Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System Resilience”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

Petit Grand Tour: Mission Concepts to Outer Planet Satellites Using Non-Conic Low Energy Trajectories

Our Solar System is connected by a vast Interplanetary Superhighway System (ISSys) providing low energy transport throughout. The Outer Planets with their satellites and rings are smaller replicas of the Solar System with their own ISSys, also providing low energy transport within their own satellite systems. This low energy transport system is generated by all of the Lagrange points of the planets and satellites within the Solar System. Figures show the tubular passage-ways near L1 of Jupiter and the ISSys of Jupiter schematically. These delicate and resilient dynamics may be used to great effect to produce free temporary captures of a spacecraft by a planet or satellite, low energy interplanetary and inter-satellite transfers, as well as precision impact orbits onto the surface of the satellites. Additional information is contained in the original extended abstract.

Lo, M. W.↗

Optimization of Second Fault Detection Thresholds to Maximize Mission POS

In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. To accommodate this with regards to Navigation, the SLS utilizes an internally redundant Inertial Navigation System (INS) with built-in capability to detect, isolate, and recover from first failure conditions and still maintain adherence to performance requirements. The unit utilizes multiple hardware- and software-level techniques to enable detection, isolation, and recovery from these events in terms of its built-in Fault Detection, Isolation, and Recovery (FDIR) algorithms. Successful operation is defined in terms of sufficient navigation accuracy at insertion while operating under worst case single sensor outages (gyroscope and accelerometer faults at launch). In addition to first fault detection and recovery, the SLS program has also levied requirements relating to the capability of the INS to detect a second fault, tracking any unacceptable uncertainty in knowledge of the vehicle's state. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error and sensor faults can drive the vehicle outside of its operational as-designed environments and outside of its performance envelope causing loss of mission, or worse, loss of crew. The criteria for operation under second faults allows for a larger set of achievable missions in terms of potential fault conditions, due to the INS operating at the edge of its capability. As this performance is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design space. Due to the implications of the vehicle response to abort conditions (such as a potentially failed INS), it is important to consider a wide range of failure scenarios in terms of both magnitude and time. As such, the Navigation team is taking advantage of the INS's capability to schedule and change fault detection thresholds in flight. These values are optimized along a nominal trajectory in order to maximize probability of mission success, and reducing the probability of false positives (defined as when the INS would report a second fault condition resulting in loss of mission, but the vehicle would still meet insertion requirements within system-level margins). This paper will describe an optimization approach using Genetic Algorithms to tune the threshold parameters to maximize vehicle resilience to second fault events as a function of potential fault magnitude and time of fault over an ascent mission profile. The analysis approach, and performance assessment of the results will be presented to demonstrate the applicability of this process to second fault detection to maximize mission probability of success.

Anzalone, Evan↗

Common Power and Energy Storage Solutions to Support Lunar and Mars Surface Exploration Missions

Future human exploration missions on the moon and Mars will require a new generation of power sources to sustain crew members and leverage in-situ resources. Long-duration human missions to the lunar and Martian surface will likely include large-scale landers, crew habitats, pressurized rovers, and in-situ propellant production plants. The power demands for these surface elements, whether on the moon or Mars, will be similar starting with robotic precursor missions in the multi-kilowatt range scaling to 10s of kilowatts as the crew presence expands and local propellant production is established. While the power requirements may be similar, the vastly different environments on the two surfaces present unique challenges for power generation and storage systems. Candidate technologies to satisfy the surface power needs include deployable solar arrays, regenerative fuel cells, and small fission reactors. This paper presents strategies for power system architectures with elements that can be used on the moon and are extensible to Mars with features that make them resilient to either environment.

