Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16
All sourcesNASA NTRSDOE OSTI
DOE OSTI2021

Simultaneously Blocking Chemical Crosstalk and Internal Short Circuit via Gel-Stretching Derived Nanoporous Non-Shrinkage Separator for Safe Lithium-Ion Batteries

The separator, an ionic permeable and electronic insulating membrane between cathode and anode, plays a crucial role in the electrochemical and safety performance of batteries. However, the commercial polyolefin separators not only suffer from inevitable thermal shrinkage at elevated temperature, but also fail to inhibit the hidden chemical crosstalk of reactive gases such as O 2 , leading to often reported thermal runaway (TR) and hence preventing large-scale implementation of high-energy-density lithium-ion batteries. Herein, a nanoporous non-shrinkage separator (GS-PI) was fabricated via a novel gel-stretching orientation approach to eliminate TR. In situ synchrotron small angle X-ray scattering during heating clearly showed that the as-prepared thin GS-PI separator exhibits superior mechanical tolerance at high temperature, thus effectively preventing internal short circuit. Meanwhile, the unique nanoporous structure design further blocks chemical crosstalk and the associated exothermic reactions. Accelerating Rate Calorimetry test revealed that the practical 1 Ah LiNi 0.6 Co 0.2 Mn 0.2 O 2 (NCM622)/graphite pouch cell using GS-PI nanoporous separator show a maximum temperature rise (dT/dt max ) of only 3.7 °C s -1 compared to 131.6 °C s -1 in the case of Al 2 O 3 @PE macroporous separator. Furthermore, despite the reduced pore size, the GS-PI separator demonstrates better cycling stability than conventional Al 2 O 3 @PE separator at high temperature without sacrificing specific capacity and rate capability.

25 ENERGY STORAGE↗
NASA NTRSDate not supplied

Having a Come-Apart: Lessons Learned from Additively Manufactured Hardware Failures

NASA has been engaged with additively manufactured (AM) process and component development since the 2000’s. AM offers various technical advantages, such as enhanced hardware design complexity, part consolidation, and processing of novel alloys in addition to programmatic advantages for reduction in processing time and cost. The focus of much of the AM development at NASA has been to mature the various processes, characterize material properties, develop standards, produce demonstrator parts, and integrate AM hardware in liquid rocket engines. These aspects have been demonstrated through process and design iterations using a methodical characterization, test-fail-fix cycles, as well as application and dissemination of lessons learned. In addition to these fundamental demonstrations of the AM process and hardware development, alloys that provide performance advantages in the high temperature and high-pressure environments have been matured for use in rocket engines. These environments are challenging for any alloy and any design, and the AM process is required to fully meet the intended design requirements. The importance of proper AM process was made evident in the failure of a Laser Powder Bed Fusion (L-PBF) copper-alloy combustion chamber during a hot-fire test due to a degraded material quality resulted from an AM process issue. The hot-fire test aimed to demonstrate high duty cycle under a risk-tolerant development project, where consequences of component failure would be minimal. However, the unintentional component failure emphasized the necessity of robust material characterization and rigorous process control procedures for the safe use of AM components in critical applications. In part, such concerns motivate the AM certification approach that NASA has recently adopted in NASA-STD-6030 “Additive Manufacturing Requirements for Spaceflight Systems”. This presentation provides an overview of the previously mentioned failure, a discussion on the evaluation of the failed chamber and supplemental chambers produced at the same time, a representative material samples that included intentional build witness lines, and a summary of the key results and recommendations from the evaluations. NASA continues to approach AM processes and designs with a level of risk and acceptance of failures that is appropriate for the project objectives, with the overall goal of safe implementation of AM technology and transferring AM technology into commercial space applications. The objective of this presentation is to provide awareness to the community working critical and non-critical AM components and the lessons learned on proper implementation of AM.

