Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Some Abort Techniques and Procedures for Manned Spacecraft

This paper is concerned with our present state of knowledge on the procedures and effectiveness of aborts from manned orbital and lunar missions. By abort is meant a deliberate or unintentional termination of the primary mission followed by an expedient return to earth of the payload (spacecraft and crew). A deliberate abort may be initiated if a critical component failed and thus impaired the probability of mission success or the crew's safety. Examples of this kind of abort are failure of the launch guidance system or the oxygen and cabin pressure system. Also, an unintentional abort may occur during the launch phase due to the complete or partial failure of one of the launch-vehicle stages to operate. For each mission every conceivable set of circumstances must be considered and evaluated to see if an abort of the mission is called for and to determine what sequence of events should occur to bring the spacecraft and crew safely back to earth with the highest probability of success. Factors which must be considered are: how to specify and sense an abort condition, how much fuel should be put onboard the vehicle for abort purposes, what size and kind of rocket engines are best suited for each mission, and what compromise is incurred due to other mission requirements? If an abort occurs, the optimum time of application as well as the magnitude and direction of the velocity changes must be determined beforehand and the crew must be clearly informed of what action is required or what the situation is so that they can decide the proper action.

Maneuver↗

Stirling Engine Controller

Stirling technology is being developed to replace RTG s (Radioisotope Thermoelectric Generators), more specifically a stirling convertor, which is a stirling engine coupled to a linear alternator. Over the past three decades, the stirling engine has been designed to perform different functions. Stirling convertors have been designed to decrease fuel consumption in automobiles. They have also been designed for terrestrial and space applications. Currently NASA Glenn is using the convertor for space based applications. A stiring converter is a better means of power for deep space mission and "dusty" mission, like the Mars Rovers, than solar panels because it is not affected by dust. Spirit and Opportunity, two Mars rovers currently navigating the planet, are losing their ability to generate electricity because dust is collecting on their solar panels. Opportunity is losing more energy because its robotic arm has a heater with a switch that can not be turned off. The heater is not needed at night, but yet still runs. This generates a greater loss of electricity and in turn diminishes the performance of the rover. The stirling cycle has the potential to provide very efficient conversion of heat energy to electric a1 energy, more so than RTG's. The stirling engine converts the thermal energy produced by the decaying radioisotope to mechanical energy; the linear alternator converts this into electricity. convertor. Since the early 1990's tests have been performed to maximize the efficiency of the stirling converter. Many months, even years, are dedicated to preparing and performing tests. Currently, two stirling convertors #'s 13 and 14, which were developed by Stirling Technology Company, are on an extended operation test. As of June 7th, the two convertors reached 7,500 hours each of operation. Before the convertors could run unattended, many safety precautions had to be examined. So, special instrumentation and circuits were developed to detect off nominal conditions and also safely shutdown the engines. The test will last for a period of 8000 to 9000 hours. Other types of tests that have been performed are: performance mapping, controller development, launch environment, and vibration emissions testing. Currently, the thermo-mechanical system branch is housing a RG-350, a stirling convertor. The convertor was used in previous tests such as a Hall Thruster test, world s first integrated test of a dynamic power system with electric propulsion. Another test performed was to conclude if free piston stirling convertors can be synchronized for vibration balancing, with no thermodynamic or electrical connections and not cause both to shutdown if one failed. The ability to reduce vibration by synchronizing convertor operation but still be able to operate when one partner fails is pertinent in space and terrestrial applications. The convertor is now being brought back into operation and a controller is in the process of being developed. This convertor will be used as a testbed for new controllers. I worked with Mary Ellen Roth on the electric engineering aspects of the RG-350. My main goal was to enhance the data collection process. I worked on different aspects of the RG-350, with a main focus on the engine controller. I drew a schematic of the wire connections in the engine controller, using PCB Express, so that a plan could be devised to connect the power meter properly between the output of the engine and the engine controller. I measured the power using two different instruments: Valhalla Scientific power meter and Ohio Semitronics power measurement device. The convertor is connected to an Agilent 34970A Data Acquisition/Switch Unit, which allows the user to measure, record, and monitor voltage, current, frequency, and temperature. I assisted in preparing the Data Acquisition for general operation. I also helped test a panel of transducers, which will be placed in the rack that powers and monitors the convertor.

