Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Development assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 829 records · Page 46

Overview of Risk Mitigation for Safety-Critical Computer-Based Systems

This report presents a high-level overview of a general strategy to mitigate the risks from threats to safety-critical computer-based systems. In this context, a safety threat is a process or phenomenon that can cause operational safety hazards in the form of computational system failures. This report is intended to provide insight into the safety-risk mitigation problem and the characteristics of potential solutions. The limitations of the general risk mitigation strategy are discussed and some options to overcome these limitations are provided. This work is part of an ongoing effort to enable well-founded assurance of safety-related properties of complex safety-critical computer-based aircraft systems by developing an effective capability to model and reason about the safety implications of system requirements and design.

Torres-Pomales, Wilfredo↗

Technical Reference Suite Addressing Challenges of Providing Assurance for Fault Management Architectural Design

Research into complexities of software systems Fault Management (FM) and how architectural design decisions affect safety, preservation of assets, and maintenance of desired system functionality has coalesced into a technical reference (TR) suite that advances the provision of safety and mission assurance. The NASA Independent Verification and Validation (IVV) Program, with Software Assurance Research Program support, extracted FM architectures across the IVV portfolio to evaluate robustness, assess visibility for validation and test, and define software assurance methods applied to the architectures and designs. This investigation spanned IVV projects with seven different primary developers, a wide range of sizes and complexities, and encompassed Deep Space Robotic, Human Spaceflight, and Earth Orbiter mission FM architectures. The initiative continues with an expansion of the TR suite to include Launch Vehicles, adding the benefit of investigating differences intrinsic to model-based FM architectures and insight into complexities of FM within an Agile software development environment, in order to improve awareness of how nontraditional processes affect FM architectural design and system health management.

Fitz, Rhonda↗

Evaluation of 10V Chip Polymer Tantalum Capacitors for Space Applications

Due to low ESR and safe failure mode, new technology chip polymer tantalum capacitors (CPTC) have gained popularity in the electronics design community, first in commercial applications, and now in hi-rel and space systems. The major drawbacks of these parts are high leakage currents, degradation under environmental stresses, and a relatively narrow temperature range of operating and storage conditions. Several studies have shown that a certain amount of moisture in polymer cathodes is necessary for a normal operation of the parts. This might limit applications of CPTCs in space systems and requires analysis of long-term exposure to deep vacuum conditions on their performance and reliability. High leakage currents and limited maximum operational temperature complicate accelerated testing that is necessary to assess long-term reliability and require new screening and qualification procedures for quality assurance. A better understanding of behavior of CPTCs as compared to traditional, MnO2, capacitors is necessary to develop adequate approaches for QA system for space applications. A specific of CPTCs is that different materials and processes might be used for low-voltage (10 V and less) and high-voltage (above 10 V) capacitors, so performance and degradation processes in these groups require separate analysis. In this work, that is a part of the NASA Electronic Parts and Packaging (NEPP) program, degradation of AC and DC characteristics under environmental stresses at different temperatures and voltages have been studied in nine lots of commercial and automotive grade capacitors rated to 10 V. Results of analysis of leakage currents, high temperature storage (HTS) up to 5000 hrs in vacuum and air at different temperatures, and Highly Accelerated Life Testing (HALT) in the range from 85 C to 145 C are presented. Temperature and voltage acceleration factors were calculated based on approximation of distributions of degradation rates with a general log-linear Weibull model. Mechanisms of degradation and failures, and requirements for screening and qualification testing are discussed.

Tantalum Capacitors↗

NASA's Journey to Safety Culture

One of the organizational causes of the Shuttle Columbia mishap found by the Columbia Accident Investigation Board (CAIB) Report was a "Broken Safety Culture". Since its release, NASA has strived to improve its Safety Culture In 2009, the Chief of the Office of Safety and Mission Assurance asked a member of the Air Force Safety Center and of the CAIB for assistance to develop a NASA Safety Culture Program. This presentation describes the journey that NASA personnel has taken developing a NASA Safety Culture Program to "repair" its Safety Culture.

