Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Development assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 577 records · Page 32

Risk-Significant Adverse Condition Awareness Strengthens Assurance of Fault Management Systems

As spaceflight systems increase in complexity, Fault Management (FM) systems are ranked high in risk-based assessment of software criticality, emphasizing the importance of establishing highly competent domain expertise to provide assurance. Adverse conditions (ACs) and specific vulnerabilities encountered by safety- and mission-critical software systems have been identified through efforts to reduce the risk posture of software-intensive NASA missions. Acknowledgement of potential off-nominal conditions and analysis to determine software system resiliency are important aspects of hazard analysis and FM. A key component of assuring FM is an assessment of how well software addresses susceptibility to failure through consideration of ACs. Focus on significant risk predicted through experienced analysis conducted at the NASA Independent Verification & Validation (IV&V) Program enables the scoping of effective assurance strategies with regard to overall asset protection of complex spaceflight as well as ground systems. Research efforts sponsored by NASAs Office of Safety and Mission Assurance (OSMA) defined terminology, categorized data fields, and designed a baseline repository that centralizes and compiles a comprehensive listing of ACs and correlated data relevant across many NASA missions. This prototype tool helps projects improve analysis by tracking ACs and allowing queries based on project, mission type, domain/component, causal fault, and other key characteristics. Vulnerability in off-nominal situations, architectural design weaknesses, and unexpected or undesirable system behaviors in reaction to faults are curtailed with the awareness of ACs and risk-significant scenarios modeled for analysts through this database. Integration within the Enterprise Architecture at NASA IV&V enables interfacing with other tools and datasets, technical support, and accessibility across the Agency. This paper discusses the development of an improved workflow process utilizing this database for adaptive, risk-informed FM assurance that critical software systems will safely and securely protect against faults and respond to ACs in order to achieve successful missions.

IV&V↗

Agile Approach to Assuring the Safety-Critical Embedded Software for NASA's Orion Spacecraft

Human-rated missions like those in NASA's Orion Program continue to grow in complexity. The role of software in achieving ambitious mission objectives has expanded dramatically in the last few decades. Assuring the safety and performance of the embedded flight software is quickly growing beyond the reach of traditional methods and resource levels. The methods used to build these software-dominant systems evolve in an on-going attempt to keep pace with the scope of our ambitions. Agile software development is now commonplace. The long timelines and large batches of work associated with traditional methods are being replaced by rapid delivery of small increments _ as system capabilities are realized in waves. Assurance of these critical software capabilities must therefore conquer an ever-expanding frontier of challenges, and do so with an approach matched to the evolving development methods. This paper recounts the journey of the Orion Independent Verification and Validation (IV&V) team as we addressed this dynamic environment. Widening our aperture to encompass a dramatically larger mission scope, while adjusting our cadence to synchronize with the rapid pace of agile software development, a new approach to IV&V is emerging. This approach is characterized by a sharper focus on mission capabilities, matched with a method to dynamically _follow the risk' as the IV&V team delivers more compelling assurance data in waves. Traditional methods prevalent in IV&V tend to scope the work using artifacts of the development process as they evolve from preliminary to final versions, and the pace of delivery was synchronized with the development timelines prevalent in the waterfall lifecycle. That more static approach is out of phase with the demands of the new environment. Scoping work according to the critical capabilities of the system (rather than artifacts of development) and synchronizing with the rapid pace of agile development, we are moving toward more effective parity with the demands of the environment. We explain the concrete steps we took, the principles that motivated our choices, and the results we have achieved to date.

