Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “hardware failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 397 records · Page 22

Reliability and Maintainability (RAM) Training

The theme of this manual is failure physics-the study of how products, hardware, software, and systems fail and what can be done about it. The intent is to impart useful information, to extend the limits of production capability, and to assist in achieving low-cost reliable products. In a broader sense the manual should do more. It should underscore the urgent need CI for mature attitudes toward reliability. Five of the chapters were originally presented as a classroom course to over 1000 Martin Marietta engineers and technicians. Another four chapters and three appendixes have been added, We begin with a view of reliability from the years 1940 to 2000. Chapter 2 starts the training material with a review of mathematics and a description of what elements contribute to product failures. The remaining chapters elucidate basic reliability theory and the disciplines that allow us to control and eliminate failures.

Lalli, Vincent R.↗

Hardware and software reliability estimation using simulations

The simulation technique is used to explore the validation of both hardware and software. It was concluded that simulation is a viable means for validating both hardware and software and associating a reliability number with each. This is useful in determining the overall probability of system failure of an embedded processor unit, and improving both the code and the hardware where necessary to meet reliability requirements. The methodologies were proved using some simple programs, and simple hardware models.

Swern, Frederic L.↗

Independent Orbiter Assessment (IOA): Assessment of the orbital maneuvering subsystem, volume 2

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA effort first completed an analysis of the Orbital Maneuvering System (OMS) hardware and electrical power distribution and control (EPD and C), generating draft failure modes and potential critical items. To preserve independence, this analysis was accomplished without reliance upon the results contained within the NASA FMEA/CIL documentation. The IOA results were then compared to the proposed Post 51-L NASA FMEA/CIL baseline. This report documents the results of that comparison for the Orbiter OMS hardware and EPD and C systems. Volume 2 continues the presentation of IOA worksheets and contains the critical items list and the NASA FMEA to IOA worksheet cross reference and recommendations.

Haufler, W. A.↗

Independent Orbiter Assessment (IOA): Assessment of the reaction control system, volume 2

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA effort first completed an analysis of the aft and forward Reaction Control System (RCS) hardware and Electrical Power Distribution and Control (EPD and C), generating draft failure modes and potential critical items. The IOA results were then compared to the proposed Post 51-L NASA FMEA/CIL baseline. This report documents the results of that comparison for the Orbiter RCS hardware and EPD and C systems. Volume 2 continues the presentation of IOA worksheets.

Prust, Chet D.↗

Independent Orbiter Assessment (IOA): Assessment of the reaction control system, volume 3

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA effort first completed an analysis of the aft and forward Reaction Control System (RCS) hardware and Electrical Power Distribution and Control (EPD and C), generating draft failure modes and potential critical items. The IOA results were then compared to the proposed Post 51-L NASA FMEA/CIL baseline. This report documents the results of that comparison for the Orbiter RCS hardware and EPD and C systems. Volume 3 continues the presentation of IOA worksheets.

Prust, Chet D.↗

Independent Orbiter Assessment (IOA): Assessment of the reaction control system, volume 4

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA effort first completed an analysis of the aft and forward Reaction Control System (RCS) hardware and Electrical Power Distribution and Control (EPD and C), generating draft failure modes and potential critical items. The IOA results were then compared to the proposed Post 51-L NASA FMEA/CIL baseline. This report documents the results of that comparison for the Orbiter RCS hardware and EPD and C systems. Volume 4 continues the presentation of IOA worksheets and contains the potential critical items list.

Prust, Chet D.↗

Independent Orbiter Assessment (IOA): Assessment of the reaction control system, volume 5

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA effort first completed an analysis of the aft and forward Reaction Control System (RCS) hardware and Electrical Power Distribution and Control (EPD and C), generating draft failure modes and potential critical items. The IOA results were then compared to the proposed Post 51-L NASA FMEA/CIL baseline. This report documents the results of that comparison for the Orbiter RCS hardware and EPD and C systems. Volume 5 contains detailed analysis and superseded analysis worksheets and the NASA FMEA to IOA worksheet cross reference and recommendations.

