Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safety evaluation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 73 records · Page 4

Industrial Hygiene Issues

This breakout session is a traditional conference instrument used by the NASA industrial hygiene personnel as a method to convene personnel across the Agency with common interests. This particular session focused on two key topics, training systems and automation of industrial hygiene data. During the FY 98 NASA Occupational Health Benchmarking study, the training system under development by the U.S. Environmental Protection Agency (EPA) was deemed to represent a "best business practice." The EPA has invested extensively in the development of computer based training covering a broad range of safety, health and environmental topics. Currently, five compact disks have been developed covering the topics listed: Safety, Health and Environmental Management Training for Field Inspection Activities; EPA Basic Radiation Training Safety Course; The OSHA 600 Collateral Duty Safety and Health Course; and Key program topics in environmental compliance, health and safety. Mr. Chris Johnson presented an overview of the EPA compact disk-based training system and answered questions on its deployment and use across the EPA. This training system has also recently been broadly distributed across other Federal Agencies. The EPA training system is considered "public domain" and, as such, is available to NASA at no cost in its current form. Copies of the five CD set of training programs were distributed to each NASA Center represented in the breakout session. Mr. Brisbin requested that each NASA Center review the training materials and determine whether there is interest in using the materials as it is or requesting that EPA tailor the training modules to suit NASA's training program needs. The Safety, Health and Medical Services organization at Ames Research Center has completed automation of several key program areas. Mr. Patrick Hogan, Safety Program Manager for Ames Research Center, presented a demonstration of the automated systems, which are described by the following: (1) Safety, Health and Environmental Training. This system includes an assessment of training needs for every NASA Center organization, course descriptions, schedules and automated course scheduling, and presentation of training program metrics; (2) Safety and Health Inspection Information. This system documents the findings from each facility inspection, tracks abatement status on those findings and presents metrics on each department for senior management review; (3) Safety Performance Evaluation Profile. The survey system used by NASA to evaluate employee and supervisory perceptions of safety programs is automated in this system; and (4) Documentation Tracking System. Electronic archive and retrieval of all correspondence and technical reports generated by the Safety, Health and Medical Services Office are provided by this system.

Brisbin, Steven G.↗

Automating the Generation of Heterogeneous Aviation Safety Cases

A safety case is a structured argument, supported by a body of evidence, which provides a convincing and valid justification that a system is acceptably safe for a given application in a given operating environment. This report describes the development of a fragment of a preliminary safety case for the Swift Unmanned Aircraft System. The construction of the safety case fragment consists of two parts: a manually constructed system-level case, and an automatically constructed lower-level case, generated from formal proof of safety-relevant correctness properties. We provide a detailed discussion of the safety considerations for the target system, emphasizing the heterogeneity of sources of safety-relevant information, and use a hazard analysis to derive safety requirements, including formal requirements. We evaluate the safety case using three classes of metrics for measuring degrees of coverage, automation, and understandability. We then present our preliminary conclusions and make suggestions for future work.

Denney, Ewen W.↗

Implementation of COTs Hardware in Non-Critical Space Applications: A Brief Tutorial

Approaches used for manned applications include limited items such as CD-players evaluated for safety to high criticality applications where the COTs hardware is evaluated on a case-by-case basis for the application and commensurate screening and qualification testing. COTS hardware is successfully implemented in both the International Space Station and Space Shuttle but requires evaluation and modifications for the application. Screening and qualification of COTs hardware used in critical applications may need to be more extensive and stringent than traditional military screening. Evaluation for: a) Suitability for the application; b) Safety; c) Reliability and maintainability; and d) Workmanship.

