Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault tolerant systems”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 379 records · Page 21

Unitary Qubit Lattice Algorithms for Plasma Physics

This final technical report summarizes research conducted under DOE Award DE-SC0021653 to develop unitary Quantum Lattice Algorithms for modeling electromagnetic wave propagation and scattering in complex media, including plasmas. The project developed and validated quantum-inspired formulations of Maxwell's equations that preserve unitary evolution and can be evaluated on classical high-performance computing systems while providing a foundation for future quantum-computing implementations. Major accomplishments include the development of two- and three-dimensional algorithms for electromagnetic scattering; scalable, distributed-memory implementations demonstrated on the Perlmutter supercomputer; formulations for nonlinear lossless fluid dynamics and cold, lossless, inhomogeneous magnetized plasmas; and an explicit quantum algorithm for a time-discretized Lorenz model. Simulations reproduced a range of characteristic wave phenomena, including transient effects that are not readily apparent in conventional frequency-domain studies, demonstrating the effectiveness of the proposed approach for modeling complex electromagnetic and plasma systems. The work establishes a unified theoretical and computational framework for quantum and quantum-inspired simulation and provides a foundation for future implementation on fault-tolerant quantum systems.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Markov reward processes

Numerous applications in the area of computer system analysis can be effectively studied with Markov reward models. These models describe the behavior of the system with a continuous-time Markov chain, where a reward rate is associated with each state. In a reliability/availability model, upstates may have reward rate 1 and down states may have reward rate zero associated with them. In a queueing model, the number of jobs of certain type in a given state may be the reward rate attached to that state. In a combined model of performance and reliability, the reward rate of a state may be the computational capacity, or a related performance measure. Expected steady-state reward rate and expected instantaneous reward rate are clearly useful measures of the Markov reward model. More generally, the distribution of accumulated reward or time-averaged reward over a finite time interval may be determined from the solution of the Markov reward model. This information is of great practical significance in situations where the workload can be well characterized (deterministically, or by continuous functions e.g., distributions). The design process in the development of a computer system is an expensive and long term endeavor. For aerospace applications the reliability of the computer system is essential, as is the ability to complete critical workloads in a well defined real time interval. Consequently, effective modeling of such systems must take into account both performance and reliability. This fact motivates our use of Markov reward models to aid in the development and evaluation of fault tolerant computer systems.

Smith, R. M.↗

Experiments in fault tolerant software reliability

The reliability of voting was evaluated in a fault-tolerant software system for small output spaces. The effectiveness of the back-to-back testing process was investigated. Version 3.0 of the RSDIMU-ATS, a semi-automated test bed for certification testing of RSDIMU software, was prepared and distributed. Software reliability estimation methods based on non-random sampling are being studied. The investigation of existing fault-tolerance models was continued and formulation of new models was initiated.

Mcallister, David F.↗

Responsive systems - The challenge for the nineties

A concept of responsive computer systems will be introduced. The emerging responsive systems demand fault-tolerant and real-time performance in parallel and distributed computing environments. The design methodologies for fault-tolerant, real time and responsive systems will be presented. Novel techniques of introducing redundancy for improved performance and dependability will be illustrated. The methods of system responsiveness evaluation will be proposed. The issues of determinism, closed and open systems will also be discussed from the perspective of responsive systems design.

Malek, Miroslaw↗

Advanced information processing system for advanced launch system: Avionics architecture synthesis

The Advanced Information Processing System (AIPS) is a fault-tolerant distributed computer system architecture that was developed to meet the real time computational needs of advanced aerospace vehicles. One such vehicle is the Advanced Launch System (ALS) being developed jointly by NASA and the Department of Defense to launch heavy payloads into low earth orbit at one tenth the cost (per pound of payload) of the current launch vehicles. An avionics architecture that utilizes the AIPS hardware and software building blocks was synthesized for ALS. The AIPS for ALS architecture synthesis process starting with the ALS mission requirements and ending with an analysis of the candidate ALS avionics architecture is described.

Lala, Jaynarayan H.↗

The influence of sampling rate on the dynamics and control of aeronautical systems

It is shown in the design of aeronautical control systems that sampling rate variations give rise to migrations of the discrete eigenvalues for both the plant and the controllers. In general, these migrations tend to degrade simulation fidelity and the overall performance of Ultrareliable Fault Tolerant Control Systems (UFTCS). These systems consist of a redundant asynchronous network of microprocessors which use sensor information to generate the servo commands that drive actuators, thrust linkages, etc. A change in the sampling period of a single microprocessor will, in addition to causing an eigenvalue shift, alter the magnitude of the servo command issued by the controller. The influence of these changes and the effect of initial conditions and skew are considered.

