Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “SAFE”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,045 records · Page 58

Advanced Coating Removal Techniques

An important step in the repair and protection against corrosion damage is the safe removal of the oxidation and protective coatings without further damaging the integrity of the substrate. Two such methods that are proving to be safe and effective in this task are liquid nitrogen and laser removal operations. Laser technology used for the removal of protective coatings is currently being researched and implemented in various areas of the aerospace industry. Delivering thousands of focused energy pulses, the laser ablates the coating surface by heating and dissolving the material applied to the substrate. The metal substrate will reflect the laser and redirect the energy to any remaining protective coating, thus preventing any collateral damage the substrate may suffer throughout the process. Liquid nitrogen jets are comparable to blasting with an ultra high-pressure water jet but without the residual liquid that requires collection and removal .As the liquid nitrogen reaches the surface it is transformed into gaseous nitrogen and reenters the atmosphere without any contamination to surrounding hardware. These innovative technologies simplify corrosion repair by eliminating hazardous chemicals and repetitive manual labor from the coating removal process. One very significant advantage is the reduction of particulate contamination exposure to personnel. With the removal of coatings adjacent to sensitive flight hardware, a benefit of each technique for the space program is that no contamination such as beads, water, or sanding residue is left behind when the job is finished. One primary concern is the safe removal of coatings from thin aluminum honeycomb face sheet. NASA recently conducted thermal testing on liquid nitrogen systems and found that no damage occurred on 1/6", aluminum substrates. Wright Patterson Air Force Base in conjunction with Boeing and NASA is currently testing the laser remOval technique for process qualification. Other applications of liquid nitrogen operations include cutting of both soft and hard materials. While the laser will not cut materials, it can be used to roughen surfaces and to remove other materials from the substrate including oil, grease, and mold. The space program can benefit from several of these applications with the need for precise removal of coatings and other organic compounds in areas adjacent to sensitive space flight hardware. Significant advantages are evident when comparing liquid nitrogen and laser removal operations over current techniques of media blasting and sanding.

Seibert, Jon↗

Six Degrees-of-Freedom Ascent Control for Small-Body Touch and Go

A document discusses a method of controlling touch and go (TAG) of a spacecraft to correct attitude, while ensuring a safe ascent. TAG is a concept whereby a spacecraft is in contact with the surface of a small body, such as a comet or asteroid, for a few seconds or less before ascending to a safe location away from the small body. The report describes a controller that corrects attitude and ensures that the spacecraft ascends to a safe state as quickly as possible. The approach allocates a certain amount of control authority to attitude control, and uses the rest to accelerate the spacecraft as quickly as possible in the ascent direction. The relative allocation to attitude and position is a parameter whose optimal value is determined using a ground software tool. This new approach makes use of the full control authority of the spacecraft to correct the errors imparted by the contact, and ascend as quickly as possible. This is in contrast to prior approaches, which do not optimize the ascent acceleration.

Blackmore, Lars James C.↗

Reliability and Maintainability Engineering - A Major Driver for Safety and Affordability

The United States National Aeronautics and Space Administration (NASA) is in the midst of an effort to design and build a safe and affordable heavy lift vehicle to go to the moon and beyond. To achieve that, NASA is seeking more innovative and efficient approaches to reduce cost while maintaining an acceptable level of safety and mission success. One area that has the potential to contribute significantly to achieving NASA safety and affordability goals is Reliability and Maintainability (R&M) engineering. Inadequate reliability or failure of critical safety items may directly jeopardize the safety of the user(s) and result in a loss of life. Inadequate reliability of equipment may directly jeopardize mission success. Systems designed to be more reliable (fewer failures) and maintainable (fewer resources needed) can lower the total life cycle cost. The Department of Defense (DOD) and industry experience has shown that optimized and adequate levels of R&M are critical for achieving a high level of safety and mission success, and low sustainment cost. Also, lessons learned from the Space Shuttle program clearly demonstrated the importance of R&M engineering in designing and operating safe and affordable launch systems. The Challenger and Columbia accidents are examples of the severe impact of design unreliability and process induced failures on system safety and mission success. These accidents demonstrated the criticality of reliability engineering in understanding component failure mechanisms and integrated system failures across the system elements interfaces. Experience from the shuttle program also shows that insufficient Reliability, Maintainability, and Supportability (RMS) engineering analyses upfront in the design phase can significantly increase the sustainment cost and, thereby, the total life cycle cost. Emphasis on RMS during the design phase is critical for identifying the design features and characteristics needed for time efficient processing, improved operational availability, and optimized maintenance and logistic support infrastructure. This paper discusses the role of R&M in a program acquisition phase and the potential impact of R&M on safety, mission success, operational availability, and affordability. This includes discussion of the R&M elements that need to be addressed and the R&M analyses that need to be performed in order to support a safe and affordable system design. The paper also provides some lessons learned from the Space Shuttle program on the impact of R&M on safety and affordability.

