Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safety testing”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 469 records · Page 26

Got Mercury?

Many of the operational and payload lighting units used in various spacecraft contain elemental mercury. If these devices were damaged on-orbit, elemental mercury could be released into the cabin. Although there are plans to replace operational units with alternate light sources, such as LEDs, that do not contain mercury, mercury-containing lamps efficiently produce high quality illumination and may never be completely replaced on orbit. Therefore, exposure to elemental mercury during spaceflight will remain possible and represents a toxicological hazard. Elemental mercury is a liquid metal that vaporizes slowly at room temperature. However, it may be completely vaporized at the elevated operating temperatures of lamps. Although liquid mercury is not readily absorbed through the skin or digestive tract, mercury vapors are efficiently absorbed through the respiratory tract. Therefore, the amount of mercury in the vapor form must be estimated. For mercury releases from lamps that are not being operated, we utilized a study conducted by the New Jersey Department of Environmental Quality to calculate the amount of mercury vapor expected to form over a 2-week period. For longer missions and for mercury releases occurring when lamps are operating, we conservatively assumed complete volatilization of the available mercury. Because current spacecraft environmental control systems are unable to remove mercury vapors, both short-term and long-term exposures to mercury vapors are possible. Acute exposure to high concentrations of mercury vapors can cause irritation of the respiratory tract and behavioral symptoms, such as irritability and hyperactivity. Chronic exposure can result in damage to the nervous system (tremors, memory loss, insomnia, etc.) and kidneys (proteinurea). Therefore, the JSC Toxicology Group recommends that stringent safety controls and verifications (vibrational testing, etc.) be applied to any hardware that contains elemental mercury that could yield airborne mercury vapor concentrations greater than 0.1 mg/cu m in the total spacecraft atmosphere for exposures lasting 30 days or less or 0.01 mg/cu m mercury vapor for exposures lasting more than 30 days. We also encourage the use of alternative devices that do not contain mercury.

Meyers, Valerie E.↗

Evidence Report: Risk of Inadequate Human-Computer Interaction

Human-computer interaction (HCI) encompasses all the methods by which humans and computer-based systems communicate, share information, and accomplish tasks. When HCI is poorly designed, crews have difficulty entering, navigating, accessing, and understanding information. HCI has rarely been studied in an operational spaceflight context, and detailed performance data that would support evaluation of HCI have not been collected; thus, we draw much of our evidence from post-spaceflight crew comments, and from other safety-critical domains like ground-based power plants, and aviation. Additionally, there is a concern that any potential or real issues to date may have been masked by the fact that crews have near constant access to ground controllers, who monitor for errors, correct mistakes, and provide additional information needed to complete tasks. We do not know what types of HCI issues might arise without this "safety net". Exploration missions will test this concern, as crews may be operating autonomously due to communication delays and blackouts. Crew survival will be heavily dependent on available electronic information for just-in-time training, procedure execution, and vehicle or system maintenance; hence, the criticality of the Risk of Inadequate HCI. Future work must focus on identifying the most important contributing risk factors, evaluating their contribution to the overall risk, and developing appropriate mitigations. The Risk of Inadequate HCI includes eight core contributing factors based on the Human Factors Analysis and Classification System (HFACS): (1) Requirements, policies, and design processes, (2) Information resources and support, (3) Allocation of attention, (4) Cognitive overload, (5) Environmentally induced perceptual changes, (6) Misperception and misinterpretation of displayed information, (7) Spatial disorientation, and (8) Displays and controls.

