Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “hardware failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 433 records · Page 24

Fracture Control for Additive Manufactured Spacecraft Structures

This paper describes how the intent of current NASA fracture control requirements may be applied to “fracture critical” additively manufactured spacecraft hardware. Fracture control is a multi-discipline design and certification methodology that is applied in order to mitigate catastrophic failure of structures resulting from growth of an undetected crack-like defect. The methodology is defined in existing NASA standards and is required on all human-rated space structures. As legacy spacecraft structures have been built using primarily metallic and composite materials manufactured using well established methods, guidance for application of fracture control to parts composed of these material types has been established and is documented in several NASA requirements. Additive manufactured structures offer advantages in design flexibility and manufacturing efficiency and as a result are expected to continue to be used more and more in the future. Recently, relevant guidance has been published by NASA to define materials and processes requirements for certain additive manufactured hardware, but procedures for fracture control are not addressed yet in any requirements or guidance document. While use of additive manufactured parts in non-critical scenarios may be of relatively low concern in current structural certification processes, there is a need for new fracture control guidance in order to use and certify additively manufacture hardware that is “fracture critical” where failure of the part may result in loss of life or loss of vehicle. Assurance of damage tolerance, i.e., that as-built flaws in a given part either do not exist or will not grow to become catastrophic, is of particular interest to the fracture control community. This poses a challenge due to the fact that damage tolerance behavior is not well understood in additive manufactured parts compared to legacy material types and manufacturing techniques. The discussion contained herein is necessary at this time as new guidance in this area should be founded collaboratively by the technical community at large. Different hardware types (e.g., pressure vessel, structural member) are described to highlight specific challenges and solutions for each. The discussion concludes with considering specific disciplines within fracture control (non-destructive evaluation, materials & processes, fracture mechanics, and structural certification) in a proposed extension of existing fracture control requirements to additive manufactured parts.

McElroy, Mark↗

On-board fault management for autonomous spacecraft

The dynamic nature of the Cargo Transfer Vehicle's (CTV) mission and the high level of autonomy required mandate a complete fault management system capable of operating under uncertain conditions. Such a fault management system must take into account the current mission phase and the environment (including the target vehicle), as well as the CTV's state of health. This level of capability is beyond the scope of current on-board fault management systems. This presentation will discuss work in progress at TRW to apply artificial intelligence to the problem of on-board fault management. The goal of this work is to develop fault management systems. This presentation will discuss work in progress at TRW to apply artificial intelligence to the problem of on-board fault management. The goal of this work is to develop fault management systems that can meet the needs of spacecraft that have long-range autonomy requirements. We have implemented a model-based approach to fault detection and isolation that does not require explicit characterization of failures prior to launch. It is thus able to detect failures that were not considered in the failure and effects analysis. We have applied this technique to several different subsystems and tested our approach against both simulations and an electrical power system hardware testbed. We present findings from simulation and hardware tests which demonstrate the ability of our model-based system to detect and isolate failures, and describe our work in porting the Ada version of this system to a flight-qualified processor. We also discuss current research aimed at expanding our system to monitor the entire spacecraft.

Fesq, Lorraine M.↗

NASA's Corrosion Technology Laboratory at the Kennedy Space Center: Anticipating, Managing, and Preventing Corrosion

The marine environment at NASAs Kennedy Space Center (KSC) has been documented by ASM International (formerly American Society for Metals) as the most corrosive in North America. With the introduction of the Space Shuttle in 1981, the already highly corrosive conditions at the launch pads were rendered even more severe by the highly corrosive hydrochloric acid (HCl) generated by the solid rocket boosters (SRBs). Numerous failures at the launch pads are caused by corrosion. The structural integrity of ground infrastructure and flight hardware is critical to the success, safety, cost, and sustainability of space missions. NASA has over fifty years of experience dealing with unexpected failures caused by corrosion and has developed expertise in corrosion control in the launch and other environments. The Corrosion Technology Laboratory at KSC evolved, from what started as an atmospheric exposure test site near NASAs launch pads, into a capability that provides technical innovations and engineering services in all areas of corrosion for NASA, external partners, and customers.This paper provides a chronological overview of NASAs role in anticipating, managing, and preventing corrosion in highly corrosive environments. One important challenge in managing and preventing corrosion involves the detrimental impact on humans and the environment of what have been very effective corrosion control strategies. This challenge has motivated the development of new corrosion control technologies that are more effective and environmentally friendly. Strategies for improved corrosion protection and durability can have a huge impact on the economic sustainability of human spaceflight operations.

