Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure recovery”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

Effects of Long-duration Space Flight on Toe Clearance During Treadmill Walking

Upon returning from long-duration space flight, astronauts and cosmonauts must overcome physiologic and sensorimotor changes induced by prolonged exposure to microgravity as they readapt to a gravitational environment. Their compromised balance and coordination lead to an altered and more variable walking pattern (Bloomberg & Mulavara, 2003; McDonald, et al., 1996). Toe trajectory during the swing phase of locomotion has been identified as a precise motor control task (Karst, et al., 1999), thus providing an indication of the coordination of the lower limbs (Winter, 1992). Failure to achieve sufficient toe clearance may put the crew member at a greater risk of tripping and falling, especially if an emergency egress from the vehicle should be necessary upon landing. The purpose of this study was to determine the pre- to post-flight changes in toe clearance in crew members returning from long-duration missions and the recovery thereafter.

Miller, Chris↗

Automating Trend Analysis for Spacecraft Constellations

Spacecraft trend analysis is a vital mission operations function performed by satellite controllers and engineers, who perform detailed analyses of engineering telemetry data to diagnose subsystem faults and to detect trends that may potentially lead to degraded subsystem performance or failure in the future. It is this latter function that is of greatest importance, for careful trending can often predict or detect events that may lead to a spacecraft's entry into safe-hold. Early prediction and detection of such events could result in the avoidance of, or rapid return to service from, spacecraft safing, which not only results in reduced recovery costs but also in a higher overall level of service for the satellite system. Contemporary spacecraft trending activities are manually intensive and are primarily performed diagnostically after a fault occurs, rather than proactively to predict its occurrence. They also tend to rely on information systems and software that are oudated when compared to current technologies. When coupled with the fact that flight operations teams often have limited resources, proactive trending opportunities are limited, and detailed trend analysis is often reserved for critical responses to safe holds or other on-orbit events such as maneuvers. While the contemporary trend analysis approach has sufficed for current single-spacecraft operations, it will be unfeasible for NASA's planned and proposed space science constellations. Missions such as the Dynamics, Reconnection and Configuration Observatory (DRACO), for example, are planning to launch as many as 100 'nanospacecraft' to form a homogenous constellation. A simple extrapolation of resources and manpower based on single-spacecraft operations suggests that trending for such a large spacecraft fleet will be unmanageable, unwieldy, and cost-prohibitive. It is therefore imperative that an approach to automating the spacecraft trend analysis function be studied, developed, and applied to missions such as DRACO with the intent that mission operations costs be significantly reduced. The goal of the Constellation Spacecraft Trend Analysis Toolkit (CSTAT) project is to serve as the pathfinder for a fully automated trending system to support spacecraft constellations. The development approach to be taken is evolutionary. In the first year of the project, the intent is to significantly advance the state of the art in current trending systems through improved functionality and increased automation. In the second year, the intent is to add an expert system shell, likely through the adaptation of an existing commercial-off-the-shelf (COTS) or government-off-the-shelf (GOTS) tool to implement some level of the trending intelligence that humans currently provide in manual operations. In the third year, the intent is to infuse the resulting technology into a near-term constellation or formation-flying mission to test it and gain experience in automated trending. The lessons learned from the real missions operations experience will then be used to improve the system, and to ultimately incorporate it into a fully autonomous, closed-loop mission operations system that is truly capable of supporting large constellations. In this paper, the process of automating trend analysis for spacecraft constellations will be addressed. First, the results of a survey on automation in spacecraft mission operations in general, and in trending systems in particular will be presented to provide an overview of the current state of the art. Next, a rule-based model for implementing intelligent spacecraft subsystem trending will be then presented, followed by a survey of existing COTS/GOTS tools that could be adapted for implementing such a model. The baseline design and architecture of the CSTAT system will be presented. Finally, some results obtained from initial software tests and demonstrations will be presented.

