Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure detection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Voter-comparator-switch optimization study

The design optimization and simulation effort of the voter-comparator switch (VCS) element are described. The VCS is an adaptive voter element that performs failure detection and reconfiguration function in a computer system designed to tolerate any three single failures in a fail operational fail operational fail safe manner. Detailed logic equations were developed and the design was evaluated and refined using a logic level fault simulator.

Jurison, J.↗

Nondestructive evaluation of structural ceramics by photoacoustic microscopy

A photoacoustic microscopy (PAM) digital imaging system was developed and utilized to characterize silicon nitride material at the various stages of the ceramic fabrication process. Correlation studies revealed that photoacoustic microscopy detected failure initiating defects in substantially more specimens than microradiography and ultrasonic techniques. Photoacoustic microscopy detected 10 to 100 micron size surface and subsurface pores and inclusions, respectively, up to 80 microns below the interrogating surface in machined sintered silicon nitride. Microradiography detected 50 micron diameter fracture controlling pores and inclusions. Subsurface holes were detected up to a depth of 570 microns and 1.00 mm in sintered silicon nitride and silicon carbide, respectively. Seeded voids of 20 to 30 micron diameters at the surface and 50 microns below the interrogating surface were detected by photoacoustic microscopy and microradiography with 1 percent X-ray thickness sensitivity. Tight surface cracks of 96 micron length x 48 micron depth were detected by photoacoustic microscopy. PAM volatilized and removed material in the green state which resulted in linear shallow microcracks after sintering. This significantly limits the use of PAM as an in-process NDE technique.

Khandelwal, Pramod K.↗

Dual redundant sensor FDI techniques applied to the NASA F8C DFBW aircraft

An onboard failure detection and identification (FDI) technique for dual redundant sensors on the NASA F8C digital fly-by-wire (DFBW) aircraft is presented. The failure of one of a pair of sensors of the same type is detected by a direct redundancy trigger which observes the difference between the outputs of these two sensors. Identification of the failed sensor is accomplished utilizing the analytic redundancy that exists as kinematic and functional relationships among the variables being measured by dissimilar instruments. In addition, identification of generic failures, common to both instruments of a given type, is accomplished by using a time trigger to periodically initiate analytic redundancy failure identification tests for individual sensors. The basic form of these tests is the comparison of the measurement of a variable using the suspect instrument with another measurement of the same variable obtained using other instrument types.

Desai, M. N.↗

The design plan of a VLSI single chip (255, 223) Reed-Solomon decoder

The very large-scale integration (VLSI) architecture of a single chip (255, 223) Reed-Solomon decoder for decoding both errors and erasures is described. A decoding failure detection capability is also included in this system so that the decoder will recognize a failure to decode instead of introducing additional errors. This could happen whenever the received word contains too many errors and erasures for the code to correct. The number of transistors needed to implement this decoder is estimated at about 75,000 if the delay for received message is not included. This is in contrast to the older transform decoding algorithm which needs about 100,000 transistors. However, the transform decoder is simpler in architecture than the time decoder. It is therefore possible to implement a single chip (255, 223) Reed-Solomon decoder with today's VLSI technology. An implementation strategy for the decoder system is presented. This represents the first step in a plan to take advantage of advanced coding techniques to realize a 2.0 dB coding gain for future space missions.

Hsu, I. S.↗

On the design of fault-tolerant robotic manipulator systems

Robotic systems are finding increasing use in space applications. Many of these devices are going to be operational on board the Space Station Freedom. Fault tolerance has been deemed necessary because of the criticality of the tasks and the inaccessibility of the systems to maintenance and repair. Design for fault tolerance in manipulator systems is an area within robotics that is without precedence in the literature. In this paper, we will attempt to lay down the foundations for such a technology. Design for fault tolerance demands new and special approaches to design, often at considerable variance from established design practices. These design aspects, together with reliability evaluation and modeling tools, are presented. Mechanical architectures that employ protective redundancies at many levels and have a modular architecture are then studied in detail. Once a mechanical architecture for fault tolerance has been derived, the chronological stages of operational fault tolerance are investigated. Failure detection, isolation, and estimation methods are surveyed, and such methods for robot sensors and actuators are derived. Failure recovery methods are also presented for each of the protective layers of redundancy. Failure recovery tactics often span all of the layers of a control hierarchy. Thus, a unified framework for decision-making and control, which orchestrates both the nominal redundancy management tasks and the failure management tasks, has been derived. The well-developed field of fault-tolerant computers is studied next, and some design principles relevant to the design of fault-tolerant robot controllers are abstracted. Conclusions are drawn, and a road map for the design of fault-tolerant manipulator systems is laid out with recommendations for a 10 DOF arm with dual actuators at each joint.

