Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Design verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 991 records · Page 55

Preliminary Application of Formal Verification to An Autonomy Architecture for Unmanned Aircraft

There is a desire to design autonomous systems in such a way that capabilities can be easily added or re- combined to produce new behaviors while preserving their safety properties. ICAROUS, a prototype software architecture for building safety-centric autonomous unmanned aircraft applications, is designed to support this type of extensibility and re-configurability. In ICAROUS, core capabilities are implemented as individual soft- ware services, so that enabling access to new capabilities simply requires adding new services. To make use of these capabilities, ICAROUS includes a specialized service that provides a general framework for config- uring the relative priorities, conditions, and rules that govern how different modules should be engaged and disengaged during flight. The inherent complexity of coordinating multiple modules under changing conditions makes it difficult to determine whether a particular configuration could have erroneous behaviors in certain circumstances. A robust set of integration tests can help discover errors, but testing can only realistically cover a relatively small proportion of total system behaviors. Developing good tests and interpreting the results to pinpoint the cause of errors when they arise can also be very time-consuming. To supplement testing, formal methods can be used to model and analyze complex systems, achieving better coverage and simplifying the process of finding, understanding, and fixing errors. To demonstrate these benefits, this paper explores the ap- plication of formal methods to ICAROUS. In particular, the Spin model checker is used to specify requirements for and model portions of the system, then verify whether the model satisfies the requirements and find and fix errors when it does not.

Formal Methods↗

ATM photoheliograph

The design and fabrication are presented of a 65 cm photoheliograph functional verification unit (FVU) installed in a major solar observatory. The telescope is used in a daily program of solar observation while serving as a test bed for the development of instrumentation to be included in early space shuttle launched solar telescopes. The 65 cm FVU was designed to be mechanically compatible with the ATM spar/canister and would be adaptable to a second ATM flight utilizing the existing spar/canister configuration. An image motion compensation breadboard and a space-hardened, remotely tuned H alpha filter, as well as solar telescopes of different optical configurations or increased aperture are discussed.

Prout, R. A.↗

Stirling Power Conversion for Lunar Applications

NASA is developing Stirling power convertors for use in nuclear power systems that would provide electricity to users on the lunar surface. NASA’s Radioisotope Power Systems (RPS) Program is maturing advanced dynamic convertor technologies that would increase the efficiency beyond the heritage systems for missions to the Moon and other solar system bodies of interest. Development efforts have focus on Stirling and Brayton designs that meet reliability and robustness requirements for operation in the lunar environment. GRC is also maturing low power convertors in the range of 1-40 watts to power micro-spacecraft or a network of distributed probes and include basic demonstration of in-house designs for convertors and controllers. In addition to RPS applications, conceptual fission systems have been demonstrated using Stirling convertors in multiple electrically heated tests and one test heated by a nuclear reactor. The Stirling convertors used in these fission system concepts include 100 We convertors to enable a 1 kWe system, 1 kWe convertors to enable a 10 kWe system, and 6 kWe convertors to enable a 40 kWe system. The maturation of Stirling power convertors for nuclear applications includes verification of performance in relevant environments and validation of the design with a focus on high reliability and robustness. Over 1 million hours of testing has been accumulated on dozens of convertors since 1999 in the Stirling Research Laboratory at the NASA Glenn Research Center located in Cleveland Ohio, where the longest running convertor is the work record holder at 137,000 hours, or 15.5 years. These maturation efforts have been instrumental in increasing the technology readiness level of Stirling technologies for space applications.

S. Wilson↗

Reactive system verification case study: Fault-tolerant transputer communication

A reactive program is one which engages in an ongoing interaction with its environment. A system which is controlled by an embedded reactive program is called a reactive system. Examples of reactive systems are aircraft flight management systems, bank automatic teller machine (ATM) networks, airline reservation systems, and computer operating systems. Reactive systems are often naturally modeled (for logical design purposes) as a composition of autonomous processes which progress concurrently and which communicate to share information and/or to coordinate activities. Formal (i.e., mathematical) frameworks for system verification are tools used to increase the users' confidence that a system design satisfies its specification. A framework for reactive system verification includes formal languages for system modeling and for behavior specification and decision procedures and/or proof-systems for verifying that the system model satisfies the system specifications. Using the Ostroff framework for reactive system verification, an approach to achieving fault-tolerant communication between transputers was shown to be effective. The key components of the design, the decoupler processes, may be viewed as discrete-event-controllers introduced to constrain system behavior such that system specifications are satisfied. The Ostroff framework was also effective. The expressiveness of the modeling language permitted construction of a faithful model of the transputer network. The relevant specifications were readily expressed in the specification language. The set of decision procedures provided was adequate to verify the specifications of interest. The need for improved support for system behavior visualization is emphasized.

