Safety and Certification in Increasingly Autonomous Aviation Systems
Explore the source record for details and available documents.
SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Explore the source record for details and available documents.
The ventilation and fire safety requirements for subway tunnels with dipped profiles between stations as compared to subway tunnels with level profiles were evaluated. This evaluation is based upon computer simulations of a train fire emergency condition. Each of the tunnel configurations evaluated was developed from characteristics that are representative of modern transit systems. The results of the study indicate that: (1) The level tunnel system required about 10% more station cooling than dipped tunnel systems in order to meet design requirements; and (2) The emergency ventilation requirements are greater with dipped tunnel systems than with level tunnel systems.
The National Aeronautics and Space Administration (NASA) Balloon Program technology development efforts are fundamental to improving the capabilities of the balloon systems, better understanding of the flight dynamics, and to support the science missions throughout the next decade. Building on the foundations of the 20-year research and development program, a technology roadmap has been generated which identifies specific areas of interest to NASA and the vision of future developments. The major components of the roadmap are: vehicle systems, ballooncraft systems, operational and safety support systems, and planetary vehicles. Within each of these major components, technologies are targeted that will provide both better understanding and foster advancements. The Program's technology thrust areas are directed both in broad efforts that touch on a number of the major components as well as specific tasks that address elements within a specific component. Advances in vehicle systems have focused on producing better balloon designs. This is being attempted through the use of improved inputs into the ba!loon des@ process. Central to this is an increasing the understanding of materials used to fabricate balloons. Testing techniques have been improved with better bi-axial characterization of the balloon materials. More realistic radiative properties of the balloon films and components have also been made. Analytical assessments of the balloon designs are also key in improving balloon designs. These analytical assessments have been accomplished using improving analysis tools and an increased understanding of the float environment. Details of these improvements will be presented. To help improve the operational and flight safety of the balloons, improved flight performance predictions have been made using new analytical tools as well as incorporating the increased understanding of the float environment. These two have combined to allow for improved post-flight balloon performance correlations. A potential to significantly improve the potential safety of a long duration flight can be accomplished using some form of a trajectory modification system. An overview of the development efforts for a trajectory modification system will be presented. A number of efforts will be presented that are focused on the improvement of the ballooncraft systems. Planetary ballooning activities have benefited from a number of separate but related technology advancements made by the NASA Balloon Program's technology developments. The tools, techniques, and advancements made for balloon design and balloon analysis are directly applicable to the processes to develop planetary balloons for either Mars or Venus. An overview of the NASA Balloon Program's role in these efforts and testing will be presented. The technology roadmap, as well as specific projects and recent advancements, will be presented. This overview will demonstrate the technology advancements made by the NASA Balloon Program are focusing on leading balloon developments into the future.
The Airspace Operations and Safety Program, System-Wide Safety Project /Technical Challenge 2 – Emerging Operations at NASA Langley aims to increase the flight safety of unmanned aerial vehicles (UAV’s) by informing UAV operators of regions of airspace where the radio frequency (RF) power at designated frequencies exceeds threshold values, indicating possible damage or interference with on-board systems. WinProp electromagnetic simulation software, a commercially available ray tracing program, has been implemented to predict radiated power from known RF sources. As a test case, the NextNav geolocation system, with nine transmitters operating at 926.227 MHz, was selected and modeled together with other existing structures at Langley. The radiated power at street level was calculated and compared with measurements taken at street level by a Signal Hound receiver and an Electro-Metrics antenna mounted on a van. The two sets of results generally agreed to within about 5 dB.
A cushion system for use with a child safety seat has a plurality of bladders assembled to form a seat cushion that cooperates with the seat's safety harness. One or more sensors coupled to the safety harness sense tension therein and generate a signal indicative of the tension. Each of the bladders is individually pressurized by a pressurization system to define a support configuration of the seat cushion. The pressurization system is disabled when tension in the safety harness has attained a threshold level.