Dillinger, Tracy↗

Challenges and Opportunities of International Cooperation for Safety & Mission Assurance (SMA) on the European Service Module (ESM) of the Orion Program

ESA is providing the ESM to NASA for the Orion Program in accordance with the Implementing Arrangement (IA) established between the two Agencies in 2012. This IA is a barter agreement, in which ESA provides Service Module vehicles for the first two flights of Orion in exchange for two servicing missions to the ISS. This arrangement has provided opportunities and challenges to both communities. It represents an important opportunity for ESA to build on its experience in the development and operations of ATV and play an active role in the development and flight of a manned space vehicle. This paper will explore some of the unique aspects of this arrangement as it affects Safety & Mission Assurance (SMA).The assessment of ESM compliance with applicable safety requirements is the responsibility of the Joint Safety and Engineering Review Panel (JSERP). The JSERP has two features that are relatively unique amongst NASA safety panels. First, NASA Engineering and SMA organizations co-chair this Panel. Previously, Safety has chaired, with Engineering as a member of the Panel. Inclusion of Engineering as a co-chair has offered greater leverage within the technical community. Second, the JSERP includes a second set of co-chairs from ESA Engineering and ESA Product Assurance and Safety (PA/S) organizations. This recognizes the international arrangement as one of partnership.Another source of both opportunity and challenge is the differing experience base of ESA and NASA. NASA has decades of experience in manned spaceflight, dating back to the Mercury program and following through Gemini, Apollo, Apollo-Soyuz, Skylab, Shuttle and the International Space Station. The risk posture for manned missions is much more rigorous than for unmanned missions. ESA brings a wealth of knowledge as well, with their flights of Ariane and Automated Transfer Vehicle (ATV), development and operation of the Columbus module on ISS, and satellite programs. The result is that both parties have developed paradigms related to risk and failure that contribute to ESM discussions.Orion represents humanity's first venture beyond Low-Earth Orbit (LEO) in over fifty years. Much of that experience is captured in program documents, but first-hand knowledge is limited to a few spaceflight veterans. Missions to LEO have offered the opportunity of direct, near-instantaneous communications and assistance, and the ability to return to Earth within a matter of hours in case of emergency. Outward-bound missions do not have these features and will require a more autonomous spacecraft with attendant safety-related issues.This paper will explore these and other challenges as we approach the flight of the first Orion vehicle.

Ciancone, Michael L.↗

Development and Use of the SPACE Computer Code for Analyzing the Space Station Electrical Power System

This special publication tells the story of the dedicated efforts of very talented individuals to create a preeminent space electrical power system modeling and simulation tool called SPACE, short for System Power Analysis for Capability Evaluation. This computer model has evolved for 30 years, withstanding the test of time and obsolescence, and garnering international recognition for its ability to simulate complex space electrical power systems. The analytical results from this model have saved millions of dollars in hardware redesign, testing, and verification for NASA's International Space Station (ISS) and its European and Russian partners. SPACE has played a pivotal role in the station's design and development and continues to support its ongoing operation. It has also extended its reach beyond the ISS to other key NASA programs, where it guides the design and planned operation of NASA's Multi-Purpose Crew Vehicle Orion and simulates electric power system operation in a dusty atmosphere on Mars' surface. The SPACE lineage was created by a core civil servant staff, supplemented by a cadre of interns and other temporary helpers. They created a tightly integrated tool that includes all phenomena that impact a solar array and battery space power system performance. SPACE is self-contained, requiring no other software modules and associated license fees. SPACE "rings true" in that is has been extensively validated with ISS on-orbit telemetry data. This report is being released as the generation of engineers who created it are nearing retirement, passing the baton to a new generation. This next generation will carry the code into the future, no doubt further evolving it to be able to assure mission planners that newly conceived systems will successfully power NASA's next endeavors. As a previous SPACE code developer and analyst, I have worked alongside many of the people mentioned in this report. The engineers who created the code, along with those just now learning it, are among the best and brightest at NASA. It is an honor to write this foreword as the present Branch Chief under which the legacy of SPACE continues to thrive.

Electrical Power System↗

Data Centers and Digital Assurance Workshop 2 – Prioritizing Digital Assurance Challenges, Session 2

The second session of the TADA (Technical Assistance for Digital Assurance) Data Centers Cohort, held on November 10, 2025, focused on prioritizing digital assurance challenges at the intersection of data centers and the electric grid. Building on the foundational concepts introduced in Workshop 1, this session deepened the application of the Threat–Vulnerability–Consequence (TVC) framework and emphasized the urgency of addressing cybersecurity, supply chain integrity, and operational reliability. Participants explored the growing convergence of digital and physical systems, the expanding attack surface due to global supply chain dependencies, and the implications of AI-driven load behavior. Real-world incidents—including the Volt Typhoon campaign and vulnerabilities in Solarman and Deye platforms—were analyzed to illustrate the risks of unpatched systems, insecure APIs, and inadequate vendor oversight. Key themes included architecture and interface weaknesses, governance gaps, and human and procedural shortcomings. The workshop also examined the evolving regulatory landscape, highlighting new federal mandates around Foreign Entity of Concern (FEOC) compliance and large-load reliability standards. Through interactive exercises, stakeholders ranked and mapped digital assurance risks from their respective perspectives—utilities, operators, and vendors—laying the groundwork for mitigation strategies and shared accountability models to be developed in Workshop 3. Session 2 of 3.

