Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Emerging resource”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Towards Real-Time, On-Board, Hardware-Supported Sensor and Software Health Management for Unmanned Aerial Systems

For unmanned aerial systems (UAS) to be successfully deployed and integrated within the national airspace, it is imperative that they possess the capability to effectively complete their missions without compromising the safety of other aircraft, as well as persons and property on the ground. This necessity creates a natural requirement for UAS that can respond to uncertain environmental conditions and emergent failures in real-time, with robustness and resilience close enough to those of manned systems. We introduce a system that meets this requirement with the design of a real-time onboard system health management (SHM) capability to continuously monitor sensors, software, and hardware components. This system can detect and diagnose failures and violations of safety or performance rules during the flight of a UAS. Our approach to SHM is three-pronged, providing: (1) real-time monitoring of sensor and software signals; (2) signal analysis, preprocessing, and advanced on-the-fly temporal and Bayesian probabilistic fault diagnosis; and (3) an unobtrusive, lightweight, read-only, low-power realization using Field Programmable Gate Arrays (FPGAs) that avoids overburdening limited computing resources or costly re-certification of flight software. We call this approach rt-R2U2, a name derived from its requirements. Our implementation provides a novel approach of combining modular building blocks, integrating responsive runtime monitoring of temporal logic system safety requirements with model-based diagnosis and Bayesian network-based probabilistic analysis. We demonstrate this approach using actual flight data from the NASA Swift UAS.

Unmanned Aerial System↗

A Probabilistic Framework for the Validation and Certification of Computer Simulations

The paper presents a methodology for quantifying, propagating, and managing the uncertainty in the data required to initialize computer simulations of complex phenomena. The purpose of the methodology is to permit the quantitative assessment of a certification level to be associated with the predictions from the simulations, as well as the design of a data acquisition strategy to achieve a target level of certification. The value of a methodology that can address the above issues is obvious, specially in light of the trend in the availability of computational resources, as well as the trend in sensor technology. These two trends make it possible to probe physical phenomena both with physical sensors, as well as with complex models, at previously inconceivable levels. With these new abilities arises the need to develop the knowledge to integrate the information from sensors and computer simulations. This is achieved in the present work by tracing both activities back to a level of abstraction that highlights their commonalities, thus allowing them to be manipulated in a mathematically consistent fashion. In particular, the mathematical theory underlying computer simulations has long been associated with partial differential equations and functional analysis concepts such as Hilbert spares and orthogonal projections. By relying on a probabilistic framework for the modeling of data, a Hilbert space framework emerges that permits the modeling of coefficients in the governing equations as random variables, or equivalently, as elements in a Hilbert space. This permits the development of an approximation theory for probabilistic problems that parallels that of deterministic approximation theory. According to this formalism, the solution of the problem is identified by its projection on a basis in the Hilbert space of random variables, as opposed to more traditional techniques where the solution is approximated by its first or second-order statistics. The present representation, in addition to capturing significantly more information than the traditional approach, facilitates the linkage between different interacting stochastic systems as is typically observed in real-life situations.

Ghanem, Roger↗

Management of space networks

NASA has proposed missions to the Moon and Mars that reflect three areas of emphasis: human presence, exploration, and space resource development for the benefit of Earth. A major requirement for such missions is a robust and reliable communications architecture. Network management--the ability to maintain some degree of human and automatic control over the span of the network from the space elements to the end users on Earth--is required to realize such robust and reliable communications. This article addresses several of the architectural issues associated with space network management. Round-trip delays, such as the 5- to 40-min delays in the Mars case, introduce a host of problems that must be solved by delegating significant control authority to remote nodes. Therefore, management hierarchy is one of the important architectural issues. The following article addresses these concerns, and proposes a network management approach based on emerging standards that covers the needs for fault, configuration, and performance management, delegated control authority, and hierarchical reporting of events. A relatively simple approach based on standards was demonstrated in the DSN 2000 Information Systems Laboratory, and the results are described.

