Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “certification by analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 289 records · Page 16

A Tool for Verification and Validation of Neural Network Based Adaptive Controllers for High Assurance Systems

High reliability of mission- and safety-critical software systems has been identified by NASA as a high-priority technology challenge. We present an approach for the performance analysis of a neural network (NN) in an advanced adaptive control system. This problem is important in the context of safety-critical applications that require certification, such as flight software in aircraft. We have developed a tool to measure the performance of the NN during operation by calculating a confidence interval (error bar) around the NN's output. Our tool can be used during pre-deployment verification as well as monitoring the network performance during operation. The tool has been implemented in Simulink and simulation results on a F-15 aircraft are presented.

Gupta, Pramod↗

Inspection of the Math Model Tools for On-Orbit Assessment of Impact Damage Report

In Spring of 2005, the NASA Engineering Safety Center (NESC) was engaged by the Space Shuttle Program (SSP) to peer review the suite of analytical tools being developed to support the determination of impact and damage tolerance of the Orbiter Thermal Protection Systems (TPS). The NESC formed an independent review team with the core disciplines of materials, flight sciences, structures, mechanical analysis and thermal analysis. The Math Model Tools reviewed included damage prediction and stress analysis, aeroheating analysis, and thermal analysis tools. Some tools are physics-based and other tools are empirically-derived. Each tool was created for a specific use and timeframe, including certification, real-time pre-launch assessments, and real-time on-orbit assessments. The tools are used together in an integrated strategy for assessing the ramifications of impact damage to tile and RCC. The NESC teams conducted a peer review of the engineering data package for each Math Model Tool. This report contains the summary of the team observations and recommendations from these reviews.

Harris, Charles E.↗

Inspection of the Math Model Tools for On-Orbit Assessment of Impact Damage Report

In Spring of 2005, the NASA Engineering Safety Center (NESC) was engaged by the Space Shuttle Program (SSP) to peer review the suite of analytical tools being developed to support the determination of impact and damage tolerance of the Orbiter Thermal Protection Systems (TPS). The NESC formed an independent review team with the core disciplines of materials, flight sciences, structures, mechanical analysis and thermal analysis. The Math Model Tools reviewed included damage prediction and stress analysis, aeroheating analysis, and thermal analysis tools. Some tools are physics-based and other tools are empirically-derived. Each tool was created for a specific use and timeframe, including certification, real-time pre-launch assessments. In addition, the tools are used together in an integrated strategy for assessing the ramifications of impact damage to tile and RCC. The NESC teams conducted a peer review of the engineering data package for each Math Model Tool. This report contains the summary of the team observations and recommendations from these reviews.

Harris, Charles E.↗

Review of Noise Metric Sensitivities for Analysis of Quiet Supersonic Overflight

Six different noise metrics (PL, ASEL, BSEL, DSEL, ESEL, and ISBAP) are currently used to quantify sonic boom levels from overflight of supersonic aircraft. A previous meta-analysis using laboratory subjective data identified these metrics, each of which correlated well with human perception of low-boom sounds both indoors and outdoors. Because the analysis did not identify a single metric that was significantly superior, no internationally agreed-upon metric has been chosen for the quiet supersonic aircraft noise certification procedures currently under development. Other analyses of metric sensitivities using existing empirical and simulation datasets, however, have shown significant differences between metrics. Variability of metrics due to macro-atmospheric effects and atmospheric turbulence perturbations have been explored, as well as variability in measurements due to microphone setup configurations, array layouts, and ambient noise effects. This paper reviews these prior studies, summarizes the current understanding of metric sensitivities, and discusses how they may impact future downselection of metrics for certification procedures.

sonic boom↗

A Generic Software Safety Document Generator

Formal certification is based on the idea that a mathematical proof of some property of a piece of software can be regarded as a certificate of correctness which, in principle, can be subjected to external scrutiny. In practice, however, proofs themselves are unlikely to be of much interest to engineers. Nevertheless, it is possible to use the information obtained from a mathematical analysis of software to produce a detailed textual justification of correctness. In this paper, we describe an approach to generating textual explanations from automatically generated proofs of program safety, where the proofs are of compliance with an explicit safety policy that can be varied. Key to this is tracing proof obligations back to the program, and we describe a tool which implements this to certify code auto-generated by AutoBayes and AutoFilter, program synthesis systems under development at the NASA Ames Research Center. Our approach is a step towards combining formal certification with traditional certification methods.