Davis, George↗

CHESS 2025: Waveform LiDAR data from NEON AOP surveys

This dataset provides Level 1 (L1) full-waveform light detection and ranging (LiDAR) data collected for the 2025 Colorado Headwaters Ecological Spectroscopy Study (CHESS). These data were acquired to enable characterization of vegetation structure and other three-dimensional features of the land surface, and to evaluate structural changes that may have occurred between a prior LiDAR acquisition in 2018 and the 2025 overflight. Waveform LiDAR data can provide more detailed information about objects on the ground than discrete point clouds typically do, and they are often used for granular target segmentation and characterization of subcanopy vegetation. The data were acquired over three study domains in the Upper Gunnison river basin: the upper East River watershed (CRBU); Almont Triangle and Taylor Canyon (ALMO); and Upper Taylor River watershed (UPTA) between 2025-06-13 and 2025-07-15. LiDAR data were acquired using the Optech Galaxy Prime Airborne LiDAR Terrain Mapper onboard the National Ecological Observatory Network (NEON) Airborne Observation Platform (AOP). These are the primary waveform LiDAR data delivered by NEON and are provided per flightline in compressed Pulsewaves format, an open-source binary file standard. A Pulsewaves object comprises a two files: a pulse (.pls) file, which stores the geographic origin, outgoing vector, and metadata for every laser pulse emitted by the scanner, and a wave file (.wvs), which stores the sequential amplitude samples of the outgoing pulse and the returning signals. The files are published here in their compressed forms (.plz, .wvz). All waveform data were processed following the theoretical workflow described in the NEON L0-to-L1 Waveform LiDAR Algorithm Theoretical Basis Document (Krause and Goulden 2022a); however, the Pulsewaves output format differs from a legacy format described in that document. Waveform amplitude samples are recorded at 1 nanosecond intervals. All coordinates are provided in meters. Horizontal coordinates are referenced in Universal Transverse Mercator (UTM) zone 13N and the World Geodetic System (WGS) 1984 ensemble datum. Elevations are referenced to Geoid12A. Waveform data for the UPTA survey area were collected without incident and the published records are complete. However, both the ALMO and CRBU collections experienced issues that resulted in incomplete data for those areas. On collection day 2018-06-16 a hardware failure caused the waveform digitizer to lose data from the eastern edge of the ALMO site (Figure 22). The waveform data for flightlines 2–20 could not be extracted from the digitizer, and the data proved unrecoverable. As a result, a portion of the site does not have coverage with waveform data. Although no hardware failure was observed during collection over the CRBU area, final waveform files generated by vendor software contained only ~25% of the expected number of return pulses. After discovery, NEON initiated troubleshooting with the vendor. The root cause of the data ablation had not been identified at the time of publication. Additional data will be published in an update to this package if further recovery proves successful. CHESS Project Description: The Colorado Headwaters Ecological Spectroscopy Study (CHESS) comprised a multi-week airborne remote sensing and field observation campaign in the Upper Gunnison Basin, Colorado, conducted in June and July of 2025. Airborne remote sensing was conducted by the National Ecological Observatory Network Airborne Observation Platform (NEON AOP), concurrent with a field campaign run by the Rocky Mountain Biological Laboratory (RMBL), the Lawrence Berkeley National Laboratory (LBNL) and SLAC National Accelerator Laboratory Watershed Function Science Focus Area (SFA), and NASA-JPL (Jet Propulsion Laboratory) Earth Surface Mineral Dust Source Investigation (EMIT) program. Between June 10 and July 18, 2025, the NEON AOP flight team collected high-resolution aerial imaging spectroscopy and Light Detection and Ranging (LiDAR) data over three domains: the Upper East River (CRBU), Almont Triangle (ALMO), and the Upper Taylor Basin (UPTA). In coordination with the flights, a field campaign acquired ground-truth observations, including observations of vegetation composition, foliar traits, forest demography, and subsurface properties in 18 core sampling areas within the domains. Additional surface water observations were taken at over 380 point locations. All CHESS campaign datasets can be found within the CHESS ESS-DIVE data portal: https://data.ess-dive.lbl.gov/portals/chess. Funding Acknowledgement: Field and remote-sensing data acquisition was performed under a grant from the National Aeronautics and Space Administration (80NSSC24K1005). This work was also supported by the Watershed Function Science Focus Area at Lawrence Berkeley National Laboratory funded by the US Department of Energy, Office of Science, Biological and Environmental Research under Contract No. DE-AC02-05CH11231.

