Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “VIOLATIONS”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 667 records · Page 37
All sourcesNASA NTRSDOE OSTI
NASA NTRS1996

Gravitational Redshift in a Local Freely Falling Frame: A Proposed New Null Test of the Equivalence Principle

We consider the gravitational redshift effect measured by an observer in a local freely failing frame (LFFF) in the gravitational field of a massive body. For purely metric theories of gravity, the metric in a LFFF is expected to differ from that of flat spacetime by only "tidal" terms of order (GM/c(exp 2)R)(r'/R )(exp 2), where R is the distance of the observer from the massive body, and r' is the coordinate separation relative to the origin of the LFFF. A simple derivation shows that a violation of the equivalence principle for certain types of "clocks" could lead to a larger apparent redshift effect of order (1 - alpha)(G M/c(exp 2)R)(r'/R), where alpha parametrizes the violation (alpha = 1 for purely metric theories, such as general relativity). Therefore, redshift experiments in a LFFF with separated clocks can provide a new null test of the equivalence principle. With presently available technology, it is possible to reach an accuracy of 0.01% in the gravitational field of the Sun using an atomic clock orbiting the Earth. A 1% test in the gravitational field of the galaxy would be possible if an atomic frequency standard were flown on a space mission to the outer solar system.

Krisher, Timothy P.↗
NASA NTRS2001

Using Runtime Analysis to Guide Model Checking of Java Programs

This paper describes how two runtime analysis algorithms, an existing data race detection algorithm and a new deadlock detection algorithm, have been implemented to analyze Java programs. Runtime analysis is based on the idea of executing the program once. and observing the generated run to extract various kinds of information. This information can then be used to predict whether other different runs may violate some properties of interest, in addition of course to demonstrate whether the generated run itself violates such properties. These runtime analyses can be performed stand-alone to generate a set of warnings. It is furthermore demonstrated how these warnings can be used to guide a model checker, thereby reducing the search space. The described techniques have been implemented in the b e grown Java model checker called PathFinder.

Havelund, Klaus↗
NASA NTRS1997

The Design of Model-Based Training Programs

This paper proposes a model-based training program for the skills necessary to operate advance avionics systems that incorporate advanced autopilots and fight management systems. The training model is based on a formalism, the operational procedure model, that represents the mission model, the rules, and the functions of a modem avionics system. This formalism has been defined such that it can be understood and shared by pilots, the avionics software, and design engineers. Each element of the software is defined in terms of its intent (What?), the rationale (Why?), and the resulting behavior (How?). The Advanced Computer Tutoring project at Carnegie Mellon University has developed a type of model-based, computer aided instructional technology called cognitive tutors. They summarize numerous studies showing that training times to a specified level of competence can be achieved in one third the time of conventional class room instruction. We are developing a similar model-based training program for the skills necessary to operation the avionics. The model underlying the instructional program and that simulates the effects of pilots entries and the behavior of the avionics is based on the operational procedure model. Pilots are given a series of vertical flightpath management problems. Entries that result in violations, such as failure to make a crossing restriction or violating the speed limits, result in error messages with instruction. At any time, the flightcrew can request suggestions on the appropriate set of actions. A similar and successful training program for basic skills for the FMS on the Boeing 737-300 was developed and evaluated. The results strongly support the claim that the training methodology can be adapted to the cockpit.

