Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 595 records · Page 33

Improved ASTM G72 Test Method for Ensuring Adequate Fuel-to-Oxidizer Ratios

The ASTM G72/G72M-15 Standard Test Method for Autogenous Ignition Temperature of Liquids and Solids in a High-Pressure Oxygen-Enriched Environment is currently used to evaluate materials for the ignition susceptibility driven by exposure to external heat in an enriched oxygen environment. Testing performed on highly volatile liquids such as cleaning solvents has proven problematic due to inconsistent test results (non-ignitions). Non-ignition results can be misinterpreted as favorable oxygen compatibility, although they are more likely associated with inadequate fuel-to-oxidizer ratios. Forced evaporation during purging and inadequate sample size were identified as two potential causes for inadequate available sample material during testing. In an effort to maintain adequate fuel-to-oxidizer ratios within the reaction vessel during test, several parameters were considered, including sample size, pretest sample chilling, pretest purging, and test pressure. Tests on a variety of solvents exhibiting a range of volatilities are presented in this paper. A proposed improvement to the standard test protocol as a result of this evaluation is also presented. Execution of the final proposed improved test protocol outlines an incremental step method of determining optimal conditions using increased sample sizes while considering test system safety limits. The proposed improved test method increases confidence in results obtained by utilizing the ASTM G72 autogenous ignition temperature test method and can aid in the oxygen compatibility assessment of highly volatile liquids and other conditions that may lead to false non-ignition results.

Juarez, Alfredo↗

Improved ASTM G72 Test Method for Ensuring Adequate Fuel-to-Oxidizer Ratios

The ASTM G72/G72M-15 Standard Test Method for Autogenous Ignition Temperature of Liquids and Solids in a High-Pressure Oxygen-Enriched Environment is currently used to evaluate materials for the ignition susceptibility driven by exposure to external heat in an enriched oxygen environment. Testing performed on highly volatile liquids such as cleaning solvents has proven problematic due to inconsistent test results (non-ignitions). Non-ignition results can be misinterpreted as favorable oxygen compatibility, although they are more likely associated with inadequate fuel-to-oxidizer ratios. Forced evaporation during purging and inadequate sample size were identified as two potential causes for inadequate available sample material during testing. In an effort to maintain adequate fuel-to-oxidizer ratios within the reaction vessel during test, several parameters were considered, including sample size, pretest sample chilling, pretest purging, and test pressure. Tests on a variety of solvents exhibiting a range of volatilities are presented in this paper. A proposed improvement to the standard test protocol as a result of this evaluation is also presented. Execution of the final proposed improved test protocol outlines an incremental step method of determining optimal conditions using increased sample sizes while considering test system safety limits. The proposed improved test method increases confidence in results obtained by utilizing the ASTM G72 autogenous ignition temperature test method and can aid in the oxygen compatibility assessment of highly volatile liquids and other conditions that may lead to false non-ignition results.

Juarez, Alfredo↗

AQUIFER Nano-Electrofuel Energy Economy and Powered Aircraft Operations

The Aqueous, QUick-charging battery Integration For Electric flight Research project is explained and the major subsystems are described, including nano-electric fluid, rim-driven motors, and integration concepts. The nano-electric fluid concept is a new type of aqueous flow battery that could reduce or retire the fire and explosion hazards of conventional batteries and fuel cells. The nano-electric fluid itself could enable energy storage and increased available energy per fuel weight ratios. The rim-driven motor is being developed to improve propulsion system safety and stability and to reduce noise. The rim-driven motor concept could enable motors that are more efficient both electrically and aerodynamically. The Energy Economy of the project concept is presented as a potential renewable or green energy sustainment for utilizing in-place infrastructure. The nano-electric fluid energy charge-use-recharge cycle is presented using renewable energy input from solar, wind, and hydroelectricity. Powered aircraft operations are presented, and the logistics of the new nano-electric fluid technology are explored. Powered aircraft operations topics include weight and balance, fueling, recharging, safety, and derivative considerations.

Lechniak, Jason A.↗

NASA quality assurance in an MBSE world

We explore the impact and consequences of the MBSE Value items discussed above and how they impact the disciplines of quality assurance, reliability and maintainability, system safety, and software assurance. We provide insight into how the MBSE modeling tools can be used to define S&MA processes (ideally as a result of Use Case [1] elaboration of processes represented in MagicDraw®), produce S&MA products (ViewEditor output of various items), and represent S&MA disciplines (S&MA inside of MagicDraw). We also provide insight into the degree to which some elements can be directly integrated into a SysML® model and when, as often happens, an interface to some external source must be provided.

