Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “failure simulation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

Flight test of a full authority Digital Electronic Engine Control system in an F-15 aircraft

The Digital Electronic Engine Control (DEEC) system considered is a relatively low cost digital full authority control system containing selectively redundant components and fault detection logic with capability for accommodating faults to various levels of operational capability. The DEEC digital control system is built around a 16-bit, 1.2 microsecond cycle time, CMOS microprocessor, microcomputer system with approximately 14 K of available memory. Attention is given to the control mode, component bench testing, closed loop bench testing, a failure mode and effects analysis, sea-level engine testing, simulated altitude engine testing, flight testing, the data system, cockpit, and real time display.

Barrett, W. J.↗

Reconfigurable multivariable control law for commercial airplane using a direct digital output feedback design

The ability of a pilot to reconfigure the control surfaces on an airplane after a failure, allowing the airplane to recover to a safe condition for landing, becomes more difficult with increasing airplane complexity. Techniques are needed to stabilize and control the airplane immediately after a failure, allowing the pilot time to make longer range decisions. This paper shows a design of a discrete multivariable control law using four controls for the longitudinal channel of a B-737. Single control element failures are allowed in three of the four controls. The four controls design and failure cases are analyzed by means of a digital airplane simulation, with regard to tracking capability and ability to overcome severe windshear and turbulence during the aproach and landing phase of flight.

Ostroff, A. J.↗

Expert systems for automated maintenance of a Mars oxygen production system

A prototype expert system was developed for maintaining autonomous operation of a Mars oxygen production system. Normal operation conditions and failure modes according to certain desired criteria are tested and identified. Several schemes for failure detection and isolation using forward chaining, backward chaining, knowledge-based and rule-based are devised to perform several housekeeping functions. These functions include self-health checkout, an emergency shut down program, fault detection and conventional control activities. An effort was made to derive the dynamic model of the system using Bond-Graph technique in order to develop the model-based failure detection and isolation scheme by estimation method. Finally, computer simulations and experimental results demonstrated the feasibility of the expert system and a preliminary reliability analysis for the oxygen production system is also provided.

Ash, Robert L.↗

Design for testability and diagnosis at the system-level

The growing complexity of full-scale systems has surpassed the capabilities of most simulation software to provide detailed models or gate-level failure analyses. The process of system-level diagnosis approaches the fault-isolation problem in a manner that differs significantly from the traditional and exhaustive failure mode search. System-level diagnosis is based on a functional representation of the system. For example, one can exercise one portion of a radar algorithm (the Fast Fourier Transform (FFT) function) by injecting several standard input patterns and comparing the results to standardized output results. An anomalous output would point to one of several items (including the FFT circuit) without specifying the gate or failure mode. For system-level repair, identifying an anomalous chip is sufficient. We describe here an information theoretic and dependency modeling approach that discards much of the detailed physical knowledge about the system and analyzes its information flow and functional interrelationships. The approach relies on group and flow associations and, as such, is hierarchical. Its hierarchical nature allows the approach to be applicable to any level of complexity and to any repair level. This approach has been incorporated in a product called STAMP (System Testability and Maintenance Program) which was developed and refined through more than 10 years of field-level applications to complex system diagnosis. The results have been outstanding, even spectacular in some cases. In this paper we describe system-level testability, system-level diagnoses, and the STAMP analysis approach, as well as a few STAMP applications.

Simpson, William R.↗

Dual-Use Aspects of System Health Management

System Health Management functionality is an essential part of any space launch system. Health management functionality is an integral part of mission reliability, since it is needed to verify the reliability before the mission starts. Health Management is also a key factor in life cycle cost reduction and in increasing system availability. The degree of coverage needed by the system and the degree of coverage made available at a reasonable cost are critical parameters of a successful design. These problems are not unique to the launch vehicle world. In particular, the Intelligent Vehicle Highway System, commercial aircraft systems, train systems, and many types of industrial production facilities require various degrees of system health management. In all of these applications, too, the designers must balance the benefits and costs of health management in order to optimize costs. The importance of an integrated system is emphasized. That is, we present the case for considering health management as an integral part of system design, rather than functionality to be added on at the end of the design process. The importance of maintaining the system viewpoint is discussed in making hardware and software tradeoffs and in arriving at design decisions. We describe an approach to determine the parameters to be monitored in any system health management application. This approach is based on Design of Experiments (DOE), prototyping, failure modes and effects analyses, cost modeling and discrete event simulation. The various computer-based tools that facilitate the approach are discussed. The approach described originally was used to develop a fault tolerant avionics architecture for launch vehicles that incorporated health management as an integral part of the system. Finally, we discuss generalizing the technique to apply it to other domains. Several illustrations are presented.

