Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “SAFE”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,009 records · Page 56

Automating Trend Analysis for Spacecraft Constellations

Spacecraft trend analysis is a vital mission operations function performed by satellite controllers and engineers, who perform detailed analyses of engineering telemetry data to diagnose subsystem faults and to detect trends that may potentially lead to degraded subsystem performance or failure in the future. It is this latter function that is of greatest importance, for careful trending can often predict or detect events that may lead to a spacecraft's entry into safe-hold. Early prediction and detection of such events could result in the avoidance of, or rapid return to service from, spacecraft safing, which not only results in reduced recovery costs but also in a higher overall level of service for the satellite system. Contemporary spacecraft trending activities are manually intensive and are primarily performed diagnostically after a fault occurs, rather than proactively to predict its occurrence. They also tend to rely on information systems and software that are oudated when compared to current technologies. When coupled with the fact that flight operations teams often have limited resources, proactive trending opportunities are limited, and detailed trend analysis is often reserved for critical responses to safe holds or other on-orbit events such as maneuvers. While the contemporary trend analysis approach has sufficed for current single-spacecraft operations, it will be unfeasible for NASA's planned and proposed space science constellations. Missions such as the Dynamics, Reconnection and Configuration Observatory (DRACO), for example, are planning to launch as many as 100 'nanospacecraft' to form a homogenous constellation. A simple extrapolation of resources and manpower based on single-spacecraft operations suggests that trending for such a large spacecraft fleet will be unmanageable, unwieldy, and cost-prohibitive. It is therefore imperative that an approach to automating the spacecraft trend analysis function be studied, developed, and applied to missions such as DRACO with the intent that mission operations costs be significantly reduced. The goal of the Constellation Spacecraft Trend Analysis Toolkit (CSTAT) project is to serve as the pathfinder for a fully automated trending system to support spacecraft constellations. The development approach to be taken is evolutionary. In the first year of the project, the intent is to significantly advance the state of the art in current trending systems through improved functionality and increased automation. In the second year, the intent is to add an expert system shell, likely through the adaptation of an existing commercial-off-the-shelf (COTS) or government-off-the-shelf (GOTS) tool to implement some level of the trending intelligence that humans currently provide in manual operations. In the third year, the intent is to infuse the resulting technology into a near-term constellation or formation-flying mission to test it and gain experience in automated trending. The lessons learned from the real missions operations experience will then be used to improve the system, and to ultimately incorporate it into a fully autonomous, closed-loop mission operations system that is truly capable of supporting large constellations. In this paper, the process of automating trend analysis for spacecraft constellations will be addressed. First, the results of a survey on automation in spacecraft mission operations in general, and in trending systems in particular will be presented to provide an overview of the current state of the art. Next, a rule-based model for implementing intelligent spacecraft subsystem trending will be then presented, followed by a survey of existing COTS/GOTS tools that could be adapted for implementing such a model. The baseline design and architecture of the CSTAT system will be presented. Finally, some results obtained from initial software tests and demonstrations will be presented.

Davis, George↗

Techniques for Improving Pilot Recovery from System Failures

This project examined the application of intelligent cockpit systems to aid air transport pilots at the tasks of reacting to in-flight system failures and of planning and then following a safe four dimensional trajectory to the runway threshold during emergencies. Two studies were conducted. The first examined pilot performance with a prototype awareness/alerting system in reacting to on-board system failures. In a full-motion, high-fidelity simulator, Army helicopter pilots were asked to fly a mission during which, without warning or briefing, 14 different failures were triggered at random times. Results suggest that the amount of information pilots require from such diagnostic systems is strongly dependent on their training; for failures they are commonly trained to react to with a procedural response, they needed only an indication of which failure to follow, while for 'un-trained' failures, they benefited from more intelligent and informative systems. Pilots were also found to over-rely on the system in conditions were it provided false or mis-leading information. In the second study, a proof-of-concept system was designed suitable for helping pilots replan their flights in emergency situations for quick, safe trajectory generation. This system is described in this report, including: the use of embedded fast-time simulation to predict the trajectory defined by a series of discrete actions; the models of aircraft and pilot dynamics required by the system; and the pilot interface. Then, results of a flight simulator evaluation with airline pilots are detailed. In 6 of 72 simulator runs, pilots were not able to establish a stable flight path on localizer and glideslope, suggesting a need for cockpit aids. However, results also suggest that, to be operationally feasible, such an aid must be capable of suggesting safe trajectories to the pilot; an aid that only verified plans entered by the pilot was found to have significantly detrimental effects on performance and pilot workload. Results also highlight that the trajectories suggested by the aid must capture the context of the emergency; for example, in some emergencies pilots were willing to violate flight envelope limits to reduce time in flight - in other emergencies the opposite was found.

