Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safe”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

Optimal flight paths through microburst wind profiles

The problem of safe microburst wind shear encounter during the approach and climb-out flight phases is addressed using flight path optimization. The purpose was to investigate the physical limits of safe penetration and to determine control strategies that take full advantage of those limits. Optimal trajectories for both jet transport and general aviation aircraft were computed for encounters with idealized and actual microburst profiles. The results demonstrate that limits to control system design rather than to the aircraft's physical performance may be the deciding factor in an aircraft's capability for safe passage through a wide class of microbursts. The best control strategies responded to airspeed loss in an unconventional manner: by raising the nose to maintain lift.

Psiaki, M. L.↗

Qualification Motor no. 8 (QM-8), volume 1

All inspection and instrumentation data indicate that the QM-8 static test firing conducted 20 January 1989 was successful. Ambient temperature at T-0 was 28 F. With two flights successfully accomplished, this final test in the redesigned solid rocket motor (RSRM) program certified that the design meets motor performance requirements under extreme cold conditions. This test was a prerequisite to the third flight. The entire test article was cold conditioned at 20 to 25 F for approximately 31 days to assure a maximum propellant mean bulk temperature (PMBT) of 40 F, making it the lowest PMBT in the history of the program. This extreme condition also presented the opportunity to certify critical components at low temperatures. Certification of field joint and igniter heaters, adhesive bondline integrity, flex bearing performance, flight instrumentation performance, RSRM seal performance, and LSC and nozzle plug performance was accomplished. Prior to motor ignition, the field joints were maintained between 75 to 130 F, the igniter-to-case joint was maintained between 75 to 123 F, and the case-to-nozzle joint was maintained between 75 to 120 F. QM-8 was tested with induced side loads to simulate the strut loads experienced during ignition and maximum aerodynamic loading conditions. The ability of the safe and arm device to change position from safe-to-arm and arm-to-safe was certified. Ballistics performance was certified at the lower limits. Values were within specification requirements. Nozzle performance was nominal with typical erosion. The use of Fiberite carbon-cloth phenolic was certified. The water deluge system, CO2 quench, and other test equipment performed as planned during all required test operations.

Garecht, D. M.↗

Proposal for a lunar landing pod for SKITTER

The purpose of this project is to design a lunar landing module for the SKITTER vehicle. SKITTER is a three-legged mobile lunar transport and work platform. This lunar landing module must be able to bring SKITTER, with attached crane, from a lunar orbit to the surface of the Moon. This propulsion system is entirely self-contained and removable after touchdown. SKITTER is unmanned and must be able to touch down on the lunar surface and perform assigned tasks independently of other space or lunar vehicles. The propulsion system is designed to ensure that the vehicle will make a lunar landing within the expected velocity range. A landing gear configuration is presented to safely dissipate landing forces on lunar impact and be removed from the SKITTER structure after touchdown. The overall engineering analysis was conducted to determine an economical design to land SKITTER safely on the Moon. SKITTER will perform various tasks on the surface of the Moon. The completion of this project will determine the feasibility of landing SKITTER with the attached crane safely on the lunar surface.

Herman, David↗

A study of atmospheric optical scattering parameters at 1.5 and 2 micron region for solid state Doppler lidar applications

The increasing interest in the development of an eye-safe, solid state, Doppler lidar for avionic applications has created the need for a quantitative evaluation of atmospheric effects on performance. Theoretical calculations were completed for optical scattering parameters to be compared with the field measurements. Computer codes were developed for the required calculations and designed to be interactive and user friendly in order to support comparison with experimental results and, thus, provide the basis for evaluation of eye-safe Doppler lidar over a wide range of atmospheric conditions and geographical locations. A holmium Doppler lidar operating at 2.09 microns was constructed for atmospheric backscattering, attenuation, and wind velocity measurements. Theoretical calculations and field studies were performed for backscatter coefficients. The selected wavelengths correspond to Er:glass, Tm:YAG, and Tm,Ho:YAG solid state lasers that are suitable for use in an eye-safe Doppler lidar system.

Margalit, Eli↗

Pre-flight risk assessment in emergency medical service (EMS) helicopters

A preflight risk assessment system (SAFE) was developed at NASA-Ames Research Center for civil EMS operations to assist pilots in making a decision objectively to accept or decline a mission. The ability of the SAFE system to predict risk profiles was examined at an EMS operator. Results of this field study showed that the usefulness of SAFE was largely dependent on the type of mission flown.

