SEARCH · Engineering Papers

Results for “hardware failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 937 records · Page 52

All sources NASA NTRS DOE OSTI

NASA NTRS2016

Modeling in the State Flow Environment to Support Launch Vehicle Verification Testing for Mission and Fault Management Algorithms in the NASA Space Launch System

Analysis methods and testing processes are essential activities in the engineering development and verification of the National Aeronautics and Space Administration's (NASA) new Space Launch System (SLS). Central to mission success is reliable verification of the Mission and Fault Management (M&FM) algorithms for the SLS launch vehicle (LV) flight software. This is particularly difficult because M&FM algorithms integrate and operate LV subsystems, which consist of diverse forms of hardware and software themselves, with equally diverse integration from the engineering disciplines of LV subsystems. M&FM operation of SLS requires a changing mix of LV automation. During pre-launch the LV is primarily operated by the Kennedy Space Center (KSC) Ground Systems Development and Operations (GSDO) organization with some LV automation of time-critical functions, and much more autonomous LV operations during ascent that have crucial interactions with the Orion crew capsule, its astronauts, and with mission controllers at the Johnson Space Center. M&FM algorithms must perform all nominal mission commanding via the flight computer to control LV states from pre-launch through disposal and also address failure conditions by initiating autonomous or commanded aborts (crew capsule escape from the failing LV), redundancy management of failing subsystems and components, and safing actions to reduce or prevent threats to ground systems and crew. To address the criticality of the verification testing of these algorithms, the NASA M&FM team has utilized the State Flow environment6 (SFE) with its existing Vehicle Management End-to-End Testbed (VMET) platform which also hosts vendor-supplied physics-based LV subsystem models. The human-derived M&FM algorithms are designed and vetted in Integrated Development Teams composed of design and development disciplines such as Systems Engineering, Flight Software (FSW), Safety and Mission Assurance (S&MA) and major subsystems and vehicle elements such as Main Propulsion Systems (MPS), boosters, avionics, Guidance, Navigation, and Control (GN&C), Thrust Vector Control (TVC), liquid engines, and the astronaut crew office. Since the algorithms are realized using model-based engineering (MBE) methods from a hybrid of the Unified Modeling Language (UML) and Systems Modeling Language (SysML), SFE methods are a natural fit to provide an in depth analysis of the interactive behavior of these algorithms with the SLS LV subsystem models. For this, the M&FM algorithms and the SLS LV subsystem models are modeled using constructs provided by Matlab which also enables modeling of the accompanying interfaces providing greater flexibility for integrated testing and analysis, which helps forecast expected behavior in forward VMET integrated testing activities. In VMET, the M&FM algorithms are prototyped and implemented using the same C++ programming language and similar state machine architectural concepts used by the FSW group. Due to the interactive complexity of the algorithms, VMET testing thus far has verified all the individual M&FM subsystem algorithms with select subsystem vendor models but is steadily progressing to assessing the interactive behavior of these algorithms with LV subsystems, as represented by subsystem models. The novel SFE applications has proven to be useful for quick look analysis into early integrated system behavior and assessment of the M&FM algorithms with the modeled LV subsystems. This early MBE analysis generates vital insight into the integrated system behaviors, algorithm sensitivities, design issues, and has aided in the debugging of the M&FM algorithms well before full testing can begin in more expensive, higher fidelity but more arduous environments such as VMET, FSW testing, and the Systems Integration Lab7 (SIL). SFE has exhibited both expected and unexpected behaviors in nominal and off nominal test cases prior to full VMET testing. In many findings, these behavioral characteristics were used to correct the M&FM algorithms, enable better test coverage, and develop more effective test cases for each of the LV subsystems. This has improved the fidelity of testing and planning for the next generation of M&FM algorithms as the SLS program evolves from non-crewed to crewed flight, impacting subsystem configurations and the M&FM algorithms that control them. SFE analysis has improved robustness and reliability of the M&FM algorithms by revealing implementation errors and documentation inconsistencies. It is also improving planning efficiency for future VMET testing of the M&FM algorithms hosted in the LV flight computers, further reducing risk for the SLS launch infrastructure, the SLS LV, and most importantly the crew.

