Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 325 records · Page 18

Explanation Constraint Programming for Model-based Diagnosis of Engineered Systems

We can expect to see an increase in the deployment of unmanned air and land vehicles for autonomous exploration of space. In order to maintain autonomous control of such systems, it is essential to track the current state of the system. When the system includes safety-critical components, failures or faults in the system must be diagnosed as quickly as possible, and their effects compensated for so that control and safety are maintained under a variety of fault conditions. The Livingstone fault diagnosis and recovery kernel and its temporal extension L2 are examples of model-based reasoning engines for health management. Livingstone has been shown to be effective, it is in demand, and it is being further developed. It was part of the successful Remote Agent demonstration on Deep Space One in 1999. It has been and is being utilized by several projects involving groups from various NASA centers, including the In Situ Propellant Production (ISPP) simulation at Kennedy Space Center, the X-34 and X-37 experimental reusable launch vehicle missions, Techsat-21, and advanced life support projects. Model-based and consistency-based diagnostic systems like Livingstone work only with discrete and finite domain models. When quantitative and continuous behaviors are involved, these are abstracted to discrete form using some mapping. This mapping from the quantitative domain to the qualitative domain is sometimes very involved and requires the design of highly sophisticated and complex monitors. We propose a diagnostic methodology that deals directly with quantitative models and behaviors, thereby mitigating the need for these sophisticated mappings. Our work brings together ideas from model-based diagnosis systems like Livingstone and concurrent constraint programming concepts. The system uses explanations derived from the propagation of quantitative constraints to generate conflicts. Fast conflict generation algorithms are used to generate and maintain multiple candidates whose consistency can be tracked across multiple time steps.

Narasimhan, Sriram↗

Simulation Modeling for Off-Nominal Conditions - Where Are We Today?

The modeling of aircraft flight characteris4cs in off-nominal or otherwise adverse conditions has become increasingly important for simulation in the loss-of-control arena. Adverse conditions include environmentally-induced upsets such as wind shear or wake vortex encounters; off-nominal flight conditions, such as stall or departure; on-board systems failures; and structural failures or aircraft damage. Spirited discussions in the research community are taking place as to the fidelity and data requirements for adequate representation of vehicle dynamics under such conditions for a host of research areas, including recovery training, flight controls development, trajectory guidance/planning, and envelope limiting. The increasing need for multiple sources of data (empirical, computational, experimental) for modeling across a larger flight envelope leads to challenges in developing methods of appropriately applying or combining such data, particularly in a dynamic flight environment with a physically and/or aerodynamically asymmetric vehicle. Traditional simplifications and symmetry assumptions in current modeling methodology may no longer be valid. Furthermore, once modeled, challenges abound in the validation of flight dynamics characteristics in adverse flight regimes

Shah, Gautam H.↗

Identifying human failure events (HFEs) for external hazard probabilistic risk assessment

In recent years, several advancements in nuclear power plant (NPP) probabilistic risk assessment (PRA) have been driven by increased understanding of external hazards, plant response, and uncertainties. However, major sources of uncertainty associated with external hazard PRA remain. One important source is how risk-significant human actions that are carried out to enable plant response and recovery from natural hazards cause the close coupling of physical impacts on plants and overall plant risk during these hazard events. This makes human reliability and human-plant interactions important elements to consider in resolving PRA gaps in external hazards. One of the challenges in considering human response in external hazard probabilistic risk assessment (XHPRA) is that most existing human reliability analysis (HRA) models were not developed for assessing actions outside the control room (termed ex-control room actions) and hazard response. To support this new scope, HRA models will need to be developed or modified to support identification of human activities, causal factors, and uncertainties inherent in external hazard response, thereby providing insights regarding event timing and physical event conditions as they relate to human performance. In this study, there are two main objectives: (1) evaluate the applicability of an existing cognitive-based HRA method, Phoenix, to ex-control room actions, and (2) identify sources of uncertainty to be characterized or reduced in order to make this method suitable for XHPRA. The first step of such work is performed by assessing the suitability of existing HRA methods to support identifying human failure events (HFEs) for human response to flooding hazards. These HFEs are human actions or inactions that are involved in human responses to flooding hazards and could contribute to the loss of a critical function for the plant in the scenario being examined. Here, in this work, decomposition analyses using the cognitive-based Phoenix HRA model are used to identify HFEs. The Phoenix method was found to be suitable for analyzing ex-control room actions as well as identifying specific HFEs and underlying crew failure modes (CFMs). However, the method's suitability for use in ex-control room actions would benefit from expanding the available CFMs to accommodate a larger variety of physical and communication tasks.

