SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

All sources NASA NTRS DOE OSTI

NASA NTRS1988

Data diversity: An approach to software fault tolerance

Data diversity is described, and the results of a pilot study are presented. The regions of the input space that cause failure for certain experimental programs are discussed, and data reexpression, the way in which alternate input data sets can be obtained, is examined. A description is given of the retry block which is the data-diverse equivalent of the recovery block, and a model of the retry block, together with some empirical results is presented. N-copy programming which is the data-diverse equivalent of N-version programming is considered, and a simple model and some empirical results are also given.

Ammann, Paul E.↗

NASA NTRS1989

Periodic gaits for the CMU ambler

The configuration of the Carnegie Mellon University Ambler, a six legged autonomous walking vehicle for exploring Mars, enables the recovery of a trailing leg past the leading leg to reduce the energy expenditure in terrain interactions. Gaits developed for this unprecedented configuration are described. A stability criterion was developed which ensures stability of the vehicle in the event of failure of any one of the supporting legs. Periodic gaits developed for the Ambler utilize the Ambler's unique abilities, and continuously satisfy the stability criterion.

Mahalingam, Swaminathan↗

NASA NTRS1991

Model reduction by trimming for a class of semi-Markov reliability models and the corresponding error bound

Semi-Markov processes have proved to be an effective and convenient tool to construct models of systems that achieve reliability by redundancy and reconfiguration. These models are able to depict complex system architectures and to capture the dynamics of fault arrival and system recovery. A disadvantage of this approach is that the models can be extremely large, which poses both a model and a computational problem. Techniques are needed to reduce the model size. Because these systems are used in critical applications where failure can be expensive, there must be an analytically derived bound for the error produced by the model reduction technique. A model reduction technique called trimming is presented that can be applied to a popular class of systems. Automatic model generation programs were written to help the reliability analyst produce models of complex systems. This method, trimming, is easy to implement and the error bound easy to compute. Hence, the method lends itself to inclusion in an automatic model generator.

White, Allan L.↗

DOE OSTI2022

Operation Upshot-Knothole

A thundering boom and sheet of fire announced a dramatic, once in a lifetime event – the firing of a nuclear projectile from a 280 mm cannon. Travelling seven miles downrange, the projectile detonated 500 feet over the Nevada Test Site’s Frenchman Flat with a force of fifteen kilotons. Although the test was successful, the massive cannon, designed for tactical battlefield use, had a critical flaw. It was too large and cumbersome for mobile combat. The cannon test, codenamed Grable, was part of Operation Upshot-Knothole, the fourth test series conducted in Nevada. Beginning with the Annie test on March 17, 1953, and concluding with the Climax test on June 4th, the Operation consisted of three airdrops, seven tower detonations, and the one artillery shot. As with previous Nevada tests, the demarcation between the weapon development series, Upshot, and the DOD effects tests, Knothole, was blurred. All eleven tests generated data in support of weapon development as well as tactical battlefield applications. During Upshot-Knothole, the University of California Radiation Laboratory (UCRL), conducted its first ever tests, Ruth and Ray. Although neither test was successful, these failures, along with another a year later at Operation Castle, provided the new laboratory with design data leading to future successful tests. The Federal Civil Defense Administration (FCDA) participated in a test series with the general goal of preparing for societal recovery from a nuclear attack. Known as Operation Doorstep, the FCDA’s experiments evaluated the effects of a nuclear attack on food supplies, housing and urban structures, and even a copse of trees transplanted from nearby Mt. Charleston. A contingent of the press witnessed test Annie from an outcropping of rocks, subsequently named News Nob. The presence of the news media, along with the FCDA’s participation, marked a fundamental change in the Nevada test program - a change that that now included the general populace, whose survival was, of course, the rationale for testing. The Department of Defense continued and expanded its Desert Rock exercises of troop exercises, helicopter operations, and evaluation of blast damage to military aircraft, tanks, and guns. Annie, Nancy, Badger, Simon, Encore, and Grable involved larger numbers of personnel than the other five shots. Below is an edited and condensed account of Desert Rock activities compiled by the Defense Threat Reduction Agency.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

NASA NTRS1999

Predictions of Substorms and Intensifications Following Northward Turnings of the IMF

