SEARCH · Engineering Papers

Results for “Safety parameters”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

All sources NASA NTRS DOE OSTI

NASA NTRS2001

Microbial contamination of spacecraft

Spacecraft and space habitats supporting human exploration contain a diverse population of microorganisms. Microorganisms may threaten human habitation in many ways that directly or indirectly impact the health, safety, or performance of astronauts. The ability to produce and maintain spacecraft and space stations with environments suitable for human habitation has been established over 40 years of human space flight. An extensive database of environmental microbiological parameters has been provided for short-term (< 20 days) space flight by more than 100 missions aboard the Space Shuttle. The NASA Mir Program provided similar data for long-duration missions. Interestingly, the major bacterial and fungal species found in the Space Shuttle are similar to those encountered in the nearly 15-year-old Mir. Lessons learned from both the US and Russian space programs have been incorporated into the habitability plan for the International Space Station. The focus is on preventive measures developed for spacecraft, cargo, and crews. On-orbit regular housekeeping practices complete with visual inspections are essential, along with microbiological monitoring. Risks associated with extended stays on the Moon or a Mars exploration mission will be much greater than previous experiences because of additional unknown variables. The current knowledge base is insufficient for exploration missions, and research is essential to understand the effects of space flight on biological functions and population dynamics of microorganisms in spacecraft. Equally important is a better understanding of the immune response and of human-microorganism-environment interactions during long-term space habitation.

Mir Project↗

NASA NTRS2010

Regenerative Blower for EVA Suit Ventilation Fan

Portable life support systems in future space suits will include a ventilation subsystem driven by a dedicated fan. This ventilation fan must meet challenging requirements for pressure rise, flow rate, efficiency, size, safety, and reliability. This paper describes research and development that showed the feasibility of a regenerative blower that is uniquely suited to meet these requirements. We proved feasibility through component tests, blower tests, and design analysis. Based on the requirements for the Constellation Space Suit Element (CSSE) Portable Life Support System (PLSS) ventilation fan, we designed the critical elements of the blower. We measured the effects of key design parameters on blower performance using separate effects tests, and used the results of these tests to design a regenerative blower that will meet the ventilation fan requirements. We assembled a proof-of-concept blower and measured its performance at sub-atmospheric pressures that simulate a PLSS ventilation loop environment. Head/flow performance and maximum efficiency point data were used to specify the design and operating conditions for the ventilation fan. We identified materials for the blower that will enhance safety for operation in a lunar environment, and produced a solid model that illustrates the final design. The proof-of-concept blower produced the flow rate and pressure rise needed for the CSSE ventilation subsystem while running at 5400 rpm, consuming only 9 W of electric power using a non-optimized, commercial motor and controller and inefficient bearings. Scaling the test results to a complete design shows that a lightweight, compact, reliable, and low power regenerative blower can meet the performance requirements for future space suit life support systems.

Izenson, Michael G.↗

NASA NTRS1993

Bar-Chart-Monitor System For Wind Tunnels

Real-time monitor system provides bar-chart displays of significant operating parameters developed for National Full-Scale Aerodynamic Complex at Ames Research Center. Designed to gather and process sensory data on operating conditions of wind tunnels and models, and displays data for test engineers and technicians concerned with safety and validation of operating conditions. Bar-chart video monitor displays data in as many as 50 channels at maximum update rate of 2 Hz in format facilitating quick interpretation.

Jung, Oscar↗

NASA NTRS2015

Parameter Impact on Sharing Studies Between UAS CNPC Satellite Transmitters and Terrestrial Systems