A cushion system for use with a child safety seat has a plurality of bladders assembled to form a seat cushion that cooperates with the seat's safety harness. One or more sensors coupled to the safety harness sense tension therein and generate a signal indicative of the tension. Each of the bladders is individually pressurized by a pressurization system to define a support configuration of the seat cushion. The pressurization system is disabled when tension in the safety harness has attained a threshold level.
Model-based development tools are increasingly being used for system-level development of safety-critical systems. Architectural and behavioral models provide important information that can be leveraged to improve the system safety analysis process. Model-based design artifacts produced in early stage development activities can be used to perform system safety analysis, reducing costs and providing accurate results throughout the system life-cycle. In this report we describe an extension to the Architecture Analysis and Design Language (AADL) that supports modeling of system behavior under failure conditions. This Safety Annex enables the independent modeling of component failures and allows safety engineers to weave various types of fault behavior into the nominal system model. The accompanying tool support uses model checking to propagate errors from their source to their effect on safety properties without the need to add separate propagation specifications. The tool also captures all minimal set of fault combinations that can cause violation of the safety properties, that can be compared to qualitative and quantitative objectives as part of the safety assessment process. We describe the Safety Annex, illustrate its use with a representative example, and discuss and demonstrate the tool support enabling an analyst to investigate the system behavior under failure conditions.
Machine learning is increasingly being used in safety-critical systems, where the public safety requires a rigorous assurance process. We shall outline how assurance processes work for conventional systems and identify the primary difficulty in applying them to machine learning enabled systems. We will then outline a path forward including identifying where considerable basic research remains
A systems and operational summary of the Titan 3E/Centaur D-1T program is presented which describes vehicle assembly facilities, launch facilities, and management responsibilities, and also provides detailed information on the following separate systems: (1) mechanical systems, including structural components, insulation, propulsion units, reaction control, thrust vector control, hydraulic systems, and pneumatic equipment; (2) astrionics systems, such as instrumentation and telemetry, navigation and guidance, C-Band tracking system, and range safety command system; (3) digital computer unit software; (4) flight control systems; (5) electrical/electronic systems; and (6) ground support equipment, including checkout equipment.
The Twenty-third Annual Software Engineering Workshop (SEW) provided 20 presentations designed to further the goals of the Software Engineering Laboratory (SEL) of the NASA-GSFC. The presentations were selected on their creativity. The sessions which were held on 2-3 of December 1998, centered on the SEL, Experimentation, Inspections, Fault Prediction, Verification and Validation, and Embedded Systems and Safety-Critical Systems.
The National Aeronautics and Space Administration (NASA) Balloon Program has been, and will continue to be, committed to improving the capabilities of balloons to support science missions. Fundamental to vehicle improvement is a program of technology development that will enable improved flight performance throughout the next decade. The program s technology thrust areas include: materials, vehicle design & development, structural analysis, operations & support systems, performance modeling and planetary balloons. Building on the foundations of the 18-year research and development program, a technology roadmap has been generated which identifies specific areas of interest to NASA and the vision of future developments. The major components of the roadmap are: vehicle systems, balloon-craft systems, operational and safety support systems, and planetary vehicles. Current technology activities include nanocomposite balloon films, a new balloon designed to lift 3600 kgs to 36 km, a balloon rotation rate study and Mars pumpkin balloon investigations. The technology roadmap, as well as specific projects and recent advancements, will be presented.
This internship was initially meant to cover the implementation of unit test automation for a NASA ground control project. As is often the case with large development projects, the scope and breadth of the internship changed. Instead, the internship focused on finding and correcting memory leaks and errors as reported by a COTS software product meant to track such issues. Memory leaks come in many different flavors and some of them are more benign than others. On the extreme end a program might be dynamically allocating memory and not correctly deallocating it when it is no longer in use. This is called a direct memory leak and in the worst case can use all the available memory and crash the program. If the leaks are small they may simply slow the program down which, in a safety critical system (a system for which a failure or design error can cause a risk to human life), is still unacceptable. The ground control system is managed in smaller sub-teams, referred to as CSCIs. The CSCI that this internship focused on is responsible for monitoring the health and status of the system. This team's software had several methods/modules that were leaking significant amounts of memory. Since most of the code in this system is safety-critical, correcting memory leaks is a necessity.
