overhead and multiple options for achieving consistency with model microphysical or radiation scheme physics.

Earth Model Column Collaboratory↗

NASA NTRS2020

Operability on the Europa Clipper Mission: Challenges and Opportunities

Flight and ground system operability has been a focus area on the Europa Clipper Project since early in its formulation phase. This has given the operations team the opportunity to influence the design, with a goal of increasing overall system operability. This paper presents example operability challenges, opportunities, and solutions arising from the pre-Critical Design Review (CDR) system design. The integrated wing assembly design directly couples a scientific instrument (the REASON sounding radar) to the spacecraft’s power source (solar array wing panels). Impacts to mission operations of this design include: increased slew durations; solar array pointing constraints during inner cruise, Europa flybys, and orbit trim maneuvers; and stray light intrusions into the stellar reference units’ keep out zones. The use of CCSDS File Delivery Protocol (CFDP) Class-2 for reliable downlink of the large volume of Europa Clipper science data is described, along with nominal and off-nominal use cases. The effort to improve post-launch spacecraft visibility by adding a third low-gain antenna to the spacecraft is detailed. The design of the bulk data store has necessitated the implementation of accountable data products (ADPs), accountability identifiers (AIDs), and metadata packets to provide end-to-end science data accountability. To streamline and automate the flight rules generation and checking process, a first order and temporal logic-based solution of expressing flight rules without ambiguity, and whose programmatic implementation can be automated, is proposed. The focus on operability has had a positive influence on Europa Clipper design decisions, although cost, schedule, budget, heritage, and other technical concerns have many times outweighed operability concerns. However, experience to date demonstrates that this approach to operability results in more thorough, balanced consideration of the effect of early design trades and decisions on the operations phase of a mission than seen in many previous missions, and provides operations development insight into prioritizing work to go.

Signorelli, Joel↗

NASA NTRS2021

Operability on the Europa Clipper Mission: Challenges and Opportunities

Flight and ground system operability has been a focus area on the Europa Clipper Project since early in its formulation phase. This has given the operations team the opportunity to influence the design, with a goal of increasing overall system operability. This paper presents example operability challenges, opportunities, and solutions arising from the Critical Design Review (CDR) system design. The integrated wing assembly design directly couples a scientific instrument (the REASON sounding radar) to the spacecraft’s power source (solar array wing panels). Impacts to mission operations of this design include: increased slew durations; solar array pointing constraints during inner cruise, Europa flybys, and orbit trim maneuvers; and stray light intrusions into the stellar reference units’ keep out zones. The use of CCSDS File Delivery Protocol (CFDP) Class-2 for reliable downlink of the large volume of Europa Clipper science data is described, along with nominal and off-nominal use cases. The effort to improve post-launch spacecraft visibility by adding a third low-gain antenna to the spacecraft is detailed. The design of the bulk data store has necessitated the implementation of accountable data products (ADPs), accountability identifiers (AIDs), and metadata packets to provide end-to-end science data accountability. To streamline and automate the flight rules generation and checking process, a first order and temporal logic-based solution of expressing flight rules without ambiguity, and whose programmatic implementation can be automated, is proposed. The focus on operability has had a positive influence on Europa Clipper design decisions, although cost, schedule, budget, heritage, and other technical concerns have many times outweighed operability concerns. However, experience to date demonstrates that this approach to operability results in more thorough, balanced consideration of the effect of early design trades and decisions on the operations phase of a mission than seen in many previous missions, and provides operations development insight into prioritizing work to go.

Kumar, Meghana↗

NASA NTRS2008

Sensor Selection and Data Validation for Reliable Integrated System Health Management