Yoder, Geoffrey L.↗

Evaluation of Performance and Safety of Electrofuel Lithium-Ion Polymer Cells

Lithium-ion batteries of the conventional and polymer type are being used widely for cellular phones, cameras, camcorders, personal computers, PDAs and in several other portable electronic equipment. The Electrofuel 11-ion polymer battery is one of the first available polymer batteries to be used for commercial applications. In our study, the tests carried out on these cells were aimed at determining if these batteries can be used in extravehicular activity tools for both Shuttle and International Space Station

Jeevarajan, Judith A.↗

Controllers and Pilots Play a Key Role in Runway Safety Initiatives Through Real-Time Simulation

A new and innovative way to evaluate runway safety initiatives for airports is through the use of interactive real-time simulation. The National Aeronautics and Space Administration (NASA) operates an integrated suite of simulators that can give both pilots and tower controllers the ability to simultaneously "try out" ideas in the safety of virtual reality. In February of 2003, the FAA conducted a demonstration in the NASA facilities for Dallas/Fort Worth International Airport (DFW) of a concept to reduce runway crossings and enhance the efficiency of the airport. Currently DFW experiences about 1,700 runway crossings per day, which contribute to arrival and departure delays and the potential for runway incursions. The proposed concept included the addition of new perimeter taxiways on the East and West sides of the airport. Through use of NASA's unique simulation capabilities, DFW controllers and commercial pilots provided expert feedback on the safety and operational implications by directly experiencing the proposed changes. Overall, the data collected from the participants and the simulators demonstrated that the concept would improve operations at DFW, if implemented. Improvements were observed in many areas including departure rates, taxi duration, runway crossings, and controller and pilot communications.

Madson, Mike↗

Testing and Results of Human Metabolic Simulation Utilizing Ultrasonic Nebulizer Technology for Water Vapor Generation

Life support technology must be evaluated thoroughly before ever being implemented into a functioning design. A major concern during that evaluation is safety. The ability to mimic human metabolic loads allows test engineers to evaluate the effectiveness of new technologies without risking injury to any actual humans. The main function of most life support technologies is the removal of carbon dioxide (CO2) and water (H2O) vapor. As such any good human metabolic simulator (HMS) will mimic the human body s ability to produce these items. Introducing CO2 into a test chamber is a very straightforward process with few unknowns so the focus of this particular new HMS design was on the much more complicated process of introducing known quantities of H2O vapor on command. Past iterations of the HMS have utilized steam which is very hard to keep in vapor phase while transporting and injecting into a test chamber. Also steam adds large quantities of heat to any test chamber, well beyond what an actual human does. For the new HMS an alternative approach to water vapor generation was designed utilizing ultrasonic nebulizers as a method for creating water vapor. Ultrasonic technology allows water to be vibrated into extremely tiny pieces (2-5 microns) and evaporate without requiring additional heating. Doing this process inside the test chamber itself allows H2O vapor generation without the unwanted heat and the challenging process of transporting water vapor. This paper presents the design details as well as results of all initial and final acceptance system testing. Testing of the system was performed at a range of known human metabolic rates in both sea-level and reduced pressure environments. This multitude of test points fully defines the systems capabilities as they relate to actual environmental systems testing.

Stubbe, Matthew↗

Safety Assessment of Conformance Monitoring for Situational Awareness in UTM Operations

This report presents a systematic approach to evaluating the safety benefit of utilizing strategic deconfliction and Conformance Monitoring for Situational Awareness to manage the traffic that is comprised of both conforming aircraft and contingent aircraft. First, we developed a Monte-Carlo-based simulation platform that generates a range of nominal flight paths, a set of flight paths associated with contingent aircraft, encounters between conforming and contingent aircraft, and simulates aircraft's reported positions within conformance bounds. Next, we derived the mathematical equations for quantifying the level of safety, represented by the probability of mid-air collision per flight hour, using the flight data from the simulation platform. Finally, we compared the safety benefit of CMSA services in scenarios generated at different traffic densities and rates of contingent aircraft. This study suggests that strategic deconfliction and CMSA services can collaboratively handle traffic mixed with conforming and contingent aircraft more safely than strategic deconfliction alone.

