Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Parts Assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

The NASA Radiation Hardness Assurance (RHA) Process Standard

This paper presents status on the upcoming NASA Agency-level RHA Process Standard. Based on recommendations provided by the NASA Engineering and Safety Center (NESC), the NASA Electronic Parts and Packaging (NEPP) Program has led development of an agency-level standard for space flight avionics and electronics RHA. The standard introduces a novel RHA taxonomy and prescribes the process required by NASA programs and projects to baseline their RHA programs consistent with the MEAL (Mission, Environment, Application, and Lifetime) criteria including the risk tolerance posture. The standard also provides requirements for the RHA schedule integration in the program or project lifecycle and requirements for data deliverables content. Additional non-prescriptive technical content is provided in the standard appendices to guide development of RHA programs for NASA missions.

Avionics↗

Intelligent Monitoring Systems and Advanced Well Integrity and Mitigation

Long-term seismic monitoring of carbon capture and storage projects is needed to verify that the injected gas is safely stored in the subsurface until permanence can be assured. Conventional surface seismic monitoring techniques are usually expensive, require highly invasive surface operations, and need significant time investments on the part of personnel for both the field effort and processing the acquired data. For these reasons, permanent reservoir monitoring technologies are preferred, as they can offer a cost-effective solution for long-term monitoring. As part of the monitoring program of the Archer Daniels Midland’s large-scale injection of CO 2 in Decatur, Illinois, USA, a continuous seismic monitoring array was installed using a combination of surface orbital vibrator (SOV) sources and fiber-optic cables for distributed acoustic sensing (DAS) acquisition with the objective to build a continuous monitoring array. The aim of the presented project was to build a monitoring array and platform that integrates real-time seismic data with conventional data streams and provides continuous data analysis using dynamic computational models to deliver a comprehensive real-time assessment of subsurface conditions. It is in this context that the Intelligent Monitoring Systems and Advanced Well Integrity and Mitigation project was proposed with the objective to develop an integrated architecture that utilizes a permanent seismic monitoring network, combines the real-time geophysical and process data with reservoir flow and geomechanical models to create a comprehensive monitoring, visualization, and control system that delivers critical information for process surveillance and optimization.

54 ENVIRONMENTAL SCIENCES↗

Human Rating the Orion Parachute System

Human rating begins with design. Converging on the requirements and identifying the risks as early as possible in the design process is essential. Understanding of the interaction between the recovery system and the spacecraft will in large part dictate the achievable reliability of the final design. Component and complete system full-scale flight testing is critical to assure a realistic evaluation of the performance and reliability of the parachute system. However, because testing is so often difficult and expensive, comprehensive analysis of test results and correlation to accurate modeling completes the human rating process. The National Aeronautics and Space Administration (NASA) Orion program uses parachutes to stabilize and decelerate the Crew Exploration Vehicle (CEV) spacecraft during subsonic flight in order to deliver a safe water landing. This paper describes the approach that CEV Parachute Assembly System (CPAS) will take to human rate the parachute recovery system for the CEV.

Machin, Ricardo A.↗

ASIC/FPGA Trust Assessment Framework

NASA Electronic Parts and Packaging (NEPP) is developing a process to be employed in critical applications. The framework assesses levels of Trust and assurance in microelectronic systems. The process is being created with participation from a variety of organizations. We present a synopsis of the framework that includes contributions from The Aerospace Corporation.

Application specific integrated circuit (ASIC)↗

Government Microelectronics Assessment for Trust (GOMAT)

NASA Electronic Parts and Packaging (NEPP) is developing a process to be employed in critical applications. The framework assesses levels of trust and assurance in microelectronic systems. The process is being created with participation from a variety of organizations. We present a synopsis of the framework that includes contributions from The Aerospace Corporation.

Assurance↗

Off-Nominal Planning for the Cryogenic Vacuum Test of the JWST Optical Telescope Element/Integrated Science Instrument Module at JSC

The cryogenic thermal vacuum/thermal balance test of the James Webb Space Telescope (JWST) combined Optical Telescope Element (OTE)/Integrated Science Instrument Module (ISIM), known as the OTIS, at the Johnson Space Center (JSC) Chamber A in 2017 was likely the most complex test ever performed by NASA for an unmanned mission. The test of the combined flight Optical Telescope and ISIM elements was prefaced by years of modifications to chamber facilities, and included three extensive precursor tests of non-flight and flight hardware to establish safe and optimal test operational procedures. One critical part of the test preparation was planning for off-nominal events that could arise, including appropriate responses. In some cases, assurance of personnel and payload safety required modification of original test hardware and procedures which had to be validated before the final test could begin. This planning proved especially prescient for the OTIS test, as Hurricane Harvey struck the Houston area during the test in August 2017, and consequences for the precious payload could have been severe. This paper describes the extent of the thermal off-nominal planning undertaken for the OTIS test, including including safing for hurricanes, and some real-life effects of Hurricane Harvey on the test conduct. Documentation of the consequences and mitigations for these events are discussed. The importance of off-nominal planning for future thermal vacuum/thermal balance tests is illustrated.

