Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

Rapid quenching effects in PVC films

Using a specially constructed microbalance for hydrostatic weighing, density changes in PVC thin films (with no additives, 30-100 micrometers thick), due to rapid quenching (approximately 300 C/sec) through the glass transition temperature, have been observed. The more severe the quench, the greater is the free volume content. Isobaric volume recovery of PVC has also been studied by volume dilatometry. Both show aging of relaxing molecular rearrangements takes place as a linear function of logarithmic aging time at room temperature. Distribution of retardation times and Primak's distributed activation energy spectra have been applied to the volume recovery data. The concomitant changes in mechanical properties of PVC after quenching have been monitored by tensile creep and stress-strain to failure. All reflect the presence of excess free volume content, due to rapid quenching.

Lee, H. D.↗

Programs For Modeling Fault-Tolerant Computing Systems

Pade Approximation with Scaling, (PAWS) and Scaling Taylor Exponential Matrix (STEM) computer programs are software tools for design and validation. Provide flexible, user-friendly, language-based interface for input of Markov mathematical methods describing behaviors of fault-tolerant computer systems. Markov models include both recovery from faults via reconfiguration and behaviors of such systems when faults occur. PAWS and STEM produce exact solutions of probability of system failure and provide conservative estimate of number of significant digits in solution. Written in PASCAL and FORTRAN.

Butler, Ricky W.↗

An Earth Entry Vehicle For Returning Samples From Mars

The driving requirement for design of a Mars Sample return mission is assuring containment of the returned samples. The impact of this requirement on developmental costs, mass allocation, and design approach of the Earth Entry Vehicle is significant. A simple Earth entry vehicle is described which can meet these requirements and safely transport the Mars Sample Return mission's sample through the Earth's atmosphere to a recoverable location on the surface. Detailed analysis and test are combined with probabilistic risk assessment to design this entirely passive concept that circumvents the potential failure modes of a parachute terminal descent system. The design also possesses features that mitigate other risks during the entry, descent, landing and recovery phases. The results of a full-scale drop test are summarized.

Mitcheltree, R.↗

Earth Entry Vehicle for Mars Sample Return

The driving requirement for design of a Mars Sample return mission is assuring containment of the returned samples. The impact of this requirement on developmental costs, mass allocation, and design approach of the Earth Entry Vehicle is significant. A simple Earth entry vehicle is described which can meet these requirements and safely transport the Mars Sample Return mission's sample through the Earth's atmosphere to a recoverable location on the surface. Detailed analysis and test are combined with probabilistic risk assessment to design this entirely passive concept that circumvents the potential failure modes of a parachute terminal descent system. The design also possesses features that mitigate other risks during the entry, descent, landing and recovery phases. The results of a full-scale drop test are summarized.

Mitcheltree, R. A.↗

Free-Spinning-Tunnel Tests of a 1/20-Scale Model of the Northrop N-9M Airplane

Spin tests of a 1/20-scale model of the Northrop N-9M airplane have been performed in the Langley 20-foot free-spinning tunnel. The erect and inverted spin and recovery characteristics were determined for various loading conditions and the effect of deflecting the flaps and of extending the landing gear was investigated. The investigation also included tests to determine the size parachute required for satisfactory spin recovery by parachute action alone. The tests were performed at an equivalent spin altitude of 15,000 feet. A specialized recovery technique consisting of rapid full reversal of the rudder pedals against the spin combined with turning the wheel against the spin and movement of the stick forward is recommended for all loadings and configurations of the airplane. The results also indicated that a 7-foot-diameter spin-recovery parachute having a drag coefficient of 0.7 attached to the outboard wing tip with a towline of 10 to 30 feet or an 8.8-foot-diameter parachute attached to the fixed portion of the wing between the elevons and the pitch flaps with a 30-foot towline would provide satisfactory recovery from demonstration spins by parachute action alone. It appears possible that the first N-9M airplane may have crashed because of failure to recover from a spin.