2018 NEON and 2025 CHESS Campaigns↗

LANSCE Module 1 Capacitor Room Failure [Slides]

At ~3:30 am on Sunday, high-voltage line in capacitor room overheated to the extent that the poly insulating material caught fire and dripped melted insulation onto equipment below. LAFD responded and, per pre-incident planning, waited for AOT personnel to respond to the area. AOT personnel, safed equipment and waited with LAFD for fire to “burn out”. Using an IWD, AOT personnel safely re-entered the area after conducting hazards analysis and engaging SMEs, re: controls for combustion products and COVID-19 hazards. Recovery action took several days with a focus on getting it right. Beam re-start decisions were made with impacted organizations and considering AOTRFE personnel.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗

Transforming Our SMEX Organization by Way of Innovation, Standardization, and Automation

NASA's Small Explorer (SMEX) Flight Operations Team (FOT) is currently tackling the challenge of supporting ground operations for several satellites that have surpassed their designed lifetime and have a dwindling budget. At Goddard Space Flight Center (GSFC), these missions are presently being reengineered into a fleet-oriented ground system. When complete, this ground system will provide command and control of four SMEX missions, and will demonstrate fleet automation and control concepts as a pathfinder for additional mission integrations. A goal of this reengineering effort is to demonstrate new ground-system technologies that show promise of supporting longer mission lifecycles and simplifying component integration. In pursuit of this goal, the SMEX organization has had to examine standardization, innovation, and automation. A core technology being demonstrated in this effort is the GSFC Mission Services Evolution Center (GMSEC) architecture. The GMSEC architecture focuses on providing standard interfaces for ground system applications to promote application interoperability. Building around commercial Message Oriented Middleware and providing a common messaging standard allows GMSEC to provide the capabilities necessary to support integration of new software components into existing missions and increase the level of interaction within the system. For SMS, GMSEC has become the technology platform to transform flight operations with the innovation and automation necessary to reduce operational costs. The automation technologies supported in SMEX are built upon capabilities provided by the GMSEC architecture that allows the FOT to further reduce the involvement of the console, operator. Initially, SMEX is automating only routine operations, such as safety and health monitoring, basic commanding, and system recovery. The operational concepts being developed here will reduce the need for staffed passes and are a necessity for future fleet management. As this project continues to evolve, additional innovations beyond GMSEC and automation have, and will continue to be developed. The team developed techniques for migrating ground systems of existing on-orbit assets. The tools necessary to monitor and control software failures were integrated and tailored for operational environments. All this was done with a focus of extending fleet operations to mission beyond SMU. The result of this work is the foundation for a broader fleet-capable ground system that will include several missions supported by the Space Science Mission Operations Project.

Madden, Maureen↗

A Scheduling Algorithm for Replicated Real-Time Tasks

We present an algorithm for scheduling real-time periodic tasks on a multiprocessor system under fault-tolerant requirement. Our approach incorporates both the redundancy and masking technique and the imprecise computation model. Since the tasks in hard real-time systems have stringent timing constraints, the redundancy and masking technique are more appropriate than the rollback techniques which usually require extra time for error recovery. The imprecise computation model provides flexible functionality by trading off the quality of the result produced by a task with the amount of processing time required to produce it. It therefore permits the performance of a real-time system to degrade gracefully. We evaluate the algorithm by stochastic analysis and Monte Carlo simulations. The results show that the algorithm is resilient under hardware failures.

Yu, Albert C.↗

Experience With Bayesian Image Based Surface Modeling

Bayesian surface modeling from images requires modeling both the surface and the image generation process, in order to optimize the models by comparing actual and generated images. Thus it differs greatly, both conceptually and in computational difficulty, from conventional stereo surface recovery techniques. But it offers the possibility of using any number of images, taken under quite different conditions, and by different instruments that provide independent and often complementary information, to generate a single surface model that fuses all available information. I describe an implemented system, with a brief introduction to the underlying mathematical models and the compromises made for computational efficiency. I describe successes and failures achieved on actual imagery, where we went wrong and what we did right, and how our approach could be improved. Lastly I discuss how the same approach can be extended to distinct types of instruments, to achieve true sensor fusion.

