Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Resiliency”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Subsonic Aircraft Safety Icing Study

NASA's Integrated Resilient Aircraft Control (IRAC) Project is one of four projects within the agency s Aviation Safety Program (AvSafe) in the Aeronautics Research Mission Directorate (ARMD). The IRAC Project, which was redesigned in the first half of 2007, conducts research to advance the state of the art in aircraft control design tools and techniques. A "Key Decision Point" was established for fiscal year 2007 with the following expected outcomes: document the most currently available statistical/prognostic data associated with icing for subsonic transport, summarize reports by subject matter experts in icing research on current knowledge of icing effects on control parameters and establish future requirements for icing research for subsonic transports including the appropriate alignment. This study contains: (1) statistical analyses of accident and incident data conducted by NASA researchers for this "Key Decision Point", (2) an examination of icing in other recent statistically based studies, (3) a summary of aviation safety priority lists that have been developed by various subject-matter experts, including the significance of aircraft icing research in these lists and (4) suggested future requirements for NASA icing research. The review of several studies by subject-matter experts was summarized into four high-priority icing research areas. Based on the Integrated Resilient Aircraft Control (IRAC) Project goals and objectives, the IRAC project was encouraged to conduct work in all of the high-priority icing research areas that were identified, with the exception of the developing of methods to sense and document actual icing conditions.

Jones, Sharon Monica↗

Unsteady Extinction of Opposed Jet Ethylene/Methane HIFiRE Surrogate Fuel Mixtures vs Air

A unique idealized study of the subject fuel vs. air systems was conducted using an Oscillatory-input Opposed Jet Burner (OOJB) system and a newly refined analysis. Extensive dynamic-extinction measurements were obtained on unanchored (free-floating) laminar Counter Flow Diffusion Flames (CFDFs) at 1-atm, stabilized by steady input velocities (e.g., U(sub air)) and perturbed by superimposed in-phase sinusoidal velocity inputs at fuel and air nozzle exits. Ethylene (C2H4) and methane (CH4), and intermediate 64/36 and 15/85 molar percent mixtures were studied. The latter gaseous surrogates were chosen earlier to mimic ignition and respective steady Flame Strengths (FS = U(sub air)) of vaporized and cracked, and un-cracked, JP-7 "like" kerosene for a Hypersonic International Flight Research Experimentation (HIFiRE) scramjet. For steady idealized flameholding, the 100% C2H4 flame is respectively approx. 1.3 and approx.2.7 times stronger than a 64/36 mix and CH4; but is still 12.0 times weaker than a 100% H2-air flame. Limited Hot-Wire (HW) measurements of velocity oscillations at convergent-nozzle exits, and more extensive Probe Microphone (PM) measurements of acoustic pressures, were used to normalize Dynamic FSs, which decayed linearly with pk/pk U(sub air) (velocity magnitude, HW), and also pk/pk P (pressure magnitude, PM). Thus Dynamic Flame Weakening (DFW) is defined as % decrease in FS per Pascal of pk/pk P oscillation, namely, DFW = -100 d(U(sub air)/U(sub air),0Hz)/d(pkpk P). Key findings are: (1) Ethylene flames are uniquely strong and resilient to extinction by oscillating inflows below 150 Hz; (2) Methane flames are uniquely weak; (3) Ethylene / methane surrogate flames are disproportionately strong with respect to ethylene content; and (4) Flame weakening is consistent with limited published results on forced unsteady CFDFs. Thus from 0 to approx. 10 Hz and slightly higher, lagging diffusive responses of key species led to progressive phase lags (relative to inputs) in the oscillating flames, and caused maximum weakening. At 20 to 150 Hz, diffusion-rate-limited effects diminished, causing flames to "regain strengnth," and eventually become completely insensitive beyond 300 Hz. Detailed mechanistic understanding is needed. Overall, ethylene flames are remarkably resilient to dynamic extinction by oscillating inflows. They are the strongest, with the notable exception of H2. For HIFiRE tests, the 64%/36% surrogate disproportionally retains the high dynamic FS of ethylene, so the potential for loss of scramjet flameholding (flameout) due to low frequency oscillations is significantly mitigated.