Polson, Peter↗
NASA NTRS2004

Test of the Equivalence Principle in an Einstein Elevator

The scientific goal of the experiment is to test the equality of gravitational and inertial mass (i.e., to test the Principle of Equivalence) by measuring the independence of the rate of fall of bodies from their compositions. The measurement is accomplished by measuring the relative displacement (or equivalently acceleration) of two falling bodies of different materials which are the proof masses of a differential accelerometer spinning about an horizontal axis to modulate a possible violation signal. A non-zero differential acceleration appearing at the signal frequency will indicate a violation of the Equivalence Principle. The goal of the experiment is to measure the Eotvos ratio og/g (differential acceleration/common acceleration) with a targeted accuracy that is about two orders of magnitude better than the state of the art (presently at several parts in 10(exp 13). The analyses carried out during this first grant year have focused on: (1) evaluation of possible shapes for the proof masses to meet the requirements on the higher-order mass moment disturbances generated by the falling capsule; (2) dynamics of the instrument package and differential acceleration measurement in the presence of errors and imperfections; (3) computation of the inertia characteristic of the instrument package that enable a separation of the signal from the dynamics-related noise; (4) a revised thermal analysis of the instrument package in light of the new conceptual design of the cryostat; (5) the development of a dynamic and control model of the capsule attached to the gondola and balloon to define the requirements for the leveling mechanism (6) a conceptual design of the leveling mechanism that keeps the capsule aligned before release from the balloon; and (7) a new conceptual design of the customized cryostat and a preliminary valuation of its cost. The project also involves an international cooperation with the Institute of Space Physics (IFSI) in Rome, Italy. The group at IFSI is in charge of prototyping the differential accelerometer and carrying out precursor laboratory measurements. During this grant year, our partners analyzed and then designed a new prototype of differential accelerometer that has several characteristics in common with the flight accelerometer at this point of the instrument development. The highlights of these activities are documented in a section of this report.

Shapiro, Irwin I.↗
NASA NTRS2004

Probing Planck-Scale physics with a Ne-21/He-3 Zeeman maser

We completed a search for a sidereal annual variation in the frequency difference between co-located Xe-129 and He-3 Zeeman masers. This search sets a stringent limit of approximately 10(exp -27) GeV on boost-dependent Lorentz and CPT violation involving the neutron. A paper reporting this result has been accepted for publication in Physical Review Letters. We also completed detailed modeling and design of the next-generation dual-noble-gas Zeeman maser for an improved test of Lorentz and CPT violation, and begin construction of this device.

Walsworth, Ronald L.↗
NASA NTRS2004

Meeting the Deadline: Why, When and How

A normative system is defined as any set of interacting agents whose behavior can usefully be regarded as norm-directed. Most organizations, and more specifically institutions, fall under this definition. Interactions in these normative systems are regulated by normative templates that describe desired behavior in terms of deontic concepts (obligations, prohibitions and permissions), deadlines, violations and sanctions. Agreements between agents, and between an agent and the society, can then be specified by means of contracts. Contracts provide flexible but verifiable means to integrate society requirements and agent autonomy. and are an adequate means for the explicit specification of interactions. From the society perspective, it is important that these contracts adhere to the specifications described in the model of the organization. If we want to automate such verifications, we have to formalize the languages used for contracts and for the specification of organizations. The logic LCR is based on deontic temporal logic. LCR is an expressive language for describing interaction in multi-agent systems, including obligations with deadlines. Deadlines are important norms in most interactions between agents. Intuitively, a deadline states that an agent should perform an action before a certain point in time. The obligation to perform the action starts at the moment the deadline becomes active. E.g. when a contract is signed or approved. If the action is not performed in time a violation of the deadline occurs. It can be specified independently what measure has to be taken in this case. In this paper we investigate the deadline concept in more detail. The paper is organized as follows. Section 2 defines the variant of CTL we use. In section 3, we discuss the basic intuitions of deadlines. Section 4 presents a first intuitive formalization for deadlines. In section 5, we look at a more complex model for deadlines trying to catch some more practical aspects. Finally, in section 6 we present issues for future work and our conciusions.

