Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “hardware failure”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,027 records · Page 57

DRS: Derivational Reasoning System

The high reliability requirements for airborne systems requires fault-tolerant architectures to address failures in the presence of physical faults, and the elimination of design flaws during the specification and validation phase of the design cycle. Although much progress has been made in developing methods to address physical faults, design flaws remain a serious problem. Formal methods provides a mathematical basis for removing design flaws from digital systems. DRS (Derivational Reasoning System) is a formal design tool based on advanced research in mathematical modeling and formal synthesis. The system implements a basic design algebra for synthesizing digital circuit descriptions from high level functional specifications. DRS incorporates an executable specification language, a set of correctness preserving transformations, verification interface, and a logic synthesis interface, making it a powerful tool for realizing hardware from abstract specifications. DRS integrates recent advances in transformational reasoning, automated theorem proving and high-level CAD synthesis systems in order to provide enhanced reliability in designs with reduced time and cost.

Bose, Bhaskar↗

Collision avoidance for CTV: Requirements and capabilities

Cargo transfer vehicle (CTV) operations near Space Station Freedom will require positive collision avoidance maneuver (CAM) capability to preclude any change of collision, even in the event of CTV failures. The requirements for CAM are discussed, and the CAM design approach and design of the Orbiting Maneuvering Vehicle (OMV) are reviewed; this design met requirements for OMV operation near the Space Station, provided a redundant collision avoidance maneuver capability. Significant portions of the OMV CAM design should be applicable to CTV. The key features of the OMV design are summarized and related to the CTV mission design to that of OMV's. CAM is a defined sequence of events executed by the CTV to place the vehicle in a safe position relative to a target such as the Space Station. CAM can be performed through software commands to the propulsion system, or through commands pre-stored in hardware. Various techniques for triggering CAM are considered, and the risks associated with CAM enable and execution in phases are considered. OMV CAM design features both hardware and software CAM capability, with analyses conducted to assess the ability to meet the collision-free requirement during all phases of the mission.

Nosek, Thomas P.↗

Restoring Redundancy to the MAP Propulsion System

The Microwave Anisotropy Probe is a follow-on to the Differential Microwave Radiometer instrument on the Cosmic Background Explorer. Sixteen months before launch, it was discovered that from the time of the critical design review, configuration changes had resulted in a significant migration of the spacecraft's center of mass. As a result, the spacecraft no longer had a viable backup control mode in the event of a failure of the negative pitch axis thruster. Potential solutions to this problem were identified, such as adding thruster plume shields to redirect thruster torque, adding mass to, or removing it from, the spacecraft, adding an additional thruster, moving thrusters, bending thrusters (either nozzles or propellant tubing), or accepting the loss of redundancy for the thruster. The impacts of each solution, including effects on the mass, cost, and fuel budgets, as well as schedule, were considered, and it was decided to bend the thruster propellant tubing of the two roll control thrusters, allowing that pair to be used for back-up control in the negative pitch axis. This paper discusses the problem and the potential solutions, and documents the hardware and software changes that needed to be made to implement the chosen solution. Flight data is presented to show the propulsion system on-orbit performance.

ODonnell, James R., Jr.↗

Holistic Design for Total Product Well Being

Recent hardware development work at NASA's Marshall Space Flight Center creates and argument for the use of a holistic design approach as opposed to a piece part design approach. A piece part design approach being one where individual pieces are developed to their finished state having to meet certain interface and human engineering requirements without much consideration to the final product as a whole. A holistic design approach being one where the final product is evaluated early and frequently during the design process, and individual parts are developed with consideration to how they interact a whole,and how they interact with the user and environment. Examples from the development of the Materials Science Research Rack - 1 will illustrate: a design failure due to piece part design; a design save, due to a failure of piece part design, but saved by evaluating the design holistically; and a design success due to a holistic design approach.