Denney, Ewen↗

Recent test results on lithium BCX cells

Texts included: short circuit analysis, voltage reversal, high temperature exposure, parallel loading sharing, capacity tests, shock and vibration tests, and assembly tests. Both the AA and D cell configurations were tested. Certification of the cells is discussed and applications are highlighted.

Bragg, B. J.↗

Analysis of Operational Hazards and Safety Requirements for Traffic Aware Strategic Aircrew Requests (TASAR)

Safety analyses of the Traffic Aware Strategic Aircrew Requests (TASAR) Electronic Flight Bag (EFB) application are provided to establish its Failure Effects Classification which affects certification and operational approval requirements. TASAR was developed by NASA Langley Research Center to offer flight path improvement opportunities to the pilot during flight for operational benefits (e.g., reduced fuel, flight time). TASAR, using own-ship and network-enabled information concerning the flight and its environment, including weather and Air Traffic Control (ATC) system constraints, provides recommended improvements to the flight trajectory that the pilot can choose to request via Change Requests to ATC for revised clearance. This study reviews the Change Request process of requesting updates to the current clearance, examines the intended function of TASAR, and utilizes two safety assessment methods to establish the Failure Effects Classification of TASAR. Considerable attention has been given in this report to the identification of operational hazards potentially associated with TASAR.

Koczo, Stefan, Jr.↗

Advanced composite elevator for Boeing 727 aircraft, volume 2

Preliminary design activity consisted of developing and analyzing alternate design concepts and selecting the optimum elevator configuration. This included trade studies in which durability, inspectability, producibility, repairability, and customer acceptance were evaluated. Preliminary development efforts consisted of evaluating and selecting material, identifying ancillary structural development test requirements, and defining full scale ground and flight test requirements necessary to obtain Federal Aviation Administration (FAA) certification. After selection of the optimum elevator configuration, detail design was begun and included basic configuration design improvements resulting from manufacturing verification hardware, the ancillary test program, weight analysis, and structural analysis. Detail and assembly tools were designed and fabricated to support a full-scope production program, rather than a limited run. The producibility development programs were used to verify tooling approaches, fabrication processes, and inspection methods for the production mode. Quality parts were readily fabricated and assembled with a minimum rejection rate, using prior inspection methods.

Chovil, D. V.↗

Model Verification and Validation Concepts for a Probabilistic Fracture Assessment Model to Predict Cracking of Knife Edge Seals in the Space Shuttle Main Engine High Pressure Oxidizer

Physics-based models are routinely used to predict the performance of engineered systems to make decisions such as when to retire system components, how to extend the life of an aging system, or if a new design will be safe or available. Model verification and validation (V&V) is a process to establish credibility in model predictions. Ideally, carefully controlled validation experiments will be designed and performed to validate models or submodels. In reality, time and cost constraints limit experiments and even model development. This paper describes elements of model V&V during the development and application of a probabilistic fracture assessment model to predict cracking in space shuttle main engine high-pressure oxidizer turbopump knife-edge seals. The objective of this effort was to assess the probability of initiating and growing a crack to a specified failure length in specific flight units for different usage and inspection scenarios. The probabilistic fracture assessment model developed in this investigation combined a series of submodels describing the usage, temperature history, flutter tendencies, tooth stresses and numbers of cycles, fatigue cracking, nondestructive inspection, and finally the probability of failure. The analysis accounted for unit-to-unit variations in temperature, flutter limit state, flutter stress magnitude, and fatigue life properties. The investigation focused on the calculation of relative risk rather than absolute risk between the usage scenarios. Verification predictions were first performed for three units with known usage and cracking histories to establish credibility in the model predictions. Then, numerous predictions were performed for an assortment of operating units that had flown recently or that were projected for future flights. Calculations were performed using two NASA-developed software tools: NESSUS(Registered Trademark) for the probabilistic analysis, and NASGRO(Registered Trademark) for the fracture mechanics analysis. The goal of these predictions was to provide additional information to guide decisions on the potential of reusing existing and installed units prior to the new design certification.

