Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Accident Analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
NASA NTRS1988

Structural analysis of the space shuttle solid rocket booster/external tank attach ring

An External Tank (ET) attach ring is used in the Space Shuttle System to transfer lateral loads between the ET and the Solid Rocket Booster (SRB). Following the Challenger (51-L) accident, the flight performance of the ET attach ring was reviewed, and negative margins of safety and failed bolts in the attach ring were subsequently identified. The analyses described in this report were performed in order to understand the existing ET attach ring structural response to motor case internal pressurization as well as to aid in an ET attach ring redesign effort undertaken by NASA LaRC. The finite element model as well as the results from linear and nonlinear static structural analyses are described.

Dorsey, John T.↗
NASA NTRS2011

Time-Accurate Computational Fluid Dynamics Simulation of a Pair of Moving Solid Rocket Boosters

Since the Columbia accident, the threat to the Shuttle launch vehicle from debris during the liftoff timeframe has been assessed by the Liftoff Debris Team at NASA/MSFC. In addition to engineering methods of analysis, CFD-generated flow fields during the liftoff timeframe have been used in conjunction with 3-DOF debris transport methods to predict the motion of liftoff debris. Early models made use of a quasi-steady flow field approximation with the vehicle positioned at a fixed location relative to the ground; however, a moving overset mesh capability has recently been developed for the Loci/CHEM CFD software which enables higher-fidelity simulation of the Shuttle transient plume startup and liftoff environment. The present work details the simulation of the launch pad and mobile launch platform (MLP) with truncated solid rocket boosters (SRBs) moving in a prescribed liftoff trajectory derived from Shuttle flight measurements. Using Loci/CHEM, time-accurate RANS and hybrid RANS/LES simulations were performed for the timeframe T0+0 to T0+3.5 seconds, which consists of SRB startup to a vehicle altitude of approximately 90 feet above the MLP. Analysis of the transient flowfield focuses on the evolution of the SRB plumes in the MLP plume holes and the flame trench, impingement on the flame deflector, and especially impingment on the MLP deck resulting in upward flow which is a transport mechanism for debris. The results show excellent qualitative agreement with the visual record from past Shuttle flights, and comparisons to pressure measurements in the flame trench and on the MLP provide confidence in these simulation capabilities.

Strutzenberg, Louise L.↗
NASA NTRS1999

Detecting Mode Confusion Through Formal Modeling and Analysis

Aircraft safety has improved steadily over the last few decades. While much of this improvement can be attributed to the introduction of advanced automation in the cockpit, the growing complexity of these systems also increases the potential for the pilots to become confused about what the automation is doing. This phenomenon, often referred to as mode confusion, has been involved in several accidents involving modern aircraft. This report describes an effort by Rockwell Collins and NASA Langley to identify potential sources of mode confusion through two complementary strategies. The first is to create a clear, executable model of the automation, connect it to a simulation of the flight deck, and use this combination to review of the behavior of the automation and the man-machine interface with the designers, pilots, and experts in human factors. The second strategy is to conduct mathematical analyses of the model by translating it into a formal specification suitable for analysis with automated tools. The approach is illustrated by applying it to a hypothetical, but still realistic, example of the mode logic of a Flight Guidance System.

Miller, Steven P.↗
NASA NTRS2008

Investigation, Analysis, and Testing of Self-contained Oxygen Generators

Self Contained Oxygen Generators (SCOGs) have widespread use in providing emergency breathing oxygen in a variety of environments including mines, submarines, spacecraft, and aircraft. These devices have definite advantages over storing of gaseous or liquid oxygen. The oxygen is not generated until a chemical briquette containing a chlorate or perchlorate oxidizer and a solid metallic fuel such as iron is ignited starting a thermal decomposition process allowing gaseous oxygen to be produced. These devices are typically very safe to store, easy to operate, and have primarily only a thermal hazard to the operator that can be controlled by barriers or furnaces. Tens of thousands of these devices are operated worldwide every year without major incident. This report examines the rare case of a SCOG whose behavior was both abnormal and lethal. This particular type of SCOG reviewed is nearly identical to a flight qualified version of SCOG slated for use on manned space vehicles. This Investigative Report is a compilation of a NASA effort in conjunction with other interested parties including military and aerospace to understand the causes of the particular SCOG accident and what preventative measures can be taken to ensure this incident is not repeated. This report details the incident and examines the root causes of the observed SCOG behavior from forensic evidence. A summary of chemical and numerical analysis is provided as a background to physical testing of identical SCOG devices. The results and findings of both small scale and full scale testing are documented on a test-by-test basis along with observations and summaries. Finally, conclusions are presented on the findings of this investigation, analysis, and testing along with suggestions on preventative measures for any entity interested in the safe use of these devices.

