Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Hardware in the loop”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 667 records · Page 37

Historical Aerospace Software Errors Categorized to Influence Fault Tolerance

Since the first use of computers in space and aircraft, software errors have occurred. These errors can manifest as loss-of-life or less catastrophically. As the demand for automation increases, software in mission or safety-critical systems should be designed to be tolerant to the most likely software faults. This paper categorizes a set of 55 historic aerospace software error incidents from 1962 to 2023 to determine trends of how and where automation is most likely to fail, behaving unexpectedly. A distinction between software producing unexpected (erroneous) output versus no output (failsilent) is introduced. Of the historical incidents analyzed, 85% were from software producing wrong output rather than simply stopping. Rebooting was found to be ineffective to clear erroneous behavior, and not reliable to recover from silent failures. Error origin was within the code/logic itself in 58% of cases, 16% from configurable data, 15% from unexpected sensor input, and 11% from command/operator input. A substantial forty percent (40%) of unexpected software behavior was indicated by the absence of code, arising from unanticipated situations and missing requirements, and 16% of incidents were subjectively deemed “unknown-unknowns”. No incidents were found to be the result of programming language, compiler, tool, or operating system; and only sixteen percent (16%) of all incidents were considered errors traditional computer science/programming in nature. These findings indicate that for fault tolerance, erroneous automation behavior must be a primary consideration especially at critical moments, and reboot recoverability may not be viable. Special care should be taken to validate configurable data and commands prior to use. “Test-like-you-fly”, including hardware-in-the-loop combined with robust off-nominal testing should be used to uncover missing logic arising from unanticipated situations not covered by requirements alone. This study uniquely focuses on manifestations of unexpected flight software behavior, independent of ultimate root cause. We characterize software error behavior and origin to improve software design, test, and operations for resilience to the most common manifestations, and provide a rich dataset for further study.

Aerospace↗

Airspace Performance Observations of Scalable Autonomous Operations in a High Density Vertiplex Simulation

The National Aeronautics and Space Administration’s (NASA’s) High Density Vertiplex (HDV) sub- project aims to develop and demonstrate progressive automation technologies that contribute to the Advanced Air Mobility (AAM) concept. Using Human-and-Hardware-In-The- Loop (HHITL) techniques, HDV demonstrates initial vertiport automation services at vertiports with increased air traffic volume in both simulated and live test environments. In 2023, the Scalable Autonomous Operations (SAO) simulation was conducted in which prototype vertiport, airspace, and ground control station technologies were assessed on technical performance. During the SAO simulation, an observational study captured an initial impression of the HDV airspace performance, potential disruptions to the airspace, and highlighted some capability and procedural gaps. Observations took place in two parts. In the first part, five scenario use cases (Nominal, Missed Approach, Speed Change, Divert, and Multi- Aircraft Divert) were conducted with three human operator roles (Vertiport Manager, Fleet Manager, and Ground Control Station Operator). Researchers collected metrics on throughput, closest point of approach, and airborne delay. In the second part of the study, the Missed Approach scenario was observed under three traffic density levels (20, 40, and 60 operations per hour) to challenge the automation to correctly identify slots in the vertiport arrival schedule. The results showed that the automation successfully found a slot for the Missed Approach vehicle in the 20 operations per hour condition, after some delay it found one in the 40 condition, and it did not find one in the 60 condition. The observations of technical and human performance throughout the five scenario use cases and the Missed Approach case study indicated that for HDV to increase traffic density and maintain or increase throughput, airspace monitoring services should be able to detect and resolve conflicts between aircraft. Furthermore, the roles and responsibilities of human operators need additional definition when it comes to responding to vehicle conflicts.

advanced air mobility↗

SUbsonic Single Aft eNgine (SUSAN) Power/Propulsion System Control Architecture Updates

The development of hybrid-electric propulsion technology for transport aircraft presents opportunities for new designs that can reduce fuel consumption and greenhouse gas emissions from commercial aviation and improve on safety and reliability when compared to modern aircraft. The SUbsonic Single Aft eNgine (SUSAN) Electrofan is a conceptual design for a transport aircraft with a series/parallel partial hybrid-electric propulsion system that is being developed by NASA as a reference design for a regional transport aircraft with a high degree of electrification. The SUSAN concept incorporates multiple tightly coupled power, propulsion, and flight control systems that introduce new challenges to the control design process, requiring a hierarchical and more coordinated control architecture. This paper summarizes updates to the SUSAN Power/Propulsion System (PPS) model and control architecture made in preparation for planned flight simulator and hardware-in-the-loop testing at NASA Glenn Research Center (GRC). These updates include a new electrical power system (EPS) model based on the NASA-developed Electrical Modeling and Thermal Analysis Toolbox (EMTAT), and a new PPS control architecture that improves the operational flexibility and responsiveness of the propulsion system. The performance of the upgraded control system is also demonstrated and discussed.

