Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Criticality Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,099 records · Page 61
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

Computational Models of Trustworthiness and Trust in Autonomous Cyber-Physical-Human Systems

In this paper, we propose an approach to developing a concept of actionable trust in multi-agent,cyber-physical-human systems in safety-critical and time-critical environment of air transportation. Actionable trust requires computational models of trustworthiness and trust, for use during system design and in real time, during operations. We describe the models, examine their computability and scalability, as well as what remains to be done.

Autonomous Systems↗
NASA NTRSDate not supplied

A Distributed Simulation-to-Flight Framework to Support Investigating Trust/Trustworthiness in Multi-Agent Systems

As autonomous systems continue to grow both in use and complexity, the necessity for robust and extensible simulation-to-flight frameworks is paramount for establishing an effective architecture for autonomous systems. Hardware test flights are time-consuming and cost prohibitive during early system design and development. Simulation environments can be useful tools to accelerate algorithm development and testing. However, transitions from simulation to flight (sim-to-flight) can be challenging, unless systems are designed with this transition in mind and with the necessary capabilities built into the architecture and framework. One of the objectives of Autonomy Teaming and TRAjectories for Complex Trusted Operational Reliability (ATTRACTOR) was to design and develop a distributed mixed-reality simulation environment to begin establishing a basis for certification of autonomous systems via research into trust and trustworthiness. ATTRACTOR’s objective was to construct computational concepts of trustworthiness and justifiable trust in multi-agent autonomous teams, to inform future certification of safety-critical and time-critical autonomous systems in aviation. In this paper, we present an autonomous systems architecture and development framework paired with a persistent distributed modeling and simulation (ModSim) environment for test and evaluation of autonomous systems. They were designed under ATTRACTOR in order to measure and establish trustworthiness and trust in single-and multi-agent human-machine systems whether these machines are fixed-wing general aviation, rotary-wing Unmanned Aerial Vehicles (UAVs), ground rovers, or even spacecraft. The Autonomous Entity Operational Network (AEON) framework enables autonomous system development with an easily extensible collection of libraries and plug-n-play nodes facilitated by the Data Distribution Service (DDS) communication protocol standard. The Baseline Environment for Autonomous Modeling (BEAM) simulation environment is a distributed mixed-reality Unity™-based environment built around the same DDS communication paradigm allowing for easy integration with AEON-based autonomous applications, enabling sim-to-flight with minimal configuration changes. Using AEON and BEAM, source code that runs in simulation ports directly to hardware and has successfully flown in the National Airspace System (NAS) at NASA LaRC many times over the lifetime of ATTRACTOR.

Benjamin N Kelley↗
NASA NTRSDate not supplied

Verifying Autonomous Air Traffic Algorithms in the Presence of Sensor Error and Flight Perturbations

We offer a method to verify algorithms for air traffic control in the presence of sensor errors and flight perturbations. Since errors and perturbations are described by stochastic processes, verification by analytical methods is difficult. We turn to Monte Carlo simulation, but there are two major obstacles. Since air traffic algorithms are safety-critical, the algorithm must be established at a very high confidence level which requires an enormous number of trials. Another is that a simulation attempts to show that an algorithm correctly handles a hazard that might appear, but there is a lack of information about the frequency of occurrence of hazards in the airspace. This paper offers a solution to these and other obstacles. It recognizes there may be a number of algorithms that address different hazards, and the results of the different simulations must be combined to satisfy a global reliability requirement at a high confidence level. To demonstrate the feasibility of the approach, we apply it to an example, an initial effort in collision avoidance.

verification↗
NASA NTRS2020

Predicting Gate Conflicts at Charlotte Douglas International Airport Using NASA ATD-2 Fused Data Sources

NASA is conducting the Airspace Technology Demonstration-2 to evaluate an Integrated Arrival, Departure, and Surface (IADS) traffic management system. The IADS system is powered by real-time System Wide Information Management feeds which provide an accurate and high fidelity view of the lifecycle of a flight. This data can be leveraged to drive efficiencies in the National Airspace System. For non safety critical applications there is opportunity for third party service providers to offer this type of data-driven prediction service in near real-time. This paper investigates the gate conflict prediction problem as a concrete use case which could help drive efficiencies. We model gate conflicts as a regression problem and describe the iterative process of model building, model validation, and evaluation used to assess the efficacy of our approach. We quantify our predictive accuracy and identify paths for improvement. Through this iterative process we hope to evolve our models and methods to a near real-time prediction service.