Dignum, Frank↗
NASA NTRS2004

The Office of Inspector General (OIG)

The NASA Office of Inspector General is the Federal Law Enforcement Agency at NASA which conducts criminal and regulatory investigations in which NASA is a victim. The OIG prevents and detects crime, fiaud, waste and abuse and assists NASA management in promoting economy, efficiency, and effectiveness in its programs and operations. Investigations (OI) and the Office of Audits (OA). The investigations side deals with criminal Investigations, administrative investigations, and civil investigations. The Audits side deals with inspections and assessments as well as the Auditing of NASA Programs and Activities. Our mission at the OIG is to conduct and supervise independent and objective audits and investigations relating to agency programs and operations; to promote economy, effectiveness and efficiency within the agency; to prevent and detect crime, fraud, waste and abuse in agency programs and operations; to review and make recommendations regarding existing and proposed legislation and regulations relating to agency programs and operations. We are also responsible for keeping the agency head and the Congress fully and currently informed of problems in agency programs and operations. deal with False Claims, False Statements, Conspiracy, Theft, Computer Crime, Mail Fraud, the Procurement Integrity Act, the Anti-Kickback Act, as well as noncompliance with NASA Management Instructions, the Federal Acquisition Regulations (FAR), and the Code of Federal Regulations (CFR). Most of the casework that is dealt with in our office is generated through gum shoe work or cases that we generate on our own. These cases can come from Law Enforcement Referrals, GIDEP Reports, EPlMS (NASA Quality System), Defense Contract Audit Agency, Newspaper Articles, and Confidential Information. In many cases, confidentiality is the biggest factor to informants coming forward. We are able to maintain confidentiality because the 01 is independent of NASA Management and doesn t report to the Center Directors, therefore the informant s mangers and supervisors are unaware of the informants actions. The only time when an informant s confidentiality may be compromised is when it is needed in a Court of Law and is released through a Judicial Court Order. During my tenure here at the NASA OIG/OI at Glenn Research Center, I have been involved in many different tasks. They have ranged from updating Suspected Unapproved Parts case files to independently interviewing NASA employees to turn up general background information. The 01 has the duty of informing NASA aeronautical safety managers of potential Nonconforming products. My mission is to compile a database of Nonconformance reports for distribution. The background information that I turn up from my interviews is then used to determine NASA s susceptibility to acceptance of unapproved parts. The IG organization is divided up into two separate disciplines, the Office of 01 investigations primarily focus on violations of Federal laws. Some of these violations

Macisco, Christopher A.↗
NASA NTRS2005

Formal Safety Certification of Aerospace Software

In principle, formal methods offer many advantages for aerospace software development: they can help to achieve ultra-high reliability, and they can be used to provide evidence of the reliability claims which can then be subjected to external scrutiny. However, despite years of research and many advances in the underlying formalisms of specification, semantics, and logic, formal methods are not much used in practice. In our opinion this is related to three major shortcomings. First, the application of formal methods is still expensive because they are labor- and knowledge-intensive. Second, they are difficult to scale up to complex systems because they are based on deep mathematical insights about the behavior of the systems (t.e., they rely on the "heroic proof"). Third, the proofs can be difficult to interpret, and typically stand in isolation from the original code. In this paper, we describe a tool for formally demonstrating safety-relevant aspects of aerospace software, which largely circumvents these problems. We focus on safely properties because it has been observed that safety violations such as out-of-bounds memory accesses or use of uninitialized variables constitute the majority of the errors found in the aerospace domain. In our approach, safety means that the program will not violate a set of rules that can range for the simple memory access rules to high-level flight rules. These different safety properties are formalized as different safety policies in Hoare logic, which are then used by a verification condition generator along with the code and logical annotations in order to derive formal safety conditions; these are then proven using an automated theorem prover. Our certification system is currently integrated into a model-based code generation toolset that generates the annotations together with the code. However, this automated formal certification technology is not exclusively constrained to our code generator and could, in principle, also be integrated with other code generators such as RealTime Workshop or even applied to legacy code. Our approach circumvents the historical problems with formal methods by increasing the degree of automation on all levels. The restriction to safety policies (as opposed to arbitrary functional behavior) results in simpler proof problems that can generally be solved by fully automatic theorem proves. An automated linking mechanism between the safety conditions and the code provides some of the traceability mandated by process standards such as DO-178B. An automated explanation mechanism uses semantic markup added by the verification condition generator to produce natural-language explanations of the safety conditions and thus supports their interpretation in relation to the code. It shows an automatically generated certification browser that lets users inspect the (generated) code along with the safety conditions (including textual explanations), and uses hyperlinks to automate tracing between the two levels. Here, the explanations reflect the logical structure of the safety obligation but the mechanism can in principle be customized using different sets of domain concepts. The interface also provides some limited control over the certification process itself. Our long-term goal is a seamless integration of certification, code generation, and manual coding that results in a "certified pipeline" in which specifications are automatically transformed into executable code, together with the supporting artifacts necessary for achieving and demonstrating the high level of assurance needed in the aerospace domain.