In order to provide a control and non-payload communication (CNPC) link for civil-use unmanned aircraft systems (UAS) when operating in beyond-line-of-sight (BLOS) conditions, satellite communication links are generally required. The International Civil Aviation Organization (ICAO) has determined that the CNPC link must operate over protected aviation safety spectrum allocations. Although a suitable allocation exists in the 5030-5091 MHz band, no satellites provide operations in this band and none are currently planned. In order to avoid a very lengthy delay in the deployment of UAS in BLOS conditions, it has been proposed to use existing satellites operating in the Fixed Satellite Service (FSS), of which many operate in several spectrum bands. Regulatory actions by the International Telecommunications Union (ITU) are needed to enable such a use on an international basis, and indeed Agenda Item (AI) 1.5 for the 2015 World Radiocommunication Conference (WRC) was established to decide on the enactment of possible regulatory provisions. As part of the preparation for AI 1.5, studies on the sharing FSS bands between existing services and CNPC for UAS are being contributed by NASA and others. These studies evaluate the potential impact of satellite CNPC transmitters operating from UAS on other in-band services, and on the potential impact of other in-band services on satellite CNPC receivers operating on UAS platforms. Such studies are made more complex by the inclusion of what are essentially moving FSS earth stations, compared to typical sharing studies between fixed elements. Hence, the process of determining the appropriate technical parameters for the studies meets with difficulty. In order to enable a sharing study to be completed in a less-than-infinite amount of time, the number of parameters exercised must be greatly limited. Therefore, understanding the impact of various parameter choices is accomplished through selectivity analyses. In the case of sharing studies for AI 1.5, identification of worst-case parameters allows the studies to be focused on worst-case scenarios with assurance that other parameter combinations will yield comparatively better results and therefore do not need to be fully analyzed. In this paper, the results of such sensitivity analyses are presented for the case of sharing between UAS CNPC satellite transmitters and terrestrial receivers using the Fixed Service (FS) operating in the same bands, and the implications of these analyses on sharing study results.

air traffic control↗

NASA NTRS2023

Combined Experimental and Modeling Study of the Interactions of Acid Gas with Common Spacecraft Surfaces for Fire Safety Applications