Airspace Technology Demonstration 2↗
NASA NTRSDate not supplied

3D Representation of UAV-obstacle Collision Risk Under Off-nominal Conditions

Safe operations of autonomous unmanned aerial vehicles (UAVs) in low-altitude airspace with beyond visual line-of-sight (BVLOS) flights demand robust risk monitoring of airspace as well as of people and property on ground. One of the safety critical factors for UAV flights is the risk of collision with static and dynamic obstacles in proximity to its flight path. This paper presents a detailed formulation of risk of obstacle collision incorporating the effects of off-nominal conditions introduced by component failures, degraded controllability and environmental disturbances such as wind gusts. The risk is represented in terms of a matrix with rows corresponding to the likelihood of occurrence of collision and columns representing severity of collision to the vehicle and surrounding structures. Risk likelihood is generated using a Bayesian Belief Network (BBN) that compiles knowledge from related Failure Modes and Effects Analysis (FMEAs) and Subject Matter Experts (SMEs) to determine the probability of collision based on on-board sensor measurements indicative of vehicle health and controllability. Risk severity is computed utilizing a point-mass 3D kinematic model of the vehicle in presence of wind. The proposed risk factor is demonstrated on real flight data from experimental flights of an octocopter at NASA Langley Research Center in presence of simulated obstacles and wind conditions. Effect of varying wind conditions, level of controllability and obstacle measurement noise on the risk factor is demonstrated. The proposed approach enables risk-informed decision making for timely mitigation of current and future unsafe events in autonomous systems.

risk analysis↗
NASA NTRS2020

Intelligent Contingency Management for Urban Air Mobility

The third aviation revolution is seeking to enable transportation where users have access to immediate and flexible air travel; the users dictate trip origin, destination and timing. One of the major components of this vision is urban air mobility (UAM) for the masses. UAM means a safe and efficient system for vehicles to move passengers and cargo within a city. In order to reach UAM’s full market potential the vehicle will have to be autonomous. One of the primary challenges of autonomous flight is dealing with off-nominal events, both common and unforeseen; thus, intelligent contingency management (ICM) is one of the enabling technologies. In this context, the vehicle has to be aware of its internal state and external environment at all times, ascertain its capability and make decisions about mission completion or modification. All of these functions require data to model and assess the environment and then take actions based on these models. Necessarily, there is uncertainty associated with the data and the models generated from it. Since we are dealing with safety-critical systems, one of the main challenges of ICM is to generate sufficient data and to minimize its uncertainty to enable practical and safe decision making. We propose an overall architecture that incorporates deterministic and learning algorithms together to assess vehicle capabilities, project these into the future and make decisions on mission management level. A layered approach allows for mature parts and technologies to be integrated into early highly automated vehicles before the final state of autonomy is reached.

data-driven systems↗
NASA NTRSDate not supplied

3D Representation of UAV-obstacle Collision Risk under off-nominal conditions

Safe operations of autonomous unmanned aerial vehicles (UAVs) in low-altitude airspace with beyond visual line-of-sight (BVLOS) flights demand robust risk monitoring of airspace as well as of people and property on ground. One of the safety critical factors for UAV flights is the risk of collision with static and dynamic obstacles in proximity to its flight path. This paper presents a detailed formulation of risk likelihood of obstacle collision incorporating the effects of off-nominal conditions introduced by component failures, degraded controllability and environmental disturbances such as wind gusts. The deviation in the planned trajectory caused due to wind is computed utilizing a point-mass 3D kinematic simulation model of the vehicle. Likelihood of risk for the flight plan is then analyzed based on generating the probability of collision for each point in the trajectory. The proposed risk factor is demonstrated on real flight data from experimental flights of an octocopter at NASA Langley Research Center in presence of simulated obstacles and wind conditions. Effect of varying wind conditions, distance from obstacles, level of controllability and obstacle measurement noise on the risk factor is demonstrated. The proposed approach enables risk-informed decision making for timely mitigation of current and future unsafe events in autonomous systems.

Portia Banerjee↗
NASA NTRSDate not supplied

Enhancing Neural Network Explainability with Variational Autoencoders

Machine intelligence has been used to tackle increasingly complex problems and deep learning solutions are at the forefront of tackling these problems. In general, these architectures have a great number of parameters that are methodically updated in training. The vast number and complexity of deep neural networks makes it very difficult to decipher the inner workings of the neurons and layers that make up the network. This paper posits that trustworthiness and trust in autonomous systems are increased through eXplainable Artificial Intelligence (XAI) and presents a method that enhances the explainability and understanding of a neural network decision. We leverage variational autoencoders to produce human interpretable features from complex data sets. We show that the explainable features can then be used for machine learning applications. Explainability inspires trust in autonomous systems that use deep learning, which is necessary for safety critical systems.

