FPGA Mitigation Strategies for Critical Applications
No abstract available
Space radiation environments↗
SEARCH · Engineering Papers
Results for “Failing Safely”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Toward extreme high-temperature supercritical CO 2 power cycles: Leakage characterization of ceramic 3D-printed heat exchangers
We report future supercritical carbon dioxide (sCO 2 ) Brayton power cycles demand high-performance gas-to-gas heat exchangers (HXs) operating under extreme temperature and pressure conditions at which most existing superalloy materials fail to function safely. Ceramic HXs are deemed excellent candidates for advanced sCO 2 power plants as they can withstand high-temperature working environments. Particularly, ceramic 3D printing enables compact HX topologies employing complex and efficient heat transfer features. However, ceramic 3D-printed walls separating hot and cold flow streams are susceptible to a through-plane leakage inherent to a powder-based manufacturing process, including ceramic 3D printing. A potential leakage through ceramic separating walls poses a significant challenge in developing reliable ceramic 3D-printed HXs and could deteriorate thermal performance. In this study, various parameters, including feedstock slurry, 3D-printing direction, and post-processing conditions, are considered, for the first time, to characterize the argon gas leakage rate associated with alumina 3D-printed parts. Three 3D-printed ceramic structures of flat plates, curved tubes, and small-scale plate-and-frame HXs with various thicknesses are systematically studied to determine powder and ceramic 3D-printing conditions to eliminate the through-plane leakage. The results showed that an alumina 3D-printed plate with a thickness of 0.75 mm demonstrates a permeability of 6 x 10 -4 milli-darcy. An alumina 3D-printed tube with a wall thickness of 0.9 mm revealed a permeability of 9.6 x 10 -7 milli-darcy. Furthermore, leakage test results of functional 3D-printed modules showed a dependency on the 3D-printing direction. Particularly, alumina cell-scale HXs employing 1.5-mm-thick horizontal and vertical 3D-printed separating walls demonstrated impermeability and gas permeability of 7.2 x 10 -5 millidarcy, respectively. Insights gained from the present study facilitate the development of complex ceramic 3D-printed HXs and other balance of plant components for next-generation high-temperature high-pressure sCO 2 power cycles.
36 MATERIALS SCIENCE↗
Advanced flight control system study
A fly by wire flight control system architecture designed for high reliability includes spare sensor and computer elements to permit safe dispatch with failed elements, thereby reducing unscheduled maintenance. A methodology capable of demonstrating that the architecture does achieve the predicted performance characteristics consists of a hierarchy of activities ranging from analytical calculations of system reliability and formal methods of software verification to iron bird testing followed by flight evaluation. Interfacing this architecture to the Lockheed S-3A aircraft for flight test is discussed. This testbed vehicle can be expanded to support flight experiments in advanced aerodynamics, electromechanical actuators, secondary power systems, flight management, new displays, and air traffic control concepts.
Hartmann, G. L.↗
Practical jet flavour through NNLO
Abstract An infrared and collinear (IRC) safe definition of the partonic flavour of a jet is vital for precision predictions of quantum chromodynamics at colliders. Jet flavour definitions have been presented in the literature, but they are typically defined through modification of the jet algorithm to be sensitive to partonic flavour at every stage of the clustering. While this does ensure that the sum of flavours in a jet is IRC safe, a flavour-sensitive clustering procedure is difficult to apply to realistic data. We introduce a distinct and novel approach to jet flavour that can be applied to a collection of partons defined by any algorithm. Our definition of jet flavour is the sum of flavours of all partons that remain after Soft Drop grooming, reclustered with the "Image missing" <#comment/> algorithm. We prove that this prescription is IRC safe through next-to-next-to-leading order (NNLO), and so can interface with the most precise fixed-order calculations for jets available at present. We validate the IRC safety of this definition with numeric fixed-order codes and further show that jet flavour with Soft Drop reclustered with a generalised $$k_T$$ k T algorithm fails to be IRC safe at NNLO.
72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗
Roller Bearings Survive Loss Of Oil Supply
Bearing developed to enable high-speed machinery such as helicopter transmissions to continue to operate safely when oil pump fails. Bearing cup includes porous rib ring containing residual oil supply to lubricate rollers when external oil supply lost. Made by sintering powdered metal, pores of which hold emergency oil.
