Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Concurrent Engineering”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 649 records · Page 36

Relevance Vector Machine Image Reconstruction Algorithm for Electrical Capacitance Tomography With Explicit Uncertainty Estimates

We present a Relevance Vector Machine (RVM) based algorithm for electrical capacitance tomography (ECT) applications that can concurrently provide image reconstruction results and uncertainty estimates about the reconstruction. To illustrate the RVM operation in ECT, we simulate typical ECT scenarios, making explicit the connection between the reconstructed pixel values and the corresponding uncertainty estimates in each case. We compare the RVM reconstruction performance with that of the Iterative Landweber Method (ILM) and the least absolute shrinkage and selection operator (LASSO) in all the considered scenarios. The results show that, in addition to the key advantage of providing uncertainty measures, RVM can achieve similar reconstruction results with either lower or similar computational complexity.

42 ENGINEERING↗

Technologies for Detecting Interactions between Current Plant Configuration States and Component Manipulations Directed by In-Use Procedures

This research effort is a part of the Light Water Reactor Sustainability (LWRS) Program, which is a research and development (R&D) program sponsored by the Department of Energy. The LWRS Program is performed in close collaboration with industry R&D programs that provide the technical foundations for licensing and managing the long term, safe, and economical operation of current nuclear power plants (NPPs). The LWRS Program serves to help the United States (U.S.) nuclear industry adopt new technologies and engineering solutions that facilitate the continued safe operation of these NPPs and extension of their current operating licenses. A new area of LWRS research, Outage Risk Management Improvement (ORMI) seeks to improve the management of nuclear power plant outages through the development of tools to assist in evaluating pending activities against requirements to detect undesired interactions. Significant efforts are expended to manage the nuclear risk of an outage. The utilities conduct pre outage risk assessments, based on a very detailed review of the outage schedule, to identify where combinations of outage work and equipment out of service would result in degraded conditions with respect to nuclear safety or regulatory compliance. Probabilistic risk assessment studies are conducted to quantify the incremental core damage frequency as a result of the outage activities and system unavailability. These studies are usually presented to site and fleet management, the site plant operational review committee, and the NPP’s independent Nuclear Safety Review Board for concurrence that the outage is planned safely and that reasonable measures have been taken to reduce the added risk of conducting the outage. During the outage, the plant configuration is monitored continuously to ensure that it conforms to the approved safety plan. Deviations must be assessed and approved by management committees and, in some cases, the plant operational review committee. In virtually all outage meetings and job briefings, the current nuclear safety status of the plant is communicated, including information on the specific equipment that is being relied on to meet the requirements of the nuclear safety plan. In addition, Operations and the Outage organizations implement several layers of physical and administrative barriers to prevent unintended interaction with the systems and equipment credited for nuclear safety. In spite of all these efforts, nuclear safety challenges still occur too frequently in outages. While some of these are due to failures of equipment credited for safety, the majority occur because of human error. These typically involve some form of interaction between work activities and plant configuration changes. Some of them are very subtle and are extremely challenging to detect in advance. Nevertheless, they are not acceptable and represent clear opportunities to improve nuclear safety during outages. This project will develop tools and strategies to minimize these interactions.

99 GENERAL AND MISCELLANEOUS↗

CSM solutions of rotating blade dynamics using integrating matrices

The dynamic behavior of flexible rotating beams continues to receive considerable research attention as it constitutes a fundamental problem in applied mechanics. Further, beams comprise parts of many rotating structures of engineering significance. A topic of particular interest at the present time involves the development of techniques for obtaining the behavior in both space and time of a rotor acted upon by a simple airload loading. Most current work on problems of this type use solution techniques based on normal modes. It is certainly true that normal modes cannot be disregarded, as knowledge of natural blade frequencies is always important. However, the present work has considered a computational structural mechanics (CSM) approach to rotor blade dynamics problems in which the physical properties of the rotor blade provide input for a direct numerical solution of the relevant boundary-and-initial-value problem. Analysis of the dynamics of a given rotor system may require solution of the governing equations over a long time interval corresponding to many revolutions of the loaded flexible blade. For this reason, most of the common techniques in computational mechanics, which treat the space-time behavior concurrently, cannot be applied to the rotor dynamics problem without a large expenditure of computational resources. By contrast, the integrating matrix technique of computational mechanics has the ability to consistently incorporate boundary conditions and 'remove' dependence on a space variable. For problems involving both space and time, this feature of the integrating matrix approach thus can generate a 'splitting' which forms the basis of an efficient CSM method for numerical solution of rotor dynamics problems.