For new access to space systems with challenging mission requirements, effective implementation of integrated system health management (ISHM) must be available early in the program to support the design of systems that are safe, reliable, highly autonomous. Early ISHM availability is also needed to promote design for affordable operations; increased knowledge of functional health provided by ISHM supports construction of more efficient operations infrastructure. Lack of early ISHM inclusion in the system design process could result in retrofitting health management systems to augment and expand operational and safety requirements; thereby increasing program cost and risk due to increased instrumentation and computational complexity. Having the right sensors generating the required data to perform condition assessment, such as fault detection and isolation, with a high degree of confidence is critical to reliable operation of ISHM. Also, the data being generated by the sensors needs to be qualified to ensure that the assessments made by the ISHM is not based on faulty data. NASA Glenn Research Center has been developing technologies for sensor selection and data validation as part of the FDDR (Fault Detection, Diagnosis, and Response) element of the Upper Stage project of the Ares 1 launch vehicle development. This presentation will provide an overview of the GRC approach to sensor selection and data quality validation and will present recent results from applications that are representative of the complexity of propulsion systems for access to space vehicles. A brief overview of the sensor selection and data quality validation approaches is provided below. The NASA GRC developed Systematic Sensor Selection Strategy (S4) is a model-based procedure for systematically and quantitatively selecting an optimal sensor suite to provide overall health assessment of a host system. S4 can be logically partitioned into three major subdivisions: the knowledge base, the down-select iteration, and the final selection analysis. The knowledge base required for productive use of S4 consists of system design information and heritage experience together with a focus on components with health implications. The sensor suite down-selection is an iterative process for identifying a group of sensors that provide good fault detection and isolation for targeted fault scenarios. In the final selection analysis, a statistical evaluation algorithm provides the final robustness test for each down-selected sensor suite. NASA GRC has developed an approach to sensor data qualification that applies empirical relationships, threshold detection techniques, and Bayesian belief theory to a network of sensors related by physics (i.e., analytical redundancy) in order to identify the failure of a given sensor within the network. This data quality validation approach extends the state-of-the-art, from red-lines and reasonableness checks that flag a sensor after it fails, to include analytical redundancy-based methods that can identify a sensor in the process of failing. The focus of this effort is on understanding the proper application of analytical redundancy-based data qualification methods for onboard use in monitoring Upper Stage sensors.

Garg, Sanjay↗

NASA NTRS1984

High-temperature thermoelectric energy converstion. I - Theory

The high-temperature thermoelectric energy-conversion theory is examined. It is shown that semiconductors are the logical choices for high-figure of merit-value materials, but the requirements for optimization differ depending on whether the material is classed as a broad-band or narrow-band semiconductor. Optimization is discussed as a function of temperature. Phonon scattering mechanisms are considered; and for the reduction of thermal conductivity, basic material guidelines are given. Although experimental results indicate that ZT (where Z is the figure of merit and T is the temperature) of about 1 represents an upper limit, there is in fact, no theoretical limitation. It is unlikely that the Z values will be significantly reduced by radiation transfer at temperatures lower than 2000 K. The current status of materials research is also considered. The rare-earth chalcogenides which behave as n-type semi-conductors and the boron-rich borides which exhibit hopping p-type conductivity behavior are the materials that show promise for high-temperature Z values. The reasons for low thermal conductivities in these materials is discussed.

Wood, C.↗

NASA NTRS1992

Inverse problems: Fuzzy representation of uncertainty generates a regularization

In many applied problems (geophysics, medicine, and astronomy) we cannot directly measure the values x(t) of the desired physical quantity x in different moments of time, so we measure some related quantity y(t), and then we try to reconstruct the desired values x(t). This problem is often ill-posed in the sense that two essentially different functions x(t) are consistent with the same measurement results. So, in order to get a reasonable reconstruction, we must have some additional prior information about the desired function x(t). Methods that use this information to choose x(t) from the set of all possible solutions are called regularization methods. In some cases, we know the statistical characteristics both of x(t) and of the measurement errors, so we can apply statistical filtering methods (well-developed since the invention of a Wiener filter). In some situations, we know the properties of the desired process, e.g., we know that the derivative of x(t) is limited by some number delta, etc. In this case, we can apply standard regularization techniques (e.g., Tikhonov's regularization). In many cases, however, we have only uncertain knowledge about the values of x(t), about the rate with which the values of x(t) can change, and about the measurement errors. In these cases, usually one of the existing regularization methods is applied. There exist several heuristics that choose such a method. The problem with these heuristics is that they often lead to choosing different methods, and these methods lead to different functions x(t). Therefore, the results x(t) of applying these heuristic methods are often unreliable. We show that if we use fuzzy logic to describe this uncertainty, then we automatically arrive at a unique regularization method, whose parameters are uniquely determined by the experts knowledge. Although we start with the fuzzy description, but the resulting regularization turns out to be quite crisp.