Pritchett, Amy R.↗

Phase 1 Space Fission Propulsion System Testing and Development Progress

Successful development of space fission systems requires an extensive program of affordable and realistic testing. In addition to tests related to design/development of the fission system, realistic testing of the actual flight unit must also be performed. If the system is designed to operate within established radiation damage and fuel burn up limits while simultaneously being designed to allow close simulation of heat from fission using resistance heaters, high confidence in fission system performance and lifetime can be attained through a series of non-nuclear tests. The Safe Affordable Fission Engine (SAFE) test series, whose ultimate goal is the demonstration of a 300 kW flight configuration system, has demonstrated that realistic testing can be performed using non-nuclear methods. This test series, carried out in collaboration with other NASA centers, other government agencies, industry, and universities, successfully completed a testing program with a 30 kWt core, Stirling engine, and ion engine configuration. Additionally, a 100 kWt core is in fabrication and appropriate test facilities are being reconfigured. This paper describes the current SAFE non-nuclear tests, which includes test article descriptions, test results and conclusions, and future test plans.

VanDyke, Melissa↗

Hybrid Verification of an Interface for an Automatic Landing

Modern commercial aircraft have extensive automation which helps the pilot by performing computations, obtaining data, and completing procedural tasks. The pilot display must contain enough information so that the pilot can correctly predict the aircraft's behavior, while not overloading the pilot with unnecessary information. Human-automation interaction is currently evaluated through extensive simulation. In this paper, using both hybrid and discrete-event system techniques, we show how one could mathematically verify that an interface contains enough information for the pilot to safely and unambiguously complete a desired maneuver. We first develop a nonlinear, hybrid model for the longitudinal dynamics of a large civil jet aircraft in an autoland/go-around maneuver. We find the largest controlled subset of the aircraft's flight envelope for which we can guarantee both safe landing and safe go-around. We abstract a discrete procedural model using this result, and verify a discrete formulation of the pilot display against it. An interface which fails this verification could result in nondeterministic or unpredictable behavior from the pilot's point of view.

Oishi, Meeko↗

A Numerical Simulation Study to Develop an Acceptable Wake Encounter Boundary for a B737-100 Airplane

The National Aeronautics and Space Administration (NASA) is conducting research with the goal of enabling safe improvements in the capacity of the nation's air transportation system. The wake-vortex upset hazard is an important factor in establishing the minimum safe spacing between aircraft during landing and take-off operations, thus impacting airport capacity. A batch simulation study was conducted to assess the sensitivity of various safe landing criteria in the development of an acceptable wake encounter boundary. A baseline six-degree-of-freedom simulation of a B737-100 airplane was modified to include a wake model and the vortex-induced forces and moments. The guidance and control input for the airplane was provided by an auto-land system. The wake strength and encounter geometry were varied. A sensitivity study was also conducted to assess the effects of encounter modeling methods and accuracy.

