Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 307 records · Page 17

Satellite recovery - Attitude dynamics of the targets

The problems of categorizing and modeling the attitude dynamics of uncontrolled artificial earth satellites which may be targets in recovery attempts are addressed. Methods of classification presented are based on satellite rotational kinetic energy, rotational angular momentum and orbit and on the type of control present prior to the benign failure of the control system. The use of approximate analytical solutions and 'exact' numerical solutions to the equations governing satellite attitude motions to predict uncontrolled attitude motion is considered. Analytical and numerical results are presented for the evolution of satellite attitude motions after active control termination.

Cochran, J. E., Jr.↗

Dust-Tolerant Intelligent Electrical Connection System

Faults in wiring systems are a serious concern for the aerospace and aeronautic (commercial, military, and civilian) industries. Circuit failures and vehicle accidents have occurred and have been attributed to faulty wiring created by open and/or short circuits. Often, such circuit failures occur due to vibration during vehicle launch or operation. Therefore, developing non-intrusive fault-tolerant techniques is necessary to detect circuit faults and automatically route signals through alternate recovery paths while the vehicle or lunar surface systems equipment is in operation. Electrical connector concepts combining dust mitigation strategies and cable diagnostic technologies have significant application for lunar and Martian surface systems, as well as for dusty terrestrial applications. The dust-tolerant intelligent electrical connection system has several novel concepts and unique features. It combines intelligent cable diagnostics (health monitoring) and automatic circuit routing capabilities into a dust-tolerant electrical umbilical. It retrofits a clamshell protective dust cover to an existing connector for reduced gravity operation, and features a universal connector housing with three styles of dust protection: inverted cap, rotating cap, and clamshell. It uses a self-healing membrane as a dust barrier for electrical connectors where required, while also combining lotus leaf technology for applications where a dust-resistant coating providing low surface tension is needed to mitigate Van der Waals forces, thereby disallowing dust particle adhesion to connector surfaces. It also permits using a ruggedized iris mechanism with an embedded electrodynamic dust shield as a dust barrier for electrical connectors where required.

Lewis, Mark↗

Evaluating Resilience of Water Distribution Networks to Operational Failures from Cyber-Physical Attacks

Water cyber-physical systems (CPSs) have gained increasing interest to improve operational efficiency and reliability. However, due to growing exposure to cyber-physical attacks, cybersecurity and resilience against the attacks have become significant concerns. There have been efforts to improve cybersecurity in water CPSs, yet few attempts to investigate resilience against cyber-physical attacks. This study contributes to characterizing resilience of a water CPS and investigating potential resilience strategies. An advanced resilience measure integrating withstanding, absorptive, adaptive, and restorative capability of a system is proposed and applied to the C-town water distribution network (WDN) for 15 failure set scenarios with a pressure-driven hydraulic simulation. The results provide identification of failure sets and unfavorable operational conditions that make the system more vulnerable to the cyber-physical attacks and in turn produce low resilience and capabilities. It is also found that, after recovery of a disrupted component, adjustment of overall operational interactions across system components is needed for complete restoration of disrupted functionality. The findings provide insights on infrastructure investment with resilience strategies in cyber and physical water system domains.

Shin, Sangmin↗

Recoverable distributed shared virtual memory - Memory coherence and storage structures

This paper examines the problem of implementing rollback recovery in multicomputer distributed shared virtual memory environments, in which the shared memory is implemented in software and exists only virtually. A user-transparent checkpointing recovery scheme and new twin-page disk storage management are presented to implement a recoverable distributed shared virtual memory. The checkpointing scheme is integrated with the shared virtual memory management. The twin-page disk approach allows incremental checkpointing without an explicit undo at the time of recovery. A single consistent checkpoint state is maintained on stable disk storage. The recoverable distributed shared virtual memory allows the system to restart computation from a previous checkpoint due to a processor failure without a global restart.

