Integrated circuits in action. IV.
Postmortem flaw detection methods and equipment for IC failure analysis
SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Postmortem flaw detection methods and equipment for IC failure analysis
The formulation and flight test results of an algorithm to detect and isolate the first failure of any one of 12 duplex control sensor signals (24 in all) being monitored are reviewed. The technique uses like signal differences for fault detection while relying upon analytic redundancy relationships among unlike quantities to isolate the faulty sensor. The fault isolation logic utilizes the modified sequential probability ratio test, which explicitly accommodates the inevitable, irreducible low frequency errors present in the analytic redundancy residuals. In addition, the algorithm used sensor output selftest, which takes advantage of the duplex sensor structure by immediately removing a hard failed sensor from control calculations and analytic redundancy relationships while awaiting a definitive fault isolation decision via analytic redundancy. This study represents a proof of concept demonstration of a methodology that is applied to duplex or higher flight control sensor configurations and, in addition, can monitor the health of one simplex signal per analytic redundancy relationship.
A system for real-time detection of surface-fatigue-pitting damage to gears for use in a helicopter transmission is based on fuzzy-logic used to fuse data from sensors that measure oil-borne debris, referred to as "oil debris" in the article, and vibration signatures. A system to detect helicopter-transmission gear damage is beneficial because the power train of a helicopter is essential for propulsion, lift, and maneuvering, hence, the integrity of the transmission is critical to helicopter safety. To enable detection of an impending transmission failure, an ideal diagnostic system should provide real-time monitoring of the "health" of the transmission, be capable of a high level of reliable detection (with minimization of false alarms), and provide human users with clear information on the health of the system without making it necessary for them to interpret large amounts of sensor data.
An essential aspect of online monitoring, subtle anomaly detection increases the detection lead time for equipment failure and enables a nuclear power plant (NPP) to mitigate unexpected partial or full outages, resulting in significant cost saving to the plant. Once an anomaly is detected by plant staff, its cause and severity are investigated. Because the vast majority of anomalies require some level of investigation, including some that require time-consuming examination, before they are passed over to the engineering organization for further analysis, plants are often equipped with tools to assist the staff in performing anomaly detection. Those tools operate as a black box and are often based on statistical methods that establish sensor correlations using preconfigured mathematical models and flag correlation deviations as anomalies. Due to the number of anomalies detected at a given NPP on a daily basis, a significant number of flagged anomalies usually await examination for days or weeks. A primary cause of this backlog is that the methods used by the tools generate many false positives. Though this is usually attributed to oversensitive model settings due to very narrow normal operation bands, it can also be associated with the model development being inadequate for the process being monitored, or with missing model inputs that could have explained misclassified positives. The performance of anomaly detection tools impacts their plant acceptance and utilization, especially when the effort to address false positives generated by the tool depletes the value or cost saved by using that tool. Thus, means to advance anomaly detection performance have been investigated by the Department of Energy’s Light Water Reactor Sustainability program. Previous and ongoing efforts have targeted unsupervised machine-learning (ML) methods, which do not require the labeling of any data fed into the ML model. By contrast, in supervised anomaly detection methods, every data point is labeled as either a normal or abnormal process condition, and the model is trained to replicate the classification process. Supervised methods usually outperform unsupervised methods, due to the added value in differentiating normal from anomalous states of the monitored process. An NPP’s corrective action program requires it to track and document, via a dedicated report, the resolution of any issues that occur within the plant. Once created, each report is reviewed by a plant screening committee, and several classifications and decisions are made. Recently, a collaborating NPP developed an artificial intelligence and ML-based classifier to categorize a condition report (CR) into classes that can serve to label the data as normal or anomalous. Applying CRs as labels represents a semi-supervised use case. Semi-supervised ML assumes that labels exist for some data points (i.e., labeled anomalies, in this case) but not for the rest. In this effort, semi-supervised ML methods were used to fuse data from CRs with anomaly detection methods in order to test the hypothesis that partially labeled anomalies would improve the accuracy of the anomaly detection methods. Specifically, two methods were used. The first is the deep Semi-supervised Anomaly Detection (deep SAD) method, which can handle labels ranging from fully unsupervised to fully supervised cases. The second is a newly designed ML method developed specifically for this effort and referred to as the high-order feature (HOF)-based method. To evaluate these two methods in controlled environments, synthetic data generators were developed and used. The first datasets used a spring-mass-damper (SMD) system simulator commonly found in mechanical engineering references. This was used to create two use cases: a one- and a three-mass system. Anomalies were introduced by changing the spring and damper coefficients while the system was actuated by random forces. The second datasets used the commercial Dymola-Modelica software to build a simplified nuclear reactor model. Anomalies were added in the form of corrupted sensor readings and/or control commands. The deep SAD method was tested using the SMD system, while the HOF method was tested using both datasets. Application of the deep SAD semi-supervised ML method demonstrated that labels can generate increased confidence in detecting true anomalies. This helped increase the number of true positives and decrease the number of false negatives—something that would aid in addressing the backlog of possible anomalies. Application of the HOF method demonstrated that labels can aid in down selecting from a candidate set of features to a more optimal subset in order to better differentiate between normal and anomalous conditions.
