SEARCH · Engineering Papers

Results for “Power system faults”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 919 records · Page 51

All sources NASA NTRS DOE OSTI

DOE OSTI2024

An Evaluation of The Dynamic Physical Security Risk Assessment Methodology for Fleet-Wide Applications

The requirements for U.S. nuclear power plants to maintain a large onsite physical security force contribute to their high operational costs. The cost of maintaining the current physical security posture is approximately 10% of the overall operation and maintenance budget for commercial nuclear power plants. The goal of the Light Water Reactor Sustainability (LWRS) program’s physical security pathway is to develop tools, methods, and technologies and provide the technical basis for an optimized physical security posture. The conservatisms built into current security postures may be analyzed and minimized to reduce security costs while still ensuring adequate security and operational safety. The research performed at Idaho National Laboratory within LWRS program’s physical security pathway has successfully developed a dynamic force-on-force modeling framework using various computer simulation tools and integrating them with the dynamic assessment Event Modeling Risk Assessment using Linked Diagrams (EMRALD) tool. This integrated process for physical security analysis is named Modeling and Analysis for Safety Security using Dynamic EMRALD Framework (MASS-DEF). This document provides an update on the progress in applying the MASS-DEF process to an operating commercial nuclear power plant as well as additional industry feedback regarding use of the tool for other physical security risk-informed topics. This report is only a summary of the progress and does not contain specific modeling results as those contain sensitive security information. Previous reports described how a user could integrate their plant-specific force-on-force models with the dynamic simulation tool EMRALD, model operator actions, and integrate with probabilistic risk assessment tools, such as CAFTA (Computer Aided Fault Tree Analysis System) or SAPHIRE (Systems Analysis Programs for Hands-on Integrated Reliability Evaluations), and with thermal-hydraulic tools, such as RELAP-5 or MAAP. Previous reports applied various combinations of available simulations codes with EMRALD using generic plant models to demonstrate how to perform the analysis. This report is an update the progress of applying the dynamic computational framework to an actual nuclear facility using their security scenarios and timelines. This report also provides an update to the procedural guidance for the MASS-DEF process and an overview of the generic models available for use by utilities. This report does not contain any plant’s sensitive information and/or safeguards information. This study’s purpose was to verify that the results achieved using generic models are similar to actual plant results and refine our guidance on the use of the framework. This assessment enables further analysis, such as what-if scenarios and staff-reduction evaluation, thereby optimizing physical security at plants.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2021

Data-Driven Cyber-Attack Detection for PV Farms via Time-Frequency Domain Features

The internetworking of grid-connected power electronics converters (PECs) in photovoltaic (PV) farms has inevitably expanded the cyber-attack surfaces. Here this paper presents a comprehensive study on cyber-attack detection and diagnosis for PEC-enabled PV farms via single waveform sensor to distinguish between normal conditions, open-circuit faults, short-circuit faults, and cyber-attacks. To our knowledge, this has not been attempted before. Firstly, we propose frequency-domain magnitude-based residuals to identify short-circuit faults and a time-domain mean current vector-based feature to distinguish open-circuit faults from other threats. These features can fully reflect the specific physical characteristics of PV farms during threat duration. Secondly, unlike micro phasor measurement units (µPMU) and raw electric waveform-based methods, the proposed innovative features can address novel cyber-attacks that are excluded from the training process. Thirdly, an online hardware-in-the-loop (HIL) testbed using the OPAL-RT real-time digital simulator has verified the effectiveness. The monitoring system runs in real-time while using HIL as an operational solar farm and a National Instruments (NI) data acquisition card as the electric waveform sensor at the point of coupling.

42 ENGINEERING↗

DOE OSTI2026

SDN-Based Dynamic Cybersecurity Framework of IEC-61850 Communications in Smart Grid

In recent years, critical infrastructure and power grids have experienced a series of cyber-attacks, leading to temporary, widespread blackouts of considerable magnitude. Since most substations are unmanned and have limited physical security protection, cyber breaches into power grid substations present a risk. Nowadays, the susceptibility of SDN architecture to cyber-attacks has exhibited a notable increase in recent years, as indicated by research findings. This suggests a growing concern regarding the potential for cybersecurity breaches within the SDN framework. In this paper, we propose a hybrid intrusion detection system (IDS)-integrated SDN architecture for detecting and preventing the injection of malicious IEC 61850-based generic object-oriented system event (GOOSE) messages in a digital substation. Additionally, this program locates the fault’s location and, as a form of mitigation, disables a certain port. Furthermore, implementation examples are demonstrated and verified using a hardware-in-the-loop (HIL) testbed that mimics the functioning of a digital substation.

