Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “transient faults”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 127 records · Page 7

Fault handling schemes in electronic systems with specific application to radiation tolerance and VLSI design

Naturally occurring space radiation particles can produce transient and permanent changes in the electrical properties of electronic devices and systems. In this work, the transient radiation effects on DRAM and CMOS SRAM were considered. In addition, the effect of total ionizing dose radiation of the switching times of CMOS logic gates were investigated. Effects of transient radiation on the column and cell of MOS dynamic memory cell was simulated using SPICE. It was found that the critical charge of the bitline was higher than that of the cell. In addition, the critical charge of the combined cell-bitline was found to be dependent on the gate voltage of the access transistor. In addition, the effect of total ionizing dose radiation on the switching times of CMOS logic gate was obtained. The results of this work indicate that, the rise time of CMOS logic gates increases, while the fall time decreases with an increase in total ionizing dose radiation. Also, by increasing the size of the P-channel transistor with respect to that of the N-channel transistor, the propagation delay of CMOS logic gate can be made to decrease with, or be independent of an increase in total ionizing dose radiation. Furthermore, a method was developed for replacing polysilicon feedback resistance of SRAMs with a switched capacitor network. A switched capacitor SRAM was implemented using MOS Technology. The critical change of the switched capacitor SRAM has a very large critical charge. The results of this work indicate that switched capacitor SRAM is a viable alternative to SRAM with polysilicon feedback resistance.

Attia, John Okyere↗

Lightning Pin Injection Testing on MOSFETS

Lightning transients were pin-injected into metal-oxide-semiconductor field-effect transistors (MOSFETs) to induce fault modes. This report documents the test process and results, and provides a basis for subsequent lightning tests. MOSFETs may be present in DC-DC power supplies and electromechanical actuator circuits that may be used on board aircraft. Results show that unprotected MOSFET Gates are susceptible to failure, even when installed in systems in well-shielded and partial-shielded locations. MOSFET Drains and Sources are significantly less susceptible. Device impedance decreased (current increased) after every failure. Such a failure mode may lead to cascading failures, as the damaged MOSFET may allow excessive current to flow through other circuitry. Preliminary assessments on a MOSFET subjected to 20-stroke pin-injection testing demonstrate that Breakdown Voltage, Leakage Current and Threshold Voltage characteristics show damage, while the device continues to meet manufacturer performance specifications. The purpose of this research is to develop validated tools, technologies, and techniques for automated detection, diagnosis and prognosis that enable mitigation of adverse events during flight, such as from lightning transients; and to understand the interplay between lightning-induced surges and aging (i.e. humidity, vibration thermal stress, etc.) on component degradation.

Ely, Jay J.↗

Predicted performance of an Integrated Modular Engine system

Space vehicle propulsion systems are traditionally comprised of a cluster of discrete engines, each with its own set of turbopumps, valves, and a thrust chamber. The Integrated Modular Engine (IME) concept proposes a vehicle propulsion system comprised of multiple turbopumps, valves, and thrust chambers which are all interconnected. The IME concept has potential advantages in fault-tolerance, weight, and operational efficiency compared with the traditional clustered engine configuration. The purpose of this study is to examine the steady-state performance of an IME system with various components removed to simulate fault conditions. An IME configuration for a hydrogen/oxygen expander cycle propulsion system with four sets of turbopumps and eight thrust chambers has been modeled using the Rocket Engine Transient Simulator program. The nominal steady-state performance is simulated, as well as turbopump, thrust chamber, and duct failures. The impact of component failures on system performance is discussed in the context of the system's fault tolerant capabilities.