Adams, Chris W.↗

Human Systems Integration: Managing Risk in Anesthesia

The practice of anesthesia relies on clinicians’ ability to safely manage increasingly complex equipment. Devices such as ventilators, drug infusion pumps, and physiologic monitors use sophisticated algorithms to deliver care, but most clinicians are only trained to manage automated systems during normal operation. Few if any receive training on how to manage system failures. Although manufacturers are required to consult with human factors engineers as part of the equipment design process, most pieces of equipment are ultimately brought to market without extensive input from clinicians. Systems in the operating room can be as simple as an oxygen tank, or as complex as a multi-institutional healthcare organization. Humans are also a complex system, and play a critical role in the domains of operations, design, fabrication, maintenance, repair, and ultimately, dismantling and closeout. HSI seeks to provide a means for advocating the human side of the system. Human Systems Integration (HSI) is the cross disciplinary process used as part of the Systems Engineering process to reduce risk in systems. HSI professionals consider the human, hardware, and software elements of system design to optimize system performance and improve safety. HSI professionals work in domains of study that include training, management, human factors engineering, safety, and occupational health, among others. This article discusses the role of systems in the practice of anesthesia, and how consideration of the human during all phases of the system life cycle helps manage risks and promote a better patient outcome.

Human Factors↗

Synchronization and fault-masking in redundant real-time systems

A real time computer may fail because of massive component failures or not responding quickly enough to satisfy real time requirements. An increase in redundancy - a conventional means of improving reliability - can improve the former but can - in some cases - degrade the latter considerably due to the overhead associated with redundancy management, namely the time delay resulting from synchronization and voting/interactive consistency techniques. The implications of synchronization and voting/interactive consistency algorithms in N-modular clusters on reliability are considered. All these studies were carried out in the context of real time applications. As a demonstrative example, we have analyzed results from experiments conducted at the NASA Airlab on the Software Implemented Fault Tolerance (SIFT) computer. This analysis has indeed indicated that in most real time applications, it is better to employ hardware synchronization instead of software synchronization and not allow reconfiguration.

Krishna, C. M.↗

Dynamic Probabilistic Safety Assessment Studies for Advanced Reactor Using RAVEN

Probabilistic Safety Assessment (PSA) is used extensively to evaluate the risks associated with complex engineering systems like Nuclear Power Plants (NPPs). Current PSA models are based on the Event-Tree/Fault-Tree (ET/FT) methodology. ET and FT models are static and are based on Boolean logic approaches. In the past, concerns have been raised in the literature regarding the capability of the traditional static modelling approaches to adequately account for the impact of process, hardware, software, firmware and human interactions on the stochastic system behaviour. To overcome the limitations of the traditional approach to PSA, several dynamic PSA methodologies have been proposed. One of the dynamic PSA methodologies used for dynamic evaluations is Dynamic Event Tree (DET) framework which can be used to assess the impact of the parameter variability and scenario dynamics on the PSA model for the initiating event. The DET framework couples the stochastic model (number of component/trains that start on demand, operator action timing, etc.) with a Thermal-Hydraulic (TH) model of the plant. This paper explores the use of DET along with a case study on advanced reactor. The initiating event selected for the study was Class IV power supply failure event. The TH analysis considering uncertainty in various parameters was performed using RELAP5 and Reactor Analysis and Virtual control ENvironment (RAVEN) tool. Based on the uncertainty analysis, it is concluded that the peak clad temperatures (PCT) are within the limits in all the code runs implying a high-degree of safety margin. However, variation in time to reach the PCT was observed among the code runs and the mean time to reach the PCT was found to be around 8590sec (approximately 2.4 hours). Hence, sufficient time margin is available for human intervention and the operator might have a relatively stress-free state during such an accident scenario. Due to the static nature of the traditional PSA models, the safety margin available was lesser, whereas, with the help of dynamic PSA models, one can demonstrate that the actual available safety margin is more in the present case study and is valuable input from the design point of view.

