Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “TRUST”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 325 records · Page 18

Design Reference Missions (DRM): Integrated ODM 'Air-Taxi' Mission Features

Design Reference Missions (DRM): Integrated ODM Air-Taxi Mission Features, Hybrid Electric Integrated System Testbed (HEIST) flight control. Structural Health, Energy Storage, Electric Components, Loss of Control, Degraded Systems, System Health, Real-Time IO Operator Geo-Fencing, Regional Noise Abatement and Trusted Autonomy Inter-operability.

Kloesel, Kurt↗

Cloud-Based Orchestration of a Model-Based Power and Data Analysis Toolchain

The proposed Europa Mission concept contains many engineering and scientific instruments that consume varying amounts of power and produce varying amounts of data throughout the mission. System-level power and data usage must be well understood and analyzed to verify design requirements. Numerous cross-disciplinary tools and analysis models are used to simulate the system-level spacecraft power and data behavior. This paper addresses the problem of orchestrating a consistent set of models, tools, and data in a unified analysis toolchain when ownership is distributed among numerous domain experts. An analysis and simulation environment was developed as a way to manage the complexity of the power and data analysis toolchain and to reduce the simulation turnaround time. A system model data repository is used as the trusted store of high-level inputs and results while other remote servers are used for archival of larger data sets and for analysis tool execution. Simulation data passes through numerous domain-specific analysis tools and end-to-end simulation execution is enabled through a web-based tool. The use of a cloud-based service facilitates coordination among distributed developers and enables scalable computation and storage needs, and ensures a consistent execution environment. Configuration management is emphasized to maintain traceability between current and historical simulation runs and their corresponding versions of models, tools and data.

Post, Ethan↗

Using A Model-Based Systems Engineering Approach For Exploration Medical System Development

NASA's Human Research Program's Exploration Medical Capabilities (ExMC) element is defining the medical system needs for exploration class missions. ExMC's Systems Engineering (SE) team will play a critical role in successful design and implementation of the medical system into exploration vehicles. The team's mission is to "Define, develop, validate, and manage the technical system design needed to implement exploration medical capabilities for Mars and test the design in a progression of proving grounds." Development of the medical system is being conducted in parallel with exploration mission architecture and vehicle design development. Successful implementation of the medical system in this environment will require a robust systems engineering approach to enable technical communication across communities to create a common mental model of the emergent engineering and medical systems. Model-Based Systems Engineering (MBSE) improves shared understanding of system needs and constraints between stakeholders and offers a common language for analysis. The ExMC SE team is using MBSE techniques to define operational needs, decompose requirements and architecture, and identify medical capabilities needed to support human exploration. Systems Modeling Language (SysML) is the specific language the SE team is utilizing, within an MBSE approach, to model the medical system functional needs, requirements, and architecture. Modeling methods are being developed through the practice of MBSE within the team, and tools are being selected to support meta-data exchange as integration points to other system models are identified. Use of MBSE is supporting the development of relationships across disciplines and NASA Centers to build trust and enable teamwork, enhance visibility of team goals, foster a culture of unbiased learning and serving, and be responsive to customer needs. The MBSE approach to medical system design offers a paradigm shift toward greater integration between vehicle and the medical system and directly supports the transition of Earth-reliant ISS operations to the Earth-independent operations envisioned for Mars. Here, we describe the methods and approach to building this integrated model.

Hanson, A.↗

Flight Tests of a Remaining Flying Time Prediction System for Small Electric Aircraft in the Presence of Faults

This paper addresses the problem of building trust in the online prediction of a battery powered aircraft's remaining flying time. A series of flight tests is described that make use of a small electric powered unmanned aerial vehicle (eUAV) to verify the performance of the remaining flying time prediction algorithm. The estimate of remaining flying time is used to activate an alarm when the predicted remaining time is two minutes. This notifies the pilot to transition to the landing phase of the flight. A second alarm is activated when the battery charge falls below a specified limit threshold. This threshold is the point at which the battery energy reserve would no longer safely support two repeated aborted landing attempts. During the test series, the motor system is operated with the same predefined timed airspeed profile for each test. To test the robustness of the prediction, half of the tests were performed with, and half were performed without, a simulated powertrain fault. The pilot remotely engages a resistor bank at a specified time during the test flight to simulate a partial powertrain fault. The flying time prediction system is agnostic of the pilot's activation of the fault and must adapt to the vehicle's state. The time at which the limit threshold on battery charge is reached is then used to measure the accuracy of the remaining flying time predictions. Accuracy requirements for the alarms are considered and the results discussed.

