Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safety testing protocols”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 37 records · Page 2
All sourcesNASA NTRSDOE OSTI
DOE OSTI2016

A Field Study of Wall Furnace Venting and Coincident Exhaust Fan Usage in 16 Northern California Apartments

To inform efforts to improve combustion appliance testing in residential energy efficiency programs, we studied the frequency of coincident fan use and depressurization-induced downdrafting and spillage from atmospherically vented (i.e., natural draft) wall furnaces in airtight apartments. Indoor environmental conditions, heating appliance operation, use of exhaust fans, and cooking with stovetop or oven were monitored for approximately three weeks each in 16 apartment units in two buildings in Northern California. Apartments also were assessed using standard combustion appliance safety test methods and enhanced protocols. Monitoring occurred in February and March of 2016, with heating demand corresponding to 7.3 ± 0.5 heating degree-days at a 65ºF reference temperature. Most of the furnaces spilled combustion products when the apartments were depressurized in the “worst-case” challenge condition of all exhaust fans operating at their highest settings and all windows closed. Many also spilled under less challenging conditions (e.g., with kitchen exhaust fan on low and bathroom fan operating). On average, bathroom exhaust fans were operated 3.9% of monitored minutes (13.5% max), and cooking (burner or kitchen fan operation) occurred 4.6% of minutes (max 13.3%). Event lengths averaged 17 minutes (max 540) and 34 minutes (max 324), respectively. Their coincident operation averaged 0.34% of minutes (max 2.0%), with average event length of 13 minutes (max 92 minutes). This suggests that the operation of apartment units at or near the currently used worst-case challenge condition is quite rare. Wall furnace burners operated an average of 2.8% of minutes (max of 8.9%), with average burner cycle length of 14 minutes (max 162). Coincident bath fan use, cooking and wall furnace operation was very rare, occurring only a handful of times across all apartments. The highest rate was 0.075% of monitored minutes in one apartment, and the longest event length was 12 minutes. Exhaust fan operation in this study may have been more frequent than typical as participants were asked to use an exhaust fan whenever cooking or bathing. Consistent with the low levels of coincident operation, unambiguous spillage occurred in only 4 apartments and the longest event was 5 minutes. The frequency of partial spillage is unknown, owing to a lack of a clear signal from monitored parameters. Downdrafting during exhaust fan use occurred in all 13 of the apartments with relevant data, and 9 of these units had 10 or more events. Exhaust fans also sometimes led to weakened draft, even if downdrafting did not occur. Each unambiguous spillage event identified in the study was immediately preceded by downdrafting. The observed occurrence of downdrafting and spillage may have been impacted in those apartments with the most severe drafting problems (i.e., appliances spilled combustion pollutants under ‘natural’ test conditions), because occupants in these units were instructed to open windows whenever using the kitchen exhaust fan.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
NASA NTRS2001

Mars Sample Handling Protocol Workshop Series: Workshop 4

In preparation for missions to Mars that will involve the return of samples to Earth, it will be necessary to prepare for the receiving, handling, testing, distributing, and archiving of martian materials here on Earth. Previous groups and committees have studied selected aspects of sample return activities, but specific detailed protocols for the handling and testing of returned samples must still be developed. To further refine the requirements for sample hazard testing and to develop the criteria for subsequent release of sample materials from quarantine, the NASA Planetary Protection Officer convened a series of workshops in 2000-2001. The overall objective of the Workshop Series was to produce a Draft Protocol by which returned martian sample materials can be assessed for biological hazards and examined for evidence of life (extant or extinct) while safeguarding the purity of the samples from possible terrestrial contamination. This report also provides a record of the proceedings of Workshop 4, the final Workshop of the Series, which was held in Arlington, Virginia, June 5-7, 2001. During Workshop 4, the sub-groups were provided with a draft of the protocol compiled in May 2001 from the work done at prior Workshops in the Series. Then eight sub-groups were formed to discuss the following assigned topics: Review and Assess the Draft Protocol for Physical/Chemical Testing Review and Assess the Draft Protocol for Life Detection Testing Review and Assess the Draft Protocol for Biohazard Testing Environmental and Health/Monitoring and Safety Issues Requirements of the Draft Protocol for Facilities and Equipment Contingency Planning for Different Outcomes of the Draft Protocol Personnel Management Considerations in Implementation of the Draft Protocol Draft Protocol Implementation Process and Update Concepts This report provides the first complete presentation of the Draft Protocol for Mars Sample Handling to meet planetary protection needs. This Draft Protocol, which was compiled from deliberations and recommendations from earlier Workshops in the Series, represents a consensus that emerged from the discussions of all the sub-groups assembled over the course of the five Workshops of the Series. These discussions converged on a conceptual approach to sample handling, as well as on specific analytical requirements. Discussions also identified important issues requiring attention, as well as research and development needed for protocol implementation.