A fire in a spacecraft poses detrimental consequences and risks mission success in addition to crew safety. This is compounded during long-duration missions when the crew has limited options to recover from a fire. A common spacecraft fire concern is the smoldering of wire insulation, typically made from Polyvinyl chloride (PVC) or Polytetrafluoroethylene (PTFE). This creates acid gases such as Hydrogen Chloride (HCl), Hydrogen Fluoride (HF) and Hydrogen Cyanide (HCN). These poisonous gases are hazardous to the crew. They also interact with common surfaces within the spacecraft more than dominant combustion products such as CO2 and H2O. This makes them more difficult to track for potential fire detection techniques, or for postfire clean-up. It is imperative to be able to understand and predict the fate of these poisonous species in a microgravity environment in order to design a safe vehicle. HCl interacts with a number of materials inside a spacecraft. Primary among these materials is aluminum, which is abundantly used due to its strong and light weight nature. Aluminum has a natural oxide layer that protects it from corrosion but is typically treated to enhance this oxide layer. Among these treatments is a chromate conversion coating (CCC), which provides a thin enough protective oxide layer to still conduct electricity, and a traditional anodized material that has a thicker oxide layer that does not conduct electricity. Nomex is another common material found inside a spacecraft. It is a flame-resistant woven polymer that is related to nylon. This commercially available material is used for cargo storage bags and as a fire barrier. Physics-based models were developed to predict the uptake of HCl by these materials. The ultimate objective of these models is to predict the fate of HCl within the spacecraft so that sensors can be placed in meaningful locations in future missions based on the model predictions. To support these modeling efforts, experiments were performed in a cast acrylic test cell that measured the difference between the inlet and outlet concentration of HCl after inserting a sample rod of the test material. Different uptake capacities were realized for each type of sample tested. A computational fluid dynamics model (CFD) model of the reactor was then constructed that used a one-step global reaction rate with calibratable reaction (or kinetic) constants. These constants were calibrated to match the HCl uptake on the CCC aluminum samples, and the same kinetic constants were then tested for the stock and anodized aluminum samples. Model predictions matched the experimental data for the stock aluminum, and to a much lesser extent, the anodized aluminum. The model was additionally validated at different flow rates, sample surface areas, and inlet concentrations, and showed good agreement for all stock and CCC samples. The model did not accurately predict the HCl uptake in the anodized samples compared to the other two types of aluminum. Adjusting the kinetic constants and transport properties did little to improve the prediction. X-Ray Photoelectron Spectroscopy (XPS) was used to determine that the oxide layer thickness of anodized aluminum is approximately 5,000 nm, compared to 250 nm for CCC and 50 nm for stock. XPS also revealed presence of chlorine further down in the aluminum oxide layer in anodized samples than CCC and stock samples after the samples were saturated with HCl, indicating that accounting for diffusion of HCl into the oxide layer is important for accurate prediction of HCl uptake onto anodized aluminum. Consequently, a multi-scale model was developed and tested. First, a single pore inside the anodized aluminum oxide layer was modeled and is referred to as the pore-scale model. In this model, HCl diffused through the pore and reacted with the aluminum oxide pore wall to create aluminum chloride. The sample was then saturated when the mass transfer resistance through the growing aluminum chloride layer became too large for the HCl to reach the aluminum oxide wall and continue the reaction. This pore-scale model was coupled to the reactor-scale model using a concentration-dependent diffusion coefficient, resulting in much more accurate predictions (approximately half the sum square error of the aforementioned reactor-scale model that produced good agreement for stock and CCC) for a variety of operating conditions. The amount of water vapor or relative humidity (RH) in the flow during a reactor experiment was determined to influence HCl uptake. Experiments were performed to understand the interaction of gaseous HCl with aluminum surfaces in the presence of water vapor. The results show that increasing levels of RH increased the capacity of aluminum to adsorb HCl but decreased the capacity of Nomex to uptake HCl. A series of tests were performed on individual aluminum samples after they had been saturated with a fixed concentration of HCl in dry air conditions with the goal of determining how their HCl uptake capacity changes after various treatments with water relative to the original saturation tests. HCl-saturated aluminum samples subjected to a second dry air flow at the same HCl concentration as the original test had an uptake of 23.5% of the original sample with no treatment in between. Saturated aluminum samples subjected to an air flow with a RH of 90% in between tests had an uptake of 35.6% of the original. Saturated aluminum samples submerged in distilled water for 12 hours in between tests had an uptake of 82.2% of the original sample. Previously saturated aluminum tested with HCl and a 50% RH air flow resulted in similar uptake characteristics in multiple repeated tests. The experiments show the profound effect water vapor has on HCl uptake onto aluminum surfaces. In the samples subjected to water vapor or liquid water, capillary condensation and capillary diffusion alters the transport of HCl significantly. A model was proposed that developed a relationship between RH and the coefficient of HCl diffusion in aluminum chloride. This produced an “S-shaped” curve with diffusion coefficient as a function of RH, with 45% RH represented as the point where the diffusion coefficient is halfway between no water saturation and 100% water saturation in the aluminum chloride product layer. No difference in uptake characteristics for the experiment or model were realized between 50% and 62% RH. The results from the large-scale microgravity experiment, Saffire, are discussed as they pertain to the fate of HCl throughout a spacecraft. HCl was released, both as a standalone event, and in concurrence with the burning of a structured cloth. These events only produced a small response in the far field HCl sensor, while a PMMA burn that did not produce HCl had a significantly greater response. A ground-based large-scale facility was constructed to flow acid gas at the scale and configuration realized in the Saffire experiments. A CFD model of this duct was constructed to test kinetic parameters developed in this work at a larger scale and different geometric configuration and to predict the results of the large-scale facility. The models developed in this work were used to interpret the results of the microgravity tests and lead the discussion on what further experiments and models are needed in order to predict the fate of acid gas in a spacecraft environment. To summarize, the major contributions of this work are as follows: the capacity to uptake HCl, with and without the presence of water vapor, was measured for a variety of real spacecraft surfaces. Several different models (single reactor-scale, multiscale, spacecraft-scale) were developed and with the aid of modeling, the rate of uptake for those surfaces was also predicted and validated. The kinetic parameters determined from the small-scale reactor experiments and models were used to predict large-scale and microgravity tests. Conclusions from this research will be used in the design of spacecraft vehicles and large-scale microgravity fire safety experiments. The models built by this work will aid designers in sensor placement and could be used to predict acid gas transport from fires in partial gravity, as would be seen in Lunar and Martian habitats.