Hogge, Edward F.↗

Application of Human-Autonomy Teaming to an Advanced Ground Station for Reduced Crew Operations

Within human factors there is burgeoning interest in the "human-autonomy teaming" (HAT) concept as a way to address the challenges of interacting with complex, increasingly autonomous systems. The HAT concept comes out of an aspiration to interact with increasingly autonomous systems as a team member, rather than simply use automation as a tool. The authors, and others, have proposed core tenets for HAT that include bi-directional communication, automation and system transparency, and advanced coordination between human and automated teammates via predefined, dynamic task sequences known as "plays." It is believed that, with proper implementation, HAT should foster appropriate teamwork, thus increasing trust and reliance on the system, which in turn will reduce workload, increase situation awareness, and improve performance. To this end, HAT has been demonstrated and/or studied in multiple applications including search and rescue operations, healthcare and medicine, autonomous vehicles, photography, and aviation. The current paper presents one such effort to apply HAT. It details the design of a HAT agent, developed by Human Automation Teaming Solutions, Inc., to facilitate teamwork between the automation and the human operator of an advanced ground dispatch station. This dispatch station was developed to support a NASA project investigating a concept called Reduced Crew Operations (RCO); consequently, we have named the agent R-HATS. Part of the RCO concept involves a ground operator providing enhanced support to a large number of aircraft with a single pilot on the flight deck. When assisted by R-HATS, operators can monitor and support or manage a large number of aircraft and use plays to respond in real-time to complicated, workload-intensive events (e.g., an airport closure). A play is a plan that encapsulates goals, tasks, and a task allocation strategy appropriate for a particular situation. In the current implementation, when a play is initiated by a user, R-HATS determines what tasks need to be completed and has the ability to autonomously execute them (e.g., determining diversion options and uplinking new routes to aircraft) when it is safe and appropriate. R-HATS has been designed to both support end users and researchers in RCO and HAT. Additionally, R-HATS and its underlying architecture were developed with generalizability in mind as a modular software applicable outside of RCO/aviation domains. This paper will also discuss future further development and testing of RHATS.

automation↗

Human-Autonomy Teaming: Supporting Dynamically Adjustable Collaboration

This presentation is a technical update for the NATO-STO HFM-247 working group. Our progress on four goals will be discussed. For Goal 1, a conceptual model of HAT is presented. HAT looks to make automation act as more of a teammate, by having it communicate with human operators in a more human, goal-directed, manner which provides transparency into the reasoning behind automated recommendations and actions. This, in turn, permits more trust in the automation when it is appropriate, and less when it is not, allowing a more targeted supervision of automated functions. For Goal 2, we wanted to test these concepts and principles. We present findings from a recent simulation and describe two in progress. Goal 3 was to develop pattern(s) of HAT solution(s). These were originally presented at HCII 2016 and are reviewed. Goal 4 is to develop a re-usable HAT software agent. This is an ongoing effort to be delivered October 2017.