Kreinovich, V.↗

NASA NTRS2001

Environmental Barrier Coatings for Silicon-Based Ceramics

Silicon-based ceramics, such as SiC fiber-reinforced SiC (SiC/SiC ceramic matrix composites (CMC) and monolithic silicon nitride (Si3N4), are prime candidates for hot section structural components of next generation gas turbine engines. Silicon-based ceramics, however, suffer from rapid surface recession in combustion environments due to volatilization of the silica scale via reaction with water vapor, a major product of combustion. Therefore, application of silicon-based ceramic components in the hot section of advanced gas turbine engines requires development of a reliable method to protect the ceramic from environmental attack. An external environmental barrier coating (EBC) is considered a logical approach to achieve protection and CP long-term stability. The first generation EBC consisted of two layers, mullite (3Al2O3-2SiO2) bond coat and yttria-stabilized zirconia (YSZ, ZrO2-8 Wt.% Y2O3) top coat. Second generation EBCs, with substantially improved performance compared with the first generation EBC, were developed in the NASA High Speed Research-Enabling Propulsion Materials (HSR-EPM) Program. The first generation EBC consisted of two layers, mullite (3Al2O3-2SiO2) bond coat and yttria-stabilized zirconia (YSZ, ZrO2-8 wt.% Y2O3) top coat. Second generation EBCs, with substantially improved performance compared with the first generation EBC, were developed in the NASA High Speed Research-Enabling Propulsion Materials (HSR-EPM) Program (5). They consist of three layers, a silicon first bond coat, a mullite or a mullite + BSAS (BaO(1-x)-SrO(x)-Al2O3-2SiO2) second bond coat, and a BSAS top coat. The EPM EBCs were applied on SiC/SiC CMC combustor liners in three Solar Turbines (San Diego, CA) Centaur 50s gas turbine engines. The combined operation of the three engines has accumulated over 24,000 hours without failure (approximately 1,250 C maximum combustor liner temperature), with the engine in Texaco, Bakersfield, CA, accumulating about 14,000 hours. As the commercialization of Si-based ceramic components in gas turbines is on the horizon, a major emphasis is placed on EBCs for two reasons. First, they are absolute necessity for the protection of Si-based ceramics from water vapor. Second, they can enable a major enhancement in the performance of gas turbines by creating temperature gradients with the incorporation of a low thermal conductivity layer. Thorough understanding of current state-of-the-art EBCs will provide the foundation upon which development of future EBCs will be based. Phase stability and thermal conductivity of EPM EBCs are published elsewhere. This paper will discuss the chemical/environmental durability and silica volatility of EPM EBCs and their impact on the coating's upper temperature limit.

Lee, Kang N.↗

NASA NTRS2007

Circuit and Method for Communication Over DC Power Line

A circuit and method for transmitting and receiving on-off-keyed (OOK) signals with fractional signal-to-noise ratios uses available high-temperature silicon- on-insulator (SOI) components to move computational, sensing, and actuation abilities closer to high-temperature or high-ionizing radiation environments such as vehicle engine compartments, deep-hole drilling environments, industrial control and monitoring of processes like smelting, and operations near nuclear reactors and in space. This device allows for the networking of multiple, like nodes to each other and to a central processor. It can do this with nothing more than the already in-situ power wiring of the system. The device s microprocessor allows it to make intelligent decisions within the vehicle operational loop and to effect control outputs to its associated actuators. The figure illustrates how each node converts digital serial data to OOK 18-kHz in transmit mode and vice-versa in receive mode; though operations at lower frequencies or up to a megahertz are within reason using this method and these parts. This innovation s technique modulates a DC power bus with millivolt-level signals through a MOSFET (metal oxide semiconductor field effect transistor) and resistor by OOK. It receives and demodulates this signal from the DC power bus through capacitive coupling at high temperature and in high ionizing radiation environments. The demodulation of the OOK signal is accomplished by using an asynchronous quadrature detection technique realized by a quasi-discrete Fourier transform through use of the quadrature components (0 and 90 phases) of the carrier frequency as generated by the microcontroller and as a function of the selected crystal frequency driving its oscillator. The detected signal is rectified using an absolute-value circuit containing no diodes (diodes being non-operational at high temperatures), and only operational amplifiers. The absolute values of the two phases of the received signal are then summed and hard limited (digitized) by comparing them to a reference level and are then input into a microprocessor as a serial bit stream. The quasi-discrete Fourier transform is performed in high-temperature components (operational amplifiers, analog switches, resistors, and capacitors). The demodulated signal is a serial data stream that is input to the UART (universal asynchronous receiver transmitter) receiver pin of the microprocessor. The OOK of the carrier frequency uses the output of the UART pin as an enabling signal that drives the gate of the MOSFET. Logic low bits enable the carrier frequency (realized by using the 0 phase signal from the microcontroller, though either phase may be used) to be DC-coupled to the power supply bus through a current-limiting resistor mounted between the MOSFET drain and the supply rail. The presence of logic lows on the power supply rail is realized by carrier bursts while logic highs are realized by the absence of bursts.