CMSA↗

Control Effectiveness: Metric Development and Application to Resilient Lunar Habitat Design

System safety engineering in its bare essence involves identifying, assessing, and mitigating, or controlling, hazards. Appropriate safety controls are selected using hazard reduction precedence principles, prior experience, or by assessing their impact on residual risk (together with other factors like cost). We propose a control effectiveness metric as one way to systematically and consistently evaluate potential safety controls individually and thereby facilitate selecting a shortlist of potential controls for subsequent integrated evaluation. The control effectiveness metric considers a safety control’s availability when needed, the probability that its design is adequate in addressing the targeted hazard, the probability that the design will be implemented as intended, and the relationship between the time it takes for the safety control to address its target hazard and the time before the hazard propagates. We demonstrated the use of our metric on a lunar habitat design using a physics-based habitat simulator. High control effectiveness and safety controls result in a habitat with high resilience, while low control effectiveness results in lower resilience.

Rashi Jain↗

A computer-based Safety Assessment for Flight Evacuation - SAFE

The Safety Assessment for Flight Evacuation (SAFE) system has been developed for the computerized evaluation of safety in civil Emergency Medical Service (EMS) operations. The speed of the microprocessor used to analyze data allows many individual factors to be considered, as well as the interactions among those factors. SAFE's data base is structured as if-then conditional statements. SAFE also allows the most important of the factors to be given greater weight in the final score. The questionnaire filled by EMS crews encompassed mission-, crew-, organization-, environment-, and aircraft-related factors; each of these was subdivided into as many as eight variables affecting the EMS-mission risk of that factor.

Shively, Robert J.↗

NASA System Wide Safety Project Safety Metrics Research

This is a short set of PPT slides that we will use when we visit several US airlines to provide an introduction to a data collection task supporting the System Wide Safety Project. The goal is to gain an understanding of what airline dispatchers and other airline personnel see as hazards affecting the safety of flight. We want to list the hazards and how they are evaluated as safety metrics. This may eventually lead to an ability to monitor safety metrics in the National Airspace System and identify and predict possible unsafe situations.

Aviation safety↗

Nuclear safety considerations for the design of a shuttle launched 500 to 2000 watt isotope Brayton power system.

An extensive study was conducted to evaluate the safety requirements for the design of a heat source assembly for use in a shuttle launched, isotope Brayton electric power system for the 500-W(e) to 2 kWe range. The assembly is a self-contained package which supplies heat to a power conversion system. A typical mission profile for a shuttle launched, earth orbital mission was assumed. Critical mission accidents were identified and evaluated to determine their impact upon the design of the Heat Source Assembly. Earth-orbital decay reentry analyses were performed to demonstrate survivability of the heat source. Safety design requirements were developed to ensure survivability under credible accident conditions including loss of the power conversion system in orbit.

Garate, J. A.↗

Modular space station phase B extension

The system safety analyses and requirements developed for the modular space station during the phase B extension are reviewed. Residual hazards and unresolved safety issues are summarized. Hazards resulting from equipment failures or malfunctions, operations, or credible accidents are identified and evaluated. Special safety trade studies are presented.

Source record↗

Aviation Safety: Modeling and Analyzing Complex Interactions between Humans and Automated Systems

The on-going transformation from the current US Air Traffic System (ATS) to the Next Generation Air Traffic System (NextGen) will force the introduction of new automated systems and most likely will cause automation to migrate from ground to air. This will yield new function allocations between humans and automation and therefore change the roles and responsibilities in the ATS. Yet, safety in NextGen is required to be at least as good as in the current system. We therefore need techniques to evaluate the safety of the interactions between humans and automation. We think that current human factor studies and simulation-based techniques will fall short in front of the ATS complexity, and that we need to add more automated techniques to simulations, such as model checking, which offers exhaustive coverage of the non-deterministic behaviors in nominal and off-nominal scenarios. In this work, we present a verification approach based both on simulations and on model checking for evaluating the roles and responsibilities of humans and automation. Models are created using Brahms (a multi-agent framework) and we show that the traditional Brahms simulations can be integrated with automated exploration techniques based on model checking, thus offering a complete exploration of the behavioral space of the scenario. Our formal analysis supports the notion of beliefs and probabilities to reason about human behavior. We demonstrate the technique with the Ueberligen accident since it exemplifies authority problems when receiving conflicting advices from human and automated systems.