Substorms are often observed to occur at the end of intervals of Southward interplanetary magnetic field (IMF), i.e. following the northward turning. Despite the significant correlation between northward turning and substorms, no direct causal relationship between northward turnings and substorms has been demonstrated. Assuming such a causal relationship, we predict that substorms will occur within a particular interval following the observation of a northward turning in the IMF. We observe 16 northward turnings following steady, southward IMF in data taken by the WIND spacecraft magnetic field instrument (MFI). To ensure that the northward turning was observed at the magnetosphere, we require that the northward turning also be observed by instruments on either one of Geotail or IMP-8 while the separation of the second spacecraft from WIND was more that 10 R(sub E). These two-spacecraft observations also allow us to predict more accurately the arrival time of the northward turning at the Earth. Of the predictions substorms, 10 predictions were clearly successful to within +/- 12 min. Five predictions failed, but the failures reveal clear shortcomings in the criteria for a northward turning that we correct. The failures were caused by an increase in the absolute value of B(sub YGSM) simultaneous with the northward turning in 3 cases, and a weak southward IMF preceding the northward turning in 2 cases. The final northward turning arrived in the recovery phase of an ongoing substorm, and resulted in unusual auroral activity. The implication of the predictability of substorms following sharp northward turnings is that the postulated causal relationship between northward turnings and substorm onset exists. The effect of increases in the absolute value of B(sub YGSM) to negate the triggering ability of northward turnings suggests that the triggering mechanism involves sharp reductions in the magnetospheric convection electric field.

Blanchard, G. T.↗

NASA NTRS1991

Software reliability through fault-avoidance and fault-tolerance

Twenty independently developed but functionally equivalent software versions were used to investigate and compare empirically some properties of N-version programming, Recovery Block, and Consensus Recovery Block, using the majority and consensus voting algorithms. This was also compared with another hybrid fault-tolerant scheme called Acceptance Voting, using dynamic versions of consensus and majority voting. Consensus voting provides adaptation of the voting strategy to varying component reliability, failure correlation, and output space characteristics. Since failure correlation among versions effectively reduces the cardinality of the space in which the voter make decisions, consensus voting is usually preferable to simple majority voting in any fault-tolerant system. When versions have considerably different reliabilities, the version with the best reliability will perform better than any of the fault-tolerant techniques.

Vouk, Mladen A.↗

NASA NTRS2010

Modeling and Performance Considerations for Automated Fault Isolation in Complex Systems

The purpose of this paper is to document the modeling considerations and performance metrics that were examined in the development of a large-scale Fault Detection, Isolation and Recovery (FDIR) system. The FDIR system is envisioned to perform health management functions for both a launch vehicle and the ground systems that support the vehicle during checkout and launch countdown by using suite of complimentary software tools that alert operators to anomalies and failures in real-time. The FDIR team members developed a set of operational requirements for the models that would be used for fault isolation and worked closely with the vendor of the software tools selected for fault isolation to ensure that the software was able to meet the requirements. Once the requirements were established, example models of sufficient complexity were used to test the performance of the software. The results of the performance testing demonstrated the need for enhancements to the software in order to meet the demands of the full-scale ground and vehicle FDIR system. The paper highlights the importance of the development of operational requirements and preliminary performance testing as a strategy for identifying deficiencies in highly scalable systems and rectifying those deficiencies before they imperil the success of the project

Ferrell, Bob↗

NASA NTRS2010

Functional Fault Modeling Conventions and Practices for Real-Time Fault Isolation

The purpose of this paper is to present the conventions, best practices, and processes that were established based on the prototype development of a Functional Fault Model (FFM) for a Cryogenic System that would be used for real-time Fault Isolation in a Fault Detection, Isolation, and Recovery (FDIR) system. The FDIR system is envisioned to perform health management functions for both a launch vehicle and the ground systems that support the vehicle during checkout and launch countdown by using a suite of complimentary software tools that alert operators to anomalies and failures in real-time. The FFMs were created offline but would eventually be used by a real-time reasoner to isolate faults in a Cryogenic System. Through their development and review, a set of modeling conventions and best practices were established. The prototype FFM development also provided a pathfinder for future FFM development processes. This paper documents the rationale and considerations for robust FFMs that can easily be transitioned to a real-time operating environment.

Ferrell, Bob↗

DOE OSTI2024

Low-velocity impact resistance and failure characteristics of all thermoplastic woven polymer-fiber-reinforced plastic composites

This study addresses the impact performances of recyclable composites made of all thermoplastic polymer-fiber-reinforced plastics (PFRPs), where the reinforcing fibers and matrix are made of thermoplastic polymers. Three woven PFRPs systems were evaluated, including polypropylene fibers, polypropylene matrix, and high-density polyethylene matrix. In low-velocity impact scenario with an impactor speed of less than 6 m/s, our results demonstrate the energy absorption capabilities of the flat laminate PFRPs compared to woven carbon fiber-reinforced plastics (CFRPs) and aluminum alloy 5052. For the systems studied, the PFRPs can reach the specific energy absorption 89% to 115% of the CFRPs. Even compared with the aluminum alloy 5052, the PFRPs can reach up to 97%. We investigate the failure morphologies of the PFRPs using X-ray µCT scans. They reveal the PFRPs’ unique ductile failure morphologies compared to common CFRPs. In addition, we heal the perforated region in the PFRPs by applying the manufacturing process identical to the initial curing process. The healed panels are perforated again, and they recovered 30% to 38% of their original specific energy absorption, a recovery not achievable with CFRPs. This study provides valuable experimental results, and concrete insights into the potential applications of recyclable PFRPs in various engineering fields. It emphasizes their excellent energy-absorbing capability and repairability.

