Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault location”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

Security Vulnerability Profiles of Mission Critical Software: Empirical Analysis of Security Related Bug Reports

While some prior research work exists on characteristics of software faults (i.e., bugs) and failures, very little work has been published on analysis of software applications vulnerabilities. This paper aims to contribute towards filling that gap by presenting an empirical investigation of application vulnerabilities. The results are based on data extracted from issue tracking systems of two NASA missions. These data were organized in three datasets: Ground mission IVV issues, Flight mission IVV issues, and Flight mission Developers issues. In each dataset, we identified security related software bugs and classified them in specific vulnerability classes. Then, we created the security vulnerability profiles, i.e., determined where and when the security vulnerabilities were introduced and what were the dominating vulnerabilities classes. Our main findings include: (1) In IVV issues datasets the majority of vulnerabilities were code related and were introduced in the Implementation phase. (2) For all datasets, around 90 of the vulnerabilities were located in two to four subsystems. (3) Out of 21 primary classes, five dominated: Exception Management, Memory Access, Other, Risky Values, and Unused Entities. Together, they contributed from 80 to 90 of vulnerabilities in each dataset.

Goseva-Popstojanova, Katerina↗

Orchestrator Telemetry Processing Pipeline

Orchestrator is a software application infrastructure for telemetry monitoring, logging, processing, and distribution. The architecture has been applied to support operations of a variety of planetary rovers. Built in Java with the Eclipse Rich Client Platform, Orchestrator can run on most commonly used operating systems. The pipeline supports configurable parallel processing that can significantly reduce the time needed to process a large volume of data products. Processors in the pipeline implement a simple Java interface and declare their required input from upstream processors. Orchestrator is programmatically constructed by specifying a list of Java processor classes that are initiated at runtime to form the pipeline. Input dependencies are checked at runtime. Fault tolerance can be configured to attempt continuation of processing in the event of an error or failed input dependency if possible, or to abort further processing when an error is detected. This innovation also provides support for Java Message Service broadcasts of telemetry objects to clients and provides a file system and relational database logging of telemetry. Orchestrator supports remote monitoring and control of the pipeline using browser-based JMX controls and provides several integration paths for pre-compiled legacy data processors. At the time of this reporting, the Orchestrator architecture has been used by four NASA customers to build telemetry pipelines to support field operations. Example applications include high-volume stereo image capture and processing, simultaneous data monitoring and logging from multiple vehicles. Example telemetry processors used in field test operations support include vehicle position, attitude, articulation, GPS location, power, and stereo images.

Powell, Mark↗

Characterization of Aircraft Structural Damage Using Guided Wave Based Finite Element Analysis for In-Flight Structural Health Management

The development of multidisciplinary Integrated Vehicle Health Management (IVHM) tools will enable accurate detection, diagnosis and prognosis of damage under normal and adverse conditions during flight. The adverse conditions include loss of control caused by environmental factors, actuator and sensor faults or failures, and structural damage conditions. A major concern is the growth of undetected damage/cracks due to fatigue and low velocity foreign object impact that can reach a critical size during flight, resulting in loss of control of the aircraft. To avoid unstable catastrophic propagation of damage during a flight, load levels must be maintained that are below the load-carrying capacity for damaged aircraft structures. Hence, a capability is needed for accurate real-time predictions of safe load carrying capacity for aircraft structures with complex damage configurations. In the present work, a procedure is developed that uses guided wave responses to interrogate damage. As the guided wave interacts with damage, the signal attenuates in some directions and reflects in others. This results in a difference in signal magnitude as well as phase shifts between signal responses for damaged and undamaged structures. Accurate estimation of damage size and location is made by evaluating the cumulative signal responses at various pre-selected sensor locations using a genetic algorithm (GA) based optimization procedure. The damage size and location is obtained by minimizing the difference between the reference responses and the responses obtained by wave propagation finite element analysis of different representative cracks, geometries and sizes.

