Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault properties”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

Comparison of Aircraft Models and Integration Schemes for Interval Management in the TRACON

Reusable models of common elements for communication, computation, decision and control in air traffic management are necessary in order to enable simulation, analysis and assurance of emergent properties, such as safety and stability, for a given operational concept. Uncertainties due to faults, such as dropped messages, along with non-linearities and sensor noise are an integral part of these models, and impact emergent system behavior. Flight control algorithms designed using a linearized version of the flight mechanics will exhibit error due to model uncertainty, and may not be stable outside a neighborhood of the given point of linearization. Moreover, the communication mechanism by which the sensed state of an aircraft is fed back to a flight control system (such as an ADS-B message) impacts the overall system behavior; both due to sensor noise as well as dropped messages (vacant samples). Additionally simulation of the flight controller system can exhibit further numerical instability, due to selection of the integration scheme and approximations made in the flight dynamics. We examine the theoretical and numerical stability of a speed controller under the Euler and Runge-Kutta schemes of integration, for the Maintain phase for a Mid-Term (2035-2045) Interval Management (IM) Operational Concept for descent and landing operations. We model uncertainties in communication due to missed ADS-B messages by vacant samples in the integration schemes, and compare the emergent behavior of the system, in terms of stability, via the boundedness of the final system state. Any bound on the errors incurred by these uncertainties will play an essential part in a composable assurance argument required for real-time, flight-deck guidance and control systems,. Thus, we believe that the creation of reusable models, which possess property guarantees, such as safety and stability, is an innovative and essential requirement to assessing the emergent properties of novel airspace concepts of operation.

Neogi, Natasha↗

An Integrated Fault Tolerant Robotic Controller System for High Reliability and Safety

This paper describes the concepts and features of a fault-tolerant intelligent robotic control system being developed for applications that require high dependability (reliability, availability, and safety). The system consists of two major elements: a fault-tolerant controller and an operator workstation. The fault-tolerant controller uses a strategy which allows for detection and recovery of hardware, operating system, and application software failures.The fault-tolerant controller can be used by itself in a wide variety of applications in industry, process control, and communications. The controller in combination with the operator workstation can be applied to robotic applications such as spaceborne extravehicular activities, hazardous materials handling, inspection and maintenance of high value items (e.g., space vehicles, reactor internals, or aircraft), medicine, and other tasks where a robot system failure poses a significant risk to life or property.

robotics fault-tolerant control systems↗

A structural origin for the cantaloupe terrain of Triton

Cantaloupe terrain is unique to Triton. It is Triton's oldest terrain and includes about 250,000 km sq. region displaying sparsely cratered, closely spaced, nearly circular dimples about 30-40 km across. This terrain is found on no other planet because, only on Triton the final major global thermal pulse (1) caused completed (or nearly) interior melting resulting in a cooling history where large thermal stresses shattered and contorted a thin, weak lithosphere, and (2) occurred after heavy bombardment so that the surface features were preserved. The cantaloupe terrain is composed of intersecting sets of structures (folds and/or faults) that have developed as a result of global compression generated by volumetric changes associated with cooling of Triton's interior. Further, it is proposed that these structures developed after the period of heavy bombardment, and resulted from the last major global thermal epoch in Triton's unique history (either caused by tidal or radio metric heating). Initially, as the body cooled and the structures formed, their surface topography was most likely modified by thermal relaxation of the warm surface ices. In other bodies like Mercury, thermal stresses generated from global cooling and contraction have resulted in widely spaced thrust faults, whereas on Triton, thermal stresses produced more closely-spaced folds and faults sets. This difference in structural style is probably due to differences in lithospheric properties (thickness, strength, etc.), the magnitude of stress (directly dependent on the thermal history), and when the structures formed, relative to the period of heavy bombardment.

Boyce, Joseph M.↗

Effects of alloying elements on twinning in Ni-based superalloys

Micro-twinning is the major creep deformation mechanism in Ni-based superalloys at temperatures above 700 °C. Recent experiments suggest that superlattice stacking faults in y' phase may serve as the precursors to twin formation. Segregation of alloying elements to these precursors may have a significant effect on formation and extension of micro-twins. Using atomistic modeling we investigate and explain the effects of Nb and Cr alloying additions on these processes. The simulation shows that Nb increases the creep resistance which is mostly associated with impeding the reordering of the high energy double complex stacking fault. Cr, on the other hand, promotes twin growth, degrading the high temperature creep properties. These results can help to understand the effects of elemental composition of the alloy on creep resistance.