Dependability evaluation involves the study of failures and errors. The destructive nature of a crash and long error latency make it difficult to identify the causes of failures in the operational environment. It is particularly hard to recreate a failure scenario for a large, complex system. To identify and understand potential failures, we use an experiment-based approach for studying the dependability of a system. Such an approach is applied not only during the conception and design phases, but also during the prototype and operational phases. To take an experiment-based approach, we must first understand a system's architecture, structure, and behavior. Specifically, we need to know its tolerance for faults and failures, including its built-in detection and recovery mechanisms, and we need specific instruments and tools to inject faults, create failures or errors, and monitor their effects.
The presence of failures in navigation sensors can cause the determination of an erroneous aircraft state estimate, which includes position, attitude, and their derivatives. Aircraft flight control systems rely on sensor inputs to determine the aircraft state. In the case of integrated Inertial/NAVSTAR Global Positioning System (GPS), sensor failures could occur in the on-board inertial sensors or in the GPS measurements. The synergistic use of both GPS and the Inertial Navigation System (INS) allows for highly reliable fault detection and isolation of sensor failures. Integrated Inertial/GPS is a promising technology for the High Speed Civil Transport (HSCT) and the return and landing of a manned space vehicle.
The exposure to harsh environments can result in reliability issues on highly dense electronic packages and circuit assemblies. One area of concern is electrochemical failure mechanisms caused by electrolytic corrosion, electrochemical migration (dendrites), and leakage currents under humid conditions. These no-fault and no-trouble found failure points are challenging to detect and to perform process control during the assembly process. The focus of this research centers on metallizing glass surface insulation resistance test vehicles to characterize materials on electronic packages and components that exhibit the highest risk of failure due to material interactions and process residues. Glass test vehicles provide a visual representation of materials when they are exposed to moisture content in the air. Harsh environments can cause material interactions resulting in morphology changes, opening, and release of active components. A transparent test vehicle is highly functional for environmental stress testing under temperature, humidity, and bias. The designed experiment will evaluate the effects of material and process residues that can undergo changes in behavior during application, which leads to local failures.
In order to support manned spaceflight safety requirements, the Space Launch System (SLS) has defined program-level requirements for key systems to ensure successful operation under single fault conditions. To accommodate this with regards to Navigation, the SLS utilizes an internally redundant Inertial Navigation System (INS) with built-in capability to detect, isolate, and recover from first failure conditions and still maintain adherence to performance requirements. The unit utilizes multiple hardware- and software-level techniques to enable detection, isolation, and recovery from these events in terms of its built-in Fault Detection, Isolation, and Recovery (FDIR) algorithms. Successful operation is defined in terms of sufficient navigation accuracy at insertion while operating under worst case single sensor outages (gyroscope and accelerometer faults at launch). In addition to first fault detection and recovery, the SLS program has also levied requirements relating to the capability of the INS to detect a second fault, tracking any unacceptable uncertainty in knowledge of the vehicle's state. This detection functionality is required in order to feed abort analysis and ensure crew safety. Increases in navigation state error and sensor faults can drive the vehicle outside of its operational as-designed environments and outside of its performance envelope causing loss of mission, or worse, loss of crew. The criteria for operation under second faults allows for a larger set of achievable missions in terms of potential fault conditions, due to the INS operating at the edge of its capability. As this performance is defined and controlled at the vehicle level, it allows for the use of system level margins to increase probability of mission success on the operational edges of the design space. Due to the implications of the vehicle response to abort conditions (such as a potentially failed INS), it is important to consider a wide range of failure scenarios in terms of both magnitude and time. As such, the Navigation team is taking advantage of the INS's capability to schedule and change fault detection thresholds in flight. These values are optimized along a nominal trajectory in order to maximize probability of mission success, and reducing the probability of false positives (defined as when the INS would report a second fault condition resulting in loss of mission, but the vehicle would still meet insertion requirements within system-level margins). This paper will describe an optimization approach using Genetic Algorithms to tune the threshold parameters to maximize vehicle resilience to second fault events as a function of potential fault magnitude and time of fault over an ascent mission profile. The analysis approach, and performance assessment of the results will be presented to demonstrate the applicability of this process to second fault detection to maximize mission probability of success.