Safie, Fayssal M.↗

UAS Modeling of the Communication Links Study Results

The Federal Aviation Administration (FAA) is the authority that grants access into, and operations within, the National Airspace System (NAS) for all aircraft, including Unmanned Aircraft Systems (UAS). The safe operation of UAS in the NAS must be assured if the full potential of UAS is to be realized and supported by the public and Congress. This report analyzed the communication systems that are needed for the safe operations of UAS in the NAS. Safe operations can be defined as the availability of the required links to carry the information to control the UAS and the return links to allow controllers to know where the UAS is at any given moment as well as how it is performing. This report is the end result of work performed jointly between the FAA and National Aeronautics and Space Administration (NASA)/Kennedy Space Center (NASA KSC). The work was done in support of the Radio Technical Commission for Aeronautics (RTCA) Special Committee 203 (SC-203) Control and Communications Working Group. The RTCA is a federal advisory committee to the FAA. Though the work was not under the direction of the working group, a large part of the specific values used in the simulations came from the working group. Specifically, all of the radio links were modeled based on the formulation completed by the working group. This report analyzed three scenarios from RTCA SC-203 that represent how a UAS would operate in the NAS. Each scenario was created using the Satellite Tool Kit (STK) modeling and simulation tool. The flight paths of the UAS were generated and the UAS dynamics were likewise modeled. Then each communication asset such as transmitters, receivers, and antennas were modeled and placed on the appropriate UAS, satellite, or Control Station (CS). After that, the radio links were analyzed for signal strength and antenna blockage, and the overall link performance was analyzed in detail. The goal was to obtain 99.9% availability on all of the radio communication links. In order to ensure the 99.9% availability, certain values for the telemetry transmitter will have to be increased slightly from I watt up to about 4 watts which is reasonable. The results of this analysis show that it is possible to send commands, during the airborne segment, to the Unmanned Aircraft (UA) and have the UA send back the system health and status with high availability of at least 99.9% of the time. This 99.9% availability included the condition of heavy rain at 90 mm/hr as well as interference from adjacent satellites. The link budget values used in this report were based on the work from the working group.

Birr, Richard B.↗

Predictive Sea State Estimation for Automated Ride Control and Handling - PSSEARCH

PSSEARCH provides predictive sea state estimation, coupled with closed-loop feedback control for automated ride control. It enables a manned or unmanned watercraft to determine the 3D map and sea state conditions in its vicinity in real time. Adaptive path-planning/ replanning software and a control surface management system will then use this information to choose the best settings and heading relative to the seas for the watercraft. PSSEARCH looks ahead and anticipates potential impact of waves on the boat and is used in a tight control loop to adjust trim tabs, course, and throttle settings. The software uses sensory inputs including IMU (Inertial Measurement Unit), stereo, radar, etc. to determine the sea state and wave conditions (wave height, frequency, wave direction) in the vicinity of a rapidly moving boat. This information can then be used to plot a safe path through the oncoming waves. The main issues in determining a safe path for sea surface navigation are: (1) deriving a 3D map of the surrounding environment, (2) extracting hazards and sea state surface state from the imaging sensors/map, and (3) planning a path and control surface settings that avoid the hazards, accomplish the mission navigation goals, and mitigate crew injuries from excessive heave, pitch, and roll accelerations while taking into account the dynamics of the sea surface state. The first part is solved using a wide baseline stereo system, where 3D structure is determined from two calibrated pairs of visual imagers. Once the 3D map is derived, anything above the sea surface is classified as a potential hazard and a surface analysis gives a static snapshot of the waves. Dynamics of the wave features are obtained from a frequency analysis of motion vectors derived from the orientation of the waves during a sequence of inputs. Fusion of the dynamic wave patterns with the 3D maps and the IMU outputs is used for efficient safe path planning.

