SEARCH · Engineering Papers

Results for “risk informed design”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,117 records · Page 62

All sources NASA NTRS DOE OSTI

NASA NTRS2014

Examining the Link Between Food Prices and Food Insecurity: a Multi-Level Analysis of Maize Price and Birthweight in Kenya

In developing countries where many poor people rely on rainfed, locally produced food for the majority of their caloric intake, shifts in climate and weather patterns can dramatically reduce agricultural productivity. The reduction in agricultural productivity reduces overall food availability and ultimately impacts food accessibility, putting millions of people at risk for malnutrition. In this project we focus on Kenya where roughly a third of households are food insecure. We examine the relationship of the price of maize and low birth weight to help quantify the impact of local food prices on one outcome of household food insecurity. Using spatially referenced data from recent Kenyan Demographic and Health Survey datasets, price data, livelihood information, and a remotely sensed-based measure of local growing season productivity, we develop a dataset linking pregnancies occurring from 2001 to 2008 to the spatially and temporally relevant maize price data. We construct several regression models to examine the impact of local maize prices and remotely sensed based estimates of crop production on infant birth weight - specifically low birth weight. The results of the models highlight the importance of including community crop production to evaluate maize price impacts on low birth weight outcomes. Also, because of the positive correlation between pre-pregnancy maize prices and birth weight, the results suggest that some households may benefit from high prices or that high prices may impact the number of conceptions. More generally, our work demonstrates that multilevel models that account for community-level variation are important for disentangling these complex relationships and can contribute to the discussion of how to design more effective food policies.

Low birth weight↗

NASA NTRSDate not supplied

Logistics Rates and Assumptions for Future Human Spaceflight Missions Beyond LEO

As NASA prepares for future human spaceflight missions with extended crew duration in destinations beyond low Earth orbit (LEO), the Agency has focused itself on understanding the drivers to sustainably support human life beyond Earth’s atmosphere. Future missions to deep space, the lunar surface, and eventually the Martian surface pose new challenges in ensuring the crew is sufficiently supplied with all necessary materials. To mitigate the risk of not delivering sufficient consumables and logistics for human spaceflight missions, NASA has examined past human space mission data and developed metabolic modeling to determine estimates for the crew consumption rates of fluids, solid consumables, and additional equipment needed. This paper is a compilation of guidelines, rates, and assumptions necessary to evaluate the logistics needs for future human exploration conceptual missions beyond LEO, providing a starting point and resource of information regarding usage rates and overall logistics supply planning for crewed exploration missions. Logistics represent all equipment and supplies not installed as part of the vehicle that are needed to support mission activities. Logistics can be further divided into specific categories, including consumables, maintenance items, spares, utilization, outfitting, as well as any packaging required. This paper will also provide use case examples of logistics needs to support human missions in deep space, including a conceptual lunar surface mission. The paper provides information necessary to calculate the mass and volume of known logistics for conceptual future human exploration missions beyond LEO. The assumptions in the paper are updated versions of previous assumptions made by the Agency and were derived from a number of sources, including International Space Station (ISS) historical usage and resupply rates, the Life Support Baseline Values and Assumptions Document (BVAD) 2022, Human Integration Design Handbook (HIDH) 2014, and data gathered from NASA human spaceflight programs and projects. The primary goal of the paper is to establish a set of consistent reference rates that multiple teams and groups can utilize to conduct logistics analysis and compare cases. This methodology is for initial estimates of conceptual human missions and does not take the place of detailed analysis for programs, nor does it provide requirements for programs.