Trevino, Luis↗

NASA NTRS1984

High temperature thermocouple and heat flux gauge using a unique thin film-hardware hot juncture

A special thin film-hardware material thermocouple (TC) and heat flux gauge concept for a reasonably high temperature and high flux flat plate heat transfer experiment was fabricated and tested to gauge temperatures of 911 K. This concept was developed for minimal disturbance of boundary layer temperature and flow over the plates and minimal disturbance of heat flux through the plates. Comparison of special heat flux gauge Stanton number output at steady-state conditions with benchmark literature data was good and agreement was within a calculated uncertainty of the measurement system. Also, good agreement of special TC and standard TC outputs was obtained and the results are encouraging. Oxidation of thin film thermoelements was a primary failure mode after about 5 of operation.

Liebert, C. H.↗

NASA NTRS1985

High-temperature thermocouple and heat flux gauge using a unique thin film-hardware hot junction

Liebert, C. H.↗

NASA NTRS1995

Space environmental effects observed on the Hubble Space Telescope

The Hubble Space Telescope (HST) Repair Mission of December, 1993, was first and foremost a mission to improve the performance of the observatory. But for a specialized segment of the aerospace industry, the primary interest is in the return to Earth of numerous pieces of the HST hardware, pieces which have been replaced, repaired, improved, or superseded. The returned hardware is of interest because of the information it potentially carries about the effects of exposure to the space environment for three and a half years. Like the LDEF retrieval mission four years ago, the HST repair mission is of interest to many engineering disciplines, including all of the disciplines represented by the LDEF Special Investigation Groups (SIG's). There is particular interest in the evaluation of specific materials and systems in the returned components. Some coated surfaces have been processed with materials which are newer and still in use by, or under consideration for, other spacecraft in a variety of stages of development. Several of the systems are being returned because a specific failure or anomaly has been observed and thus there is, at the outset, a specific investigative trail that needs to be followed. These systems are much more complex than those flown on LDEF and, in two instances, comprised state-of-the-art science instruments. Further, the parts used in these systems generally were characterized more rigorously prior to flight than were those in the LDEF systems, and thus post flight testing may yield more significant results.

Edelman, Joel E.↗

NASA NTRS2016

Exploring Cognition Using Software Defined Radios for NASA Missions

NASA missions typically operate using a communication infrastructure that requires significant schedule planning with limited flexibility when the needs of the mission change. Parameters such as modulation, coding scheme, frequency, and data rate are fixed for the life of the mission. This is due to antiquated hardware and software for both the space and ground assets and a very complex set of mission profiles. Automated techniques in place by commercial telecommunication companies are being explored by NASA to determine their usability by NASA to reduce cost and increase science return. Adding cognition the ability to learn from past decisions and adjust behavior is also being investigated. Software Defined Radios are an ideal way to implement cognitive concepts. Cognition can be considered in many different aspects of the communication system. Radio functions, such as frequency, modulation, data rate, coding and filters can be adjusted based on measurements of signal degradation. Data delivery mechanisms and route changes based on past successes and failures can be made to more efficiently deliver the data to the end user. Automated antenna pointing can be added to improve gain, coverage, or adjust the target. Scheduling improvements and automation to reduce the dependence on humans provide more flexible capabilities. The Cognitive Communications project, funded by the Space Communication and Navigation Program, is exploring these concepts and using the SCaN Testbed on board the International Space Station to implement them as they evolve. The SCaN Testbed contains three Software Defined Radios and a flight computer. These four computing platforms, along with a tracking antenna system and the supporting ground infrastructure, will be used to implement various concepts in a system similar to those used by missions. Multiple universities and SBIR companies are supporting this investigation. This paper will describe the cognitive system ideas under consideration and the plan for implementing them on platforms, including the SCaN Testbed. Discussions in the paper will include how these concepts might be used to reduce cost and improve the science return for NASA missions.