Stutz, John C.↗

Geoscience Laser Altimeter System (GLAS) Loop Heat Pipes: An Eventual First Year On-Orbit

Goddard Space Flight Center's Geoscience Laser Altimeter System (GLAS) is the sole scientific instrument on the Ice, Cloud and land Elevation Satellite (ICESat) that was launched on January 12, 2003 from Vandenberg AFB. A thermal control architecture based on propylene Loop Heat Pipe technology was developed to provide selectable/stable temperature control for the lasers and other electronics over the widely varying mission environment. Following a nominal LHP and instrument start-up, the mission was interrupted with the failure of the first laser after only 36 days of operation. During the 5-month failure investigation, the two GLAS LHPs and the electronics operated nominally, using heaters as a substitute for the laser heat load. Just prior to resuming the mission, following a seasonal spacecraft yaw maneuver, one of the LHPs deprimed and created a thermal runaway condition that resulted in an emergency shutdown of the GLAS instrument. This paper presents details of the LHP anomaly, the resulting investigation and recovery, along with on-orbit flight data during these critical events.

Grob, E.↗

Digital Synchronizer without Metastability

A proposed design for a digital synchronizing circuit would eliminate metastability that plagues flip-flop circuits in digital input/output interfaces. This metastability is associated with sampling, by use of flip-flops, of an external signal that is asynchronous with a clock signal that drives the flip-flops: it is a temporary flip-flop failure that can occur when a rising or falling edge of an asynchronous signal occurs during the setup and/or hold time of a flip-flop. The proposed design calls for (1) use of a clock frequency greater than the frequency of the asynchronous signal, (2) use of flip-flop asynchronous preset or clear signals for the asynchronous input, (3) use of a clock asynchronous recovery delay with pulse width discriminator, and (4) tying the data inputs to constant logic levels to obtain (5) two half-rate synchronous partial signals - one for the falling and one for the rising edge. Inasmuch as the flip-flop data inputs would be permanently tied to constant logic levels, setup and hold times would not be violated. The half-rate partial signals would be recombined to construct a signal that would replicate the original asynchronous signal at its original rate but would be synchronous with the clock signal.

Simle, Robert M.↗

Direct Simulation of Flow over A Wall-Mounted Hump

Simulating separated flows at high Reynolds numbers using Reynolds Averaged Navier-Stokes (RANS) modeled equations remains a challenge in aeronautics. The main hindrance to progress stems from the lack of extended de- tailed data pertinent to the root cause of failure of RANS models, as well as the little progress in RANS modeling innovations in the past several decades. The goal of the current effort is to generate data for separated flow at a Reynolds numbers where conventional models are challenged. We use Direct Numerical Simulations to model turbulent flow over the wall-mounted hump configuration to investigate the physics of flow separation and boundary layer recovery, as well as provide data relevant to the modeling community. A chord-based Reynolds number of Re(sub c) = 47,500 is considered with a turbulent inflow profile of Re(sub θ) = 1,400 (θ /c = 3%). We use FDL3DI, a code that solves the compressible Navier-Stokes equations using high-order compact-difference scheme and filter, with the standard re- cycling/rescaling method of generating turbulent boundary layers as inflow to the computational domain. Two differ- ent configurations of the upper-wall are analyzed for two sets of boundary conditions (slip and no-slip). The results are compared with the available higher Re(sub c) (= 936,000, Re(sub θ) = 7,200, θ /c = 0.77%) experiment for major flow features. The simulated lower Rec allows for DNS-like mesh resolutions, and adequately wide spans. The results from these simulations show earlier separation and delayed reattachment compared to Re(sub c) = 936,000, and significantly higher skin friction in the forebody of the hump. We also find that the upper-wall shape and boundary condition influence pressure distribution over the hump, whereas skin friction is only influenced by the boundary condition.

Wall-Mounted↗

Software for Automation of Real-Time Agents, Version 2

Version 2 of Closed Loop Execution and Recovery (CLEaR) has been developed. CLEaR is an artificial intelligence computer program for use in planning and execution of actions of autonomous agents, including, for example, Deep Space Network (DSN) antenna ground stations, robotic exploratory ground vehicles (rovers), robotic aircraft (UAVs), and robotic spacecraft. CLEaR automates the generation and execution of command sequences, monitoring the sequence execution, and modifying the command sequence in response to execution deviations and failures as well as new goals for the agent to achieve. The development of CLEaR has focused on the unification of planning and execution to increase the ability of the autonomous agent to perform under tight resource and time constraints coupled with uncertainty in how much of resources and time will be required to perform a task. This unification is realized by extending the traditional three-tier robotic control architecture by increasing the interaction between the software components that perform deliberation and reactive functions. The increase in interaction reduces the need to replan, enables earlier detection of the need to replan, and enables replanning to occur before an agent enters a state of failure.