Muti-agent System↗

Advanced Air Mobility and Safety Management Systems

Our current air transportation system has underserved markets, including local, regional, intraregional, and urban transportation of both people and cargo. Recent advances in aviation technology such as small highly-automated vehicles, electric aircraft, and automated air traffic are enabling business opportunities in these markets. Advanced Air Mobility, or AAM, refers to a community effort to overcome the gaps in operational rules, safety analysis, and overall acceptance, so that these new operations will be possible. For full details, please see: https://www.nasa.gov/aam As we think about how we can safely introduce these new operations, fundamental questions about how the structure of Safety Management Systems can be applied to AAM, and how that structure can be used to help us overcome the necessary technical and societal obstacles arise. Two of these questions are: • How do we tailor the requirements and desired level of monitoring and assessment to achieve safety given the breadth of possible operations and the associated risk of those operations? • How do we aid innovation by rapidly evaluating the safety of novel operations without losing associated rigor? We assume that a Safety Management System that enables these future systems will incorporate knowledge of the acceptable level of risk, and will utilize data science to automate the core monitor, assess and mitigate functions that will allow us to respond to risks and hazards in time to prevent safety incidents. In 2018, the National Academies proposed an In-Time Aviation Safety Management System (IASMS) that would advance these goals. (https://www.nap.edu/catalog/24962/in-time-aviation-safety-management-challenges-and-research-for-an) The National Academies made a clear distinction between in-time systems, in which hazards could be identified and risks mitigated in time to prevent incidents, and real-time systems, since many hazards and risks do not need real-time data and analysis to detect and mitigate.

