SEARCH · Engineering Papers

Results for “Productive Safety”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

All sources NASA NTRS DOE OSTI

NASA NTRS1990

Beyond the Baseline: Proceedings of the Space Station Evolution Symposium: Space Station Freedom Advanced Development Program - Volume 2, Part 2

This report contains the individual presentations delivered at the Space Station Evolution Symposium in League City, Texas on February 6, 7, 8, 1990. Personnel responsible for Advanced Systems Studies and Advanced Development within the Space Station Freedom program reported on the results of their work to date. Systems Studies presentations focused on identifying the baseline design provisions (hooks and scars) necessary to enable evolution of the facility to support changing space policy and anticipated user needs. Also emphasized were evolution configuration and operations concepts including on-orbit processing of space transfer vehicles. Advanced Development task managers discussed transitioning advanced technologies to the baseline program, including those near-term technologies which will enhance the safety and productivity of the crew and the reliability of station systems. Special emphasis was placed on applying advanced automation technology to ground and flight systems. This publication consists of two volumes. Volume 1 contains the results of the advanced system studies with the emphasis on reference evolution configurations, system design requirements and accommodations, and long-range technology projections. Volume 2 reports on advanced development tasks within the Transition Definition Program. Products of these tasks include: engineering fidelity demonstrations and evaluations on Station development testbeds and Shuttle-based flight experiments; detailed requirements and performance specifications which address advanced technology implementation issues; and mature applications and the tools required for the development, implementation, and support of advanced technology within the Space Station Freedom Program.

Source record↗

NASA NTRS1996

Power-by-Wire Development and Demonstration for Subsonic Civil Transport

During the last decade, three significant studies by the Lockheed Martin Corporation, the NASA Lewis Research Center, and McDonnell Douglas Corporation have clearly shown operational, weight, and cost advantages for commercial subsonic transport aircraft that use all-electric or more-electric technologies in the secondary electric power systems. Even though these studies were completed on different aircraft, used different criteria, and applied a variety of technologies, all three have shown large benefits to the aircraft industry and to the nation's competitive position. The Power-by-Wire (PBW) program is part of the highly reliable Fly-By-Light/Power-By-Wire (FBL/PBW) Technology Program, whose goal is to develop the technology base for confident application of integrated FBL/PBW systems for transport aircraft. This program is part of the NASA aeronautics strategic thrust in subsonic aircraft/national airspace (Thrust 1) to "develop selected high-leverage technologies and explore new means to ensure the competitiveness of U.S. subsonic aircraft and to enhance the safety and productivity of the national aviation system" (The Aeronautics Strategic Plan). Specifically, this program is an initiative under Thrust 1, Key Objective 2, to "develop, in cooperation with U.S. industry, selected high-payoff technologies that can enable significant improvements in aircraft efficiency and cost."

Source record↗

NASA NTRS2005

Two-Phase Flow Technology Developed and Demonstrated for the Vision for Exploration

NASA s vision for exploration will once again expand the bounds of human presence in the universe with planned missions to the Moon and Mars. To attain the numerous goals of this vision, NASA will need to develop technologies in several areas, including advanced power-generation and thermal-control systems for spacecraft and life support. The development of these systems will have to be demonstrated prior to implementation to ensure safe and reliable operation in reduced-gravity environments. The Two-Phase Flow Facility (T(PHI) FFy) Project will provide the path to these enabling technologies for critical multiphase fluid products. The safety and reliability of future systems will be enhanced by addressing focused microgravity fluid physics issues associated with flow boiling, condensation, phase separation, and system stability, all of which are essential to exploration technology. The project--a multiyear effort initiated in 2004--will include concept development, normal-gravity testing (laboratories), reduced gravity aircraft flight campaigns (NASA s KC-135 and C-9 aircraft), space-flight experimentation (International Space Station), and model development. This project will be implemented by a team from the NASA Glenn Research Center, QSS Group, Inc., ZIN Technologies, Inc., and the Extramural Strategic Research Team composed of experts from academia.

