Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Criticality Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,027 records · Page 57
All sourcesNASA NTRSDOE OSTI
NASA NTRS2010

High-Intensity Radiated Field Fault-Injection Experiment for a Fault-Tolerant Distributed Communication System

Safety-critical distributed flight control systems require robustness in the presence of faults. In general, these systems consist of a number of input/output (I/O) and computation nodes interacting through a fault-tolerant data communication system. The communication system transfers sensor data and control commands and can handle most faults under typical operating conditions. However, the performance of the closed-loop system can be adversely affected as a result of operating in harsh environments. In particular, High-Intensity Radiated Field (HIRF) environments have the potential to cause random fault manifestations in individual avionic components and to generate simultaneous system-wide communication faults that overwhelm existing fault management mechanisms. This paper presents the design of an experiment conducted at the NASA Langley Research Center's HIRF Laboratory to statistically characterize the faults that a HIRF environment can trigger on a single node of a distributed flight control system.

Yates, Amy M.↗
NASA NTRS2004

Fastener Retention Requirements and Practices in Spaceflight Hardware

This presentation reviews the requirements for safety critical fasteners in spaceflight hardware. Included in the presentation are design guidelines and information for Locking Helicoils, key locked inserts and thinwalled inserts, self locking screws and bolts. locknuts, and a locking adhesives, Loctite and Vibratite.

Dasgupta, Rajib↗
NASA NTRS2011

NASA Tech Briefs, January 2011

The topics include: 1) Distributed Aerodynamic Sensing and Processing Toolbox; 2) Collaborative Supervised Learning for Sensor Networks; 3) Hazard Detection Software for Lunar Landing; 4) Onboard Nonlinear Engine Sensor and Component Fault Diagnosis and Isolation Scheme; 5) Network-Capable Application Process and Wireless Intelligent Sensors for ISHM; 6) Interface Supports Multiple Broadcast Transceivers for Flight Applications; 7) FPGA Sequencer for Radar Altimeter Applications; 8) Miniature Sapphire Acoustic Resonator - MSAR; 9) Process-Hardened, Multi-Analyte Sensor for Characterizing Rocket Plume Constituents; 10) SAD5 Stereo Correlation Line-Striping in an FPGA; 11) Hybrid Composite Cryogenic Tank Structure; 12) Nanoscale Deformable Optics; 13) Reliability-Based Design Optimization of a Composite Airframe Component; 14) Zinc Oxide Nanowire Interphase for Enhanced Lightweight Polymer Fiber Composites; 15) Plasma Igniter for Reliable Ignition of Combustion in Rocket Engines; 16) Wire Test Grip Fixture; 17) A Sub-Hertz, Low-Frequency Vibration Isolation Platform; 18) Carbon Nanofibers Synthesized on Selective Substrates for Nonvolatile Memory and 3D Electronics; 19) Nanoparticle/Polymer Nanocomposite Bond Coat or Coating; 20) High-Resolution Wind Measurements for Offshore Wind Energy Development; 21) Spring Tire; 22) Marsviewer 2008; 23) Mission Services Evolution Center Message Bus; 24) Major Constituents Analysis for the Vehicle Cabin Atmosphere Monitor; 25) Astronaut Health Participant Summary Application; 26) Adaption of the AMDIS Method to Flight Status on the VCAM Instrument; 27) Natural Language Interface for Safety Certification of Safety-Critical Software; 28) Cryogenic Caging for Science Instrumentation; 29) Wide-Range Neutron Detector for Space Nuclear Applications; 30) In Situ Guided Wave Structural Health Monitoring System; 31) Multiplexed Energy Coupler for Rotating Equipment; 32) Attitude Estimation in Fractionated Spacecraft Cluster Systems; 33) Full Piezoelectric Multilayer-Stacked Hybrid Actuation/Transduction Systems; 34) Active Flow Effectors for Noise and Separation Control; 35) Method and System for Temporal Filtering in Video Compression Systems; 36) Apparatus for Measuring Total Emissivity of Small, Low-Emissivity Samples; 37) Multiple-Zone Diffractive Optic Element for Laser Ranging Applications; 38) Simplified Architecture for Precise Aiming of a Deep-Space Communication Laser Transceiver; 39) Two-Photon-Absorption Scheme for Optical Beam Tracking; 40) High-Sensitivity, Broad-Range Vacuum Gauge Using Nanotubes for Micromachined Cavities; 41) Wide-Field Optic for Autonomous Acquisition of Laser Link; 42) Extracting Zero-Gravity Surface Figure of a Mirror; 43) Modeling Electromagnetic Scattering From Complex Inhomogeneous Objects; 44) Visual Object Recognition and Tracking of Tools; 45) Method for Implementing Optical Phase Adjustment; 46) Visual SLAM Using Variance Grid Maps; 47) Rapid Calculation of Spacecraft Trajectories Using Efficient Taylor Series Integration; 48) Efficient Kriging Algorithms; 49) Predicting Spacecraft Trajectories by the WeavEncke Method; 50) An Augmentation of G-Guidance Algorithms; 51) Comparison of Aircraft Icing Growth Assessment Software; 52) Silicon-Germanium Voltage-Controlled Oscillator at 105 GHz; 53) Estimation of Coriolis Force and Torque Acting on Ares-1; 54) Null Lens Assembly for X-Ray Mirror Segments; and 55) High-Precision Pulse Generator.