Kreider, G. E.↗
Design of Launch Abort System Thrust Profile and Concept of Operations
This paper describes how the Abort Motor thrust profile has been tailored and how optimizing the Concept of Operations on the Launch Abort System (LAS) of the Orion Crew Exploration Vehicle (CEV) aides in getting the crew safely away from a failed Crew Launch Vehicle (CLV). Unlike the passive nature of the Apollo system, the Orion Launch Abort Vehicle will be actively controlled, giving the program a more robust abort system with a higher probability of crew survival for an abort at all points throughout the CLV trajectory. By optimizing the concept of operations and thrust profile the Orion program will be able to take full advantage of the active Orion LAS. Discussion will involve an overview of the development of the abort motor thrust profile and the current abort concept of operations as well as their effects on the performance of LAS aborts. Pad Abort (for performance) and Maximum Drag (for separation from the Launch Vehicle) are the two points that dictate the required thrust and shape of the thrust profile. The results in this paper show that 95% success of all performance requirements is not currently met for Pad Abort. Future improvements to the current parachute sequence and other potential changes will mitigate the current problems, and meet abort performance requirements.
Litton, Daniel↗
The US space station and its electric power system
The United States has embarked on a major development program to have a space station operating in low earth orbit by the mid-1990s. This endeavor draws on the talents of NASA and most of the aerospace firms in the U.S. Plans are being pursued to include the participation of Canada, Japan, and the European Space Agency in the space station. From the start of the program these was a focus on the utilization of the space station for science, technology, and commercial endeavors. These requirements were utilized in the design of the station and manifest themselves in: pressurized volume; crew time; power availability and level of power; external payload accommodations; microgravity levels; servicing facilities; and the ability to grow and evolve the space station to meet future needs. President Reagan directed NASA to develop a permanently manned space station in his 1984 State of the Union message. Since then the definition phase was completed and the development phase initiated. A major subsystem of the space station is its 75 kW electric power system. The electric power system has characteristics similar to those of terrestrial power systems. Routine maintenance and replacement of failed equipment must be accomplished safely and easily and in a minimum time while providing reliable power to users. Because of the very high value placed on crew time it is essential that the power system operate in an autonomous mode to minimize crew time required. The power system design must also easily accommodate growth as the power demands by users are expected to grow. An overview of the U.S. space station is provided with special emphasis on its electrical power system.
Thomas, Ronald L.↗
Use of Drying Technologies for Resource Recovery from Solid Wastes and Brines
Long term storage of unprocessed biological wastes and human wastes can present major health issues and a loss of potential resources. Space vehicles and planetary habitats are typically resource-scarce or resource-limited environments for long-term human habitation. To-date, most of the resources will need to be supplied from Earth, but this may not be possible for long duration human exploration. Based on present knowledge, there is only very limited in-situ resources on planetary habitats. Hence, the opportunity to "live off the land" in a planetary habitat is limited. However, if we assume that wastes generated by human explorers are viewed as resources, there is great potential to utilize and recycle them, thereby reducing the requirements for supply Earth and enabling the "live off the land" exploration scenario. Technologies used for the recovery of resources from wastes should be reliable, safe, easy to operate, fail-proof, modular, automated and preferably multifunctional in being capable of handling mixed solid and liquid wastes. For a lunar habitat, energy does not appear to be the major driving factor amongst the technologies studied. Instead, reliability appears to be more important[1] . This paper reports studies to date on drying technologies to remove water from solid wastes and brines. Experimental performance data obtained for recovery water from wastes and brine are presented. Simplicity of operation of hardware and energy efficiency are discussed. Some improvements and modifications to hardware were performed. Hopefully, this information will assist in future efforts in the "downselection" of technologies for recovery of water and resources from solid wastes and brines.