Lakin, William D.↗

Approach-Phase Precision Landing with Hazard Relative Navigation: Terrestrial Test Campaign Results of the Morpheus/ALHAT Project

The Morpheus Project began in late 2009 as an ambitious e ort code-named Project M to integrate three ongoing multi-center NASA technology developments: humanoid robotics, liquid oxygen/liquid methane (LOX/LCH4) propulsion and Autonomous Precision Landing and Hazard Avoidance Technology (ALHAT) into a single engineering demonstration mission to be own to the Moon by 2013. The humanoid robot e ort was redirected to a deploy- ment of Robonaut 2 on the International Space Station in February of 2011 while Morpheus continued as a terrestrial eld test project integrating the existing ALHAT Project's tech- nologies into a sub-orbital ight system using the world's rst LOX/LCH4 main propulsion and reaction control system fed from the same blowdown tanks. A series of 33 tethered tests with the Morpheus 1.0 vehicle and Morpheus 1.5 vehicle were conducted from April 2011 - December 2013 before successful, sustained free ights with the primary Vertical Testbed (VTB) navigation con guration began with Free Flight 3 on December 10, 2013. Over the course of the following 12 free ights and 3 tethered ights, components of the ALHAT navigation system were integrated into the Morpheus vehicle, operations, and ight control loop. The ALHAT navigation system was integrated and run concurrently with the VTB navigation system as a reference and fail-safe option in ight (see touchdown position esti- mate comparisons in Fig. 1). Flight testing completed with Free Flight 15 on December 15, 2014 with a completely autonomous Hazard Detection and Avoidance (HDA), integration of surface relative and Hazard Relative Navigation (HRN) measurements into the onboard dual-state inertial estimator Kalman lter software, and landing within 2 meters of the VTB GPS-based navigation solution at the safe landing site target. This paper describes the Mor- pheus joint VTB/ALHAT navigation architecture, the sensors utilized during the terrestrial ight campaign, issues resolved during testing, and the navigation results from the ight tests.

Crain, Timothy P.↗

Fire- and Water-Resistant Prefilter

The goal of this project was to modify existing LLNL ceramic HEPA filter technology to create ceramic prefilters, which could first be implemented in nuclear facilities or hospitals and universities. The objectives were as follows: 1) Demonstrate sealing technology capable of withstand ≥ 400°C, 2) Design and fabricate a ceramic prefilter unit for flow rates ≥ 50 cfm, 3) Test prefilter prototype filtration efficiency and pressure drop before and after a relevant thermal exposure. Concurrently to prototype creation was a preliminary effort to develop a custom nuclear prefilter sealant, improving upon what is commercially available. An advantage to using prefilters that are not credited for HEPA filtration, but to protect HEPA filters in nuclear ventilation systems, is that absolute qualified performance to HEPA standards (e.g. pressure drop, filtration efficiency) is not required. This prefilter prototype aligns our technology with the more viable, lower risk market entry point which can be used to establish costs, performance and manufacturing principles necessary to overcome the primary market barrier.