Human-Autonomy Teaming↗

Cross-Cultural Competencies for the NASA International Internship Project

One of the principles that NASA upholds is to cooperate with other nations to advance science, exploration, and discovery for all. Effective cooperation across cultures, however, requires a certain level of skill. A construct called cross-cultural competency (CCC) emphasizes that individuals are capable of acquiring skills that facilitate positive and cooperative interaction with people of another culture. While some aspects of CCC stem from stable individual traits such as personality (i.e., extraversion, tolerance for ambiguity), most components can be learned and strengthened over time (i.e., empathy, mindfulness, trust). Because CCC is such a vital part of international cooperation, this summer we will design a training program to cultivate these skills between student interns, their mentors, and the Ames community as a whole. First, we will research what specific competencies are valuable for anyone to have when working in an international setting. We will then design a series of activities, events, workshops, and discussions that target and strengthen those skills. Finally, we will use both qualitative and quantitative evaluation methods to measure the success of the pilot program. This summer, the current international student interns will serve as our trial population for the program, while our goal is to launch the full program in Fall 2017. Overall, we hope to contribute to NASAs mission of optimizing international collaboration for everyone involved.

international↗

Monitoring Springs in the Mojave Desert Using Landsat Time Series Analysis

The purpose of this study, based on Landsat satellite data was to characterize variations and trends over 30 consecutive years (1985-2016) in perennial vegetation green cover at over 400 confirmed Mojave Desert spring locations. These springs were surveyed between in 2015 and 2016 on lands managed in California by the U.S. Bureau of Land Management (BLM) and on several land trusts within the Barstow, Needles, and Ridgecrest BLM Field Offices. The normalized difference vegetation index (NDVI) from July Landsat images was computed at each spring location and a trend model was first fit to the multi-year NDVI time series using least squares linear regression.Â

Time Series↗

Engineering Trade-off Considerations Regarding Design-for-Security, Design-for-Verification, and Design-for-Test

The United States government has identified that application specific integrated circuit (ASIC) and field programmable gate array (FPGA) hardware are at risk from a variety of adversary attacks. This finding affects system security and trust. Consequently, processes are being developed for system mitigation and countermeasure application. The scope of this tutorial pertains to potential vulnerabilities and countermeasures within the ASIC/FPGA design cycle. The presentation demonstrates how design practices can affect the risk for the adversary to: change circuitry, steal intellectual property, and listen to data operations. An important portion of the design cycle is assuring the design is working as specified or as expected. This is accomplished by exhaustive testing of the target design. Alternatively, it has been shown that well established schemes for test coverage enhancement (design-for-verification (DFV) and design-for-test (DFT)) can create conduits for adversary accessibility. As a result, it is essential to perform a trade between robust test coverage versus reliable design implementation. The goal of this tutorial is to explain the evolution of design practices; review adversary accessibility points due to DFV and DFT circuitry insertion (back door circuitry); and to describe common engineering trade-off considerations for test versus adversary threats.

Design for reliability (DFR)↗

Demonstration of Probabilistic Sensitivity Analyses Tools on the Structural Response of a Representative Inflatable Space Structure

This work provides an initial step toward demonstrating a probabilistic numerical simulation capability to support trade studies and the development of a certification plan for inflatable space habitats. This study concentrates on interpreting the results from probabilistic analysis and numerical simulation tools to identify parameter sensitivities for a novel inflatable airlock concept, specifically the Non‐Axisymmetric Inflatable Pressure Structure (NAIPS) that was designed and tested under NASA's Minimalistic Advanced Softgoods Hatch (MASH) Program. A brief overview of the finite element model is provided along with the probabilistic sensitivity analysis approach. The sensitivity studies required a model that was numerically stable and efficient enough that hundreds of simulations could be completed in the allotted time. Therefore, the existing full model was simplified by: extracting a quarter symmetry section of the dome; focusing on a single inflation pressure; and replacing the non‐linear material stress‐strain curves with linear, isotropic materials defined by elastic moduli. Responses of interest include the sensitivity of various structural component loads to material properties, cord lengths, inflation pressure and friction. Multiple sensitivity studies were completed and three are reported here. The first study focused on utilizing wide input parameter ranges to provide an opportunity to assess numerical robustness. The next two studies narrowed the parameter ranges to enable focus on understanding uncertainty at a fixed operating condition. The completion of the sensitivity studies improved understanding of the interdependence of multiple inputs on the responses. In addition, numerical stability of the simulations over wide parameter ranges, shows the feasibility of incorporating uncertainty‐based methods in the design and certification of inflatable space habitats. With the experience and trust gained, it is anticipated that these same methods will be applied to nonlinear, orthotropic models in the future.

