Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Guaranteed performance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 325 records · Page 18

Case Study: Test Results of a Tool and Method for In-Flight, Adaptive Control System Verification on a NASA F-15 Flight Research Aircraft

Adaptive control technologies that incorporate learning algorithms have been proposed to enable autonomous flight control and to maintain vehicle performance in the face of unknown, changing, or poorly defined operating environments [1-2]. At the present time, however, it is unknown how adaptive algorithms can be routinely verified, validated, and certified for use in safety-critical applications. Rigorous methods for adaptive software verification end validation must be developed to ensure that. the control software functions as required and is highly safe and reliable. A large gap appears to exist between the point at which control system designers feel the verification process is complete, and when FAA certification officials agree it is complete. Certification of adaptive flight control software verification is complicated by the use of learning algorithms (e.g., neural networks) and degrees of system non-determinism. Of course, analytical efforts must be made in the verification process to place guarantees on learning algorithm stability, rate of convergence, and convergence accuracy. However, to satisfy FAA certification requirements, it must be demonstrated that the adaptive flight control system is also able to fail and still allow the aircraft to be flown safely or to land, while at the same time providing a means of crew notification of the (impending) failure. It was for this purpose that the NASA Ames Confidence Tool was developed [3]. This paper presents the Confidence Tool as a means of providing in-flight software assurance monitoring of an adaptive flight control system. The paper will present the data obtained from flight testing the tool on a specially modified F-15 aircraft designed to simulate loss of flight control faces.

Jacklin, Stephen A.↗

The Role of Margin in Link Design and Optimization

Link analysis is a system engineering process in the design, development, and operation of communication systems and networks. Link models that are mathematical abstractions representing the useful signal power and the undesirable noise and attenuation effects (including weather effects if the signal path transverses through the atmosphere) that are integrated into the link budget calculation that provides the estimates of signal power and noise power at the receiver. Then the link margin is applied which attempts to counteract the fluctuations of the signal and noise power to ensure reliable data delivery from transmitter to receiver. (Link margin is dictated by the link margin policy or requirements.) A simple link budgeting approach assumes link parameters to be deterministic values typically adopted a rule-of-thumb policy of 3 dB link margin. This policy works for most S- and X-band links due to their insensitivity to weather effects. But for higher frequency links like Ka-band, Ku-band, and optical communication links, it is unclear if a 3 dB link margin would guarantee link closure. Statistical link analysis that adopted the 2-sigma or 3-sigma link margin incorporates link uncertainties in the sigma calculation. (The Deep Space Network (DSN) link margin policies are 2-sigma for downlink and 3-sigma for uplink.) The link reliability can therefore be quantified statistically even for higher frequency links. However in the current statistical link analysis approach, link reliability is only expressed as the likelihood of exceeding the signal-to-noise ratio (SNR) threshold that corresponds to a given bit-error-rate (BER) or frame-error-rate (FER) requirement. The method does not provide the true BER or FER estimate of the link with margin, or the required signalto-noise ratio (SNR) that would meet the BER or FER requirement in the statistical sense. In this paper, we perform in-depth analysis on the relationship between BER/FER requirement, operating SNR, and coding performance curve, in the case when the channel coherence time of link fluctuation is comparable or larger than the time duration of a codeword. We compute the "true" SNR design point that would meet the BER/FER requirement by taking into account the fluctuation of signal power and noise power at the receiver, and the shape of the coding performance curve. This analysis yields a number of valuable insights on the design choices of coding scheme and link margin for the reliable data delivery of a communication system - space and ground. We illustrate the aforementioned analysis using a number of standard NASA error-correcting codes.