Wu, Kun-Lung↗

Reliable magnetic tape recording for real-time data acquisition systems

The design of a real-time magnetic tape I/O system using automatic error recovery and data spooling is discussed. Real time requirements (data acquired at one rate and recorded at another by queing) must be met and data integrity must be provided regardless of tape failures or I/O errors. Automatic blocking services should be used for multiple local records storage. Avoidance of operational delays and loss of data is essential, noting the problems of the tape drives of the NASA Langley cryogenic wind tunnel. A series of block diagrames and flow charts are included.

Richard W Ross↗

Design and flight test of the Propulsion Controlled Aircraft (PCA) flight control system on the NASA F-15 test aircraft

This report describes the design, development and flight testing of the Propulsion Controlled Aircraft (PCA) flight control system performed at McDonnell Douglas Aerospace (MDA), St. Louis, Missouri and at the NASA Dryden Flight Research Facility, Edwards Air Force Base, California. This research and development program was conducted by MDA and directed by NASA through the Dryden Flight Research Facility for the period beginning January 1991 and ending December 1993. A propulsion steering backup to the aircraft conventional flight control system has been developed and flight demonstrated on a NASA F-15 test aircraft. The Propulsion Controlled Aircraft (PCA) flight system utilizes collective and differential thrust changes to steer an aircraft that experiences partial or complete failure of the hydraulically actuated control surfaces. The PCA flight control research has shown that propulsion steering is a viable backup flight control mode and can assist the pilot in safe landing recovery of a fighter aircraft that has damage to or loss of the flight control surfaces. NASA, USAF and Navy evaluation test pilots stated that the F-15 PCA design provided the control necessary to land the aircraft. Moreover, the feasibility study showed that PCA technology can be directly applied to transport aircraft and provide a major improvement in the survivability of passengers and crew of controls damaged aircraft.

Wells, Edward A.↗

A two-stage optical fusion framework for wildfire severity mapping across the conterminous United States

Accurate wildfire severity mapping (WSM) is essential for post-fire recovery planning, erosion risk assessment, ecosystem monitoring, and disaster risk reduction. Although Landsat and Sentinel optical imagery have been widely used for burn severity assessment, the added value of fusing multiple optical sensors has not been sufficiently quantified across diverse fire events, particularly since the launch of Landsat-9. This study evaluates whether multisensor optical fusion improves wildfire severity mapping relative to single-sensor baselines using Sentinel-2, Landsat-8, and Landsat-9 imagery across 40 wildfire events in the conterminous United States. We tested a two-stage fusion framework that combines feature-level fusion with pixel-level dimensionality reduction. First, feature-level fused datasets were created through early fusion by combining standardized post-fire bands from each sensor into a single predictor stack. Both raw reflectance bands and pairwise spectral transforms were retained to capture within- and cross-sensor spectral interactions. Second, Linear Discriminant Analysis was applied to both single-sensor and fused datasets to produce comparable low-dimensional feature spaces. Six machine-learning classifiers were then used to benchmark model performance with repeated spatially buffered train–test splits. Results show that Landsat-9 was the strongest single-sensor baseline. Among the fusion strategies, Sentinel-2 + Landsat-9 produced the most consistent improvement and reduced performance variability. Landscape-condition analysis further showed that this fusion was most beneficial in shrubland-dominated and high-terrain fires, where it achieved the highest overall mean accuracy and the fewest failures. In contrast, its benefits were less reliable in evergreen forests, mixed vegetation, and low- to moderate-elevation terrain. In operational settings, the Sentinel-2 + Landsat-9 configuration offers a practical solution for post-fire recovery planning, erosion-risk assessment, watershed management, and ecological monitoring when field observations are available and timely satellite-based information is needed.

Landsat↗

Formal design and verification of a reliable computing platform for real-time control. Phase 1: Results

A high-level design is presented for a reliable computing platform for real-time control applications. Design tradeoffs and analyses related to the development of the fault-tolerant computing platform are discussed. The architecture is formalized and shown to satisfy a key correctness property. The reliable computing platform uses replicated processors and majority voting to achieve fault tolerance. Under the assumption of a majority of processors working in each frame, it is shown that the replicated system computes the same results as a single processor system not subject to failures. Sufficient conditions are obtained to establish that the replicated system recovers from transient faults within a bounded amount of time. Three different voting schemes are examined and proved to satisfy the bounded recovery time conditions.