Vaden, Sarah N.↗

Polyphony: A Workflow Orchestration Framework for Cloud Computing

Cloud Computing has delivered unprecedented compute capacity to NASA missions at affordable rates. Missions like the Mars Exploration Rovers (MER) and Mars Science Lab (MSL) are enjoying the elasticity that enables them to leverage hundreds, if not thousands, or machines for short durations without making any hardware procurements. In this paper, we describe Polyphony, a resilient, scalable, and modular framework that efficiently leverages a large set of computing resources to perform parallel computations. Polyphony can employ resources on the cloud, excess capacity on local machines, as well as spare resources on the supercomputing center, and it enables these resources to work in concert to accomplish a common goal. Polyphony is resilient to node failures, even if they occur in the middle of a transaction. We will conclude with an evaluation of a production-ready application built on top of Polyphony to perform image-processing operations of images from around the solar system, including Mars, Saturn, and Titan.

Space Exploration,↗

A Piloted Evaluation of Damage Accommodating Flight Control Using a Remotely Piloted Vehicle

Toward the goal of reducing the fatal accident rate of large transport airplanes due to loss of control, the NASA Aviation Safety Program has conducted research into flight control technologies that can provide resilient control of airplanes under adverse flight conditions, including damage and failure. As part of the safety program s Integrated Resilient Aircraft Control Project, the NASA Airborne Subscale Transport Aircraft Research system was designed to address the challenges associated with the safe and efficient subscale flight testing of research control laws under adverse flight conditions. This paper presents the results of a series of pilot evaluations of several flight control algorithms used during an offset-to-landing task conducted at altitude. The purpose of this investigation was to assess the ability of various flight control technologies to prevent loss of control as stability and control characteristics were degraded. During the course of 8 research flights, data were recorded while one task was repeatedly executed by a single evaluation pilot. Two generic failures, which degraded stability and control characteristics, were simulated inflight for each of the 9 different flight control laws that were tested. The flight control laws included three different adaptive control methodologies, several linear multivariable designs, a linear robust design, a linear stability augmentation system, and a direct open-loop control mode. Based on pilot Cooper-Harper Ratings obtained for this test, the adaptive flight control laws provided the greatest overall benefit for the stability and control degradation scenarios that were considered. Also, all controllers tested provided a significant improvement in handling qualities over the direct open-loop control mode.

Cunningham, Kevin↗

The Parable of the Boiled System Safety Professional: Drift to Failure

Recall from the Parable of the Boiled Frog, that tossing a frog into boiling water causes the frog to jump out and hop away while placing a frog in suitable temperature water and slowly bringing the water to a boil results in the frog boiling due to not being aware of the slowly increasing danger, theoretically, of course. System safety professionals must guard against allowing dangers to creep unnoticed into their projects and be ever alert to notice signs of impending problems. People have used various phrases related to the idea, most notably, latent conditions, James Reason in Managing the Risks of Organizational Accidents (1, pp 10-11), Drift to Failure, Sydney Dekker (2, pp 82-86) in Resilience Engineering: Chronicling the Emergence of Confused Consensus in Resilience Engineering: Concepts and Precepts, Hollnagel, Woods and Leveson, and normalization of deviance, Diane Vaughan in The Challenger Launch Decision: Risky Technology, Culture, and Deviance at NASA (3). Reason also said, If eternal vigilance is the price of liberty, then chronic unease is the price of safety (1, p 37). Our challenge as system safety professionals is to be aware of the emergence of signals that warn us of slowly eroding safety margins. This paper will discuss how system safety professionals might better perform in that regard.