Markley, R. W.↗

Mars Sample Return Using Commercial Capabilities: Mission Architecture Overview

Mars Sample Return (MSR) is the highest priority science mission for the next decade as recommended by the recent Decadal Survey of Planetary Science. This paper presents an overview of a feasibility study for a MSR mission. The objective of the study was to determine whether emerging commercial capabilities can be used to reduce the number of mission systems and launches required to return the samples, with the goal of reducing mission cost. The major element required for the MSR mission are described and include an integration of the emerging commercial capabilities with small spacecraft design techniques; new utilizations of traditional aerospace technologies; and recent technological developments. We report the feasibility of a complete and closed MSR mission design using the following scenario that covers three synodic launch opportunities, beginning with the 2022 opportunity: A Falcon Heavy injects a SpaceX Red Dragon capsule and trunk onto a Trans Mars Injection (TMI) trajectory. The capsule is modified to carry all the hardware needed to return samples collected on Mars including a Mars Ascent Vehicle (MAV); an Earth Return Vehicle (ERV); and hardware to transfer a sample collected in a previously landed rover mission to the ERV. The Red Dragon descends to land on the surface of Mars using Supersonic Retro Propulsion (SRP). After previously collected samples are transferred to the ERV, the single-stage MAV launches the ERV from the surface of Mars to a Mars phasing orbit. The MAV uses a storable liquid, pump fed bi-propellant propulsion system. After a brief phasing period, the ERV, which also uses a storable bi-propellant system, performs a Trans Earth Injection (TEI) burn. Once near Earth the ERV performs Earth and lunar swing-bys and is placed into a Lunar Trailing Orbit (LTO0 - an Earth orbit, at lunar distance. A later mission, using a Dragon and launched by a Falcon Heavy, performs a rendezvous with the ERV in the lunar trailing orbit, retrieves the sample container and breaks the chain of contact with Mars by transferring the sample into a sterile and secure container. With the sample contained, the retrieving spacecraft, makes a controlled Earth re-entry preventing any unintended release of pristine Martian materials into the Earth's biosphere. Other capsule type vehicles and associated launchers may be applicable. The analysis methods employed standard and specialized aerospace engineering tools. Mission system elements were analyzed with either direct techniques or by using parametric mass estimating relationships (MERs). The architecture was iterated until overall mission convergence was achieved on at least one path. Subsystems analyzed in this study include support structures, power system, nose fairing, thermal insulation, actuation devices, MAV exhaust venting, and GN&C. Best practice application of loads, mass growth contingencies, and resource margins were used. For Falcon Heavy capabilities and Dragon subsystems we utilized publically available data from SpaceX; published analyses from other sources; as well as our own engineering and aerodynamic estimates. Earth Launch mass is under 11 mt, which is within the estimated capability of a Falcon Heavy, with margin. Total entry masses between 7 and 10 mt were considered with closure occurring between 9 and 10 mt. Propellant mass fractions for each major phase of the EDL - Entry, Terminal Descent, and Hazard Avoidance - have been derived. An assessment of the entry conditions on the thermal protection system (TPS), currently in use for Dragon missions, has been made. And shows no significant stressors. A useful mass of 2.0 mt is provided and includes mass growth allowances for the MAV, the ERV, and mission unique equipment. We also report on alternate propellant options for the MAV and options for the ERV, including propulsion systems; crewed versus robotic retrieval mission; as well as direct Earth entry. International Planetary Protection Policies as well as verifiable means of compliance will have a large impact on any MSR mission design. We identify areas within our architecture where such impacts occur. This work shows that emerging commercial capabilities can be used to effectively integrated into a mission to achieve an important planetary science objective.

