Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 487 records · Page 27
All sourcesNASA NTRSDOE OSTI
NASA NTRS2016

Model Based Mission Assurance: Emerging Opportunities for Robotic Systems

The emergence of Model Based Systems Engineering (MBSE) in a Model Based Engineering framework has created new opportunities to improve effectiveness and efficiencies across the assurance functions. The MBSE environment supports not only system architecture development, but provides for support of Systems Safety, Reliability and Risk Analysis concurrently in the same framework. Linking to detailed design will further improve assurance capabilities to support failures avoidance and mitigation in flight systems. This also is leading new assurance functions including model assurance and management of uncertainty in the modeling environment. Further, the assurance cases, a structured hierarchal argument or model, are emerging as a basis for supporting a comprehensive viewpoint in which to support Model Based Mission Assurance (MBMA).

Mission Assurance↗
NASA NTRS1978

The NASA high pressure facility and turbine test rig

NASA Lewis Research Center is presently constructing a test facility for developing turbine-cooling and combustor technology for future-generation aircraft gas-turbine engines. Prototype engine hardware will be investigated in this facility at gas-stream conditions up to 2480 K average turbine inlet temperature and 4.14 million N/sq m turbine inlet pressure. The facility will have the unique features of fully automated control and data acquisition through the use of an integrated system of minicomputers and programmable controllers, which will result in more effective use of operating time and operators and will provide a built-in self-protection safety system. The facility, turbine rig, and turbine-cooling test program are described.

Stepka, F. S.↗
NASA NTRS2007

Robust Multilayer Insulation for Cryogenic Systems

New requirements for thermal insulation include robust Multilayer insulation (MU) systems that work for a range of environments from high vacuum to no vacuum. Improved MLI systems must be simple to install and maintain while meeting the life-cycle cost and thermal performance objectives. Performance of actual MLI systems has been previously shown to be much worse than ideal MLI. Spacecraft that must contain cryogens for both lunar service (high vacuum) and ground launch operations (no vacuum) are planned. Future cryogenic spacecraft for the soft vacuum environment of Mars are also envisioned. Industry products using robust MLI can benefit from improved cost-efficiency and system safety. Novel materials have been developed to operate as excellent thermal insulators at vacuum levels that are much less stringent than the absolute high vacuum requirement of current MLI systems. One such robust system, Layered Composite Insulation (LCI), has been developed by the Cryogenics Test Laboratory at NASA Kennedy Space Center. The experimental testing and development of LCI is the focus of this paper. LCI thermal performance under cryogenic conditions is shown to be six times better than MLI at soft vacuum and similar to MLI at high vacuum. The experimental apparent thermal conductivity (k-value) and heat flux data for LCI systems are compared with other MLI systems.

Fesmire, J. E.↗
NASA NTRS1977

Rocket propulsion hazard summary: Safety classification, handling experience and application to space shuttle payload

The DOT classification for transportation, the military classification for quantity distance, and hazard compatibility grouping used to regulate the transportation and storage of explosives are presented along with a discussion of tests used in determining sensitivity of propellants to an impact/shock environment in the absence of a large explosive donor. The safety procedures and requirements of a Scout launch vehicle, Western and Eastern Test Range, and the Minuteman, Delta, and Poseidon programs are reviewed and summarized. Requirements of the space transportation system safety program include safety reviews from the subsystem level to the completed payload. The Scout safety procedures will satisfy a portion of these requirements but additional procedures need to be implemented to comply with the safety requirements for Shuttle operation from the Eastern Test Range.

Pennington, D. F.↗
NASA NTRS2001

Risk analysis simulation of rover operations for Mars surface exploration

Risk management advocates have long sought to directly influence the early stages of the systems engineering process through a more effective role in system design trade studies. The principal obstacle to this has been the lack of credible ways to represent and quantify mission risk—that is, a combination of the probability of mission success (“system safety”) and science value—for the project manager and the rest of the design team. If it were possible to quantify mission risk, then the effects of proposed mission and system design changes could be calculated, and along with life-cycle costs, could be used to explore the design space more extensively and select better designs. JPL has been working to build the capability to quantify the probability of mission success using a federation of diverse simulations and models, each of which contributes some vital piece of the puzzle. The initial institutional focus has been on Mars surface operations. This ensemble computing framework enables the diverse models and simulations to work together seamlessly. Recent work at JPL has demonstrated the capability to exercise this ensemble from end-to-end using an Oracle-based database to automatically move results from one model/simulation to the next stage in the analysis.

