Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15
All sourcesNASA NTRSDOE OSTI
NASA NTRS1991

Path planning for assembly of strut-based structures

A path planning method with collision avoidance for a general single chain nonredundant or redundant robot is proposed. Joint range boundary overruns are also avoided. The result is a sequence of joint vectors which are passed to a trajectory planner. A potential field algorithm in joint space computes incremental joint vectors delta-q = delta-q(sub a) + delta-q(sub c) + delta-q(sub r). Adding delta-q to the robot's current joint vector leads to the next step in the path. Delta-q(sub a) is obtained by computing the minimum norm solution of the underdetermined linear system J delta-q(sub a) = x(sub a) where x(sub a) is a translational and rotational force vector that attracts the robot to its goal position and orientation. J is the manipulator Jacobian. Delta-q(sub c) is a collision avoidance term encompassing collisions between the robot (links and payload) and obstacles in the environment as well as collisions among links and payload of the robot themselves. It is obtained in joint space directly. Delta-q(sub r) is a function of the current joint vector and avoids joint range overruns. A higher level discrete search over candidate safe positions is used to provide alternatives in case the potential field algorithm encounters a local minimum and thus fails to reach the goal. The best first search algorithm A* is used for graph search. Symmetry properties of the payload and equivalent rotations are exploited to further enlarge the number of alternatives passed to the potential field algorithm.

Muenger, Rolf↗
DOE OSTI2024

Safe Operations at Roadway Junctions: Intelligent Roadway Infrastructure as Functional Interlocking

Automated vehicle (AV) technology is quickly maturing, and the corresponding infrastructure systems that evaluate traffic and communicate to vehicles requires sophisticated sensing and perception technologies, referred to as intelligent roadway infrastructure (IRI), to complement emerging AV capabilities. IRI provides signals to vehicles, indicating right-of-way for vehicles and communicating to approaching AVs that no other vehicle is failing to yield. This capability, denoted as safety-affirmative signaling, provides a green light or a green arrow as appropriate and affirms through communication links to connected vehicles when it is safe to proceed. About 36% of collisions occur at intersections, with most occurring upon left turns (22.2%) or crossing over (12.6%), and only a small percentage (1.2%) while turning right at an intersection. Of all intersection crashes about half (52.5%) of those vehicles were traveling through a signalized intersection 2. Safety-affirmative signaling would guarantee safety of AV fleet vehicles, by providing the interlocking principle, a term from automated train control that only allows progression through a railway intersection after affirming no opportunity for a crash exists. IRI through safety-affirmative signaling would bring performance and safety to complex roadway intersections where AV transit fleet service is most needed, as well as safety benefits to traditional, non-automated vehicles and vulnerable road users. The implementation of IRI has functional, programmatic, and technical challenges. Research work performed at the National Renewable Energy Laboratory (NREL) in an integrative approach encapsulating these themes, and termed infrastructure perception and control (IPC) is motivated by improved performance (travel time), improved safety (reduced collisions), and improved energy efficiency (less fuel burned and minimized production of greenhouse gases). IPC is intended not only for roadway and intersection applications but also in extension to inform complementary buildings and grid systems to enable better co-management, as vehicles and their charging needs become increasingly integrated into the built environment. The NREL IPC project presents an open-source framework, architecture, and supporting technology to implement IRI, addressing critical issues such as fusion of data, reliability, standardization of data interfaces, and confidence of detection. The framework is informed by previous experience in U.S. Department of Defense research technology, specifically in the use of radar to detect, identify, and track aerial threats. These principles combined with multi-sensor fusion provides for a complete digital twin with known and measurable confidence and accuracy from which safety-affirmative signaling can be developed and deployed.