Mars Sample Return↗

Atmospheric and Science Complexity Effects on Surface Bidirectional Reflectance

Among the tools used in passive remote sensing of Earth resources in the visible and near-infrared spectral regions are measurements of spectral signature and bidirectional reflectance functions (BDRFs). Determination of surface properties using these observables is complicated by a number of factors, including: (1) mixing of surface components, such as soil and vegetation, (2) multiple reflections of radiation due to complex geometry, such as in crop canopies, and (3) atmospheric effects. In order to bridge the diversity in these different approaches, there is a need for a fundamental physical understanding of the influence of the various effects and a quantiative measure of their relative importance. In particular, we consider scene complexity effects using the example of reflection by vegetative surfaces. The interaction of sunlight with a crop canopy and interpretation of the spectral and angular dependence of the emergent radiation is basically a multidimensional radiative transfer problem. The complex canopy geometry, underlying soil cover, and presence of diffuse as well as collimated illumination will modify the reflectance characteristics of the canopy relative to those of the individual elements.

Diner, D. J.↗

Coping with Irregular Operations: Implications for a Free Flight Environment

Irregular operations involve disruption of scheduled airline operations. They ate of concern to the carriers because they cost money, require personnel effort, and may harm customer good will. Irregular operations may result from aircraft system malfunctions that take planes out of service or result in cancellations, Might system problems or passenger medical emergencies that require diversions, local airport problems that may close down a runway, or weather systems that restrict flow into airports or regions. At the heart of responding to irregular operations is distributed decision making by members of airline operations centers, pilots, and the air traffic control system. Six U.S. carriers participated in a study in which we observed strategies used by operations center personnel to handle various classes of irregular operations. We focused on situations that are most disruptive to regular operations and are most difficult to cope with. We also sought to identify classes of events that would be most affected by changes in the air traffic management system. How a carrier deals with disruptions to its schedule reflects its philosophy and primary goals, as well as its resources. Size and type of operations (short or long-haul) determine which problems have priority. Each airline has different technological support tools to aid in flight planning and replanning, and some carriers have established contingency procedures for coping with various situations. We also examined differences in extent and type of interaction between ABC personnel and various elements of the air traffic system as they managed various problems: who interacts with AM what situations prompt interaction, how often these occur, and the outcomes and Perceived benefits. Use of the expanded NRP program was also studied, along with its advantages to the individual companies. We also examined the implications of the proposed change to a free flight environment on airline strategies for coping with irregular operations.

Orasanu, Judith↗

Global Surface Solar Energy Anomalies Including El Nino and La Nina Years

This paper synthesizes past events in an attempt to define the general magnitude, duration, and location of large surface solar anomalies over the globe. Surface solar energy values are mostly a function of solar zenith angle, cloud conditions, column atmospheric water vapor, aerosols, and surface albedo. For this study, solar and meteorological parameters for the 10-yr period July 1983 through June 1993 are used. These data were generated as part of the Release 3 Surface meteorology and Solar Energy (SSE) activity under the NASA Earth Science Enterprise (ESE) effort. Release 3 SSE uses upgraded input data and methods relative to previous releases. Cloud conditions are based on recent NASA Version-D International Satellite Cloud Climatology Project (ISCCP) global satellite radiation and cloud data. Meteorological inputs are from Version-I Goddard Earth Observing System (GEOS) reanalysis data that uses both weather station and satellite information. Aerosol transmission for different regions and seasons are for an 'average' year based on historic solar energy data from over 1000 ground sites courtesy of Natural Resources Canada (NRCan). These data are input to a new Langley Parameterized Shortwave Algorithm (LPSA) that calculates surface albedo and surface solar energy. That algorithm is an upgraded version of the 'Staylor' algorithm. Calculations are performed for a 280X280 km equal-area grid system over the globe based on 3-hourly input data. A bi-linear interpolation process is used to estimate data output values on a 1 X 1 degree grid system over the globe. Maximum anomalies are examined relative to El Nino and La Nina events in the tropical Pacific Ocean. Maximum year-to-year anomalies over the globe are provided for a 10-year period. The data may assist in the design of systems with increased reliability. It may also allow for better planning for emergency assistance during some atypical events.