Binder, Michael↗

Test Results From a Pair of 1-kWe Dual-Opposed Free-Piston Stirling Power Convertors Integrated With a Pumped NaK Loop

As a step towards development of Stirling power conversion for potential use in Fission Surface Power (FSP) systems, a pair of commercially available 1-kW-class free-piston Stirling convertors were modified to operate with a NaK (sodium (Na) and potassium (K)) liquid metal pumped loop for thermal energy input. This was the first-ever attempt at powering a free-piston Stirling engine with a pumped liquid metal heat source and is a major FSP project milestone towards demonstrating technical feasibility. The convertors were successfully tested at the Marshall Space Flight Center (MSFC) from June 6 through July 14, 2009. The convertors were operated for a total test time of 66 hr and 16 min. The tests included (a) performance mapping the convertors over various hot- and cold-end temperatures, piston amplitudes, and NaK flow rates and (b) transient test conditions to simulate various startup (i.e., low-, medium-, and high-temperature startups) and fault scenarios (i.e., loss of heat source, loss of NaK pump, convertor stall, etc.). This report documents the results of this testing

Geng, Steven M.↗

Columbus IFHX Ammonia Leak Analysis

After the Columbus Moderate Temperature Loop (MTL) InterFace Heat eXchanger (IFHX) low temperature event of GMT 345-2013, NASA investigated relevant transient scenarios involving IFHX rupture after water freezing and subsequent thawing. NASA recommended development of a Fault Detection Isolation and Recovery (FDIR) plan that would, in the event of a heat exchanger freeze event, close the Water On/Off Valves (WOOVs) to isolate the heat exchanger and prevent ammonia from the external flow loops from spreading into the cabin. NASA performed a preliminary simplified analysis for the reference case of IFHX rupture, but for a deeper understanding TAS developed detailed SINDA-FLUINT models of the Columbus ITCS that were built and run through the SINAPS GUI. This allowed simulation of the ammonia leakage physics including the variation of environmental parameters, thus providing more accurate and specific input to the FDIR under development. The result was finalization of the IFHX WOOVs closure sequence and wait times to contain the ammonia propagation to Columbus and allow identification of the leaking IFHX. In addition, the analysis results provided reference pressure profiles to be used on console and by the Engineering as support for the telemetry data assessment in case of failure.This paper gives an overview on the issue and focuses on the analytical aspects of the multiphase fluid dynamics involved.

Tilloca, A.↗

Predicted performance of an integrated modular engine system

Space vehicle propulsion systems are traditionally comprised of a cluster of discrete engines, each with its own set of turbopumps, valves, and a thrust chamber. The Integrated Modular Engine (IME) concept proposes a vehicle propulsion system comprised of multiple turbopumps, valves, and thrust chambers which are all interconnected. The IME concept has potential advantages in fault-tolerance, weight, and operational efficiency compared with the traditional clustered engine configuration. The purpose of this study is to examine the steady-state performance of an IME system with various components removed to simulate fault conditions. An IME configuration for a hydrogen/oxygen expander cycle propulsion system with four sets of turbopumps and eight thrust chambers has been modeled using the Rocket Engine Transient Simulator (ROCETS) program. The nominal steady-state performance is simulated, as well as turbopump thrust chamber and duct failures. The impact of component failures on system performance is discussed in the context of the system's fault tolerant capabilities.

Binder, Michael↗

Thermal Fault Tolerance Analysis of Carbon Fiber Rope Barrier Systems for Use in the Reusable Solid Rocket Motor ( RSRM) Nozzle Joints

Carbon Fiber Rope (CFR) thermal barrier systems are being considered for use in several RSRM (Reusable Solid Rocket Motor) nozzle joints as a replacement for the current assembly gap close-out process/design. This study provides for development and test verification of analysis methods used for flow-thermal modeling of a CFR thermal barrier subject to fault conditions such as rope combustion gas blow-by and CFR splice failure. Global model development is based on a 1-D (one dimensional) transient volume filling approach where the flow conditions are calculated as a function of internal 'pipe' and porous media 'Darcy' flow correlations. Combustion gas flow rates are calculated for the CFR on a per-linear inch basis and solved simultaneously with a detailed thermal-gas dynamic model of a local region of gas blow by (or splice fault). Effects of gas compressibility, friction and heat transfer are accounted for the model. Computational Fluid Dynamic (CFD) solutions of the fault regions are used to characterize the local flow field, quantify the amount of free jet spreading and assist in the determination of impingement film coefficients on the nozzle housings. Gas to wall heat transfer is simulated by a large thermal finite element grid of the local structure. The employed numerical technique loosely couples the FE (Finite Element) solution with the gas dynamics solution of the faulted region. All free constants that appear in the governing equations are calibrated by hot fire sub-scale test. The calibrated model is used to make flight predictions using motor aft end environments and timelines. Model results indicate that CFR barrier systems provide a near 'vented joint' style of pressurization. Hypothetical fault conditions considered in this study (blow by, splice defect) are relatively benign in terms of overall heating to nozzle metal housing structures.