fire safety↗

NASA NTRS1994

Applications of a fast and efficient method for simulating orbital mission safety

A fast and efficient method for simulating potential interactions between space objects is presented. The specialized hazard analysis simulation is run at the Russian Space Surveillance Center. It simulates the motion of objects in space and determines close encounters between these objects. First, ephemerides are predicted for all space objects over the time interval of concern. Second, using the predicted ephemerides, pairs of satellites that would likely collide are grouped together. Throughout the process, the pairs initially chosen are refined until all pairs of satellites are found which come within a certain miss distance of each other. In addition to the miss distance, other characteristics of the encounter including angle of incidence, relative velocity, type of approaching object, and probability of collision come out of the simulation. There are many potential applications of this simulation and its results to missing planning and mission safety. Artificial objects can be introduced to the simulation to examine potential encounters between the new objects and current objects for mission design applications. The simulation can be run many times to create data for statistical analysis of encounter parameters. These as well as many other potential applications are presented and discussed.

Huth, Jeffrey↗

NASA NTRS2023

Distributed Sensing and Reasoning for Advanced Air Mobility Health Management and Mission Assurance

As envisioned, Advanced Air Mobility (AAM) and Urban Air Mobility (UAM) will introduce new vehicles and operations within the national airspace, moving people and cargo safely and efficiently at a much larger scale than today. Driven by transformative technology and revolutionary aircraft, this movement must still manage technical, regulatory, operational, and policy challenges. NASA’s work in support of AAM and UAM includes, but is not limited to tools, technologies, and architectures for distributed sensing of aircraft, data & reasoning services exchange, Human-Autonomy Teaming (HAT), contingency management, and vehicle health management. This paper builds upon these concepts and evaluates the use of distributed sensing and infrastructure assistance towards health management and mission assurance of UAM vehicles in specific operational scenarios. Through analysis of these example missions, aided by the data produced by the conceptual distributed sensing and reasoning infrastructure, we define opportunities for state estimation, diagnosis, and key decision points affecting the health state of the vehicle and the airspace volume. As a result, we define a number of measurable health state parameters providing relevant information to drive decision-making in contingency situations or feed automation tools in support of operators and managers.

Safety↗

NASA NTRS1966

Bio-Medical Factors and External Hazards in Space Station Design

The design of space-station configurations is influenced by many factors. Probably the most demanding and critical are the biomedical and external hazards requirements imposed to provide the proper environment and supporting facilities for the crew and the adequate protective measures necessary to provide a configuration'in which the crew can live and work efficiently in relative comfort and safety. The major biomedical factors, such as physiology, psychology, nutrition, personal hygiene, waste management, and recreation, all impose their own peculiar requirements. The commonality and integration of these requirements demand the utmost ingenuity and inventiveness be exercised in order to achieve effective configuration compliance. The relationship of biomedical factors for the internal space-station environment will be explored with respect to internal atmospheric constituency, atmospheric pressure levels, oxygen positive pressure, temperature, humidity, CO2 concentration, and atmospheric contamination. The range of these various parameters and the recommended levels for design use will be analyzed. Requirements and criteria for specific problem areas such as zero and artificial gravity and crew private quarters will be reviewed and the impact on the design of representative solutions will be presented. In the areas of external hazards, the impact of factors such as meteoroids, radiation, vacuum, temperature extremes, and cycling on station design will be evaluated. Considerations with respect to operational effectiveness and crew safety will be discussed. The impact of such factors on spacecraft design to achieve acceptable launch and reentry g levels, crew rotation intervals, etc., will be reviewed.