Source record↗
NASA NTRS2010

Passing the Baton: An Experimental Study of Shift Handover

Shift handovers occur in many safety-critical environments, including aviation maintenance, medicine, air traffic control, and mission control for space shuttle and space station operations. Shift handovers are associated with increased risk of communication failures and human error. In dynamic industries, errors and accidents occur disproportionately after shift handover. Typical shift handovers involve transferring information from an outgoing shift to an incoming shift via written logs, or in some cases, face-to-face briefings. The current study explores the possibility of improving written communication with the support modalities of audio and video recordings, as well as face-to-face briefings. Fifty participants participated in an experimental task which mimicked some of the critical challenges involved in transferring information between shifts in industrial settings. All three support modalities, face-to-face, video, and audio recordings, reduced task errors significantly over written communication alone. The support modality most preferred by participants was face-to-face communication; the least preferred was written communication alone.

Parke, Bonny↗
NASA NTRS2011

Concept Development for Software Health Management

This report documents the work performed by Lockheed Martin Aeronautics (LM Aero) under NASA contract NNL06AA08B, delivery order NNL07AB06T. The Concept Development for Software Health Management (CDSHM) program was a NASA funded effort sponsored by the Integrated Vehicle Health Management Project, one of the four pillars of the NASA Aviation Safety Program. The CD-SHM program focused on defining a structured approach to software health management (SHM) through the development of a comprehensive failure taxonomy that is used to characterize the fundamental failure modes of safety-critical software.

Riecks, Jung↗
NASA NTRS2010

Accelerated Aging System for Prognostics of Power Semiconductor Devices

Prognostics is an engineering discipline that focuses on estimation of the health state of a component and the prediction of its remaining useful life (RUL) before failure. Health state estimation is based on actual conditions and it is fundamental for the prediction of RUL under anticipated future usage. Failure of electronic devices is of great concern as future aircraft will see an increase of electronics to drive and control safety-critical equipment throughout the aircraft. Therefore, development of prognostics solutions for electronics is of key importance. This paper presents an accelerated aging system for gate-controlled power transistors. This system allows for the understanding of the effects of failure mechanisms, and the identification of leading indicators of failure which are essential in the development of physics-based degradation models and RUL prediction. In particular, this system isolates electrical overstress from thermal overstress. Also, this system allows for a precise control of internal temperatures, enabling the exploration of intrinsic failure mechanisms not related to the device packaging. By controlling the temperature within safe operation levels of the device, accelerated aging is induced by electrical overstress only, avoiding the generation of thermal cycles. The temperature is controlled by active thermal-electric units. Several electrical and thermal signals are measured in-situ and recorded for further analysis in the identification of leading indicators of failures. This system, therefore, provides a unique capability in the exploration of different failure mechanisms and the identification of precursors of failure that can be used to provide a health management solution for electronic devices.

Celaya, Jose R.↗
NASA NTRS2011

Distributed Monitoring of the R(sup 2) Statistic for Linear Regression

The problem of monitoring a multivariate linear regression model is relevant in studying the evolving relationship between a set of input variables (features) and one or more dependent target variables. This problem becomes challenging for large scale data in a distributed computing environment when only a subset of instances is available at individual nodes and the local data changes frequently. Data centralization and periodic model recomputation can add high overhead to tasks like anomaly detection in such dynamic settings. Therefore, the goal is to develop techniques for monitoring and updating the model over the union of all nodes data in a communication-efficient fashion. Correctness guarantees on such techniques are also often highly desirable, especially in safety-critical application scenarios. In this paper we develop DReMo a distributed algorithm with very low resource overhead, for monitoring the quality of a regression model in terms of its coefficient of determination (R2 statistic). When the nodes collectively determine that R2 has dropped below a fixed threshold, the linear regression model is recomputed via a network-wide convergecast and the updated model is broadcast back to all nodes. We show empirically, using both synthetic and real data, that our proposed method is highly communication-efficient and scalable, and also provide theoretical guarantees on correctness.

