Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safe mode”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 271 records · Page 15

Manual control aspects of orbital flight

Studies of spacecraft rendezvous and docking operations began in the Gemini program in preparation for the two dockings required to send a crew to the moon and return them safely to Earth. However, the goal of getting to the moon before the end of the decade was of greater concern than mission optimization so little or no time or money was expended in researching human factors implications of operational aspects such as braking gates or control modes. Also, with sixteen operational dockings over a six year period (12 Apollo, 3 Skylab, and 1 ASTP) in the United States space program, economies of scale were not yet available to justify extensive research into decreasing the time or fuel necessary for a successful docking. With an operational space station era approaching in which orbital maneuvering vehicle (OMV), orbital transfer vehicle (OTV), shuttle orbiter, and other traffic will play a major role, a concerted research effort now could help avoid many potential problems later in addition to increasing safety, fuel economy, and productivity. A knowledge of manual control capabilities associated with piloted spaceflight could help save a life if the operational flight envelope can be safely enlarged to include faster dockings that currently envisioned. For example, current and future research is designed to acquire the appropriate information.

Brody, Adam R.↗

Independent Orbiter Assessment (IOA): Analysis of the electrical power distribution and control/remote manipulator system subsystem

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA approach features a top-down analysis of the Electrical Power Distribution and Control (EPD and C)/Remote Manipulator System (RMS) hardware to determine failure modes, criticality, and potential critical items. To preserve independence, this analysis was accomplished without reliance upon the results contained in the NASA FMEA/CIL documentation. This report documents the results of the independent analysis of the EPD and C/RMS (both port and starboard) hardware. The EPD and C/RMS subsystem hardware provides the electrical power and power control circuitry required to safely deploy, operate, control, and stow or guillotine and jettison two (one port and one starboard) RMSs. The EPD and C/RMS subsystem is subdivided into the four following functional divisions: Remote Manipulator Arm; Manipulator Deploy Control; Manipulator Latch Control; Manipulator Arm Shoulder Jettison; and Retention Arm Jettison. The IOA analysis process utilized available EPD and C/RMS hardware drawings and schematics for defining hardware assemblies, components, and hardware items. Each level of hardware was evaluated and analyzed for possible failure modes and effects. Criticality was assigned based on the severity of the effect for each failure mode.

Robinson, W. W.↗

Light Water Reactor Sustainability Program: Materials Research Pathway: FY 23 Technical Program Plan

Components in operating commercial nuclear power plants must withstand very harsh environments that include extended time at neutron and gamma irradiation, stress, and temperature, as well as possible exposure to corrosive media. The many modes of materials degradation are complex and often include synergies between multiple environmental variables and conditions that vary depending on locations and materials. Understanding and managing materials degradation is a requirement for the continued safe and reliable operation of nuclear power plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Friction and wear of nuclear graphite exposed to molten FLiNaK salt environment

This report formally documents the completion of the Advanced Reactor Technologies Level 3 Milestone (M3TG-25OR0501104), “Initiate graphite wear studies of graphite samples exposed to molten salt environment,” due August 1, 2025. The report summarizes the ongoing activities aimed at characterizing the friction and wear behavior of graphite in molten LiF–NaF–KF (FLiNaK) salt environment. The wear and friction behavior of self-mated ET-10 nuclear graphite were tested at varying temperatures (550°C and 650°C), contact loads (40 and 80 N) and sliding speeds (1 and 10 mm/s) in a controlled argon environment. The results were compared to the wear and friction behavior of the same graphite material in a dry argon environment. This report presents initial studies on the friction and wear behavior of graphite in sliding contact mode, with future work focused on investigating the graphite matrix materials, as well as rolling and impact contact modes. The outcomes of this report could provide insights into assessing the integrity of the graphitic components of pebble-bed fluoride salt–cooled high-temperature reactors (PB-FHRs) to enhance their safe operation.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

The Effect of Faster Engine Response on the Lateral Directional Control of a Damaged Aircraft

The integration of flight control and propulsion control has been a much discussed topic, especially for emergencies where the engines may be able to help stabilize and safely land a damaged aircraft. Previous research has shown that for the engines to be effective as flight control actuators, the response time to throttle commands must be improved. Other work has developed control modes that accept a higher risk of engine failure in exchange for improved engine response during an emergency. In this effort, a nonlinear engine model (the Commercial Modular Aero-Propulsion System Simulation 40k) has been integrated with a nonlinear airframe model (the Generic Transport Model) in order to evaluate the use of enhanced-response engines as alternative yaw rate control effectors. Tests of disturbance rejection and command tracking were used to determine the impact of the engines on the aircraft's dynamical behavior. Three engine control enhancements that improve the response time of the engine were implemented and tested in the integrated simulation. The enhancements were shown to increase the engine s effectiveness as a yaw rate control effector when used in an automatic feedback loop. The improvement is highly dependent upon flight condition; the airframe behavior is markedly improved at low altitude, low speed conditions, and relatively unchanged at high altitude, high speed.