Seshadri, Banavara R.↗

Relaxing USOS Solar Array Constraints for Russian Vehicle Undocking

With the retirement of Space Shuttle cargo delivery capability and the ten year life extension of the International Space Station (ISS) more emphasis is being put on preservation of the service life of ISS critical components. Current restrictions on the United States Orbital Segment (USOS) Solar Array (SA) positioning during Russian Vehicle (RV) departure from ISS nadir and zenith ports cause SA to be positioned in the plume field of Service Module thrusters and lead to degradation of SAs as well as potential damage to Sun tracking Beta Gimbal Assemblies (BGA). These restrictions are imposed because of the single fault tolerant RV Motion Control System (MCS), which does not meet ISS Safety requirements for catastrophic hazards and dictates 16 degree Solar Array Rotary Joint position, which ensures that ISS and RV relative motion post separation, does lead to collision. The purpose of this paper is to describe a methodology and the analysis that was performed to determine relative motion trajectories of the ISS and separating RV for nominal and contingency cases. Analysis was performed in three phases that included ISS free drift prior to Visiting Vehicle separation, ISS and Visiting Vehicle relative motion analysis and clearance analysis. First, the ISS free drift analysis determined the worst case attitude and attitude rate excursions prior to RV separation based on a series of different configurations and mass properties. Next, the relative motion analysis calculated the separation trajectories while varying the initial conditions, such as docking mechanism performance, Visiting Vehicle MCS failure, departure port location, ISS attitude and attitude rates at the time of separation, etc. The analysis employed both orbital mechanics and rigid body rotation calculations while accounting for various atmospheric conditions and gravity gradient effects. The resulting relative motion trajectories were then used to determine the worst case separation envelopes during the clearance analysis. Analytical models were developed individually for each stage and the results were used to build initial conditions for the following stages. In addition to the analysis approach, this paper also discusses the analysis results, showing worst case relative motion envelopes, the recommendations for ISS appendage positioning and the suggested approach for future analyses.

Menkin, Evgeny↗

Integrated Power Source Grant

Traditional spacecraft power systems incorporate a solar array energy source, an energy storage element (battery), and battery charge control and bus voltage regulation electronics to provide continuous electrical power for spacecraft systems and instruments. Dedicated power conditioning components provide limited fault isolation between systems and instruments, while a centralized power-switching unit provides spacecraft load control. Battery undervoltage conditions are detected by the spacecraft processor, which removes fault conditions and non-critical loads before permanent battery damage can occur. Cost effective operation of a micro-sat constellation requires a fault tolerant spacecraft architecture that minimizes on-orbit operational costs by permitting autonomous reconfiguration in response to unexpected fault conditions. A new micro-sat power system architecture that enhances spacecraft fault tolerance and improves power system survivability by continuously managing the battery charge and discharge processes on a cell-by-cell basis has been developed. This architecture is based on the Integrated Power Source (US patent 5644207), which integrates dual junction solar cells, Lithium Ion battery cells, and processor based charge control electronics into a structural panel that can be deployed or used to form a portion of the outer shell of a micro-spacecraft. The first generation Integrated Power Source is configured as a one inch thick panel in which prismatic Lithium Ion battery cells are arranged in a 3x7 matrix (26VDC) and a 3x1 matrix (3.7VDC) to provide the required output voltages and load currents. A multi-layer structure holds the battery cells, as well as the thermal insulators that are necessary to protect the Lithium Ion battery cells from the extreme temperatures of the solar cell layer. Independent thermal radiators, located on the back of the panel, are dedicated to the solar cell array, the electronics, and the battery cell array. In deployed panel applications, these radiators maintain the battery cells in an appropriate operational temperature range.

Source record↗

Evidence for Early Extension and Pressure Drop Related to Magma Plumbing in Noctis Labyrinthus (Mars)

Noctis Labyrinthus is a complex district located between the western side of Valles Marineris’ large outflow channel and the Tharsis volcanic plateau. This region is characterized by a system of steep-walled canyons and an inter-connected network of scalloped pits that manifest in various orientations and size. The formation history of this area has been a topic of substantial discussion in the past. Previous studies have proposed a karst landscape with associated caves and water-related processes [1,2,3] a network of lava tubes [4,5], or a volcano-tectonic activity as a driving process for the formation of Noctis Labyrinthus [6,7,8,9]. However, none of these models have been confirmed or entirely accepted; although, the erosional nature of Noctis Labyrinthus is supported by the presence of channelized lava flows still visible on its floor [5]. In this work, we use MOLA and HRSC data to produce a new structural map of the region, we analyse fault systems (chronology and orientation), the relationships between faults and pit chains, and we finally propose a deformational model that can explain the sequences of events responsible about the formation of Noctis Labyrinthus.

