SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

All sources NASA NTRS DOE OSTI

NASA NTRS2011

Water Impact Prediction Tool for Recoverable Rockets

Reusing components from a rocket launch can be cost saving. NASA's space shuttle system has reusable components that return to the Earth and impact the ocean. A primary example is the Space Shuttle Solid Rocket Booster (SRB) that descends on parachutes to the Earth after separation and impacts the ocean. Water impact generates significant structural loads that can damage the booster, so it is important to study this event in detail in the design of the recovery system. Some recent examples of damage due to water impact include the Ares I-X First Stage deformation as seen in Figure 1 and the loss of the SpaceX Falcon 9 First Stage.To ensure that a component can be recovered or that the design of the recovery system is adequate, an adequate set of structural loads is necessary for use in failure assessments. However, this task is difficult since there are many conditions that affect how a component impacts the water and the resulting structural loading that a component sees. These conditions include the angle of impact with respect to the water, the horizontal and vertical velocities, the rotation rate, the wave height and speed, and many others. There have been attempts to simulate water impact. One approach is to analyze water impact using explicit finite element techniques such as those employed by the LS-Dyna tool [1]. Though very detailed, this approach is time consuming and would not be suitable for running Monte Carlo or optimization analyses. The purpose of this paper is to describe a multi-body simulation tool that runs quickly and that captures the environments a component might see. The simulation incorporates the air and water interaction with the component, the component dynamics (i.e. modes and mode shapes), any applicable parachutes and lines, the interaction of winds and gusts, and the wave height and speed. It is capable of quickly conducting Monte Carlo studies to better capture the environments and genetic algorithm optimizations to reproduce a flight.

Rooker, William↗

NASA NTRS1987

Status of the NASA continuing investigation of catastrophic balloon failures

The findings and status of the continuing NASA investigation of catastrophic balloon failures, conducted following the adoption in 1984 of a new material specification, are reported on. Current efforts include a microstructual analysis, balloon stress studies, and seal investigations. Attention is given to the Recovery Plan, a program to demonstrate the use of the existing film and to develop an improved film is discussed. No specific cause for the increased occurrence of catastrophic failures has been identified.

Needleman, H. C.↗

NASA NTRS1957

Concluding Report of Free-Spinning, Tumbling, and Recovery Characteristics of a 1/18-Scale Model of the Ryan X-13 Airplane, Coord. No. AF-199

An investigation has been completed in the Langley 20-foot free-spinning tunnel on a l/18-scale model of the Ryan X-13 airplane to determine its spin, recovery, and tumbling characteristics, and to determine the minimum altitude from which a belly landing could be made in case of power failure in hovering flight. Model spin tests were conducted with and without simulated engine rotation. Tests without simulated engine rotation indicated two types of spins: one, a slightly oscillatory flat spin; and the other, a violently oscillatory spin. Tests with simulated engine rotation indicated that spins to the left were fast rotating and steep and those to the right were slow rotating and flat. The optimum technique for recovery is reversal of the rudder to against the spin and simultaneous movement of the ailerons to full with the spin followed by movement of the elevators to neutral after the spin rotation ceases. Tumbling tests made on the model indicated that although the Ryan X-13 airplane will not tumble in the ordinary sense (end-over-end pitching motion), it may instead tend to enter a wild gyrating'motion. Tests made to simulate power failure in hovering flight by dropping the model indicated that the model entered what appeared to be a right spin. An attempt should be made to stop this motion immediately by moving the rudder to oppose the rotation (left pedal), moving the ailerons to with the spin (stick right), and moving the stick forward after the spin rotation ceases to obtain flying speed for pullout. The minimum altitude required for a belly landing in case of power failure in hovering flight was indicated to be about 4,200 feet.

Bowman, James S., Jr.↗

NASA NTRS1984

Design and evaluation of a fault-tolerant multiprocessor using hardware recovery blocks

Attention is given to the design and evaluation of a fault-tolerant multiprocessor whose rollback recovery mechanism is based on hardware recovery blocks constructed by consecutive state-save operations and several state-save units in every processor and memory module. Upon detection of failure, the multiprocessor reconfigures itself to replace the faulty module and the process originally assigned to the faulty module retreats to one of the previously saved states, in order to resume fault-free execution. A mathematical model is proposed for the calculation of multistep rollback recovery coverage and the risk of restart when all available saved states are exhausted. The mean and the variance of task execution time with the occurrence of rollbacks and/or restarts are evaluated.

