SEARCH · Engineering Papers

Results for “safe mode”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 91 records · Page 5

All sources NASA NTRS DOE OSTI

NASA NTRS1991

Space medicine - Answering the challenge

The development of Space Station Freedom (SSF) Health Maintenance Facility (HMF) is discussed. Attention is given to HMF subsystems; the diagnostic radiological imaging system; the physician instruments; the pharmacy and central supply; the Fluid Therapy Subsystem; the restraints to be used for medical procedures; and the Safe Haven mode, which is a mode of station operation in which it is assumed that the HMF has been lost and the medical needs must be provided by the emergency medical equipment and supplies located in the Portable Emergency Provisions. Special attention is given to the pharmaceutical issues involved, including such as the product selection, oral medications, injectable medications, the effect of exposing medications to high vacuum, and the product shelf life.

Lloyd, Charles W.↗

NASA NTRS1996

Fault Diagnosis of Power Systems Using Intelligent Systems

The power system operator's need for a reliable power delivery system calls for a real-time or near-real-time Al-based fault diagnosis tool. Such a tool will allow NASA ground controllers to re-establish a normal or near-normal degraded operating state of the EPS (a DC power system) for Space Station Alpha by isolating the faulted branches and loads of the system. And after isolation, re-energizing those branches and loads that have been found not to have any faults in them. A proposed solution involves using the Fault Diagnosis Intelligent System (FDIS) to perform near-real time fault diagnosis of Alpha's EPS by downloading power transient telemetry at fault-time from onboard data loggers. The FDIS uses an ANN clustering algorithm augmented with a wavelet transform feature extractor. This combination enables this system to perform pattern recognition of the power transient signatures to diagnose the fault type and its location down to the orbital replaceable unit. FDIS has been tested using a simulation of the LeRC Testbed Space Station Freedom configuration including the topology from the DDCU's to the electrical loads attached to the TPDU's. FDIS will work in conjunction with the Power Management Load Scheduler to determine what the state of the system was at the time of the fault condition. This information is used to activate the appropriate diagnostic section, and to refine if necessary the solution obtained. In the latter case, if the FDIS reports back that it is equally likely that the faulty device as 'start tracker #1' and 'time generation unit,' then based on a priori knowledge of the system's state, the refined solution would be 'star tracker #1' located in cabinet ITAS2. It is concluded from the present studies that artificial intelligence diagnostic abilities are improved with the addition of the wavelet transform, and that when such a system such as FDIS is coupled to the Power Management Load Scheduler, a faulty device can be located and isolated from the rest of the system. The benefit of these studies provides NASA with the ability to quickly restore the operating status of a space station from a critical state to a safe degraded mode, thereby saving costs in experimentation rescheduling, fault diagnostics, and prevention of loss-of-life.

Momoh, James A.↗

NASA NTRS1997

MAP Attitude Control System Design and Analysis

The Microwave Anisotropy Probe (MAP) is a follow-on to the Differential Microwave Radiometer (DMR) instrument on the Cosmic Background Explorer (COBE) spacecraft. The MAP spacecraft will perform its mission in a Lissajous orbit around the Earth-Sun L(sub 2) Lagrange point to suppress potential instrument disturbances. To make a full-sky map of cosmic microwave background fluctuations, a combination fast spin and slow precession motion will be used. MAP requires a propulsion system to reach L(sub 2), to unload system momentum, and to perform stationkeeping maneuvers once at L(sub 2). A minimum hardware, power and thermal safe control mode must also be provided. Sufficient attitude knowledge must be provided to yield instrument pointing to a standard deviation of 1.8 arc-minutes. The short development time and tight budgets require a new way of designing, simulating, and analyzing the Attitude Control System (ACS). This paper presents the design and analysis of the control system to meet these requirements.