Prust, Chet D.↗

DISARM: Target Electronic Device Informed Mitigation of Software Runtime Side-Channel Vulnerabilities

Program runtime/timing attacks exploit variations in a program’s execution times to extract sensitive information from the program (e.g. encryption keys, sensitive variable data, intellectual property). State-of-the-art solutions to runtime side-channel attacks attempt to balance the execution time of the sensitive code for different control flow paths to eliminate the timing leakage. However, during the mitigation process, most techniques do not consider the underlying hardware/device on which the target program is supposed to run on. This can lead to over-fixing (unnecessary extra operations), under-fixing (not solving the imbalance properly), and even failures. Here, we propose DISARM, a joint hardware-software methodology (unlike any existing solution) for mitigating runtime side-channel vulnerabilities that utilizes timing values from real embedded devices to generate targeted software fixes. We implement DISARM to support C/C++/Java source codes and validate it across 22 standard benchmarks. DISARM outperforms state-of-the-art solutions such as PENDULUM and DifFuzzaR in terms of execution time overhead, code size overhead, and correctness on five different embedded/edge devices.

Timing/runtime side-channel↗

Space Tug laser gyro IMU

A redundant inertial measuring unit (IMU) incorporating six strapdown laser gyros and six accelerometers, arranged so that sensitive axes are normal to the faces of a dodecahedron, provides enhanced reliability with reduced hardware weight. Software monitoring of sensor outputs senses failure of sensors and the system is designed for triple redundancy, with built-in test equipment. Attention is centered on redundancy and fail-safe features, and on the closed-path ring laser gyro arrangement.

Morrison, R.↗

A real-time FORTRAN implementation of a sensor failure detection, isolation and accommodation algorithm

An advanced, sensor failure detection, isolation, and accomodation algorithm has been developed by NASA for the F100 turbofan engine. The algorithm takes advantage of the analytical redundancy of the sensors to improve the reliability of the sensor set. The method requires the controls computer, to determine when a sensor failure has occurred without the help of redundant hardware sensors in the control system. The controls computer provides an estimate of the correct value of the output of the failed sensor. The algorithm has been programmed in FORTRAN using a real-time microprocessor-based controls computer. A detailed description of the algorithm and its implementation on a microprocessor is given.

Delaat, J. C.↗

The implementation and use of ADA on distributed systems with high reliability requirements

The use and implementation of Ada in distributed environments in which reliability is the primary concern is investigated. Emphasis is placed on the possibility that a distributed system may be programmed entirely in Ada so that the individual tasks of the system are unconcerned with which processors they are executing on, and that failures may occur in the software or underlying hardware. A new linguistic construct, the colloquy, is introduced which solves the problems identified in an earlier proposal, the conversation. It was shown that the colloquy is at least as powerful as recovery blocks, but it is also as powerful as all the other language facilities proposed for other situations requiring backward error recovery: recovery blocks, deadlines, generalized exception handlers, traditional conversations, s-conversations, and exchanges. The major features that distinguish the colloquy are described. Sample programs that were written, but not executed, using the colloquy show that extensive backward error recovery can be included in these programs simply and elegantly. These ideas are being implemented in an experimental Ada test bed.

Knight, J. C.↗

The implementation and use of Ada on distributed systems with high reliability requirements

The use and implementation of Ada were investigated in distributed environments in which reliability is the primary concern. In particular, the focus was on the possibility that a distributed system may be programmed entirely in Ada so that the individual tasks of the system are unconcerned with which processors are being executed, and that failures may occur in the software and underlying hardware. A secondary interest is in the performance of Ada systems and how that performance can be gauged reliably. Primary activities included: analysis of the original approach to recovery in distributed Ada programs using the Advanced Transport Operating System (ATOPS) example; review and assessment of the original approach which was found to be capable of improvement; development of a refined approach to recovery that was applied to the ATOPS example; and design and development of a performance assessment scheme for Ada programs based on a flexible user-driven benchmarking system.

Knight, J. C.↗

Protoflight photovoltaic power module system-level tests in the space power facility

Work Package Four, which includes the NASA-Lewis and Rocketdyne, has selected an approach for the Space Station Freedom Photovoltaic (PV) Power Module flight certification that combines system level qualification and acceptance testing in the thermal vacuum environment: The protoflight vehicle approach. This approach maximizes ground test verification to assure system level performance and to minimize risk of on-orbit failures. The preliminary plans for system level thermal vacuum environmental testing of the protoflight PV Power Module in the NASA-Lewis Space Power Facility (SPF), are addressed. Details of the facility modifications to refurbish SPF, after 13 years of downtime, are briefly discussed. The results of an evaluation of the effectiveness of system level environmental testing in screening out incipient part and workmanship defects and unique failure modes are discussed. Preliminary test objectives, test hardware configurations, test support equipment, and operations are presented.