SUSAN↗

SUbsonic Single Aft eNgine (SUSAN) Power/Propulsion System Control Architecture Updates

The development of hybrid-electric propulsion technology for commercial transport aircraft presents opportunities for new designs that can reduce fuel consumption and greenhouse gas emissions and improve safety and reliability compared to modern aircraft. The SUbsonic Single Aft eNgine (SUSAN) Electrofan is a conceptual design for a transport aircraft with a series/parallel partial hybrid-electric propulsion system being developed by NASA as a reference design for a regional transport aircraft with a high degree of electrification. The SUSAN concept incorporates multiple tightly coupled power, propulsion, and flight control systems that introduce new challenges to the control design process, requiring a hierarchical and more coordinated control approach. This report summarizes updates to the SUSAN power/propulsion system (PPS) model and control architecture made in preparation for planned flight simulator and hardware-in-the-loop testing at the NASA Glenn Research Center. These updates include a new electrical power system model developed using the NASA-developed Electrical Modeling and Thermal Analysis Toolbox (EMTAT) and a new PPS control architecture that improves the operational flexibility and responsiveness of the propulsion system. The performance of the updated controller is demonstrated and discussed.

SUSAN↗

SUbsonic Single Aft eNgine (SUSAN) Power/Propulsion System Control Architecture Updates

The development of hybrid-electric propulsion technology for transport aircraft presents opportunities for new designs that can reduce fuel consumption and greenhouse gas emissions from commercial aviation and improve on safety and reliability when compared to modern aircraft. The SUbsonic Single Aft eNgine (SUSAN) Electrofan is a conceptual design for a transport aircraft with a series/parallel partial hybrid-electric propulsion system that is being developed by NASA as a reference design for a regional transport aircraft with a high degree of electrification. The SUSAN concept incorporates multiple tightly coupled power, propulsion, and flight control systems that introduce new challenges to the control design process, requiring a hierarchical and more coordinated control architecture. This paper summarizes updates to the SUSAN Power/Propulsion System (PPS) model and control architecture made in preparation for planned flight simulator and hardware-in-the-loop testing at NASA Glenn Research Center (GRC). These updates include a new electrical power system (EPS) model based on the NASA-developed Electrical Modeling and Thermal Analysis Toolbox (EMTAT), and a new PPS control architecture that improves the operational flexibility and responsiveness of the propulsion system. The performance of the upgraded control system is also demonstrated and discussed.

SUSAN↗

MAV Software Development: Streamlined Collaboration for MSR

This poster presents the coordinated efforts of the Mars Ascent Vehicle (MAV) software development teams, encompassing Flight Software, Ground Software, and Hardware-in-the-Loop Labs. This collaborative approach, which stems from the Artemis program, ensures efficiency in preparing for the Mars Sample Return (MSR) mission, focusing on the critical role of software integration for mission success.

MAV↗

Standalone Hazard Evaluation and Refinement From Instrument Findings (S.H.E.R.I.F.)

The Standalone Hazard Evaluation From Instrument Findings or SHERIF is a set of novel algorithms and associated framework designed to support the generation of Digital Elevation Maps (DEMs) from multiple LiDAR scans and perform Hazard Detection (HD) and Safe Site Selection with minimal input from other onboard systems. SHERIF can employ several techniques to perform Point Cloud registration(PCR) on disparate LiDAR scans of a planetary surface to generate a DEM which evolves over the course of a trajectory, with a flow designed to enable robustness. The framework also supports a variety of Hazard Detection and Safe Site Selection algorithms which can be run on the evolving DEM being produced. SHERIF features a robust and modular construction, allowing the user a high degree of flexibility in selecting and implementing whichever PCR and HD/SSL algorithms they may prefer, while maintaining the data products and sensor independence of the core SHERIF framework. SHERIF was recently tested in a hardware in the loop simulation at NASA JSC.