Huntsberger, Terrance L.↗

SOFIA: Flying the Telescope

The primary focus of this paper is how the flight test team for the Stratospheric Observatory For Infrared Astronomy (SOFIA) re-cast an extensive developmental test program to meet key milestones while simultaneously ensuring safe certification of the airframe and delivery of an operationally relevant platform, ultimately saving the overall program from financial demise. Following a brief introduction to the observatory and what it is designed to do, SOFIAs planned developmental test program is summarized, including analysis and design philosophy, envelope expansion, model validation and airframe certification. How NASA used lessons learned from other aircraft that employed open cavities in flight is explained as well as how and why the chosen design was selected. The approach to aerodynamic analysis, including bare airframe testing, wind tunnel testing, computational fluid dynamics and finite element modeling proved absolutely critical. Despite a solid analytical foundation, many unknowns remained. History provides several examples of disastrous effects on both systems and flight safety if cavity design is not approached properly. For these reasons, an extensive test plan was developed to ensure a safe and thorough build-up for envelope expansion, airframe certification and early science missions. Unfortunately, as is often the case, because of chronic delays in overall program execution, severe schedule and funding pressures were present. If critical milestones were not met, domestic as well as international funding was in serious jeopardy, and the demise of the entire program loomed large. Concentrating on rigorous model validation, the test team challenged certification requirements, increased test efficiency and streamlined engineering analysis. This resulted in the safe reduction of test point count by 72%, meeting all program milestones and a platform that soundly satisfied all operational science requirements. Results from early science missions are shown and a proof of concept mission for which SOFIA was opportunely positioned is showcased. Success on this time-critical mission to observe a rare astronomical event proved the usefulness of an airborne observatory and the value in waiting for the capability provided by SOFIA. Finally, lessons learned in the test program are presented with emphasis on how lessons from previous aircraft and successful test programs were applied to SOFIA. Effective application of these lessons was crucial to the success of the SOFIA flight test program. SOFIA is an international cooperative program between NASA and the German Space Agency, DLR. It is a 2.5 meter (100-inch) telescope mounted in a Boeing 747SP aircraft used for astronomical observations at altitudes above 35,000 feet. SOFIA will accommodate a host of scientific instruments from the international science community and has a planned operational lifespan of more than 20 years.

Asher, Troy A.↗

Safety and IVHM

When we address safety in a book on the business case for IVHM, the question arises whether safety isn t inherently in conflict with the need of operators to run their systems as efficiently (and as cost effectively) as possible. The answer may be that the system needs to be just as safe as needed, but not significantly more. That begs the next question: How safe is safe enough? Several regulatory bodies provide guidelines for operational safety, but irrespective of that, operators do not want their systems to be known as lacking safety. We illuminate the role of safety within the context of IVHM.

Goebel, Kai↗

Analysis of Proposed 2007-2008 Revisions to the Lightning Launch Commit Criteria for United States Space Launches

