Results for “Criticality Safety” — Page 63

NASA NTRSDate not supplied

A Strategic Approach for Dense, Integrated, Vehicle Navigation

Drone usage has been on the rise in recent years with applications that include parcel delivery, wildlife protection, precision farming, law enforcement, and industrial inspection, just to name a few. Once regulations and safety policies are put in place to allow for the widespread use of unmanned drones, the number of aircraft in the National Airspace System (NAS) is expected to skyrocket to millions, potentially congesting the airspace which increases the likelihood of separation violations and possibly incidents. Currently, flight infrastructure can only support a few thousand aircraft flying over the United States National Airspace System (NAS) at any given time. A delay at one airport can send ripple effects throughout the system, causing more delays and missed connections. In air traffic control, separation is the concept of keeping an “ownship” aircraft outside a minimum distance from “intruder” aircraft to reduce the risk of the aircraft colliding, as well as preventing accidents due to secondary factors, such as wake turbulence. Maintaining proper separation is often a safety critical property for fixed-wing drones in the airspace. This paper addresses drone separation in time and distance for high volume corridors (en route) and lanes (on ground), merging as well as crossing intersections of multiple corridors/lanes. In this paper, the term drone is applied to both Unmanned Aerial Vehicle (UAV) and small Unmanned Aircraft System (UAS) vehicles operating autonomously. There exists a gamut of approaches to the merging and crossing problems. At one end of the extreme are the conservative yet low cost and verifiable solutions of today that deal with two drones at a time. At the other end are complex Machine Learning-based solutions with high computing requirements for fully autonomous drones of the future that are expected to handle all contentions. This paper presents a feasible and verifiable strategic approach to these problems that is based on distributed cooperation between the drones and the infrastructure. Three phases of the strategic approach (Prepare, Adjust, Commit) are presented. Simulation results are presented that show the proposed approach is stable and resilient to induced perturbations and guarantees a set of fixed-wing drones to merge and cross intersections by adjusting their speed based on their distance to the aircraft in front of them while remaining in the equilibrium state. The equilibrium state is defined as the state when a set of n aircraft move at a relatively constant speed and uniform spacing from each other in a congested system. A congested system is defined as the state when at least one aircraft cannot move at its maximum allowed speed. Unlike existing centralized and pre-planned approaches, the proposed solution is fully distributed and enables autonomous aircraft to decide to adjust their speed and distance with respect to the preceding aircraft, dynamically. Simulation results are presented that assess the feasibility of the approach.

Distributed↗

NASA NTRSDate not supplied

A Strategic Approach for Dense, Integrated, Vehicle Navigation

Drone usage has been on the rise in recent years with applications that include parcel delivery, wildlife protection, precision farming, law enforcement, and industrial inspection, just to name a few. Once regulations and safety policies are put in place to allow for the widespread use of unmanned drones, the number of aircraft in the National Airspace System (NAS) is expected to skyrocket to millions, potentially congesting the airspace which increases the likelihood of separation violations and possibly incidents. Currently, flight infrastructure can only support a few thousand aircraft flying over the United States National Airspace System (NAS) at any given time. A delay at one airport can send ripple effects throughout the system, causing more delays and missed connections. In air traffic control, separation is the concept of keeping an “ownship” aircraft outside a minimum distance from “intruder” aircraft to reduce the risk of the aircraft colliding, as well as preventing accidents due to secondary factors, such as wake turbulence. Maintaining proper separation is often a safety critical property for fixed-wing drones in the airspace. This paper addresses drone separation in time and distance for high volume corridors (en route) and lanes (on ground), merging as well as crossing intersections of multiple corridors/lanes. In this paper, the term drone is applied to both Unmanned Aerial Vehicle (UAV) and small Unmanned Aircraft System (UAS) vehicles operating autonomously. There exists a gamut of approaches to the merging and crossing problems. At one end of the extreme are the conservative yet low cost and verifiable solutions of today that deal with two drones at a time. At the other end are complex Machine Learning-based solutions with high computing requirements for fully autonomous drones of the future that are expected to handle all contentions. This paper presents a feasible and verifiable strategic approach to these problems that is based on distributed cooperation between the drones and the infrastructure. Three phases of the strategic approach (Prepare, Adjust, Commit) are presented. Simulation results are presented that show the proposed approach is stable and resilient to induced perturbations and guarantees a set of fixed-wing drones to merge and cross intersections by adjusting their speed based on their distance to the aircraft in front of them while remaining in the equilibrium state. The equilibrium state is defined as the state when a set of n aircraft move at a relatively constant speed and uniform spacing from each other in a congested system. A congested system is defined as the state when at least one aircraft cannot move at its maximum allowed speed. Unlike existing centralized and pre-planned approaches, the proposed solution is fully distributed and enables autonomous aircraft to decide to adjust their speed and distance with respect to the preceding aircraft, dynamically. Simulation results are presented that assess the feasibility of the approach.