transmitters receivers↗

NASA NTRS2014

Simulating the Impact Response of Composite Airframe Components

In 2010, NASA Langley Research Center obtained residual hardware from the US Army's Survivable Affordable Repairable Airframe Program (SARAP). The hardware consisted of a composite fuselage section that was representative of the center section of a Black Hawk helicopter. The section was fabricated by Sikorsky Aircraft Corporation and designated the Test Validation Article (TVA). The TVA was subjected to a vertical drop test in 2008 to evaluate a tilting roof concept to limit the intrusion of overhead mass items, such as the rotor transmission, into the fuselage cabin. As a result of the 2008 test, damage to the hardware was limited primarily to the roof. Consequently, when the post-test article was obtained in 2010, the roof area was removed and the remaining structure was cut into six different types of test specimens including: (1) tension and compression coupons for material property characterization, (2) I-beam sections, (3) T-sections, (4) cruciform sections, (5) a large subfloor section, and (6) a forward framed fuselage section. In 2011, NASA and Sikorsky entered into a cooperative research agreement to study the impact responses of composite airframe structures and to evaluate the capabilities of the explicit transient dynamic finite element code, LS-DYNA®, to simulate these responses including damage initiation and progressive failure. Finite element models of the composite specimens were developed and impact simulations were performed. The properties of the composite material were represented using both a progressive in-plane damage model (Mat 54) and a continuum damage mechanics model (Mat 58) in LS-DYNA. This paper provides test-analysis comparisons of time history responses and the location and type of damage for representative I-beam, T-section, and cruciform section components.

Jackson, Karen E.↗

NASA NTRS1991

Isothermal thermogravimetric data acquisition analysis system

The description of an Isothermal Thermogravimetric Analysis (TGA) Data Acquisition System is presented. The system consists of software and hardware to perform a wide variety of TGA experiments. The software is written in ANSI C using Borland's Turbo C++. The hardware consists of a 486/25 MHz machine with a Capital Equipment Corp. IEEE488 interface card. The interface is to a Hewlett Packard 3497A data acquisition system using two analog input cards and a digital actuator card. The system provides for 16 TGA rigs with weight and temperature measurements from each rig. Data collection is conducted in three phases. Acquisition is done at a rapid rate during initial startup, at a slower rate during extended data collection periods, and finally at a fast rate during shutdown. Parameters controlling the rate and duration of each phase are user programmable. Furnace control (raising and lowering) is also programmable. Provision is made for automatic restart in the event of power failure or other abnormal terminations. Initial trial runs were conducted to show system stability.

Cooper, Kenneth, Jr.↗

NASA NTRS2009

NanoSail-D: A Solar Sail Demonstration Mission

During the past decade, within the United States, NASA Marshall Space Flight Center (MSFC) was heavily engaged in the development of revolutionary new technologies for in-space propulsion. One of the major in-space propulsion technologies developed was a solar sail propulsion system. Solar sail propulsion uses the solar radiation pressure exerted by the momentum transfer of reflected photons to generate a net force on a spacecraft. To date, solar sail propulsion systems have been designed for large spacecraft in the tens to hundreds of kilograms mass range. Recently, however, MSFC has been investigating the application of solar sails for small satellite propulsion. Likewise, NASA Ames Research Center (ARC) has been developing small spacecraft missions that have a need for amass-efficient means of satisfying deorbit requirements. Hence, a synergistic collaboration was established between these two NASA field Centers with the objective of conducting a flight demonstration of solar sail technologies for small satellites. The NanoSail-D mission flew onboard the ill-fated Falcon Rocket launched August 2, 2008, and, due to the failure of that rocket, never achieved orbit. The NanoSail-D flight spare is ready for flight and a suitable launch arrangement is being actively pursued. Both the original sailcraft and the flight spare are hereafter referred to as NanoSail-D. The sailcraft consists of a sail subsystem stowed in a three-element CubeSat. Shortly after deployment of the NanoSail-D, the solar sail will deploy and mission operations will commence. This demonstration flight has two primary technical objectives: (1) to successfully stow and deploy the sail and (2) to demonstrate deorbit functionality. Given a near-term opportunity for launch on Falcon, the project was given the challenge of delivering the flight hardware in 6 mo, which required a significant constraint on flight system functionality. As a consequence, passive attitude stabilization of the spacecraft will be achieved using permanent magnets to detumble and orient the body with the magnetic field lines and then rely on atmospheric drag to passively stabilize the sailcraft in an essentially maximum drag attitude. This paper will present an introduction to solar sail propulsion systems and an overview of the NanoSail-D spacecraft.

