Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “hardware failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 775 records · Page 43

NASA standard Multimission Modular Spacecraft for future space exploration

The design of the Multimission Modular Spacecraft (MMS) has evolved over the past seven years. The main objective concerning the design of the MMS has been related to aspects of cost effectiveness. Maximum use was to be made of NASA standard components. The basic concept has been to design a core spacecraft which has inherent flexibility to meet a range of mission needs without modification of its hardware elements. An overview is provided of the MMS performance capability and the current status of the MMS program. The MMS is the first NASA approved active control free-flying spacecraft to be designed to be Shuttle compatible. The design of the MMS is such that no single failure will preclude its retrieval by the Shuttle.

Bartlett, R. O.↗

JPL's Real-Time Weather Processor project (RWP) metrics and observations at system completion

As an integral part of the overall upgraded National Airspace System (NAS), the objective of the Real-Time Weather Processor (RWP) project is to improve the quality of weather information and the timeliness of its dissemination to system users. To accomplish this, an RWP will be installed in each of the Center Weather Service Units (CWSUs), located in 21 of the 23 Air Route Traffic Control Centers (ARTCCs). The RWP System is a prototype system. It is planned that the software will be GFE and that production hardware will be acquired via industry competitive procurement. The ARTCC is a facility established to provide air traffic control service to aircraft operating on Instrument Flight Rules (IFR) flight plans within controlled airspace, principally during the en route phase of the flight. Covered here are requirement metrics, Software Problem Failure Reports (SPFRs), and Ada portability metrics and observations.

Loesh, Robert E.↗

A verified design of a fault-tolerant clock synchronization circuit: Preliminary investigations

Schneider demonstrates that many fault tolerant clock synchronization algorithms can be represented as refinements of a single proven correct paradigm. Shankar provides mechanical proof that Schneider's schema achieves Byzantine fault tolerant clock synchronization provided that 11 constraints are satisfied. Some of the constraints are assumptions about physical properties of the system and cannot be established formally. Proofs are given that the fault tolerant midpoint convergence function satisfies three of the constraints. A hardware design is presented, implementing the fault tolerant midpoint function, which is shown to satisfy the remaining constraints. The synchronization circuit will recover completely from transient faults provided the maximum fault assumption is not violated. The initialization protocol for the circuit also provides a recovery mechanism from total system failure caused by correlated transient faults.

Miner, Paul S.↗

Test Results of the RS-44 Integrated Component Evaluator Liquid Oxygen/Hydrogen Rocket Engine

An advanced LOX/LH2 expander cycle rocket engine, producing 15,000 lbf thrust for Orbital Transfer Vehicle missions, was tested to determine ignition, transition, and main stage characteristics. Detail design and fabrication of the pump fed RS44 integrated component evaluator (ICE) was accomplished using company discretionary resources and was tested under this contracted effort. Successful demonstrations were completed to about the 50 percent fuel turbopump power level (87,000 RPM), but during this last test, a high pressure fuel turbopump (HPFTP) bearing failed curtailing the test program. No other hardware were affected by the HPFTP premature shutdown. The ICE operations matched well with the predicted start transient simulations. The tests demonstrated the feasibility of a high performance advanced expander cycle engine. All engine components operated nominally, except for the HPFTP, during the engine hot-fire tests. A failure investigation was completed using company discretionary resources.