Clayton, J. Louie↗

On the origin of mascons and moonquakes

Hypotheses are proposed for the origin of mascons and moonquakes. It is noted that a horizontal transfer of magma is required to explain the mascons and that a basin which can fill with lava to a depth of about 20 km is necessary before mascon formation is possible. It is shown that hydrostatic equilibrium theories can account for the excess filling of lava in circular maria and that mascons will result when this process occurs in the presence of a thick rigid lithosphere. It is postulated that a cylindrical fault system extends through the lithosphere and surrounds the circular maria. In this case, the release of potential energy through the fault system would be adequate to explain moonquakes, their properties, and the clustering of the locations of lunar transient events around the circular maria.

Runcorn, S. K.↗

Concept of Operations of Cryogenic Fluid Management for Nuclear Thermal Propulsion

Cryogenic Fluid Management (CFM) is a critical capability for a hydrogen NTP vehicle for a crewed mission to Mars. AMA has investigated the concept of operations for zero boiloff CFM systems and provided feasibility assessment for a zero-boiloff CFM system based on gravity-independent technologies. This includes identification of CFM-critical mission stages, modelling of CFM operational modes in steady state and transient conditions, thermal analysis of the NTP vehicle and CFM systems, hydrogen leakage analysis, and system margins and fault tolerance. This work illustrates the feasibility of a zero boiloff mission with a set of technology performance assumptions.

cryogenic fluid management↗

NASA Tech Briefs, March 2014

Topics include: Data Fusion for Global Estimation of Forest Characteristics From Sparse Lidar Data; Debris and Ice Mapping Analysis Tool - Database; Data Acquisition and Processing Software - DAPS; Metal-Assisted Fabrication of Biodegradable Porous Silicon Nanostructures; Post-Growth, In Situ Adhesion of Carbon Nanotubes to a Substrate for Robust CNT Cathodes; Integrated PEMFC Flow Field Design for Gravity-Independent Passive Water Removal; Thermal Mechanical Preparation of Glass Spheres; Mechanistic-Based Multiaxial-Stochastic-Strength Model for Transversely-Isotropic Brittle Materials; Methods for Mitigating Space Radiation Effects, Fault Detection and Correction, and Processing Sensor Data; Compact Ka-Band Antenna Feed with Double Circularly Polarized Capability; Dual-Leadframe Transient Liquid Phase Bonded Power Semiconductor Module Assembly and Bonding Process; Quad First Stage Processor: A Four-Channel Digitizer and Digital Beam-Forming Processor; Protective Sleeve for a Pyrotechnic Reefing Line Cutter; Metabolic Heat Regenerated Temperature Swing Adsorption; CubeSat Deployable Log Periodic Dipole Array; Re-entry Vehicle Shape for Enhanced Performance; NanoRacks-Scale MEMS Gas Chromatograph System; Variable Camber Aerodynamic Control Surfaces and Active Wing Shaping Control; Spacecraft Line-of-Sight Stabilization Using LWIR Earth Signature; Technique for Finding Retro-Reflectors in Flash LIDAR Imagery; Novel Hemispherical Dynamic Camera for EVAs; 360 deg Visual Detection and Object Tracking on an Autonomous Surface Vehicle; Simulation of Charge Carrier Mobility in Conducting Polymers; Observational Data Formatter Using CMOR for CMIP5; Propellant Loading Physics Model for Fault Detection Isolation and Recovery; Probabilistic Guidance for Swarms of Autonomous Agents; Reducing Drift in Stereo Visual Odometry; Future Air-Traffic Management Concepts Evaluation Tool; Examination and A Priori Analysis of a Direct Numerical Simulation Database for High-Pressure Turbulent Flows; and Resource-Constrained Application of Support Vector Machines to Imagery.