ADVANCED PROPULSION SYSTEMS,MATHEMATICS AND COMPUT↗
NASA NTRS1991

Microwelding of various metallic materials under ultravacuum (AO 138-10)

The first finding from the AO 138-10 is that cold welding never occurred, and that microwelds didn't even affect the reference (presumably microweld prone) pairs of metals consisting of gold, silver, and chromium. The scientific disappointment from these results must be tempered by the notion of a static AO 138-10 experiment, reflecting the passive character of the global Long Duration Exposure Facility (LDEF) flight. Thus far, it has been theorized that cold welding results from the peeling of the oxide layer, that is formed in an earth environment, by the space environment since such a layer no longer grows in space. In fact, such stripping of the oxide layer supposes relative motion of the contacting materials. In the absence of such motion, as in this experiment, oxidation will preserve its integrity and continue to prevent microwelding. More bewildering is that there was no microwelding of the reference pairs. Even though AO 138-10 failed scientific expectations, as did the LDEF structure with cold welding, the positive, functional aspect to keep in mind is the safe operation of single-shot (appendage releasing and/or latching) mechanisms, unhindered by microwelding in a space vacuum, as now demonstrated by the statically representative pairs of materials. Other aspects of the experiment are discussed.

Assie, Jean Pierre↗
NASA NTRS2004

Fluid Flow Technology that Measures Up

From 1994 to 1996, NASA s Marshall Space Flight Center conducted a Center Director's Discretionary Fund research effort to apply artificial intelligence technologies to the health management of plant equipment and space propulsion systems. Through this effort, NASA established a business relationship with Quality Monitoring and Control (QMC), of Kingwood, Texas, to provide hardware modeling and artificial intelligence tools. Very detailed and accurate Space Shuttle Main Engine (SSME) analysis and algorithms were jointly created, which identified several missing, critical instrumentation needs for adequately evaluating the engine health status. One of the missing instruments was a liquid oxygen (LOX) flow measurement. This instrument was missing since the original SSME included a LOX turbine flow meter that failed during a ground test, resulting in considerable damage for NASA. New balanced flow meter technology addresses this need with robust, safe, and accurate flow metering hardware.

Source record↗
NASA NTRS1992

Thermal Barrier For Vented O-Ring Seal

Barrier allows gases to seat seal without damaging it. Ring of tungsten-wire mesh forms protective barrier between hot, pressurized combustion gases and O-rings. Mesh cools and depressurizes gases so they safely push on and thereby help to seat primary O-ring or secondary O-ring if primary O-ring fails to form seals. Barrier devised for use in rocket motor. Potential terrestrial applications includes aircraft engines, furnaces, and ducts carrying hot gases.

Schick, H.↗
NASA NTRS2005

Entry Abort Determination Using Non-Adaptive Neural Networks for Mars Precision Landers

The 2009 Mars Science Laboratory (MSL) will attempt the first precision landing on Mars using a modified version of the Apollo Earth entry guidance program. The guidance routine, Entry Terminal Point Controller (ETPC), commands the deployment of a supersonic parachute after converging the range to the landing target. For very dispersed cases, ETPC may not converge the range to the target and safely command parachute deployment within Mach number and dynamic pressure constraints. A full-lift up abort can save 85% of these failed trajectories while abandoning the precision landing objective. Though current MSL requirements do not call for an abort capability, an autonomous abort capability may be desired, for this mission or future Mars precision landers, to make the vehicle more robust. The application of artificial neural networks (NNs) as an abort determination technique was evaluated by personnel at the National Aeronautics and Space Administration (NASA) Johnson Space Center (JSC). In order to implement an abort, a failed trajectory needs to be recognized in real time. Abort determination is dependent upon several trajectory parameters whose relationships to vehicle survival are not well understood, and yet the lander must be trained to recognize unsafe situations. Artificial neural networks (NNs) provide a way to model these parameters and can provide MSL with the artificial intelligence necessary to independently declare an abort. Using the 2009 Mars Science Laboratory (MSL) mission as a case study, a non-adaptive NN was designed, trained and tested using Monte Carlo simulations of MSL descent and incorporated into ETPC. Neural network theory, the development history of the MSL NN, and initial testing with severe dust storm entry trajectory cases are discussed in Reference 1 and will not be repeated here. That analysis demonstrated that NNs are capable of recognizing failed descent trajectories and can significantly increase the survivability of MSL for very dispersed cases. NN testing was then broadened to evaluate fully dispersed entry trajectories. The NN correctly classified 99.7% of descent trajectories as abort or nonabort and reduced the probability of an unsafe parachute deployment by 83%. This second, broader testing phase is discussed in this paper.