Corrosion Control↗

Application of Weibull analysis to SSME hardware

Generally, it has been documented that the wearing of engine parts forms a failure distribution which can be approximated by a function developed by Weibull. The purpose here is to examine to what extent the Weibull distribution approximates failure data for designated engine parts of the Space Shuttle Main Engine (SSME). The current testing certification requirements will be examined in order to establish confidence levels. An examination of the failure history of SSME parts/assemblies (turbine blades, main combustion chamber, or high pressure fuel pump first stage impellers) which are limited in usage by time or starts will be done by using updated Weibull techniques. Efforts will be made by the investigator to predict failure trends by using Weibull techniques for SSME parts (turbine temperature sensors, chamber pressure transducers, actuators, and controllers) which are not severely limited by time or starts.

Gray, L. A. B.↗

A Voyager attitude control perspective on fault tolerant systems

In current spacecraft design, a trend can be observed to achieve greater fault tolerance through the application of on-board software dedicated to detecting and isolating failures. Whether fault tolerance through software can meet the desired objectives depends on very careful consideration and control of the system in which the software is imbedded. The considered investigation has the objective to provide some of the insight needed for the required analysis of the system. A description is given of the techniques which have been developed in this connection during the development of the Voyager spacecraft. The Voyager Galileo Attitude and Articulation Control Subsystem (AACS) fault tolerant design is discussed to emphasize basic lessons learned from this experience. The central driver of hardware redundancy implementation on Voyager was known as the 'single point failure criterion'.

Rasmussen, R. D.↗

Evaluation of Hardware and Software Bill of Materials (HBOMs/SBOMs) Extraction Methods

Hardware and software bills of materials (HBOMs and SBOMs) provide important visibility into the components, dependencies, and supply chain relationships within programmable digital devices. This visibility is critical for advanced nuclear reactor applications, where use of common or shared hardware components, software libraries, suppliers, or manufacturing processes may create common cause failure (CCF) vulnerabilities despite apparent diversity. This paper evaluates current approaches for obtaining and analyzing HBOMs and SBOMs in support of CCF, diversity and defense-in-depth (D3) assessments, and begins to explore potential methods for artificial intelligence/machine learning-based analysis. The availability of BOM information from advanced reactor manufacturers and vendors, representative hardware and software categories found in advanced reactor systems continues to limit research [13]. This paper compares commonly used BOM formats, including CycloneDX, SPDX, and SWID. It also surveys publicly available tools for generating BOMs from source code, compiled binaries, and hardware-related information, noting limitations in language coverage, system age, and format interoperability. Finally, this paper evaluates methods for correlating BOM data with vulnerability and exploitability information, including VEX, CVE, and CWE resources. The findings indicate that publicly available nuclear-vendor BOMs are limited, making third-party extraction and research into novel analysis techniques necessary.

Cybersecurity↗

Body of Knowledge (BOK) for Copper Wire Bonds

Copper wire bonds have replaced gold wire bonds in the majority of commercial semiconductor devices for the latest technology nodes. Although economics has been the driving mechanism to lower semiconductor packaging costs for a savings of about 20% by replacing gold wire bonds with copper, copper also has materials property advantages over gold. When compared to gold, copper has approximately: 25% lower electrical resistivity, 30% higher thermal conductivity, 75% higher tensile strength and 45% higher modulus of elasticity. Copper wire bonds on aluminum bond pads are also more mechanically robust over time and elevated temperature due to the slower intermetallic formation rate - approximately 1/100th that of the gold to aluminum intermetallic formation rate. However, there are significant tradeoffs with copper wire bonding - copper has twice the hardness of gold which results in a narrower bonding manufacturing process window and requires that the semiconductor companies design more mechanically rigid bonding pads to prevent cratering to both the bond pad and underlying chip structure. Furthermore, copper is significantly more prone to corrosion issues. The semiconductor packaging industry has responded to this corrosion concern by creating a palladium coated copper bonding wire, which is more corrosion resistant than pure copper bonding wire. Also, the selection of the device molding compound is critical because use of environmentally friendly green compounds can result in internal CTE (Coefficient of Thermal Expansion) mismatches with the copper wire bonds that can eventually lead to device failures during thermal cycling. Despite the difficult problems associated with the changeover to copper bonding wire, there are billions of copper wire bonded devices delivered annually to customers. It is noteworthy that Texas Instruments announced in October of 2014 that they are shipping microcircuits containing copper wire bonds for safety critical automotive applications. An evaluation of copper wire bond technology for applicability to spaceflight hardware may be warranted along with concurrently compiling a comprehensive understanding of the failure mechanisms involved with copper wire bonded semiconductor devices.