Mason, Lee↗

Importance of Trade Dependencies for Agricultural Inputs: A Case Study of Finland

Approximately 80% of the world's population lives in countries that are dependent on food imports to sustain an adequate food supply. Besides these food imports, further dependencies also arise due to the requirements for agricultural inputs, including energy, fertilisers, feed and agricultural machinery. While the trade of agricultural inputs is relatively well represented in economic analysis, the quantification is often in terms of monetary values, and thus the assessments of the actual input quantities are very limited. In this paper, we develop a framework for analysis of the traded input quantities at the country-level and demonstrate its utility through an in-depth analysis of Finland's dependency on agricultural inputs. Further, we assess the importance of these inputs for domestic food production from a resilience perspective. We find that Finland, a country with relatively high food self-sufficiency but also a great dependency on imported agricultural inputs, experienced an increase in its dependency over the period 1996-2016. In case of trading partners, the story is more mixed: while trading partners for soybeans increased, those decreased in case of electricity while no significant change was observed in other commodities. In Finland, the rapeseed dependency on imports (ratio of net imports and consumption) grew from around 0% to almost 50% between the years 1987-2013. Changes for electricity remained substantially smaller, with dependency only slightly growing during the study period. Crude oil and soybean supplies are totally dependent on imports as neither is produced in Finland. Interestingly, the highest dependencies for agricultural inputs were on different countries than that for foodstuff imports. Thus, when identifying and assessing approaches to increase resilience to trade-related shocks, it is essential to understand both foodstuff and agricultural input dependencies within the global food system.

trade dependencies↗

Psychophysiological Methods to Assess Pilot Productive Safety Behaviors

The NASA System-Wide Safety (SWS) Project is focused on developing new technologies and operational concepts for the aviation industry to meet the increasing global demand while maintaining the current ultra-safe system safety levels. To achieve this, the SWS Project is developing research priorities, including In-time System-wide Safety Assurance (ISSA) and In-time Aviation Safety Management System (IASMS; Ellis et al., 2019). A critical component of the IASMS is the human as pilot and in other roles in aviation operations as demonstrated by SWS human factors research on rare occurrences of human error and the far more prevalent human safety producing behaviors (e.g., Hollnagel, 2016). The talk presented by Chad Stephens of NASA Langley Research Center and NASA SWS Project will describe the history of human factors research involving psychophysiological and biocybernetics methods supporting aviation safety conducted at NASA. Specific examples of recent NASA crew state monitoring research focused on a psychophysiological assessment method and system to enable Training for Attention Management will be demonstrated. Current SWS research including the SWS Operations and Technologies for Enabling Resilient In-Time Assurance (SOTERIA) flight simulation study and a data testbed created to enable study of Human Contributions to Safety (HC2S) will be presented. Ongoing collaborative research efforts with Boeing researchers will be highlighted and opportunities for further collaboration will be discussed.

psychophysiology↗

Acoustic properties and durability of liner materials at non-standard atmospheric conditions

This report documents the results of an experimental study on how acoustic properties of certain absorbing liner materials are affected by nonstandard atmospheric conditions. This study was motivated by the need to assess risks associated with incorporating acoustic testing capability in wind tunnels with semicryogenic high Reynolds number aerodynamic and/or low pressure capabilities. The study consisted of three phases: 1) measurement of acoustic properties of selected liner materials at subatmospheric pressure conditions, 2) periodic cold soak and high pressure exposure of liner materials for 250 cycles, and 3) determination of the effect of periodic cold soak on the acoustic properties of the liner materials at subatmospheric conditions and the effect on mechanical resiliency. The selected liner materials were Pyrell foam, Fiberglass, and Kevlar. A vacuum facility was used to create the subatmospheric environment in which an impedance tube was placed to measure acoustic properties of the test materials. An automated cryogenic cooling system was used to simulate periodic cold soak and high pressure exposure. It was found that lower ambient pressure reduced the absorption effectiveness of the liner materials to varying degrees. Also no significant change in the acoustic properties occurred after the periodic cold soak. Furthermore, mechanical resiliency tests indicated no noticeable change.

Ahuja, K. K.↗

A Scheduling Algorithm for Replicated Real-Time Tasks

We present an algorithm for scheduling real-time periodic tasks on a multiprocessor system under fault-tolerant requirement. Our approach incorporates both the redundancy and masking technique and the imprecise computation model. Since the tasks in hard real-time systems have stringent timing constraints, the redundancy and masking technique are more appropriate than the rollback techniques which usually require extra time for error recovery. The imprecise computation model provides flexible functionality by trading off the quality of the result produced by a task with the amount of processing time required to produce it. It therefore permits the performance of a real-time system to degrade gracefully. We evaluate the algorithm by stochastic analysis and Monte Carlo simulations. The results show that the algorithm is resilient under hardware failures.

