Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safe mode”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 109 records · Page 6
All sourcesNASA NTRSDOE OSTI
NASA NTRS2002

Composite Overwrapped Pressure Vessels: Database Extension Task 3.0 and Impact Damage Effects Control Task 8.0

This document represents efforts accomplished at the NASA Johnson Space Center White Sands Test Facility (WSTF) in support of the Enhanced Technology for Composite Overwrapped Pressure Vessels (COPV) Program, a joint research and technology effort among the U.S. Air Force, NASA, and the Aerospace Corporation. WSTF performed testing for several facets of the program. Testing that contributed to the Task 3.0 COPV database extension objective included baseline structural strength, failure mode and safe-life, impact damage tolerance, sustained load/impact effect, and materials compatibility. WSTF was also responsible for establishing impact protection and control requirements under Task 8.0 of the program. This included developing a methodology for establishing an impact control plan. Seven test reports detail the work done at WSTF. As such, this document contributes to the database of information regarding COPV behavior that will ensure performance benefits and safety are maintained throughout vessel service life.

Beeson, Harold D.↗
DOE OSTI2024

Hydropower Black Start: A Guidebook for Retrofitting Grid Dependent Hydropower

Not all United States (US) hydropower plants were designed to provide black start, but they are increasingly needed to uphold resilience in the evolving electric grid. This guidance is designed to help understand the minimal retrofits required for grid dependent hydropower (GDH) plants behind the point of interconnection (POI). For distribution connected hydropower plants or those with dedicated cranking paths, such upgrades can be sufficient for the plant to provide black start. For others, more coordination with the transmission system operator will be needed. This guidebook answers a number of questions relevant to retrofitting hydropower plants with black start capabilities. For example, the guidebook answers: • How flexible do the wicket gate controls need to be? • Who needs to do hydro governor model validation, why, and how? • How robust and flexible do the excitation and AVR controls need to be? • What protection settings need to be adjusted? • What relay(s) will need to be bypassed or overridden and at what risk? • What is the electrical energy demand of the station load or auxiliary power systems? • What should the strategy to energize transformer(s) along cranking path to address inrush currents be? • How should the critical load restoration be sequenced? In addition to outlining the specifications that hydropower plants need to meet for each component to be able to perform black start, this guidebook provides a set of case studies for specific upgrades needed at actual plants. Between the case studies of plants that have already performed black start retrofits and the examples of how this guidebook can be applied to scope future retrofits, five key themes have been identified for retrofit needs. 1. Protection needs “black start” mode: hydropower plants that are not designed with black start capabilities will have protections that prevent them from interconnecting to a “dead bus.” These protections will need to be overridden in every retrofit case and a separate black start mode should be established so that operators can safely switch between black start and grid connected modes, minimizing the risk to the plant. 2. Wicket gates need modern controls: digital governors accelerate the parameter tuning process and gate position sensors improve controllability, so plants with mechanical governors should be upgraded. Furthermore, a black start and islanding mode should be established for controls to maximize plant performance. 3. Robust excitation support: the DC system or excitation generator needs to be reliable enough to form and sustain the rotor electromagnetic field. These systems are typically undersized in plants that were not designed for black start, so they will need to be upgraded. 4. Turbine-governor model validation and operator training: validation of a standard hydro governor model is needed to characterize the dynamic response (i.e., inertial and primary frequency response) of the GDH. This is required for control development and old hydropower plants often have outdated or incorrect models. Operator training is also typically required to ensure the hardware retrofits are utilized correctly during the black start process. 5. Transformer and cranking path energization: any upgradation and control adjustment in front of the POI will depend upon the existing interconnection. Coordination with the transmission or distribution operator may be required.

13 HYDRO ENERGY↗
NASA NTRS1981

SMM attitude control recovery

A description is given of the way in which the Modular Attitude Control System (MACS) onboard computer of the NASA Solar Maximum Mission (SMM) laboratory was reprogrammed, to restore attitude control for the SMM, after fuse failures permanently disabled all three of the MACS primary reaction wheels. Algorithms were developed which provided both a thermal- and power-safe, spin-stabilized mode and three-axis sun pointing, using the damaged primary wheels' backup skew wheel in a momentum-bias control scheme. Magnetic torquing was used in these algorithms for angular momentum vector magnitude and directional control.