Sutton, R. F.↗

1958 NASA/USAF Space Probes (Able-1): Summary - Volume 1

Early in calendar year 1958 Space Technology Laboratories, Inc. (STL) (then Space Technology Laboratories, a division of the Ramo-Wooldridge Corp.) developed for the Air Force Ballistic Missile Division (AFBMD) an Advanced Re-entry Test Vehicle (ARTV) for the purpose of testing ballistic missile nose cones at the full range of 5500 nautical miles. The two-stage ARTV utilized the Thor ballistic missile and the second stage propulsion system developed for the Vanguard program. In late 1957 and early 1958, STL/AFBMD prepared studies of various missile combinations which could be utilized for space testing. The Thor, in combination with the Vanguard second and third stages, was one of the vehicles considered which offered a very early capability of placing a reasonable payload in a lunar orbit. These STL/AFBMD studies were presented to various appropriate groups including the Killian, Millikan, H. J . Stewart Committees; Headquarters, Air Research and Development Command, and ARDC Centers. Subsequently the Advanced Research Projects Agency (ARPA) contacted STL relative to the availability of hardware for an early lunar shot. By utilizing existing spares already purchased for the ARTV, and by making use of the ARTV contractors already in being, it appeared feasible to launch by the third quarter of calendar year 1958 a payload which would be captured by the moon's gravitational force. On 27 March 1958, ARPA directed STL to proceed with a program of three lunar shots. As much as possible, these shots were to utilize existing ARTV spare hardware and impose no interference with the ballistic missile programs. In September this program was transferred to the direction of the National Aeronautics and Space Administration (NASA). On 17 August 1958 the first launching of the Able-1 vehicle was attempted, but the flight was terminated by a propulsion failure of the first stage. Subsequent launchings were attempted on 13 October and 8 November 1958. Of these launchirigs the October attempt was the most successful. Although the payload did not reach the vicinity of the moon, a maximum altitude of 71,700 was attained, and useful scientific data was obtained from the instrumentation.

Source record↗

Materials Science Laboratory

The NASA Materials Science Laboratory (MSL) provides science and engineering services to NASA and Contractor customers at KSC, including those working for the Space Shuttle. International Space Station. and Launch Services Programs. These services include: (1) Independent/unbiased failure analysis (2) Support to Accident/Mishap Investigation Boards (3) Materials testing and evaluation (4) Materials and Processes (M&P) engineering consultation (5) Metrology (6) Chemical analysis (including ID of unknown materials) (7) Mechanical design and fabrication We provide unique solutions to unusual and urgent problems associated with aerospace flight hardware, ground support equipment and related facilities.

Jackson, Dionne↗

Fabrication of Lanthanum Telluride 14-1-11 Zintl High-Temperature Thermoelectric Couple

The development of more efficient thermoelectric couple technology capable of operating with high-grade heat sources up to 1,275 K is key to improving the performance of radioisotope thermoelectric generators. Lanthanum telluride La3-xTe4 and 14-1-11 Zintls (Yb14MnSb11) have been identified as very promising materials. The fabrication of advanced high-temperature thermoelectric couples requires the joining of several dissimilar materials, typically including a number of diffusion bonding and brazing steps, to achieve a device capable of operating at elevated temperatures across a large temperature differential (up to 900 K). A thermoelectric couple typically comprises a heat collector/ exchanger, metallic interconnects on both hot and cold sides, n-type and ptype conductivity thermoelectric elements, and cold-side hardware to connect to the cold-side heat rejection and provide electrical connections. Differences in the physical, mechanical, and chemical properties of the materials that make up the thermoelectric couple, especially differences in the coefficients of thermal expansion (CTE), result in undesirable interfacial stresses that can lead to mechanical failure of the device. The problem is further complicated by the fact that the thermoelectric materials under consideration have large CTE values, are brittle, and cracks can propagate through them with minimal resistance. The inherent challenge of bonding brittle, high-thermal-expansion thermoelectric materials to a hot shoe material that is thick enough to carry the requisite electrical current was overcome. A critical advantage over prior art is that this device was constructed using all diffusion bonds and a minimum number of assembly steps. The fabrication process and the materials used are described in the following steps: (1) Applying a thin refractory metal foil to both sides of lanthanum telluride. To fabricate the n-type leg of the advanced thermoelectric couple, the pre-synthesized lanthanum telluride coupon was diffusion bonded to the metal foil using a thin adhesion layer. (2) Repeating a similar process for the 14-1-11 Zintl p-type leg of the advanced thermoelectric couple. (3) Bonding thick CTE-matched metal plates on the metallized lanthanum telluride and Yb14MnSb11 to form the hot and cold sides of the thermoelectric couple. The calculated conversion efficiency of such an advanced couple would be about 10.5 percent, about 35 percent better than heritage radioisotope thermoelectric technology that relies on Si-Ge alloys. In addition, unlike Si-Ge alloys, these materials can be combined with many other thermoelectric materials optimized for operation at lower temperatures to achieve conversion efficiency in excess of 15 percent (a factor of 2 increase over heritage technology).