Bhaduri, Kanishka↗
NASA NTRS2011

Stratway: A Modular Approach to Strategic Conflict Resolution

In this paper we introduce Stratway, a modular approach to finding long-term strategic resolutions to conflicts between aircraft. The modular approach provides both advantages and disadvantages. Our primary concern is to investigate the implications on the verification of safety-critical properties of a strategic resolution algorithm. By partitioning the problem into verifiable modules much stronger verification claims can be established. Since strategic resolution involves searching for solutions over an enormous state space, Stratway, like most similar algorithms, searches these spaces by applying heuristics, which present especially difficult verification challenges. An advantage of a modular approach is that it makes a clear distinction between the resolution function and the trajectory generation function. This allows the resolution computation to be independent of any particular vehicle. The Stratway algorithm was developed in both Java and C++ and is available through a open source license. Additionally there is a visualization application that is helpful when analyzing and quickly creating conflict scenarios.

Hagen, George E.↗
NASA NTRS2011

Bayesian Software Health Management for Aircraft Guidance, Navigation, and Control

Modern aircraft, both piloted fly-by-wire commercial aircraft as well as UAVs, more and more depend on highly complex safety critical software systems with many sensors and computer-controlled actuators. Despite careful design and V&V of the software, severe incidents have happened due to malfunctioning software. In this paper, we discuss the use of Bayesian networks (BNs) to monitor the health of the on-board software and sensor system, and to perform advanced on-board diagnostic reasoning. We will focus on the approach to develop reliable and robust health models for the combined software and sensor systems.

Schumann, Johann↗
NASA NTRS2011

Lockout/Tagout (LOTO) Simulator

The Lockout/Tagout (LOTO) Simulator is a portable training aid, or demonstration tool, designed to physically illustrate real-time critical-safety concepts of electrical lockout/tagout. The objective is to prevent misinterpretations of what is off and what is on during maintenance and repair of complex electrical systems. The simulator is designed in the form of a hinged box that opens up and stands on its own as an easel for demonstrations. On the outer face of the unit is a simulated circuit breaker box housing the switches. The breakers control the main power to the unit, a light bulb, and an electrical control cabinet. The light bulb is wired so that either of two breakers can provide power to it. When power is sent to the electrical control cabinet, a red indicator light illuminates. Inside the cabinet is the power supply from a personal computer. The power supply produces a 12-V dc output that is sent over to a small fan next to it, also from a computer, and an amber light on the front of the cabinet illuminates. A separate switch powers the fan on and off. The power supply is behind a plastic shield to protect against exposure to live conductors. Electrical banana jacks are mounted in the plastic shield to allow a voltmeter to be connected safely when opening the cabinet and taking a meter reading to verify de-energization as part of a simulation exercise. This LOTO simulator prototype is designed and fabricated as an all-in-one unit. All accessories can be stored inside the hinged case, and there is a handle on top for ease of transport. The circuit breaker labels attach with hook and loop fasteners so that they may be moved and changed to fit the training or demonstration scenario. The warning signs and labels on the electrical control box are magnetic, allowing for easy reconfiguration to emulate different equipment setups. A specially designed magnetic cover was made to disguise the indicator lights for demonstrations when these indicators are not used. The cover is disguised as an arc flash safety label that would typically be found on such a cabinet. One indicator light has a separate switch that can take it offline. This is to allow for demonstration to trainees on why it is important not to completely rely on indicator lights, but that they should always take a meter reading at the exposed conductors to absolutely verify de-energization before exposure. A clear plastic barrier and banana jacks inside the cabinet provide a safe way to plug in a voltmeter for demonstrations without exposure to the hazards of energized equipment. A small remote control unit is wired into the fan circuit. The remote allows the demonstrator to turn the fan on and off, provided that all of the breakers and switches leading to it are configured on as well. The remote feature was added in order to demonstrate the importance of starting the lockout/tagout task with energized equipment, then powering it down, isolating it, and locking it out to ensure that the correct breakers have been locked out.