Graybeal, Sarah R.↗
NASA NTRS2017

Getting Out of Orbit: Water Recycling Requirements and Technology Needs for Long Duration Missions Away from Earth

Deep-space crewed missions will not have regular access to the Earth's resources or the ability to rapidly return to Earth if a system fails. As crewed missions extend farther from Earth for longer periods, habitation systems must become more self-sufficient and reliable for safe, healthy, and sustainable human exploration. For human missions to Mars, Environmental Control and Life Support Systems (ECLSS) must be able operate for up to 1,100 days with minimal spares and consumables. These missions will require capabilities to more fully recycle atmospheric gases and wastewater to substantially reduce mission costs. Even with relatively austere requirements for use, water represents one of the largest consumables by mass. Systems must be available to extract and recycle water from all sources of waste. And given that there will be no opportunity to send samples back to Earth for analysis, analytical measurements will be limited to monitoring hardware brought on board the spacecraft. The Earth Reliant phase of NASA's exploration strategy includes leveraging the International Space Station (ISS) to demonstrate advanced capabilities for a robust and reliable ECLSS. The ISS Water Recovery System (WRS) includes a Urine Processor Assembly (UPA) for distillation and recovery of water from urine and a Water Processor Assembly (WPA) to process humidity condensate and urine distillate into potable water. Possible enhancements to more fully "close the water loop" include recovery of water from waste brines and solid wastes. A possible game changer is the recovery of water from local planetary resources through use of In Situ Resource Utilization (ISRU) technologies. As part of the development and demonstration sequence, NASA intends to utilize cis-Lunar space as a Proving Ground to verify systems for deep space habitation by conducting extended duration missions to validate our readiness for Mars.

Barta, Daniel J.↗
NASA NTRS2015

Enhanced Flight Vision Systems Operational Feasibility Study Using Radar and Infrared Sensors

Approach and landing operations during periods of reduced visibility have plagued aircraft pilots since the beginning of aviation. Although techniques are currently available to mitigate some of the visibility conditions, these operations are still ultimately limited by the pilot's ability to "see" required visual landing references (e.g., markings and/or lights of threshold and touchdown zone) and require significant and costly ground infrastructure. Certified Enhanced Flight Vision Systems (EFVS) have shown promise to lift the obscuration veil. They allow the pilot to operate with enhanced vision, in lieu of natural vision, in the visual segment to enable equivalent visual operations (EVO). An aviation standards document was developed with industry and government consensus for using an EFVS for approach, landing, and rollout to a safe taxi speed in visibilities as low as 300 feet runway visual range (RVR). These new standards establish performance, integrity, availability, and safety requirements to operate in this regime without reliance on a pilot's or flight crew's natural vision by use of a fail-operational EFVS. A pilot-in-the-loop high-fidelity motion simulation study was conducted at NASA Langley Research Center to evaluate the operational feasibility, pilot workload, and pilot acceptability of conducting straight-in instrument approaches with published vertical guidance to landing, touchdown, and rollout to a safe taxi speed in visibility as low as 300 feet RVR by use of vision system technologies on a head-up display (HUD) without need or reliance on natural vision. Twelve crews flew various landing and departure scenarios in 1800, 1000, 700, and 300 RVR. This paper details the non-normal results of the study including objective and subjective measures of performance and acceptability. The study validated the operational feasibility of approach and departure operations and success was independent of visibility conditions. Failures were handled within the lateral confines of the runway for all conditions tested. The fail-operational concept with pilot in the loop needs further study.

