Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 55 records · Page 3

A reliability-based cost effective fail-safe design procedure

The authors have developed a methodology for cost-effective fatigue design of structures subject to random fatigue loading. A stochastic model for fatigue crack propagation under random loading has been discussed. Fracture mechanics is then used to estimate the parameters of the model and the residual strength of structures with cracks. The stochastic model and residual strength variations have been used to develop procedures for estimating the probability of failure and its changes with inspection frequency. This information on reliability is then used to construct an objective function in terms of either a total weight function or cost function. A procedure for selecting the design variables, subject to constraints, by optimizing the objective function has been illustrated by examples. In particular, optimum design of stiffened panel has been discussed.

Hanagud, S.↗

Development of shape memory metal as the actuator of a fail safe mechanism

A small, compact, lightweight device was developed using shape memory alloy (SMA) in wire form to actuate a pin-puller that decouples the flanges of two shafts. When the SMA is heated it contracts producing a useful force and stroke. As it cools, it can be reset (elongated in this case) by applying a relatively small force. Resistive heating is accomplished by running a current through the SMA wire for a controlled length of time. The electronics to drive the device are not elaborate or complicated, consisting of a timed current source. The total available contraction is 3 percent of the length of the wire. This device, the engineering properties of the SMA, and the tests performed to verify the design concept are described.

Ford, V. G.↗

Model authoring system for fail safe analysis

The Model Authoring System is a prototype software application for generating fault tree analyses and failure mode and effects analyses for circuit designs. Utilizing established artificial intelligence and expert system techniques, the circuits are modeled as a frame-based knowledge base in an expert system shell, which allows the use of object oriented programming and an inference engine. The behavior of the circuit is then captured through IF-THEN rules, which then are searched to generate either a graphical fault tree analysis or failure modes and effects analysis. Sophisticated authoring techniques allow the circuit to be easily modeled, permit its behavior to be quickly defined, and provide abstraction features to deal with complexity.

Sikora, Scott E.↗

Fail-Safe Pressure Plug

Protective plug resists slowly built-up pressure or automatically releases itself if pressure rises suddenly. Seals out moisture at pressures ranging from 50 micrometers of mercury to 200 pounds per square inch. Designed to seal throat of 38 Reaction Control Thrusters on Space Shuttle protecting internal components from corrosion. Plug conforms to contour of nozzle throat, where O-ring forms pressure seal. After plug inserted, cover attached by use of cover-fitting assembly. Modified versions useful in protecting engines, pumps, reaction vessels, and other industrial equipment during shipment and maintenance.

Svejkovsky, Paul A.↗

Fail Safe, High Temperature Magnetic Bearings

This paper contributes to the magnetic bearing literature in two distinct areas: high temperature and redundant actuation. Design considerations and test results are given for the first published combined 538 C (1000 F) high speed rotating test performance of a magnetic bearing. Secondly, a significant extension of the flux isolation based, redundant actuator control algorithm is proposed to eliminate the prior deficiency of changing position stiffness after failure. The benefit of the novel extension was not experimentally demonstrated due to a high active stiffness requirement. In addition, test results are given for actuator failure tests at 399 C (750 F), 12,500 rpm. Finally, simulation results are presented confirming the experimental data and validating the redundant control algorithm.

Minihan, Thomas↗

Fail-Safe Operation of a High-Temperature Magnetic Bearing Investigated for Gas Turbine Engine Applications

The Structural Mechanics and Dynamics Branch at the NASA Glenn Research Center has developed a three-axis high-temperature magnetic bearing suspension rig to enhance the safety of the bearing system up to 1000 F. This test rig can accommodate thrust and radial bearings up to a 22.84 cm (9 in.) diameter with a maximum axial loading of 22.25 kN (5000 lb) and a maximum radial loading up to 4.45 kN (1000 lb). The test facility was set up to test magnetic bearings under high-temperature (1100 F) and high-speed (20,000 rpm) conditions. The magnetic bearing is located at the center of gravity of the rotor between two high-temperature grease-packed mechanical ball bearings. The drive-end duplex angular contact ball bearing, which is in full contact, acts as a moment release and provides axial stability. The outboard end ball bearing has a 0.015-in. radial clearance between the rotor to act as a backup bearing and to compensate for axial thermal expansion. There is a 0.020-in. radial air gap between the stator pole and the rotor. The stator was wrapped with three 1-kW band heaters to create a localized hot section; the mechanical ball bearings were outside this section. Eight threaded rods supported the stator. These incorporated a plunger and Bellville washers to compensate for radial thermal expansion and provide rotor-to-stator alignment. The stator was instrumented with thermocouples and a current sensor for each coil. Eight air-cooled position sensors were mounted outside the hot section to monitor the rotor. Another sensor monitored this rotation of the outboard backup bearing. Ground fault circuit interrupts were incorporated into all power amplifier loops for personnel safety. All instrumentation was monitored and recorded on a LabView-based data acquisition system. Currently, this 12-pole heteropolar magnetic bearing has 13 thermal cycles and over 26 hr of operation at 1000 F.