Additive Manufacturing↗
DOE OSTI2021

Fragmentation of photovoltaic backsheets after accelerated weathering exposure

The backsheet of a photovoltaic (PV) module functions primarily to provide safe operation through electrical insulation and protect the interior from environmental exposure. For most applications, backsheets consist of opaque, but highly reflective, films that protect inner layers from degradation from ultraviolet (UV) light. Backsheets can fail if they delaminate or form cracks under strain. In a PV module, the maximum strains that can be applied are only on the order of a few percent. The greatest strains are likely to be highly localized around topographical features. Therefore, to assess the likelihood of a crack being initiated in a backsheet, we apply small amplitude strains to backsheet films under microscopic examination using a laser scanning confocal microscope. Furthermore, this allows us to monitor both the depth and density of cracks as well as the onset strain. Here we perform these measurements after exposure to UV light.

14 SOLAR ENERGY↗
NASA NTRS1999

High Reliability Engine Control Demonstrated for Aircraft Engines

For a dual redundant-control system, which is typical for short-haul aircraft, if a failure is detected in a control sensor, the engine control is transferred to a safety mode and an advisory is issued for immediate maintenance action to replace the failed sensor. The safety mode typically results in severely degraded engine performance. The goal of the High Reliability Engine Control (HREC) program was to demonstrate that the neural-network-based sensor validation technology can safely operate an engine by using the nominal closed-loop control during and after sensor failures. With this technology, engine performance could be maintained, and the sensor could be replaced as a conveniently scheduled maintenance action.

Guo, Ten-Huei↗
NASA NTRS1985

Power-Factor Controllers: How Safe?

Potential safety problems with power-factor controllers (PFC's) evaluated. Based on study of PFCs in use with appliances, report recommends measures to prevent consumers from misapplying these energy saving devices. Device used on such appliances as refrigerators, sewing machines, pumps, hair dryers, and food processors. When misused, they fail to save energy and may cause damage.

Long, K.↗
DOE OSTI2026

Product Defect Detection System: SYSM- 5620 Final Project

Retail sales is a growing market estimated to up to seven percent year over year. With this growing market there is also a trend in growing rate of retail returns, estimated just last year at $\$$850 billion. Retail stores must ensure that products available for purchase remain safe, undamaged, and acceptable to customers throughout their time in the store. This job exists regardless of the specific solution used because stores are always responsible for preventing damaged or defective products from reaching customers and when they fail to this is categorized under operation inefficiencies which accounts for an estimated $\$$12 billion in returns. When defective items remain on the sales floor, stores may experience increased returns, reduced customer satisfaction, loss of customer trust, and potential safety concerns depending on the product type. As a result, the core job to be done is to identify defective products quickly, remove them from the sales floor before they are purchased, and preserve useful information about the defect so that the store can improve its handling, stocking, and supplier coordination over time. The need for a more reliable process is especially important in high volume retail environments where employees manage large numbers of products across many aisles, shelves, and storage areas. In these settings, manual inspection alone can be inconsistent and difficult to sustain at the individual item level. At the same time, broader retail trends continue to emphasize operational efficiency, product visibility, and improved customer experience, creating an opportunity for more automated and data driven defect detection methods.

42 ENGINEERING↗
NASA NTRS1980

Orbiter door closure tools

Safe reentry of the shuttle orbiter requires that the payload bay doors be closed and securely latched. Since a malfunction in the door drive or bulkhead latch systems could make safe reentry impossible, the requirement to provide tools to manually close and secure the doors was implemented. The tools would disconnect a disabled door or latch closure system and close and secure the doors if the normal system failed. The tools required to perform these tasks have evolved into a set that consists of a tubing cutter, a winch, a latching tool, and a bolt extractor. The design, fabrication, and performance tests of each tool are described.