Scheer, Jennifer↗
NASA NTRS2011

Automated Test Case Generation for an Autopilot Requirement Prototype

Designing safety-critical automation with robust human interaction is a difficult task that is susceptible to a number of known Human-Automation Interaction (HAI) vulnerabilities. It is therefore essential to develop automated tools that provide support both in the design and rapid evaluation of such automation. The Automation Design and Evaluation Prototyping Toolset (ADEPT) enables the rapid development of an executable specification for automation behavior and user interaction. ADEPT supports a number of analysis capabilities, thus enabling the detection of HAI vulnerabilities early in the design process, when modifications are less costly. In this paper, we advocate the introduction of a new capability to model-based prototyping tools such as ADEPT. The new capability is based on symbolic execution that allows us to automatically generate quality test suites based on the system design. Symbolic execution is used to generate both user input and test oracles user input drives the testing of the system implementation, and test oracles ensure that the system behaves as designed. We present early results in the context of a component in the Autopilot system modeled in ADEPT, and discuss the challenges of test case generation in the HAI domain.

Giannakopoulou, Dimitra↗
NASA NTRS2011

Integrated Software Health Management for Aircraft GN and C

Modern aircraft rely heavily on dependable operation of many safety-critical software components. Despite careful design, verification and validation (V&V), on-board software can fail with disastrous consequences if it encounters problematic software/hardware interaction or must operate in an unexpected environment. We are using a Bayesian approach to monitor the software and its behavior during operation and provide up-to-date information about the health of the software and its components. The powerful reasoning mechanism provided by our model-based Bayesian approach makes reliable diagnosis of the root causes possible and minimizes the number of false alarms. Compilation of the Bayesian model into compact arithmetic circuits makes SWHM feasible even on platforms with limited CPU power. We show initial results of SWHM on a small simulator of an embedded aircraft software system, where software and sensor faults can be injected.

Schumann, Johann↗
NASA NTRS2012

Use of Commercial Electrical, Electronic and Electromechanical (EEE) Parts in NASA's Commercial Crew Program (CCP)

NASA's Commercial Crew and Cargo Program (CCP) is stimulating efforts within the private sector to develop and demonstrate safe, reliable, and cost-effective space transportation capabilities. One initiative involves investigating the use of commercial electronic parts. NASA's CCP asked the NASA Engineering and Safety Center (NESC) to collect data to help frame the technical, cost, and schedule risk trades associated with electrical, electronic and electromechanical (EEE) parts selection and specifically expressed desire of some of the CCP partners to employ EEE parts of a lower grade than traditionally used in most NASA safety-critical applications. This document contains the outcome from the NESC's review and analyses.

Gonzalex, Oscar↗
NASA NTRS2012

Damage Tolerance Assessment of Friction Pull Plug Welds

Friction stir welding is a solid state welding process developed and patented by The Welding Institute in Cambridge, England. Friction stir welding has been implemented in the aerospace industry in the fabrication of longitudinal welds in pressurized cryogenic propellant tanks. As the industry looks to implement friction stir welding in circumferential welds in pressurized cryogenic propellant tanks, techniques to close out the termination hole associated with retracting the pin tool are being evaluated. Friction pull plug welding is under development as a one means of closing out the termination hole. A friction pull plug weld placed in a friction stir weld results in a non-homogenous weld joint where the initial weld, plug weld, their respective heat affected zones and the base metal all interact. The welded joint is a composite, plastically deformed material system with a complex residual stress field. In order to address damage tolerance concerns associated with friction plug welds in safety critical structures, such as propellant tanks, nondestructive inspection and proof testing may be required to screen hardware for mission critical defects. The efficacy of the nondestructive evaluation or the proof test is based on an assessment of the critical flaw size in the test or service environments. Test data relating residual strength capability to flaw size in two aluminum alloy friction plug weld configurations is presented.