Shivers, C. Herbert↗

Investigation of the Mechanical Performance of Compliant Thermal Barriers

Compliant thermal barriers play a pivotal role in the thermal protection systems of advanced aerospace vehicles. Both the thermal properties and mechanical performance of these barriers are critical in determining their successful implementation. Due to the custom nature of many thermal barriers, designers of advanced spacecraft have little guidance as to the design, selection, and implementation of these elements. As part of an effort to develop a more fundamental understanding of the interrelationship between thermal barrier design and performance, mechanical testing of thermal barriers was conducted. Two different types of thermal barriers with several core insulation density levels ranging from 62 to 141 kg/cu m were investigated. Room-temperature compression tests were conducted on samples to determine load performance and assess thermal barrier resiliency. Results showed that the loading behavior of these thermal barriers was similar to other porous, low-density, compliant materials, such as elastomeric foams. Additionally, the insulation density level had a significant non-linear impact on the stiffness and peak loads of the thermal barriers. In contrast, neither the thermal barrier type nor the level of insulation density significantly influenced the room-temperature resiliency of the samples.

DeMange, Jeffrey J.↗

Use of Additives to Improve Performance of Methyl Butyrate-Based Lithium-Ion Electrolytes

This work addresses the need for robust rechargeable batteries that can operate well over a wide temperature range. To this end, a number of electrolyte formulations have been developed that incorporate the use of electrolyte additives to improve the high-temperature resilience, low-temperature power capability, and life characteristics of methyl butyrate-based electrolyte solutions. These electrolyte additives include mono-fluoroethylene carbonate (FEC), lithium oxalate, vinylene carbonate (VC), and lithium bis(oxalato)borate (LiBOB), which have been shown to result in improved high-temperature resilience of all carbonate-based electrolytes. Improved performance has been demonstrated of Li-ion cells with methyl butyrate-based electrolytes, including 1.20M LiPF6 in EC+EMC+MB (20:20:60 v/v %); 1.20M LiPF6 in EC+EMC+MB (20:20:60 v/v %) + 2% FEC; 1.20M LiPF6 in EC+EMC+MB (20:20:60 v/v %) + 4% FEC; 1.20M LiPF6 in EC+EMC+MB (20:20:60 v/v %) + lithium oxalate; 1.20M LiPF6 in EC+EMC+MB (20:20:60 v/v %) + 2% VC; and 1.20M LiPF6 in EC+EMC+MB (20:20:60 v/v %) + 0.10M LiBOB. These electrolytes have been shown to improve performance in MCMB-LiNiCoO2 and graphite-LiNi1/3Co1/3Mn1/3O2 experimental Li-ion cells. A number of LiPF6-based mixed carbonate electrolyte formulations have been developed that contain ester co-solvents, which have been optimized for operation at low temperature, while still providing reasonable performance at high temperature. For example, a number of ester co-solvents were investigated, including methyl propionate (MP), ethyl propionate (EP), methyl butyrate (MB), ethyl butyrate (EB), propyl butyrate (PB), and butyl butyrate (BB) in multi-component electrolytes of the following composition: 1.0M LiPF6 in ethylene carbonate (EC) + ethyl methyl carbonate (EMC) + X (20:60:20 v/v %) [where X = ester co-solvent]. ["Optimized Car bon ate and Ester-Based Li-Ion Electrolytes", NASA Tech Briefs, Vol. 32, No. 4 (April 2008), p. 56.] Focusing upon improved rate capability at low temperatures (i.e., 20 to 40 C), this approach was optimized further, resulting in the development of 1.20M LiPF6 in EC+EMC+MP (20:20:60 v/v %) and 1.20M LiPF6 in EC+EMC+EB (20:20:60 v/v %), which were demonstrated to operate well over a wide temperature range in MCMB-LiNiCoAlO2 and Li4Ti5O12(-)LiNiCoAlO2 prototype cells.