M. El Yazidi↗

Structural Health Management of Damaged Aircraft Structures Using the Digital Twin Concept

The development of multidisciplinary integrated Structural Health Management (SHM) tools will enable accurate detection, and prognosis of damaged aircraft under normal and adverse conditions during flight. As part of the digital twin concept, methodologies are developed by using integrated multiphysics models, sensor information and input data from an in-service vehicle to mirror and predict the life of its corresponding physical twin. SHM tools are necessary for both damage diagnostics and prognostics for continued safe operation of damaged aircraft structures. The adverse conditions include loss of control caused by environmental factors, actuator and sensor faults or failures, and structural damage conditions. A major concern in these structures is the growth of undetected damage/cracks due to fatigue and low velocity foreign object impact that can reach a critical size during flight, resulting in loss of control of the aircraft. To avoid unstable, catastrophic propagation of damage during a flight, load levels must be maintained that are below a reduced load-carrying capacity for continued safe operation of an aircraft. Hence, a capability is needed for accurate real-time predictions of damage size and safe load carrying capacity for structures with complex damage configurations. In the present work, a procedure is developed that uses guided wave responses to interrogate damage. As the guided wave interacts with damage, the signal attenuates in some directions and reflects in others. This results in a difference in signal magnitude as well as phase shifts between signal responses for damaged and undamaged structures. Accurate estimation of damage size, location, and orientation is made by evaluating the cumulative signal responses at various pre-selected sensor locations using a genetic algorithm (GA) based optimization procedure. The damage size, location, and orientation is obtained by minimizing the difference between the reference responses and the responses obtained by wave propagation finite element analysis of different representative cracks, geometries, and sizes.

Seshadri, Banavara R.↗

Predicting Ares I Reaction Control System Performance by Utilizing Analysis Anchored with Development Test Data

The Ares I launch vehicle is an integral part of NASA s Constellation Program, providing a foundation for a new era of space access. The Ares I is designed to lift the Orion Crew Module and will enable humans to return to the Moon as well as explore Mars.1 The Ares I is comprised of two inline stages: a Space Shuttle-derived five-segment Solid Rocket Booster (SRB) First Stage (FS) and an Upper Stage (US) powered by a Saturn V-derived J-2X engine. A dedicated Roll Control System (RoCS) located on the connecting interstage provides roll control prior to FS separation. Induced yaw and pitch moments are handled by the SRB nozzle vectoring. The FS SRB operates for approximately two minutes after which the US separates from the vehicle and the US Reaction Control System (ReCS) continues to provide reaction control for the remainder of the mission. A representation of the Ares I launch vehicle in the stacked configuration and including the Orion Crew Exploration Vehicle (CEV) is shown in Figure 1. Each Reaction Control System (RCS) design incorporates a Gaseous Helium (GHe) pressurization system combined with a monopropellant Hydrazine (N2H4) propulsion system. Both systems have two diametrically opposed thruster modules. This architecture provides one failure tolerance for function and prevention of catastrophic hazards such as inadvertent thruster firing, bulk propellant leakage, and over-pressurization. The pressurization system on the RoCS includes two ambient pressure-referenced regulators on parallel strings in order to attain the required system level single Fault Tolerant (FT) design for function while the ReCS utilizes a blow-down approach. A single burst disk and relief valve assembly is also included on the RoCS to ensure single failure tolerance for must-not-occur catastrophic hazards. The Reaction Control Systems are designed to support simultaneously firing multiple thrusters as required

Stein, William B.↗

Distributed computing system with dual independent communications paths between computers and employing split tokens