Ni-based superalloys↗

Effects of Alloying Elements on Twinning in Ni-Based Superalloys

Micro-twinning is the major creep deformation mechanism in Ni-based superalloys at temperatures above 700 °C. Recent experiments suggest that superlattice stacking faults in y' phase may serve as the precursors to twin formation. Segregation of alloying elements to these precursors may have a significant effect on formation and extension of micro-twins. Using atomistic modeling we investigate and explain the effects of Nb and Cr alloying additions on these processes. The simulation shows that Nb increases the creep resistance which is mostly associated with impeding the reordering of the high energy double complex stacking fault. Cr, on the other hand, promotes twin growth, degrading the high temperature creep properties. These results can help to understand the effects of elemental composition of the alloy on creep resistance.

Ni-based superalloys↗

The Design of Fault Tolerant Quantum Dot Cellular Automata Based Logic

As transistor geometries are reduced, quantum effects begin to dominate device performance. At some point, transistors cease to have the properties that make them useful computational components. New computing elements must be developed in order to keep pace with Moore s Law. Quantum dot cellular automata (QCA) represent an alternative paradigm to transistor-based logic. QCA architectures that are robust to manufacturing tolerances and defects must be developed. We are developing software that allows the exploration of fault tolerant QCA gate architectures by automating the specification, simulation, analysis and documentation processes.

Armstrong, C. Duane↗

Possible role of crustal flexure in the initial detachment of extensional allochthons

The existence of low-angle normal faults indicates that the ratio of shear stress (TAU) to normal stress (sigma sub N) needed to cause slip on faults is substantially less than would be predicted based on experimental data. Because the tensional strength of rock at a large scale is exceedingly low, the upper plate of a low-angle normal fault cannot be pulled down the fault ramp, but must be driven down it by its own weight. The active or recently active Sevier Desert detachment fault in western Utah dips regionally at 12 deg. The radio of shear stress to normal stress due to the weight of the upper plate on a 12 deg dipping fault surface is 0.2. In contrast, laboratory experiments indicate that slip on fracture surfaces occurs with almost all rock types when (tau/sigma) reaches values of 0.6 to 0.85, corresponding to normal-fault dips of 30 deg to 40 deg. Seismological data indicate that low deviatoric stresses are associated with movement on faults of other geometrics and are not unique to low-angle normal faults. It thus appears that approximately planar fault zones with surface areas of hundreds to thousands of square kilometers have different mechanical properties than would be predicted based on laboratory studies of fractured rock. Modeling of stresses indicates that deviatoric stresses greater than 5kb exist and are sustainable in oceanic lithosphere, and that failure occurs when tau/sigma sub N approaches 0.6 to 0.85.

Spencer, J. E.↗

Coverage Metrics for Requirements-Based Testing: Evaluation of Effectiveness

In black-box testing, the tester creates a set of tests to exercise a system under test without regard to the internal structure of the system. Generally, no objective metric is used to measure the adequacy of black-box tests. In recent work, we have proposed three requirements coverage metrics, allowing testers to objectively measure the adequacy of a black-box test suite with respect to a set of requirements formalized as Linear Temporal Logic (LTL) properties. In this report, we evaluate the effectiveness of these coverage metrics with respect to fault finding. Specifically, we conduct an empirical study to investigate two questions: (1) do test suites satisfying a requirements coverage metric provide better fault finding than randomly generated test suites of approximately the same size?, and (2) do test suites satisfying a more rigorous requirements coverage metric provide better fault finding than test suites satisfying a less rigorous requirements coverage metric? Our results indicate (1) only one coverage metric proposed -- Unique First Cause (UFC) coverage -- is sufficiently rigorous to ensure test suites satisfying the metric outperform randomly generated test suites of similar size and (2) that test suites satisfying more rigorous coverage metrics provide better fault finding than test suites satisfying less rigorous coverage metrics.