Howard, J. C.↗

SAFER Inspection of Space Shuttle Thermal Protection System

In the aftermath of the space shuttle Columbia accident, it quickly became clear that new methods would need to be developed that would provide the capability to inspect and repair the shuttle's thermal protection system (TPS). A boom extension to the Remote Manipulator System (RMS) with a laser topography sensor package was identified as the primary means for measuring the damage depth in acreage tile as well as scanning Reinforced Carbon- Carbon (RCC) surfaces. However, concern over the system's fault tolerance made it prudent to investigate alternate means of acquiring close range photographs and contour depth measurements in the event of a failure. One method that was identified early was to use the Simplified Aid For EVA Rescue (SAFER) propulsion system to allow EVA access to damaged areas of concern. Several issues were identified as potential hazards to SAFER use for this operation. First, the ability of an astronaut to maintain controlled flight depends upon efficient technique and hardware reliability. If either of these is insufficient during flight operations, a safety tether must be used to rescue the crewmember. This operation can jeopardize the integrity of the Extra-vehicular Mobility Unit (EMU) or delicate TPS materials. Controls were developed to prevent the likelihood of requiring a tether rescue, and procedures were written to maximize the chances for success if it cannot be avoided. Crewmember ability to manage tether cable tension during nominal flight also had to be evaluated to ensure it would not negatively affect propellant consumption. Second, although propellant consumption, flight control, orbital dynamics, and flight complexity can all be accurately evaluated in Virtual Reality (VR) Laboratory at Johnson Space Center, there are some shortcomings. As a crewmember's hand is extended to simulate measurement of tile damage, it will pass through the vehicle without resistance. In reality, this force will push the crewmember away from the vehicle, and could induce a moment which, if strong enough, could saturate the attitude control system in SAFER. This raises the concern that additional propellant will be consumed to maintain controlled flight. To account for this, the fidelity of the Virtual Reality simulation was improved to include the effect of crewmember contact with the vehicle during SAFER flight. In addition, while participating in VR simulations, the subject is in shirt sleeves and sits in a chair. This does not provide a flight-like representation of body position awareness. To prevent inadvertent contact with tile or RCC, other facilities were utilized to establish crew preferences for body attitude and tool configuration. Finally, a study was performed to determine if attitude constraints are needed for the Space shuttle and International Space Station to reduce SAFER flight difficulty.

Scoville, Zebulon C.↗

Achieving reliability - The evolution of redundancy in American manned spacecraft computers

The Shuttle is the first launch system deployed by NASA with full redundancy in the on-board computer systems. Fault-tolerance, i.e., restoring to a backup with less capabilities, was the method selected for Apollo. The Gemini capsule was the first to carry a computer, which also served as backup for Titan launch vehicle guidance. Failure of the Gemini computer resulted in manual control of the spacecraft. The Apollo system served vehicle flight control and navigation functions. The redundant computer on Skylab provided attitude control only in support of solar telescope pointing. The STS digital, fly-by-wire avionics system requires 100 percent reliability. The Orbiter carries five general purpose computers, four being fully-redundant and the fifth being soley an ascent-descent tool. The computers are synchronized at input and output points at a rate of about six times a second. The system is projected to cause a loss of an Orbiter only four times in a billion flights.

Tomayko, J. E.↗

Modeling the data management system of Space Station Freedom with DEPEND

Some of the features and capabilities of the DEPEND simulation-based modeling tool are described. A study of a 1553B local bus subsystem of the Space Station Freedom Data Management System (SSF DMS) is used to illustrate some types of system behavior that can be important to reliability and performance evaluations of this type of spacecraft. A DEPEND model of the subsystem is used to illustrate how these types of system behavior can be modeled, and shows what kinds of engineering and design questions can be answered through the use of these modeling techniques. DEPEND's process-based simulation environment is shown to provide a flexible method for modeling complex interactions between hardware and software elements of a fault-tolerant computing system.

Olson, Daniel P.↗

CELSS system control: issues, methods, and directions

In the general control perspective, the CELSS concept implies a very complex system and presents challenges at every level. These challenges are generated by: (1) the prospect that the system will be inherently unstable, (2) the prospective difficulty of establishing an adequate mathematical model of the system for the purpose of control law synthesis (dimensionality is high, and the dynamics and interactive processes of some of the subsystems are not understood well), (3) assuring control law robustness (assuring that the resulting control law(s) will be effective over the domain of the specified uncertainties), (4) hardware realization of the control law, (5) hardware system robustness ("fault tolerance") and (6) achieving the logistics of the automation (or "management") aspects of the problem. A suggested organization of the problem, a sketch of the issues related to perceived difficulties, a commentary/evaluation of the issues, a review of methods available to address the issues, and a suggested strategy to address the broad CELSS systems control problem are presented.

