SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

All sources NASA NTRS DOE OSTI

NASA NTRS1991

Welding space vacuum technology

The objective was to assist the EH 42 Division in putting together a vacuum system that could attain the desired pressure and be large enough to accommodate the gas-metal arc (GMA) welding fixture apparatus. A major accomplishment was the design and fabrication of the controller/annunciator for the 4' by 8' system. It contains many safety features such as thermocouple set point relays that will only allow inlet and exit gas and vacuum valves to be operated at pre-selected system pressures, and a fail safe mode for power interruptions and operator mistakes. It is felt that significant progress was made in this research effort to weld in a vacuum environment. With continued efforts to increase the pump speeds for vacuum chambers and further studies on weld fixtures and gas inlet pressures, the NASA program will be successful.

Johnson, R. Barry↗

NASA NTRS1991

Aging commuter aeroplanes: Fatigue evaluation and control methods

The risks associated with old aeroplanes arise in the main from the difficulty of obtaining support from the manufacturer and other skilled people, and from a general loss of reliability caused by wear and other deterioration. The loss of reliability is caused by two broad classes of problem. There are those problems which are self evident, and hazardous rather than catastrophic. These are the problem areas where characteristically there have been multiple overhauls, repairs, and replacements, and where aging really means the results of repair ineffectiveness that accumulates. The other class of problem is the insidious and potentially catastrophic class. It includes the progressive deterioration of items which are not maintained, and often cannot be maintained because the deterioration cannot be seen. It includes loss of physical properties in adhesives and other organic compounds, corrosion, and the response to repeated loads. This paper deals with a currently unnecessarily troublesome aspect of that response. The present working definition of "commuter aeroplanes" encompasses a wide range of aging types, from the Fairchild F27, through deHavilland Canada Twin Otters to the smaller twin engined Piper and Cessna models. It includes such types as the Lockheed 10, the Beech 18, and the Grumman Mallard. Although we must remain concerned about those types which have been certificated under a design standard or operational rule which embodies the elementary fail-safe concept and which have not been subjected to a subsequent structural audit, this paper is directed, in the first instance, towards types for which fatigue and damage tolerance evaluation was not required as a condition of certification. It will be seen, however, that the principles are robust enough for more general application.

Aging Aircraft↗

NASA NTRS1992

Stability test and analysis of the Space Shuttle Primary Reaction Control Subsystem thruster

The results are reported of a test program conducted on the Space Shuttle Primary Reaction Control Subsystem thruster in order to investigate the effects of trapped helium bubbles and saturated propellants on stability, determine if thruster-to-thruster stability variations are significant, and determine stability under STS-representative conditions. It is concluded that the thruster design is highly reliable in flight and that burn-through has not occurred. Significantly unstable thrusters are screened out, and wire wrap is found to protect against chamber burn-throughs and to provide a fail-safe thruster for this situation.

Applewhite, John↗

NASA NTRS1992

SSME Automated Engine Calibration System (AECS)

An algorithm is derived for the real-time calibration of the engine fuel flowmeter and the engine mixture ratio during Space Shuttle Main Engine (SSME) ground testing. Because currently used calibration methods are post-test operations, there exists no fail-safe way of predicting at what mixture ratio a planned test will run. It is proposed that the algorithm developed here be used as part of an Automated Engine Calibration System (AECS) which could ensure that nearly all SSME tests are run at the proper mixture ratio. In this way, AECS has the potential of increasing the efficiency of the SSME ground test program. In addition to the derivation of the algorithm, an overview of this calibration system is presented along with the list of test stand facility instrumentation necessary for AECS implementation.

Greene, William D.↗

NASA NTRS1993

Composite Tiedown Fastener

Taut fastener formed from flat tape and buckles. Flexible, tiedown composite fastener for joining two or more material panels or other structural components dispensed from roll and cut to desired length. Fastener made partly of polyvinyl chloride or other resilient synthetic material and designed for joining components for which snug all-around fits required. Easily installed and removed by hand without use of tools. Potential application extends to many areas. One use of fastener is to bind pages and covers together to make book. Also utilized to provide energy-absorbing and breakaway structural fasteners for fail-safe vehicles in crashes.