Staats, Matt↗

Formal development of a clock synchronization circuit

This talk presents the latest stage in formal development of a fault-tolerant clock synchronization circuit. The development spans from a high level specification of the required properties to a circuit realizing the core function of the system. An abstract description of an algorithm has been verified to satisfy the high-level properties using the mechanical verification system EHDM. This abstract description is recast as a behavioral specification input to the Digital Design Derivation system (DDD) developed at Indiana University. DDD provides a formal design algebra for developing correct digital hardware. Using DDD as the principle design environment, a core circuit implementing the clock synchronization algorithm was developed. The design process consisted of standard DDD transformations augmented with an ad hoc refinement justified using the Prototype Verification System (PVS) from SRI International. Subsequent to the above development, Wilfredo Torres-Pomales discovered an area-efficient realization of the same function. Establishing correctness of this optimization requires reasoning in arithmetic, so a general verification is outside the domain of both DDD transformations and model-checking techniques. DDD represents digital hardware by systems of mutually recursive stream equations. A collection of PVS theories was developed to aid in reasoning about DDD-style streams. These theories include a combinator for defining streams that satisfy stream equations, and a means for proving stream equivalence by exhibiting a stream bisimulation. DDD was used to isolate the sub-system involved in Torres-Pomales' optimization. The equivalence between the original design and the optimized verified was verified in PVS by exhibiting a suitable bisimulation. The verification depended upon type constraints on the input streams and made extensive use of the PVS type system. The dependent types in PVS provided a useful mechanism for defining an appropriate bisimulation.

Miner, Paul S.↗

Interface Supports Multiple Broadcast Transceivers for Flight Applications

A wireless avionics interface provides a mechanism for managing multiple broadcast transceivers. This interface isolates the control logic required to support multiple transceivers so that the flight application does not have to manage wireless transceivers. All of the logic to select transceivers, detect transmitter and receiver faults, and take autonomous recovery action is contained in the interface, which is not restricted to using wireless transceivers. Wired, wireless, and mixed transceiver technologies are supported. This design s use of broadcast data technology provides inherent cross strapping of data links. This greatly simplifies the design of redundant flight subsystems. The interface fully exploits the broadcast data link to determine the health of other transceivers used to detect and isolate faults for fault recovery. The interface uses simplified control logic, which can be implemented as an intellectual-property (IP) core in a field-programmable gate array (FPGA). The interface arbitrates the reception of inbound data traffic appearing on multiple receivers. It arbitrates the transmission of outbound traffic. This system also monitors broadcast data traffic to determine the health of transmitters in the network, and then uses this health information to make autonomous decisions for routing traffic through transceivers. Multiple selection strategies are supported, like having an active transceiver with the secondary transceiver powered off except to send periodic health status reports. Transceivers can operate in round-robin for load-sharing and graceful degradation.

Block, Gary L.↗

A Unified Fault-Tolerance Protocol

Davies and Wakerly show that Byzantine fault tolerance can be achieved by a cascade of broadcasts and middle value select functions. We present an extension of the Davies and Wakerly protocol, the unified protocol, and its proof of correctness. We prove that it satisfies validity and agreement properties for communication of exact values. We then introduce bounded communication error into the model. Inexact communication is inherent for clock synchronization protocols. We prove that validity and agreement properties hold for inexact communication, and that exact communication is a special case. As a running example, we illustrate the unified protocol using the SPIDER family of fault-tolerant architectures. In particular we demonstrate that the SPIDER interactive consistency, distributed diagnosis, and clock synchronization protocols are instances of the unified protocol.

Miner, Paul↗

Error detection process - Model, design, and its impact on computer performance

An analytical model is developed for computer error detection processes and applied to estimate their influence on system performance. Faults in the hardware, not in the design, are assumed to be the potential cause of transition to erroneous states during normal operations. The classification properties and associated recovery methods of error detection are discussed. The probability of obtaining an unreliable result is evaluated, along with the resulting computational loss. Error detection during design is considered and a feasible design space is outlined. Extension of the methods to account for the effects of extant multiple faults is indicated.

Shin, K. G.↗

ERTS-1 imagery of eastern Africa: A first look at the geological structure of selected areas

The author has identified the following significant results. Imagery of the African rift system resolves the major Cainozoic faults, zones of warping, and associated volcanism. It also clearly depicts the crystal grain of the Precambrian rocks where these are exposed. New structural features, or new properties of known features such as greater extent, continuity, and linearity are revealed by ERTS-1 imagery. This applies, for example, to the NE-SW fracture zones in Yemen, the Aswa mylonite zone at the northern end of the Western Rift, the Nandi fault of western Kenya, the linear faults of the Elgeyo escarpment in the Gregory Rift, and the hemibasins of warped Tertiary lavas on the Red Sea margin of Yemen, matching those of Ethiopian plateau-Afar margin. A tentative scheme is proposed, relating the effect on the pattern of Cainozoic faulting of the degree of obliquity to Precambrian structural trend. It is particularly noteworthy that, even where the Precambrian grain determines the rift faulting to be markedly oblique to the overall trend of the rift trough, for example, in central Lake Tanganyika, the width of the trough is not significantly increased. Some ground mapped lithological boundaries are obscure on ERTS-1 imagery.