Krasowski, Michael J.↗

NASA NTRS1984

Report of the Panel on Propulsion

Propulsion, while conventionally included on the list of important aeronautical disciplines along with aerodynamics, structures, etc., is in itself a systems endeavor, analogous to the engineering of the entire vehicle; indeed propulsion encompasses important aspects of all the other disciplines. In recognition of this fact, the panel focused its discussion on those aspects of the key disciplines that are especially or uniquely important to propulsion. From the initial development of the airplane, the propulsion system has been recognized as one of the pacing technologies. It is perhaps because of the technological disparity between the reciprocating engine and the primitive airframe that the two remained relatively and separate, were developed somewhat independently, usually by different organizations. In recent years, the maturing of the gas turbine power plant and the advance in high-speed airframes have rendered this separation somewhat artificial. The power plant and the airframe now share common structural and aerodynamic elements; as the flight Mach number rises, the degree of interaction increases. By the year 2000, this interdependence will have increased in many respects to a point where independent design may not be practical or possible. During the period since the initiation of the aircraft gas turbine, the solid propellant rocket and the liquid propellant rocket, a vast array of other novel engines have been studied, covering the full spectrum of flight conditions from low subsonic to hypersonic and transatmospheric flight. In each instance, performance limits have been investigated under the assumption that current technology or reasonably foreseeable technology would be available for their development. Among the extensive list of advanced, high-performance concepts and cycles examined are the hypersonic ramjet, the variable cycle, runway-to-orbit airbreathing engine, the ram rocket (airbreathing and rich solid propellant rocket), and the air turborocket. At various times, these systems have come relatively close to meriting development and application. In many instances, limitations of materials and technologies curtailed development. As important and with almost equal frequency, the lack of commercial or military utility of the concept precluded the necessary funding. It is instructive to note that two former items on this list, the turbofan (bypass engine) and the high-speed turboprop, are respectively a mainstay engine and a promising development. In the case of the turbofan, its full potential could not be realized until turbine cooling technology had been developed and new materials developed to permit the construction of transonic fans. In the case of the highspeed turbopropeller engine, not only were the material and turbine technologies needed, but, in addition, the rise in fuel costs provided the impetus to take advantage of its favorable fuel consumption characteristic. As the basic technologies progress and as new missions become attractive, the engines in the foregoing list become candidates for new feasibility studies and further technology development. At the present time, the ram rocket is the prime contender to augment the range of small missiles. Of interest also is the hypersonic ram jet and its logical extension, the runway-to-orbit airbreathing engine. Much of this report deals with the development of current or near-future power plant concepts. First, the motivating factors for aeronautical propulsion research are reviewed as a reminder of the importance of continued effort in a field that has often been characterized as mature. Next, technical areas are discussed in which the panel feels additional research effort is warranted and would lead to the realization of the technological potentials between now and the year 2000. Under these guidelines, new cycles (e.g., isothermal energy exchange) were not considered by the panel. Finally, although facility requirements were not a prime consideration in the current projections, the panel believes that the increasing complexity of propulsion systems; the need for more refined interaction between propulsion system, airframe, and controls; and increasing operation in adverse weather will require test capabilities beyond those now available (see appendix). Enhanced test capability is needed in the areas of propulsion airframe integration and in largescale icing research with proper concurrent treatment of altitude, temperature, and speed.