Tesar, Delbert↗

The role of modern control theory in the design of controls for aircraft turbine engines

The development, applications, and current research in modern control theory (MCT) are reviewed, noting the importance for fuel-efficient operation of turbines with variable inlet guide vanes, compressor stators, and exhaust nozzle area. The evolution of multivariable propulsion control design is examined, noting a basis in a matrix formulation of the differential equations defining the process, leading to state space formulations. Reports and papers which appeared from 1970-1982 which dealt with problems in MCT applications to turbine engine control design are outlined, including works on linear quadratic regulator methods, frequency domain methods, identification, estimation, and model reduction, detection, isolation, and accommodation, and state space control, adaptive control, and optimization approaches. Finally, NASA programs in frequency domain design, sensor failure detection, computer-aided control design, and plant modeling are explored

Zeller, J.↗

Health management and controls for earth to orbit propulsion systems

Fault detection and isolation for advanced rocket engine controllers are discussed focusing on advanced sensing systems and software which significantly improve component failure detection for engine safety and health management. Aerojet's Space Transportation Main Engine controller for the National Launch System is the state of the art in fault tolerant engine avionics. Health management systems provide high levels of automated fault coverage and significantly improve vehicle delivered reliability and lower preflight operations costs. Key technologies, including the sensor data validation algorithms and flight capable spectrometers, have been demonstrated in ground applications and are found to be suitable for bridging programs into flight applications.

Bickford, R. L.↗

J-2X Abort System Development

The J-2X is an expendable liquid hydrogen (LH2)/liquid oxygen (LOX) gas generator cycle rocket engine that is currently being designed as the primary upper stage propulsion element for the new NASA Ares vehicle family. The J-2X engine will contain abort logic that functions as an integral component of the Ares vehicle abort system. This system is responsible for detecting and responding to conditions indicative of impending Loss of Mission (LOM), Loss of Vehicle (LOV), and/or catastrophic Loss of Crew (LOC) failure events. As an earth orbit ascent phase engine, the J-2X is a high power density propulsion element with non-negligible risk of fast propagation rate failures that can quickly lead to LOM, LOV, and/or LOC events. Aggressive reliability requirements for manned Ares missions and the risk of fast propagating J-2X failures dictate the need for on-engine abort condition monitoring and autonomous response capability as well as traditional abort agents such as the vehicle computer, flight crew, and ground control not located on the engine. This paper describes the baseline J-2X abort subsystem concept of operations, as well as the development process for this subsystem. A strategy that leverages heritage system experience and responds to an evolving engine design as well as J-2X specific test data to support abort system development is described. The utilization of performance and failure simulation models to support abort system sensor selection, failure detectability and discrimination studies, decision threshold definition, and abort system performance verification and validation is outlined. The basis for abort false positive and false negative performance constraints is described. Development challenges associated with information shortfalls in the design cycle, abort condition coverage and response assessment, engine-vehicle interface definition, and abort system performance verification and validation are also discussed.

Santi, Louis M.↗

Comprehension and retrieval of failure cases in airborne observatories

This paper describes research dealing with the computational problem of analyzing and repairing failures of electronic and mechanical systems of telescopes in NASA's airborne observatories, such as KAO (Kuiper Airborne Observatory) and SOFIA (Stratospheric Observatory for Infrared Astronomy). The research has resulted in the development of an experimental system that acquires knowledge of failure analysis from input text, and answers questions regarding failure detection and correction. The system's design builds upon previous work on text comprehension and question answering, including: knowledge representation for conceptual analysis of failure descriptions, strategies for mapping natural language into conceptual representations, case-based reasoning strategies for memory organization and indexing, and strategies for memory search and retrieval. These techniques have been combined into a model that accounts for: (a) how to build a knowledge base of system failures and repair procedures from descriptions that appear in telescope-operators' logbooks and FMEA (failure modes and effects analysis) manuals; and (b) how to use that knowledge base to search and retrieve answers to questions about causes and effects of failures, as well as diagnosis and repair procedures. This model has been implemented in FANSYS (Failure ANalysis SYStem), a prototype text comprehension and question answering program for failure analysis.

Alvarado, Sergio J.↗

Development and testing of advanced redundancy management methods for the F-8 DFBW aircraft

A reliable aircraft sensor failure detection and identification (FDI) technique is presented. The technique exploits the kinematic and dynamic relationships that exist between variables measured by dissimilar sensors to identify failures in the sensors. The method is applied to management of dual redundant sensors on the NASA F-8 digital fly-by-wire (DFBW) research aircraft.

Deyst, J.↗

Reliability issues in active control of large flexible space structures

Efforts in this reporting period were centered on four research tasks: design of failure detection filters for robust performance in the presence of modeling errors, design of generalized parity relations for robust performance in the presence of modeling errors, design of failure sensitive observers using the geometric system theory of Wonham, and computational techniques for evaluation of the performance of control systems with fault tolerance and redundancy management

Vandervelde, W. E.↗

Evaluation of the F-8 DFBW analytic redundancy sensor FDI algorithm using telemetry data

In this paper we present a reliable technique for failure detection and identification (FDI) for dual redundant flight control sensors aboard the NASA F-8 digital fly-by-wire (DFBW) aircraft, and we discuss the successful application of the technique to identifying failures injected on test flight telemetry data. The technique exploits the analytic redundancy which exists as relationships among variables being measured by dissimilar instruments. With straightforward modification the technique may be extended to provide failure monitoring of a single remaining sensor after the identified failure of its companion sensor.