Hoffman, H. C.↗
NASA NTRSDate not supplied

Uncertainty Quantification of Inducer Natural Frequency using Conditional Assessment of Modeling and Modal Testing of Simpler Systems

The low pressure fuel pump inducer of the new Space Launch System RS25 core stage engine operates in a highly complex environment that substantially affects its modal characteristics. Some of the more important effects are fluid-added mass resulting from operation within a light liquid (Hydrogen), and the magnification of this effect due to tight tip clearance. Since higher order cavitation has been identified as a significant harmonic driver, knowledge of the natural frequency of potentially excitable modes is critical for safe operation, but this frequency cannot be measured during the severe operational environment. A comprehensive testing and analysis program has therefore been performed over the last four years to identify the nominal value and uncertainty of the frequency by modeling and testing four simpler structures which share some of the characteristics of the operational inducer. This testing was used to assess and adjust modeling techniques and excellent correlation was achieved. Identification of the uncertainty in the inducer frequency itself was still problematic, however. This difficulty led to an investigation of Bayesian uncertainty quantification techniques, and to the application of the relatively simple technique of Multi-Variate Normal conditional distributions to calculate the inducer natural frequency uncertainty. Assumptions on prior distributions of uncertainty of the fluid-added mass and tip clearance effect are initially applied to models of each of the simple structures and the inducer itself, and these uncertainties are propagated to generate natural frequencies using design of experiments. Simple response surfaces are then created from this data in order to calculate a Covariance Matrix relating all of these natural frequencies. Finally, the results from modal test of the simple structures are considered to be observations and used to calculate the conditional variance of the desired inducer frequencies. As this method is less rigorous than more complicated Bayesian methods reported in the literature, a conservative factor is applied to the result, but the resulting uncertainty is still significantly less than originally estimated and will greatly assist certification of the inducer for use in the engine.

Uncertainty Quantification↗
NASA NTRSDate not supplied

Uncertainty Quantification of Inducer Eigenvalues using Conditional Assessment of Models and Modal Test of Simpler Systems

The low pressure fuel pump inducer of the new Space Launch System RS25 core stage engine operates in a highly complex environment that substantially affects its modal characteristics. Some of the more important effects are fluid-added mass resulting from operation within a light liquid (Hydrogen), and the magnification of this effect due to tight tip clearance. Since higher order cavitation has been identified as a significant harmonic driver, knowledge of the natural frequency of potentially excitable modes is critical for safe operation, but this frequency cannot be measured during the severe operational environment. A comprehensive testing and analysis program has therefore been performed over the last four years to identify the nominal value and uncertainty of the frequency by modeling and testing four simpler structures which share some of the characteristics of the operational inducer. This testing was used to assess and adjust modeling techniques and excellent correlation was achieved. Identification of the uncertainty in the inducer frequency itself was still problematic, however. This difficulty led to an investigation of Bayesian uncertainty quantification techniques, and to the application of the relatively simple technique of Multi-Variate Normal conditional distributions to calculate the inducer natural frequency uncertainty. Assumptions on prior distributions of uncertainty of the fluid-added mass and tip clearance effect are initially applied to models of each of the simple structures and the inducer itself, and these uncertainties are propagated to generate natural frequencies using design of experiments. Simple response surfaces are then created from this data in order to calculate a Covariance Matrix relating all of these natural frequencies. Finally, the results from modal test of the simple structures are considered to be observations and used to calculate the conditional variance of the desired inducer frequencies. As this method is less rigorous than more complicated Bayesian methods reported in the literature, a conservative factor is applied to the result, but the resulting uncertainty is still significantly less than originally estimated and will greatly assist certification of the inducer for use in the engine.