24 - POWER TRANSMISSION AND DISTRIBUTION↗

Exploration Challenges: Transferring Ground Repair Techniques to Space Flight Application

Fulfilling NASA's Vision for Space Exploration will demand an extended presence in space at distances from our home planet that exceed our current experience in space logistics and maintenance. The ability to perform repairs in lieu of the customary Orbital Replacement Unit (ORU) process where a faulty part is replaced will be elevated from contingency to routine to sustain operations. The use and cost effectiveness of field repairs for ground based operations in industry and the military have advanced with the development of technology in new materials, new repair techniques and new equipment. The unique environments, accessibility constraints and Extra Vehicular Activity (EVA) issues of space operations will require extensive assessment and evolution of these technologies to provide an equivalent and expected level of assurance to mission success. Challenges include the necessity of changes in design philosophy and policy, extremes in thermal cycling, disruptive forces (such as static charge and wind entrainment) on developed methods for control of materials, dramatically increased volatility of chemicals for cleaning and other compounds due to extremely low pressures, the limits imposed on dexterity and maneuverability by current EVA equipment and practices, and the necessity of unique verification methodology. This paper describes these challenges in and discusses the effects on the established ground techniques for repair. The paper also describes the leading repair methodology candidates and their beneficial attributes for resolving these issues with the evolution of technology.

McLemore, Carole A.↗

Systems Integration Processes for NASA Ares I Crew Launch Vehicle

NASA's Exploration Initiative will require development of many new elements to constitute a robust system of systems. New launch vehicles are needed to place cargo and crew in stable Low Earth Orbit (LEO). This paper examines the systems integration processes NASA is utilizing to ensure integration and control of propulsion and nonpropulsion elements within NASA's Crew Launch Vehicle (CLV), now known as the Ares I. The objective of the Ares I is to provide the transportation capabilities to meet the Constellation Program requirements for delivering a Crew Exploration Vehicle (CEV) or other payload to LEO in support of the lunar and Mars missions. The Ares I must successfully provide this capability within cost and schedule, and with an acceptable risk approach. This paper will describe the systems engineering management processes that will be applied to assure Ares I Project success through complete and efficient technical integration. Discussion of technical review and management processes for requirements development and verification, integrated design and analysis, integrated simulation and testing, and the integration of reliability, maintainability and supportability (RMS) into the design will also be included. The Ares I Project is logically divided into elements by the major hardware groupings, and associated management, system engineering, and integration functions. The processes to be described herein are designed to integrate within these Ares I elements and among the other Constellation projects. Also discussed is launch vehicle stack integration (Ares I to CEV, and Ground and Flight Operations integration) throughout the life cycle, including integrated vehicle performance through orbital insertion, recovery of the first stage, and reentry of the upper stage. The processes for decomposing requirements to the elements and ensuring that requirements have been correctly validated, decomposed, and allocated, and that the verification requirements are properly defined to ensure that the system design meets requirements, will be discussed.

Taylor, James L.↗

Fiber optic combiner and duplicator

The investigation of the possible development of two optical devices, one to take two images as inputs and to present their arithmetic sum as a single output, the other to take one image as input and present two identical images as outputs is described. Significant engineering time was invested in establishing precision fiber optics drawing capabilities, real time monitoring of the fiber size and exact measuring of fiber optics ribbons. Various assembly procedures and tooling designs were investigated and prototype models were built and evaluated that established technical assurance that the device was feasible and could be fabricated. Although the interleaver specification in its entirety was not achieved, the techniques developed in the course of the program improved the quality of images transmitted by fiber optic arrays by at least an order of magnitude. These techniques are already being applied to the manufacture of precise fiber optic components.

Source record↗

Stardust Blazes MOA Trail

Mission Operations Assurance (MOA) started at the Jet Propulsion Laboratory (JPL) with the Magellan and Galileo missions of the late 80's. It continued to develop and received a significant impetus with the failures of two successive missions to Mars in the late 90's. MOA continued to evolve with each successive project at JPL achieving its current maturity with the Stardust sample return to Earth.

operations assurance mission↗

Long life assurance study for manned spacecraft long life hardware. Volume 3: Long life assurance studies of components

The guidelines for selecting hardware to be used in manned spacecraft to obtain a five year operational lifetime without maintenance were developed. An analysis was conducted on the design, application, failure mechanisms, manufacturing processes and controls, screen and burn-in techniques, and quality control of hardware items. The equipment considered for evaluation include: (1) electric motors and bearings; (2) accelerometers; (3) gyroscopes and bearings; (4) compressors and pumps, (5) magnetic tape recorders; (6) plumbing components and tubing; (7) check valves; (8) pressure regulators and solenoid valves; (9) thermal control valves; (10) pressure vessels and positive expulsion devices; (11) nickel cadmium batteries; and (12) transducers.