Ascending space vehicles are vulnerable to both natural and triggered lightning. Launches under the jurisdiction of the United States are generally subject to a set of rules called the Lightning Launch Commit Criteria (LLCC) (Krider etal., 1999; Krider etal., 2006). The LLCC protect both the vehicle and the public by assuring that the launch does not take place in conditions posing a significant risk of a lightning strike to the ascending vehicle. Such a strike could destroy the vehicle and its payload, thus causing failure of the mission while releasing both toxic materials and debris. To assure safety, the LLCC are conservative and sometimes they may seriously limit the ability of the launch operator to fly as scheduled even when conditions are benign. In order to safely reduce the number of launch scrubs and delays attributable to the LLCC, the Airborne Field Mill (ABFM II) program was undertaken in 2000 - 2001. The effort was directed to collecting detailed high-quality data on the electrical, microphysical, radar and meteorological properties of thunderstorm-associated clouds. Details may be found in Dye et al., 2007. The expectation was that this additional knowledge would provide a better physical basis for the LLCC and allow them to be revised to be less restrictive while remaining at least as safe. That expectation was fulfilled, leading to significant revisions to the LLCC in 2003 and 2005. The 2005 revisions included the application of a new radar-derived quantity called the Volume Averaged Height Integrated Radar Reflectivity (VAHIRR) in the rules governing flight through anvil clouds. VAHIRR is the product of the volume averaged radar reflectivity times the radardetermined cloud thickness. The reflectivity average extends horizontally 5 km west, east, south and north of a point along the flight track and vertically from the 0 C isotherm to the top of the radar cloud. This region is defined as the "Specified Volume". See Dye et al., 2006 and Merceret et al., 2006 for a more thorough description of VAHIRR. The units are dBZ km (not dBZ per kilometer) and the threshold is 10 dBZ km. It is safe to fly through an anvil cloud for which VAHIRR is below this threshold everywhere along the flight track as long as (1) the entire cloud within 5 nmi. (9.26 km) of the flight track is colder than 0 C, (2) the points at which VAHIRR must be evaluated are at least 20 km from any active convective cores and recent lightning, and (3) the radar return is not being attenuated within the Specified Volume around those points.

Dye, James E.↗

NASA Battery Working Group - 2007-2008: Battery Task Summary Report

This presentation provides a summary of the 2007-2008 NASA Battery Working Group efforts completed in support of the NASA Engineering Safety Center (NESC). The effort covered a series of pro-active tasks that address the following: Binding Procurements -- guidelines related to requirements for the battery system that should be considered at the time of contract award Wet Life of Ni-H2 Batteries -- issues/strategies for effective storage and impact of long-term storage on performance and life Generic Guidelines for Lithium-ion Safety, Handling and Qualification -- Standardized approaches developed and risk assessments (1) Lithium-ion Performance Assessment -- survey of manufacturers and capabilities to meet mission needs. Guidelines document generated (2) Conditions Required for using Pouch Cells in Aerospace Missions -- focus on corrosion, thermal excursions and long-term performance issues. Document defining requirements to maintain performance and life (3) High Voltage Risk Assessment -- focus on safety and abuse tolerance of battery module assemblies. Recommendations of features required for safe implementation (4) Procedure for Determination of Safe Charge Rates -- evaluation of various cell chemistries and recommendation of safe operating regimes for specific cell designs

Manzo, Michelle↗

Characterization of Electrochemically Generated Silver

Silver biocide offers a potential advantage over iodine, the current state of the art in US spacecraft disinfection technology, in that silver can be safely consumed by the crew. Low concentrations of silver (<500 ppb) have been shown to kill bacteria in water systems and keep it safe for potability. Silver does not require hardware to remove it from a water system, and therefore can provide a simpler means for disinfecting water. The Russian segment of the International Space Station has utilized an electrochemically generated silver solution, which is colloidal in nature. To be able to reliably provide a silver biocide to drinking water by electrochemical means would reduce mass required for removing another biocide such as iodine from the water. This would also aid in crew time required to replace iodine removal cartridges. Future long term missions would benefit from electrochemically produced silver as the biocide could be produced on demand and requires only a small concentration to be effective. Since it can also be consumed safely, there is less mass in removal hardware and little consumables required for production. The goal of this project initially is to understand the nature of the electrochemically produced silver, the particle sizes produced by the electrochemical cell and the effect that voltage adjustment has on the particle size. In literature, it has been documented that dissolved oxygen and pH have an effect on the ionization of the electrochemical silver so those parameters would be measured and possibly adjusted to understand their effect on the silver.