Body of Knowledge (BOK)↗

Seismic Resilience of Large Power Transformer Bushings & Non-SF6 Industrial Base Scan Review

Large (high voltage) power transformers (LPT), and more specifically, their bushings, are known to be susceptible to seismic failure. With bushing failure, a transformer will have to be replaced, which has a considerable lead time, adding to the power outage duration. Cost-efficient, proven solutions are not currently available to mitigate this risk, which can persist for the more than 30-year life of a particular transformer. This work will focus on developing and demonstrating a hardware solution to address seismic vulnerabilities and reduce outage risks from LPT failure. Sulfur Hexafluoride (SF6) is a specialty gas with excellent electrical insulation properties which has been used extensively in the power industry. This gas is unfortunately also one of the most potent greenhouse gases known to humanity. A 2014 report by the Intergovernmental Panel on Climate Change found that SF6 has a global warming potential (GWP) 23,000 times higher than Carbon Dioxide, and has the highest GWP of all gases assessed (Myhre 2013). SF6 is almost exclusively man-made and is produced for use as an insulator in high voltage electrical equipment. This makes the production and use of SF6 one of the leading sources of anthropogenic climate change. To fully eliminate the environmental impacts of SF6, alternative technology is needed. The ideal replacement would be a technology that can fulfil the same role as SF6, at the same cost or cheaper, but without adverse environmental effects. Currently, no technology fits this description, however several promising technologies have begun to enter the market. An industry scan was performed to assess the state of industry adoption and manufacturing capability for SF6-free alternative technologies for use at the high-voltage level, and the primary barriers to broader adoption.

10 SYNTHETIC FUELS↗

Long life assurance study for manned spacecraft long life hardware. Volume 3: Long life assurance studies of components

The guidelines for selecting hardware to be used in manned spacecraft to obtain a five year operational lifetime without maintenance were developed. An analysis was conducted on the design, application, failure mechanisms, manufacturing processes and controls, screen and burn-in techniques, and quality control of hardware items. The equipment considered for evaluation include: (1) electric motors and bearings; (2) accelerometers; (3) gyroscopes and bearings; (4) compressors and pumps, (5) magnetic tape recorders; (6) plumbing components and tubing; (7) check valves; (8) pressure regulators and solenoid valves; (9) thermal control valves; (10) pressure vessels and positive expulsion devices; (11) nickel cadmium batteries; and (12) transducers.

Source record↗

A Testbed for Evaluating Lunar Habitat Autonomy Architectures

A lunar outpost will involve a habitat with an integrated set of hardware and software that will maintain a safe environment for human activities. There is a desire for a paradigm shift whereby crew will be the primary mission operators, not ground controllers. There will also be significant periods when the outpost is uncrewed. This will require that significant automation software be resident in the habitat to maintain all system functions and respond to faults. JSC is developing a testbed to allow for early testing and evaluation of different autonomy architectures. This will allow evaluation of different software configurations in order to: 1) understand different operational concepts; 2) assess the impact of failures and perturbations on the system; and 3) mitigate software and hardware integration risks. The testbed will provide an environment in which habitat hardware simulations can interact with autonomous control software. Faults can be injected into the simulations and different mission scenarios can be scripted. The testbed allows for logging, replaying and re-initializing mission scenarios. An initial testbed configuration has been developed by combining an existing life support simulation and an existing simulation of the space station power distribution system. Results from this initial configuration will be presented along with suggested requirements and designs for the incremental development of a more sophisticated lunar habitat testbed.

