Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “probability of failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 739 records · Page 41
All sourcesNASA NTRSDOE OSTI
NASA NTRS2015

Dynamic Modeling of Ascent Abort Scenarios for Crewed Launches

For the last 30 years, the United States's human space program has been focused on low Earth orbit exploration and operations with the Space Shuttle and International Space Station programs. After nearly 50 years, the U.S. is again working to return humans beyond Earth orbit. To do so, NASA is developing a new launch vehicle and spacecraft to provide this capability. The launch vehicle is referred to as the Space Launch System (SLS) and the spacecraft is called Orion. The new launch system is being developed with an abort system that will enable the crew to escape launch failures that would otherwise be catastrophic as well as probabilistic design requirements set for probability of loss of crew (LOC) and loss of mission (LOM). In order to optimize the risk associated with designing this new launch system, as well as verifying the associated requirements, NASA has developed a comprehensive Probabilistic Risk Assessment (PRA) of the integrated ascent phase of the mission that includes the launch vehicle, spacecraft and ground launch facilities. Given the dynamic nature of rocket launches and the potential for things to go wrong, developing a PRA to assess the risk can be a very challenging effort. Prior to launch and after the crew has boarded the spacecraft, the risk exposure time can be on the order of three hours. During this time, events may initiate from either of the spacecraft, the launch vehicle, or the ground systems, thus requiring an emergency egress from the spacecraft to a safe ground location or a pad abort via the spacecraft's launch abort system. Following launch, again either the spacecraft or the launch vehicle can initiate the need for the crew to abort the mission and return to the home. Obviously, there are thousands of scenarios whose outcome depends on when the abort is initiated during ascent as to how the abort is performed. This includes modeling the risk associated with explosions and benign system failures that require aborting a spacecraft under very dynamic conditions, particularly in the lower atmosphere, and returning the crew home safely. This paper will provide an overview of the PRA model that has been developed of this new launch system, including some of the challenges that are associated with this effort. Key Words: PRA, space launches, human space program, ascent abort, spacecraft, launch vehicles

Bigler, Mark↗
NASA NTRS2019

Electrified Aircraft Propulsion Systems: Potential Failure Modes and Failure Mitigation Strategies

Electrified aircraft propulsion (EAP) systems hold great potential for the reduction of aircraft fuel burn, emissions, and noise. Currently, NASA and other organizations are actively working to identify and mature technologies necessary to bring EAP designs to reality. A requirement for the development of any civil aircraft and its systems is to ensure that potential hazards in the design are identified and appropriately mitigated to ensure that the system is safe. During aircraft development, a system safety assessment that consists of a functional hazard assessment is conducted to identify all potential failure conditions of each function, and classify those failures according to the severity of their effects on the aircraft or its occupants. The more severe a function's failure condition classification, the greater the development assurance level required for the function to ensure that the probability of the hazard is acceptably low. Today, aircraft engines and their control systems receive type certificate approval as a stand-alone system to signify their airworthiness. However, the complex coupling and distributed nature of EAP designs are expected to place added challenges on the certification of these systems. This presentation will provide an initial high-level review of the potential failure modes and hazards posed by a generic EAP system along with potential mitigation strategies for those failures. The EAP system is assumed to be a hybrid design consisting of gas turbine engines, mechanical drives, electric machines, power electronics and distribution systems, energy storage devices, and motor driven propulsors. The functionality provided by each of these EAP subsystems will be discussed along with the potential failure modes they may encounter. This will include a discussion of coupled failure effects, where a fault in one EAP subsystem effects the operation of other subsystems in the architecture. Next, potential failure mitigation strategies are discussed including both software-based and hardware-based mitigation strategies. The presentation will conclude with an example evaluation of the potential failure modes and mitigation strategies for a concept EAP system proposed by NASA.

Simon, Donald L.↗
NASA NTRS1993

The initial flight anomalies of Skylab 1

At approximately 63 seconds into the flight of Skylab 1 on May 14, 1973, an anomaly occurred which resulted in the complete loss of the meteoroid shield around the orbital workshop. This was followed by the loss of one of the two solar array systems on the workshop and a failure of the inter stage adapter to separate from the S-II stage of the Saturn V launch vehicle. The investigation reported herein identified the most probable cause of this flight anomaly to be the breakup and loss of the meteoroid shield due to aerodynamic loads that were not accounted for in its design. The breakup of the meteoroid shield, in turn, broke the tie downs that secured one of the solar array systems to the workshop. Complete loss of this solar array system occurred at 593 seconds when the exhaust plume of the S-II stage retro-rockets impacted the partially deployed solar array system. Falling debris from the meteoroid shield also damaged the S-II inter stage adapter ordnance system in such a manner as to preclude separation. Of several possible failure modes of the meteoroid shield that were identified, the most probable in this particular flight was internal pressurization of its auxiliary tunnel which acted to force the forward end of the meteoroid shield away from the shell of the workshop and into the supersonic air stream. The pressurization of the auxiliary tunnel was due to the existence of several openings in the aft region of the tunnel. Another possible failure mode was the separation of the leading edge of the meteoroid shield from the shell of the workshop (particularly in the region of the folded ordnance panel) of sufficient extent to admit ram air pressures under the shield.