Andrews, S. F.↗

NASA NTRS2006

Autonomic Management of Space Missions

With NASA s renewed commitment to outer space exploration, greater emphasis is being placed on both human and robotic exploration. Even when humans are involved in the exploration, human tending of assets becomes cost-prohibitive or in many cases is simply not feasible. In addition, certain exploration missions will require spacecraft that will be capable of venturing where humans cannot be sent. Early space missions were operated manually from ground control centers with little or no automated operations. In the mid-l980s, the high costs of satellite operations prompted NASA, and others, to begin automating as many functions as possible. In our context, a system is autonomous if it can achieve its goals without human intervention. A number of more-or-less automated ground systems exist today, but work continues with the goal being to reduce operations costs to even lower levels. Cost reductions can be achieved in a number of areas. Ground control and spacecraft operations are two such areas where greater autonomy can reduce costs. As a consequence, autonomy is increasingly seen as a critical approach for robotic missions and for some aspects of manned missions. Although autonomy will be critical for the success of future missions (and indeed will enable certain kinds of science data gathering approaches), missions imbued with autonomy must also exhibit autonomic properties. Exploitation of autonomy alone, without emphasis on autonomic properties, will leave spacecraft vulnerable to the dangerous environments in which they must operate. Without autonomic properties, a spacecraft may be unable to recognize negative environmental effects on its components and subsystems, or may be unable to take any action to ameliorate the effects. The spacecraft, though operating autonomously, may then sustain a degradation of performance of components or subsystems, and consequently may have a reduced potential for achieving mission objectives. In extreme cases, lack of autonomic properties could leave the spacecraft unable to recover from faults. Ensuring that exploration spacecraft have autonomic properties will increase the survivability and therefore the likelihood of success of these missions. In fact, over time, as mission requirements increased demands on spacecraft capabilities and longevity, designers have gradually built more autonomicity into spacecraft. For example, a spacecraft in low-earth orbit may experience an out-of-bounds perturbation of its attitude (orientation) due to increased drag caused by increased atmospheric density at its altitude as a result of a sufficiently large solar flare. If the spacecraft was designed to recognize the excessive attitude perturbation, it could decide to protect itself by going into a safe-hold mode where its internal configuration and operation are altered to conserve power and its coarse attitude is adjusted to point its solar panels toward the Sun to maximize power generation. This is an example of a simple type of autonomic behavior that has actually occurred. Future mission concepts will be increasingly dependent on space system survivability enabled by more advanced types of autonomic behaviors

Hinchey, Michael G.↗

NASA NTRS2010

Integration and Testing of the Lunar Reconnaissance Orbiter Attitude Control System

Throughout the Lunar Reconnaissance Orbiter (LRO) Integration and Testing (I&T) phase of the project, the Attitude Control System (ACS) team completed numerous tests on each hardware component in ever more flight like environments. The ACS utilizes a select group of attitude sensors and actuators. This paper chronicles the evolutionary steps taken to verify each component was constantly ready for flight as well as providing invaluable trending experience with the actual hardware. The paper includes a discussion of each ACS hardware component, lessons learned of the various stages of I&T, a discussion of the challenges that are unique to the LRO project, as well as a discussion of work for future missions to consider as part of their I&T plan. LRO ACS sensors were carefully installed, tested, and maintained over the 18 month I&T and prelaunch timeline. Care was taken with the optics of the Adcole Coarse Sun Sensors (CSS) to ensure their critical role in the Safe Hold mode was fulfilled. The use of new CSS stimulators provided the means of testing each CSS sensor independently, in ambient and vacuum conditions as well as over a wide range of thermal temperatures. Extreme bright light sources were also used to test the CSS in ambient conditions. The integration of the two SELEX Galileo Star Trackers was carefully planned and executed. Optical ground support equipment was designed and used often to check the performance of the star trackers throughout I&T in ambient and thermal/vacuum conditions. A late discovery of potential contamination of the star tracker light shades is discussed in this paper. This paper reviews how each time the spacecraft was at a new location and orientation, the Honeywell Miniature Inertial Measurement Unit (MIMU) was checked for data output validity. This gyro compassing test was performed at several key testing points in the timeline as well as several times while LRO was on the launch pad. Sensor alignment tests were completed several times to ensure that hardware remained on a rigid platform.