Shively, Robert J.↗

Power system monitoring and source control of the Space Station Freedom DC power system testbed

Unlike a terrestrial electric utility which can purchase power from a neighboring utility, the Space Station Freedom (SSF) has strictly limited energy resources; as a result, source control, system monitoring, system protection, and load management are essential to the safe and efficient operation of the SSF Electric Power System (EPS). These functions are being evaluated in the DC Power Management and Distribution (PMAD) Testbed which NASA LeRC has developed at the Power System Facility (PSF) located in Cleveland, Ohio. The testbed is an ideal platform to develop, integrate, and verify power system monitoring and control algorithms. State Estimation (SE) is a monitoring tool used extensively in terrestrial electric utilities to ensure safe power system operation. It uses redundant system information to calculate the actual state of the EPS, to isolate faulty sensors, to determine source operating points, to verify faults detected by subsidiary controllers, and to identify high impedance faults. Source control and monitoring safeguard the power generation and storage subsystems and ensure that the power system operates within safe limits while satisfying user demands with minimal interruptions. System monitoring functions, in coordination with hardware implemented schemes, provide for a complete fault protection system. The objective of this paper is to overview the development and integration of the state estimator and the source control algorithms.

Kimnach, Greg L.↗

Fault detection and initial state verification by linear programming for a class of Petri nets

The authors present an algorithmic approach to determining when the marking of a LSMG (live safe marked graph) or a LSFC (live safe free choice) net is in the set of live safe markings M. Hence, once the marking of a net is determined to be in M, then if at some time thereafter the marking of this net is determined not to be in M, this indicates a fault. It is shown how linear programming can be used to determine if m is an element of M. The worst-case computational complexity of each algorithm is bounded by the number of linear programs necessary to compute.

Rachell, Traxon↗

Power system monitoring and source control of the Space Station Freedom dc-power system testbed

Unlike a terrestrial electric utility which can purchase power from a neighboring utility, the Space Station Freedom (SSF) has strictly limited energy resources; as a result, source control, system monitoring, system protection, and load management are essential to the safe and efficient operation of the SSF Electric Power System (EPS). These functions are being evaluated in the dc Power Management and Distribution (PMAD) Testbed which NASA LeRC has developed at the Power System Facility (PSF) located in Cleveland, Ohio. The testbed is an ideal platform to develop, integrate, and verify power system monitoring and control algorithms. State Estimation (SE) is a monitoring tool used extensively in terrestrial electric utilities to ensure safe power system operation. It uses redundant system information to calculate the actual state of the EPS, to isolate faulty sensors, to determine source operating points, to verify faults detected by subsidiary controllers, and to identify high impedance faults. Source control and monitoring safeguard the power generation and storage subsystems and ensure that the power system operates within safe limits while satisfying user demands with minimal interruptions. System monitoring functions, in coordination with hardware implemented schemes, provide for a complete fault protection system. The objective of this paper is to overview the development and integration of the state estimator and the source control algorithms.

Kimnach, Greg L.↗

Implementing Software Safety in the NASA Environment

Until recently, NASA did not consider allowing computers total control of flight systems. Human operators, via hardware, have constituted the ultimate safety control. In an attempt to reduce costs, NASA has come to rely more and more heavily on computers and software to control space missions. (For example. software is now planned to control most of the operational functions of the International Space Station.) Thus the need for systematic software safety programs has become crucial for mission success. Concurrent engineering principles dictate that safety should be designed into software up front, not tested into the software after the fact. 'Cost of Quality' studies have statistics and metrics to prove the value of building quality and safety into the development cycle. Unfortunately, most software engineers are not familiar with designing for safety, and most safety engineers are not software experts. Software written to specifications which have not been safety analyzed is a major source of computer related accidents. Safer software is achieved step by step throughout the system and software life cycle. It is a process that includes requirements definition, hazard analyses, formal software inspections, safety analyses, testing, and maintenance. The greatest emphasis is placed on clearly and completely defining system and software requirements, including safety and reliability requirements. Unfortunately, development and review of requirements are the weakest link in the process. While some of the more academic methods, e.g. mathematical models, may help bring about safer software, this paper proposes the use of currently approved software methodologies, and sound software and assurance practices to show how, to a large degree, safety can be designed into software from the start. NASA's approach today is to first conduct a preliminary system hazard analysis (PHA) during the concept and planning phase of a project. This determines the overall hazard potential of the system to be built. Shortly thereafter, as the system requirements are being defined, the second iteration of hazard analyses takes place, the systems hazard analysis (SHA). During the systems requirements phase, decisions are made as to what functions of the system will be the responsibility of software. This is the most critical time to affect the safety of the software. From this point, software safety analyses as well as software engineering practices are the main focus for assuring safe software. While many of the steps proposed in this paper seem like just sound engineering practices, they are the best technical and most cost effective means to assure safe software within a safe system.