Vicroy, Dan D.↗

Multiple Restart Testing of a Stainless Steel Sodium Heat Pipe Module

A heat pipe cooled reactor is one of several candidate reactor cores being considered for space power and propulsion systems to support future space exploration activities. Long life heat pipe modules. with designs verified through a combination of theoretical analysis and experimental evaluations. would be necessary to establish the viability of this option. A hardware-based program was initiated to begin experimental testing of components to verify compliance of proposed designs. To this end, a number of stainless steel/sodium heat pipe modules have been designed and fabricated to support experimental testing of a Safe Affordable Fission Engine (SAFE) project, a 100-kWt core design pursued jointly by the Marshall Space Flight Center and the Los Alamos National Laboratory. One of the SAFE heat pipe modules was successfully subjected to over 200 restarts. examining the behavior of multiple passive freeze/thaw operations. Typical operation included a 1-hour startup to an average evaporator temperature of 1000 K followed by a 15 minute hold at temperature. Nominal maximum input power during the hold period was 1.9 kW. Between heating cycles the module was cooled to less than 325 K, returning the sodium to a frozen state in preparation fop the next startup cycle.

Martin, James↗

The Role of Structural Dynamics and Testing in the Shuttle Flowliner Crack Investigation

During a normal inspection of the main propulsion system at Kennedy Space Center, small cracks were noticed near a slotted region of a gimbal joint flowliner located just upstream from one of the Space Shuttle Main Engines (SSME). These small cracks sparked an investigation of the entire Space Shuttle fleet main propulsion feedlines. The investigation was initiated to determine the cause of the small cracks and a repair method that would be needed to return the Shuttle fleet back to operation safely. The cracks were found to be initiated by structural resonance caused by flow fluctuations from the SSME low pressure fuel turbopump interacting with the flowliner. The pump induced backward traveling wakes that excited the liner and duct acoustics which also caused the liner to vibrate in complex mode shapes. The investigation involved an extensive effort by a team of engineers from the NASA civil servant and contractor workforce with the goal to characterize the root cause of the cracking behavior of the fuel side gimbal joint flowliners. In addition to working to identify the root cause, a parallel path was taken to characterize the material properties and fatigue capabilities of the liner material such that the life of the liners could be ascertained. As the characterization of the material and the most probable cause matured, the combination of the two with pump speed restrictions provided a means to return the Shuttle to flight in a safe manner. This paper traces the flowliner investigation results with respect to the structural dynamics analysis, component level testing and hot-fire flow testing on a static testbed. The paper will address the unique aspects of a very complex problem involving backflow from a high performance pump that has never been characterized nor understood to such detail. In addition, the paper will briefly address the flow phenomena that excited the liners, the unique structural dynamic modal characteristics and the variability of SSME operation which has ultimately ensured the safe and reliable operation of the shuttle main engines for each flight.

Frady, Gregory P.↗

Wake Vortex Tracking Using a 35 GHz Pulsed Doppler Radar

A 35 GHz, pulsed-Doppler radar system has been designed and assembled for wake vortex detection and tracking in low visibility conditions. Aircraft wake vortices continue to be an important factor in determining safe following distances or spacings for aircraft in the terminal area. Currently, under instrument meteorological conditions (IMC), aircraft adhere to conservative, fixed following-distance guidelines based primarily on aircraft weight classifications. When ambient conditions are such that vortices will either drift or dissipate, leaving the flight corridor clear, the prescribed spacings are unnecessarily long and result in decreased airport throughput. There is a potential for significant airport efficiency improvement, if a system can be employed to aid regulators and pilots in setting safe and efficient following distances based on airport conditions. The National Aeronautics and Space Administration (NASA), the Federal Aviation Agency, and Volpe National Transportation Systems Center have promoted and worked to develop systems that would increase airport capacity and provide for safe reductions in aircraft separation. The NASA Aircraft Vortex Spacing System (AVOSS), a wake vortex spacing system that can provide dynamic adjustment of spacings based on real-time airport weather conditions, has demonstrated that Lidar systems can be successfully used to detect and track vortices in clear air conditions. To fill the need for detection capability in low-visibility conditions, a 35 GHz, pulsed-Doppler radar system is being investigated for use as a complimentary, low-visibility sensor for wake vortices. The radar sensor provides spatial and temporal information similar to that provided by Lidar, but under weather conditions that a Lidar cannot penetrate. Currently, we are analyzing the radar design based upon the data and experience gained during the wake vortex Lidar deployment with AVOSS at Dallas/Fort Worth International Airport. As part of this study, two numerical models were utilized in system simulations. The results of this study improve our understanding of the method of detection, resolution requirements for range and azimuth, pulse compression, and performance prediction. Simulations applying pulse compression techniques show that detection is good in heavy fog to greater than 2000 m. Both compressed and uncompressed short pulses show the vortex structure. To explore operational challenges, siting and scanning strategies were also analyzed. Simulation results indicate that excellent wake vortex detection, tracking and classification is possible in drizzle (+15 dBZ) and heavy fog (- 13 dBZ) using short pulse techniques (<99ns) at ranges on the order of 900 m, with a modest power of 500 W output. At 1600 m, detection can be expected at reflectivities as low as -13 dBZ (heavy fog). The radar system, as designed and built, has the potential to support field studies of a wake vortex spacing system in low-visibility conditions ranging from heavy fog to rain, when sited within 2000m of the flight path.

