Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “software reliability model”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

908 records · Page 51

Ground Operations of the ISS GNC Babb-Mueller Atmospheric Density Model

The ISS GNC system was updated recently with a new software release that provides onboard state determination capability. Prior to this release, only the Russian segment maintained and propagated the onboard state, which was periodically updated through Russian ground tracking. The new software gives the US segment the capability for maintaining the onboard state, and includes new GPS and state vector propagation capabilities. Part of this software package is an atmospheric density model based on the Babb-Mueller algorithm. Babb-Mueller efficiently mimics a full analytical density model, such as the Jacchia model. While lacchia is very robust and is used in the Mission Control Center, it is too computationally intensive for use onboard. Thus, Babb-Mueller was chosen as an alternative. The onboard model depends on a set of calibration coefficients that produce a curve fit to the lacchia model. The ISS GNC system only maintains one set of coefficients onboard, so a new set must be uplinked by controllers when the atmospheric conditions change. The onboard density model provides a real-time density value, which is used to calculate the drag experienced by the ISS. This drag value is then incorporated into the onboard propagation of the state vector. The propagation of the state vector, and therefore operation of the BabbMueller algorithm, will be most critical when GPS updates and secondary state vector sources fail. When GPS is active, the onboard state vector will be updated every ten seconds, so the propagation error is irrelevant. When GPS is inactive, the state vector must be updated at least every 24 hours, based on current protocol. Therefore, the Babb-Mueller coefficients must be accurate enough to fulfill the state vector accuracy requirements for at least one day. A ground operations concept was needed in order to manage both the on board Babb-Mueller density model and the onboard state quality. The Babb-Mueller coefficients can be determined operationally in two ways. The first method is to calibrate the coefficients in real-time, where a set of custom coefficients is generated for the real-time atmospheric conditions. The second approach is to generate pre-canned sets of coefficients that encompass the expected atmospheric conditions over the lifetime of the vehicle. These predetermined sets are known as occurrences. Even though a particular occurrence will not match the true atmospheric conditions, the error will be constrained by limiting the breadth of each occurrence. Both methods were investigated and the advantages and disadvantages of each were considered. The choice between these implementations was a trade-off between the additional accuracy of the real-time calibration and the simpler development for the approach using occurrences. The operations concept for the frequency of updates was also explored, and depends on the deviation in solar flux that still achieves the necessary accuracy of the coefficients. This was determined based on historical solar flux trends. This analysis resulted in an accurate and reliable implementation of the Babb-Mueller coefficients and how flight controllers use them during realtime operations.

Brogan, Jonathan↗

Failure Assessment

Three questions to which software developers want accurate, precise answers are "How can the software system fail?", "mat bad things will happen if the software fails?t', and "How many failures will the software experience?". Numerous techniques have been devised to answer these questions; three of the best known are: 1) Software Fault Tree Analysis (SFTA) 2) Software Failure Modes, Effects, and Criticality Analysis (SFMECA 3) Software Fault/Failure Modeling. SFTA and SFMECA have been successfully used to analyze the flight software for a number of robotic planetary exploration missions, including Galileo, Cassini, and Deep Space 1. Given the increasing interest in reusing software components from mission to mission, one of us has developed techniques for reusing the corresponding portions of the SFTA and SFMECA, reducing the effort required to conduct these analyses. SFTA has also been shown to be effective in analyzing the security aspects of software systems; intrusion mechanisms and effects can easily be modeled using these techniques. The Bi- Directional Safety Analysis (BDSA) method combines a forward search (similar to SFMECA) from potential failure modes to their effects, with a backward search (similar to SFTA) from feasible hazards to the contributing causes of each hazard. BDSA offers an efficient way to identify latent failures. Recent work has extended BDSA to product-line applications such as flight-instrumentation displays and developed tool support for the reuse of the failure-analysis artifacts within a product line. BDSA has also been streamlined to support those projects having tight cost and/or schedule constraints for their failure analysis efforts. We discuss lessons learned from practice, describe available tools, and identi@ some future directions for the topic. A substantial amount of research has been devoted to estimating the number of failures that a software system will experience during test and operations, as well as the number of faults that have been inserted into that system during its development. One of us has found that the amount of structural change to a system during its development is strongly related to the number of faults inserted into it. Using techniques requiring no additional effort on the part of the development organization, the required measurements of structural evolution can be easily obtained from a development effort's configuration management system and readily transformed into an estimate of fault content. So far, structure-fault relationships have been identified for source code; current work seeks to examine artifacts available earlier in the lifecycle to determine if similar relationships between structure and fault content can be found. In particular, relationships between requirements change requests and the number of faults inserted into the implemented system would provide a significant improvement in our ability to control software quality during the early development phases.