Sankovic, John M.↗

NASA NTRS2006

Human Factors Engineering as a System in the Vision for Exploration

In order to accomplish NASA's Vision for Exploration, while assuring crew safety and productivity, human performance issues must be well integrated into system design from mission conception. To that end, a two-year Technology Development Project (TDP) was funded by NASA Headquarters to develop a systematic method for including the human as a system in NASA's Vision for Exploration. The specific goals of this project are to review current Human Systems Integration (HSI) standards (i.e., industry, military, NASA) and tailor them to selected NASA Exploration activities. Once the methods are proven in the selected domains, a plan will be developed to expand the effort to a wider scope of Exploration activities. The methods will be documented for inclusion in NASA-specific documents (such as the Human Systems Integration Standards, NASA-STD-3000) to be used in future space systems. The current project builds on a previous TDP dealing with Human Factors Engineering processes. That project identified the key phases of the current NASA design lifecycle, and outlined the recommended HFE activities that should be incorporated at each phase. The project also resulted in a prototype of a webbased HFE process tool that could be used to support an ideal HFE development process at NASA. This will help to augment the limited human factors resources available by providing a web-based tool that explains the importance of human factors, teaches a recommended process, and then provides the instructions, templates and examples to carry out the process steps. The HFE activities identified by the previous TDP are being tested in situ for the current effort through support to a specific NASA Exploration activity. Currently, HFE personnel are working with systems engineering personnel to identify HSI impacts for lunar exploration by facilitating the generation of system-level Concepts of Operations (ConOps). For example, medical operations scenarios have been generated for lunar habitation in order to identify HSI requirements for the lunar communications architecture. Throughout these ConOps exercises, HFE personnel are testing various tools and methodologies that have been identified in the literature. A key part of the effort is the identification of optimal processes, methods, and tools for these early development phase activities, such as ConOps, requirements development, and early conceptual design. An overview of the activities completed thus far, as well as the tools and methods investigated will be presented.

Mihriban Whitmore↗

NASA NTRS2005

Modular Software Interfaces for Revolutionary Flexibility in Space Operations

To make revolutionary improvements in exploration, space systems need to be flexible, realtime reconfigurable, and able to trade data transparently among themselves and mission operations. Onboard operations systems, space assembly coordination and EVA systems in exploration and construction all require real-time modular reconfigurability and data sharing. But NASA's current exploration systems are still largely legacies from hastily-developed, one-off Apollo-era practices. Today's rovers, vehicles, spacesuits, space stations, and instruments are not able to plug-and-play, Lego-like: into different combinations. Point-to-point dominates - individual suit to individual vehicle, individual instrument to rover. All are locally optimized, all unique, each of the data interfaces has been recoded for each possible combination. This will be an operations and maintenance nightmare in the much larger Project Constellation system of systems. This legacy approach does not scale to the hundreds of networked space components needed for space construction and for new, space-based approaches to Earth-Moon operations. By comparison, battlefield information management systems, which are considered critical to military force projection, have long since abandoned a point-to-point approach to systems integration. From a system-of-systems viewpoint, a clean-sheet redesign of the interfaces of all exploration systems is a necessary prerequisite before designing the interfaces of the individual exploration systems. Existing communications and Global Information Grid and middleware technologies are probably sufficient for command and control and information interfaces, with some hardware and time-delay modifications for space environments. NASA's future advanced space operations must also be information and data compatible with aerospace operations and surveillance systems being developed by other US Government agencies such as the Department of Homeland Security, Federal Aviation Administration and Department of Defense. This paper discusses fundamental system-of-systems infrastructure: approaches and architectures for modular plug-and-play software interfaces for revolutionary improvements in flexibility, modularity, robustness, ease of maintenance, reconfigurability, safety and productivity. Starting with middleware, databases, and mobile communications technologies, our technical challenges will be to apply these ideas to the requirements of constellations of space systems and to implement them initially on prototype space hardware. This is necessary to demonstrate an integrated information sharing architecture and services. It is a bottom-up approach, one that solves the problem of space operations data integration. Exploration demands uniform software mechanisms for application information interchange, and the corresponding uniformly available software services to enhance these mechanisms. We will examine the issues in plug-and-play, real-time-configurable systems, including common definition and management and tracking of data and information among many different space systems. Different field test approaches are discussed, including the use of the International Space Station and terrestrial analog mission operations at field sites.

Glass, Brian↗

NASA NTRS2005

Making Human Spaceflight as Safe as Possible

We articulated the safety hierarchy a little over two years ago, as part of our quest to be the nation s leader in safety and occupational health, and in the safety of the products and services we provide. The safety hierarchy stresses that we are all accountable for assuring that our programs, projects, and operations do not impact safety or health for the public, astronauts and pilots, employees on the ground, and high-value equipment and property. When people are thinking about doing things safely, they re also thinking about doing things right. And for the past couple of years, we ve had some pretty good results. In the time since the failures of the Mars 98 missions that occurred in late 1999, every NASA spacecraft launch has met the success objectives, and every Space Shuttle mission has safely and successfully met all mission objectives. Now I can t say that NASA s safety program is solely responsible for these achievements, but, as we like to say, "mission success starts with safety." In the future, looking forward, we will continue to make spaceflight even safer. That is NASA s vision. That is NASA s duty to both those who will travel into space and the American people who will make the journey possible.