Etherington, Timothy J.↗
DOE OSTI2020

Clarkson Facility Electrical Safety

Anybody can design a system that works. Our mission is to design a system that, when it fails, will fail in an orderly manner that will result in a minimum of injury or loss of life There is no such thing as “safe,” or “working safely.”

42 ENGINEERING↗
NASA NTRS2017

Digital Device Architecture and the Safe Use of Flash Devices in Munitions

Flash technology is being utilized in fuzed munition applications and, based on the development of digital logic devices in the commercial world, usage of flash technology will increase. Digital devices of interest to designers include flash-based microcontrollers and field programmable gate arrays (FPGAs). Almost a decade ago, a study was undertaken to determine if flash-based microcontrollers could be safely used in fuzes and, if so, how should such devices be applied. The results were documented in the Technical Manual for the Use of Logic Devices in Safety Features. This paper will first review the Technical Manual and discuss the rationale behind the suggested architectures for microcontrollers and a brief review of the concern about data retention in flash cells. An architectural feature in the microcontroller under study will be discussed and its use will show how to screen for weak or failed cells during manufacture, storage, or immediately prior to use. As was done for microcontrollers a decade ago, architectures for a flash-based FPGA will be discussed, showing how it can be safely used in fuzes. Additionally, architectures for using non-volatile (including flash-based) storage will be discussed for SRAM-based FPGAs.

Katz, Richard B.↗
NASA NTRS2014

Life Support for Deep Space and Mars

How should life support for deep space be developed? The International Space Station (ISS) life support system is the operational result of many decades of research and development. Long duration deep space missions such as Mars have been expected to use matured and upgraded versions of ISS life support. Deep space life support must use the knowledge base incorporated in ISS but it must also meet much more difficult requirements. The primary new requirement is that life support in deep space must be considerably more reliable than on ISS or anywhere in the Earth-Moon system, where emergency resupply and a quick return are possible. Due to the great distance from Earth and the long duration of deep space missions, if life support systems fail, the traditional approaches for emergency supply of oxygen and water, emergency supply of parts, and crew return to Earth or escape to a safe haven are likely infeasible. The Orbital Replacement Unit (ORU) maintenance approach used by ISS is unsuitable for deep space with ORU's as large and complex as those originally provided in ISS designs because it minimizes opportunities for commonality of spares, requires replacement of many functional parts with each failure, and results in substantial launch mass and volume penalties. It has become impractical even for ISS after the shuttle era, resulting in the need for ad hoc repair activity at lower assembly levels with consequent crew time penalties and extended repair timelines. Less complex, more robust technical approaches may be needed to meet the difficult deep space requirements for reliability, maintainability, and reparability. Developing an entirely new life support system would neglect what has been achieved. The suggested approach is use the ISS life support technologies as a platform to build on and to continue to improve ISS subsystems while also developing new subsystems where needed to meet deep space requirements.

life support↗
NASA NTRS2002

A Novel Approach to Rotorcraft Damage Tolerance

Damage-tolerance methodology is positioned to replace safe-life methodologies for designing rotorcraft structures. The argument for implementing a damage-tolerance method comes from the fundamental fact that rotorcraft structures typically fail by fatigue cracking. Therefore, if technology permits prediction of fatigue-crack growth in structures, a damage-tolerance method should deliver the most accurate prediction of component life. Implementing damage-tolerance (DT) into high-cycle-fatigue (HCF) components will require a shift from traditional DT methods that rely on detecting an initial flaw with nondestructive inspection (NDI) methods. The rapid accumulation of cycles in a HCF component will result in a design based on a traditional DT method that is either impractical because of frequent inspections, or because the design will be too heavy to operate efficiently. Furthermore, once a HCF component develops a detectable propagating crack, the remaining fatigue life is short, sometimes less than one flight hour, which does not leave sufficient time for inspection. Therefore, designing a HCF component will require basing the life analysis on an initial flaw that is undetectable with current NDI technology.

