Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Design verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24

Practical Applications of Cosmic Ray Science: Spacecraft, Aircraft, Ground Based Computation and Control Systems and Human Health and Safety

In this paper we review the discovery of cosmic ray effects on the performance and reliability of microelectronic systems as well as on human health and safety, as well as the development of the engineering and health science tools used to evaluate and mitigate cosmic ray effects in earth surface, atmospheric flight, and space flight environments. Three twentieth century technological developments, 1) high altitude commercial and military aircraft; 2) manned and unmanned spacecraft; and 3) increasingly complex and sensitive solid state micro-electronics systems, have driven an ongoing evolution of basic cosmic ray science into a set of practical engineering tools (e.g. ground based test methods as well as high energy particle transport and reaction codes) needed to design, test, and verify the safety and reliability of modern complex electronic systems as well as effects on human health and safety. The effects of primary cosmic ray particles, and secondary particle showers produced by nuclear reactions with spacecraft materials, can determine the design and verification processes (as well as the total dollar cost) for manned and unmanned spacecraft avionics systems. Similar considerations apply to commercial and military aircraft operating at high latitudes and altitudes near the atmospheric Pfotzer maximum. Even ground based computational and controls systems can be negatively affected by secondary particle showers at the Earth's surface, especially if the net target area of the sensitive electronic system components is large. Accumulation of both primary cosmic ray and secondary cosmic ray induced particle shower radiation dose is an important health and safety consideration for commercial or military air crews operating at high altitude/latitude and is also one of the most important factors presently limiting manned space flight operations beyond low-Earth orbit (LEO).

Atwell, William↗

SpaceCube v2.0 Space Flight Hybrid Reconfigurable Data Processing System

This paper details the design architecture, design methodology, and the advantages of the SpaceCube v2.0 high performance data processing system for space applications. The purpose in building the SpaceCube v2.0 system is to create a superior high performance, reconfigurable, hybrid data processing system that can be used in a multitude of applications including those that require a radiation hardened and reliable solution. The SpaceCube v2.0 system leverages seven years of board design, avionics systems design, and space flight application experiences. This paper shows how SpaceCube v2.0 solves the increasing computing demands of space data processing applications that cannot be attained with a standalone processor approach.The main objective during the design stage is to find a good system balance between power, size, reliability, cost, and data processing capability. These design variables directly impact each other, and it is important to understand how to achieve a suitable balance. This paper will detail how these critical design factors were managed including the construction of an Engineering Model for an experiment on the International Space Station to test out design concepts. We will describe the designs for the processor card, power card, backplane, and a mission unique interface card. The mechanical design for the box will also be detailed since it is critical in meeting the stringent thermal and structural requirements imposed by the processing system. In addition, the mechanical design uses advanced thermal conduction techniques to solve the internal thermal challenges.The SpaceCube v2.0 processing system is based on an extended version of the 3U cPCI standard form factor where each card is 190mm x 100mm in size The typical power draw of the processor card is 8 to 10W and scales with application complexity. The SpaceCube v2.0 data processing card features two Xilinx Virtex-5 QV Field Programmable Gate Arrays (FPGA), eight memory modules, a monitor FPGA with analog monitoring, Ethernet, configurable interconnect to the Xilinx FPGAs including gigabit transceivers, and the necessary voltage regulation. The processor board uses a back-to-back design methodology for common parts that maximizes the board real estate available. This paper will show how to meet the IPC 6012B Class 3A standard with a 22-layer board that has two column grid array devices with 1.0mm pitch. All layout trades such as stack-up options, via selection, and FPGA signal breakout will be discussed with feature size results. The overall board design process will be discussed including parts selection, circuit design, proper signal termination, layout placement and route planning, signal integrity design and verification, and power integrity results. The radiation mitigation techniques will also be detailed including configuration scrubbing options, Xilinx circuit mitigation and FPGA functional monitoring, and memory protection.Finally, this paper will describe how this system is being used to solve the extreme challenges of a robotic satellite servicing mission where typical space-rated processors are not sufficient enough to meet the intensive data processing requirements. The SpaceCube v2.0 is the main payload control computer and is required to control critical subsystems such as autonomous rendezvous and docking using a suite of vision sensors and object avoidance when controlling two robotic arms.