Liu, Chen-Ching [Virginia Tech] (ORCID:00000002894↗

NASA NTRS1975

Flight experience with time-of-arrival control for STOL aircraft in the terminal area

A research program on STOL operating systems is underway at the Ames Research Center. One investigation is concerned with design, analysis, and flight test of promising four-dimensional RNAV systems. One promising system generates a capture flight path from the present aircraft position to a waypoint on a selected fixed STOL approach route. It predicts arrival time at the runway and controls time and position along the path. The system was flight tested using a digital avionics system on a Convair 340 and on an experimental powered-lift STOL airplane. Flight tests in the flight director mode show that the pilot can choose and change the desired time of arrival, and meet this time within a few seconds, in spite of navigation errors and varying winds. Initial tests of the automatic mode using a flight simulator and the NASA Augmentor Wing Jet STOL Research Aircraft (AWJSRA) show that good time control was achieved at the cost of excess throttle activity. This fault was later corrected.

Neuman, F.↗

NASA NTRS2000

Earth Observing System (EOS) Terra Spacecraft 120 Volt Power Subsystem: Requirements, Development and Implementation

Built by the Lockheed-Martin Corporation, the Earth Observing System (EOS) TERRA spacecraft represents the first orbiting application of a 120 Vdc high voltage spacecraft electrical power system implemented by the National Aeronautics and Space Administration (NASA) Goddard Space Flight Center (GSFC). The EOS TERRA spacecraft's launch provided a major contribution to the NASA Mission to Planet Earth program while incorporating many state of the art electrical power system technologies to achieve its mission goals. The EOS TERRA spacecraft was designed around five state-of-the-art scientific instrument packages designed to monitor key parameters associated with the earth's climate. The development focus of the TERRA electrical power system (EPS) resulted from a need for high power distribution to the EOS TERRA spacecraft subsystems and instruments and minimizing mass and parasitic losses. Also important as a design goal of the EPS was maintaining tight regulation on voltage and achieving low conducted bus noise characteristics. This paper outlines the major requirements for the EPS as well as the resulting hardware implementation approach adopted to meet the demands of the EOS TERRA low earth orbit mission. The selected orbit, based on scientific needs, to achieve the EOS TERRA mission goals is a sun-synchronous circular 98.2degree inclination Low Earth Orbit (LEO) with a near circular average altitude of 705 kilometers. The nominal spacecraft orbit is approximately 99 minutes with an average eclipse period of about 34 minutes. The scientific goal of the selected orbit is to maintain a repeated 10:30 a.m. +/- 15 minute descending equatorial crossing which provides a fairly clear view of the earth's surface and relatively low cloud interference for the instrument observation measurements. The major EOS TERRA EPS design requirements are single fault tolerant, average orbit power delivery of 2, 530 watts with a defined minimum lifetime of five years (EOL). To meet these mission requirements, while minimizing mass and parasitic power losses, the EOS TERRA project relies on 36, 096 high efficiency Gallium Arsenide (GaAs) on Germanium solar cells adhered to a deployable flexible solar array designed to provide over 5,000 watts of power at EOL. To meet the eclipse power demands of the spacecraft, EOS TERRA selected an application of two 54-cell series connected Individual Pressure Vessel (IPV) Nickel-Hydrogen (NiH2) 50 Ampere-Hour batteries. All of the spacecraft observatory electrical power is controlled via the TERRA Power Distribution Unit (PDU) which is designed to provide main bus regulation of 120 Vdc +/- -4% at all load interfaces through the implementation of majority voter control of both the spacecraft's solar array sequential shunt unit (SSU) and the two battery bi-directional charge and discharge regulators. This paper will review the major electrical power system requirement drivers for the EOS TERRA mission as well as some of the challenges encountered during the development, testing, and implementation of the power system. In addition, spacecraft test and early on orbit performance results will also be covered.