May, Ryan D.↗

Impact of Acoustic Standing Waves on Structural Responses

For several decades large reverberant chambers and most recently direct field acoustic testing have been used in the aerospace industry to test larger structures with low surface densities such as solar arrays and reflectors to qualify them and to detect faults in the design and fabrication. It has been reported that in reverberant chamber and direct acoustic testing, standing acoustic modes may strongly couple with the fundamental structural modes of the test hardware (Reference 1). In this paper results from a recent reverberant chamber acoustic test of a composite reflector are discussed. These results provide further convincing evidence of the acoustic standing wave and structural modes coupling phenomenon. The purpose of this paper is to alert test organizations to this phenomenon so that they can account for the potential increase in structural responses and ensure that flight hardware undergoes safe testing. An understanding of the coupling phenomenon may also help minimize the over and/or under testing that could pose un-anticipated structural and flight qualification issues.

Reverberant acoustic field↗

Ganged-PV System Evaluation

The following report contains data and data summaries collected for the SkySun LLC elevated Ganged PV arrays. These arrays were fabricated as a series of PV panels in various orientations, suspended by cables, at the National Solar Thermal Test Facility (NSTTF) at Sandia National Laboratories (SNL). Starting in February of 2021, Sandia personnel have collected power and accelerometer data for these arrays to assess design and operational efficacy of varying ganged- PV configurations. The purpose of this power data collection was to see how the various array orientations compare in power collection capability depending on the time of day, year, and the specific daily solar direct normal irradiance (DNI). The power data was collected as a measurement of the power output from the various series strings. The project team measured direct current (DC) voltage and current from the respective arrays. The accelerometer data was collected with the purpose of demonstrating potential destructive mode shapes that could take place with each of the arrays when exposed to high winds. This allowed the team to evaluate whether impacts with respect to specific array orientations using suspended cables is a safe design. All data collection was performed during calendar year 2021.

14 SOLAR ENERGY↗

Space shuttle environmental control/life support systems

This study analyzes and defines a baseline Environmental Control/Life Support System (EC/LSS) for a four-man, seven-day orbital shuttle. In addition, the impact of various mission parameters, crew size, mission length, etc. are examined for their influence on the selected system. Pacing technology items are identified to serve as a guide for application of effort to enhance the total system optimization. A fail safe-fail operation philosophy was utilized in designing the system. This has resulted in a system that requires only one daily routine operation. All other critical item malfunctions are automatically resolved by switching to redundant modes of operation. As a result of this study, it is evident that a practical, flexible, simple and long life, EC/LSS can be designed and manufactured for the shuttle orbiter within the time phase required.

Source record↗

The US space station and its electric power system

The United States has embarked on a major development program to have a space station operating in low earth orbit by the mid-1990s. This endeavor draws on the talents of NASA and most of the aerospace firms in the U.S. Plans are being pursued to include the participation of Canada, Japan, and the European Space Agency in the space station. From the start of the program these was a focus on the utilization of the space station for science, technology, and commercial endeavors. These requirements were utilized in the design of the station and manifest themselves in: pressurized volume; crew time; power availability and level of power; external payload accommodations; microgravity levels; servicing facilities; and the ability to grow and evolve the space station to meet future needs. President Reagan directed NASA to develop a permanently manned space station in his 1984 State of the Union message. Since then the definition phase was completed and the development phase initiated. A major subsystem of the space station is its 75 kW electric power system. The electric power system has characteristics similar to those of terrestrial power systems. Routine maintenance and replacement of failed equipment must be accomplished safely and easily and in a minimum time while providing reliable power to users. Because of the very high value placed on crew time it is essential that the power system operate in an autonomous mode to minimize crew time required. The power system design must also easily accommodate growth as the power demands by users are expected to grow. An overview of the U.S. space station is provided with special emphasis on its electrical power system.