Kerrebrock, Jack L.↗

NASA NTRS2011

Checking Flight Rules with TraceContract: Application of a Scala DSL for Trace Analysis

Typically during the design and development of a NASA space mission, rules and constraints are identified to help reduce reasons for failure during operations. These flight rules are usually captured in a set of indexed tables, containing rule descriptions, rationales for the rules, and other information. Flight rules can be part of manual operations procedures carried out by humans. However, they can also be automated, and either implemented as on-board monitors, or as ground based monitors that are part of a ground data system. In the case of automated flight rules, one considerable expense to be addressed for any mission is the extensive process by which system engineers express flight rules in prose, software developers translate these requirements into code, and then both experts verify that the resulting application is correct. This paper explores the potential benefits of using an internal Scala DSL for general trace analysis, named TRACECONTRACT, to write executable specifications of flight rules. TRACECONTRACT can generally be applied to analysis of for example log files or for monitoring executing systems online.

temporal logic↗

NASA NTRS2011

Probabilistic Risk Assessment Procedures Guide for NASA Managers and Practitioners (Second Edition)

Probabilistic Risk Assessment (PRA) is a comprehensive, structured, and logical analysis method aimed at identifying and assessing risks in complex technological systems for the purpose of cost-effectively improving their safety and performance. NASA's objective is to better understand and effectively manage risk, and thus more effectively ensure mission and programmatic success, and to achieve and maintain high safety standards at NASA. NASA intends to use risk assessment in its programs and projects to support optimal management decision making for the improvement of safety and program performance. In addition to using quantitative/probabilistic risk assessment to improve safety and enhance the safety decision process, NASA has incorporated quantitative risk assessment into its system safety assessment process, which until now has relied primarily on a qualitative representation of risk. Also, NASA has recently adopted the Risk-Informed Decision Making (RIDM) process [1-1] as a valuable addition to supplement existing deterministic and experience-based engineering methods and tools. Over the years, NASA has been a leader in most of the technologies it has employed in its programs. One would think that PRA should be no exception. In fact, it would be natural for NASA to be a leader in PRA because, as a technology pioneer, NASA uses risk assessment and management implicitly or explicitly on a daily basis. NASA has probabilistic safety requirements (thresholds and goals) for crew transportation system missions to the International Space Station (ISS) [1-2]. NASA intends to have probabilistic requirements for any new human spaceflight transportation system acquisition. Methods to perform risk and reliability assessment in the early 1960s originated in U.S. aerospace and missile programs. Fault tree analysis (FTA) is an example. It would have been a reasonable extrapolation to expect that NASA would also become the world leader in the application of PRA. That was, however, not to happen. Early in the Apollo program, estimates of the probability for a successful roundtrip human mission to the moon yielded disappointingly low (and suspect) values and NASA became discouraged from further performing quantitative risk analyses until some two decades later when the methods were more refined, rigorous, and repeatable. Instead, NASA decided to rely primarily on the Hazard Analysis (HA) and Failure Modes and Effects Analysis (FMEA) methods for system safety assessment.