Pai, Shantaram S.↗

PRECiSA: a static analysis tool for floating-point programs

This presentation introduces PRECiSA, a static analysis framework for analyzing floating-point programs. PRECiSA computes round-off error bounds for a class of floating-point programs, and produces a formal proof certificate of the correctness of these bounds. PRECiSA also has the capability of generating C code which is instrumented to detect unstable branching conditions from a real-number algorithm specification.

Floating-point↗

Full-scale testing, production and cost analysis data for the advanced composite stabilizer for Boeing 737 aircraft. Volume 1: Technical summary

The full scale ground test, ground vibration test, and flight tests conducted to demonstrate a composite structure stabilizer for the Boeing 737 aircraft and obtain FAA certification are described. Detail tools, assembly tools, and overall production are discussed. Cost analyses aspects covered include production costs, composite material usage factors, and cost comparisons.

Aniversario, R. B.↗

MSFC cryogenic turbopump bearing tester results and analysis

A full scale High Pressure Oxidizer Turbopump (HPOTP) bearing tester has been developed, and an existing test stand modified, to simulate turbopump operating conditions for Space Shuttle Main Engine HPOTP design. Following a description of test facilities and procedures, design certification and calibration tests, and tests at a moderate axial load, are discussed. Results show that a bearing life of about 4500 seconds is comparable to the life experienced in the engine pump at nominal high power level operating conditions, and that although increased coolant flow increased fluid viscous work and bearing loads, a net decrease in bearing temperature was noted. Increased coolant flow is found to improve bearing cooling for marginal conditions, and bearing temperatures are shown to become more sensitive to coolant flow as shaft speed is increased. For the 6.4 lbs/s test conditions, the heat generated in a bearing pair is determined to be about 67 percent viscous work and 33 percent contact friction.

Dolan, F. J.↗

Simulation of Aircraft Engine Blade-Out Structural Dynamics

A primary concern of aircraft structure designers is the accurate simulation of the blade-out event and the subsequent windmilling of the engine. Reliable simulations of the blade-out event are required to insure structural integrity during flight as well as to guarantee successful blade-out certification testing. The system simulation includes the lost blade loadings and the interactions between the rotating turbomachinery and the remaining aircraft structural components. General-purpose finite element structural analysis codes such as MSC NASTRAN are typically used and special provisions are made to include transient effects from the blade loss and rotational effects resulting from the engine's turbomachinery. The present study provides the equations of motion for rotordynamic response including the effect of spooldown speed and rotor unbalance and examines the effects of these terms on a cantilevered rotor. The effect of spooldown speed is found to be greater with increasing spooldown rate. The parametric term resulting from the mass unbalance has a more significant effect on the rotordynamic response than does the spooldown term. The parametric term affects both the peak amplitudes as well as the resonant frequencies of the rotor.

Lawrence, Charles↗

Simulation of Aircraft Engine Blade-Out Structural Dynamics

A primary concern of aircraft structure designers is the accurate simulation of the blade-out event and the subsequent windmilling of the engine. Reliable simulations of the blade-out event are required to insure structural integrity during flight as well as to guarantee successful blade-out certification testing. The system simulation includes the lost blade loadings and the interactions between the rotating turbomachinery and the remaining aircraft structural components. General-purpose finite element structural analysis codes such as MSC NASTRAN are typically used and special provisions are made to include transient effects from the blade loss and rotational effects resulting from the engine's turbomachinery. The present study provides the equations of motion for rotordynamic response including the effect of spooldown speed and rotor unbalance and examines the effects of these terms on a cantilevered rotor. The effect of spooldown speed is found to be greater with increasing spooldown rate. The parametric term resulting from the mass unbalance has a more significant effect on the rotordynamic response than does the spooldown term. The parametric term affects both the peak amplitudes as well as the resonant frequencies of the rotor.