Keys, Denney J.↗

NASA NTRS2006

Power Actuation and Switching Module Test Results

The X2000 Power System Electronics (PSE) is a Jet Propulsion Laboratory (JPL) task to develop a new generation of power system building blocks for use on future deep-space missions. The effort includes the development of electronic components and modules that can be used as building blocks in the design of generic spacecraft power systems. All X2000 avionics components and modules are designed for use in centralized or distributed spacecraft architectures. The Power Actuation and Switching Module (PASM) has been developed under the X2000 program. This component enables a modular and scalable design approach for power switching applications, which can result in a wide variety of power switching architectures using this simple building block. The PASM is designed to provide most of the necessary power switching functions of spacecraft for various Deep Space missions including future missions to Mars, comets, Jupiter and its moons. It is fabricated using an ASIC process that is tolerant of high radiation. The development included two application specific integrated circuits (ASICs) and support circuitry all packaged using High Density Interconnect (HDI) technology. It can be operated in series or parallel with other PASMs. It can be used as a high-side or low-side switch and it can drive thruster valves, pyrotechnic devices such as NASA standard initiators, bus shunt resistors, and regular spacecraft component loads. Each PASM contains two independent switches with internal current limiting and over-current trip-off functions to protect the power subsystem from load faults. During turnon and turnoff each switch can limit the rate of current change (di/dt) to a value determined by the user. Three-way majority-voted On/Off commandability and full switch status telemetry (both analog and digital) are built into the module. This paper is a follow up to the one presented at he IECEC 2004 conference that will include the lessons learned and test results from the development.

X2000↗

DOE OSTI2024

Characterization of the Structural–Stratigraphic and Reservoir Controls on the Occurrence of Gas Hydrates in the Eileen Gas Hydrate Trend, Alaska North Slope

One of the most studied permafrost-associated gas hydrate accumulations in Arctic Alaska is the Eileen Gas Hydrate Trend. This study provides a detailed re-examination of the Eileen Gas Hydrate Trend with a focus on the gas hydrate accumulation in the western part of the Prudhoe Bay Unit. This integrated analysis of downhole well log data and published geophysical data has provided new insight on structural, stratigraphic, and reservoir controls on the occurrence of gas hydrates in the Eileen Gas Hydrate Trend. This study revealed the relatively complex nature of the gas hydrate occurrences in the Eileen Gas Hydrate Trend, with gas hydrates present in a series of coarsening upward, laterally pervasive, mostly fine-grained sand beds exhibiting high gas hydrate saturations. Most of the gas hydrate-bearing reservoirs in the Eileen Gas Hydrate Trend are laterally segmented into distinct northwest- to southeast-trending fault blocks, occur in a combination of structural–stratigraphic traps, and are only partially hydrate filled with distinct down-dip water contacts. These findings suggest that the traditional parts of a petroleum system (i.e., reservoir, gas source, gas migration, and geologic timing of the system formation) also control the occurrence of gas hydrates in the Eileen Gas Hydrate Trend.

20 FOSSIL-FUELED POWER PLANTS↗

NASA NTRS1976

Arc discharge supply component protection circuitry

In a mercury-bombardment ion engine, the discharge supply is a high-current low-voltage one that maintains an arc or discharge inside the engine. In a 30-cm engine the supply provides up to 45 volts at about 13 amperes and is referenced at approximately 1100 volts above ground. Due to the engine discharge characteristics, a very slow feedback control loop is required. A high-speed current limit must be used to protect the components in the power conditioner, a pulse-width-modulated bridge inverter. A high-speed cycle-by-cycle current-limit circuit which allows the inverter to continue running in an overcurrent condition is used to protect it. The high-speed current sensing allows the inverter to be turned off each half cycle before the current in the primary of the inverter exceeds a safe level. This permits the inverter to continue to provide current into a discharge or a fault condition, until the feedback control system can actively control the current.