Simpson, Jim↗

NASA NTRS2009

The Need for Technology Maturity of Any Advanced Capability to Achieve Better Life Cycle Cost (LCC)

Programs such as space transportation systems are developed and deployed only rarely, and they have long development schedules and large development and life cycle costs (LCC). They have not historically had their LCC predicted well and have only had an effort to control the DDT&E phase of the programs. One of the factors driving the predictability, and thus control, of the LCC of a program is the maturity of the technologies incorporated in the program. If the technologies incorporated are less mature (as measured by their Technology Readiness Level - TRL), then the LCC not only increases but the degree of increase is difficult to predict. Consequently, new programs avoid incorporating technologies unless they are quite mature, generally TRL greater than or equal to 7 (system prototype demonstrated in a space environment) to allow better predictability of the DDT&E phase costs unless there is no alternative. On the other hand, technology development programs rarely develop technologies beyond TRL 6 (system/subsystem model or prototype demonstrated in a relevant environment). Currently the lack of development funds beyond TRL 6 and the major funding required for full scale development leave little or no funding available to prototype TRL 6 concepts so that hardware would be in the ready mode for safe, reliable and cost effective incorporation. The net effect is that each new program either incorporates little new technology or has longer development schedules and costs, and higher LCC, than planned. This paper presents methods to ensure that advanced technologies are incorporated into future programs while providing a greater accuracy of predicting their LCC. One method is having a dedicated organization to develop X-series vehicles or separate prototypes carried on other vehicles. The question of whether such an organization should be independent of NASA and/or have an independent funding source is discussed. Other methods are also discussed. How to make the choice of which technologies to pursue to the prototype level is also discussed since, to achieve better LCC, first the selection of the appropriate technologies.

Robinson, John W.↗

NASA NTRS2008

Decision Making During Contingencies: Beyond Earth Orbit or It Ain't Your Grandpa's Explorer I Anymore

No abstract available

anomaly↗

NASA NTRS2016

Evaluation of 10V Chip Polymer Tantalum Capacitors for Space Applications

Due to low ESR and safe failure mode, new technology chip polymer tantalum capacitors (CPTC) have gained popularity in the electronics design community, first in commercial applications, and now in hi-rel and space systems. The major drawbacks of these parts are high leakage currents, degradation under environmental stresses, and a relatively narrow temperature range of operating and storage conditions. Several studies have shown that a certain amount of moisture in polymer cathodes is necessary for a normal operation of the parts. This might limit applications of CPTCs in space systems and requires analysis of long-term exposure to deep vacuum conditions on their performance and reliability. High leakage currents and limited maximum operational temperature complicate accelerated testing that is necessary to assess long-term reliability and require new screening and qualification procedures for quality assurance. A better understanding of behavior of CPTCs as compared to traditional, MnO2, capacitors is necessary to develop adequate approaches for QA system for space applications. A specific of CPTCs is that different materials and processes might be used for low-voltage (10 V and less) and high-voltage (above 10 V) capacitors, so performance and degradation processes in these groups require separate analysis. In this work, that is a part of the NASA Electronic Parts and Packaging (NEPP) program, degradation of AC and DC characteristics under environmental stresses at different temperatures and voltages have been studied in nine lots of commercial and automotive grade capacitors rated to 10 V. Results of analysis of leakage currents, high temperature storage (HTS) up to 5000 hrs in vacuum and air at different temperatures, and Highly Accelerated Life Testing (HALT) in the range from 85 C to 145 C are presented. Temperature and voltage acceleration factors were calculated based on approximation of distributions of degradation rates with a general log-linear Weibull model. Mechanisms of degradation and failures, and requirements for screening and qualification testing are discussed.

Tantalum Capacitors↗

NASA NTRS2010

Lunar Reconnaissance Orbiter (LRO) Guidance, Navigation and Control (GN&C) Overview