Lee, Y.-H.↗

NASA NTRS1990

NASA systems autonomy demonstration project: Advanced automation demonstration of Space Station Freedom thermal control system

The NASA Systems Autonomy Demonstration Project (SADP) was initiated in response to Congressional interest in Space station automation technology demonstration. The SADP is a joint cooperative effort between Ames Research Center (ARC) and Johnson Space Center (JSC) to demonstrate advanced automation technology feasibility using the Space Station Freedom Thermal Control System (TCS) test bed. A model-based expert system and its operator interface were developed by knowledge engineers, AI researchers, and human factors researchers at ARC working with the domain experts and system integration engineers at JSC. Its target application is a prototype heat acquisition and transport subsystem of a space station TCS. The demonstration is scheduled to be conducted at JSC in August, 1989. The demonstration will consist of a detailed test of the ability of the Thermal Expert System to conduct real time normal operations (start-up, set point changes, shut-down) and to conduct fault detection, isolation, and recovery (FDIR) on the test article. The FDIR will be conducted by injecting ten component level failures that will manifest themselves as seven different system level faults. Here, the SADP goals, are described as well as the Thermal Control Expert System that has been developed for demonstration.

Dominick, Jeffrey↗

DOE OSTI2020

An Improved Transmission Switching Algorithm for Managing Post-(N-1) Contingencies in Electricity Networks

In this presentation, we detail the shortcomings of existing transmission switching (TS) methodologies for preventing post-contingency loss of load in wide area electric power networks. Following that, we present a bi-level algorithm as an improvement to the state of the art. We show proof-of-concept level results that indicate computational viability, fast solutions, and the ability to pick the same best candidate as non computationally viable methods. Further, our method also minimizes load shedding after the contingency, thus enhancing the reliability and security of electricity supply. We also include a futuristic scenario of increased renewables and decreased natural gas sourced generators to show promising results. We grant permission for our presentation to be recorded and uploaded by the conference organizers.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2021

Risk-averse optimization for resilience enhancement of complex engineering systems under uncertainties

With the growth of complexity and extent, large scale interconnected network systems, e.g., transportation networks or infrastructure networks, become more vulnerable to external disturbances. Hence, managing potential disruptive events during the design, operating, and recovery phase of an engineered system and therefore improving the system’s resilience is an important yet challenging task. Here, to ensure system resilience after the occurrence of failure events, this study proposes a mixed-integer linear programming (MILP) based restoration framework using heterogeneous dispatchable agents. The scenario-based stochastic optimization (SO) technique is adopted to deal with the inherent uncertainties imposed on the recovery process from nature. Moreover, different from conventional SO using deterministic equivalent formulations, the CVaR risk measure is implemented for this study because of the temporal sparsity of the decision making in applications such as the recovery from extreme events. The resulting restoration framework involves a large-scale MILP problem and thus an adequate decomposition technique i.e. modified Lagrangian dual decomposition, is also employed to achieve tractable computational complexity. Case study results based on the IEEE 37-bus test feeder demonstrate the benefits of using the proposed framework for resilience improvement as well as the advantages of adopting SO formulations.

42 ENGINEERING↗

NASA NTRS1994

Software fault tolerance in computer operating systems

This chapter provides data and analysis of the dependability and fault tolerance for three operating systems: the Tandem/GUARDIAN fault-tolerant system, the VAX/VMS distributed system, and the IBM/MVS system. Based on measurements from these systems, basic software error characteristics are investigated. Fault tolerance in operating systems resulting from the use of process pairs and recovery routines is evaluated. Two levels of models are developed to analyze error and recovery processes inside an operating system and interactions among multiple instances of an operating system running in a distributed environment. The measurements show that the use of process pairs in Tandem systems, which was originally intended for tolerating hardware faults, allows the system to tolerate about 70% of defects in system software that result in processor failures. The loose coupling between processors which results in the backup execution (the processor state and the sequence of events occurring) being different from the original execution is a major reason for the measured software fault tolerance. The IBM/MVS system fault tolerance almost doubles when recovery routines are provided, in comparison to the case in which no recovery routines are available. However, even when recovery routines are provided, there is almost a 50% chance of system failure when critical system jobs are involved.

Iyer, Ravishankar K.↗

NASA NTRS1997

Measurement and Analysis of Failures in Computer Systems

This thesis presents a study of software failures spanning several different releases of Tandem's NonStop-UX operating system running on Tandem Integrity S2(TMR) systems. NonStop-UX is based on UNIX System V and is fully compliant with industry standards, such as the X/Open Portability Guide, the IEEE POSIX standards, and the System V Interface Definition (SVID) extensions. In addition to providing a general UNIX interface to the hardware, the operating system has built-in recovery mechanisms and audit routines that check the consistency of the kernel data structures. The analysis is based on data on software failures and repairs collected from Tandem's product report (TPR) logs for a period exceeding three years. A TPR log is created when a customer or an internal developer observes a failure in a Tandem Integrity system. This study concentrates primarily on those TPRs that report a UNIX panic that subsequently crashes the system. Approximately 200 of the TPRs fall into this category. Approximately 50% of the failures reported are from field systems, and the rest are from the testing and development sites. It has been observed by Tandem developers that fewer cases are encountered from the field than from the test centers. Thus, the data selection mechanism has introduced a slight skew.