Capability based assurance↗

To Produce Nutrients for Plant Growth

On July 1, 1979 a new research program entitled "Development of a Prototype Experiment for Treating CELSS and PCELSS Wastes to Produce Nutrients for Plant Growth" was undertaken by the Massachusetts Institute of Technology and the Georgia Institute of Technology under grant from the National Aeronautics and Space Administration's Ames Research Center. The program was designed to be completed over a five-year period, with the work divided into two phases. Phase I covers approximately two years and involves the development of necessary facilities, chemical methodologies and models to allow meaningful experiments during Phase II, which will involve interfacing waste oxidation with plant growth. Homogeneous samples of freeze-dried human feces and urine have been prepared to assure comparability of results among various CELSS waste treatment research groups. A model of food processing wastes within a PCELSS was developed, and an initial batch of waste was prepared. An automated gas chromatographic system to analyze oxidizer effluents was designed and is operational. A state-of-the-art quantitative elemental analysis capability, built around inductively coupled plasma emission spectroscopy and atomic absorption spectroscopy using electrothermal atomization, has been demonstrated. A continuous flow wet oxidation system was constructed and is now operational.

Michael Modell↗

Reliability-Aware Requirements Development for Autonomy Software

Autonomy is the ability of a system to make decisions and take actions in the presence of uncertainty. Validating autonomy, therefore, is a matter of validating that the system makes intelligent decisions even when there might be discrepancies between the observed and the expected state of the world as well as when the possible outcome of each of the possible courses of action is uncertain. During the requirements engineering phase, the functions, including those that are required to be autonomous and their expected behavior are specified. However, in the case of autonomous software system, it is challenging to specify all possible scenarios that the software may encounter. Additionally, since autonomous behaviors cannot always be fully predetermined, it is difficult to reason about their completeness and correctness. While these challenges are also faced with non-autonomous system, they are more prevalent for autonomous system due to their complexity and emergent behavior. Our efforts have been three-fold. On one hand, we have developed a goal-based method for requirements decomposition. We have embedded this approach into a higher-level systems engineering framework and then developed methods for decision and reliability analysis within this framework. And finally, we use simulation analysis to validate the more theoretical methods and provide a feedback mechanism. The decision analysis approach (DA) helps in identifying and mitigating the run-time risks, by bringing to the forefront the uncertainties, decisions, interactions, and other factors that may cause autonomous software to make erroneous decisions. The DA framework is used to quantify, for each decision that the software can make, failure risk due to uncertainties. The information about the key decisions and circumstances that can cause autonomous system to make incorrect decisions are used to generate test scenarios to be run in a simulator to ensure that the system can handle error-prone circumstances. The results or outcomes from decisions, based on the simulated scenarios, can then be leveraged to further gain insight of the assured system. We combine a goal-based approach with simulation analysis to facilitate requirements development for autonomous systems and further provide a method for run-time systems level reliability considerations during the autonomous software development process. The DA and the reliability analysis methods provide a formalism for the consideration of uncertainty in the run time decision-making process for autonomous software. This formalism considers the uncertainty involved in the outcome of different courses of action, in terms of performance and cost, as well as a method to consider the system level reliability implications. System level reliability considerations for autonomous software decision making contribute to the satisfaction of the system level goals over the lifecycle of a given mission. We demonstrate our approach using a hypothetical rover path planning example. The requirements for our rover simulator are based on existing literature about Mars rovers and lessons learned from real world observations at JPL. The specifics of the autonomy design for the Mars rovers, that have not been previously cleared for external release, are not used for our demonstrations.

Lindvall, Mikael↗

NASA X-34 Technology in Motion

The X-34 technology development program is a joint industry/government project to develop, test, and operate a small, fully-reusable hypersonic flight vehicle. The objective is to demonstrate key technologies and operating concepts applicable to future reusable launch vehicles. Integrated in the vehicle are various systems to assure successful completion of mission objectives, including the Main Propulsion System (MPS). NASA-Marshall Space Flight Center (MSFC) is responsible for developing the X-34's MPS including the design and complete build package for the propulsion system components. The X-34 will be powered by the Fastrac Engine, which is currently in design and development at NASA-MSFC. Fastrac is a single-stage main engine, which burns a mixture of liquid oxygen (LOX) and kerosene(RP-1). The interface between the MPS and Fastrac engine are critical for proper system operation and technologies applicable to future reusable launch vehicles. Deneb's IGRIP software package with the Dynamic analysis option provided a key tool for conducting studies critical to this interface as well as a mechanism to drive the design of the LOX and RP-1 feedlines. Kinematic models were created for the Fastrac Engine and the feedlines for various design concepts. Based on the kinematic simulation within Envision, design and joint limits were verified and system interference controlled. It was also critical to the program to evaluate the effect of dynamic loads visually, providing a verification tool for dynamic analysis and in some cases uncovering areas that had not been considered. Deneb's software put the X-34 technology in motion and has been a key factor in facilitating the strenuous design schedule.