The National Aeronautics and Space Administration s (NASA) Lunar Reconnaissance Orbiter (LRO) launched on June 18, 2009 from the Cape Canaveral Air Force Station aboard an Atlas V launch vehicle and into a direct insertion trajectory to the oon. LRO, which was designed, built, and operated by the NASA Goddard Space Flight Center in Greenbelt, MD, is gathering crucial data on the lunar environment that will help astronauts prepare for long-duration lunar expeditions. The mission has a nominal life of 1 year as its seven instruments find safe landing sites, locate potential resources, characterize the radiation environment, and test new technology. To date, LRO has been operating well within the bounds of its requirements and has been collecting excellent science data images taken from the LRO Camera Narrow Angle Camera of the Apollo landing sites appeared on cable news networks. A significant amount of information on LRO s science instruments is provided at the LRO mission webpage. LRO s Guidance, Navigation and Control (GN&C) subsystem is made up of an onboard attitude control system (ACS) and a hardware suite of sensors and actuators. The LRO onboard ACS is a collection of algorithms based on high level and derived requirements, and reflect the science and operational events throughout the mission lifetime. The primary control mode is the Observing mode, which maintains the lunar pointing orientation and any offset pointing from this baseline. It is within this mode that all science instrument calibrations, slews and science data is collected. Because of a high accuracy requirement for knowledge and pointing, the Observing mode makes use of star tracker (ST) measurement data to determine an instantaneous attitude pointing. But even the star trackers alone do not meet the tight requirements, so a six-state Kalman Filter is employed to improve the noisy measurement data. The Observing mode obtains its rate information from an inertial reference unit (IRU) and in the event of an IRU failure, the rate data is be derived from the star tracker, but with degraded pointing performance. The Delta-V control mode responsibility is to maintain attitude pointing during the cruise trajectory, insertion burns and lunar orbit maintenance by adjustments made to the spacecraft s velocity magnitude and vector direction. The ACS also provides for a thruster based system momentum management algorithm (known as Delta-H) to maintain the system and wheel momentum to within acceptable levels. In the event an anomaly causes the LRO spacecraft to lose the ability to maintain its current attitude pointing, a Sun Safe mode is included in the ACS for the purpose of providing a known power and thermally safe coarse inertial sun attitude for an indefinite period of time, within the manageable limits of the reaction wheels. The Sun Safe mode is also the initial spacecraft control mode off of the launch vehicle and provides for a means to null tip-off rates immediately after separation. The nominal configuration is to use the IRU for rate information in the controller. In the event of a gyro failure a gyroless control mode was developed that computes rate information from the CSS data.

Garrick, Joseph↗

NASA NTRS1996

Tilt Rotor Aircraft Aeroacoustics

A fleet of civil tilt rotor transports offers a means of reducing airport congestion and point-to-point travel time. The speed, range, and fuel economy of these aircraft, along with their efficient use of vertiport area, make them good candidates for short-to-medium range civil transport. However, to be successfully integrated into the civilian community, the tilt rotor must be perceived as a quiet, safe, and economical mode of transportation that does not harm the environment. In particular, noise impact has been identified as a possible barrier to the civil tilt rotor. Along with rotor conversion-mode flight, and blade-vortex interaction noise during descent, hover mode is a noise problem for tilt rotor operations. In the present research, tilt rotor hover aeroacoustics have been studied analytically, experimentally, and computationally. Various papers on the subject were published as noted in the list of publications. More recently, experimental measurements were made on a 1/12.5 scale model of the XV-15 in hover and analyses of this data and extrapolations to full scale were also carried out. A dimensional analysis showed that the model was a good aeroacoustic approximation to the full-scale aircraft, and scale factors were derived to extrapolate the model measurements to the full-scale XV-15. The experimental measurements included helium bubble flow visualization, silk tuft flow visualization, 2-component hot wire anemometry, 7-hole pressure probe measurements, vorticity measurements, and outdoor far field acoustic measurements. The hot wire measurements were used to estimate the turbulence statistics of the flow field into the rotors, such as length scales, velocity scales, dissipation, and turbulence intermittency. Several different configurations of the model were tested: (1) standard configurations (single isolated rotor, two rotors without the aircraft, standard tilt rotor configuration); (2) flow control devices (the 'plate', the 'diagonal fences'); (3) basic configuration changes (increasing the rotor/rotor spacing, reducing the rotor plane/wing clearance. operating the rotors out of phase). Also, an approximation to Sikorsky's Variable Diameter Tilt Rotor (VDTR) configuration was tested, and some flow measurements were made on a semi-span configuration of the model. Acoustic predictions were made using LOWSON.M, a Mathematica code Mean aerodynamic models were developed based on hover performance predictions from HOVER.FOR. This hover prediction code used blade element theory for the aerodynamics, and Prandtl's Vortex theory to model the wake, along with empirical formulas for the effects of Reynolds number, Mach number, and stall. Aerodynamic models were developed from 7-hole pressure probe measurements of the mean velocity into the model rotors.