Uncertainty Quantification↗
NASA NTRSDate not supplied

Development of Candidate Airspace Procedures for Urban Air Mobility in the Dallas Area

As the concept of on-demand electric air taxis gains popularity and begins to take shape, many research efforts are underway to address the challenges of integrating this new class of passenger-carrying air vehicles into the already congested U.S. National Airspace System. Through collaborations between the National Aeronautics and Space Administration (NASA), the Federal Aviation Administration, and industry, this concept, commonly referred to as Urban Air Mobility (UAM), envisions a safe, reliable, and efficient mode of transportation traversing metropolitan and urban areas. Among the many challenges being tackled, airspace procedures and information requirements are critical areas of research that need to be addressed. In a joint effort between NASA and Joby Aviation, a human-in-the-loop study was conducted at the NASA Ames Research Center to evaluate initial and midterm operations with air traffic controllers and on-board UAM pilots in the Dallas area. This area was chosen due to its complex Class Bravo Airspace that extends to the surface over a relatively large area. To achieve the goals and objectives of the study, multiple preceding efforts were conducted to develop the candidate procedures and information requirements. This paper provides an overview of the operational concept used for the study, the process that was followed, and the findings from the two tabletop meetings and a shakedown activity. The combination of these led to a set of airspace procedures, letters of agreement, and information requirements that were evaluated in the human-inthe-loop study.

Urban Air Mobility↗
DOE OSTI2022

Project Description for Student Symposium 2022: Modeling Approach to Critical in the Upcoming CERBERUS Experiment

The Critical Experiment Reflected By copper to BettEr Understand Scattering [CERBERUS] is an integral experiment that will be executed at the end of FY23. The experiment is designed to study the intermediate energy range, in particular elastic and inelastic scattering of neutrons in copper. Approaching criticality safely is of utmost importance, and having a computer mode is a useful tool when determining changes that can safely be made to the experiment. Multiple simulations are needed to analyze the approach to critical, and manually creating MCNP input files is both tedious and error prone. To solve this problem, a python script was created to develop and run these input files.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
NASA NTRS1998

The Software Design for the Wide-Field Infrared Explorer Attitude Control System

The Wide-Field Infrared Explorer (WIRE), currently scheduled for launch in September 1998, is the fifth of five spacecraft in the NASA/Goddard Small Explorer (SMEX) series. This paper presents the design of WIRE's Attitude Control System flight software (ACS FSW). WIRE is a momentum-biased, three-axis stabilized stellar pointer which provides high-accuracy pointing and autonomous acquisition for eight to ten stellar targets per orbit. WIRE's short mission life and limited cryogen supply motivate requirements for Sun and Earth avoidance constraints which are designed to prevent catastrophic instrument damage and to minimize the heat load on the cryostat. The FSW implements autonomous fault detection and handling (FDH) to enforce these instrument constraints and to perform several other checks which insure the safety of the spacecraft. The ACS FSW implements modules for sensor data processing, attitude determination, attitude control, guide star acquisition, actuator command generation, command/telemetry processing, and FDH. These software components are integrated with a hierarchical control mode managing module that dictates which software components are currently active. The lowest mode in the hierarchy is the 'safest' one, in the sense that it utilizes a minimal complement of sensors and actuators to keep the spacecraft in a stable configuration (power and pointing constraints are maintained). As higher modes in the hierarchy are achieved, the various software functions are activated by the mode manager, and an increasing level of attitude control accuracy is provided. If FDH detects a constraint violation or other anomaly, it triggers a safing transition to a lower control mode. The WIRE ACS FSW satisfies all target acquisition and pointing accuracy requirements, enforces all pointing constraints, provides the ground with a simple means for reconfiguring the system via table load, and meets all the demands of its real-time embedded environment (16 MHz Intel 80386 processor with 80387 coprocessor running under the VRTX operating system). The mode manager organizes and controls all the software modules used to accomplish these goals, and in particular, the FDH module is tightly coupled with the mode manager.

