Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “System safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 721 records · Page 40
All sourcesNASA NTRSDOE OSTI
NASA NTRS2018

Autonomous Surface Site Establishment to Ensure Safe Crew Arrival and Operations

Traditional human Mars missions have relied on crew to support the surface systems. However, for safety, the surface systems will likely need to be setup and capable of operating prior to the arrival of crew. To mitigate risks to the crew, a novel surface architecture has been developed that addresses risks associated with other Mars missions. This architecture relies on a reusable descent and ascent vehicle, extensive in-situ resource utilization, redundant habitation systems, and emerging autonomous capabilities. The resulting surface architecture increases safety for the crew while also providing potential to expand to support longer missions with larger populations in the future.

Jones, Christopher A.↗
NASA NTRS1980

Fault-tolerant system optimization

The paper describes the decisions to be made in the design of fault-tolerant systems and provides details of a comprehensive model developed to cost optimize such systems. Economical use of replication is making fault-tolerant systems possible and more applications for safety crucial systems such as active flight controls can be expected. In turn, the use of massive redundancy, fault-tolerance, and reconfigurable systems in stimulating the development of new analytical tools for establishing the cost and effectiveness of the safety and cost effectiveness of the levels of replication will increase. Closed-form analytical solutions for the reliability and maintainability analysis of fault-tolerant systems are complex, and Monte-Carlo simulation appears to be a more desirable method of establishing the reliability and maintainability of such systems.

Rose, J.↗
NASA NTRS2005

Space-Based Range Safety and Future Space Range Applications

The National Aeronautics and Space Administration (NASA) Space-Based Telemetry and Range Safety (STARS) study is a multiphase project to demonstrate the performance, flexibility and cost savings that can be realized by using space-based assets for the Range Safety [global positioning system (GPS) metric tracking data, flight termination command and range safety data relay] and Range User (telemetry) functions during vehicle launches and landings. Phase 1 included flight testing S-band Range Safety and Range User hardware in 2003 onboard a high-dynamic aircraft platform at Dryden Flight Research Center (Edwards, California, USA) using the NASA Tracking and Data Relay Satellite System (TDRSS) as the communications link. The current effort, Phase 2, includes hardware and packaging upgrades to the S-band Range Safety system and development of a high data rate Ku-band Range User system. The enhanced Phase 2 Range Safety Unit (RSU) provided real-time video for three days during the historic Global Flyer (Scaled Composites, Mojave, California, USA) flight in March, 2005. Additional Phase 2 testing will include a sounding rocket test of the Range Safety system and aircraft flight testing of both systems. Future testing will include a flight test on a launch vehicle platform. This paper discusses both Range Safety and Range User developments and testing with emphasis on the Range Safety system. The operational concept of a future space-based range is also discussed.

Whiteman, Donald E.↗
NASA NTRS2001

Good Enough for the X-38, but Made for Commercial Aircraft

Aircraft Belts, Inc. (ABI), of Kemah, Texas, was looking for a way to ensure the safety of its customers by developing a thorough test system for aviation restraint systems. Previous safety restraint test methods did not properly measure the load distribution placed on the restraints, leaving an unknown factor in meeting safety standards. ABI needed to improve its testing methods and update its test equipment. Through a partnership with NASA's Johnson Space Center Technical Outreach Program, the need was met. With the assistance of NASA engineers, ABI developed a hydraulic test system that provides the consumer with in-depth data about the load placed on the restraint system throughout the duration of the test. The old systems were only able to detect if the belts could sustain the applied force and could not target the problem of providing load data. In comparison, the new system modeled after the one used by NASA, can collect data that tells exactly what went wrong with belts that break and why. Depending on the test requirements of various restraint components, the system can exert a subjected force ranging from merely a few pounds to thousands. The test force can be applied to an entire safety restraint system or to its individual parts, including, stitching, webbing, and hardware.