Acres, W. R.↗
DOE OSTI2024

Relating Measured Component Damage to Assessed Component Reliability in Reliability Integrity Management (RIM)

There is currently no widely agreed detailed general method for licensing a novel plant incorporating novel materials (or materials being deployed in novel environments); in many such situations, there are no directly applicable engineering code cases for decision-makers (including regulators) to rely on. It may be possible to develop an approach to licensing such a plant that is based on the Reliability and Integrity Management (RIM) approach delineated in ASME BPVC Section XI Division 2. NRC Regulatory Guide 1.246, Rev.0, endorses, with conditions, the subject portion of the ASME Code. But that portion of the ASME code is written at a very high level, and there are fundamental technical challenges associated with applying it literally to licensing a real plant. In the RIM approach, applicants need to do the following (among other things): • Allocate target reliabilities to structures, systems, and components (SSCs) that collectively support the top-level plant safety and availability objectives; • Understand failure modes of those SSCs, and the degradation mechanisms that could lead to those failure modes; • Develop and propose a program of surveillances that will identify degradation prior to failure of SSCs; • Provide a means of reporting results, taking actions for anomalous or undesirable conditions, and give the regulator assurance of continued safe operations. Applying RIM in a specific case will call for advances in the state of practice of relating physical observables to functional reliability of certain component types. Except where a given level of damage corresponds to a failed (or nearly failed) state, it is not practical to establish a precise quantitative relationship between physical observables and reliability. This paper focuses on managing risk of passive component failures based on observable damage parameters. A simple approach to cumulative damage modeling will be illustrated with a view to possible use in RIM applications.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2010

Lunar Surface Operations with Dual Rovers

Lunar Electric Rovers (LER) are currently being developed that are substantially more capable than the Apollo vehicle (LRN ,"). Unlike the LRV, the new LERs provide a pressurized cabin that serves as short-sleeve environment for the crew of two, including sleeping accommodations and other provisions that allow for long tern stays, possibly up to 60 days, on the hear surface, without the need to replenish consumables from some outside source, such as a lander or outpost. As a consequence, significantly larger regions may be explored in the future and traverse distances may be measured in a few hundred kilometers (1, 2). However, crew safety remains an overriding concern, and methods other than "walk back", the major operational constraint of all Apollo traverses, must be implemented to assure -at any time- the safe return of the crew to the lander or outpost. This then causes current Constellation plans to envision long-tern traverses to be conducted with 2 LERs exclusively, each carrying a crew of two: in case one rover fails, the other will rescue the stranded crew and return all 4 astronauts in a single LER to base camp. Recent Desert Research and Technology Studies (DRATS) analog field tests simulated a continuous 14 day traverse (3), covering some 135 km, and included a rescue operation that transferred the crew and diverse consumables from one LER to another these successful tests add substantial realism to the development of long-term, dual rover operations. The simultaneous utilization of 2 LERs is of course totally unlike Apollo and raises interesting issues regarding science productivity and mission operations, the thrust of this note.

Horz, Friedrich↗
NASA NTRSDate not supplied

Comparative Analysis of Thermal Runaway Heat Output as a Function of Trigger Mechanism and Cell Format

High demand for energy storage systems across many fields drives the need for safe and reliable Li-ion batteries. In order to assess the risk of using such batteries in various applications, many types of abuse tests have been developed to push battery cells to their limits and learn how they fail. In this work, internal short circuit (ISC) tests, nail penetration tests, and thermal tests were used to trigger thermal runaway in D-cell, 18650, and 21700 Li-ion cells. High-speed radiography was used to gain insight to the propagation of thermal runaway throughout the cell, while calorimetric and thermal data were recorded in real time. Post-test disassembly of the calorimeter allowed for any mass ejected from the cell to be analyzed and the distribution of mass through the calorimeter to be determined. The impact of cell geometry and trigger mechanism on post-test mass distribution, thermal runaway propagation and internal cell temperature are discussed.