Race Margaret S.↗
DOE OSTI2014

Thermodynamic processes associated with frostbite in the handling of liquid nitrogen

It is often taught that exposure to liquid nitrogen will cause frostbite or more severe damage to exposed skin tissue. However, it is also demonstrated that a full hand can be briefly immersed in liquid nitrogen without damage. To better understand and possibly visualize the effects of human tissue exposure to liquid nitrogen, a series of tests were conducted using simulated hands and arms composed of molded gelatin forms. The simulated hands and arms were immersed, sprayed, or splashed with liquid nitrogen both with and without state of the art personal protective equipment. Thermocouples were located within the test articles to allow for thermal mapping during the freezing process. The study is aimed to help understand frostbite hazards and the time constants involved with the handling of liquid nitrogen to improve future safety protocols for the safe handling of cryogenic fluids. Results of the testing also show the limits to handling liquid nitrogen while using various means of protection.

36 MATERIALS SCIENCE↗
NASA NTRS2013

Large-Scale Spacecraft Fire Safety Experiments in ISS Resupply Vehicles

Our understanding of the fire safety risk in manned spacecraft has been limited by the small scale of the testing we have been able to conduct in low-gravity. Fire growth and spread cannot be expected to scale linearly with sample size so we cannot make accurate predictions of the behavior of realistic scale fires in spacecraft based on the limited low-g testing to date. As a result, spacecraft fire safety protocols are necessarily very conservative and costly. Future crewed missions are expected to be longer in duration than previous exploration missions outside of low-earth orbit and accordingly, more complex in terms of operations, logistics, and safety. This will increase the challenge of ensuring a fire-safe environment for the crew throughout the mission. Based on our fundamental uncertainty of the behavior of fires in low-gravity, the need for realistic scale testing at reduced gravity has been demonstrated. To address this concern, a spacecraft fire safety research project is underway to reduce the uncertainty and risk in the design of spacecraft fire safety systems by testing at nearly full scale in low-gravity. This project is supported by the NASA Advanced Exploration Systems Program Office in the Human Exploration and Operations Mission Directorate. The activity of this project is supported by an international topical team of fire experts from other space agencies to maximize the utility of the data and to ensure the widest possible scrutiny of the concept. The large-scale space flight experiment will be conducted on three missions; each in an Orbital Sciences Corporation Cygnus vehicle after it has deberthed from the ISS. Although the experiment will need to meet rigorous safety requirements to ensure the carrier vehicle does not sustain damage, the absence of a crew allows the fire products to be released into the cabin. The tests will be fully automated with the data downlinked at the conclusion of the test before the Cygnus vehicle reenters the atmosphere. The international topical team is collaborating with the NASA team in the definition of the experiment requirements and performing supporting analysis, experimentation and technology development.