Source record↗
NASA NTRS1989

Shuttle data book: SRM fragment velocity model. Presented to the SRB Fragment Model Review Panel

This study was undertaken to determine the velocity of fragments generated by the range safety destruction (RSD) or random failure of a Space Transportation System (STS) Solid Rocket Motor (SRM). The specific requirement was to provide a fragment model for use in those Galileo and Ulysses RTG safety analyses concerned with possible fragment impact on the spacecraft radioisotope thermoelectric generators (RTGS). Good agreement was obtained between predictions and observations for fragment velocity, velocity distributions, azimuths, and rotation rates. Based on this agreement with the entire data base, the model was used to predict the probable fragment environments which would occur in the event of an STS-SRM RSD or randon failure at 10, 74, 84 and 110 seconds. The results of these predictions are the basis of the fragment environments presented in the Shuttle Data Book (NSTS-08116). The information presented here is in viewgraph form.

Source record↗
NASA NTRS1988

Airworthiness considerations

Guidance is provided for the airworthiness approval of both annunciation only and annunciation with guidance airborne windshear warning systems. Characteristics of a comprehensive certification plan, the criticality of certain system failure cases for windshear warning with and without escape guidance, software based systems, and probability analysis are among the topics covered.

Stoer, Ray↗
NASA NTRS1990

Spares quantification for the Space Shuttle Orbiters

A study to determine the numerous factors that must be considered and utilized to accurately quantify the number of spares necessary to support the Orbiter processing is presented. Previously the method used to quantify the requirements for spares was based on a probability of sufficiency (POS) equation. It was found that there are several categories of failures, not only the operating hour dependency type used in POS. Therefore, it was determined that various methods of quantifying spares should be utilized for the different categories of failures. Trending analysis of the failure history was deemed necessary. Also, the working environment was determined to be an important factor in the failure data.

Groh-Hammond, Marcia M.↗
NASA NTRSDate not supplied

3D Representation of UAV-obstacle Collision Risk Under Off-nominal Conditions

Safe operations of autonomous unmanned aerial vehicles (UAVs) in low-altitude airspace with beyond visual line-of-sight (BVLOS) flights demand robust risk monitoring of airspace as well as of people and property on ground. One of the safety critical factors for UAV flights is the risk of collision with static and dynamic obstacles in proximity to its flight path. This paper presents a detailed formulation of risk of obstacle collision incorporating the effects of off-nominal conditions introduced by component failures, degraded controllability and environmental disturbances such as wind gusts. The risk is represented in terms of a matrix with rows corresponding to the likelihood of occurrence of collision and columns representing severity of collision to the vehicle and surrounding structures. Risk likelihood is generated using a Bayesian Belief Network (BBN) that compiles knowledge from related Failure Modes and Effects Analysis (FMEAs) and Subject Matter Experts (SMEs) to determine the probability of collision based on on-board sensor measurements indicative of vehicle health and controllability. Risk severity is computed utilizing a point-mass 3D kinematic model of the vehicle in presence of wind. The proposed risk factor is demonstrated on real flight data from experimental flights of an octocopter at NASA Langley Research Center in presence of simulated obstacles and wind conditions. Effect of varying wind conditions, level of controllability and obstacle measurement noise on the risk factor is demonstrated. The proposed approach enables risk-informed decision making for timely mitigation of current and future unsafe events in autonomous systems.