36 MATERIALS SCIENCE↗

Report of the Panel on Propulsion

Propulsion, while conventionally included on the list of important aeronautical disciplines along with aerodynamics, structures, etc., is in itself a systems endeavor, analogous to the engineering of the entire vehicle; indeed propulsion encompasses important aspects of all the other disciplines. In recognition of this fact, the panel focused its discussion on those aspects of the key disciplines that are especially or uniquely important to propulsion. From the initial development of the airplane, the propulsion system has been recognized as one of the pacing technologies. It is perhaps because of the technological disparity between the reciprocating engine and the primitive airframe that the two remained relatively and separate, were developed somewhat independently, usually by different organizations. In recent years, the maturing of the gas turbine power plant and the advance in high-speed airframes have rendered this separation somewhat artificial. The power plant and the airframe now share common structural and aerodynamic elements; as the flight Mach number rises, the degree of interaction increases. By the year 2000, this interdependence will have increased in many respects to a point where independent design may not be practical or possible. During the period since the initiation of the aircraft gas turbine, the solid propellant rocket and the liquid propellant rocket, a vast array of other novel engines have been studied, covering the full spectrum of flight conditions from low subsonic to hypersonic and transatmospheric flight. In each instance, performance limits have been investigated under the assumption that current technology or reasonably foreseeable technology would be available for their development. Among the extensive list of advanced, high-performance concepts and cycles examined are the hypersonic ramjet, the variable cycle, runway-to-orbit airbreathing engine, the ram rocket (airbreathing and rich solid propellant rocket), and the air turborocket. At various times, these systems have come relatively close to meriting development and application. In many instances, limitations of materials and technologies curtailed development. As important and with almost equal frequency, the lack of commercial or military utility of the concept precluded the necessary funding. It is instructive to note that two former items on this list, the turbofan (bypass engine) and the high-speed turboprop, are respectively a mainstay engine and a promising development. In the case of the turbofan, its full potential could not be realized until turbine cooling technology had been developed and new materials developed to permit the construction of transonic fans. In the case of the highspeed turbopropeller engine, not only were the material and turbine technologies needed, but, in addition, the rise in fuel costs provided the impetus to take advantage of its favorable fuel consumption characteristic. As the basic technologies progress and as new missions become attractive, the engines in the foregoing list become candidates for new feasibility studies and further technology development. At the present time, the ram rocket is the prime contender to augment the range of small missiles. Of interest also is the hypersonic ram jet and its logical extension, the runway-to-orbit airbreathing engine. Much of this report deals with the development of current or near-future power plant concepts. First, the motivating factors for aeronautical propulsion research are reviewed as a reminder of the importance of continued effort in a field that has often been characterized as mature. Next, technical areas are discussed in which the panel feels additional research effort is warranted and would lead to the realization of the technological potentials between now and the year 2000. Under these guidelines, new cycles (e.g., isothermal energy exchange) were not considered by the panel. Finally, although facility requirements were not a prime consideration in the current projections, the panel believes that the increasing complexity of propulsion systems; the need for more refined interaction between propulsion system, airframe, and controls; and increasing operation in adverse weather will require test capabilities beyond those now available (see appendix). Enhanced test capability is needed in the areas of propulsion airframe integration and in largescale icing research with proper concurrent treatment of altitude, temperature, and speed.