Denney, Ewen↗
NASA NTRS2005

Assume-Guarantee Testing

Verification techniques for component-based systems should ideally be able to predict properties of the assembled system through analysis of individual components before assembly. This work introduces such a modular technique in the context of testing. Assume-guarantee testing relies on the (automated) decomposition of key system-level requirements into local component requirements at design time. Developers can verify the local requirements by checking components in isolation; failed checks may indicate violations of system requirements, while valid traces from different components compose via the assume-guarantee proof rule to potentially provide system coverage. These local requirements also form the foundation of a technique for efficient predictive testing of assembled systems: given a correct system run, this technique can predict violations by alternative system runs without constructing those runs. We discuss the application of our approach to testing a multi-threaded NASA application, where we treat threads as components.

Blundell, Colin↗
NASA NTRS2005

Analysis of Rapidly Developing Low Cloud Ceilings in a Stable Environment

This report describes the work done by the Applied Meteorology Unit (AMU) in developing a database of days that experienced rapid (< 90 minutes) low cloud formation in a stable atmosphere, resulting in ceilings at the Shuttle Landing Facility (TTS) that violated Space Shuttle Flight Rules (FR). The meteorological conditions favoring the rapid formation of low ceilings include the presence of any inversion below 8000 ft, high relative humidity beneath the inversion, and a clockwise turning of the winds from the surface to the middle troposphere (approx. 15000 ft). The AMU compared and contrasted the atmospheric and thermodynamic conditions between days with rapid low ceiling formation and days with low ceiling resulting from other mechanism. The AMU found that the vertical wind profile is the probable discerning factor between the rapidly-forming ceiling days and other low ceiling days at TTS. Most rapidly-developing low ceiling days had a clockwise turning of the winds with height, whereas other low ceiling days typically had a counter-clockwise turning of the winds with height or negligible vertical wind shear. Forecasters at the Space Meteorology Group (SMG) issue 30 to 90 minute forecasts for low cloud ceilings at TTS to support Space Shuttle landings. Mission verification statistics have shown ceilings to be the number one forecast challenge. More specifically, forecasters at SMG are concerned with any rapidly developing clouds ceilings below 8000 ft in a stable, capped thermodynamic environment, Therefore, the AMU was tasked to examine archived events of rapid stable cloud formation resulting in ceilings below 8000 ft, and document the atmospheric regimes favoring this type of cloud development. The AMU examined the cool season months of November to March during the years of 1993-2003 for days that had low-level inversions and rapid, stable low cloud formation that resulted in ceilings violating the Space Shuttle FR. The AMU wrote and modified existing code to identify inversions from the morning Cape Canaveral, FL rawinsonde (XMR) during the cool season and output pertinent sounding information. They parsed all days with cloud ceilings below 8000 ft at TTS, forming a database of possible rapidly-developing low ceiling events. Days with precipitation or noticeable fog bum-off situations were excluded from the database. Only the daytime hours were examined for possible ceiling development events since low clouds are easier to diagnose with visible satellite imagery. Follow-on work would expand the database to include nighttime cases, using a special enhancement of the infrared imagery for identifying areas of low clouds. The report presents two sample cases of rapidly-developing low cloud ceilings. These cases depict the representative meteorological and thermodynamic characteristics of such events. The cases also illustrate how quickly the cloud decks can develop, sometimes forming in 30 minutes or less. The report also summarizes the composite meteorological conditions for 20 event days with rapid low cloud ceiling formation and 48 non-events days consisting of advection or widespread low cloud ceilings. The meteorological conditions were quite similar for both the event and non-event days, since both types of days experienced low cloud ceilings. Both types of days had a relatively moist environment beneath the inversion based below 8000 ft. In the 20 events identified, de onset of low ceilings occurred between 1200-1800 UTC in every instance. The distinguishing factor between the event and non-event days appears to be the vertical wind profile in the XMR sounding. Eighty-five percent of the event days had a clockwise turning of the winds with height in the lower to middle troposphere whereas 83% of the non-events had a counter-clockwise turning of the winds with height or negligible vertical wind shear. A clockwise turning of the winds with height indicates a warm advection regime, which supports large-scale rising motn and possible cloud formation. Meanwhile, a counter-clockwise turning of the winds with height indicates cold advection or sinking motion in a post-cold frontal environment.