MacDougall, George F., Jr.↗

A pilot rating scale for evaluating failure transients in electronic flight control systems

A pilot rating scale was developed to describe the effects of transients in helicopter flight-control systems on safety-of-flight and on pilot recovery action. The scale was applied to the evaluation of hardovers that could potentially occur in the digital flight-control system being designed for a variable-stability UH-60A research helicopter. Tests were conducted in a large moving-base simulator and in flight. The results of the investigation were combined with existing airworthiness criteria to determine quantitative reliability design goals for the control system.

Hindson, William S.↗

Embolism resistance explains mortality and recovery of five subtropical evergreen broadleaf trees to persistent drought

Subtropical evergreen broadleaf forest (SEBF) is experiencing and expected to suffer more frequent and severe drought events. However, how the hydraulic traits directly link to the mortality and recovery of SEBF trees remains unclear. In this study, we conducted a drought-rewatering experiment on tree seedlings of five dominant species to investigate how the hydraulic traits were related to tree mortality and the resistance and recovery of photosynthesis (A) and transpiration (E) under different drought severities. Species with greater embolism resistance (P 50 ) survived longer than those with the weaker P 50 . However, there was no general hydraulic threshold associated with tree mortality, with the lethal hydraulic failure varying from 64% to 93% loss of conductance. Further, the photosynthesis and transpiration of tree species with greater P 50 were more resistant to and recovered faster from drought than those with lower P 50 . Other plant traits could not explain the interspecific variation in tree mortality and drought resistance and recovery. These results highlight the unique importance of embolism resistance in driving carbon and water process under persistent drought across different trees in SEBF. The absence of multiple efficient drought strategies in SEBF seedlings implies the difficulty of natural seedling regeneration under future droughts, which often occurs after destructive disturbances (e.g., extreme drought events and typhoon), suggesting that this biome may be highly vulnerable to co-occurring climate extremes.

54 ENVIRONMENTAL SCIENCES↗

Oregon Roadway CSZ Liquefaction and Landslide Impact Screening Analysis

The roadway transportation routes and the surrounding environments in Oregon will be subject to ground acceleration and potential associated deformation due to the propagation of waves of energy during a Cascadia Subduction Zone (CSZ) earthquake. Linear features such as highways may be subject to partial or complete disruption of their function resulting from ground deformations at and along the roadway. A potential source of these disruptions associated with a CSZ event are landslides and liquefaction in the soils along and beneath the highways and local roadways. The construction of the Oregon roadway system and urban development have occurred largely along the banks of the rivers—those along the Pacific coast, and along the valleys throughout the Oregon Coast Range and Cascade Mountains. These locations also represent areas where landslides and liquefaction have occurred historically, or may potentially occur in the future, presenting a significant vulnerability for the roadway system and dependent post-CSZ earthquake emergency response and recovery effort. Many of the Oregon areas with landslide- and liquefaction-prone soils have the potential to impact roadway transportation routes after a major earthquake causing delays in establishing routes to transport emergency response personnel and resources to impacted areas and communities. This report presents methods used to project the impacts that CSZ earthquake-induced landslides and liquefaction may have on roadways across Oregon. First, this report presents an approach for estimating the risk of landslides to Oregon roadways, and determining approximate reopening times. Second, this report presents a similar approach for estimating the risk of liquefaction-induced ground displacements to roadway pavements, also resulting in approximate reopening times for roadway segments. The outcomes of these two ground failure analyses serve as inputs to a broader analysis of CSZ earthquake impacts to Oregon’s surface transportation system and its ability to support post-disaster response and recovery activities, as part of the Oregon Transportation Systems Regional Resiliency Assessment Program project (CISA 2021).