risk analysis↗
NASA NTRS2009

Reliability-Based Design Optimization of a Composite Airframe Component

A stochastic design optimization methodology (SDO) has been developed to design components of an airframe structure that can be made of metallic and composite materials. The design is obtained as a function of the risk level, or reliability, p. The design method treats uncertainties in load, strength, and material properties as distribution functions, which are defined with mean values and standard deviations. A design constraint or a failure mode is specified as a function of reliability p. Solution to stochastic optimization yields the weight of a structure as a function of reliability p. Optimum weight versus reliability p traced out an inverted-S-shaped graph. The center of the inverted-S graph corresponded to 50 percent (p = 0.5) probability of success. A heavy design with weight approaching infinity could be produced for a near-zero rate of failure that corresponds to unity for reliability p (or p = 1). Weight can be reduced to a small value for the most failure-prone design with a reliability that approaches zero (p = 0). Reliability can be changed for different components of an airframe structure. For example, the landing gear can be designed for a very high reliability, whereas it can be reduced to a small extent for a raked wingtip. The SDO capability is obtained by combining three codes: (1) The MSC/Nastran code was the deterministic analysis tool, (2) The fast probabilistic integrator, or the FPI module of the NESSUS software, was the probabilistic calculator, and (3) NASA Glenn Research Center s optimization testbed CometBoards became the optimizer. The SDO capability requires a finite element structural model, a material model, a load model, and a design model. The stochastic optimization concept is illustrated considering an academic example and a real-life raked wingtip structure of the Boeing 767-400 extended range airliner made of metallic and composite materials.

Patnaik, Surya N.↗
DOE OSTI2021

A minimally invasive, efficient method for propagation of full-field uncertainty in solid dynamics

In this work, we present a minimally invasive method for forward propagation of material property uncertainty to full-field quantities of interest in solid dynamics. Full-field uncertainty quantification enables the design of complex systems where quantities of interest, such as failure points, are not known a priori. The method, motivated by the well-known probability density function (PDF) propagation method of turbulence modeling, uses an ensemble of solutions to provide the joint PDF of desired quantities at every point in the domain. A small subset of the ensemble is computed exactly, and the remainder of the samples are computed with approximation of the evolution equations based on those exact solutions. Although the proposed method has commonalities with traditional interpolatory stochastic collocation methods applied directly to quantities of interest, it is distinct and exploits the parameter dependence and smoothness of the driving term of the evolution equations. The implementation is model independent, storage and communication efficient, and straightforward. We demonstrate its efficiency, accuracy, scaling with dimension of the parameter space, and convergence in distribution with two problems: a quasi-one-dimensional bar impact, and a two material notched plate impact. For the bar impact problem, we provide an analytical solution to PDF of the solution fields for method validation. With the notched plate problem, we also demonstrate good parallel efficiency and scaling of the method.

42 ENGINEERING↗
DOE OSTI2020

Extinction Dynamics of the Foot-and-Mouth Disease Virus Carrier State Under Natural Conditions

Foot-and-mouth disease (FMD) is one of the most economically important livestock diseases worldwide. Following the clinical phase of FMD, a large proportion of ruminants remain persistently infected for extended periods. Although extinction of this carrier state occurs continuously at the animal and population levels, studies vary widely in their estimates of the duration of persistent infection. There is a need for robust statistical models to capture the dynamics of persistent infection for the sake of guiding FMD control and trade policies. The goal of the current study was to develop and assess statistical models to describe the extinction of FMD virus (FMDV) persistent infection using data from primary longitudinal studies of naturally infected cattle and Asian buffalo in Vietnam and India. Specifically, accelerated failure time (AFT) models and generalized linear mixed models (GLMM) were developed to predict the probability of persistent infection in seropositive animals and identified carriers at the individual animal level at sequential time points after outbreaks. The primary studies were analyzed by country and combined using an individual-participant data meta-analysis approach. The models estimated similar trends in the duration of persistent infection for the study/species groups included in the analyses, however the significance of the trends differed between the models. The overall probabilities of persistent infection were similar as predicted by the AFT and GLMM models: 6 months: 99% (AFT) /80% (GLMM), 12 months: 51% (AFT) /32% (GLMM), 18 months: 6% (AFT) /5% (GLMM), 24 months: 0.8% (AFT) /0.6% (GLMM). These models utilizing diverse and robust data sets predict higher probabilities of persistence than previously published, suggesting greater endurance of carriers subsequent to an outbreak. This study demonstrates the utility of statistical models to investigate the dynamics of persistent infection and the importance of large datasets, which can be achieved by combining data from several smaller studies in meta-analyses. Results of this study enhance current knowledge of the FMDV carrier state and may inform policy decisions regarding FMDV persistent infection.

59 BASIC BIOLOGICAL SCIENCES↗
NASA NTRS1970

Reliability Analysis Model

RAM program determines probability of success for one or more given objectives in any complex system. Program includes failure mode and effects, criticality and reliability analyses, and some aspects of operations, safety, flight technology, systems design engineering, and configuration analyses.