Source record↗
NASA NTRSDate not supplied

A Formal Verification Framework for Runtime Assurance

The simplex architecture is an instance of Runtime Assurance (RTA) where a trusted component takes control of a safety-critical system when an untrusted component violates a safety property. This paper presents a formalization of the simplex RTA framework in the language of hybrid programs. A feature of this formal verification framework is that, for a given system, a specific instantiation can be created and its safety properties are guaranteed by construction. Instantiations may be kept at varying levels of generality, allowing for black box components, such as ML/AI-based controllers, to be modeled. The framework is written in the Prototype Verification System (PVS) using Plaidypvs, an embedding of differential dynamic logic in PVS. As a proof of concept, the framework is illustrated on an automatic vehicle braking system.

Runtime assurance↗
NASA NTRSDate not supplied

A Formal Verification Framework for Runtime Assurance

The simplex architecture is an instance of Runtime Assurance (RTA) where a trusted component takes control of a safety-critical system when an untrusted component violates a safety property. This paper presents a formalization of the simplex RTA framework in the language of hybrid programs. A feature of this formal verification framework is that, for a given system, a specific instantiation can be created and its safety properties are guaranteed by construction. Instantiations may be kept at varying levels of generality, allowing for black box components, such as ML/AI-based controllers, to be modeled. The framework is written in the Prototype Verification System (PVS) using Plaidypvs, an embedding of differential dynamic logic in PVS. As a proof of concept, the framework is illustrated on an automatic vehicle braking system.

Runtime assurance↗
NASA NTRS2019

Human Systems Integration (HSI) for Safety- Critical Range Operations at Wallops Flight Facility (WFF)

The NASA Engineering and Safety Center (NESC) Human Factors (HF) Technical Discipline Team (TDT) funded a preliminary study in 2017 that was narrowly focused within the Range Data Display System (RDDS) scope of display design requirements based on schedule and resources. Wallops Flight Facility (WFF) personnel involved in the previous study asked for a broader Human Systems Integration (HSI) involvement that would span both the RDDS and Flight Termination System (FTS) projects and assist with identifying HSI best practices, via appropriate standards and guidelines, that if properly implemented should result in a more effective and efficient Range Safety Operations. WFF Range Safety Operations has expressed a need to assess the roles, responsibilities, and functions of the various personnel on console during launches to identify existing and potential efficiencies and incorporate them in the new system design. This assessment addresses that need.

Cynthia H Null↗
NASA NTRS2016

Real-Time Safety Monitoring and Prediction for the National Airspace System

As new operational paradigms and additional aircraft are being introduced into the National Airspace System (NAS), maintaining safety in such a rapidly growing environment becomes more challenging. It is therefore desirable to have both an overview of the current safety of the airspace at different levels of granularity, as well an understanding of how the state of the safety will evolve into the future given the anticipated flight plans, weather forecasts, predicted health of assets in the airspace, and so on. To this end, we have developed a Real-Time Safety Monitoring (RTSM) that first, estimates the state of the NAS using the dynamic models. Then, given the state estimate and a probability distribution of future inputs to the NAS, the framework predicts the evolution of the NAS, i.e., the future state, and analyzes these future states to predict the occurrence of unsafe events. The entire probability distribution of airspace safety metrics is computed, not just point estimates, without significant assumptions regarding the distribution type and or parameters. We demonstrate our overall approach by predicting the occurrence of some unsafe events and show how these predictions evolve in time as flight operations progress.

National Airspace System↗
NASA NTRS2007

Symbolic LTL Compilation for Model Checking: Extended Abstract

In Linear Temporal Logic (LTL) model checking, we check LTL formulas representing desired behaviors against a formal model of the system designed to exhibit these behaviors. To accomplish this task, the LTL formulas must be translated into automata [21]. We focus on LTL compilation by investigating LTL satisfiability checking via a reduction to model checking. Having shown that symbolic LTL compilation algorithms are superior to explicit automata construction algorithms for this task [16], we concentrate here on seeking a better symbolic algorithm.We present experimental data comparing algorithmic variations such as normal forms, encoding methods, and variable ordering and examine their effects on performance metrics including processing time and scalability. Safety critical systems, such as air traffic control, life support systems, hazardous environment controls, and automotive control systems, pervade our daily lives, yet testing and simulation alone cannot adequately verify their reliability [3]. Model checking is a promising approach to formal verification for safety critical systems which involves creating a formal mathematical model of the system and translating desired safety properties into a formal specification for this model. The complement of the specification is then checked against the system model. When the model does not satisfy the specification, model-checking tools accompany this negative answer with a counterexample, which points to an inconsistency between the system and the desired behaviors and aids debugging efforts.