58 GEOSCIENCES↗

State reduction for semi-Markov reliability models

Semi-Markov processes have proved to be an effective and convenient tool to construct models of systems that achieve reliability by redundancy and reconfiguration. These models are able to depict complex system architectures and to capture the dynamics of fault arrival and system recovery. A disadvantage of this approach is that the models can be extremely large, which poses both a model construction and a computational problem. Techniques are needed to reduce the model size. Because these systems are used in critical applications where failure can be expensive, there must be an analytically derived bound for the error produced by the model reduction technique. Automatic model generation programs have been written to help the reliability analyst produce models of complex systems. Because of the importance of these programs, the model reduction technique needs to be precise and easily implemented. This paper presents a model reduction technique called trimming that can be applied to a popular class of systems. An error bound for the trimming procedure is derived that uses readily available system parameters. The trimming procedure is precisely described and appears easy to implement in a model generation program.

Reduced order systems↗

Entry flight control system downmoding evaluation

A method to desensitize the entry flight control system to structural vibration feedback which might induce an oscillatory instability is described. Trends in vehicle response and handling characteristics as a function of gain combinations in the FCS forward and rate feedback loops were described as observed in a man-in-the-loop simulation. Among the flight conditions considered are the effects of downmoding with APU failures, off-nominal trajectory conditions, sensed angle of attack errors, the impact on RCS fuel consumption, performance in the presence of aero variations, recovery from large FCS upsets, and default gains.

Barnes, H. A.↗

Free-flight Performance of a Rocket-boosted, Air-launched 16-inch-diameter Ram-jet Engine at Mach Numbers up to 2.20

The investigation of air-launched ram-jet engines has been extended to include a study of models with a nominal design free-stream Mach number of 2.40. These models require auxiliary thrust in order to attain a flight speed at which the ram jet becomes self-accelerating. A rocket-boosting technique for providing this auxiliary thrust is described and time histories of two rocket-boosted ram-jet flights are presented. In one flight, the model attained a maximum Mach number of 2.20 before a fuel system failure resulted in the destruction of the engine. Performance data for this model are presented in terms of thrust and drag coefficients, diffuser pressure recovery, mass-flow ratio, combustion efficiency, specific fuel consumption, and over-all engine efficiency.

AIR INLETS - NOSE, ANNULAR↗

The Role of Alerting System Failures in Loss of Control Accidents CAST SE-210 Output 2

This report is part of a series of reports that address flight deck design and evaluation, written as a response to loss of control accidents. In particular, this activity is directed at failures in airplane state awareness in which the pilot loses awareness of the airplane's energy state or attitude and enters an upset condition. In a report by the Commercial Aviation Safety Team, an analysis of accidents and incidents related to loss of airplane state awareness determined that hazard alerting was not effective in producing the appropriate pilot response to a hazard (CAST, 2014). In the current report, we take a detailed look at 28 airplane state awareness accidents and incidents to determine how well the hazard alerting worked. We describe a five-step integrated alerting-to-recovery sequence that prescribes how hazard alerting should lead to effective flight crew actions for managing the hazard. Then, for each hazard in each of the 28 events, we determine if that sequence failed and, if so, how it failed. The results show that there was an alerting failure in every one of the 28 safety events, and that the most frequent failure (20/28) was tied to the flight crew not orienting to (not being aware of) the hazard. The discussion section summarizes findings and identifies alerting issues that are being addressed and issues that are not currently being addressed. We identify a few recent upgrades that have addressed certain alerting failures. Two of these upgrades address alerting design, but one response to the safety events is to upgrade training for approach to stall and stall recovery. We also describe issues that are not being addressed adequately: better alert integration for flight path management types of hazards, airplanes in the fleet that do not meet the current alerting regulations, a lack of innovation for addressing cases of channelized attention, and existing vulnerabilities in managing data validity.

aviation safety↗

Fault recovery in the reliable multicast protocol

The Reliable Multicast Protocol (RMP) provides a unique, group-based model for distributed programs that need to handle reconfiguration events at the application layer. This model, called membership views, provides an abstraction in which events such as site failures, network partitions, and normal join-leave events are viewed as group reformations. RMP provides access to this model through an application programming interface (API) that notifies an application when a group is reformed as the result of a some event. RMP provides applications with reliable delivery of messages using an underlying IP Multicast (12, 5) media to other group members in a distributed environment even in the case of reformations. A distributed application can use various Quality of Service (QoS) levels provided by RMP to tolerate group reformations. This paper explores the implementation details of the mechanisms in RMP that provide distributed applications with membership view information and fault recovery capabilities.