Combustion↗
DOE OSTI2022

Tritium Fires: Simulation and Safety Assessment

This is the Sandia report from a joint NSRD project between Sandia National Labs and Savannah River National Labs. The project involved development of simulation tools and data intended to be useful for tritium operations safety assessment. Tritium is a synthetic isotope of hydrogen that has a limited lifetime, and it is found at many tritium facilities in the form of elemental gas (T 2 ). The most serious risk of reasonable probability in an accident scenario is when the tritium is released and reacts with oxygen to form a water molecule, which is subsequently absorbed into the human body. This tritium oxide is more readily absorbed by the body and therefore represents a limiting factor for safety analysis. The abnormal condition of a fire may result in conversion of the safer T 2 inventory to the more hazardous oxidized form. It is this risk that tends to govern the safety protocols. Tritium fire datasets do not exist, so prescriptive safety guidance is largely conservative and reliant on means other than testing to formulate guidelines. This can have a consequence in terms of expensive and/or unnecessary mitigation design, handling protocols, and operational activities. This issue can be addressed through added studies on the behavior of tritium under representative conditions. Due to the hazards associated with the tests, this is being approached mainly from a modeling and simulation standpoint and surrogate testing. This study largely establishes the capability to generate simulation predictions with sufficiently credible characteristics to be accepted for safety guidelines as a surrogate for actual data through a variety of testing and modeling activities.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2015

Proceedings of the 5th US/German Workshop on Salt Repository Research Design and Operation

The 5th US/German Workshop on Salt Repository Research, Design, and Operation was held in Santa Fe New Mexico September 8-10, 2014. The forty seven registered participants were equally divided between the United States (US) and Germany, with one participant from The Netherlands. The agenda for the 2014 workshop was under development immediately upon finishing the 4th Workshop. Ongoing, fundamental topics such as thermomechanical behavior of salt, plugging and sealing, the safety case, and performance assessment continue to advance the basis for disposal of heat-generating nuclear waste in salt formations. The utility of a salt underground research laboratory (URL) remains an intriguing concept engendering discussion of testing protocol. By far the most interest in this years’ workshop pertained to operational safety. Given events at the Waste Isolation Pilot Plant (WIPP), this discussion took on a new sense of relevance and urgency.

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
NASA NTRSDate not supplied

Mars Sample Return: Risk Management & Sample Safety Assessment

Returning samples from Mars has long been a major planetary science objective due to the high scientific value and transformative potential of the resulting data. An exciting dimension of this objective is the potential for the detection of ancient microbiological life, and the possibility of improving our understanding of the evolution of habitable environments on Mars and the development of life on Earth. To ensure that returned samples meet stringent planetary protection requirements and do not expose Earth to potential biohazards, the joint NASA/ESA Sample Receiving Project (SRP) assembled the Sample Safety Assessment Protocol Tiger Team (SSAP-TT). Members were recruited with the specific goal of creating a multi-disciplinary and internationally distributed team of experts in their respective fields across the federal government, academia, and private industry. This team was chartered with reassessing previous sample safety assessment strategies, defining what constitutes a biological hazard, developing a protocol to test for potential biohazards, and establishing a statistical framework to determine if samples are “safe” for release. The team developed a three-step protocol, supported by a Bayesian statistical framework, to assess whether returned samples contain potential biohazards that could present a risk to Earth’s biosphere. Initial conclusions indicated that an effective and comprehensive safety assessment protocol is feasible using modern techniques and does not require an excessive amount of sample consumption or traditional microbiological detection methodology. Herein, we will present an overview of the MSR SRP, the proposed safety assessment protocol, and how aspects of this novel approach can be applied to biological assessment in healthcare product manufacturing practices.

Alvin L Smith↗
DOE OSTI2014

Advanced Test Reactor Core Modeling Update Project: Annual Report for Fiscal Year 2014

Legacy computational reactor physics software tools and protocols currently used for support of Advanced Test Reactor (ATR) core fuel management and safety assurance, and to some extent, experiment management, are inconsistent with the state of modern nuclear engineering practice, and are difficult, if not impossible, to verify and validate (V&V) according to modern standards. Furthermore, the legacy staff knowledge required for effective application of these tools and protocols from the 1960s and 1970s is rapidly being lost due to staff turnover and retirements. In late 2009, the Idaho National Laboratory (INL) initiated a focused effort, the ATR Core Modeling Update Project, to address this situation through the introduction of modern high-fidelity transport theory based computational software and models to replace the legacy methods, with appropriate verification and validation (V&V) protocols according to applicable national standards. The project has now completed its fifth, and last, full year of development activity, and has entered an accelerated deployment phase that is expected to run through 2015.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
DOE OSTI2025