George, Albert R.↗

NASA NTRS2002

Composite Overwrapped Pressure Vessels: Database Extension Task 3.0 and Impact Damage Effects Control Task 8.0

This document represents efforts accomplished at the NASA Johnson Space Center White Sands Test Facility (WSTF) in support of the Enhanced Technology for Composite Overwrapped Pressure Vessels (COPV) Program, a joint research and technology effort among the U.S. Air Force, NASA, and the Aerospace Corporation. WSTF performed testing for several facets of the program. Testing that contributed to the Task 3.0 COPV database extension objective included baseline structural strength, failure mode and safe-life, impact damage tolerance, sustained load/impact effect, and materials compatibility. WSTF was also responsible for establishing impact protection and control requirements under Task 8.0 of the program. This included developing a methodology for establishing an impact control plan. Seven test reports detail the work done at WSTF. As such, this document contributes to the database of information regarding COPV behavior that will ensure performance benefits and safety are maintained throughout vessel service life.

Beeson, Harold D.↗

NASA NTRS1981

SMM attitude control recovery

A description is given of the way in which the Modular Attitude Control System (MACS) onboard computer of the NASA Solar Maximum Mission (SMM) laboratory was reprogrammed, to restore attitude control for the SMM, after fuse failures permanently disabled all three of the MACS primary reaction wheels. Algorithms were developed which provided both a thermal- and power-safe, spin-stabilized mode and three-axis sun pointing, using the damaged primary wheels' backup skew wheel in a momentum-bias control scheme. Magnetic torquing was used in these algorithms for angular momentum vector magnitude and directional control.

Hoffman, H. C.↗

NASA NTRSDate not supplied

Uncertainty Quantification of Inducer Natural Frequency using Conditional Assessment of Modeling and Modal Testing of Simpler Systems

The low pressure fuel pump inducer of the new Space Launch System RS25 core stage engine operates in a highly complex environment that substantially affects its modal characteristics. Some of the more important effects are fluid-added mass resulting from operation within a light liquid (Hydrogen), and the magnification of this effect due to tight tip clearance. Since higher order cavitation has been identified as a significant harmonic driver, knowledge of the natural frequency of potentially excitable modes is critical for safe operation, but this frequency cannot be measured during the severe operational environment. A comprehensive testing and analysis program has therefore been performed over the last four years to identify the nominal value and uncertainty of the frequency by modeling and testing four simpler structures which share some of the characteristics of the operational inducer. This testing was used to assess and adjust modeling techniques and excellent correlation was achieved. Identification of the uncertainty in the inducer frequency itself was still problematic, however. This difficulty led to an investigation of Bayesian uncertainty quantification techniques, and to the application of the relatively simple technique of Multi-Variate Normal conditional distributions to calculate the inducer natural frequency uncertainty. Assumptions on prior distributions of uncertainty of the fluid-added mass and tip clearance effect are initially applied to models of each of the simple structures and the inducer itself, and these uncertainties are propagated to generate natural frequencies using design of experiments. Simple response surfaces are then created from this data in order to calculate a Covariance Matrix relating all of these natural frequencies. Finally, the results from modal test of the simple structures are considered to be observations and used to calculate the conditional variance of the desired inducer frequencies. As this method is less rigorous than more complicated Bayesian methods reported in the literature, a conservative factor is applied to the result, but the resulting uncertainty is still significantly less than originally estimated and will greatly assist certification of the inducer for use in the engine.

Uncertainty Quantification↗

NASA NTRSDate not supplied

Uncertainty Quantification of Inducer Eigenvalues using Conditional Assessment of Models and Modal Test of Simpler Systems

Uncertainty Quantification↗

NASA NTRSDate not supplied

Development of Candidate Airspace Procedures for Urban Air Mobility in the Dallas Area

As the concept of on-demand electric air taxis gains popularity and begins to take shape, many research efforts are underway to address the challenges of integrating this new class of passenger-carrying air vehicles into the already congested U.S. National Airspace System. Through collaborations between the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration, and industry, this concept, commonly referred to as Urban Air Mobility (UAM), envisions a safe, reliable, and efficient mode of transportation traversing metropolitan and urban areas. Among the many challenges being tackled, airspace procedures and information requirements are critical areas of research that need to be addressed. In a joint effort between NASA and Joby Aviation, a human-in-the-loop study was conducted at the NASA Ames Research Center to evaluate initial and midterm operations with air traffic controllers and on-board UAM pilots in the Dallas area. This area was chosen due to its complex Class Bravo Airspace that extends to the surface over a relatively large area. To achieve the goals and objectives of the study, multiple preceding efforts were conducted to develop the candidate procedures and information requirements. This paper provides an overview of the operational concept used for the study, the process that was followed, and the findings from the two tabletop meetings and a shakedown activity. The combination of these led to a set of airspace procedures, letters of agreement, and information requirements that were evaluated in the human-inthe-loop study.