Rivera, Juan C.↗

Protoflight photovoltaic power module system-level tests in the Space Power Facility

Work Package Four, which includes the NASA-Lewis and Rocketdyne, has selected an approach for the Space Station Freedom Photovoltaic (PV) Power Module flight certification that combines system level qualification and acceptance testing in the thermal vacuum environment: the 'protoflight' vehicle approach. This approach maximizes ground test verification to assure system level performance and to minimize risk of on-orbit failures. The preliminary plans for system level thermal vacuum environmental testing of the protoflight PV Power Module in the NASA-Lewis Space Power Facility (SPF) are addressed. Details of the facility modifications to refurbish SPF, after 13 years of downtime, are briefly discussed. The results of an evaluation of the effectiveness of system level environmental testing in screening out incipient part and workmanship defects and unique failure modes are discussed. Preliminary test objectives, test hardware configurations, test support equipment, and operations, are presented.

Rivera, Juan C.↗

Engine throat/nozzle optics for plume spectroscopy

The Task 2.0 Engine Throat/Nozzle Optics for Plume Spectroscopy, effort was performed under the NASA LeRC Development of Life Prediction Capabilities for Liquid Propellant Rocket Engines program. This Task produced the engineering design of an optical probe to enable spectroscopic measurements within the SSME main chamber. The probe mounts on the SSME nozzle aft manifold and collects light emitted from the throat plane and chamber. Light collected by the probe is transferred to a spectrometer through a fiber optic cable. The design analyses indicate that the probe will function throughout the engine operating cycle and is suitable for both test stand and flight operations. By detecting metallic emissions that are indicative of component degradation or incipient failure, engine shutdown can be initiated before catastrophic failure. This capability will protect valuable test stand hardware and provide enhanced mission safety.

Bickford, R. L.↗

The failure analysis, redesign, and final preparation of the Brilliant Eyes Thermal Storage Unit for flight testing

This paper describes the engineering thought process behind the failure analysis, redesign, and rework of the flight hardware for the Brilliant Eyes Thermal Storage Unit (BETSU) experiment. This experiment was designed to study the zero-g performance of 2-methylpentane as a suitable phase change material. This hydrocarbon served as the cryogenic storage medium for the BETSU experiment which was flown 04 Mar 94 on board Shuttle STS-62. Ground testing had indicated satisfactory performance of the BETSU at the 120 Kelvin design temperature. However, questions remained as to the micro-gravity performance of this unit; potential deviations in ground (1 g) versus space flight (0 g) performance, and how the unit would operate in a realistic space environment undergoing cyclical operation. The preparations and rework performed on the BETSU unit, which failed initial flight qualification, give insight and lessons learned to successfully develop and qualify a space flight experiment.

Lamkin, T.↗

Evaluation of Fatigue Crack Growth and Fracture Properties of Cryogenic Model Materials

The criteria used to prevent failure of wind-tunnel models and support hardware were revised as part of a project to enhance the capabilities of cryogenic wind tunnel testing at NASA Langley Research Center. Specifically, damage-tolerance fatigue life prediction methods are now required for critical components, and material selection criteria are more general and based on laboratory test data. The suitability of two candidate model alloys (AerMet 100 and C-250 steel) was investigated by obtaining the fatigue crack growth and fracture data required for a damage-tolerance fatigue life analysis. Finally, an example is presented to illustrate the newly implemented damage tolerance analyses required of wind-tunnel model system components.

Newman, John A.↗

Potential Damage to Flight Hardware from MIL-STD-462 CS02 Setup

The MIL-STD-462 CS02 conducted susceptibility test setup includes an audio transformer, with the secondary used as an inductor, and a large capacitor. Together, these two components form an L-type low-pass filter to minimize the injected test signal input into the power source. Some flight hardware power input configurations are not compatible with this setup and break into oscillation when powered up. This, in turn, can damage flight hardware. Such an oscillation resulted in the catastrophic failure of an item tested in the Goddard Space Flight Center (GSFC) Large electromagnetic compatibility (EMC) Test Facility.

Harris, Patrick K.↗