Wetherholt, Martha S.↗

The Alpha-Proton-X-ray Spectrometer deployment mechanism: An anthropomorphic approach to sensor placement on Martian rocks and soil

On July 4,1997, the Mars Pathfinder spacecraft lands on Mars and starts conducting technological and scientific experiments. One experiment, the Alpha-Proton-X-ray Spectrometer, uses a sensor head placed against rocks and soil to determine their composition. To guarantee proper placement, a deployment mechanism mounted on the Mars Rover aligns the sensor head to within 20 deg of the rock and soil surfaces. In carrying out its task, the mechanism mimics the action of a human hand and arm. Consisting of a flexible wrist, a parallel link arm, a brush dc motor actuator, and a revolutionary non-pyrotechnic fail-safe release device, the mechanism correctly positions the sensor head on rocks as high as 0.29 m and on targets whose surfaces are tilted as much as 45 deg from the nominal orientation of the sensor head face. The mechanism weighs less than 0.5 kg, can withstand 100 g's, and requires less than 2.8 N x m of actuation torque. The fail-safe coupler utilizes Cerrobend, a metal alloy that melts at 60 C, to fuse the actuator and the rest of the mechanism together. A film heater wrapped around the coupler melts the metal, and Negator springs drive the mechanism into its stowed position. The fail-safe actuates using 6.75 Watts for 5 minutes in the event of an actuator failure.

Blomquist, Richard S.↗

Automated Testing Experience of the Linear Aerospike SR-71 Experiment (LASRE) Controller

System controllers must be fail-safe, low cost, flexible to software changes, able to output health and status words, and permit rapid retest qualification. The system controller designed and tested for the aerospike engine program was an attempt to meet these requirements. This paper describes (1) the aerospike controller design, (2) the automated simulation testing techniques, and (3) the real time monitoring data visualization structure. Controller cost was minimized by design of a single-string system that used an off-the-shelf 486 central processing unit (CPU). A linked-list architecture, with states (nodes) defined in a user-friendly state table, accomplished software changes to the controller. Proven to be fail-safe, this system reported the abort cause and automatically reverted to a safe condition for any first failure. A real time simulation and test system automated the software checkout and retest requirements. A program requirement to decode all abort causes in real time during all ground and flight tests assured the safety of flight decisions and the proper execution of mission rules. The design also included health and status words, and provided a real time analysis interpretation for all health and status data.

Larson, Richard R.↗

Test Results for the Automated Rendezvous and Capture System

The Automated Rendezvous and Capture (AR&C) system was designed and tested at NASA's Marshall Space Flight Center (MSFC) to demonstrate technologies and mission strategies for automated rendezvous and docking of spacecraft in Earth orbit, The system incorporates some of the latest innovations in Global Positioning, System space navigation, laser sensor technologies and automated mission sequencing algorithms. The system's initial design and integration was completed in 1998 and has undergone testing at MSFC. This paper describes the major components of the AR&C system and presents results from the official system tests performed in MSFC's Flight Robotics Laboratory with digital simulations and hardware in the loop tests. The results show that the AR&C system can safely and reliably perform automated rendezvous and docking missions in the absence of system failures with 100 percent success. When system failures are included, the system uses its automated collision avoidance maneuver logic to recover in a safe manner. The primary objective of the AR&C project is to prove that by designing a safe and robust automated system, mission operations cost can be reduced by decreasing the personnel required for mission design, preflight planning and training required for crewed rendezvous and docking missions.