NASA Center ARC↗

Advanced Power Regulator Developed for Spacecraft

The majority of new satellites generate electrical power using photovoltaic solar arrays and store energy in batteries for use during eclipse periods. Careful regulation of battery charging during insolation can greatly increase the expected lifetime of the satellite. The battery charge regulator is usually custom designed for each satellite and its specific mission. Economic competition in the small satellite market requires battery charge regulators that are lightweight, efficient, inexpensive, and modular enough to be used in a wide variety of satellites. A new battery charge regulator topology has been developed at the NASA Lewis Research Center to address these needs. The new regulator topology uses industry-standard dc-dc converters and a unique interconnection to provide size, weight, efficiency, fault tolerance, and modularity benefits over existing systems. A transformer-isolated buck converter is connected such that the high input line is connected in series with the output. This "bypass connection" biases the converter's output onto the solar array voltage. Because of this biasing, the converter only processes the fraction of power necessary to charge the battery above the solar array voltage. Likewise, the same converter hookup can be used to regulate the battery output to the spacecraft power bus with similar fractional power processing. The advantages of this scheme are: 1) Because only a fraction of the power is processed through the dc-dc converter, the single- stage conversion efficiency is 94 to 98 percent; 2) Costly, high-efficiency dc-dc converters are not necessary for high end-to-end system efficiency; 3) The system is highly fault tolerant because the bypass connection will still deliver power if the dc-dc converter fails; and 4) The converters can easily be connected in parallel, allowing higher power systems to be built from a common building block. This new technology will be spaceflight tested in the Photovoltaic Regulator Kit Experiment (PRKE) on TRW's Small Spacecraft Technology Initiative (SSTI) satellite scheduled for launch in 1996. This experiment uses commercial dc-dc converters (28 to 15 Vdc) and additional control circuitry to regulate current to a battery load. The 60-W, 87- percent efficiency converters can control 180 W of power at an efficiency of 94 percent in the new configuration. The power density of the Photovoltaic Regulator Kit Experiment is about 200 W/kg.

Source record↗

Collaboration Between NASA Centers of Excellence on Autonomous System Software Development

Software for space systems flight operations has its roots in the early days of the space program when computer systems were incapable of supporting highly complex and flexible control logic. Control systems relied on fast data acquisition and supervisory control from a roomful of systems engineers on the ground. Even though computer hardware and software has become many orders of magnitude more capable, space systems have largely adhered to this original paradigm In an effort to break this mold, Kennedy Space Center (KSC) has invested in the development of model-based diagnosis and control applications for ten years having broad experience in both ground and spacecraft systems and software. KSC has now partnered with Ames Research Center (ARC), NASA's Center of Excellence in Information Technology, to create a new paradigm for the control of dynamic space systems. ARC has developed model-based diagnosis and intelligent planning software that enables spacecraft to handle most routine problems automatically and allocate resources in a flexible way to realize mission objectives. ARC demonstrated the utility of onboard diagnosis and planning with an experiment aboard Deep Space I in 1999. This paper highlights the software control system collaboration between KSC and ARC. KSC has developed a Mars In-situ Resource Utilization testbed based on the Reverse Water Gas Shift (RWGS) reaction. This plant, built in KSC's Applied Chemistry Laboratory, is capable of producing the large amount of Oxygen that would be needed to support a Human Mars Mission. KSC and ARC are cooperating to develop an autonomous, fault-tolerant control system for RWGS to meet the need for autonomy on deep space missions. The paper will also describe how the new system software paradigm will be applied to Vehicle Health Monitoring, tested on the new X vehicles and integrated into future launch processing systems.

Goodrich, Charles H.↗

Validation of the SURE Program, phase 1

Presented are the results of the first phase in the validation of the SURE (Semi-Markov Unreliability Range Evaluator) program. The SURE program gives lower and upper bounds on the death-state probabilities of a semi-Markov model. With these bounds, the reliability of a semi-Markov model of a fault-tolerant computer system can be analyzed. For the first phase in the validation, fifteen semi-Markov models were solved analytically for the exact death-state probabilities and these solutions compared to the corresponding bounds given by SURE. In every case, the SURE bounds covered the exact solution. The bounds, however, had a tendency to separate in cases where the recovery rate was slow or the fault arrival rate was fast.