Neece, Robert T.↗

Superalloy Disk With Dual-Grain Structure Spin Tested

Advanced nickel-base disk alloys for future gas turbine engines will require greater temperature capability than current alloys, but they must also continue to deliver safe, reliable operation. An advanced, nickel-base disk alloy, designated Alloy 10, was selected for evaluation in NASA s Ultra Safe Propulsion Project. Early studies on small test specimens showed that heat treatments that produced a fine grain microstructure promoted high strength and long fatigue life in the bore of a disk, whereas heat treatments that produced a coarse grain microstructure promoted optimal creep and crack growth resistance in the rim of a disk. On the basis of these results, the optimal combination of performance and safety might be achieved by utilizing a heat-treatment technology that could produce a fine grain bore and coarse grain rim in a nickel-base disk. Alloy 10 disks that were given a dual microstructure heat treatment (DMHT) were obtained from NASA s Ultra-Efficient Engine Technology (UEET) Program for preliminary evaluation. Data on small test specimens machined from a DMHT disk were encouraging. However, the benefit of the dual grain structure on the performance and reliability of the entire disk still needed to be demonstrated. For this reason, a high temperature spin test of a DMHT disk was run at 20 000 rpm and 1500 F at the Balancing Company of Dayton, Ohio, under the direction of NASA Glenn Research Center personnel. The results of that test showed that the DMHT disk exhibited significantly lower crack growth than a disk with a fine grain microstructure. In addition, the results of these tests could be accurately predicted using a two-dimensional, axisymmetric finite element analysis of the DMHT disk. Although the first spin test demonstrated a significant performance advantage associated with the DMHT technology, a second spin test on the DMHT disk was run to determine burst margin. The disk burst in the web at a very high speed, over 39 000 rpm, in line with the predicted location and speed. Furthermore, significant growth of the disk was observed before failure, in line with predictions, clearly demonstrating the reliability and safety of the DMHT technology. Although successful spin testing in Ultra Safe's Nickel Disk Program represents a significant milestone for DMHT technology, realistic engine operation will require repeated loading of a DMHT nickel disk. For this reason, a cyclic spin test study of DMHT nickel disk technology has been proposed to start in fiscal year 2003 under NASA's Aviation Safety Program. The goal of this program will be to determine the fatigue failure mechanism in DMHT nickel disks, thereby demonstrating the reliability and safety of DMHT technology under repetitive loading conditions encountered in realistic engine operation.