Kerrebrock, Jack L.↗

In Situ TEM Microcompression Pillar Size Effects in Fe-9Cr ODS

The objective of this paper is to ascertain the existence of a specimen size threshold, below which the material no longer exhibits bulk mechanical behavior when tested using in situ transmission electron microscopic (TEM) micro-compression pillars. In this work, sub-micron sized pillars of a model Fe-9Cr oxide dispersion strengthened (ODS) alloy were compressed in TEM in situ at room temperature, and attempts have been made to quantify the resulting data. Results are compared to mechanical property values in the archival literature, and a discussion on the validity of quantitative in situ TEM micro-compression data for ODS steel is included. In situ TEM mechanical testing is a relatively new technique enabling concurrent TEM imaging and mechanical testing of sub-micron-sized electron-transparent specimens. Due to limited sample volume of many nuclear materials, in situ TEM mechanical testing holds great promise for advancing our understanding of deformation phenomena. But it is well known that the dramatically reduced specimen size required for in situ testing can affect quantitative and qualitative deformation behaviors. However, Kiener, et al. used in situ TEM micro-compression pillars on irradiated and unirradiated single-crystal copper. They observed size independence in the irradiated material, while the unnirradiated material displayed a size threshold below which the mechanical properties deviated from those of bulk Cu. They assert that the more densely-spaced obstacles in irradiated Cu allow it to display bulk properties even in specimens having ∼ 100 nm dimensions. Similar to Kiener's findings, we hypothesize that unirradiated ODS will demonstrate a size threshold, but the in situ TEM micro-compression technique can be extended from single crystal materials to engineering alloys. An Fe-9Cr model ODS alloy was chosen for this study because of the broad interest in ODS for advanced nuclear reactors. ODS alloys exhibit high irradiation tolerance and high temperature creep resistance. New insight into deformation processes gained through in situ TEM mechanical testing could be valuable for the validation of ODS alloys for next generation nuclear reactors. The fact that the compressive yield stress and elastic modulus do not follow distinct trends as a function of specimen size is likely due to the high density of obstacles to dislocation motion. The ODS microstructure contains such obstacles as oxide nanoparticles, a fine grain structure, a high density of dislocation lines, and carbide precipitates. Since the deformation behavior is governed by the minimum separation distance between obstacles [1], it is plausible that the high obstacle density enables ODS alloy micropillars to exhibit bulk-like mechanical properties even prior to irradiation. Future work will focus on: (1) developing finite element models to help explain the difference in elastic moduli between bulk and micropillar tests, (2) understanding the spread in yield stress measurements at fixed micropillar volumes, and (3) extending this study to irradiated ODS. (authors)

36 MATERIALS SCIENCE↗

Optical array for high-quality imaging in harsh environments

Methods and apparatus are disclosed for producing high quality images in uncontrolled or impaired environments. In some examples of the disclosed technology, groups of cameras for high dynamic range (HDR), polarization diversity, and optional other diversity modes are arranged to concurrently image a common scene. For example, in a vehicle checkpoint application, HDR provides discernment of dark objects inside a vehicle, while polarization diversity aids in rejecting glare. Spectral diversity, infrared imaging, and active illumination can be applied for better imaging through a windshield. Preprocessed single-camera images are registered and fused. Faces or other features of interest can be detected in the fused image and identified in a library. Impairments can include weather, insufficient or interfering lighting, shadows, reflections, window glass, occlusions, or moving objects.

42 ENGINEERING↗

Methodology for object-oriented real-time systems analysis and design: Software engineering

Successful application of software engineering methodologies requires an integrated analysis and design life-cycle in which the various phases flow smoothly 'seamlessly' from analysis through design to implementation. Furthermore, different analysis methodologies often lead to different structuring of the system so that the transition from analysis to design may be awkward depending on the design methodology to be used. This is especially important when object-oriented programming is to be used for implementation when the original specification and perhaps high-level design is non-object oriented. Two approaches to real-time systems analysis which can lead to an object-oriented design are contrasted: (1) modeling the system using structured analysis with real-time extensions which emphasizes data and control flows followed by the abstraction of objects where the operations or methods of the objects correspond to processes in the data flow diagrams and then design in terms of these objects; and (2) modeling the system from the beginning as a set of naturally occurring concurrent entities (objects) each having its own time-behavior defined by a set of states and state-transition rules and seamlessly transforming the analysis models into high-level design models. A new concept of a 'real-time systems-analysis object' is introduced and becomes the basic building block of a series of seamlessly-connected models which progress from the object-oriented real-time systems analysis and design system analysis logical models through the physical architectural models and the high-level design stages. The methodology is appropriate to the overall specification including hardware and software modules. In software modules, the systems analysis objects are transformed into software objects.