Mohr, P. A.↗

Mapping of the major structures of the African rift system

The author has identified the following significant results. ERTS-1 imagery of the African rift system resolves the major Cenozoic faults, zones of warping, and the associated volcanism. It also clearly depicts the crustal grain of the Precambrian rocks where these are exposed. New structural features, or new properties of known features such as greater extent, continuity, linearity, etc., are revealed by the ERTS-1 imagery. This applies to the NE-SW fracture zones in Yemen, the Aswa mylonite zone at the northern end of the Western Rift, the Nandi fault of western Kenya, the arcuate faults of the Elgeyo escarpment in the Gregory rift, and hemi-basins of warped Tertiary lavas on the Red Sea margin of Yemen, matching those of the Ethiopian plateau-Afar margin. A tentative scheme is proposed, relating the effect on the pattern of Cenozoic faulting of the degree of obliquity to Precambrian structural trend. Some ground-mapped lithological boundaries are obscure on ERTS-1 imagery. The present approaches to mapping of Precambrian terrain in Africa may require radical revision with the input of satellite imagery.

Mohr, P. A.↗

Bounded-time fault-tolerant rule-based systems

Two systems concepts are introduced: bounded response-time and self-stabilization in the context of rule-based programs. These concepts are essential for the design of rule-based programs which must be highly fault tolerant and perform in a real time environment. The mechanical analysis of programs for these two properties is discussed. The techniques are used to analyze a NASA application.

Browne, James C.↗

Multi-version software reliability through fault-avoidance and fault-tolerance

A number of experimental and theoretical issues associated with the practical use of multi-version software to provide run-time tolerance to software faults were investigated. A specialized tool was developed and evaluated for measuring testing coverage for a variety of metrics. The tool was used to collect information on the relationships between software faults and coverage provided by the testing process as measured by different metrics (including data flow metrics). Considerable correlation was found between coverage provided by some higher metrics and the elimination of faults in the code. Back-to-back testing was continued as an efficient mechanism for removal of un-correlated faults, and common-cause faults of variable span. Software reliability estimation methods was also continued based on non-random sampling, and the relationship between software reliability and code coverage provided through testing. New fault tolerance models were formulated. Simulation studies of the Acceptance Voting and Multi-stage Voting algorithms were finished and it was found that these two schemes for software fault tolerance are superior in many respects to some commonly used schemes. Particularly encouraging are the safety properties of the Acceptance testing scheme.

Vouk, Mladen A.↗

RSRM Nozzle Anomalous Throat Erosion Investigation Overview

In September, 1996, anomalous pocketing erosion was observed in the aft end of the throat ring of the nozzle of one of the reusable solid rocket motors (RSRM 56B) used on NASA's space transportation system (STS) mission 79. The RSRM throat ring is constructed of bias tape-wrapped carbon cloth/ phenolic (CCP) ablative material. A comprehensive investigation revealed necessary and sufficient conditions for occurrence of the pocketing event and provided rationale that the solid rocket motors for the subsequent mission, STS-80, were safe to fly. The nozzles of both of these motors also exhibited anomalous erosion similar to, but less extensive than that observed on STS-79. Subsequent to this flight, the investigation to identify both the specific causes and the corrective actions for elimination of the necessary and sufficient conditions for the pocketing erosion was intensified. A detailed fault tree approach was utilized to examine potential material and process contributors to the anomalous performance. The investigation involved extensive constituent and component material property testing, pedigree assessments, supplier audits, process audits, full scale processing test article fabrication and evaluation, thermal and thermostructural analyses, nondestructive evaluation, and material performance tests conducted using hot fire simulation in laboratory test beds and subscale and full scale solid rocket motor static test firings. This presentation will provide an over-view of the observed anomalous nozzle erosion and the comprehensive, fault-tree based investigation conducted to resolve this issue.

Clinton, R. G., Jr.↗

A scanning radar altimeter for mapping continental topography

Topographic information constitutes a fundamental data set for the Earth sciences. In the geological and geophysical sciences, topography combined with gravitational information provides an important constraint on the structure and rheologic properties of the crust and lithosphere. Detailed topography data can also be used to map offsets associated with faulting and to reveal the effects of tectonic deformation. In the polar regions, elevation data form a crucial but as yet largely unavailable resource for studying ice sheet mass balance and ice flow dynamics. The vast Antarctic ice sheet is the largest fresh water reservoir on Earth and is an important influence on ocean circulation and global climate. However, our knowledge of its stability is so limited that we cannot even specify whether the Antarctic ice sheet is growing or shrinking. It is clear that there is need for high quality global topography data. A summary of potential applications with their resolution requirements is shown.

Dixon, T. H.↗