Loc Tran↗
NASA NTRSDate not supplied

Achieving Equilibrium for Dense, Integrated, Vehicle Navigation

Drone usage has proliferated in recent years with many applications that have market-changing potential. Applications that include parcel delivery, wildlife protection, precision farming, law enforcement, and industrial inspection, just to name a few. In this paper, the term drone is used to mean both Unmanned Aerial Vehicle and small Unmanned Aircraft System vehicles. Flight infrastructure can currently only support a few thousand aircraft flying over the United States National Airspace System (NAS) at any given time. A delay atone airport sends ripple effects through the system, causing more delays and missed connections. Once regulations and safety policies are put in place to allow for the widespread use of unmanned drones, the number of aircraft in the NAS is expected to skyrocket to millions, potentially congesting the airspace resulting in possible separation violations. In air traffic control, separation is the concept of keeping an “ownship” aircraft outside a minimum distance from “intruder” aircraft to reduce the risk of the aircraft colliding, as well as preventing accidents due to secondary factors, such as wake turbulence. Maintaining proper separation is a safety critical property for drones in the airspace. This paper addresses separation in time and in distance for high volume corridors (en-route) and lanes(on ground). The requirements and necessary conditions for maintaining proper separation and reaching maximum throughput for a given corridor/lane are addressed assuming unidirectional corridors/lanes where an aircraft arrives from one side and departs from the opposite side. Simulation results are presented that show the presented solution guarantees a set of drones to reach the equilibrium state by adjusting their speed based on their distance to the aircraft in front of them. The equilibrium state is defined as a state when a set of n aircraft moving at a relatively constant speed and uniform spacing from each other in a congested system. A congested system is defined as a state when the aircraft cannot move at their maximum allowed speed. Unlike existing centralized and pre-planned approaches, the proposed solution is fully distributed and enables autonomous aircraft to decide to adjust their speed and distance with respect to the preceding aircraft, dynamically. Simulation results are presented that assess the feasibility of the approach using a large number of drones and evaluate the scalability of the proposed solution.

Mahyar R. Malekpour↗
NASA NTRSDate not supplied

NASA Class A Certification of Core Flight Software (cFS)

NASA Gateway program has named cFS as the software architecture for the vehicle. The core CFS team (GSFC+JSC) is tasked to develop a certifiable release of the cFS bundle, by components, as class A, safety-critical flight software. It is to be available to all Gateway software developers, including our element vendors and international partners. Its availability & usage will be as stated by the Gateway User Agreement license. In this presentation, we will describe our general certification process, and more importantly, our certification artifacts that can be re-run to certify cFS on different platforms. Our goal is to also make available these certifiable packages to the open source community, specifically for cFE, OSAL and certain cFS applications and libraries that are currently hosted on NASA github (https://github.com/nasa).

Tam M Ngo↗
NASA NTRSDate not supplied

Blue-enriched Light Improves Alertness and Mood Following Abrupt Awakening from Slow Wave Sleep