Human Spaceflight↗

NASA NTRSDate not supplied

Logistics Rates and Assumptions for Future Human Spaceflight Missions Beyond LEO

Human Spaceflight↗

DOE OSTI2025

Nanobody screening and machine learning guided identification of cross-variant anti-SARS-CoV-2 neutralizing heavy-chain only antibodies

Severe Acute Respiratory Syndrome Coronavirus 2 (SARS-CoV-2) continues to persist, demonstrating the risks posed by emerging infectious diseases to national security, public health, and the economy. Development of new vaccines and antibodies for emerging viral threats requires substantial resources and time, and traditional development platforms for vaccines and antibodies are often too slow to combat continuously evolving immunological escape variants, reducing their efficacy over time. Previously, we designed a next-generation synthetic humanized nanobody (Nb) phage display library and demonstrated that this library could be used to rapidly identify highly specific and potent neutralizing heavy chain-only antibodies (HCAbs) with prophylactic and therapeutic efficacy in vivo against the original SARS-CoV-2. In this study, we used a combination of high throughput screening and machine learning (ML) models to identify HCAbs with potent efficacy against SARS-CoV-2 viral variants of interest (VOIs) and concern (VOCs). To start, we screened our highly diverse Nb phage display library against several pre-Omicron VOI and VOC receptor binding domains (RBDs) to identify panels of cross-reactive HCAbs. Using HCAb affinity for SARS-CoV-2 VOI and VOCs (pre-Omicron variants) and model features from other published data, we were able to develop a ML model that successfully identified HCAbs with efficacy against Omicron variants, independent of our experimental biopanning workflow. This biopanning informed ML approach reduced the experimental screening burden by 78% to 90% for the Omicron BA.5 and Omicron BA.1 variants, respectively. The combined approach can be applied to other emerging viruses with pandemic potential to rapidly identify effective therapeutic antibodies against emerging variants.

Antibodies↗

NASA NTRS2006

What Happened, and Why: Toward an Understanding of Human Error Based on Automated Analyses of Incident Reports

The objective of the Aviation System Monitoring and Modeling (ASMM) project of NASA s Aviation Safety and Security Program was to develop technologies that will enable proactive management of safety risk, which entails identifying the precursor events and conditions that foreshadow most accidents. This presents a particular challenge in the aviation system where people are key components and human error is frequently cited as a major contributing factor or cause of incidents and accidents. In the aviation "world", information about what happened can be extracted from quantitative data sources, but the experiential account of the incident reporter is the best available source of information about why an incident happened. This report describes a conceptual model and an approach to automated analyses of textual data sources for the subjective perspective of the reporter of the incident to aid in understanding why an incident occurred. It explores a first-generation process for routinely searching large databases of textual reports of aviation incident or accidents, and reliably analyzing them for causal factors of human behavior (the why of an incident). We have defined a generic structure of information that is postulated to be a sound basis for defining similarities between aviation incidents. Based on this structure, we have introduced the simplifying structure, which we call the Scenario as a pragmatic guide for identifying similarities of what happened based on the objective parameters that define the Context and the Outcome of a Scenario. We believe that it will be possible to design an automated analysis process guided by the structure of the Scenario that will aid aviation-safety experts to understand the systemic issues that are conducive to human error.

Maille, Nicolas P.↗

DOE OSTI2025

Nuclear Thermal Rocket Emulator for a Hardware-in-the-Loop Test Bed

To support NASA’s mission to use nuclear thermal rockets for future Mars missions, an instrumentation and control test bed has been built at Oak Ridge National Laboratory. The system is designed as a hardware-in-the-loop test bed for testing control elements and autonomous control algorithms for nuclear thermal propulsion rockets. The mock reactor system consists of a modular and scalable framework, using inexpensive components and open-source software. The hardware system consists of a two-phase flow loop and a mock reactor with six control drums. A single-board computer (NVIDIA Jetson) handles reactor core emulation and hosts a message queuing telemetry transport broker that allows user-deployed control algorithms to interact with the system hardware. The reactor emulator receives sensor data from the hardware and provides the simulated performance of the reactor under steady-state, transient, and fault conditions. The emulator uses a reactivity lookup table and the point kinetics equations to solve for the reactor dynamics in real time. Emulated reactor dynamics and sensor input inform the autonomous control algorithm’s decision-making in a closed-loop manner. The current system is capable of operating at 10 Hz, but faster cycle rates are an area of ongoing research. This test bed will enable NASA and other space vendors to rigorously test their autonomous control systems for NTP rockets under transient (reactor startup and shutdown), steady-state, and fault conditions to reduce development time and risk for autonomous control systems in future missions.