Xilinx FPGA↗

Marshall Space Flight Center Ground Systems Development and Integration

Ground Systems Development and Integration performs a variety of tasks in support of the Mission Operations Laboratory (MOL) and other Center and Agency projects. These tasks include various systems engineering processes such as performing system requirements development, system architecture design, integration, verification and validation, software development, and sustaining engineering of mission operations systems that has evolved the Huntsville Operations Support Center (HOSC) into a leader in remote operations for current and future NASA space projects. The group is also responsible for developing and managing telemetry and command configuration and calibration databases. Personnel are responsible for maintaining and enhancing their disciplinary skills in the areas of project management, software engineering, software development, software process improvement, telecommunications, networking, and systems management. Domain expertise in the ground systems area is also maintained and includes detailed proficiency in the areas of real-time telemetry systems, command systems, voice, video, data networks, and mission planning systems.

Wade, Gina↗

Traveler Phase 1A Joint Review

The briefing contains the preliminary findings and suggestions for improvement of methods used in development and evaluation of a multi monitor runtime assurance architecture for autonomous flight vehicles. Initial system design, implementation, verification, and flight testing has been conducted. As of yet detailed data review is incomplete, and flight testing has been limited to initial monitor force fights. Detailed monitor flight evaluations have yet to be performed.

autonomy↗

Mars 2020 Model Based Systems Engineering Pilot

The pilot study is led by the Integration Engineering group in NASA's Launch Services Program (LSP). The Integration Engineering (IE) group is responsible for managing the interfaces between the spacecraft and launch vehicle. This pilot investigates the utility of Model-Based Systems Engineering (MBSE) with respect to managing and verifying interface requirements. The main objectives of the pilot are to model several key aspects of the Mars 2020 integrated operations and interface requirements based on the design and verification artifacts from Mars Science Laboratory (MSL) and to demonstrate how MBSE could be used by LSP to gain further insight on the interface between the spacecraft and launch vehicle as well as to enhance how LSP manages the launch service. The method used to accomplish this pilot started through familiarization of SysML, MagicDraw, and the Mars 2020 and MSL systems through books, tutorials, and NASA documentation. MSL was chosen as the focus of the model since its processes and verifications translate easily to the Mars 2020 mission. The study was further focused by modeling specialized systems and processes within MSL in order to demonstrate the utility of MBSE for the rest of the mission. The systems chosen were the In-Flight Disconnect (IFD) system and the Mass Properties process. The IFD was chosen as a system of focus since it is an interface between the spacecraft and launch vehicle which can demonstrate the usefulness of MBSE from a system perspective. The Mass Properties process was chosen as a process of focus since the verifications for mass properties occur throughout the lifecycle and can demonstrate the usefulness of MBSE from a multi-discipline perspective. Several iterations of both perspectives have been modeled and evaluated. While the pilot study will continue for another 2 weeks, pros and cons of using MBSE for LSP IE have been identified. A pro of using MBSE includes an integrated view of the disciplines, requirements, and verifications leading up to launch. The model allows IE to understand the relationships between disciplines throughout test activities and verifications. Additionally, the relationships between disciplines and integration tasks are generally consistent. The model allows for the generic relationships and tasks to be captured and used throughout multiple mission models should LSP further pursue MBSE. A con of MBSE is the amount of time it takes upfront to understand MBSE and create a useful model. The upfront time it takes to create a useful model is heavily discussed in MBSE literature and is a consistent con throughout the known applications of MBSE. The need to understand SysML and the software chosen also poses the possibility of a "bottleneck" or one person being the sole MBSE user for the working group. The utility of MBSE will continue to be evaluated through the remainder of the study. In conclusion, the original objectives of the pilot study were to use artifacts from MSL to model key aspects of Mars 2020 and demonstrate how MBSE could be used by LSP to gain insight into the spacecraft and launch vehicle interfaces. Progress has been made in modeling and identifying the utility of MBSE to LSP IE and will continue to be made until the pilot study's conclusion in mid-August. The results of this study will produce initial models, modeling instructions and examples, and a summary of MBSE's utility for future use by LSP.