Cheung, K.↗

Mitigating Fading in Cislunar Communications: Application to the Human Landing System

NASA’s human exploration program is currently working towards landing astronauts on the surface of the Moon by 2024, close the lunar South Pole. To guarantee astronaut safety and maximize science data return, NASA is in the process of defining the communication architecture that will support all astronaut activities from launch to surface operations. Of particular interest to this paper are links from the lunar surface back to Earth without any intermediate relays. We show that the system geometry is such that antennas on the landing system will need to be pointed at low elevation angles, thus potentially causing multi-path fading effects not typically encountered in space communications. This paper is organized in three parts. First, we characterize the multi-path fading effects expected in links between the lunar South Pole and Earth and show that for moderate data rates (less than 1 Mbps) the links suffer from slow fading. We then show that for this operations regime the performance of forward error correction schemes is significantly worse for traditional Additive White Gaussian Noise channels. Finally, we investigate multi-copy mechanisms to mitigate the effects of fading, most notably repetition schemes and Automatic Repeat Request.

Sanchez Net, Marc↗

Ethernet for Aerospace Applications - Ethernet Heads for the Skies

One of the goals of aerospace applications is to reduce the cost and complexity of avionic systems. Ethernet is a highly scalable, flexible, and popular protocol. The aerospace market is large, with a forecasted production of over 50,000 turbine-powered aircraft valued at $1.7 trillion between 2012 and 2022. Boeing estimates demand for commercial aircraft by 2033 to total over 36,000 with a value of over $5 trillion. In 2014 US airlines served over 750 million passengers and this is growing over 2% yearly. Electronic fly-by-wire is now used for all airliners and high performance aircraft. Although Ethernet has been widely used for four decades, its use in aerospace applications is just beginning to become common. Ethernet is the universal solution in commercial networks because of its high bandwidths, lower cost, openness, reliability, maintainability, flexibility, and interoperability. However, when Ethernet was designed applications with time-critical, safety relevant and deterministic requirements were not given much consideration. Many aerospace applications use a variety of communication architectures that add cost and complexity. Some of them are SpaceWire, MIL-STD-1553, Avionics Full Duplex Switched Ethernet (AFDX), and Time-Triggered Ethernet (TTE). Aerospace network designers desire to decrease the number of networks to reduce cost and effort while improving scalability, flexibility, openness, maintainability, and reliability. AFDX and TTE are being considered more for critical aerospace systems because they provide redundancy, failover protection, guaranteed timing, and frame priority and are based on Ethernet IEEE 802.3. This paper explores the use of AFDX and TTE for aerospace applications.

Ethernet↗

U.S. Coast Guard Boat Recovery Simulation at the NASA Ames Vertical Motion Simulator

The U.S. Coast Guard routinely uses the Over-The-Horizon (OTH-IV), a cutter deployed, rigid-hulled inflatable boat for rescue and law enforcement operations. The term "cutter" refers to a Coast Guard vessel 65 feet in length or greater with accommodations for crew to live aboard and the ability to deploy smaller boats including the OTH-IV. A deployment method employed by some cutter class vessels is a davit crane system and specialized hook mechanism to connect the smaller boat. The launch and recovery operation requires several crewmembers, where one is tasked with releasing and connecting the hook to the small boat. Manipulating the hook can pose a risk to the crewmember depending on sea conditions combined with fatigue level or task expertise. Equipment and crewmembers are tested extensively due to the inherent risk of the task, but the sea conditions cannot be controlled. To address the sea condition variable, the U.S. Coast Guard and NASA leveraged the Vertical Motion Simulator (VMS) as a platform to test new equipment or train crewmembers in varying sea conditions. With 6 degrees of freedom and a vertical displacement of +/- 22ft, the VMS is capable of simulating conditions up to sea-state 5. The proof of concept experiment took place in September 2018 and demonstrated that the VMS can accurately simulate varying sea-states, collect performance data, and design a reliable and safe system for participants. The U.S. Coast Guard provided boat displacement data from the Large Amplitude Motion Program (LAMP). The program generates multi-directional waves with a cosine squared spreading function which produced a time history response of displacement data (surge, sway, heave, roll, pitch, yaw) of the OTH-IV's center of gravity (C.G). The displacement data was differentiated into acceleration evaluated at the crewmember's position at the front (bow) of the boat. Those accelerations were transformed to the VMS coordinate system and used as command inputs to the motion system's washout filters. The VMS uses Interchangeable Cabs (ICab) to perform flight simulations on a variety of aircraft or spacecraft configurations. An ICab typically contains seats, restraints, pilot controls, instrument panel, and out-the-window projectors all enclosed in a familiar cockpit configuration. To replicate the launch and recovery of a small boat, all the conventional features of a flight simulator and canopy were removed to be replaced with a to-scale OTH-IV bow mockup. The bow section was constructed from aluminum, and a connection point known as the davit ring. Additionally, a hook replica was suspended by a cable from the ceiling as if it were hanging from a davit crane aboard a cutter vessel. The last step was providing an auxiliary control to close the distance between suspended hook and the davit ring on the bow mockup. Without control the boat would simulate the wave motion, but with no guarantee that the crewmember will be in reach of the hook. Since the wave motion was repeatable, an additional acceleration command sent to the washout filters to move the simulator in the surge, sway, and heave directions, independently. The commands were rate limited such that the additional movement was not detectable with respect to the wave motion. The results showed that for each wave profile, a unique set of acceleration commands provided opportunities for crewmembers to gain control of the hook and connect it to the davit ring.