autonomous control↗

DOE OSTI2022

Recommendations for Secure Transport: Material Conveyance Physical Protection Technology

Nuclear material is at higher risk of theft and sabotage during transport than during any other phase of the nuclear fuel lifecycle. Nuclear materials are transported in the public domain where adversaries have an upper hand by taking advantage of the time and location of the theft or sabotage attempt. As such, even modest threat profiles for transport of nuclear and radioactive material can require substantial detection and delay measures to support timely response. Conveyance tracking augmented with technology that improves on-the-scene situational awareness at a remote monitoring center has been adopted as a de-facto standard approach for transportation security. At present, the extended tracking and situational awareness capabilities needed for a nuclear material shipment, as is provided by the purpose designed, Transportation – Security, Tracking and Reporting (T-STAR) System, do not exist in a single commercial off-the-shelf (COTS) solution. Typically, the COTS systems that excel in one area are deficient in other areas, presenting challenges to designing well-rounded, robust systems. Still, COTS solutions can offer the basic set of tracking and situational awareness capabilities by indicating last update time, current location, and route taken. By incorporating vehicle and driver performance measures via the vehicle’s controller area network (CAN bus) and video alongside other data streams allows telemetry and other shipment information to be assessed in novel ways.This paper describes the operation, capabilities and features of various conveyance protection systems and approaches, assesses emerging technologies and how they could be used through a unified interface, and enumerates additional ways to provide early detection using vehicle, onboard technologies, effective delay technologies and approaches and simple equipment to improve protection during transport.

Shannon, Michael↗

DOE OSTI2023

Assessment of Potential Pennycress Availability and Suitable Sites for Sustainable Aviation Fuel Refineries in Ohio

Pennycress grain has a relatively high oil content (25–36%) and it is considered a desirable feedstock to produce sustainable aviation fuel (SAF). Pennycress crop can be integrated into the corn–soybean rotation as a winter cover crop in the midwestern U.S. to provide both ecosystem services and economic benefits for the farmers, while serving as a promising feedstock for SAF production. For pennycress-based SAF biorefineries to be established at the commercial scale, a sustainable design of the supply system is required to provide reliable information on feedstock availability and optimal facility locations. The objectives of this research were to assess the pennycress production potential in Ohio, and to identify the best locations to establish the SAF biorefineries. To estimate the pennycress production potential in Ohio, a geographic information system (GIS)-based model was developed using the spatially explicit six-year historical data on areas that were planted in the corn–soybean rotation for the period of 2013 through 2018, pennycress yield estimates from field-based experiments reported in the literature, and the soil productivity index for the region of study. Optimal SAF biorefinery locations were identified using a GIS-based location-allocation model. Annual land potentially available for pennycress production in Ohio was estimated to be ~0.6 million ha, which could produce ~1.1 million metric tons of pennycress grain as feedstock to produce ~210 million liters of SAF, depending on the pennycress yield level, oil content, and conversion efficiencies. In addition, the optimum locations for 12 biorefineries, each at an annual capacity of 18.9 million liters of SAF, were identified, and the average transportation distance was estimated to be 35 and 58 km for maximizing attendance and coverage conditions, respectively. The outcomes of this research would help minimize the risks associated with feedstock supply and cost variabilities for pennycress-based SAF production in the region.