Distributed↗

NASA NTRSDate not supplied

Speech-Enhanced and Context Dependent Alerts: Future Implications for Spacecraft Design Abstract

In the future, NASA missions will involve many different space vehicles, habitats, and surface assets working together to provide safe and productive living and working environments for crew. Because these systems will be provided by multiple commercial companies working with NASA, it will be very different from missions of the past, bringing new challenges. One of the challenges is related to whether NASA should move beyond simple tone annunciation alerting systems, to more advanced systems that include speech. The other is related to determining the level of consistency required of safety-critical alert systems across spacecraft. Two studies were completed to address these important issues. The first study investigated the advantages and disadvantages of a tone+speech alert relative to the traditional tone-only alert. Results indicate that speech-enhanced alerts initially take longer to silence (the default action to which NASA personnel are trained), due to the need to listen to the entire message, but ultimately provided for faster understanding of the alert situation. Speech-enhanced alerts were also preferred by a large majority of crew-like study participants. An unexpected finding from this first study was that participants took longer to respond to tone-only alerts when they were mixed with speech- enhanced alerts. Participants waited to hear the speech message even for alerts they were trained to know did not contain speech components. This performance error is believed to be due to negative transfer of training. A second study focused on task and alert performance using a common set of tones across two contexts (“vehicles”) versus performance with a different set of tones for each context (“vehicle”). Participants were able to manage two different alert sets successfully; results indicate that discriminability of the two alert sets played a major role in their success. Implications for the design of spacecraft alerts are discussed and future areas of research are identified.

alerts↗

NASA NTRSDate not supplied

Authoring, Analyzing, and Monitoring Requirements for a Lift-Plus-Cruise Aircraft

Requirements specification and analysis is widely applied to ensure the correctness of industrial systems in safety critical domains. Requirements are often initially written in natural language, which is highly ambiguous, and as a second step transformed into a language with rigorous semantics for formal analysis. In this paper, we report on our experience in requirements creation and analysis, as well as run-time monitor generation using the Formal Requirement Elicitation Tool (FRET), on an industrial case study for a Lift-Plus-Cruise concept aircraft. We study the creation of requirements directly in the structured language of FRET without a prior definition of the same requirements in natural language. We focus on requirements describing state machines and discuss the challenges that we faced, in terms of creating requirements and generating monitors. We demonstrate how realizability, i.e., checking whether a requirements specification can be implemented, is crucial for understanding temporal interdependencies among requirements. Our study is the first complete attempt at using FRET to create industrial, realizable requirements and generate run-time monitors. Insight from lessons learned was materialized into new features in the FRET and JKind analysis frameworks.

Requirements engineering↗

NASA NTRSDate not supplied

NASA Armstrong Flight Research Center Dynamics and Controls (530)

AFRC Controls and Dynamics Branch - Research Areas: - Traditional GN&C - Classical and advanced control algorithms - Risk based approaches for safety critical applications - Integration of novel sensors and sensor fusion (FOSS, LIDAR, etc.) - Trajectory optimization and control - Flight/System Dynamics - Equations of Motion and integrated modeling of vehicles and vehicle systems - Unique and novel vehicle dynamics - Methods for extracting relevant vehicle dynamic information from flight data - Human and vehicle interfaces and interactions - Handling Qualities and Pilot-in-the-loop oscillations (PIO) predictions and design metrics - Ride quality research - Autonomy - Novel algorithms, sensors, and sensor fusion - Bounding risk for testing automated systems - Pilot/Operator interactions - Engineering Support and Airworthiness Assessments - Aircraft modifications and experimental configurations