Olling, E. H.↗

NASA NTRS1966

Bio-Medical Factors and External Hazards in Space Station Design

The design of space-station configurations is influenced by many factors, Probably the most demanding and critical are the biomedical and external hazards requirements imposed to provide the proper environment and supporting facilities for the crew and the adequate protective measures necessary to provide a configuration in which the crew can live and work efficiently in relative comfort and safety. The major biomedical factors, such as physiology, psychology, nutrition, personal hygiene, waste management, and recreation, all impose their own peculiar requirements. The commonality and integration of these requirements demand the utmost ingenuity and inventiveness be exercised in order to achieve effective configuration compliance. The relationship of biomedical factors for the internal space-station environment will be explored with respect to internal atmospheric constituency, atmospheric pressure levels, oxygen positive pressure, temperature, humidity, CO2 concentration, and atmospheric contamination. The range of these various parameters and the recommended levels for design use will be analyzed. Requirements and criteria for specific problem areas such as zero and artificial gravity and crew private quarters will be reviewed and the impact on the design of representative solutions will be presented. In the areas of external hazards, the impact of factors such as meteoroids, radiation, vacuum, temperature extremes, and cycling on station design will be evaluated. Considerations with respect to operational effectiveness and crew safety will be discussed. The impact of such factors on spacecraft design to achieve acceptable launch and reentry g levels, crew rotation intervals, etc., will be reviewed. Examples of configurations, subsystems, and internal a arrangement and installations to comply with such biomedical factor requirements will ber presented. The effects of solutions to certain biomedical factors on configuration weight, operational convenience, and program costs will be compared.

Olling, Edward H.↗

NASA NTRSDate not supplied

Thin-Film Embedded Sensors for Battery Health Monitoring

Hybrid or all-electric aircraft are being developed as the next generation of aircraft to both allow new forms of aviation and decrease environmental impact. Since these types of aircraft are based on high-capacity battery technology, safe operation of these batteries becomes increasingly important. In particular, the potential for battery failure due to uncontrolled chemical reactions resulting in thermal runaway, catastrophic failure, and battery fires must be addressed in order for such battery technology to have the level of safety needed for standard aviation implementation. Efforts to ensure battery safety often involve engineering solutions that seek to contain rather than prevent such events by early detection. Such approaches increase the system weight and decrease the power per unit mass provided by the battery system. Existing methods for measuring battery parameters to determine the battery state-of-health are limited. These methods include electrical measurements of the cell current and/or voltage output as well as temperature measurements taken externally on the cell surface. Such external temperature measurements are limited in their ability to provide early warning of impending battery failure. In response, an effort to develop sensors operating internal to battery for health monitoring has been ongoing in the NASA Sensor-based Prognostics to Avoid Runaway Reactions & Catastrophic Ignition (SPARRCI) project. The basic approach associated with this sensor work is the deposition of thin film sensors on the battery separator located between the anode and cathode of the battery. These thin film sensors are then monitored to determine changes in battery parameters and health. Microfabrication techniques are employed to minimize the overall impact of the sensors on battery operation through the implementation of sensors with minimal size, weight, and power consumption. The thickness of the films, which are fabricated through physical vapor deposition (sputtering), are on the order of thousands of angstroms and can have minimal surface area. Thin film sensors for system health management have been implemented for a many decades on complex components for aerospace applications. However, the application of thin films of this type on a battery separator for internal battery monitoring applications has not previously been demonstrated to our knowledge. This paper describes the development of sensors for the internal battery monitoring through the use of thin film sensor technology. Thin metal films were successfully deposited on a battery separator polymer material with good adherence and electrical continuity. Multiple types of sensors have been deposited, as well as lead connections from the sensor to the edge of the separator material. The ability of these thin film sensors immersed in electrolyte to perform multiple types of battery parameter measurements has been demonstrated. For example, a multiparameter sensor system measured multiple properties simultaneously inside of a pouch cell over a wide temperature range. Further, real time measurement of interior temperature changes in a battery pouch cell with an integrated interior temperature sensor was demonstrated. These changes include detecting a fault in the battery (shorting) in situ with rapid response time (less than a minute) corresponding to a more limited response by a temperature sensor mounted externally. Other aspects of monitoring battery health were also explored, such as real-time measurement of simulated dendrite growth/metal deposition by sensor on separator material demonstrated. Future efforts will include improvements in the durability of the sensor structure to allow introduction of the approach into standard battery fabrication techniques. Overall, this work is a step forward in providing a method to prevent catastrophic battery failures and provide a foundation for safer, lighter, and higher energy batteries for the electric aircraft industry.