Vibrational anomalies can provide valuable insights into the health status of an unmanned aerial vehicle, potentially indicating system degradation including propeller, motor, or sensor damage, as well as environmental anomalies such as strong wind gusts and turbulence. However, many causes for vibrational anomalies are not related to vehicle health, such as sharp shifts in velocity or direction of flight. Thus, depending strictly on vibration signals to detect anomalies can result in false positives for failures. Hence, it is important to include additional telemetries in detecting and diagnosing in-flight anomalies. This paper considers an approach to anomaly detection based on tensor decompositions that incorporates information from vibration signals, as well as additional flight data such as velocity, current draw, voltage drop, and attitude. Using experimental flight data collected by the University of Notre Dame, we construct third-order tensors then apply the CANDECOMP/PARAFAC decomposition to identify trends within each flight and classify flights as nominal or anomalous.
The Coronado National Memorial (CORO), located in Hereford, Arizona, is situated along the United States' southern border, featuring recently established but still incomplete border barrier roads. This landscape is inherently prone to geohazards, and debris flow due to the steep mountainous topography, complex terrain, monsoonal rains, and freeze/thaw action - and the new infrastructure has exhibited these processes in the form of rockfall, embankment failure, and debris flow. NASA DEVELOP partnered with CORO to conduct a feasibility assessment of Earth observations for identification of geohazards and slope failure susceptibility. Leveraging Earth observations (United States Geological Survey 3D Elevation Program Digital Elevation Model and a locally obtained Light Detection And Ranging-derived Digital Elevation Model) from 2019 to 2023, and geospatial datasets starting from 2008, the study was able to provide tools to determine the focus for damage mitigation, identify areas most susceptible to slope failures, and prioritize at risk assets through three products: change detection maps, slope failure susceptibility maps, and a slope failure prioritization model. With an emphasis on monitoring high-risk areas and prioritizing mitigation efforts, the project addresses a critical gap in remediation strategies and aims to enhance preservation and safety of the region. Results of this study found that (i) the most identifiable areas of change were the road cuts and debris directly adjacent to the roads created for border construction, (ii) areas of highest slope failure susceptibility are located in mountainous areas with erosive geology, and (iii) roads resulting from border construction have approximately twice the risk of slope failure as roads created by the national park service.
Additively manufactured Inconel 718 parts fabricated in three build orientations (horizontal, vertical, and angled at 45 degrees) are tested in fully-reversed bending fatigue mode. Damping measurements via the Impulse Excitation technique are used to assess the defects content in the microstructure and fractography analysis is performed to detect the root cause of failure. Two micro- and macro-scale methodologies of fatigue damage estimation based on the dissipated heat per cycle and the statistical estimation of micro-plastic strain energies are used to assess fatigue damage. It is shown that at a given stress level, the vertically built specimens endure the most fatigue damage before failure while the diagonally built ones sustain the least. As a result, the fatigue life is estimated for arbitrary load amplitudes via a microstructure-sensitive algorithm with acceptable accuracy as compared to the experiments.
SUMMARY Crack nucleation and rock failure processes in a fine-grained siltstone (Montney Formation) under triaxial compression are investigated using combined diagnostic techniques, including ultrasonic-wave measurement, acoustic-emission (AE) monitoring, computed tomography (CT) scanning, and thin-section imaging. The sample displays a weak-to-moderate inherent seismic anisotropy and noticeable stress-induced anisotropy prior to failure. No AE event was detected until the applied axial stress reached 95 per cent of the peak value. The signal-to-noise ratio is relatively low, however, and detectable AE events are more diffuse than those observed in highly brittle rocks. The AE locations correlate with a shear fracture zone imaged by CT scanning. AE moment-tensor analysis reveals that events with larger relative magnitudes are characterized by high volumetric (tensile or compressive) components, and the initiation of the failure zone is dominated by combined shear-tensile (ST) failure. Stress inversion of the AE events with high tensile components is in good agreement with the known applied stress. Microscopic imaging of thin sections from the failed sample shows that the failure zone is an en echelon structure consisting of a major fracture with branching micro and minor cracks. This failure mechanism is consistent with a ST source mechanism and is interpreted to be associated with the fine granular structure and mineral composition of Montney siltstone.