Entry Descent and Landing Guidance Navigation Cont↗

Autonomous Navigation of a Lunar Relay Using GNSS and Other Measurements

NASA’s Lunar Communications Relay and Navigation Services (LCRNS) project will establish a relay constellation at the Moon to provide the south pole region with communications and position, navigation, and time (PNT) services. These services will require highly accurate knowledge of position, velocity, and time (PVT) for each relay. This paper explores one approach for performing onboard PVT estimation, the LCRNS PNT Instrument (LPI). This paper considers different configurations of the instrument, specifically different measurement types and clocks, and the resulting navigation performance. Simulation results are first shown for an instrument configuration that uses GPS pseudorange and Doppler measurements with a highly sensitive GPS receiver (i.e., an acquisition and tracking threshold of 23 dB-Hz) and a chip-scale atomic clock (CSAC). The importance of Doppler, clock quality, receiver sensitivity, and optical navigation is examined through comparison of these results to other instrument configurations. Clock quality (i.e., stability) is the strongest determinant of achievable performance, and the inclusion of GPS Doppleralso has a significant effect. Finally, simulation results are compared to two laboratory tests: first a case that includes GPS receiver hardware in the loop, then a case that includes optical navigation and filter flight software in the loop. These agreeclosely with the simulation results and provide evidence the simulation is accurately modeling the instrument under development.

Benjamin W Ashman↗

Advancement of Deep Learning and Geometric Methods for Active Terrain Relative Navigation

To enhance NASA’s precision landing capabilities, in conjunction with the development of a novel active terrain relative navigation (ATRN) and terrain mapping system, denoted SHERIF, this work performed a comparative analysis between both deep-learning (DL) based and geometric approaches to hazard detection (HD) and safe-site-identification (SSI) through hardware-in-the loop testing on the Six degree-of-freedom Tendon Actuated Robot (STAR). The Standalone Hazard Evaluation and Refinement using Instrument Findings (SHERIF) system is capable of ingesting sensor data at an asynchronous rate, stitching successive terrain scans together to yield a high-resolution digital elevation map (DEM), performing absolute and relative localization using novel 3D feature extraction and matching methods, and HD/SSI activities. The DL-based HD/SSI algorithm provides a modular alternative to classical geometric approaches which have performance times that scale with map resolution. As the adoption of AI solutions become more prevalent for autonomous system decision making, it is prudent to explore the utility of such solutions in applications where they traditionally excel, such as image classification. Along with the development of a DL-based HD system, this work performed the first comparative analysis between DL and geometric approaches to HD/SSI using real sensor data from real-time testing in a relevant environment.

Davis Adams↗

A Discussion of Time Management Concepts and Time Constraint Equations for Multi-Rate Federation Executions

The High Level Architecture (HLA) is a simulation interoperability standard developed by the Simulation Interoperability Standards Organization (SISO) and published as the international standard IEEE 1516-2010 by the Institute for Electrical and Electronics Engineers (IEEE). HLA is a widely used standard for the development and execution of collaborative distributed simulations. HLA provides a number of Management Services to simulation developers: Federation, Declaration, Object, Ownership, Data Distribution, and Time. Of those services, Time Management Services is probably one of the least understood and least used. However, Time Management Services are critical to technical simulations like those created for space systems using the Space Reference Federation Object Model (SpaceFOM). Time Management can be used to insure data coherence and execution repeatability in distributed simulations. When combined with real time execution policies, Time Management is being used to support real time execution of mixed software and hardware in the loop integration, verification, and validation simulations for active space systems development. This paper starts by providing an overview of the HLA Time Management Services. This provides the background to discuss the challenges associated with Time Management and its use, starting with simple common rate frame scheduled simulations, then simple multi-rate simulations, and ending with complex mixed rate simulations. The authors then formulate the significant time constraint relationships between identified frame scheduling parameters. The intent of the paper is to provide a concise discussion of how to use Time Management in both simple cases and in more complex mixed frame rate federation executions.

Simulation Interoperability↗

Standalone Hazard Evaluation and Refinement From Instrument Findings (S.H.E.R.I.F.)