Anderson, Mark O.↗
NASA NTRS2022

A Framework for Dynamic Architecture and Functional Allocations for Increasing Airspace Autonomy

To enable scalability of air travel for use cases such as cargo delivery, it is anticipated that future air traffic operations will involve unmanned aircraft operated by remote pilots. Of particular interest are schemes where a small number of pilots operate a large number of vehicles, mitigating high cost and pilot shortage issues. Such architectures require increased levels of automation and supervisory control modes. They also require ensuring safe operations when the command and control link to the vehicle is degraded or lost completely, rendering the vehicle autonomous. To evaluate these variable and dynamic architectures, this paper will present a framework for decomposing the functions necessary to ensure safe, orderly, and expeditious air travel, assessing the agents in the system, and classifying the levels of autonomy. Then, an example allocation to agents of roles for the function of separation assurance is presented, highlighting the dependency of the allocation on three main factors: time criticality of a potential separation violation, the ratio of pilots to vehicles, and the loss of the command and control link.

air traffic management, function allocation, auton↗
NASA NTRS2022

A Framework for Dynamic Architecture and Functional Allocations for Increasing Airspace Autonomy

To enable scalability of air travel for use cases such as cargo delivery, it is anticipated that future air traffic operations will involve unmanned aircraft operated by remote pilots. Of particular interest are schemes where a small number of pilots operate a large number of vehicles, mitigating high cost and pilot shortage issues. Such architectures require increased levels of automation and supervisory control modes. They also require ensuring safe operations when the command and control link to the vehicle is degraded or lost completely, rendering the vehicle autonomous. To evaluate these variable and dynamic architectures, this paper will present a framework for decomposing the functions necessary to ensure safe, orderly, and expeditious air travel, assessing the agents in the system, and classifying the levels of autonomy. Then, an example allocation to agents of roles for the function of separation assurance is presented, highlighting the dependency of the allocation on three main factors; time criticality of a potential separation violation, the ratio of pilots to vehicles, and the loss of the command and control link.

air traffic management↗
NASA NTRS2009

Dynamic Structural Fault Detection and Identification

Aircraft structures are designed to guarantee safety of flight in some required operational envelope. When the aircraft becomes structurally impaired, safety of flight may not be guaranteed within that previously safe operational envelope. In this case the safe operational envelope must be redefined in-flight and a means to prevent excursion from this new envelope must be implemented. A specific structural failure mode that may result in a reduced safe operating envelope, the exceedance of which could lead to catastrophic structural failure of the aircraft, will be addressed. The goal of the DFEAP program is the detection of this failure mode coupled with flight controls adaptation to limit critical loads in the damaged aircraft structure. The DFEAP program is working with an F/A-18 aircraft model. The composite wing skins are bonded to metallic spars in the wing substructure. Over time, it is possible that this bonding can deteriorate due to fatigue. In this case, the ability of the wing spar to transfer loading between the wing skins is reduced. This failure mode can translate to a reduced allowable compressive strain on the wing skin and could lead to catastrophic wing buckling if load limiting of the wing structure is not applied. The DFEAP program will make use of a simplified wing strain model for the healthy aircraft. The outputs of this model will be compared in real-time to onboard strain measurements at several locations on the aircraft wing. A damage condition is declared at a given location when the strain measurements differ sufficiently from the strain model. Parameter identification of the damaged structure wing strain parameters will be employed to provide load limiting control adaptation for the aircraft. This paper will discuss the simplified strain models used in the implementation and their interaction with the strain sensor measurements. Also discussed will be the damage detection and identification schemes employed and the means by which the damaged aircraft parameters will be used to provide load limiting that keeps the aircraft within the safe operational envelope.

Smith, Timothy↗
DOE OSTI2021

L-H transition trigger physics in ITER-similar plasmas with applied n = 3 magnetic perturbations