Thomas, Ronald L.↗

A Comprehensive Method to Mitigate Forced Oscillations in Large Interconnected Power Grids

Multiple severe forced oscillation events have recently been observed across the North American interconnections and around the world. These forced oscillations have caused power swings, limited power transfer capability, damaged equipment, and persisted indefinitely until the driving source was located and removed. This paper proposes a comprehensive method to mitigate forced oscillations. Once a forced oscillation is detected, a new source location algorithm can be used to locate the source based on the oscillation mode angle without requiring system topology information. If the source cannot be quickly located and removed, a control strategy can be activated to modulate the active power of utility-scale inverterbased battery energy storage systems (BESSs) to reduce the energy of forced oscillations to a safe level and allow sufficient time for locating the exact source. The proposed source location algorithm is validated using measurements collected during the January 11, 2019 forced oscillation event in North America and other actual grid events, while the proposed control strategy is verified using the Eastern Interconnection dynamic model under the replicated January 11, 2019 forced oscillation event. The simulation results demonstrated that the proposed source location algorithm can accurately identify the forced oscillation source, and the proposed control strategy can significantly reduce forced oscillation energy.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Relating Measured Component Damage to Assessed Component Reliability in Reliability Integrity Management (RIM)

There is currently no widely agreed detailed general method for licensing a novel plant incorporating novel materials (or materials being deployed in novel environments); in many such situations, there are no directly applicable engineering code cases for decision-makers (including regulators) to rely on. It may be possible to develop an approach to licensing such a plant that is based on the Reliability and Integrity Management (RIM) approach delineated in ASME BPVC Section XI Division 2. NRC Regulatory Guide 1.246, Rev.0, endorses, with conditions, the subject portion of the ASME Code. But that portion of the ASME code is written at a very high level, and there are fundamental technical challenges associated with applying it literally to licensing a real plant. In the RIM approach, applicants need to do the following (among other things): • Allocate target reliabilities to structures, systems, and components (SSCs) that collectively support the top-level plant safety and availability objectives; • Understand failure modes of those SSCs, and the degradation mechanisms that could lead to those failure modes; • Develop and propose a program of surveillances that will identify degradation prior to failure of SSCs; • Provide a means of reporting results, taking actions for anomalous or undesirable conditions, and give the regulator assurance of continued safe operations. Applying RIM in a specific case will call for advances in the state of practice of relating physical observables to functional reliability of certain component types. Except where a given level of damage corresponds to a failed (or nearly failed) state, it is not practical to establish a precise quantitative relationship between physical observables and reliability. This paper focuses on managing risk of passive component failures based on observable damage parameters. A simple approach to cumulative damage modeling will be illustrated with a view to possible use in RIM applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Electrified Aircraft Propulsion Systems: Potential Failure Modes and Failure Mitigation Strategies

Electrified aircraft propulsion (EAP) systems hold great potential for the reduction of aircraft fuel burn, emissions, and noise. Currently, NASA and other organizations are actively working to identify and mature technologies necessary to bring EAP designs to reality. A requirement for the development of any civil aircraft and its systems is to ensure that potential hazards in the design are identified and appropriately mitigated to ensure that the system is safe. During aircraft development, a system safety assessment that consists of a functional hazard assessment is conducted to identify all potential failure conditions of each function, and classify those failures according to the severity of their effects on the aircraft or its occupants. The more severe a function's failure condition classification, the greater the development assurance level required for the function to ensure that the probability of the hazard is acceptably low. Today, aircraft engines and their control systems receive type certificate approval as a stand-alone system to signify their airworthiness. However, the complex coupling and distributed nature of EAP designs are expected to place added challenges on the certification of these systems. This presentation will provide an initial high-level review of the potential failure modes and hazards posed by a generic EAP system along with potential mitigation strategies for those failures. The EAP system is assumed to be a hybrid design consisting of gas turbine engines, mechanical drives, electric machines, power electronics and distribution systems, energy storage devices, and motor driven propulsors. The functionality provided by each of these EAP subsystems will be discussed along with the potential failure modes they may encounter. This will include a discussion of coupled failure effects, where a fault in one EAP subsystem effects the operation of other subsystems in the architecture. Next, potential failure mitigation strategies are discussed including both software-based and hardware-based mitigation strategies. The presentation will conclude with an example evaluation of the potential failure modes and mitigation strategies for a concept EAP system proposed by NASA.

Simon, Donald L.↗

Dynamics of heat-pipe reactors

A split-core heat pipe reactor, fueled with either U(233)C or U(235)C in a tungsten cermet and cooled by 7-Li-W heat pipes, was examined for the effects of the heat pipes on reactor while trying to safely absorb large reactivity inputs through inherent shutdown mechanisms. Limits on ramp reactivity inputs due to fuel melting temperature and heat pipe wall heat flux were mapped for the reactor in both startup and at-power operating modes.