Lithium-ion battery; thermal runaway; calorimetry;↗
NASA NTRS1985

Structural and mechanical design challenges of space shuttle solid rocket boosters separation and recovery subsystems

The design of the space shuttle solid rocket booster (SRB) subsystems for reuse posed some unique and challenging design considerations. The separation of the SRBs from the cluster (orbiter and external tank) at 150,000 ft when the orbiter engines are running at full thrust meant the two SRBs had to have positive separation forces pushing them away. At the same instant, the large attachments that had reacted launch loads of 7.5 million pounds thrust had to be servered. These design considerations dictated the design requirements for the pyrotechnics and separation rocket motors. The recovery and reuse of the two SRBs meant they had to be safely lowered to the ocean, remain afloat, and be owed back to shore. In general, both the pyrotechnic and recovery subsystems have met or exceeded design requirements. In twelve vehicles, there has only been one instance where the pyrotechnic system has failed to function properly.

Woodis, W. R.↗
DOE OSTI2024

DNA double-strand break movement in heterochromatin depends on the histone acetyltransferase dGcn5

Abstract Cells employ diverse strategies to repair double-strand breaks (DSBs), a dangerous form of DNA damage that threatens genome integrity. Eukaryotic nuclei consist of different chromatin environments, each displaying distinct molecular and biophysical properties that can significantly influence the DSB-repair process. DSBs arising in the compact and silenced heterochromatin domains have been found to move to the heterochromatin periphery in mouse and Drosophila to prevent aberrant recombination events. However, it is poorly understood how chromatin components, such as histone post-translational modifications, contribute to these DSB movements within heterochromatin. Using irradiation as well as locus-specific DSB induction in Drosophila tissues and cultured cells, we find enrichment of histone H3 lysine 9 acetylation (H3K9ac) at DSBs in heterochromatin but not euchromatin. We find this increase is mediated by the histone acetyltransferase dGcn5, which rapidly localizes to heterochromatic DSBs. Moreover, we demonstrate that in the absence of dGcn5, heterochromatic DSBs display impaired recruitment of the SUMO E3 ligase Nse2/Qjt and fail to relocate to the heterochromatin periphery to complete repair. In summary, our results reveal a previously unidentified role for dGcn5 and H3K9ac in heterochromatic DSB repair and underscore the importance of differential chromatin responses at heterochromatic and euchromatic DSBs to promote safe repair.

Biochemistry & Molecular Biology↗
DOE OSTI2022

High-Fidelity Mock Development for the Insensitive High Explosive TATB

Due to the violent reaction potential of high explosives, in tests where a reaction is not desired, it can be safe and convenient to use an inert mock that can mimic relevant properties of the associated explosive. Use of mock materials is well-established in explosives work, but most existing mocks are generally meant to mimic only one or two properties of a given explosive, potentially failing to match the explosive in other critical ways. Recently, there has been interest in developing robust thermomechanical mocks for many common explosives. Here, eleven materials are systematically chosen and investigated as potential thermomechanical mocks for TATB, the explosive component of PBX 9502. DSC, nanoindentation, and compression testing are used to narrow down to most appropriate mocks and identify their advantages and limitations. Hardness and elastic modulus are reported for the first time for the molecular crystals iodoanthranilic acid, hexamine, melamine, and trithiolane dioxide, and the crystal structure is reported for the first time for the molecular crystals iodoanthranilic acid and iodosalicylic acid.

36 MATERIALS SCIENCE↗
NASA NTRS1996

Flight Test of a Propulsion-Based Emergency Control System on the MD-11 Airplane with Emphasis on the Lateral Axis

A large, civilian, multi-engine transport MD-11 airplane control system was recently modified to perform as an emergency backup controller using engine thrust only. The emergency backup system, referred to as the propulsion-controlled aircraft (PCA) system, would be used if a major primary flight control system fails. To allow for longitudinal and lateral-directional control, the PCA system requires at least two engines and is implemented through software modifications. A flight-test program was conducted to evaluate the PCA system high-altitude flying characteristics and to demonstrate its capacity to perform safe landings. The cruise flight conditions, several low approaches and one landing without any aerodynamic flight control surface movement, were demonstrated. This paper presents results that show satisfactory performance of the PCA system in the longitudinal axis. Test results indicate that the lateral-directional axis of the system performed well at high attitude but was sluggish and prone to thermal upsets during landing approaches. Flight-test experiences and test techniques are also discussed with emphasis on the lateral-directional axis because of the difficulties encountered in flight test.