99 GENERAL AND MISCELLANEOUS↗

Effect of KOH concentration on LEO cycle life of IPV nickel-hydrogen flight battery cells

A breakthrough in the low-earth-orbit (LEO) cycle life of individual pressure vessel (IPV) nickel hydrogen battery cells is reported. The cycle life of boiler plate cells containing 26 percent potassium hydroxide (KOH) electrolyte was about 40,000 LEO cycles compared to 3500 cycles for cells containing 31 percent KOH. The effect of KOH concentration on cycle life was studied. The cycle regime was a stressful accelerated LEO, which consisted of a 27.5 min charge followed by a 17.5 min charge (2 x normal rate). The depth of discharge (DOD) was 80 percent. The cell temperature was maintained at 23 C. The next step is to validate these results using flight hardware and real time LEO test. NASA Lewis has a contract with the Naval Weapons Support Center (NWSC), Crane, Indiana to validate the boiler plate test results. Six 48 A-hr Hughes recirculation design IPV nickel-hydrogen flight battery cells are being evaluated. Three of the cells contain 26 percent KOH (test cells) and three contain 31 percent KOH (control cells). They are undergoing real time LEO cycle life testing. The cycle regime is a 90-min LEO orbit consisting of a 54-min charge followed by a 36-min discharge. The depth-of-discharge is 80 percent. The cell temperature is maintained at 10 C. The cells were cycled for over 8000 cycles in the continuing test. There were no failures for the cells containing 26 percent KOH. There were two failures, however, for the cells containing 31 percent KOH.

Smithrick, John J.↗

Comprehensive Environmental Informatics System (CEIS) Integrating Crew and Vehicle Environmental Health

Integrated Vehicle Health Management (IVHM) systems have been pursued as highly integrated systems that include smart sensors, diagnostic and prognostics software for assessments of real-time and life-cycle vehicle health information. Inclusive to such a system is the requirement to monitor the environmental health within the vehicle and the occupants of the vehicle. In this regard an enterprise approach to informatics is used to develop a methodology entitled, Comprehensive Environmental Informatics System (CEIS). The hardware and software technologies integrated into this system will be embedded in the vehicle subsystems, and maintenance operations, to provide both real-time and life-cycle health information of the environment within the vehicle cabin and of its occupants. This comprehensive information database will enable informed decision making and logistics management. One key element of the CEIS is interoperability for data acquisition and archive between environment and human system monitoring. With comprehensive components the data acquired in this system will use model based reasoning systems for subsystem and system level managers, advanced on-board and ground-based mission and maintenance planners to assess system functionality. Knowledge databases of the vehicle health state will be continuously updated and reported for critical failure modes, and routinely updated and reported for life cycle condition trending. Sufficient intelligence, including evidence-based engineering practices which are analogous to evidencebased medicine practices, will be included in the CEIS to result in more rapid recognition of off-nominal operation to enable quicker corrective actions. This will result from better information (rather than just data) for improved crew/operator situational awareness, which will produce significant vehicle and crew safety improvements, as well as increasing the chance for mission success, future mission planning as well as training. Other benefits include improved reliability, increase safety in operations and cost of operations. The cost benefits stem from significantly reduced processing and operations manpower, predictive maintenance for systems and subjects. The improvements in vehicle functionality and cost will result from increased prognostic and diagnostic capability due to the detailed total human exploration system health knowledge from CEIS. A collateral benefit is that there will be closer observations of the vehicle occupants as wrist watch sized devices are worn for continuous health monitoring. Additional database acquisition will stem from activities in countermeasure practices to ensure peak performance capability by occupants of the vehicle. The CEIS will provide data from advanced sensing technologies and informatics modeling which will be useful in problem troubleshooting, and improving NASA s awareness of systems during operation.

Nall, Mark E.↗

Emergency Flight Control of a Twin-Jet Commercial Aircraft using Manual Throttle Manipulation