Owens, P. R.↗

An Adaptive Critic Approach to Reference Model Adaptation

Neural networks have been successfully used for implementing control architectures for different applications. In this work, we examine a neural network augmented adaptive critic as a Level 2 intelligent controller for a C- 17 aircraft. This intelligent control architecture utilizes an adaptive critic to tune the parameters of a reference model, which is then used to define the angular rate command for a Level 1 intelligent controller. The present architecture is implemented on a high-fidelity non-linear model of a C-17 aircraft. The goal of this research is to improve the performance of the C-17 under degraded conditions such as control failures and battle damage. Pilot ratings using a motion based simulation facility are included in this paper. The benefits of using an adaptive critic are documented using time response comparisons for severe damage situations.

Krishnakumar, K.↗

Impact Properties of Metal Fan Containment Materials Being Evaluated for the High-Speed Civil Transport (HSCT)

Under the Enabling Propulsion Materials (EPM) program - a partnership between NASA, Pratt & Whitney, and GE Aircraft Engines - the Materials and Structures Divisions of the NASA Lewis Research Center are involved in developing a fan-containment system for the High-Speed Civil Transport (HSCT). The program calls for a baseline system to be designed by the end of 1995, with subsequent testing of innovative concepts. Five metal candidate materials are currently being evaluated for the baseline system in the Structures Division's Ballistic Impact Facility. This facility was developed to provide the EPM program with cost-efficient and timely impact test data. At the facility, material specimens are impacted at speeds up to 350 m/sec by projectiles of various sizes and shapes to assess the specimens' ability to absorb energy and withstand impact. The tests can be conducted at either room or elevated temperatures. Posttest metallographic analysis is conducted to improve understanding of the failure modes. A dynamic finite element program is used to simulate the events and both guide the testing as well as aid in designing the fan-containment system.

Source record↗

Influence of Space Flight Factors on the Genetic Properties of Streptomyces Lividans 66 (PIJ702)

Gram-positive Streptomyces bacteria display genetic instability in response to external factors. Strain S. lividans 66 harbors the multicopy plasmid pIJ702 with selective and differential marker genes for antibiotic thiostrepton resistance and melanin production. Culture plates of modified ISP agar medium with and without thiostrepton were flown on Foton-M2. Suboptimal flight temperatures, which were simulated for asynchronous ground controls, resulted in slow growth and failure to differentiate and sporulate. Flight samples and asynchronous controls showed a high frequency of failing to express plasmid markers compared to laboratory controls. This was associated with loss of plasmid DNA and likely resulted from suboptimal temperatures for flight cultures and controls. Neither restriction fragment length polymorphism, nor polymerase chain reaction amplification coupled with denaturing gradient gel electrophoresis, revealed differences between pIJ702 DNA from flight vs. control clones. Mutations of the plasmid marker genes resulting from specific spaceflight factors, e.g., microgravity and radiation, were not detected.

Tabakov, V. Yu.↗

A Corrosion Risk Assessment Model for Underground Piping

The Pressure Systems Manager at NASA Ames Research Center (ARC) has embarked on a project to collect data and develop risk assessment models to support risk-informed decision making regarding future inspections of underground pipes at ARC. This paper shows progress in one area of this project - a corrosion risk assessment model for the underground high-pressure air distribution piping system at ARC. It consists of a Corrosion Model of pipe-segments, a Pipe Wrap Protection Model; and a Pipe Stress Model for a pipe segment. A Monte Carlo simulation of the combined models provides a distribution of the failure probabilities. Sensitivity study results show that the model uncertainty, or lack of knowledge, is the dominant contributor to the calculated unreliability of the underground piping system. As a result, the Pressure Systems Manager may consider investing resources specifically focused on reducing these uncertainties. Future work includes completing the data collection effort for the existing ground based pressure systems and applying the risk models to risk-based inspection strategies of the underground pipes at ARC.