Source record↗

High-power converters for space applications

Phase 1 was a concept definition effort to extend space-type dc/dc converter technology to the megawatt level with a weight of less than 0.1 kg/kW (220 lb./MW). Two system designs were evaluated in Phase 1. Each design operates from a 5 kV stacked fuel cell source and provides a voltage step-up to 100 kV at 10 A for charging capacitors (100 pps at a duty cycle of 17 min on, 17 min off). Both designs use an MCT-based, full-bridge inverter, gaseous hydrogen cooling, and crowbar fault protection. The GE-CRD system uses an advanced high-voltage transformer/rectifier filter is series with a resonant tank circuit, driven by an inverter operating at 20 to 50 kHz. Output voltage is controlled through frequency and phase shift control. Fast transient response and stability is ensured via optimal control. Super-resonant operation employing MCTs provides the advantages of lossless snubbing, no turn-on switching loss, use of medium-speed diodes, and intrinsic current limiting under load-fault conditions. Estimated weight of the GE-CRD system is 88 kg (1.5 cu ft.). Efficiency of 94.4 percent and total system loss is 55.711 kW operating at 1 MW load power. The Maxwell system is based on a resonance transformer approach using a cascade of five LC resonant sections at 100 kHz. The 5 kV bus is converted to a square wave, stepped-up to a 100 kV sine wave by the LC sections, rectified, and filtered. Output voltage is controlled with a special series regulator circuit. Estimated weight of the Maxwell system is 83.8 kg (4.0 cu ft.). Efficiency is 87.2 percent and total system loss is 146.411 kW operating at 1 MW load power.

Park, J. N.↗

Transients in Pacific/North American Plate Boundary Deformation: Synthesis and Modeling of GPS and Borehole Strain Observations

This is the Final Technical Report on research conducted between 1 June 1997 and 14 September 2001 entitled "Transients in Pacific/North American plate boundary deformation: Synthesis and modeling of GPS and borehole strain observations." As the project title implies, our effort involved a geodetic study of strain transients, i.e., temporal variations in deformation rates, that occur within plate boundary zones and their relationship to earthquakes and plate motions. Important transients occur during and following large earthquakes, and there are also strain transients not apparently associated with earthquakes. A particularly intriguing class of transients, for which there is a modest but growing list of examples, are preseismic anomalies. Such earthquake precursors, if further documented and understood, would have obvious importance for earthquake hazard mitigation. Because the timescales for these diverse transients range over at least 6 orders of magnitude (minutes to years), no single geodetic technique is optimum. We therefore undertook a systematic synthesis of Global Positioning Satellite (GPS) and borehole strainmeter data in three areas in California where there are adequate numbers of both types of instruments (or their equivalent): the San Francisco Bay region (within the Bay Area Regional Deformation network), southern California (within the Southern California Integrated GPS Network), and Parkfield (where a two-color laser system provides a proxy for continuous GPS measurements). An integral component of our study was the elucidation of the physical mechanisms by which such transients occur and propagate. We therefore initiated the development of multiple forward models, using two independent approaches. In the first, we explored the response to specified earthquake slip in viscoelastic models that incorporated failure criteria and the geometry of major faults in California. In the second approach, we examined the dynamical response of a complex rheological medium to the application of a far-field stress imposed by plate motions. The forward models were used both to gain insight into the range of strain transients to be expected under different assumed mechanical conditions and to develop representations for strain fields that allow GPS, borehole, and other strain data to be combined in a self-consistent, yet well-determined, manner. The models also provided a basis for hypothesis testing, by which data from a strain transient well characterized by GPS and borehole observations were utilized to distinguish among competing candidates for the causative physical mechanism and the governing physical characteristics. During the three years of this project, continued to a fourth year through a no-cost extension of the grant, we published 14 papers and presented or co-authored 37 papers at national scientific meetings.