Thakur, Anshuman↗

NASA NTRS1985

Study of fault tolerant software technology for dynamic systems

The major aim of this study is to investigate the feasibility of using systems-based failure detection isolation and compensation (FDIC) techniques in building fault-tolerant software and extending them, whenever possible, to the domain of software fault tolerance. First, it is shown that systems-based FDIC methods can be extended to develop software error detection techniques by using system models for software modules. In particular, it is demonstrated that systems-based FDIC techniques can yield consistency checks that are easier to implement than acceptance tests based on software specifications. Next, it is shown that systems-based failure compensation techniques can be generalized to the domain of software fault tolerance in developing software error recovery procedures. Finally, the feasibility of using fault-tolerant software in flight software is investigated. In particular, possible system and version instabilities, and functional performance degradation that may occur in N-Version programming applications to flight software are illustrated. Finally, a comparative analysis of N-Version and recovery block techniques in the context of generic blocks in flight software is presented.

Caglayan, A. K.↗

NASA NTRS1992

Derivation and application of hard deadlines for real-time control systems

The computation-time delay in the feedback controller of a real-time control system may cause failure to update the control input during one or more sampling periods. If this delay exceeds a certain limit called a hard deadline, either the necessary conditions for system stability are violated or the system leaves the allowed state-space. In such a case a dynamic failure is said to occur to the system. A method for calculating the hard deadlines in linear time-invariant control systems by considering system stability and the allowed state-space is presented. To derive necessary conditions for (asymptotic) system stability, the state difference equation is modified based on an assumed maximum delay and the probability distribution of delays whose magnitudes are less than, or equal to, the assumed maximum delay. Moreover, the allowed state-space - which is derived from given input and state constraints - is used to calculate the hard deadline as a function of time and the system state. A one-shot delay model in which a single event causes a dynamic failure is also considered. The knowledge of hard deadline is then applied to the design of error recovery in a triple modular redundant (TMR) controller computer.

Shin, Kang G.↗

NASA NTRSDate not supplied

Extending ISS Life Beyond 2030

The United States On-orbit Segment (USOS) of the International Space Station (ISS) was designed to meet a 15-year on-orbit life. Since the first hardware was launched in late 1998, the ISS would have reached its end of life in 2013. With the realization that the ISS would be needed well into the next decade, and beyond, a multi-disciplinary effort was undertaken to extend the ISS’ life through 2028 and to show that further extension to 2040 and beyond is not only feasible but achievable. Currently, NASA and the ISS international partners have agreed to extend its operations through 2030. This collaborative effort ensures that the ISS will continue to serve as a hub for scientific research, international cooperation, and educational endeavors for the next decade. Maintaining a continuous human presence in Low Earth Orbit (LEO) is desirable for testing new LEO, lunar, and deep-space technologies; conducting scientific research in micro-gravity for the benefit of life on Earth; and enabling a seamless transition of capabilities to one or more commercially owned and operated destinations. This paper provides an overview of the ISS life extension project with a particular focus on the analytical approach used to assess the primary structure. This analytical approach includes future operations planning, critical location screening, on-orbit dynamic load simulation, on-orbit optical property degradation studies, on-orbit thermal analyses, spectra generation, crack model idealization, fracture analyses, and post processing. Structural life results and identification of the most critical on-orbit events are presented. Also addressed are life extension approaches for other affected sub-systems, including: 1. Secondary Structure. 2. Materials. Evaluations consider environmental exposure to atomic oxygen, ionizing and gamma radiation, fluids, etc. Life limited materials, wear, and usage effects are also considered. 3. Environmental Control and Life Support Systems, including oxygen supply and generation, water recovery and management, and regenerative hardware. Evaluations are performed to determine which hardware can be run to failure and which are assessed for life extension. 4. Electrical power system. ISS is powered by eight channels of solar arrays and an electrical energy storage system providing 357 kWh power. Power generation and balance analyses are performed considering hardware degradation and increasing power demand. 5. Logistics and maintenance. Analyses are performed to determine critical spares required to maintain functionality. Consideration is given to supply chain health, obsolescence issues, onboard stowage availability, and up-mass capability. The successful life extension results have built confidence to safely operate, maintain and enhance the ISS well beyond the current decade. Extending the operational life of the ISS maintains an international presence in LEO and serves to avoid a gap in capability necessary to fulfill the exploration and research needs of NASA, international partners, and industry without interruption until a commercial space station is operational.