Source record↗

Assuring reliability program effectiveness.

An attempt is made to provide simple identification and description of techniques that have proved to be most useful either in developing a new product or in improving reliability of an established product. The first reliability task is obtaining and organizing parts failure rate data. Other tasks are parts screening, tabulation of general failure rates, preventive maintenance, prediction of new product reliability, and statistical demonstration of achieved reliability. Five principal tasks for improving reliability involve the physics of failure research, derating of internal stresses, control of external stresses, functional redundancy, and failure effects control. A final task is the training and motivation of reliability specialist engineers.

Ball, L. W.↗

Design studies of Laminar Flow Control (LFC) wing concepts using superplastics forming and diffusion bonding (SPF/DB)

Alternate concepts and design approaches were developed for suction panels and techniques were defined for integrating these panel designs into a complete LFC 200R wing. The design concepts and approaches were analyzed to assure that they would meet the strength, stability, and internal volume requirements. Cost and weight comparisions of the concepts were also made. Problems of integrating the concepts into a complete aircraft system were addressed. Methods for making splices both chordwise and spanwise, fuel light joints, and internal duct installations were developed. Manufacturing problems such as slot aligment, tapered slot spacing, production methods, and repair techniques were addressed. An assessment of the program was used to developed recommendations for additional research in the development of SPF/DB for LFC structure.

Wilson, V. E.↗

Electrolytically Assisted Surface Decontamination (EASD{sup TM}) for POCO Operations - 20282

NNL in collaboration with C-Tech Innovation Ltd and Sellafield Ltd has been exploring innovative technologies to enable a significant reduction of radiological hazards within facilities during the Post Operational Clean Out (POCO) phase of a nuclear plant's life cycle. Reducing the hazard by effectively decontaminating plants in-situ during POCO delivers huge cost reductions for future decommissioning operations. These cost reduction benefits are realized by reducing the number and complexity of remote operations as well as lowering the long-term waste disposal costs. Whilst chemical decontamination can achieve the desired level of decontamination, applying aggressive chemical reagents is hazardous, potentially difficult to control and requires there to be complimentary effluent treatment and waste routes. This work has aimed to develop flexible and controllable decontamination processes which could be operated without the additional complexity and issues associated with chemical decontamination. The processes needed to be relatively fast and effective to minimize the time operators would spend in an active area. In addition, there was a driver to produce decontamination methodologies which generated a secondary waste compatible with current routes and which takes advantage of current waste capacity. The strategy therefore was to come up with a solution that works with, rather than against, the science and engineering behind process plants at Sellafield. Electrolytically Assisted Surface Decontamination (EASD{sup TM}) is an innovative electrochemical decontamination process (developed by NNL and C-Tech Innovation Ltd) that can remove activity from contaminated metal in very short time periods. Application of the patented electric waveform to the surface when treating contaminated metal with nitric acid has been shown to significantly enhance the decontamination performance. When compared to proposed baseline washout procedures at Sellafield, the only change to the process is the applied electrical waveform which is temporary and controllable. The current causes dissolution of the metal surface being decontaminated which leads to activity transferring from the plant item into the nitric acid effluent stream. This innovation has the potential to transform the POCO process and allow a nitric acid based washout approach to deliver POCO quickly and cost effectively within the existing infrastructure. Several devices have now been designed that incorporate this EASD{sup TM} technology and enable the decontamination process to be applied to a range items commonly identified as being contaminated during nuclear decommissioning programmes such as pipework, tanks and hotspots of walls/floors. Inactive and active laboratory-scale testing has been completed using both simulated and 'real-life' contaminated (low level waste) metallic items retrieved from different nuclear sites. Active trials demonstrated that contaminated items could be treated to free release levels within minutes. Engineering scale tests are currently being performed, with guidance from Sellafield's system engineers and plant managers, to provide the necessary re-assurance the designed devices could be successfully deployed in an on-plant scenario. The final stage of this development work is to carry out an active demonstration of the decontamination technology on Thorp at Sellafield. This paper aims to highlight progress made to date with the EASD{sup TM} technology and, more specifically, the development of an in-situ decontamination device for deployment within radioactive pipework. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Cooperative GN&C development in a rapid prototyping environment