Riccobono, Nicholas S.↗

Optimal Control via Self-Generated Stochasticity

The problem of global maxima of functionals has been examined. Mathematical roots of local maxima are the same as those for a much simpler problem of finding global maximum of a multi-dimensional function. The second problem is instability even if an optimal trajectory is found, there is no guarantee that it is stable. As a result, a fundamentally new approach is introduced to optimal control based upon two new ideas. The first idea is to represent the functional to be maximized as a limit of a probability density governed by the appropriately selected Liouville equation. Then, the corresponding ordinary differential equations (ODEs) become stochastic, and that sample of the solution that has the largest value will have the highest probability to appear in ODE simulation. The main advantages of the stochastic approach are that it is not sensitive to local maxima, the function to be maximized must be only integrable but not necessarily differentiable, and global equality and inequality constraints do not cause any significant obstacles. The second idea is to remove possible instability of the optimal solution by equipping the control system with a self-stabilizing device. The applications of the proposed methodology will optimize the performance of NASA spacecraft, as well as robot performance.

Zak, Michail↗

In-flight Testing of the Injection of the LISA Pathfinder Test Mass into a Geodesic

LISA Pathfinder is a technology demonstrator space mission, aimed at testing key technologies for detecting gravitational waves in space. The mission is the precursor of LISA, the first space gravitational waves observatory, whose launch is scheduled for 2034. The LISA Pathfinder scientific payload includes two gravitational reference sensors (GRSs), each one containing a test mass (TM), which is the sensing body of the experiment. A mission critical task is to set each TM into a pure geodesic motion, i.e. guaranteeing an extremely low acceleration noise in the sub-Hertz frequency bandwidth. The grabbing positioning and release mechanism (GPRM), responsible for the injection of the TM into a geodesic trajectory, was widely tested on ground, with the limitations imposed by the 1-g environment. The experiments showed that the mechanism, working in its nominal conditions, is capable of releasing the TM into free-fall fulfilling the very strict constraint imposed on the TM residual velocity, in order to allow its capture on behalf of the electrostatic actuation. However, the first in-flight releases produced unexpected residual velocity components, for both the TMs. Moreover, all the residual velocity components were greater than maximum value set by the requirements. The main suspect is that unexpected contacts took place between the TM and the surroundings bodies. As a consequence, ad hoc manual release procedures had to be adopted for the few following injections performed during the nominal mission. These procedures still resulted in non compliant TM states which were captured only after impacts. However, such procedures seem not practicable for LISA, both for the limited repeatability of the system and for the unmanageable time lag of the telemetry/telecommand signals (about 4400 s). For this reason, at the end of the mission, the GPRM was deeply tested in-flight, performing a large number of releases, according to different strategies. The tests were carried out in order to understand the unexpected dynamics and limit its effects on the final injection. Some risk mitigation maneuvers have been tested aimed at minimizing the vibration of the system at the release and improving the alignment between the mechanism and the TM. However, no overall optimal release strategy to be implemented in LISA could be found, because the two GPRMs behaved differently.