Blaze, Gina M.↗

Full Scale Advanced Systems Testbed (FAST): Capabilities and Recent Flight Research

At the NASA Armstrong Flight Research Center research is being conducted into flight control technologies that will enable the next generation of air and space vehicles. The Full Scale Advanced Systems Testbed (FAST) aircraft provides a laboratory for flight exploration of these technologies. In recent years novel but simple adaptive architectures for aircraft and rockets have been researched along with control technologies for improving aircraft fuel efficiency and control structural interaction. This presentation outlines the FAST capabilities and provides a snapshot of the research accomplishments to date. Flight experimentation allows a researcher to substantiate or invalidate their assumptions and intuition about a new technology or innovative approach Data early in a development cycle is invaluable for determining which technology barriers are real and which ones are imagined Data for a technology at a low TRL can be used to steer and focus the exploration and fuel rapid advances based on real world lessons learned It is important to identify technologies that are mature enough to benefit from flight research data and not be tempted to wait until we have solved all the potential issues prior to getting some data Sometimes a stagnated technology just needs a little real world data to get it going One trick to getting data for low TRL technologies is finding an environment where it is okay to take risks, where occasional failure is an expected outcome Learning how things fail is often as valuable as showing that they work FAST has been architected to facilitate this type of testing for control system technologies, specifically novel algorithms and sensors Rapid prototyping with a quick turnaround in a fly-fix-fly paradigm Sometimes it's easier and cheaper to just go fly it than to analyze the problem to death The goal is to find and test control technologies that would benefit from flight data and find solutions to the real barriers to innovation. The FAST vehicle is a flexible laboratory for nascent technologies that would benefit from early life cycle flight research data It provides a robust and safe environment where innovative techniques can be explored in a fly-fix-fly rapid prototyping paradigm IRAC Simple adaptive control technologies can provide real benefits without undo complexity Adverse pilot/adaptive system interactions can be mitigated and tools have been developed to evaluate those interactions ICP Substantial fuel savings can be achieved over a broad range of vehicles and configurations with intelligent control solutions LVAC The AAC design is robust and effective for the SLS mission, and promises to provide benefits to other platforms as well OCLA Hopefully will show that structural feedback can be seamlessly integrated with performance and stability objectives All of these control technologies have been implemented into the same baseline control law and could be combined into one control solution that answers many pressing questions for modern vehicle configurations

flight controls↗

Novel Phenylethynyl Imide Silanes as Coupling Agents for Titanium Alloy

The durability of titanium (Ti) alloys bonded with high temperature adhesives such as polyimides has failed to attain the level of performance required for many applications. The problem to a large part is attributed to the instability of the surface treatment on the Ti substrate. Although Ti alloy adhesive specimens with surface treatments such as chromic acid anodization, Pasa-Jell, Turco, etc. have provided high initial mechanical properties, these properties have decreased as a function of aging at ambient temperature and faster, when aged at elevated temperatures or in a hot-wet environment. As part of the High Speed Civil Transport program where Ti honeycomb sandwich structure must perform for 60,000 hours at 177 C, work was directed to the development of environmentally safe, durable Ti alloy surface treatments.

Park, C.↗

To the North Coast of Devon: Collaborative Navigation While Exploring Unfamiliar Terrain

Navigation-knowing where one is and finding a safe route-is a fundamental aspect of all exploration. In unfamiliar terrain, one may use maps and instruments such as a compass or binoculars to assist, and people often collaborate in finding their way. This paper analyzes a group of people driving a humvee from a base camp to the north coast of Devon Island in the High Canadian Arctic. A complete audio recording and video during most stops allows a quantitative and semantic analysis of the conversations when the team stopped to take bearings and replan a route. Over a period of 2 hours, the humvee stopped 20 times, with an average duration of 3.15 min/pause and 3.85 min moving forward. The team failed to reach its goal due to difficult terrain causing mechanical problems. The analysis attempts to explain these facts by considering a variety of complicating factors, especially the navigation problem of relating maps and the world to locate the humvee and to plan a route. The analysis reveals patterns in topic structure and turn-taking, supporting the view that the collaboration was efficient, but the tools and information were inadequate for the task. This work is relevant for planning and training for planetary surface missions, as well as developing computer systems that could aid navigation.