Kritina Holden↗

Assessing UAS Flight Testing and It's Importance for Beyond-Line-of-Sight UAS Control in Cooperation with Partnering Organizations

From the 1st of June until the 21st of August, the internship has been conducted at NASA Ames Research Center as part of the Master of Space Studies at the International Space University. The main activities consisted of doing research on UAV flight-­‐testing and the assessing of safety with respect to Beyond-­‐Line-­‐Of-­‐Sight operations. Further activities consisted of accommodating international partners and potential partners at the NASA Ames site, in order to identify mutual interest and future collaboration. Besides those activities, the report describes the planning process of the ISU Space Coast Trip to 10 different space related companies on the west-­‐coast of California. Key words: UAS, UAV, BLOS, Ames, ISU Trip

BLOS↗

Fuzzy Logic Controller Stability Analysis Using a Satisfiability Modulo Theories Approach

While many widely accepted methods and techniques exist for validation and verification of traditional controllers, at this time no solutions have been accepted for Fuzzy Logic Controllers (FLCs). Due to the highly nonlinear nature of such systems, and the fact that developing a valid FLC does not require a mathematical model of the system, it is quite difficult to use conventional techniques to prove controller stability. Since safety-critical systems must be tested and verified to work as expected for all possible circumstances, the fact that FLC controllers cannot be tested to achieve such requirements poses limitations on the applications for such technology. Therefore, alternative methods for verification and validation of FLCs needs to be explored. In this study, a novel approach using formal verification methods to ensure the stability of a FLC is proposed. Main research challenges include specification of requirements for a complex system, conversion of a traditional FLC to a piecewise polynomial representation, and using a formal verification tool in a nonlinear solution space. Using the proposed architecture, the Fuzzy Logic Controller was found to always generate negative feedback, but inconclusive for Lyapunov stability.

Fuzzy Logic Controller↗

Fuzzy Logic Controller Stability Analysis Using a Satisfiability Modulo Theories Approach

While many widely accepted methods and techniques exist for validation and verification of traditional controllers, at this time no solutions have been accepted for Fuzzy Logic Controllers (FLCs). Due to the highly nonlinear nature of such systems, and the fact that developing a valid FLC does not require a mathematical model of the system, it is quite difficult to use conventional techniques to prove controller stability. Since safety-critical systems must be tested and verified to work as expected for all possible circumstances, the fact that FLC controllers cannot be tested to achieve such requirements poses limitations on the applications for such technology. Therefore, alternative methods for verification and validation of FLCs needs to be explored. In this study, a novel approach using formal verification methods to ensure the stability of a FLC is proposed. Main research challenges include specification of requirements for a complex system, conversion of a traditional FLC to a piecewise polynomial representation, and using a formal verification tool in a nonlinear solution space. Using the proposed architecture, the Fuzzy Logic Controller was found to always generate negative feedback, but inconclusive for Lyapunov stability.

Fuzzy Logic Controller↗

Composite Overwrapped Pressure Vessel (COPV) Damage Tolerance Life Analysis Methodology and Test Best Practices: Appendices

The NASA Engineering and Safety Center (NESC) Deputy Director requested an independent assessment to develop data to understand the limitations of linear elastic fracture mechanics (LEFM) computational methods used to predict fatigue crack growth rate (da/dN) behavior of small detectable cracks in thin metal liners for composite overwrapped pressure vessels (COPVs). The NESC assessment team was also requested to demonstrate a test-based methodology for validating damage tolerance requirements for COPVs with elastically responding metal liners where LEFM methods are not appropriate. This document contains the appendices to the main report.

Composite Overwrapped Pressure Vessels; Linear Ela↗

An Impact-Location Estimation Algorithm for Subsonic Uninhabited Aircraft

An impact-location estimation algorithm is being used at the NASA Dryden Flight Research Center to support range safety for uninhabited aerial vehicle flight tests. The algorithm computes an impact location based on the descent rate, mass, and altitude of the vehicle and current wind information. The predicted impact location is continuously displayed on the range safety officer's moving map display so that the flightpath of the vehicle can be routed to avoid ground assets if the flight must be terminated. The algorithm easily adapts to different vehicle termination techniques and has been shown to be accurate to the extent required to support range safety for subsonic uninhabited aerial vehicles. This paper describes how the algorithm functions, how the algorithm is used at NASA Dryden, and how various termination techniques are handled by the algorithm. Other approaches to predicting the impact location and the reasons why they were not selected for real-time implementation are also discussed.