Off-Nominal Planning↗

Fibre-optic based DAS technology for Long-term Seismic Monitoring of Carbon Capture and Storage Projects

Long-term seismic monitoring of carbon capture and storage projects (CCS) is needed to verify that the injected gas is safely stored in the subsurface until permanence can be assured. Conventional surface seismic monitoring techniques are usually expensive, require highly invasive surface operations, and need significant time investments on the part of personnel for both the field effort and processing the acquired data. For these reasons, permanent reservoir monitoring (PRM) technologies are preferred, as they can offer a cost-effective solution for long-term monitoring. In this context, we have developed and trialed the use of distributed acoustic sensing (DAS) coupled to permanent rotary sources, called surface orbital vibrators (SOV), with the objective to build a continuous monitoring array for CCS projects.

47 OTHER INSTRUMENTATION↗

Evaluation of Minimum Detectable Activities for Stack Sample Analyses

The Rad-NESHAP program takes samples at major point sources to track how much of select nuclides are being emitted out of the stack. Samples are taken at the site where the radiological operations are being performed. The samples are then sent to analytical laboratories for analysis to determine what nuclides exist in the sample. However, due to the sensitivity of the instruments, false positives are often reported. To reduce the number of false positives, the results reported from the analytical labs are compared to set detection limits. Anything below the set detection limit is considered part of the background while anything above the limit is considered a positive hit. Therefore, the detection limit must be set low enough that any false negatives do not result in a significant dose missed at the end of the year but high enough that there are not enough false positives to skew the annual dose being reported. All detection limits listed in this section for the analyses below were designed to meet the stated equivalent emissions rate and subsequent off-site doses. These minimum detectable activities (MDAs) were developed in the 1990s and documented in the memo cited for each analysis below. These limits and memos are all currently referenced in the Quality Assurance Project Plan (QAPP) for the Rad-NESHAP Compliance Task, which is being updated to a Project Implementation Plan (PIP) concurrently with this document. As part of this update process, the original MDAs defined in this section needed to be verified that they were still conservative and meet the off-site dose levels stated.

2019 MDA↗

R-Gentic-SEAM Interface and Harmonization

SEAM is a useful resource for model-based radiation hardness assurance but can be technically challenging for new users. R-Gentic is a NASA developed website that aims at assisting engineers better understand the radiation concerns in their EEE parts. This work aims at providing an update on an ongoing effort to interface R-Gentic with SEAM. Once integration is completed, R-Gentic can be used to seed new SEAM projects, making project creation easier and more accessible.

Procedures↗

Jet pump-drive system for heat removal

The invention does away with the necessity of moving parts such as a check valve in a nuclear reactor cooling system. Instead, a jet pump, in combination with a TEMP, is employed to assure safe cooling of a nuclear reactor after shutdown. A main flow exists for a reactor coolant. A point of withdrawal is provided for a secondary flow. A TEMP, responsive to the heat from said coolant in the secondary flow path, automatically pumps said withdrawn coolant to a higher pressure and thus higher velocity compared to the main flow. The high velocity coolant is applied as a driver flow for the jet pump which has a main flow chamber located in the main flow circulation pump. Upon nuclear shutdown and loss of power for the main reactor pumping system, the TEMP/jet pump combination continues to boost the coolant flow in the direction it is already circulating. During the decay time for the nuclear reactor, the jet pump keeps running until the coolant temperature drops to a lower and safe temperature where the heat is no longer a problem. At this lower temperature, the TEMP/jet pump combination ceases its circulation boosting operation. When the nuclear reactor is restarted and the coolant again exceeds the lower temperature setting, the TEMP/jet pump automatically resumes operation. The TEMP/jet pump combination is thus automatic, self-regulating and provides an emergency pumping system free of moving parts.