Clancey, William J.↗

Fracture Growth Testing of Titanium 6AL-4V in AF-M315E

The Green Propellant Infusion Mission (GPIM) will demonstrate the performance of AF-M315E monopropellant in orbit. Flight certification requires a safe-life analysis of the titanium alloy fuel tank to ensure inherent flaws will not cause failure during the design life. Material property inputs for this analysis require testing to determine the stress intensity factor for environmentally-assisted cracking (K (sub EAC)) of Ti 6Al-4V in combination with the AF-M315E monopropellant. Testing of single-edge notched specimens SE(B) representing the bulk tank membrane and weld material were performed in accordance with ASTM E1681. Specimens with fatigue pre-cracks were loaded into test fixtures so that the crack tips were exposed to the monopropellant at 50 degrees Centigrade for a duration of 1,000 hours. Specimens that did not fail during exposure were opened to inspect the crack surfaces for evidence of crack growth. The threshold stress intensity value, KEAC, is the highest applied stress intensity that produced neither a failure of the specimen during the exposure nor showed evidence of crack growth. The threshold stress intensity factor of the Ti 6Al-4V forged tank material when exposed to AF-M315E monopropellant was found to be at least 22.0 kilopounds per square inch. The stress intensity factor of the weld material was at least 31.3 kilopounds per square inch.

AF-M315E↗

Resolution of Lava Tubes with Ground Penetrating Radar: The TubeX project

Remote sensing surveys of the Moon and Mars show evidence of lava tubes, which are potential safe havens for human crews and their equipment. Ground penetrating radar (GPR) can be used to map tubes because the void/rock interface at tube ceilings and floors strongly reflects radar pulses. We have tested the capacity of GPR to sense lava tube geometry at Lava Beds National Monument (LBNM) in California, USA. GPR and detailed LiDAR data are presented for two tubes: Skull Cave, with a few meters of overburden, diameter ~10-20 m, and a rubbly floor; and Valentine Cave, with similarly thin overburden, diameter ~1-3 meters, and a flatter smoother floor. On both caves GPR clearly resolves the ceiling and permits good estimates of the cave width as validated with LiDAR data. Where GPR fails, the primary cause is inferred to be strong out-of-plane effects due to complex 3D geometries. Recovery of the floor position requires migrating the GPR data with a 2D velocity model, as signal velocity is faster in void space. We find that floor position is recoverable in caves whose voids are taller than the radar wavelength (~3 m in this study). Forward modeling assuming planetary parameters suggests GPR should be similarly successful on the Moon or Mars.

S. Esmaeili↗

Fracture Mechanics Testing of Titanium 6AL-4V in AF-M315E

The Green Propellant Infusion Mission (GPIM) will demonstrate the performance of AF-M315E monopropellant on orbit. Flight certification requires a safe-life analysis of the titanium alloy fuel tank to ensure inherent processing flaws will not cause failure during the design life of the tank. Material property inputs for this analysis require testing to determine the stress intensity factor for environment-assisted cracking (KEAC) of Ti 6Al-4V in combination with the AF-M315E monopropellant. Testing of single-edge notched, or SE(B), specimens representing the bulk tank membrane and weld material were performed in accordance with ASTM E1681. Specimens with fatigue pre-cracks were loaded into test fixtures so that the crack tips were exposed to AF-M315E at 50 C for a duration of 1,000 hours. Specimens that did not fail during exposure were opened to inspect the crack surfaces for evidence of crack growth. The threshold stress intensity value, KEAC, is the highest applied stress intensity that produced neither a failure of the specimen during the exposure nor showed evidence of crack growth. The threshold stress intensity factor for environment-assisted cracking of the Ti 6Al-4V forged tank material was found to be at least 22 ksi√in and at least 31 ksi√in for the weld material when exposed to AF-M315E monopropellant.