The Standalone Hazard Evaluation From Instrument Findings (SHERIF) system is a set of novel algorithms and associated framework designed to support the generation of Digital Elevation Maps (DEMs) from multiple LiDAR scans and perform Hazard Detection (HD) and Safe Site Identification (SSI) with no dependencies on other onboard systems. SHERIF can employ several techniques to perform robust 3D keypoint extraction and Point Cloud registration (PCR) on disparate LiDAR scans of a planetary surface to generate a DEM which evolves over the course of a trajectory. The framework also supports a variety of Hazard Detection and Safe Site Identification algorithms which can be applied to the evolving DEM being produced. SHERIF features a robust and modular construction, allowing the user a high degree of flexibility in selecting and implementing whichever keypoint identificaiton, PCR and HD/SSI algorithms they may prefer, while maintaining the data products and sensor independence of the core SHERIF framework. SHERIF was recently evaluated via simulation and hardware-in-the-loop experimental testing at NASA Johnson Space Center.

hazard detection↗

Design Considerations of an Ascent Abort Monitor Algorithm for Use During Service Module Aborts

In support of human rating the Artemis missions, NASA's Orion program requires continuous abort coverage from liftoff through mission destination. During a portion of the ascent trajectory, the currently achievable abort mode is determined by an Orion algorithm using the onboard navigated vehicle state. This ascent abort monitor determines achievability for Orion's Mode 2 abort, Untargeted Abort Splashdown (UAS), by propagating the current vehicle state through ascent abort events to determine sufficient timing to perform the abort and to a ballistic touchdown point to approximate landing location relative to prescribed keep out boundaries. The algorithm was updated for Artemis 2 to allow the capability to limit loads for the majority of ascent. Performance of the algorithm has been demonstrated and verified through dispersed trajectory analysis with emulated flight software, unit testing, and hardware in the loop testing.

Esteban Guzman↗

Standalone Hazard Evaluation and Refinement From Instrument Findings (S.H.E.R.I.F.)

The Standalone Hazard Evaluation From Instrument Findings (SHERIF) system is a set of novel algorithms and associated framework designed to support the generation of Digital Elevation Maps (DEMs) from multiple LiDAR scans and perform Hazard Detection (HD) and Safe Site Identification (SSI) with no dependencies on other onboard systems. SHERIF can employ several techniques to perform robust 3D keypoint extraction and Point Cloud registration (PCR) on disparate LiDAR scans of a planetary surface to generate a DEM which evolves over the course of a trajectory. The framework also supports a variety of Hazard Detection and Safe Site Identification algorithms which can be applied to the evolving DEM being produced. SHERIF features a robust and modular construction, allowing the user a high degree of flexibility in selecting and implementing whichever keypoint identificaiton, PCR and HD/SSI algorithms they may prefer, while maintaining the data products and sensor independence of the core SHERIF framework. SHERIF was recently evaluated via simulation and hardware-in-the-loop experimental testing at NASA Johnson Space Center.

hazard detection↗

A Discussion of Time Management Concepts and Time Constraint Equations for Multi-Rate Federation Executions

The High Level Architecture (HLA) is a simulation interoperability standard developed by the Simulation Interoperability Standards Organization (SISO) and published as the international standard IEEE 1516-2010 by the Institute for Electrical and Electronics Engineers (IEEE). HLA is a widely used standard for the development and execution of collaborative distributed simulations. HLA provides a number of Management Services to simulation developers: Federation, Declaration, Object, Ownership, Data Distribution, and Time. Of those services, Time Management Services is probably one of the least understood and least used. However, Time Management Services are critical to technical simulations like those created for space systems using the Space Reference Federation Object Model (SpaceFOM). Time Management can be used to insure data coherence and execution repeatability in distributed simulations. When combined with real time execution policies, Time Management is being used to support real time execution of mixed software and hardware in the loop integration, verification, and validation simulations for active space systems development. This paper starts by providing an overview of the HLA Time Management Services. This provides the background to discuss the challenges associated with Time Management and its use, starting with simple common rate frame scheduled simulations, then simple multi-rate simulations, and ending with complex mixed rate simulations. The authors then formulate the significant time constraint relationships between identified frame scheduling parameters. The intent of the paper is to provide a concise discussion of how to use Time Management in both simple cases and in more complex mixed frame rate federation executions.