42 ENGINEERING↗

Hyperthermia and exercise

The paper emphasizes fluid and electrolyte parameters that affect the hyperthermia of physical exercise (metabolic heat production). The major hypothesis discussed is that fluid and electrolyte changes influence thermal regulation within the fine control boundaries. A second working hypothesis is that the elevation of core temperature during exercise is a regulated phenomenon that is beneficial to the organism in terms of efficiency and potential for survival and is not merely a failure of the thermoregulatory control system. The central thermoregulatory mechanism seems more responsive to the hypothermic effect of calcium than to the hyperthermic effect of sodium. The mechanisms controlling plasma fluid-electrolyte shifts, particularly during exercise and recovery from exercise, may play an important part in exercise thermoregulation.

Greenleaf, J. E.↗

Design of a multivariable flutter control/gust load alleviation system

This paper discusses the use of eigenspace techniques for the design of an active flutter control/gust load alleviation system for a hypothetical research drone. One leading edge and two trailing edge aerodynamic surfaces are available for control. Full state control laws are designed for two combinations of control surfaces by selecting feedback gains which place closed loop eigenvalues and shape closed loop eigenvectors so as to stabilize wing flutter and reduce gust loads at the wing root while yielding acceptable robustness and satisfying constraints on rms control surface activity. These controllers are realized by state estimators designed using an eigenvalue placement/eigenvector shaping technique which results in recovery of the loop transfer characteristics of the full state feedback systems. The resulting feedback compensators are shown to perform almost as well as the full state designs. They also exhibit acceptable performance in situations in which the failure of an actuator is simulated.

Liebst, B. S.↗

The Importance of HRA in Human Space Flight: Understanding the Risks

Human performance is critical to crew safety during space missions. Humans interact with hardware and software during ground processing, normal flight, and in response to events. Human interactions with hardware and software can cause Loss of Crew and/or Vehicle (LOCV) through improper actions, or may prevent LOCV through recovery and control actions. Humans have the ability to deal with complex situations and system interactions beyond the capability of machines. Human Reliability Analysis (HRA) is a method used to qualitatively and quantitatively assess the occurrence of human failures that affect availability and reliability of complex systems. Modeling human actions with their corresponding failure probabilities in a Probabilistic Risk Assessment (PRA) provides a more complete picture of system risks and risk contributions. A high-quality HRA can provide valuable information on potential areas for improvement, including training, procedures, human interfaces design, and the need for automation. Modeling human error has always been a challenge in part because performance data is not always readily available. For spaceflight, the challenge is amplified not only because of the small number of participants and limited amount of performance data available, but also due to the lack of definition of the unique factors influencing human performance in space. These factors, called performance shaping factors in HRA terminology, are used in HRA techniques to modify basic human error probabilities in order to capture the context of an analyzed task. Many of the human error modeling techniques were developed within the context of nuclear power plants and therefore the methodologies do not address spaceflight factors such as the effects of microgravity and longer duration missions. This presentation will describe the types of human error risks which have shown up as risk drivers in the Shuttle PRA which may be applicable to commercial space flight. As with other large PRAs of complex machines, human error in the Shuttle PRA proved to be an important contributor (~12 percent) to LOCV. An existing HRA technique was adapted for use in the Shuttle PRA, but additional guidance and improvements are needed to make the HRA task in space-related PRAs easier and more accurate. Therefore, this presentation will also outline plans for expanding current HRA methodology to more explicitly cover spaceflight performance shaping factors.

Hamlin, Teri↗

Decommissioning of Air Sparge System at Vertical Processing Facility, Solid Waste Management Unit 077 Implementation Report

This document discusses the decommissioning of the air sparge (AS) system at the Vertical Processing Facility (VPF), Solid Waste Management Unit 077 at Kennedy Space Center, Florida completed between January 30, 2023, and February 8, 2023. A 2005 Resource Conservation and Recovery Act Facility Investigation identified chlorinated volatile organic compound impacts at the site. Following assessment activities, an AS system was in operation intermittently from April 2012 through October 2017, when the system was permanently shutdown due to equipment failure. Trichloroethene and vinyl chloride remained above their groundwater cleanup target levels in several monitoring wells and the site was moved into the Industrial Area Long Term Monitoring Program. VPF continues to be sampled biennially; the most recent event was May 2022. Successful implementation of this decommissioning project will reduce the risk of accidental AS and soil vapor extraction well damage and will lower operating costs associated with maintaining obsolete AS systems. Decommissioning the AS system at VPF included vegetation clearing to access AS wells and associated piping, abandonment of all on site AS wells, temporary electrical outage, and site restoration. At the completion of demobilization and site restoration activities, the site was returned to its original or better than original condition.