Datta, Koushik↗

Safety Verification of a Fault Tolerant Reconfigurable Autonomous Goal-Based Robotic Control System

Fault tolerance and safety verification of control systems are essential for the success of autonomous robotic systems. A control architecture called Mission Data System (MDS), developed at the Jet Propulsion Laboratory, takes a goal-based control approach. In this paper, a method for converting goal network control programs into linear hybrid systems is developed. The linear hybrid system can then be verified for safety in the presence of failures using existing symbolic model checkers. An example task is simulated in MDS and successfully verified using HyTech, a symbolic model checking software for linear hybrid systems.

goal network↗

External Impact Effects on Operational Availability ESMO Experience

Presentation to support a Summit/TIM with various Stakeholders (Ground and Flight) to perform a GAP analysis associated with ground and spacecraft maintenance, maintainability, and availability activities in order to identify missing Agency planning and guidance materials.

Simulation↗

Continued Discussion of Failure Mode Modeling and Overall Component Reliability: Are the Data Missing or Censored?

This paper is the continuation of a paper presented at the 13th Probabilistic Safety Assessment and Management Conference, in which a methodology of modeling failure modes of complex components was presented; see Paulos and Smith (2016). This methodology is not particularly helpful in the space industry where there is a lack of failure data, but is more helpful in industries that see a lot of component repairs and improvements, such as in the aircraft or automotive industries. The previous paper demonstrated how the typical approach of treating failure modes as being exponential in nature may yield optimistic predictions when estimating how improvements to components will perform in the future. It is more accurate to model the failure modes as a race in time; unfortunately, this does not give a closed-form solution. This paper uses simulation to solve for the model of the world, and the results compared to the standard methodology of treating the failure modes as being exponential random failures. The standard method is shown to have optimistic predictions, which will lead to prediction errors when failure modes are removed or “fixed.” The failure mode methodology presented in the first paper treated the data as being censored when the test stopped. In this paper, we will compare the results from treating the data as both censored and missing.

Smith, Curtis↗

Trajectory Planning and Online Performance Model Estimation for Advanced Air Mobility

We propose a framework for adaptive guidance based on optimal control and estimation using closed-loop performance models. In the proposed approach, parameters of a reduced-order performance model are estimated in real time so that trajectories and guidance commands are replanned with more accurate knowledge of the system's response and performance capabilities. To apply this methodology to flight control systems, we introduce a simple yet expressive performance model modified from a reference linear design model. The proposed framework is applied to guidance of a simulated Advanced Air Mobility class concept aircraft experiencing control effector failures. We demonstrate that, by optimizing performance model parameters in real time, guidance commands can be intelligently adjusted to recover system stability and the performance of a full-order vehicle model, even in the event of effector failures. Furthermore, the reduced-order performance model requires a fraction of the computational cost of the full-order model, facilitating real-time use of adaptive, optimal guidance.

Differential dynamic programming↗

Trajectory Planning and Online Performance Model Estimation for Advanced Air Mobility

We propose a framework for adaptive guidance based on optimal control and estimation using closed-loop performance models. In the proposed approach, parameters of a reduced-order performance model are estimated in real time so that trajectories and guidance commands are replanned with more accurate knowledge of the system's response and performance capabilities. To apply this methodology to flight control systems, we introduce a simple yet expressive performance model modified from a reference linear design model. The proposed framework is applied to guidance of a simulated Advanced Air Mobility class concept aircraft experiencing control effector failures. We demonstrate that, by optimizing performance model parameters in real time, guidance commands can be intelligently adjusted to recover system stability and the performance of a full-order vehicle model, even in the event of effector failures. Furthermore, the reduced-order performance model requires a fraction of the computational cost of the full-order model, facilitating real-time use of adaptive, optimal guidance.

Differential dynamic programming↗

Space Shuttle Hot Cabin Emergency Responses

Methods: Human thermal tolerance, countermeasures, and thermal model data were reviewed and compared to existing shuttle ECS failure temperature and humidity profiles for each failure mode. Increases in core temperature associated with cognitive impairment was identified, as was metabolic heat generation of crewmembers, temperature monitoring, and communication capabilities after partial power-down and other limiting factors. Orbiter landing strategies and a hydration and salt replacement protocol were developed to put wheels on deck in each failure mode prior to development of significant cognitive impairment or collapse of crewmembers. Thermal tradeoffs for use of the Advanced Crew Escape Suit (ACES), Liquid Cooling Garment, integrated G-suit and Quick Don Mask were examined. candidate solutions involved trade-offs or conflicts with cabin oxygen partial pressure limits, system power-downs to limit heat generation, risks of alternate and emergency landing sites or compromise of Mode V-VIII scenarios. Results: Rehydration and minimized cabin workloads are required in all failure modes. Temperature/humidity profiles increase rapidly in two failure modes, and deorbit is recommended without the ACES, ICU and g-suit. This latter configuration limits several shuttle approach and landing escape modes and requires communication modifications. Additional data requirements were identified and engineering simulations were recommended to develop more current shuttle temperature and humidity profiles. Discussion: After failure of the shuttle ECS, there is insufficient cooling capacity of the ACES to protect crewmembers from rising cabin temperature and humidity. The LCG is inadequate for cabin temperatures above 76 F. Current shuttle future life policy makes it unlikely that major engineering upgrades necessary to address this problem will occur.