Urban Air Mobility↗

NASA NTRS1998

The Software Design for the Wide-Field Infrared Explorer Attitude Control System

The Wide-Field Infrared Explorer (WIRE), currently scheduled for launch in September 1998, is the fifth of five spacecraft in the NASA/Goddard Small Explorer (SMEX) series. This paper presents the design of WIRE's Attitude Control System flight software (ACS FSW). WIRE is a momentum-biased, three-axis stabilized stellar pointer which provides high-accuracy pointing and autonomous acquisition for eight to ten stellar targets per orbit. WIRE's short mission life and limited cryogen supply motivate requirements for Sun and Earth avoidance constraints which are designed to prevent catastrophic instrument damage and to minimize the heat load on the cryostat. The FSW implements autonomous fault detection and handling (FDH) to enforce these instrument constraints and to perform several other checks which insure the safety of the spacecraft. The ACS FSW implements modules for sensor data processing, attitude determination, attitude control, guide star acquisition, actuator command generation, command/telemetry processing, and FDH. These software components are integrated with a hierarchical control mode managing module that dictates which software components are currently active. The lowest mode in the hierarchy is the 'safest' one, in the sense that it utilizes a minimal complement of sensors and actuators to keep the spacecraft in a stable configuration (power and pointing constraints are maintained). As higher modes in the hierarchy are achieved, the various software functions are activated by the mode manager, and an increasing level of attitude control accuracy is provided. If FDH detects a constraint violation or other anomaly, it triggers a safing transition to a lower control mode. The WIRE ACS FSW satisfies all target acquisition and pointing accuracy requirements, enforces all pointing constraints, provides the ground with a simple means for reconfiguring the system via table load, and meets all the demands of its real-time embedded environment (16 MHz Intel 80386 processor with 80387 coprocessor running under the VRTX operating system). The mode manager organizes and controls all the software modules used to accomplish these goals, and in particular, the FDH module is tightly coupled with the mode manager.

Anderson, Mark O.↗

NASA NTRS2022

A Framework for Dynamic Architecture and Functional Allocations for Increasing Airspace Autonomy

To enable scalability of air travel for use cases such as cargo delivery, it is anticipated that future air traffic operations will involve unmanned aircraft operated by remote pilots. Of particular interest are schemes where a small number of pilots operate a large number of vehicles, mitigating high cost and pilot shortage issues. Such architectures require increased levels of automation and supervisory control modes. They also require ensuring safe operations when the command and control link to the vehicle is degraded or lost completely, rendering the vehicle autonomous. To evaluate these variable and dynamic architectures, this paper will present a framework for decomposing the functions necessary to ensure safe, orderly, and expeditious air travel, assessing the agents in the system, and classifying the levels of autonomy. Then, an example allocation to agents of roles for the function of separation assurance is presented, highlighting the dependency of the allocation on three main factors: time criticality of a potential separation violation, the ratio of pilots to vehicles, and the loss of the command and control link.

air traffic management, function allocation, auton↗

NASA NTRS2022

A Framework for Dynamic Architecture and Functional Allocations for Increasing Airspace Autonomy

To enable scalability of air travel for use cases such as cargo delivery, it is anticipated that future air traffic operations will involve unmanned aircraft operated by remote pilots. Of particular interest are schemes where a small number of pilots operate a large number of vehicles, mitigating high cost and pilot shortage issues. Such architectures require increased levels of automation and supervisory control modes. They also require ensuring safe operations when the command and control link to the vehicle is degraded or lost completely, rendering the vehicle autonomous. To evaluate these variable and dynamic architectures, this paper will present a framework for decomposing the functions necessary to ensure safe, orderly, and expeditious air travel, assessing the agents in the system, and classifying the levels of autonomy. Then, an example allocation to agents of roles for the function of separation assurance is presented, highlighting the dependency of the allocation on three main factors; time criticality of a potential separation violation, the ratio of pilots to vehicles, and the loss of the command and control link.

air traffic management↗