French, James R.↗

Formal Foundations for Hierarchical Safety Cases

Safety cases are increasingly being required in many safety-critical domains to assure, using structured argumentation and evidence, that a system is acceptably safe. However, comprehensive system-wide safety arguments present appreciable challenges to develop, understand, evaluate, and manage, partly due to the volume of information that they aggregate, such as the results of hazard analysis, requirements analysis, testing, formal verification, and other engineering activities. Previously, we have proposed hierarchical safety cases, hicases, to aid the comprehension of safety case argument structures. In this paper, we build on a formal notion of safety case to formalise the use of hierarchy as a structuring technique, and show that hicases satisfy several desirable properties. Our aim is to provide a formal, theoretical foundation for safety cases. In particular, we believe that tools for high assurance systems should be granted similar assurance to the systems to which they are applied. To this end, we formally specify and prove the correctness of key operations for constructing and managing hicases, which gives the specification for implementing hicases in AdvoCATE, our toolset for safety case automation. We motivate and explain the theory with the help of a simple running example, extracted from a real safety case and developed using AdvoCATE.

Hierarchy↗

Software Assurance of PLCs Training Course

Being heavily visually-oriented, I am a firm believer in communication and conveying emotions through the art of color, motion, and transformation. A four-part online training course was created in PowerPoint and needed to be translated over into a Flash format. Issues with the Powerpoint were that the size of the files caused noticeable delays when placed online, there were compatibility issues, and from a composition and design perspective, color schemes and layout left much to be desired. High contrast, pixilated yellow text spiraling and flying on to a background of overly rich hues of blue with cheesy gradient patterns was just not appeasing to my eye, along with the menu directory buttons located at the top resembling blue pills of NyQuil on top of a stale gray border that had nothing to do with the background. The course itself is extremely broad and verbose, and will get monotonous very soon after starting. Moving about the course was very cumbersome as well. efficient by drastically reducing the size (The file size of all four parts of the actual course combined will ultimately not even be a fifth as big as one part of the original PowerPoint alone!); along with that, the course was made to be more interactive and user-friendly, as well as pleasing to the eye. Upon being viewed by fellow co-workers, nothing but positive feedback has been received. When beginning the presentation, onscreen comes a 3' 2" chubby, balding professor, who is a master in his knowledge of Programmable Logic Controllers (PLCs). He introduces himself and presents all of his vast knowledge over PLCs in a fun and innovative manner, making it much easier to acquire the information presented. A Scene Selection feature has been added making it a lot easier to jump from part to part and the back and forth arrows are much easier to utilize, and they are both less obtrusive than its PowerPoint predecessor. The user can also go at their pace, as the presentation pauses after at the end of each statement. computer animation, it was.. .still. ..animation done on a computer. I was able to incorporate my artistic talent and intuitive creativity into it, one thing I am very proficient at doing when it comes to what I do and what I will do in my profession as an artist/computer animator. At first, I felt that there was no place for an artist within a faculty of scientists, engineers, chemists, mathematicians, and programmers, but I managed to fit in quite successfully. My task was to convert the course into a Flash format, which would make it much more My project surprisingly somewhat dealt with my field of interest-though it was not

Threatt, Jamarr↗

Assured Vehicle Automation 1 Sim - Results Outbrief

In early 2022, the Human Autonomy Teaming Lab (NASA Ames Research Center) conducted a manned, human-in-the-loop (HITL) simulation. This part-task HITL began the lab’s Hazard Perception and Avoidance (HPA) technical work under NASA’s Advanced Air Mobility (AAM), Automated Flight and Contingency Management (AFCM) Sub-Project. The results of that sim guided the objectives of the current study, which were to examine pilots’ use of the Airborne Collision Avoidance System (ACAS) rotorcraft variant (Xr) v2 in multiple phases of flight with two separate Xr Modes, fully leverage Xr v2 features (e.g., use radar altimeter data to inform low altitude Resolution Advisory [RA] behavior, utilize the ability to designate “terminal-area intruders,” and display airspeed-based Detect and Avoid [DAA] guidance), emulate a “Traffic Advisory” (TA), and present Xr in a higher-fidelity environment. Therefore, this study was conducted in the Vertical Motion Simulator, and the variables included Phase of Flight (En-route, Hover, and Approach) as well as ACAS Xr Mode (TA/RA and DAA). The data collected included response times, losses of well clear, and maneuver sizes and durations as well as subjective ratings like acceptability and usability. Additional details and future anticipations are also discussed.

air taxis↗

The ATS F&G systems reliability program.

Assurance of reliability, quality, and proper testing requires a large coordinating effort and a means for connecting the various areas involved. All parts used on the spacecraft are required to meet strict specifications and consequently must be approved by the systems reliability manager. The parts program has access to a computer data bank into which all information concerning nonstandard parts approval requests has been stored. Through the data bank, the system collects and distributes timely information concerning quality and reliability to all departments that may be concerned.