Wheeler, Mark M.↗
NASA NTRS2007

Stable Low Cloud Phase II: Nocturnal Event Study

This report describes the work done by the Applied Meteorology Unit (AMU) in developing a database of nights that experienced rapid (< 90 minutes) low cloud formation in a stable atmosphere, resulting in ceilings at the Shuttle Landing Facility (TTS) that violated Space Shuttle Flight Rules (FR). This work is the second phase of a similar AMU task that examined the same phenomena during the day. In the first phase of this work, the meteorological conditions favoring the rapid formation of low ceilings include the presence of any inversion below 8000 ft, high relative humidity (RH) beneath the inversion and a clockwise turning of the winds from the surface to the middle troposphere (-15000 ft). The AMU compared and contrasted the atmospheric and thermodynamic conditions between nights with rapid low ceiling formation and nights with low ceilings resulting from other mechanisms. The AMU found that there was little to discern between the rapidly-forming ceiling nights and other low ceiling nights at TTS. When a rapid development occurred, the average RH below the inversions was 87% while non-events had an average RH of 79%. One key parameter appeared to be the vertical wind profile in the Cape Canaveral, FL radiosonde (XMR) sounding. Eighty-three percent of the rapid development events had veering winds with height from the surface to the middle troposphere (-15,000 ft) while 61% of the non-events had veering winds with height. Veering winds indicate a warm-advection regime, which supports large-scale rising motion and ultimately cloud formation in a moist environment. However, only six of the nights (out of 86 events examined) with low cloud ceilings had an occurrence of rapidly developing ceilings. Since only 7% rapid development events were observed in this dataset, it is likely that rapid low cloud development is not a common occurrence during the night, or at least not as common as during the day. In the AMU work on the daytime rapid low cloud development (Case and Wheeler 2005), nearly 30% of the low cloud ceiling cases investigated were identified as rapidly developing events. Forecasters at the Space Meteorology Group (SMG) issue 30 to 90 minute forecasts for low cloud ceilings at TTS to support Space Shuttle landings. Mission verification statistics have shown ceilings to be the number one forecast challenge. More specifically, forecasters at SMG are concerned with any rapidly developing clouds/ceilings below 8000 R in a stable, capped thermodynamic environment. Therefore, the AMU was tasked to examine archived events of rapid stable cloud formation resulting in ceilings below 8000 ft, and document the atmospheric regimes favoring this type of cloud development. The AMU examined the cool season months of November to March during the years of 1994-2005 for nights that had low-level inversions and rapid, stable low cloud formation that resulted in ceilings violating the Space Shuttle FR. The AMU wrote and modified existing code to identify inversions from the evening and morning XMR radiosonde during the cool season and output pertinent sounding information. They parsed all days with cloud ceilings below 8000 ft at TTS, forming a database of possible rapidly-developing low ceiling events. Nights with precipitation or noticeable fog burn-off situations were excluded from the database. Only the nighttime hours were examined for possible ceiling development events since the daytime events were examined in the first phase of this work. The report presents one sample case of rapidly-developing low cloud ceilings. The case depicts the representative meteorological and thermodynamic characteristics of such events. The case also illustrates how quickly the cloud decks can develop, sometimes forming in 30 minutes or less. The report also summarizes the composite meteorological conditions for 6 event nights with rapid low cloud ceiling formation and 80 non-events nights consisting of advection or widespread low cloud ceilings. The teorological conditions were quite similar for both the event and non-event nights, since both types of nights experienced low cloud ceilings. Both types of nights had a relatively moist environment beneath an inversion based below 8000 ft.