INTRODUCTION: All crew on the International Space Station (ISS) have a sleep opportunity at the same time. Emergencies arising during this time require all crew members to be abruptly awoken from sleep and to be alert, ready to work as a team, and to perform safety-critical tasks soon after waking. However, crew may experience sleep inertia after waking, which is associated with reduced alertness, poor mood, and impaired performance, especially if woken from deep sleep (slow wave sleep, SWS). Light has been shown to improve alertness during sleep deprivation and circadian misalignment. In this study, we assessed the efficacy of blue-enriched light to improve alertness and mood immediately after waking from SWS, i.e., during the sleep inertia period. METHODS: Twelve participants kept a sleep schedule of 8.5 h for 5 nights and 5 h for one night prior to the overnight laboratory visit (confirmed by actigraphy). Participants went to bed at their scheduled habitual bedtime in the laboratory and were monitored by standard polysomnography. After at least 5 min of SWS, participants were awoken and exposed to either red ambient light (control) or blue-enriched light (light) for 1 h. During this time, participants completed a subjective scale of alertness (Karolinska Sleepiness Scale, KSS) and visual analogue scales (VAS) of mood at 2 min, 17 min, 32 min, and 47 min after waking. Following this sleep inertia measurement period, all lights were turned off and participants were allowed to return to sleep. They were then awoken again from their subsequent SWS period and exposed to the opposite condition (control or light). A linear mixed-effects model with fixed effects of condition, time, and condition*time and a random effect of participant was used to determine the impact of light across the testing period. An average of baseline responses (pre-sleep) was included as a covariate. RESULTS: Compared to the control condition, participants exposed to blue-enriched light reported feeling more alert (KSS: F1,77=4.955, p=.029; VASalert: F1,77=8.226, p=.005), more cheerful (VAScheerful: F1,77=8.615, p=.004), less depressed (VASdepressed: F1,77=4.649, p=.034), and less lethargic (VASlethargic: F1,77=5.652, p=.020). DISCUSSION: Exposure to blue-enriched light immediately after waking from SWS may help to improve subjective alertness and mood. Future analyses will explore whether these findings extend to effects on cognitive performance. This countermeasure to sleep inertia may be suitable for implementation to alert crew members during mid-sleep emergencies but requires further testing in field settings.

alertness↗
NASA NTRSDate not supplied

NASA Class A Certification of Core Flight Software (cFS)

NASA Gateway program has named cFS as the software architecture for the vehicle. The core CFS team (GSFC+JSC) is tasked to develop a certifiable release of the cFS bundle, by components, as class A, safety-critical flight software. It is to be available to all Gateway software developers, including our element vendors and international partners. Its availability & usage will be as stated by the Gateway User Agreement license. In this presentation, we will describe our general certification process, and more importantly, our certification artifacts that can be re-run to certify cFS on different platforms. Our goal is to also make available these certifiable packages to the open source community, specifically for cFE, OSAL and certain cFS applications and libraries that are currently hosted on NASA github (https://github.com/nasa).

Tam M Ngo↗
NASA NTRS2018

A Hybrid Method of Assurance Cases and Testing for Improved Confidence in Autonomous Space Systems

Autonomous systems react intelligently to their environments, making them capable of handling many possible conditions, but challenging to test. We are investigating a new test development method that aims to maximize the confidence to be achieved by combining Assurance Cases with High Throughput Testing (HTT). Assurance Cases, developed for safety-critical systems, are a rigorous argument that the system satisfies a property (e.g., the Mars rover will not tip over during a traverse). They integrate testing, analysis, and environmental and operational assumptions, from which the set of conditions that testing must cover is determined. In our method, information from the Assurance Case is used to determine the test coverage needed, and then input to HTT to generate the minimal test suites needed to provide that coverage.

Huntsberger, Terry↗
NASA NTRSDate not supplied

Hybrid Model Based Approaches for Systems Health Management and Prognostics

To facilitate and solve the prediction problem, awareness of the current health state of the system is key, since it is necessary to perform condition-based predictions. To accurately predict the future state of any system, it is required to possess knowledge of its current health state and future operational conditions. Latest achievements of data-driven algorithms in regression of complex nonlinear functions and classification tasks have generated a growing interest in artificial intelligence for industrial applications. Complex multi-physics models as well as digital twins, once purely built on physics and corresponding simplified lumped parameter iterations, can now benefit from machine learning algorithms to mitigate the lack of understanding of some complex behavior. Given models of the current and future system behavior, a general approach of model-based prognostics can solve the prediction problem and further decision making. In principle, data driven approaches can replace expensive experimental test-setups as well as reduce the number of simulations needed to explore, e.g., the parametric space of a multi-parameter model. Nonetheless, the limitations of pure data-driven methods came to light rather quickly, at least for some industries. In many industrial applications, data acquisition is costly, and the volume of data that can be collected does not satisfy the requirements for an effective model training and cross-validation. Therefore, some recent works in the area of machine learning is focusing on blending physics with data-driven algorithms, thus mitigating the drawbacks of the two approaches and emphasizing respective advantages. Partial physical knowledge of the problem can aid the learning process by “guiding” the algorithm towards efficient solutions that satisfy the physics driving the system behavior. The result is a hybrid modeling approach combining physical knowledge as well data driven methods to develop a unified hybrid approach. A hybrid framework for fusing information from physics-based performance models along with deep learning algorithms for prognostics of complex safety critical systems is presented. In this framework, physics-based performance models infer unobservable model parameters related to the system's components health solving a calibration problem in the deep learning approach.