Exponential Backoff and Its Security Implications for Safety-Critical OT Protocols over TCP/IP Networks

The convergence of Operational Technology (OT) and Information Technology (IT) networks has become increasingly prevalent with the growth of Industrial Internet of Things (IIoT) applications. This shift, while enabling enhanced automation, remote monitoring, and data sharing, also introduces new challenges related to communication latency and cybersecurity. Oftentimes, legacy OT protocols were adapted to the TCP/IP stack without an extensive review of the ramifications to their robustness, performance, or safety objectives. To further accommodate the IT/OT convergence, protocol gateways were introduced to facilitate the migration from serial protocols to TCP/IP protocol stacks within modern IT/OT infrastructure. However, they often introduce additional vulnerabilities by exposing traditionally isolated protocols to external threats. This study investigates the security and reliability implications of migrating serial protocols to TCP/IP stacks and the impact of protocol gateways, utilizing two widely used OT protocols: Modbus TCP and DNP3. Our protocol analysis finds a significant safety-critical vulnerability resulting from this migration, and our subsequent tests clearly demonstrate its presence and impact. A multi-tiered testbed, consisting of both physical and emulated components, is used to evaluate protocol performance and the effects of device-specific implementation flaws. Through this analysis of specifications and behaviors during communication interruptions, we identify critical differences in fault handling and the impact on time-sensitive data delivery. The findings highlight how reliance on lower-level IT protocols can undermine OT system resilience, and they inform the development of mitigation strategies to enhance the robustness of industrial communication networks.

DNP3↗
NASA NTRSDate not supplied

NASA Systems Engineering and Safety Culture: Aerospace Project Design and Implementation Challenges

Using Systems Engineering principles and the NASA Glenn Safety procedures and protocols, a rigorous method was developed to ensure safe testing and operation of a small, commercial off the shelf turbofan engine at the Aero-Acoustic Propulsion Laboratory (AAPL). The DGEN380 is a small, ~500-lbf thrust class, high-bypass, geared- turbofan engine with a separate flow nozzle. It is a modular, compact, lightweight turbofan with Full-Authority Digital Engine Control. It’s general characteristics make it an ideal candidate for utilization as a testbed for engine aero-acoustic technology maturation in a relevant performance environment. The DGEN380 is the core component of the DGEN Aero-propulsion Research Turbofan (DART) mobile test rig. The full presentation will describe the risk assessment and mitigation process applied to the DART by the project team. The identification and analysis of failure modes led to the development of risk mitigation plans, which include administrative, engineering, and physical controls for the safe operation of the DART test rig at the AAPL facility.

Systems Engineering, Aeronautics, safety↗
DOE OSTI2013

Advanced Test Reactor Core Modeling Update Project Annual Report for Fiscal Year 2013

Legacy computational reactor physics software tools and protocols currently used for support of Advanced Test Reactor (ATR) core fuel management and safety assurance, and to some extent, experiment management, are inconsistent with the state of modern nuclear engineering practice, and are difficult, if not impossible, to verify and validate (V&V) according to modern standards. Furthermore, the legacy staff knowledge required for effective application of these tools and protocols from the 1960s and 1970s is rapidly being lost due to staff turnover and retirements. In late 2009, the Idaho National Laboratory (INL) initiated a focused effort, the ATR Core Modeling Update Project, to address this situation through the introduction of modern high-fidelity computational software and protocols. This aggressive computational and experimental campaign will have a broad strategic impact on the operation of the ATR, both in terms of improved computational efficiency and accuracy for support of ongoing DOE programs as well as in terms of national and international recognition of the ATR National Scientific User Facility (NSUF).

97 MATHEMATICS AND COMPUTING↗
NASA NTRS2012

Evaluating Material Flammability in Microgravity and Martian Gravity Compared to the NASA Standard Normal Gravity Test

Drop tower tests are conducted at Martian gravity to determine the flammability of three materials compared to previous tests in other normal gravity and reduced gravity environments. The comparison is made with consideration of a modified NASA standard test protocol. Material flammability limits in the different gravity and flow environments are tabulated to determine the factor of safety associated with normal gravity flammability screening. Previous testing at microgravity and Lunar gravity indicated that some materials burned to lower oxygen concentrations in low gravity than in normal gravity, although the low g extinction limit criteria are not the same as 1g due to time constraints in drop testing. Similarly, the data presented in this paper for Martian gravity suggest that there is a gravity level below Earth s at which materials burn more readily than on Earth. If proven for more materials, this may indicate the need to include a factor of safety on 1g flammability limits.