Rozier, Kristin Y.↗
NASA NTRS2000

A Model-based Framework for Risk Assessment in Human-Computer Controlled Systems

The rapid growth of computer technology and innovation has played a significant role in the rise of computer automation of human tasks in modem production systems across all industries. Although the rationale for automation has been to eliminate "human error" or to relieve humans from manual repetitive tasks, various computer-related hazards and accidents have emerged as a direct result of increased system complexity attributed to computer automation. The risk assessment techniques utilized for electromechanical systems are not suitable for today's software-intensive systems or complex human-computer controlled systems. This thesis will propose a new systemic model-based framework for analyzing risk in safety-critical systems where both computers and humans are controlling safety-critical functions. A new systems accident model will be developed based upon modem systems theory and human cognitive processes to better characterize system accidents, the role of human operators, and the influence of software in its direct control of significant system functions. Better risk assessments will then be achievable through the application of this new framework to complex human-computer controlled systems.

Hatanaka, Iwao↗
NASA NTRS2006

Another Approach to Enhance Airline Safety: Using Management Safety Tools

The ultimate goal of conducting an accident investigation is to prevent similar accidents from happening again and to make operations safer system-wide. Based on the findings extracted from the investigation, the "lesson learned" becomes a genuine part of the safety database making risk management available to safety analysts. The airline industry is no exception. In the US, the FAA has advocated the usage of the System Safety concept in enhancing safety since 2000. Yet, in today s usage of System Safety, the airline industry mainly focuses on risk management, which is a reactive process of the System Safety discipline. In order to extend the merit of System Safety and to prevent accidents beforehand, a specific System Safety tool needs to be applied; so a model of hazard prediction can be formed. To do so, the authors initiated this study by reviewing 189 final accident reports from the National Transportation Safety Board (NTSB) covering FAR Part 121 scheduled operations. The discovered accident causes (direct hazards) were categorized into 10 groups Flight Operations, Ground Crew, Turbulence, Maintenance, Foreign Object Damage (FOD), Flight Attendant, Air Traffic Control, Manufacturer, Passenger, and Federal Aviation Administration. These direct hazards were associated with 36 root factors prepared for an error-elimination model using Fault Tree Analysis (FTA), a leading tool for System Safety experts. An FTA block-diagram model was created, followed by a probability simulation of accidents. Five case studies and reports were provided in order to fully demonstrate the usefulness of System Safety tools in promoting airline safety.

Lu, Chien-tsug↗
NASA NTRSDate not supplied

Establishing the Assurance Efficacy of Automated Risk Mitigation Strategies

Verification and validation of increasingly autonomous aviation systems is a major challenge. Traditional techniques for the assurance of high-confidence, safety-critical systems are not equipped to handle the complexity, uncertainty, and lack of predictability inherent in non-deterministic systems. Techniques such as run time monitoring, formal methods, and testing and simulation have been applied to some effect, but it is difficult to properly assess the success of such measures. The authors propose the concept of Assurance Efficacy to address this gap. Assurance Efficacy is seen as a parameter, criteria, or perspective by which to evaluate, identify and explore safety risk mitigation strategies and operational assurance architectures. Validation of the utility of this concept through flight testing is a first step in determining its potential role in assessing the overall safety of complex, increasingly autonomous systems that cannot be fully assured in the design phase.

system safety↗
NASA NTRS1975

Safety management of a complex R&D ground operating system

A perspective on safety program management has been developed for a complex R&D operating system, such as the NASA-Lewis Research Center. Using a systems approach, hazardous operations are subjected to third-party reviews by designated area safety committees and are maintained under safety permit controls. To insure personnel alertness, emergency containment forces and employees are trained in dry-run emergency simulation exercises. The keys to real safety effectiveness are top management support and visibility of residual risks.