Wignarajah, Kanapathipillai↗
Executive Summary of Propulsion on the Orion Abort Flight-Test Vehicles
The NASA Orion Flight Test Office was tasked with conducting a series of flight tests in several launch abort scenarios to certify that the Orion Launch Abort System is capable of delivering astronauts aboard the Orion Crew Module to a safe environment, away from a failed booster. The first of this series was the Orion Pad Abort 1 Flight-Test Vehicle, which was successfully flown on May 6, 2010 at the White Sands Missile Range in New Mexico. This paper provides a brief overview of the three propulsive subsystems used on the Pad Abort 1 Flight-Test Vehicle. An overview of the propulsive systems originally planned for future flight-test vehicles is also provided, which also includes the cold gas Reaction Control System within the Crew Module, and the Peacekeeper first stage rocket motor encased within the Abort Test Booster aeroshell. Although the Constellation program has been cancelled and the operational role of the Orion spacecraft has significantly evolved, lessons learned from Pad Abort 1 and the other flight-test vehicles could certainly contribute to the vehicle architecture of many future human-rated space launch vehicles.
Jones, Daniel S.↗
Executive Summary of Propulsion on the Orion Abort Flight-Test Vehicles
The NASA Orion Flight Test Office was tasked with conducting a series of flight tests in several launch abort scenarios to certify that the Orion Launch Abort System is capable of delivering astronauts aboard the Orion Crew Module to a safe environment, away from a failed booster. The first of this series was the Orion Pad Abort 1 Flight-Test Vehicle, which was successfully flown on May 6, 2010 at the White Sands Missile Range in New Mexico. This paper provides a brief overview of the three propulsive subsystems used on the Pad Abort 1 Flight-Test Vehicle. An overview of the propulsive systems originally planned for future flight-test vehicles is also provided, which also includes the cold gas Reaction Control System within the Crew Module, and the Peacekeeper first stage rocket motor encased within the Abort Test Booster aeroshell. Although the Constellation program has been cancelled and the operational role of the Orion spacecraft has significantly evolved, lessons learned from Pad Abort 1 and the other flight-test vehicles could certainly contribute to the vehicle architecture of many future human-rated space launch vehicles.
Jones, Daniel S.↗
Executive Summary of Propulsion on the Orion Abort Flight-Test Vehicles
The National Aeronautics and Space Administration Orion Flight Test Office was tasked with conducting a series of flight tests in several launch abort scenarios to certify that the Orion Launch Abort System is capable of delivering astronauts aboard the Orion Crew Module to a safe environment, away from a failed booster. The first of this series was the Orion Pad Abort 1 Flight-Test Vehicle, which was successfully flown on May 6, 2010 at the White Sands Missile Range in New Mexico. This report provides a brief overview of the three propulsive subsystems used on the Pad Abort 1 Flight-Test Vehicle. An overview of the propulsive systems originally planned for future flight-test vehicles is also provided, which also includes the cold gas Reaction Control System within the Crew Module, and the Peacekeeper first stage rocket motor encased within the Abort Test Booster aeroshell. Although the Constellation program has been cancelled and the operational role of the Orion spacecraft has significantly evolved, lessons learned from Pad Abort 1 and the other flight-test vehicles could certainly contribute to the vehicle architecture of many future human-rated space launch vehicles
Jones, Daniel S.↗
Modeling in the State Flow Environment to Support Launch Vehicle Verification Testing for Mission and Fault Management Algorithms in the NASA Space Launch System
Analysis methods and testing processes are essential activities in the engineering development and verification of the National Aeronautics and Space Administration's (NASA) new Space Launch System (SLS). Central to mission success is reliable verification of the Mission and Fault Management (M&FM) algorithms for the SLS launch vehicle (LV) flight software. This is particularly difficult because M&FM algorithms integrate and operate LV subsystems, which consist of diverse forms of hardware and software themselves, with equally diverse integration from the engineering disciplines of LV subsystems. M&FM operation of SLS requires a changing mix of LV automation. During pre-launch the LV is primarily operated by the Kennedy Space Center (KSC) Ground Systems Development and Operations (GSDO) organization with some LV automation of time-critical functions, and much more autonomous LV operations during ascent that have crucial interactions with the Orion crew capsule, its astronauts, and with mission controllers at the Johnson Space Center. M&FM algorithms must perform all nominal mission commanding via the flight computer to control LV states from pre-launch through disposal and also address failure conditions by initiating autonomous or commanded aborts (crew capsule escape from the failing LV), redundancy management of failing subsystems and components, and safing actions to reduce or prevent threats to ground systems and crew. To address the criticality of the verification testing of these algorithms, the NASA M&FM team has utilized the State Flow environment6 (SFE) with its existing Vehicle Management End-to-End Testbed (VMET) platform which also hosts vendor-supplied physics-based LV subsystem models. The human-derived M&FM algorithms are designed and vetted in Integrated Development