Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safe”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 235 records · Page 13

Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance

There is a trend in the aviation industry to go from federated to integrated computing systems. Combining a number of traditional stand-alone federated systems into an integrated common platform (called Integrated Modular Avionics, IMA) has the benefit of increased power efficiency, reduced support hardware, and reduced cabling. However, changing from federated to integrated has a significant impact on the system architecture and hence the process of how avionic systems are to be analyzed. Traditional approaches to safety analysis become inefficient when functional boundaries can no longer be assumed for failure independence and fault isolation. In this report, we describe a tool that we developed to accelerate the safety engineer's ability to perform safety analysis of IMA systems through modeling, as well as optimize the system engineer's ability to develop a system through architecture synthesis. This work was the result of a three-year research effort called SOTERIA (Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance). We developed a compositional modeling language that supports rapid development, modification, and evaluation of architectures. The modeling language is structured such that the end-user defines a library of components with information on component reliability, connectivity, and fault propagation logic. The system model is built by instantiating the components from the library, connecting the components, and identifying the top-level faults of interest. Our tool is compositional in that the end-user only needs to define safety aspects at the component level. The tool takes the model and automatically synthesizes both the qualitative and quantitative safety analyses. We go further by allowing users to describe system information such as components to use in an architecture and their connection compatibility and automatically synthesize an architecture that meets the top-level probability target adhering to end-user specified constraints. This capability allows users to rapidly explore a design space..

Siu, Kit Y.↗

Leveraging ASTM Industry Standard F3269-17 for Providing Safe Operations of a Highly Autonomous Aircraft

This paper expands upon the ASTM industry standard F3269-17 to outline a run-time assurance (RTA) network architecture for use in ensuring safe flight operations of a highly autonomous aircraft. An RTA network architecture is proposed and critical features discussed to implement functions where automation is primarily responsible for the safety of the aircraft instead of a pilot. This shift in responsibility, made possible by the proposed architecture, is key to highly resilient automation and is a core enabler for future “pilotless” transportation concepts. The findings in this paper stem from the researcher’s experiences with ASTM in the generation of the standard and some seven years of RTA system development on various flight programs leveraging the RTA concepts outlined in the ASTM standard.

autonomous systems↗

Safe, High Power / Voltage Battery Design Challenges

NASA seeks safe, high performing battery module designs that can deliver 3C discharge rates continuously, achieve 160 Wh/kg, and is passively propagation resistant to a single cell thermal runaway event. One solution is presented that uses a patented oscillating heat pipe technology for thermal management. Combined with light weight packaging and a new commercially available gas permeable vent port, all 5 preliminary safety tests results performed to date are showing ample margins.

High power↗

Testing Enabling Technologies for Safe UAS Urban Operations

A set of more than 100 flight operations were conducted at NASA Langley Research Center using small UAS (sUAS) to demonstrate, test, and evaluate a set of technologies and an overarching air-ground system concept aimed at enabling safety. The research vehicle was tracked continuously during nominal traversal of planned flight paths while autonomously operating over moderately populated land. For selected flights, off-nominal risks were introduced, including vehicle-to-vehicle (V2V) encounters. Three contingency maneuvers were demonstrated that provide safe responses. These maneuvers made use of an integrated air/ground platform and two on-board autonomous capabilities. Flight data was monitored and recorded with multiple ground systems and was forwarded in real time to a UAS traffic management (UTM) server for airspace coordination and supervision.

Moore, Andrew J.↗

Understanding Risk in Urban Air Mobility: Moving Towards Safe Operating Standards

Urban Air Mobility (UAM), i.e. on-demand urban passenger (and cargo) transportation services, represents a new technology and potentially an emerging industry. It is not simply an extension of commercial aviation as we know it—it is a different domain. A first priority for UAM is that it be safe and secure (Booz, Allen, Hamilton, 2018; Crown, Consulting, Inc., 2018). A workshop held in Arlington, Virginia, brought together experts from the on-demand world (including UAM) to assess and prioritize the challenges and barriers to be addressed in successfully introducing On Demand Mobility (ODM) vehicles and services (ODM and Emerging Technology Workshop, 2016). Of the nine challenges assessed, the highest priority was assigned to certification, followed by affordability, and then safety. Considering the confluence of certification and safety, it is clear that risk and its assessment were judged to be of high relevance to workshop participants.