Lyle, Karen H.↗

Runtime Assurance Protection for Advanced Turbofan Engine Control

This paper describes technical progress made in the application of run time assurance (RTA) methods to turbofan engines with advanced propulsion control algorithms that are employed to improve engine performance. It is assumed that the advanced algorithms cannot be fully certified using current verification and validation approaches and therefore need to be continually monitored by an RTA system that ensures safe operation. However, current turbofan engine control systems utilize engine protection logic for safe combustion dynamics and stable airflow through the engine. It was determined that the engine protection logic should continue to be used to provide system safety and should be considered as a part of the overall RTA system. The additional function that an RTA system provides is to perform diagnostics on anomalous conditions to determine if these conditions are being caused by errors in the advanced controller. If this is the case, the RTA system switches operation to a trusted reversionary controller. Initial studies were performed to demonstrate this benefit. The other focus was to improve the performance of the engine protection logic, which was deemed too conservative and reduced engine performance during transient operations. It was determined that the conservative response was due to poor tuning of one of the controller channels within the protection logic. An automatic tuning algorithm was implemented to optimize the protection logic control gains based on minimizing tracking error. Improved tracking responses were observed with no change to the existing protection logic control architecture.

runtime monitoring↗

Remaining Flying Time Prediction Implementing Battery Prognostics Framework for Electric UAV's

In this paper the problem of building trust in the online safety prediction of an fixed wing small electric unmanned aerial vehicles (e-UAV) for remaining flying time is addressed. A series of flight tests are described to verify the performance of the remaining flying time prediction algorithm. The estimate of remaining flying time is used to activate an alarm when the predicted remaining time falls below a threshold of two minutes. This updates the pilot to transition to the landing sequence of the flight profile. A second alarm is activated when the battery state of charge (SOC) falls below a specified safety limit threshold. This SOC threshold is the point at which the battery energy reserve would no longer safely support enough aborted landing attempts. During the test flights, the motor system is operated with the same predefined timed airspeed profile for each test. To test the robustness of the developed prediction algorithm, partial tests were performed with and remaining were performed without a simulated power train fault. To simulate a partial power train fault in the e-UAV the pilot engages a resistor bank at a specified time during the test flight. The flying time prediction system is agnostic of the pilot's activation of the fault and must adapt to the vehicle's state. The time at which the limit threshold on battery SOC is reached, it is then used to measure the accuracy of the remaining flying time predictions. This is demonstrated through comparing results from two battery models being developed. Accuracy requirements for the alarms are considered and the results discussed.

Kulkarni, Chetan↗

Addressing Human Error in International Space Station Flight Control Teams: Advances in Ground Training for Science Operators

In flight control, as with any human in the loop system, operator error is an inevitable reality. On the International Space Station (ISS) where crew time and physical resources are precious and often irreplaceable, operator errors can result in significant, irreversible consequences. Flight controllers at the Payload Operations Integration Center (POIC) located at NASA’s Marshall Space Flight Center (MSFC) in Huntsville, Alabama know this reality well. At the POIC, operator errors can be caused by a variety of factors, from poor hardware or software design to environmental factors such as time pressure or fatigue. The most difficult errors to address, however, are those which result from ineffective teamwork.Academic research in teamwork has resulted in the identification of many factors which make cross-functional teaming difficult, including leadership, trust building, and communication challenges. These factors, especially when combined with the challenging environmental factors flight control teams must contend with daily, make the goal of minimizing operator errors in payload operations challenging to achieve. To address such teamwork errors, trainers at the POIC have drawn best practices from high reliability industries such as commercial aviation, healthcare, and nuclear power plants, as well as from our sister ISS control center in Houston, Texas, to develop and institute a new training program focused specifically on teamwork skills.This training program, called the Team Skills Curriculum, is based on the concept of Crew Resource Management (CRM) which was developed by NASA in the 1970s for the commercial aviation industry in response to a series of aviation disasters resulting from ineffective teamwork. CRM was later tailored by the Johnson Space Center (JSC) for use in astronaut and flight control training. The result, called Space Flight Resource Management (SFRM) was formally introduced into manned spaceflight training in the late 90s. SFRM has evolved over the years, but the focus has remained on helping operators develop the skills needed to work as part of an effective team. Using these concepts as well as the latest research in cross-functional teaming and data on specific errors occurring at the POIC, trainers in the integrated flight control training branch created a custom training program for both new and certified payload operations specialists.