Jason J Bublitz↗

Performance degradation due to anodic failure mechanisms in lithium-ion batteries

Here, we report a mechano-chemical model for anodic degradation during fast-charging of nickel-manganese-cobalt (NMC)/graphite (C) cell due to SEI growth, lithium plating/stripping, dead lithium storage, and film fracture of composite SEI and plated lithium film. Degradation of the battery is analyzed for a range of charging rates from 1 to 6 C-rates, and the influence of plating mechanisms – lithium plating and dead lithium deposition and recovery during stripping – on the film resistance of the anode are accounted for in the model. Dynamic evolution of the interfacial properties is modeled using rule-of-mixture approach. Model predictions of plating associated stress fields are used to compute critical energy release rate for film cracking. The results indicate an increased tendency of fracture for thinner SEI film with lithium plating at higher charging rates. The process of reforming the cracked film absorbs a significant portion of the electrode current thereby reducing the cell capacity and plating efficiency. The mechano-chemical model provides an extensive analytical framework for understanding the synergistic coupling of anodic degradation mechanisms, prognosticating conditions of SEI failure, and evaluating the capacity fade and efficiency of lithium-ion battery.

25 ENERGY STORAGE↗

Anomaly Detection in Accelerator Facilities Using Machine Learning

Synchrotron light sources are user facilities and usually run about 5000 hours per year to support many beamlines operations in parallel. Reliability is a key parameter to evaluate machine performance. Even many facilities have achieved >95% beam reliability, there are still many hours of unscheduled downtime and every hour lost is a waste of operation costs along with a big impact on individual scheduled user experiments. Preventive maintenance on subsystems and quick recovery from machine trips are the basic strategies to achieve high reliability, which heavily depends on experts’ dedication. Recently, SLAC, APS, and NSLS-II collaborated to develop machine-learning-based approaches aiming to solve both situations, hardware failure prediction and machine failure diagnosis to find the root sources. In this paper, we report our facility operation status, development progress, and plans.

Accelerator Physics↗

Flight experience with a fail-operational digital fly-by-wire control system

The NASA Dryden Flight Research Center is flight testing a triply redundant digital fly-by-wire (DFBW) control system installed in an F-8 aircraft. The full-time, full-authority system performs three-axis flight control computations, including stability and command augmentation, autopilot functions, failure detection and isolation, and self-test functions. Advanced control law experiments include an active flap mode for ride smoothing and maneuver drag reduction. This paper discusses research being conducted on computer synchronization, fault detection, fault isolation, and recovery from transient faults. The F-8 DFBW system has demonstrated immunity from nuisance fault declarations while quickly identifying truly faulty components.

Brown, S. R.↗

Observations of Planet Crossing Asteroids

The goals of this research were the physical and dynamical characterization of planet crossing asteroids (Earth crossers, Mars crossers, Centaurs, and Pluto crossers, meaning trans-Neptunian objects), including colorimetry, rotational studies, and astrometry. Highlights are listed as follows: 1) Produced one doctoral dissertation (R. J. Whiteley, A Compositional and Dynamical Survey of the Near-Earth Asteroids). A key result is the fraction of Q-type asteroids among the near-Earth population was found to be about one-third; 2) Had prediscovery image showing the binary nature of trans-Neptunian object 1998 WW31, which is the first TNO to have a satellite found in orbit around it; 3) Discovery of shortest known rotation period for any asteroid (2000 D08, rotation period 78 seconds); it is just one of several fast-rotating small asteroids observed during the course of this project; 4) Discovery of a Centaur asteroid (1998 QM107) with, at the time, the smallest known orbital eccentricity among the Centaurs (0.13) and nearly in a 1:1 resonance with Uranus (semimajor axis of 19.9 AU); 5) Discovery of Apollo-type asteroid 1999 OW3, with a surprisingly bright absolute magnitude of 14.6 (estimated diameter of 4.6 km), brightest Apollo found in that calendar year; 6) Discovery of Aten-type asteroid 2000 SG344, which has the highest cumulative Earth impact probability among the near-Earth asteroids and a very Earth-similar orbit; 7) Instrumental in repairing the orbit of a numbered near-Earth asteroid for which prediscovery observations had been mis-attributed to it (2000 VN2); 8) Second-opposition recovery of 30-meter diameter Apollo-type asteroid 1998 KY26 in early 2002 when it was at a favorable magnitude of 24.8; 9) Primary contributor of astrometric observations of the CONTOUR fragments to the CONTOUR project following the failure of the spacecraft s kick motor; and 10) Development of orbit and ephemeris computation code that handles short observational arcs, observations at small solar elongations where indeterminacy is a known problem, and a small number of observations (including just two). Starting in 2000 November, the Spaceguard Central Node began prioritizing near-Earth asteroids in need of astrometric observation. Our own follow-up efforts relied on these listings, with emphasis given to the faintest objects where the combination of a 2.2-m telescope and a site with subarcsecond seeing produces a limiting magnitude close to 25, which represents a unique and valuable capability. The attached table, last updated in August, demonstrates the arc-lengthening capabilities of a faint limiting magnitude. Tabulated are the arc lengths before and after our observation(s), whether our observation is the last one available for the object in question, and the approximate magnitude of the object at the time of the observation.