Shishko, Robert↗
NASA NTRS1976

A high pressure, high temperature combustor and turbine-cooling test facility

A new test facility is being constructed for developing turbine-cooling and combustor technology for future generation aircraft gas turbine engines. Prototype engine hardware will be investigated in this new facility at gas stream conditions up to 2480 K average turbine inlet temperature and 4.14 x 10 to the 6th power n sq m turbine inlet pressure. The facility will have the unique feature of fully automated control and data acquisition through the use of an integrated system of mini-computers and programmable controllers which will result in more effective use of operating time, will limit the number of operators required, and will provide built in self protection safety systems. The facility and the planning and design considerations are described.

Cochran, R. P.↗
NASA NTRS1976

A high-pressure, high-temperature combustor and turbine-cooling test facility

NASA-Lewis Research Center is presently constructing a new test facility for developing turbine-cooling and combustor technology for future generation aircraft gas turbine engines. Prototype engine hardware will be investigated in this new facility at gas stream conditions up to 2480 K average turbine inlet temperature and 4,140,000 N per sq m turbine inlet pressure. The facility will have the unique feature of fully-automated control and data acquisition through the use of an integrated system of minicomputers and programmable controllers, which will result in more effective use of operating time, will limit the number of operators required, and will provide a built-in self-protection safety system. The paper describes the facility and the planning and design considerations involved.

Cochran, R. P.↗
NASA NTRS2016

Addressing Uniqueness and Unison of Reliability and Safety for a Better Integration

Over time, it has been observed that Safety and Reliability have not been clearly differentiated, which leads to confusion, inefficiency, and, sometimes, counter-productive practices in executing each of these two disciplines. It is imperative to address this situation to help Reliability and Safety disciplines improve their effectiveness and efficiency. The paper poses an important question to address, "Safety and Reliability - Are they unique or unisonous?" To answer the question, the paper reviewed several most commonly used analyses from each of the disciplines, namely, FMEA, reliability allocation and prediction, reliability design involvement, system safety hazard analysis, Fault Tree Analysis, and Probabilistic Risk Assessment. The paper pointed out uniqueness and unison of Safety and Reliability in their respective roles, requirements, approaches, and tools, and presented some suggestions for enhancing and improving the individual disciplines, as well as promoting the integration of the two. The paper concludes that Safety and Reliability are unique, but compensating each other in many aspects, and need to be integrated. Particularly, the individual roles of Safety and Reliability need to be differentiated, that is, Safety is to ensure and assure the product meets safety requirements, goals, or desires, and Reliability is to ensure and assure maximum achievability of intended design functions. With the integration of Safety and Reliability, personnel can be shared, tools and analyses have to be integrated, and skill sets can be possessed by the same person with the purpose of providing the best value to a product development.

Huang, Zhaofeng↗
NASA NTRS2015

How to Enter, Fly In, and Exit the A-Train Constellation

The collaborative science obtained from the satellites in the A-Train is an unparalleled success. The constellation framework that has evolved is well-formulated and documented by its international members. Communication between teams is enhanced by a web-based Constellation Coordination System. Safety and correlated observations are ensured by defining independent control boxes with buffers in between. Each mission stays within its control box by regular drag makeup maneuvers. Annual inclination adjustments are coordinated by all missions to maintain their absolute and relative Mean Local Time of Ascending Node (MLTAN). Since the satellites are in different orbit planes their separation involves a three-dimensional triad made up of the along track separations, reference groundtracks and MLTAN's. For further safety, a Constellation Envelope has been defined to determine safe entry and exit orbits.

MLTAN↗
NASA NTRS2011

Achieving the Proper Balance Between Crew and Public Safety

A paramount objective of all human-rated launch and reentry vehicle developers is to ensure that the risks to both the crew onboard and the public are minimized within reasonable cost, schedule, and technical constraints. Past experience has shown that proper attention to range safety requirements necessary to ensure public safety must be given early in the design phase to avoid additional operational complexities or threats to the safety of people onboard, and the design engineers must give these requirements the same consideration as crew safety requirements. For human spaceflight, the primary purpose and operational concept for any flight safety system is to protect the public while maximizing the likelihood of crew survival. This paper will outline the policy considerations, technical issues, and operational impacts regarding launch and reentry vehicle failure scenarios where crew and public safety are intertwined and thus addressed optimally in an integrated manner. An overview of existing range and crew safety policy requirements will be presented. Application of these requirements and lessons learned from both the Space Shuttle and Constellation Programs will also be discussed. Using these past programs as examples, the paper will detail operational, design, and analysis approaches to mitigate and balance the risks to people onboard and in the public. Manned vehicle perspectives from the Federal Aviation Administration (FAA) and Air Force organizations that oversee public safety will be summarized as well. Finally, the paper will emphasize the need to factor policy, operational, and analysis considerations into the early design trades of new vehicles to help ensure that both crew and public safety are maximized to the greatest extent possible.