Fisher, Forest↗

Behavior of an air-cooled thermosiphon during a non-air gas ingress event

Here, this study investigates the transient response of an air-cooled thermosiphon subjected to a sudden non-air gas ingress event. Results presented are from experimental testing conducted on a large-scale thermal hydraulic facility that examines heat removal performance of the Reactor Cavity Cooling System (RCCS) concept, a passive safety system for advanced nuclear reactors. Relying on buoyancy driven natural circulation flow, these systems feature a series of riser standpipes and coupled chimney network that provide a pathway for heat rejection to the atmosphere. In this work, the facility was modified to allow a transition of the draft intake from normal ambient air, to draft intake from an open-top volume containing high purity argon. Testing began by establishing normal operation and allowing the facility to reach steady-state thermal hydraulic flow conditions with natural air draft. The transitioned sequence was then initiated which simultaneously changed the inlet boundary from open air to a pathway from the quiescent argon volume. This event caused 1,200 cu-feet of the heavy gas, twice the internal volume of total facility flow path, to be drawn into the inlet plenum and ingress into the heated riser standpipes. With the upper chimney network still containing residual air, there was insufficient density difference to maintain buoyancy driven natural circulation. After a period of only 90 s past the ingress event, the facility experienced complete flow stagnation before entering an extended period of severely degraded system flow. Due to the cessation of bulk fluid movement and subsequent failure of its heat removal function, fluid and structural temperatures began to rise sharply. Re-circulation patterns developed within the multiple parallel riser standpipes, where hot gas near the outlets was observed to travel downward and re-enter the inlet of adjacent channels. After approximately 18-minutes, fluid temperatures and their associated density difference rose to a level sufficient to allow reestablishment of buoyancy driven system flow, and ultimately, recovery of facility operation to normal behavior.

42 ENGINEERING↗

DAQExpert the service to increase CMS data-taking efficiency

The Data Acquisition (DAQ) system of the Compact Muon Solenoid (CMS) experiment at the LHC is a complex system responsible for the data readout, event building and recording of accepted events. Its proper functioning plays a critical role in the data-taking efficiency of the CMS experiment. In order to ensure high availability and recover promptly in the event of hardware or software failure of the subsystems, an expert system, the DAQ Expert, has been developed. It aims at improving the data taking efficiency, reducing the human error in the operations and minimising the on-call expert demand. Introduced in the beginning of 2017, it assists the shift crew and the system experts in recovering from operational faults, streamlining the post mortem analysis and, at the end of Run 2, triggering fully automatic recovery without human intervention. DAQ Expert analyses the real-time monitoring data originating from the DAQ components and the high-level trigger updated every few seconds. It pinpoints data flow problems, and recovers them automatically or after given operator approval. We analyse the CMS downtime in the 2018 run focusing on what was improved with the introduction of automated recovery; present challenges and design of encoding the expert knowledge into automated recovery jobs. Furthermore, we demonstrate the web-based, ReactJS interfaces that ensure an effective cooperation between the human operators in the control room and the automated recovery system. We report on the operational experience with automated recovery.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Recovery of Space Shuttle Columbia and Return to Flight of Space Shuttle Discovery

NASA has come a long way in our journey to reduce the risks of operating the Spse Shuttle system. The External Tank bipod Thermal Protection System has been redesigned to eliminate the proximate cause of the Columbia accident. In all areas, we have applied the collective knowledge and capabilities of our Nation to comply with the Columbia Accident Investigation Board recommendations and to raise the bar beyond that. We have taken prudent technical action on potential threats to review and verify the material condition of all critical areas where failure could result in catastrophic loss of the crew and vehicle. We are satisfied that critical systems and elements should operate as intended-safely and reliably. While we will never eliminate all the risks from our human space flight programs, we have eliminated those we can and reduced, controlled, and/or mitigated others. The remaining identified risks will be evaluated for acceptance. Our risk reduction approach has its roots in the system safety engineering hierarchy for hazard abatement long employed in aerospace systems engineering. The components of the hierarchy are, in order of precedence, to: design/redesign; eliminate the hazard/risk; reduce the hazard/risk; and control the hazard/risk and/or mitigate the consequence of the remaining hazard/risk through warning devices, special procedures/capabilities, and/or training. This proven approach to risk reduction has been applied to potential hazards and risks in all critical areas of the Space Shuttle and has guided us through the technical challenges, failures, and successes present in return to flight endeavors. This approach provides the structured deliberation process required to verify and form the foundation for accepting any residual risk across the entire Space Shuttle Program by NASA leadership.