In-Time Aviation Safety Management System↗

Selection and Assessment of Predictions of the Mars Pathfinder Landing Site

The successful landing of the Mars Pathfinder spacecraft on Mars allows the review of the process of selecting the landing site and assessing predictions made for the site based on Viking and Earth-based data. Selection of the landing site for Mars Pathfinder was a two-phase process. The first phase took place from October 1993 to June 1994 and involved: initial identification of engineering constraints, definition of environmental conditions at the site for spacecraft design, and evaluation of the scientific potential of different landing sites. This phase culminated with the first "Mars Pathfinder Landing Site Workshop", held at the Lunar and Planetary Institute in Houston, Texas on April 18-19, 1994, in which suggested approaches and landing sites were solicited from the entire scientific community. A preliminary site was selected by the project for design purposes in June 1994. The second phase took place from July 1994 to March 1996 and involved: developing criteria for evaluating site safety using images and remote sensing data, testing of the spacecraft and landing subsystems (with design improvements) to establish quantitative engineering constraints on landing site characteristics, evaluating all potential landing sites on Mars, and certification of the site by the project. This phase included a second open workshop, "Mars Pathfinder Landing Site Workshop II: Characteristics of the Ares Vallis Region and Field Trips in the Channeled Scabland, Washington" held in Spokane and Moses Lake September 24-30, 1995 and formal acceptance of the site by NASA Headquarters. Engineering constraints on Pathfinder landing sites were developed from the initial design of the spacecraft and the entry, descent and landing scenario. The site must be within 5 degrees of the subsolar latitude at the time of landing (15N for maximum solar power and flexible communications with Earth. It also must be below 0 km elevation to enable enough time for the parachute to bring the lander to the proper terminal velocity for landing. The entire landing ellipse, which is 70 km by 200 km due to navigational, ephemeris and atmospheric uncertainties, must be free of steep slopes, scarps and obvious hazards in Viking orbiter images, have acceptable radar reflectivity, moderate rock abundances and have little or no dust. Scientific considerations of the Mars Pathfinder payload and mission indicate that analyses of "grab bag" samples at the mouths of outflow channels can offer a first order assessment of a variety of rock types on Mars. Highland sites offer the advantage of in situ analysis of ancient rocks on Mars that record crustal differentiation and the nature of the early environment. Dark gray sites offer the potential of analyzing unweathered and unoxidized materials. Following a general assessment of the safety of different sites, a preliminary selection of a "grab bag" site was made. This site, Ares Vallis, is near the mouth of an outflow channel that may contain ancient Noachian terrain, Hesperian ridged plains, and reworked channel materials. All potential landing sites on Mars that met basic safety criteria were analyzed in detail. Sites (100 by 200 km target ellipses) were considered safe if they were below 0 km elevation, were free of obvious hazards (high relief surface features) in high-resolution (< 50 m/pixel) Viking orbiter images and had acceptable reflectivity and roughness at radar wavelengths, high thermal inertia, moderate rock abundance, low red to violet ratio, and low albedo. Only 4 sites on Mars met all the above criteria, which included 1995 opposition 3.5 cm delay-Doppler radar data. Complete data were evaluated for 7 sites and the Viking landing sites for comparison for all the above criteria as well as crater abundance, hill and mesa abundance, slopes over meter to kilometer scales, low altitude winds (from global circulation models and slopes), the size-frequency distribution of large rocks, as well as rover trafficability and science potential. Discussion of potential hazards at Ares Vallis using a variety of data sets (including radar) at a second open workshop, indicated this site cannot be shown to be any more hazardous than the Viking landing sites. Field trips to the Channeled Scabland and the Ephrata Fan, analogs for Ares Vallis and the landing site, respectively, provided valuable insight into possible geologic processes and potential surface characteristics. Three sites met all the data requirements and safety criteria for landing Pathfinder. Ares Vallis was selected by the project because it appeared acceptably safe (although it appeared to have greater rock abundances than other sites, its elevation was likely the best known) and offered the prospect of analyzing a variety of rock types expected to be deposited by catastrophic floods, which would enable addressing first-order scientific questions such as differentiation of the crust, the development of weathering products, and the nature of the early martian environment and its subsequent evolution. The selection was reviewed by an external board at a number of meetings and accepted, and the site was approved by NASA Headquarters. Data gathered by the Pathfinder lander' and rover provides the opportunity to test the predictions made for the site in the selection process based on remote observations from Earth, orbit, and the surface. The discussion below is taken from Golombek et al. to which the reader is referred for a more complete discussion and a complete list of references, which are omitted here for brevity. Many characteristics of the landing site are consistent with its being shaped and deposited by the Ares and Tiu catastrophic floods. The rocky surface is consistent a depositional plain comprising semi-rounded pebbles, cobbles and tabular boulders (some of which appear imbricated and/or inclined in the direction of flow) that appear similar to depositional plains in terrestrial catastrophic floods. The Twin Peaks appear to be streamlined hills in lander images, which is consistent with interpretations of larger hills in Viking orbiter images of the region that suggest the lander is on the flank of a broad, gentle ridge trending northeast from Twin Peaks. This ridge, which is the rise to the north of the lander, is aligned in the downstream direction from the Ares and Tiu Valles floods, and may be a debris tail deposited in the wake of the Twin Peaks. Channels visible throughout the scene may be a result of late stage drainage. As predicted by delay-Doppler radar measurements and tracking results, the average elevation of the center of the site was about the same as Viking Lander I relative to the 6.1 mbar geoid. The Doppler tracking and two-way ranging estimate for the elevation of the spacecraft is only 45 in lower than the Viking I Lander and within 100 in of that expected, which is within the uncertainties of the measurements. After landing, surface pressures and winds (5-10 m/s) were found to be similar to expectations based on Viking data, although temperatures were about 10 K warmer. The temperature profile below 50 km was also roughly 20 K warmer. As a result, predicted densities were 5% higher near the surface and up to 40% lower at 50 km but within the entry, descent and landing design margins. The populations of craters and small hills and the slopes of the hills measured in high-resolution (38 m/pixel) Viking orbiter images and the radar derived slopes of the landing site are all consistent with observations of these properties in the lander images. A rocky surface was expected from Viking Infra-Red Thermal Mapper (IRTM) observations and comparisons with the Viking landing sites. The observed cumulative fraction of area covered by rocks with diameters greater than 3 cm and heights greater than 0.5 in (potentially hazardous to landing) at Ares is similar to that predicted by IRTM observations and models of Viking lander and Earth analog rock size-frequency distributions. The IRTM prediction postulated an effective thermal inertia of 30 (10(exp -3) cgs units - cal/cubic cm/s(exp 0.5)/K) for the rock population, but we obtain a slightly different effective thermal inertia for the actual rock population. The validity of interpretations of radar echoes prior to landing are supported by a simple radar echo model, an estimate of the reflectivity of the soil from its bulk density, and the fraction of area covered by rocks. In the calculations, the soil produces the quasi-specular echo and the rocks produce the diffuse echo. The derived quasispecular cross section is comparable to the cross-sections and reflectivities reported for 3.5-cm wavelength observations. The model yields a diffuse echo that is modestly larger than the polarized diffuse echo reported for 3.5-cm wavelength observations. At 12.5-cm wavelength, similar rock populations at Ares and the Viking I site were expected because the diffuse echoes are comparable, but the large normal reflectivities suggests that bulk densities of the soils at depth are greater than those at the surface. We also obtain a fine-component inertia near 8.4 which agrees with the fine-component inertia of 8.7 (in 10(exp -3) cgs units) estimated from thermal observations from orbit by the IRTM; for this estimate, we used a bulk thermal inertia of 10.4 for the landing site, an effective thermal inertia near 40 (10(exp -3) cgs units) for the rock population, and a graphical representation of Kieffer's model. Color and albedo data for Ares suggested surfaces of materials at Ares Vallis would be relatively dust free or unweathered prior to landing compared with the materials at the Viking landing sites. This suggestion is supported by the abundance of relatively dark-gray rocks at Ares and their relative rarity at the Viking landing sites, where rocks are commonly coated with bright red dust. Finally, the 40 km long Ephrata Fan of the Channeled Scabland in Washington state, which was deposited where c