Harris, Samantha S.↗

Establishing In-Space Assembly Technical Collaboration Environments Through Functional Capability Analyses

NASA OCT strategically collaborates with other government space agencies to find enterprise synergistic technology solutions to benefit the Nation through leadership of the interagency Science and Technology Partnership Forum. Successful collaborations depend on integrating knowledge across the intersection of industry, academe, and government within pioneering technical areas such as in-space assembly. High-quality data products that are timely, accurate, and trusted are used to communicate with internal and external stakeholders to influence portfolios by focusing investments to maximize impact on NASA missions and the U.S. economy. These data products succinctly describe and convey the breadth and dependencies of multiple capabilities, while incorporating diverse technical perspectives, to articulate and inform interagency collaborative developments of autonomous on-orbit assembly technologies.

Rodgers, Erica↗

Prognostics As-A-Service (PaaS)

Deep awareness of aircraft system health-state is critical for maintaining safe, efficient growth in global operations and enabling autonomy. Maintainers, operators, controllers, dispatchers, pilots, and autonomous systems must have reliable real-time predictions of vehicle health to preserve safety and efficiency. We will explore the feasibility and challenges of cloud enhanced prognostics. Aircraft request PaaS in flight to supplement onboard systems or provide complete health awareness. We will explore and demonstrate the ability to address six major challenges of PaaS: Generality, Environmental Complexity, Utility, Trust, Communications, and Security. We will also explore the factors in the decision to host prognostics onboard vs As-A-Service.

Prognostics As A Service↗

Retrieval of Snow Freeboard of Antarctic Sea Ice Using Waveform Fitting of CryoSat-2 Returns

In this paper we develop a CryoSat-2 algorithm to retrieve the surface elevation of the air–snow interface over Antarctic sea ice. This algorithm utilizes a two-layer physical model that accounts for scattering from a snow layer atop sea ice as well as scattering from below the snow surface. The model produces waveforms that are fit to CryoSat-2 level 1B data through a bounded trust region least-squares fitting process. These fit waveforms are then used to track the air–snow interface and retrieve the surface elevation at each point along the CryoSat-2 ground track, from which the snow freeboard is computed. To validate this algorithm, we compare retrieved surface elevation measurements and snow surface radar return power levels with those from Operation IceBridge, which flew along a contemporaneous CryoSat-2 orbit in October 2011 and November 2012. Average elevation differences (standard deviations) along the flight lines (IceBridge Airborne Topographic Mapper, ATM – CryoSat-2) are found to be 0.016 cm (29.24 cm) in 2011 and 2.58 cm (26.65 cm) in 2012. The spatial distribution of monthly average pan-Antarctic snow freeboard found using this method is similar to what was observed from NASA's Ice, Cloud, and land Elevation Satellite (ICESat), where the difference (standard deviation) between October 2011–2017 CryoSat-2 mean snow freeboard and spring 2003–2007 mean freeboard from ICESat is 1.92 cm (9.23 cm). While our results suggest that this physical model and waveform fitting method can be used to retrieve snow freeboard from CryoSat-2, allowing for the potential to join laser and radar altimetry data records in the Antarctic, larger (∼30 cm) regional differences from ICESat and along-track differences from ATM do exist, suggesting the need for future improvements to the method. Snow–ice interface elevation retrieval is also explored as a potential to obtain snow depth measurements. However, it is found that this retrieval method often tracks a strong scattering layer within the snow layer instead of the actual snow–ice interface, leading to an overestimation of ice freeboard and an underestimation of snow depth in much of the Southern Ocean but with promising results in areas such as the East Antarctic sector.