The Department of Homeland Security (DHS) created the PCAR (Propulsion-Controlled Aircraft Recovery) project in 2005 to mitigate the ManPADS (man-portable air defense systems) threat to the commercial aircraft fleet with near-term, low-cost proven technology. Such an attack could potentially cause a major FCS (flight control system) malfunction or other critical system failure onboard the aircraft, despite the extreme reliability of current systems. For the situations in which nominal flight controls are lost or degraded, engine thrust may be the only remaining means for emergency flight control [ref 1]. A computer-controlled thrust system, known as propulsion-controlled aircraft (PCA), was developed in the mid 1990s with NASA, McDonnell Douglas and Honeywell. PCA's major accomplishment was a demonstration of an automatic landing capability using only engine thrust [ref 11. Despite these promising results, no production aircraft have been equipped with a PCA system, due primarily to the modifications required for implementation. A minimally invasive option is TOC (throttles-only control), which uses the same control principles as PCA, but requires absolutely no hardware, software or other aircraft modifications. TOC is pure piloting technique, and has historically been utilized several times by flight crews, both military and civilian, in emergency situations stemming from a loss of conventional control. Since the 1990s, engineers at NASA Dryden Flight Research Center (DFRC) have studied TOC, in both simulation and flight, for emergency flight control with test pilots in numerous configurations. In general, it was shown that TOC was effective on certain aircraft for making a survivable landing. DHS sponsored both NASA Dryden Flight Research Center (Edwards, CA) and United Airlines (Denver, Colorado) to conduct a flight and simulation study of the TOC characteristics of a twin-jet commercial transport, and assess the ability of a crew to control an aircraft down to a survivable runway landing using TOC. The PCAR project objective was a set of pilot procedures for operation of a specific aircraft without hydraulics that (a) have been validated in both simulation and flight by relevant personnel, and (b) mesh well with existing commercial operations, maintenance, and training at a minimum cost. As a result of this study, a procedure has been developed to assist a crew in making a survivable landing using TOC. In a simulation environment, line pilots with little or no previous TOC experience performed survivable runway landings after a few practice TOC approaches. In-flight evaluations put line pilots in a simulated emergency situation where TOC was used to recover the aircraft, maneuver to a landing site, and perform an approach down to 200 feet AGL. The results of this research, including pilot observations, procedure comments, recommendations, future work and lessons learned, will he discussed. Flight data and video footage of TOC approaches may also be shown.

Cole, Jennifer H.↗

Power MOSFET Thermal Instability Operation Characterization Support

Metal-oxide semiconductor field-effect transistors (MOSFETs) are used extensively in flight hardware and ground support equipment. In the quest for faster switching times and lower "on resistance," the MOSFETs designed from 1998 to the present have achieved most of their intended goals. In the quest for lower on resistance and higher switching speeds, the designs now being produced allow the charge-carrier dominated region (once small and outside of the area of concern) to become important and inside the safe operating area (SOA). The charge-carrier dominated region allows more current to flow as the temperature increases. The higher temperatures produce more current resulting in the beginning of thermal runaway. Thermal runaway is a problem affecting a wide range of modern MOSFETs from more than one manufacturer. This report contains information on MOSFET failures, their causes and test results and information dissemination.

Shue, John L.↗

Long Term Displacement Data of Woven Fabric Webbings Under Constant Load for Inflatable Structures

Inflatable modules for space applications offer weight and launch volume savings relative to current metallic modules. Limited data exist on the creep behavior of the restraint layer of inflatable modules. Long-term displacement and strain data of two high strength woven fabric webbings, Kevlar and Vectran, under constant load is presented. The creep behavior of webbings is required by designers to help determine service life parameters of inflatable modules. Four groups of different webbings with different loads were defined for this study. Group 1 consisted of 4K Kevlar webbings loaded to 33% ultimate tensile strength and 6K Vectran webbings loaded to 27% ultimate tensile strength, group 2 consisted of 6K Kevlar webbings loaded to 40% and 43% ultimate tensile strength, and 6K Vectran webbings loaded to 50% ultimate tensile strength, group 3 consisted of 6K Kevlar webbings loaded to 52% ultimate tensile strength and 6K Vectran webbings loaded to 60% ultimate tensile strength, and group 4 consisted of 12.5K Kevlar webbings loaded to 22% ultimate tensile strength, and 12.5K Vectran webbings loaded to 22% ultimate tensile strength. The uniquely designed test facility, hardware, displacement measuring devices, and test data are presented. Test data indicate that immediately after loading all webbings stretch an inch or more, however as time increases displacement values significantly decrease to fall within a range of several hundredth of an inch over the remainder of test period. Webbings in group 1 exhibit near constant displacements and strains over a 17-month period. Data acquisition was suspended after the 17th month, however webbings continue to sustain load without any local webbing damage as of the 21st month of testing. Webbings in group 2 exhibit a combination of initial constant displacement and subsequent increases in displacement rates over a 16-month period. Webbings in group 3 exhibit steady increases in displacement rates leading to webbing failure over a 3-month period. Five of six webbings experienced local damage and subsequent failure in group 3. Data from group 4 indicates increasing webbing displacements over a 7-month period. All webbings in groups 1, 2, and 4 remain suspended without any local damage as of the writing of this paper. Variations in facility temperatures over test period seem to have had limited effect on long-term webbing displacement data.

