Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “safe mode”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 145 records · Page 8

Overview of the first Wendelstein 7-X long pulse campaign with fully water-cooled plasma facing components

After a long device enhancement phase, scientific operation resumed in 2022. The main new device components are the water cooling of all plasma facing components and the new water-cooled high heat flux divertor units. Water cooling allowed for the first long-pulse operation campaign. A maximum discharge length of 8 min was achieved with a total heating energy of 1.3 GJ. Safe divertor operation was demonstrated in attached and detached mode. Stable detachment is readily achieved in some magnetic configurations but requires impurity seeding in configurations with small magnetic pitch angle within the edge islands. Progress was made in the characterization of transport mechanisms across edge magnetic islands: Measurement of the potential distribution and flow pattern reveals that the islands are associated with a strong poloidal drift, which leads to rapid convection of energy and particles from the last closed flux surface into the scrape-off layer. Using the upgraded plasma heating systems, advanced heating scenarios were developed, which provide improved energy confinement comparable to the scenario, in which the record triple product for stellarators was achieved in the previous operation campaign. However, a magnetic configuration-dependent critical heating power limit of the electron cyclotron resonance heating was observed. Exceeding the respective power limit leads to a degradation of the confinement.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗

Manned testing in a simulated space environment

A view of the facility and operational requirements involved in performing a manned thermal vacuum test is presented. The requirements fall into two major categories. The first category deals with placing the suited crewmen in a hazardous environment and assuring their safety. The second category deals with the constraints and special requirements involved with a suited crewman operating flight hardware in a 1-G environment. Design areas that deal with man rating a chamber, including fire suppression, emergency repress, emergency power, backups, reliable instrumentation and data systems, communications, television monitoring, biomedical monitoring, material compatibilities, and equipment supporting the Extravehicular Mobility Unit (EMU) are discussed. The operational issues that are peculiar to manned testing such as test rules, test procedures, test protocol, emergency drills, availability of hyperbaric facilities, test team training and certification engineering concerns for a safe mechanical and instrumentation buildup, hazard analysis, and Failure Modes and Effects Analysis are discussed. The constraints and special requirements involved with a suited crewman operating flight hardware in a 1-G environment are addressed.

Fender, Donna L.↗

Electronics for Low Temperature Space Exploration Missions

Exploration missions to outer planets and deep space require spacecraft, probes, and on-board data and communication systems to operate reliably and efficiently under severe harsh conditions. On-board electronics, in particular those in direct exposures to the space environment without any shielding or protection, will encounter extreme low temperature and thermal cycling in their service cycle in most of NASA s upcoming exploration missions. For example, Venus atmosphere, Jupiter atmosphere, Moon surface, Pluto orbiter, Mars, comets, Titan, Europa, and James Webb Space Telescope all involve low-temperature surroundings. Therefore, electronics for space exploration missions need to be designed for operation under such environmental conditions. There are ongoing efforts at the NASA Glenn Research Center (GRC) to establish a database on the operation and reliability of electronic devices and circuits under extreme temperature operation for space applications. This work is being performed under the Extreme Temperature Electronics Program with collaboration and support of the NASA Electronic Parts and Packaging (NEPP) Program. The results of these investigations will be used to establish safe operating areas and to identify degradation and failure modes, and the information will be disseminated to mission planners and system designers for use as tools for proper part selection and in risk mitigation. An overview of this program along with experimental data will be presented.

Patterson, Richard L.↗

CASSIUS: The Cassini Uplink Scheduler

The Cassini Uplink Scheduler (CASSIUS) is cross-platform software used to generate a radiation sequence plan for commands being sent to the Cassini spacecraft. Because signals must travel through varying amounts of Earth's atmosphere, several different modes of constant telemetry rates have been devised. These modes guarantee that the spacecraft and the Deep Space Network agree with respect to the data transmission rate. However, the memory readout of a command will be lost if it occurs on a telemetry mode boundary. Given a list of spacecraft message files as well as the available telemetry modes, CASSIUS can find an uplink sequence that ensures safe transmission of each file. In addition, it can predict when the two on-board solid state recorders will swap. CASSIUS prevents data corruption by making sure that commands are not planned for memory readout during telemetry rate changes or a solid state recorder swap.