Evans, John W.↗

Alternative Treatment of Crew Wastewater Using a Hybrid Membrane Technology

Environmental Control and Life Support Systems (ECLSS) of future long-duration, deep-space human exploration missions should treat all “waste” streams for recovery and ideally by near closed-loop. Onboard the International Space Station (ISS), the Water Recovery System (WRS) does not treat urine and gray water to recover elements beyond water and utilizes physical-chemical technologies that operate with single-use and hazardous consumables. Urine offers a renewable source of nitrogen and other trace elements that can support sustainable crop production. In response to the lack of flight ready technologies capable of treating urine and gray water for water and nutrient recovery, a Suspended Aerobic Membrane Bioreactor (SAMBR) is under development between the University of South Florida and Kennedy Space Center. SAMBR is optimized for an early planetary base/partial gravity habitat and serves as a hybrid alternative to currently utilized urine treatment technologies and support closing the resource recovery loop. With its ECLSS minded form factor and modular design, SAMBR’s operation can be customized to suit the treatment objectives (i.e., nitrogen conversion) at that time. This proceeding presents preliminary research pertaining to: 1) design challenges in maximizing hydraulic throughput while minimizing mass and volume of the assembly; 2) capabilities for treating high nitrogen waste under steady and non-steady state conditions; and 3) measured performance parameters such chemical oxygen demand (COD), nitrogen conversion, nutrients, turbidity, and system throughput. Future research and development pertaining to further optimization on system safety, reliability, and expanded treatment capabilities will also be presented.

Membrane Filtration↗

Survey Development and Initial Data: Flight Context and Pilot Techniques in Everyday Flights

The aviation industry is recognizing that flight crews routinely contribute to system safety in ways that go beyond adherence to standard operating procedures (SOPs). Our research goals were to explore a) whether a survey could shed light on pilots' contributions to adaptation and resilience in everyday flights and b) relevant assessment methods. The survey focused on challenges faced by pilots in normal operations, and on the ways that pilots anticipate and monitor those challenges. We collected responses concerning revenue flights from two pilot groups; one group also provided responses concerning a simulated scenario. The results indicated that relatively few flights proceeded exactly as in the original flight plan. Pilots routinely anticipated and adapted to changing circumstances. We discuss some design and assessment challenges encountered for a survey on this topic, we provide 5 approaches to assessment, and we present example findings as illustrations. We hope assessment methods such as these will lead to useful surveys of resilience in flight.

pilot behavior↗

Community Noise Impact of Urban Air Mobility Vehicle Operations

Advanced air mobility (AAM) missions, carried out by electrically driven air vehicles, are characterized by ranges of less than about 300-500 nm (about 500-900 km) and include both rural and urban operations. The missions may include public transportation, cargo delivery, air taxi, and emergency response. While the urban air mobility (UAM) subset of AAM is projected to have high economic benefit, it is also the most difficult to develop because it must overcome many barriers, including those associated with the airspace system, safety, and community noise. This presentation focuses on the utilization of UAM source noise data for assessment of community noise impact. Although a limited number of acoustic flight measurement campaigns have been made to characterize the source noise of prototype and preproduction UAM aircraft, prediction-based approaches are primarily considered herein. Following conceptual design, in which the vehicle is appropriately sized for its intended mission, a comprehensive analysis must be performed for a range of operating conditions spanning the flight envelope to determine the corresponding configurations of the vehicle, that is, the trimmed states. For each trimmed state, the noise produced by each source, for example, steady and unsteady rotor noise, may be computed and so-called source noise (hemi)spheres generated. These source data may subsequently be used in various community noise impact analyses. Several use cases are presented including those supporting noise certification and those for auralizations that may, in turn, be used as part of a perception-influenced design process. Land use planning tools for generating noise exposure maps, including those using simulation and integrated modeling approaches, are also presented. Finally, use cases supporting development of low noise flight operations, including an acoustic flight simulator and acoustically aware flight control, are considered.

aircraft community noise↗

Control Effectiveness: Metric Development and Application to Resilient Lunar Habitat Design