This is a distributed computing system providing flexible fault tolerance; ease of software design and concurrency specification; and dynamic balance of the loads. The system comprises a plurality of computers each having a first input/output interface and a second input/output interface for interfacing to communications networks each second input/output interface including a bypass for bypassing the associated computer. A global communications network interconnects the first input/output interfaces for providing each computer the ability to broadcast messages simultaneously to the remainder of the computers. A meshwork communications network interconnects the second input/output interfaces providing each computer with the ability to establish a communications link with another of the computers bypassing the remainder of computers. Each computer is controlled by a resident copy of a common operating system. Communications between respective ones of computers is by means of split tokens each having a moving first portion which is sent from computer to computer and a resident second portion which is disposed in the memory of at least one of computer and wherein the location of the second portion is part of the first portion. The split tokens represent both functions to be executed by the computers and data to be employed in the execution of the functions. The first input/output interfaces each include logic for detecting a collision between messages and for terminating the broadcasting of a message whereby collisions between messages are detected and avoided.

Rasmussen, Robert D.↗

Automation in the Space Station module power management and distribution Breadboard

The Space Station Module Power Management and Distribution (SSM/PMAD) Breadboard, located at NASA's Marshall Space Flight Center (MSFC) in Huntsville, Alabama, models the power distribution within a Space Station Freedom Habitation or Laboratory module. Originally designed for 20 kHz ac power, the system is now being converted to high voltage dc power with power levels on a par with those expected for a space station module. In addition to the power distribution hardware, the system includes computer control through a hierarchy of processes. The lowest level process consists of fast, simple (from a computing standpoint) switchgear, capable of quickly safing the system. The next level consists of local load center processors called Lowest Level Processors (LLP's). These LLP's execute load scheduling, perform redundant switching, and shed loads which use more than scheduled power. The level above the LLP's contains a Communication and Algorithmic Controller (CAC) which coordinates communications with the highest level. Finally, at this highest level, three cooperating Artificial Intelligence (AI) systems manage load prioritization, load scheduling, load shedding, and fault recovery and management. The system provides an excellent venue for developing and examining advanced automation techniques. The current system and the plans for its future are examined.

Walls, Bryan↗

Characterization and Comparison of Vibration Transfer Paths in a Helicopter Gearbox and a Fixture Mounted Gearbox

Health monitoring of rotorcraft components, currently being performed by Health and Usage Monitoring Systems through analyses of vibration signatures of dynamic mechanical components, is very important for their safe and economic operation. HUMS analyze vibration signatures associated with faults and quantify them as condition indicators to predict component behavior. Vibration transfer paths are characterized by frequency response functions derived from the input/output relationship between applied force and dynamic response through a structure as a function of frequency. With an objective to investigate the differences in transfer paths, transfer path measurements were recorded under similar conditions in the left and right nose gearboxes of an AH-64 helicopter and in an isolated left nose gearbox in a test fixture at NASA Glenn Research Center. The test fixture enabled the application of measured torques-common during an actual operation. An impact hammer as well as commercial and lab piezo shakers, were used in conjunction with two types of commercially available accelerometers to collect the vibration response under various test conditions. The frequency response functions measured under comparable conditions of both systems were found to be consistent. Measurements made on the fixture indicated certain real-world installation and maintenance issues, such as sensor alignments, accelerometer locations and installation torques, had minimal effect. However, gear vibration transfer path dynamics appeared to be somewhat dependent on the presence of oil, and the transfer path dynamics were notably different if the force input was on the internal ring gear rather than on the external gearbox case.

structures↗

The geology of Thaumasia-northeast quadrant

The northeastern section of Thaumasia is located in the heavily cratered southern highlands of Mars between 30 S and 47.5 S and 67.5 W and 90 W. To the northwest lies the Tharis bulge and to the southeast is the Argyre Basin. Previous mapping in Thaumasia included a geologic map of the entire guadrangel by McGill (1978) at a 1:5,000,000 scale and a map of lava flows in the northwest quadrant by Scott and Tanaka (1981). Most investigations concentrated west of 90 W long. in conjunction with the Tharis volcanics. This investigation was designed to examine the overall geology of this section of Thaumasia. After distinguishing various geomorphical units, a geologic map was made at a scale of 1:2,000,000. Lastly, a general sequence of events was developed for the area. Mapping was done from individual low, medium, and high resolution images from the Viking missions, as well as using a 1:2,000,000 scale photo mosaic of the northeast quadrant of Thaumasia. Amount of cratering and faulting, superposition, differences in morphology, and albedo were used to separate out geomorphologically distinct units.

