Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Functional redundancy”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2

A dual-mode generalized likelihood ratio approach to self-reorganizing digital flight control system design

Analytic techniques have been developed for detecting and identifying abrupt changes in dynamic systems. The GLR technique monitors the output of the Kalman filter and searches for the time that the failure occured, thus allowing it to be sensitive to new data and consequently increasing the chances for fast system recovery following detection of a failure. All failure detections are based on functional redundancy. Performance tests of the F-8 aircraft flight control system and computerized modelling of the technique are presented.

Source record↗

Design and verification of a multiple fault tolerant control system for STS applications using computer simulation

General Dynamics/Convair is under NASA contract to integrate the Centaur upper stage into the space transportation system for future planetary missions. This requires that control of all safety critical functions be two-failure tolerant. The control system developed consists of five asynchronous computers, each contributing at their outputs to a 3-out-of-5 voting plane. Subsystem control is based on an end function redundancy management scheme. Analysis of multiple component failures and worst-case time-phase asynchrony among the computers is performed by a real-time computer simulation. The simulation emulates the hardware and subsystem interfaces, wire by wire, providing assessibility to any component for the insertion of preprogrammed failures. Observability is provided via a graphics system and diagnostic software. The simulation provides an engineering tool where the integrity of control system hardware and imbedded software can be demonstrated.

Szatkowski, G. P.↗

Failure analysis and performance evaluation of NASA inertial reference unit (DRIRU 2) after 50 months of orbital operation

The first production DRIRU 2 (NASA standard high performance inertial reference unit) system was launched as a subsystem of the Modular Attitude Control System for the Solar Maximum Mission (SMM) spacecraft in February 1980. This hardware was retrieved during the repair of the SMM during Shuttle Flight 41-C in April 1984 and returned to Teledyne Systems Company (manufacturer) for investigation and performance measurements as directed by Goddard Space Flight Center. A failure of one of the three gyro channels occurred approximately 6.5 months after launch. The built in redundancy functioned properly, the DRIRU 2 continued to provide the required attitude control function without performance degradation. Subsequent failure of other attitude control subsystems made the SMM a candidate for the first demonstration of the shuttle in-orbit repair capabilty. The in-orbit DRIRU 2 II failure scenario and the results of the analyses/tests conducted after retrieval are discussed. Comparison of this data with similar data prior to launch demonstates the excellent stability of performance parameters achieveable with DRIRU 2.

Green, K. N.↗

Environmental Control Life Support for the Space Station

The preliminary design of the nation's Space Station is presently being developed. The Environmental Control and Life Support System (ECLSS), consisting of regenerative and nonregenerative technologies, has progressed through a series of trade studies including evaluation of the closure and distribution within the evolutionary Space Station configuration. The analysis has included the identification of the time-critical functions, redundancy (backup) management, definition of common subsystem interfaces and quantification of technology options for the process equipment. Each technology has been characterized by its physical characteristics of weight, power, volume, heat rejection, etc. Summaries of the trade study findings for the overall ECLSS in terms of physical characteristics and the impact of selected technologies is presented.

Miller, Craig W.↗

Control of intelligent robots in space

In view of space activities like International Space Station, Man-Tended-Free-Flyer (MTFF) and free flying platforms, the development of intelligent robotic systems is gaining increasing importance. The range of applications that have to be performed by robotic systems in space includes e.g., the execution of experiments in space laboratories, the service and maintenance of satellites and flying platforms, the support of automatic production processes or the assembly of large network structures. Some of these tasks will require the development of bi-armed or of multiple robotic systems including functional redundancy. For the development of robotic systems which are able to perform this variety of tasks a hierarchically structured modular concept of automation is required. This concept is characterized by high flexibility as well as by automatic specialization to the particular sequence of tasks that have to be performed. On the other hand it has to be designed such that the human operator can influence or guide the system on different levels of control supervision, and decision. This leads to requirements for the hardware and software concept which permit a range of application of the robotic systems from telemanipulation to autonomous operation. The realization of this goal requires strong efforts in the development of new methods, software and hardware concepts, and the integration into an automation concept.