Solomon, Sean C.↗

Byzantine-fault tolerant self-stabilizing protocol for distributed clock synchronization systems

A rapid Byzantine self-stabilizing clock synchronization protocol that self-stabilizes from any state, tolerates bursts of transient failures, and deterministically converges within a linear convergence time with respect to the self-stabilization period. Upon self-stabilization, all good clocks proceed synchronously. The Byzantine self-stabilizing clock synchronization protocol does not rely on any assumptions about the initial state of the clocks. Furthermore, there is neither a central clock nor an externally generated pulse system. The protocol converges deterministically, is scalable, and self-stabilizes in a short amount of time. The convergence time is linear with respect to the self-stabilization period.

Malekpour, Mahyar R.↗

An Autonomous Distributed Fault-Tolerant Local Positioning System

We describe a fault-tolerant, GPS-independent (Global Positioning System) distributed autonomous positioning system for static/mobile objects and present solutions for providing highly-accurate geo-location data for the static/mobile objects in dynamic environments. The reliability and accuracy of a positioning system fundamentally depends on two factors; its timeliness in broadcasting signals and the knowledge of its geometry, i.e., locations and distances of the beacons. Existing distributed positioning systems either synchronize to a common external source like GPS or establish their own time synchrony using a scheme similar to a master-slave by designating a particular beacon as the master and other beacons synchronize to it, resulting in a single point of failure. Another drawback of existing positioning systems is their lack of addressing various fault manifestations, in particular, communication link failures, which, as in wireless networks, are increasingly dominating the process failures and are typically transient and mobile, in the sense that they typically affect different messages to/from different processes over time.

Mahyar R Malekpour↗

Advanced Stirling Convertor Control Unit Testing at NASA Glenn Research Center in the Radioisotope Power Systems System Integration Laboratory

Future NASA missions could include long-duration flyby, orbital, lander, or rover applications where generating power from sunlight may be limited. Radioisotope power systems (RPSs) provide a dependable power source for missions where inadequate sunlight or operational requirements make other power systems impractical. Over the past 16 years, NASA Glenn Research Center has been supporting the development of RPSs. The advanced Stirling radioisotope generator (ASRG) utilized a pair of advanced Stirling convertors (ASCs). Although flight development of the ASRG has been canceled, much of the technology and hardware continued development and testing to guide future activities. Specifically, a controller for the convertor(s) is an integral part of a Stirling-based RPS. For the ASRG design, the controller maintains stable operation of the convertors, regulates the alternating current produced by the linear alternator of the convertor, provides a specified direct-current output voltage for the spacecraft, and synchronizes the piston motion of the two convertors to minimize vibration as well as manage and maintain operation with a stable piston amplitude and hot-end temperature. It not only provides power to the spacecraft but also must regulate convertor operation to avoid damage to internal components and maintain safe thermal conditions after fueling. Lockheed Martin Coherent Technologies, Inc., has designed, developed, and tested an ASC control unit engineering development unit (ACU EDU) to support this effort. GRC used the ACU EDU as part of its nonnuclear representation of a RPS that also consists of a Dual advanced Stirling convertor simulator (DASCS), and associated support equipment to perform a test in the Radioisotope Power Systems System Integration Laboratory (RSIL). The RSIL was designed and built with flexibility to evaluate hardware utilizing RPS technology. The RSIL provides insight into the electrical interactions between as many as three radioisotope power generators, associated control strategies, and typical electric system loads. The first phase of testing included a DASCS that was developed by Johns Hopkins University Applied Physics Laboratory and simulates the operation and electrical behavior of a pair of ASCs in real time via a combination of hardware and software. Testing included the following spacecraft electrical energy storage configurations: capacitor, battery, and supercapacitor. Testing of the DASCS and ACU in each energy storage configuration included simulation of a typical mission profile and transient voltage and current data during load turnon and turnoff. Testing for these devices also included the initiation of several system faults such as short circuits, electrical bus overvoltage, undervoltage, and a "dead bus" recovery to restore normal power operations. The goal of this testing was to verify operation of the ACU(s) when connected to a spacecraft electrical bus. The results of these tests are presented here.