This presentation reviews voluntary safety reports received by NASA's Aviation Safety Reporting System pertaining to safety issues related to incorrect part installation.
No abstract provided
For the past 17 years, Professor Leveson and her graduate students have been developing a theoretical foundation for safety in complex systems and building a methodology upon that foundation. The methodology includes special management structures and procedures, system hazard analyses, software hazard analysis, requirements modeling and analysis for completeness and safety, special software design techniques including the design of human-machine interaction, verification, operational feedback, and change analysis. The Safeware methodology is based on system safety techniques that are extended to deal with software and human error. Automation is used to enhance our ability to cope with complex systems. Identification, classification, and evaluation of hazards is done using modeling and analysis. To be effective, the models and analysis tools must consider the hardware, software, and human components in these systems. They also need to include a variety of analysis techniques and orthogonal approaches: There exists no single safety analysis or evaluation technique that can handle all aspects of complex systems. Applying only one or two may make us feel satisfied, but will produce limited results. We report here on a demonstration, performed as part of a contract with NASA Langley Research Center, of the Safeware methodology on the Center-TRACON Automation System (CTAS) portion of the air traffic control (ATC) system and procedures currently employed at the Dallas/Fort Worth (DFW) TRACON (Terminal Radar Approach CONtrol). CTAS is an automated system to assist controllers in handling arrival traffic in the DFW area. Safety is a system property, not a component property, so our safety analysis considers the entire system and not simply the automated components. Because safety analysis of a complex system is an interdisciplinary effort, our team included system engineers, software engineers, human factors experts, and cognitive psychologists.
Habitation systems provide a safe place for astronauts to live and work in space and on planetary surfaces. They enable crews to live and work safely in deep space, and include integrated life support systems, radiation protection, fire safety, and systems to reduce logistics and the need for resupply missions. Innovative health management technologies are needed in order to increase the safety and mission-effectiveness for future space habitats on other planets, asteroids, or lunar surfaces. For example, off-nominal or failure conditions occurring in safety-critical life support systems may need to be addressed quickly by the habitat crew without extensive technical support from Earth due to communication delays. If the crew in the habitat must manage, plan and operate much of the mission themselves, operations support must be migrated from Earth to the habitat. Enabling monitoring, tracking, and management capabilities on-board the habitat and related EVA platforms for a small crew to use will require significant automation and decision support software.Traditional caution and warning systems are typically triggered by out-of-bounds sensor values, but can be enhanced by including machine learning and data mining techniques. These methods aim to reveal latent, unknown conditions while still retaining and improving the ability to provide highly accurate alerts for known issues. A few of these techniques will briefly described, along with performance targets for known faults and failures. Specific system health management capabilities required for habitat system elements (environmental control and life support systems, etc.) may include relevant subsystems such as water recycling systems, photovoltaic systems, electrical power systems, and environmental monitoring systems. Sustainability Base, the agency's flagship LEED-platinum certified green building acts as a living laboratory for testing advanced information and sustainable technologies that provides an opportunity to test novel machine learning and controls capabilities. In this talk, key features of Sustainability Base that make it relevant to deep space habitat technology and its use of these kinds of subsystems previously listed will be presented. The fact that all such systems require less power to support human occupancy can be used as a focal point to serve as a testbed for deep space habitats that will need to operate within finite energy budgets.
The October 1994 revision of the KSC Toxic Substances Registry System (TSRS) Material Safety Data Sheets (MSD's) is presented. The listed MSD's which were submitted to the TSRS are maintained by the Base Operations Contractors of the Biomedical Operations and Research Office of KSC. The purpose of the index is to provide a means of accessing information on the hazards associated with the toxic and otherwise hazardous chemicals stored and used at KSC. Indices are provided for manufacturers, trademarks, and stock numbers.