Smart, Marshall C.↗

Improved Wide Operating Temperature Range of Li-Ion Cells

Future NASA missions aimed at exploring the Moon, Mars, and the outer planets require rechargeable batteries that can operate over a wide temperature range (-60 to +60 C) to satisfy the requirements of various applications including landers, rovers, penetrators, CEV, CLV, etc. This work addresses the need for robust rechargeable batteries that can operate well over a wide temperature range. The Department of Energy (DoE) has identified a number of technical barriers associated with the development of Liion rechargeable batteries for PHEVs. For this reason, DoE has interest in the development of advanced electrolytes that will improve performance over a wide range of temperatures, and lead to long life characteristics (5,000 cycles over a 10-year life span). There is also interest in improving the high-voltage stability of these candidate electrolyte systems to enable the operation of up to 5 V with high specific energy cathode materials. Currently, the state-of-the-art lithium-ion system has been demonstrated to operate over a wide range of temperatures (-40 to +40 C); however, the rate capability at the lower temperatures is very poor. In addition, the low-temperature performance typically deteriorates rapidly upon being exposed to high temperatures. A number of electrolyte formulations were developed that incorporate the use of electrolyte additives to improve the high-temperature resilience, low-temperature power capability, and life characteristics of methyl propionate (MP)-based electrolyte solutions. These electrolyte additives include mono-fluoroethylene carbonate (FEC), lithium oxalate, vinylene carbonate (VC), and lithium bis(oxalate borate) (LiBOB), which have previously been shown to result in improved high-temperature resilience of all carbonate-based electrolytes. These MP-based electrolytes with additives have been shown to have improved performance in experiments with MCMB-LiNiCoAlO2 cells.

Smart, Marshall C.↗

Performance of Wide Operating Temperature Range Electrolytes in Quallion Prototype Li-Ion Cells

For a number of applications, there is a continued interest in the development of rechargeable lithium-based batteries that can effectively operate over a wide temperature range (i.e., -40 to +70 deg C). These applications include powering future planetary rovers for NASA, enabling the next generation of automotive batteries for DOE, and supporting many DOD applications. Li-ion technology has been demonstrated to have good performance over a reasonably wide temperature range with many systems; however, there is still a desire to improve the low temperature rate capacity as well as the high temperature resilience. In the current study, we would like to present recent results obtained with prototype Li-Ion cells (manufactured by Quallion, LLC) which include various wide operating temperature range electrolytes developed by both JPL and Quallion. To demonstrate the viability of the technology, a number of performance tests were carried out, including: (a) discharge rate characterization over a wide temperature range (down to -60 deg C) using various rates (up to 20C rates), (b) discharge rate characterization at low temperatures with low temperature charging, (c) variable temperature cycling over a wide temperature range (-40 to +70 deg C), and (d) cycling at high temperature (50 deg C). As will be discussed, impressive rate capability was observed at low temperatures with many systems, as well as good resilience to high temperature cycling. To augment the performance testing on the prototype cells, a number of experimental three electrodes cells were fabricated (including Li reference electrodes) to allow the determination of the lithium kinetics of the respective electrodes and interfacial properties as a function of temperatures.

Lithium-ion↗

Risk of Performance Decrements and Adverse Health Outcomes Resulting from Sleep Loss, Circadian Desynchronization, and Work Overload

