Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “time sequence analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 559 records · Page 31

Altering the cellular mechanical force balance results in integrated changes in cell, cytoskeletal and nuclear shape

Studies were carried out with capillary endothelial cells cultured on fibronectin (FN)-coated dishes in order to analyze the mechanism of cell and nuclear shape control by extracellular matrix (ECM). To examine the role of the cytoskeleton in shape determination independent of changes in transmembrane osmotic pressure, membranes of adherent cells were permeabilized with saponin (25 micrograms/ml) using a buffer that maintains the functional integrity of contractile microfilaments. Real-time videomicroscopic studies revealed that addition of 250 microM ATP resulted in time-dependent retraction and rounding of permeabilized cells and nuclei in a manner similar to that observed in intact living cells following detachment using trypsin-EDTA. Computerized image analysis confirmed that permeabilized cells remained essentially rigid in the absence of ATP and that retraction was stimulated in a dose-dependent manner as the concentration of ATP was raised from 10 to 250 microM. Maximal rounding occurred by 30 min with projected cell and nuclear areas being reduced by 69 and 41%, respectively. ATP-induced rounding was also accompanied by a redistribution of microfilaments resulting in formation of a dense net of F-actin surrounding retracted nuclei. Importantly, ATP-stimulated changes in cell, cytoskeletal, and nuclear form were prevented in permeabilized cells using a synthetic myosin peptide (IRICRKG) that has been previously shown to inhibit actomyosin filament sliding in muscle. In contrast, both the rate and extent of cell and nuclear rounding were increased in permeabilized cells exposed to ATP when the soluble FN peptide, GRGDSP, was used to dislodge immobilized FN from cell surface integrin receptors.(ABSTRACT TRUNCATED AT 250 WORDS).

Non-NASA Center↗

Biomaterials Out of Thin Air: In Situ, On-Demand Printing of Advanced Biocomposites: A New Materials Design and Production Technique Using 3D-Printed Arrays of Bioengineered Cells

We have completed the proof of concept described in our Phase I proposal, a two-material array of nonstructural proteins. We created an implementation of each step in our technology concept and demonstrated its critical functionality. The biological chassis and printing hardware we created as part of this work can be re-used for future work by inserting a material coding region upstream of the fluorescent tag. Overall, we showed that our technology concept is sound. The mission benefit analyses, as described in our Phase I proposal, are complete and contained in this report. These calculations show that our technology can save hundreds of kilograms of upmass for a potential planetary human habit construction mission: the mass per habitat module can be reduced by approximately one third if the biomaterials are manufactured on Earth and included in the mission upmass, and the full 240 kg per module can be saved if the materials are derived entirely from in situ resources. Mass savings between these two extremes is expected for an actual mission, depending on the level of in situ resource extraction technology. We have shown that continued advancement of this technology concept for use in a space mission environment is justified. Our survey of future development pathways proved extremely informative in light of the lessons learned from our proof of concept work and mission scenario analyses. For example, we were able for the first time to distinguish between the levels of functionality provided by production of structural proteins, other polymers such as polysaccharides, and true organic-inorganic composites such as bone and mineralized shell. This new information represents a significant advance in formulating specific applications, and key enabling technologies, for our proposed concept. We surveyed potential collaborations with other projects and synergies with enabling technologies that are developing. We have received requests for collaboration from other institutions, including labs at Stanford University and Drexel University. We have also received visits from industry, including Organovo, a tissue engineering company, and Autodesk, a major 3D and materials design software company. Finally, we have been in touch with the team behind the 2013 NIAC Phase ll 'Super Ball Bot-Structures for Planetary Landing and Exploration' and are planning to develop our biomaterial printing technology with the goal of enabling tensegrity-based rovers such as theirs to use lighter, more robust materials. A smooth transition from TRL 2 to TRL 3 assumes that the implementations of the technology concept which demonstrate critical functionality are also pathways for future development; while this is the case for most hardware or software projects, the multidisciplinary nature of our project, particularly the biological aspect of it, means that this is not always true. For example, as part of this work we showed that although there are large number of known genetic parts that correspond to non-structural materials, this is not true for sequences for structural organic proteins, let alone biominerals. These realizations allowed us to further subdivide our concept into more detailed development areas, some of which are clearly established at TRL 3, others of which were newly identified sub-technologies moved from TRL 1 to TRL 2. Similarly, although a single feasibility /benefit analysis is sufficient for advancement from TRL 2 to TRL 3, not all potential benefits to a technology concept as broad in scope as ours are apparent at TRL 2. Both our future pathways survey and our proof of concept work highlighted that the true mass savings potential of our technology concept cannot be quantified without modification of existing materials modelling tools to take into account the possibility of positional materials properties customization. Therefore, we have simultaneously both advanced one potential set of applications of our technology concept from TRL 2 to TRL 3 and also identified a previously unknown set of applications and advanced it from TRL 1 to TRL 2. Overall, we have moved the original formulation of our concept forward from TRL 2 to TRL 3, and the expanded formulation of it presented in this document has been advanced from a combination of TRL 1 and early 1RL 2 to an overall late TRL 2. We have also identified the key areas necessary for both short-term and long-term advancement, and made recommendations for specific future work in the most promising directions. With future work on a 1-2 year timeframe to continue advancement to overall TRL 3, we will be well positioned to begin work on a specific space mission technology insertion path.