Callahan, John R.↗

Specification and Design of a Fault Recovery Model for the Reliable Multicast Protocol

The Reliable Multicast Protocol (RMP) provides a unique, group-based model for distributed programs that need to handle reconfiguration events at the application layer. This model, called membership views, provides an abstraction in which events such as site failures, network partitions, and normal join-leave events are viewed as group reformations. RMP provides access to this model through an application programming interface (API) that notifies an application when a group is reformed as the result of a some event. RMP provides applications with reliable delivery of messages using an underlying IP Multicast media to other group members in a distributed environment even in the case of reformations. A distributed application can use various Quality of Service (QoS) levels provided by RMP to tolerate group reformations. This paper explores the implementation details of the mechanisms in RMP that provide distributed applications with membership view information and fault recovery capabilities.

Montgomery, Todd↗

Advanced Power Conditioning System

The second portion of the advanced power conditioning system development program is reported. Five 100-watt parallel power stages with majority-vote-logic feedback-regulator were breadboarded and tested to the design goals. The input voltage range was 22.1 to 57.4 volts at loads from zero to 500 watts. The maximum input ripple current was 200 mA pk-pk (not including spikes) at 511 watts load; the output voltage was 56V dc with a maximum change of 0.89 volts for all variations of line, load, and temperature; the maximum output ripple was 320 mV pk-pk at 512 watts load (dependent on filter capacitance value); the maximum efficiency was 93.9% at 212 watts and 50V dc input; the minimum efficiency was 87.2% at 80-watt load and 50V dc input; the efficiency was above 90% from 102 watts to 372 watts; the maximum excursion for an 80-watt load change was 2.1 volts with a recovery time of 7 milliseconds; and the unit performed within regulation limits from -20 C to +85 C. During the test sequence, margin tests and failure mode tests were run with no resulting degradation in performance.

Johnson, N. L.↗

Fault recovery recommendation

Information on Recovery Recommendation System (RECORS) is given in viewgraph form. The system goal is to provide intelligent aiding for monitoring, diagnosis and response to aircraft system failures. Information is given on levels of abstraction, RECORS implementation, and architecture.

Hudlicka, Eva↗

SMM attitude control recovery

A description is given of the way in which the Modular Attitude Control System (MACS) onboard computer of the NASA Solar Maximum Mission (SMM) laboratory was reprogrammed, to restore attitude control for the SMM, after fuse failures permanently disabled all three of the MACS primary reaction wheels. Algorithms were developed which provided both a thermal- and power-safe, spin-stabilized mode and three-axis sun pointing, using the damaged primary wheels' backup skew wheel in a momentum-bias control scheme. Magnetic torquing was used in these algorithms for angular momentum vector magnitude and directional control.

Hoffman, H. C.↗

Contingency Trajectory Design for a Lunar Orbit Insertion Maneuver Failure by the LADEE Spacecraft

A contingency trajectory analysis was performed for NASA Ames Research Center’s (ARC’s) Lunar Atmosphere and Dust Environment Explorer (LADEE) spacecraft in case of a missed lunar orbit insertion (LOI) maneuver. Recovery trajectory options are shown to exist for all LADEE launch opportunities throughout a one year period. Recovery ΔV costs primarily depended on the spacecraft’s apogee location on or near the Sun-Earth weak stability boundary (WSB) and the time needed by the spacecraft to recover (e.g. to “wake up” from “safe” mode) to perform an escape prevention maneuver after the missed LOI.

Genova, A. L.↗