Ng, Gim Shek↗

NASA NTRS1993

Magnetostrictive Roller-Drive Stepping Motor

Proposed motor based on magnetostrictive effect provides stepped angular motion with angular increments of order of 100 microradians. Driven to repeat stepping cycle rapidly enough to achieve maximum speed of about 20 rpm, provides torque an order of magnitude greater than electric motors, and brakes itself when power turned off. Magnetostrictive rods in electromagnet coils push against drive plate, causing it to rotate slightly. This slight rotation jams conical rollers between cam surfaces on outer drive ring and split drum, so rollers transmit rotation to drum. Suitable for precise, high-torque, fail-safe-braking, direct drive of robot joint, without bulk and weight of additional brake mechanism and gear train.

Vranish, John M.↗

NASA NTRS1991

Concurrent-scene/alternate-pattern analysis for robust video-based docking systems

A typical docking target employs a three-point design of retroreflective tape, one at each endpoint of the center-line, and one on the tip of the central post. Scenes, sensed via laser diode illumination, produce pictures with spots corresponding to desired reflection from the retroreflectors and other reflections. Control corrections for each axis of the vehicle can then be properly applied if the desired spots are accurately tracked. However, initial acquisition of these three spots (detection and identification problem) are non-trivial under a severe noise environment. Signal-to-noise enhancement, accomplished by subtracting the non-illuminated scene from the target scene illuminated by laser diodes, can not eliminate every false spot. Hence, minimization of docking failures due to target mistracking would suggest needed inclusion of added processing features pertaining to target locations. In this paper, we present a concurrent processing scheme for a modified docking target scene which could lead to a perfect docking system. Since the non-illuminated target scene is already available, adding another feature to the three-point design by marking two non-reflective lines, one between the two end-points and one from the tip of the central post to the center-line, would allow this line feature to be picked-up only when capturing the background scene (sensor data without laser illumination). Therefore, instead of performing the image subtraction to generate a picture with a high signal-to-noise ratio, a processed line-image based on the robust line detection technique (Hough transform) can be used to fuse with the actively sensed three-point target image to deduce the true locations of the docking target. This dual-channel confirmation scheme is necessary if a fail-safe system is to be realized from both the sensing and processing point-of-views. Detailed algorithms and preliminary results are presented.

Udomkesmalee, Suraphol↗

NASA NTRS1993

SSME Automated Engine Calibrating System (AECS) alternative algorithm

An algorithm is derived for the real-time calibration of the engine mixture ratio during SSME ground testing. Because currently used calibration methods are post-test operations, there exists no fail-safe way of predicting at what mixture ratio a planned test will run. It is proposed that the algorithm developed here be used as part of an AECS which could ensure that nearly all SSME tests are run at the proper mixture ratio. In this way, AECS has the potential of increasing the efficiency of the SSME ground test program. This algorithm is an alternative to that presented in a previous paper. In addition to the derivation of the algorithm, an overview of this calibration system is presented along with a discussion of a possible single coefficient calibration system and the list of test stand facility instrumentation necessary for AECS implementation.

Greene, William D.↗

NASA NTRS1994

Tele/Autonomous Robot For Nuclear Facilities

Fail-safe tele/autonomous robotic system makes it unnecessary for human technicians to enter nuclear-fuel-reprocessing facilities and other high-radiation or otherwise hazardous industrial environments. Used to carry out experiments as exchanging equipment modules, turning bolts, cleaning surfaces, and grappling turning objects by use of mixture of autonomous actions and teleoperation with either single arm or two cooperating arms. System capable of fully autonomous operation, teleoperation or shared control.

Backes, Paul G.↗

NASA NTRS1990

Reliable VLSI sequential controllers

A VLSI architecture for synchronous sequential controllers is presented that has attractive qualities for producing reliable circuits. In these circuits, one hardware implementation can realize any flow table with a maximum of 2(exp n) internal states and m inputs. Also all design equations are identical. A real time fault detection means is presented along with a strategy for verifying the correctness of the checking hardware. This self check feature can be employed with no increase in hardware. The architecture can be modified to achieve fail safe designs. With no increase in hardware, an adaptable circuit can be realized that allows replacement of faulty transitions with fault free transitions.