Gayda, John↗

Intelligent Pilot Aids for Flight Re-Planning in Emergencies

Effective and safe control of an aircraft may be difficult or nearly impossible for a pilot following an unexpected system failure. Without prior training, the pilot must ascertain on the fly those changes in both manual control technique and procedures that will lead to a safe landing of the aircraft. Sophisticated techniques for determining the required control techniques are now available. Likewise, a body of literature on pilot decision making provides formalisms for examining how pilots approach discrete decisions framed as the selection between options. However, other aspects of behavior, such as the task of route planning and guidance, are not as well studied. Not only is the pilot faced with possible performance changes to the aircraft dynamics, but he or she is also tasked to create a plan of actions that will effectively take the aircraft down to a safe landing. In this plan, the many actions that the pilot can perform are closely intertwined with the trajectory of the aircraft, making it difficult to accurately predict the final outcome. Coupled with the vast number of potential actions to be taken, this problem may seem intractable. This is reflected in the lack of a pre-specified procedure capable of giving pilots the ability to find a resolution for this task. This report summarizes a multi-year effort to examine methods to aid pilots in planning an approach and arrival to an airport following an aircraft systems failure. Ultimately, we hypothesize that automatic assistance to pilots can be provided in real-time in the form of improving pilot control of a damaged aircraft and providing pilots with procedural directives suitable for critical flight conditions; such systems may also benefit pilot training and procedure design. To achieve this result, a systematic, comprehensive research program was followed, building on prior research. This approach included a pencil-and-paper study with airline pilots examining methods of representing a flight route in an immediately understandable manner, and in a manner that would allow the pilot to modify an automatically-generated route and/or detect any inappropriate elements in an automatically-generated route. Likewise, a flight simulator study examined different cockpit systems for the relative merits of providing pilots with any of a variety of automated functions for emergency flight planning. The results provide specific guidance for the design of such systems.

Pritchett, Amy R.↗

Making space nuclear power a reality

Our current space exploration missions are power limited. Space nuclear reactors could provide the power for both onboard electrical power and propulsion to enable a new generation of space science and exploration. Implementing a mission using a space nuclear reactor presents many technical challenges. However, nuclear technologies are safely and reliably used throughout U.S. industries and the Government. Well-defined processes and regulations currently exist for the use of nuclear technologies in space or any other application. These processes and regulations assure safe, reliable use of nuclear technology in a manner that protects the public and the environment. The question is not one of choosing between safety and space science, but of investing in a technology that includes rigorous processes and procedures to assure safe.

nuclear↗

Fault protection techniques in JPL Spacecraft

While every JPL spacecraft requires some unique mission specific fault protection, there are many requirements which are common to all spacecraft configurations. These consist of protecting command and data processing & attitude control computers, protection against communication loss with the spacecraft, ensuring that safe external and internal temperature levels are maintained, and recovery from power overloads. Additionally, most JPL spacecraft are equipped with a general-purpose 'Safe Mode' response algorithm which configures the spacecraft to a lower power state which is safe and predictable so that diagnosis of more complex faults can be addressed by the Operations Team. This paper details the generic application of fault protection techniques which are implemented into most JPL spacecraft designs.

fault protection↗

Fission Surface Power for the Exploration and Colonization of Mars

The colonization of Mars will require abundant energy. One potential energy source is nuclear fission. Terrestrial fission systems are highly developed and have the demonstrated ability to safely produce tremendous amounts of energy. In space, fission systems not only have the potential to safely generate tremendous amounts of energy, but could also potentially be used on missions where alternatives are not practical. Programmatic risks such as cost and schedule are potential concerns with fission surface power (FSP) systems. To be mission enabling, FSP systems must be affordable and programmatic risk must be kept acceptably low to avoid jeopardizing exploration efforts that may rely on FSP. Initial FSP systems on Mars could be "workhorse" units sized to enable the establishment of a Mars base and the early growth of a colony. These systems could be nearly identical to FSP systems used on the moon. The systems could be designed to be safe, reliable, and have low development and recurring costs. Systems could also be designed to fit on relatively small landers. One potential option for an early Mars FSP system would be a 100 kWt class, NaK cooled system analogous to space reactors developed and flown under the U.S. "SNAP" program or those developed and flown by the former Soviet Union ("BUK" reactor). The systems could use highly developed fuel and materials. Water and Martian soil could be used to provide shielding. A modern, high-efficiency power conversion subsystem could be used to reduce required reactor thermal power. This, in turn, would reduce fuel burnup and radiation damage .effects by reducing "nuclear" fuels and materials development costs. A realistic, non-nuclear heated and fully integrated technology demonstration unit (TDU) could be used to reduce cost and programmatic uncertainties prior to initiating a flight program.