Sleep loss, circadian desynchronization, and work overload occur to some extent for ground and flight crews, prior to and during spaceflight missions. Ground evidence indicates that such risk factors may lead to performance decrements and adverse health outcomes, which could potentially compromise mission objectives. Efforts are needed to identify the environmental and mission conditions that interfere with sleep and circadian alignment, as well as individual differences in vulnerability and resiliency to sleep loss and circadian desynchronization. Specifically, this report highlights a collection of new evidence to better characterize the risk and reveals new gaps in this risk as follows: Sleep loss is apparent during spaceflight. Astronauts consistently average less sleep during spaceflight relative to on the ground. The causes of this sleep loss remain unknown, however ground-based evidence suggests that the sleep duration of astronauts is likely to lead to performance impairment and short and long-term health consequences. Further research is needed in this area in order to develop screening tools to assess individual astronaut sleep need in order to quantify the magnitude of sleep loss during spaceflight; current and planned efforts in BHP's research portfolio address this need. In addition, it is still unclear whether the conditions of spaceflight environment lead to sleep loss or whether other factors, such as work overload lead to the reduced sleep duration. Future data mining efforts and continued data collection on the ISS will help to further characterize factors contributing to sleep loss. Sleep inertia has not been evaluated during spaceflight. Ground-based studies confirm that it takes two to four hours to achieve optimal performance after waking from a sleep episode. Sleep inertia has been associated with increased accidents and reduced performance in operational environments. Sleep inertia poses considerable risk during spaceflight when emergency situations necessitate that crewmembers wake from sleep and make quick decisions. A recently completed BHP investigation assesses the effects of sleep inertia upon abrupt awakening, with and without hypnotics currently used in spaceflight; results from this investigation will help to inform strategies relative to sleep inertia effects on performance. Circadian desynchrony has been observed during spaceflight. Circadian desynchrony during spaceflight develops due to schedule constraints requiring non-24 operations or 'slam-shifts' and due to insufficient or mis-timed light exposure. In addition, circadian misalignment has been associated with reduced sleep duration and increased medication use. In ground-based studies, circadian desynchrony has been associated with significant performance impairment and increased risk of accidents when operations coincide with the circadian nadir. There is a great deal of information available on how to manage circadian misalignment, however, there are currently no easily collected biomarkers that can be used during spaceflight to determine circadian phase. Current research efforts are addressing this gap. Work overload has been documented during current spaceflight operations. NASA has established work hour guidelines that limit shift duration, however, schedule creep, where duty requirements necessitate working beyond scheduled work hours, has been reported. This observation warrants the documentation of actual work hours in order to improve planning and in order to ensure that astronauts receive adequate down time. In addition to concerns about work overload, ground based evidence suggests that work underload may be a concern during deep space missions, where torpor may develop and physically demanding workload will be exchanged for monitoring of autonomous systems. Given that increased automation is anticipated for exploration vehicles, fatigue effects in the context of such systems needs to be further understood. Performance metrics are needed to evaluate fitness-for-duty during spaceflight. Although ground-based evidence supports the notion that sleep loss, circadian desynchronization and work overload lead to performance impairment, inconsistency in the measures used to evaluate performance during spaceflight make it difficult to evaluate the magnitude of performance impairment during spaceflight. Work is underway to standardize measures of performance evaluation during spaceflight. Once established, such performance indicators need to be correlated with operational performance. Individual differences in sleep need and circadian preference, phase shifting ability and period have been documented in ground-based studies. Individual differences in response to sleep loss and circadian misalignment have also been documented and are presumed to be associated with genetic polymorphisms. No studies have systematically reported individual differences in sleep or circadian-related outcomes during spaceflight. More work is needed in this area in order to identify genetic or phenotypic biomarkers that predict resilience or vulnerability to sleep loss in order to personalize countermeasure strategies and mitigate performance impairment during spaceflight. Two laboratory and field investigations specific to this topic are currently ongoing; additional efforts, including an effort to mine existing biological data from spaceflight relative to sleep and circadian outcomes, are planned. Sex differences in sleep need and circadian period and phase have been reported in ground-based studies. The impact of these sex differences on performance is unclear. Sex differences in sleep need and circadian rhythms have not been systematically studied during spaceflight, presumably due to the small number of women that have flown in space. More research is needed in this area to evaluate whether any of the observed sex differences in physiology lead to altered performance in spaceflight and on the ground.

Flynn-Evans, Erin↗

Achieving Sustainability Goals for Urban Coasts in the US Northeast: Research Needs and Challenges

In the wake of Hurricane Sandy and other recent extreme events, urban coastal communities in the northeast region of the United States are beginning or stepping up efforts to integrate climate adaptation and resilience into long-term coastal planning. Natural and nature-based shoreline strategies have emerged as essential components of coastal resilience and are frequently cited by practitioners, scientists, and the public for the wide range of ecosystem services they can provide. However, there is limited quantitative information associating particular urban shoreline design strategies with specific levels of ecosystem service provision, and research on this issue is not always aligned with decision context and decision-maker needs. Engagement between the research community, local government officials and sustainability practitioners, and the non-profit and private sectors can help bridge these gaps. A workshop to bring together these groups discussed research gaps and challenges in integrating ecosystem services into urban sustainability planning in the urban northeast corridor. Many themes surfaced repeatedly throughout workshop deliberations, including the challenges associated with ecosystem service valuation, the transferability of research and case studies within and outside the region, and the opportunity for urban coastal areas to be a focal point for education and outreach efforts related to ecosystem services.