Bauman, William H., III↗
NASA NTRS2007

Testing Special Relativity at High Energies with Astrophysical Sources

Since the group of Lorentz boosts is unbounded, there is a question as to whether Lorentz invariance (LI) holds to infinitely short distances. However, special and general relativity may break down at the Planck scale. Various quantum gravity scenarios such as loop quantum gravity, as well as some forms of string theory and extra dimension models may imply Lorentz violation (LV) at ultrahigh energies. The Gamma-Ray Large Area Space Telescope (GLAST), to be launched in mid-December, will measure the spectra of distant extragalactic sources of high energy gamma-rays, particularly active galactic nuclei and gamma-ray bursts. GLAST can look for energy-dependent gamma-ray propagation effects from such sources as a signal of Lorentz invariance violation. These sources may also exhibit the high energy cutoffs predicted to be the result of intergalactic annihilation interactions with low energy photons having a flux level as determined by various astronomical observations. With LV the threshold for such interactions can be significantly raised, changing the predicted absorption turnover in the observed spectrum of the sources. Stecker and Glashow have shown that the existence such absorption features in the spectra of extragalactic sources puts constraints on LV. Such constraints have important implications for some quantum gravity and large extra dimension models. Future spaceborne detectors dedicated to measuring gamma-ray polarization can look for birefringence effects as a possible signal of loop quantum gravity. A very small LV may also result in the modification or elimination of the GZK effect, thus modifying the spectrum of ultrahigh energy cosmic rays. This possibility can be explored with ground-based arrays such as Auger or with a space based detector system such as the proposed OWL satellite mission.

Stecker, F. W.↗
NASA NTRS2003

Precision Clocks in Space and alpha-Variations

Important developments of both in theoretical and observational cosmology have fueled considerable interest in searches for variations of the fine structure constant. Experimentally, Webb et. al. have found evidence for a cosmological variation of the fine structure constant through an analysis of the absorption lines in galactic halos from quasar-emitted light. Recently developed small ion atomic clocks enable Solar System tests for equivalence principle (EP) violating (alpha)-variations by way of rate-comparisons of three ultra-stable atomic clocks near-to and far-from the sun where gravitational red-shift changes are more than 10(exp 4) larger than in low Earth orbit. No space tests of the EP have been made in nearly 30 years, since the GP-A hydrogen maser reached a 10,000 km apogee confirming EP red-shift predictions ~1 part in 10(exp 4). Today's small ion clocks, nearly 100x more stable and 100x smaller then the GP-A H-maser, could probe for EP violating scalar fields near the sun for mission costs comparable to low Earth orbiters and improve the GP-A sensitivity by 5 to 6 orders of magnitude.

(alpha)-variation↗
NASA NTRS2007

Detection and enforcement of failure-to-yield in an emergency vehicle preemption system

An intersection controlled by an intersection controller receives trigger signals from on-coming emergency vehicles responding to an emergency call. The intersection controller initiates surveillance of the intersection via cameras installed at the intersection in response to a received trigger signal. The surveillance may begin immediately upon receipt of the trigger signal from an emergency vehicle, or may wait until the intersection controller determines that the signaling emergency vehicle is in the field of view of the cameras at the intersection. Portions of the captured images are tagged by the intersection controller based on tag signals transmitted by the vehicle or based on detected traffic patterns that indicate a potential traffic violation. The captured images are downloaded to a processing facility that analyzes the images and automatically issues citations for captured traffic violations.