Golombek, M. P.↗

Evaluating Models of Human Performance: Safety-Critical Systems Applications

This presentation is part of panel discussion on Evaluating Models of Human Performance. The purpose of this panel is to discuss the increasing use of models in the world today and specifically focus on how to describe and evaluate models of human performance. My presentation will focus on discussions of generating distributions of performance, and the evaluation of different strategies for humans performing tasks with mixed initiative (Human-Automation) systems. I will also discuss issues with how to provide Human Performance modeling data to support decisions on acceptability and tradeoffs in the design of safety critical systems. I will conclude with challenges for the future.

Feary, Michael S.↗

Use of Thermoregulatory Models to Enhance Space Shuttle and Space Station operations and Review of Human Thermoregulatory Control

Thermoregulation in the space environment is critical for survival, especially in off- nominal operations. In such cases, mathematical models of thermoregulation are frequently employed to evaluate safety-of-flight issues in various human mission scenarious. In this study, the 225-node Wissler model and the 41-Node Metabolic Man model are employed to evaluate the effects of such a scenario. Metabolic loads on astronauts wearing the advanced crew escape suit (ACES) and liquid cooled ventilation garment (LCVG) are imposed on astronauts exposed to elevated cabin temperatures resulting from a systems failure. The study indicates that the performance of the ACES/LCVG cooling system is marginal. Increases in workload and or cabin temperature above nominal will increase rectal temperature, stored heat load, heart rate, and sweating, which could lead to deficits in the performance of cognitive and motor tasks. This is of concern as the ACES/LCVG is employed during Shuttle decent when the likelihood of a safe landing may be compromised. The study indicates that the most effective mitigation strategy would be to decrease the LCVG inlet temperature.

Pisacane, V. L.↗

Negative Stress Margins - Are They Real?

Advances in modeling and simulation, new finite element software, modeling engines and powerful computers are providing opportunities to interrogate designs in a very different manner and in a more detailed approach than ever before. Margins of safety are also often evaluated using local stresses for various design concepts and design parameters quickly once analysis models are defined and developed. This paper suggests that not all the negative margins of safety evaluated are real. The structural areas where negative margins are frequently encountered are often near stress concentrations, point loads and load discontinuities, near locations of stress singularities, in areas having large gradients but with insufficient mesh density, in areas with modeling issues and modeling errors, and in areas with connections and interfaces, in two-dimensional (2D) and three-dimensional (3D) transitions, bolts and bolt modeling, and boundary conditions. Now, more than ever, structural analysts need to examine and interrogate their analysis results and perform basic sanity checks to determine if these negative margins are real.

Raju, Ivatury S.↗