Stamatelatos,Michael↗

NASA NTRS2018

GMI-IPS: Python Processing Software for Aircraft Campaigns

NASA's Atmospheric Tomography Mission (ATom) seeks to understand the impact of anthropogenic air pollution on gases in the Earth's atmosphere. Four flight campaigns are being deployed on a seasonal basis to establish a continuous global-scale data set intended to improve the representation of chemically reactive gases in global atmospheric chemistry models. The Global Modeling Initiative (GMI), is creating chemical transport simulations on a global scale for each of the ATom flight campaigns. To meet the computational demands required to translate the GMI simulation data to grids associated with the flights from the ATom campaigns, the GMI ICARTT Processing Software (GMI-IPS) has been developed and is providing key functionality for data processing and analysis in this ongoing effort. The GMI-IPS is written in Python and provides computational kernels for data interpolation and visualization tasks on GMI simulation data. A key feature of the GMI-IPS, is its ability to read ICARTT files, a text-based file format for airborne instrument data, and extract the required flight information that defines regional and temporal grid parameters associated with an ATom flight. Perhaps most importantly, the GMI-IPS creates ICARTT files containing GMI simulated data, which are used in collaboration with ATom instrument teams and other modeling groups. The initial main task of the GMI-IPS is to interpolate GMI model data to the finer temporal resolution (1-10 seconds) of a given flight. The model data includes basic fields such as temperature and pressure, but the main focus of this effort is to provide species concentrations of chemical gases for ATom flights. The software, which uses parallel computation techniques for data intensive tasks, linearly interpolates each of the model fields to the time resolution of the flight. The temporally interpolated data is then saved to disk, and is used to create additional derived quantities. In order to translate the GMI model data to the spatial grid of the flight path as defined by the pressure, latitude, and longitude points at each flight time record, a weighted average is then calculated from the nearest neighbors in two dimensions (latitude, longitude). Using SciPya's Regular Grid Interpolator, interpolation functions are generated for the GMI model grid and the calculated weighted averages. The flight path points are then extracted from the ATom ICARTT instrument file, and are sent to the multi-dimensional interpolating functions to generate GMI field quantities along the spatial path of the flight. The interpolated field quantities are then written to a ICARTT data file, which is stored for further manipulation. The GMI-IPS is aware of a generic ATom ICARTT header format, containing basic information for all flight campaigns. The GMI-IPS includes logic to edit metadata for the derived field quantities, as well as modify the generic header data such as processing dates and associated instrument files. The ICARTT interpolated data is then appended to the modified header data, and the ICARTT processing is complete for the given flight and ready for collaboration. The output ICARTT data adheres to the ICARTT file format standards V1.1. The visualization component of the GMI-IPS uses Matplotlib extensively and has several functions ranging in complexity. First, it creates a model background curtain for the flight (time versus model eta levels) with the interpolated flight data superimposed on the curtain. Secondly, it creates a time-series plot of the interpolated flight data. Lastly, the visualization component creates averaged 2D model slices (longitude versus latitude) with overlaid flight track circles at key pressure levels. The GMI-IPS consists of a handful of classes and supporting functionality that have been generalized to be compatible with any ICARTT file that adheres to the base class definition. The base class represents a generic ICARTT entry, only defining a single time entry and 3D spatial positioning parameters. Other classes inherit from this base class; several classes for input ICARTT instrument files, which contain the necessary flight positioning information as a basis for data processing, as well as other classes for output ICARTT files, which contain the interpolated model data. Utility classes provide functionality for routine procedures such as: comparing field names among ICARTT files, reading ICARTT entries from a data file and storing them in data structures, and returning a reduced spatial grid based on a collection of ICARTT entries. Although the GMI-IPS is compatible with GMI model data, it can be adapted with reasonable effort for any simulation that creates Hierarchical Data Format (HDF) files. The same can be said of its adaptability to ICARTT files outside of the context of the ATom mission. The GMI-IPS contains just under 30,000 lines of code, eight classes, and a dozen drivers and utility programs. It is maintained with GIT source code management and has been used to deliver processed GMI model data for the ATom campaigns that have taken place to date.

Damon, M. R.↗

NASA NTRS2006

SpaceWire Protocol ID: What Does It Mean To You?

Spacewire is becoming a popular solution for satellite high-speed data buses because it is a simple standard that provides great flexibility for a wide range of system requirements. It is simple in packet format and protocol, allowing users to easily tailor their implementation for their specific application. Some of the attractive aspects of Spacewire that make it easy to implement also make it hard for future reuse. Protocol reuse is difficult because Spacewire does not have a defined mechanism to communicate with the higher layers of the protocol stack. This has forced users of Spacewire to define unique packet formats and define how these packets are to be processed. Each mission writes their own Interface Control Document (ICD) and tailors Spacewire for their specific requirements making reuse difficult. Part of the reason for this habit may be because engineers typically optimize designs for their own requirements in the absence of a standard. This is an inefficient use of project resources and costs more to develop missions. A new packet format for Spacewire has been defined as a solution for this problem. This new packet format is a compliment to the Spacewire standard that will support protocol development upon Spacewire. The new packet definition does not replace the current packet structure, i.e., does not make the standard obsolete, but merely extends the standard for those who want to develop protocols over Spacewire. The Spacewire packet is defined with the first part being the Destination Address, which may be one or more bytes. This is followed by the packet cargo, which is user defined. The cargo is truncated with an End-Of-Packet (EOP) marker. This packet structure offers low packet overhead and allows the user to define how the contents are to be formatted. It also provides for many different addressing schemes, which provide flexibility in the system. This packet flexibility is typically an attractive part of the Spacewire. The new extended packet format adds one new field to the packet that greatly enhances the capability of Spacewire. This new field called the Protocol Identifier (ID) is used to identify the packet contents and the associated processing for the packet. This feature along with the restriction in the packet format that uses the Protocol ID, allows a deterministic method of decoding packets that was not before possible. The first part of the packet is still the Destination Address, which still conforms to the original standard but with one restriction. The restriction is that the first byte seen at the destination by the user needs to be a logical address, independent of the addressing scheme used. The second field is defined as the Protocol ID, which is usually one byte in length. The packet cargo (user defined) follows the Protocol ID. After the packet cargo is the EOP, which defines the end of packet. The value of the Protocol ID is assigned by the Spacewire working group and the protocol description published for others to use. The development of Protocols for Spacewire is currently the area of greatest activity by the Spacewire working group. The first protocol definition by the working group has been completed and is now in the process of formal standardization. There are many other protocols in development for missions that have not yet received formal Protocol ID assignment, but even if the protocols are not formally assigned a value, this effort will provide synergism for future developments.