Tholen, David J.↗

Bioinspired multilayered cellular composites with enhanced energy absorption and shape recovery

Inspired by the multiscale configuration of the microstructure of cork, the paper describes the design, 3D printing, and evaluation of a new type of multilayered cellular composite (MCC) structure composed of hard brittle and soft flexible phases. The mechanical behavior of 3D printed MCC structures have been investigated both experimentally and numerically. The experiments show that the MCC structure absorbs four times the amount of energy of a conventional cellular configuration under compressive strains up to 70%. Finite element simulations and 2D digital image correlation (DIC) also show that the multilayered architecture provides a more uniform strain distribution and higher stress transfer efficiency, with a resulting progressive failure mode rather than a catastrophic one. Cyclic loading tests demonstrate that the MCC structure also possesses exceptional shape recoverability under compressive deformations up to 40%. These remarkable performance characteristics result from synergies between the properties of the two constituent materials and the chosen multilayered cellular microstructure. The soft phase, in particular, plays a pivotal role in absorbing elastic energy during loading and then releasing the stored energy while unloading. The volume fraction of the soft phase is also essential to control energy absorption and the transition of failure modes. The deformation mechanisms demonstrated here are robust and applicable to other architected cellular materials across multiple length scales and suggest new ways to design lightweight and high-resilience structural materials.

bioinspired composites↗

Report on local data recovery approaches suitable for weather and climate prediction (Deliverable 1.3) (V.1.0)

Numerical weather and climate prediction rates as one of the scientific applications whose accuracy improvements greatly depend on the growth of the available computing power. As the number of cores in top computing facilities pushes into the millions, increasing average frequency of hardware and software failures forces users to review their algorithms and systems in order to protect simulations from breakdown. This report surveys approaches for fault-tolerance in numerical algorithms and system resilience in parallel simulations from the perspective of numerical weather and climate prediction systems. A selection of existing strategies is analyzed, featuring interpolation-restart and compressed checkpointing for the numerics, in-memory checkpointing, user-level failure mitigation-based and backup-based methods for the systems. Numerical examples showcase the performance of the techniques in addressing faults, with particular emphasis on iterative solvers for linear systems, a staple of atmospheric fluid flow solvers. The potential impact of these strategies is discussed in relation to current development of numerical weather prediction algorithms and systems towards the exascale. Trade-offs between performance, efficiency and effectiveness of resiliency strategies are analyzed and some recommendations outlined for future developments.