Forth, Scott C.↗
NASA NTRS2002

Hybrid Verification of an Interface for an Automatic Landing

Modern commercial aircraft have extensive automation which helps the pilot by performing computations, obtaining data, and completing procedural tasks. The pilot display must contain enough information so that the pilot can correctly predict the aircraft's behavior, while not overloading the pilot with unnecessary information. Human-automation interaction is currently evaluated through extensive simulation. In this paper, using both hybrid and discrete-event system techniques, we show how one could mathematically verify that an interface contains enough information for the pilot to safely and unambiguously complete a desired maneuver. We first develop a nonlinear, hybrid model for the longitudinal dynamics of a large civil jet aircraft in an autoland/go-around maneuver. We find the largest controlled subset of the aircraft's flight envelope for which we can guarantee both safe landing and safe go-around. We abstract a discrete procedural model using this result, and verify a discrete formulation of the pilot display against it. An interface which fails this verification could result in nondeterministic or unpredictable behavior from the pilot's point of view.

Oishi, Meeko↗
NASA NTRSDate not supplied

GN&C Flight Experience and Lessons Learned from BioSentinel: A 6U Deep Space Cubesat

This paper reviews the flight experiences of the BioSentinel propulsion and Attitude Determination and Control System (ADCS) teams. BioSentinel is a 6U cubesat that launched as a secondary payload aboard the Space Launch System's (SLS) maiden flight in November of 2022 and is now operating in an Earth trailing heliocentric orbit. We discuss the mission's original GNC approach as well as several improvements made in-flight, in particular a novel approach to gyro bias estimation in the spacecraft’s sun safe controller. The development and flight experience of the spacecraft's RCS propulsion system is also discussed, along with modifications made to the momentum management approach in response to a failed thruster valve. Finally, we present lessons learned and recommendations for GNC design in future deep-space cubesats.

BioSentinel↗
NASA NTRS1996

Application of QFT to the Problem of Failed In-Flight Controllers During Approach and Landing of a B720 Aircraft

Previous studies by NASA Dryden have shown the use of throttles for emergency flight control to be extremely difficult, especially for landing. Flight control using only the throttles to achieve safe landing for a large jet transport airplane, the Boeing 720, is investigated using Quantitative Feedback Theory (QFT). Results are compared to an augmented control developed in a previous study. The controller corrected unsatisfactory open-loop characteristics by increasing system bandwidth and damping, but improving the control bandwidth substantially proved very difficult. The pitch controller is robust in conditions of no or moderate turbulence. The roll controller performed well in conditions of no turbulence, but is sensitive to moderate turbulence. Handling qualities of the augmented control for approach and landing were evaluated by piloted simulation flights.

Chou, Hwei-Lan↗
NASA NTRSDate not supplied

Importance of Contrast-to-Noise Ratio Sensitivity Function in Nondestructive Evaluation

A reliable nondestructive evaluation (NDE) technique provides minimum 90% probability of detection (POD) with 95% confidence for detection of cracklike flaws of a specific size. This requirement comes from fracture control. Fracture control is a risk assessment and control approach for preventing structural failure of fracture critical hardware during its service life. One of the approaches of fracture control is damage tolerance safe life analysis, which assumes that NDE reliably detectable size flaw may exist in the hardware post nondestructive evaluation. Analysis and/or testing are performed to verify that the hardware will not fail during its service life despite existence of such a flaw. NDE methods are conventionally qualified by probability of detection (POD) demonstration testing to ensure reliable flaw detection. Here, a novel and alternative to POD flaw detection reliability approach that uses contrast-to-noise ratio (CNR) is given. The approach uses CNR sensitivity function (SF) and CNR. CNR SF is the minimum CNR needed for reliable flaw detection as a function of certain flaw indication characteristics. Primary difference between POD approaches and CNR flaw detection reliability approach is resolution of flaw detection system. POD approach does not account for the resolution of the system, while CNR approach accounts for the flaw detection resolution. Resolution is determined from the modulation transfer function (MTF) of the flaw detection system. CNR flaw detection reliability approach emphasizes quantitative assessment of “how well each flaw indication is detected”. Therefore, CNR approach is helpful in reducing number of flaws in the sample used in NDE procedure qualification, resulting in cost and time savings. CNR approach is also a case of multi-hit flaw detection analysis which has better flaw detectability size than conventional single-hit flaw detectability. Thus, CNR approach, where applicable, may be superior to conventional POD approach. The paper is an overview of development of CNR modeling, CNR SF modeling and measurement by the author. The paper gives key references to currently used NDE procedure POD qualification approaches including those specific to CNR and CNR SF development in multi-hit flaw detection in NDE. The paper covers core topics in nondestructive evaluation engineering.