AF-M315E↗

Reconfigurable Control Design for the Full X-33 Flight Envelope

A reconfigurable control law for the full X-33 flight envelope has been designed to accommodate a failed control surface and redistribute the control effort among the remaining working surfaces to retain satisfactory stability and performance. An offline nonlinear constrained optimization approach has been used for the X-33 reconfigurable control design method. Using a nonlinear, six-degree-of-freedom simulation, three example failures are evaluated: ascent with a left body flap jammed at maximum deflection; entry with a right inboard elevon jammed at maximum deflection; and landing with a left rudder jammed at maximum deflection. Failure detection and identification are accomplished in the actuator controller. Failure response comparisons between the nominal control mixer and the reconfigurable control subsystem (mixer) show the benefits of reconfiguration. Single aerosurface jamming failures are considered. The cases evaluated are representative of the study conducted to prove the adequate and safe performance of the reconfigurable control mixer throughout the full flight envelope. The X-33 flight control system incorporates reconfigurable flight control in the existing baseline system.

Cotting, M. Christopher↗

Analysis of Launch Vehicle Liftoff Debris: Historical Perspective from Space Shuttle and Application to Artemis I

Human exploration-class launch vehicles are inherently prone to debris due to the extreme environments generated during pre-launch operations, liftoff, and flight. The use of cryogenic propellants often requires thermal protection system (TPS) coatings, typically foam, to maintain the propellant conditions in the tank and prevent an accumulation ice on the external surface of the vehicle. Some ice growth is to be expected at umbilical interfaces, vents, flanges, or brackets where it is difficult to apply TPS. This ice may come loose at any time due to wind on the launch pad, structural vibration and acoustics after rocket ignition, or aerodynamic forces during flight. This phenomena is especially apparent on vehicles with no TPS, such as the Saturn V rockets used in the Apollo Program, see Figure 1. During propellant tanking, the thermal contraction of the underlying substrate may generate cracks in the TPS (Figure 1). Chunks of TPS can release due to the expansion of ingested gas from cryopumping or from aerodynamic forces if the crack creates an offset surface. Most foams will also have a certain amount of “popcorning” where small pieces of foam will pop off during flight because of the differential between the static surface pressure and the pressure of the gas trapped in the foam cell structure. There are a number of other coating or closeout materials that may be shed from the vehicle and become debris. During pre-launch operations and liftoff, the vehicle may also be exposed to debris originating from the launch pad or ground support equipment. This debris is separate from foreign object debris, or FOD, which is not intended to be present and is strictly controlled through operations and maintenance procedures. In this case, debris is generated from hardware and materials that are necessary for launch and are subject to the intense vibration, acoustics, and direct plume impingement of the launch environment. Examples include ice from umbilicals, tape and tie wraps that protect cables, and rust or corrosion from the launch platform. While NASA has historically been aware of debris as a potential issue that could cause a failure resulting in loss of mission, loss of vehicle, or loss of crew, the likelihood and severity of that risk was not always well understood or given sufficient weight in program and flight decisions. After the Space Shuttle Columbia accident (STS-107), the investigation found that foam TPS debris shed from the external tank was the proximate cause of the damage to the orbiter wing. Six previous observations of debris released from the foam ramp that covered the bipod connecting the forward end of the orbiter to the external tank resulted in minor changes or were determined to be accepted flight risks. Two occurrences of bipod ramp foam loss were not identified until the STS-107 investigation. Despite the damage inflicted by these debris strikes, the Shuttle Program Requirements Control Board deemed the vehicle safe to fly. During the Return to Flight effort following the Columbia disaster, NASA Engineering developed a process for the assessment of debris transport, impact, and damage tolerance to support independent assessments of risk by NASA Safety and Mission Assurance (S&MA). Under this system, each