Freund, E.↗

Linear and nonlinear trending and prediction for AVHRR time series data

The variability of AVHRR calibration coefficient in time was analyzed using algorithms of linear and non-linear time series analysis. Specifically we have used the spline trend modeling, autoregressive process analysis, incremental neural network learning algorithm and redundancy functional testing. The analysis performed on available AVHRR data sets revealed that (1) the calibration data have nonlinear dependencies, (2) the calibration data depend strongly on the target temperature, (3) both calibration coefficients and the temperature time series can be modeled, in the first approximation, as autonomous dynamical systems, (4) the high frequency residuals of the analyzed data sets can be best modeled as an autoregressive process of the 10th degree. We have dealt with a nonlinear identification problem and the problem of noise filtering (data smoothing). The system identification and filtering are significant problems for AVHRR data sets. The algorithms outlined in this study can be used for the future EOS missions. Prediction and smoothing algorithms for time series of calibration data provide a functional characterization of the data. Those algorithms can be particularly useful when calibration data are incomplete or sparse.

Smid, J.↗

Human Exploration of Mars: The Reference Mission of the NASA Mars Exploration Study Team

The Reference Mission was developed over a period of several years and was published in NASA Special Publication 6107 in July 1997. The purpose of the Reference Mission was to provide a workable model for the human exploration of Mars, which is described in enough detail that alternative strategies and implementations can be compared and evaluated. NASA is continuing to develop the Reference Mission and expects to update this report in the near future. It was the purpose of the Reference Mission to develop scenarios based on the needs of scientists and explorers who want to conduct research on Mars; however, more work on the surface-mission aspects of the Reference Mission is required and is getting under way. Some aspects of the Reference Mission that are important for the consideration of the surface mission definition include: (1) a split mission strategy, which arrives at the surface two years before the arrival of the first crew; (2) three missions to the outpost site over a 6-year period; (3) a plant capable of producing rocket propellant for lifting off Mars and caches of water, O, and inert gases for the life-support system; (4) a hybrid physico-chemical/bioregenerative life-support system, which emphasizes the bioregenerative system more in later parts of the scenario; (5) a nuclear reactor power supply, which provides enough power for all operations, including the operation of a bioregenerative life-support system as well as the propellant and consumable plant; (6) capability for at least two people to be outside the habitat each day of the surface stay; (7) telerobotic and human-operated transportation vehicles, including a pressurized rover capable of supporting trips of several days' duration from the habitat; (7) crew stay times of 500 days on the surface, with six-person crews; and (8) multiple functional redundancies to reduce risks to the crews on the surface. New concepts are being sought that would reduce the overall cost for this exploration program and reducing the risks that are indigenous to Mars exploration. Among those areas being explored are alternative space propulsion approaches, solar vs. nuclear power, and reductions in the size of crews.

Connolly, John↗

Advances in Space Transportation Technology Toward the NASA Goals

NASA has set goals to increase safety by one hundred times while reducing cost tenfold over the next decade. This dramatic increase in safety will come by departing from a past emphasis on cost and performance to a new paradigm of safety and reliability, which, in turn, will drive down cost. To accomplish this, vehicle systems must be inherently reliable, functionally redundant wherever practical and designed to minimize or eliminate catastrophic failure modes. Over the next twenty-five years, NASA has set goals to increase safety ten thousand times while reducing cost one hundred fold. Safety will increase towards today's airline safety and the low price per flight has the potential to enable a 15-fold increase in the size of the current projected space launch market. This level of improvement is comparable to the developments in the 1970s in the computer microprocessor when microchips went from hundreds of thousands to tens of thousands of dollars - hailing the era of the personal computer. In order to achieve such ambitious cost goals, today's partial and fully expendable rockets must be replaced by fully reusable systems. A RLV can eliminate assembly and checkout of the large number of complex interfaces on today's Space Shuttle. Full reusability will eliminate the necessity to throw away expensive hardware and the need for on-going production. Systems in ten years will have to accommodate 50 to 100 missions per year and could be commercially certified for hundreds of flights. In twenty-five years, the number of flights per year could jump to over 1,000, which will require certification for thousands of flights. The large increase in flights per year will demand that current operations and maintenance procedures be revolutionized. Unlike the current shuttle, which requires several thousand personnel over five months to process, the next generation system must be turned around in one week with less than one hundred personnel. In contrast to the rigorous disassembly and inspections required for the Space Shuttle's subsystems, the next generation vehicle's on-board health monitoring systems will could tell the ground crews which systems need replacement before landing. In twenty-five years, vehicles will be re-flown within one with crews numbering less than one hundred. Fully automated ground processing systems must require only a handful of personnel to launch the vehicle. Due to the increased intelligence of on-board systems, only cursory walk-around inspections would be required between flights An assessment of the progress in breakthrough technologies toward these goals by the NASA Advanced Space Transportation Program is presented. These breakthrough technologies include combined rocket and air breathing propulsion, high strength lightweight structures, high temperature materials, vehicle health management, and flight operations.