Chris Miller↗

NASA NTRS2023

Speech-Enhanced and Context Dependent Alerts: Future Implications for Spacecraft Design

In the future, NASA missions will involve many different space vehicles, habitats, and surface assets working together to provide safe, productive environments for crew. Because these systems will be provided by multiple commercial companies working with NASA, it will be very different from missions of the past, bringing new challenges. One of the challenges is related to whether NASA should move beyond simple tone annunciation alerting systems, to more advanced systems that include speech. The other is related to determining the level of consistency required of safety-critical alert systems across spacecraft. Two studies were completed to address these important issues. The first study investigated the advantages and disadvantages of a tone+speech alert relative to the traditional tone-only alert. Results indicate that speech-enhanced alerts initially take longer to silence (the default action to which NASA personnel are trained), due to the need to listen to the entire message, but ultimately provided for faster understanding of the alert situation. Speech-enhanced alerts were also preferred by a large majority of crew-like study participants. An unexpected finding was that participants took longer to respond to tone-only alerts that were heard in the same session as speech-enhanced alerts. Participants waited to hear a speech message even for alerts they were trained to know did not contain speech components. This performance error is believed to be due to negative transfer of training. A second study focused on task and alert performance using a common set of tones across two contexts (e.g., vehicles, habitats, suits) versus performance with a different set of tones for each context. Participants were able to manage two different alert sets successfully; results indicate that discriminability of the two alert sets played a major role in their success. Implications for the design of spacecraft alerts are discussed, and future areas of research are identified.

alerts↗

NASA NTRSDate not supplied

Measurement System Analysis of a Novel Phase-Based Ultrasonic NDE Technique for Bond Strength Measurement

Fiber reinforced polymer parts have shown tremendous benefits in aerospace structural applications, but their qualification and certification for use in safety critical areas are currently hindered by the lack of a capable non-destructive evaluation (NDE) method or technique for the inspection of these adhesively bonded parts. Conventional NDE methods and techniques typically detect gross bond defects in a qualitative (Pass/Fail) manner. These techniques struggle to detect weak or kissing bonds. Also, there are no widely adopted NDE methods or techniques for measuring interfacial bond strength or detecting kissing bonds. Bond strength is currently ensured by process control and semi-destructive testing. Results from recent research from other authors, including but not limited to mechanical testing, have shown an excellent correlation between interfacial stiffness of an adhesively bonded joint and the adhesive bond strength of that joint. In this paper, a measurement system analysis (MSA) of a novel phase-based ultrasonic NDE Technique, developed at NASA Langley Research Center, is presented for bond strength measurement to assess at an increased level the measurement process and identify components of variation in that measurement process.

Ultrasound↗

NASA NTRS2023

Trades, Architecture, and Design of the Joint Augmented Reality Visual Informatics System (Joint AR) Product

Future expeditions will enable exploration and study of the planetary surfaces of the Moon and Mars by performing extravehicular activity (EVA) operations. Present-day International Space Station (ISS) EVA operations require an intricate choreography of crew, space suits, tools, systems, and flight teams to plan, train, and execute with limited advanced informatics. In this paper, the Joint Augmented Reality Visual Informatics System (Joint AR) project team at NASA Johnson Space Center (JSC) characterizes the design space for developing a modular augmented reality (AR) device for a spacesuit form factor that can support crew decision-making for EVA. The Joint AR product was defined via trade studies and market analysis of previous EVA display efforts, various AR components such as optics, commercial AR systems, light engines, data interfaces, and graphics engine software. This paper outlines the defining architectural design decisions, including safety criticality considerations, interfaces, and computer architectures. The outcomes of these studies result in a prototype design which is defined here as the Joint AR product. This work aims to enable a community-wide discussion toward realizing necessary suit-compatible AR features and capabilities for future missions.

