SEARCH · Engineering Papers

Results for “Formal Methods”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24

All sources NASA NTRS DOE OSTI

NASA NTRS2000

Probabilistic Multi-Scale, Multi-Level, Multi-Disciplinary Analysis and Optimization of Engine Structures

Aircraft engines are assemblies of dynamically interacting components. Engine updates to keep present aircraft flying safely and engines for new aircraft are progressively required to operate in more demanding technological and environmental requirements. Designs to effectively meet those requirements are necessarily collections of multi-scale, multi-level, multi-disciplinary analysis and optimization methods and probabilistic methods are necessary to quantify respective uncertainties. These types of methods are the only ones that can formally evaluate advanced composite designs which satisfy those progressively demanding requirements while assuring minimum cost, maximum reliability and maximum durability. Recent research activities at NASA Glenn Research Center have focused on developing multi-scale, multi-level, multidisciplinary analysis and optimization methods. Multi-scale refers to formal methods which describe complex material behavior metal or composite; multi-level refers to integration of participating disciplines to describe a structural response at the scale of interest; multidisciplinary refers to open-ended for various existing and yet to be developed discipline constructs required to formally predict/describe a structural response in engine operating environments. For example, these include but are not limited to: multi-factor models for material behavior, multi-scale composite mechanics, general purpose structural analysis, progressive structural fracture for evaluating durability and integrity, noise and acoustic fatigue, emission requirements, hot fluid mechanics, heat-transfer and probabilistic simulations. Many of these, as well as others, are encompassed in an integrated computer code identified as Engine Structures Technology Benefits Estimator (EST/BEST) or Multi-faceted/Engine Structures Optimization (MP/ESTOP). The discipline modules integrated in MP/ESTOP include: engine cycle (thermodynamics), engine weights, internal fluid mechanics, cost, mission and coupled structural/thermal, various composite property simulators and probabilistic methods to evaluate uncertainty effects (scatter ranges) in all the design parameters. The objective of the proposed paper is to briefly describe a multi-faceted design analysis and optimization capability for coupled multi-discipline engine structures optimization. Results are presented for engine and aircraft type metrics to illustrate the versatility of that capability. Results are also presented for reliability, noise and fatigue to illustrate its inclusiveness. For example, replacing metal rotors with composites reduces the engine weight by 20 percent, 15 percent noise reduction, and an order of magnitude improvement in reliability. Composite designs exist to increase fatigue life by at least two orders of magnitude compared to state-of-the-art metals.

Chamis, Christos C.↗

NASA NTRS1993

Formal Functional Test Designs with a Test Representation Language

This article discusses the application of the Category-Partition Method to the test design phase. The method provides a formal framework for reducing the total number of possible test cases to a minimum logical subset for effective testing. An automatic tool and a formal language have been developed to implement the method and produce the specification of test cases

software↗

NASA NTRS1993

Formal functional test designs with a test representation language

The application of the category-partition method to the test design phase of hardware, software, or system test development is discussed. The method provides a formal framework for reducing the total number of possible test cases to a minimum logical subset for effective testing. An automatic tool and a formal language were developed to implement the method and produce the specification of test cases.

Hops, J. M.↗

NASA NTRS2005

Thermal Insulation Test Apparatuses

The National Aeronautics and Space Administration (NASA) seeks to license its Thermal Insulation Test Apparatuses. Designed by the Cryogenics Test Laboratory at the John F. Kennedy Space Center (KSC) in Florida, these patented technologies (U.S. Patent Numbers: Cryostat 1 - 6,742,926, Cryostat 2 - 6,487,866, and Cryostat 4 - 6,824,306) allow manufacturers to fabricate and test cryogenic insulation at their production and/or laboratory facilities. These new inventions allow for the thermal performance characterization of cylindrical and flat specimens (e.g., bulk-fill, flat-panel, multilayer, or continuously rolled) over the full range of pressures, from high vacuum to no vacuum, and over the full range of temperatures from 77K to 300K. In today's world, efficient, low-maintenance, low-temperature refrigeration is taking a more significant role, from the food industry, transportation, energy, and medical applications to the Space Shuttle. Most countries (including the United States) have laws requiring commercially available insulation materials to be tested and rated by an accepted methodology. The new Cryostat methods go beyond the formal capabilities of the ASTM methods to provide testing for real systems, including full-temperature differences plus full-range vacuum conditions.