Johnson, Les↗

NASA NTRS2020

Improved State Estimation in Distorted Magnetic Fields

The magnetic field of the Earth – besides varying naturally – may be disturbed locally by the (man-made) environment. State estimation and corresponding navigation frameworks that use magnetometers on-board of mobile platforms suffer from severe performance loss or failure upon local magnetic distortions if these are not detected and mitigated adequately. Advanced estimators include the magnetic variation in the state vector. However, Cartesian coordinates, although widely used in the literature, suffer from observability issues when it comes to disturbance detection. This paper shows the importance of representing the magnetic variation in a spherical coordinate system and subsequent improvements with respect to the common representation in Cartesian coordinates. The spherical representation improves estimator consistency and allows for accurate and fast mitigation of magnetic disturbances through consistent statistical tests which leads to better system state estimates in magnetically distorted areas. The approach is validated by performing tests with simulated and real-world data on embedded hardware.

Brommer, Christian↗

NASA NTRS1995

DRS: Derivational Reasoning System

The high reliability requirements for airborne systems requires fault-tolerant architectures to address failures in the presence of physical faults, and the elimination of design flaws during the specification and validation phase of the design cycle. Although much progress has been made in developing methods to address physical faults, design flaws remain a serious problem. Formal methods provides a mathematical basis for removing design flaws from digital systems. DRS (Derivational Reasoning System) is a formal design tool based on advanced research in mathematical modeling and formal synthesis. The system implements a basic design algebra for synthesizing digital circuit descriptions from high level functional specifications. DRS incorporates an executable specification language, a set of correctness preserving transformations, verification interface, and a logic synthesis interface, making it a powerful tool for realizing hardware from abstract specifications. DRS integrates recent advances in transformational reasoning, automated theorem proving and high-level CAD synthesis systems in order to provide enhanced reliability in designs with reduced time and cost.

Bose, Bhaskar↗

NASA NTRS1991

Collision avoidance for CTV: Requirements and capabilities

Cargo transfer vehicle (CTV) operations near Space Station Freedom will require positive collision avoidance maneuver (CAM) capability to preclude any change of collision, even in the event of CTV failures. The requirements for CAM are discussed, and the CAM design approach and design of the Orbiting Maneuvering Vehicle (OMV) are reviewed; this design met requirements for OMV operation near the Space Station, provided a redundant collision avoidance maneuver capability. Significant portions of the OMV CAM design should be applicable to CTV. The key features of the OMV design are summarized and related to the CTV mission design to that of OMV's. CAM is a defined sequence of events executed by the CTV to place the vehicle in a safe position relative to a target such as the Space Station. CAM can be performed through software commands to the propulsion system, or through commands pre-stored in hardware. Various techniques for triggering CAM are considered, and the risks associated with CAM enable and execution in phases are considered. OMV CAM design features both hardware and software CAM capability, with analyses conducted to assess the ability to meet the collision-free requirement during all phases of the mission.

Nosek, Thomas P.↗

NASA NTRS2002

Restoring Redundancy to the MAP Propulsion System

The Microwave Anisotropy Probe is a follow-on to the Differential Microwave Radiometer instrument on the Cosmic Background Explorer. Sixteen months before launch, it was discovered that from the time of the critical design review, configuration changes had resulted in a significant migration of the spacecraft's center of mass. As a result, the spacecraft no longer had a viable backup control mode in the event of a failure of the negative pitch axis thruster. Potential solutions to this problem were identified, such as adding thruster plume shields to redirect thruster torque, adding mass to, or removing it from, the spacecraft, adding an additional thruster, moving thrusters, bending thrusters (either nozzles or propellant tubing), or accepting the loss of redundancy for the thruster. The impacts of each solution, including effects on the mass, cost, and fuel budgets, as well as schedule, were considered, and it was decided to bend the thruster propellant tubing of the two roll control thrusters, allowing that pair to be used for back-up control in the negative pitch axis. This paper discusses the problem and the potential solutions, and documents the hardware and software changes that needed to be made to implement the chosen solution. Flight data is presented to show the propulsion system on-orbit performance.

ODonnell, James R., Jr.↗

NASA NTRS2004

Holistic Design for Total Product Well Being

Recent hardware development work at NASA's Marshall Space Flight Center creates and argument for the use of a holistic design approach as opposed to a piece part design approach. A piece part design approach being one where individual pieces are developed to their finished state having to meet certain interface and human engineering requirements without much consideration to the final product as a whole. A holistic design approach being one where the final product is evaluated early and frequently during the design process, and individual parts are developed with consideration to how they interact a whole,and how they interact with the user and environment. Examples from the development of the Materials Science Research Rack - 1 will illustrate: a design failure due to piece part design; a design save, due to a failure of piece part design, but saved by evaluating the design holistically; and a design success due to a holistic design approach.