LISA↗

Compositional Realizability Checking within FRET

A set of requirements for a reactive system is realizable if, for any sequence of inputs that satisfy the assumptions on the environment, the guarantees always hold. Realizability checking is essential to ensure that an implementation can be constructed that satisfies the requirements. We propose a framework that supports users in the non-trivial task of developing realizable requirements. Our framework uses architectural information to automatically de-compose a set of requirements into subsets that can be analyzed separately, and therefore more efficiently. It then integrates existing algorithms in order to detect unrealizability, identify minimal sets of conflicting requirements, and compute counterexamples. The capability to focus on minimal conflict sets is key for localizing and correcting the sources of unrealizability. Our approach supports this process by enabling users to interactively visualize and explore the produced conflict sets and counterexamples. We have implemented our framework in the open-source Formal Requirements Elicitation Tool (FRET), and have used it on a variety of industrial-level case studies, showcasing the strengths of our approach in terms of raw performance, as well as diagnostic potential.

FRET↗

Trajectory Specification for Terminal Air Traffic: Pairwise Conflict Detection and Resolution

Trajectory specification is the explicit bounding and control of aircraft trajectories such that the position at each point in time is constrained to a precisely defined volume of space. The bounding space is defined by cross-track, along-track, and vertical tolerances relative to a reference trajectory that specifies position as a function of time. The tolerances are dynamic and will be based on the aircraft navigation capabilities and the current traffic situation. A standard language will be developed to represent these specifications and to communicate them by datalink. Assuming conformance, trajectory specification can guarantee safe separation for an arbitrary period of time even in the event of an air traffic control (ATC) system or datalink failure, hence it can help to achieve the high level of safety and reliability needed for ATC automation. As a more proactive form of ATC, it can also maximize airspace capacity and reduce the reliance on tactical backup systems during normal operation. It applies to both enroute airspace and the terminal area around airports, but this paper focuses on the terminal area and presents algorithms and software for spacing arrivals and deconflicting both arrivals and departures.

air traffic control↗

Percutaneous aspiration of fluid for management of peritonitis in space

BACKGROUND: As a medical emergency that can affect even well-screened, healthy individuals, peritonitis developing during a long-duration space exploration mission may dictate deviation from traditional clinical practice due to the absence of otherwise indicated surgical capabilities. Medical management can treat many intra-abdominal processes, but treatment failures are inevitable. In these circumstances, percutaneous aspiration under sonographic guidance could provide a "rescue" strategy. Hypothesis: Sonographically guided percutaneous aspiration of intra-peritoneal fluid can be performed in microgravity. METHODS: Investigations were conducted in the microgravity environment of NASA's KC-135 research aircraft (0 G). The subjects were anesthetized female Yorkshire pigs weighing 50 kg. The procedures were rehearsed in a terrestrial animal lab (1 G). Colored saline (500 mL) was introduced through an intra-peritoneal catheter during flight. A high-definition ultrasound system (HDI-5000, ATL, Bothell, WA) was used to guide a 16-gauge needle into the peritoneal cavity to aspirate fluid. RESULTS: Intra-peritoneal fluid collections were easily identified, distinct from surrounding viscera, and on occasion became more obvious during weightless conditions. Subjectively, with adequate restraint of the subject and operators, the procedure was no more demanding than during the 1-G rehearsals. CONCLUSIONS: Sonographically guided percutaneous aspiration of intra-peritoneal fluid collections is feasible in weightlessness. Treatment of intra-abdominal inflammatory conditions in spaceflight might rely on pharmacological options, backed by sonographically guided percutaneous aspiration for the "rescue" of treatment failures. While this risk mitigation strategy cannot guarantee success, it may be the most practical option given severe resource limitations.