Berman, Brion↗

DOE OSTI2023

Methods for the Automated Determination of Sustained Maximum Amplitudes in Oscillating Signals

Machine condition monitoring has been proven to reduce machine downtime and increase productivity. The state-of-the-art research uses vibration monitoring for tasks such as maintenance and tool wear prediction. A less explored aspect is how vibration monitoring might be used to monitor equipment sensitive to vibration. In a manufacturing environment, one example of where this might be needed is in monitoring the vibration of optical linear encoders used in high-precision machine tools and coordinate measuring machines. Monitoring the vibration of sensitive equipment presents a unique case for vibration monitoring because an accurate calculation of the maximum sustained vibration is needed, as opposed to extracting trends from the data. To do this, techniques for determining sustained peaks in vibration signals are needed. Here, this work fills this gap by formalizing and testing methods for determining sustained vibration amplitudes. The methods are tested on simulated signals based on experimental data. Results show that processing the signal directly with the novel Expire Timer method produces the smallest amounts of error on average under various test conditions. Additionally, this method can operate in real-time on streaming vibration data.

Industrial Internet of Things↗

NASA NTRS2009

Workflow Agents vs. Expert Systems: Problem Solving Methods in Work Systems Design

During the 1980s, a community of artificial intelligence researchers became interested in formalizing problem solving methods as part of an effort called "second generation expert systems" (2nd GES). How do the motivations and results of this research relate to building tools for the workplace today? We provide an historical review of how the theory of expertise has developed, a progress report on a tool for designing and implementing model-based automation (Brahms), and a concrete example how we apply 2nd GES concepts today in an agent-based system for space flight operations (OCAMS). Brahms incorporates an ontology for modeling work practices, what people are doing in the course of a day, characterized as "activities." OCAMS was developed using a simulation-to-implementation methodology, in which a prototype tool was embedded in a simulation of future work practices. OCAMS uses model-based methods to interactively plan its actions and keep track of the work to be done. The problem solving methods of practice are interactive, employing reasoning for and through action in the real world. Analogously, it is as if a medical expert system were charged not just with interpreting culture results, but actually interacting with a patient. Our perspective shifts from building a "problem solving" (expert) system to building an actor in the world. The reusable components in work system designs include entire "problem solvers" (e.g., a planning subsystem), interoperability frameworks, and workflow agents that use and revise models dynamically in a network of people and tools. Consequently, the research focus shifts so "problem solving methods" include ways of knowing that models do not fit the world, and ways of interacting with other agents and people to gain or verify information and (ultimately) adapt rules and procedures to resolve problematic situations.

Clancey, William J.↗

NASA NTRS2001

Complex Correlation Kohn-T Method of Calculating Total and Elastic Cross Sections: Electron-Hydrogen Elastic Scattering - Part 1

We report on the first part of a study of electron-hydrogen scattering, using a method which allows for the ab initio calculation of total and elastic cross sections at higher energies. In its general form the method uses complex 'radial' correlation functions, in a (Kohn) T-matrix formalism. The titled method, abbreviated Complex Correlation Kohn T (CCKT) method, is reviewed, in the context of electron-hydrogen scattering, including the derivation of the equation for the (complex) scattering function, and the extraction of the scattering information from the latter. The calculation reported here is restricted to S-waves in the elastic region, where the correlation functions can be taken, without loss of generality, to be real. Phase shifts are calculated using Hylleraas-type correlation functions with up to 95 terms. Results are rigorous lower bounds; they are in general agreement with those of Schwartz, but they are more accurate and outside his error bounds at a couple of energies,

Bhatia, A. K.↗

NASA NTRS2009

Deriving Safety Cases from Automatically Constructed Proofs

Formal proofs provide detailed justification for the validity of claims and are widely used in formal software development methods. However, they are often complex and difficult to understand, because the formalism in which they are constructed and encoded is usually machine-oriented, and they may also be based on assumptions that are not justified. This causes concerns about the trustworthiness of using formal proofs as arguments in safety-critical applications. Here, we present an approach to develop safety cases that correspond to formal proofs found by automated theorem provers and reveal the underlying argumentation structure and top-level assumptions. We concentrate on natural deduction style proofs, which are closer to human reasoning than resolution proofs, and show how to construct the safety cases by covering the natural deduction proof tree with corresponding safety case fragments. We also abstract away logical book-keeping steps, which reduces the size of the constructed safety cases. We show how the approach can be applied to the proofs found by the Muscadet prover.

Basir, Nurlida↗

NASA NTRS2005

A Formal Approach to Requirements-Based Programming

No significant general-purpose method is currently available to mechanically transform system requirements into a provably equivalent model. The widespread use of such a method represents a necessary step toward high-dependability system engineering for numerous application domains. Current tools and methods that start with a formal model of a system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The "gap" unfilled by such tools and methods is that the formal models cannot be proven to be equivalent to the requirements. We offer a method for mechanically transforming requirements into a provably equivalent formal model that can be used as the basis for code generation and other transformations. This method is unique in offering full mathematical tractability while using notations and techniques that are well known and well trusted. Finally, we describe further application areas we are investigating for use of the approach.