Mousavi-Avval, Seyed Hashem↗

NASA NTRS2016

Evidence Report: Risk of Performance Errors Due to Training Deficiencies

Substantial evidence supports the claim that inadequate training leads to performance errors. Barshi and Loukopoulos (2012) demonstrate that even a task as carefully developed and refined over many years as operating an aircraft can be significantly improved by a systematic analysis, followed by improved procedures and improved training (see also Loukopoulos, Dismukes, & Barshi, 2009a). Unfortunately, such a systematic analysis of training needs rarely occurs during the preliminary design phase, when modifications are most feasible. Training is often seen as a way to compensate for deficiencies in task and system design, which in turn increases the training load. As a result, task performance often suffers, and with it, the operators suffer and so does the mission. On the other hand, effective training can indeed compensate for such design deficiencies, and can even go beyond to compensate for failures of our imagination to anticipate all that might be needed when we send our crew members to go where no one else has gone before. Much of the research literature on training is motivated by current training practices aimed at current training needs. Although there is some experience with operations in extreme environments on Earth, there is no experience with long-duration space missions where crews must practice semi-autonomous operations, where ground support must accommodate significant communication delays, and where so little is known about the environment. Thus, we must develop robust methodologies and tools to prepare our crews for the unknown. The research necessary to support such an endeavor does not currently exist, but existing research does reveal general challenges that are relevant to long-duration, high-autonomy missions. The evidence presented here describes issues related to the risk of performance errors due to training deficiencies. Contributing factors regarding training deficiencies may pertain to organizational process and training programs for spaceflight, such as when training programs are inadequate or unavailable. Furthermore, failure to match between tasks on the one hand, and learning and memory abilities on the other hand is a contributing factor, especially when individuals' relative efficiency with which new information is acquired, and adjustments made in behavior or thinking, are inconsistent with mission demands. Thus, if training deficiencies are present, the likelihood of errors or of the inability to successfully complete a task increases. What's more, the overall risk to the crew, the vehicle, and the mission increases.

Barshi, Immanuel↗

NASA NTRSDate not supplied

Dry Saliva Development-Artemis

Prior to the deployment of prolonged deep space missions which may carry increased crew health risks, it is essential to determine the effect that missions beyond the Van Allen Belt will have on physiology. Historically the National Aeronautics and Space Administration (NASA), Human Research Program (HRP) has developed, conducted, and delivered research findings and countermeasures that will maintain the health and safety of crews aboard the International Space Station (ISS) in anticipation of future exploration class missions. To support these objectives, research operations on ISS typically include the collection and storage of human physiological samples and their return to Earth for analysis. Transition to Gateway and Artemis lunar exploration will limit the available up mass and biosample return capability resulting in new challenges to monitor crew health during the mission. The Artemis lunar missions provide a perfect opportunity to assess new technology that could support crew biosample return that is compatible with the severe operational constraints of Artemis mission design. Dried biosample chemistry analysis is a potential technology that can enable the collection of samples and tracking of crew health during these exploration class missions. The development and implementation of dried biosample chemistry technology for tracking immune health, viral reactivation and hormone fluctuations provide a simple alternative strategy for sample collection and sample return (light weight non-conditioned stowage option) for the continuation of human research during Artemis missions. Saliva is established as an informative biosample that has both its own unique available analytes as well as others that are also present in blood. Saliva is already routinely collected from ISS astronauts for the detection of stress hormones and latent virus DNA. The ‘Dry Saliva’ book sample collection/storage protocol, already successfully deployed to ISS, represents a perfect method for collecting biosamples from Gateway and Artemis astronauts because it requires a simple, non-invasive sample collection protocol, minimum volume, and uses non-conditioned storage. We are currently conducting an expanded stability study of the dry saliva analyte platform to include additional stress hormones, cytokines, antimicrobial proteins, and latent virus DNA as well as other markers of immunity and inflammation. Validation testing on parabolic flight will establish collection methods for saliva and blood to dry sampling substrates to finalize the collection protocols for flight. For the new expanded analyte stability study, a short-term stability study with time points out to 14 days has been completed with analysis underway to determine whether additional analytes could be recovered, as well as assessing the best storage conditions for the samples collected. In parallel, a long-term stability study is being conducted out to 1 year to improve the stability of some unstable analytes. To this end, the NASA Johnson Space Center’s Immunology/Virology lab is currently finalizing the saliva dry chemistry platform, including assay compatibility and stability studies. This technology is approved to be implemented, as part of the ‘Biomarkers’ study, during Artemis II through Artemis IV lunar missions.