Rudolphi, Michael U.↗

Parachuting to Safety

NASA's Langley Research Center awarded Ballistic Recovery Systems, Inc., three Small Business Innovation Research (SBIR) contracts to research and develop a new, low cost, lightweight recovery system for aircraft in both civilian and military markets. The company responded with a unique ballistic parachute system that lowers an entire aircraft to the ground in the event of an emergency. BRS parachutes are designed to provide a safe landing for pilots and passengers while keeping them in their aircraft. They currently fit ultralights, kit-built aircraft, and certified small business aircraft. The parachutes are lifesavers in cases of engine failure, mid-air collisions, pilot disorientation or incapacitation, unrecovered spins, extreme icing, and fuel exhaustion. To date, over 148 lives were saved as a result of a BRS parachute system.

Source record↗

Self-Healable Electrical Insulation for High Voltage Applications

Polymeric aircraft electrical insulation normally degrades by partial discharge with increasing voltage, which causes excessive localized Joule heating in the material and ultimately leads to dielectric failure of the insulator through thermal breakdown. Developing self-healing insulation could be a viable option to mitigate permanent mechanical degradation, thus increasing the longevity of the insulation. Instead of relying on catalyst and monomer-filled microcapsules to crack, flow, and cure at the damaged sites described in well-published mechanisms, establishment of ionic crosslinks could allow for multiple healing events to occur with the added benefit of achieving full recovery strength under certain thermal environments. This could be possible if the operating temperature of the insulator is the same as or close to the temperature where ionic crosslinks are formed. Surlyn, a commercial material with ionic crosslinks, was investigated as a candidate self-healing insulator based off prior demonstrations of self-healing behavior. Thin films of varying thicknesses were investigated and the effects of thickness on the dielectric strength were evaluated and compared to representative polymer insulators. The effects of thermal conditioning on the recovery strength and healing were observed as a function of time following dielectric breakdown. Moisture absorption was also studied to determine if moisture absorption rates in Surlyn were lower than that of common polyimides.

electrical insulation↗

Nature-Inspired Motivation for Developing Self-Healable Electrical Insulation

Polymeric aircraft electrical insulation normally degrade by partial discharge with increasing voltage, which causes excessive localized Joule heating in the material and ultimately leads to dielectric failure of the insulator through thermal breakdown. Self-healing insulation may be a viable option to mitigate permanent mechanical degradation, thus increasing the longevity of the material. Instead of relying on catalyst and monomer-filled microcapsules to crack, flow, and cure at the damaged sites described in well-published mechanisms, self-healing through establishment of ionic crosslinks allows for multiple healing events to occur as well as achieving full recovery strength under certain thermal environments. Surlyn®, a commercial ionically-crosslinked material, was investigated as a self-healing insulation candidate based on prior demonstrations of self-healing behavior. Thin films of varying thicknesses were investigated and the effects of thickness on the dielectric strength were evaluated and compared to representative polymer insulators. The effects of thermal conditioning on the recovery strength and healing were observed as a function of time following dielectric breakdown. Moisture absorption was studied to determine if moisture absorption rates in Surlyn® were lower than that of common polyimide insulators. Preliminary data showed that when cut, Surlyn® films lost nearly 60 percent of its original dielectric strength. However, when Surlyn® was cut and subsequently annealed, the films not only re-mended, but also recouped approximately 93 percent of its original dielectric strength, along with 90-97 percent of its mechanical strength.

electrical↗

Fault-tolerant software for aircraft control systems

Concepts for software to implement real time aircraft control systems on a centralized digital computer were discussed. A fault tolerant software structure employing functionally redundant routines with concurrent error detection was proposed for critical control functions involving safety of flight and landing. A degraded recovery block concept was devised to allow collocation of critical and noncritical software modules within the same control structure. The additional computer resources required to implement the proposed software structure for a representative set of aircraft control functions were discussed. It was estimated that approximately 30 percent more memory space is required to implement the total set of control functions. A reliability model for the fault tolerant software was described and parametric estimates of failure rate were made.

Source record↗