Hinchey, Michael G.↗

DOE OSTI2022

Exploring Applied Cryptosystems to Formally Verify Security in Cyber-Physical Systems

This project aims to evaluate RSA as a method for public-key encryption for cyber-physical systems (CPS). As technology advances, cyber attacks are increasing, and with them, the need for cybersecurity advances; the average cost for cybercrime in the world was estimated at $6 trillion in 2021. A public-key cryptosystem that has been around since 1977, RSA has recently garnered some critiques for its fragility, computational cost, and lazy implementation. In this project I will review the mathematical derivation of RSA, analyze the practical implications of such mathematical framework for the security of RSA, and propose a formal methods based approach to verify encryption schemes for CPS.

97 MATHEMATICS AND COMPUTING↗

NASA NTRS2000

A Factorial Data Rate and Dwell Time Experiment in the National Transonic Facility

This report is an introductory tutorial on the application of formal experiment design methods to wind tunnel testing, for the benefit of aeronautical engineers with little formal experiment design training. It also describes the results of a Study to determine whether increases in the sample rate and dwell time of the National Transonic Facility data system Would result in significant changes in force and moment data. Increases in sample rate from 10 samples per second to 50 samples per second were examined, as were changes in dwell time from one second per data point to two seconds. These changes were examined for a representative aircraft model in a range of tunnel operating conditions defined by angles of attack from 0 deg to 3.8 degrees, total pressure from 15.0 psi to 24.1 psi, and Mach numbers from 0.52 to 0.82. No statistically significant effect was associated with the change in sample rate. The change in dwell time from one second to two seconds affected axial force measurements, and to a lesser degree normal force measurements. This dwell effect comprises a "rectification error" caused by incomplete cancellation of the positive and negative elements of certain low frequency dynamic components that are not rejected by the one-Hz low-pass filters of the data system. These low frequency effects may be due to tunnel circuit phenomena and other sources. The magnitude of the dwell effect depends on dynamic pressure, with angle of attack and Mach number influencing the strength of this dependence. An analysis is presented which suggests that the magnitude of the rectification error depends on the ratio of measurement dwell time to the period of the low-frequency dynamics, as well as the amplitude of the dynamics The essential conclusion of this analysis is that extending the dwell time (or, equivalently, replicating short-dwell data points) reduces the rectification error.

DeLoach, R.↗

NASA NTRS2004

Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation

A general-purpose method to mechanically transform system requirements into a provably equivalent model has yet to appear. Such a method represents a necessary step toward high-dependability system engineering for numerous possible application domains, including sensor networks and autonomous systems. Currently available tools and methods that start with a formal model of a system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The gap that current tools and methods leave unfilled is that their formal models cannot be proven to be equivalent to the system requirements as originated by the customer. For the classes of systems whose behavior can be described as a finite (but significant) set of scenarios, we offer a method for mechanically transforming requirements (expressed in restricted natural language, or in other appropriate graphical notations) into a provably equivalent formal model that can be used as the basis for code generation and other transformations.

Hinchey, Michael G.↗

NASA NTRS2005

Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation

A general-purpose method to mechanically transform system requirements into a provably equivalent model has yet to appear. Such a method represents a necessary step toward high-dependability system engineering for numerous possible application domains, including distributed software systems, sensor networks, robot operation, complex scripts for spacecraft integration and testing, and autonomous systems. Currently available tools and methods that start with a formal model of a system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The gap that current tools and methods leave unfilled is that their formal models cannot be proven to be equivalent to the system requirements as originated by the customer. For the classes of systems whose behavior can be described as a finite (but significant) set of scenarios, we offer a method for mechanically transforming requirements (expressed in restricted natural language, or in other appropriate graphical notations) into a provably equivalent formal model that can be used as the basis for code generation and other transformations.

Hinchey, Michael G.↗

NASA NTRS2005

Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation

A general-purpose method to mechanically transform system requirements into a provably equivalent model has yet to appear. Such a method represents a necessary step toward high-dependability system engineering for numerous possible application domains, including distributed software systems, sensor networks, robot operation, complex scripts for spacecraft integration and testing, and autonomous systems. Currently available tools and methods that start with a formal model of a: system and mechanically produce a provably equivalent implementation are valuable but not sufficient. The "gap" that current tools and methods leave unfilled is that their formal models cannot be proven to be equivalent to the system requirements as originated by the customer. For the ciasses of systems whose behavior can be described as a finite (but significant) set of scenarios, we offer a method for mechanically transforming requirements (expressed in restricted natural language, or in other appropriate graphical notations) into a provably equivalent formal model that can be used as the basis for code generation and other transformations.