Bauer, Jeffrey E.↗

Computing Q-D Relationships for Storage of Rocket Fuels

The Quantity Distance Measurement Tool is a GIS BASEP computer program that aids safety engineers by calculating quantity-distance (Q-D) relationships for vessels that contain explosive chemicals used in testing rocket engines. (Q-D relationships are standard relationships between specified quantities of specified explosive materials and minimum distances by which they must be separated from persons, objects, and other explosives to obtain specified types and degrees of protection.) The program uses customized geographic-information-system (GIS) software and calculates Q-D relationships in accordance with NASA's Safety Standard For Explosives, Propellants, and Pyrotechnics. Displays generated by the program enable the identification of hazards, showing the relationships of propellant-storage-vessel safety buffers to inhabited facilities and public roads. Current Q-D information is calculated and maintained in graphical form for all vessels that contain propellants or other chemicals, the explosiveness of which is expressed in TNT equivalents [amounts of trinitrotoluene (TNT) having equivalent explosive effects]. The program is useful in the acquisition, siting, construction, and/or modification of storage vessels and other facilities in the development of an improved test-facility safety program.

Jester, Keith↗

Orion MPCV Touchdown Detection Threshold Development and Testing

A robust method of detecting Orion Multi ]Purpose Crew Vehicle (MPCV) splashdown is necessary to ensure crew and hardware safety during descent and after touchdown. The proposed method uses a triple redundant system to inhibit Reaction Control System (RCS) thruster firings, detach parachute risers from the vehicle, and transition to the post ]landing segment of the Flight Software (FSW). The vehicle crew is the prime input for touchdown detection, followed by an autonomous FSW algorithm, and finally a strictly time based backup timer. RCS thrusters must be inhibited before submersion in water to protect against possible damage due to firing these jets under water. In addition, neglecting to declare touchdown will not allow the vehicle to transition to post ]landing activities such as activating the Crew Module Up ]righting System (CMUS), resulting in possible loss of communication and difficult recovery. A previous AIAA paper gAssessment of an Automated Touchdown Detection Algorithm for the Orion Crew Module h concluded that a strictly Inertial Measurement Unit (IMU) based detection method using an acceleration spike algorithm had the highest safety margins and shortest detection times of other methods considered. That study utilized finite element simulations of vehicle splashdown, generated by LS ]DYNA, which were expanded to a larger set of results using a Kriging surface fit. The study also used the Decelerator Systems Simulation (DSS) to generate flight dynamics during vehicle descent under parachutes. Proto ]type IMU and FSW MATLAB models provided the basis for initial algorithm development and testing. This paper documents an in ]depth trade study, using the same dynamics data and MATLAB simulations as the earlier work, to further develop the acceleration detection method. By studying the combined effects of data rate, filtering on the rotational acceleration correction, data persistence limits and values of acceleration thresholds, an optimal configuration was determined. The lever arm calculation, which removes the centripetal acceleration caused by vehicle rotation, requires that the vehicle angular acceleration be derived from vehicle body rates, necessitating the addition of a 2nd order filter to smooth the data. It was determined that using 200 Hz data directly from the vehicle IMU outperforms the 40 Hz FSW data rate. Data persistence counter values and acceleration thresholds were balanced in order to meet desired safety and performance. The algorithm proved to exhibit ample safety margin against early detection while under parachutes, and adequate performance upon vehicle splashdown. Fall times from algorithm initiation were also studied, and a backup timer length was chosen to provide a large safety margin, yet still trigger detection before CMUS inflation. This timer serves as a backup to the primary acceleration detection method. Additionally, these parameters were tested for safety on actual flight test data, demonstrating expected safety margins.