McGill, Preston↗
NASA NTRS2012

Damage Tolerance Assessment of Friction Pull Plug Welds in an Aluminum Alloy

Friction stir welding is a solid state welding process used in the fabrication of cryogenic propellant tanks. Self-reacting friction stir welding is one variation of the friction stir weld process being developed for manufacturing tanks. Friction pull plug welding is used to seal the exit hole that remains in a circumferential self-reacting friction stir weld. A friction plug weld placed in a self-reacting friction stir weld results in a non-homogenous weld joint where the initial weld, plug weld, their respective heat affected zones and the base metal all interact. The welded joint is a composite plastically deformed material system with a complex residual stress field. In order to address damage tolerance concerns associated with friction plug welds in safety critical structures, such as propellant tanks, nondestructive inspection and proof testing may be required to screen hardware for mission critical defects. The efficacy of the nondestructive evaluation or the proof test is based on an assessment of the critical flaw size. Test data relating residual strength capability to flaw size in an aluminum alloy friction plug weld will be presented.

McGill, Preston↗
NASA NTRS2012

Design of Low Complexity Model Reference Adaptive Controllers

Flight research experiments have demonstrated that adaptive flight controls can be an effective technology for improving aircraft safety in the event of failures or damage. However, the nonlinear, timevarying nature of adaptive algorithms continues to challenge traditional methods for the verification and validation testing of safety-critical flight control systems. Increasingly complex adaptive control theories and designs are emerging, but only make testing challenges more difficult. A potential first step toward the acceptance of adaptive flight controllers by aircraft manufacturers, operators, and certification authorities is a very simple design that operates as an augmentation to a non-adaptive baseline controller. Three such controllers were developed as part of a National Aeronautics and Space Administration flight research experiment to determine the appropriate level of complexity required to restore acceptable handling qualities to an aircraft that has suffered failures or damage. The controllers consist of the same basic design, but incorporate incrementally-increasing levels of complexity. Derivations of the controllers and their adaptive parameter update laws are presented along with details of the controllers implementations.

Hanson, Curt↗
NASA NTRS2012

Damage Tolerance Behavior of Friction Stir Welds in Aluminum Alloys

Friction stir welding is a solid state welding process used in the fabrication of various aerospace structures. Self-reacting and conventional friction stir welding are variations of the friction stir weld process employed in the fabrication of cryogenic propellant tanks which are classified as pressurized structure in many spaceflight vehicle architectures. In order to address damage tolerance behavior associated with friction stir welds in these safety critical structures, nondestructive inspection and proof testing may be required to screen hardware for mission critical defects. The efficacy of the nondestructive evaluation or the proof test is based on an assessment of the critical flaw size. Test data describing fracture behavior, residual strength capability, and cyclic mission life capability of friction stir welds at ambient and cryogenic temperatures have been generated and will be presented in this paper. Fracture behavior will include fracture toughness and tearing (R-curve) response of the friction stir welds. Residual strength behavior will include an evaluation of the effects of lack of penetration on conventional friction stir welds, the effects of internal defects (wormholes) on self-reacting friction stir welds, and an evaluation of the effects of fatigue cycled surface cracks on both conventional and selfreacting welds. Cyclic mission life capability will demonstrate the effects of surface crack defects on service load cycle capability. The fracture data will be used to evaluate nondestructive inspection and proof test requirements for the welds.

McGill, Preston↗
NASA NTRS2012

Control and Non-Payload Communications Links for Integrated Unmanned Aircraft Operations

Technology for unmanned aircraft has advanced so rapidly in recent years that many new applications to public and commercial use are being proposed and implemented. In many countries, emphasis is now being placed on developing the means to allow unmanned aircraft to operate within non-segregated airspace along with commercial, cargo and other piloted and passenger-carrying aircraft.In the U.S., Congress has mandated that the Federal Aviation Administration reduce and remove restrictions on unmanned aircraft operations in a relatively short time frame. To accomplish this, a number of technical and regulatory hurdles must be overcome. A key hurdle involve the communications link connecting the remote pilot located at a ground control station with the aircraft in the airspace, referred to as the Control and Non-Payload Communications (CNPC) link. This link represents a safety critical communications link, and thus requires dedicated and protected aviation spectrum as well as national and international standards defining the operational requirements the CNPC system. The CNPC link must provide line-of-site (LOS) communications, primarily through a ground-based communication system, and beyond-line-of-sight (BLOS) communication achieved using satellite communications. In the U.S., the National Aeronautics and Space Administration (NASA) is charged with providing the technical body of evidence to support spectrum allocation requirements and national and international standards development for the CNPC link. This paper provides a description of the CNPC system, an overview of NASA's CNPC project, and current results in technology assessment, air-ground propagation characterization, and supporting system studies and analyses will be presented.

Kerczewski, Robert J.↗