Whitlock, C. H.↗

Evidence Report, Risk of Inadequate Design of Human and Automation/Robotic Integration

The success of future exploration missions depends, even more than today, on effective integration of humans and technology (automation and robotics). This will not emerge by chance, but by design. Both crew and ground personnel will need to do more demanding tasks in more difficult conditions, amplifying the costs of poor design and the benefits of good design. This report has looked at the importance of good design and the risks from poor design from several perspectives: 1) If the relevant functions needed for a mission are not identified, then designs of technology and its use by humans are unlikely to be effective: critical functions will be missing and irrelevant functions will mislead or drain attention. 2) If functions are not distributed effectively among the (multiple) participating humans and automation/robotic systems, later design choices can do little to repair this: additional unnecessary coordination work may be introduced, workload may be redistributed to create problems, limited human attentional resources may be wasted, and the capabilities of both humans and technology underused. 3) If the design does not promote accurate understanding of the capabilities of the technology, the operators will not use the technology effectively: the system may be switched off in conditions where it would be effective, or used for tasks or in contexts where its effectiveness may be very limited. 4) If an ineffective interaction design is implemented and put into use, a wide range of problems can ensue. Many involve lack of transparency into the system: operators may be unable or find it very difficult to determine a) the current state and changes of state of the automation or robot, b) the current state and changes in state of the system being controlled or acted on, and c) what actions by human or by system had what effects. 5) If the human interfaces for operation and control of robotic agents are not designed to accommodate the unique points of view and operating environments of both the human and the robotic agent, then effective human-robot coordination cannot be achieved.

Zumbado, Jennifer Rochlis↗

Mars Sample Return Using Commercial Capabilities: Mission Architecture Overview

Mars Sample Return (MSR) is the highest priority science mission for the next decade as recommended by the recent Decadal Survey of Planetary Science. This paper presents an overview of a feasibility study for an MSR mission. The objective of the study was to determine whether emerging commercial capabilities can be used to reduce the number of mission systems and launches required to return the samples, with the goal of reducing mission cost. We report the feasibility of a complete and closed MSR mission design using the following scenario that covers three synodic launch opportunities, beginning with the 2022 opportunity: A Falcon Heavy injects a SpaceX Red Dragon capsule and trunk onto a Trans Mars Injection (TMI) trajectory. The capsule is modified to carry all the hardware needed to return samples collected on Mars including a Mars Ascent Vehicle (MAV), an Earth Return Vehicle (ERV), and hardware to transfer a sample collected in a previously landed rover mission to the ERV. The Red Dragon descends to land on the surface of Mars using Super Sonic Retro Propulsion (SSRP). After previously collected samples are transferred to the ERV, the single-stage MAV launches the ERV from the surface of Mars. The MAV uses a storable liquid bi-propellant propulsion system to deliver the ERV to a Mars phasing orbit. After a brief phasing period, the ERV, which also uses a storable bi-propellant system, performs a Trans Earth Injection (TEI) burn. Upon arrival at Earth, the ERV performs Earth and lunar swing-bys and is placed into a lunar trailing circular orbit - an Earth orbit, at lunar distance. A later mission, using Dragon and launched by a Falcon Heavy, performs a rendezvous with the ERV in the lunar trailing orbit, retrieves the sample container and breaks the chain of contact with Mars by transferring the sample into a sterile and secure container. With the sample contained, the retrieving spacecraft makes a controlled Earth re-entry preventing any unintended release of pristine martian materials into the Earth's biosphere. The analysis methods employed standard and specialized aerospace engineering tools. Mission system elements were analyzed with either direct techniques or by using parametric mass estimating relationships (MERs). The architecture was iterated until overall mission convergence was achieved on at least one path. Subsystems analyzed in this study include support structures, power system, nose fairing, thermal insulation, actuation devices, MAV exhaust venting, and GN&C. Best practice application of loads, mass growth contingencies, and resource margins were used. For Falcon Heavy capabilities and Dragon subsystems we utilized publically available data from SpaceX, published analyses from other sources, as well as our own engineering and aerodynamic estimates. Earth Launch mass is under 11 mt, which is within the estimated capability of a Falcon Heavy, with margin. Total entry masses between 7 and 10 mt were considered with closure occurring between 9 and 10 mt. Propellant mass fractions for each major phase of the EDL - Entry, Terminal Descent, and Hazard Avoidance - have been derived. An assessment of the effect of the entry conditions on the thermal protection system (TPS), currently in use for Dragon missions, shows no significant stressors. A useful payload mass of 2.0 mt is provided and includes mass growth allowances for the MAV, the ERV, and mission unique equipment. We also report options for the MAV and ERV, including propulsion systems, crewed versus robotic retrieval mission, as well as direct Earth entry. International planetary protection policies as well as verifiable means of compliance will have a large impact on any MSR mission design. We identify areas within our architecture where such impacts occur. We also describe preliminary compliance measures that will be the subject of future work. This work shows that emerging commercial capabilities as well as new methodologies can be used to efficiently support an important planetary science objective. The work also has applications for human exploration missions that use propulsive EDL techniques