Non-NASA Center↗

Trajectory Specification for Terminal Air Traffic: Pairwise Conflict Detection and Resolution

Trajectory Specification is the explicit bounding and control of aircraft trajectories such that the position at any point in time is constrained to a precisely defined volume of space. The bounding space is defined by cross-track, along-track, and vertical tolerances relative to a reference trajectory that specifies position as a function of time. The tolerances are dynamic and will be based on the aircraft navigation capabilities and the current traffic situation. Assuming conformance, Trajectory Specification can guarantee safe separation for an arbitrary period of time even in the event of an air traffic control (ATC) system or datalink failure; hence it can help to achieve the high level of safety and reliability needed for ATC automation. It can also reduce the reliance on tactical backup systems during normal operation. This paper applies it to the terminal area around a major airport and presents algorithms and software for detecting and resolving conflicts. A representative set of pairwise conflicts was generated, and a fast-time simulation was run on them. All conflicts were successfully resolved in real time, demonstrating the computational feasibility of the concept.

terminal area↗

Effectiveness of Loan Guarantees versus Tax Incentives for Space Launch Ventures

Over the course of the past few years, several new and innovative fully or partiailly reusable launch vehicle designs have been initiated with the objective of reducing the cost of space transportation. These new designs are in various stages hardware development for technology and system demonstrators. The larger vehicles include the Lockheed Martin X-33 technology demonstrator for VentureStar and the Space Access launcher. The smaller launcher ventures include Kelly Space and Technology and Rotary Rocket Company. A common denominator between the new large and small commercial launch systems is the ability to obtain project financing and at an affordable cost. Both are having or will have great difficulty in obtaining financing in the capital markets because of the dollar amounts and the risk involved. The large established companies are pursuing multi-billion dollar developments which are a major challenge to finance because of the size and risk of the projects. The smaller start-up companies require less capital for their smaller systems, however, their lack of corporate financial muscle and launch vehicle track record results in a major challenge to obtain financing also because of high risk. On Wall Street, new launch system financing is a question of market, technical, organizational, legal/regulatory and financial risk. The current limit of acceptable financial risk for Space businesses on Wall Street are the telecommunications and broadcast satellite projects, of which many in number are projected for the future. Tbc recent problems with Iridium market and financial performance are casting a long shadow over new satellite project financing, making it increasingly difficult for the new satellite projects to obtain needed financing.

Scottoline, S.↗

Beware of agents when flying aircraft: Basic principles behind a generic methodology for the evaluation and certification of advanced aviation systems

There is currently a growing interest in the aeronautical community to assess the effects of the increasing levels of automation on pilots' performance and overall safety. The first effect of automation is the change in the nature of the pilot's role on the flight deck. Pilots have become supervisors who monitor aircraft systems in usual situations and intervene only when unanticipated events occur. Instead of 'hand flying' the airplane, pilots contribute to the control of aircraft by acting as mediators, instructions given to the automation. By eliminating the need for manually controlling normal situations, such a role division has reduced the opportunities for the pilot to acquire experience and skills necessary to safely cope with abnormal events. Difficulties in assessing the state and behavior of automation arise mainly from four factors: (1) the complexity of current systems and consequence mode-related problems; (2) the intrinsic autonomy of automation which is able to fire mode transitions without explicit commands from the pilots; (3) the bad quality of feed-back from the control systems displays and interfaces to the pilots; and (4) the fact that the automation currently has no explicit representation of the current pilots' intentions and strategy. Assuming certification has among its major goals to guarantee the passengers' and pilots' safety and the airplane integrity under normal and abnormal operational conditions, the authors suggest it would be particularly fruitful to come up with a conceptual reference system providing the certification authorities both with a theoretical framework and a list of principles usable for assessing the quality of the equipment and designs under examination. This is precisely the scope of this paper. However, the authors recognize that the conceptual presented is still under development and would thus be best considered as a source of reflection for the design, evaluation and certification processes of advanced aviation technologies.