Gregory, Frederick D.↗

NASA NTRS2007

Revealing the ISO/IEC 9126-1 Clique Tree for COTS Software Evaluation

Previous research has shown that acyclic dependency models, if they exist, can be extracted from software quality standards and that these models can be used to assess software safety and product quality. In the case of commercial off-the-shelf (COTS) software, the extracted dependency model can be used in a probabilistic Bayesian network context for COTS software evaluation. Furthermore, while experts typically employ Bayesian networks to encode domain knowledge, secondary structures (clique trees) from Bayesian network graphs can be used to determine the probabilistic distribution of any software variable (attribute) using any clique that contains that variable. Secondary structures, therefore, provide insight into the fundamental nature of graphical networks. This paper will apply secondary structure calculations to reveal the clique tree of the acyclic dependency model extracted from the ISO/IEC 9126-1 software quality standard. Suggestions will be provided to describe how the clique tree may be exploited to aid efficient transformation of an evaluation model.

Morris, A. Terry↗

NASA NTRS2003

Robot Tracking of Human Subjects in Field Environments

Future planetary exploration will involve both humans and robots. Understanding and improving their interaction is a main focus of research in the Intelligent Systems Branch at NASA's Johnson Space Center. By teaming intelligent robots with astronauts on surface extra-vehicular activities (EVAs), safety and productivity can be improved. The EVA Robotic Assistant (ERA) project was established to study the issues of human-robot teams, to develop a testbed robot to assist space-suited humans in exploration tasks, and to experimentally determine the effectiveness of an EVA assistant robot. A companion paper discusses the ERA project in general, its history starting with ASRO (Astronaut-Rover project), and the results of recent field tests in Arizona. This paper focuses on one aspect of the research, robot tracking, in greater detail: the software architecture and algorithms. The ERA robot is capable of moving towards and/or continuously following mobile or stationary targets or sequences of targets. The contributions made by this research include how the low-level pose data is assembled, normalized and communicated, how the tracking algorithm was generalized and implemented, and qualitative performance reports from recent field tests.

Graham, Jeffrey↗

NASA NTRS2012

Certification of COTS Software in NASA Human Rated Flight Systems

Adoption of commercial off-the-shelf (COTS) products in safety critical systems has been seen as a promising acquisition strategy to improve mission affordability and, yet, has come with significant barriers and challenges. Attempts to integrate COTS software components into NASA human rated flight systems have been, for the most part, complicated by verification and validation (V&V) requirements necessary for flight certification per NASA s own standards. For software that is from COTS sources, and, in general from 3rd party sources, either commercial, government, modified or open source, the expectation is that it meets the same certification criteria as those used for in-house and that it does so as if it were built in-house. The latter is a critical and hidden issue. This paper examines the longstanding barriers and challenges in the use of 3rd party software in safety critical systems and cover recent efforts to use COTS software in NASA s Multi-Purpose Crew Vehicle (MPCV) project. It identifies some core artifacts that without them, the use of COTS and 3rd party software is, for all practical purposes, a nonstarter for affordable and timely insertion into flight critical systems. The paper covers the first use in a flight critical system by NASA of COTS software that has prior FAA certification heritage, which was shown to meet the RTCA-DO-178B standard, and how this certification may, in some cases, be leveraged to allow the use of analysis in lieu of testing. Finally, the paper proposes the establishment of an open source forum for development of safety critical 3rd party software.