fault tree↗

Thermal Management and Thermal Protection Systems

During my internship in the Thermal Design Branch (ES3), I contributed to two main projects: i) novel passive thermal management system for future human exploration, ii) AVCOAT undercut thermal analysis. i) As NASA prepares to further expand human and robotic presence in space, it is well known that spacecraft architectures will be challenged with unprecedented thermal environments. Future exploration activities will have the need of thermal management systems that can provide higher reliability, mass and power reduction and increased performance. In an effort to start addressing the current technical gaps the NASA Johnson Space Center Passive Thermal Discipline has engaged in technology development activities. One of these activities was done through an in-house Passive Thermal Management System (PTMS) design for a lunar lander. The proposed PTMS, functional in both microgravity and gravity environments, consists of three main components: a heat spreader, a novel hybrid wick Variable Conductance Heat Pipe (VCHP), and a radiator. The aim of this PTMS is to keep electronics on a vehicle within their temperature limits (0 and 50 C for the current design) during all mission phases including multiple lunar day/night cycles. The VCHP was tested to verify its thermal performance. I created a thermal math model using Thermal Desktop (TD) and analyzed it to predict the PTMS performance. After testing, the test data provided a means to correlate the thermal math model. This correlation took into account conduction and convection heat transfer, representing the actual benchtop test. Since this PTMS is proposed for space missions, a vacuum test will be taking place to provide confidence that the system is functional in space environments. Therefore, the model was modified to include a vacuum chamber with a liquid nitrogen shroud while taking into account conduction and radiation heat transfer. Infrared Lamps were modelled and introduced into the model to simulate the sun's rays directly impinging on the system. Heating rate of the lamps were calculated by knowing fraction of emitted energy in a wavelength interval and the filament temperature. This version of the model can be used to predict performance of the system under vacuum with extreme cold or hot conditions. Initial testing of the PTMS showed promise, and the thermal math model predicts even better performance in thermal vacuum testing. ii) Thermal Protection Systems (TPS) are required for vehicles which enter earth's atmosphere to protect from aerodynamic heating caused by the friction between the vehicle and atmospheric gases. Orion's heat shield design has two aspects which needed to be analyzed thermally: i) a small excess of adhesive used to bond the outer AVCOAT layer to the inner composite structure tends to seep from under the AVCOAT and form a small bead in between two bricks of AVCOAT, ii) a silicone rubber with different thermophysical properties than AVCOAT fills the gap between two bricks of AVCOAT. I created a thermal model using TD to determine temperature differences that are caused by these two features. To prevent false results, all TD models must be verified against something known. In this case, the TD model was correlated to CHAR, an ablation modelling software used to analyze TPS. Analyzing a node far from the concerning features, we saw that the TD model data match CHAR data, verifying the TD model. Next, the temperature of the silicone rubber as well as the bead of adhesive were analyzed to determine if they exceeded allowable temperatures. It was determined that these two features do not have a significant effect on the max temperature of the heat shield. This model can be modified to check temperatures at various locations of the heat shield where the composite thickness varies.

Hasnain, Aqib↗

Denoising Seismograms in the Time Domain Using a Deep Learning Model

Deep learning has emerged as a transformative tool for enhancing the extraction of reliable information from seismograms, addressing the increasing demand for precise and efficient seismic data analysis. We introduce an innovative encoder–decoder deep learning model, named WaveDenoiser, designed for noise reduction in the time domain, thereby eliminating the need for spectrogram computations that have been used for existing deep learning tools and significantly improving processing speed. Utilizing the benchmark dataset that is Stanford Earthquake Dataset, we developed three models of varying sizes: base, medium, and large. Notably, the large (referred to as WaveDenoiser) model demonstrated superior performance, achieving a median signal‐to‐noise ratio improvement of 8.8 dB on in‐distribution unseen data (in the same geographic region) and 7.7 dB on out‐distribution unseen data (in a new geographic region), outpacing both the base and medium models. Further evaluation of the WaveDenoiser model revealed a reduction in median arrival‐time errors by 0.02 s for P waves and 0.01 s for S waves when processing waveforms prior to phase picking using PhaseNet on in‐distribution unseen data. When tested on out‐distribution unseen data, the model also effectively reduced the P‐wave median arrival‐time error by 0.02 and 0.01 s in median arrival‐time error for S waves. Importantly, the application of WaveDenoiser resulted in a significant reduction of phase picking outliers by 1.1% to 3.6% for both P and S waves. In addition, we achieved over five times acceleration in processing speed compared with the seisBench implementation of DeepDenoiser. Our findings underscore the potential of WaveDenoiser as a powerful tool for improving seismic data analysis and processing efficiency.