Fons, Steven W.↗

Human Automation Teaming: Lessons Learned and Future Directions

Full autonomy seems to be the goal for system developers in almost every area of the economy. However, as we move from automated systems to autonomous systems, designers have needed to insert humans to oversee automation that has traditionally been brittle or incomplete. This creates its own problems as the operator is usually out of the loop when the automation hands over problems that it cannot handle. To better handle these situations, it has been proposed that we develop human automation teams that have shared goals and objectives to support task performance. This paper will describe an initial model of Human Automation Teaming (HAT) which has three elements: transparency, bi-directional communications, and human-directed execution. Transparency in our model is a method for giving insight into the reasoning behind automated recommendations and actions, bi-directional communication allows the operator to communicate directly with the automation, and finally the automation defers execution to the human. The model was implemented through a number of features on an electronic flight bag (EFB) which are described in the paper. The EFB was installed in a mid-fidelity flight simulator and used by 12 airline pilots to support diversion decisions during off-nominal flight scenarios. Pilots reported that working with the HAT automation made diversion decisions easier and reduced their workload. They also reported that the information provided about diversion airports was similar to what they would receive from ground dispatch, thus making coordination with dispatch easier and less time consuming. These HAT features engender more trust in the automation when appropriate, and less when not, allowing improved supervision of automated functions by flight crews.

Human-Autonomy Teaming↗

Flight Deck Surface Trajectory-Based Operations (STBO): A Four-Dimensional Trajectory (4DT) Simulation

Within human factors there is burgeoning interest in the Human-Autonomy Teaming (HAT) concept as away to address the challenges of interacting with complex, increasingly autonomous systems. The HAT concept comes out of an aspiration to interact with increasingly autonomous automation as a team member, rather than simply use automation as a tool. The authors, and others, have proposed core tenets for HAT that include bi-directional communication, automation and system transparency, and advanced coordination between human and automated teammates via predefined, dynamic task sequences known as plays (Shively et al., 2017). It is believed that, with proper implementation, HAT should foster appropriate teamwork, thus increasing trust and reliance on the system, which in turn will reduce workload, increase situation awareness, and improve performance. To this end, HAT has been demonstrated and/or studied in multiple applications including search and rescue operations (Nourbakhsh et al., 2005), healthcare and medicine (Tsui Yanco, 2007), autonomous vehicles (Parasuraman, Barnes, Cosenzo, Mulgund, 2007), photography (Lachter, Brandt, Sadler, Shively, in press), and aviation (Shively et al., in press). The current paper presents one such effort to apply HAT. It details the design of a R-HAT Agent developed as part of a NASA Research Agreement awarded to Human-Autonomy Teaming Solutions Inc. (HATS Inc), and developed in collaboration with the Human-Autonomy Teaming Laboratory at NASA Ames Research Center. The role of this Agent is to mediate interaction between the automation and the human operator of an advanced ground dispatch station, with this mediation based upon previously mentioned core tenets for HAT and the many lessons learned from the HAT research literature. This dispatch station was developed to support a NASA project investigating a concept called Reduced Crew Operations (RCO; Lachter, Brandt, Battiste, Matessa, Johnson, in press). Part of the RCO concept involves a ground operator providing enhanced support to a large number of aircraft with a single pilot on the flight deck. When assisted by the Agent, operators can monitor and support or manage a large number of aircraft and use plays to respond in real-time to complicated, workload-intensive events (e.g., an airport closure). A play is a plan that encapsulates goals, tasks, and a task allocation strategy appropriate for a particular situation. In the current implementation, when a play is initiated by a user, the Agent determines what tasks need to be done and has the ability to autonomously execute them (e.g., determining diversion options and uplinking new routes to aircraft) when it is safe and appropriate. The R-HAT Agent has been designed to both support end users and research in RCO and HAT. Additionally, the Agent and its underlying architecture were developed with generalizability in mind as a modular piece of software applicable outside of RCO aviation in domains such as those mentioned above. This paper will also discuss future further development and testing of the R-HAT Agent.

Bakowski, Deborah L.↗