The L–H transition power threshold PLH is observed to increase with applied n = 3 resonant magnetic perturbations (RMP) in ITER-similar-shape plasmas with balanced neutral beam torque injection in DIII-D. The increase is most pronounced with added electron–cyclotron heating: PLH increases with decreasing edge plasma collisionality as PLH/PLH-08 ~ (ν*)−0.5, where PLH-08 is the 2008 ITPA multi-machine power threshold scaling. This result raises concerns for H-mode access at low edge collisionality in ITER, where RMP may have to be applied before the L–H transition to safely suppress the first edge-localized mode. Non-axisymmetric modifications with RMP include a simultaneous reduction of the radial electric field (Er) well depth and E × B shear. This can be attributed to increasing edge toroidal co-current rotation, and is consistent with substantially increased local long-wavelength turbulence (measured via beam emission spectroscopy). At high RMP perturbation strength the edge electric field Er reverses sign locally (becomes positive), with changes in dominant turbulence modes. Edge magnetic stochasticity provides an attractive explanation of the observed modifications, and the observed changes in toroidal rotation and Er are consistent with a simple fluid model describing radial electron current flow along stochastic fieldlines. The observed collisionality dependence of the L-mode edge electric field with applied RMP is also qualitatively consistent with this model. Reflectometry data indicate a significant reduction of the normalized L-mode radial density gradient a/Ln at high RMP field with simultaneous increase in radial particle flux and electron thermal flux from power balance analysis. We conjecture that the increase of PLH with RMP results from the combined effects of reduced E × B flow shear (increasing turbulent transport levels) and toroidal/poloidal flow modulation due to edge stochasticity. Initial experiments indicate that non-resonant n = 3 magnetic perturbations lead only to relatively small changes in Er, E × B shear and fluctuation characteristics, and have less impact on the L–H transition power threshold. This motivates further exploration of the RMP spectrum dependence of PLH for possible mitigation of the observed threshold increase.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
NASA NTRS2013

Curiosity's Autonomous Surface Safing Behavior Design

The safing routines on all robotic deep-space vehicles are designed to put the vehicle in a power and thermally safe configuration, enabling communication with the mission operators on Earth. Achieving this goal is made a little more difficult on Curiosity because the power requirements for the core avionics and the telecommunication equipment exceed the capability of the single power source, the Multi-Mission Radioisotope Thermoelectric Generator. This drove the system design to create an operational mode, called "sleep mode", where the vehicle turns off most of the loads in order to charge the two Li-ion batteries. The system must keep the vehicle safe from over-heat and under-heat conditions, battery cell failures, under-voltage conditions, and clock failures, both while the computer is running and while the system is sleeping. The other goal of a safing routine is to communicate. On most spacecraft, this simply involves turning on the receiver and transmitter continuously. For Curiosity, Earth is above the horizon only a part of the day for direct communication to the Earth, and the orbiter overpass opportunities only occur a few times a day. The design must robustly place the Rover in a communicable condition at the correct time. This paper discusses Curiosity's autonomous safing behavior and describes how the vehicle remains power and thermally safe while sleeping, as well as a description of how the Rover communicates with the orbiters and Earth at specific times.

MSL↗
NASA NTRS1996

Dynamic modelling and simulation study for the Galileo spacecraft pulsed-mode spinup/400 N main engine burn/spindown maneuvers

Two Galileo dynamic models were developed to simulate the spinup, the main engine burn and the spindown maneuvers for the critical events of the Jupiter orbit insertion and perijove raise maneuver. The dynamic interaction between the spin thruster pulsing frequency, the science magnetometer boom flexible modes and the propellant slosh modes were studied. The prediction of safe orbit insertion was validated in flight. For the perijove raise maneuver, the simulation results indicated that propellant unporting would occur if the original spin thruster duty cycle was not updated. Based on further simulation results, a new duty cycle was selected to prevent propellant unporting. Subsequent Galileo flight data indicated that the perijove raise maneuver was successfully executed.

Ih, Che-Hang Charles↗
NASA NTRS2003

Magnetic Bearing Controller Improvements for High Speed Flywheel System

A magnetic bearing control system for a high-speed flywheel system is described. The flywheel utilizes a five axis active magnetic bearing system, using eddy current sensors for position feedback to the bearing controller. Magnetic bearing controller features designed to improve flywheel operation and testing are described. Operational improvements include feed forward control to compensate for rotor imbalance, moving notch filtering to compensate for synchronous and harmonic rotational noise, and fixed notching to prevent rotor bending mode excitation. Testing improvements include adding safe gain, bearing current hold, bearing current zero, and excitation input features. Performance and testing improvements provided by these features are measured and discussed.