Red Dragon↗

Central California Disasters: Incorporating Satellite-Derived Precipitation and Soil Moisture Products into Flood Preparedness and Emergency Management in California

Atmospheric rivers are a major contributor to extreme precipitation events and flooding in California. This study assessed the feasibility of using Earth observation data to monitor precipitation, soil moisture, and flooding from atmospheric rivers in the Salinas River Watershed in central California during the winter of 2022-2023. The team analyzed satellite derived precipitation estimates from the Global Precipitation Measurement mission, soil moisture data from the Soil Moisture Active Passive radiometer, and synthetic aperture radar imagery from Sentinel-1 to detect flood inundation. Global Precipitation Measurement precipitation estimates were found to underestimate rainfall by 33% to 52% compared to rain gauge data. The team found the Soil Moisture Active Passive dataset to be a valuable flooding indicator that they could visualize through various graphical representations, although its accuracy still needs verification with in situ flood maps. Sentinel-1 synthetic aperture radar imagery provided mapping of flood inundation extent along the Salinas River and surrounding areas and the Blue Spot model appears to be a good predictor of pluvial flood zones. The findings suggest Earth observations can enhance precipitation and flooding monitoring by the California Department of Water Resources, though further verification is needed. Integration of these datasets with vulnerability indices highlighted communities at highest risk during the 2022-2023 flooding events.

Abhinav Banthiya↗

Global Infrared Observations of Roughness Induced Transition on the Space Shuttle Orbiter

High resolution infrared observations made from a mobile ground based optical system captured the laminar-to-turbulent boundary layer transition process as it occurred during Space Shuttle Endeavour's return to earth following its final mission in 2011. The STS-134 imagery was part of a larger effort to demonstrate an emerging and reliable non-intrusive global thermal measurement capability and to complement a series of boundary layer transition flight experiments that were flown on the Shuttle. The STS-134 observations are believed to be the first time that the development and movement of a hypersonic boundary layer transition front has been witnessed in flight over the entire vehicle surface and in particular, at unprecedented spatial resolution. Additionally, benchmark surface temperature maps of the Orbiter lower surface collected over multiple flights and spanning a Mach range of 18 to 6 are now available and represent an opportunity for collaborative comparison with computational techniques focused on hypersonic transition and turbulence modeling. The synergy of the global temperature maps with the companion in-situ thermocouple measurements serve as an example of the effective leveraging of resources to achieve a common goal of advancing our understanding of the complex nature of high Mach number transition. It is shown that quantitative imaging can open the door to a multitude of national and international opportunities for partnership associated with flight-testing and subsequent validation of numerical simulation techniques. The quantitative imaging applications highlighted in this paper offer unique and complementary flight measurement alternatives and suggest collaborative instrumentation opportunities to advance the state of the art in transition prediction and maximize the return on investment in terms of developmental flight tests for future vehicle designs.