Divito, Ben L.↗

High Level Design Proof of a Reliable Computing Platform

An architecture for fault-tolerant computing is formalized and shown to satisfy a key correctness property. The reliable computing platform uses replicated processors and majority voting to achieve fault tolerance. Under the assumption of a majority of processors working in each frame, we show that the replicated system computes the same results as a single processor system not subject to failures. Sufficient conditions are obtained to establish that the replicated system recovers from transient faults within a bounded amount of time. Three different voting schemes are examined and proved to satisfy the bounded recovery time conditions.

DiVito, Ben L.↗

Adjustable Autonomy Testbed

The Adjustable Autonomy Testbed (AAT) is a simulation-based testbed located in the Intelligent Systems Laboratory in the Automation, Robotics and Simulation Division at NASA Johnson Space Center. The purpose of the testbed is to support evaluation and validation of prototypes of adjustable autonomous agent software for control and fault management for complex systems. The AA T project has developed prototype adjustable autonomous agent software and human interfaces for cooperative fault management. This software builds on current autonomous agent technology by altering the architecture, components and interfaces for effective teamwork between autonomous systems and human experts. Autonomous agents include a planner, flexible executive, low level control and deductive model-based fault isolation. Adjustable autonomy is intended to increase the flexibility and effectiveness of fault management with an autonomous system. The test domain for this work is control of advanced life support systems for habitats for planetary exploration. The CONFIG hybrid discrete event simulation environment provides flexible and dynamically reconfigurable models of the behavior of components and fluids in the life support systems. Both discrete event and continuous (discrete time) simulation are supported, and flows and pressures are computed globally. This provides fast dynamic simulations of interacting hardware systems in closed loops that can be reconfigured during operations scenarios, producing complex cascading effects of operations and failures. Current object-oriented model libraries support modeling of fluid systems, and models have been developed of physico-chemical and biological subsystems for processing advanced life support gases. In FY01, water recovery system models will be developed.

Malin, Jane T.↗

Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance

There is a trend in the aviation industry to go from federated to integrated computing systems. Combining a number of traditional stand-alone federated systems into an integrated common platform (called Integrated Modular Avionics, IMA) has the benefit of increased power efficiency, reduced support hardware, and reduced cabling. However, changing from federated to integrated has a significant impact on the system architecture and hence the process of how avionic systems are to be analyzed. Traditional approaches to safety analysis become inefficient when functional boundaries can no longer be assumed for failure independence and fault isolation. In this report, we describe a tool that we developed to accelerate the safety engineer's ability to perform safety analysis of IMA systems through modeling, as well as optimize the system engineer's ability to develop a system through architecture synthesis. This work was the result of a three-year research effort called SOTERIA (Safe and Optimal Techniques Enabling Recovery, Integrity, and Assurance). We developed a compositional modeling language that supports rapid development, modification, and evaluation of architectures. The modeling language is structured such that the end-user defines a library of components with information on component reliability, connectivity, and fault propagation logic. The system model is built by instantiating the components from the library, connecting the components, and identifying the top-level faults of interest. Our tool is compositional in that the end-user only needs to define safety aspects at the component level. The tool takes the model and automatically synthesizes both the qualitative and quantitative safety analyses. We go further by allowing users to describe system information such as components to use in an architecture and their connection compatibility and automatically synthesize an architecture that meets the top-level probability target adhering to end-user specified constraints. This capability allows users to rapidly explore a design space..