Choi, Benjamin B.↗

Investigation of Structural Factors of Safety for the Space Shuttle

A study was made of the factors governing the structural design of the fully reusable space shuttle booster to establish a rational approach to select optimum structural factors of safety. The study included trade studies of structural factors of safety versus booster service life, weight, cost, and reliability. Similar trade studies can be made on other vehicles using the procedures developed. The major structural components of a selected baseline booster were studied in depth, each being examined to determine the fatigue life, safe-life, and fail-safe capabilities of the baseline design. Each component was further examined to determine its reliability and safety requirements, and the change of structural weight with factors of safety. The apparent factors of safety resulting from fatigue, safe-life, proof test, and fail-safe requirements were identified. The feasibility of reduced factors of safety for design loads such as engine thrust, which are well defined, was examined.

Source record↗

Leveraging SETS resilience capabilities for safe-to-fail infrastructure under climate change

As the rehabilitation of infrastructure is outpaced by changes in the profile, frequency, and intensity of extreme weather events, infrastructure’s service disruptions and failures become increasingly likely. Safe-to-fail approaches for infrastructure planning and design improve the capacity of cities to adapt for uncertain climate futures by identifying social, ecological, and technological systems (SETS) capabilities to prepare for potential failure scenarios. In this work, we argue for transforming infrastructure planning and design to effectively utilize safe-to-fail approaches by navigating the opportunities and trade-offs of SETS resilience capabilities. From a technological vantage point, traditional infrastructure planning approaches account for social and ecological domains as external design conditions rather than embedded system characteristics. Safe-to-fail approaches directly challenge the isolation of the technological domain by necessitating a recognition that SETS domains are interconnected and interdependent in infrastructure systems, as such risks and system capabilities for resilience must be managed cohesively.

54 ENVIRONMENTAL SCIENCES↗

Safe Operations at Roadway Junctions - Design Principles from Automated Guideway Transit

Herein this paper describes a system-level view of a fully automated transit system comprising a fleet of automated vehicles (AVs) in driverless operation, each with an SAE level 4 Automated Driving System, along with its related safety infrastructure and other system equipment. This AV system-level control is compared to the automatic train control system used in automated guideway transit technology, particularly that of communications-based train control (CBTC). Drawing from the safety principles, analysis methods, and risk assessments of CBTC systems, comparable functional subsystem definitions are proposed for AV fleets in driverless operation. With the prospect of multiple AV fleets operating within a single automated mobility district, the criticality of protecting roadway junctions requires an approach like that of automated fixed-guideway transit systems, in which a guideway switch zone "interlocking" at each junction location deconflicts railway traffic, affirming safe passage. The analogous AV protection safety subsystem is defined as fail-safe equipment that monitors roadway intersections and junctions, communicates traffic signal status, perceives and communicates alerts and signals to AV connected vehicles concerning potential unsafe conditions, and performs related primary safety functions. Conclusions are drawn that the AV protection roadway intersection functions must be performed by local roadside equipment dedicated to protecting each roadway intersection and junction. Further, it is concluded that the communications technology connecting the infrastructure with the vehicle to perform this vital, fail-safe protection should meet specific functional and performance criteria.