Horvath, Thomas J.↗

Automated Reconfigurable Mission Adaptive Digital Assembly Systems (ARMADAS): Robotically Assembled Sustainable Lunar Infrastructure

Introduction: The Automated Reconfigurable Mission Adaptive Digital Assembly Systems (ARMADAS) project at NASA Ames Research Center is developing autonomous infrastructure, instrumentation, and spacecraft assembly and manufacturing capabilities for next generation exploration and science missions, with a goal to change the cost scaling of these missions relative to mission size and duration. Using a building-block approach with a 'kit of parts' composed of ultra-light, high-performance mechanical metamaterials, simplified robots leverage the period environment to achieve high levels of autonomy and reliability for in-space and surface assembly of large-scale apertures, solar-arrays, towers, habitats, and other infrastructure. Robots and structure break down into a compact form factor for launch. By leveraging economies of scale and achieving high-packing ratios, ARMADAS technology can revolutionize possible space missions by breaking the tyranny of the launch shroud, decreasing development times, decreasing mission costs for transformative science capability, and providing a scalable and versatile space infrastructure strategy. Capabilities: To date, the ARMADAS project has demonstrated autonomous assembly of large numbers of structural modules into a meters-scale structure in an earth gravity environment. The mechanical performance is on par with conventional space structures, at a fraction of the cost. By using highly repeatable manufacturing processes (injection molding carbon fiber reinforced space-rated polymers), the structures are both cost effective and highly precise. The ARAMADAS system carefully designs parts for high-precision assembly–the simple and cost-effective robots build structures much larger and more precise than themselves. While maintaining structural efficiency, the ARMADAS system encompasses many functional module types, including for solar power, comm/power routing, etc., that will enable entire infrastructure systems to be engineered and autonomously assembled with modular parts. With well-defined interfaces, custom instrumentation modules can easily be added to fit many mission objectives. Lunar Infrastructure Vision: At the LSIC spring meeting, ARMADAS will present a vision for a general-purpose lunar construction kit capable of meeting a wide variety of lunar surface infrastructure needs (Figure 1). Investing in an ecosystem of reconfigurable, discretely repairable parts and robots enables systems than can expand their capability, reconfigure to meet emergency or unforeseen needs, self-repair and reduce spare-part needs. With a small set of parts (module types), a wide variety of infrastructure needs can be met. Footing modules will allow infrastructure construction at locations with no surface preparation. Footer, primary structure, and rail modules can create reconfigurable rail systems. These rail systems can be used to reduce cost-of-transport between frequently accessed sites, provide dust mitigation, and convey power and communications. High-performance structure modules combined with power-routing and solar modules can create tall towers for power and communication. Concepts for habitats and garages encompass a structure to support regolith cover for a pre-integrated module to an entirely ARMADAS system-based structure. This system can be leveraged by many in-situ resource utilization (ISRU) technologies to simplify processes and augment capabilities.

C. E. Gregg↗

The Challenges of Integrating NASA's Human, Budget, and Data Capital within the Constellation Program's Exploration Launch Projects Office

The U.S. Vision for Space Exploration directs NASA to retire the Space Shuttle in 2010 and replace it with safe, reliable, and cost-effective space transportation systems for crew and cargo travel to the Moon, Mars, and beyond. Such emerging space transportation initiatives face massive organizational challenges, including building and nurturing an experienced, dedicated team with the right skills for the required tasks; allocating and tracking the fiscal capital invested in achieving technical progress against an integrated master schedule; and turning generated data into useful knowledge that equips the team to design and develop superior products for customers and stakeholders. It has been more than 30 years since the Space Shuttle was designed; therefore, the current aerospace workforce has limited experience with developing new designs for human-rated spaceflight hardware. To accomplish these activities, NASA is using a wide range of state-of-the-art information technology tools that connect its diverse, decentralized teams and provide timely, accurate information for decision makers. In addition, business professionals are assisting technical managers with planning, tracking, and forecasting resource use against an integrated master schedule that horizontally and vertically interlinks hardware elements and milestone events. Furthermore, NASA is employing a wide variety of strategies to ensure that it has the motivated and qualified staff it needs for the tasks ahead. This paper discusses how NASA's Exploration Launch Projects Office, which is responsible for delivering these new launch vehicles, integrates its resources to create an engineering business environment that promotes mission success, which is defined by replacing the Space Shuttle by 2014 and returning to the Moon by 2020.