Yu, Albert C.↗

An Analysis of the Role of Safety Nets in the National Airspace System

Safe operations of aircraft in the National Airspace System (NAS) may be attributed to many factors, including the application of a variety of safety nets (SNs) as a last line of defense. In preparation for the Next Generation Air Transportation System (NextGen), a review of Aviation Safety Reporting System (ASRS) reports for incidents with positive outcomes was conducted to investigate the importance of current safety nets. The examination of positive outcomes not only shows what went wrong, but also what went right to prevent accidents and “save the day.” More than 400 incident reports for 2015 from the voluntary ASRS reporting database were studied in detail to create event sequence diagrams (ESDs), illustrating the effectiveness of SNs. The developed ESDs are considered top-level, representative models and are limited with respect to being reliably quantitative because they are based on only reports from a single year. The ESDs could offer insights into human systems integration research, such as strategically using technologies as SNs without human interface or alleviating human workload with new technologies to provide resilient recovery from off-nominal conditions ensuring flight safety.

Geuther, Steven↗

Megadroughts in the Common Era and the Anthropocene

Megadroughts, often lasting multiple decades, have caused major ecological and societal disturbances in the past. While most research has focused on megadroughts in North America, the concept has gained increased international attention in recent years. In this Review, we discuss shared causes and features of Common Era and future megadroughts. Paleoclimate reconstructions spanning the last 2,000 years document the occurrence of megadroughts on every continent, save Antarctica. Megadroughts are often linked to decadal variations in sea surface temperatures, with radiative forcing and land-atmosphere interactions acting as secondary factors. Anthropogenic climate change has already contributed to recent megadroughts in southwestern North America and Chile-Argentina and will likely increase future megadrought risk and severity in many regions. Notably, future megadroughts will be differentiated from past events through higher temperatures, which act as the main driver of increased risk, severity, and impacts. Major deficiencies in our understanding of natural and anthropogenic megadrought processes remain, however. These include 1) sparse high-resolution paleoclimate information over some regions, 2) incomplete representations of internal variability and land-surface processes in climate models, and 3) the undetermined capacity of water-resource management systems to manage megadrought impacts. Resolving these key uncertainties will be necessary to increase confidence in projections of future megadrought risk and resiliency planning.

Droughts↗

Approaching Complex Societal Problems Tied to Aviation

From climate change to health inequity, humankind faces complex societal challenges that aviation can both exacerbate and help to alleviate. In this paper we describe our approach to identifying and approaching complex societal challenges with existing or potential ties to aviation as part of the NASA Convergent Aeronautics Solutions (CAS) project. We detail three example challenges that we have done preliminary work on: enabling access to healthcare, supporting resilient rural communities, and ensuring supply chain wellness. Our approach to understanding and addressing such challenges involves iterative human-centered, systems-oriented, and futures-based design. We provide a discussion of cross-cutting characteristics of complex societal challenges that appear fruitful for aviation to address and detail the lessons we have learned thus far in approaching such challenges.

Elizabeth F. Rieken↗

Configuring and Testing Mesh Radios for Air-To-Ground Communications

The initial mesh network used to demonstrate a simple mesh network for the air-to-ground challenge will consist of 4 mesh radios purchased from DoodleLabs. The multiband radios operate in both the 915MHz and 2450MHz frequencies and can use Wi-Fi to connect to deployed devices. The DoodleLabs radios come preconfigured with unique IP addresses but to make sure of compatibility each radio will be assigned an IP address. For initial testing configurations will be changed using the built-in local web server interface that DoodleLabs radios provide. To access the webserver a computer connects to the radios broadcast Wi-Fi network using the default credentials, then enter the default IP address into a browser. This webserver will allow the user to monitor the radio performance and make changes to the various systems. The simple configuration page will allow an operator to make many of the initial changes to place each radio on the network and secure each connection with a new password. Further testing will then be performed by building out a simulated virtual network of 26 nodes and connecting the 4 DoodleLabs radios into this simulation. This will give insight into the radio’s performance in the larger system they will likely operate in given the project requirements. This testing will focus on multi-hop throughput, latency and the resiliency to packet loss.