Daum, Jared↗

GPM Timeline Inhibits For IT Processing

The Safety Inhibit Timeline Tool was created as one approach to capturing and understanding inhibits and controls from IT through launch. Global Precipitation Measurement (GPM) Mission, which launched from Japan in March 2014, was a joint mission under a partnership between the National Aeronautics and Space Administration (NASA) and the Japan Aerospace Exploration Agency (JAXA). GPM was one of the first NASA Goddard in-house programs that extensively used software controls. Using this tool during the GPM buildup allowed a thorough review of inhibit and safety critical software design for hazardous subsystems such as the high gain antenna boom, solar array, and instrument deployments, transmitter turn-on, propulsion system release, and instrument radar turn-on. The GPM safety team developed a methodology to document software safety as part of the standard hazard report. As a result of this process, a new tool safety inhibit timeline was created for management of inhibits and their controls during spacecraft buildup and testing during IT at GSFC and at the launch range in Japan. The Safety Inhibit Timeline Tool was a pathfinder approach for reviewing software that controls the electrical inhibits. The Safety Inhibit Timeline Tool strengthens the Safety Analysts understanding of the removal of inhibits during the IT process with safety critical software. With this tool, the Safety Analyst can confirm proper safe configuration of a spacecraft during each IT test, track inhibit and software configuration changes, and assess software criticality. In addition to understanding inhibits and controls during IT, the tool allows the Safety Analyst to better communicate to engineers and management the changes in inhibit states with each phase of hardware and software testing and the impact of safety risks. Lessons learned from participating in the GPM campaign at NASA and JAXA will be discussed during this session.

Inhibits↗

Investigation of Structural Factors of Safety for the Space Shuttle

A study was made of the factors governing the structural design of the fully reusable space shuttle booster to establish a rational approach to select optimum structural factors of safety. The study included trade studies of structural factors of safety versus booster service life, weight, cost, and reliability. Similar trade studies can be made on other vehicles using the procedures developed. The major structural components of a selected baseline booster were studied in depth, each being examined to determine the fatigue life, safe-life, and fail-safe capabilities of the baseline design. Each component was further examined to determine its reliability and safety requirements, and the change of structural weight with factors of safety. The apparent factors of safety resulting from fatigue, safe-life, proof test, and fail-safe requirements were identified. The feasibility of reduced factors of safety for design loads such as engine thrust, which are well defined, was examined.

Source record↗

Implementation of Wireless and Intelligent Sensor Technologies in the Propulsion Test Environment

From the first Saturn V rocket booster (S-II-T) testing in 1966 and the routine Space Shuttle Main Engine (SSME) testing beginning in 1975, to more recent test programs such as the X-33 Aerospike Engine, the Integrated Powerhead Development (IPD) program, and the Hybrid Sounding Rocket (HYSR), Stennis Space Center (SSC) continues to be a premier location for conducting large-scale propulsion testing. Central to each test program is the capability for sensor systems to deliver reliable measurements and high quality data, while also providing a means to monitor the test stand area to the highest degree of safety and sustainability. As part of an on-going effort to enhance the testing capabilities of Stennis Space Center, the Test Technology and Development group is developing and applying a number of wireless and intelligent sensor technologies in ways that are new to the test existing test environment.

Solano, Wanda M.↗

Flight Research on a Forward-Swept-Wing Airplane

Tests yield information relating to design, safety, and performance. Report gives overview of flight research program on X-29A experimental airplane. X-29A features forward-swept wings. Research program providing data needed to improve design, fabrications, and testing procedures for airplane.

Sefic, Walter J.↗

Large Scale Flame Spread Environmental Characterization Testing

Under the Advanced Exploration Systems (AES) Spacecraft Fire Safety Demonstration Project (SFSDP), as a risk mitigation activity in support of the development of a large-scale fire demonstration experiment in microgravity, flame-spread tests were conducted in normal gravity on thin, cellulose-based fuels in a sealed chamber. The primary objective of the tests was to measure pressure rise in a chamber as sample material, burning direction (upward/downward), total heat release, heat release rate, and heat loss mechanisms were varied between tests. A Design of Experiments (DOE) method was imposed to produce an array of tests from a fixed set of constraints and a coupled response model was developed. Supplementary tests were run without experimental design to additionally vary select parameters such as initial chamber pressure. The starting chamber pressure for each test was set below atmospheric to prevent chamber overpressure. Bottom ignition, or upward propagating burns, produced rapid acceleratory turbulent flame spread. Pressure rise in the chamber increases as the amount of fuel burned increases mainly because of the larger amount of heat generation and, to a much smaller extent, due to the increase in gaseous number of moles. Top ignition, or downward propagating burns, produced a steady flame spread with a very small flat flame across the burning edge. Steady-state pressure is achieved during downward flame spread as the pressure rises and plateaus. This indicates that the heat generation by the flame matches the heat loss to surroundings during the longer, slower downward burns. One heat loss mechanism included mounting a heat exchanger directly above the burning sample in the path of the plume to act as a heat sink and more efficiently dissipate the heat due to the combustion event. This proved an effective means for chamber overpressure mitigation for those tests producing the most total heat release and thusly was determined to be a feasible mitigation strategy to incorporate into the microgravity experiment.