Mayra Nelman-Gonzalez↗

DOE OSTI2022

Rapidly Deployable Acoustic Monitoring and Localization System Based on a Low-Cost Wave Buoy Platform

The primary objective of this project is to develop a cost-effective, fit-for-purpose environmental monitoring system, “NoiseSpotter®,” that characterizes, classifies, and provides accurate location information for anthropogenic and natural sounds in near real-time. NoiseSpotter was developed to support the evaluation of potential acoustic effects of marine energy (ME) projects. By utilizing a compact array of three acoustic particle motion sensors, NoiseSpotter triangulates individual bearings to provide sound source localization to within 5% accuracy, allowing the ability to discern ME device sounds relative to other confounding sounds in the environment, while providing location estimates to nearby marine mammals for environmental mitigation purposes. The ME industry needs proven solutions to meet environmental impact assessment needs. The NoiseSpotter® includes off-the-shelf, modular components that are easy to assemble and disassemble. Its acoustic particle motion sensors are commercially available and the data logger and real-time telemetry system is designed to be plug-and-play. The entire system is relatively compact and can be deployed from small vessels. NoiseSpotter’s near real-time capability enables operational monitoring of ME sounds, particularly during early stages of technology adoption to facilitate mitigation of potential noise effects. Widespread adoption of the technology for acoustic monitoring of ME devices requires that it be cost effective; hence the anticipated commercial cost of system hardware is $35,000. This project contributes to reducing barriers to ME testing through support of scientific research focused on reducing or mitigating environmental risks and lowering costs and complexity of environmental monitoring. This project has developed an acoustic monitoring system, NoiseSpotter® (U.S. Patent No. 11,156,734 and U.S. Registered Trademark No. 6,442,313), to detect and characterize baseline noise and sounds from ME operations and support geolocation of detected sounds. The intended outcome of the project is to mitigate concerns about the potential for ME device noise to alter marine mammal or fish behavior. NoiseSpotter® enables cost-effective, near real-time acoustic monitoring of an operational ME device relative to ambient environmental noise and provides a technical basis for ME developers seeking to navigate the permitting process in an efficient manner.

16 TIDAL AND WAVE POWER↗

NASA NTRS2017

RNAV STAR Procedural Adherence

Flight crews and air traffic controllers have reported many safety concerns regarding area navigation standard terminal arrival routes (RNAV STARs). However, our information sources to quantify these issues are limited to subjective reporting and time consuming case-by-case investigations. This work is a preliminary study into the objective performance of instrument procedures and provides a framework to track procedural concepts and assess design functionality. We created a tool and analysis methods for gauging aircraft adherence as it relates to RNAV STARs. This information is vital for comprehensive understanding of how our air traffic behaves. In this exploratory archival study, we mined the performance of 24 major US airports over the preceding three years. Overlaying radar track data on top of RNAV STAR routes provided a comparison between aircraft flight paths and the waypoint positions and altitude restrictions. NASA Ames Supercomputing resources were utilized to perform the data mining and processing. We assessed STARs by lateral transition path (full-lateral), vertical restrictions (full-lateralfull-vertical), and skipped waypoints (skips). In addition, we graphed aircraft altitudes relative to the altitude restrictions and their occurrence rates. Full-lateral adherence was generally greater than Full-lateralfull-vertical, but the difference between the rates was not always consistent. Full-lateralfull-vertical adherence medians of the 2016 procedures ranged from 0 in KDEN (Denver) to 21 in KMEM (Memphis). Waypoint skips ranged from 0 to nearly 100 for specific waypoints. Altitudes restrictions were sometimes missed by systematic amounts in 1000 ft. increments from the restriction, creating multi-modal distributions. Other times, altitude misses looked to be more normally distributed around the restriction. This tool may aid in providing acceptability metrics as well as risk assessment information.