Goforth, Andre↗

NASA NTRS2013

Towards Probablistic Assessment of Hypobaric Decompression Sickness Treatment

INTRODUCTION: Pressure, oxygen (O2), and time are the pillars to effective treatment of decompression sickness (DCS). The NASA DCS Treatment Model links a decrease in computed bubble volume to the resolution of a symptom. The decrease in volume is realized in two stages: a) during the Boyle's Law compression and b) during subsequent dissolution of the gas phase by the O2 window. METHODS: The cumulative distribution of 154 symptoms that resolved during repressurization was described with a log-logistic density function of pressure difference (deltaP as psid) associated with symptom resolution and two other explanatory variables. The 154 symptoms originated from 119 cases of DCS during 969 exposures in 47 different altitude tests. RESULTS: The probability of symptom resolution [P(symptom resolution)] = 1 / (1+exp(- (ln(deltaP) - 1.682 + 1.089×AMB - 0.00395×SYMPTOM TIME) / 0.633)), where AMB is 1 when the subject ambulated as part of the altitude exposure or else 0 and SYMPTOM TIME is the elapsed time in min from start of the altitude exposure to recognition of a DCS symptom. The P(symptom resolution) was estimated from computed deltaP from the Tissue Bubble Dynamics Model based on the "effective" Boyle's Law change: P2 - P1 (deltaP, psid) = P1×V1/V2 - P1, where V1 is the computed volume of a spherical bubble in a unit volume of tissue at low pressure P1 and V2 is computed volume after a change to a higher pressure P2. V2 continues to decrease through time at P2, at a faster rate if 100% ground level O2 was breathed. The computed deltaP is the effective treatment pressure at any point in time as if the entire deltaP was just from Boyle's Law compression. DISCUSSION: Given the low probability of DCS during extravehicular activity and the prompt treatment of a symptom with options through the model it is likely that the symptom and gas phase will resolve with minimum resources and minimal impact on astronaut health, safety, and productivity.

Conkin, J.↗

NASA NTRS2014

Probabilistic Assessment of Hypobaric Decompression Sickness Treatment Success

The Hypobaric Decompression Sickness (DCS) Treatment Model links a decrease in computed bubble volume from increased pressure (DeltaP), increased oxygen (O2) partial pressure, and passage of time during treatment to the probability of symptom resolution [P(symptom resolution)]. The decrease in offending volume is realized in 2 stages: a) during compression via Boyle's Law and b) during subsequent dissolution of the gas phase via the O2 window. We established an empirical model for the P(symptom resolution) while accounting for multiple symptoms within subjects. The data consisted of 154 cases of hypobaric DCS symptoms along with ancillary information from tests on 56 men and 18 women. Our best estimated model is P(symptom resolution) = 1 / (1+exp(-(ln(Delta P) - 1.510 + 0.795×AMB - 0.00308×Ts) / 0.478)), where (DeltaP) is pressure difference (psid), AMB = 1 if ambulation took place during part of the altitude exposure, otherwise AMB = 0; and where Ts is the elapsed time in mins from start of the altitude exposure to recognition of a DCS symptom. To apply this model in future scenarios, values of DeltaP as inputs to the model would be calculated from the Tissue Bubble Dynamics Model based on the effective treatment pressure: (DeltaP) = P2 - P1 | = P1×V1/V2 - P1, where V1 is the computed volume of a spherical bubble in a unit volume of tissue at low pressure P1 and V2 is computed volume after a change to a higher pressure P2. If 100% ground level O2 (GLO) was breathed in place of air, then V2 continues to decrease through time at P2 at a faster rate. This calculated value of (DeltaP then represents the effective treatment pressure at any point in time. Simulation of a "pain-only" symptom at 203 min into an ambulatory extravehicular activity (EVA) at 4.3 psia on Mars resulted in a P(symptom resolution) of 0.49 (0.36 to 0.62 95% confidence intervals) on immediate return to 8.2 psia in the Multi-Mission Space Exploration Vehicle. The P(symptom resolution) increased to near certainty (0.99) after 2 hrs of GLO at 8.2 psia or with less certainty on immediate pressurization to 14.7 psia [0.90 (0.83 - 0.95)]. Given the low probability of DCS during EVA and the prompt treatment of a symptom with guidance from the model, it is likely that the symptom and gas phase will resolve with minimum resources and minimal impact on astronaut health, safety, and productivity.