Teams composed of design and development disciplines such as Systems Engineering, Flight Software (FSW), Safety and Mission Assurance (S&MA) and major subsystems and vehicle elements such as Main Propulsion Systems (MPS), boosters, avionics, Guidance, Navigation, and Control (GN&C), Thrust Vector Control (TVC), liquid engines, and the astronaut crew office. Since the algorithms are realized using model-based engineering (MBE) methods from a hybrid of the Unified Modeling Language (UML) and Systems Modeling Language (SysML), SFE methods are a natural fit to provide an in depth analysis of the interactive behavior of these algorithms with the SLS LV subsystem models. For this, the M&FM algorithms and the SLS LV subsystem models are modeled using constructs provided by Matlab which also enables modeling of the accompanying interfaces providing greater flexibility for integrated testing and analysis, which helps forecast expected behavior in forward VMET integrated testing activities. In VMET, the M&FM algorithms are prototyped and implemented using the same C++ programming language and similar state machine architectural concepts used by the FSW group. Due to the interactive complexity of the algorithms, VMET testing thus far has verified all the individual M&FM subsystem algorithms with select subsystem vendor models but is steadily progressing to assessing the interactive behavior of these algorithms with LV subsystems, as represented by subsystem models. The novel SFE applications has proven to be useful for quick look analysis into early integrated system behavior and assessment of the M&FM algorithms with the modeled LV subsystems. This early MBE analysis generates vital insight into the integrated system behaviors, algorithm sensitivities, design issues, and has aided in the debugging of the M&FM algorithms well before full testing can begin in more expensive, higher fidelity but more arduous environments such as VMET, FSW testing, and the Systems Integration Lab7 (SIL). SFE has exhibited both expected and unexpected behaviors in nominal and off nominal test cases prior to full VMET testing. In many findings, these behavioral characteristics were used to correct the M&FM algorithms, enable better test coverage, and develop more effective test cases for each of the LV subsystems. This has improved the fidelity of testing and planning for the next generation of M&FM algorithms as the SLS program evolves from non-crewed to crewed flight, impacting subsystem configurations and the M&FM algorithms that control them. SFE analysis has improved robustness and reliability of the M&FM algorithms by revealing implementation errors and documentation inconsistencies. It is also improving planning efficiency for future VMET testing of the M&FM algorithms hosted in the LV flight computers, further reducing risk for the SLS launch infrastructure, the SLS LV, and most importantly the crew.
Trevino, Luis↗
Propulsion Overview of the Orion Pad Abort 1 (PA-1) Flight-Test Vehicle
The NASA Orion Flight Test Office was tasked with conducting a series of flight tests in several launch abort scenarios to certify that the Orion Launch Abort System is capable of delivering astronauts aboard the Orion Crew Module to a safe environment, away from a failed booster. The first of this series was the Orion Pad Abort 1 Flight-Test Vehicle, which was successfully flown on May 6, 2010 at the White Sands Missile Range in New Mexico. This presentation provides a concise overview of the three propulsive subsystems used on the Pad Abort 1 Flight-Test Vehicle. Although the Constellation program has been cancelled and the operational role of the Orion spacecraft has significantly evolved, lessons learned from Pad Abort 1 could certainly contribute to the vehicle architecture of many future human-rated space launch vehicles
Jones, Daniel S.↗
Plume spectrometry for liquid rocket engine health monitoring
An investigation of Space Shuttle Main Engine (SSME) testing failures identified optical events which appeared to be precursors of those failures. A program was therefore undertaken to detect plume trace phenomena characteristic of the engine and to design a monitoring system, responsive to excessive activity in the plume, capable of delivering a warning of an anomalous condition. By sensing the amount of extraneous material entrained in the plume and considering engine history, it may be possible to identify wearing of failing components in time for a safe shutdown and thus prevent a catastrophic event. To investigate the possibilities of safe shutdown and thus prevent a monitor to initiate the shutdown procedure, a large amount of plume data were taken from SSME firings using laboratory instrumentation. Those data were used to design a more specialized instrument dedicated to rocket plume diagnostics. The spectral wavelength range of the baseline data was about 220 nanometers (nm) to 15 micrometer with special attention given to visible and near UV. The data indicates that a satisfactory design will include a polychromator covering the range of 250 nM to 1000 nM, along with a continuous coverage spectrometer, each having a resolution of at least 5A degrees. The concurrent requirements for high resolution and broad coverage are normally at odds with one another in commercial instruments, therefore necessitating the development of special instrumentation. The design of a polychromator is reviewed herein, with a detailed discussion of the continuous coverage spectrometer delayed to a later forum. The program also requires the development of applications software providing detection, variable background discrimination, noise reduction, filtering, and decision making based on varying historical data.