Source record↗
NASA NTRS1990

Io's atmosphere from microwave detection SO2

The microwave detection of SO2 at 222 GHz in Io's atmosphere is reported. The observations imply an SO2 surface pressure of 4-35 nanobars, covering 3-15 percent of the surface on both leading and trailing sides of Io when illuminated by the sun. This supports atmospheric models in which the partial pressure of SO2 at the surface is determined by the Io surface temperature, favoring, in particular, the 'albedo cold-trap' models. The failure to detect H2S at 169 GHz suggests that the pressure of this gas is probably below 10 to the -10th bar. These results, taken together with Pioneer ionospheric data, suggest that an atmospheric gas other than SO2 is present. It is proposed that the locally buffered SO2 atmosphere coexists with a background atmosphere of oxygen with a partial surface pressure of about 20 nanobars.

Lellouch, Emmanuel↗
NASA NTRS2015

Data Applicability of Heritage and New Hardware For Launch Vehicle Reliability Models

Bayesian reliability requires the development of a prior distribution to represent degree of belief about the value of a parameter (such as a component's failure rate) before system specific data become available from testing or operations. Generic failure data are often provided in reliability databases as point estimates (mean or median). A component's failure rate is considered a random variable where all possible values are represented by a probability distribution. The applicability of the generic data source is a significant source of uncertainty that affects the spread of the distribution. This presentation discusses heuristic guidelines for quantifying uncertainty due to generic data applicability when developing prior distributions mainly from reliability predictions.

Al Hassan, Mohammad↗
NASA NTRS2020

Using Bayesian Estimation to Quantify the Risks of Spaceflight

Complex PRA is the best method and current gold standard, as it allows us to reflect changes (improvements) in individual spacecraft system risks over time. Yet, Bayesian methods – using simple inputs – allowed us to get estimates that are in line with high-complexity PRA. Here Bayesian estimation acts as a “gut check” on PRA (supposing a “reasonable” prior is used). Frequentist calculations can overestimate P(failure), especially when total number of trials are few (e.g., after Challenger). In general, Bayesian probability estimation can be used in any risk assessment situation to integrate what we think we know ahead of time with what we observe over time.

Reynolds, Robert J.↗
DOE OSTI2024

Qualitative and Quantitative Evaluation for Representative Human Reliability Analysis Methods

The Korea Institute of Nuclear Safety (KINS) is the regulatory expert organization established by the Korean government to strengthen the nation’s technical capabilities relating to nuclear safety regulation. KINS oversees the technical aspects of nuclear safety regulation, including safety reviews, inspections, education, and safety research—all conducted based on technical knowledge and accumulated regulatory experience. In 2023, KINS requested that Idaho National Laboratory (INL) validates representative human reliability analysis (HRA) methods used throughout the world, thus affording KINS with a basis for determining an HRA method adequate for its domestic regulatory purposes. The present paper mainly examines INL’s efforts in this regard. The resulting INL study covered four representative HRA methods widely used by nuclear utilities and regulatory institutes. These methods were qualitatively evaluated by applying specific evaluation criteria and determining how well each method reflected critical HRA issues. For this assessment, INL benchmarked the Halden International HRA Empirical Study. Using the Halden empirical data, along with information on human failure events (HFEs), the present study employed the selected HRA methods to estimate human error probabilities (HEPs) for the HFEs. It also performed statistical analyses to compare the HEPs predicted via the HRA methods against those from the Halden empirical data.

99 - GENERAL AND MISCELLANEOUS↗
NASA NTRS2014

Simulation for Prediction of Entry Article Demise (SPEAD): an Analysis Tool for Spacecraft Safety Analysis and Ascent/Reentry Risk Assessment