Keddy, Christopher P.↗
NASA NTRS2005

Implementation of Programmatic Quality and the Impact on Safety

The purpose of this paper is to discuss the implementation of a programmatic quality assurance discipline within the International Space Station Program and the resulting impact on safety. NASA culture has continued to stress safety at the expense of quality when both are extremely important and both can equally influence the success or failure of a Program or Mission. Although safety was heavily criticized in the media after Col~imbiaa, strong case can be made that it was the failure of quality processes and quality assurance in all processes that eventually led to the Columbia accident. Consequently, it is possible to have good quality processes without safety, but it is impossible to have good safety processes without quality. The ISS Program quality assurance function was analyzed as representative of the long-term manned missions that are consistent with the President s Vision for Space Exploration. Background topics are as follows: The quality assurance organizational structure within the ISS Program and the interrelationships between various internal and external organizations. ISS Program quality roles and responsibilities with respect to internal Program Offices and other external organizations such as the Shuttle Program, JSC Directorates, NASA Headquarters, NASA Contractors, other NASA Centers, and International Partner/participants will be addressed. A detailed analysis of implemented quality assurance responsibilities and functions with respect to NASA Headquarters, the JSC S&MA Directorate, and the ISS Program will be presented. Discussions topics are as follows: A comparison of quality and safety resources in terms of staffing, training, experience, and certifications. A benchmark assessment of the lessons learned from the Columbia Accident Investigation (CAB) Report (and follow-up reports and assessments), NASA Benchmarking, and traditional quality assurance activities against ISS quality procedures and practices. The lack of a coherent operational and sustaining quality assurance strategy for long-term manned space flight. An analysis of the ISS waiver processes and the Problem Reporting and Corrective Action (PRACA) process implemented as quality functions. Impact of current ISS Program procedures and practices with regards to operational safety and risk A discussion regarding a "defense-in-depth" approach to quality functions will be provided to address the issue of "integration vs independence" with respect to the roles of Programs, NASA Centers, and NASA Headquarters. Generic recommendations are offered to address the inadequacies identified in the implementation of ISS quality assurance. A reassessment by the NASA community regarding the importance of a "quality culture" as a component within a larger "safety culture" will generate a more effective and value-added functionality that will ultimately enhance safety.

Huls, Dale Thomas↗
NASA NTRS2015

Reliability and Probabilistic Risk Assessment - How They Play Together

PRA methodology is one of the probabilistic analysis methods that NASA brought from the nuclear industry to assess the risk of LOM, LOV and LOC for launch vehicles. PRA is a system scenario based risk assessment that uses a combination of fault trees, event trees, event sequence diagrams, and probability and statistical data to analyze the risk of a system, a process, or an activity. It is a process designed to answer three basic questions: What can go wrong? How likely is it? What is the severity of the degradation? Since 1986, NASA, along with industry partners, has conducted a number of PRA studies to predict the overall launch vehicles risks. Planning Research Corporation conducted the first of these studies in 1988. In 1995, Science Applications International Corporation (SAIC) conducted a comprehensive PRA study. In July 1996, NASA conducted a two-year study (October 1996 - September 1998) to develop a model that provided the overall Space Shuttle risk and estimates of risk changes due to proposed Space Shuttle upgrades. After the Columbia accident, NASA conducted a PRA on the Shuttle External Tank (ET) foam. This study was the most focused and extensive risk assessment that NASA has conducted in recent years. It used a dynamic, physics-based, integrated system analysis approach to understand the integrated system risk due to ET foam loss in flight. Most recently, a PRA for Ares I launch vehicle has been performed in support of the Constellation program. Reliability, on the other hand, addresses the loss of functions. In a broader sense, reliability engineering is a discipline that involves the application of engineering principles to the design and processing of products, both hardware and software, for meeting product reliability requirements or goals. It is a very broad design-support discipline. It has important interfaces with many other engineering disciplines. Reliability as a figure of merit (i.e. the metric) is the probability that an item will perform its intended function(s) for a specified mission profile. In general, the reliability metric can be calculated through the analyses using reliability demonstration and reliability prediction methodologies. Reliability analysis is very critical for understanding component failure mechanisms and in identifying reliability critical design and process drivers. The following sections discuss the PRA process and reliability engineering in detail and provide an application where reliability analysis and PRA were jointly used in a complementary manner to support a Space Shuttle flight risk assessment.