Adams, Chris W.↗

NASA NTRS2023

Human Systems Integration: Managing Risk in Anesthesia

The practice of anesthesia relies on clinicians’ ability to safely manage increasingly complex equipment. Devices such as ventilators, drug infusion pumps, and physiologic monitors use sophisticated algorithms to deliver care, but most clinicians are only trained to manage automated systems during normal operation. Few if any receive training on how to manage system failures. Although manufacturers are required to consult with human factors engineers as part of the equipment design process, most pieces of equipment are ultimately brought to market without extensive input from clinicians. Systems in the operating room can be as simple as an oxygen tank, or as complex as a multi-institutional healthcare organization. Humans are also a complex system, and play a critical role in the domains of operations, design, fabrication, maintenance, repair, and ultimately, dismantling and closeout. HSI seeks to provide a means for advocating the human side of the system. Human Systems Integration (HSI) is the cross disciplinary process used as part of the Systems Engineering process to reduce risk in systems. HSI professionals consider the human, hardware, and software elements of system design to optimize system performance and improve safety. HSI professionals work in domains of study that include training, management, human factors engineering, safety, and occupational health, among others. This article discusses the role of systems in the practice of anesthesia, and how consideration of the human during all phases of the system life cycle helps manage risks and promote a better patient outcome.

Human Factors↗

NASA NTRS1983

Synchronization and fault-masking in redundant real-time systems

A real time computer may fail because of massive component failures or not responding quickly enough to satisfy real time requirements. An increase in redundancy - a conventional means of improving reliability - can improve the former but can - in some cases - degrade the latter considerably due to the overhead associated with redundancy management, namely the time delay resulting from synchronization and voting/interactive consistency techniques. The implications of synchronization and voting/interactive consistency algorithms in N-modular clusters on reliability are considered. All these studies were carried out in the context of real time applications. As a demonstrative example, we have analyzed results from experiments conducted at the NASA Airlab on the Software Implemented Fault Tolerance (SIFT) computer. This analysis has indeed indicated that in most real time applications, it is better to employ hardware synchronization instead of software synchronization and not allow reconfiguration.

Krishna, C. M.↗

NASA NTRS1990

Effect of KOH concentration on LEO cycle life of IPV nickel-hydrogen flight battery cells

A breakthrough in the low-earth-orbit (LEO) cycle life of individual pressure vessel (IPV) nickel hydrogen battery cells is reported. The cycle life of boiler plate cells containing 26 percent potassium hydroxide (KOH) electrolyte was about 40,000 LEO cycles compared to 3500 cycles for cells containing 31 percent KOH. The effect of KOH concentration on cycle life was studied. The cycle regime was a stressful accelerated LEO, which consisted of a 27.5 min charge followed by a 17.5 min charge (2 x normal rate). The depth of discharge (DOD) was 80 percent. The cell temperature was maintained at 23 C. The next step is to validate these results using flight hardware and real time LEO test. NASA Lewis has a contract with the Naval Weapons Support Center (NWSC), Crane, Indiana to validate the boiler plate test results. Six 48 A-hr Hughes recirculation design IPV nickel-hydrogen flight battery cells are being evaluated. Three of the cells contain 26 percent KOH (test cells) and three contain 31 percent KOH (control cells). They are undergoing real time LEO cycle life testing. The cycle regime is a 90-min LEO orbit consisting of a 54-min charge followed by a 36-min discharge. The depth-of-discharge is 80 percent. The cell temperature is maintained at 10 C. The cells were cycled for over 8000 cycles in the continuing test. There were no failures for the cells containing 26 percent KOH. There were two failures, however, for the cells containing 31 percent KOH.