Burken, John J.↗
NASA NTRS2014

Applying Flammability Limit Probabilities and the Normoxic Upward Limiting Pressure Concept to NASA STD-6001 Test 1

Repeated Test 1 extinction tests near the upward flammability limit are expected to follow a Poisson process trend. This Poisson process trend suggests that rather than define a ULOI and MOC (which requires two limits to be determined), it might be better to define a single upward limit as being where 1/e (where e (approx. equal to 2.7183) is the characteristic time of the normalized Poisson process) of the materials burn, or, rounding, where approximately 1/3 of the samples fail the test (and burn). Recognizing that spacecraft atmospheres will not bound the entire oxygen-pressure parameter space, but actually lie along the normoxic atmosphere control band, we can focus the materials flammability testing along this normoxic band. A Normoxic Upward Limiting Pressure (NULP) is defined that determines the minimum safe total pressure for a material within the constant partial pressure control band. Then, increasing this pressure limit by a factor of safety, we can define the material as being safe to use at the NULP + SF (where SF is on the order of 10 kilopascal, based on existing flammability data). It is recommended that the thickest material to be tested with the current Test 1 igniter should be 3 mm thick (1/8 inches) to avoid the problem of differentiating between an ignition limit and a true flammability limit.

flammability↗
DOE OSTI2020

The Corrective Maintenance Paradigm Shift at Hanford's Tank Farms - 20077

Hanford's Tank Farms facilities have been used to safely store waste for over 70 years, with the first single-shell tanks being constructed in 1943. Tank Farm facilities consist of 149 single-shell tanks, 28 double-shell tanks, an evaporator facility, and wastewater treatment facilities. Tank Farm facilities are aging, with a tremendous corrective maintenance burden on the Tank Farm contractor. The mission of Tank Farm facilities is soon changing from waste storage to waste staging for the Hanford Waste Treatment and Immobilization Plant (WTP). WTP operations will demand a significant increase in Tank Farm facility operations, in which corrective maintenance outage windows will shrink drastically. This realization has forced the Tank Farm contractor to consider a paradigm shift in Tank Farm facilities Maintenance planning, and the use of reliability Engineering tools. The Tank Farm Production Operations Engineering Cognizant System Engineering (CSE) organization has led the way in motivating this paradigm shift. This shift has been realized through the use of: 1) technical exchange with other Department of Energy (DOE) contractors to develop improvements in the CSE program, 2) a shift from the use of lagging to leading system health indicators, and 3) a Plant Health Committee to unite Engineering, Operations, and Maintenance personnel toward a productive maintenance strategy. The CSE organization has held several technical exchanges with other DOE contractors to discuss CSE concepts, and how to better maintain aging infrastructure. The technical exchange with other contractors has greatly reduced the time required to make improvements in the Tank Farm CSE program. Other DOE contractors have already faced issues surrounding aging infrastructure, and have vast experience in improving the reliability and usable life of structures and components in nuclear facilities. The past CSE program used lagging health indicators to determine the health of systems. The key lagging indicator used to determine system health was availability, which is the percentage of time that a facility was ready for operation compared to the time the facility was demanded for operation. Availability was a good indicator of health in the waste storage mission of Tank Farms, where safe storage was the most important function of the facility, and where maintenance outage windows were typically long-duration. In current and future operations, outage windows are reducing, resulting in the need for much more reliable systems. Systems that have had high availability may suddenly become inoperable due to a failed component or sub-system. In several instances, the use of availability as an indicator of system health failed to predict system/equipment failure before its occurrence. In discussions with other DOE contractors, a set of reliability tools, including leading indicators of health, has been implemented in the CSE program. This primarily involves the use of failure modes and effects analysis and the study of equipment failure to develop system monitoring plans that focus on trending data to detect oncoming equipment failure ahead of time. In addition, the use of a Plant Health Committee has added significantly to the paradigm shift from a corrective maintenance philosophy to the use of predictive and preventive maintenance. The Plant Health Committee is a chartered team consisting of Engineering, Operations, and Maintenance personnel. CSEs use this forum to present the results of their performance monitoring, including the presentation of health via leading health indicators. The most positive aspect of this committee is the communication that it creates within these critical organizations. The Operations and Maintenance organization benefit from focusing maintenance on the reliability-centered focus provided by Engineering. Engineering benefits from the operational experience of the Operations organization and from the failure data that can be provided by Maintenance personnel. The continued use of the Plant Health Committee is expected to further decrease maintenance outage times, in better support of oncoming 24/7 operations. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRS2006