Rakow, Glenn↗

NASA NTRS2004

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗

NASA NTRS2000

Thermocapillary Flow and Aggregation of Bubbles on a Solid Wall

During the electrolytic evolution of oxygen bubbles forming on a vertically oriented transparent tin oxide electrode, bubbles were found to be mutually attractive. The mechanism of the aggregation had never been explained satisfactorily until Guelcher et al. attributed it to thermocapillary flow. The gradient of surface tension of the liquid at the bubble's surface, which was established because of reaction heat and ohmic heat loss at the electrode wall, drives flow of the liquid adjacent to each bubble; the bubble "pumps" fluid along its surface away from the wall. Fluid flows toward the bubble to conserve mass and entrains nearby bubbles in the flow pattern. The same logic would apply when two bubbles of equal size are adjacent to each other on a warm wall. Each bubble drives thermocapillary flow and hence entrains the other in its flow pattern, which drives the aggregation. Our objective here is to perform experiments where the temperature gradient at the wall is well known and controlled. The theory can be quantitatively tested by studying aggregation of bubble pairs of equal size, and by varying system parameters such as temperature gradient, bubble size and fluid viscosity. The results are then compared with the theory in a quantitatively rigorous manner. We demonstrate that the theory without adjustable parameters is capable of quantitatively modeling the rate of aggregation of two bubbles. The equations governing the thermocapillary flow around a single stationary bubble on a heated or cooled wall in a semi-infinite domain were solved. Both Reynolds number and Marangoni number were much less than unity. The critical result is that liquid in the vicinity of a warm wall flows toward a stationary collector bubble. Consequently the thermocapillary flow around the stationary bubble entrains another bubble toward itself. The bubbles undergo hindered translation parallel to the wall with velocity U while the fluid flow field is described with u. Two velocities were equated by using a wall hindrance parameter q: U = qu [1] which shows the velocity of bubble is proportional to the entraining velocity. The hindrance parameter q can experimentally be measured independently. q can also be calculated by solving the equations of motion for a bubble translating parallel to a solid wall. The experimental cell is cylindrical with an ID of 10 cm and consists of a 1 cm deep main cell filled with silicone oil and flanked by two thermal reservoirs. The upper thermal reservoir was heated and the lower thermal reservoir was cooled so that the bubbles aggregate. Two types of silicone oil (eta = 0.02 and 0.50 Pa s) were used. Two equal sized air bubbles were injected into the cell with a syringe. The center-to-center distance of bubbles was observed through a microscope. Bubble radius ranged from 0.40 mm to 0.65 mm and the temperature gradients along with the cell ranged from 1400 to 5000 K/m. The bubbles aggregated when heat flows from the wall to the fluid. The velocities of bubbles were in the range of 1 - 10 microns/s. The separation r decreased more quickly when the temperature gradient was higher, bubble size was larger, and the oil viscosity was lower. r decreased more rapidly as the bubbles approached each other. Dimensionless time was arbitrarily set to be zero when the dimensionless center-to-center distance between the bubbles was 4. All the bubble trajectories fall onto one line, especially in the range of dimensionless distance from 4 to 3. This means the relative movement of the bubble pair is proportional to the temperature gradient and bubble size and it is inversely proportional to the viscosity of the oil. This result strongly suggests that the thermocapillary flow-based aggregation mechanism is correct. A value of q can be estimated by fitting the scaled data to Eq. [1]. A best fit value of q was obtained as q = 0.26 with a standard deviation of 0.03. Independent experimental results for q for a 0.5 mm radius bubble, give values of q in the range 0.11 to 0.23. The value of q obtained from solving the equations of motion reveals q has values in the range 0.23 - 0.30. Since the full scale of possible values of q is zero to one, the maximum deviation of independently determined values of q from the best fit value was 15% of this full scale. Thus reasonable quantitative agreement between theory and experiment has been obtained.

Kasumi, Hiroki↗