Lyles, Garry M.↗

A Decentralized Adaptive Approach to Fault Tolerant Flight Control

This paper briefly reports some results of our study on the application of a decentralized adaptive control approach to a 6 DOF nonlinear aircraft model. The simulation results showed the potential of using this approach to achieve fault tolerant control. Based on this observation and some analysis, the paper proposes a multiple channel adaptive control scheme that makes use of the functionally redundant actuating and sensing capabilities in the model, and explains how to implement the scheme to tolerate actuator and sensor failures. The conditions, under which the scheme is applicable, are stated in the paper.

Wu, N. Eva↗

Volatile Organic Analyzer (VOA) in 2006: Repair, Revalidation, and Restart of Elektron Event

The Volatile Organic Analyzer (VOA) was launched to the International Space Station (ISS) in August 2001 and was the first instrument to provide near real-time measurement of volatile organic compounds in a spacecraft atmosphere. The VOA performed an analysis of the ISS air approximately twice a month for most of its operation through May 2003. This intermittent operation, caused by a software interface issue with the ISS communication bus, slowed the validation of the VOA. However, operational validation was completed in 2003 when analysis of air samples collected in grab sample containers (GSCs) compared favorably with simultaneous VOA runs (1). The VOA has two channels that provide redundant function, albeit at slightly reduced performance, when only one channel is operating (2). Most target compounds can be detected on both channels. In January 2003, the VOA identified a malfunction in the channel 2 preconcentrator and it shut down that channel. The anomaly profile suggested that a fuse might have failed, but the root cause could not be determined. In May 2003, channel 1 was shut down when the detector s elevated temperature could not longer be maintained. Since both VOA channels were now deactivated, VOA operations ended until an in-flight repair could be planned and executed. This paper describes the process to repair the VOA and to revalidate it for operations, and then an account is given of the VOA s contribution following a contingency event on ISS.

Limero, Thomas↗

Lithium Ion Battery (LIB) Charger: Spacesuit Battery Charger Design with 2-Fault Tolerance to Catastrophic Hazards

Charger design that is 2-fault tolerant to catastrophic has been achieved for the Spacesuit Li-ion Battery with key features. Power supply control circuit and 2 microprocessors independently control against overcharge. 3 microprocessor control against undercharge (false positive: Go for EVA) conditions. 2 independent channels provide functional redundancy. Capable of charge balancing cell banks in series. Cell manufacturing and performance uniformity is excellent with both designs. Once a few outliers are removed, LV cells are slightly more uniform than MoliJ cells. If cell balance feature of charger is ever invoked, it will be an indication of a significant degradation issue, not a nominal condition.

Darcy, Eric↗

A High Power Density Power System Electronics for NASA's Lunar Reconnaissance Orbiter

A high power density, modular and state-of-the-art Power System Electronics (PSE) has been developed for the Lunar Reconnaissance Orbiter (LRO) mission. This paper addresses the hardware architecture and performance, the power handling capabilities, and the fabrication technology. The PSE was developed by NASA s Goddard Space Flight Center (GSFC) and is the central location for power handling and distribution of the LRO spacecraft. The PSE packaging design manages and distributes 2200W of solar array input power in a volume less than a cubic foot. The PSE architecture incorporates reliable standard internal and external communication buses, solid state circuit breakers and LiIon battery charge management. Although a single string design, the PSE achieves high reliability by elegantly implementing functional redundancy and internal fault detection and correction. The PSE has been environmentally tested and delivered to the LRO spacecraft for the flight Integration and Test. This modular design is scheduled to flight in early 2009 on board the LRO and Lunar Crater Observation and Sensing Satellite (LCROSS) spacecrafts and is the baseline architecture for future NASA missions such as Global Precipitation Measurement (GPM) and Magnetospheric MultiScale (MMS).