Stepaniak, P.↗

Nickel-hydrogen Cell Test Program Summary

Three prototype 50 ampere-hour (Ah) nickel-hydrogen cells of the Air Force Wright Aeronautical Laboratories (AWFAL) design were cycled to failure. A summary of the life cycling tests and failure analyses of the cells are presented. The cells were cycled in a simulated low earth orbit regime at depths of discharge ranging from 25 to 80 percent. Trend data, such as end of discharge voltage and cell capacity, was recorded during test. Cells 1, 2, and 3 completed 17167, 2473, and 10080 charge/discharge cycles, respectively, prior to failure. All failed due to internal shorts, and were disassembled to determine cause of failure.

Mueller, V. C.↗

A Comprehensive Reliability Methodology for Assessing Risk of Reusing Failed Hardware Without Corrective Actions with and Without Redundancy

This paper deals with the development of a reliability methodology to assess the consequences of using hardware, without failure analysis or corrective action, that has previously demonstrated that it did not perform per specification. The subject of this paper arose from the need to provide a detailed probabilistic analysis to calculate the change in probability of failures with respect to the base or non-failed hardware. The methodology used for the analysis is primarily based on principles of Monte Carlo simulation. The random variables in the analysis are: Maximum Time of Operation (MTO) and operation Time of each Unit (OTU) The failure of a unit is considered to happen if (OTU) is less than MTO for the Normal Operational Period (NOP) in which this unit is used. NOP as a whole uses a total of 4 units. Two cases are considered. in the first specialized scenario, the failure of any operation or system failure is considered to happen if any of the units used during the NOP fail. in the second specialized scenario, the failure of any operation or system failure is considered to happen only if any two of the units used during the MOP fail together. The probability of failure of the units and the system as a whole is determined for 3 kinds of systems - Perfect System, Imperfect System 1 and Imperfect System 2. in a Perfect System, the operation time of the failed unit is the same as that of the MTO. In an Imperfect System 1, the operation time of the failed unit is assumed as 1 percent of the MTO. In an Imperfect System 2, the operation time of the failed unit is assumed as zero. in addition, simulated operation time of failed units is assumed as 10 percent of the corresponding units before zero value. Monte Carlo simulation analysis is used for this study. Necessary software has been developed as part of this study to perform the reliability calculations. The results of the analysis showed that the predicted change in failure probability (P(sub F)) for the previously failed units is as high as 49 percent above the baseline (perfect system) for the worst case. The predicted change in system P(sub F) for the previously failed units is as high as 36% for single unit failure without any redundancy. For redundant systems, with dual unit failure, the predicted change in P(sub F) for the previously failed units is as high as 16%. These results will help management to make decisions regarding the consequences of using previously failed units without adequate failure analysis or corrective action.

Putcha, Chandra S.↗

Adaptive Control Allocation for Powered Descent Vehicles

The following work details a study into real-time failure adaptive control allocation method for powered descent vehicle systems. The motivation for this work is to enable future human and robotic missions utilizing a powered descent system to tolerate engine failures in flight without the loss of crew or assets. This study is conducted using a six degree-of-freedom trajectory simulation of a PDV (Powered Descent Vehicle) experiencing either a loss of thrust or an engine stuck full on failure scenario. Sequential least squares in the frequency domain is used on-board to process inertial measurement unit (IMU) data and generate an estimate of the PDV plant model, which is then fed to the guidance and control system. Data used by the sequential least squares method is generated from an in-flight maneuver. The work herein focuses on determining a maneuver that is least impactful to the PDV trajectory and enables a suitable plant model estimate. A 1.5-second-long maneuver with an amplitude of 5 percent throttle is determined to provide suitable data for the sequential least squares method to estimate a plant model. A PDV implementing this method can adapt to a single engine failure and continue to reach its touchdown conditions.

Green, Justin S.↗