Hybrid Modeling↗
NASA NTRSDate not supplied

Rise and Shine: Using Light as a Countermeasure to Sleep Inertia

INTRODUCTION: Sleep inertia describes the phenomenon of sleepiness and poor performance experienced after waking from sleep. This period of impaired alertness and performance is of significant concern to workers who nap on shift, or work on-call and are required to perform safety-critical tasks soon after waking (e.g., emergency services, healthcare, military). Light has been shown to acutely improve alertness during sleep deprivation and circadian misalignment. In this study, we assessed the efficacy of blue-enriched light to improve alertness and mood immediately after waking from SWS, i.e., during the sleep inertia period. METHODS: Twelve participants kept a sleep schedule of 8.5 h for 5 nights and 5 h for one night prior to the overnight laboratory visit (confirmed by actigraphy). Participants went to bed at their scheduled habitual bedtime in the laboratory and were monitored by standard polysomnography. After at least 5 min of SWS, participants were awoken and exposed to either red ambient light (control) or blue-enriched light (light) for 1 h. During this time, participants completed a subjective scale of alertness (Karolinska Sleepiness Scale, KSS) and visual analogue scales (VAS) of mood at 2 min, 17 min, 32 min, and 47 min after waking. Following this sleep inertia measurement period, all lights were turned off and participants were allowed to return to sleep. They were then awoken again from their subsequent SWS period and exposed to the opposite condition (control or light). A linear mixed-effects model with fixed effects of condition, time, and condition*time and a random effect of participant was used to determine the impact of light across the testing period. An average of baseline responses (pre-sleep) was included as a covariate. RESULTS: Compared to the control condition, participants exposed to blue-enriched light reported feeling more alert (KSS: F1,77=4.955, p=.029; VASalert: F1,77=8.226, p=.005), more cheerful (VAScheerful: F1,77=8.615, p=.004), less depressed (VASdepressed: F1,77=4.649, p=.034), and less lethargic (VASlethargic: F1,77=5.652, p=.020). DISCUSSION: Exposure to blue-enriched light immediately after waking from SWS may help to improve subjective alertness and mood. Future analyses will explore whether these findings extend to effects on cognitive performance. This countermeasure to sleep inertia may be suitable for implementation to alert crew members during mid-sleep emergencies but requires further testing in field settings.

alertness↗
NASA NTRSDate not supplied

Assured Contingency Landing Management for Advanced Air Mobility

Advanced Air Mobility (AAM) is quickly developing as a new air transportation system that moves people and packages in the regions previously not / less served by the current aviation systems. Such AAM must operate safely despite the potential to encounter hazards and experience anomalies and failures in-flight. It becomes especially important to have systematic auto-mitigation strategies to perform safe contingency actions in AAM flight operations, as pilots have limited Situational Awareness (SA) and limited time to make prompt decisions when encountering failures/anomalies in high-density low altitude airspace. This paper presents Assured Contingency Landing Management (ACLM) with an online landing strategy selection to decide between the following three options when a contingency landing is required: (1) Return-to-launch landing site, (2) Land immediately at a nearby clear but unprepared site, (3) Land at a prepared landing site from the approximate footprint. Our presented algorithm shows a real-time auto-mitigation loop with multiple threads that run simultaneously to check controllability, reachability, and intermediate decisions to hold/ loiter or continue the flight plan as the landing strategy solution is being computed. Case study simulation is demonstrated with the safety-critical propulsion system and battery system and shows how different failure scenarios impact the landing strategy selection.

Autonomous Mitigation↗
NASA NTRSDate not supplied

Bowtie Analysis of the Effects of Unmanned Aircraft on Air Traffic Control

Within the aviation domain, there is a growing industry demand to develop and integrate remotely piloted operations into the National Airspace System. However, it is not yet well understood how the integration of unmanned aircraft with impact air traffic control, and specifically, the air traffic controllers who are at the sharp end of this safety critical system. This research presented in this paper aimed to begin to address this gap in understanding by identifying and exploring potential hazards associated with introducing Unmanned Aircraft into the national airspace system, and identify possible mitigations to reduce identified risks. A bowtie risk analysis methodology was used to identify and analyze hazards. A focus-group format discussion was conducted with nine subject matter experts as participants. Findings identified five areas of potential risk, each associated with multiple hazards. Mitigations for each hazard are reported. Findings have essential implications for the safe and efficient integration of unmanned aircraft into the national airspace.

Tamsyn Edwards↗