Kidd, Luanne↗

Long-Term International Space Station (ISS) Risk Reduction Activities

As the assembly of the ISS nears completion, it is worthwhile to step back and review some of the actions pursued by the Program in recent years to reduce risk and enhance the safety and health of ISS crewmembers, visitors, and space flight participants. While the initial ISS requirements and design were intended to provide the best practicable levels of safety, it is always possible to further reduce risk given the determination, commitment, and resources to do so. The following is a summary of some of the steps taken by the ISS Program Manager, by our International Partners, by hardware and software designers, by operational specialists, and by safety personnel to continuously enhance the safety of the ISS, and to reduce risk to all crewmembers. While years of work went into the development of ISS requirements, there are many things associated with risk reduction in a Program like the ISS that can only be learned through actual operational experience. These risk reduction activities can be divided into roughly three categories: Areas that were initially noncompliant which have subsequently been brought into compliance or near compliance (i.e., Micrometeoroid and Orbital Debris [MMOD] protection, acoustics) Areas where initial design requirements were eventually considered inadequate and were subsequently augmented (i.e., Toxicity hazard level-4 materials, emergency procedures, emergency equipment, control of drag-throughs) Areas where risks were initially underestimated, and have subsequently been addressed through additional mitigation (i.e., Extravehicular Activity [EVA] sharp edges, plasma shock hazards). Due to the hard work and cooperation of many parties working together across the span of more than a decade, the ISS is now a safer and healthier environment for our crew, in many cases exceeding the risk reduction targets inherent in the intent of the original design. It will provide a safe and stable platform for utilization and discovery for years to come.

Forroci, Michael P.↗

Pathways of Understanding: the Interactions of Humanity and Global Environmental Change

How humans, interacting within social systems, affect and are affected by global change is explored. Recognizing the impact human activities have on the environment and responding to the need to document the interactions among human activities, the Consortium for International Earth Science Information Network (CIESIN) commissioned a group of 12 scientists to develop a framework illustrating the key human systems that contribute to global change. This framework, called the Social Process Diagram, will help natural and social scientists, educators, resource managers and policy makers envision and analyze how human systems interact among themselves and with the natural system. The Social Process Diagram consists of the following blocks that constitute the Diagram's structural framework: (1) fund of knowledge and experience; (2) preferences and expectations; (3) factors of production and technology; (4) population and social structure; (5) economic systems; (6) political systems and institutions; and (7) global scale environmental processes. To demonstrate potential ways the Diagram can be used, this document includes 3 hypothetical scenarios of global change issues: global warming and sea level rise; the environmental impact of human population migration; and energy and the environment. These scenarios demonstrate the Diagram's usefulness for visualizing specific processes that might be studied to evaluate a particular global change issues. The scenario also shows that interesting and unanticipated questions may emerge as links are explored between categories on the Diagram.

Jacobson, Harold K.↗

Use of New Communication Technologies to Change NASA Safety Culture: Incorporating the Use of Blogs as a Fundamental Communications Tool