Paromita Mitra↗

NASA NTRS2023

Trades, Architecture, and Design of the Joint Augmented Reality Visual Informatics System (Joint AR) Product

Future expeditions will enable exploration and study of the planetary surfaces of the Moon and Mars by performing extravehicular activity (EVA) operations. Present-day International Space Station (ISS) EVA operations require an intricate choreography of crew, space suits, tools, systems, and flight teams to plan, train, and execute with limited advanced informatics. In this paper, the Joint Augmented Reality Visual Informatics System (Joint AR) project team at NASA Johnson Space Center (JSC) characterizes the design space for developing a modular augmented reality (AR) device for a spacesuit form factor that can support crew decision-making for EVA. The Joint AR product was defined via trade studies and market analysis of previous EVA display efforts, various AR components such as optics, commercial AR systems, light engines, data interfaces, and graphics engine software. This paper outlines the defining architectural design decisions, including safety criticality considerations, interfaces, and computer architectures. The outcomes of these studies result in a prototype design which is defined here as the Joint AR product. This work aims to enable a community-wide discussion toward realizing necessary suit-compatible AR features and capabilities for future missions.

Paromita Mitra↗

NASA NTRS2024

Historical Aerospace Software Errors Categorized to Influence Fault Tolerance

Since the first use of computers in space and aircraft, software errors have occurred. These errors can manifest as loss-of-life or less catastrophically. As the demand for automation increases, software in mission or safety-critical systems should be designed to be tolerant to the most likely software faults. This paper categorizes a set of 55 historic aerospace software error incidents from 1962 to 2023 to determine trends of how and where automation is most likely to fail, behaving unexpectedly. A distinction between software producing unexpected (erroneous) output versus no output (failsilent) is introduced. Of the historical incidents analyzed, 85% were from software producing wrong output rather than simply stopping. Rebooting was found to be ineffective to clear erroneous behavior, and not reliable to recover from silent failures. Error origin was within the code/logic itself in 58% of cases, 16% from configurable data, 15% from unexpected sensor input, and 11% from command/operator input. A substantial forty percent (40%) of unexpected software behavior was indicated by the absence of code, arising from unanticipated situations and missing requirements, and 16% of incidents were subjectively deemed “unknown-unknowns”. No incidents were found to be the result of programming language, compiler, tool, or operating system; and only sixteen percent (16%) of all incidents were considered errors traditional computer science/programming in nature. These findings indicate that for fault tolerance, erroneous automation behavior must be a primary consideration especially at critical moments, and reboot recoverability may not be viable. Special care should be taken to validate configurable data and commands prior to use. “Test-like-you-fly”, including hardware-in-the-loop combined with robust off-nominal testing should be used to uncover missing logic arising from unanticipated situations not covered by requirements alone. This study uniquely focuses on manifestations of unexpected flight software behavior, independent of ultimate root cause. We characterize software error behavior and origin to improve software design, test, and operations for resilience to the most common manifestations, and provide a rich dataset for further study.

Aerospace↗

NASA NTRSDate not supplied

Differential Equation Approximation Using Gradient-Boosted Quantile Regression

The operation of cyber-physical-human (CPH) systems is subject to various epistemic and aleatory uncertainties. Overall trustworthiness of CPH systems relies on the trustworthiness of its components and their interactions. It is important that computational models comprising the cyber component of CPH provide predictions accompanied by a measure of confidence in model outcomes. Uncertainty quantification (UQ) and propagation are especially important in safety critical CPH systems. Gradient-boosted trees is a modeling approach capable both of learning the dynamics of a system and performing UQ. In this paper, we devise a method for using gradient boosting to learn the dynamics of a second order differential equation and estimate uncertainty at the same time. We do this by creating a custom loss function that trains the model to approximate the second derivative of a noisy time series, and to penalize based on a parameter that corresponds to the desired quantile. The resulting gradient boosting model can simulate stochastic trajectories of the system given a single starting point, that is, it can estimate both the expected trajectory and its uncertainty. We show that the uncertainty estimation is well calibrated and that the model can learn the dynamics even in the presence of noise. We demonstrate the approach on a simple cartpole system.