P-waves↗

Real-Time Digital Simulation of Inertial Response with Hardware-in-the-Loop Implementation on the CART3 Wind Turbine at the National Wind Technology Center

With increasing penetrations of wind power on electric grids, the stability and reliability of interconnected power systems may be impacted. In some countries that have developed renewable energy sources and systems, grid codes have been revised to require wind power plants (WPPs) to provide ancillary services to support the power system frequency in case of severe grid events. To do this, wind turbine generators (WTGs) should be deloaded to reserve a certain amount of active power for primary frequency response; however, deloading curtails annual energy production, and the market for this type of service needs to be further developed. In this report, we focus on the temporary frequency support provided by WTGs through inertial response. WTGs have potential to provide inertial response, but appropriate control methods should be implemented. With the implemented inertial control methods, wind turbines are capable of increasing their active power output by releasing some of their stored kinetic energy when a frequency excursion occurs. Active power can be temporarily boosted above the maximum power points, after which the rotor speed decelerates, and subsequently an active power output reduction restores the kinetic energy. In this report, we develop two types of models for wind power systems: the first is common, based on the wind power aerodynamic equation, and the power coefficient can be regressed using nonlinear functions; the second is much more complicated, wherein the wind turbine system is modeled using the Fatigue, Aerodynamics, Structures, and Turbulence Modeling (FAST) tool with several degrees of freedoms. A nine-bus test power system is built in Simulink and the Real-Time Digital Simulator, respectively, which are used to evaluate the frequency support performance of the WPPs. We implement two distinct types of inertial control methods in the modeled wind turbines: frequency-based inertial control (FBIC) and stepwise inertial control (SIC). We compare the performances of the two methods in terms of their frequency nadirs, rates of change of frequency, and recovery times. We conclude the results under various wind speeds and penetration cases, which provide insight into designing the inertial response of WTGs. Further, we discuss the impact of the parameters on the performance of the inertial control methods. We evaluate both the scaling factors for the FBIC method and the slope values for the TLIC methods. The simulation work shows the characteristics of different inertial responses compared to conventional synchronous generators. Based on the simulation results, we modify, improve, and test the inertial control methods under a more realistic wind turbine model based on FAST. We then validate the inertial responses under highly turbulent wind conditions generated by TurbSim, and we examine their influences on the turbine mechanical components. The extensive simulation proves the effectiveness of the proposed inertial control methods as well as the nine-bus test power system. We then reconsider the parameters. We rebuild the same test power system using Real time Simulator Computer Aided Design (RSCAD), and we implement the inertial control methods in the real Controls Advanced Research Turbine (CART3), which is prepared for the hardware-in-the-loop field-test simulation. After the setups for the hardware and software hybrid simulation platform are complete, the inertial response is further tested on a real wind turbine for the first time, in which CART3 release the controlled inertial response against the emulated frequency excursion, provided by the real-time simulated power system test bed in RTDS.

17 WIND ENERGY↗

A geospatial risk analysis graphical user interface for identifying hazardous chemical emission sources