element (vehicle or ground system) defines a catalog of all expected debris based on launch history, component testing, or analysis. Debris transport analysis (DTA) is conducted using the debris catalog characteristics and potential flow transport mechanisms (e.g., vehicle aerodynamics, gravity, wind, plume-driven). The predicted debris impact locations and velocities are provided to the hardware owners, who use available test data and analysis to determine whether each component can withstand the impacts. In cases where the element hardware may be severely damaged or fail, the options are to mitigate the debris source through some change in design or operation, or to work with S&MA to try to characterize the probability of the impact and damage for program risk acceptance. Because of the differences in debris characteristics and transport, the DTA has been divided between the Liftoff and Ascent regimes. The development and application of Liftoff DTA methodology from the Shuttle Program to the current Artemis Program is the subject of this paper. Liftoff DTA covers the time from the start of pre-launch operations at the launch pad, up until the vehicle clears the launch tower and there is no longer any interaction with ground systems. Debris transport during this period is broadly classified as either gravity, wind, and plume-entrained (GWPE) or plume driven (PD). GWPE debris is generally lower speed, travelling in a forward-to-aft direction. PD transport includes flow features from the rocket ignition transient, as well as plume impingement and recirculation that occur as the vehicle lifts off the launch platform. In these cases, the debris typically moves in an aft-to-forward direction at higher speeds. The applicable transport mechanisms must be considered for each piece of debris depending on the material, and release location and time. For example, rust or metallic debris from the tower could fall (GWPE) and impact the vehicle before landing on the launch platform deck where it could be also be transported by plume impingement (PD). However, falling ice (GWPE) from an umbilical is unlikely to survive impact with the vehicle or launch platform and be available for PD transport. Modeling of debris transport is accomplished using a set of DTA tools which simulate debris trajectories subject to a reference frame acceleration (i.e., gravity) and aerodynamic drag. Where the trajectory encounters a solid surface, the debris is allowed to rebound with a specified coefficient of restitution. The drag is calculated by interpolating the fluid state at each point in the debris trajectory from high-fidelity computational fluid dynamics (CFD) simulations of the launch vehicle and pad. The CFD data may either be static (steady state or time averaged), typically for GWPE transport, or dynamic (time-accurate) for PD flow features like the ignition transient. Examples of the CFD flow field solutions for the Space Launch System (SLS) rocket and launch pad are shown in Figure 2. Typical SLS debris trajectory predictions from DTA are illustrated in Figure 3. The final version of this paper will include a more detailed examination of the Liftoff DTA process developed during the Shuttle Program, and how it has been augmented and applied to the SLS rocket under the Artemis Program. Comparisons with debris observations from the Artemis I launch will demonstrate validation of the tools and methodology.

Debris↗

Hemodynamic Effects of Midodrine After Space Flight in Astronauts Without Orthostatic Hypotension

Orthostatic hypotension and presyncope are common and potentially serious risks for astronauts returning from space. Susceptible subjects fail to generate an adequate adrenergic response to upright posture. The -1 adrenergic agonist, midodrine, may be an effective countermeasure. We tested the hypothesis that midodrine would have no negative hemodynamic effect on healthy astronauts returning from space. Five male astronauts participated in preflight and postflight tilt testing on a control flight as well as on the test flights, where midodrine (10 mg, orally) was administered after landing, approximately 1 hour before testing. None of these astronauts exhibited orthostatic hypotension or presyncope before or after either flight. Midodrine did not cause any untoward reactions in these subjects before or after flight, in fact a modest beneficial effect was seen on postflight tachycardia (p=0.036). These data show that midodrine protected against post-spaceflight increases in heart rate, without having any adverse hemodynamic effects on non-presyncopal, male astronauts. Among these subjects, midodrine was a safe cardiovascular countermeasure.