Adam, Niklas↗

NASA Unmanned Aircraft (UA) Control and Non-Payload Communication (CNPC) System Waveform Trade Studies

Unmanned Aircraft Systems (UAS) represent a new capability that will provide a variety of services in the government (public) and commercial (civil) aviation sectors. The growth of this potential industry has not yet been realized due to the lack of a common understanding of what is required to safely operate UAS in the National Airspace System (NAS). To address this deficiency, NASA has established a project called UAS Integration in the NAS (UAS in the NAS), under the Integrated Systems Research Program (ISRP) of the Aeronautics Research Mission Directorate (ARMD). This project provides an opportunity to transition concepts, technology, algorithms, and knowledge to the Federal Aviation Administration (FAA) and other stakeholders to help them define the requirements, regulations, and issues for routine UAS access to the NAS. The safe, routine, and efficient integration of UAS into the NAS requires new radio frequency (RF) spectrum allocations and a new data communications system which is both secure and scalable with increasing UAS traffic without adversely impacting the Air Traffic Control (ATC) communication system. These data communications, referred to as Control and Non-Payload Communications (CNPC), whose purpose is to exchange information between the unmanned aircraft and the ground control station to ensure safe, reliable, and effective unmanned aircraft flight operation. A Communications Subproject within the UAS in the NAS Project has been established to address issues related to CNPC development, certification and fielding. The focus of the Communications Subproject is on validating and allocating new RF spectrum and data link communications to enable civil UAS integration into the NAS. The goal is to validate secure, robust data links within the allocated frequency spectrum for UAS. A vision, architectural concepts, and seed requirements for the future commercial UAS CNPC system have been developed by RTCA Special Committee 203 (SC-203) in the process of determining formal recommendations to the FAA in its role provided for under the Federal Advisory Committee Act. NASA intends to conduct its research and development in keeping with this vision and associated architectural concepts. The prototype communication systems developed and tested by NASA will be used to validate and update the initial SC-203 requirements in order to provide a foundation for SC-203's Minimum Aviation System Performance Standards (MASPS).

Aircraft Communications↗

Initial Evaluations of LoC Prediction Algorithms Using the NASA Vertical Motion Simulator

Flying near the edge of the safe operating envelope is an inherently unsafe proposition. Edge of the envelope here implies that small changes or disturbances in system state or system dynamics can take the system out of the safe envelope in a short time and could result in loss-of-control events. This study evaluated approaches to predicting loss-of-control safety margins as the aircraft gets closer to the edge of the safe operating envelope. The goal of the approach is to provide the pilot aural, visual, and tactile cues focused on maintaining the pilot's control action within predicted loss-of-control boundaries. Our predictive architecture combines quantitative loss-of-control boundaries, an adaptive prediction method to estimate in real-time Markov model parameters and associated stability margins, and a real-time data-based predictive control margins estimation algorithm. The combined architecture is applied to a nonlinear transport class aircraft. Evaluations of various feedback cues using both test and commercial pilots in the NASA Ames Vertical Motion-base Simulator (VMS) were conducted in the summer of 2013. The paper presents results of this evaluation focused on effectiveness of these approaches and the cues in preventing the pilots from entering a loss-of-control event.

Pilot Cue↗

Background Error Covariance Estimation Using Information from a Single Model Trajectory with Application to Ocean Data Assimilation

An attractive property of ensemble data assimilation methods is that they provide flow dependent background error covariance estimates which can be used to update fields of observed variables as well as fields of unobserved model variables. Two methods to estimate background error covariances are introduced which share the above property with ensemble data assimilation methods but do not involve the integration of multiple model trajectories. Instead, all the necessary covariance information is obtained from a single model integration. The Space Adaptive Forecast error Estimation (SAFE) algorithm estimates error covariances from the spatial distribution of model variables within a single state vector. The Flow Adaptive error Statistics from a Time series (FAST) method constructs an ensemble sampled from a moving window along a model trajectory.SAFE and FAST are applied to the assimilation of Argo temperature profiles into version 4.1 of the Modular Ocean Model (MOM4.1) coupled to the GEOS-5 atmospheric model and to the CICE sea ice model. The results are validated against unassimilated Argo salinity data. They show that SAFE and FAST are competitive with the ensemble optimal interpolation (EnOI) used by the Global Modeling and Assimilation Office (GMAO) to produce its ocean analysis. Because of their reduced cost, SAFE and FAST hold promise for high-resolution data assimilation applications.