Cassini mission↗

Functional and Operating Requirements for the Microreactor Agile Non-Nuclear Experimental Test Bed (MAGNET)

Microreactors, or small, transportable reactors with a capacity of < 20 MWTH, are sought to provide heat and power for myriad applications in remote areas, military installations, emergency operations, humanitarian missions and disaster relief zones as illustrated in Figure 1. These small, transportable reactor designs, while offering many advantages, are largely untested and unproven. System and component testing is needed to demonstrate to regulators that these designs are safe and to convince customers that the systems are robust, reliable, and efficient. The microreactor agile non-nuclear experimental test bed (MAGNET) is being constructed at Idaho National Laboratory to assist with the development, demonstration, and validation of microreactor components and systems. MAGNET will support technology maturation to reduce uncertainty and risk relative to the operation and deployment of this unique class of systems. Stakeholders for this test bed include microreactor developers, energy users, and regulators. Regulators will be engaged early in the design and testing to expedite regulatory approval and licensing. Within MAGNET, systems and components can be safely tested, providing valuable information on operating regimes, failure modes, and thresholds. Since there are various types of microreactors being proposed, which can be classified according to their core cooling method, heat-pipes, gas-cooled (pebble bed or prismatic), molten salt, light water, or light water, the goal is to provide a test bed that is broadly applicable to multiple microreactor concepts. Each reactor type poses a different set of design and operational challenges and performance claims stated by commercial vendors have not been independently verified through rigorous testing. The initial set of tests to be performed in MAGNET are targeted towards demonstrating the feasibility and performance of heat-pipe cooled reactors, since this concept is unique to very small nuclear reactors. However, the testbed will be constructed to accommodate other designs in addition to heat-pipe cooled reactors.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Gear Crack Propagation Path Studies: Guidelines for Ultra-Safe Design

Design guidelines have been established to prevent catastrophic rim fracture failure modes when considering gear tooth bending fatigue. Analysis was performed using the finite element method with principles of linear elastic fracture mechanics. Crack propagation paths were predicted for a variety of gear tooth and rim configurations. The effects of rim and web thicknesses, initial crack locations, and gear tooth geometry factors such as diametral pitch, number of teeth, pitch radius, and tooth pressure angle were considered. Design maps of tooth/rim fracture modes including effects of gear geometry, applied load, crack size, and material properties were developed. The occurrence of rim fractures significantly increased as the backup ratio (rim thickness divided by tooth height) decreased. The occurrence of rim fractures also increased as the initial crack location was moved down the root of the tooth. Increased rim and web compliance increased the occurrence of rim fractures. For gears with constant pitch radii, coarser-pitch teeth increased the occurrence of tooth fractures over rim fractures. Also, 25 deg pressure angle teeth had an increased occurrence of tooth fractures over rim fractures when compared to 20 deg pressure angle teeth. For gears with constant number of teeth or gears with constant diametral pitch, varying size had little or no effect on crack propagation paths.

Lewicki, David G.↗

Hazard Contribution Modes of Machine Learning Components

Amongst the essential steps to be taken towards developing and deploying safe systems with embedded learning-enabled components (LECs)—i.e., software components that use machine learning (ML)—are to analyze and understand the contribution of the constituent LECs to safety, and to assure that those contributions have been appropriately managed. This paper addresses both steps by, first, introducing the otion of hazard contribution modes (HCMs)—a categorization of the ways in which the ML elements of LECs can contribute to hazardous system states; and, second, describing how argumentation patterns can capture the reasoning that can be used to assure HCM mitigation. Our framework is generic in the sense that the categories of HCMs developed i) can admit different learning schemes, i.e., supervised, unsupervised, and reinforcement learning, and ii) are not dependent on the type of system in which the LECs are embedded, i.e., both cyber and cyber-physical systems. One of the goals of this work is to serve a starting point for systematizing LEC safety analysis towards eventually automating it in a tool.