Ravi, Vilupanur A.↗

Material Usage in High Pressure Oxygen Systems for the International Space Station

The Nitrogen/Oxygen Recharge System (NORS) for the International Space Station (ISS) Program was required as part of the Space Shuttle retirement efforts to sustain the ISS life support systems. The system is designed around a 7000 psia Oxygen or Nitrogen Recharge Tank Assembly which is able to be utilized both internally and externally to the ISS. Material selection and usage were critical to ensure oxygen compatibility for the design, while taking into consideration toxicity, weldability, brazability and general fabrication and assembly techniques. The system uses unique hardware items such a composite overwrap pressure vessel (COPV), high pressure mechanical gauges, compact regulators and valves, quick disconnects, metal tubing and flexhoses. Numerous challenges and anomalies were encountered due to the exotic nature of this project which will be discussed in detail. The knowledge gained from these anomalies and failure resolutions can be applied to more than space applications, but can also be applicable to industry pressurized systems.

Kravchenko, Michael↗

High-Performance Acousto-Ultrasonic Scan System Being Developed

Acousto-ultrasonic (AU) interrogation is a single-sided nondestructive evaluation (NDE) technique employing separated sending and receiving transducers. It is used for assessing the microstructural condition and distributed damage state of the material between the transducers. AU is complementary to more traditional NDE methods, such as ultrasonic cscan, x-ray radiography, and thermographic inspection, which tend to be used primarily for discrete flaw detection. Throughout its history, AU has been used to inspect polymer matrix composites, metal matrix composites, ceramic matrix composites, and even monolithic metallic materials. The development of a high-performance automated AU scan system for characterizing within-sample microstructural and property homogeneity is currently in a prototype stage at NASA. This year, essential AU technology was reviewed. In addition, the basic hardware and software configuration for the scanner was developed, and preliminary results with the system were described. Mechanical and environmental loads applied to composite materials can cause distributed damage (as well as discrete defects) that plays a significant role in the degradation of physical properties. Such damage includes fiber/matrix debonding (interface failure), matrix microcracking, and fiber fracture and buckling. Investigations at the NASA Glenn Research Center have shown that traditional NDE scan inspection methods such as ultrasonic c-scan, x-ray imaging, and thermographic imaging tend to be more suited to discrete defect detection rather than the characterization of accumulated distributed micro-damage in composites. Since AU is focused on assessing the distributed micro-damage state of the material in between the sending and receiving transducers, it has proven to be quite suitable for assessing the relative composite material state. One major success story at Glenn with AU measurements has been the correlation between the ultrasonic decay rate obtained during AU inspection and the mechanical modulus (stiffness) seen during fatigue experiments with silicon carbide/silicon carbide (SiC/SiC) ceramic matrix composite samples. As shown in the figure, ultrasonic decay increased as the modulus decreased for the ceramic matrix composite tensile fatigue samples. The likely microstructural reason for the decrease in modulus (and increase in ultrasonic decay) is the matrix microcracking that commonly occurs during fatigue testing of these materials. Ultrasonic decay has shown the capability to track the pattern of transverse cracking and fiber breakage in these composites.