General↗

Physics-Based Methods of Failure Analysis and Diagnostics in Human Space Flight

The Integrated Health Management (IHM) for the future aerospace systems requires to interface models of multiple subsystems in an efficient and accurate information environment at the earlier stages of system design. The complexity of modern aeronautic and aircraft systems (including e.g. the power distribution, flight control, solid and liquid motors) dictates employment of hybrid models and high-level reasoners for analysing mixed continuous and discrete information flow involving multiple modes of operation in uncertain environments, unknown state variables, heterogeneous software and hardware components. To provide the information link between key design/performance parameters and high-level reasoners we rely on development of multi-physics performance models, distributed sensors networks, and fault diagnostic and prognostic (FD&P) technologies in close collaboration with system designers. The main challenges of our research are related to the in-flight assessment of the structural stability, engine performance, and trajectory control. The main goal is to develop an intelligent IHM that not only enhances components and system reliability, but also provides a post-flight feedback helping to optimize design of the next generation of aerospace systems. Our efforts are concentrated on several directions of the research. One of the key components of our strategy is an innovative approach to the diagnostics/prognostics based on the real time dynamical inference (DI) technologies extended to encompass hybrid systems with hidden state trajectories. The major investments are into the multiphysics performance modelling that provides an access of the FD&P technologies to the main performance parameters of e.g. solid and liquid rocket motors and composite materials of the nozzle and case. Some of the recent results of our research are discussed in this chapter. We begin by introducing the problem of dynamical inference of stochastic nonlinear models and reviewing earlier results. Next, we present our analytical approach to the solution of this problem based on the path integral formulation. The resulting algorithm does not require an extensive global search for the model parameters, provides optimal compensation for the effects of dynamical noise, and is robust for a broad range of dynamical models. In the following Section the strengths of the algorithm are illustrated illustrated by inferring the parameters of the stochastic Lorenz system and comparing the results with those of earlier research. Next, we discuss a number of recent results in application to the development of the IHM for aerospace system. Firstly, we apply dynamical inference approach to a solution of classical three tank problems with mixed unknown continuous and binary parameters. The problem is considered in the context of ground support system for filling fuel tanks of liquid rocket motors. It is shown that the DI algorithm is well suited for successful solution of a hybrid version of this benchmark problem even in the presence of additional periodic and stochastic perturbation of unknown strength. Secondly, we illustrate our approach by its application to an analysis of the nozzle fault in a solid rocket motor (SRM). The internal ballistics of the SRM is modelled as a set of one-dimensional partial differential equations coupled to the dynamics of the propellant regression. In this example we are specifically focussed on the inference of discrete and continuous parameters of the nozzle blocking fault and on the possibility of an application of the DI algorithm to reducing the probability of "misses" of an on-board FD&P for SRM. In the next section re-contact problem caused by first stage/upper stage separation failure is discussed. The reaction forces imposed on the nozzle of the upper stage during the re-contact and their connection to the nozzle damage and to the thrust vector control (TVC) signal are obtained. It is shown that transient impact induced torquean be modelled as a response of an effective damped oscillator. A possible application of the DI algorithm to the inference of damage parameters and predicting fault dynamics ahead of time using the actuator signal is discussed. Finally, we formulate Bayesian inferential framework for development of the IHM system for in-flight structural health monitoring (SHM) of composite materials. We consider the signal generated by piezoelectric actuator mounted on composite structure generating elastic waves in it. The signal received by the sensor is than compared with the baseline signal. The possibility of damage inference is discussed in the context of development of the SHM.