Ahrens, A. F.↗

NASA NTRS1998

The Software Design for the Wide-Field Infrared Explorer Attitude Control System

The Wide-Field Infrared Explorer (WIRE), currently scheduled for launch in September 1998, is the fifth of five spacecraft in the NASA/Goddard Small Explorer (SMEX) series. This paper presents the design of WIRE's Attitude Control System flight software (ACS FSW). WIRE is a momentum-biased, three-axis stabilized stellar pointer which provides high-accuracy pointing and autonomous acquisition for eight to ten stellar targets per orbit. WIRE's short mission life and limited cryogen supply motivate requirements for Sun and Earth avoidance constraints which are designed to prevent catastrophic instrument damage and to minimize the heat load on the cryostat. The FSW implements autonomous fault detection and handling (FDH) to enforce these instrument constraints and to perform several other checks which insure the safety of the spacecraft. The ACS FSW implements modules for sensor data processing, attitude determination, attitude control, guide star acquisition, actuator command generation, command/telemetry processing, and FDH. These software components are integrated with a hierarchical control mode managing module that dictates which software components are currently active. The lowest mode in the hierarchy is the 'safest' one, in the sense that it utilizes a minimal complement of sensors and actuators to keep the spacecraft in a stable configuration (power and pointing constraints are maintained). As higher modes in the hierarchy are achieved, the various software functions are activated by the mode manager, and an increasing level of attitude control accuracy is provided. If FDH detects a constraint violation or other anomaly, it triggers a safing transition to a lower control mode. The WIRE ACS FSW satisfies all target acquisition and pointing accuracy requirements, enforces all pointing constraints, provides the ground with a simple means for reconfiguring the system via table load, and meets all the demands of its real-time embedded environment (16 MHz Intel 80386 processor with 80387 coprocessor running under the VRTX operating system). The mode manager organizes and controls all the software modules used to accomplish these goals, and in particular, the FDH module is tightly coupled with the mode manager.

Anderson, Mark O.↗

DOE OSTI2024

EMT data generation

The integration of inverter-based resources (IBRs) in power systems is accelerating, bringing with it significant benefits such as reduced greenhouse gas emissions, improved grid resilience, and increased energy independence. Despite these advantages, the widespread adoption of IBRs introduces several challenges, including issues related to grid stability, increased operational complexity, and the need for updated regulatory frameworks. To address these challenges, IEEE released Standard 2800 in 2022, which sets forth the necessary interconnection capabilities and performance criteria for IBRs connected to transmission and sub-transmission systems. This standard outlines the performance requirements to ensure the reliable integration of IBRs into the bulk power system. Furthermore, in 2023, the North American Electric Reliability Corporation (NERC) published a reliability guideline for electromagnetic transient (EMT) modeling of BPS-connected IBRs. This guideline provides recommendations for developing EMT model requirements, performing model quality checks, and implementing verification practices specifically for EMT models representing BPS-connected inverter-based resources in reliability studies conducted by transmission planners and planning coordinators. These standards and guidelines have a profound impact on EMT studies for transmission networks, influencing system stability analyses, grid recovery and resynchronization processes, fault ride-through evaluations, protection and coordination strategies, advanced control methodologies, and the inclusion of IBRs in transient models of transmission networks. As a result, the generation of EMT data is crucial for conducting various transient-based studies to understand the impact of IBRs. EMT data generation use cases serve as the basis for scenarios in event detection and identification use cases, providing comprehensive details about EMT data generation for transmission grids with inverter-based resources. These use cases supply sufficient training and validation datasets for subsequent EMT analysis algorithms.

Xia, Qianxue↗

NASA NTRS1991

Priority scheme planning for the robust SSM/PMAD testbed

Whenever mixing priorities of manually controlled resources with those of autonomously controlled resources, the space station module power management and distribution (SSM/PMAD) environment requires cooperating expert system interaction between the planning function and the priority manager. The elements and interactions of the SSM/PMAD planning and priority management functions are presented. Their adherence to cooperating for common achievement are described. In the SSM/PMAD testbed these actions are guided by having a system planning function, KANT, which has insight to the executing system and its automated database. First, the user must be given access to all information which may have an effect on the desired outcome. Second, the fault manager element, FRAMES, must be informed as to the change so that correct diagnoses and operations take place if and when faults occur. Third, some element must engage as mediator for selection of resources and actions to be added or removed at the user's request. This is performed by the priority manager, LPLMS. Lastly, the scheduling mechanism, MAESTRO, must provide future schedules adhering to the user modified resource base.