Dukes, Alexandra Marie↗

CHOMPTT (CubeSat Handling of Multisystem Precision Timing Transfer): From Concept to Launch Pad

Here we present the evolution of a student satellite mission: CHOMPTT (CubeSat Handling of Multisystem Precision Time Transfer), from its original concept as a candidate for the University NanoSatellite Program 8 (UNP8), to a spacecraft ready for launch in Fall of 2017 on ELaNa XIX (Educational Launch of Nanosatellites). The 3U CubeSat houses a 1 kg, 1U OPTI (Optical Precision Timing Instrument) payload, designed and built at the University of Florida, and a 1.5U EDSNNODeS-derived bus from NASA Ames Research Center. The OPTI payload comprises of: 1) a supervisor board that handles payload data, power regulation, and mode settings, 2) an optics assembly of six 1 cm retroreflectors and four laser beacon diodes for ground-tracking; and 3) two fully redundant timing channels, each consisting of: a chip-scale atomic clock, a microprocessor with clock counter, a picosecond event timer, and an avalanche photodetector (APD) with band-pass filter. Several iterations of OPTI have been developed, tested, and designed to achieve its current functionality and design a laboratory breadboard design, a 1.5U high altitude balloon design, engineering unit design, and its current flight unit design. In-lab testing of the current OPTI design indicates a short-term precision of 100 ps, equivalent to a range accuracy of 3 cm necessary to achieve our primary objective of 200 ps time transfer error, and a long-term timing accuracy of 20 ns over one orbit (1.5 hours). After the spacecraft reaches its nominal 500 km orbit at a 85 degree inclination, an experimental laser ranging facility at Kennedy Space Center in Florida, will track and emit 1064 nm nanosecond optical pulses at the CHOMPTT spacecraft. The laser pulses will then reflect off the retroreflector array mounted on the nadir face of CHOMPTT, and return the pulse to the laser ranging facility where the laser ranging facility will record the round-trip duration of the laser pulses. At the same time the pulse arrives at the spacecraft and is reflected by the array, an APD will record the arrival time of the pulses at the nanosatellite. By comparing the arrival of the pulse at the CubeSat and the duration of the round-trip of the laser pulse, the clock discrepancy between the ground and CubeSat atomic clocks can be determined, in addition to the CubeSats range from the facility. The design and verification of the flight version of CHOMPTT will be reviewed and an overview of the lifetime development and progression of CHOMPTT from the inception to launch pad will be presented.

CHOMPTT↗

High-pressure sensor using piezoelectric bending resonators

A novel design of pressure sensor based on piezoelectric bending resonator is described in this paper. The resonator is isolated from and mechanically coupled to the surrounding fluid using a sealed enclosure. The pressure applied to the enclosure induces a compressive stress to the resonator and reduces its resonance frequency. In principle the mechanism allows for achieving large resonance frequency shifts close to 100% of the resonance frequency. A high-pressure sensor based on the mechanism was designed for down-hole pressure monitoring in oil wells. The sensor is potentially remotely-readable via the transmission of an electromagnetic signal down a waveguide formed by the pipes in the oil well. The details of the pressure sensor design and verification by FE analysis and initial test results of a preliminary prototype are presented in this paper.

Takano, Nobuyuki↗

Applying Formal Methods to Safety-Critical Systems

How do you know a proof is correct? Traditionally, mathematical proofs are socially verified – at least one human, following a set of implicit rules of natural language and logic, determines if the proof is believable. If the proof becomes overly tedious and/or is essential to some safety- or mission-critical application, it becomes necessary to determine the soundness to a higher standard. 'Formal methods' refer to mathematically rigorous techniques and tools that enable specification, design, and verification of hardware and software systems. The specification used in formal methods are statements in a mathematical logic while the formal verifications are deductions in that logic. Formal methods can be difficult or time/resource intensive, but offer a higher level of assurance than standard verification through testing or handwritten proofs. This talk will introduce formal methods, motivated by applications of interest to NASA, including uncrewed aircraft operations in the national airspace, urban air environments, and wildfire areas. The audience will be given a crash course in mechanically verified proofs in the Prototype Verification System (PVS), an interactive theorem prover.

Formal Methods↗

Exploring Requirements for Software that Learns: A Research Preview

Context & motivation: The development of software that learns has revolutionized how many systems perform. For the most part, these systems are neither safety- nor mission-critical. However, as technology and aspirations advance, there is an increased desire and need for Machine Learning (ML) software in safety- and mission-critical systems, e.g., driverless cars or autonomous space robotics. Problem: In these domains, reliability is crucial and systems have to undergo much scrutiny in terms of both the developed artefacts and the adopted development process. Central to the development of such systems is the elicitation and definition of software requirements that are used to guide the design and verification process. The addition of software components that learn, and the associated capability for unforeseen behavior, makes defining detailed software requirements especially difficult. Principal ideas/results: In this paper, we identify unique characteristics of software requirements that are specific to ML components. To this end, we collect and examine requirements from both academic and industrial sources. Contribution: To the best of our knowledge, this is the first work that presents real-life, industrial patterns of requirements for ML components. Furthermore, this paper identifies key characteristics and provides a foundation for developing a taxonomy of requirements for software that learns.