Whitaker, S.↗

NASA NTRS1994

Deployable and retractable telescoping tubular structure development

A new deployable and retractable telescoping boom capable of high deployed stiffness and strength is described. Deployment and retraction functions are controlled by simple, reliable, and fail-safe latches between the tubular segments. The latch and a BI-STEM (Storable Tubular Extendible Member) actuator work together to eliminate the need for the segments to overlap when deployed. This yields an unusually lightweight boom and compact launch configuration. An aluminum space-flight prototype with three joints displays zero structural deadband, low hysteresis, and high damping. The development approach and difficulties are discussed. Test results provide a joint model for sizing flight booms of any diameter and length.

Thomson, M. W.↗

NASA NTRS1991

Planetary protection issues and future Mars missions

A primary scientific theme for the Space Exploration Initiative (SEI) is the search for life, extant or extinct, on Mars. Because of this, concerns have arisen about Planetary Protection (PP), the prevention of biological cross-contamination between Earth and other planets during solar system exploration missions. A recent workshop assessed the necessity for, and impact of, PP requirements on the unmanned and human missions to Mars comprising the SEI. The following ground-rules were adopted: (1) Information needed for assessing PP issues must be obtained during the unmanned precursor mission phase prior to human landings. (2) Returned Mars samples will be considered biologically hazardous until proven otherwise. (3) Deposition of microbes on Mars and exposure of the crew to martian materials are inevitable when humans land. And (4) Human landings are unlikely until it is demonstrated that there is no harmful effect of martian materials on terrestrial life forms. These ground-rules dictated the development of a conservative PP strategy for precursor missions. Key features of the proposed strategy include: to prevent forward-contamination, all orbiters will follow Mars Observer PP procedures for assembly, trajectory, and lifetime. All landers will follow Viking PP procedures for assembly, microbial load reduction, and bio-shield. And, to prevent back-contamination, all sample return missions will have PP requirements which include fail-safe sample sealing, breaking contact chain with the martian surface, and containment and quarantine analysis in Earth-based laboratory. In addition to deliberating on scientific and technical issues, the workshop made several recommendations for dealing with forward and back-contamination concerns from non-scicntific perspectives.

Devincenzi, D. L.↗

NASA NTRS1994

Call sign intelligibility improvement using a spatial auditory display

A spatial auditory display was designed for separating the multiple communication channels usually heard over one ear to different virtual auditory positions. The single 19 foot rack mount device utilizes digital filtering algorithms to separate up to four communication channels. The filters use four different binaural transfer functions, synthesized from actual outer ear measurements, to impose localization cues on the incoming sound. Hardware design features include 'fail-safe' operation in the case of power loss, and microphone/headset interfaces to the mobile launch communication system in use at KSC. An experiment designed to verify the intelligibility advantage of the display used 130 different call signs taken from the communications protocol used at NASA KSC. A 6 to 7 dB intelligibility advantage was found when multiple channels were spatially displayed, compared to monaural listening. The findings suggest that the use of a spatial auditory display could enhance both occupational and operational safety and efficiency of NASA operations.

Begault, Durand R.↗

NASA NTRS1993

WTEC monograph on instrumentation, control and safety systems of Canadian nuclear facilities

This report updates a 1989-90 survey of advanced instrumentation and controls (I&C) technologies and associated human factors issues in the U.S. and Canadian nuclear industries carried out by a team from Oak Ridge National Laboratory (Carter and Uhrig 1990). The authors found that the most advanced I&C systems are in the Canadian CANDU plants, where the newest plant (Darlington) has digital systems in almost 100 percent of its control systems and in over 70 percent of its plant protection system. Increased emphasis on human factors and cognitive science in modern control rooms has resulted in a reduced workload for the operators and the elimination of many human errors. Automation implemented through digital instrumentation and control is effectively changing the role of the operator to that of a systems manager. The hypothesis that properly introducing digital systems increases safety is supported by the Canadian experience. The performance of these digital systems has been achieved using appropriate quality assurance programs for both hardware and software development. Recent regulatory authority review of the development of safety-critical software has resulted in the creation of isolated software modules with well defined interfaces and more formal structure in the software generation. The ability of digital systems to detect impending failures and initiate a fail-safe action is a significant safety issue that should be of special interest to nuclear utilities and regulatory authorities around the world.