Oslon, Sandra. L.↗
DOE OSTI2017

Flux in a 1D-Reactor Cell by Response Matrix

Legacy computational reactor physics software tools and protocols currently used in support of the Advanced Test Reactor (ATR) core fuel management and safety assurance, and to some extent, experiment management, are inconsistent with the state of modern nuclear engineering practice. Thus, they are difficult, if not impossible, to verify and validate (V and V) according to modern standards. Furthermore, the legacy staff knowledge required for effective application of their application and protocols from the 1960's and 1970's is rapidly being lost due to staff turnover and retirements. In late 2009, the Idaho National Laboratory (INL) initiated a focused effort, the ATR Core Modeling Update Project, to address this situation through the introduction of modern high-fidelity transport theory based computational software and models to replace the legacy methods, with appropriate (V and V) protocols according to applicable national standards. The new computational tools include: - The 2-dimensional HELIOS deterministic transport code for integrated ATR core fuel and experiment management and Core Safety Analysis Package (CSAP) physics data generation. The MCNP5 3-dimensional stochastic simulation (Monte Carlo) code for verification and validation applications and for specialized ATR core analysis along with its longstanding traditional role in experiment support - The 2-dimensional deterministic NEWT transport code and the 3-dimensional KENO6 stochastic simulation code, with their SCALE-based support infrastructure for use in V and V applications and as supporting modules for sensitivity-uncertainty analysis via the TSUNAMI system. The ATTILA 3-dimensional discrete-ordinates transport code for specialized experiment support and possibly additional applications. Regardless of application, every neutron transport code, new or legacy, requires verification. The aim of this presentation is to provide a neutron transport benchmark for a simple 1D-reactor cell in plane geometry. The benchmark finds use as a standard of comparison for the codes listed above intended for the ATR upgrade. The method developed here is in contrast to the finite Fourier transform solution found in Ref. 1, which is limited to isotropic scattering and particularly difficult to numerically implement unless the total cross section is constant over the cell.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
DOE OSTI2026

Application of Peracetic Acid in Poultry Processing: Effects of Treatment Dynamics and Emerging Risk of Resistance Development in Salmonella spp.

Nontyphoidal Salmonella is a leading cause of foodborne illness, with poultry representing a major source. Peracetic acid (PAA), a widely adopted antimicrobial in poultry processing, offers advantages over traditional disinfectants but has sparked interest in its combined use with other antimicrobials and potential resistance. This review evaluates the efficacy of PAA in mitigating Salmonella in combination with other food-grade antimicrobials, explores possible synergism, efficacy under varying treatment parameters, resistance development against PAA, and its role in resistance evolution. While PAA demonstrates broad-spectrum efficacy, its performance varies with environmental parameters; higher temperatures generally enhance antimicrobial action but also accelerate PAA degradation. Organic matter diminishes PAA efficacy by reactive quenching. Variability in concentration and contact time further influences outcomes. Despite its oxidative mode of action and presumed low risk for resistance, emerging studies indicate that Salmonella can develop adaptive tolerance and potential cross/coresistance following repeated or sublethal exposure to PAA. These adaptations may involve genetic upregulation of oxidative stress response pathways, efflux systems, and modifications in cell membrane integrity, raising concerns about the long-term sustainability of PAA use. Additionally, combinatorial treatments (e.g., PAA with UV-C, enzymes, or organic acids) show promise in enhancing efficacy while mitigating resistance risks. Despite recognition of PAA's safety and effectiveness, knowledge gaps remain regarding standardized resistance definitions, serotype-specific tolerance, and optimal intervention strategies in commercial settings. Therefore, there is a need for standardized testing protocols, robust studies on potential resistance, and further exploration of synergistic PAA applications to ensure sustained poultry product safety and public health protection.