System safety engineering in its bare essence involves identifying, assessing, and mitigating, or controlling, hazards. Appropriate safety controls are selected using hazard reduction precedence principles, prior experience, or by assessing their impact on residual risk (together with other factors like cost). We propose a control effectiveness metric as one way to systematically and consistently evaluate potential safety controls individually and thereby facilitate selecting a shortlist of potential controls for subsequent integrated evaluation. The control effectiveness metric considers a safety control’s availability when needed, the probability that its design is adequate in addressing the targeted hazard, the probability that the design will be implemented as intended, and the relationship between the time it takes for the safety control to address its target hazard and the time before the hazard propagates. We demonstrated the use of our metric on a lunar habitat design using a physics-based habitat simulator. High control effectiveness and safety controls result in a habitat with high resilience, while low control effectiveness results in lower resilience.

Rashi Jain↗

Evaluating Energy Absorption Methods for Integrated Composite Seat Designs

Composite materials have become ubiquitous in the aerospace industry due to their exceptionally light weight and high strength characteristics, as well as their unique ability to be engineered and tailored to meet specific loading conditions and performance requirements. These advanced materials offer superior strength-to-weight ratios compared to traditional metallic materials, making them particularly valuable in weight-critical aerospace applications where every pound saved translates to improved efficiency and performance. In currently operating fleets of commercial and military aircraft, composite materials have been successfully applied to critical structural components, including primary load-bearing elements such as the fuselage sections and flooring structures, which must withstand significant in-flight loads and provide passenger safety. Additionally, these materials have been specifically tailored and optimized for aerodynamic components such as wings and tail assemblies, where their ability to be molded into complex shapes while maintaining structural integrity is particularly advantageous. The application of composite materials extends beyond primary structural elements into the realm of internal cabin components, most notably in innovative seat designs where weight reduction and structural integration are paramount concerns. Modern composite seat structures can be designed to integrate multiple functions, including structural support, comfort features, and safety systems, all while maintaining the lightweight characteristics essential for aircraft performance.

Digital image correlation↗

Safety of liquid propulsion systems for STS payloads

STS payload safety requirements for Earth-storable liquid propulsion systems are reviewed with respect to applicable safety documents. The effect of normal flight and emergency landing/abort launch profiles on propulsion system design is delineated. Spacecraft studied include Earth satellites, interplanetary spacecraft, and orbit transfer vehicles. Safety considerations for monopropellant (hydrazine), bipropellant (nitrogen tetroxide/monomethyl hydrazine), and ion (mercury) propulsion systems are described. Safety requirements for specific components of propulsion systems are reported. Analysis techniques for STS payload fracture control requirements for pressure vessels and critical support structure are discussed.

Lewis, J. C.↗

Optimal Design of Integrated Systems Health Management (ISHM) Systems for improving safety in NASA's Exploration Vehicles: A Two-Level Multidisciplinary Design Approach

In this paper, a two-level multidisciplinary design approach is described to optimize the effectiveness of ISHM s. At the top level, the overall safety of the mission consists of system-level variables, parameters, objectives, and constraints that are shared throughout the system and by all subsystems. Each subsystem level will then comprise of these shared values in addition to subsystem-specific variables, parameters, objectives and constraints. A hierarchical structure will be established to pass up or down shared values between the two levels with system-level and subsystem-level optimization routines.

Tumer, Irem↗

Cascade Distillation System Design for Safety and Mission Assurance

Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible." To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) opted a development approach that explicitely incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 prelimnary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigative strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.

Sargusingh, Miriam J.↗

Cascade Distillation System Design for Safety and Mission Assurance

Per the NASA Human Health, Life Support and Habitation System Technology Area 06 report "crewed missions venturing beyond Low-Earth Orbit (LEO) will require technologies with improved reliability, reduced mass, self-sufficiency, and minimal logistical needs as an emergency or quick-return option will not be feasible".1 To meet this need, the development team of the second generation Cascade Distillation System (CDS 2.0) chose a development approach that explicitly incorporate consideration of safety, mission assurance, and autonomy. The CDS 2.0 preliminary design focused on establishing a functional baseline that meets the CDS core capabilities and performance. The critical design phase is now focused on incorporating features through a deliberative process of establishing the systems failure modes and effects, identifying mitigation strategies, and evaluating the merit of the proposed actions through analysis and test. This paper details results of this effort on the CDS 2.0 design.