CFRPs↗

NASA NTRS1991

Redundancy management for efficient fault recovery in NASA's distributed computing system

The management of redundancy in computer systems was studied and guidelines were provided for the development of NASA's fault-tolerant distributed systems. Fault recovery and reconfiguration mechanisms were examined. A theoretical foundation was laid for redundancy management by efficient reconfiguration methods and algorithmic diversity. Algorithms were developed to optimize the resources for embedding of computational graphs of tasks in the system architecture and reconfiguration of these tasks after a failure has occurred. The computational structure represented by a path and the complete binary tree was considered and the mesh and hypercube architectures were targeted for their embeddings. The innovative concept of Hybrid Algorithm Technique was introduced. This new technique provides a mechanism for obtaining fault tolerance while exhibiting improved performance.

Malek, Miroslaw↗

NASA NTRS2007

Emergency Flight Control of a Twin-Jet Commercial Aircraft using Manual Throttle Manipulation

The Department of Homeland Security (DHS) created the PCAR (Propulsion-Controlled Aircraft Recovery) project in 2005 to mitigate the ManPADS (man-portable air defense systems) threat to the commercial aircraft fleet with near-term, low-cost proven technology. Such an attack could potentially cause a major FCS (flight control system) malfunction or other critical system failure onboard the aircraft, despite the extreme reliability of current systems. For the situations in which nominal flight controls are lost or degraded, engine thrust may be the only remaining means for emergency flight control [ref 1]. A computer-controlled thrust system, known as propulsion-controlled aircraft (PCA), was developed in the mid 1990s with NASA, McDonnell Douglas and Honeywell. PCA's major accomplishment was a demonstration of an automatic landing capability using only engine thrust [ref 11. Despite these promising results, no production aircraft have been equipped with a PCA system, due primarily to the modifications required for implementation. A minimally invasive option is TOC (throttles-only control), which uses the same control principles as PCA, but requires absolutely no hardware, software or other aircraft modifications. TOC is pure piloting technique, and has historically been utilized several times by flight crews, both military and civilian, in emergency situations stemming from a loss of conventional control. Since the 1990s, engineers at NASA Dryden Flight Research Center (DFRC) have studied TOC, in both simulation and flight, for emergency flight control with test pilots in numerous configurations. In general, it was shown that TOC was effective on certain aircraft for making a survivable landing. DHS sponsored both NASA Dryden Flight Research Center (Edwards, CA) and United Airlines (Denver, Colorado) to conduct a flight and simulation study of the TOC characteristics of a twin-jet commercial transport, and assess the ability of a crew to control an aircraft down to a survivable runway landing using TOC. The PCAR project objective was a set of pilot procedures for operation of a specific aircraft without hydraulics that (a) have been validated in both simulation and flight by relevant personnel, and (b) mesh well with existing commercial operations, maintenance, and training at a minimum cost. As a result of this study, a procedure has been developed to assist a crew in making a survivable landing using TOC. In a simulation environment, line pilots with little or no previous TOC experience performed survivable runway landings after a few practice TOC approaches. In-flight evaluations put line pilots in a simulated emergency situation where TOC was used to recover the aircraft, maneuver to a landing site, and perform an approach down to 200 feet AGL. The results of this research, including pilot observations, procedure comments, recommendations, future work and lessons learned, will he discussed. Flight data and video footage of TOC approaches may also be shown.

Cole, Jennifer H.↗

NASA NTRS1987

U.S. Space Shuttle Solid Rocket Booster - Return to flight

The Space Shuttle Solid Rocket Booster (SRB) redesign program instituted in the wake of the Challenger accident encompassed a design requirements review, a failure modes effect analysis/critical items list determination, a hazards analysis, an operational maintenance and requirements specification study, the definition of operational maintenance instructions and launch commit criteria, and design certification and flight readiness reviews. Attention is presently given to the SRB's thrust vector control, separation, and recovery functions, as well as its electrical and instrumentation systems and its case assembly and hardware interfaces.

Coates, K. D.↗

NASA NTRS1992

On-orbit deployment anamolies: What can be done?