Error Covariance↗

Unmanned Aerial System (UAS) Traffic Management (UTM): Enabling Low-Altitude Airspace and UAS Operations

Many civilian applications of Unmanned Aerial Systems (UAS) have been imagined ranging from remote to congested urban areas, including goods delivery, infrastructure surveillance, agricultural support, and medical services delivery. Further, these UAS will have different equipage and capabilities based on considerations such as affordability, and mission needs applications. Such heterogeneous UAS mix, along with operations such as general aviation, helicopters, gliders must be safely accommodated at lower altitudes. However, key infrastructure to enable and safely manage widespread use of low-altitude airspace and UAS operations therein does not exist. Therefore, NASA is exploring functional design, concept and technology development, and a prototype UAS Traffic Management (UTM) system. UTM will support safe and efficient UAS operations for the delivery of goods and services

UAV↗

The Inclusion of Arbitrary Load Histories in the Strength Decay Model for Stress Rupture

Stress rupture is a failure mechanism where failures can occur after a period of time, even though the material has seen no increase in load. Carbon/epoxy composite materials have demonstrated the stress rupture failure mechanism. In a previous work, a model was proposed for stress rupture of composite overwrap pressure vessels (COPVs) and similar composite structures based on strength degradation. However, the original model was limited to constant load periods (holds) at constant load. The model was expanded in this paper to address arbitrary loading histories and specifically the inclusions of ramp loadings up to holds and back down. The broadening of the model allows for failures on loading to be treated as any other failure that may occur during testing instead of having to be treated as a special case. The inclusion of ramps can also influence the length of the "safe period" following proof loading that was previously predicted by the model. No stress rupture failures are predicted in a safe period because time is required for strength to decay from above the proof level to the lower level of loading. Although the model can predict failures during the ramp periods, no closed-form solution for the failure times could be derived. Therefore, two suggested solution techniques were proposed. Finally, the model was used to design an experiment that could detect the difference between the strength decay model and a commonly used model for stress rupture. Although these types of models are necessary to help guide experiments for stress rupture, only experimental evidence will determine how well the model may predict actual material response. If the model can be shown to be accurate, current proof loading requirements may result in predicted safe periods as long as 10(13) years. COPVs design requirements for stress rupture may then be relaxed, allowing more efficient designs, while still maintaining an acceptable level of safety.

Reeder, James R.↗

Service Life Extension of the Propulsion System of Long-Term Manned Orbital Stations