UAM↗

Hybrid Upper Stage Provides a Safe, Green, and Cost-Efficient Solution for CubeSat Launches

Parabilis Space Technologies developed a hybrid upper stage that combines the benefits of traditional liquid and solid propulsion systems while reducing risk and cost. Hybrid technology is safe, green, and cost-efficient, making it versatile, especially for CubeSat launches, and Parabilis’ ACE configuration makes the system more compact. Parabilis received additional funding from NASA and the U.S. Air Force to develop this technology beyond the Phase I and II STTR accomplishments

SBIR/STTR↗

Common Habitat Design for Microgravity, Artificial Gravity and Partial Gravity in a Safe Haven Configuration

As space exploration efforts advance towards the returning to Lunar surface and later to Mars, new challenges emerge, and habitation becomes one of them. Having a custom manufacturing line for deep space transit and surface habitats (the Moon or Mars) implies a longer design and production line. Instead of spending great amounts of money and time on custom designs a common development has been explored where the interior architectural functions can be multifunctional, capable of being adapted into distinct gravity conditions. The concept developed for a common design is capable of being adapted to two (2) different layout configurations for a common habitat in a safe haven design: (#1) a habitat that could be used both as a deep space transport in micro gravity and on Mars surface partial gravity; and (#2) a habitat that could be used both as a deep space transport in artificial gravity and on Mars surface partial gravity. These designs have the potential to diminish manufacturing time and cost, but also reducing crew training time increasing crew adaptability to their habitation and gravity condition.

Paola M Gonzalez Marquez↗

Secure and Safe Assured Autonomy (S2A2)

Aviation’s future will likely see the integration of a wide variety of Advanced Air Mobility (AAM) systems including Unmanned Aerial Systems (UAS) for cargo/delivery, personal air vehicles, and commercial Urban Air Mobility (UAM)vehicles. However, substantial challenges exist that could delay (and possibly prevent) these developments and thus research is needed in a variety of areas to leverage technologies in autonomy, Air Traffic Management (ATM), multi-redundant flight systems architectures, and advanced wireless connectivity like 5G to meet these challenges. The goal of this ULI project is to develop new technologies and innovative operational concepts which will ensure safe, secure and robust integration of autonomous vehicles into Advanced Air Mobility-tailored transportation infrastructure. All this must be done while maintaining inter-operability with current civil air transportation systems and associated safety standards. The project is organized into four Technical Challenges (TCs) areas designed to provide unique UAM solutions and a transition roadmap for industry and government to utilize research product output.

Koushik Datta↗

Initial Exploration of STEReO (Scalable Traffic management for Emergency Response Operations) system user requirements for safe integration of small UAS

Environment-based disasters, such as wildfire, can cause substantial loss of life and loss of property and are costing billions of dollars annually. Existing disaster response operations are complex, with many challenges. The aim of the Scalable Traffic management for Emergency Response Operations (STEReO) system is to demonstrate the application of technologies that will enable small, low-altitude Unmanned Aerial System operations to safely take place in the airspace above a disaster event, increasing the effectiveness of the response. As a first step, the project aims to build a small prototype to demonstrate and test the core functions of this system based on user needs and requirements that were gathered from experts in the field during discussions and walkthroughs.

STEReO↗

Flying Blind: Keeping aircraft safe without a pilot on board.