Kenner, Winfred S.↗

Manufacture and static firing of X259-E6 rocket motor serial number XJ04/0001

A single motor was cast and static fired to demonstrate the performance of high energy crosslinked double base (XLDB) propellant in standard X259 rocket motor hardware. Prior to motor fabrication, the motor was analyzed to predict the results of static firing the X259 motor loaded with XLDB propellant. As a result of the analyses, a forward dome shrinkage liner was added to the design. With this design change it was determined that adequate margins of safety existed. The motor, designated the X259-E6 model with serial number XJ04/0001, was fabricated using a slurry-casting technique and was assembled with a standard X259-B4 nozzle which had the nozzle throat machined to a smaller inside diameter than the B4 model and the exit cone cut short for Bacchus Works altitude expansion. The motor was static fired on 20 February 1974 with the nozzle failing during motor operation. Nozzle failure was attributed to spalling of the throat material leading to complete nozzle break-up. However, the propellant functioned as predicted in the motor chamber, ignition was normal, and char and erosion of the internal insulator were as expected.

Robertson, D. R.↗

Effect of KOH concentration on LEO cycle life of IPV nickel-hydrogen flight battery cells

A breakthrough in low earth orbit (LEO) cycle life of individual pressure vessel (IPV) nickel hydrogen battery cells was reported. The cycle life of boiler plate cells containing 26 percent potassium hydroxide (KOH) electrolyte was about 40,000 LEO cycles compared to 3500 cycles for cells containing 31 percent KOH. The effect of KOH concentration on cycle life was studied. The cycle regime was a stressful accelerated LEO, which consisted of a 27.5 min charge followed by a 17.5 min charge (2 x normal rate). The depth of discharge (DOD) was 80 percent. The cell temperature was maintained at 23 C. The next step is to validate these results using flight hardware and a real time LEO test. NASA Lewis has a contract with the Naval Weapons Support Center (NWSC), Crane, Indiana, to validate the boiler plate test results. Six 48 A-hr Hughes recirculation design IPV nickel-hydrogen flight battery cells are being evaluated. Three of the cells contain 26 percent KOH (test cells) and three contain 31 percent KOH (control cells). They are undergoing real time LEO cycle life testing. The cycle regime is a 90-min LEO orbit consisting of a 54-min charge followed by a 36-min discharge. The depth-of-discharge is 80 percent. The cell temperature is maintained at 10 C. The cells were cycled for over 8000 cycles in the continuing test. There were no failures for the cells containing 26 percent KOH. There was two failures, however, for the cells containing 31 percent KOH.

Smithrick, John J.↗

Advanced Stirling Convertor Durability Testing: Plans and Interim Results

The U.S. Department of Energy (DOE), Lockheed Martin Corporation (LM), and NASA Glenn Research Center (GRC) have been developing the Advanced Stirling Radioisotope Generator (ASRG) for use as a power system for space science missions. In support of this program, GRC has been involved in testing Stirling convertors, including the Advanced Stirling Convertor (ASC), for use in the ASRG. This testing includes electromagnetic interference/compatibility (EMI/EMC), structural dynamics, advanced materials, organics, and unattended extended operation. The purpose of the durability tests is to experimentally demonstrate the margins in the ASC design. Due to the high value of the hardware, previous ASC tests focused on establishing baseline performance of the convertors within the nominal operating conditions. The durability tests present the first planned extension of the operating conditions into regions beyond those intended to meet the product spec, where the possibility exists of lateral contact, overstroke, or over-temperature events. These tests are not intended to cause damage that would shorten the life of the convertors, so they can transition into extended operation at the conclusion of the tests. This paper describes the four tests included in the durability test sequence: 1) start/stop cycling, 2) exposure to constant acceleration in the lateral and axial directions, 3) random vibration at increased piston amplitude to induce contact events, and 4) overstroke testing to simulate potential failures during processing or during the mission life where contact events could occur. The paper also summarizes the analysis and simulation used to predict the results of each of these tests.