Crane, D. Francis↗

Instrument Systems Analysis and Verification Facility (ISAVF) users guide

The ISAVF facility is primarily an interconnected system of computers, special purpose real time hardware, and associated generalized software systems, which will permit the Instrument System Analysts, Design Engineers and Instrument Scientists, to perform trade off studies, specification development, instrument modeling, and verification of the instrument, hardware performance. It is not the intent of the ISAVF to duplicate or replace existing special purpose facilities such as the Code 710 Optical Laboratories or the Code 750 Test and Evaluation facilities. The ISAVF will provide data acquisition and control services for these facilities, as needed, using remote computer stations attached to the main ISAVF computers via dedicated communication lines.

Davis, J. F.↗

Urine sampling and collection system

This specification defines the performance and design requirements for the urine sampling and collection system engineering model and establishes requirements for its design, development, and test. The model shall provide conceptual verification of a system applicable to manned space flight which will automatically provide for collection, volume sensing, and sampling of urine.

Fogal, G. L.↗

Environmental control system transducer development study

A failure evaluation of the transducers used in the environmental control systems of the Apollo command service module, lunar module, and portable life support system is presented in matrix form for several generic categories of transducers to enable identification of chronic failure modes. Transducer vendors were contacted and asked to supply detailed information. The evaluation data generated for each category of transducer were compiled and published in failure design evaluation reports. The evaluation reports also present a review of the failure and design data for the transducers and suggest both design criteria to improve reliability of the transducers and, where necessary, design concepts for required redesign of the transducers. Remedial designs were implemented on a family of pressure transducers and on the oxygen flow transducer. The design concepts were subjected to analysis, breadboard fabrication, and verification testing.

Brudnicki, M. J.↗

Feasibility and systems definition study for Microwave Multi-Application Payload (MMAP)

Work completed on three Shuttle/Spacelab experiments is examined: the Adaptive Multibeam Phased Array Antenna (AMPA) Experiment, Electromagnetic Environment Experiment (EEE) and Millimeter Wave Communications Experiment (MWCE). Results included the definition of operating modes, sequence of operation, radii of operation about several ground stations, signal format, foot prints of typical orbits and preliminary definition of ground and user terminals. Conceptual hardware designs, Spacelab interfaces, data handling methods, experiment testing and verification studies were included. The MWCE-MOD I was defined conceptually for a steerable high gain antenna.

Horton, J. B.↗

Algorithms for the Automated Power Systems Management

The system breadboard for the demonstration of Automated Power Systems Management (APSM) functions has been designed, fabricated, and is in the final stages of verification and testing. APSM functions fall into categories of fault detection and correction, commanding system and subsystem test and diagnoses, relay position monitoring, data acquisition and processing, and power management. All these functions are accomplished through software residing in 8-bit microprocessors dedicated to each group of Viking Orbiter power breadboard subassemblies and a 16-bit microprocessor serving as the central processor for the power system. This paper describes key monitoring, diagnostic, and control algorithms used in the APSM breadboard.

Moser, R. L.↗

SEPAC software configuration control plan and procedures, revision 1

SEPAC Software Configuration Control Plan and Procedures are presented. The objective of the software configuration control is to establish the process for maintaining configuration control of the SEPAC software beginning with the baselining of SEPAC Flight Software Version 1 and encompass the integration and verification tests through Spacelab Level IV Integration. They are designed to provide a simplified but complete configuration control process. The intent is to require a minimum amount of paperwork but provide total traceability of SEPAC software.

Source record↗

GAS eleven node thermal model (GEM)

The Eleven Node Thermal Model (GEM) of the Get Away Special (GAS) container was originally developed based on the results of thermal tests of the GAS container. The model was then used in the thermal analysis and design of several NASA/GSFC GAS experiments, including the Flight Verification Payload, the Ultraviolet Experiment, and the Capillary Pumped Loop. The model description details the five cu ft container both with and without an insulated end cap. Mass specific heat values are also given so that transient analyses can be performed. A sample problem for each configuration is included as well so that GEM users can verify their computations. The model can be run on most personal computers with a thermal analyzer solution routine.