Smelyanskiy, Vadim N.↗

Advanced Stirling Convertor Control Unit Testing at NASA Glenn Research Center in the Radioisotope Power Systems System Integration Laboratory

Future NASA missions could include establishing Lunar or Martian base camps, exploring Jupiters moons and travelling beyond where generating power from sunlight may be limited. Radioisotope Power Systems (RPS) provide a dependable power source for missions where inadequate sunlight or operational requirements make other power systems impractical. Over the past decade, NASA Glenn Research Center (GRC) has been supporting the development of RPSs. The Advanced Stirling Radioisotope Generator (ASRG) utilized a pair of Advanced Stirling Convertors (ASC). While flight development of the ASRG has been cancelled, much of the technology and hardware continued development and testing to guide future activities. Specifically, a controller for the convertor(s) is an integral part of a Stirling-based RPS. For the ASRG design, the controller maintains stable operation of the convertors, regulates the alternating current produced by the linear alternator of the convertor, provides a specified direct current output voltage for the spacecraft, synchronizes the piston motion of the two convertors in order to minimize vibration as well as manage and maintain operation with a stable piston amplitude and hot end temperature. It not only provides power to the spacecraft but also must regulate convertor operation to avoid damage to internal components and maintain safe thermal conditions after fueling. Lockheed Martin Coherent Technologies has designed, developed and tested an Engineering Development Unit (EDU) Advanced Stirling Convertor Control Unit (ACU) to support this effort. GRC used the ACU EDU as part of its non-nuclear representation of a RPS which also consists of a pair of Dual Advanced Stirling Convertor Simulator (DASCS), and associated support equipment to perform a test in the Radioisotope Power Systems System Integration Laboratory (RSIL). The RSIL was designed and built to evaluate hardware utilizing RPS technology. The RSIL provides insight into the electrical interactions between as many as 3 radioisotope power generators, associated control strategies, and typical electric system loads. The first phase of testing included a DASCS which was developed by Johns Hopkins UniversityApplied Physics Laboratory and simulates the operation and electrical behavior of a pair of ASCs in real time via a combination of hardware and software. Testing included the following spacecraft electrical energy storage configurations: capacitive, battery, and supercapacitor. Testing of the DASCS and ACU in each energy storage configuration included simulation of a typical mission profile, and transient voltage and current data during load turn-on/turn-off. Testing for these devices also included the initiation of several system faults such as short circuits, electrical bus over-voltage, under-voltage and a dead bus recovery to restore normal power operations. The goal of this testing was to verify operation of the ACU(s) when connected to a spacecraft electrical bus.

Dugala, Gina M.↗

Model Checking a Byzantine-Fault-Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

This report presents the mechanical verification of a simplified model of a rapid Byzantine-fault-tolerant self-stabilizing protocol for distributed clock synchronization systems. This protocol does not rely on any assumptions about the initial state of the system. This protocol tolerates bursts of transient failures, and deterministically converges within a time bound that is a linear function of the self-stabilization period. A simplified model of the protocol is verified using the Symbolic Model Verifier (SMV) [SMV]. The system under study consists of 4 nodes, where at most one of the nodes is assumed to be Byzantine faulty. The model checking effort is focused on verifying correctness of the simplified model of the protocol in the presence of a permanent Byzantine fault as well as confirmation of claims of determinism and linear convergence with respect to the self-stabilization period. Although model checking results of the simplified model of the protocol confirm the theoretical predictions, these results do not necessarily confirm that the protocol solves the general case of this problem. Modeling challenges of the protocol and the system are addressed. A number of abstractions are utilized in order to reduce the state space. Also, additional innovative state space reduction techniques are introduced that can be used in future verification efforts applied to this and other protocols.

Malekpour, Mahyar R.↗