Simulation Interoperability↗

Controls for Electrified Aircraft Propulsion

Advanced electrified aircraft propulsion (EAP) concepts with integrated power, propulsion, and thermal systems require the development of equally sophisticated controllers to fly safe and efficient missions. Hybrid electric aircraft utilize electric machines mechanically coupled to the engine shafts to extract and insert power for a variety of purposes. Additionally, electric machines may drive propulsive fans pulling from a combination of on-board energy storage devices and engine extracted power. NASA’s investment in hybrid electric aircraft hardware-in-the-loop testing enables controls research on representative engine models using a novel emulation and scaling methodology. High-voltage, high-power electrical powertrain presents several technical risks at altitude. High-power requires high efficiency to minimize losses. Superconducting electric machines and power distribution research at NASA has identified key challenges with potential controls solutions. These risks necessitate the development of controllers robust to model uncertainty, disturbances, and fault conditions. System health management and fault detection schemes play an important role in a multi-layer controls approach that utilizes a supervisor which oversees inner loops for the highly coupled power, propulsion, and thermal systems. Such a supervisory controller enables coordinates energy transfer between engines, energy storage devices, electric machines, propulsors, and heat exchangers. Existing methods have shown an improvement in engine operability using the hybrid electric powertrain.

Halle E Buescher↗

Advanced control sequences and FDD technology. Just shiny objects, or ready for scale?

Innovations in commercial building control sequences (ASHRAE guideline 36) and fault detection and diagnostics (FDD) technology have the potential to transform existing building operational efficiency by realizing whole-building level savings on the order of 15% and higher. However, several technical and market barriers related to up-front estimation of achievable savings, verifying implementation, and ensuring persistence are slowing down their adoption as a core offering through diverse owner-funded initiatives and rate-payer funded programs. This paper describes a suite of solutions to overcome these barriers to program delivery of advanced HVAC controls integrated with FDD energy management and information system (EMIS) technology. First, the Guideline 36 conformance test offers an automated method to confirm correct sequence implementation by the manufacturer, before field deployment. A successful test of a controller was conducted using a new manufacturer-independent hardware-in-the-loop testbed demonstrating the viability and scalability of this approach. Second, the Guideline 36 energy savings calculator uses modeling paired with high-level user inputs to estimate building-specific savings potential, target cost effective implementation and minimize uncertainty. Initial results indicate the baseline control sequences significantly impact energy savings, however, as much as 50% savings may be possible for the worst-case baseline scenario. Third, a functional specification provides minimum recommended EMIS-FDD capabilities, and best practices to integrate the technology into organizational practice and ensure that advanced control sequences provide persistent savings.

Pritoni, Marco↗

Provision of Grid Services by PV Plants with Integrated Battery Energy Storage System: Preprint

Battery energy storage systems (BESS), due to their tremendous range of uses and configurations, may assist PV integration in any number of ways by increasing power system flexibility. In this paper we describe results of a research project conducted by NREL and First Solar for developing controls and demonstrating many use cases for PV-BESS systems including (1) matching generation to loads through time shifting, reducing PV curtailment,; (2) promoting higher levels of PV penetrations by balancing the grid through ancillary services; (3) use of PV-BESS systems to provide wide-area stability services in the form of oscillations damping controls; and (r) use of gird forming BESS for enabling black start and islanded applications for PV-BESS systems. In the paper we will also describe the unique multi-MW test and validation platform developed at NREL for conducting research on fielded utility-scale PV-BESS systems. The platform consists of First Solar 0.43 MW PV power plant, NREL’s 1MW/1MW BESS, 2MW PV power supplies and 7MVA power electronic grid simulator interfaced with industrial plant controllers and power-hardware-in-the-loop (PHIL) capability.

41 EE - Solar Energy Technologies Office (EE-4S)↗

Service-Based, Segmented, 5G Network-Based Architecture for Securing Distributed Energy Resources: Preprint

As the number of connected devices in the energy grid increase exponentially, so too are the cybersecurity risks. With the development of modern communications standards such as 5G and beyond the extent to which devices will continue to connect will continue to increase exponentially along with the inherent risks. However, 5G also includes features to help address cybersecurity concerns and therefore helping to mitigate many of these risks. This paper proposes a new service-based network architecture implementing network-slicing capabilities for connected systems and devices to improve performance, availability, security, and reliability of the grid devices and services. This paper considers the quality of service requirements and criticality of services needed for securely monitoring, operating, and securing Distributed Energy Resource (DER) devices. From developed use cases, network slicing is implemented based on these requirements and resource allocations. This work then highlights examples of how slicing can help prevent standard existing attack methods such as a denial-of-service or similar attack which limits resource availability and network bandwidth to the service and thus limiting its ability to affect other services by misbehaving. The designed network architecture use case will be further tested on a local virtualized testbed to verify secure operation and availability of services. Using hardware-in-the-loop devices and systems on this local testbed, this fully segmented, secure network may be realized and evaluated. Finally, this paper presents the results of this testing.

5G↗