rnav↗

DOE OSTI2024

Thinking Beyond the Default User: The Impact of Gender, Stereotypes, and Modality on Interpretation of User Needs

Throughout the mechanical design process, designers, the majority of whom are men, often fail to consider the needs of women, resulting in consequences ranging from inconvenience to increased risk of serious injury or death. Although these biases are well studied in other fields of research, the mechanical design field lacks formal investigation into this phenomenon. In this study, engineering students (n = 301) took a survey in which they read a Persona describing a student makerspace user and a Walkthrough describing the user’s interaction with the makerspace while completing a project. During the Walkthrough, the user encountered various obstacles or Pain Points. Participants were asked to recall and evaluate the Pain Points that the user encountered and then evaluated their perceptions of the makerspace and user. Furthermore, the independent variables under investigation were the gender of the user Persona (woman, gender-neutral, or man), the Walkthrough room case (crafting or woodworking makerspace), and the modality of the Persona and Walkthrough (text- or audio-based). Results showed that participants from the Text-based modality were better able to recall Pain Points compared to participants from the Audio-based modality. Pain Points were assessed as more severe when they impacted women users, potentially stemming from protective paternalism. In addition to finding that the gender of a user impacted the way a task environment was perceived, results confirmed the presence of androcentrism, or “default man” assumptions, in the way designers view end users of unknown gender. Promisingly, providing user Persona information in an audio modality significantly reduced this bias compared to text-based modalities, indicating that providing richer detail in user personas has the capability to reduce gender bias in designers.

cognitive-based design↗

NASA NTRS2017

Objective Assessment Method for RNAV STAR Adherence

Flight crews and air traffic controllers have reported many safety concerns regarding area navigation standard terminal arrival routes (RNAV STARs). Specifically, optimized profile descents (OPDs). However, our information sources to quantify these issues are limited to subjective reporting and time consuming case-by-case investigations. This work is a preliminary study into the objective performance of instrument procedures and provides a framework to track procedural concepts and assess design specifications. We created a tool and analysis methods for gauging aircraft adherence as it relates to RNAV STARs. This information is vital for comprehensive understanding of how our air traffic behaves. In this study, we mined the performance of 24 major US airports over the preceding three years. Overlaying 4D radar track data onto RNAV STAR routes provided a comparison between aircraft flight paths and the waypoint positions and altitude restrictions. NASA Ames Supercomputing resources were utilized to perform the data mining and processing. We assessed STARs by lateral transition path (full-lateral), vertical restrictions (full-lateral/full-vertical), and skipped waypoints (skips). In addition, we graphed frequencies of aircraft altitudes relative to the altitude restrictions. Full-lateral adherence was always greater than Full-lateral/ full- vertical, as it is a subset, but the difference between the rates was not consistent. Full-lateral/full-vertical adherence medians of the 2016 procedures ranged from 0% in KDEN (Denver) to 21% in KMEM (Memphis). Waypoint skips ranged from 0% to nearly 100% for specific waypoints. Altitudes restrictions were sometimes missed by systematic amounts in 1,000 ft. increments from the restriction, creating multi-modal distributions. Other times, altitude misses looked to be more normally distributed around the restriction. This tool may aid in providing acceptability metrics as well as risk assessment information.

Stewart, Michael↗

NASA NTRS1998

Development of an Experimental Data Base to Validate Compressor-Face Boundary Conditions Used in Unsteady Inlet Flow Computations