Modern communications satellites rely heavily upon deployable appendage (i.e., solar arrays, communications antennas, etc.) to perform vital functions that enable the spacecraft to effectively conduct mission objectives. Communications and telemetry antennas provide the radio-frequency link between the spacecraft and the earth ground station, permitting data to be transmitted and received from the satellite. Solar arrays serve as the principle source of electrical energy to the satellite, and re-charge internal batteries during operation. However, since satellites cannot carry back-up systems, if a solar array fails to deploy, the mission is lost. The subject of on-orbit anomalies related to the deployment of spacecraft appendage, and possible causes of such failures are examined. Topics discussed include mechanical launch loading, on-orbit thermal and solar concerns, reliability of spacecraft pyrotechnics, and practical limitations of ground-based deployment testing. Of particular significance, the article features an in-depth look at the lessons learned from the successful recovery of the Telesat Canada Anik-E2 satellite in 1991.

Freeman, Michael↗

NASA NTRS2020

First Operation of TES Microcalorimeters in Space with the Micro-X Sounding Rocket

Micro-X is a sounding rocket-borne instrument that uses a microcalorimeter array to perform high-resolution X-ray spectroscopy. This instrument flew for the first time on July 22nd, 2018, from the White Sands Missile Range, USA. This flight marks the first successful operation of a transition-edge sensor array and its time-division multiplexing readout system in space. This launch was dedicated to the observation of the supernova remnant Cassiopeia A. A failure in the attitude control system prevented the rocket from pointing and led to no time on target. The onboard calibration source provided X-rays in flight, and it is used to compare detector performance during preflight integration, flight, and after the successful post-flight recovery. This calibration data demonstrate the capabilities of the detector in a space environment as well as its potential for future flight.

TES↗

NASA NTRS1985

Elastic-plastic deformation of a metal-matrix composite coupon with a center slot

A comprehensive experimental analysis of deformations of the surface of a metal-matrix specimen is reported. The specimen is a 6-ply 0 + or - 45 sub s boron-aluminum tensile coupon with a central slot. Moire interferometry is used for high-sensitivity whole-field measurements of in-plane displacements. Normal and shear strains are calculated from displacement gradients. Displacement fields are analyzed at various load levels from 15% to 95% of the failure load. Deformations of the boron fibers could be distinguished from those of the matrix. Highly localized plastic slip zones occur tangent to the ends of the slot. Shear strains and concurrent transverse compressive strains in the slip zones reach approximately 10% and 1%, respectively. Upon unloading, elastic recovery in surrounding regions causes a reverse plastic shear strain in the slip zone of about 4%. Longitudinal normal strains on the unslotted ligament peak at the slot boundary at about 1% strain. The strain concentration factor at the end of the slot decreases with load level and the advance of plasticity.

Post, D.↗

NASA NTRS1984

Fault-tolerant software for the FIMP

The work reported here provides protection against software failures in the task dispatcher of the FTMP, a particularly critical portion of the system software. Faults in other system modules and application programs can be handled by similar techniques but are not covered in this effort. Goals of the work reported here are: (1) to develop provisions in the software design that will detect and mitigate software failures in the dispatcher portion of the FTMP Executive and, (2) to propose the implementation of specific software reliability measures in other parts of the system. Beyond the specific support to the FTMP project, the work reported here represents a considerable advance in the practical application of the recovery block methodology for fault tolerant software design.

Hecht, H.↗

NASA NTRS1989

High performance linear-quadratic and H-infinity designs for a 'supermaneuverable' aircraft

Recent efforts by the National Aeronautics and Space Administration Langley Research Center have focused on expanding the flight envelope of the F/A-18 aircraft. Of particular concern has been the low speed, high angle-of-attack regime over which the conventional aerodynamic controls of the F/A-18 lose their effectiveness. In order to address this problem the F18 high alpha research vehicle was developed. This aircraft is essentially a modified F/A-18 which possesses thrust vectoring capabilities and hence increased maneuverability in this flight regime. The linear-quadratic-Gaussian with loop-transfer-recovery and H(infinity) design methodologies are used to design high performance controllers for the F18 at an operating point within the expanded envelope. In addition, how the control redundancy of the F18 can be used to maintain nominal performance, as well as nominal stability, in situations where failures occur, is shown.

Voulgaris, Petros↗

NASA NTRS1991

Extended behavioral decomposition for estimating ultrahigh reliability

Limitations of some analytic techniques in approximating the reliability of life-critical electronic systems are discussed, and a framework for the specification of recovery and fault-handling submodels is suggested. The framework makes full use of the instantaneous jump theorem by viewing the collection of interfering, premature exits from any fault handling and recovery submodel as defining a new, competing process submodel. This approach allows a greater flexibility in submodel representation, since submodels may contain arbitrary entrance arcs, exit arcs, and competing, interfering transitions with arbitrary destinations. Since the effects of near-coincident faults need not be represented as system failure events, the reliability estimates produced need not be unduly conservative. Comparisons on small models, where exact results can be computed, show substantial improvement in accuracy over earlier techniques. Implementation of the technique in an X-windows-based system, XHARP, is described.

Geist, Robert↗