urban coasts↗

Climate Science for Decision-Making in the New York Metropolitan Region

New York City is one of the world's most vulnerable cities to coastal flooding, due to a high concentration of population and assets near a coastline exposed to warm-season tropical storms and cold -season Nor'easter storms. Among U.S. cities, New York City is second only to New Orleans in population living less than 4 ft above the local high tide. By the 2050s, average annual losses due to coastal flooding alone could exceed $2 billion for the combined New York City-Newark region. Perhaps the most iconic example of a vulnerable New York City asset is the financial district located at the southern tip of Manhattan, however low-lying coastal assets include the full complement of major highways, subways and tunnels, hospitals, schools, wastewater treatment plants, food distribution centers, and people's homes. Given the magnitude of the assets at risk, a compelling case can be made that long-term adaptation makes economic sense for New York City. Given New York's access to economic, human, and technological resources for resilience measures, the City may be able to achieve this resilience. The city's political environment-New York City is a place where climate science is generally not a partisan issue-and the city's experience with uncertainty and overall risk framing (e.g., financing of bond issues for multi-billion dollar infrastructure with multidecade expected lifetimes), encourage climate risk framing.

Horton, Radley↗

Climate Impact and GIS Education Using Realistic Applications of Data.gov Thematic Datasets in a Structured Lesson-Based Workbook

This project created a workbook which teaches Earth Science to undergraduate and graduate students through guided in-class activities and take-home assignments organized around climate topics which use GIS to teach key geospatial analysis techniques and cartography skills. The workbook is structured to the White House's Data.gov climate change themes, which include Coastal Flooding, Ecosystem Vulnerability, Energy Infrastructure, Arctic, Food Resilience, Human Health, Transportation, Tribal Nations, and Water. Each theme provides access to framing questions, associated data, interactive tools, and further reading (e.g. The US Climate Resilience Toolkit and National Climate Assessment). Lessons make use of the respective theme's available resources. The structured thematic approach is designed to encourage independent exploration. The goal is to teach climate concepts and concerns, GIS techniques and approaches, and effective cartographic representation and communication results; and foster a greater awareness of publicly available resources and datasets. To reach more audiences more effectively, a two level approach was used. Level 1 serves as an introductory study and relies on only freely available interactive tools to reach audiences with fewer resources and less familiarity. Level 2 presents a more advanced case study, and focuses on supporting common commercially available tool use and real-world analysis techniques.

Satellite Imagery↗

A Global Capacity Building Vision for Societal Applications of Earth Observing Systems and Data: Key Questions and Recommendations

Capacity building using Earth observing (EO) systems and data (i.e., from orbital and nonorbital platforms) to enable societal applications includes the network of human, nonhuman, technical, nontechnical, hardware, and software dimensions that are necessary to successfully cross the valley [of death; see NRC (2001)] between science and research (port of departure) and societal application (port of arrival). In many parts of the world (especially where ground-based measurements are scarce or insufficient), applications of EO data still struggle for longevity or continuity for a variety of reasons, foremost among them being the lack of resilient capacity. An organization is said to have resilient capacity when it can retain and continue to build capacity in the face of unexpected shocks or stresses. Stresses can include intermittent power and limited Internet bandwidth, constant need for education on ever-increasing complexity of EO systems and data, communication challenges between the ports of departure and arrival (especially across time zones), and financial limitations and instability. Shocks may also include extreme events such as disasters and losing key staff with technical and institutional knowledge.

shocks↗

Designing Graceful Degradation into Complex Systems: The Interaction Between Causes of Degradation and the Association with Degradation Prevention and Recovery