thin film battery health↗

NASA NTRS2008

Regenerative Blower for EVA Suit Ventilation Fan

Portable life support systems in future space suits will include a ventilation subsystem driven by a dedicated fan. This ventilation fan must meet challenging requirements for pressure rise, flow rate, efficiency, size, safety, and reliability. This paper describes research and development that showed the feasibility of a regenerative blower that is uniquely suited to meet these requirements. We proved feasibility through component tests, blower tests, and design analysis. Based on the requirements for the Constellation Space Suit ventilation fan, we designed the critical elements of the blower. We measured the effects of key design parameters on blower performance using separate effects tests, and used the results of these tests to design a regenerative blower that will meet the ventilation fan requirements. We assembled a proof-of-concept blower and measured its performance at low pressures that simulate a PLSS environment. We obtained head/flow performance curves over a range of operating speeds, identified the maximum efficiency point for the blower, and used these results to specify the design and operating conditions for the ventilation fan. We designed a compact motor that can drive the blower under all anticipated operating requirements and operate with high efficiency during normal operation. We identified materials for the blower that will enhance safety for operation in a lunar environment. We produced a solid model that illustrates the final design. The proof-of-concept blower produced the flow rate and pressure rise needed for the CSSS ventilation subsystem while running at 5400 rpm and consuming only 9 W of electric power and using a non-optimized, commercial motor and controller and inefficient bearings. Scaling the test results to a complete design shows that a lightweight, compact, reliable, and low power blower can meet the performance requirements for future PLSSs.

Paul, Heather↗

NASA NTRS2011

NASA System Safety Handbook: System Safety Framework and Concepts for Implementation - Volume 1