Dever, Timothy P.↗
NASA NTRS2008

Fracture Testing of Integral Stiffened Structure

Laboratory testing was conducted to evaluate safety concerns for integrally-stiffened tanks that were found to have developed cracks during pressurization testing. Cracks occurred at fastener holes where additional stiffeners were attached to the integrally-stiffened tank structure. Tests were conducted to obtain material properties and to reproduce the crack morphologies that were observed in service to help determine if the tanks are safe for operation. Reproducing the cracking modes observed during pressurization testing required a complex loading state involving both a tensile load in the integrally-stiffened structure and a pin-load at a fastener hole.

Newman, John A.↗
DOE OSTI2020

Modular high temperature gas reactor core modeling with RELAP5-3D/PHISICS – Optimization schemes for load following

The objective of this study is to develop a 3D/NK model to study the load following operation of a Modular High-Temperature Gas-Cooled Reactor (MHTGR). The selected design is the 350 MW prismatic, graphite moderated, helium cooled thermal reactor based on the MHTGR-350 transient benchmark led by the High-Temperature Gas-Cooled Reactor (HTGR) Methods Core Simulation Group at Idaho National Laboratory (INL) in the framework of the Organization for Economic Cooperation and Development Nuclear Energy Agency (OECD/NEA). This kind of reactor usually reacts very slowly to the perturbation of the core parameters due to the large amount of graphite in the core. This kind of behavior promotes the reactor stability but on the other hand limits the reactor load-following operability. Recently advances in gas reactor designs have made load-following in gas reactors a feasible and achievable goal. Modern nuclear reactors (such as the MHTGR-350) are designed to withstand the structural stresses associated with load-following. Operating the reactor in load-following mode will inevitably reduce the load factor. Although a higher load factor means more revenue and the best usage of the fuel, following the variable energy demand will increase the maximum achievable fraction of generated nuclear power, being no more limited to the base load power generation. In general, if low impact on material aging and the safe operability are demonstrated the plant economics will be minimally affected. In order to ensure that the system can be safely operated in a load-following mode an extensively study has been carried out. Some tests with linear coolant mass flow rate change demonstrated that the reactor behavior is suitable for operation in load following mode. This assumption has been confirmed by a 4 days load following transient test in which the reactor supplied the requested power with a negligible error.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗
NASA NTRS2004

Improved Electromagnetic Brake

A proposed design for an electromagnetic brake would increase the reliability while reducing the number of parts and the weight, relative to a prior commercially available electromagnetic brake. The reductions of weight and the number of parts could also lead to a reduction of cost. A description of the commercial brake is prerequisite to a description of the proposed electromagnetic brake. The commercial brake (see upper part of figure) includes (1) a permanent magnet and an electromagnet coil on a stator and (2) a rotor that includes a steel contact plate mounted, with tension spring loading, on an aluminum hub. The stator is mounted securely on a stationary object, which would ordinarily be the housing of a gear drive or a motor. The rotor is mounted on the shaft of the gear drive or motor. The commercial brake nominally operates in a fail-safe (in the sense of normally braking) mode: In the absence of current in the electromagnet coil, the permanent magnet pulls the contact plate, against the spring tension, into contact with the stator. To release the brake, one excites the electromagnet with a current of the magnitude and polarity chosen to cancel the magnetic flux of the permanent magnet, thereby enabling the spring tension to pull the contact plate out of contact with the stator. The fail-safe operation of the commercial brake depends on careful mounting of the rotor in relation to the stator. The rotor/stator gap must be set with a tolerance between 10 and 15 mils (between about 0.25 and about 0.38 mm). If the gap or the contact pad is thicker than the maximum allowable value, then the permanent magnetic field will not be strong enough to pull the steel plate across the gap. (For this reason, any contact pad between the contact plate and the stator must also be correspondingly thin.) If the gap exceeds the maximum allowable value because of shaft end play, it becomes impossible to set the brake by turning off the electromagnet current. Although it may still be possible to set the brake by applying an electromagnet current to aid the permanent magnetic field instead of canceling it, this action can mask an out-of-tolerance condition in the brake and it does not restore the fail-safe function of setting the brake when current is lost.

Martin, Toby B.↗