Clayman, Lauren K.↗

Space Shuttle Boundary Layer Transition Flight Experiment Ground Testing Overview

In support of the Boundary Layer Transition (BLT) Flight Experiment (FE) Project in which a manufactured protuberance tile was installed on the port wing of Space Shuttle Orbiter Discovery for STS-119, STS- 128, STS-131 and STS-133 as well as Space Shuttle Orbiter Endeavour for STS-134, a significant ground test campaign was completed. The primary goals of the test campaign were to provide ground test data to support the planning and safety certification efforts required to fly the flight experiment as well as validation for the collected flight data. These test included Arcjet testing of the tile protuberance, aerothermal testing to determine the boundary layer transition behavior and resultant surface heating and planar laser induced fluorescence (PLIF) testing in order to gain a better understanding of the flow field characteristics associated with the flight experiment. This paper provides an overview of the BLT FE Project ground testing. High-level overviews of the facilities, models, test techniques and data are presented, along with a summary of the insights gained from each test.

Karen T Berger↗

TPSAS-NF1676L-19423-DND

In support of the Boundary Layer Transition (BLT) Flight Experiment (FE) Project in which a manufactured protuberance tile was installed on the port wing of Space Shuttle Orbiter Discovery for STS-119, STS-128, STS-131 and STS-133 as well as Space Shuttle Endeavour for STS-134, a significant wind tunnel test campaign was completed. The primary goals of the test campaign were to provide ground test data to support the planning and safety certification efforts required to fly the flight experiment as well as validation for the collected flight data. These test included Arcjet testing of the tile protuberance, aerothermal testing to determine the boundary layer transition behavior and resultant surface heating and planar laser induced fluorescence (PLIF) testing in order to gain a better understanding of the flow field characteristics of the flight experiment. This paper provides an overview of the BLT FE Project ground testing. High-level overviews of the facilities, models, test techniques and data are presented, along with a summary of the insights gained from each test.

Karen T Berger↗

Quarantine testing and biocharacterization of lunar materials

Quarantine testing was conducted to ensure the safety of all life on earth. The plants and animals which were exposed to lunar material were carefully observed for prolonged periods to determine if any mutation or changes in growing characteristics and behavior occurred. The quarantine testing was terminated after the Apollo 14 flight when it became apparent that previously returned lunar material contained no potentially harmful agents. Further biological experimentation with the lunar material was conducted to determine its chemical, physical, and nutritional qualities.

Gerald R. Taylor↗

Comanche Helmet-Mounted Display Symbology Evaluation

This study assessed pilot-vehicle performance and workload associated with flying the Comanche Contact Analog, world-referenced primary flight symbology when compared with a conventional, screen-fixed, Compressed symbology. Previous investigation had revealed benefits when utilizing Compressed symbology in constrained flight maneuvers. The current evaluation further evaluated the effects of symbology by testing pilots in a high-fidelity simulator, executing more operational tasks. Flight performance and subjective ratings from six experimental test pilots were collected. Results replicated previous findings, and no performance differences were found in operational tasks. Pilot comments revealed significant preference for Compressed symbology, while some aspects of Contact Analog symbology raised objections. Performance, preference, and safety of flight issues perceived by test pilots merit a review of Contact Analog symbology design.

Dowell, Susan R.↗