Elges, Michael R.↗

DOE OSTI2021

Post-extreme-event restoration using linear topological constraints and DER scheduling to enhance distribution system resilience

In this paper, a post-extreme-event restoration (PEER) algorithm is proposed to improve distribution system resilience. Linear topological constraints are proposed to ensure radial topology after N-k contingencies, possibly in multiple islands. The approach is made comprehensive by considering dispatchable distributed energy resources (DERs), non-dispatchable DERs, and demand responses, as well as on-load tap changers (OLTCs) and shunt capacitors. The goal is to minimize the accumulative expense caused by load reduction payment or penalty, as well as DER operation cost. As a result, the overall system will survive longer with higher resilience during an extreme event. To verify the effectiveness of the PEER algorithm, we proposed a resilience evaluation algorithm using Monte Carlo simulation (MCS) with reduced scenarios. This is based on a probabilistic model for generating random scenarios which consider the uncertainty of line faults and solar irradiance. Combined with the proposed PEER algorithm, this reduced-scenario MCS can evaluate the expected energy not served (EENS) which is an essential index for distribution system resilience. Case studies of the IEEE 33-bus and 123-bus test systems validate the proposed algorithm in reducing EENS.

24 POWER TRANSMISSION AND DISTRIBUTION↗

DOE OSTI2024

AC Magnetometry Using Nano-ferrofluid Cladded Multimode Interferometric Fiber Optic Sensors for Power Grid Monitoring Applications

The AC magnetic field response of the superparamagnetic nano-ferrofluid is an interplay between the Neel and Brownian relaxation processes and is generally quantified via the susceptibility measurements at high frequencies. The high frequency limit is dictated by these relaxation times which need to be shorter than the time scale of the time varying magnetic field for the nano-ferrofluid to be considered in an equilibrium state at each time instant. Even though the high frequency response of ferrofluid has been extensively investigated for frequencies up to GHz range by non-optical methods, harnessing dynamic response by optical means for AC magnetic field sensing in fiber-optic-based sensors-field remains unexplored. Instead, the incorporation of nano-ferrofluid as sensing materials has been only limited to DC magnetic field sensing, often citing their long response time as a limiting factor to AC field sensing. This work reports the finding of high frequency (up to 15 kHz) AC magnetic field sensing capability of nanomagnetic fluid as the cladding material of a fiber-optic multimode interferometry (MMI) structure optimized for the fourth self-imaging spectral response. The key parameter enabling high frequency response is the short response time (<1 ms) achieved by optimizing both the sensing structure and nano-ferrofluid solution. Focus has been imparted on 60 Hz line-frequency profiles of various current/magnetic fields to test the efficacy of these sensors in metering and monitoring current and current-induced magnetic fields in the electrical power grid systems. The magnetic field sensitivity of 240 mV/Gauss per dBm of transmitted power was achieved for 60 Hz field applied via Helmholtz coil, whereas the 60 Hz AC current sensitivity of 2.83 mV/A was measured due to magnetic field induced by current in a straight conducting wire.

42 ENGINEERING↗

DOE OSTI2025

An open control sequence specification to scale building demand flexibility via analytics software

For over two decades, researchers and practitioners have showcased the ability of large commercial buildings to provide grid services by shedding or shifting load. Various utility demand response (DR) and virtual power plant (VPP) programs throughout the United States are presently utilizing these demand-side resources. However, growth of these programs have been limited, in part due to the high cost necessary to integrate the DR control strategies into the building automation system (BAS). Implementing these strategies involves adjusting control sequences, necessitating dozens of hours of customized programming per building, limiting their adoption to large organizations and progressive owners. Recent efforts by researchers and industry have demonstrated the capability of energy management and information systems (EMIS), originally designed for fault detection and diagnostics, to interface with existing BAS and perform supervisory control to optimize building operations. While these approaches are quickly being adopted by industry, demand flexibility (DF) control strategies remain limited in product offerings. One of the challenges is the lack of documented best-practice DF sequences, despite the rich literature on field implementations. This paper develops a new open-specification for a zone-based temperature adjustment shed strategy for commercial building HVAC systems, describing the specification’s implementation in two EMIS tools in both experimental and field settings. Both implementations successfully reduced electric load by at least 40% on average during the called event, while maintaining temperature limits. This study’s detailed process from specification to deployment shows the potential for scalability as well as highlights challenges related to integration with heterogeneous BAS products.

Granderson, Jessica↗

DOE OSTI2020

Analysis of the thermal recovery of HTS cables after an overcurrent fault

High temperature superconducting (HTS) power transmission cables are cooled to operating temperatures typically below 80 K. A valuable feature of some HTS cables is that they can limit short-circuit fault currents, which can be more than ten times the maximum operating current of a cable. When a fault occurs the HTS wire is no longer superconducting and the heating which occurs will raise the temperature above the allowable operating point. To recover from the fault, the conductor must be cooled down before returning to service. The recovery is affected by the refrigeration system's performance which varies with load and temperature. A transient numerical model of an HTS cable is applied to investigate the thermal recovery after a fault for some HTS cable system configurations and operating conditions.