Siu, Kit Y.↗

Ensuring correct rollback recovery in distributed shared memory systems

Distributed shared memory (DSM) implemented on a cluster of workstations is an increasingly attractive platform for executing parallel scientific applications. Checkpointing and rollback techniques can be used in such a system to allow the computation to progress in spite of the temporary failure of one or more processing nodes. This paper presents the design of an independent checkpointing method for DSM that takes advantage of DSM's specific properties to reduce error-free and rollback overhead. The scheme reduces the dependencies that need to be considered for correct rollback to those resulting from transfers of pages. Furthermore, in-transit messages can be recovered without the use of logging. We extend the scheme to a DSM implementation using lazy release consistency, where the frequency of dependencies is further reduced.

Janssens, Bob↗

Eigenspace techniques for active flutter suppression

The use of eigenspace techniques for the design of an active flutter suppression system for a hypothetical research drone is discussed. One leading edge and two trailing edge aerodynamic control surfaces and four sensors (accelerometers) are available for each wing. Full state control laws are designed by selecting feedback gains which place closed loop eigenvalues and shape closed loop eigenvectors so as to stabilize wing flutter and reduce gust loads at the wing root while yielding accepatable robustness and satisfying constrains on rms control surface activity. These controllers are realized by state estimators designed using an eigenvalue placement/eigenvector shaping technique which results in recovery of the full state loop transfer characteristics. The resulting feedback compensators are shown to perform almost as well as the full state designs. They also exhibit acceptable performance in situations in which the failure of an actuator is simulated.

Garrard, William L.↗

Branch recovery with compiler-assisted multiple instruction retry

In processing systems where rapid recovery from transient faults is important, schemes for multiple instruction rollback recovery may be appropriate. Multiple instruction retry has been implemented in hardware by researchers and also in mainframe computers. This paper extends compiler-assisted instruction retry to a broad class of code execution failures. Five benchmarks were used to measure the performance penalty of hazard resolution. Results indicate that the enhanced pure software approach can produce performance penalties consistent with existing hardware techniques. A combined compiler/hardware resolution strategy is also described and evaluated. Experimental results indicate a lower performance penalty than with either a totally hardware or totally software approach.

Alewine, N. J.↗

Behavior of Windblown Sand on Mars: Results from Single-Particle Experiments

Experiments are investigating the behavior of individual sand grains in the high-energy martian aeolian regime. Energy partitioning during impact of a saltating grain determines grain longevity, but it also influences the way in which the bed becomes mobilized by reptation. When single grains of sand are fired into loose beds, the bed can absorb up to 90% of the impact energy by momentum transfer to other grains; it has been discovered that the impacting grains cause circular craters even at low impact angles. Hundreds of grains can be splashed by a single high-velocity (100 m/s) impact causing more bed disturbance through reptation than previously thought. The research is supported by NASA's PG&G Program. Because the martian aeolian environment in both high energy and of long duration, the most mobile fractions of windblown sand should have eradicated themselves by attrition, unless sand supply has kept pace with destruction. It is therefore important to understand the rate of grain attrition in order to make sense of the existence of vast dune fields on Mars. Attrition, has been addressed in other studies, but precise data for a single saltating grain striking a loose bed of sand have not been acquired -- the quintessential case to be understood for dunes on Mars. To acquire these data, we are employing a compound crossbow which has the bolt-firing mechanism replaced with a pneumatically-automated sabot system. The sabot can launch individual grains of sand of any size between several millimeters and about 50 microns, at velocities up to 100m/s. This is around the maximum velocity expected for saltating grains on Mars. The sabot sled is equipped with photoelectric sensors for measuring shot velocity. Baffling of the grain's exit orifice has enabled projection of single grains without significant aerodynamic effects from the sabot. Grains are fired into loose beds of sand at about 15 degrees from the horizontal (typical saltation trajectory at impact) while being filmed on high-speed video. High-intensity pulse illumination for the grains is triggered by the solenoid-operated bow trigger. A 45 degree mirror over the impact site provides simultaneous horizontal and vertical images of the impact on each video frame. UV fluorescence is enabling grain and grain-fragment recovery. At 100 m/s, grains of all sizes shatter into many fragments when the sand is replaced with a solid target. Kinetic energy of the grains at this velocity exceeds the critical energy for catastrophic failure of minerals. Although probably exceptional as a grain speed, it suggests that conditions on Mars might elevate materials into an attrition regime not encountered on other planets; individual grains blown across rock pavements on Mars will have short lifespans. When experimental grains impact loose (dune) sand, much, if not most of the kinetic energy is converted into momentum of other grains. Using high-speed filming, the energy involved in splashing grains at the impact site can be derived from the size of the crater, the speed of the splashed grains, and the rebound speed of the impactor. The amount of energy partitioned into material failure (as opposed to momentum) is too small a fraction of the total to be calculated under these circumstances. This does not necessarily mean that little damage occurs to the grains (the full extent of the damage has yet to be determined) because only a small fraction of the impact energy is required for inducing brittle fracture. Damage is orders of magnitude less than during impact against solid surfaces.