Background: Performing back trajectory and forward trajectory using the Hybrid Single-Particle Lagrangian Integrated Trajectory Model (HYSPLIT) is a reliable approach for assessing particle transport after release among mid-field atmospheric models. HYSPLIT has an externally facing online interface that allows non-expert users to run the model trajectories without requiring extensive training or programming. However, the existing HYSPLIT interface is limited if simulations have a large amount of meteorological data and timesteps that are not coincident. The objective of this study is to design and develop a more robust tool to rapidly evaluate hazard transport conditions and to perform risk analysis, while still maintaining an intuitive and user-friendly interface. Methods: HYSPLIT calculates forward and backward trajectories of particles based on wind speed, wind direction, and the corresponding location, timestamp, and Pasquill stability classes of the regions of the atmosphere in terms of the wind speed, the amount of solar radiation, and the fractional cloud cover. The computed particle transport trajectories, combined with the online Proton Transfer Reaction-Mass Spectrometry (PTR-MS) data (https://figshare.com/articles/dataset/ARL_Data_from_PROS_station_at_Hanford_site/19993964), can be used to identify and quantify the sources and affected area of the hazardous chemicals’ emission using the potential source distribution function (PSDF). PSDF is an improved statistical function based on the well-known potential source contribution function (PSCF) in establishing the air pollutant source and receptor relationship. Performing this analysis requires a range of meteorological and pollutant concentration measurements to be statistically meaningful. The existing HYSPLIT graphical user interface (GUI) does not easily permit computations of trajectories of a dataset of meteorological data in high temporal frequency. To improve the performance of HYSPLIT computations from a large dataset and enhance risk analysis of the accidental release of material at risk, a geospatial risk analysis tool (GRAT-GUI) is created to allow large data sets to be processed instantaneously and to provide ease of visualization. Results: The GRAT-GUI is a native desktop-based application and can be run in any Windows 10 system without any internet access requirements, thus providing a secure way to process large meteorological datasets even on a standalone computer. GRAT-GUI has features to import, integrate, and convert meteorological data with various formats for hazardous chemical emission source identification and risk analysis as a self-explanatory user interface. The tool is available at https://figshare.com/articles/software/GRAT/19426742.

97 MATHEMATICS AND COMPUTING↗

Lander Lighting Solution to Reduce Pilot & Autonomous Approach Errors

The south pole lighting environment will have harsh low inclination sunlight, making overhead judgement of surface features difficult. Autonomous solutions are great, however, the need for visual monitoring and independent go/no-go decisions remain. Our project proposes that lunar landing systems will be better served by including a powerful landing light system that improves visibility of surfaces from overhead by illuminating the ground at critical distances for the crew to make last minute decisions regarding an approach. The project utilized computer-based optical modeling software to predict requirements for a potential landing light system. The analysis based the lamp prediction from commercially available LED chip sets and lamp optics. The goal was to illustrate a method to raise the surface contrast of a landing site within an acceptable contrast threshold for most camera systems and human observers to recognize hazards that would not be noticed with low inclination sunlight alone. The Apollo lunar landings benefitted from overhead sun or dark conditions. The surface lighting at the Lunar South Pole is a harsh environment where surfaces are lit from a low inclination angle by the sun (from the side). This change in lighting condition precipitates a need for updated lunar landing systems that facilitate improved recognition of landing sites, and thereby increase pilot awareness of landing hazards. The reliance on LIDAR and other autonomous mechanisms alone is risky given the known usage of visual monitoring for operator concurrence on current spacecraft programs and present-day autonomous land-based vehicles. Visual monitoring via cameras or windows requires the surface contrast to be within 3 orders of magnitude for reasonable recognition of objects. Artificial overhead illumination, when sufficiently sized, provides a means to even out contrast problems created by low inclination sunlight, potentially reducing piloting errors. Current vehicle requirements do not specify this type of guidance for the purpose of increasing mission success. An optical ray-trace simulation model was developed in Zemax Optics Studio to predict the best combination of LED power, LED optics, lamp quantity, and lamp location to raise the surface contrast to within 2 orders of magnitude from 3 orders required to further increased visibility and reduce risk. The project considered the following design constraints: potential base diameter of lander, approach distance(s) for a go-no-go decision point (200 meter), solar inclination angle (2-7), lunar surface reflectance (10%), LED chip sets, LED focusing optics, LED power, lamp quantity, lamp locations, and illumination diameter of lunar surface landing zone. The results can be used to establish minimum design constraints for vehicle landing light systems. With a solar inclination angle ranging from 2-7 degrees, the horizontal illumination of the lunar surface is attenuated by about 10% when compared to overhead illumination from the Sun. This modifies the sun's maximum of 130,000 lux to 13,000 lux horizontal illuminance. The artificial lighting system was designed to provide an 18-meter-wide illumination zone, to create viewing clearances around a 6-meter-wide lander. The system provides an average illuminance of 300 lux, meeting the 2 orders of magnitude criteria. The solution utilized modern Chip On Board LEDs, that each utilized 17 watts, with focusing Total Internal Reflection (TIR) lenses. A lighting system of 300 LEDs was arrayed along the "bottom" of a “lander”. With 17 watts per LED, the system is estimated to require 5100 watts. This is a large amount of power, but it would only be needed during critical phases during the landing. LED lighting systems can be dimmed, and it is assumed that as the lander arrives closer to the landing site, the lighting system power can be adjusted as needed to produce the necessary surface illuminance. The designed reduction of contrast improves reliability of safety assessments using real time visible light camera systems and out the window viewing by the crew.