97 MATHEMATICS AND COMPUTING↗

Deep Moonquake Focal Mechanisms: Recovery and Implications

A defining characteristic of deep moonquakes is their tendency to occur with tidal periodicity, prompting previous studies to infer that they are related to the buildup and release of tidal stress within the Moon. In studies of tidal forcing, a key constraint is the focal mechanism: the fault parameters describing the type of failure moonquakes represent. The quality of the lunar seismic data and the limited source/receiver geometries of the Apollo seismic network prohibit the determination of deep moonquake fault parameters using first-motion polarities, as is typically done in terrestrial seismology. Without being able to resolve tidal stress onto a known failure plane, we can examine only gross qualities of the tidal stress tensor with respect to moonquake occurrence, so we cannot fully address the role of tidal stress in moonquake generation. We will examine the extent to which shear (S) and compression (P) wave amplitude ratios can constrain moonquake fault geometry by determining whether, for a given cluster, there exists a focal mechanism that can produce a radiation pattern consistent with the amplitudes measured by the Apollo instruments. Amplitudes are read in the ray coordinate frame, directly from seismograms for which the P and S arrivals are clearly identifiable on all long-period channels of the four Apollo stations. We apply an empirical station correction to account for site effects and the differences between P- and S-wave attenuation. Instead of focusing on the best fitting solution only, we formulate the inverse problem using a falsification criterion: all source orientations that do not reproduce the observed SV/P ratios within an error margin derived from the uncertainty of amplitude readings are rejected. All others are accepted as possible solutions. The inversion is carried out using an exhaustive grid search on a regular grid with predefined step size, encompassing all possible combinations of strike, dip and slip. To assess the sensitivity of the inversion for the uncertainty of the lunar interior structure, we carry out repeated inversions with different velocity structures. Our data set consist of a total of 106 events from 25 deep moonquake clusters. The largest contribution of 37 events originates from the most active cluster, A001, while other clusters are represented by 1 to 9 events. Since the definition of a cluster implies that all events share the same source orientation, a comparison of the inversion results of all events from one cluster will reduce ambiguities of the inversion. Once we obtain a suite of fault parameters for a given source, we can attempt to further constrain the focal mechanism with refined analyses of tidal stresses and predictions based on synthetic seismograms.

Knapmeyer, Martin↗

Deep Moonquake Focal Mechanisms: Recovery and Implications

A defining characteristic of deep moonquakes is their tendency to occur with tidal periodicity, prompting previous studies to infer that they are related to the buildup and release of tidal stress within the Moon [refs]. In studies of tidal forcing, a key constraint is the focal mechanism: the fault parameters describing the type of failure moonquakes represent. The quality of the lunar seismic data and the limited source/receiver geometries of the Apollo seismic network prohibit the determination of deep moonquake fault parameters using first-motion polarities, as is typically done in terrestrial seismology [ref]. Without being able to resolve tidal stress onto a known failure plane, we can examine only gross qualities of the tidal stress tensor with respect to moonquake occurrence, so we cannot fully address the role of tidal stress in moonquake generation.

Weber, Renee C.↗

Modeling transient faults in TMR computer systems

In this paper we report the development of a technique for modeling transient faults in redundant computer systems. Transient faults are characterized by their arrival rate and their duration. Fault detection, transient recovery, and the effect of permanent faults are included. A fault occurrence/recovery status state diagram is drawn to illustrate the operational status of the system while undergoing faults. The state diagram is used to formulate the equations for the mission failure probability. The techniques are then applied to a triple modular redundant computer system.

Merryman, P. M.↗

Care 3 phase 2 report, maintenance manual

CARE 3 (Computer-Aided Reliability Estimation, version three) is a computer program designed to help estimate the reliability of complex, redundant systems. Although the program can model a wide variety of redundant structures, it was developed specifically for fault-tolerant avionics systems--systems distinguished by the need for extremely reliable performance since a system failure could well result in the loss of human life. It substantially generalizes the class of redundant configurations that could be accommodated, and includes a coverage model to determine the various coverage probabilities as a function of the applicable fault recovery mechanisms (detection delay, diagnostic scheduling interval, isolation and recovery delay, etc.). CARE 3 further generalizes the class of system structures that can be modeled and greatly expands the coverage model to take into account such effects as intermittent and transient faults, latent faults, error propagation, etc.

Bryant, L. A.↗

The implementation and use of ADA on distributed systems with high reliability requirements

The use and implementation of Ada in distributed environments in which reliability is the primary concern is investigated. Emphasis is placed on the possibility that a distributed system may be programmed entirely in Ada so that the individual tasks of the system are unconcerned with which processors they are executing on, and that failures may occur in the software or underlying hardware. A new linguistic construct, the colloquy, is introduced which solves the problems identified in an earlier proposal, the conversation. It was shown that the colloquy is at least as powerful as recovery blocks, but it is also as powerful as all the other language facilities proposed for other situations requiring backward error recovery: recovery blocks, deadlines, generalized exception handlers, traditional conversations, s-conversations, and exchanges. The major features that distinguish the colloquy are described. Sample programs that were written, but not executed, using the colloquy show that extensive backward error recovery can be included in these programs simply and elegantly. These ideas are being implemented in an experimental Ada test bed.

Knight, J. C.↗