Autonomous systems↗

NASA NTRSDate not supplied

AssistTaxi: A Comprehensive Dataset for Taxiway Analysis and Autonomous Operations

The availability of high-quality datasets play a crucial role in advancing research and development especially, for safety critical and autonomous systems. This poster presents AssistTaxi, which is a comprehensive novel dataset which is a collection of images for runway and taxiway analysis. The dataset comprises of more than 300,000 frames of diverse and carefully collected data, gathered from Melbourne (MLB) and Grant-Valkaria (X59) general aviation airports. The importance of AssistTaxi lies in its potential to advance autonomous operations, enabling researchers and developers to train and evaluate algorithms for efficient and safe taxiing. Researchers can utilize AssistTaxi to benchmark their algorithms, assess performance, and explore novel approaches for runway and taxiway analysis. Additionally, the dataset serves as a valuable resource for validating and enhancing existing algorithms as well as facilitating innovation in autonomous operations for aviation. We also propose an initial approach to label the dataset using a contour based detection and line extraction technique.

Data Collection↗

NASA NTRSDate not supplied

The Impact of Delayed Communication on NASA’s Human-Systems Operations: Preliminary Results of a Systematic Review

Throughout the history of human spaceflight, NASA has relied on a team of ground-based experts on Earth to manage its missions, vehicles, and crews to ensure crew safety and mission success. However, as missions progress beyond low-Earth orbit (LEO), this paradigm of dependence on ground must evolve. Beyond LEO, in missions to the moon and Mars, crews will confront new challenges: limited evacuation options, reduced resupply capabilities, and significant communication delays that impede real-time support from experts on the ground. This reduction in ground support amplifies the likelihood that crews will be unable to adequately respond to unanticipated, safety-critical events. Understanding the scope of these risks and identifying effective countermeasures hinges on understanding the impact of communication delays on complex operations, especially in urgent, unforeseen events. Real-time communication currently provides the crew with continuous access to a large, extensively resourced ground team skilled in anomaly resolution. However, as communication delays grow, the need to transfer some responsibilities from ground experts to onboard crew becomes evident. NASA has been exploring this shift in operational responsibilities and its effectiveness in managing complex operations for decades. Nevertheless, a comprehensive understanding of the specific challenges posed by communication delays and the necessary countermeasures to mitigate them remains a gap. In this paper, we present an update on our systematic review of the literature on communication delays, the first in-depth review since 2013 (Rader et al.). We introduce a coding taxonomy to capture key constructs from papers of interest and discuss preliminary findings. These preliminary results suggest two significant research gaps: limited studies have been conducted 1) with lunar-like latencies and 2) on problem-solving strategies for the maximum latencies expected in Mars missions. We outline plans and propose recommendations to address these gaps through ongoing and future research.

human-systems integration↗

NASA NTRSDate not supplied

Jet Lag, Sleep Timing, and Sleep Inertia

This chapter explores the causes, consequences, and countermeasures of jet lag, mistimed sleep, and sleep inertia. Jet lag can occur when rapidly crossing multiple time zones (e.g., trans-meridian travel for long-haul pilots). The desynchrony between the body’s biological clock, or circadian rhythm, and the new day-night cycle can lead to indigestion, sleep disturbances, fatigue, and cognitive impairments. Mistimed sleep can also occur within a time zone. In the case of night shiftwork, sleep is displaced to the daytime which leads to poor sleep and increased fatigue at night due to the combination of pressures from the two-process model of sleep regulation: sleep loss (homeostatic pressure); and being awake when the body is promoting sleep (circadian pressure). There is also a third process of sleep regulation called sleep inertia, which refers to the brief period of fatigue and impaired cognitive performance experienced after waking. Sleep inertia can be a fatigue risk for transportation workers who work on-call (e.g., emergency services) or who nap on shift (e.g., long-haul truck drivers) and are required to perform a safety-critical task soon after waking. For each of these fatigue risks, strategic exposure to bright light can be used to help realign sleep timing and to promote alertness.

sleep inertia↗

NASA NTRSDate not supplied

Bond Line Thickness Estimation in Composite Structures Using Multiple Inspection Techniques