Tuesink, M. F.↗

Dynamic Structural Fault Detection and Identification

Aircraft structures are designed to guarantee safety of flight in some required operational envelope. When the aircraft becomes structurally impaired, safety of flight may not be guaranteed within that previously safe operational envelope. In this case the safe operational envelope must be redefined in-flight and a means to prevent excursion from this new envelope must be implemented. A specific structural failure mode that may result in a reduced safe operating envelope, the exceedance of which could lead to catastrophic structural failure of the aircraft, will be addressed. The goal of the DFEAP program is the detection of this failure mode coupled with flight controls adaptation to limit critical loads in the damaged aircraft structure. The DFEAP program is working with an F/A-18 aircraft model. The composite wing skins are bonded to metallic spars in the wing substructure. Over time, it is possible that this bonding can deteriorate due to fatigue. In this case, the ability of the wing spar to transfer loading between the wing skins is reduced. This failure mode can translate to a reduced allowable compressive strain on the wing skin and could lead to catastrophic wing buckling if load limiting of the wing structure is not applied. The DFEAP program will make use of a simplified wing strain model for the healthy aircraft. The outputs of this model will be compared in real-time to onboard strain measurements at several locations on the aircraft wing. A damage condition is declared at a given location when the strain measurements differ sufficiently from the strain model. Parameter identification of the damaged structure wing strain parameters will be employed to provide load limiting control adaptation for the aircraft. This paper will discuss the simplified strain models used in the implementation and their interaction with the strain sensor measurements. Also discussed will be the damage detection and identification schemes employed and the means by which the damaged aircraft parameters will be used to provide load limiting that keeps the aircraft within the safe operational envelope.

Smith, Timothy↗

Architecture Options for Navigation in Cislunar Space for Human Landing System Vehicles

As part of architecture studies and insight analysis focused on requirements development into Human Landing System lunar architecture designs, multiple studies are underway to understand the sensitivities and options for achieving high precision landing on the lunar surface. The baseline approach utilizes a combination of multiple sensors to capture autonomous state observations of the lander with respect to the lunar surface. These systems are typically constrained in terms of operational altitudes by parameters such as onboard map size, camera focus, or sensor transmitted power (for altimeter observations). While these sensor suites do enable high precision landing, they are typically very complex and expensive. For a human-rated vehicle, fault detection algorithms are needed in addition to redundant sensors drive additional design complexity. Conversely, for these early missions, mass performance is key, so extended analysis is required to identify numbers of sensors, their ideal placement, and integration algorithms. A key part of this analysis is to help identify key sensor suites and options to help alleviate this design tension. An alternate approach is to take advantage and build out in-situ assets to allow for GPS-like navigation within the lunar regime through the use of navigation references or beacons. This can be achieved through the integration of navigation services into potential relays and pre-placed lunar surface assets. This research focuses on the capability of this infrastructure to support navigation in all areas of cislunar space such as: approach to the moon, in orbit around the moon, and ascent/descent operations to the surface. An augmented state linear covariance analysis (LinCov) and navigation state covariance analysis (NavCov) tools were used to assess a variety of navigation reference locations and how they can support vehicle operations through both understanding of state uncertainties and trajectory dispersions. This research helps to supplement existing studies focused on communication link analysis by providing additional insight into specific vehicle operational scenarios that are tied closely to potential Human Landing System scenarios. Key aspect of this analysis focus on the sensitivity to state knowledge of the references, the accuracy of inter-asset measurements, and placement in support of the various scenarios.