37 - INORGANIC, ORGANIC, PHYSICAL AND ANALYTICAL C↗
DOE OSTI2017

Flux in a 1D-Reactor Cell by Response Matrix

Legacy computational reactor physics software tools and protocols currently used for support of the Advanced Test Reactor (ATR) core fuel management and safety assurance, and to some extent, experiment management, are inconsistent with the state of modern nuclear engineering practice, and are difficult, if not impossible, to verify and validate (V&V) according to modern standards. Furthermore, the legacy staff knowledge required for effective application of these tools and protocols from the 1960s and 1970s is rapidly being lost due to staff turnover and retirements. Thus in late 2009, the Idaho National Laboratory (INL) initiated a focused effort, the ATR Core Modeling Update Project, to address this situation through the introduction of modern high-fidelity transport theory based computational software and models to replace the legacy methods, with appropriate (V&V) protocols according to applicable national standards.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2024

Securing Grid-interactive Efficient Buildings (GEB) through Cyber Defense and Resilient System (CYDRES)

The DOE CYDRES project is driven by the urgent need to address critical research gaps in the domain of cyber-physical security of smart buildings, including Grid-interactive Efficient Buildings (GEBs). CYDRES, a real-time advanced building resilient platform, aims to enhance the cyber-attack-immune capabilities of buildings through multi-layered prevention, detection, and adaptation mechanisms. CYDRES consists of five key modules: a multi-layer network analyzer, an Automatic Fault Detection, Diagnosis, and Prognosis (AFDDP) framework, an intelligent mode selector, a cyber-resilient control framework, and a situation awareness platform. The Network Analyzer employs a data-driven framework that includes a protocol state learning tool and a CRF (Conditional Random Field) command validator. In Hardware-In-the-Loop (HIL) testbeds, it achieved 100% detection accuracy with a false alarm rate of 3%, validating its efficacy in identifying selected cyber-attacks. The AFDDP framework leverages pattern matching, PCA (Principal Component Analysis)-based strategies, and a DBN (Dynamic Bayesian Network)-based fault diagnosis approach to pinpoint the causes of physical system abnormalities using Building Automation System (BAS) data. In HIL experiments, the AFDDP module attained a detection accuracy of over 95% with a false alarm rate below 7%. Additionally, the fault detector utilized machine learning (Random Forest) and deep learning (Multi-Layer Perceptron) methods with acoustic sensor data to achieve a 100% fault detection accuracy in Heating, Ventilation, and Air-Conditioning (HVAC) equipment. The Mode Selector offered real-time impact analysis, allowing immediate actions to protect BASs in the face of emerging threats. The cyber-resilient control framework included an adaptive Model Predictive Control (MPC) and a measurement compensator, reducing temperature violations by up to 94% and improving the total demand flexibility by up to 70% in HIL experiments. Such HIL experiments covered a cyber-attack case and a physical fault case, showcasing CYDRES’ efficiency in maintaining operational continuity during threats. The situation awareness platform in Grafana enhanced real-time threat detection and response visualization, augmenting the operational awareness for building operators. CYDRES demonstrated high technical effectiveness in various test scenarios, particularly in HIL environments. The project's phased development approach ensured efficient use of resources, highlighting its practical feasibility and readiness for commercialization. By enhancing the security and resilience of building operations, CYDRES represents a significant advance in mitigating risks associated with cyber-physical systems, thereby enhancing public confidence in the safety of modern building infrastructure. Future directions for the project include expanding testing protocols, refining AFDDP methodologies, exploring more comprehensive resilient control strategies, and testing in real commercial buildings.