Doyle, H.↗

Weld-Bead Profilometer Rejects Optical Noise

Optoelectronic sensor measures profile of weld seam or weld bead along line perpendicular to seam. Illuminated by fan of laser light. Image of line digitized and converted to profile of height or depth versus transverse position. Intended to be part of highly automated welding system, used in automatic tracking of seam or automatic profiling of weld bead for immediate evaluation and assurance of quality during welding process. Requires little maintenance other than cleaning glass windows protecting laser and camera.

Kennedy, Larry Z.↗

FUELEAP Model-Based System Safety Analysis

NASA researchers, in a partnership with Boeing, are investigating a fuel-cell powered variant of the X-57 “Maxwell” Mod-II electric propulsion aircraft, which is itself derived from a stock Tecnam P2006T. The “Fostering Ultra-Efficient Low-Emitting Aviation Power” (FUELEAP) project will replace the X-57 power subsystem with a hybrid Solid-Oxide Fuel Cell (SOFC) system to increase the potential range of the electric-propulsion aircraft while dramatically improving efficiency and emissions over stock internal-combustion engines. Our FUELEAP safety analysis faces two primary challenges. First, the Part 23 certificated Tecnam P2006T is undergoing significant modifications to host the hybrid electric-propulsion system, and the challenge is to assure that the safety inherent in the stock aircraft (and subsequently in X-57 Mod-II) is not compromised by changes in avionics, aircraft structural loading, weight and balance, or other considerations. Secondly, because the SOFC power system has little (if any) relevant in-service precedent, our challenge is to assure that we identify and mitigate all reasonably plausible hazards introduced by unique FUELEAP equipage. We are investigating and utilizing Model-Based Safety Analysis (MBSA) methods to help us address these FUELEAP safety challenges. We captured aircraft-level system hazard conditions using instances of a SysML hazard block via aircraft-level Functional Hazard Analysis (FHA). Then, using SysML models of the FUELEAP architecture, we related the hazard conditions to initiating system events and possible mitigations, such as design architecture modifications or operational constraints. We are continuing to define our approach to MBSA by developing a component-by-component inventory of local failure modes and tracing their possible contribution to hazard conditions. Finally, we are applying an argument-based approach to FUELEAP assurance. Through a FUELEAP “safety case,” we are providing an explicit argument for FUELEAP safety by associating assurance evidence with overarching safety claims through a structured argument.

Woodham, Kurt P.↗

A Byzantine-Fault Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

Embedded distributed systems have become an integral part of safety-critical computing applications, necessitating system designs that incorporate fault tolerant clock synchronization in order to achieve ultra-reliable assurance levels. Many efficient clock synchronization protocols do not, however, address Byzantine failures, and most protocols that do tolerate Byzantine failures do not self-stabilize. Of the Byzantine self-stabilizing clock synchronization algorithms that exist in the literature, they are based on either unjustifiably strong assumptions about initial synchrony of the nodes or on the existence of a common pulse at the nodes. The Byzantine self-stabilizing clock synchronization protocol presented here does not rely on any assumptions about the initial state of the clocks. Furthermore, there is neither a central clock nor an externally generated pulse system. The proposed protocol converges deterministically, is scalable, and self-stabilizes in a short amount of time. The convergence time is linear with respect to the self-stabilization period. Proofs of the correctness of the protocol as well as the results of formal verification efforts are reported.

Malekpour, Mahyar R.↗

A Byzantine-Fault Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

Embedded distributed systems have become an integral part of safety-critical computing applications, necessitating system designs that incorporate fault tolerant clock synchronization in order to achieve ultra-reliable assurance levels. Many efficient clock synchronization protocols do not, however, address Byzantine failures, and most protocols that do tolerate Byzantine failures do not self-stabilize. Of the Byzantine self-stabilizing clock synchronization algorithms that exist in the literature, they are based on either unjustifiably strong assumptions about initial synchrony of the nodes or on the existence of a common pulse at the nodes. The Byzantine self-stabilizing clock synchronization protocol presented here does not rely on any assumptions about the initial state of the clocks. Furthermore, there is neither a central clock nor an externally generated pulse system. The proposed protocol converges deterministically, is scalable, and self-stabilizes in a short amount of time. The convergence time is linear with respect to the self-stabilization period. Proofs of the correctness of the protocol as well as the results of formal verification efforts are reported.

Malekpour, Mahyar R.↗