Probabilistic requirements↗

A PPE Use Case on Configuration Management Approach for MBSE

Systems engineers worldwide have been working to implement Model-based Systems Engineering (MBSE) environments, tools, and methodologies. MBSE is a formalized application of modeling to support systems engineering, including requirements, design, analysis, verification, and validation activities over the project’s lifecycle[1]; MBSE captures the system data into a digital environment. Significant benefits of MBSE includes a reduction in the time in performing systems engineering activities and an improvement higher fidelity data production. As more Systems Engineers are using MBSE, the models it produces are becoming the source of truth for Systems Engineering artifacts. As we move towards using these models as the source of truth, a more rigorous Configuration Management (CM) infrastructure is needed. Many of the MBSE tools provide CM options but utilizing them efficiently and effectively can be challenging. More rigorous methods and tools are needed to assist with keeping track of changes in the model, making sure inadvertent changes to baseline data did not occur, visibility of changes in the different model versions, and the impacts of changes to the models. System engineers and configuration management personnel from the Power and Propulsion Element (PPE) project at NASA Glenn Research Center have been working to develop a modeling construct that allows models to be the source of truth and maintain a configuration managed baseline. This paper presents a process that leverages the existing CM tools and describes how PPE used this process to manage changes more rigorously. It will describe the process behind building the model architecture that utilizes the MBSE tool capabilities and the configuration management process. It will contain some of the advantages and disadvantages of the architecture that the PPE project had settled upon utilizing, as well as some enhanced capabilities that the PPE MBSE team has developed.

MBSE↗

Systems Engineering with a Focus on Failure Prevention

A discussion of Systems Engineering principles as related to failure prevention methodologies and technologies. The presentation outlines requirements development, design reviews, verification and validation, and finally risk management prectices.

Systems Engineering, Failure Prevention↗

In-Space Modular Assembly: An Approach for Reliable, Affordable, Precision Space Apertures

In-space assembly will revolutionize the creation, upgrade, and evolution of future space systems. In-space assembly represents an alternative deployment strategy that is not constrained by the requirement of using a single launch vehicle and enables a greater freedom of design for the initial emplacement of assets and their evolution over time. In-space assembly enables assets, such as observatories and science platforms, to become persistent, evolving over time like their terrestrial counterparts. Also, in-space assembly provides a direct path for utilization of in-space manufactured components designed exclusively for the operational environment. To highlight the advantages of an in-space assembly approach, the modular assembly of a 3 m to 4 m precision optical aperture based on thin meniscus technology coupled with structurally efficient TriTruss modules is presented. The 3 m to 4 m aperture stows compactly within two standard ride share slots (0.61 m by 0.71 m by 0.97 m). Placing instruments and the robotic system used for assembly in an adjacent ride share slot enables a capable observatory to be placed into service via modest ride share opportunities. Further, recent hardware assembly tests of similar modules and progress toward hardware tests to validate the overall architecture via diffraction limited testing will be summarized.

Design↗

In-Space Modular Assembly: An Approach for Reliable, Affordable, Precision Space Apertures

In-space assembly will revolutionize the creation, upgrade, and evolution of future space systems. In-space assembly represents an alternative deployment strategy that is not constrained by the requirement of using a single launch vehicle and enables a greater freedom of design for the initial emplacement of assets and their evolution over time. In-space assembly enables assets, such as observatories and science platforms, to become persistent, evolving over time like their terrestrial counterparts. Also, in-space assembly provides a direct path for utilization of in-space manufactured components designed exclusively for the operational environment. To highlight the advantages of an in-space assembly approach, the modular assembly of a 3 m to 4 m precision optical aperture based on thin meniscus technology coupled with structurally efficient TriTruss modules is presented. The 3 m to 4 m aperture stows compactly within two standard ride share slots (0.61 m by 0.71 m by 0.97 m). Placing instruments and the robotic system used for assembly in an adjacent ride share slot enables a capable observatory to be placed into service via modest ride share opportunities. Further, recent hardware assembly tests of similar modules and progress toward hardware tests to validate the overall architecture via diffraction limited testing will be summarized.