Meer, David W.↗

Advanced Stirling Convertor Durability Testing: Plans and Interim Results

The U.S. Department of Energy (DOE), Lockheed Martin Corporation (LM), and NASA Glenn Research Center (GRC) have been developing the Advanced Stirling Radioisotope Generator (ASRG) for use as a power system for space science missions. In support of this program, NASA?s Glenn Research Center (GRC) has been involved in testing Stirling convertors, including the Advanced Stirling Convertor (ASC), for use in the ASRG. This testing includes electromagnetic interference/compatibility (EMI/EMC), structural dynamics, advanced materials, organics, and unattended extended operation. The purpose of the durability tests is to experimentally demonstrate the margins in the ASC design. Due to the high value of the hardware, previous ASC tests focused on establishing baseline performance of the convertors within the nominal operating conditions. The durability tests present the first planned extension of the operating conditions into regions beyond those intended to meet the product spec, where the possibility exists of lateral contact, overstroke, or over-temperature events. These tests are not intended to cause damage that would shorten the life of the convertors, so they can transition into extended operation at the conclusion of the tests. This paper describes the four tests included in the durability test sequence: 1) start/stop cycling, 2) exposure to constant acceleration in the lateral and axial directions, 3) random vibration at increased piston amplitude to induce contact events, and 4) overstroke testing to simulate potential failures during processing or during the mission life where contact events could occur. The paper also summarizes the analysis and simulation used to predict the results of each of these tests.

Meer, Dave↗

Artificial Intelligence Thermostat to Detect Faults

Residential air conditioners and heat pumps often experience faults due to inadequate maintenance, which can severely reduce efficiency or even cause system failure. Common issues include dirty or clogged air filters and refrigerant leaks. These problems degrade performance and increase energy use and operating costs. This study presents a smart thermostat with embedded artificial intelligence to detect such faults and alert homeowners when maintenance is needed. The thermostat uses low-cost measurements—including return-air temperature, relative humidity, supply-air temperature, outdoor-air temperature, and condenser subcooling—to identify abnormal operations. Because different faults produce distinct response patterns, tailored algorithms are developed to recognize characteristic fault signatures. The investigation is built on a detailed co-simulation platform that couples EnergyPlus with the DOE/ORNL Heat Pump Design Model (HPDM). EnergyPlus represents the building’s dynamic environment, while HPDM is a high-fidelity, hardware-based model that can simulate fault-free performance as well as a wide range of faults, including gradual degradation such as minor refrigerant leakage. This platform provides a virtual training and testing environment that helps distinguish fault-induced behavior from normal operation and supports development of robust diagnostic algorithms. Using this framework, a Dynamic Bayesian Network was developed to identify two common faults—gradual refrigerant charge loss and indoor airflow blockage—and the AI-embedded thermostat was verified through annual building simulations.

Shen, Bo [ORNL] (ORCID:0000000336600393)↗

Models of an In-Situ Propellant Production Plant for Mars Exploration

An in-situ propellant production system (ISPP) is designed to make rocket fuel from chemicals in the Martian atmosphere in order to reduce the amount of materials that would need to be brought from Earth to support Mars missions. We have developed a description of a hypothetical ISPP system that we would like to make available to researchers who are interested in the problem of automatically diagnosing failures in complex NASA systems. This problem description will help researchers to investigate problems of interest to NASA. We would like to make the following material publicly available: (1) a 'common sense' model of an ISPP system; (2) low- and medium-fidelity simulations of the ISPP system written in Microsoft Excel and HCC; and (3) previously published data and diagrams concerning ISPP components. We do not believe there are any export considerations on these materials for the following reasons: (1) These models are not useful for guidance and real time control of vehicles, encrpytion, or any other software purpose categorized under the Export Control Classification Numbers; and (2) The models are very high level and would not by themselves enable real-time control of a real hardware system. The models are at the level of common sense. They capture, for example, that if a heater is turned on an increase in temperature should result(see the attached excerpt). We do not believe there is any commercial value to this material, given the low commercial demand for propellant plants on mars. We have spoken to acting Code IC Division Chief Dan Clancy, and he concurs with our desire to make these materials publicly available via a technical report.

Goodrich, Charlie↗