Houts, Mike↗

Hypergol Systems: Design, Buildup, and Operation

This course was developed by personnel at the NASA JSC White Sands Test Facility in conjunction with the NASA Safety Training Center (NSTC). The NSTC was established in May 1991 by the NASA Headquarters Safety Directorate to provide up-to-date, high-quality, NASA specific safety training on location at NASA centers, or simultaneously to multiple centers over the Video Teleconferencing System (ViTS). Our desire is to establish and maintain a strong, long-lasting relationship with all NASA centers in order to fulfill your safety training needs on a cost-effective basis. Our ultimate goal is to provide a positive contribution to safe operations at NASA. NSTC Course 055 is a 2-day course discussing the safe usage of hypergols (hydrazine fuels and nitrogen tetroxide). During the course we will identify the hazards associated with hypergols including toxicity, reactivity, fire, and explosion. Management of risk is discussed in terms of the primary engineering controls design, buildup, and operation; and secondary controls personal protective equipment and detectors/monitors. The emphasis is on the design and buildup of compatible systems and the safe operation of these systems by technicians and engineers.

Baker, David↗

Trade Studies of Space Launch Architectures using Modular Probabilistic Risk Analysis

A top-down risk assessment in the early phases of space exploration architecture development can provide understanding and intuition of the potential risks associated with new designs and technologies. In this approach, risk analysts draw from their past experience and the heritage of similar existing systems as a source for reliability data. This top-down approach captures the complex interactions of the risk driving parts of the integrated system without requiring detailed knowledge of the parts themselves, which is often unavailable in the early design stages. Traditional probabilistic risk analysis (PRA) technologies, however, suffer several drawbacks that limit their timely application to complex technology development programs. The most restrictive of these is a dependence on static planning scenarios, expressed through fault and event trees. Fault trees incorporating comprehensive mission scenarios are routinely constructed for complex space systems, and several commercial software products are available for evaluating fault statistics. These static representations cannot capture the dynamic behavior of system failures without substantial modification of the initial tree. Consequently, the development of dynamic models using fault tree analysis has been an active area of research in recent years. This paper discusses the implementation and demonstration of dynamic, modular scenario modeling for integration of subsystem fault evaluation modules using the Space Architecture Failure Evaluation (SAFE) tool. SAFE is a C++ code that was originally developed to support NASA s Space Launch Initiative. It provides a flexible framework for system architecture definition and trade studies. SAFE supports extensible modeling of dynamic, time-dependent risk drivers of the system and functions at the level of fidelity for which design and failure data exists. The approach is scalable, allowing inclusion of additional information as detailed data becomes available. The tool performs a Monte Carlo analysis to provide statistical estimates. Example results of an architecture system reliability study are summarized for an exploration system concept using heritage data from liquid-fueled expendable Saturn V/Apollo launch vehicles.