Gowan, John↗
NASA NTRS1985

Spaceborne power systems preference analyses. Volume 2: Decision analysis

Sixteen alternative spaceborne nuclear power system concepts were ranked using multiattribute decision analysis. The purpose of the ranking was to identify promising concepts for further technology development and the issues associated with such development. Four groups were interviewed to obtain preference. The four groups were: safety, systems definition and design, technology assessment, and mission analysis. The highest ranked systems were the heat-pipe thermoelectric systems, heat-pipe Stirling, in-core thermionic, and liquid-metal thermoelectric systems. The next group contained the liquid-metal Stirling, heat-pipe Alkali Metal Thermoelectric Converter (AMTEC), heat-pipe Brayton, liquid-metal out-of-core thermionic, and heat-pipe Rankine systems. The least preferred systems were the liquid-metal AMTEC, heat-pipe thermophotovoltaic, liquid-metal Brayton and Rankine, and gas-cooled Brayton. The three nonheat-pipe technologies selected matched the top three nonheat-pipe systems ranked by this study.

Smith, J. H.↗
NASA NTRS2006

Integrated Vehicle Health Management (IVHM) for Aerospace Systems

To achieve NASA's ambitious Integrated Space Transportation Program objectives, aerospace systems will implement a variety of new concept in health management. System level integration of IVHM technologies for real-time control and system maintenance will have significant impact on system safety and lifecycle costs. IVHM technologies will enhance the safety and success of complex missions despite component failures, degraded performance, operator errors, and environment uncertainty. IVHM also has the potential to reduce, or even eliminate many of the costly inspections and operations activities required by current and future aerospace systems. This presentation will describe the array of NASA programs participating in the development of IVHM technologies for NASA missions. Future vehicle systems will use models of the system, its environment, and other intelligent agents with which they may interact. IVHM will be incorporated into future mission planners, reasoning engines, and adaptive control systems that can recommend or execute commands enabling the system to respond intelligently in real time. In the past, software errors and/or faulty sensors have been identified as significant contributors to mission failures. This presentation will also address the development and utilization of highly dependable sohare and sensor technologies, which are key components to ensure the reliability of IVHM systems.

Baroth, Edmund C.↗
NASA NTRS1989

Model 0A wind turbine generator FMEA

The results of Failure Modes and Effects Analysis (FMEA) conducted for the Wind Turbine Generators are presented. The FMEA was performed for the functional modes of each system, subsystem, or component. The single-point failures were eliminated for most of the systems. The blade system was the only exception. The qualitative probability of a blade separating was estimated at level D-remote. Many changes were made to the hardware as a result of this analysis. The most significant change was the addition of the safety system. Operational experience and need to improve machine availability have resulted in subsequent changes to the various systems which are also reflected in this FMEA.

Klein, William E.↗
NASA NTRS1990

Model-OA wind turbine generator - Failure modes and effects analysis

The results failure modes and effects analysis (FMEA) conducted for wind-turbine generators are presented. The FMEA was performed for the functional modes of each system, subsystem, or component. The single-point failures were eliminated for most of the systems. The blade system was the only exception. The qualitative probability of a blade separating was estimated at level D-remote. Many changes were made to the hardware as a result of this analysis. The most significant change was the addition of the safety system. Operational experience and need to improve machine availability have resulted in subsequent changes to the various systems, which are also reflected in this FMEA.

Klein, William E.↗
NASA NTRS2005

Optimal Design of Integrated Systems Health Management (ISHM) Systems for improving safety in NASA's Exploration Vehicles: A Two-Level Multidisciplinary Design Approach

Integrated Vehicle Health Management (ISHM) systems are used to detect, assess, and isolate functional failures in order to improve safety of space systems such as Orbital Space Planes (OSPs). An ISHM system, as a whole, consists of several subsystems that monitor different components of an OSP including: Spacecraft, Launch Vehicle, Ground Control, and the International Space Station. In this research, therefore, we propose a new methodology to design and optimize ISHM as a distributed system with multiple disciplines (that correspond to different subsystems of OSP safety). A paramount amount of interest has been given in the literature to the multidisciplinary design optimization of problems with such architecture (as will be reviewed in the full paper).