Biology↗

Application of OpenFOAM to Plume Impingement in Space Environments

After 30 years of continuous human presence in low-earth orbit, NASA is returning to the moon and eventually will go to Mars. Travelling beyond low earth orbit requires NASA to learn how humans can live in Deep Space environments – beyond the protection of Earth’s magnetosphere and at distances from Earth that prevent a quick return in case of trouble. To this end, NASA is constructing the Lunar Gateway, an ISS-like space station to be put in orbit around the moon to act as a home base for Lunar exploration for NASA astronauts. The Gateway Lunar outpost will be built incrementally, via modules which will arrive at separate times and dock to the existing structure. The incremental addition of Gateway modules, and the docking of visiting vehicles, is achieved via a sequence of firings from the approaching body’s onboard reaction control system (RCS) thrusters to achieve the required approach trajectory. The typical hypergolic chemical RCS thrusters work by firing hot gases to produce adverse thrust and the needed change in velocity to safely finish the docking process. The exhaust gas from the RCS thrusters form plumes that expand into the vacuum of space and can impinge onto the outer surfaces of the Lunar Gateway, causing unwanted forces and moments, heat loads, sediment deposition, and in extreme cases, even surface erosion - all mechanisms that can damage the Lunar Gateway and must be minimized. Both permanent and visiting modules will have this RCS thruster exhaust impingement problem. This research aims to establish existing OpenFOAM solvers as a methodology for improving simulation techniques of rocket exhaust plume impingement in space environments. The flow structure of a plume in a space environment is complex; a plume that originates from a hypergolic chemical RCS thruster and expands into a vacuum will experience several regimes of rarefication. This range includes the continuum flow in the rocket nozzle through the fully rarefied free molecular flow further from the nozzle. The flow physics is different at these two extremes, and as such, the simulation approach for plumes is generally divided into a traditional computational fluid dynamics (CFD) simulation in and near the nozzle which is coupled to a subsequent direct simulation Monte Carlo (DSMC) simulation. At this time, the scope of this research is developing, verifying, and validating a method using existing solvers in the OpenFOAM framework for performing coupled CFD/DSMC calculations to determine the extent of plume impingement loading on generic space structures. This presentation will detail code-to-code comparisons between the hyStrath dsmcFoam+ solver, developed using OpenFOAM and available as open-source, and NASA’s in-house DSMC Analysis Code (DAC). Comparisons to several open-source publication findings using DAC [3,4] are presented, and advantages of using an OpenFOAM based solver are also discussed. The presentation concludes with a discussion of future work, and a plan for coupling the dsmcFoam+ solver with CFD simulations of chemical rocket engines for unified coupled plume simulation.

DSMC↗

Assessment of an Automated Touchdown Detection Algorithm for the Orion Crew Module

Orion Crew Module (CM) touchdown detection is critical to activating the post-landing sequence that safe?s the Reaction Control Jets (RCS), ensures that the vehicle remains upright, and establishes communication with recovery forces. In order to accommodate safe landing of an unmanned vehicle or incapacitated crew, an onboard automated detection system is required. An Orion-specific touchdown detection algorithm was developed and evaluated to differentiate landing events from in-flight events. The proposed method will be used to initiate post-landing cutting of the parachute riser lines, to prevent CM rollover, and to terminate RCS jet firing prior to submersion. The RCS jets continue to fire until touchdown to maintain proper CM orientation with respect to the flight path and to limit impact loads, but have potentially hazardous consequences if submerged while firing. The time available after impact to cut risers and initiate the CM Up-righting System (CMUS) is measured in minutes, whereas the time from touchdown to RCS jet submersion is a function of descent velocity, sea state conditions, and is often less than one second. Evaluation of the detection algorithms was performed for in-flight events (e.g. descent under chutes) using hi-fidelity rigid body analyses in the Decelerator Systems Simulation (DSS), whereas water impacts were simulated using a rigid finite element model of the Orion CM in LS-DYNA. Two touchdown detection algorithms were evaluated with various thresholds: Acceleration magnitude spike detection, and Accumulated velocity changed (over a given time window) spike detection. Data for both detection methods is acquired from an onboard Inertial Measurement Unit (IMU) sensor. The detection algorithms were tested with analytically generated in-flight and landing IMU data simulations. The acceleration spike detection proved to be faster while maintaining desired safety margin. Time to RCS jet submersion was predicted analytically across a series of simulated Orion landing conditions. This paper details the touchdown detection method chosen and the analysis used to support the decision.

Gay, Robert S.↗

The Mars Pathfinder Mission and Science Results

Mars Pathfinder, the first low-cost, quick Discovery class mission to be completed, successfully landed on the surface of Mars on July 4, 1997, deployed and navigated a small rover, and collected data from 3 science instruments and 10 technology experiments. The mission operated on Mars for 3 months and returned 2.3 Gbits of new data, including over 16,500 lander and 550 rover images, 16 chemical analyses of rocks and soil, and 8.5 million individual temperature, pressure and wind measurements. The rover traversed 100 m clockwise around the lander, exploring about 200 square meters of the surface. The mission captured the imagination of the public, and garnered front page headlines during the first week. A total of about 566 million internet "hits" were registered during the first month of the mission, with 47 million "hits" on July 8th alone, making the Pathfinder landing by far the largest internet event in history at the time. Pathfinder was the first mission to deploy a rover on Mars. It carried a chemical analysis instrument, to characterize the rocks and soils in a landing area over hundreds of square meters on Mars, which provided a calibration point or "ground truth" for orbital remote sensing observations. The combination of spectral imaging of the landing area by the lander camera, chemical analyses aboard the rover, and close-up imaging of colors, textures and fabrics with the rover cameras offered the potential of identifying rocks (petrology and mineralogy). With this payload, a landing site in Ares Vallis was selected because it appeared acceptably safe and offered the prospect of analyzing a variety of rock types expected to be deposited by catastrophic floods, which enabled addressing first-order scientific questions such as differentiation of the crust, the development of weathering products, and the nature of the early Martian environment and its subsequent evolution. The 3 instruments and rover allowed seven areas of scientific investigation: the geology and geomorphology of the surface, mineralogy and geochemistry of rocks and soils, physical properties of surface materials, magnetic properties of airborne dust, atmospheric science including aerosols, and rotational and orbital dynamics of Mars. Scientists were assembled into 7 Science Operations Groups that were responsible for requesting measurements by the 3 instruments, rover and engineering subsystems for carrying out their scientific investigations and for analyzing the data and reporting on their findings. The spacecraft was launched on December 4, 1996 and had a 7 month cruise to Mars, with four trajectory correction maneuvers. The vehicle entered the atmosphere directly following cruise stage separation. Parachute deployment, heatshield and lander separation, radar ground acquisition, airbag inflation and rocket ignition all occurred before landing at 2:58 AM true local solar time (9:56:55 AM PDT). The lander bounced at least 15 times up to 12 in high without airbag rupture, demonstrating the robustness of this landing system. Reconstruction of the final landing sequence indicates that the parachute/backshel1/1ander was tilted due to a northwest directed wind and wind shear, which resulted in the lander bouncing about I km to the northwest and initially downhill about 20 m from where the solid rockets fired. Two anomalously bright spots located in the lander scene are likely the heatshield, which continued in a ballistic trajectory about 2 km downrange (west southwest), and the backshell/parachute, which stayed nearer to where the rockets fired. Unconnected disturbed soil patches in the scene indicate that the final few bounces of the lander were from the east-southeast and were followed by a gentle roll to the west before coming to rest on the base petal. The location of the lander away from where the solid rockets fired and considerations of the exhaust products used to inflate the airbags and their fate, indicate that the Pathfinder landing system is one of the cleanest designed leaving the local area essentially contaminant free. The radio signal from the low-=gain antenna was received at 11:34 AM PDT indicating a successful landing.