Safie, Fayssal M.↗
NASA NTRS1989

Space Propulsion Hazards Analysis Manual (SPHAM), volume 1

The Space Propulsion Hazards Analysis Manual (SPHAM) is a compilation of methods and data directed at hazards analysis and safety for space propulsion and associated vehicles, but broadly applicable to other environments and systems. Methods are described of compiling relevant regulatory documentation, deriving design requirements and specifications, modeling accident scenarios in formal risk assessments, and correlation real-time data to risk probability modeling. Also, SPHAM provides methods for predicting post-accident blast, fragmentation, thermal, and environmental damage. Included in the appendices are an exhaustive bibliography, hazardous properties information on selected space propulsion commodities, and system descriptions of various launch vehicles, upper stages, and spacecrafts.

Becker, Dorothy L.↗
NASA NTRS2004

Application of Non-Deterministic Methods to Assess Modeling Uncertainties for Reinforced Carbon-Carbon Debris Impacts

The Space Shuttle Columbia Accident Investigation Board (CAIB) made several recommendations for improving the NASA Space Shuttle Program. An extensive experimental and analytical program has been developed to address two recommendations related to structural impact analysis. The objective of the present work is to demonstrate the application of probabilistic analysis to assess the effect of uncertainties on debris impacts on Space Shuttle Reinforced Carbon-Carbon (RCC) panels. The probabilistic analysis is used to identify the material modeling parameters controlling the uncertainty. A comparison of the finite element results with limited experimental data provided confidence that the simulations were adequately representing the global response of the material. Five input parameters were identified as significantly controlling the response.

Lyle, Karen H.↗
NASA NTRS2009

The Integrated Hazard Analysis Integrator

Hazard analysis addresses hazards that arise in the design, development, manufacturing, construction, facilities, transportation, operations and disposal activities associated with hardware, software, maintenance, operations and environments. An integrated hazard is an event or condition that is caused by or controlled by multiple systems, elements, or subsystems. Integrated hazard analysis (IHA) is especially daunting and ambitious for large, complex systems such as NASA s Constellation program which incorporates program, systems and element components that impact others (International Space Station, public, International Partners, etc.). An appropriate IHA should identify all hazards, causes, controls and verifications used to mitigate the risk of catastrophic loss of crew, vehicle and/or mission. Unfortunately, in the current age of increased technology dependence, there is the tendency to sometimes overlook the necessary and sufficient qualifications of the integrator, that is, the person/team that identifies the parts, analyzes the architectural structure, aligns the analysis with the program plan and then communicates/coordinates with large and small components, each contributing necessary hardware, software and/or information to prevent catastrophic loss. As viewed from both Challenger and Columbia accidents, lack of appropriate communication, management errors and lack of resources dedicated to safety were cited as major contributors to these fatalities. From the accident reports, it would appear that the organizational impact of managers, integrators and safety personnel contributes more significantly to mission success and mission failure than purely technological components. If this is so, then organizations who sincerely desire mission success must put as much effort in selecting managers and integrators as they do when designing the hardware, writing the software code and analyzing competitive proposals. This paper will discuss the necessary and sufficient requirements of one of the significant contributors to mission success, the IHA integrator. Discussions will be provided to describe both the mindset required as well as deleterious assumptions/behaviors to avoid when integrating within a large scale system.