The purpose of this paper is to explore an innovative approach to culture change at NASA that goes beyond reorganizations, management training, and a renewed emphasis on safety. Over the last five years, a technological social revolution has been emerging from the internet. Blogs (aka web logs) are transforming traditional communication and information sharing outlets away from established information sources such as the media. The Blogosphere has grown from zero blogs in 1999 to approximately 4.5 million as of November 2004 and is expected to double in 2005. Blogs have demonstrated incredible effectiveness and efficiency with regards to affecting major military and political events. Consequently, NASA should embrace the new information paradigm presented by blogging. NASA can derive exceptional benefits from the new technology as follows: 1) Personal blogs can overcome the silent safety culture by giving voice to concerns or questions that are not well understood or seemingly inconsequential to the NASA community at-large without the pressure of formally raising a potential false alarm. Since blogs can be open to Agency-wide participation, an incredible amount of resources from an extensive pool of experience can focus on a single issue, concern, or problem and quickly vetted, discussed and assessed for feasibility, significance, and criticality. The speed for which this could be obtained cannot be matched through any other process or procedure currently in use. 2) Through official NASA established blogs, lessons learned can be a real-time two way process that is formed and implemented from the ground level. Data mining of official NASA blogs and personal blogs of NASA personnel can identify hot button issues and concerns to senior management. 3) NASA blogs could function as a natural ombudsman for the NASA community. Through the recognition of issues being voiced by the community and taking a proactive stance on those issues, credibility within NASA Management can be restored. For NASA to harness the capabilities of blogs, NASA must develop an Agency-wide policy on blogging to encourage use and provide guidance. This policy should describe basic rules of conduct and content as well as a policy of non-retribution and/or anonymity. The Agency must provide sever space within their firewalls, provide appropriate software tools, and promote blogs in newsletters and official websites. By embracing the use of blogs, a potential pool of 19,000 experts could be available to address each posted safety issue, concern, problem, or question. Blogs could result in real NASA culture change.

Huls, Dale thomas↗

Agile Approach to Assuring the Safety-Critical Embedded Software for NASA's Orion Spacecraft

Human-rated missions like those in NASA's Orion Program continue to grow in complexity. The role of software in achieving ambitious mission objectives has expanded dramatically in the last few decades. Assuring the safety and performance of the embedded flight software is quickly growing beyond the reach of traditional methods and resource levels. The methods used to build these software-dominant systems evolve in an on-going attempt to keep pace with the scope of our ambitions. Agile software development is now commonplace. The long timelines and large batches of work associated with traditional methods are being replaced by rapid delivery of small increments _ as system capabilities are realized in waves. Assurance of these critical software capabilities must therefore conquer an ever-expanding frontier of challenges, and do so with an approach matched to the evolving development methods. This paper recounts the journey of the Orion Independent Verification and Validation (IV&V) team as we addressed this dynamic environment. Widening our aperture to encompass a dramatically larger mission scope, while adjusting our cadence to synchronize with the rapid pace of agile software development, a new approach to IV&V is emerging. This approach is characterized by a sharper focus on mission capabilities, matched with a method to dynamically _follow the risk' as the IV&V team delivers more compelling assurance data in waves. Traditional methods prevalent in IV&V tend to scope the work using artifacts of the development process as they evolve from preliminary to final versions, and the pace of delivery was synchronized with the development timelines prevalent in the waterfall lifecycle. That more static approach is out of phase with the demands of the new environment. Scoping work according to the critical capabilities of the system (rather than artifacts of development) and synchronizing with the rapid pace of agile development, we are moving toward more effective parity with the demands of the environment. We explain the concrete steps we took, the principles that motivated our choices, and the results we have achieved to date.

Capability based assurance↗

Cleared for Launch - Lessons Learned from the OSIRIS-REx System Requirements Verification Program

Requirements verification of a large flight system is a challenge. It is especially challenging for engineers taking on their first role in space systems engineering. This paper describes our approach to verification of the Origins, Spectral Interpretation, Resource Identification, Security-Regolith Explorer (OSIRIS-REx) system requirements. It also captures lessons learned along the way from developing systems engineers embroiled in this process. We begin with an overview of the mission and science objectives as well as the project requirements verification program strategy. A description of the requirements flow down is presented including our implementation for managing the thousands of program and element level requirements and associated verification data. We discuss both successes and methods to improve the managing of this data across multiple organizational interfaces. Our approach to verifying system requirements at multiple levels of assembly is presented using examples from our work at instrument, spacecraft, and ground segment levels. We include a discussion of system end-to-end testing limitations and their impacts to the verification program. Finally, we describe lessons learned that are applicable to all emerging space systems engineers using our unique perspectives across multiple organizations of a large NASA program.

Requirements Verification↗