Sarguisingh, Miriam↗

L-Band Digital Aeronautical Communications System Engineering - Initial Safety and Security Risk Assessment and Mitigation

This document is being provided as part of ITT's NASA Glenn Research Center Aerospace Communication Systems Technical Support (ACSTS) contract NNC05CA85C, Task 7: "New ATM Requirements--Future Communications, C-Band and L-Band Communications Standard Development." ITT has completed a safety hazard analysis providing a preliminary safety assessment for the proposed L-band (960 to 1164 MHz) terrestrial en route communications system. The assessment was performed following the guidelines outlined in the Federal Aviation Administration Safety Risk Management Guidance for System Acquisitions document. The safety analysis did not identify any hazards with an unacceptable risk, though a number of hazards with a medium risk were documented. This effort represents a preliminary safety hazard analysis and notes the triggers for risk reassessment. A detailed safety hazards analysis is recommended as a follow-on activity to assess particular components of the L-band communication system after the technology is chosen and system rollout timing is determined. The security risk analysis resulted in identifying main security threats to the proposed system as well as noting additional threats recommended for a future security analysis conducted at a later stage in the system development process. The document discusses various security controls, including those suggested in the COCR Version 2.0.

Zelkin, Natalie↗

Security for safety critical space borne systems

The Space Station contains safety critical computer software components in systems that can affect life and vital property. These components require a multilevel secure system that provides dynamic access control of the data and processes involved. A study is under way to define requirements for a security model providing access control through level B3 of the Orange Book. The model will be prototyped at NASA-Johnson Space Center.

Legrand, Sue↗

A Comparison of Bus Architectures for Safety-Critical Embedded Systems

We describe and compare the architectures of four fault-tolerant, safety-critical buses with a view to deducing principles common to all of them, the main differences in their design choices, and the tradeoffs made. Two of the buses come from an avionics heritage, and two from automobiles, though all four strive for similar levels of reliability and assurance. The avionics buses considered are the Honeywell SAFEbus (the backplane data bus used in the Boeing 777 Airplane Information Management System) and the NASA SPIDER (an architecture being developed as a demonstrator for certification under the new DO-254 guidelines); the automobile buses considered are the TTTech Time-Triggered Architecture (TTA), recently adopted by Audi for automobile applications, and by Honeywell for avionics and aircraft control functions, and FlexRay, which is being developed by a consortium of BMW, DaimlerChrysler, Motorola, and Philips.

Rushby, John↗

Microbial Food Safety in Space Production Systems

While traveling to deep space is difficult for many reasons, food is a crucial one. Round-trip Mars mission scenarios last 3 years, demanding food with a shelf-life of 5 years; this means that feeding human crew sustainably for long-duration missions beyond low Earth orbit (LEO) will ultimately lead to a paradigm shift away from the current Earth-based food production system, which depends upon storing and transporting prepackaged foods, and toward bio-regenerative production of food in space. Pharmaceuticals and nutritional supplements face similar challenges. Moreover, the methods we currently use to detect dangerous microbes in food require sample return to Earth, a situation not viable for deep-space missions. While the science behind generating foods and bioproducts is covered by other white papers, in this paper we discuss a crucial gap uniting all of them: how to ensure that such products are free of unwanted microbial contamination and safe for crew to consume. Because Earth-based food safety systems cannot be directly applied in space, safety assurance is currently a critical bottleneck in the space production of food and other bioproducts. Future sustainable deep-space missions will require NASA to devote more resources in the coming decade to understanding the biological and physical science principles underlying microbial food safety in space, and to developing efficient, reliable methods in this area.

microbiology↗

High-Intensity Radiated Field Fault-Injection Experiment for a Fault-Tolerant Distributed Communication System

Safety-critical distributed flight control systems require robustness in the presence of faults. In general, these systems consist of a number of input/output (I/O) and computation nodes interacting through a fault-tolerant data communication system. The communication system transfers sensor data and control commands and can handle most faults under typical operating conditions. However, the performance of the closed-loop system can be adversely affected as a result of operating in harsh environments. In particular, High-Intensity Radiated Field (HIRF) environments have the potential to cause random fault manifestations in individual avionic components and to generate simultaneous system-wide communication faults that overwhelm existing fault management mechanisms. This paper presents the design of an experiment conducted at the NASA Langley Research Center's HIRF Laboratory to statistically characterize the faults that a HIRF environment can trigger on a single node of a distributed flight control system.

Yates, Amy M.↗