For the purpose of performing safety analysis and risk assessment for a probable offnominal suborbital/orbital atmospheric reentry resulting in vehicle breakup, a synthesis of trajectory propagation coupled with thermal analysis and the evaluation of node failure is required to predict the sequence of events, the timeline, and the progressive demise of spacecraft components. To provide this capability, the Simulation for Prediction of Entry Article Demise (SPEAD) analysis tool was developed. This report discusses the capabilities, modeling, and validation of the SPEAD analysis tool. SPEAD is applicable for Earth or Mars, with the option for 3 or 6 degrees-of-freedom (DOF) trajectory propagation. The atmosphere and aerodynamics data are supplied in tables, for linear interpolation of up to 4 independent variables. The gravitation model can include up to 20 zonal harmonic coefficients. The modeling of a single motor is available and can be adapted to multiple motors. For thermal analysis, the aerodynamic radiative and free-molecular/continuum convective heating, black-body radiative cooling, conductive heat transfer between adjacent nodes, and node ablation are modeled. In a 6- DOF simulation, the local convective heating on a node is a function of Mach, angle-ofattack, and sideslip angle, and is dependent on 1) the location of the node in the spacecraft and its orientation to the flow modeled by an exposure factor, and 2) the geometries of the spacecraft and the node modeled by a heating factor and convective area. Node failure is evaluated using criteria based on melting temperature, reference heat load, g-load, or a combination of the above. The failure of a liquid propellant tank is evaluated based on burnout flux from nucleate boiling or excess internal pressure. Following a component failure, updates are made as needed to the spacecraft mass and aerodynamic properties, nodal exposure and heating factors, and nodal convective and conductive areas. This allows the trajectory to be propagated seamlessly in a single run, inclusive of the trajectories of components that have separated from the spacecraft. The node ablation simulates the decreasing mass and convective/reference areas, and variable heating factor. A built-in database provides the thermo-mechanical properties of For the purpose of performing safety analysis and risk assessment for a probable offnominal suborbital/orbital atmospheric reentry resulting in vehicle breakup, a synthesis of trajectory propagation coupled with thermal analysis and the evaluation of node failure is required to predict the sequence of events, the timeline, and the progressive demise of spacecraft components. To provide this capability, the Simulation for Prediction of Entry Article Demise (SPEAD) analysis tool was developed. This report discusses the capabilities, modeling, and validation of the SPEAD analysis tool. SPEAD is applicable for Earth or Mars, with the option for 3 or 6 degrees-of-freedom (DOF) trajectory propagation. The atmosphere and aerodynamics data are supplied in tables, for linear interpolation of up to 4 independent variables. The gravitation model can include up to 20 zonal harmonic coefficients. The modeling of a single motor is available and can be adapted to multiple motors. For thermal analysis, the aerodynamic radiative and free-molecular/continuum convective heating, black-body radiative cooling, conductive heat transfer between adjacent nodes, and node ablation are modeled. In a 6- DOF simulation, the local convective heating on a node is a function of Mach, angle-ofattack, and sideslip angle, and is dependent on 1) the location of the node in the spacecraft and its orientation to the flow modeled by an exposure factor, and 2) the geometries of the spacecraft and the node modeled by a heating factor and convective area. Node failure is evaluated using criteria based on melting temperature, reference heat load, g-load, or a combination of the above. The failure of a liquid propellant tank is evaluated based on burnout flux from nucleate boiling or excess internal pressure. Following a component failure, updates are made as needed to the spacecraft mass and aerodynamic properties, nodal exposure and heating factors, and nodal convective and conductive areas. This allows the trajectory to be propagated seamlessly in a single run, inclusive of the trajectories of components that have separated from the spacecraft. The node ablation simulates the decreasing mass and convective/reference areas, and variable heating factor. A built-in database provides the thermo-mechanical properties of

Ling, Lisa↗
NASA NTRS2010

Model-Driven Development of Reliable Avionics Architectures for Lunar Surface Systems

This paper discusses a method used for the systematic improvement of NASA s Lunar Surface Systems avionics architectures in the area of reliability and fault-tolerance. This approach utilizes an integrated system model to determine the effects of component failure on the system s ability to provide critical functions. A Markov model of the potential degraded system modes is created to characterize the probability of these degraded modes, and the system model is run for each Markov state to determine its status (operational or system loss). The probabilistic results from the Markov model are first produced from state transition rates based on NASA data for heritage failure rate data of similar components. An additional set of probabilistic results are created from a representative set of failure rates developed for this study, for a variety of component quality grades (space-rated, mil-spec, ruggedized, and commercial). The results show that careful application of redundancy and selected component improvement should result in Lunar Surface Systems architectures that exhibit an appropriate degree of fault-tolerance, reliability, performance, and affordability.

Borer, Nicholas↗
NASA NTRS1985

Estimate of the probability of a lightning strike to the Galileo probe

Lightning strikes to aerospace vehicles occur mainly in or near clouds. As the Galileo entry probe will pass most of its operational life in the clouds of Jupiter, which is known to have lightning activity, the present study is concerned with the risk of a lightning strike to the probe. A strike to the probe could cause physical damage to the structure and/or damage to the electronic equipment aboard the probe. It is thought to be possible, for instance, that the instrument failures which occurred on all four Pioneer Venus entry probes at an altitude of 12 km were due to an external electric discharge. The probability of a lightning strike to the Galileo probe is evaluated. It is found that the estimate of a strike to the probe is only 0.001, which is about the same as the expected failure rate due to other design factors. In the case of entry probes to cloud-covered planets, a consideration of measures for protecting the vehicle and its payload from lightning appears to be appropriate.

Borucki, W. J.↗