Deckert, J. C.↗

The implementation and use of Ada on distributed systems with reliability requirements

The issues involved in the use of the programming language Ada on distributed systems are discussed. The effects of Ada programs on hardware failures such as loss of a processor are emphasized. It is shown that many Ada language elements are not well suited to this environment. Processor failure can easily lead to difficulties on those processors which remain. As an example, the calling task in a rendezvous may be suspended forever if the processor executing the serving task fails. A mechanism for detecting failure is proposed and changes to the Ada run time support system are suggested which avoid most of the difficulties. Ada program structures are defined which allow programs to reconfigure and continue to provide service following processor failure.

Reynolds, P. F.↗

Multi-sensor analysis techniques for SSME safety monitoring

Two algorithms were developed which utilized multi-sensor analysis techniques to complement the current Space Shuttle Main Engine (SSME) safety monitoring system. The first algorithm analyzed the accumulative error between actual and predicted values of the engine parameter set, while the second algorithm combined these error terms into a response pattern and correlated each pattern with a standard pattern. These algorithms were applied to twelve SSME anomalous test firings and were found to produce improved failure detection times in eight of those twelve compared to the current engine safety monitoring system. Of the eight detected anomalous test firings, the first algorithm detected all eight, while the second algorithm detected seven of the eight. No false alarms were indicated by either algorithm for twelve nominal test firings. An initial parametric study of these algorithms for optimized parameter selection is presented and algorithm robustness to sensor failure is demonstrated.

Maul, William A., III↗

Advanced Self-Calibrating, Self-Repairing Data Acquisition System

An improved self-calibrating and self-repairing Data Acquisition System (DAS) for use in inaccessible areas, such as onboard spacecraft, and capable of autonomously performing required system health checks, failure detection. When required, self-repair is implemented utilizing a "spare parts/tool box" system. The available number of spare components primarily depends upon each component's predicted reliability which may be determined using Mean Time Between Failures (MTBF) analysis. Failing or degrading components are electronically removed and disabled to reduce power consumption, before being electronically replaced with spare components.

Pedro J Medelius↗

Telescope protection algorithm for the Space Infrared Telescope Facility

This paper presents a proposed on-board Telescope Protection Algorithm (TPA) for the Space Infrared Telescope Facility (SIRTF). This TPA consists of hardware and software capable of performing both fail-operational and fail-safe modes of operation. In the fail-operational mode, each ephemeris load and slew/dwell command sequence is checked on-board before use. The slew command monitor detects unallowable slew/dwell commands and transfers control to an algorithm which slews to and maintains a safe telescope orientation while preserving precise attitude determination and control. This fail-operational mode is also given the authority to autonomously restart the slew/dwell sequence at a point beyond the faulty command. The fail-safe system consists of software and hardware which detects impending earth, moon, or sun avoidance zone violations and activates a backup hardware safe hold mode. The subject TPA and relevant sensor complement were designed for the SIRTF mission; however, this system can easily be used as a basis for failure detection and correction in a wide range of other missions.

Class, B. F.↗

Phase substitution of spare converter for a failed one of parallel phase staggered converters

Failure detection and substitution of a spare module is provided in a system having a plurality of phase staggered modules connected in parallel to deliver regulated voltage from an unregulated source. Phase control signals applied to the active converter modules are applied to the spare module through NOR gates associated with and disabled by the power output of respective modules such that failure of any one enables its phase control signal to be applied to the spare module, thus controlling the spare module to operate in the phase position of the failed module. A NAND gate detects when any one active module fails and enables a gate in the spare module, thus activating the spare module.

Mclyman, W. T.↗

Study of fault tolerant software technology for dynamic systems

The major aim of this study is to investigate the feasibility of using systems-based failure detection isolation and compensation (FDIC) techniques in building fault-tolerant software and extending them, whenever possible, to the domain of software fault tolerance. First, it is shown that systems-based FDIC methods can be extended to develop software error detection techniques by using system models for software modules. In particular, it is demonstrated that systems-based FDIC techniques can yield consistency checks that are easier to implement than acceptance tests based on software specifications. Next, it is shown that systems-based failure compensation techniques can be generalized to the domain of software fault tolerance in developing software error recovery procedures. Finally, the feasibility of using fault-tolerant software in flight software is investigated. In particular, possible system and version instabilities, and functional performance degradation that may occur in N-Version programming applications to flight software are illustrated. Finally, a comparative analysis of N-Version and recovery block techniques in the context of generic blocks in flight software is presented.

Caglayan, A. K.↗