One of the critical non-replaceable systems of a long-term manned orbital station is the propulsion system. Since the propulsion system operates beginning with the launch of station elements into orbit, its service life determines the service life of the station overall. Weighing almost a million pounds, the International Space Station (ISS) is about four times as large as the Russian space station Mir and about five times as large as the U.S. Skylab. Constructed over a span of more than a decade with the help of over 100 space flights, elements and modules of the ISS provide more research space than any spacecraft ever built. Originally envisaged for a service life of fifteen years, this Earth orbiting laboratory has been in orbit since 1998. Some elements that have been launched later in the assembly sequence were not yet built when the first elements were placed in orbit. Hence, some of the early modules that were launched at the inception of the program were already nearing the end of their design life when the ISS was finally ready and operational. To maximize the return on global investments on ISS, it is essential for the valuable research on ISS to continue as long as the station can be sustained safely in orbit. This paper describes the work performed to extend the service life of the ISS propulsion system. A system comprises of many components with varying failure rates. Reliability of a system is the probability that it will perform its intended function under encountered operating conditions, for a specified period of time. As we are interested in finding out how reliable a system would be in the future, reliability expressed as a function of time provides valuable insight. In a hypothetical bathtub shaped failure rate curve, the failure rate, defined as the number of failures per unit time that a currently healthy component will suffer in a given future time interval, decreases during infant-mortality period, stays nearly constant during the service life and increases at the end when the design service life ends and wear-out phase begins. However, the component failure rates do not remain constant over the entire cycle life. The failure rate depends on various factors such as design complexity, current age of the component, operating conditions, severity of environmental stress factors, etc. Development, qualification and acceptance test processes provide rigorous screening of components to weed out imperfections that might otherwise cause infant mortality failures. If sufficient samples are tested to failure, the failure time versus failure quantity can be analyzed statistically to develop a failure probability distribution function (PDF), a statistical model of the probability of failure versus time. Driven by cost and schedule constraints however, spacecraft components are generally not tested in large numbers. Uncertainties in failure rate and remaining life estimates increase when fewer units are tested. To account for this, spacecraft operators prefer to limit useful operations to a period shorter than the maximum demonstrated service life of the weakest component. Running each component to its failure to determine the maximum possible service life of a system can become overly expensive and impractical. Spacecraft operators therefore, specify the required service life and an acceptable factor of safety (FOS). The designers use these requirements to limit the life test duration. Midway through the design life, when benefits justify additional investments, supplementary life test may be performed to demonstrate the capability to safely extend the service life of the system. An innovative approach is required to evaluate the entire system, without having to go through an elaborate test program of propulsion system elements. Evaluating every component through a brute force test program would be a cost prohibitive and time consuming endeavor. ISS propulsion system components were designed and built decades ago. There are no representative ground test articles for some of the components. A 'test everything' approach would require manufacturing new test articles. The paper outlines some of the techniques used for selective testing, by way of cherry picking candidate components based on failure mode effects analysis, system level impacts, hazard analysis, etc. The type of testing required for extending the service life depends on the design and criticality of the component, failure modes and failure mechanisms, life cycle margin provided by the original certification, operational and environmental stresses encountered, etc. When specific failure mechanism being considered and the underlying relationship of that mode to the stresses provided in the test can be correlated by supporting analysis, time and effort required for conducting life extension testing can be significantly reduced. Exposure to corrosive propellants over long periods of time, for instance, lead to specific failure mechanisms in several components used in the propulsion system. Using Arrhenius model, which is tied to chemically dependent failure mechanisms such as corrosion or chemical reactions, it is possible to subject carefully selected test articles to accelerated life test. Arrhenius model reflects the proportional relationship between time to failure of a component and the exponential of the inverse of absolute temperature acting on the component. The acceleration factor is used to perform tests at higher stresses that allow direct correlation between the times to failure at a high test temperature to the temperatures to be expected in actual use. As long as the temperatures are such that new failure mechanisms are not introduced, this becomes a very useful method for testing to failure a relatively small sample of items for a much shorter amount of time. In this article, based on the example of the propulsion system of the first ISS module Zarya, theoretical approaches and practical activities of extending the service life of the propulsion system are reviewed with the goal of determining the maximum duration of its safe operation.