Platts, Steven H.↗

Advanced Life Systems for Extreme Environments: An Arctic Application

The problems of obtaining adequate pure drinking water and disposing of liquid and solid waste in the U.S. Arctic, a region where virtually all water is frozen solid for much of the year, has led to unsanitary solutions (U.S. Arctic Research Commission). These solutions are also damaging to the environment. Sanitation and a safe water supply are particularly problems in rural villages. About one-fourth of Alaska's 86.000 Native residents live in these communities. They are without running water and use plastic buckets for toilets. The outbreak of diseases is believed to be partially attributable to exposure to human waste. Villages with the most frequent outbreaks of disease are those in which running water is difficult to obtain (Office of Technology Assessment, 1994). Waste is emptied into open lagoons, rivers, or onto the sea coast. It does not degrade rapidly and in addition to affecting human health, can be harmful to the fragile ecology of the Arctic and the indigenous wildlife and fish populations. Advanced Life Systems for Extreme Environments (ALSEE) provides a solution to sanitation and safe water problems. The system uses an advanced integrated technology developed for Antarctic and space applications. ALSEE uses the systems approach to address more than waste and water problems. By incorporating hydroponic horticulture and aquaculture into the waste treatment system, ALSEE addresses the quality and quantity of fresh foods available to Arctic residents. A temperate climate is required for year-round plant growth. ALSEE facilities can be designed to include a climate controlled area within the structure. This type of environment is a change from the long periods of darkness and cold found in the Arctic and can help alleviate stress so often associated with these extremes. While the overall concept of ALSEE projects is advanced, system facilities can be operated by village residents with appropriate training. ALSEE provides continuing training and education as a part of the project. Not only is this desirable but necessary. There is ample evidence in "gravoyard" throughout rural Alaska of technologies which failed not because they were not applic4tble, but because they were not integrated and could not be operated or repaired by village residents. Waste streams in villages will vary depending on the human diet and the non-food waste stream. ALSEE units can be adapted to different village situations once the content of the waste stream is known. Units located in population hubs can serve as research, education. and demonstration centers. Appropriate modifications can be determined at these centers to transfer technology to more remote locations where waste stream conditions may differ.

Lewis, Carol E.↗

Challenges of CPAS Flight Testing

The Crew Exploration Vehicle Parachute Assembly System (CPAS) is being designed to land the Orion Crew Module (CM) at a safe rate of descent at splashdown via a series of Drogue, Pilot, and Main parachutes. Because Orion is considerably larger and heavier than Apollo, many of the flight test techniques developed during the Apollo program must be modified. The Apollo program had a dedicated C-133 aircraft, which was modified to allow a simple airdrop of "boilerplate" flight test vehicles. However, the CPAS program must use either commercial or military assets with minimal modifications to airframes or procedures. Conceptual envelopes from 2-Degree Of Freedom trajectories are presented for several existing and novel architectures. Ideally, the technique would deliver a representative capsule shape to the desired altitude and dynamic pressure at test initiation. However, compromises must be made on the characteristics of trajectories or the fidelity of test articles to production hardware. Most of the tests to date have used traditional pallet and weight tub or missile-shaped test vehicles. New test vehicles are being designed to better incorporate Orion structural components and deploy parachutes in a more representative fashion. The first attempt to test a capsule-shaped vehicle failed due to unexpected events while setting up the test condition through a series of complex procedures. In order to avoid the loss of another expensive test article which will delay the program, simpler deployment methods are being examined and more positive control of the vehicle will be maintained. Existing challenges include interfacing with parent aircraft, separating test vehicles, achieving test conditions, and landing within limited test ranges. All these challenges must be met within cost and schedule limits.