design life↗

NASA NTRS2006

Spacecraft Escape Capsule

A report discusses the Gumdrop capsule a conceptual spacecraft that would enable the crew to escape safely in the event of a major equipment failure at any time from launch through atmospheric re-entry. The scaleable Gumdrop capsule would comprise a command module (CM), a service module (SM), and a crew escape system (CES). The CM would contain a pressurized crew environment that would include avionic, life-support, thermal control, propulsive attitude control, and recovery systems. The SM would provide the primary propulsion and would also supply electrical power, life-support resources, and active thermal control to the CM. The CES would include a solid rocket motor, embedded within the SM, for pushing the CM away from the SM in the event of a critical thermal-protection-system failure or loss of control. The CM and SM would normally remain integrated with each other from launch through recovery, but could be separated using the CES, if necessary, to enable the safe recovery of the crew in the CM. The crew escape motor could be used, alternatively, as a redundant means of de-orbit propulsion for the CM in the event of a major system failure in the SM.

Robertson, Edward A.↗

NASA NTRS1994

An intelligent control system for failure detection and controller reconfiguration

We present an architecture of an intelligent restructurable control system to automatically detect failure of system components, assess its impact on system performance and safety, and reconfigure the controller for performance recovery. Fault detection is based on neural network associative memories and pattern classifiers, and is implemented using a multilayer feedforward network. Details of the fault detection network along with simulation results on health monitoring of a dc motor have been presented. Conceptual developments for fault assessment using an expert system and controller reconfiguration using a neural network are outlined.

Biswas, Saroj K.↗

DOE OSTI2025

EMSL Community Science Campaign Meeting: Critical Minerals and Materials - Rhizo Critical Campaign Breakout Session Report Summary

The “Critical Minerals Biogeochemistry in the Rhizosphere – Ultramafic Soils (Rhizo Critical)” campaign breakout (BO) session was organized to identify major knowledge gaps and fundamental research needs in rhizosphere microbiology and geochemistry that, if addressed, could transform our ability to recover critical minerals from ultramafic soil systems. We sought to identify significant challenges that must be surmounted in the pursuit of deeper science knowledge. Our ultimate goal is to understand this landscape well enough to identify and prioritize opportunities for EMSL to make the greatest impact with Environmental Transformations and Interactions (ETI) science area research campaigns focused on the biogeochemical processes controlling the behavior of critical minerals and materials in the rhizosphere. The increasing demand for critical materials and minerals (CMM) in the U.S. has heightened interest in low-grade ores with much attention on ultramafic soils, which contain valuable metals such as nickel (Ni), chromium (Cr), manganese, cobalt (Co), and copper (Lee et al., 2025; DOE CMM Report, 2023) used in advanced battery, magnet, wiring and wind turbines, and stainless steel technologies. Metal hyperaccumulating plants grown in ultramafic soils can extract economically valuable concentrations of CMMs through the process of phytomining. This technology has evolved from phytoremediation, which involves using plants to cleanse contaminated environments by removing, detoxifying, or stabilizing pollutants like metals and organic compounds. Hyperaccumulator plants are capable of storing metals in their living tissues at concentrations hundreds to thousands of times higher than those found in 'normal' plants. For instance, while the average concentration of Ni in the dry matter of plants growing in typical soils is usually less than 5 µg g?¹, Ni hyperaccumulation is defined by concentrations exceeding 1,000 µg g?¹ (Corzo Remigio et al., 2020; Reeves et al., 2018). Phytomining research has primarily focused on Ni (Rylott and van der Ent, 2025), for which the U.S. has very limited conventional mines in operation. Most soils typically contain Ni concentrations ranging from 7 to 50 mg kg-1, whereas serpentine soils exhibit significantly higher levels, with Ni content often ranging between 700 and 8,000 mg kg-1 (Sobczyk et al., 2017). While more than 500 plant species in over 50 different families have been identified as Ni hyperaccumulators (Kidd et al., 2018), Ni phytomining (and phytominng in general) remains largely untested because most studies are short-term, small-scale, and conducted under simplified or artificially enriched conditions, so they fail to capture the low metal concentrations, environmental variability, and management constraints that would be needed for a field-scale demonstration. Few hyperaccumulator species have been validated as true “metal crops,” and their biomass production, stress tolerance, and rooting characteristics are usually too poor to yield economically meaningful metal outputs. Critically, the basic mechanisms of metal uptake, transport, and sequestration, especially as shaped by belowground processes such as root exudation, rhizosphere chemistry, and root–microbe interactions that control metal mobility and bioavailability (Montreemuk et al., 2023; Kidd et al., 2018; Durand et al., 2023; Alford et al., 2010), are still only partially understood, and downstream metal recovery from biomass is rarely optimized. Because these limitations stem from gaps in fundamental knowledge rather than from a failure of the concept itself (Rylott and van der Ent, 2025; van der Ent et al., 2015), there is a strong need for basic science that dissects plant metal homeostasis, rhizosphere and microbial processes, and their integration with soil chemistry and process engineering to design more robust, scalable phytomining systems.