Mehr, Ali Farhang↗
NASA NTRS2011

L-Band System Engineering - Concepts of Use, Systems Performance Requirements, and Architecture

This document is being provided as part of ITT s NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract NNC05CA85C, Task 7: New ATM Requirements-Future Communications, C-band and L-band Communications Standard Development. Task 7 was motivated by the five year technology assessment performed for the Federal Aviation Administration (FAA) under the joint FAA-EUROCONTROL cooperative research Action Plan (AP-17), also known as the Future Communications Study (FCS). It was based on direction provided by the FAA project-level agreement (PLA FY09_G1M.02-02v1) for "New ATM Requirements-Future Communications." Task 7 was separated into two distinct subtasks, each aligned with specific work elements and deliverable items. Subtask 7-1 addressed C-band airport surface data communications standards development, systems engineering, test bed development, and tests/demonstrations to establish operational capability for what is now referred to as the Aeronautical Mobile Airport Communications System (AeroMACS). Subtask 7-2, which is the subject of this report, focused on preliminary systems engineering and support of joint FAA/EUROCONTROL development and evaluation of a future L-band (960 to 1164 MHz) air/ground (A/G) communication system known as the L-band digital aeronautical communications system (L-DACS), which was defined during the FCS. The proposed L-DACS will be capable of providing ATM services in continental airspace in the 2020+ timeframe. Subtask 7-2 was performed in two phases. Phase I featured development of Concepts of Use, high level functional analyses, performance of initial L-band system safety and security risk assessments, and development of high level requirements and architectures. It also included the aforementioned support of joint L-DACS development and evaluation, including inputs to L-DACS design specifications. Phase II provided a refinement of the systems engineering activities performed during Phase I, along with continued joint FAA/EUROCONTROL L-DACS development and evaluation support.

Henriksen, Stephen↗
NASA NTRS2019

Detect-and-Avoid Alerting Performance for High-Speed UAS and Non-Cooperative Aircraft

This paper presents a set of experiments designed to assess the viability of using a smaller Detect and Avoid (DAA) volume for large Unmanned Aircraft Systems (UAS) when they are trying to remain well clear of non-cooperative visual flight rules (VFR) aircraft, in compliance with Federal regulations. The current DAA volume was defined for both cooperative and non-cooperative VFR traffic by the work of RTCA Special Committee 228 in 2017, in what is referred to in this paper as the Phase 1 standards. Subsequent work by the committee has been focused on enabling operations by smaller UAS that cannot carry the heavy radars required for the Phase 1 DAA Minimum Operational Performance Standards (MOPS). The work discussed in this paper will explore whether a Phase 1 UAS using a Phase 1 radar can use the reduced non-cooperative DAA alerting volume being studied for smaller, slower Phase 2 UAS without significantly degrading system safety. The study uses UAS models and background traffic from previous Phase 1 and Phase 2 research to run an unmitigated simulation that will examine alerting performance using different DAA well clear definitions. The primary metrics are also tied to the alerting performance of the DAA system, and include average alerting times, probabilities of missed and late alerts, and the probability of a near mid-air collision given a loss of "well clear," as defined by the DAA system. Results are expected to help RTCA make the determination whether or not the DAA well clear definition for Phase 1 UAS can be reduced for non-cooperative VFR aircraft.

Cone, Andrew C.↗
NASA NTRS2019

Detect-and-Avoid Alerting Performance for High-Speed UAS and Non-Cooperative Aircraft

This paper presents a set of experiments designed to assess the viability of using a smaller Detect and Avoid (DAA) volume for large Unmanned Aircraft Systems (UAS) when they are trying to remain well clear of non-cooperative visual flight rules (VFR) aircraft, in compliance with Federal regulations. The current DAA volume was defined for both cooperative and non-cooperative VFR traffic by the work of RTCA (Radio Technical Commission for Aeronautics) Special Committee 228 in 2017, in what is referred to in this paper as the Phase 1 standards. Subsequent work by the committee has been focused on enabling operations by smaller UAS that cannot carry the heavy radars required for the Phase 1 DAA Minimum Operational Performance Standards (MOPS). The work discussed in this paper will explore whether a Phase 1 UAS using a Phase 1 radar can use the reduced non-cooperative DAA alerting volume being studied for smaller, slower Phase 2 UAS without significantly degrading system safety. The study uses UAS models and background traffic from previous Phase 1 and Phase 2 research to run an unmitigated simulation that will examine alerting performance using different DAA well clear definitions. The primary metrics are also tied to the alerting performance of the DAA system, and include average alerting times, probabilities of missed and late alerts, and the probability of a near mid-air collision given a loss of "well clear," as defined by the DAA system. Results are expected to help RTCA make the determination whether or not the DAA well clear definition for Phase 1 UAS can be reduced for non-cooperative VFR aircraft.

UAS↗