The unmanned aircraft market is one of the fastest growing sectors in the world today, poised to become a billion dollar industry in the next several years. This explosive growth in unmanned aircraft, both small and large, brings an increased risk of these vehicles interfering with current aircraft, or harming unsuspecting bystanders. This talk will discuss some of the research NASA is doing to keep the airspace safe, while allowing drone pilots the freedom to fly. The discussion will center on two NASA-developed systems: Safeguard, a platform-independent geofence; and DAIDALUS, a software suite for detect and avoid. In addition to describing what the systems are supposed to do, we'll also discuss how NASA uses formal methods to provide assurance that they actually do as intended.

unmanned aircraft↗

Safe Human Expeditions Beyond Low Earth Orbit (LEO)

The NASA Engineering and Safety Center (NESC) conducted an interdisciplinary study and workshop focusing on capabilities needed for crew health and safety on long-duration deep space expeditions in support of the Artemis Program and missions to Mars. The study focused on integration among four disciplines: 1) space weather monitoring and forecasting, 2) shielding technologies, 3) human health research, and 4) human factors engineering tools. An integrated risk assessment was performed to inform characteristics of mission architecture and capabilities needed for safe, long-duration human expeditions beyond low Earth orbit. This report contains the outcome of the NESC assessment.

Low Earth Orbit↗

SafeMAP: Safe Multi-Agent Planning Framework Based on Dynamic Probabilistic Risk Assessment

This paper proposes a risk-aware framework for Safe Multi-Agent Planning (SafeMAP) that unifies disparate models for multi-agent systems in a Markovian process that allows for simultaneous system health monitoring, decision making under uncertainty, and multi-agent system collaboration. As operations beyond low earth orbit mature, there is an increased need for autonomous cyber-physical systems with onboard decision making capabilities. Multi-agent cyber-physical systems in particular offer the potential of increased efficiency, resiliency, and mission capabilities for future applications such as multi-rover terrain operations, distributed satellite operations, and management of smart lunar habitats. SafeMAP utilizes physics-based models of each agent and the relevant components, probability models of the environment and component operational states, and reward models for mission-specific objectives such as scientific task completion or resource consumption. The output of SafeMAP is a set of mission plans that satisfy the mission objective under specified risk/reward constraints. A readable interpretation of each of these generated mission plans is provided as an additional output. SafeMAP has been demonstrated on a simulated case study involving a four-rover system performing surface mapping operations and science tasks. Results of this paper demonstrate SafeMAP’s ability to generate explainable mission plans that satisfy the mission objective while minimizing risk under nominal and off-nominal conditions.

Mohammad Hejase↗

SafeMAP: Safe Multi-Agent Planning framework based on Dynamic Probabilistic Risk Assessment

This paper proposes a risk-aware framework for Safe Multi-Agent Planning (SafeMAP) that unifies disparate models for multi-agent systems in a Markovian process that allows for simultaneous system health monitoring, decision making under uncertainty, and multi-agent system collaboration. As operations beyond low earth orbit mature, there is an increased need for autonomous cyber-physical systems with onboard decision making capabilities. Multi-agent cyber-physical systems in particular offer the potential of increased efficiency, resiliency, and mission capabilities for future applications such as multi-rover terrain operations, distributed satellite operations, and management of smart lunar habitats. SafeMAP utilizes physics-based models of each agent and the relevant components, probability models of the environment and component operational states, and reward models for mission-specific objectives such as scientific task completion or resource consumption. The output of SafeMAP is a set of mission plans that satisfy the mission objective under specified risk/reward constraints. A readable interpretation of each of these generated mission plans is provided as an additional output. SafeMAP has been demonstrated on a simulated case study involving a four-rover system performing surface mapping operations and science tasks. Results of this paper demonstrate SafeMAP’s ability to generate explainable mission plans that satisfy the mission objective while minimizing risk under nominal and off-nominal conditions.

Mohammad Hejase↗

A System to Provide Deterministic Flight Software Operation and Maximize Multicore Processing Performance: The Safe and Precise Landing – Integrated Capabilities Evolution (SPLICE) Datapath