Ahkami, Amirhossein↗

NASA NTRS2010

The Reconstruction and Failure Analysis of The Space Shuttle Columbia

This viewgraph presentation describes a very detailed reconstruction plan and failure analysis of The Space Shuttle Columbia accident. The contents include: 1) STS-107 Timeline; 2) Foam Impact; 3) Recovery; 4) Reconstruction; 5) Reconstruction Plan; 6) Reconstruction Hanger; 7) Pathfinders; 8) Aluminum Pathfinder; 9) Early Analysis - Left MLG Door Area; 10) Emphasis Switched to Left Hand Wing Leading Edge; 11) Wing Leading Edge Subsystem (LESS); 12) 3D Reconstruction of Left WLE; 13) Left Wing Tile Table; 14) LESS Observations; 15) Left Hand Wing Debris Points to RCC 8/9 - Slumped Tile; 16) Reconstructed View of LC/P 9 tile with I/B Tile; 17) Reconstructed View of Lower C/P 9 Tile; 18) Carrier Panel 8 - Upper; 19) Left Hand Wing Debris Points to RCC 8/9 - Erosion and RCC with attach hole intact; 20) Erosion on Panel 8 Upper Outboard Rib; 21) RCC Panels 8 & 9 Erosion Features; 22) Slumping Source for Carrier Panel 9 Tile was Revealed; 23) Debris Indicated Highest Probability Initiation Site; 24) Left Hand Wing Debris Points to RCC 8/9- Metallic Deposits; 25) Relative Metallic Deposition on L/H Wing Materials; 26) Metallic Deposit Example, LH RCC 8; 27) High Level Questions; 28) Analysis Plan Challenges; 29) Analysis Techniques; 30) Analysis Approach; 31) RCC Panel 8 Erosion Features; 32) Radiographic Features; 33) Radiography WLE LH Panel 8; 34) LH RCC 8 Upper Apex; 35) LH RCC 8 - Deposit Feature: Thick Tear Shaped; 36) LH RCC 8 - Deposit Feature: Thick Globules; 37) LH RCC 8 - Deposit Feature: Spheroids; 38) LH RCC 8 - Deposit Feature: Uniform Deposit; 39) Significant Findings - Sampling All Other panels; 40) Proposed Breach Location and Plasma Flow; 41) Corroborating Information - RCC Panel Debris Locations; 42) Corroborating Information - LH OMS Pod Analysis; 43) Corroborating Information - Impact Testing; and 44) Overall Forensic Conclusions.

Russell, Richard W.↗

NASA NTRSDate not supplied

Flight Simulator Demonstration and Certification Implications of Powertrain Failure Mitigation in a Partial Turboelectric Aircraft

The Single-aisle Turboelectric AiRCraft with Aft Boundary Layer propulsor (STARC ABL) is a concept aircraft with a partial turboelectric powertrain. The complexity and integrated nature of the partial turboelectric powertrain architecture presents failure modes and hazards not found in conventional aircraft propulsion designs. Previously, various electrical and mechanical faults and associated recovery modes were demonstrated in a dynamic model of the powertrain. It was shown that certain faults were catastrophic without recovery logic, due specifically to the interaction of the subsystems. However, in each case, the logic, known as a reversionary control mode, enabled continued operation with assumed sufficient thrust to maintain safe flight. The current work evaluates the powertrain faults and recovery strategies using a full aircraft model in a piloted flight simulator, and places it in the context of current regulatory practice. Faults initiated in flight were successfully mitigated, with the accommodated aircraft subsequently evaluated against certification requirements for three-engine aircraft, which were shown to be appropriate for the STARC-ABL configuration.

STARC-ABL↗

NASA NTRSDate not supplied

Flight Simulator Demonstration and Certification Implications of Powertrain Failure Mitigation in a Partial Turboelectric Aircraft

STARC-ABL↗