42 ENGINEERING↗
NASA NTRS2000

NASA Space Technology Can Improve Soldier Health, Performance and Safety

One of the primary goals of NASA Life Sciences research is '... to enable a permanent human presence in space.' To meet this goal, NASA is creating alternative protocols designed to evaluate and test countermeasures that will account for and correct the environmental effects of space flight on crewmembers health, safety, and operational performance. NASA investigators have previously evaluated the effects of long-duration space flight on physiology and performance of cosmonauts aboard the MIR space station. They also initiated tests of a countermeasure, Autogenic-Feedback Training Exercise (AFTE) designed to prevent and/or correct adverse effects, i.e., facilitate adaptation to space and re-adaptation to Earth. AFTE is a six-hour physiological training program that has proven to be a highly efficient and effective method for enabling people to monitor and voluntarily control a range of their own physiological responses, thereby minimizing adverse reactions to environmental stress. However, because of limited opportunities to test this technology with space flight crews, it is essential to find operational or 'real world' environments in which to validate the efficacy of this approach.

Cowings, Patricia S.↗
NASA NTRS2024

Testing of Advanced Capabilities to Enable In-time Safety Management and Assurance for Future Flight Operations

In order to refine an initial Concept of Operations, explore Concepts of Use, and expose/validate requirements for future In-Time Aviation Safety Management Systems (IASMS), testing architectures were created, along with a set of capabilities and underlying information exchange protocols. These systems were conceived and developed based on hazards associated with two envisioned urban area flight domains: (1) highly autonomous small uncrewed aerial systems (sUAS) operating at low altitudes, and (2) highly autonomous air taxis. The initial scope of this development is described in [1]; this report provides an update, focusing on the subsequent developments and test activities. As stated in [1], it is important to note that there are many capabilities already in use by the industry (or soon to be in use) that will play critical roles in future IASMS designs. Those reported here were developed to address a gap in the current state-of-the-art regarding specific hazards/risks, and/or to allow for investigation of the interplay between and across hazard types — particularly regarding how overall safety risk can be reduced or managed effectively. Results of testing and development activities are organized by the operational phase wherein a particular capability would be employed (i.e., preflight, in-flight, and post-flight/off-line). Pre-flight: A set of capabilities were developed to help mitigate safety risk prior to flight (e.g., during flight and mission planning). Results of testing summarize (1) validation activities to raise the Technology Readiness Level (TRL) and (2) evaluation activities where the capabilities were applied to flight/mission planning procedures and used by operators/pilots. For the latter, flight plans were automatically assessed, and operators/pilots were notified of hazardous flight segments so as to enable adjustment of the flight plan and re-evaluation, and/or to better inform go/no-go decisions. Capabilities addressed hazards associated with power consumption, third-party risk, wind, navigation system performance, radiofrequency interference, and proximity to geo-spatial threats (e.g., buildings, trees, and no-fly zones). In-flight: Flight experiments tested capabilities that detect and respond to hazards encountered during flight. In the first series, safety hazards were monitored and assessed onboard, and system-generated mitigation maneuvers were recorded (but not acted upon by the vehicle). In the second series, mitigation maneuver commands directed the aircraft in response to safety hazards (i.e., auto-mitigation). The sUAS used for testing is described in full, as is the test architecture, which included commercial avionics, research avionics, and onboard software designed to detect, assess, and respond to hazards. The onboard system was designed as a run-time assurance framework, consistent with [2] and supportive of both supervisory and automated modes. The primary functions included: real-time risk assessment (RTRA), auto-pilot monitoring, constraint monitoring, and contingency select/triggering. RTRA performs integrated risk assessment considering data from several hazard-related monitors (e.g., battery, motors, navigation, communications, population density, and loss-of-control). Post-flight/off-line: Data monitored and recorded during flights can enable IASMS capabilities that execute after flights have completed (or “off-line”). These include: (1) the ability to identify anomalies and trends that may only be observable when comparing data spanning a number of similar flights; (2) the ability to update and validate pre-flight and in-flight capabilities and any underlying models to improve their performance; (3) the ability to report anomalies/off-nominals that may indicate design changes or maintenance actions are needed; and (4) the ability for humans involved in operations to report safety-relevant observations to help in understanding the flight data and/or the operational context of a flight. Progress on three such capabilities is summarized; the first investigates anomaly detection given a limited set of flight logs and applies an approach previously used for space operations. The second explores what could be identified using a larger set of flight logs, including from web-based forums where flight logs are posted by sUAS autopilot users. The third creates a new means of collecting information on UAS incidents and accidents via the Aviation Safety Reporting System (ASRS).

sUAS↗