Imaging and other nondestructive evaluation techniques are commonly used for material characterization and defect recognition in safety critical aerospace applications, with data fusion providing the framework for uncertainty quantification in these contexts. Most commonly, forward physics-based modeling predicts the response conditioned on material properties and defect assumptions, and probabilistic methods are used to infer the hidden state of the subject of the inspection from a combination of prior information, likelihoods, and inspection data. In this paper Bayesian methods are used to estimate bond thickness in lap joints comprised of aluminum adherends using a combination of infrared thermography and ultrasound. The concept of the conflation of probability distributions is applied to combine the posterior distributions derived from thermography and ultrasound and the quality of the fused estimates are compared against the individual estimates against synthetic data that was created to mimic the inspection of a lap joint comprised of aluminum adherends.

thermal nondestructive evaluation↗

NASA NTRSDate not supplied

Bond Line Thickness Estimation in Composite Structures Using Multiple Inspection Techniques

Imaging and other nondestructive evaluation techniques are commonly used for material characterization and defect recognition in safety critical aerospace applications, with data fusion providing the framework for uncertainty quantification in these contexts. Most commonly, forward physics-based modeling predicts the response conditioned on material properties and defect assumptions, and probabilistic methods are used to infer the hidden state of subject of the inspection from a combination of prior information, likelihoods, and inspection data. In this paper Bayesian methods are used to estimate bond thickness in lap joints comprised of aluminum adherends using a combination of infrared thermography, digital radiography, and ultrasound. The accuracy of the fused estimates are validated against data generated from synthetic specimens, and by comparison against high resolution X-ray computed tomography inspections of built specimens.

thermal nondestructive evaluation↗

NASA NTRSDate not supplied

Power System Human Machine Interfaces for the X-57 Mod II Aircraft

The transition from a Tecnam (Costruzioni Aeronautiche Tecnam srl) (Sapua, Italy) P2006T twin-engine aircraft into the fully electric X-57 Modification II (Mod II) configuration required the development of cockpit displays and controls to allow the pilot to properly monitor and interface with the research electric system. This paper describes the machine interfaces developed to interface with the X-57 Mod II traction battery system and the unique considerations of developing interfaces and monitoring tools for electric aircraft. The key design philosophy during the X-57 cockpit development was to retain or make minor modifications to the stock P2006T aircraft wherever possible and to use highly reliable commercial displays for monitoring of safety critical parameters. From these efforts, development of accurate estimates of battery state of charge and energy meters designed specifically for flight applications for future electric aircraft development is recommended.

James Reynolds↗

NASA NTRSDate not supplied

The Impact of Delayed Communications on NASA's Human-Systems Operations: Preliminary Results of a Systematic Review

Throughout the history of human spaceflight, NASA has relied on a team of ground-based experts on Earth to manage its missions, vehicles, and crews to ensure crew safety and mission success. However, as missions progress beyond low-Earth orbit (LEO), this paradigm of dependence on ground must evolve. Beyond LEO, in missions to the moon and Mars, crews will confront new challenges: limited evacuation options, reduced resupply capabilities, and significant communication delays that impede real-time support from experts on the ground. This reduction in ground support amplifies the likelihood that crews will be unable to adequately respond to unanticipated, safety-critical events. Understanding the scope of these risks and identifying effective countermeasures hinges on understanding the impact of communication delays on complex operations, especially in urgent, unforeseen events. Real-time communication currently provides the crew with continuous access to a large, extensively resourced ground team skilled in anomaly resolution. However, as communication delays grow, the need to transfer some responsibilities from ground experts to onboard crew becomes evident. NASA has been exploring this shift in operational responsibilities and its effectiveness in managing complex operations for decades. Nevertheless, a comprehensive understanding of the specific challenges posed by communication delays and the necessary countermeasures to mitigate them remains a gap. In this paper, we present an update on our systematic review of the literature on communication delays, the first in-depth review since 2013 (Rader et al.). We introduce a coding taxonomy to capture key constructs from papers of interest and discuss preliminary findings. These preliminary results suggest two significant research gaps: limited studies have been conducted 1) with lunar-like latencies and 2) on problem-solving strategies for the maximum latencies expected in Mars missions. We outline plans and propose recommendations to address these gaps through ongoing and future research.

earth-independence↗