Mesh Radio↗

Looking to the Future: A Call to Action for Advanced GNC Algorithm Verification and Validation

Future space systems will rely on autonomous Guidance, Navigation, and Control (GNC) functions to efficiently manage safe and precise self-directed operations in uncertain complex environments. Fundamentally, the GNC system plays a key role in mission performance and safety because it computes the ideal trajectory (Guidance), determines the actual trajectory (Navigation), and executes the ideal trajectory (Control) of a vehicle’s position and attitude. Our current GNC systems are highly automated and already have a high degree of complexity. As missions become more ambitious, GNC systems for launch vehicles and space platforms (e.g., spacecraft, probes, and landers) will require higher levels of performance and autonomous operation than previously encountered, for example, this includes GNC for optimizing aerodynamic and/or propulsion performance during planetary entry. This GNC Verification and Validation (V&V) paper highlights concerns with what undoubtedly will be a trend towards increased complexity as fully autonomous GNC systems are developed for future space missions. Clearly, complex GNC systems pose challenges in the prelaunch V&V phase, which is a relatively expensive part of a mission’s life cycle. Essentially the V&V phase is focused on checking that the system effectively meets all the design and operational requirements for the mission. The authors of this paper (i.e., the Inter-Agency Working Group of GNC subject matter experts) focused on this fundamental question over the past few years: Will the GNC engineering community of practice be sufficiently prepared to perform the necessary V&V on evolving GNC architectures that are driven by very demanding requirements for autonomy, resiliency, reconfigurability, adaptability, and mission cost-benefit balance? It is the viewpoint of our Inter-Agency team that the GNC V&V approaches and processes needed to address the next generation of complex GNC systems, which likely will employ various forms of modern GNC technology, are not currently established to the level the community will need in the future. While researchers and practitioners have made some progress in developing new GNC V&V methods for modern GNC systems, a good deal of work remains to be done to codify such methods in a comprehensive and systematic manner. Thus, the Inter-Agency team’s partner organizations [the National Aeronautics and Space Administration (NASA), the European Space Agency (ESA), the National Centre for Space Studies (CNES), the German Aerospace Center (DLR), the French Aerospace Lab (ONERA), and ISAE-SUPAERO] have conducted preliminary investigations into advancing GNC V&V techniques, which resulted in the identification of the need for education, new V&V tools, and benchmark problems for the GNC community. The necessary proactive steps to be taken to meet the challenges and fill the gaps in GNC V&V are summarized in this paper. The first steps include identifying advanced analysis tools, developing a GNC V&V roadmap, and expanding education and training programs for GNC practitioners. This paper is a call to action and proposes a comprehensive set of recommended actions for all our stakeholders: space agencies, researchers, and industry.

Samir Bennani↗

Capability Description for NASA's F/A-18 TN 853 as a Testbed for the Integrated Resilient Aircraft Control Project

The NASA F/A-18 tail number (TN) 853 full-scale Integrated Resilient Aircraft Control (IRAC) testbed has been designed with a full array of capabilities in support of the Aviation Safety Program. Highlights of the system's capabilities include: 1) a quad-redundant research flight control system for safely interfacing controls experiments to the aircraft's control surfaces; 2) a dual-redundant airborne research test system for hosting multi-disciplinary state-of-the-art adaptive control experiments; 3) a robust reversionary configuration for recovery from unusual attitudes and configurations; 4) significant research instrumentation, particularly in the area of static loads; 5) extensive facilities for experiment simulation, data logging, real-time monitoring and post-flight analysis capabilities; and 6) significant growth capability in terms of interfaces and processing power.

Hanson, Curt↗

Secure Network-Centric Aviation Communication (SNAC)

The existing National Airspace System (NAS) communications capabilities are largely unsecured, are not designed for efficient use of spectrum and collectively are not capable of servicing the future needs of the NAS with the inclusion of new operators in Unmanned Aviation Systems (UAS) or On Demand Mobility (ODM). SNAC will provide a ubiquitous secure, network-based communications architecture that will provide new service capabilities and allow for the migration of current communications to SNAC over time. The necessary change in communication technologies to digital domains will allow for the adoption of security mechanisms, sharing of link technologies, large increase in spectrum utilization, new forms of resilience and redundancy and the possibly of spectrum reuse. SNAC consists of a long term open architectural approach with increasingly capable designs used to steer research and development and enable operating capabilities that run in parallel with current NAS systems.