Schoeffler, James D.↗

Multiuser Collaboration with Networked Mobile Devices

In this paper we describe a multiuser collaboration infrastructure that enables multiple mission scientists to remotely and collaboratively interact with visualization and planning software, using wireless networked personal digital assistants(PDAs) and other mobile devices. During ground operations of planetary rover and lander missions, scientists need to meet daily to review downlinked data and plan science activities. For example, scientists use the Science Activity Planner (SAP) in the Mars Exploration Rover (MER) mission to visualize downlinked data and plan rover activities during the science meetings [1]. Computer displays are projected onto large screens in the meeting room to enable the scientists to view and discuss downlinked images and data displayed by SAP and other software applications. However, only one person can interact with the software applications because input to the computer is limited to a single mouse and keyboard. As a result, the scientists have to verbally express their intentions, such as selecting a target at a particular location on the Mars terrain image, to that person in order to interact with the applications. This constrains communication and limits the returns of science planning. Furthermore, ground operations for Mars missions are fundamentally constrained by the short turnaround time for science and engineering teams to process and analyze data, plan the next uplink, generate command sequences, and transmit the uplink to the vehicle [2]. Therefore, improving ground operations is crucial to the success of Mars missions. The multiuser collaboration infrastructure enables users to control software applications remotely and collaboratively using mobile devices. The infrastructure includes (1) human-computer interaction techniques to provide natural, fast, and accurate inputs, (2) a communications protocol to ensure reliable and efficient coordination of the input devices and host computers, (3) an application-independent middleware that maintains the states, sessions, and interactions of individual users of the software applications, (4) an application programming interface to enable tight integration of applications and the middleware. The infrastructure is able to support any software applications running under the Windows or Unix platforms. The resulting technologies not only are applicable to NASA mission operations, but also useful in other situations such as design reviews, brainstorming sessions, and business meetings, as they can benefit from having the participants concurrently interact with the software applications (e.g., presentation applications and CAD design tools) to illustrate their ideas and provide inputs.

ground operations↗

Premelting, Melting, and Degradation Properties of Molten Alkali Nitrates: LiNO{sub 3}, NaNO{sub 3}, KNO{sub 3}, and Binary NaNO{sub 3}-KNO{sub 3}

A simultaneous thermal analyzer (STA) was used to observe the transition and degradation events of LiNO{sub 3}, NaNO{sub 3}, KNO{sub 3}, and binary NaNO{sub 3}-KNO{sub 3} salts for potential use as phase change materials (PCMs) and heat transfer fluid (HTF). Samples were heated from 50 °C to 800 °C at 10 °C/min scanning rate in three atmospheres (argon, air, and oxygen) using an STA to observe decomposition behavior. Thermal stability increased for all salts at high partial pressure of O{sub 2} (P{sub O{sub 2}}= 1.0) compared to inert argon (P{sub O{sub 2}}= 0). O{sub 2}, N{sub 2}, NO, N{sub 2}O, and NO{sub 2} were main evolved gases during nitrate decomposition. NO and O{sub 2} started to evolve at approximately the same temperature after melting, indicating that primary and secondary decomposition reactions were concurrent and overlapping. The solid-solid transition, liquidus and solidus temperatures, heat of transition, heat of melting, and heat of solidification were obtained at various heating-cooling rates (1, 2, 4, 5, 6, 8, 10, and 15 °C/min) using an STA. At all heating-cooling rates, a small gap exists between liquidus and solidus temperatures for all samples due to the salts exhibiting supercooling phenomena. This study showed that the degradation point depends on the blanket atmosphere top of the molten salts and that heating rates have a minor effect on transition events (peaks height, peaks width, and transition enthalpies).

36 MATERIALS SCIENCE↗

CONCURRENT, CONDENSED STEIN VARIATIONAL GRADIENT DESCENT FOR UNCERTAINTY QUANTIFICATION OF NEURAL NETWORKS

In this work, we propose a Stein variational gradient descent (SVGD) method to concurrently sparsify, train, and provide uncertainty quantification (UQ) of a complexly parameterized model, such as a neural network (NN). It employs a graph reconciliation and condensation process to reduce complexity and increase similarity in the Stein ensemble of parameterizations. Therefore, the proposed concurrent, condensed SVGD (ccSVGD) method can provide UQ on parameters, not just outputs. Furthermore, the parameter reduction speeds up the convergence of the Stein gradient descent as it reduces the combinatorial complexity by aligning and differentiating the sensitivity to parameters. These properties are demonstrated with an illustrative example and an application to a mechanical response representation problem in solid mechanics.