Golombek, M. P.↗

Multiphase Simulations of the SLS Launch Environment

NASA’s Space Launch System (SLS), which will send astronauts back to the Moon in the next few years, is powered by four RS-25 engines and two RSRMV solid rocket boosters (SRBs). During launch the SLS propulsion system generates intense acoustics and other powerful waves, such as ignition overpressure (IOP) which, if unmitigated, have the potential to damage the vehicle and possibly cause loss of mission or crew. To protect the vehicle from these powerful waves, the SLS launch pad design includes an ignition overpressure/sound suppression (IOP/SS) system which sprays 270,000 gallons per minute of water very close to the SRB and RS-25 nozzles. The SRB and RS-25 engine plumes, and the proximity of the IOP/SS water, create a complex multiphase (gas and liquid) environment during the SLS ignition sequence. The interplay among these systems creates challenges related to water spray into/onto engine nozzles, potential debris transport, and additional transient loads due to strong plume-water interactions - all of which the SLS vehicle must be able to withstand. Prior to the Artemis I launch, the SLS multiphase liftoff environment was largely unknown due to differences from the Space Shuttle and other programs. Some data was available from tests of individual systems, but no integrated testing or analysis was available. Even post-launch analysis of Artemis I cannot provide a full understanding of the complex physics involved due to limited (or obstructed) camera views and instrumentation. Computational fluid dynamics (CFD) is being used to investigate the details of the multiphase environment which could not be measured, help comprehend the data gathered from the launch, and ultimately identify phenomena that are a concern for future flights. Project Details Engineers at NASA’s Marshall Space Flight Center (MSFC) have executed simulations using the Loci/STREAM-Volume of Fluid (VoF) multiphase CFD solver to understand this environment. Initial efforts successfully validated the CFD solver on various tests, giving confidence to simulate the SLS multiphase liftoff environment prior to the Artemis I launch. The CFD simulation of the SLS ignition sequence was conducted in three phases. First the IOP/SS water system was simulated for approximately 6 seconds to reach a quasi-steady state. Next, the RS-25 engine plumes were activated and held at full power for 1 second. Lastly, the SRB booster was activated and the simulation was carried out until just prior to vehicle motion. This simulation process mimics the conditions that exist at launch. Results and Impact The SLS ignition sequence simulation results provide deep understanding of the underlying physics occuring during launch. Observations from the simulation include reduction of water splashing into/onto the engine nozzles, change in angling of the dense water sheets, and the origin of the powerful ignition overpressure (IOP) wave. These observations directly inform the SLS program on subjects including plume-water induced side loads, debris transport, and the acoustic launch environment. Additionally, with post launch comparison of CFD observations to flight data, these tools can be applied to launch vehicles and environments other than SLS with confidence. Why HPC Matters The SLS ignition sequence CFD simulations are conducted on meshes up to hundreds of millions of cells on thousands of processors for weeks at a time. These simulations generate terabytes of data that must also be stored and archived for future use on HPC systems. Simply put, the CFD simulations would not be possible without NASA HPC resources. What’s Next Comparisons between the Artemis I flight data and the CFD simulations will be continued to both improve confidence in the CFD results and provide deeper understanding into the SLS multiphase launch environment. This will be used to provide insight for decision making for the first manned SLS flight, Artemis II. Future simulations will target new configurations of the SLS IOP/SS water required to support the more powerful variants of the SLS vehicle, such as Block 1B. Additionally, this capability provides NASA the ability to investigate launch environments for vehicles other than SLS to support other missions.

Travis Rivord↗

Analysis of Smart Composite Structures Including Debonding

Smart composite structures with distributed sensors and actuators have the capability to actively respond to a changing environment while offering significant weight savings and additional passive controllability through ply tailoring. Piezoelectric sensing and actuation of composite laminates is the most promising concept due to the static and dynamic control capabilities. Essential to the implementation of these smart composites are the development of accurate and efficient modeling techniques and experimental validation. This research addresses each of these important topics. A refined higher order theory is developed to model composite structures with surface bonded or embedded piezoelectric transducers. These transducers are used as both sensors and actuators for closed loop control. The theory accurately captures the transverse shear deformation through the thickness of the smart composite laminate while satisfying stress free boundary conditions on the free surfaces. The theory is extended to include the effect of debonding at the actuator-laminate interface. The developed analytical model is implemented using the finite element method utilizing an induced strain approach for computational efficiency. This allows general laminate geometries and boundary conditions to be analyzed. The state space control equations are developed to allow flexibility in the design of the control system. Circuit concepts are also discussed. Static and dynamic results of smart composite structures, obtained using the higher order theory, are correlated with available analytical data. Comparisons, including debonded laminates, are also made with a general purpose finite element code and available experimental data. Overall, very good agreement is observed. Convergence of the finite element implementation of the higher order theory is shown with exact solutions. Additional results demonstrate the utility of the developed theory to study piezoelectric actuation of composite laminates with pre-existing debonding. Significant changes in the modes shapes and reductions in the control authority result due to partially debonded actuators. An experimental investigation addresses practical issues, such as circuit design and implementation, associated with piezoelectric sensing and actuation of composite laminates. Composite specimens with piezoelectric transducers were designed, constructed and tested to validate the higher order theory. These specimens were tested with various stacking sequences, debonding lengths and gains for both open and closed loop cases. Frequency changes of 15% and damping on the order of more than 20% of critical damping, via closed loop control, was achieved. Correlation with the higher order theory is very good. Debonding is shown to adversely affect the open and closed loop frequencies, damping ratios, settling time and control authority.