Ray, Eric S.↗

The Regolith Biters: A Divide-And-Conquer Architecture for Sample-Return Missions

The collective interaction of simple systems can be leveraged to attain complex goals. Based on this principle, we envision space system architectures where the core functional components are decoupled, autonomous, and cooperative. We aim to pursue this vision in the context of small-body sample-return missions. After all, no experimental study sheds more light into our understanding of the origin and evolution of the Solar System than the analysis of samples from asteroids and comets. We also believe that their study is important from a strategic perspective: meteorite impacts pose a direct and credible threat to life on Earth, and the development of contingency small-body deflection missions presupposes some knowledge of the target body. The current architectural paradigm for sample-return missions is centered around a design where spacecraft and sampling device are merged into a single, complex system. We argue that this monolithic approach couples the navigation and sample-collection problems, making both more difficult. In contrast, we propose a decoupled system based on the coordinated interaction between a spacecraft and a collective of small, simple devices - the Regolith Biters (RBs). A spacecraft carrying a number of RBs would travel to the vicinity of a small body. From a favorable vantage point, and while remaining within a safe distance in a non-colliding trajectory, it would release the RBs towards the target body. Upon encountering the body, they would bite the regolith (thus retaining a sample), and eject back to orbit. The spacecraft, being endowed with appropriate navigation and tracking capabilities, would rendezvous with and collect those RBs within its reach, and bring them back to Earth. Separating the navigation and sampling concerns removes the need for proximity operations with the small body-the stage in current architectures that carries the most challenges and risks. Eliminating the need for proximity operations brings back to the discussion the exploration of exciting prospects, like highly active comets, fast-rotating bodies, and binary systems. Distributing the sampling problem among a collective of agents provides the opportunity to sample multiple regions in a single mission. It also provides robustness to various environmental conditions, and may enable the distributed, in situ characterization of the body. In the search for reliability, current architectures rely on complexity: an elaborate system should succeed at once. We rely on numbers: a given agent may fail at any stage, but success is attained by the collective.

Asteroids↗

Objective Situation Awareness Measurement Based on Performance Self-Evaluation

The research was conducted in support of the NASA Safe All-Weather Flight Operations for Rotorcraft (SAFOR) program. The purpose of the work was to investigate the utility of two measurement tools developed by the British Defense Evaluation Research Agency. These tools were a subjective workload assessment scale, the DRA Workload Scale and a situation awareness measurement tool. The situation awareness tool uses a comparison of the crew's self-evaluation of performance against actual performance in order to determine what information the crew attended to during the performance. These two measurement tools were evaluated in the context of a test of innovative approach to alerting the crew by way of a helmet mounted display. The situation assessment data are reported here. The performance self-evaluation metric of situation awareness was found to be highly effective. It was used to evaluate situation awareness on a tank reconnaissance task, a tactical navigation task, and a stylized task used to evaluated handling qualities. Using the self-evaluation metric, it was possible to evaluate situation awareness, without exact knowledge the relevant information in some cases and to identify information to which the crew attended or failed to attend in others.

DeMaio, Joe↗

Geoscience Laser Altimetry System (GLAS) Loop Heat Pipe Anomaly and On Orbit Testing

The Geoscience Laser Altimetry System (GLAS) is the sole instrument on the ICESat Satellite. On day 230 of 2003, the GLAS Component Loop Heat Pipe (CLHP) entered a slow circulation mode that resulted in the main electronics box reaching its hot safing temperature, after which the entire instrument was turned off. The CLHP had a propylene working fluid and was actively temperature controlled via a heater on the compensation chamber. The slow circulation mode happened right after a planned propulsive yaw maneuver with the spacecraft. It took several days to recover the CLHP and ensure that it was still operational. The recovery occurred after the entire instrument was cooled to survival temperatures and the CLHP compensation chamber cycled on a survival heater. There are several theories as to why this slow circulation mode exhibited itself, including: accumulation of Non-Condensible Gas (NCG), the secondary wick being under designed or improperly implemented, or an expanded (post-launch) leak across the primary wick. Each of these is discussed in turn, and the secondary wick performance is identified as the most likely source of the anomalous behavior. After the anomaly, the CLHP was controlled to colder temperatures to improve its performance (as the surface tension increases with lower temperature, as does the volume of liquid in the compensation chamber) and only precursor pulses occurred later in the mission. After GLAS s last laser failed, in late 2009, a decision was made to conduct engineering tests of both LHPs to try and duplicate this flight anomaly. The engineering tests consisted of control setpoint changes, sink changes, and one similar propulsive Yaw maneuver. The only test that showed any similar anomaly precursors on the CLHP was the propulsive maneuver followed by a setpoint increase. The ICESat Satellite was placed in a decaying orbit and ended its mission on August 30, 2010 in Barents Sea.