Javaux, Denis↗

The Integrated Safety-Critical Advanced Avionics Communication and Control (ISAACC) System Concept: Infrastructure for ISHM

Integrated System Health Management (ISHM) architectures for spacecraft will include hard real-time, critical subsystems and soft real-time monitoring subsystems. Interaction between these subsystems will be necessary and an architecture supporting multiple criticality levels will be required. Demonstration hardware for the Integrated Safety-Critical Advanced Avionics Communication & Control (ISAACC) system has been developed at NASA Marshall Space Flight Center. It is a modular system using a commercially available time-triggered protocol, ?Tp/C, that supports hard real-time distributed control systems independent of the data transmission medium. The protocol is implemented in hardware and provides guaranteed low-latency messaging with inherent fault-tolerance and fault-containment. Interoperability between modules and systems of modules using the TTP/C is guaranteed through definition of messages and the precise message schedule implemented by the master-less Time Division Multiple Access (TDMA) communications protocol. "Plug-and-play" capability for sensors and actuators provides automatically configurable modules supporting sensor recalibration and control algorithm re-tuning without software modification. Modular components of controlled physical system(s) critical to control algorithm tuning, such as pumps or valve components in an engine, can be replaced or upgraded as "plug and play" components without modification to the ISAACC module hardware or software. ISAACC modules can communicate with other vehicle subsystems through time-triggered protocols or other communications protocols implemented over Ethernet, MIL-STD- 1553 and RS-485/422. Other communication bus physical layers and protocols can be included as required. In this way, the ISAACC modules can be part of a system-of-systems in a vehicle with multi-tier subsystems of varying criticality. The goal of the ISAACC architecture development is control and monitoring of safety critical systems of a manned spacecraft. These systems include spacecraft navigation and attitude control, propulsion, automated docking, vehicle health management and life support. ISAACC can integrate local critical subsystem health management with subsystems performing long term health monitoring. The ISAACC system and its relationship to ISHM will be presented.

Gwaltney, David A.↗

Modeling Guidelines for Code Generation in the Railway Signaling Context

Modeling guidelines constitute one of the fundamental cornerstones for Model Based Development. Their relevance is essential when dealing with code generation in the safety-critical domain. This article presents the experience of a railway signaling systems manufacturer on this issue. Introduction of Model-Based Development (MBD) and code generation in the industrial safety-critical sector created a crucial paradigm shift in the development process of dependable systems. While traditional software development focuses on the code, with MBD practices the focus shifts to model abstractions. The change has fundamental implications for safety-critical systems, which still need to guarantee a high degree of confidence also at code level. Usage of the Simulink/Stateflow platform for modeling, which is a de facto standard in control software development, does not ensure by itself production of high-quality dependable code. This issue has been addressed by companies through the definition of modeling rules imposing restrictions on the usage of design tools components, in order to enable production of qualified code. The MAAB Control Algorithm Modeling Guidelines (MathWorks Automotive Advisory Board)[3] is a well established set of publicly available rules for modeling with Simulink/Stateflow. This set of recommendations has been developed by a group of OEMs and suppliers of the automotive sector with the objective of enforcing and easing the usage of the MathWorks tools within the automotive industry. The guidelines have been published in 2001 and afterwords revisited in 2007 in order to integrate some additional rules developed by the Japanese division of MAAB [5]. The scope of the current edition of the guidelines ranges from model maintainability and readability to code generation issues. The rules are conceived as a reference baseline and therefore they need to be tailored to comply with the characteristics of each industrial context. Customization of these recommendations has been performed for the automotive control systems domain in order to enforce code generation [7]. The MAAB guidelines have been found profitable also in the aerospace/avionics sector [1] and they have been adopted by the MathWorks Aerospace Leadership Council (MALC). General Electric Transportation Systems (GETS) is a well known railway signaling systems manufacturer leading in Automatic Train Protection (ATP) systems technology. Inside an effort of adopting formal methods within its own development process, GETS decided to introduce system modeling by means of the MathWorks tools [2], and in 2008 chose to move to code generation. This article reports the experience performed by GETS in developing its own modeling standard through customizing the MAAB rules for the railway signaling domain and shows the result of this experience with a successful product development story.