Chattopadhyay, Aditi↗

Pilot Field Test: Performance of a Sit-to-Stand Test After Long-Duration Space Flight

BACKGROUND: Astronauts returning from the International Space Station are met by a team of recovery personnel typically providing physical assistance and medical support immediately upon landing. That is because long-duration spaceflight impacts astronauts' functional abilities. Future expeditions to planets or asteroids beyond the low Earth orbit, however, may require crewmembers to egress the vehicle and perform other types of physical tasks unassisted. It is therefore important to characterize the extent and longevity of functional deficits experienced by astronauts in order to design safe exploration class missions. Pilot Field Test (PFT) experiment conducted with participation of ISS crewmembers traveling on Soyuz expeditions 34S - 41S comprised several tasks designed to study the recovery of sensorimotor abilities of astronauts during the first 24 hours after landing and beyond. METHODS: The first test in the PFT battery sequence, and also the least demanding one from the sensorimotor perspective, was a Sit-to-Stand test. Test subjects were seated in the chair and had to stand up on command and remain standing for ten seconds. The subjects were instructed to stand up unassisted as quickly as they were able to, while maintaining postural control. Synchronized wireless inertial sensors mounted on the head, chest, lower back, wrists, and ankles were used to continuously log body kinematics. Crewmembers' blood pressure and heart rate were monitored and recorded with the Portapres and Polar systems. Each session was recorded with a digital video camera. During data collections occurring within the 24-hour postflight period, crewmembers were also asked to (1) evaluate their perceived motion sickness symptoms on a 20-point scale before and after completion of the test and (2) estimate how heavy they felt compared to their normal (preflight) body weight. Consent to participate in PFT was obtained from 18 crewmembers (11 US Orbital Segment [USOS] astronauts and 7 Russian cosmonauts). For 10 subjects, the first set of data was collected in the medical tent in Soyuz landing zone (1-2 hours after landing); the other 8 subjects were tested at the Kazakhstan deployment airport (4-5 hours after landing). 8 of the 11 astronauts were tested twice more within the first 24 hours postflight, at a refueling stop on the way to Houston (approximately 13 hours after landing) and at the Johnson Space Center (approximately 24 hours after landing). Later postflight data were collected in the first two weeks on some crewmembers. Finally, 6 astronauts were tested 60+ days after landing to establish a delayed baseline. RESULTS/DISCUSSION: Two of the 18 PFT participants felt too ill to attempt any tests in Kazakhstan (at either the landing zone or deployment airport). The remaining test subjects completed the Sit-to-Stand test and their reported motion sickness scores were unaffected by this task. The task completion times and body kinematics data analysis are currently underway. Preliminary analysis of astronaut data shows a steep improvement in the time to complete the task on the second data take, and in some cases, the trend continues through day six postflight. Head and trunk pitch angles and pitch rates were also examined and increases in all measures are evident throughout the observed recovery period (60+ days postflight). Interesting patterns of head and trunk pitch coordination have also emerged. One of the data analysis objectives is comparison of initial postflight performance and recovery of experienced crewmembers and first-time fliers. Another one - possible differences in performance between USOS and Russian crewmembers.

Kofman, I. S.↗

The Origin and Evolution of Saturn's 2011-2012 Stratospheric Vortex

The planet-encircling springtime storm in Saturn's troposphere (December 2010-July 2011, Fletcher, L.N. et al. [2011]. Science 332, 1413-1414; Sánchez-Lavega, A. et al. [2011]. Nature 475, 71-74; Fischer, G. et al. [2011]. Nature 475, 75-77) produced dramatic perturbations to stratospheric temperatures, winds and composition at mbar pressures that persisted long after the tropospheric disturbance had abated. Thermal infrared (IR) spectroscopy from the Cassini Composite Infrared Spectrometer (CIRS), supported by ground-based IR imaging from the VISIR instrument on the Very Large Telescope and the MIRSI instrument on NASA's IRTF, is used to track the evolution of a large, hot stratospheric anticyclone between January 2011 and March 2012. The evolutionary sequence can be divided into three phases: (I) the formation and intensification of two distinct warm airmasses near 0.5 mbar between 25 and 35degN (B1 and B2) between January-April 2011, moving westward with different zonal velocities, B1 residing directly above the convective tropospheric storm head; (II) the merging of the warm airmasses to form the large single 'stratospheric beacon' near 40degN (B0) between April and June 2011, disassociated from the storm head and at a higher pressure (2 mbar) than the original beacons, a downward shift of 1.4 scale heights (approximately 85 km) post-merger; and (III) the mature phase characterised by slow cooling (0.11 +/- 0.01 K/day) and longitudinal shrinkage of the anticyclone since July 2011. Peak temperatures of 221.6 +/- 1.4 K at 2 mbar were measured on May 5th 2011 immediately after the merger, some 80 K warmer than the quiescent surroundings. From July 2011 to the time of writing, B0 remained as a long-lived stable stratospheric phenomenon at 2 mbar, moving west with a near-constant velocity of 2.70 +/- 0.04 deg/day (24.5 +/- 0.4 m/s at 40degN relative to System III longitudes). No perturbations to visible clouds and hazes were detected during this period. With no direct tracers of motion in the stratosphere, we use thermal windshear calculations to estimate clockwise peripheral velocities of 200-400 m/s at 2 mbar around B0. The peripheral velocities of the two original airmasses were smaller (70-140 m/s). In August 2011, the size of the vortex as defined by the peripheral collar was 65deg longitude (50,000 km in diameter) and 25deg latitude. Stratospheric acetylene (C2H2) was uniformly enhanced by a factor of three within the vortex, whereas ethane (C2H6) remained unaffected. The passage of B0 generated a new band of warm stratospheric emission at 0.5 mbar at its northern edge, and there are hints of warm stratospheric structures associated with the beacons at higher altitudes (p < 0.1 mbar) than can be reliably observed by CIRS nadir spectroscopy. Analysis of the zonal windshear suggests that Rossby wave perturbations from the convective storm could have propagated vertically into the stratosphere at this point in Saturn's seasonal cycle, one possible source of energy for the formation of these stratospheric anticyclones.

evolution↗

Earth's 2006 Encounter with Comet 73P/Schwassmann-Wachmann: Products of Nucleus Fragmentation Seen in Closeup