Evan J Anzalone↗

Proof-of-Concept Experiments on a Gallium-Based Ignitron for Pulsed Power Applications

Ignitrons are electrical switching devices that operate at switching times that are on the order of microseconds, can conduct high currents of thousands of amps, and are capable of holding off tens of thousands of volts between pulses. They consist of a liquid metal pool within an evacuated tube that serves both the cathode and the source of atoms and electrons for an arc discharge. Facing the liquid metal pool is an anode suspended above the cathode, with a smaller ignitor electrode tip located just above the surface of the cathode. The ignitron can be charged to significant voltages, with a potential difference of thousands of volts between anode and cathode. When an ignition pulse is delivered from the ignitor electrode to the cathode, a small amount of the liquid metal is vaporized and subsequently ionized, with the high voltage between the anode and cathode causing the gas to bridge the gap between the two electrodes. The electrons and ions move rapidly towards the anode and cathode, respectively, with the ions liberating still more atoms from the liquid metal cathode surface as a high-current plasma arc discharge is rapidly established. This arc continues in a self-sustaining fashion until the potential difference between the anode and cathode drops below some critical value. Ignitrons have been used in a variety of pulsed power applications, including the railroad industry, industrial chemical processing, and high-power arc welding. In addition, they might prove useful in terrestrial power grid applications, serving as high-current fault switches, quickly shunting dangerous high-current or high-voltage spikes safely to ground. The motivation for this work stemmed from the fact that high-power, high-reliability, pulsed power devices like the ignitron have been used for ground testing in-space pulsed electric thruster technologies, and the continued use of ignitrons could prove advantageous to the future development and testing of such thrusters. Previous ignitron designs have used mercury as the liquid metal cathode, owing to its presence as a liquid at room temperatures and a vapor pressure of 10 Pa (75 mtorr) at room temperature. While these are favorable properties, there are obvious environmental and personal safety concerns with the storage, handling, and use of mercury and its compounds. The purpose of the present work was to fabricate and test an ignitron that used as its cathode an alternate liquid metal that was safe to handle and store. To that end, an ignitron test article that used liquid gallium as the cathode material was developed and tested. Gallium is a metal that has a melting temperature of 29.76 C, which is slightly above room temperature, and a boiling point of over 2,300 C at atmospheric pressure. This property makes gallium the element with the largest relative difference between melting and boiling points. Gallium has a limited role in biology, and when ingested, it will be subsequently processed by the body and expelled rather than accumulating to toxic levels. The next section of this Technical Memorandum (TM) provides background information on the development of mercury-based ignitrons, which serves as the starting point for the development of the gallium-based variant. Afterwards, the experimental hardware and setup used in proof-of-concept testing of a basic gallium ignitron are presented. Experimental data, consisting of discharge voltage and current waveforms as well as high-speed imaging of the gallium arc discharge in the gallium ignitron test article, are presented to demonstrate the efficacy of the concept. Discussion of the data and suggestions on improvements for future iterations of the design are presented in the final two sections of this TM.

Ali, H. K.↗

Fail-Safe Operation of a High-Temperature Magnetic Bearing Investigated for Gas Turbine Engine Applications

The Structural Mechanics and Dynamics Branch at the NASA Glenn Research Center has developed a three-axis high-temperature magnetic bearing suspension rig to enhance the safety of the bearing system up to 1000 F. This test rig can accommodate thrust and radial bearings up to a 22.84 cm (9 in.) diameter with a maximum axial loading of 22.25 kN (5000 lb) and a maximum radial loading up to 4.45 kN (1000 lb). The test facility was set up to test magnetic bearings under high-temperature (1100 F) and high-speed (20,000 rpm) conditions. The magnetic bearing is located at the center of gravity of the rotor between two high-temperature grease-packed mechanical ball bearings. The drive-end duplex angular contact ball bearing, which is in full contact, acts as a moment release and provides axial stability. The outboard end ball bearing has a 0.015-in. radial clearance between the rotor to act as a backup bearing and to compensate for axial thermal expansion. There is a 0.020-in. radial air gap between the stator pole and the rotor. The stator was wrapped with three 1-kW band heaters to create a localized hot section; the mechanical ball bearings were outside this section. Eight threaded rods supported the stator. These incorporated a plunger and Bellville washers to compensate for radial thermal expansion and provide rotor-to-stator alignment. The stator was instrumented with thermocouples and a current sensor for each coil. Eight air-cooled position sensors were mounted outside the hot section to monitor the rotor. Another sensor monitored this rotation of the outboard backup bearing. Ground fault circuit interrupts were incorporated into all power amplifier loops for personnel safety. All instrumentation was monitored and recorded on a LabView-based data acquisition system. Currently, this 12-pole heteropolar magnetic bearing has 13 thermal cycles and over 26 hr of operation at 1000 F.