Powers, William T.↗
A Safety Index and Method for Flightdeck Evaluation
If our goal is to improve safety through machine, interface, and training design, then we must define a metric of flightdeck safety that is usable in the design process. Current measures associated with our notions of "good" pilot performance and ultimate safety of flightdeck performance fail to provide an adequate index of safe flightdeck performance for design evaluation purposes. The goal of this research effort is to devise a safety index and method that allows us to evaluate flightdeck performance holistically and in a naturalistic experiment. This paper uses Reason's model of accident causation (1990) as a basis for measuring safety, and proposes a relational database system and method for 1) defining a safety index of flightdeck performance, and 2) evaluating the "safety" afforded by flightdeck performance for the purpose of design iteration. Methodological considerations, limitations, and benefits are discussed as well as extensions to this work.
Latorella, Kara A.↗
Case Study: Test Results of a Tool and Method for In-Flight, Adaptive Control System Verification on a NASA F-15 Flight Research Aircraft
Adaptive control technologies that incorporate learning algorithms have been proposed to enable autonomous flight control and to maintain vehicle performance in the face of unknown, changing, or poorly defined operating environments [1-2]. At the present time, however, it is unknown how adaptive algorithms can be routinely verified, validated, and certified for use in safety-critical applications. Rigorous methods for adaptive software verification end validation must be developed to ensure that. the control software functions as required and is highly safe and reliable. A large gap appears to exist between the point at which control system designers feel the verification process is complete, and when FAA certification officials agree it is complete. Certification of adaptive flight control software verification is complicated by the use of learning algorithms (e.g., neural networks) and degrees of system non-determinism. Of course, analytical efforts must be made in the verification process to place guarantees on learning algorithm stability, rate of convergence, and convergence accuracy. However, to satisfy FAA certification requirements, it must be demonstrated that the adaptive flight control system is also able to fail and still allow the aircraft to be flown safely or to land, while at the same time providing a means of crew notification of the (impending) failure. It was for this purpose that the NASA Ames Confidence Tool was developed [3]. This paper presents the Confidence Tool as a means of providing in-flight software assurance monitoring of an adaptive flight control system. The paper will present the data obtained from flight testing the tool on a specially modified F-15 aircraft designed to simulate loss of flight control faces.
Jacklin, Stephen A.↗
Intelsat VI (F-3) reboost mission
As the result of a launch vehicle malfunction, the Intelsat VI(F-3) communications satellite failed to achieve geostationary orbit. The satellite is presently safe in a low-earth orbit pending a NASA Space Shuttle Program (SSP) mission to retrieve it and attach a solid rocket. This paper describes the recovery hardware design and the overall mission efforts undertaken to recover and reboost the satellite.
Virdee, L.↗
Improving Slip Prediction on Mars Using Thermal Inertia Measurements
Rovers operating on Mars have been delayed, diverted, and trapped by loose granular materials. Vision-based mobility prediction approaches often fail because hazardous sand is difficult to distinguish from safe sand based on surface appearance alone. Unlike surface appearance, the thermal inertia of terrain is directly correlated to the same geophysical properties that control slip. This paper presents a quantitative analysis showing that considering thermal inertia improves rover slip prediction on Mars using in-situ data from the Curiosity rover. Thermal inertia is estimated for each slip measurement in sand using both on-board and orbital instruments. Slip models are learned using a mixture of experts approach where the experts are identified using thermal inertia. Two-expert models are compared to a single-expert, vision-only model to show that slip predictions are improved by separating high-slip, low thermal inertia sand from low-slip, high thermal inertia sand. These results support the hypothesis that the consideration of thermal inertia improves mobility estimates for rovers on Mars.
Nesnas, Issa A.↗