Beech, Geoffrey↗

Radiation Data Collection and Risk Assessment

In order to advance the approach for parts assurance in the space community to the current decade and to remain nimble for the future, NASA GSFC, in collaboration with the Aerospace Corporation’s Mission Success Improvement Workshop and broad space community participation, has been reviewing and categorizing 40 years’ worth of on-orbit anomaly data to support broad assessments of radiation-related risk and the development of tools to rigorously assess risk in general project situations. Part of the changing approach in parts assurance involves phasing in the use of COTS parts (or as preferred, alternate grade parts). This talk will convey some of the early findings of the effort, including the fact that expanded use of COTS parts does not increase radiation-related risk, while also pointing out that a very small percentage of parts in a typical parts list are actives and thus require radiation assessment. These are important because they remove radiation as a factor in broad consideration in the use of COTS, without diminishing the importance of addressing the effects of radiation in space.

risk↗

Engineering the Lidar In-space Technology Experiment

The Lidar In-space Technology Experiment (LITE) is being developed by NASA for flight on the Space Shuttle in early 1994. A discussion of the NASA four-phase design process is followed by a short history of the experiment heritage. The instrument is then described at the subsystem level from an engineering point of view, with special emphasis on the laser and the receiver. Some aspects of designing for the space environment are discussed, as well as the importance of contamination control, and product assurance. Finally, the instrument integration and test process is described and the current status of the instrument development is given.

Couch, Richard H.↗

Structural technologies - Systems challenges and NASA thrusts.

Some significant areas of emphasis in the NASA airframes structures program are highlighted. The topics treated include automated analysis and design processes, building confidence in advanced composites, improving the technology base for future supersonic and hypersonic vehicles, validation of concepts for active control systems, development of predictive methods for aircraft loads and aeroelasticity, and generation of methodology to assure structural integrity as a part of the design process. An integrated long-range program for fatigue and fracture is recommended.

Brooks, G. W.↗

The Deep Space Network

The primary objectives during this portion of the extended mission were to assure survival of the spacecraft for a third Mercury encounter through conservation of attitude control gas and to conduct trajectory correction maneuvers (TCMs) as necessary to target the spacecraft for a solar occultation zone pass. Special support activities included TCMs 6 and 7 conducted on October 30, 1974 and on February 12-13, 1975, respectively. This period also saw the DSN interface organization involved in (1) the allocation of sufficient coverage to assure accurate orbit determination solutions, (2) monitoring of DSN implementation for Viking to assure maintenance of compatible interfaces and capabilities required for Mariner 10, and (3) the development of encounter coverage, sequences, and readiness test plans.

Source record↗

Space station System Engineering and Integration (SE and I). Volume 2: Study results

A summary of significant study results that are products of the Phase B conceptual design task are contained. Major elements are addressed. Study results applicable to each major element or area of design are summarized and included where appropriate. Areas addressed include: system engineering and integration; customer accommodations; test and program verification; product assurance; conceptual design; operations and planning; technical and management information system (TMIS); and advanced development.

Source record↗

Analytical determination of critical crack size in solar cells

Although solar cells usually have chips and cracks, no material specifications concerning the allowable crack size on solar cells are available for quality assurance and engineering design usage. Any material specifications that the cell manufacturers use were developed for cosmetic reasons that have no technical basis. Therefore, the Applied Solar Energy Corporation (ASEC) has sponsored a continuing program for the fracture mechanics evaluation of GaAs. Fracture mechanics concepts were utilized to develop an analytical model that can predict the critical crack size of solar cells. This model indicates that the edge cracks of a solar cell are more critical than its surface cracks. In addition, the model suggests that the material specifications on the allowable crack size used for Si solar cells should not be applied to GaAs solar cells. The analytical model was applied to Si and GaAs solar cells, but it would also be applicable to the semiconductor wafers of other materials, such as a GaAs thin film on a Ge substrate, using appropriate input data.