Choi, Benjamin B.↗

The origin of lunar mascons - Analysis of the Bouguer gravity associated with Grimaldi

Grimaldi is a relatively small multi-ringed basin located on the western limb of the moon. Spacecraft free-air gravity data reveal a mascon associated with the inner ring of this structure, and the topographic correction to the local lunar gravity field indicates a maximum Bouguer anomaly of +90 milligals at an altitude of 70 kilometers. Approximately 20% of this positive Bouguer anomaly can be attributed to the mare material lying within the inner ring of this basin. From a consideration of the Bouguer gravity and structure of large lunar craters comparable in size to the central basin of Grimaldi, it is suggested that the remaining positive Bouguer anomaly is due to a centrally uplifted plug of lunar mantle material. The uplift was caused by inward crustal collapse which also resulted in the formation of the concentric outer scarp of Grimaldi. In addition, an annulus of low density material, probably a combination of ejecta and in situ breccia, is required to fully reproduce the Bouguer gravity signature across this basin. It is proposed that Grimaldi supplies a critical test in the theory of mascon formation: crustal collapse by ring faulting and central uplift to depths of the crust-mantle boundary are requisites

Phillips, R. J.↗

Solar Dynamics Observatory Guidance, Navigation, and Control System Overview

The Solar Dynamics Observatory (SDO) was designed and built at the Goddard Space Flight Center, launched from Cape Canaveral on February 11, 2010, and reached its final geosynchronous science orbit on March 16, 2010. The purpose of SDO is to observe the Sun and continuously relay data to a dedicated ground station. SDO remains Sun-pointing throughout most of its mission for the instruments to take measurements of the Sun. The SDO attitude control system (ACS) is a single-fault tolerant design. Its fully redundant attitude sensor complement includes sixteen coarse Sun sensors (CSSs), a digital Sun sensor (DSS), three two-axis inertial reference units (IRUs), and two star trackers (STs). The ACS also makes use of the four guide telescopes included as a part of one of the science instruments. Attitude actuation is performed using four reaction wheels assemblies (RWAs) and eight thrusters, with a single main engine used to provide velocity-change thrust for orbit raising. The attitude control software has five nominal control modes, three wheel-based modes and two thruster-based modes. A wheel-based Safehold running in the attitude control electronics box improves the robustness of the system as a whole. All six modes are designed on the same basic proportional-integral-derivative attitude error structure, with more robust modes setting their integral gains to zero. This paper details the final overall design of the SDO guidance, navigation, and control (GN&C) system and how it was used in practice during SDO launch, commissioning, and nominal operations. This overview will include the ACS control modes, attitude determination and sensor calibration, the high gain antenna (HGA) calibration, and jitter mitigation operation. The Solar Dynamics Observatory mission is part of the NASA Living With a Star program, which seeks to understand the changing Sun and its effects on the Solar System, life, and society. To this end, the SDO spacecraft carries three Sun-observing instruments: Helioseismic and Magnetic Imager (HMI), led by Stanford University; Atmospheric Imaging Assembly (AIA), led by Lockheed Martin Space and Astrophysics Laboratory; and Extreme Ultraviolet Variability Experiment (EVE), led by the University of Colorado. The basic mission is to observe the Sun for a very high percentage of the 5-year mission (10-year goal) with long stretches of uninterrupted observations and with constant, high-data-rate transmission to a dedicated ground station to be located in White Sands, New Mexico. These goals guided the design of the spacecraft bus that will carry and service the three-instrument payload. Overarching design goals for the bus are geosynchronous orbit, near-constant Sun observations with the ability to fly through eclipses, and constant HGA contact with the dedicated ground station. A three-axis stabilized ACS is needed both to point at the Sun accurately and to keep the roll about the Sun vector correctly positioned with respect to the solar north pole. This roll control is especially important for the magnetic field imaging of HM I. The mission requirements have several general impacts on the ACS design. Both the AIA and HMI instruments are very sensitive to the blurring caused by jitter. Each