Baker, Charles↗

Health Management and Prognostics for Electric Aircraft Powertrain

W and c Any air borne vehicle needs incorporating safety as key parameter of measure, and inclusion of autonomy raises the critical need for safety under autonomous operations. Management of faults and component degradation is key as complexity in autonomous operations grow over the period of time. Therefore, in addition to basic operational requirements, an autonomous electric vehicle should be able to make accurate estimates of its current system health and take the correct decisions to complete its mission successfully. Real-time safety and state-awareness tools are therefore essential for the vehicle to be able to reach its destination in a safe and successful manner. The need for safety assurance and health management capabilities is particularly relevant for aircraft electric propulsion systems, which are relatively new and with limited historical to learn. They are critical systems requiring high power density along with reliability, resilience, efficient management of weight, and operational costs. A model- based fault diagnosis and prognostics approach of complex critical systems can successfully accomplish the safety and state awareness goal for such electric propulsion systems, enabling autonomous decision making capability for safe and efficient operation. To identify critical components in the system a Qualitative Bayesian approach using FMECA is implemented. This requires the assessment of some quantities representing the state of the electric unmanned aerial systems (e-UAS), as well as look-ahead forecasts of such states during the entire flight, presented in form of safety metrics (SM). In-service data and performance data gathered from degraded components sup- ports diagnostic and prognostic methods for these systems, but this data can be difficult to obtain as weight and packaging restrictions reduce redundancy and instrumentation on-board the vehicle. Therefore, an model-based framework should be capable or operating with limited data. In addition to data scarcity, the variability of such complex critical systems re- quires the model-based framework to reason in the presence of uncertainty, such as sensor noise, and modeling imperfections. Quantification of errors and uncertainties in the measured states and quantities is therefore a fundamental step for a precise estimation of such SMs; un-modeled uncertainty may result in erroneous state assessment and un- reliable predictions of future states of e-UAVs. Typical, centralized model-based schemes suffer from inherent disadvantages such as computational complexity, single point of failure, and scalability issues, and therefore may fail in such a complex scenario. This paper presents a methodology for developing a system level diagnostics and prognostics approach using a Qualitative Bayesian FMECA approach along with a formal uncertainty management framework for an e-UAS. In this work we demonstrate the efficacy of the framework to predict effects of sub-system level degradation on vehicle operation incorporating uncertainty management to predict future behavior under different operating conditions.

Kulkarni, Chetan↗

Trajectory Specification for High-Capacity Air Traffic Control

In the current air traffic management system, the fundamental limitation on airspace capacity is the cognitive ability of human air traffic controllers to maintain safe separation with high reliability. The doubling or tripling of airspace capacity that will be needed over the next couple of decades will require that tactical separation be at least partially automated. Standardized conflict-free four-dimensional trajectory assignment will be needed to accomplish that objective. A trajectory specification format based on the Extensible Markup Language is proposed for that purpose. This format can be used to downlink a trajectory request, which can then be checked on the ground for conflicts and approved or modified, if necessary, then uplinked as the assigned trajectory. The horizontal path is specified as a series of geodetic waypoints connected by great circles, and the great-circle segments are connected by turns of specified radius. Vertical profiles for climb and descent are specified as low-order polynomial functions of along-track position, which is itself specified as a function of time. Flight technical error tolerances in the along-track, cross-track, and vertical axes define a bounding space around the reference trajectory, and conformance will guarantee the required separation for a period of time known as the conflict time horizon. An important safety benefit of this regimen is that the traffic will be able to fly free of conflicts for at least several minutes even if all ground systems and the entire communication infrastructure fail. Periodic updates in the along-track axis will adjust for errors in the predicted along-track winds.

Paielli, Russell A.↗