Design↗

Lunar Flashlight Science Ground and Flight Measurements and Operations Using a Multi-band Laser Reflectometer

The Lunar Flashlight cubesat mission was designed and flown to collect new data on the abundance and distribution of water ice frost in lunar permanently shadowed regions (PSRs) using active laser spectroscopy. Key advantages of active spectroscopy are that it can collect surface reflectance data in locations and conditions where passive spectroscopy cannot operate, specifically nightside locations where no indirect lighting is available, and in the deepest parts of PSRs where indirect lighting may be too faint for passive spectroscopy. Lunar Flashlight launched in 2022 but because of a propulsion system failure, did not make it to the Moon to conduct its science investigation. However, Lunar Flashlight proved to be an extremely successful technology demonstration mission, meeting or exceeding all its technology-focused mission goals, including demonstrating its instrument functionality. This paper describes the extensive ground and test campaigns to characterize the Lunar Flashlight laser reflectometer instrument and its planned utility for science observations, along with recommendations for future instrument design, development, verification, and use.

Moon↗

Icarus Application to Dragonfly Heatshield

Icarus, an in-house material response solver developed at NASA Ames, is applied to perform 2-D bondline-temperature analysis on the heatshield surface of the latest Dragonfly entry system design for a mission to Titan. Two axisymmetric domains are used: the near-shoulder region and the entire heatshield. The heatshield consists of a PICA TPS bonded to a layered system of Aluminum honeycomb wrapped by an M55J carbon-fiber facesheet. The backshell, which is also included for more accurate analysis, consists of similar materials layered. Icarus simulations using both domains indicate that the in-plane thermal conductivity property of the M55J facesheet is observed to play a dominant role in bondline temperature. Similarly, the maximum bondline temperature is found around the PICA-tile-interface region instead of the near-shoulder region or the stagnation point based on the current trajectory using the orthotropic properties of M55J. Therefore, these findings indicate the significance of 2-D or higher-dimensional material modeling analysis in fully understanding how bondline temperature behaves across the heatshield and obtaining a basis for TPS design locations. Verification at different radial locations ahead of the shoulder, where thermal conduction is close to 1-D, between Icarus (2-D), Icarus (1-D), and FIAT is performed and good agreement is observed. With the entire heatshield domain, the total mass loss of the aeroshell materials is approximately 3% of their initial mass potentially due to thermal decomposition of phenolic resins inside PICA under the current high-heating environment.

TPS material modeling↗

Swarm Verification

Reportedly, supercomputer designer Seymour Cray once said that he would sooner use two strong oxen to plow a field than a thousand chickens. Although this is undoubtedly wise when it comes to plowing a field, it is not so clear for other types of tasks. Model checking problems are of the proverbial "search the needle in a haystack" type. Such problems can often be parallelized easily. Alas, none of the usual divide and conquer methods can be used to parallelize the working of a model checker. Given that it has become easier than ever to gain access to large numbers of computers to perform even routine tasks it is becoming more and more attractive to find alternate ways to use these resources to speed up model checking tasks. This paper describes one such method, called swarm verification.

grid computing↗

Europa Clipper Payload Verification and Validation: Test and Analysis Program Design

NASA’s Europa Clipper mission – which is planned to launch in the mid-2020s – is designed to investigate the habitability of the jovian moon Europa with a state-of-the-art suite of over 10 sensors and instruments. Now past its project critical design review, Europa Clipper is starting the execution of its verification and validation (V&V) program. The payload V&V function in particular is responsible for designing and coordinating a thorough test and analysis program that will confirm the proper functioning and performance of our payload instruments. Given the large number of instruments to manage, we have developed a suite of standardized tests and analyses that are designed to cover all of the common interfaces across instruments, while allowing for flexibility to support the unique needs of individual instruments. This suite of activities, coordinated and/or performed by the payload team, forms the bulk of our payload verification and validation campaign. This paper provides a detailed summary of the full set of V&V activities in that suite, covering the four categories of activities: analysis of lower-level evidence, analysis via simulation, testing in the system testbeds, and testing in assembly, test, and launch operations (ATLO). We will describe the purpose of each activity type, how the activities are developed, and the review process for each type of activity. We then define the complete list of activities written for each instrument and how subtleties specific to certain instruments are managed. The discussion will provide a comprehensive understanding of the activities in the payload V&V purview and how various interfaces with different levels of the project are managed. This paper also describes key metrics the payload team uses to track V&V progress and some insights into the teaming design and division of labor we use to ensure consistency and completeness across the entire payload suite. Finally, the paper will offer a snapshot of the status of the Payload V&V program prior to instrument delivery and offer insights into the upcoming phase of instrument delivery and the start of ATLO.

Lee, Dennis↗