42 ENGINEERING↗

An in-situ neutron diffraction study of a multi-phase transformation and twinning-induced plasticity steel during cyclic loading

In-situ neutron diffraction during cyclic tension-compression loading (∼+3.5% to −2.8%) of a 17Mn-3Al-2Si-1Ni-0.06C steel that exhibits concurrent transformation and twinning -induced plasticity effects indicated a significant contribution of intragranular back stresses to the observed Bauschinger effect. Rietveld analysis revealed a higher rate of martensitic transformation during tension compared to compression. Throughout cycling, α′-martensite exhibited the highest phase strains such that it bears an increasing portion of the macroscopic load as its weight fraction evolves. On the other hand, the ε-martensite strain remained compressive as it accommodated most of the internal strains caused by the shape misfit associated with the γ→ε and/or ε→α′ transformations.

75 CONDENSED MATTER PHYSICS, SUPERCONDUCTIVITY AND↗

Analytical Fuel Property Effects - Small Combustors. Phase II

A test program was conducted to study the effects of non-standard aviation fuels on a typical small gas turbine combustor, and to evaluate the effectiveness of design changes intended to counter the effects of these fuels. This study was a follow on to an earlier analytical study to predict the fuel effects and generate the design modifications evaluated in this program. The T700/CT7 engine family was chosen for both studies as being representative of the class of aircraft power plants desired for this study. Fuel properties, as specified by NASA, are characterized by low hydrogen content and high aromatics levels. No. 2 diesel fuel was also evaluated in this program. The tests demonstrated the anticipated higher than normal smoke output and flame radiation intensity with resulting increased metal temperatures on the baseline T700 combustor. Three new designs were evaluated using the non standard fuels. The three designs incorporated enhanced cooling features and smoke reduction features. All three designs, when burning the broad specification fuels, exhibited metal temperatures at or below the baseline combustor temperatures on JP-5. Smoke levels were acceptable but higher than predicted. This was partly due to the increase in baseline combustor smoke levels with the broad spec fuels being higher than anticipated. One combustor of the three clearly demonstrated the best smoke and metal temperature characteristics. It was also easiest to manufacture and incorporate into a production design. GE with NASA's concurrence selected and subjected this combustor to a final component test program.

Monty, J.↗

A Technology Maturation Plan for the Development of Nuclear Electric Propulsion

Over the last two years NASA’s Space Nuclear Propulsion (SNP) Project formulated a Technology Maturation Plan (TMP) for development of the sub-systems needed for a MW-class Nuclear Electric Propulsion (NEP) system which, combined with a high thrust chemical propulsion stage, would be suitable for human missions to Mars. Two recent assessments, independently conducted by the National Academies for Science, Engineering, and Medicine and the NASA Engineering & Safety Center, concluded that the technologies required for a high-power NEP system are immature and the attendant risks insufficiently quantified to justify initiating a flight project. For NEP to be available as a viable option to meet flight opportunities in the late 2030s / 2040s time frame, development of the key sub-systems must begin now. SNP has subdivided the NEP system into five Critical Technology Elements (CTE): the nuclear reactor, power conversion, power management and distribution, electric propulsion sub-system, and the primary heat rejection system. Development plans for each of these CTEs have been drafted which will serve as the template for a focused milestone-driven research and development campaign intended to advance each CTE to Technology Readiness Level (TRL) 5. This will be accomplished by building and testing hardware at relevant power levels (~ 1 MW) and for relevant durations (2,500 hours, ~10% of the required operational lifetime) and conducting numerical modeling of the CTEs anchored by the accumulated test data to predict system performance and reliability. Concurrent with this work, high-level coupled system/mission modeling will be carried out to refine the key performance parameters that the various CTEs must achieve. Non-advocate reviews will be held at milestone points to assess progress and inform down-select decisions. The strategy for formulating the TMP was described previously; this paper describes ongoing progress on the drafting and baselining of the plan, including key specific details.