Morris, A. Terry↗
NASA NTRS1976

Wind shear and turbulence around airports

A two part study was conducted to determine the feasibility of predicting the conditions under which wind/turbulence environments hazardous to aviation operations exist. The computer model used to solve the velocity temperature, and turbulence distributions in the atmospheric boundary layer is described, and the results of a parameteric analysis to determine the expected range of wind shear and turbulence to be encountered in the vicinity of airports are given. The second part describes the delineation of an ensemble of aircraft accidents in which low level wind shear and/or turbulence appeared to be causative factors. This set of accidents, encompassing a wide range of meteorological conditions, should prove useful in developing techniques for reconstructing hazardous wind environments for aircraft safety investigation purposes.

Lewellen, W. S.↗
NASA NTRS1980

As assessment of power system vulnerability to release of carbon fibers during commercial aviation accidents

The vulnerability of a power distribution system in Bedford and Lexington, Massachusetts to power outages as a result of exposure to carbon fibers released in a commercial aviation accident in 1993 was examined. Possible crash scenarios at Logan Airport based on current operational data and estimated carbon fiber usage levels were used to predict exposure levels and occurrence probabilities. The analysis predicts a mean time between carbon fiber induced power outages of 2300 years with an expected annual consequence of 0.7 persons losing power. In comparison to historical outage data for the system, this represents a 0.007% increase in outage rate and 0.07% increase in consequence.

Larocque, G. R.↗
NASA NTRS2002

Unsafe acts and unsafe outcomes in aircraft maintenance

Road safety studies using the Driver Behaviour Questionnaire (DBQ) have provided support for a three-way distinction between violations, skill-based errors and mistakes, and have indicated that a tendency to commit driving violations is associated with an increased risk of accident involvement. The aims of this study were to examine whether the three-way distinction of unsafe acts is applicable in the context of aircraft maintenance, and whether involvement in maintenance safety occurrences can be predicted on the basis of self-reported unsafe acts. A Maintenance Behaviour Questionnaire (MBQ) was developed to explore patterns of unsafe acts committed by aircraft maintenance mechanics. The MBQ was completed anonymously by over 1300 Australian aviation mechanics, who also provided information on their involvement in workplace accidents and incidents. Four factors were identified: routine violations, skill-based errors, mistakes and exceptional violations. Violations and mistakes were related significantly to the occurrence of incidents that jeopardized the quality of aircraft maintenance, but were not related to workplace injuries. Skill-based errors, while not related to work quality incidents, were related to workplace injuries. The results are consistent with the three-way typology of unsafe acts described by Reason et al. (1990) and with the DBQ research indicating an association between self-reported violations and accidents. The current findings suggest that interventions addressed at maintenance quality incidents should take into account the role of violations and mistakes, and the factors that promote them. In contrast, interventions directed at reducing workplace injury are likely to require a focus on skill-based errors.

Maintenance/manpower/methods↗
NASA NTRS2002

Decomposition-Based Failure Mode Identification Method for Risk-Free Design of Large Systems

When designing products, it is crucial to assure failure and risk-free operation in the intended operating environment. Failures are typically studied and eliminated as much as possible during the early stages of design. The few failures that go undetected result in unacceptable damage and losses in high-risk applications where public safety is of concern. Published NASA and NTSB accident reports point to a variety of components identified as sources of failures in the reported cases. In previous work, data from these reports were processed and placed in matrix form for all the system components and failure modes encountered, and then manipulated using matrix methods to determine similarities between the different components and failure modes. In this paper, these matrices are represented in the form of a linear combination of failures modes, mathematically formed using Principal Components Analysis (PCA) decomposition. The PCA decomposition results in a low-dimensionality representation of all failure modes and components of interest, represented in a transformed coordinate system. Such a representation opens the way for efficient pattern analysis and prediction of failure modes with highest potential risks on the final product, rather than making decisions based on the large space of component and failure mode data. The mathematics of the proposed method are explained first using a simple example problem. The method is then applied to component failure data gathered from helicopter, accident reports to demonstrate its potential.