has an image stabilization system (ISS) with some ability to filter out high frequency motion, but below the bandwidth of the ISS the control system must compensate for disturbances within the ACS bandwidth or avoid exciting jitter at higher frequencies. Within the ACS bandwidth, the control requirement imposed by AIA is to place the center of the solar disk no more than 2 arc sec, 3 , from a body-defined target based on one of the GTs that accompany the instrument. This body-defined target, called the science reference boresight (SRB), was determined from the postlaunch orientation of the GTs by averaging the bounding telescope boresights for pitch to get a pitch SRB coordinate, and by averaging the bounding boresights for yaw toet the yaw SRB coordinate. The location of this SRB in the 0.5-deg field-of-view for each GT then becomes the central target for each telescope; one GT is selected for use as the ACS controlling guide telescope (CGT) at any given time. Fine Sun-pointing is effected based on this SRB for all three instruments when the Sun is within the linear range of the CGT. In addition to limiting jitter, HMI science requires averaging several observations, making the instrument sensitive to low frequency motion that induces differential motion between each observation. This requires the spacecraft attitude to be stable about the roll axis to approximately 10 arcsec over a ten-minute period. Instrument calibrations require that the spacecraft point the SRB up to 2.5 degrees in pitch and yaw away from the center of the Sun, placing the Sun outside the field-of-view of the guide telescopes. In such instances, when the GTs cannot provide the definitive target for the ACS, on-board attitude determination combined with ephemeris prediction of the Sun direction must provide the definitive target. EVE is capable of observing the Sun with less dependence on attitude control. However, the ground data processing needs for calibrations result in the most strict attitude knowledge requirements for the mission: [35,70,70] arcsec, 3 , of knowledge with respect to the center of the solar disk. In addition to driving the ACS sensor selection, the knowledge requirements, which have their effect primarily during Inertial mode calibrations, drive the accuracy requirements for the solar ephemeris. The need to achieve and maintain geosynchronous orbit (GEO) drove the need for high-efficiency propulsive systems and appropriate attitude control. The main engine provided high specific impulse for the maneuvers to attain GEO, while the smaller ACS thrusters managed the disturbance torques of the larger engine and provided the capability for much smaller adjustment burns on orbit. SDO s large solar profile means that solar radiation pressure is a large torque disturbance, and the momentum buildup from this disturbance and the GEO altitude drives the ACS to use thrusters to manage vehicle momentum. The demanding data capture budget for the mission, however, requires SDO to avoid frequent thruster maneuvers, while concerns about on-orbit jitter restrict the maximum desired wheel speeds desired from the RWAs. The plan for on-orbit wheel speed and momentum management will be discussed as well as what is now being done in operation after the jitter environment was characterized. The SDO ACS hardware complement is single-fault tolerant. Two main processors carry virtually identical copies of the command and data handling and ACS software, and two identical attitude control electronics (ACE) boxes carry Coldfire processors with contingency ACS software and other hardware interface cards; the ACE structure allows reaction wheels to be commanded by the Sun-pointing Safehold independent of the Mil Std 1553 data bus. The sixteen Adcole CSSs are grouped into primary and backup sets of eight sensors, each set providing the ability to calculate a sun vector. Each set of eight eyes provides full 4 -steradian coverage. The Adcole DSS comprises an optics head and a separate electronics box providing a 1553 data interface. The electronics box is mounted inside the Faraday cage created by the spacecraft bus module. The DSS head with its 32- deg square FOV is mounted on the instrument module with its boresight along the spacecraft X axis, nearly aligned with the Sun during observations. Adcole has designed the DSS calibration parameters so that the accuracy is 0.24 arcminutes within 10 deg of the boresight, and diminishes to 3 arcminutes as the Sun moves towards the edges of its FOV . This DSS calibration scheme provides higher accuracy attitude determination over the range of the instrument calibration maneuvers.

Morgenstern, Wendy M.↗