Space Nuclear Propulsion↗

A Technology Maturation Plan for the Development of Nuclear Electric Propulsion

Over the last two years NASA’s Space Nuclear Propulsion (SNP) Project formulated a Technology Maturation Plan (TMP) for development of the sub-systems needed for a MW-class Nuclear Electric Propulsion (NEP) system which, combined with a high thrust chemical propulsion stage, would be suitable for human missions to Mars. Two recent assessments, independently conducted by the National Academies for Science, Engineering, and Medicine and the NASA Engineering & Safety Center, concluded that the technologies required for a high-power NEP system are immature and the attendant risks insufficiently quantified to justify initiating a flight project. For NEP to be available as a viable option to meet flight opportunities in the late 2030s / 2040s time frame, development of the key sub-systems must begin now. SNP has subdivided the NEP system into five Critical Technology Elements (CTE): the nuclear reactor, power conversion, power management and distribution, electric propulsion sub-system, and the primary heat rejection system. Development plans for each of these CTEs have been drafted which will serve as the template for a focused milestone-driven research and development campaign intended to advance each CTE to Technology Readiness Level (TRL) 5. This will be accomplished by building and testing hardware at relevant power levels (~ 1 MW) and for relevant durations (2,500 hours, ~10% of the required operational lifetime) and conducting numerical modeling of the CTEs anchored by the accumulated test data to predict system performance and reliability. Concurrent with this work, high-level coupled system/mission modeling will be carried out to refine the key performance parameters that the various CTEs must achieve. Non-advocate reviews will be held at milestone points to assess progress and inform down-select decisions. The strategy for formulating the TMP was described previously*; this paper describes ongoing progress on the drafting and baselining of the plan, including key specific details. * “Strategy for Developing Technologies for Megawatt-class Nuclear Electric Propulsion Systems”, K.A. Polzin, et. al., International Electric Propulsion Conference IEPC 2022, IEPC-2022-155

Nuclear Electric Propulsion↗

Explanation Constraint Programming for Model-based Diagnosis of Engineered Systems

We can expect to see an increase in the deployment of unmanned air and land vehicles for autonomous exploration of space. In order to maintain autonomous control of such systems, it is essential to track the current state of the system. When the system includes safety-critical components, failures or faults in the system must be diagnosed as quickly as possible, and their effects compensated for so that control and safety are maintained under a variety of fault conditions. The Livingstone fault diagnosis and recovery kernel and its temporal extension L2 are examples of model-based reasoning engines for health management. Livingstone has been shown to be effective, it is in demand, and it is being further developed. It was part of the successful Remote Agent demonstration on Deep Space One in 1999. It has been and is being utilized by several projects involving groups from various NASA centers, including the In Situ Propellant Production (ISPP) simulation at Kennedy Space Center, the X-34 and X-37 experimental reusable launch vehicle missions, Techsat-21, and advanced life support projects. Model-based and consistency-based diagnostic systems like Livingstone work only with discrete and finite domain models. When quantitative and continuous behaviors are involved, these are abstracted to discrete form using some mapping. This mapping from the quantitative domain to the qualitative domain is sometimes very involved and requires the design of highly sophisticated and complex monitors. We propose a diagnostic methodology that deals directly with quantitative models and behaviors, thereby mitigating the need for these sophisticated mappings. Our work brings together ideas from model-based diagnosis systems like Livingstone and concurrent constraint programming concepts. The system uses explanations derived from the propagation of quantitative constraints to generate conflicts. Fast conflict generation algorithms are used to generate and maintain multiple candidates whose consistency can be tracked across multiple time steps.

Narasimhan, Sriram↗

Synthesis of Correct Digital Controller Models from Specifications by Model Transformation (21-0320)

The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)

42 ENGINEERING↗