Conkin, Johnny↗

NASA NTRS2021

AI4MARS: A Dataset for Terrain-Aware Autonomy on Mars

Deep learning has quickly become a necessity for selfdriving vehicles on Earth. In contrast, the self-driving vehicles on Mars, including NASA’s latest rover, Perseverance, which is planned to land on Mars in February 2021, are still driven by classical machine vision systems. Deep learning capabilities, such as semantic segmentation and object recognition, would substantially benefit the safety and productivity of ongoing and future missions to the red planet. To this end, we created the first large-scale dataset, AI4Mars, for training and validating terrain classification models for Mars, consisting of ~326K semantic segmentation full image labels on 35K images from Curiosity, Opportunity, and Spirit rovers, collected through crowdsourcing. Each image was labeled by ~10 people to ensure greater quality and agreement of the crowdsourced labels. It also includes ~1.5K validation labels annotated by the rover planners and scientists from NASA’s MSL (Mars Science Laboratory) mission, which operates the Curiosity rover, and MER (Mars Exploration Rovers) mission, which operated the Spirit and Opportunity rovers. We trained a DeepLabv3 model on the AI4Mars training dataset and achieved over 96% overall classification accuracy on the test set. The dataset is made publicly available.1

Ono, Hiro↗

DOE OSTI2020

Efficiency Calibration of FGMS Cold Traps

This plan describes tests to determine the efficiency calibrations for the Fission Gas Monitoring System (FGMS) by the measurements of 85Kr and 133Xe gamma rays. FGMS collects fission product gases released from irradiated Advanced Gas Reactor tristructural-isotropic-coated particle fuel specimens during post-irradiation heating in the Fuel Accident Condition Simulator (FACS) furnace. FGMS is composed of two charcoal-filled, liquid-nitrogen cooled traps that are each monitored by a high purity germanium (HPGe) detector. All irradiated Advanced Gas Reactor fuel specimens contain 85Kr (t1/2 = 10.8 year); however, significant short-lived fission products such as 133Xe (t1/2 = 5.2 day) and 131I (t1/2 = 8.0 day) have decayed away by the time they reach the FACS for testing. In order to measure the releases of these short-lived fission products during safety testing in the FACS furnace, a re-irradiation of samples is necessary in the Neutron Radiography Reactor. This requires the FGMS be calibrated for the fission gas 133Xe, in addition to 85Kr. Because any re-irradiated fuel specimen will have both 85Kr and 133Xe present, the collection efficiency from a mixture of krypton and xenon needs to be determined.

11 NUCLEAR FUEL CYCLE AND FUEL MATERIALS↗

DOE OSTI2025

Teleoperation of Construction Robots Using Human Interaction: Case Study Examples: Preprint

The integration of advanced teleoperation methods in construction robotics has the potential to enhance productivity and safety in demanding environments. Among different methods, hand gestures have emerged as an intuitive approach, enabling seamless communication between human operators and robotic systems. This study demonstrates the use of hand gestures for controlling a model robotic excavator and a virtual robotic arm in construction applications. Two case study examples are presented. In the first case study, a series of hand gestures are performed to control a model robotic excavator's bucket and arm movements. The second case study focuses on using hand gestures to control a virtual robotic arm to perform a material handling task in a simulated environment. In both cases, the performed hand gestures are all successfully captured and interpreted by the gesture-based teleoperation method to conduct the corresponding tasks, which demonstrates the application of the gesture-based control method for various types of construction robots. Also, the limitations of the gesture-based teleoperation method (e.g., recognition delay, sensitivity to motion outliers) are discussed. Future work will focus on developing a digital twin system to support gesture-based teleoperation for a wider range of construction robots.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗

DOE OSTI2024

Investigation of Frozen Chemistry for Molten Salt Reactors (MSRs)