Roth, Don J.↗

High-Performance Acousto-Ultrasonic Scan System Being Developed

Acousto-ultrasonic (AU) interrogation is a single-sided nondestructive evaluation (NDE) technique employing separated sending and receiving transducers. It is used for assessing the microstructural condition and distributed damage state of the material between the transducers. AU is complementary to more traditional NDE methods, such as ultrasonic cscan, x-ray radiography, and thermographic inspection, which tend to be used primarily for discrete flaw detection. Throughout its history, AU has been used to inspect polymer matrix composites, metal matrix composites, ceramic matrix composites, and even monolithic metallic materials. The development of a high-performance automated AU scan system for characterizing within-sample microstructural and property homogeneity is currently in a prototype stage at NASA. This year, essential AU technology was reviewed. In addition, the basic hardware and software configuration for the scanner was developed, and preliminary results with the system were described. Mechanical and environmental loads applied to composite materials can cause distributed damage (as well as discrete defects) that plays a significant role in the degradation of physical properties. Such damage includes fiber/matrix debonding (interface failure), matrix microcracking, and fiber fracture and buckling. Investigations at the NASA Glenn Research Center have shown that traditional NDE scan inspection methods such as ultrasonic c-scan, x-ray imaging, and thermographic imaging tend to be more suited to discrete defect detection rather than the characterization of accumulated distributed microdamage in composites. Since AU is focused on assessing the distributed microdamage state of the material in between the sending and receiving transducers, it has proven to be quite suitable for assessing the relative composite material state. One major success story at Glenn with AU measurements has been the correlation between the ultrasonic decay rate obtained during AU inspection and the mechanical modulus (stiffness) seen during fatigue experiments with silicon carbide/silicon carbide (SiC/SiC) ceramic matrix composite samples. As shown in the figure, ultrasonic decay increased as the modulus decreased for the ceramic matrix composite tensile fatigue samples. The likely microstructural reason for the decrease in modulus (and increase in ultrasonic decay) is the matrix microcracking that commonly occurs during fatigue testing of these materials. Ultrasonic decay has shown the capability to track the pattern of transverse cracking and fiber breakage in these composites.

Roth, Don J.↗

More About Software for No-Loss Computing

A document presents some additional information on the subject matter of "Integrated Hardware and Software for No- Loss Computing" (NPO-42554), which appears elsewhere in this issue of NASA Tech Briefs. To recapitulate: The hardware and software designs of a developmental parallel computing system are integrated to effectuate a concept of no-loss computing (NLC). The system is designed to reconfigure an application program such that it can be monitored in real time and further reconfigured to continue a computation in the event of failure of one of the computers. The design provides for (1) a distributed class of NLC computation agents, denoted introspection agents, that effects hierarchical detection of anomalies; (2) enhancement of the compiler of the parallel computing system to cause generation of state vectors that can be used to continue a computation in the event of a failure; and (3) activation of a recovery component when an anomaly is detected.

Edmonds, Iarina↗

Encryption for Remote Control via Internet or Intranet

A data-communication protocol has been devised to enable secure, reliable remote control of processes and equipment via a collision-based network, while using minimal bandwidth and computation. The network could be the Internet or an intranet. Control is made secure by use of both a password and a dynamic key, which is sent transparently to a remote user by the controlled computer (that is, the computer, located at the site of the equipment or process to be controlled, that exerts direct control over the process). The protocol functions in the presence of network latency, overcomes errors caused by missed dynamic keys, and defeats attempts by unauthorized remote users to gain control. The protocol is not suitable for real-time control, but is well suited for applications in which control latencies up to about 0.5 second are acceptable. The encryption scheme involves the use of both a dynamic and a private key, without any additional overhead that would degrade performance. The dynamic key is embedded in the equipment- or process-monitor data packets sent out by the controlled computer: in other words, the dynamic key is a subset of the data in each such data packet. The controlled computer maintains a history of the last 3 to 5 data packets for use in decrypting incoming control commands. In addition, the controlled computer records a private key (password) that is given to the remote computer. The encrypted incoming command is permuted by both the dynamic and private key. A person who records the command data in a given packet for hostile purposes cannot use that packet after the public key expires (typically within 3 seconds). Even a person in possession of an unauthorized copy of the command/remote-display software cannot use that software in the absence of the password. The use of a dynamic key embedded in the outgoing data makes the central-processing unit overhead very small. The use of a National Instruments DataSocket(TradeMark) (or equivalent) protocol or the User Datagram Protocol makes it possible to obtain reasonably short response times: Typical response times in event-driven control, using packets sized .300 bytes, are <0.2 second for commands issued from locations anywhere on Earth. The protocol requires that control commands represent absolute values of controlled parameters (e.g., a specified temperature), as distinguished from changes in values of controlled parameters (e.g., a specified increment of temperature). Each command is issued three or more times to ensure delivery in crowded networks. The use of absolute-value commands prevents additional (redundant) commands from causing trouble. Because a remote controlling computer receives "talkback" in the form of data packets from the controlled computer, typically within a time interval < or =1 s, the controlling computer can re-issue a command if network failure has occurred. The controlled computer, the process or equipment that it controls, and any human operator(s) at the site of the controlled equipment or process should be equipped with safety measures to prevent damage to equipment or injury to humans. These features could be a combination of software, external hardware, and intervention by the human operator(s). The protocol is not fail-safe, but by adopting these safety measures as part of the protocol, one makes the protocol a robust means of controlling remote processes and equipment by use of typical office computers via intranets and/or the Internet.