Ka-Band Wide-Bandgap Solid-State Power Amplifier: Prototype Combiner Spurious Mode Suppression and Power Constraints

Results of prototype hardware activities related to a 120-W, 32-GHz (Ka-band) solid-state power amplifier (SSPA) architecture study are presented. Spurious mode suppression and the power-handling capability of a prototype 24-way radial combiner and a prototype 2-way septum binary combiner were investigated. Experimental data indicate that a commercial absorptive filter, designed to pass the circular TE01 mode, effectively suppressed the higher-order modes generated by a narrowband, flower-petal-type mode transducer. However, the same filter was not effective in suppressing higher-order modes generated by the broadband Marie mode transducer that is used in the prototype waveguide radial combiner. Should greater filtering be required by a particular SSPA application, a broadband mode filter that can suppress specifically those higher-order modes that are generated by the Marie transducer will need to be developed. A back-to-back configuration of the prototype radial combiner was tested with drive power up to approximately 50 W. No anomalous behavior was observed. Power measurements of the septum combiner indicate that up to 10-W radio frequency (RF) can be dissipated in the integrated resistive element before a permanent performance shift is observed. Thus, a given adder (a single-stage, 2-way combiner) can safely combine two 20-W sources, and the adder will not be damaged in the event of a source failure. This result is used to calculate the maximum source power that can be safely combined as a function of the number of sources combined and the number of source failures allowed in a multi-stage combiner. The analysis shows that SSPA power >140 W can be generated by power combining 16 sources producing 10 W each. In this configuration, up to three sources could fail with the guarantee that the combiner would not be damaged. Finally, a modified prototype septum combiner design was verified. The improved design reduced the assembly time from over 2 hours to about 15 minutes per adder.

Khan, P.↗
NASA NTRS2019

Towards Resilient Autonomous Navigation of Drones

Robots and particularly drones are especially useful in exploring extreme environments that pose hazards to humans. To ensure safe operations in these situations, usually perceptually degraded and without good GNSS, it is critical to have a reliable and robust state estimation solution. The main body of literature in robot state estimation focuses on developing complex algorithms favoring accuracy. Typically, these approaches rely on a strong underlying assumption: the main estimation engine will not fail during operation. In contrast, we propose an architecture that pursues robustness in state estimation by considering redundancy and heterogeneity in both sensing and estimation algorithms. The architecture is designed to expect and detect failures and adapt the behavior of the system to ensure safety. To this end, we present HeRO (Heterogeneous Redundant Odometry): a stack of estimation algorithms running in parallel supervised by a resiliency logic. This logic carries out three main functions: a) perform confidence tests both in data quality and algorithm health; b) re-initialize those algorithms that might be malfunctioning; c) generate a smooth state estimate by multiplexing the inputs based on their quality. The state and quality estimates are used by the guidance and control modules to adapt the mobility behaviors of the system. The validation and utility of the approach are shown with real experiments on a ying robot for the use case of autonomous exploration of subterranean environments, with particular results from the STIX event of the DARPA Subterranean Challenge.

Agha-mohammadi, Ali-akbar↗