The large numbers of nucleus fragments observed are a spectacular illustration of the process of cascading fragmentation in progress, a concept introduced to interpret the properties of the Kreutz system of sungrazers and comet D/1993 F2. The objective is to describe the fragmentation sequence and hierarchy of comet 73P, the nature of the fragmentation process and observed events, and the expected future evolution of this comet. The orbital arc populated by the fragments refers to an interval of 3.74 days in the perihelion time. This result suggests that they all could be products (but not necessarily first-generation fragments) of two 1995 events, in early September (involving an enormous outburst) and at the beginning of November. The interval of perihelion times is equivalent to a range of about 2.5 m/s in separation velocity or 0.00012 the Sun's attraction in nongravitational deceleration. Their combined effect suggests minor orbital momentum changes acquired during fragmentation and decelerations compatible with survival over two revolutions about the Sun. Fragment B is a likely first-generation product of one of the 1995 events. From the behavior of the primary fragment C, 73P is not a dying comet, even though fragment B and others were episodically breaking up into many pieces. Each episode began with the sudden appearance of a starlike nucleus condensation and a rapidly expanding outburst, followed by a development of jets, and a gradual tailward extension of the fading condensation, until the discrete masses embedded in it could be resolved. In April-May, this debris traveled first to the southwest, but models show their eventual motion toward the projected orbit. Fainter fragments were imaged over limited time, apparently because of their erratic activity (interspersed with periods of dormancy) rather than improptu disintegration. A dust trail joining the fragments and reminiscent of comet 141P/Machholz suggests that cascading fragmentation exerts itself profoundly over an extremely broad mass range of particulate debris.

daya analysis↗

Effects of root-zone acidity on utilization of nitrate and ammonium in tobacco plants

Tobacco (Nicotiana tabacum L., cv. 'Coker 319') plants were grown for 28 days in flowing nutrient culture containing either 1.0 mM NO3- or 1.0 mM NH4+ as the nitrogen source in a complete nutrient solution. Acidities of the solutions were controlled at pH 6.0 or 4.0 for each nitrogen source. Plants were sampled at intervals of 6 to 8 days for determination of dry matter and nitrogen accumulation. Specific rates of NO3- or NH4+ uptake (rate of uptake per unit root mass) were calculated from these data. Net photosynthetic rates per unit leaf area were measured on attached leaves by infrared gas analysis. When NO3- [correction of NO-] was the sole nitrogen source, root growth and nitrogen uptake rate were unaffected by pH of the solution, and photosynthetic activity of leaves and accumulation of dry matter and nitrogen in the whole plant were similar. When NH4+ was the nitrogen source, photosynthetic rate of leaves and accumulation of dry matter and nitrogen in the whole plant were not statistically different from NO3(-) -fed plants when acidity of the solution was controlled at pH 6.0. When acidity for NH4(+) -fed plants was increased to pH 4.0, however, specific rate of NH4+ uptake decreased by about 50% within the first 6 days of treatment. The effect of acidity on root function was associated with a decreased rate of accumulation of nitrogen in shoots that was accompanied by a rapid cessation of leaf development between days 6 and 13. The decline in leaf growth rate of NH4(+) -fed plants at pH 4.0 was followed by reductions in photosynthetic rate per unit leaf area. These responses of NH4(+) -fed plants to increased root-zone acidity are characteristic of the sequence of responses that occur during onset of nitrogen stress.

NASA Discipline Life Support Systems↗

Field Exploration and Life Detection Sampling Through Planetary Analogue Sampling (FELDSPAR).

Exploration missions to Mars rely on rovers to perform analyses over small sampling areas; however, landing sites for these missions are selected based on large-scale, low-resolution remote data. The use of Earth analogue environments to estimate the multi-scale spatial distributions of key signatures of habitability can help ensure mission science goals are met. A main goal of FELDSPAR is to conduct field operations analogous to Mars sample return in its science, operations, and technology from landing site selection, to in-field sampling location selection, remote or stand-off analysis, in situ analysis, and home laboratory analysis. Lava fields and volcanic regions are relevant analogues to Martian landscapes due to desiccation, low nutrient availability, and temperature extremes. Operationally, many Icelandic lava fields are remote enough to require that field expeditions address several sampling constraints that are experienced in robotic exploration, including in situ and sample return missions. The Fimmvruhls lava field was formed by a basaltic effusive eruption associated with the 2010 Eyjafjallajkull eruption. Mlifellssandur is a recently deglaciated plain to the north of the Myrdalsjkull glacier. Holuhraun was formed by a 2014 fissure eruptions just north of the large Vatnajkull glacier. Dyngjusandur is an alluvial plain apparently kept barren by repeated mechanical weathering. Informed by our 2013 expedition, we collected samples in nested triangular grids every decade from the 10 cm scale to the 1 km scale (as permitted by the size of the site). Satellite imagery is available for older sites, and for Mlifellssandur, Holuhraun, and Dyngjusandur we obtained overhead imagery at 1 m to 200 m elevation. PanCam-style photographs were taken in the field by sampling personnel. In-field reflectance spectroscopy was also obtained with an ASD spectrometer in Dyngjusandur. All sites chosen were 'homogeneous' in apparent color, morphology, moisture, grain size, and reflectance spectra at all scales greater than 10 cm. Field lab assays were conducted to monitor microbial habitation, including ATP quantification, qPCR for fungal, bacterial, and archaeal DNA, and direct cell imaging using fluorescence microscopy. Home laboratory analyses include Raman spectroscopy and community sequencing. ATP appeared to be significantly more sensitive to small changes in sampling location than qPCR or fluorescence microscopy. Bacterial and archaeal DNA content were more consistent at the smaller scales, but similarly variable across more distant sites. Conversely, cell counts and fungal DNA content have significant local variation but appear relatively homogeneous over scales of 1 km. ATP, bacterial DNA, and archaeal DNA content were relatively well correlated at many spatial scales. While we have observed spatial variation at various scales and are beginning to observe how that variation fluctuates over time as biodiversity recovers after an eruption, we do not yet fully understand what parameters lead to the observed spatial variation. Home laboratory analyses will help us further understand the elemental and structural composition of the basaltic matrices, but further field analyses are vital for the understanding how temperature, moisture, incident radiation, and so forth influence the habitability of a microclimate.