Uhrig, Robert E.↗

NASA NTRS1994

A rose by any other name: Certification seen as process rather than content

Green (1990) believes that the two main factors safeguarding flying from human error are both related to certification and regulation. First is the increasingly proceduralized nature of flying whereby as much as possible is reduced to a rule-based activity. Second is the emphasis placed upon training and competency checking of aircrew in simulators and in the air, both generally and for all particular types of aircraft flown. This leaves, believes Green, other human factors that are relatively unaddressed as yet and which can give rise to human reliability problems. These include: hardware factors and especially pilot/co-pilot relationships; and system factors including fatigue and cost/safety trade-offs. He also, importantly, identifies problems with the integration of the 'electronic crew member' following increased automation. Human reliability failures with artificial intelligence and automation, due to over-reliance on the system fail-safe mechanisms, or to operator under- confidence in the integrity or self-regulating capacity of the system, or to out-of-loop effects, are widely accepted as being due to deficiencies in plant design, planning, management and maintenance more than to 'operator error' - Reason's (1990) latent error or organization pathogens argument. Reliability failures in complex systems are well enough documented to give cause for concern and at least promote a debate on the merits of a full certification program. The purpose of this short paper is to seek out and explore what is valuable in certification, at the least to show that the benefits outweigh the disadvantages and at best to identify positive outcomes perhaps not obtainable in other ways. On both sides of the debate on certification there is general agreement on the need for a better human factors perspective and effort in complex aviation systems design. What is at issue is how this is to be promoted. It is incumbent upon opponents of certification to say how else such promotion be enabled. This is an exploratory and philosophical review, not a focused and specific one, and it will draw upon much that is not firmly in the domain of complex aviation systems.

Wilson, John R.↗

NASA NTRS1980

Design and Analysis of a Stiffened Composite Fuselage Panel

A stiffened composite panel has been designed that is representative of the fuselage structure of existing wide bodied aircraft. The panel is a minimum weight design, based on the current level of technology and realistic loads and criteria. Several different stiffener configurations were investigated in the optimization process. The final configuration is an all graphite epoxy J-stiffened design in which the skin between adjacent stiffeners is permitted to buckle under design loads. Fail-safe concepts typically employed in metallic fuselage structure have been incorporated in the design. A conservative approach has been used with regard to structural details such as skin frame and stringer frame attachments and other areas where sufficient design data was not available.

Dickson, J. N.↗

NASA NTRS1996

Thermal Control Subsystem Design for the Avionics of a Space Station Payload

A case study of the thermal control subsystem development for a space based payload is presented from the concept stage through preliminary design. This payload, the Space Acceleration Measurement System 2 (SAMS-2), will measure the acceleration environment at select locations within the International Space Station. Its thermal control subsystem must maintain component temperatures within an acceptable range over a 10 year life span, while restricting accessible surfaces to touch temperature limits and insuring fail safe conditions in the event of loss of cooling. In addition to these primary design objectives, system level requirements and constraints are imposed on the payload, many of which are driven by multidisciplinary issues. Blending these issues into the overall system design required concurrent design sessions with the project team, iterative conceptual design layouts, thermal analysis and modeling, and hardware testing. Multiple tradeoff studies were also performed to investigate the many options which surfaced during the development cycle.

Moran, Matthew E.↗

NASA NTRS1998

Optical Closed-Loop Propulsion Control System Development

The overall objective of this program was to design and fabricate the components required for optical closed-loop control of a F404-400 turbofan engine, by building on the experience of the NASA Fiber Optic Control System Integration (FOCSI) program. Evaluating the performance of fiber optic technology at the component and system levels will result in helping to validate its use on aircraft engines. This report includes descriptions of three test plans. The EOI Acceptance Test is designed to demonstrate satisfactory functionality of the EOI, primarily fail-safe throughput of the F404 sensor signals in the normal mode, and validation, switching, and output of the five analog sensor signals as generated from validated optical sensor inputs, in the optical mode. The EOI System Test is designed to demonstrate acceptable F404 ECU functionality as interfaced with the EOI, making use of a production ECU test stand. The Optical Control Engine Test Request describes planned hardware installation, optical signal calibrations, data system coordination, test procedures, and data signal comparisons for an engine test demonstration of the optical closed-loop control.

Poppel, Gary L.↗