Lineberger, Lewis↗

Orion Capsule Parachute Assembly System (CPAS) Riser Twist Load Amplification

Any cluster of parachute systems is subject to effects on performance due to interactions between the parachutes. One such interaction is the twisting of a riser from one parachute around that of another. Due to friction and relative motion between the risers, it is possible for the tension in the riser near the attach point to be different from the tension in the riser towards the suspension lines or canopy. This could result in system failure due to larger than expected loading. The Orion Capsule Parachute Assembly System (CPAS) designed and executed a test to quantify the amplification of the load in a parachute riser due to twist, rocking rate and angle, cluster size, and canopy load. The design of the testing approach, test matrix, and hardware are discussed along with results and findings.

Parachute↗

A scheme for fault tolerance in earth sensors

A system is presented that uses dual-redundant earth sensors to measure pitch and roll errors of a three-axis stabilized spacecraft, with provision for (1) autonomously detecting and identifying a faulty earth sensor, and (2) automatically selecting the outputs of the fault-free sensor for closed-loop attitude control, before failures cause major problems. A brief description is given of the system, and various failure modes of earth sensors and their effects are discussed. Novel techniques and algorithms for automatic fault detection, identification, and reconfiguration (FDIR) of dual-redundant earth sensors are developed. The algorithms are validated through computer simulations, and the results are presented. The proposed scheme can easily be implemented without much penalty on hardware, power consumption, and processing time.

Murugesan, S.↗

An Alternative Approach to Human Servicing of Crewed Earth Orbiting Spacecraft

As crewed spacecraft have grown larger and more complex, they have come to rely on spacewalks, or Extravehicular Activities (EVA), for mission success and crew safety. Typically, these spacecraft maintain all of the hardware and trained personnel needed to perform an EVA on-board at all times. Maintaining this capability requires volume and up-mass for storage of EVA hardware, crew time for ground and on-orbit training, and on-orbit maintenance of EVA hardware. This paper proposes an alternative methodology, utilizing launch on-need hardware and crew to provide EVA capability for space stations in Earth orbit after assembly complete, in the same way that one would call a repairman to fix something at their home. This approach would reduce ground training requirements, save Intravehicular Activity (IVA) crew time in the form of EVA hardware maintenance and on-orbit training, and lead to more efficient EVAs because they would be performed by specialists with detailed knowledge and training stemming from their direct involvement in the development of the EVA. The on-orbit crew would then be available to focus on the immediate response to the failure as well as the day-to-day operations of the spacecraft and payloads. This paper will look at how current unplanned EVAs are conducted, including the time required for preparation, and offer alternatives for future spacecraft. As this methodology relies on the on-time and on-need launch of spacecraft, any space station that utilized this approach would need a robust transportation system including more than one launch vehicle capable of carrying crew. In addition, the fault tolerance of the space station would be an important consideration in how much time was available for EVA preparation after the failure. Each future program would have to weigh the risk of on-time launch against the increase in available crew time for the main objective of the spacecraft.