Understanding accident progression and the potential/conditions for fission product release from fuel is necessary to evaluate safety for any nuclear reactor system. Molten Salt Reactors (MSRs) under development need such analysis to support safety evaluations. Fission product chemistry specific to MSR concepts is a critical area that introduces distinct considerations relative to the current state-of-knowledge in reactor safety, primarily developed for water-moderated nuclear reactor systems. In Light Water Reactor (LWR) systems, it is necessary to capture the chemical interaction of fission products with the reactor evironment, containment and confinement systems. The overall effects at this point are relatively well understood for the purposes of performing safety evaluations. A key insight from LWR studies is that fission product chemical behavior can be reasonably captured by modeling approaches where the chemistry is "frozen". These modeling approaches assume that radionuclide reaction and speciation can be represented by chemical classes, each with characteristic transport behavior that is invariant under a broad range of thermochemical conditions. However, radionuclides can exhibit a range of behavior in the liquid salt-melt phase of the coolant used in MSRs. Radionuclides, salt, and the metal containment surfaces (i.e. pipes) can co-exist in dynamic equilibrium that could evolve with small system mass changes. A detailed investigation to the degree the equilibrium state can dynamically evolve with changes in the conditions of the molten salt mixture has not been previously conducted. It is currently not well understood where frozen chemistry assumptions are valid. Expanding the state-of-knowledge in this regard is relevant to better assessing the range of chemical effects that should be incorporated as part of MSR safety assessments. This investigation used the Oak Ridge Isotope GENeration (ORIGEN) module of the Standardized Computer-Analysis for Licensing Evaluation (SCALE) code to generate simulated radionuclide inventories for the MSR Experiment (MSRE) and then modeled reactor chemical speciation using the Molten Salt Thermodynamic Database – Thermochemical (MSTDB-TC) coupled with Thermochimica. The effect of composition variation during decay of fission product inventory in a molten salt over a period of 500 days prolonged post- at multiple temperatures was studied. Mass fractions for fluorine and berilium were varied in order to probe the effects of free fluorine control. Finally, speciation of fluoride reactors were showed by comparing MSRE readionuclide inventories with a FLiBe based molten salt breeder reactor (MSBR). The results showed that fission product mass change has little effect on phase mass changes and vapor pressures for fluoride species, but differ with varying carrier and fuel salt compositions. However, iodine species were found to have a vapor pressure not only dependent on temperature, but also the free fluorine potential, releasing iodine when the free fluorine potential is equal to the iodine inventory. This observation, however, arose under free fluorine potentials that are very unlikely to be realized in typical molten salt mixtures. Despite this observation, temperature was found to be the dominant parameter that drove phase change and fission product species vapor pressure. The results indicate that the current frozen chemistry approach is adequate for MSR analysis.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRSDate not supplied

System Safety Analysis of Complex NASA Systems with Model-Based Engineering

The emergence of model-based engineering is transforming design and analysis methodologies [5]. A recognized benefit of model-based engineering is the existence of a “single source of truth” about the system that becomes the authoritative source of data and information for designers, analysts, and developers. This promotes consistency and efficiency as the design emerges and can be used to further optimize the design. Integrating System Safety Engineers to the “single source of truth” will ensure that the outputs of their assessments and analyses are relevant to the design as it evolves. Use of an integrated system model enables near immediate evaluation of a design change as well as development of operational processes for risk assessment and communication. Such models can enable efficient and timely analysis of system hazards (e.g., hazard fault tree analysis and procedure simulations) and produce complete, accurate, and more consistent products (e.g., hazard reports and safety requirement evaluations). Therefore, an agency-sponsored team at Goddard Space Flight Center (GSFC) recently completed a System Safety Study of modeling and testing capabilities as part of a Model-Based Safety and Mission Assurance Initiative (MBSMAI). Using an existing model developed for reliability analyses [1], GSFC modeling and system safety experts performed system safety analysis/modeling and produced safety products. The team evaluated model-based feasibility to support System Safety Engineering, developed safety analysis modeling processes, and identified tool capability advancement/development needs. These study results indicate model-based engineering is valid and useable for System

NASA↗

NASA NTRSDate not supplied

System Safety Analysis of Complex NASA Systems with Model Based Engineering

Model Based Engineering↗

NASA NTRSDate not supplied

System Safety Analysis of Complex NASA Systems with Model-Based Engineering (REV B)

The emergence of model-based engineering is transforming design and analysis methodologies. A recognized benefit of model-based engineering is the existence of a “single source of truth” about the system that becomes the authoritative source of data and information for designers, analysts, and developers. This promotes consistency and efficiency as the design emerges and can be used to further optimize the design. Integrating System Safety Engineers to the “single source of truth” will ensure that the outputs of their assessments and analyses are relevant to the design as it evolves. Use of an integrated system model enables near immediate evaluation of a design change as well as development of operational processes for risk assessment and communication. Such models can enable efficient and timely analysis of system hazards (e.g., hazard fault tree analysis and procedure simulations) and produce complete, accurate, and more consistent products (e.g., hazard reports and safety requirement evaluations). Therefore, an agency-sponsored team at Goddard Space Flight Center (GSFC) recently completed a System Safety Study of modeling and testing capabilities as part of a Model-Based Safety and Mission Assurance Initiative (MBSMAI). Using an existing model developed for reliability analyses, GSFC modeling and system safety experts performed system safety analysis/modeling and produced safety products. The team evaluated model-based feasibility to support System Safety Engineering, developed safety analysis modeling processes, and identified tool capability advancement/development needs. These study results indicate model-based engineering is valid and useable for System Safety Engineering for NASA if adequate modeling processes and environment are established.

NASA↗