Connors, J. F.↗
NASA NTRS1992

MISSION: Mission and Safety Critical Support Environment. Executive overview

For mission and safety critical systems it is necessary to: improve definition, evolution and sustenance techniques; lower development and maintenance costs; support safe, timely and affordable system modifications; and support fault tolerance and survivability. The goal of the MISSION project is to lay the foundation for a new generation of integrated systems software providing a unified infrastructure for mission and safety critical applications and systems. This will involve the definition of a common, modular target architecture and a supporting infrastructure.

Mckay, Charles↗
NASA NTRS2017

Current Safety Nets Within the U.S. National Airspace System

There are over 70,000 flights managed per day in the National Airspace System, with approximately 7,000 aircraft in the air over the United States at any given time. Operators of each of these flights would prefer to fly a user-defined “4D” trajectory (4DT), which includes arrival and departure times; preferred gates and runways at the airport; efficient, wind-optimal routes for departure, cruise and arrival phase of flight; and fuel efficient altitude profiles. To demonstrate the magnitude of this achievement a single flight from Los Angeles to Baltimore, accesses over 35 shared or “constrained” resources that are managed by roughly 30 air traffic controllers (at towers, approach control and en route sectors); along with traffic managers at 12 facilities, using over 22 different, independent automation system (including TBFM, ERAM, STARS, ASDE-X, FSM, TSD, GPWS, TCAS, etc.). In addition, dispatchers, ramp controllers and others utilize even more systems to manage each flight’s access to operator-managed resources. Flying an ideal 4DT requires successful coordination of all flight constraints among all flights, facilities, operators, pilots and controllers. Additionally, when conditions in the NAS change, the trajectories of one or more aircraft may need to be revised to avoid loss of flight efficiency, predictability, separation or system throughput. The Aviation Safety Network has released the 2016 airliner accident statistics showing a very low total of 19 fatal airliner accidents, resulting in 325 fatalities1. Despite several high profile accidents, the year 2016 turned out to be a very safe year for commercial aviation, Aviation Safety Network data show. Over the year 2016 the Aviation Safety Network recorded a total of 19 fatal airliner accidents [1], resulting in 325 fatalities. This makes 2016 the second safest year ever, both by number of fatal accidents as well as in terms of fatalities. In 2015 ASN recorded 16 accidents while in 2013 a total of 265 lives were lost. How can we keep it that way and not upset the apple cart by premature insertion of innovative technologies, functions, and procedures? In aviation, safety nets function as the last system defense against incidents and accidents. Current ground-based and airborne safety nets are well established and development to make them more efficient and reliable continues. Additionally, future air traffic control safety nets may emerge from new operational concepts.

Smith, Brian E.↗
NASA NTRS1991

Safety assurance of complex integrated systems

Interface hazard analysis (IHA) is used as a 'tool' to systematically assess safety for the integration of a diverse set of experiments and payload hardware into the Spacelab carrier which flies in the Space Shuttle's Orbiter cargo bay. The IHA when performed by a thorough analysis provides safety assurance of complex integrated systems by systematically linking analysis efforts performed by the organizations thus providing the respective elements to be integrated into an objective, unique analysis. Particular attention is given to verification methods of the safety assurance of the Spacelab carrier and its experiment payload for which the IHA was performed.

Abrignani, Vincent A.↗
NASA NTRS1973

NASIS data base management system: IBM 360 TSS implementation. Volume 2: Overviews

The system overviews of the NASA Aerospace Safety Information System (NASIS) are presented. The overviews are directed toward informing management of a systems capabilities and requirements. The intent of the overviews contains a description of the component's activities and role in the overall system. The description includes charts and diagrams and discussions of the performance requirements and growth potential of the module.

Source record↗