System safety assessment is defined in NPR 8715.3C, NASA General Safety Program Requirements as a disciplined, systematic approach to the analysis of risks resulting from hazards that can affect humans, the environment, and mission assets. Achievement of the highest practicable degree of system safety is one of NASA's highest priorities. Traditionally, system safety assessment at NASA and elsewhere has focused on the application of a set of safety analysis tools to identify safety risks and formulate effective controls.1 Familiar tools used for this purpose include various forms of hazard analyses, failure modes and effects analyses, and probabilistic safety assessment (commonly also referred to as probabilistic risk assessment (PRA)). In the past, it has been assumed that to show that a system is safe, it is sufficient to provide assurance that the process for identifying the hazards has been as comprehensive as possible and that each identified hazard has one or more associated controls. The NASA Aerospace Safety Advisory Panel (ASAP) has made several statements in its annual reports supporting a more holistic approach. In 2006, it recommended that "... a comprehensive risk assessment, communication and acceptance process be implemented to ensure that overall launch risk is considered in an integrated and consistent manner." In 2009, it advocated for "... a process for using a risk-informed design approach to produce a design that is optimally and sufficiently safe." As a rationale for the latter advocacy, it stated that "... the ASAP applauds switching to a performance-based approach because it emphasizes early risk identification to guide designs, thus enabling creative design approaches that might be more efficient, safer, or both." For purposes of this preface, it is worth mentioning three areas where the handbook emphasizes a more holistic type of thinking. First, the handbook takes the position that it is important to not just focus on risk on an individual basis but to consider measures of aggregate safety risk and to ensure wherever possible that there be quantitative measures for evaluating how effective the controls are in reducing these aggregate risks. The term aggregate risk, when used in this handbook, refers to the accumulation of risks from individual scenarios that lead to a shortfall in safety performance at a high level: e.g., an excessively high probability of loss of crew, loss of mission, planetary contamination, etc. Without aggregated quantitative measures such as these, it is not reasonable to expect that safety has been optimized with respect to other technical and programmatic objectives. At the same time, it is fully recognized that not all sources of risk are amenable to precise quantitative analysis and that the use of qualitative approaches and bounding estimates may be appropriate for those risk sources. Second, the handbook stresses the necessity of developing confidence that the controls derived for the purpose of achieving system safety not only handle risks that have been identified and properly characterized but also provide a general, more holistic means for protecting against unidentified or uncharacterized risks. For example, while it is not possible to be assured that all credible causes of risk have been identified, there are defenses that can provide protection against broad categories of risks and thereby increase the chances that individual causes are contained. Third, the handbook strives at all times to treat uncertainties as an integral aspect of risk and as a part of making decisions. The term "uncertainty" here does not refer to an actuarial type of data analysis, but rather to a characterization of our state of knowledge regarding results from logical and physical models that approximate reality. Uncertainty analysis finds how the output parameters of the models are related to plausible variations in the input parameters and in the modeling assumptions. The evaluation of unrtainties represents a method of probabilistic thinking wherein the analyst and decision makers recognize possible outcomes other than the outcome perceived to be "most likely." Without this type of analysis, it is not possible to determine the worth of an analysis product as a basis for making decisions related to safety and mission success. In line with these considerations the handbook does not take a hazard-analysis-centric approach to system safety. Hazard analysis remains a useful tool to facilitate brainstorming but does not substitute for a more holistic approach geared to a comprehensive identification and understanding of individual risk issues and their contributions to aggregate safety risks. The handbook strives to emphasize the importance of identifying the most critical scenarios that contribute to the risk of not meeting the agreed-upon safety objectives and requirements using all appropriate tools (including but not limited to hazard analysis). Thereafter, emphasis shifts to identifying the risk drivers that cause these scenarios to be critical and ensuring that there are controls directed toward preventing or mitigating the risk drivers. To address these and other areas, the handbook advocates a proactive, analytic-deliberative, risk-informed approach to system safety, enabling the integration of system safety activities with systems engineering and risk management processes. It emphasizes how one can systematically provide the necessary evidence to substantiate the claim that a system is safe to within an acceptable risk tolerance, and that safety has been achieved in a cost-effective manner. The methodology discussed in this handbook is part of a systems engineering process and is intended to be integral to the system safety practices being conducted by the NASA safety and mission assurance and systems engineering organizations. The handbook posits that to conclude that a system is adequately safe, it is necessary to consider a set of safety claims that derive from the safety objectives of the organization. The safety claims are developed from a hierarchy of safety objectives and are therefore hierarchical themselves. Assurance that all the claims are true within acceptable risk tolerance limits implies that all of the safety objectives have been satisfied, and therefore that the system is safe. The acceptable risk tolerance limits are provided by the authority who must make the decision whether or not to proceed to the next step in the life cycle. These tolerances are therefore referred to as the decision maker's risk tolerances. In general, the safety claims address two fundamental facets of safety: 1) whether required safety thresholds or goals have been achieved, and 2) whether the safety risk is as low as possible within reasonable impacts on cost, schedule, and performance. The latter facet includes consideration of controls that are collective in nature (i.e., apply generically to broad categories of risks) and thereby provide protection against unidentified or uncharacterized risks.

Dezfuli, Homayoon↗

NASA NTRS1989

Preliminary development of an intelligent computer assistant for engine monitoring

As part of the F-18 high-angle-of-attack vehicle program, an AI method has been developed for the real-time monitoring of the propulsion system and for the identification of recovery procedures for the F404 engine. The aim of the development program is to provide enhanced flight safety and to reduce the duties of the propulsion engineers. As telemetry data is received, the results are continually displayed in a number of different color graphical formats. The system makes possible the monitoring of the engine state and the individual parameters. Anomaly information is immediately displayed to the engineer.

Disbrow, James D.↗

NASA NTRS1989

Preliminary development of an intelligent computer assistant for engine monitoring

As part of the F-18 high-angle-of-attack vehicle program, an AI method was developed for the real time monitoring of the propulsion system and for the identification of recovery procedures for the F404 engine. The aim of the development program is to provide enhanced flight safety and to reduce the duties of the propulsion engineers. As telemetry data is received, the results are continually displayed in a number of different color graphical formats. The system makes possible the monitoring of the engine state and the individual parameters. Anomaly information is immediately displayed to the engineer.