Cruzen, Craig↗

First Generation Least Expensive Approach to Fission (FiGLEAF) Testing Results

Successful development of space fission systems will require an extensive program of affordable and realistic testing. In addition to tests related to design/development of the fission system, realistic testing of the actual flight unit must also be performed. Testing can be divided into two categories, non-nuclear tests and nuclear tests. Full power nuclear tests of space fission systems are expensive, time consuming, and of limited use, even in the best of programmatic environments. If the system is designed to operate within established radiation damage and fuel burn up limits while simultaneously being designed to allow close simulation of heat from fission using resistance heaters, high confidence in fission system performance and lifetime can be attained through a series of non-nuclear tests. Non-nuclear tests are affordable and timely, and the cause of component and system failures can be quickly and accurately identified. MSFC is leading a Safe Affordable Fission Engine (SAFE) test series whose ultimate goal is the demonstration of a 300 kW flight configuration system using non-nuclear testing. This test series is carried out in collaboration with other NASA centers, other government agencies, industry, and universities. The paper describes the SAFE test series, which includes test article descriptions, test results and conclusions, and future test plans.

VanDyke, Melissa↗

Automating Trend Analysis for Spacecraft Constellations

Spacecraft trend analysis is a vital mission operations function performed by satellite controllers and engineers, who perform detailed analyses of engineering telemetry data to diagnose subsystem faults and to detect trends that may potentially lead to degraded subsystem performance or failure in the future. It is this latter function that is of greatest importance, for careful trending can often predict or detect events that may lead to a spacecraft's entry into safe-hold. Early prediction and detection of such events could result in the avoidance of, or rapid return to service from, spacecraft safing, which not only results in reduced recovery costs but also in a higher overall level of service for the satellite system. Contemporary spacecraft trending activities are manually intensive and are primarily performed diagnostically after a fault occurs, rather than proactively to predict its occurrence. They also tend to rely on information systems and software that are oudated when compared to current technologies. When coupled with the fact that flight operations teams often have limited resources, proactive trending opportunities are limited, and detailed trend analysis is often reserved for critical responses to safe holds or other on-orbit events such as maneuvers. While the contemporary trend analysis approach has sufficed for current single-spacecraft operations, it will be unfeasible for NASA's planned and proposed space science constellations. Missions such as the Dynamics, Reconnection and Configuration Observatory (DRACO), for example, are planning to launch as many as 100 'nanospacecraft' to form a homogenous constellation. A simple extrapolation of resources and manpower based on single-spacecraft operations suggests that trending for such a large spacecraft fleet will be unmanageable, unwieldy, and cost-prohibitive. It is therefore imperative that an approach to automating the spacecraft trend analysis function be studied, developed, and applied to missions such as DRACO with the intent that mission operations costs be significantly reduced. The goal of the Constellation Spacecraft Trend Analysis Toolkit (CSTAT) project is to serve as the pathfinder for a fully automated trending system to support spacecraft constellations. The development approach to be taken is evolutionary. In the first year of the project, the intent is to significantly advance the state of the art in current trending systems through improved functionality and increased automation. In the second year, the intent is to add an expert system shell, likely through the adaptation of an existing commercial-off-the-shelf (COTS) or government-off-the-shelf (GOTS) tool to implement some level of the trending intelligence that humans currently provide in manual operations. In the third year, the intent is to infuse the resulting technology into a near-term constellation or formation-flying mission to test it and gain experience in automated trending. The lessons learned from the real missions operations experience will then be used to improve the system, and to ultimately incorporate it into a fully autonomous, closed-loop mission operations system that is truly capable of supporting large constellations. In this paper, the process of automating trend analysis for spacecraft constellations will be addressed. First, the results of a survey on automation in spacecraft mission operations in general, and in trending systems in particular will be presented to provide an overview of the current state of the art. Next, a rule-based model for implementing intelligent spacecraft subsystem trending will be then presented, followed by a survey of existing COTS/GOTS tools that could be adapted for implementing such a model. The baseline design and architecture of the CSTAT system will be presented. Finally, some results obtained from initial software tests and demonstrations will be presented.