Smithrick, John J.↗

NASA NTRS2006

Comprehensive Environmental Informatics System (CEIS) Integrating Crew and Vehicle Environmental Health

Integrated Vehicle Health Management (IVHM) systems have been pursued as highly integrated systems that include smart sensors, diagnostic and prognostics software for assessments of real-time and life-cycle vehicle health information. Inclusive to such a system is the requirement to monitor the environmental health within the vehicle and the occupants of the vehicle. In this regard an enterprise approach to informatics is used to develop a methodology entitled, Comprehensive Environmental Informatics System (CEIS). The hardware and software technologies integrated into this system will be embedded in the vehicle subsystems, and maintenance operations, to provide both real-time and life-cycle health information of the environment within the vehicle cabin and of its occupants. This comprehensive information database will enable informed decision making and logistics management. One key element of the CEIS is interoperability for data acquisition and archive between environment and human system monitoring. With comprehensive components the data acquired in this system will use model based reasoning systems for subsystem and system level managers, advanced on-board and ground-based mission and maintenance planners to assess system functionality. Knowledge databases of the vehicle health state will be continuously updated and reported for critical failure modes, and routinely updated and reported for life cycle condition trending. Sufficient intelligence, including evidence-based engineering practices which are analogous to evidencebased medicine practices, will be included in the CEIS to result in more rapid recognition of off-nominal operation to enable quicker corrective actions. This will result from better information (rather than just data) for improved crew/operator situational awareness, which will produce significant vehicle and crew safety improvements, as well as increasing the chance for mission success, future mission planning as well as training. Other benefits include improved reliability, increase safety in operations and cost of operations. The cost benefits stem from significantly reduced processing and operations manpower, predictive maintenance for systems and subjects. The improvements in vehicle functionality and cost will result from increased prognostic and diagnostic capability due to the detailed total human exploration system health knowledge from CEIS. A collateral benefit is that there will be closer observations of the vehicle occupants as wrist watch sized devices are worn for continuous health monitoring. Additional database acquisition will stem from activities in countermeasure practices to ensure peak performance capability by occupants of the vehicle. The CEIS will provide data from advanced sensing technologies and informatics modeling which will be useful in problem troubleshooting, and improving NASA s awareness of systems during operation.

Nall, Mark E.↗

NASA NTRS2007

Emergency Flight Control of a Twin-Jet Commercial Aircraft using Manual Throttle Manipulation

The Department of Homeland Security (DHS) created the PCAR (Propulsion-Controlled Aircraft Recovery) project in 2005 to mitigate the ManPADS (man-portable air defense systems) threat to the commercial aircraft fleet with near-term, low-cost proven technology. Such an attack could potentially cause a major FCS (flight control system) malfunction or other critical system failure onboard the aircraft, despite the extreme reliability of current systems. For the situations in which nominal flight controls are lost or degraded, engine thrust may be the only remaining means for emergency flight control [ref 1]. A computer-controlled thrust system, known as propulsion-controlled aircraft (PCA), was developed in the mid 1990s with NASA, McDonnell Douglas and Honeywell. PCA's major accomplishment was a demonstration of an automatic landing capability using only engine thrust [ref 11. Despite these promising results, no production aircraft have been equipped with a PCA system, due primarily to the modifications required for implementation. A minimally invasive option is TOC (throttles-only control), which uses the same control principles as PCA, but requires absolutely no hardware, software or other aircraft modifications. TOC is pure piloting technique, and has historically been utilized several times by flight crews, both military and civilian, in emergency situations stemming from a loss of conventional control. Since the 1990s, engineers at NASA Dryden Flight Research Center (DFRC) have studied TOC, in both simulation and flight, for emergency flight control with test pilots in numerous configurations. In general, it was shown that TOC was effective on certain aircraft for making a survivable landing. DHS sponsored both NASA Dryden Flight Research Center (Edwards, CA) and United Airlines (Denver, Colorado) to conduct a flight and simulation study of the TOC characteristics of a twin-jet commercial transport, and assess the ability of a crew to control an aircraft down to a survivable runway landing using TOC. The PCAR project objective was a set of pilot procedures for operation of a specific aircraft without hydraulics that (a) have been validated in both simulation and flight by relevant personnel, and (b) mesh well with existing commercial operations, maintenance, and training at a minimum cost. As a result of this study, a procedure has been developed to assist a crew in making a survivable landing using TOC. In a simulation environment, line pilots with little or no previous TOC experience performed survivable runway landings after a few practice TOC approaches. In-flight evaluations put line pilots in a simulated emergency situation where TOC was used to recover the aircraft, maneuver to a landing site, and perform an approach down to 200 feet AGL. The results of this research, including pilot observations, procedure comments, recommendations, future work and lessons learned, will he discussed. Flight data and video footage of TOC approaches may also be shown.

Cole, Jennifer H.↗