Field↗

Deep ROSAT HRI observations of the Orion nebula region

We present results from three deep ROSAT high-resolution imager observations of the Orion Nebula star-forming region. The X-ray images contain over 1500 cataloged stars in a roughly 0.8 sq deg region centered on the Trapezium. In all, 389 distinct X-ray sources have been detected, at least two-thirds of which are associated with a single proper-motion cluster member. X-ray emission is detected from stars of all spectral types, from massive O- and B-type components of the Trapezium to the coolest, low-mass pre-main-sequence (PMS) stars. In this paper we focus primarily on X-ray emission from the late-type PMS stars. Of the approximately 100 late-type cluster members with measured spectral types, approximately three-fourths have been detected; we have derived X-ray luminosity upper limits for the remaining stars. We found coronal X-ray emission turns on around spectral type F6, with the upper envelope of activity increasing with deceasing effective temperature. When plotted in an X-ray luminosity versus bolometric luminosity diagram, late-type PMS stars lie below a 'saturation' line corresponding to L(sub x)/L(sub bol) approximately 10(exp -3). For approximately solar-mass PMS stars, we find a median X-ray luminosity approximately 1 x 10(exp 30) ergs/s. The late G, K, and M stars exhibit nearly a two order of magnitude spread in X-ray luminosity and in L(sub x)/L(sub bol) at a given effective temperature. Plots of X-ray activity versus v sin i rotational velocity and rotational period appear to show no clear dependence of activity on rotation. However, because only a small fraction of late-type PMS stars in the Orion Nebula have measured v sin i or P(sub rot) and because of uncertainties in L(sub x) and L(sub x)/L(sub bol), we believe the data are not conclusive on this point. Light curves of the detected X-ray sources have revealed at least 10 strong X-ray flares with characteristic rise times greater than or approximately equal to 1 hr and decay times ranging from approximately 2 to 12 hr. All the flares have X-ray energies in excess of 3 x 10(exp 35) ergs. Many of the X-ray sources associated with late-type cluster members have been observed in more than one ROSAT HRI exposure, allowing us to look for variability on the approximately 1 yr timescale between HRI observations. A statistical analysis of the resulting count rate ratios suggests that at least one-fourth of the late-type cluster stars are significantly variable on this timescale.

Gagne, Marc↗

Analysis of Base Metal Microstructures and Mechanical Properties of a Single-Piece, Spin-Formed Forward Pressure Vessel Bulkhead

In 2012, a pathfinder forward pressure vessel bulkhead (FPVBH) for the Orion Multi-Purpose Crew Vehicle (MPCV) was fabricated using aluminum (Al) alloy 2219. The demonstration article was offered as a replacement for the baseline configuration, which at that time was a multi-piece welded construction using aluminum-lithium (Al-Li) alloy 2195. In 2014, the NASA Engineering and Safety Center (NESC) funded a Phase I effort to explore spin-forming as a manufacturing method to produce a complex-shaped, single-piece FPVBH for the crew module (CM) [1]. The primary focus of the NESC effort was to expand spin-forming technology to the fabrication of an Al-Li 2195 FPVBH. As a result, limited testing and analysis was performed on the original Al 2219 article. In this study, a sufficiently large plate of Al 2219 was not available for the fabrication of a FPVBH. Therefore, the forming blank comprised two plates (from different lots) butt welded together using a single friction stir weld. The welded forming blank was then spin formed into the FPVBH configuration and heat treated to the T62 temper. Mechanical property testing of the spin-formed 2219-T62 FPVBH revealed that the tensile properties were comparable to the Metallic Material Properties Development and Standardization (MMPDS) A-basis allowable for Al 2219-T6 wrought products. However, post-spin forming application of the standard heat treatment produced large, recrystallized grains in the material. The response varied within the two plates; one plate lot exhibited nearly complete recrystallization, while the other lot contained bands of recrystallization. Although no reduction in tensile properties was observed due to these microstructural variations, a more detailed investigation was recommended to better understand the effect of spin forming on the recrystallization mechanism and the impact on other material properties. The current study examined the microstructure and mechanical properties of the fully processed Al 2219-T62 FPVBH with emphasis on comparing differences between the two plates. Testing was limited to the cone region of the FPVBH. The two specific tasks in this study were: a) Characterization of the microstructure and mechanical properties in the two plates used in the FPVBH. b) Isolation of the impact of each step in the thermo-mechanical processing (TMP) sequence of the FPVBH on recrystallization and grain growth. Mechanical property testing sampled regions containing both large, recrystallized and small, unrecrystallized grains. Tensile strengths and elongations were equivalent in both regions and exceeded MMPDS A-basis allowables. Fracture toughness was equivalent in both regions and fracture morphology was typical of aluminum alloys. The fatigue precrack region of the fracture toughness specimens appeared more faceted in the recrystallized plate. This suggests that property testing that is more sensitive to grain size, such as fatigue crack growth rate and stress corrosion cracking, may be warranted. Alcoa reviewed the production records for the two plate lots and confirmed that composition of both plates was within the allowable range for Al 2219 and that plate processing steps were all performed within production limits. However, the Fe content was notably higher in the fully recrystallized plate, resulting in a greater volume fraction of large Fe-bearing inclusions and Al-Cu constituent particles. Alcoa did not provide details regarding plate processing variables for the two plate lots. It was surmised that deformation by hot rolling was the most accurate TMP simulation of commercial spin forming within a laboratory setting. Both hot rolling and spin forming comprise combinations of shear and compressive deformation. The through-thickness strain caused by hot rolling is symmetrical about the mid-plane, as the rollers contact both sides of the material. Shear strains are maximum at the inner and outer surfaces and trend toward zero at the mid-thickness. In contrast, spin forming utilizes a single roller on the outer surface, producing a gradient in shear stress through the thickness. Shear strains in spin-formed material are highest at the outer surface due to direct contact with the roller, and trend toward zero at the inner surface. Consequently, there will undoubtedly be some discrepancies in the mechanical response of hot-rolled and spin-formed products in the through-thickness direction. Interrupted TMP simulations were performed on remnant plate from the FPVBH forming blank in order to isolate the effects of a post-weld anneal, spin-forming deformation/thermal cycling, and solution heat treatment (SHT) on development of the recrystallized microstructures. Analysis confirmed that large, recrystallized grains formed exclusively during SHT and only after a certain deformation level was exceeded. Remnant plate from both lots that received thermal processing only did not exhibit recrystallization but exhibited fully recrystallized microstructures when processed by hot rolling. This indicates that (1) the level of deformation exceeded the critical level for recrystallization in both plates and (2) that the level of deformation during hot rolling was greater than that which accumulated during spin forming of the FPVBH. Comparison of the hot-rolled plate with the spin-formed material showed that the recrystallized grain size was larger in the FPVBH, providing further evidence that deformation levels were lower in the FPVBH. The most plausible explanation for the differing degrees of recrystallization in the two plates is particle stimulated nucleation (PSN) at the Fe-bearing inclusions and large Al-Cu constituent particles. In the plate with higher solute content, the greater volume fraction of these particles reduces the deformation level required to promote recrystallization. During spin forming the critical deformation level was likely exceeded for the higher Fe content plate resulting in a fully recrystallized microstructure. The lower Fe content plate developed a microstructure that exhibited bands of recrystallization due to the combination of a non-uniform distribution of particles and deformation. The critical deformation required for recrystallization was likely only exceeded during spin forming in regions of higher particle content. While there were differences in Fe content between these lots of Al 2219 plate, the composition of both was within defined alloy limits and Alcoa reported no anomalies during plate production. The observed differences in recrystallization after spin forming may reflect the inherent variability between these two lots of plate. The spin-forming vendor, Spincraft, reported that similar variations in recrystallized microstructures have been observed during examination of multiple spin-forming trials of a different 2xxx series aluminum alloy. Hence, tighter chemical specification limits on impurity levels in Al 2219 plate may help ensure uniform, predictable microstructures. Finally, the tensile and fracture toughness properties were not affected by the microstructural variations noted.