Marshall, J. R.↗

Changes in plasma volume and baroreflex function following resistance exercise

The dynamics of change in plasma volume (PV) and baroreflex responses have been reported over 24 h immediately following maximal cycle exercise. The purpose of this study was to determine if PV and baroreflex showed similar changes for 24 h after resistance exercise. Eight men were studied on 2 test days, 1 week apart. On 1 day, per cent change (% delta) in PV was estimated at 0,3, and 6 h after resistance exercise using haematocrit and haemoglobin. Baseline PV was measured 24 h after exercise using Evans blue dye. The carotid baroreceptor-cardiac reflex response was measured before, and 3, 6, 9, 12, and 24 h post-exercise. Each subject performed six sets of the bench press and leg press with 10 repetitions per set with a load that induced failure within each set. On a control day, the protocol was used without exercise. Plasma volume did not change during the control day. There was a 20% decrease in PV immediately post-exercise; the recovery of the PV was rapid and complete within 3 h. PV was 20% greater 24 h post-exercise than on the control day. There were no differences in any of the baroreflex measurements. Therefore, it is suggested that PV shifts may occur without altering baroreflex sensitivity.

NASA Program Space Physiology and Countermeasures↗

Effect of Transverse Compression on the Dielectric Breakdown of Power Cable with Ethylene Propylene Rubber Insulation

Understanding of the failure mechanisms of submarine dynamic power cables (SDPC) is critical for innovative design to meet the 2035 cost reduction target of U.S. DOE Floating Offshore Wind Shot. This is important because the current design suffers a significant failure rate in the field. This project explored a multiphysics approach and conducted systematic electro-thermo-mechanical (ETM) experimental study on the power cores extracted from a 15 kV power cable. The power cable had three cores of copper conductor and ethylene propylene rubber (EPR) insulation. An ETM testing system with transverse compression capability was developed. Mechanical loading induced dielectric breakdown. Increasing temperature from room temperature (RT, 22 degrees Celsius) to 90 degrees Celsius resulted in the 67% decrease in the failure mechanical load as defined by the dielectric breakdown. With the same temperature rise, the creep mechanical load was reduced by 70% at a given dielectric breakdown time. The post-test measurement revealed an impressive recovery of electrical resistance, although the dielectric breakdown occurred in the ETM test that would not be captured without the use of ETM testing.

Wang, Hong [ORNL] (ORCID:0000000201730545)↗

The implementation and use of Ada on distributed systems with high reliability requirements

The use and implementation of Ada were investigated in distributed environments in which reliability is the primary concern. In particular, the focus was on the possibility that a distributed system may be programmed entirely in Ada so that the individual tasks of the system are unconcerned with which processors are being executed, and that failures may occur in the software and underlying hardware. A secondary interest is in the performance of Ada systems and how that performance can be gauged reliably. Primary activities included: analysis of the original approach to recovery in distributed Ada programs using the Advanced Transport Operating System (ATOPS) example; review and assessment of the original approach which was found to be capable of improvement; development of a refined approach to recovery that was applied to the ATOPS example; and design and development of a performance assessment scheme for Ada programs based on a flexible user-driven benchmarking system.

Knight, J. C.↗