Chen, C. P.↗

Product specification documentation standard and Data Item Descriptions (DID). Volume of the information system life-cycle and documentation standards, volume 3

This is the third of five volumes on Information System Life-Cycle and Documentation Standards which present a well organized, easily used standard for providing technical information needed for developing information systems, components, and related processes. This volume states the Software Management and Assurance Program documentation standard for a product specification document and for data item descriptions. The framework can be applied to any NASA information system, software, hardware, operational procedures components, and related processes.

Callender, E. David↗

Control/structure interaction during Space Station Freedom-Orbiter berthing

The berthing maneuver is essential for the construction and assembly of Space Station Freedom (SSF) and has a direct effect on the SSF assembly build up and SSF/Orbiter operations. The effects of flexible body dynamics coupled with the available control system may impose new requirements on the maneuver. The problem is further complicated by the effect of the SSF control system on the Shuttle Remote Manipulator System (SRMS). These effects will play a major role in the development of operational requirements which need to be identified and validated in order to assure total safety and maneuver execution during SSF construction. This paper presents the results of ongoing studies to investigate the Control/Structure Interaction (CSI) during the berthing operations. The problem is formulated in terms of multi-flex body equations of motion for SSF and the SRMS and on-orbit flight control systems for the SRMS and the SSF, which includes the Control Moment Gyro (CMG) and Reaction Control System (RCS) Attitude Control Systems (ACS). The SSF control system designs are based on the Preliminary Design Review (PDR) version of the Honeywell design. The simulation tool used for the analysis is briefly described and the CSI results are presented for given berthing scenarios.

Hua, Tuyen↗

Measurement of thermoelectric inhomogeneity of thermocouples

In a thermocouple probe that has significantly inhomogeneous legs, the relationship between emf and temperature is indefinite and depends on temperature distribution along the circuit. An inhomogeneous thermocouple cannot be calibrated to arbitrarily small uncertainty. Therefore, testing for inhomogeneities is a necessary preliminary to meaningful calibration. As most significant inhomogeneity that does occur is introduced during use (and sometimes during calibration) a post-test inhomogeneity measurement should also be employed to detect degradation that might have substantially affected the data. This paper presents a practical test method that is being developed for the observation, interpretation, and application of thermoelectric inhomogeneity as a routine quality assurance measurement that is an essential complement to traditional sheathed thermocouple calibration.

Reed, R. P.↗

Software Engineering Guidebook

The Software Engineering Guidebook describes SEPG (Software Engineering Process Group) supported processes and techniques for engineering quality software in NASA environments. Three process models are supported: structured, object-oriented, and evolutionary rapid-prototyping. The guidebook covers software life-cycles, engineering, assurance, and configuration management. The guidebook is written for managers and engineers who manage, develop, enhance, and/or maintain software under the Computer Software Services Contract.

Connell, John↗

Continuous Risk Management at NASA

NPG 7120.5A, "NASA Program and Project Management Processes and Requirements" enacted in April, 1998, requires that "The program or project manager shall apply risk management principles..." The Software Assurance Technology Center (SATC) at NASA GSFC has been tasked with the responsibility for developing and teaching a systems level course for risk management that provides information on how to comply with this edict. The course was developed in conjunction with the Software Engineering Institute at Carnegie Mellon University, then tailored to the NASA systems community. This presentation will briefly discuss the six functions for risk management: (1) Identify the risks in a specific format; (2) Analyze the risk probability, impact/severity, and timeframe; (3) Plan the approach; (4) Track the risk through data compilation and analysis; (5) Control and monitor the risk; (6) Communicate and document the process and decisions. This risk management structure of functions has been taught to projects at all NASA Centers and is being successfully implemented on many projects. This presentation will give project managers the information they need to understand if risk management is to be effectively implemented on their projects at a cost they can afford.

Hammer, Theodore F.↗