single-piece↗

Verification of the Solar Dynamics Observatory High Gain Antenna Pointing Algorithm Using Flight Data

The Solar Dynamics Observatory (SDO) is a NASA spacecraft designed to study the Sun. It was launched on February 11, 2010 into a geosynchronous orbit, and uses a suite of attitude sensors and actuators to finely point the spacecraft at the Sun. SDO has three science instruments: the Atmospheric Imaging Assembly (AIA), the Helioseismic and Magnetic Imager (HMI), and the Extreme Ultraviolet Variability Experiment (EVE). SDO uses two High Gain Antennas (HGAs) to send science data to a dedicated ground station in White Sands, New Mexico. In order to meet the science data capture budget, the HGAs must be able to transmit data to the ground for a very large percentage of the time. Each HGA is a dual-axis antenna driven by stepper motors. Both antennas transmit data at all times, but only a single antenna is required in order to meet the transmission rate requirement. For portions of the year, one antenna or the other has an unobstructed view of the White Sands ground station. During other periods, however, the view from both antennas to the Earth is blocked for different portions of the day. During these times of blockage, the two HGAs take turns pointing to White Sands, with the other antenna pointing out to space. The HGAs handover White Sands transmission responsibilities to the unblocked antenna. There are two handover seasons per year, each lasting about 72 days, where the antennas hand off control every twelve hours. The non-tracking antenna slews back to the ground station by following a ground commanded trajectory and arrives approximately 5 minutes before the formerly tracking antenna slews away to point out into space. The SDO Attitude Control System (ACS) runs at 5 Hz, and the HGA Gimbal Control Electronics (GCE) run at 200 Hz. There are 40 opportunities for the gimbals to step each ACS cycle, with a hardware limitation of no more than one step every three GCE cycles. The ACS calculates the desired gimbal motion for tracking the ground station or for slewing, and sends the command to the GCE at 5 Hz. This command contains the number of gimbals steps for that ACS cycle, the direction of motion, the spacing of the steps, and the delay before taking the first step. The AIA and HMI instruments are sensitive to spacecraft jitter. Pre-flight analysis showed that jitter from the motion of the HGAs was a cause of concern. Three jitter mitigation techniques were developed to overcome the effects of jitter from different sources. The first method is the random step delay, which avoids gimbal steps hitting a cadence on a jitter-critical mode by pseudo-randomly delaying the first gimbal step in an ACS cycle. The second method of jitter mitigation is stagger stepping, which forbids the two antennas from taking steps during the same ACS cycle in order to avoid constructively adding jitter from two antennas. The third method is the inclusion of an instrument No Step Request (NSR), which allows the instruments to request a stoppage in gimbal stepping during the times when they are taking images. During the commissioning phase of the mission, a jitter test was performed onboard the spacecraft. Various sources of jitter, such as the reaction wheels, the High Gain Antenna motors, and the motion of the instrument filter wheels, were examined to determine the level of their effect on the instruments. During the HGA portion of the test, the jitter amplitudes from the single step of a gimbal were examined, as well as the amplitudes due to the execution of various gimbal rates. These jitter levels are compared with the gimbal jitter allocations for each instrument. Additionally, the jitter test provided insight into a readback delay that exists with the GCE. Pre-flight analysis suggested that gimbal steps scheduled to occur during the later portion of an ACS cycle would not be read during that cycle, resulting in a delay in the telemetered current gimbal position. Flight data from the jitter test confirmed this expectation. Analysis is presentehat shows the readback delay does not have a negative impact on gimbal control. The decision was made to consider implementing two of the jitter mitigation techniques on board the spacecraft: stagger stepping and the NSR. Flight data from two sets of handovers, one set without jitter mitigation and the other with mitigation enabled, were examined. The trajectory of the predicted handover was compared with the measured trajectory for the two cases, showing that tracking was not negatively impacted with the addition of the jitter mitigation techniques. Additionally, the individual gimbal steps were examined, and it was confirmed that the stagger stepping and NSRs worked as designed. An Image Quality Test was performed to determine the amount of cumulative jitter from the reaction wheels, HGAs, and instruments during various combinations of typical operations. In this paper, the flight results are examined from a test where the HGAs are following the path of a nominal handover with stagger stepping on and HMI NSRs enabled. In this case, the reaction wheels are moving at low speed and the instruments are taking pictures in their standard sequence. The flight data shows the level of jitter that the instruments see when their shutters are open. The HGA-induced jitter is well within the jitter requirement when the stagger step and NSR mitigation options are enabled. The SDO HGA pointing algorithm was designed to achieve nominal antenna pointing at the ground station, perform slews during handover season, and provide three HGA-induced jitter mitigation options without compromising pointing objectives. During the commissioning phase, flight data sets were collected to verify the HGA pointing algorithm and demonstrate its jitter mitigation capabilities.