The Navigation, Control and Aeronautics Division (NCAD) at NASA-JSC is exploring ways of producing Guidance, Navigation and Control (GN&C) flight software faster, better, and cheaper. To achieve these goals NCAD established two hardware/software facilities that take an avionics design project from initial inception through high fidelity real-time hardware-in-the-loop testing. Commercially available software products are used to develop the GN&C algorithms in block diagram form and then automatically generate source code from these diagrams. A high fidelity real-time hardware-in-the-loop laboratory provides users with the capability to analyze mass memory usage within the targeted flight computer, verify hardware interfaces, conduct system level verification, performance, acceptance testing, as well as mission verification using reconfigurable and mission unique data. To evaluate these concepts and tools, NCAD embarked on a project to build a real-time 6 DOF simulation of the Soyuz Assured Crew Return Vehicle flight software. To date, a productivity increase of 185 percent has been seen over traditional NASA methods for developing flight software.

Bordano, Aldo↗

Accuracy Enhancement of Nuclear Power Plant Simulators Utilizing High Accuracy Simulation Predictions

More recently, reactor core simulators for core designs associated with commercial nuclear power plants that utilize what is believed to be higher fidelity models have been developed. Features such as neutronics models that utilize transport equation solvers with fine spatial meshes and many energy-groups, thermal-hydraulic models that utilize sub-channel solvers with fine spatial mesh and capable of treating a wide range of fluid conditions, and fuel-coolant chemistry interaction models capable of treating CRUD deposition are to be found in these higher fidelity core simulators. These reactor core simulators require access to higher performance computers, characterized by many processors, cores and large memory. So associated with utilization of these simulators is access to high performance computers and ability to accommodate in one’s workflow longer execution times. By contrast, currently used core simulators by the nuclear industry can execute on engineering workstations and have execution times of seconds to minutes. The desirability for having short execution times is not only desired for support of time critical tasks but supports the mental process of decision making by engineers. The goal of the work reported upon here has the objective of retaining the fidelity of higher fidelity models while retaining the ability to utilize engineering workstations. Beyond the core simulator goal, additional goals of this work include incorporating the just described core simulator capability into a Nuclear Steam Supply System (NSSS) simulator, and to incorporate the resulting capability into an environment supportive of design and operational decision making associated with nuclear power stations. The model selected for the core neutronics model is the NESTLE code, for the core thermal-hydraulic model is the CTF code utilizing coarse mesh, and for the NSSS model is the RELAP5-3D code. WSC’s proprietary 3KEYMASTERTM platform is being used to provide software coupling, user interface, visualization, and reporting. The NESTLE core neutronics simulator was first integrated with the CTF core thermal-hydraulic simulator using CTF developed communication commands which are also used for CTF to communicate with RELAP5-3D under WSC’s proprietary 3KEYMASTERTM platform. To assure NESTLE prediction consistency with higher fidelity core neutronic simulators, buffer codes have been created to automatically generate from output files written by the VERA core simulator the NESTLE nodal neutronic parameter’ library, geometry, and pin-power reconstruction input files, thereby avoiding a number of challenges associated with utilizing lattice physics codes and providing consistency with VERA predictions. To treat absorber rod effects a multi-set library is utilized, where a set refers to a specific absorber rod fully inserted pattern. A coarse spatial mesh CTF model was developed with features added that support using CTF as envisioned in the engineering quality simulator. A hybrid meshing approach was implemented to allow for automated construction of models with mixed levels of refinement. Specifically, a core model could resolve some assemblies at a nodal level (4 subchannels per assembly) and others at a pin-resolution (one subchannel per coolant subchannel in the assembly). The intention is that this will allow for better resolution of limiting conditions such as DNBR and PCT, which are based on local rod and subchannel conditions. Further development was done of features that enhance the capabilities for the envisioned engineering quality simulator that has been developed, but now for RELAP-3D. The RELAP5-3D code development includes ability to model more than 999 components and the addition of the cross-channels turbulence mixing model and the void drift model that are implemented in CTF, aiming to achieve closer prediction agreement of the two codes for transient simulations, specifically, more accurate matches of the overall mass, momentum, and energy exchanges of both the liquid and gas phases between the neighboring core assemblies. Graphics were also developed for the Instructor Station for this project under WSC’s proprietary 3KEYMASTERTM platform to facilitate design and operational decision making.

42 ENGINEERING↗