Disbrow, James D.↗

NASA NTRS2013

Maintaining Adequate Carbon Dioxide Washout for an Advanced Extravehicular Mobility Unit

Over the past several years, NASA has realized tremendous progress in technology development that is aimed at the production of an Advanced Extravehicular Mobility Unit (AEMU). Of the many functions provided by the spacesuit and portable life support subsystem within the AEMU, delivering breathing gas to the astronaut along with removing the carbon dioxide (CO2) remains one of the most important environmental functions that the AEMU can control. Carbon dioxide washout is the capability of the ventilation flow in the spacesuit helmet to provide low concentrations of CO2 to the crew member to meet breathing requirements. CO2 washout performance is a critical parameter needed to ensure proper and sufficient designs in a spacesuit and in vehicle applications such as sleep stations and hygiene compartments. Human testing to fully evaluate and validate CO2 washout performance is necessary but also expensive due to the levied safety requirements. Moreover, correlation of math models becomes challenging because of human variability and movement. To supplement human CO2 washout testing, a breathing capability will be integrated into a suited manikin test apparatus to provide a safe, lower cost, stable, easily modeled alternative to human testing. Additionally, this configuration provides NASA Johnson Space Center (JSC) the capability to evaluate CO2 washout under off-nominal conditions that would otherwise be unsafe for human testing or difficult due to fatigue of a test subject. Testing has been under way in-house at JSC and analysis has been initiated to evaluate whether the technology provides sufficient performance in ensuring that the CO2 is removed sufficiently and the ventilation flow is adequate for maintaining CO2 washout in the AEMU spacesuit helmet of the crew member during an extravehicular activity. This paper will review recent CO2 washout testing and analysis activities, testing planned in-house with a spacesuit simulator, and the associated analytical work along with insights from the medical aspect on the testing.

Chullen, Cinda↗

NASA NTRS2014

On-Command Force and Torque Impeding Devices (OC-FTID) Using ERF

Various machines have been developed to address the need for countermeasures of bone and muscle deterioration when humans operate over extended time in space. Even though these machines are in use, each of them has many limitations that need to be addressed in an effort to prepare for human missions to distant bodies in the solar system. An exercise exoskeleton was conceived that performs on-demand resistivity by inducing force and torque impedance via ElectroRheological Fluid (ERF). The resistive elements consist of pistons that are moving inside ERF-filled cylinders or a donut-shaped cavity, and the fluid flows through the piston when the piston is moved. Tests of the operation of ERF against load showed the feasibility of this approach. ERF properties of high yield stress, low current density, and fast response (less than one millisecond) offer essential characteristics for the construction of the exoskeleton. ERFs can apply very high electrically controlled resistive forces or torque while their size (weight and geometric parameters) can be very small. Their long life and ability to function in a wide temperature range (from -40 to 200 C) allows for their use in extreme environments. ERFs are also nonabrasive, non-toxic, and nonpolluting (meet health and safety regulations). The technology is applicable as a compact exercise machine for astronauts' countermeasure of microgravity, an exercise machine for sport, or as a device for rehabilitation of patients with limb issues.

Bar-Cohen, Yoseph↗

NASA NTRS1991

Uncertainty analysis for Ulysses safety evaluation report

As part of the effort to review the Ulysses Final Safety Analysis Report and to understand the risk of plutonium release from the Ulysses spacecraft General Purpose Heat Source-Radioisotope Thermal Generator, the Interagency Nuclear Safety Review Panel (INSRP) performed an integrated, quantitative analysis of the uncertainties of the calculated risk of plutonium release from Ulysses. Using state-of-art probabilistic risk assessment technology, the uncertainty analysis accounted for both variability and uncertainty of the key parameters of the risk analysis. The results show that INSRP had high confidence that risk of fatal cancers from potential plutonium release associated with calculated launch and deployment accident scenarios is low.

Frank, Michael V.↗

NASA NTRS1991

Testing - Smart strategy for safety and mission quality

The paper is concerned with the need for a comprehensive test plan for the Space Station Freedom (SST) that would fully verify specification compliance and be based on an error budget. In particular, attention is given to some lessons learned from other NASA programs and the principal challenges for SSF testing, including phase C/D/E agreements, testing parameters, phase testing, and the human element. The importance of close teamwork between the NASA/Contractor systems engineers and assurance engineers is emphasized.

Rodney, George A.↗