Bourkland, Kristin L.↗

BLOOD-BASED MULTI-SCALE MODEL FOR CANCER RISK FROM GCR IN GENETICALLY DIVERSE POPULATIONS

OBJECTIVES AND METHODS This project addresses the challenge of understanding and predicting individual radiation sensitivity by integrating genetics, demographics and biomarker characteristics across species (mice and humans). We hypothesize that ex vivo DNA repair response to GCR components is a central determinant of cancer risk from space radiation and can serve as a biomarker of radiation risk in combination with genetics. Automated image quantification of 53BP1+ radiation-induced foci (RIF) during the first 4-48 h post-irradiation was performed as a function of dose and LET in non-immortalized primary skin fibroblasts derived from 76 mice across 15 strains (5 inbred reference strains and 10 collaborative-cross strains) exposed to X rays (0.1, 1 and 4 Gy), 350 MeV/n 40Ar and 600 MeV/n 56Fe (1.1 and 3 particles/100μm2), as well as in peripheral blood mononuclear cells (PBMCs) from 768 healthy donors (matched ethnicity, 50/50 male/female, 18-70 years old) exposed to gamma rays (0.1 and 1 Gy), 350 MeV/n 28Si, 350 MeV/n 40Ar and 600 MeV/n 56Fe (1.1 and 3 particles/100μm2). QUANTIFICATION OF 53BP1+ FOCI IN VITRO AND ASSOCIATIONS TO IN VIVO RADIATION SUSCEPTIBILITY IN 15 MOUSE STRAINS We reported in vitro repair kinetic and repairable fractions of RIF for the 15 mouse strains and introduced a mathematical model for RIF as a function of time, dose and LET. We noted that the metabolic activity of cells modulates the RIF response, and we introduced the open access tool terRIFic (Tool for Enhanced Results of RIF In Cells, https://radbiolab.shinyapps.io/terrific/) to correct for such bias using confluence level. Notably, at 4h post-irradiation, RIF/Gy decreased with dose or LET: as the dose or LET increases, so does the proximity of DNA double-strand-breaks (DSB) and our data suggest that proximal DSBs are brought together inside isolated RIF for repair. The RIF/Gy trend was inverted at 24h, suggesting RIF with high DSB content are more difficult to repair. We showed that in vitro metrics correlate with in vivo measurements in the same 15 mouse strains, such as survival levels of immune cells or spontaneous cancer incidence, suggesting a relationship between the efficiency of DSB repair and cancer risk or radiation toxicity. In addition to the efficiency of repair and persistent RIF, the amount of spontaneous foci before irradiation was also found to be strain dependent. Finally, we performed genome-wide association study in the same 15 mouse strains using all RIF phenotypes measured in vitro, identifying genes of interest and validating RIF as an ideal biomarker for individual radiation sensitivity. BASELINE 53BP1+ FOCI PREDICTS INDIVIDUAL HUMAN RESPONSE TO GCR COMPONENTS Based on the analysis of radiation responses of 576 donor PBMCs (using quantification of 53BP1+ foci, oxidative stress and cell death), we observed a wide variability of subject- and LET-dependent radiation responses, with radiation-induced DNA repair foci increasing with LET, though oxidative stress being notably reduced by high-LET irradiation, potentially due to a switch between hydrogen peroxide and oxygen radical-based mechanisms. We identified a relationship between few spontaneous DNA foci at baseline and increased DNA repair after irradiation, accompanied by an alteration in immunoregulatory cytokine secretion, which might be adapted as biomarkers to predict ionizing radiation sensitivity. Among demographic variables, only latent cytomegalovirus infection and age were predictive of high baseline foci formation. Finally, we have performed low-throughput whole genome sequencing of all samples and are currently in the process of identifying the genes and pathways associated with low and high-LET ionizing radiation sensitivity in humans.

53BP1↗

Fast Plasma Investigation for MMS: Simulation of the Burst Triggering System

The Magnetospheric Multiscale (MMS) mission will study small-scale reconnection structures and their rapid motions from closely spaced platforms using instruments capable of high angular, energy, and time resolution measurements. To meet these requirements, the Fast Plasma Instrument (FPI) consists of eight (8) identical half top-hat electron sensors and eight (8) identical ion sensors and an Instrument Data Processing Unit (IDPU). The sensors (electron or ion) are grouped into pairs whose 6 degree x 180 degree fields-of-view (FOV) are set 90 degrees apart. Each sensor is equipped with electrostatic aperture steering to allow the sensor to scan a 45 degree x 180 degree fan about the its nominal viewing (0 deflection) direction. Each pair of sensors, known as the Dual Electron Spectrometer (DES) and the Dual Ion Spectrometer (DIS), occupies a quadrant on the MMS spacecraft and the combination of the eight electron/ion sensors, employing aperture steering, image the full-sky every 30-ms (electrons) and 150-ms (ions), respectively. To probe the diffusion regions of reconnection, the highest temporal/spatial resolution mode of FPI results in the DES complement of a given spacecraft generating 6.5-Mb (raised dot) per second of electron data while the DIS generates 1.1-Mb (raised dot) per second of ion data yielding an FPI total data rate of 6.6-Mb (raised dot) per second. The FPI electron/ion data is collected by the IDPU then transmitted to the Central Data Instrument Processor (CIDP) on the spacecraft for science interest ranking. Only data sequences that contain the greatest amount of temporal/spatial structure will be intelligently down-linked by the spacecraft. This requires a data ranking process known as the burst trigger system. The burst trigger system uses pseudo physical quantities to approximate the local plasma environments. As each pseudo quantity will have a different value, a set of two scaling factors is employed for each pseudo term. These pseudo quantities are then combined at the instrument, spacecraft, and observatory level leading to a final ranking of data based on expected scientific interest. Here, we present simulations of the fixed point burst trigger system for the FPI. A variety of data sets based on previous mission data as well as analytical formulations are tested. Comparisons of floating point calculations versus the fixed point hardware simulation are shown. Analysis of the potential sources of error from overflows, quantization, etc. are examined and mitigation methods are presented. Finally a series of calibration curves are presented, showing the expected error in pseudo quantities based solely on the scale parameters chosen and the expected data range. We conclude with a presentation of the current base-lined FPI burst trigger approach.

Barrie, A. C.↗

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