Demko, Jonathan A.↗

DOE OSTI2024

Event-Based Energy Impact Tracking and Forecasting with Limited Measurements for Rooftop Units

Packaged air conditioning units and heat pumps, also known as rooftop units (RTUs), are responsible for almost 133 billion kWh of electricity usage annually on site for space cooling U.S. commercial buildings. In addition, the use of heat pumps is a trend we expect to accelerate as buildings transition from fossil fuel-based heating to electricity as a key step for decarbonizing the U.S. commercial buildings sector. However, the operation conditions and energy use of RTUs and heat pumps are usually not well monitored as they are not commonly integrated with building automation systems and lack exposed sensing and control points. To fill this gap, this paper proposes a framework for tracking and forecasting energy impacts resulting from degradation of performance and improved performance for unit servicing using limited data. The proposed framework makes use of a constrained dataset, specifically measurements of the outdoor air temperature and the power demand of individual RTUs, to track and forecast changes in energy use associated with changes in performance over various temporal horizons ranging from days to weeks. Following the detection of an RTU fault, performance degradation, or performance improvement, the framework employs a prediction model to assess the cumulative energy impact. We demonstrate the effectiveness of the method with field-collected data for servicing and degradation examples and compare the predicting accuracy of Gradient Boosting Decision Tree (GBDT) Regression models to Support Vector Regression and Linear Regression models. The results show that GBDT achieved the best accuracy for time-series validation datasets for the servicing and degradation cases, and the prediction model was able to track the cumulative energy impacts of events. The proposed framework can inform building owners of the cumulative change in energy usage of RTUs associated with performance degradation, performance improvement, or a fault.

packaged air conditioners, packaged heat pumps, ro↗

DOE OSTI2025

Early Fault Detection in Nuclear Systems: A Digital Engineering Approach

Nuclear energy systems present unique challenges in terms of ensuring safety, reliability, and efficiency during their design and operation. Early fault detection is critical for mitigating risks and fostering system resilience. However, current methods often fall short at identifying faults during early stages, potentially leading to costly delays and safety risks. The present work proposes a comprehensive digital engineering approach that leverages digital twins, digital threads, model-based systems engineering, artificial intelligence, and immersive extended reality to support early fault detection in nuclear systems. Through a series of case studies, we highlight specific gaps in the fault detection mechanisms of traditional nuclear design and operation processes, then demonstrate a suite of solutions we are working to implement to address these shortcomings in similar projects. Our findings suggest that a digital engineering approach to design and operation can significantly improve fault detection, ultimately leading to reductions in risk.

42 - ENGINEERING↗

NASA NTRS2019

NASA Lunar Lander Reference Design

With increased emphasis on lunar exploration and scientific investigation, there is a desire to deliver a wide variety of payloads to the lunar surface. Many of these payloads will require the use of surface mobility capability such as a rover. NASA has combined spacecraft and subsystem engineers from across the Agency to develop a ‘pallet’ lander design intended to deliver and easily deploy a medium-sized payload (~300 kg) to the polar regions of the Moon. The lander provides power to the payload from transit soon after lunar landing. The lander is not intended to survive the lunar night. The design of the lander was based on a minimum set of level 1 requirements where traditional risk, mass, and performance trade parameters were weighed lower than cost. In other words, the team did not sacrifice ‘good enough’ for ‘better’ or ‘best.’ As a NASA class D spacecraft (as defined in NPR 8705.4, Risk Classification for NASA Payloads, the lander employs single-string (i.e., zero-fault-tolerant) systems as a baseline. The design utilizes existing technologies and components where possible, though some enhancements have been targeted in areas such as precision autonomous landing and low-cost structural design/fabrication. It is important to note that these and other derived technologies are extensible to other lander designs and missions. This TP describes the requirements and approaches upon which the lander design is based; discusses key design decisions, analyses, and trades used to derive the design; provides a snapshot of each major subsystem; and identifies open items, issues, and challenges for which work is continuing.

L D Kennedy↗