Protection against dc faults is one of the main technical hurdles faced when operating converter-based HVdc systems. Protection becomes even more challenging for multi-terminal dc (MTdc) systems with more than two terminals/converter stations. In this paper, a hybrid primary fault detection algorithm for MTdc systems is proposed to detect a broad range of failures. Sensor measurements, i.e., line currents and dc reactor voltages measured at local terminals, are first processed by a top-level context clustering algorithm. For each cluster, the best fault detector is selected among a detector pool according to a rule resulting from a learning algorithm. The detector pool consists of several existing detection algorithms, each performing differently across fault scenarios. The proposed hybrid primary detection algorithm: i) offers superior performance compared to an individual detector through a data-driven approach; ii) detects all major fault types including pole-to-pole (P2P), pole-to-ground (P2G), and external dc faults; iii) identifies faults with various fault locations and impedances; iv) is more robust to noisy sensor measurements compared to existing methods; v) does not require exhaustive simulation and sampling for training the model. Performance and effectiveness of the proposed algorithm are evaluated and verified based on time-domain simulations in the PSCAD/EMTDC software environment. The results confirm satisfactory operation, accuracy, and detection speed of the proposed algorithm under various fault scenarios.
One of the primary concerns with Composite construction in critical structures such as wings and stabilizers is that hidden faults and cracks can develop operationally. In the real world, catastrophic sudden failure can result from these undetected faults in composite structures. Vibration data incorporating a broad frequency modal approach, could detect significant changes prior to failure. The purpose of this report is to investigate the usefulness of frequency mode testing before and after bending and torsion loading on a composite bending Box Test section. This test article is representative of construction techniques being developed for the recent NASA Blended Wing Body Low Speed Vehicle Project. The Box section represents the construction technique on the proposed blended wing aircraft. Modal testing using an impact hammer provides an frequency fingerprint before and after bending and torsional loading. If a significant structural discontinuity develops, the vibration response is expected to change. The limitations of the data will be evaluated for future use as a non-destructive in-situ method of assessing hidden damage in similarly constructed composite wing assemblies. Modal vibration fault detection sensitivity to band-width, location and axis will be investigated. Do the sensor accelerometers need to be near the fault and or in the same axis? The response data used in this report was recorded at 17 locations using tri-axial accelerometers. The modal tests were conducted following 5 independent loading conditions before load to failure and 2 following load to failure over a period of 6 weeks. Redundant data was used to minimize effects from uncontrolled variables which could lead to incorrect interpretations. It will be shown that vibrational modes detected failure at many locations when skin de-bonding failures occurred near the center section. Important considerations are the axis selected and frequency range.
The early detection of secondary reactions that affect the life and performance of zinc manganese oxide batteries requires a shift from conventional time-consuming and often destructive procedures to rapid lifetime-predictive techniques. In this work, an electrochemical approach is employed to elucidate independent signatures for four common types of failure mechanisms in zinc manganese dioxide (Zn||MnO2) batteries—namely, the loss of zinc inventory, the loss of active material at the cathode, electrolyte depletion, and increased cell impedance. Our findings, specific to coin cell configurations, reveal that each induced failure mechanism can be distinctively modeled and identified based on responses from the rest voltage and columbic-efficiency data for prompt detection. For instance, electrolyte depletion response manifests a distinctive abrupt (>80 %) decrease in columbic efficiency (CE) and charge-rest voltage (Vc) while the discharge-rest voltage remained constant at ~1.3 V. Furthermore, electrolyte rejuvenation of the cell increased the CE to >95 % and restored Vc from ~0.3 to >1.7 V. Recovery experiments and reference performance tests demonstrated consistency between electrochemical descriptors and their associated failure mechanisms. Further, the outcomes of this work provide valuable insights and data models for some of the dominant failure mechanisms present in zinc manganese battery chemistries, which are beneficial to accelerated early-lifetime diagnosis and advancement of Zn batteries development.