Communications↗

Simulation of a Representative Future Trajectory-Based Operations Environment

Trajectory-Based Operations in the National Airspace System is a key aspect of advanced air traffic management research. Trajectory-Based Operations focuses on modernizing the current operating paradigm to increase efficiency, predictability, resilience, and flexibility while migrating toward greater operational autonomy across the airspace. Research conducted at the National Aeronautics and Space Administration supports the transition from current airspace operations to Trajectory-Based Operations targeting a 2035-2045 implementation timeframe. Simulation scenarios that demonstrate a representative Trajectory-Based Operations environment in that timeframe, and enable the evaluation of advanced airborne tools such as strategic airborne trajectory management services, are necessary to support this research effort. This report describes characteristics and assumptions made about the future operating environment that were applied to a scenario development methodology to study a representative 2040 Trajectory-Based Operations environment in a simulation use case. This report also includes descriptions of the study design and analysis approach, discussion of the simulation results, and application of these scenarios to future research activities.

Trajectory Based Operations↗

Design and validation of fault-tolerant flight systems

Flight systems must be validated to show that they are consistent with the requirements of their intended applications. While high reliability is difficult to validate, the additional complexity of fault tolerance further compounds the validation problem. The objective of NASA’s research is to develop a methodology for designing validatable fault-tolerant systems. Under the design-for-validation philosophy, emphasis is placed on developing validation methods that can be incorporated into the design process right from the start and design methods and guidance which, while incorporating fault tolerance, can assure validatability. This paper examines the statistical issues of validating highly reliable, fault tolerant system. There are many problems associated with traditional methods of designing and validating these potentially complex hardware and software systems. Useful design-for-validation methods, which include structured specification and design methodologies, mathematical proof techniques, analytical modeling, simulation and emulation, and physical testing, are discussed. Important design issues associated with fault tolerance are presented along with the related validation concerns which must be addressed. Experience has shown that synchronization and Byzantine resilience must accompany fault tolerance. Other design attributes associated with fault tolerance may be used by a designer on the basis of cost, weight, performance, and validation considerations.

Computer systems↗

Fault Diagnosis of Power Components with Reliability Assessment in Extraterrestrial Microgrids

This research investigates the possible failures caused by aging and other environmental and external factors that could significantly impact the performance of extraterrestrial power systems. Additionally, it presents a reliability assessment model for the space microgrid based on fault tree analysis (FTA). The reliability assessment model developed in this paper represents a tool that can be used by engineers to harden the system design for operational and economic benefits. To improve the reliability of the system, this work provides a broad review of the different fault detection and diagnosis (FDD) algorithms used for power microgrids and space applications. Using data sets from the Habitat Simulator developed through the NASA-funded Resilient Extraterrestrial Habitat Institute, this paper compares the applicability and accuracy of the different FDD methods. The primary FDD approach proposed and assessed in this work is based on the Markov reliability model. It predicts and detects future faults in the space microgrids by using past data samples and categorizing them into different classes. Data-driven-based models such as artificial neural networks are also investigated, tested, and evaluated using simulation data sets. According to the simulation results and the broad FDD algorithm comparison, this study provides the crew or maintenance engineers with a clear methodology to detect and localize power system failures.

Leila Chebbo↗

Nonlinear Reduced-Order Analysis with Time-Varying Spatial Loading Distributions

Oscillating shocks acting in combination with high-intensity acoustic loadings present a challenge to the design of resilient hypersonic flight vehicle structures. This paper addresses some features of this loading condition and certain aspects of a nonlinear reduced-order analysis with emphasis on system identification leading to formation of a robust modal basis. The nonlinear dynamic response of a composite structure subject to the simultaneous action of locally strong oscillating pressure gradients and high-intensity acoustic loadings is considered. The reduced-order analysis used in this work has been previously demonstrated to be both computationally efficient and accurate for time-invariant spatial loading distributions, provided that an appropriate modal basis is used. The challenge of the present study is to identify a suitable basis for loadings with time-varying spatial distributions. Using a proper orthogonal decomposition and modal expansion, it is shown that such a basis can be developed. The basis is made more robust by incrementally expanding it to account for changes in the location, frequency and span of the oscillating pressure gradient.

Prezekop, Adam↗