Davis, George↗

Techniques for Improving Pilot Recovery from System Failures

This project examined the application of intelligent cockpit systems to aid air transport pilots at the tasks of reacting to in-flight system failures and of planning and then following a safe four dimensional trajectory to the runway threshold during emergencies. Two studies were conducted. The first examined pilot performance with a prototype awareness/alerting system in reacting to on-board system failures. In a full-motion, high-fidelity simulator, Army helicopter pilots were asked to fly a mission during which, without warning or briefing, 14 different failures were triggered at random times. Results suggest that the amount of information pilots require from such diagnostic systems is strongly dependent on their training; for failures they are commonly trained to react to with a procedural response, they needed only an indication of which failure to follow, while for 'un-trained' failures, they benefited from more intelligent and informative systems. Pilots were also found to over-rely on the system in conditions were it provided false or mis-leading information. In the second study, a proof-of-concept system was designed suitable for helping pilots replan their flights in emergency situations for quick, safe trajectory generation. This system is described in this report, including: the use of embedded fast-time simulation to predict the trajectory defined by a series of discrete actions; the models of aircraft and pilot dynamics required by the system; and the pilot interface. Then, results of a flight simulator evaluation with airline pilots are detailed. In 6 of 72 simulator runs, pilots were not able to establish a stable flight path on localizer and glideslope, suggesting a need for cockpit aids. However, results also suggest that, to be operationally feasible, such an aid must be capable of suggesting safe trajectories to the pilot; an aid that only verified plans entered by the pilot was found to have significantly detrimental effects on performance and pilot workload. Results also highlight that the trajectories suggested by the aid must capture the context of the emergency; for example, in some emergencies pilots were willing to violate flight envelope limits to reduce time in flight - in other emergencies the opposite was found.

Pritchett, Amy R.↗

Phase 1 Space Fission Propulsion System Testing and Development Progress

Successful development of space fission systems requires an extensive program of affordable and realistic testing. In addition to tests related to design/development of the fission system, realistic testing of the actual flight unit must also be performed. If the system is designed to operate within established radiation damage and fuel burn up limits while simultaneously being designed to allow close simulation of heat from fission using resistance heaters, high confidence in fission system performance and lifetime can be attained through a series of non-nuclear tests. The Safe Affordable Fission Engine (SAFE) test series, whose ultimate goal is the demonstration of a 300 kW flight configuration system, has demonstrated that realistic testing can be performed using non-nuclear methods. This test series, carried out in collaboration with other NASA centers, other government agencies, industry, and universities, successfully completed a testing program with a 30 kWt core, Stirling engine, and ion engine configuration. Additionally, a 100 kWt core is in fabrication and appropriate test facilities are being reconfigured. This paper describes the current SAFE non-nuclear tests, which includes test article descriptions, test results and conclusions, and future test plans.

VanDyke, Melissa↗

Hybrid Verification of an Interface for an Automatic Landing

Modern commercial aircraft have extensive automation which helps the pilot by performing computations, obtaining data, and completing procedural tasks. The pilot display must contain enough information so that the pilot can correctly predict the aircraft's behavior, while not overloading the pilot with unnecessary information. Human-automation interaction is currently evaluated through extensive simulation. In this paper, using both hybrid and discrete-event system techniques, we show how one could mathematically verify that an interface contains enough information for the pilot to safely and unambiguously complete a desired maneuver. We first develop a nonlinear, hybrid model for the longitudinal dynamics of a large civil jet aircraft in an autoland/go-around maneuver. We find the largest controlled subset of the aircraft's flight envelope for which we can guarantee both safe landing and safe go-around. We abstract a discrete procedural model using this result, and verify a discrete formulation of the pilot display against it. An interface which fails this verification could result in nondeterministic or unpredictable behavior from the pilot's point of view.

Oishi, Meeko↗

A Numerical Simulation Study to Develop an Acceptable Wake Encounter Boundary for a B737-100 Airplane

The National Aeronautics and Space Administration (NASA) is conducting research with the goal of enabling safe improvements in the capacity of the nation's air transportation system. The wake-vortex upset hazard is an important factor in establishing the minimum safe spacing between aircraft during landing and take-off operations, thus impacting airport capacity. A batch simulation study was conducted to assess the sensitivity of various safe landing criteria in the development of an acceptable wake encounter boundary. A baseline six-degree-of-freedom simulation of a B737-100 airplane was modified to include a wake model and the vortex-induced forces and moments. The guidance and control input for the airplane was provided by an auto-land system. The wake strength and encounter geometry were varied. A sensitivity study was also conducted to assess the effects of encounter modeling methods and accuracy.

Vicroy, Dan D.↗