System resilience is critical to safety in air traffic control. An important element of maintaining resilience is the ability of systems to degrade gracefully. Of the available graceful degradation research, a majority of studies have focused primarily on technological causes of degradation only, limiting an ecologically valid understanding of the causes of degradation in air traffic control, and the preventative and mitigative strategies that enable graceful degradation. The current study aimed to address this research gap by investigating causes of degradation in air traffic control across the broad categories of technology, the environment, and the human operator, and the potential interactions between these causes. 12 retired controllers participated in semi-structured interviews focused on previous experience of causes of degradation and mitigation strategies. Findings provide an understanding of causation of degradation in air traffic control, and the prevention and mitigation strategies that moderate the relationship between cause and system effect. Findings confirmed that causes appear to interact to create compound, multiple effects on overall system performance. Findings also revealed prevention and mitigation strategies utilized to moderate the effect of the cause on the system. In order to gain an ecologically valid understanding of the causes of degradation, and effective prevention or mitigation strategies, causes from multiple categories, and the interactions between them, must be identified. Findings have implications for designers of future air traffic control systems to ensure the ability of the system to gracefully degrade, as well as risk assessment and system validation processes.

human performance↗

The Influence of Mental Workload in Causes of System Degradation in Air Traffic Control

System safety and resilience is a critical concern in the air traffic domain. An important element of maintaining system safety and resilience is the ability of systems to ‘degrade gracefully’. However, previous research on the causes of system degradation in the air traffic domain are sporadic, and the potential interaction between the causes of degradation, and the resulting possible compound effect on the entire system, has been under-researched. An interview study was conducted with 12 retired controllers as participants. The results of a thematic analysis revealed the key causes of system degradation, and the associated impact on the ability of the controllers to prevent system degradation or recover the system. Findings have direct implications for identifying and mitigating potential risks of increasingly automated air traffic control systems.

Edwards, Tamsyn E.↗

Designing Graceful Degradation into Complex Systems: Identification of Causes of Degradation, Interactions, and Mitigation of Degradation in Air Traffic Control

System resilience is critical to safety in air traffic control. An important element of maintaining resilience is the ability of systems to degrade gracefully. Of the available graceful degradation research, a majority of studies have focused primarily on technological causes of degradation only, limiting an ecologically valid understanding of the causes of degradation in air traffic control, and the preventative and mitigative strategies that enable graceful degradation. The current study aimed to address this research gap by investigating causes of degradation in air traffic control across the broad categories of technology, the environment, and the human operator, and the potential interactions between these causes. 12 retired controllers participated in semi-structured interviews focused on previous experience of causes of degradation and mitigation strategies. Findings provide an understanding of causation of degradation in air traffic control, and the prevention and mitigation strategies that moderate the relationship between cause and system effect. Findings confirmed that causes appear to interact to create compound, multiple effects on overall system performance. Findings also revealed prevention and mitigation strategies utilized to moderate the effect of the cause on the system. In order to gain an ecologically valid understanding of the causes of degradation, and effective prevention or mitigation strategies, causes from multiple categories, and the interactions between them, must be identified. Findings have implications for designers of future air traffic control systems to ensure the ability of the system to gracefully degrade, as well as risk assessment and system validation processes.

human performance↗

The Influence of Mental Workload in Causes of System Degradation in Air Traffic Control

System safety and resilience is a critical concern in the air traffic domain. An important element of maintaining system safety and resilience is the ability of systems to ‘degrade gracefully'. However, previous research on the causes of system degradation in the air traffic domain are sporadic, and the potential interaction between the causes of degradation, and the resulting possible compound effect on the entire system, has been under-researched. An interview study was conducted with 12 retired controllers as participants. The results of a thematic analysis revealed the key causes of system degradation, and the associated impact on the ability of the controllers to prevent system degradation or recover the system. Findings have direct implications for identifying and mitigating potential risks of increasingly automated air traffic control systems.

Edwards, Tamsyn↗