T A Clark↗

Path Forward for Groundwater Compliance Strategy at the Tuba City, Arizona, Disposal Site - 19581

The Tuba City, Arizona, Disposal Site is located in the Navajo Nation and near the Hopi Reservation. A uranium mill operated at the site from 1956 to 1966. During the operational period, mill tailings were slurried to an unlined impoundment. Excess slurry water was transferred to unlined evaporation ponds. Groundwater contamination resulting from the infiltration of fluids in the mill tailings impoundment and evaporation ponds was characterized in the 1990's. The site's Groundwater Compliance Action Plan was prepared in 1999, and a groundwater extraction and treatment system was constructed in 2002. Issues with aquifer productivity and treatment plant reliability led to the suspension of operations in 2014. The limitations of the remediation system prompted a realization that the site conceptual model should be reevaluated. An integrated study to better understand the geochemical and hydrologic factors affecting contaminant transport, to support the development of a new groundwater compliance strategy, was initiated in 2017 and is ongoing. In addition to the groundwater science components, the study included the evaluation of enhanced evaporation methods. The integrated evaluation will lead to refinement of the site groundwater flow model and development of a contaminant transport model and subsequent development of remedial alternatives. Remedial alternatives will be evaluated to determine a new groundwater compliance strategy. The objectives of geochemical testing were to confirm and quantify geochemical reactions controlling uranium fate and transport. These reactions are important because they control the distribution of uranium on the solid phase; potential for release from the solid phase; mobility of uranium in the water phase; and potential for uranium redistribution onto the currently uncontaminated solid phase. A key outcome is the change in understanding of the mass of uranium in the subsurface that is potentially soluble. These results contradict the previous basis for remediation: that uranium was almost exclusively present in soluble form, within the boundaries of the contaminant plume. Testing showed that uranium sorption downgradient from the plume was measurable but relatively minimal. The movement of other mill-related constituents (nitrate, sulfate, alkalinity) results in the dissolution of naturally occurring uranium and a higher than background concentration of uranium in groundwater. These constituents are not subject to sorption, and their downgradient concentrations are reduced only by diffusion and dispersion. The geochemical testing provides conceptual and quantitative information on potential plume migration. While the testing revealed the potential availability of uranium contaminant sources, the aquifer buffering capacity, pH, and presence of oxygen in groundwater may, individually or in combination, be controlling factors for plume movement. Evaluation of evaporative treatment alternatives was undertaken to determine one or more sustainable and efficient methods capable of treating 151 liters per minute (L/min) (40 gallons per minute), the annual average flow rate. In addition to establishing the baseline capacity for evaporation using the site's existing pond, prospective methods of enhanced evaporation included preheating water before inflow to the evaporation pond, vertical circulation in the pond, dye addition, and Wind-Aided Intensified Evaporation. Consideration of a 151 L/min evaporative treatment arose from previous analysis of extraction well production rates and contaminant mass removal, which indicated that about 80% contaminant removal, relative to full-scale operation of the site's groundwater treatment plant, could be achieved with a smaller capacity system. The lower-flow evaporative option also represented a potentially more sustainable treatment system in comparison to restarting or reconfiguring the groundwater treatment plant. Aquifer pumping tests were designed to develop or improve estimates of hydraulic properties such as transmissivity, horizontal and vertical hydraulic conductivity, storativity, and storage coefficient. Testing involved pumping from one well at a constant flow rate for up to 5 days while monitoring groundwater drawdown in the pumping well and five surrounding wells and then shutting down the pumping well to observe groundwater recovery. The aquifer pumping test results provide insight regarding the hydraulics of the saturated zone. The saturated zone is in a low-conductivity formation with preferential flow in the horizontal direction. The aquifer exhibits low vertical conductance. The use of AQTESOLV software indicates that the saturated zone is a layered system due to the cross-bedded sand-grain orientation within the Navajo Sandstone. These indicators of limited vertical flow provide a potential justification for the observed depth of the contaminant plume of 15-46 meters (50-150 feet) below ground surface). Given the relatively low vertical conductance, groundwater extraction should be focused on the upper portions of the saturated zone. Aquifer response testing provided an improved understanding of aquifer characteristics. However, the primary objective, to identify optimal groundwater extraction strategies, has not been fully addressed. A list of path forward activities for hydrologic analyses was developed, with an overarching objective of providing input parameters for groundwater flow and contaminant transport modeling. Defensible predictions of contaminant transport, through modeling, are critical to the development of a new site groundwater compliance strategy. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