A method and design are described for a system that processes multiple data streams, utilizing a multicore asymmetric processing architecture, that eliminates data interrupts to the application processors. The design supports a deterministic environment for flight software in NASA’s Safe and Precise Landing – Integrated Capabilities Evolution (SPLICE) project. The SPLICE project develops sensor, algorithm, and compute technologies for Precision Landing and Hazard Avoidance (PL&HA) capabilities. The compute technology for SPLICE is the Descent and Landing Computer (DLC). The DLC hosts several SPLICE algorithms with high computational resource requirements that must be executed in a real-time and deterministic manner. The software runs on a custom Single Board Computer (SBC), with a Xilinx Ultrascale+ Multiprocessor System-on-a-Chip (MPSoC). Input data for the flight software is from a variety of sensors, unique with respect to data rate and packet size. A data path between the SPLICE sensors and algorithms is designed to efficiently deliver this data to the flight software using the MPSoC asymmetric processing cores and Field Programmable Gate Array (FPGA) fabric. This is implemented in a manner that isolates the application processors running the flight software from interrupts associated with the input data. By leveraging real-time processors on the MPSoC, and a structure with the appropriate interfaces in the shared memory on the SBC, the flight software can use the full set of application processors. The available utilization for each processor in this set is also maximized for the SPLICE applications, providing a sufficiently deterministic execution environment without the cost and overhead of a real-time operating system.

heterogeneous processing system↗

Risk Trade-Space Analysis for Safe Human Expeditions to Mars

We assessed the integrated safety, health, and performance risk to crews on long-duration missions, specifically to Mars. Using a systems approach rather than one focused on individual countermeasures, we examined the trade space around several such risks to identify high-potential risk mitigation strategies and characterize aspects of Mars mission architectures that could lower aggregated risk. Current Mars Design Reference missions would require durations well over two years and would increase crew exposure to radiation and microgravity well beyond ISS levels, likely resulting in significantly reduced performance beyond our current capability to mitigate that could jeopardize mission success. A “fast Mars transit” round-trip mission concept was studied using an innovative flight dynamics approach to quantify the minimum total mission energy required for a Mars transit with total mission duration less than 400 days. This approach holds promise for sending humans to Mars and returning them safely with acceptable, potentially mitigatable, exposure to microgravity and radiation using current or near-term technologies. The fast transit concept would also result in fewer time-driven vehicle failures and enable sustainable deployment of humans and infrastructure to Mars on a regular cadence, allowing steady exploration and colonization of Mars. Finally, we conclude that reliance on the Low Earth Orbit (LEO) mission operations paradigm – i.e., one of near-complete real-time dependence on experts at Mission Control to manage the combined state of the mission, vehicle, and crew – is high risk given the communication delays and limited resupply of any Mars mission, and this risk is not eliminated by the shorter missions durations of fast transit scenarios. Based on historical trends, it is highly likely that the crew will face a high-consequence problem of uncertain origin during Mars transit when ground support will be greatly reduced. While it may be possible to reduce anomaly rates through improved reliability analysis and testing, and to reduce anomaly impacts through added robustness, such mitigations address only known failure modes and known uncertainties. Therefore, a radical shift in the Human-Systems Integration Architecture (HSIA) that defines the operational paradigm, systems design, and human-systems interactions is required to improve the risk posture to an acceptable level regardless of mission duration.

Mars↗

BERT-Based Topic Modeling and Information Retrieval to Support Fishbone Diagramming for Safe Integration of Unmanned Aircraft Systems in Wildfire Response

Recent concepts for emerging wildfire response operations have included unmanned aircraft systems (UAS) due to their increasing accessibility and capabilities. To integrate UAS into wildfire response safely, researchers have studied the use of large repositories of historic incident reports to improve the scope of root cause analysis. Recent work has emphasized applying state-of-the-art natural language processing techniques to extract useful information from these repositories. However, it has not yet been studied how these results can be interpreted and integrated into the systems engineering process. In this work, we propose a process in which Bidirectional Encoder Representations from Transformers (BERT)-based topic modeling and information retrieval are applied to a relevant set of documents in order to support the development of a fishbone diagram in a semiautomated process. High-level themes in the document set are identified using topic modeling, which are then refined and interpreted by a human analyst. Then, the themes are used to guide a finer search using information retrieval, which returns specific incident reports of relevance. This provides traceability to specific incidents as well as broader categorizations that comprise the fishbone branches. We apply the proposed process to relevant documents from NASA’s Aviation Safety Reporting System (ASRS). The proposed process is widely applicable when relevant documents are available, and the results from this study will be useful to identifying potential causes of wildfire response UAS incidents.

Hazard analysis↗