Ferrari, Alessio↗

Hubble Space Telescope observations of Orion Nebula, Helix Nebula, and NGC 6822

This grant covered the major part of the work of the Principal Investigator and his collaborators as a Guaranteed Time Observer on the Hubble Space Telescope. The work done naturally divided itself into two portions the first being study of nebular objects and the second investigation of the interstellar medium between stars. The latter investigation was pursued through a contract with Princeton University, with Professor Lyman Spitzer as the supervising astronomer, assisted by Dr. Ed Fitzpatrick. Following the abrupt death of Professor Spitzer, his responsibilities were shifted to Dr. Fitzpatrick. When Dr. Fitzpatrick relocated to Villanova University the concluding work on that portion of this grant was concluded under a direct service arrangement. This program has been highly successful and the resulting publications in scientific journals are listed below. To the scientist, this is the bottom line, so that I shall simply try to describe the general nature of what was accomplished. There were three nebular programs conducted, one on the Orion Nebula, the second on the Helix Nebula, and the third on NGC 6822. The largest program was that on the Orion Nebula. This involved both HST observations and supporting groundbased observations obtained with a variety of instruments, including the Coude Feed Telescope at the Kitt Peak National observatory in Arizona, the Cerro Tololo observatory in Chile, and the Keck Observatory on Mauna Kea, Hawaii. Moreover, considerable theoretical modeling was done and all of the data analysis was performed at the Rice University in Houston, except for the PI's period of sabbatical leave (6-96 through 7-97) when he was based at the Max Planck Institute for Astronomy in Heidelberg, Germany. The Orion Nebula program was the most productive part, resulting in numerous papers, but more important in the discovery of a new class of objects, for which we coined the name "proplyds". The proplyds are protoplanetary disks surrounding very young stars still in the process of creation. The Orion Nebula is the residual material from a burst of star formation that occurred about 300,000 years ago. Each of these new stars has a surrounding disk of protoplanetary material. The same physics that renders the Nebula so highly visible means that the proto-planetary disks are also quite visible. With the wisdom of hindsight, we now see that this was to be expected and that we should have been searching specifically for this type of object. The discovery of these objects and their subsequent detailed investigation has lead to an accurate assessment of the frequency of protoplanetary disks in young stars and determination of the likelihood of survival of these disks into an era where planets actually form.