Hernandez-Pellerano, A.↗

Protecting Against Faults in JPL Spacecraft

A paper discusses techniques for protecting against faults in spacecraft designed and operated by NASA s Jet Propulsion Laboratory (JPL). The paper addresses, more specifically, fault-protection requirements and techniques common to most JPL spacecraft (in contradistinction to unique, mission specific techniques), standard practices in the implementation of these techniques, and fault-protection software architectures. Common requirements include those to protect onboard command, data-processing, and control computers; protect against loss of Earth/spacecraft radio communication; maintain safe temperatures; and recover from power overloads. The paper describes fault-protection techniques as part of a fault-management strategy that also includes functional redundancy, redundant hardware, and autonomous monitoring of (1) the operational and health statuses of spacecraft components, (2) temperatures inside and outside the spacecraft, and (3) allocation of power. The strategy also provides for preprogrammed automated responses to anomalous conditions. In addition, the software running in almost every JPL spacecraft incorporates a general-purpose "Safe Mode" response algorithm that configures the spacecraft in a lower-power state that is safe and predictable, thereby facilitating diagnosis of more complex faults by a team of human experts on Earth.

Morgan, Paula↗

Rapid Response Risk Assessment in New Project Development

A capability for rapidly performing quantitative risk assessments has been developed by JSC Safety and Mission Assurance for use on project design trade studies early in the project life cycle, i.e., concept development through preliminary design phases. A risk assessment tool set has been developed consisting of interactive and integrated software modules that allow a user/project designer to assess the impact of alternative design or programmatic options on the probability of mission success or other risk metrics. The risk and design trade space includes interactive options for selecting parameters and/or metrics for numerous design characteristics including component reliability characteristics, functional redundancy levels, item or system technology readiness levels, and mission event characteristics. This capability is intended for use on any project or system development with a defined mission, and an example project will used for demonstration and descriptive purposes, e.g., landing a robot on the moon. The effects of various alternative design considerations and their impact of these decisions on mission success (or failure) can be measured in real time on a personal computer. This capability provides a high degree of efficiency for quickly providing information in NASA s evolving risk-based decision environment

Graber, Robert R.↗

Mars Science Laboratory Sample Acquisition, Sample Processing and Handling: Subsystem Design and Test Challenges

The Sample Acquisition/Sample Processing and Handling subsystem for the Mars Science Laboratory is a highly-mechanized, Rover-based sampling system that acquires powdered rock and regolith samples from the Martian surface, sorts the samples into fine particles through sieving, and delivers small portions of the powder into two science instruments inside the Rover. SA/SPaH utilizes 17 actuated degrees-of-freedom to perform the functions needed to produce 5 sample pathways in support of the scientific investigation on Mars. Both hardware redundancy and functional redundancy are employed in configuring this sampling system so some functionality is retained even with the loss of a degree-of-freedom. Intentional dynamic environments are created to move sample while vibration isolators attenuate this environment at the sensitive instruments located near the dynamic sources. In addition to the typical flight hardware qualification test program, two additional types of testing are essential for this kind of sampling system: characterization of the intentionally-created dynamic environment and testing of the sample acquisition and processing hardware functions using Mars analog materials in a low pressure environment. The overall subsystem design and configuration are discussed along with some of the challenges, tradeoffs, and lessons learned in the areas of fault tolerance, intentional dynamic environments, and special testing

Jandura, Louise↗

Dual redundant core memory systems

Electronic memory system consisting of series redundant drive switch circuits, triple redundant majority voted memory timing functions, and two data registers to provide functional dual redundancy is described. Signal flow through the circuits is illustrated and equence of events which occur within the memory system is explained.

Hull, F. E.↗

Techniques for Assuring NASA Mission Success Using Redundancy and Multi-Functionality Designs

Topics include NASA centers around the country; 2009 highlights of significant successes in space transportation, exploration, and science; significant accomplishments; places to explore include Lagrange points, near-Earth objects, Mars and the Moon, and International Space Station research; Marshall's missions include propulsion and transportation systems, life support systems, and earth and space science spacecraft, systems, and operations; project lifecycle management model; motivation of avionics fault-tolerance, redundancy needs and concerns, redundancy versus reliability; parallel-series configurations; effect of adding redundancy on mission success; example of rules-based approach where reliability and safety interaction impacts design; impact of common cause failure; approach ot bottom-up reliability analysis; three factors that lead to redundant system failure; Apollo 13 multi-functional reliability and example; and mitigating the risk of single string spacecraft architecture;.

Shivers, Herb↗