Hinchey, Michael G.↗

DOE OSTI2015

Air-kerma strength determination of a new directional {sup 103}Pd source

Purpose: A new directional {sup 103}Pd planar source array called a CivaSheet™ has been developed by CivaTech Oncology, Inc., for potential use in low-dose-rate (LDR) brachytherapy treatments. The array consists of multiple individual polymer capsules called CivaDots, containing {sup 103}Pd and a gold shield that attenuates the radiation on one side, thus defining a hot and cold side. This novel source requires new methods to establish a source strength metric. The presence of gold material in such close proximity to the active {sup 103}Pd region causes the source spectrum to be significantly different than the energy spectra of seeds normally used in LDR brachytherapy treatments. In this investigation, the authors perform air-kerma strength (S{sub K}) measurements, develop new correction factors for these measurements based on an experimentally verified energy spectrum, and test the robustness of transferring S{sub K} to a well-type ionization chamber. Methods: S{sub K} measurements were performed with the variable-aperture free-air chamber (VAFAC) at the University of Wisconsin Medical Radiation Research Center. Subsequent measurements were then performed in a well-type ionization chamber. To realize the quantity S{sub K} from a directional source with gold material present, new methods and correction factors were considered. Updated correction factors were calculated using the MCNP 6 Monte Carlo code in order to determine S{sub K} with the presence of gold fluorescent energy lines. In addition to S{sub K} measurements, a low-energy high-purity germanium (HPGe) detector was used to experimentally verify the calculated spectrum, a sodium iodide (NaI) scintillating counter was used to verify the azimuthal and polar anisotropy, and a well-type ionization chamber was used to test the feasibility of disseminating S{sub K} values for a directional source within a cylindrically symmetric measurement volume. Results: The UW VAFAC was successfully used to measure the S{sub K} of four CivaDots with reproducibilities within 0.3%. Monte Carlo methods were used to calculate the UW VAFAC correction factors and the calculated spectrum emitted from a CivaDot was experimentally verified with HPGe detector measurements. The well-type ionization chamber showed minimal variation in response (<1.5%) as a function of source positioning angle, indicating that an American Association of Physicists in Medicine (AAPM) Accredited Dosimetry Calibration Laboratory calibrated well chamber would be a suitable device to transfer an S{sub K}-based calibration to a clinical user. S{sub K} per well-chamber ionization current ratios were consistent among the four dots measured. Additionally, the measurements and predictions of anisotropy show uniform emission within the solid angle of the VAFAC, which demonstrates the robustness of the S{sub K} measurement approach. Conclusions: This characterization of a new {sup 103}Pd directional brachytherapy source helps to establish calibration methods that could ultimately be used in the well-established AAPM Task Group 43 formalism. Monte Carlo methods accurately predict the changes in the energy spectrum caused by the fluorescent x-rays produced in the gold shield.

07 ISOTOPE AND RADIATION SOURCES↗

NASA NTRS2009

Deriving Safety Cases from Machine-Generated Proofs

Proofs provide detailed justification for the validity of claims and are widely used in formal software development methods. However, they are often complex and difficult to understand, because they use machine-oriented formalisms; they may also be based on assumptions that are not justified. This causes concerns about the trustworthiness of using formal proofs as arguments in safety-critical applications. Here, we present an approach to develop safety cases that correspond to formal proofs found by automated theorem provers and reveal the underlying argumentation structure and top-level assumptions. We concentrate on natural deduction proofs and show how to construct the safety cases by covering the proof tree with corresponding safety case fragments.

Basir, Nurlida↗

NASA NTRS2009

Deriving Safety Cases from Machine-Generated Proofs

Basir, Nurlida↗

DOE OSTI2016

Dielectric function and plasmons in graphene: A self-consistent-field calculation within a Markovian master equation formalism

We introduce a method for calculating the dielectric function of nanostructures with an arbitrary band dispersion and Bloch wave functions. The linear response of a dissipative electronic system to an external electromagnetic field is calculated by a self-consistent-field approach within a Markovian master equation formalism (SCF-MMEF) coupled with full-wave electromagnetic equations. The SCF-MMEF accurately accounts for several concurrent scattering mechanisms. The method captures interband electron-hole-pair generation, as well as the interband and intraband electron scattering with phonons and impurities. We employ the SCF-MMEF to calculate the dielectric function, complex conductivity, and loss function for supported graphene. From the loss-function maximum, we obtain plasmon dispersion and propagation length for different substrate types [nonpolar diamondlike carbon (DLC) and polar SiO 2 and hBN], impurity densities, carrier densities, and temperatures. Plasmons on the two polar substrates are suppressed below the highest surface phonon energy, while the spectrum is broad on the nonpolar DLC. Plasmon propagation lengths are comparable on polar and nonpolar substrates and are on the order of tens of nanometers, considerably shorter than previously reported. As a result, they improve with fewer impurities, at lower temperatures, and at higher carrier densities.

77 NANOSCIENCE AND NANOTECHNOLOGY↗