Spitzer, Lyman↗

Modeling and Analysis of Wrinkled Membranes: An Overview

Thin-film membranes are basic elements of a variety of space inflatable/deployable structures. Wrinkling degrades the performance and reliability of these membrane structures, and hence has been a topic of continued interest. Wrinkling analysis of membranes for general geometry and arbitrary boundary conditions is quite challenging. The objective of this presentation is two-fold. Firstly, the existing models of wrinkled membranes and related numerical solution methods are reviewed. The important issues to be discussed are the capability of a membrane model to characterize taut, wrinkled and slack states of membranes in a consistent and physically reasonable manner; the ability of a wrinkling analysis method to predict the formation and growth of wrinkled regions, and to determine out-of-plane deformation and wrinkled waves; the convergence of a numerical solution method for wrinkling analysis; and the compatibility of a wrinkling analysis with general-purpose finite element codes. According to this review, several opening issues in modeling and analysis of wrinkled membranes that are to be addressed in future research are summarized, The second objective of this presentation is to discuss a newly developed membrane model of two viable parameters (2-VP model) and associated parametric finite element method (PFEM) for wrinkling analysis are introduced. The innovations and advantages of the proposed membrane model and PFEM-based wrinkling analysis are: (1) Via a unified stress-strain relation; the 2-VP model treat the taut, wrinkled, and slack states of membranes consistently; (2) The PFEM-based wrinkling analysis has guaranteed convergence; (3) The 2-VP model along with PFEM is capable of predicting membrane out-of-plane deformations; and (4) The PFEM can be integrated into any existing finite element code. Preliminary numerical examples are also included in this presentation to demonstrate the 2-VP model and PFEM-based wrinkling analysis approach.

Yang, B.↗

Science Benefits of Onboard Spacecraft Navigation

Primitive bodies (asteroids and comets), which have remained relatively unaltered since their formation, are important targets for scientific missions that seek to understand the evolution of the solar system. Often the first step is to fly by these bodies with robotic spacecraft. The key to maximizing data returns from these flybys is to determine the spacecraft trajectory relative to the target body-in short, navigate the spacecraft- with sufficient accuracy so that the target is guaranteed to be in the instruments' field of view. The most powerful navigation data in these scenarios are images taken by the spacecraft of the target against a known star field (onboard astrometry). Traditionally, the relative trajectory of the spacecraft must be estimated hours to days in advance using images collected by the spacecraft. This is because of (1)!the long round-trip light times between the spacecraft and the Earth and (2)!the time needed to downlink and process navigation data on the ground, make decisions based on the result, and build and uplink instrument pointing sequences from the results. The light time and processing time compromise navigation accuracy considerably, because there is not enough time to use more accurate data collected closer to the target-such data are more accurate because the angular capability of the onboard astrometry is essentially constant as the distance to the target decreases, resulting in better "plane-of- sky" knowledge of the target. Excellent examples of these timing limitations are high-speed comet encounters. Comets are difficult to observe up close; their orbits often limit scientists to brief, rapid flybys, and their coma further restricts viewers from seeing the nucleus in any detail, unless they can view the nucleus at close range. Comet nuclei details are typically discernable for much shorter durations than the roundtrip light time to Earth, so robotic spacecraft must be able to perform onboard navigation. This onboard navigation can be accomplished through a self- contained system that by eliminating light time restrictions dramatically improves the relative trajectory knowledge and control and subsequently increases the amount of quality data collected. Flybys are one-time events, so the system's underlying algorithms and software must be extremely robust. The autonomous software must also be able to cope with the unknown size, shape, and orientation of the previously unseen comet nucleus. Furthermore, algorithms must be reliable in the presence of imperfections and/or damage to onboard cameras accrued after many years of deep-space operations. The AutoNav operational flight software packages, developed by scientists at the Jet Propulsion Laboratory (JPL) under contract with NASA, meet all these requirements. They have been directly responsible for the successful encounters on all of NASA's close-up comet-imaging missions (see Figure !1). AutoNav is the only system to date that has autonomously tracked comet nuclei during encounters and performed autonomous interplanetary navigation. AutoNav has enabled five cometary flyby missions (Table!1) residing on four NASA spacecraft provided by three different spacecraft builders. Using this software, missions were able to process a combined total of nearly 1000 images previously unseen by humans. By eliminating the need to navigate spacecraft from Earth, the accuracy gained by AutoNav during flybys compared to ground-based navigation is about 1!order of magnitude in targeting and 2!orders of magnitude in time of flight. These benefits ensure that pointing errors do not compromise data gathered during flybys. In addition, these benefits can be applied to flybys of other solar system objects, flybys at much slower relative velocities, mosaic imaging campaigns, and other proximity activities (e.g., orbiting, hovering, and descent/ascent).

Autonomy↗