Kamath, Ulhas↗

Human System Risk Management for Space Flight

This brief abstract reviews the development of the current day approach to human system risk management for space flight and the development of the critical components of this process over the past few years. The human system risk management process now provides a comprehensive assessment of each human system risk by design reference mission (DRM) and is evaluated not only for mission success but also for long‐term health impacts for the astronauts. The discipline of bioastronautics is the study of the biological and medical effects of space flight on humans. In 1997, the Space Life Sciences Directorate (SLSD) initiated the Bioastronautics Roadmap (Roadmap) as the "Critical Path Roadmap", and in 1998 participation in the roadmap was expanded to include the National Space Biomedical Research Institute (NSBRI) and the external community. A total of 55 risks and 250 questions were identified and prioritized and in 2000, the Roadmap was base-lined and put under configuration control. The Roadmap took into account several major advisory committee reviews including the Institute of Medicine (IOM) "Safe Passage: Astronaut care for Exploration Missions", 2001. Subsequently, three collaborating organizations at NASA HQ (Chief Health and Medical Officer, Office of Space Flight and Office of Biological & Physical Research), published the Bioastronautics Strategy in 2003, that identified the human as a "critical subsystem of space flight" and noted that "tolerance limits and safe operating bands must be established" to enable human space flight. These offices also requested a review by the IOM of the Roadmap and that review was published in October 2005 as "A Risk Reduction Strategy for Human Exploration of Space: A Review of NASA's Bioastronautics Roadmap", that noted several strengths and weaknesses of the Roadmap and made several recommendations. In parallel with the development of the Roadmap, the Office of the Chief Health and Medical Officer (OCHMO) began a process in 2004 of evaluating the tolerance limits and safe operating bands called for in the Bioastronautics Strategy. Over the next several years, the concept of the "operating bands" were turned into Space Flight Human System Standards (SFHSS), developed by the technical resources of the SLSD at the NASA Johnson Space Center (JSC). These standards were developed and reviewed at the SLSD and then presented to the OCHMO for acceptance. The first set of standards was published in 2007 as the NASA‐STD‐3001, Volume 1, Crew Health that elaborated standards for several physiological areas such as cardiovascular, musculoskeletal, radiation exposure and nutrition. Volume 2, Human Factors, Habitability and Human Health was published in 2011, along with development guidance in the Human Integration Design Handbook (HIDH). Taken together, the SFHSS Volumes 1 and 2, and the HIDH replaced the NASA‐STD‐3000 with new standards and revisions of the older document. Three other changes were also taking place that facilitated the development of the human system risk management approach. In 2005, the life sciences research and development portfolio underwent a comprehensive review through the Exploration Systems Architecture Study (ESAS) that resulted in the reformulation of the Bioastronautics Program into Human Research Program (HRP) that was focused on appropriate mitigation results for high priority human health risks. The baseline HRP budget was established in August 2005. In addition, the OCHMO formulated the Health and Medical Technical Authority (HMTA) in 2006 that established the position of the Chief Medical Officer (CMO) at the NASA JSC along with other key technical disciplines, and the OCHMO became the responsible office for the SFHSS as noted above. The final change was the establishment in 2008 of the Human System Risk Board (HSRB), chaired by the CMO with representation from the HRP, SLSD management and technical experts. The HSRB then began to review all human system risks, established a comprehensive risk management and configuration management plan and data sharing policy. These major developments of standards, the HRP, the HMTA and a forum for review of human system risks (HSRB) facilitated the integration of human research, medical operations, systems engineering and many other disciplines in the comprehensive review of human system risks. The HSRB began a comprehensive review of all potential inflight medical conditions and events and over the course of several reviews consolidated the number of human system risks to 30 where the greatest emphasis is placed for investing program dollars for risk mitigation. The HSRB considers all available evidence from human research, medical operations and occupational surveillance in assessing the risks for appropriate mitigation and future work. All applicable DRMs (low earth orbit 6 and 12 months, deep space sortie for 30 days and 1 year, a one year lunar mission, and a planetary mission for 3 years) are considered as human system risks are modified by the hazards associated with space flight such as microgravity, exposure to radiation, distance from the earth, isolation and a closed environment. Each risk has a summary assessment representing the state of knowledge/evidence base for that risk, the available risk mitigations, traceability to the SFHSS and program requirements, and future work required. These data then can drive coordinated budgets across the HRP, the International Space Station, Crew Health and Safety and Advanced Exploration System budgets. These risk assessments were completed for 6 DRMs in December of 2014 and serve as the baseline for which subsequent research and technology development and crew health care portfolios can be assessed. The HSRB will review each risk at least annually and especially when new information is available that must be considered for effective risk mitigation. The current status of each risk can be reported to program management for operations, budget reviews and general oversight of the human system risk management program.

Davis, Jeffrey↗

Identification and Reconfigurable Control of Impaired Multi-Rotor Drones

The paper presents an algorithm for control and safe landing of impaired multi-rotor drones when one or more motors fail simultaneously or in any sequence. It includes three main components: an identification block, a reconfigurable control block, and a decisions making block. The identification block monitors each motor load characteristics and the current drawn, based on which the failures are detected. The control block generates the required total thrust and three axis torques for the altitude, horizontal position and/or orientation control of the drone based on the time scale separation and nonlinear dynamic inversion. The horizontal displacement is controlled by modulating the roll and pitch angles. The decision making algorithm maps the total thrust and three torques into the individual motor thrusts based on the information provided by the identification block. The drone continues the mission execution as long as the number of functioning motors provide controllability of it. Otherwise, the controller is switched to the safe mode, which gives up the yaw control, commands a safe landing spot and descent rate while maintaining the horizontal attitude.

Unmanned aerial system↗