Lawler, Dennis G.↗

A failure effects simulation of a low authority flight control augmentation system on a UH-1H helicopter

A two-pilot moving base simulator experiment was conducted to assess the effects of servo failures of a flight control system on the transient dynamics of a Bell UH-1H helicopter. The flight control hardware considered was part of the V/STOLAND system built with control authorities of from 20-40%. Servo hardover and oscillatory failures were simulated in each control axis. Measurements were made to determine the adequacy of the failure monitoring system time delay and the servo center and lock time constant, the pilot reaction times, and the altitude and attitude excursions of the helicopter at hover and 60 knots. Safe recoveries were made from all failures under VFR conditions. Pilot reaction times were from 0.5 to 0.75 sec. Reduction of monitor delay times below these values resulted in significantly reduced excursion envelopes. A subsequent flight test was conducted on a UH-1H helicopter with the V/STOLAND system installed. Series servo hardovers were introduced in hover and at 60 knots straight and level. Data from these tests are included for comparison.

Corliss, L. D.↗

Modified aerospace reliability and quality assurance method for wind turbines

The safety, reliability, and quality assurance (SR&QA) approach developed for the first large wind turbine generator project is described. The SR&QA approach was used to assure that the machine would not be hazardous to the public or operating personnel, would operate unattended on a utility grid, would demonstrate reliable operation and would help establish the quality assurance and maintainability requirements for future wind turbine projects. A modified failure modes and effects analysis during the design phase, minimal hardware inspections during parts fabrication, and three simple documents to control activities during machine construction and operation were presented.

Klein, W. E.↗

Reliability and quality assurance on the MOD 2 wind system

The Safety, Reliability, and Quality Assurance (R&QA) approach developed for the largest wind turbine generator, the Mod 2, is described. The R&QA approach assures that the machine is not hazardous to the public or to the operating personnel, is operated unattended on a utility grid, demonstrates reliable operation, and helps establish the quality assurance and maintainability requirements for future wind turbine projects. The significant guideline consisted of a failure modes and effects analysis (FMEA) during the design phase, hardware inspections during parts fabrication, and three simple documents to control activities during machine construction and operation.

Mason, W. E. B.↗

Investigation of air transportation technology at Princeton University, 1988-1989

The Air Transportation Technology Program at Princeton University, a program emphasizing graduate and undergraduate student research, proceeded along several avenues during the past year. A study of optimal trajectories for penetration of microbursts when encounter is unavoidable was conducted. The emphasis of current wind shear research is on developing an expert system for wind shear avoidance. A knowledge-based reconfigurable flight control system that is implemented with the Pascal programming language using parallel microprocessors was developed. This expert system could be considered a prototype for a failure-tolerant control system that can be constructed using existing hardware. Development of a real-time cockpit simulator continued during the year. The simulator provides a single-person crew station with both conventional and advanced control devices; it currently is programmed to simulate the Navion single-engine general aviation airplane. Alternatives for the air traffic control system giving particular attention to the institutional structure of the FAA are analyzed. A simple numerical procedure for estimating the stochastic robustness of control systems is being investigated. The revitalization of the general aviation industry is also discussed.

Stengel, Robert F.↗

Development of a 12-Thrust Chamber Kerosene /Oxygen Primary Rocket Sub-System for an Early (1964) Air-Augmented Rocket Ground-Test System

Airbreathing/Rocket combined-cycle, and specifically rocket-based combined- cycle (RBCC), propulsion systems, typically employ an internal engine flow-path installed primary rocket subsystem. To achieve acceptably short mixing lengths in effecting the "air augmentation" process, a large rocket-exhaust/air interfacial mixing surface is needed. This leads, in some engine design concepts, to a "cluster" of small rocket units, suitably arrayed in the flowpath. To support an early (1964) subscale ground-test of a specific RBCC concept, such a 12-rocket cluster was developed by NASA's Marshall Space Flight Center (MSFC). The small primary rockets used in the cluster assembly were modified versions of an existing small kerosene/oxygen water-cooled rocket engine unit routinely tested at MSFC. Following individual thrust-chamber tests and overall subsystem qualification testing, the cluster assembly was installed at the U. S. Air Force's Arnold Engineering Development Center (AEDC) for RBCC systems testing. (The results of the special air-augmented rocket testing are not covered here.) While this project was eventually successfully completed, a number of hardware integration problems were met, leading to catastrophic thrust chamber failures. The principal "lessons learned" in conducting this early primary rocket subsystem experimental effort are documented here as a basic knowledge-base contribution for the benefit of today's RBCC research and development community.