The Inductive Monitoring System (IMS) software developed at Ames Research Center uses artificial intelligence and data mining techniques to build system-monitoring knowledge bases from archived or simulated sensor data. This information is then used to detect unusual or anomalous behavior that may indicate an impending system failure. Currently helping analyze data from systems that help fly and maintain the space shuttle and the International Space Station (ISS), the IMS has also been employed by data classes are then used to build a monitoring knowledge base. In real time, IMS performs monitoring functions: determining and displaying the degree of deviation from nominal performance. IMS trend analyses can detect conditions that may indicate a failure or required system maintenance. The development of IMS was motivated by the difficulty of producing detailed diagnostic models of some system components due to complexity or unavailability of design information. Successful applications have ranged from real-time monitoring of aircraft engine and control systems to anomaly detection in space shuttle and ISS data. IMS was used on shuttle missions STS-121, STS-115, and STS-116 to search the Wing Leading Edge Impact Detection System (WLEIDS) data for signs of possible damaging impacts during launch. It independently verified findings of the WLEIDS Mission Evaluation Room (MER) analysts and indicated additional points of interest that were subsequently investigated by the MER team. In support of the Exploration Systems Mission Directorate, IMS is being deployed as an anomaly detection tool on ISS mission control consoles in the Johnson Space Center Mission Operations Directorate. IMS has been trained to detect faults in the ISS Control Moment Gyroscope (CMG) systems. In laboratory tests, it has already detected several minor anomalies in real-time CMG data. When tested on archived data, IMS was able to detect precursors of the CMG1 failure nearly 15 hours in advance of the actual failure event. In the Aeronautics Research Mission Directorate, IMS successfully performed real-time engine health analysis. IMS was able to detect simulated failures and actual engine anomalies in an F/A-18 aircraft during the course of 25 test flights. IMS is also being used in colla
High-risk aerospace components have to meet very stringent quality, performance, and safety requirements. Any source of variation is a concern, as it may result in scrap or rework. poor performance, and potentially unsafe flying conditions. The sources of variation during product development, including design, manufacturing, and assembly, and during operation are shown. Sources of static and dynamic variation during development need to be detected accurately in order to prevent failure when the components are placed in operation. The Systems' Health and Safety (SHAS) research at the NASA Ames Research Center addresses the problem of detecting and evaluating the statistical variation in helicopter transmissions. In this work, we focus on the variations caused by design, manufacturing, and assembly of these components, prior to being placed in operation (DMV). In particular, we aim to understand and represent the failure and variation information, and their correlation to performance and safety and feed this information back into the development cycle at an early stage. The feedback of such critical information will assure the development of more reliable components with less rework and scrap. Variations during design and manufacturing are a common source of concern in the development and production of such components. Accounting for these variations, especially those that have the potential to affect performance, is accomplished in a variety ways, including Taguchi methods, FMEA, quality control, statistical process control, and variation risk management. In this work, we start with the assumption that any of these variations can be represented mathematically, and accounted for by using analytical tools incorporating these mathematical representations. In this paper, we concentrate on variations that are introduced during design. Variations introduced during manufacturing are investigated in parallel work.
In-service failures of wave energy convertor (WEC) cable systems can have a significant cost and power availability impact. Close parallel research 2019 data showed > 1B£ and 9 Terra-Watt-Hours associated with global off-shore wind (OSW) cable failures (Strang-Moran 2020). OSW is a closely related technology but currently is significantly cheaper than WEC technology. For wave energy to compete, the problem of reliable cable transmission must be mitigated. This project develops isolation technology to allow online high frequency reflectometry testing of medium voltage cables (1 to 10 kV and higher) without arcing or damage to the test instrument. Online spread spectrum time domain reflectometry (SSTDR) testing has been established for low voltage cable systems in the aircraft and rail industry and the ability to detect and locate cable flaws of interest is well understood. Extending reflectometry testing to medium voltage systems could enable detection of cable damage before failures occur thereby allowing repair and replacement of damaged cable segments to be scheduled and managed. The seedling project succeeded to pass and receive high frequency SSTDR signals onto a cable up to 1 kV using a parallel trace isolation circuit board that can be connected onto the test cable. The approach used a novel circuit design for which an invention disclosure has been filed. A proposed sapling project would extend the technology toward the higher operating voltages used by WEC systems, thereby enabling online SSTDR cable monitoring. The goal of the seedling project was to extend the capability of the ARENA cable/motor test bed to address medium voltages and to develop a high pass filter isolation architecture to protect the reflectometry instrument from the low frequency (DC – 60 Hz) line voltage while allowing the high frequency diagnostic signal to pass to and from the test instrument to the live line. Initial efforts focused on passive LCR filter circuits to reduce 60 Hz levels below 10 volts from a 10 kV line while allowing the MHz high frequency chirps to pass onto the cables and for mV signals to be detected. We discovered that the parasitic loss behavior of real high voltage components precluded this approach from working. An alternate approach was adapted for the electric field to couple between two parallel traces on a printed circuit board much like a radio-frequency coupler. The challenge here was and is to have the parallel traces close enough to each other to effectively pass the high frequency chirp onto the live line and receive any reflected signal from any encountered impedance change along the cable. This reflected signal will be in the mV range. The traces however must be far enough apart to not allow arcing on the board. A design with 3 mm spacing was determined to allow the high frequency signal to pass onto the live line and receive the mV signal back into the instrument while reducing the 60 Hz voltage amplitude by >80 dB (more than a factor of 10,000) without allowing arcing from across the parallel traces. This was confirmed by simulation and test.