Tumer, Irem Y.↗
NASA NTRS2016

Analysis of Pilot Feedback Regarding the Use of State Awareness Technologies During Complex Situations

A flight simulation study was conducted at NASA Langley Research Center to evaluate flight deck systems that (1) predict aircraft energy state and/or autoflight configuration, (2) present the current state and expected future state of automated systems, and/or (3) show the state of flight-critical data systems in use by automated systems and primary flight instruments. Four new technology concepts were evaluated vis-à-vis current state-of-the-art flight deck systems and indicators. This human-in-the-loop study was conducted using commercial airline crews. Scenarios spanned a range of complex conditions and several emulated causal factors and complexity in recent accidents involving loss of state awareness by pilots (e.g. energy state, automation state, and/or system state). Data were collected via questionnaires administered after each flight, audio/video recordings, physiological data, head and eye tracking data, pilot control inputs, and researcher observations. This paper strictly focuses on findings derived from the questionnaire responses. It includes analysis of pilot subjective measures of complexity, decision making, workload, situation awareness, usability, and acceptability.

Evans, Emory↗
NASA NTRS1971

Consumer product safety: A systems problem

The manufacturer, tester, retailer, consumer, repairer disposer, trade and professional associations, national and international standards bodies, and governments in several roles are all involved in consumer product safety. A preliminary analysis, drawing on system safety techniques, is utilized to distinguish the inter-relations of these many groups and the responsibilities that they are or could take for product safety, including the slow accident hazards as well as the more commonly discussed fast accident hazards. The importance of interactive computer aided information flow among these groups is particularly stressed.

Carl C. Clark↗
NASA NTRS1979

Data reduction and analysis of graphite fiber release experiments

The burn and burn/explode effects on aircraft structures were examined in a series of fifteen outdoor tests conducted to verify the results obtained in previous burn and explode tests of carbon/graphite composite samples conducted in a closed chamber, and to simulate aircraft accident scenarios in which carbon/graphite fibers would be released. The primary effects that were to be investigaged in these tests were the amount and size distribution of the conductive fibers released from the composite structures, and how these various sizes of fibers transported downwind. The structures included plates, barrels, aircraft spoilers and a cockpit. The heat sources included a propane gas burner and 20 ft by 20 ft and 40 ft by 60 ft JP-5 pool fires. The larger pool fire was selected to simulate an aircraft accident incident. The passive instrumentation included sticky paper and sticky bridal veil over an area 6000 ft downwind and 3000 ft crosswind. The active instrumentation included instrumented meteorological towers, movies, infrared imaging cameras, LADAR, high voltage ball gages, light emitting diode gages, microwave gages and flame velocimeter.

Lieberman, P.↗
NASA NTRS1980

Systems analysis of the installation, mounting, and activation of emergency locator transmitters in general aviation aircraft

A development program was developed to design and improve the Emergency Locator Transmitter (ELT) transmitter and to improve the installation in the aircraft and its activation subsystem. There were 1135 general aviation fixed wing aircraft accident files reviewed. A detailed description of the damage to the aircraft was produced. The search aspects of these accidents were studied. As much information as possible about the ELT units in these cases was collected. The data should assist in establishing installation and mounting criteria, better design standards for activation subsystems, and requirements for the new ELT system design in the area of crashworthiness.

Hall, D. S.↗
NASA NTRS2005

Materials Examination of the Vertical Stabilizer from American Airlines Flight 587

The first in-flight failure of a primary structural component made from composite material on a commercial airplane led to the crash of American Airlines Flight 587. As part of the National Transportation Safety Board investigation of the accident, the composite materials of the vertical stabilizer were tested, microstructure was analyzed, and fractured composite lugs that attached the vertical stabilizer to the aircraft tail were examined. In this paper the materials testing and analysis is presented, composite fractures are described, and the resulting clues to the failure events are discussed.

Fox, Matthew R.↗