Niederauer, G. F.↗

Flight testing a propulsion-controlled aircraft emergency flight control system on an F-15 airplane

Flight tests of a propulsion-controlled aircraft (PCA) system on an F-15 airplane have been conducted at the NASA Dryden Flight Research Center. The airplane was flown with all flight control surfaces locked both in the manual throttles-only mode and in an augmented system mode. In the latter mode, pilot thumbwheel commands and aircraft feedback parameters were used to position the throttles. Flight evaluation results showed that the PCA system can be used to land an airplane that has suffered a major flight control system failure safely. The PCA system was used to recover the F-15 airplane from a severe upset condition, descend, and land. Pilots from NASA, U.S. Air Force, U.S. Navy, and McDonnell Douglas Aerospace evaluated the PCA system and were favorably impressed with its capability. Manual throttles-only approaches were unsuccessful. This paper describes the PCA system operation and testing. It also presents flight test results and pilot comments.

Burcham, F. W., Jr.↗

Lunar escape systems feasibility study

Results are presented for a study conducted to determine the feasibility of simple lunar escape system concepts, to develop a spectrum of operational data, and to identify techniques and configurations suitable for the emergency escape mission. The study demonstrated the feasibility of the lunar emergency escape-to-orbit system (LESS) designed to provide a means for the two-man crew of a lunar module (LM) or extended-stay LM (ELM) to escape from the lunar surface in the event that the LM/ELM ascent stage becomes unsafe or is otherwise unable to take off. The LESS is to carry the two astronauts to a safe lunar orbit, where the Apollo command and service modules (CSM) are to be used for rendezvous and rescue, all within the lifetime of the backpack life support system (about 4 hr). It is concluded that simple manual control modes are sufficient, that simple boost profiles are acceptable, and that one man can deploy and set up the LESS. Initial guidance data can be calculated for the LESS by Mission Control and transmitted via the LM/ELM uplink.

Matzenauer, J. O.↗

Stiffness change of a graphite epoxy laminate under reverse fatigue loading

The stiffness of a flat specimen, made of graphite epoxy (T300/934), was measured during reverse fatigue loading. Laminates of basic layup, unidirectional cross-ply and angle-ply, as well as multidirectional (isotropic) layup, were tested. It was found that all the laminates exhibit rapid stiffness degradation on the last (third) fatigue stage. Except for the 0-deg unidirectional laminate, the last stage starts at about 70 to 80 percent of the fatigue life, regardless of the load level and the final mode of failure (tension or compression). It is shown that, for this material, stiffness degradation is a result of crack accumulation, mainly along the fibers, even for the fiber dominated laminates. This general phenomenon can serve to predict usable safe life of laminates under fatigue loading.

Rotem, Assa↗

Assessing V and V Processes for Automation with Respect to Vulnerabilities to Loss of Airplane State Awareness

Automation has contributed substantially to the sustained improvement of aviation safety by minimizing the physical workload of the pilot and increasing operational efficiency. Nevertheless, in complex and highly automated aircraft, automation also has unintended consequences. As systems become more complex and the authority and autonomy (A&A) of the automation increases, human operators become relegated to the role of a system supervisor or administrator, a passive role not conducive to maintaining engagement and airplane state awareness (ASA). The consequence is that flight crews can often come to over rely on the automation, become less engaged in the human-machine interaction, and lose awareness of the automation mode under which the aircraft is operating. Likewise, the complexity of the system and automation modes may lead to poor understanding of the interaction between a mode of automation and a particular system configuration or phase of flight. These and other examples of mode confusion often lead to mismanaging the aircraftâ€"TM"s energy state or the aircraft deviating from the intended flight path. This report examines methods for assessing whether, and how, operational constructs properly assign authority and autonomy in a safe and coordinated manner, with particular emphasis on assuring adequate airplane state awareness by the flight crew and air traffic controllers in off-nominal and/or complex situations.

Whitlow, Stephen↗

Dynamics of heat-pipe reactors.

A split-core heat-pipe reactor fueled with either 233-UC or 235-UC in a tungsten cermet and cooled by 7-Li-W heat pipes is examined for the effects of the heat pipes on this reactor in trying to safely absorb large reactivity inputs through inherent shutdown mechanisms. Limits on ramp reactivity inputs due to fuel-melting temperature and heat-pipe wall heat flux are mapped for the reactor in both startup and at-power operating modes.

Niederauer, G. F.↗