Butler, Dan↗

Adhesively bonded joints: Testing, analysis, and design; Proceedings of the International Symposium, Baltimore, MD, Sept. 10-12, 1986

The papers contained in this volume provide an overview of the state of the art of testing, analysis, and design of adhesively bonded joints. The papers are grouped in the following sections: mechanical testing, stress analysis, failure mechanisms, and design and durability. Specific topics discussed include determination and verification of elastic parameters for adhesives; factors influencing elastic stresses in double cantilever beam specimens; special mixed finite elements for interfacial stress analysis of adhesively bonded joints; debonding characteristics of adhesively bonded woven Kevlar composites; and environmental durability of adhesively bonded joints.

Johnson, W. S.↗

Proceedings of the 3rd Annual Conference on Aerospace Computational Control, volume 1

Conference topics included definition of tool requirements, advanced multibody component representation descriptions, model reduction, parallel computation, real time simulation, control design and analysis software, user interface issues, testing and verification, and applications to spacecraft, robotics, and aircraft.

Bernard, Douglas E.↗

Multiprocessor performance modeling with ADAS

A graph managing strategy referred to as the Algorithm to Architecture Mapping Model (ATAMM) appears useful for the time-optimized execution of application algorithm graphs in embedded multiprocessors and for the performance prediction of graph designs. This paper reports the modeling of ATAMM in the Architecture Design and Assessment System (ADAS) to make an independent verification of ATAMM's performance prediction capability and to provide a user framework for the evaluation of arbitrary algorithm graphs. Following an overview of ATAMM and its major functional rules are descriptions of the ADAS model of ATAMM, methods to enter an arbitrary graph into the model, and techniques to analyze the simulation results. The performance of a 7-node graph example is evaluated using the ADAS model and verifies the ATAMM concept by substantiating previously published performance results.

Hayes, Paul J.↗

ATTAP/AGT101 ceramics technology update

The feasibility of applying ceramics to the gas turbine was demonstrated during the AGT101 Program, when over 250 hours were accumulated on ceramic components in engine tests at temperatures up to 1204C (2200F). The follow-on program, designated the Advanced Turbine Technology Applications Project (ATTAP), began in late August 1987 to further develop ceramic technology. This program addresses ceramic component fabrication technology, design methods development and the supporting data base, and verification of ceramic component durability in an operating engine environment. These technologies must be demonstrated so that a commercialization development decision can be made at the end of ATTAP.

Boyd, G. L.↗

Kalman filter based range estimation for autonomous navigation using imaging sensors

The ability to detect and locate obstacles using on-board sensors and modify the nominal trajectory is necessary for safe landing of an autonomous lander on Mars. This paper examines some of the issues in the location of objects using a sequence of images from a passive sensor, and describes a Kalman filter approach to improve the range estimation to obstacles. The filter is also used to track features in the images leading to a significant reduction of search effort in the feature extraction step of the algorithm. The lack of suitable flight imagery data presents a problem in the verification of concepts for obstacle detection. An experiment is designed to acquire a sequence of images along with sensor motion parameters and the range estimation results using this imagery are presented.

Sridhar, B.↗

Software safety - A user's practical perspective

Software safety assurance philosophy and practices at the NASA Ames are discussed. It is shown that, to be safe, software must be error-free. Software developments on two digital flight control systems and two ground facility systems are examined, including the overall system and software organization and function, the software-safety issues, and their resolution. The effectiveness of safety assurance methods is discussed, including conventional life-cycle practices, verification and validation testing, software safety analysis, and formal design methods. It is concluded (1) that a practical software safety technology does not yet exist, (2) that it is unlikely that a set of general-purpose analytical techniques can be developed for proving that software is safe, and (3) that successful software safety-assurance practices will have to take into account the detailed design processes employed and show that the software will execute correctly under all possible conditions.

Dunn, William R.↗

Probabilistic Structural Analysis Methods (PSAM) for select space propulsion system components

This annual report summarizes the work completed during the third year of technical effort on the referenced contract. Principal developments continue to focus on the Probabilistic Finite Element Method (PFEM) which has been under development for three years. Essentially all of the linear capabilities within the PFEM code are in place. Major progress in the application or verifications phase was achieved. An EXPERT module architecture was designed and partially implemented. EXPERT is a user interface module which incorporates an expert system shell for the implementation of a rule-based interface utilizing the experience and expertise of the user community. The Fast Probability Integration (FPI) Algorithm continues to demonstrate outstanding performance characteristics for the integration of probability density functions for multiple variables. Additionally, an enhanced Monte Carlo simulation algorithm was developed and demonstrated for a variety of numerical strategies.

Source record↗