The ability to predict the dynamics of integrated inlet/compressor systems is an important part of designing high-speed propulsion systems. The boundaries of the performance envelope are often defined by undesirable transient phenomena in the inlet (unstart, buzz, etc.) in response to disturbances originated either in the engine or in the atmosphere. Stability margins used to compensate for the inability to accurately predict such processes lead to weight and performance penalties, which translate into a reduction in vehicle range. The prediction of transients in an inlet/compressor system requires either the coupling of two complex, unsteady codes (one for the inlet and one for the engine) or else a reliable characterization of the inlet/compressor interface, by specifying a boundary condition. In the context of engineering development programs, only the second option is viable economically. Computations of unsteady inlet flows invariably rely on simple compressor-face boundary conditions (CFBC's). Currently, customary conditions include choked flow, constant static pressure, constant axial velocity, constant Mach number or constant mass flow per unit area. These conditions are straightforward extensions of practices that are valid for and work well with steady inlet flows. Unfortunately, it is not at all likely that any flow property would stay constant during a complex system transient. At the start of this effort, no experimental observation existed that could be used to formulate of verify any of the CFBC'S. This lack of hard information represented a risk for a development program that has been recognized to be unacceptably large. The goal of the present effort was to generate such data. Disturbances reaching the compressor face in flight may have complex spatial structures and temporal histories. Small amplitude disturbances may be decomposed into acoustic, vorticity and entropy contributions that are uncoupled if the undisturbed flow is uniform. This study is focused on the response of an inlet/compressor system to acoustic disturbances. From the viewpoint of inlet computations, acoustic disturbances are clearly the most important, since they are the only ones capable of moving upstream. Convective and entropy disturbances may also produce upstream-moving acoustic waves, but such processes are outside the scope of the present study.

Sajben, Miklos↗

NASA NTRS2008

Sensor Selection and Data Validation for Reliable Integrated System Health Management

For new access to space systems with challenging mission requirements, effective implementation of integrated system health management (ISHM) must be available early in the program to support the design of systems that are safe, reliable, highly autonomous. Early ISHM availability is also needed to promote design for affordable operations; increased knowledge of functional health provided by ISHM supports construction of more efficient operations infrastructure. Lack of early ISHM inclusion in the system design process could result in retrofitting health management systems to augment and expand operational and safety requirements; thereby increasing program cost and risk due to increased instrumentation and computational complexity. Having the right sensors generating the required data to perform condition assessment, such as fault detection and isolation, with a high degree of confidence is critical to reliable operation of ISHM. Also, the data being generated by the sensors needs to be qualified to ensure that the assessments made by the ISHM is not based on faulty data. NASA Glenn Research Center has been developing technologies for sensor selection and data validation as part of the FDDR (Fault Detection, Diagnosis, and Response) element of the Upper Stage project of the Ares 1 launch vehicle development. This presentation will provide an overview of the GRC approach to sensor selection and data quality validation and will present recent results from applications that are representative of the complexity of propulsion systems for access to space vehicles. A brief overview of the sensor selection and data quality validation approaches is provided below. The NASA GRC developed Systematic Sensor Selection Strategy (S4) is a model-based procedure for systematically and quantitatively selecting an optimal sensor suite to provide overall health assessment of a host system. S4 can be logically partitioned into three major subdivisions: the knowledge base, the down-select iteration, and the final selection analysis. The knowledge base required for productive use of S4 consists of system design information and heritage experience together with a focus on components with health implications. The sensor suite down-selection is an iterative process for identifying a group of sensors that provide good fault detection and isolation for targeted fault scenarios. In the final selection analysis, a statistical evaluation algorithm provides the final robustness test for each down-selected sensor suite. NASA GRC has developed an approach to sensor data qualification that applies empirical relationships, threshold detection techniques, and Bayesian belief theory to a network of sensors related by physics (i.e., analytical redundancy) in order to identify the failure of a given sensor within the network. This data quality validation approach extends the state-of-the-art, from red-lines and reasonableness checks that flag a sensor after it fails, to include analytical redundancy-based methods that can identify a sensor in the process of failing. The focus of this effort is on understanding the proper application of analytical redundancy-based data qualification methods for onboard use in monitoring Upper Stage sensors.