Mathias, Donovan L.↗

Robotics

Lunar robotic functions include: 1. Transport of crew and payloads on the surface of the moon; 2. Offloading payloads from a lunar lander; 3. Handling the deployment of surface systems; with 4. Human commanding of these functions from inside a lunar vehicle, habitat, or extravehicular (space walk), with Earth-based supervision. The systems that will perform these functions may not look like robots from science fiction. In fact, robotic functions may be automated trucks, cranes and winches. Use of this equipment prior to the crew s arrival or in the potentially long periods without crews on the surface, will require that these systems be computer controlled machines. The public release of NASA's Exploration plans at the 2nd Space Exploration Conference (Houston, December 2006) included a lunar outpost with as many as four unique mobility chassis designs. The sequence of lander offloading tasks involved as many as ten payloads, each with a unique set of geometry, mass and interface requirements. This plan was refined during a second phase study concluded in August 2007. Among the many improvements to the exploration plan were a reduction in the number of unique mobility chassis designs and a reduction in unique payload specifications. As the lunar surface system payloads have matured, so have the mobility and offloading functional requirements. While the architecture work continues, the community can expect to see functional requirements in the areas of surface mobility, surface handling, and human-systems interaction as follows: Surface Mobility 1. Transport crew on the lunar surface, accelerating construction tasks, expanding the crew s sphere of influence for scientific exploration, and providing a rapid return to an ascent module in an emergency. The crew transport can be with an un-pressurized rover, a small pressurized rover, or a larger mobile habitat. 2. Transport Extra-Vehicular Activity (EVA) equipment and construction payloads. 3. Transport habitats and power modules over long distances, pre-positioning them for the arrival of crew on a subsequent lander. Surface Handling 1. Offload surface system payloads from the lander, breaking launch restraints and power/data connections. Payloads may be offloaded to a wheeled vehicle for transport. 2. Deploy payloads from a wheeled vehicle at a field site, placing the payloads in their final use site on the ground or mating them with existing surface systems. 3. Support regolith collection, site preparation, berm construction, or other civil engineering tasks using tools and implements attached to rovers. Human-Systems Interaction 1. Provide a safe command and control interface for suited EVA to ride on and drive the vehicles, making sure that the systems are also safe for working near dismounted crew. 2. Provide an effective control system for IV crew to tele-operate vehicles, cranes and other equipment from inside the surface habitats with evolving independence from Earth. .. Provide a supervisory system that allows machines to be commanded from the ground, working across the Earth-Lunar time delays on the order of 5-10 seconds (round trip) to support operations when crew are not resident on the surface. Technology Development Needs 1. Surface vehicles that can dock, align and mate with outpost equipment such as landers, habitats and fluid/power interfaces. 2. Long life motors, drive trains, seals, motor electronics, sensors, processors, cable harnesses, and dash board displays. 3. Active suspension control, localization, high speed obstacle avoidance, and safety systems for operating near dismounted crew. 4. High specific energy and specific power batteries that are safe, rechargeable, and long lived.

Ambrose, Robert O.↗

Aerial Deployment and Inflation System for Mars Helium Balloons

A method is examined for safely deploying and inflating helium balloons for missions at Mars. The key for making it possible to deploy balloons that are light enough to be buoyant in the thin, Martian atmosphere is to mitigate the transient forces on the balloon that might tear it. A fully inflated Mars balloon has a diameter of 10 m, so it must be folded up for the trip to Mars, unfolded upon arrival, and then inflated with helium gas in the atmosphere. Safe entry into the Martian atmosphere requires the use of an aeroshell vehicle, which protects against severe heating and pressure loads associated with the hypersonic entry flight. Drag decelerates the aeroshell to supersonic speeds, then two parachutes deploy to slow the vehicle down to the needed safe speed of 25 to 35 m/s for balloon deployment. The parachute system descent dynamic pressure must be approximately 5 Pa or lower at an altitude of 4 km or more above the surface.

Lachenmeler, Tim↗

Protecting Against Faults in JPL Spacecraft

A paper discusses techniques for protecting against faults in spacecraft designed and operated by NASA s Jet Propulsion Laboratory (JPL). The paper addresses, more specifically, fault-protection requirements and techniques common to most JPL spacecraft (in contradistinction to unique, mission specific techniques), standard practices in the implementation of these techniques, and fault-protection software architectures. Common requirements include those to protect onboard command, data-processing, and control computers; protect against loss of Earth/spacecraft radio communication; maintain safe temperatures; and recover from power overloads. The paper describes fault-protection techniques as part of a fault-management strategy that also includes functional redundancy, redundant hardware, and autonomous monitoring of (1) the operational and health statuses of spacecraft components, (2) temperatures inside and outside the spacecraft, and (3) allocation of power. The strategy also provides for preprogrammed automated responses to anomalous conditions. In addition, the software running in almost every JPL spacecraft incorporates a general-purpose "Safe Mode" response algorithm that configures the spacecraft in a lower-power state that is safe and predictable, thereby facilitating diagnosis of more complex faults by a team of human experts on Earth.

Morgan, Paula↗