Bachelder, Aaron↗
NASA NTRS2008

Using Life-Cycle Human Factors Engineering to Avoid $2.4 Million in Costs: Lessons Learned from NASA's Requirements Verification Process for Space Payloads

The Human Factors Implementation Team (HFIT) process has been used to verify human factors requirements for NASA International Space Station (ISS) payloads since 2003, resulting in $2.4 million in avoided costs. This cost benefit has been realized by greatly reducing the need to process time-consuming formal waivers (exceptions) for individual requirements violations. The HFIT team, which includes astronauts and their technical staff, acts as the single source for human factors requirements integration of payloads. HFIT has the authority to provide inputs during early design phases, thus eliminating many potential requirements violations in a cost-effective manner. In those instances where it is not economically or technically feasible to meet the precise metric of a given requirement, HFIT can work with the payload engineers to develop common sense solutions and formally document that the resulting payload design does not materially affect the astronaut s ability to operate and interact with the payload. The HFIT process is fully ISO 9000 compliant and works concurrently with NASA s formal systems engineering work flow. Due to its success with payloads, the HFIT process is being adapted and extended to ISS systems hardware. Key aspects of this process are also being considered for NASA's Space Shuttle replacement, the Crew Exploration Vehicle.

Carr, Daniel↗
NASA NTRS2008

Intelligent Engine Systems: Adaptive Control

We have studied the application of the baseline Model Predictive Control (MPC) algorithm to the control of main fuel flow rate (WF36), variable bleed valve (AE24) and variable stator vane (STP25) control of a simulated high-bypass turbofan engine. Using reference trajectories for thrust and turbine inlet temperature (T41) generated by a simulated new engine, we have examined MPC for tracking these two reference outputs while controlling a deteriorated engine. We have examined the results of MPC control for six different transients: two idle-to-takeoff transients at sea level static (SLS) conditions, one takeoff-to-idle transient at SLS, a Bode power command and reverse Bode power command at 20,000 ft/Mach 0.5, and a reverse Bode transient at 35,000 ft/Mach 0.84. For all cases, our primary focus was on the computational effort required by MPC for varying MPC update rates, control horizons, and prediction horizons. We have also considered the effects of these MPC parameters on the performance of the control, with special emphasis on the thrust tracking error, the peak T41, and the sizes of violations of the constraints on the problem, primarily the booster stall margin limit, which for most cases is the lone constraint that is violated with any frequency.

Gibson, Nathan↗
NASA NTRS2010

Automatic Review of Abstract State Machines by Meta Property Verification

A model review is a validation technique aimed at determining if a model is of sufficient quality and allows defects to be identified early in the system development, reducing the cost of fixing them. In this paper we propose a technique to perform automatic review of Abstract State Machine (ASM) formal specifications. We first detect a family of typical vulnerabilities and defects a developer can introduce during the modeling activity using the ASMs and we express such faults as the violation of meta-properties that guarantee certain quality attributes of the specification. These meta-properties are then mapped to temporal logic formulas and model checked for their violation. As a proof of concept, we also report the result of applying this ASM review process to several specifications.

Arcaini, Paolo↗
NASA NTRS2011

Gamma-Ray, Cosmic Ray and Neutrino Tests of Lorentz Invariance and Quantum Gravity Models

High-energy astrophysics observations provide the best possibilities to detect a very small violation of Lorentz invariance such as may be related to the structure of space-time near the Planck scale of approximately 10(exp -35) m. I will discuss here the possible signatures of Lorentz invariance violation (LIV) from observations of the spectra, polarization, and timing of gamma-rays from active galactic nuclei and gamma-ray bursts. Other sensitive tests are provided by observations of the spectra of ultrahigh energy cosmic rays and neutrinos. Using the latest data from the Pierre Auger Observatory one can already derive an upper limit of 4.5 x 10(exp -23) to the amount of LIV of at a proton Lorentz factor of approximately 2 x 10(exp 11). This result has fundamental implications for quantum gravity models. I will also discuss the possibilities of using more sensitive space based detection techniques to improve searches for LIV in the future.

Stecker, Floyd↗