Garg, Sanjay↗

NASA NTRS2022

Reliability-Aware Requirements Development for Autonomy Software

Autonomy is the ability of a system to make decisions and take actions in the presence of uncertainty. Validating autonomy, therefore, is a matter of validating that the system makes intelligent decisions even when there might be discrepancies between the observed and the expected state of the world as well as when the possible outcome of each of the possible courses of action is uncertain. During the requirements engineering phase, the functions, including those that are required to be autonomous and their expected behavior are specified. However, in the case of autonomous software system, it is challenging to specify all possible scenarios that the software may encounter. Additionally, since autonomous behaviors cannot always be fully predetermined, it is difficult to reason about their completeness and correctness. While these challenges are also faced with non-autonomous system, they are more prevalent for autonomous system due to their complexity and emergent behavior. Our efforts have been three-fold. On one hand, we have developed a goal-based method for requirements decomposition. We have embedded this approach into a higher-level systems engineering framework and then developed methods for decision and reliability analysis within this framework. And finally, we use simulation analysis to validate the more theoretical methods and provide a feedback mechanism. The decision analysis approach (DA) helps in identifying and mitigating the run-time risks, by bringing to the forefront the uncertainties, decisions, interactions, and other factors that may cause autonomous software to make erroneous decisions. The DA framework is used to quantify, for each decision that the software can make, failure risk due to uncertainties. The information about the key decisions and circumstances that can cause autonomous system to make incorrect decisions are used to generate test scenarios to be run in a simulator to ensure that the system can handle error-prone circumstances. The results or outcomes from decisions, based on the simulated scenarios, can then be leveraged to further gain insight of the assured system. We combine a goal-based approach with simulation analysis to facilitate requirements development for autonomous systems and further provide a method for run-time systems level reliability considerations during the autonomous software development process. The DA and the reliability analysis methods provide a formalism for the consideration of uncertainty in the run time decision-making process for autonomous software. This formalism considers the uncertainty involved in the outcome of different courses of action, in terms of performance and cost, as well as a method to consider the system level reliability implications. System level reliability considerations for autonomous software decision making contribute to the satisfaction of the system level goals over the lifecycle of a given mission. We demonstrate our approach using a hypothetical rover path planning example. The requirements for our rover simulator are based on existing literature about Mars rovers and lessons learned from real world observations at JPL. The specifics of the autonomy design for the Mars rovers, that have not been previously cleared for external release, are not used for our demonstrations.

Lindvall, Mikael↗

NASA NTRS2012

Autonomous Information Unit for Fine-Grain Data Access Control and Information Protection in a Net-Centric System

As communication and networking technologies advance, networks will become highly complex and heterogeneous, interconnecting different network domains. There is a need to provide user authentication and data protection in order to further facilitate critical mission operations, especially in the tactical and mission-critical net-centric networking environment. The Autonomous Information Unit (AIU) technology was designed to provide the fine-grain data access and user control in a net-centric system-testing environment to meet these objectives. The AIU is a fundamental capability designed to enable fine-grain data access and user control in the cross-domain networking environments, where an AIU is composed of the mission data, metadata, and policy. An AIU provides a mechanism to establish trust among deployed AIUs based on recombining shared secrets, authentication and verify users with a username, X.509 certificate, enclave information, and classification level. AIU achieves data protection through (1) splitting data into multiple information pieces using the Shamir's secret sharing algorithm, (2) encrypting each individual information piece using military-grade AES-256 encryption, and (3) randomizing the position of the encrypted data based on the unbiased and memory efficient in-place Fisher-Yates shuffle method. Therefore, it becomes virtually impossible for attackers to compromise data since attackers need to obtain all distributed information as well as the encryption key and the random seeds to properly arrange the data. In addition, since policy can be associated with data in the AIU, different user access and data control strategies can be included. The AIU technology can greatly enhance information assurance and security management in the bandwidth-limited and ad hoc net-centric environments. In addition, AIU technology can be applicable to general complex network domains and applications where distributed user authentication and data protection are necessary. AIU achieves fine-grain data access and user control, reducing the security risk significantly, simplifying the complexity of various security operations, and providing the high information assurance across different network domains.

Chow, Edward T.↗