Contrast-to-noise ratio↗
NASA NTRS2014

Integrated Diagnostics and Prognostics for the Electrical Power System of a Planetary Rover

For electric vehicles, technology for monitoring, diagnosis, and prognosis of the electrical power system (EPS) becomes essential for safe and efficient operation. To this end, we develop a general system-level integrated diagnosis and prognosis framework, which detects, isolates, and identifies EPS faults, and predicts when the EPS will fail to deliver sufficient power. The approach takes advantage of recent work in structural model decomposition in order to distribute the global diagnosis and prognosis problems into local subproblems that can be solved in parallel, thus enabling implementation on distributed computational platforms. The framework is applied to the EPS of a planetary rover testbed, and is demonstrated using data from field experiments.

Daigle, Matthew↗
DOE OSTI2020

Lessons Learned from Hanford's Purex Tunnel 2 Structural Stabilization Project - 20509

In 2019, U.S. Department of Energy (DOE) contractor CH2M Hill Plateau Remediation Company (CHPRC) completed structurally stabilizing the Plutonium Uranium Extraction Plant (Purex) waste storage Tunnel 2 with engineered grout. This action significantly reduced risk to Hanford workers, the surrounding community and environment by preventing future collapse of the tunnel and possible release of radioactive materials. Decades of plutonium production at the Purex facility required construction of two large underground tunnels for storage of highly contaminated plutonium processing equipment that had failed during the operation of Purex and other facilities across the Hanford Site. Following the partial collapse of Purex Tunnel 1 on May 9, 2017, DOE and CHPRC took immediate action to safely stabilize the collapsed section of the tunnel. The hole in the tunnel was filled the next day as a temporary stabilization measure, and no contamination was detected as a result of the partial collapse of the tunnel. Workers then stabilized Tunnel 1 in its entirety by filling with engineered grout, which also encapsulated the radioactive equipment and railcars within the tunnel. Grouting eliminated the risk of further collapse and stabilized the tunnel contents, all while not precluding future remedial actions or final closure decisions. While conducting an integrity analysis of Tunnel 1 by using construction drawings, photos and other historical documents, project teams also analyzed the much larger Purex Tunnel 2. The analysis found Tunnel 2 did not meet current codes for structural integrity, and it may not be able to bear the weight of the soil above the tunnel. Therefore, it was determined that Tunnel 2 was also at risk of collapse. DoE's independent panel of experts determined grouting to be the best choice for stabilizing Tunnel 2 because it provides the highest level of stability and protection, and does not preclude future remedial actions. DOE authorized CHPRC to commence work and the Purex Tunnel 2 Structural Stabilization Project was launched in December of 2017. The paper will discuss the process of recognizing the following critical aspects and risks associated with stabilizing Tunnel 2, and the actions taken by the project team to mitigate these risks, including: - Tunnel investigation and data collection to assist with future remediation; - On-site batching and mock-ups to provide the large quantity of grout required for stabilizing the tunnel; - Workforce involvement and innovative actions that mitigated the project's most significant potential hazards, including traffic control; - Project team high level of execution translated into successful project execution. Sharing lessons learned from this critical risk-reduction effort can enhance the safety and efficiency of other complex and hazardous projects across the DOE complex. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