Pryor, D.↗

Equipment Failure Analysis

Tennessee Eastman uses NASTRAN to minimize lost production by pinpointing the causes of equipment failures and preventing recurrences. An example of the program's utility involves a large centrifugal fan which developed cracks during start-ups and shutdowns. This information prompted redesign of the fan. Tennessee Eastman has made extensive use of NASTRAN, both as failure analysis tool and as an aid in redesigning production hardware.

Source record↗

CRYOGENIC UPPER STAGE SYSTEM SAFETY

NASA s Exploration Initiative will require development of many new systems or systems of systems. One specific example is that safe, affordable, and reliable upper stage systems to place cargo and crew in stable low earth orbit are urgently required. In this paper, we examine the failure history of previous upper stages with liquid oxygen (LOX)/liquid hydrogen (LH2) propulsion systems. Launch data from 1964 until midyear 2005 are analyzed and presented. This data analysis covers upper stage systems from the Ariane, Centaur, H-IIA, Saturn, and Atlas in addition to other vehicles. Upper stage propulsion system elements have the highest impact on reliability. This paper discusses failure occurrence in all aspects of the operational phases (Le., initial burn, coast, restarts, and trends in failure rates over time). In an effort to understand the likelihood of future failures in flight, we present timelines of engine system failures relevant to initial flight histories. Some evidence suggests that propulsion system failures as a result of design problems occur shortly after initial development of the propulsion system; whereas failures because of manufacturing or assembly processing errors may occur during any phase of the system builds process, This paper also explores the detectability of historical failures. Observations from this review are used to ascertain the potential for increased upper stage reliability given investments in integrated system health management. Based on a clear understanding of the failure and success history of previous efforts by multiple space hardware development groups, the paper will investigate potential improvements that can be realized through application of system safety principles.

Smith, R. Kenneth↗

Force Limited Vibration Testing

This slide presentation reviews the concept and applications of Force Limited Vibration Testing. The goal of vibration testing of aerospace hardware is to identify problems that would result in flight failures. The commonly used aerospace vibration tests uses artificially high shaker forces and responses at the resonance frequencies of the test item. It has become common to limit the acceleration responses in the test to those predicted for the flight. This requires an analysis of the acceleration response, and requires placing accelerometers on the test item. With the advent of piezoelectric gages it has become possible to improve vibration testing. The basic equations have are reviewed. Force limits are analogous and complementary to the acceleration specifications used in conventional vibration testing. Just as the acceleration specification is the frequency spectrum envelope of the in-flight acceleration at the interface between the test item and flight mounting structure, the force limit is the envelope of the in-flight force at the interface . In force limited vibration tests, both the acceleration and force specifications are needed, and the force specification is generally based on and proportional to the acceleration specification. Therefore, force limiting does not compensate for errors in the development of the acceleration specification, e.g., too much conservatism or the lack thereof. These errors will carry over into the force specification. Since in-flight vibratory force data are scarce, force limits are often derived from coupled system analyses and impedance information obtained from measurements or finite element models (FEM). Fortunately, data on the interface forces between systems and components are now available from system acoustic and vibration tests of development test models and from a few flight experiments. Semi-empirical methods of predicting force limits are currently being developed on the basis of the limited flight and system test data. A simple two degree of freedom system is shown and the governing equations for basic force limiting results for this system are reviewed. The design and results of the shuttle vibration forces (SVF) experiments are reviewed. The Advanced Composition Explorer (ACE) also was used to validate force limiting. Test instrumentation and supporting equipment are reviewed including piezo-electric force transducers, signal processing and conditioning systems, test fixtures, and vibration controller systems. Several examples of force limited vibration testing are presented with some results.

random vibration testing↗