Dotson, Kelly J.↗

Care 3, Phase 1, volume 1

A computer program to aid in accessing the reliability of fault tolerant avionics systems was developed. A simple mathematical expression was used to evaluate the reliability of any redundant configuration over any interval during which the failure rates and coverage parameters remained unaffected by configuration changes. Provision was made for convolving such expressions in order to evaluate the reliability of a dual mode system. A coverage model was also developed to determine the various relevant coverage coefficients as a function of the available hardware and software fault detector characteristics, and subsequent isolation and recovery delay statistics.

Stiffler, J. J.↗

A methodology for validating software reliability

A significant problem associated with fault tolerant computer system design is how to insure that there are no embedded software errors, so that an avionics computer system meets the required reliability level. To accomplish this, it is necessary to associate a 'probability of failure' with the operational flight program. It would be more correct to say that the probability of excitation of existing latent design errors within the program is required. In this sense, latent software errors are like latent hardware faults, and techniques that were previously used to measure the probability of failure of hardware due to fault latency can be used to measure the probability of failure of the software. A methodology was developed and applied to a flight control program that was known to operate in a well defined environment. The results indicated that the technique could be used to provide a final validation of the software to a specified reliability level and to evaluate the role of flight test in software validation.

Swern, Frederic L.↗

Integrated Power Source Grant

Traditional spacecraft power systems incorporate a solar array energy source, an energy storage element (battery), and battery charge control and bus voltage regulation electronics to provide continuous electrical power for spacecraft systems and instruments. Dedicated power conditioning components provide limited fault isolation between systems and instruments, while a centralized power-switching unit provides spacecraft load control. Battery undervoltage conditions are detected by the spacecraft processor, which removes fault conditions and non-critical loads before permanent battery damage can occur. Cost effective operation of a micro-sat constellation requires a fault tolerant spacecraft architecture that minimizes on-orbit operational costs by permitting autonomous reconfiguration in response to unexpected fault conditions. A new micro-sat power system architecture that enhances spacecraft fault tolerance and improves power system survivability by continuously managing the battery charge and discharge processes on a cell-by-cell basis has been developed. This architecture is based on the Integrated Power Source (US patent 5644207), which integrates dual junction solar cells, Lithium Ion battery cells, and processor based charge control electronics into a structural panel that can be deployed or used to form a portion of the outer shell of a micro-spacecraft. The first generation Integrated Power Source is configured as a one inch thick panel in which prismatic Lithium Ion battery cells are arranged in a 3x7 matrix (26VDC) and a 3x1 matrix (3.7VDC) to provide the required output voltages and load currents. A multi-layer structure holds the battery cells, as well as the thermal insulators that are necessary to protect the Lithium Ion battery cells from the extreme temperatures of the solar cell layer. Independent thermal radiators, located on the back of the panel, are dedicated to the solar cell array, the electronics, and the battery cell array. In deployed panel applications, these radiators maintain the battery cells in an appropriate operational temperature range.

Source record↗

Fault-Tolerant Software For Flight Control

Report discusses design and testing of redundant control system for F-8 digital fly-by-wire airplane. Outstanding feature of system is fault-tolerant software (REBUS) residing in primary digital computers. Transition to operation on backup software smooth.

Deets, Dwain A.↗

Dust-Tolerant Intelligent Electrical Connection System

Faults in wiring systems are a serious concern for the aerospace and aeronautic (commercial, military, and civilian) industries. Circuit failures and vehicle accidents have occurred and have been attributed to faulty wiring created by open and/or short circuits. Often, such circuit failures occur due to vibration during vehicle launch or operation. Therefore, developing non-intrusive fault-tolerant techniques is necessary to detect circuit faults and automatically route signals through alternate recovery paths while the vehicle or lunar surface systems equipment is in operation. Electrical connector concepts combining dust mitigation strategies and cable diagnostic technologies have significant application for lunar and Martian surface systems, as well as for dusty terrestrial applications. The dust-tolerant intelligent electrical connection system has several novel concepts and unique features. It combines intelligent cable diagnostics (health monitoring) and automatic circuit routing capabilities into a dust-tolerant electrical umbilical. It retrofits a clamshell protective dust cover to an existing connector for reduced gravity operation, and features a universal connector housing with three styles of dust protection: inverted cap, rotating cap, and clamshell. It uses a self-healing membrane as a dust barrier for electrical connectors where required, while also combining lotus leaf technology for applications where a dust-resistant coating providing low surface tension is needed to mitigate Van der Waals forces, thereby disallowing dust particle adhesion to connector surfaces. It also permits using a ruggedized iris mechanism with an embedded electrodynamic dust shield as a dust barrier for electrical connectors where required.

Lewis, Mark↗