Lawrence, Charles↗

Noise-Reduction Benefits Analyzed for Over-the-Wing-Mounted Advanced Turbofan Engines

As we look to the future, increasingly stringent civilian aviation noise regulations will require the design and manufacture of extremely quiet commercial aircraft. Also, the large fan diameters of modern engines with increasingly higher bypass ratios pose significant packaging and aircraft installation challenges. One design approach that addresses both of these challenges is to mount the engines above the wing. In addition to allowing the performance trend towards large diameters and high bypass ratio cycles to continue, this approach allows the wing to shield much of the engine noise from people on the ground. The Propulsion Systems Analysis Office at the NASA Glenn Research Center at Lewis Field conducted independent analytical research to estimate the noise reduction potential of mounting advanced turbofan engines above the wing. Certification noise predictions were made for a notional long-haul commercial quadjet transport. A large quad was chosen because, even under current regulations, such aircraft sometimes experience difficulty in complying with certification noise requirements with a substantial margin. Also, because of its long wing chords, a large airplane would receive the greatest advantage of any noise-shielding benefit.

Berton, Jeffrey J.↗

Long-term trends in connected thermostat performance

Internet-connected thermostats (CTs) control heating and cooling systems in about 30% of North American homes, and capture half of annual thermostat sales. In 2017 the U.S. Environmental Protection Agency created a program to certify the performance of ENERGY STAR® Connected Thermostats. To demonstrate compliance with energy-saving criteria, thermostat vendors must submit performance summaries for a representative sample of up to 1250 homes. Vendors must then re-submit results from a new, representative sample every six months in order to maintain their ENERGY STAR certification. This procedure has created a unique record of each thermostat’s long-term performance in response to changes in weather, customer demographics, building stock, and algorithms. Our analysis covers submissions from 13 different vendors, who submitted data up to 7 times over four years. We found that these semi-annual samples generated relatively stable trends for comfort temperatures and Heating, Ventilating and Air Conditioning (HVAC) runtimes over the study period. However, some vendors achieved consistently more energy-conserving comfort temperatures and shorter HVAC runtimes than others. The most recent submission runtimes averaged 700 hours for heating and 1,300 hours for cooling, but some vendors achieved runtimes as much as 17% below the mean. This implies lower energy consumption is due in large part to more successful algorithms and control strategies used by those vendors.

Meier, Alan↗

The role of the real-time simulation facility, SIMFAC, in the design, development and performance verification of the Shuttle Remote Manipulator System (SRMS) with man-in-the-loop

The SIMFAC has played a vital role in the design, development, and performance verification of the shuttle remote manipulator system (SRMS) to be installed in the space shuttle orbiter. The facility provides for realistic man-in-the-loop operation of the SRMS by an operator in the operator complex, a flightlike crew station patterned after the orbiter aft flight deck with all necessary man machine interface elements, including SRMS displays and controls and simulated out-of-the-window and CCTV scenes. The characteristics of the manipulator system, including arm and joint servo dynamics and control algorithms, are simulated by a comprehensive mathematical model within the simulation subsystem of the facility. Major studies carried out using SIMFAC include: SRMS parameter sensitivity evaluations; the development, evaluation, and verification of operating procedures; and malfunction simulation and analysis of malfunction performance. Among the most important and comprehensive man-in-the-loop simulations carried out to date on SIMFAC are those which support SRMS performance verification and certification when the SRMS is part of the integrated orbiter-manipulator system.

Mccllough, J. R.↗

Human workload in aviation

The application of human-factors analysis techniques to the evaluation of aircraft-crew workloads is discussed in an introductory overview. Consideration is given to the importance of workload for safety, crew size, automation, and certification; the definition and measurement of workload, physical vs mental workloads, subjective ratings, secondary tasks, biocybernetic measures, and attention and workload. Recent studies of pilot and ATC workloads are reviewed, and typical data are presented in graphs. Future trends are discussed, and it is predicted that increased cockpit automation will eventually require new methods to maintain operator attention rather than reduce workload.

Kantowitz, Barry H.↗