Mularski, John R.↗

An Alternative Approach to Human Servicing of Crewed Earth Orbiting Spacecraft

As crewed spacecraft have grown larger and more complex, they have come to rely on spacewalks, or Extravehicular Activities (EVA), for assembly and to assure mission success. Typically, these spacecraft maintain all of the hardware and trained personnel needed to perform an EVA on-board at all times. Maintaining this capability requires up-mass, volume for storage of EVA hardware, crew time for ground and on-orbit training, and on-orbit maintenance of EVA hardware. This paper proposes an alternative methodology, utilizing either launch-on-need hardware and crew or regularly scheduled missions to provide EVA capability for space stations in low Earth orbit after assembly complete. Much the same way that one would call a repairman to fix something at their home these EVAs are dedicated to maintenance and upgrades of the orbiting station. For crew safety contingencies it is assumed the station would be designed such the crew could either solve those issues from inside the spacecraft or use the docked Earth to Orbit vehicles as a return lifeboat, in the same manner as the International Space Station (ISS) which does not rely on EVA for crew safety related contingencies. This approach would reduce ground training requirements for long duration crews, save Intravehicular Activity (IVA) crew time in the form of EVA hardware maintenance and on-orbit training, and lead to more efficient EVAs because they would be performed by specialists with detailed knowledge and training stemming from their direct involvement in the development of the EVA. The on-orbit crew would then be available to focus on the immediate response to any failures such as IVA systems reconfiguration or jumper installation as well as the day-to-day operations of the spacecraft and payloads. This paper will look at how current unplanned EVAs are conducted on ISS, including the time required for preparation, and offer an alternative for future spacecraft. As this methodology relies on the on-time and on-need launch of spacecraft, any space station that utilized this approach would need a robust transportation system, possibly including more than one launch vehicle capable of carrying crew. In addition, the fault tolerance of the future space station would be an important consideration in how much time was available for EVA preparation after the failure. Ideally the fault tolerance of the station would allow for the maintenance tasks to be grouped such that they could be handled by regularly scheduled maintenance visits and not contingency launches. Each future program would have to weigh the risk of on-time launch against the increase in available crew time for the main objective of the spacecraft. This is only one of several ideas that could be used to reduce or eliminate a station's reliance on rapid turnaround EVAs using on-board crew. Others could include having shirt-sleeve access to critical systems or utilizing low pressure temporarily pressurized equipment bays.

Mularski, John R.↗

Introduction to the Navigation Team: Johnson Space Center EG6 Internship

The EG6 navigation team at NASA Johnson Space Center, like any team of engineers, interacts with the engineering process from beginning to end; from exploring solutions to a problem, to prototyping and studying the implementations, all the way to polishing and verifying a final flight-ready design. This summer, I was privileged enough to gain exposure to each of these processes, while also getting to truly experience working within a team of engineers. My summer can be broken up into three projects: i) Initial study and prototyping: investigating a manual navigation method that can be utilized onboard Orion in the event of catastrophic failure of navigation systems; ii) Finalizing and verifying code: altering a software routine to improve its robustness and reliability, as well as designing unit tests to verify its performance; and iii) Development of testing equipment: assisting in developing and integrating of a high-fidelity testbed to verify the performance of software and hardware.

Gualdoni, Matthew↗

Development and Implementation of a Hardware In-the-Loop Test Bed for Unmanned Aerial Vehicle Control Algorithms

Successful prediction and management of battery life using prognostic algorithms through ground and flight tests is important for performance evaluation of electrical systems. This paper details the design of test beds suitable for replicating loading profiles that would be encountered in deployed electrical systems. The test bed data will be used to develop and validate prognostic algorithms for predicting battery discharge time and battery failure time. Online battery prognostic algorithms will enable health management strategies. The platform used for algorithm demonstration is the EDGE 540T electric unmanned aerial vehicle (UAV). The fully designed test beds developed and detailed in this paper can be used to conduct battery life tests by controlling current and recording voltage and temperature to develop a model that makes a prediction of end-of-charge and end-of-life of the system based on rapid state of health (SOH) assessment.

Battery Testbed↗