33 ADVANCED PROPULSION SYSTEMS↗

Compendium of fracture mechanics problems

Fracture mechanics analysis results are presented from the following structures/components analyzed at Marshall Space Flight Center (MSFC) between 1982 and 1989: space shuttle main engine (SSME), Hubble Space Telescope (HST), external tank attach ring, B-1 stand LOX inner tank, and solid rocket booster (SRB). Results from the SSME high pressure fuel turbopump (HPFTP) second stage blade parametric analysis determine a critical flaw size for a wide variety of stress intensity values. The engine 0212 failure analysis was a time dependent fracture life assessment. Results indicated that the disk ruptured due to an overspeed condition. Results also indicated that very small flaws in the curvic coupling area could propagate and lead to failure under normal operating conditions. It was strongly recommended that a nondestructive evaluation inspection schedule be implemented. The main ring of the HST, scheduled to launch in 1990, was analyzed by safe-life and fail-safe analyses. First safe-life inspection criteria curves for the ring inner and outer skins and the fore and aft channels were derived. Afterwards the skins and channels were determined to be fail-safe by analysis. A conservative safe-life analysis was done on the 270 redesign external tank attach ring. Results from the analysis were used to determine the nondestructive evaluation technique required.

Stallworth, R.↗

Space shuttle environmental control/life support systems

This study analyzes and defines a baseline Environmental Control/Life Support System (EC/LSS) for a four-man, seven-day orbital shuttle. In addition, the impact of various mission parameters, crew size, mission length, etc. are examined for their influence on the selected system. Pacing technology items are identified to serve as a guide for application of effort to enhance the total system optimization. A fail safe-fail operation philosophy was utilized in designing the system. This has resulted in a system that requires only one daily routine operation. All other critical item malfunctions are automatically resolved by switching to redundant modes of operation. As a result of this study, it is evident that a practical, flexible, simple and long life, EC/LSS can be designed and manufactured for the shuttle orbiter within the time phase required.

Source record↗

Flight test and evaluation of Omega navigation for general aviation

A seventy hour flight test program was performed to determine the suitability and accuracy of a low cost Omega navigation receiver in a general aviation aircraft. An analysis was made of signal availability in two widely separated geographic areas. Comparison is made of the results of these flights with other navigation systems. Conclusions drawn from the test experience indicate that developmental system improvement is necessary before a competent fail safe or fail soft area navigation system is offered to general aviation.

Hwoschinsky, P. V.↗

Design Concepts to Meet EASA SC-VTOL-01 Single Failure Criteria

The objective of the current work is to discuss European Union Aviation Safety Agency (EASA) SC-VTOL-01 single failure criteria, VTOL.2250(c). Prior studies have developed concept distributed propulsion and flight control (DPFC) system architectures and found they comply with EASA SC-VTOL-01 probabilistic failure criteria, VTOL.2510(a). Prior work developed two all-electric DPFC systems utilized in a quadrotor concept aircraft developed by the National Aeronautics and Space Administration (NASA); one uses interconnecting shafts and gearboxes to interconnect redundant motors with each rotor system and the other uses gearboxes to connect redundant motors locally, near each rotor. Common between the two electric DPFC systems were rotor shafts, epicyclic systems, and motors. The current work explores Category I failures in drive systems, relevant research to support fail-safe design practices for gear systems, research and adjacent industry trends in motor fail-safety and reliability, and proposed design concepts to comply with VTOL.2250(c). Continued research in fail-safe design concepts and design guidance will benefit eVTOL and conventional rotorcraft, alike. Continued research in these areas will benefit eVTOL certification against SC-VTOL-01, and could optimistically translate to more widespread adoption of similar fail-safe design concepts into new rotorcraft designs certified against CS-29.

Rotorcraft↗

HOME - An application of fault-tolerant techniques and system self-testing

Hard Over Monitoring Equipment (HOME) has been designed to complement and enhance the flight safety of a flight research helicopter. HOME is an independent, highly reliable, and fail-safe special purpose computer that monitors the flight control commands issued by the flight control computer of the helicopter. In particular, HOME detects the issuance of a hazardous hard-over command for any of the four flight control axes and transfers the control of the helicopter to the flight safety pilot. The design of HOME incorporates certain reliability and fail-safe enhancement design features, such as triple modular redundancy, majority logic voting, fail-safe dual circuits, independent status monitors, in-flight self-test, and a built-in preflight exerciser. The HOME design and operation is described with special emphasis on the reliability and fail-safe aspects of the design.

Holden, D. G.↗