Smith, Colin↗

Hazard Contribution Modes of Machine Learning Components

Amongst the essential steps to be taken towards developing and deploying safe systems with embedded learning-enabled components (LECs) i.e., software components that use ma- chine learning (ML)—are to analyze and understand the con- tribution of the constituent LECs to safety, and to assure that those contributions have been appropriately managed. This paper addresses both steps by, first, introducing the notion of hazard contribution modes (HCMs) a categorization of the ways in which the ML elements of LECs can contribute to hazardous system states; and, second, describing how argumentation patterns can capture the reasoning that can be used to assure HCM mitigation. Our framework is generic in the sense that the categories of HCMs developed i) can admit different learning schemes, i.e., supervised, unsupervised, and reinforcement learning, and ii) are not dependent on the type of system in which the LECs are embedded, i.e., both cyber and cyber-physical systems. One of the goals of this work is to serve a starting point for systematizing L analysis towards eventually automating it in a tool.

Smith, Colin↗

Algorithm for Determination of Orion Ascent Abort Mode Achievability

For human spaceflight missions, a launch vehicle failure poses the challenge of returning the crew safely to earth through environments that are often much more stressful than the nominal mission. Manned spaceflight vehicles require continuous abort capability throughout the ascent trajectory to protect the crew in the event of a failure of the launch vehicle. To provide continuous abort coverage during the ascent trajectory, different types of Orion abort modes have been developed. If a launch vehicle failure occurs, the crew must be able to quickly and accurately determine the appropriate abort mode to execute. Early in the ascent, while the Launch Abort System (LAS) is attached, abort mode selection is trivial, and any failures will result in a LAS abort. For failures after LAS jettison, the Service Module (SM) effectors are employed to perform abort maneuvers. Several different SM abort mode options are available depending on the current vehicle location and energy state. During this region of flight the selection of the abort mode that maximizes the survivability of the crew becomes non-trivial. To provide the most accurate and timely information to the crew and the onboard abort decision logic, on-board algorithms have been developed to propagate the abort trajectories based on the current launch vehicle performance and to predict the current abort capability of the Orion vehicle. This paper will provide an overview of the algorithm architecture for determining abort achievability as well as the scalar integration scheme that makes the onboard computation possible. Extension of the algorithm to assessing abort coverage impacts from Orion design modifications and launch vehicle trajectory modifications is also presented.

Tedesco, Mark B.↗

ASTP simulated lightning test report

A simulated lightning test was conducted on the backup spacecraft for the Apollo Soyuz Test Project mission (CSM-119) to determine the susceptibility of the Apollo spacecraft to damage from the indirect effects of lightning. It is demonstrated that induced lightning effects from low-level injected currents can be scaled linearly to those which are obtained in a full threat lightning stroke. Test results indicate that: (1) many of the power and signal critical circuits would fail if subjected to full-threat lightning, (2) pyrotechnic circuits are safe for full-threat lightning, and (3) common-mode voltages exceeded the failure criteria level for all but three of the circuits tested.

Blount, R. L.↗

Static stability of the Space Station solar array FASTMast structure

The combined loads test of the 3-Bay FASTMast marks the end of the Lewis Research Center (LeRC) effort to characterize the behavior of the principal Space Station solar array support structure. The primary objective of this test and analysis effort was to develop a method to predict structural stability failure modes under flight-like applied loads. Included at the beginning of this report is a brief historical perspective of the hardware design development and FASTMast structural stability problem evolution. Once an understanding of the solution process has been established, test and analysis details are presented and related to the postulated failure theories. The combined load test series subjected the structure to a combination of transverse, moment, and torsion loads similar to that expected in the service environment. Nonlinear finite element (FE) models were developed and large displacement analyses were performed to support the test effort and failure mode predictions. Details of the test configuration as well as test and analysis results are presented. The results were then critiqued to establish valid and successful support of the failure mode assessments. Finally, study conclusions are drawn and recommendations for safe operation of the FASTMast structure are presented for consideration.

Shaker, John F.↗

Optical Closed-Loop Propulsion Control System Development

The overall objective of this program was to design and fabricate the components required for optical closed-loop control of a F404-400 turbofan engine, by building on the experience of the NASA Fiber Optic Control System Integration (FOCSI) program. Evaluating the performance of fiber optic technology at the component and system levels will result in helping to validate its use on aircraft engines. This report includes descriptions of three test plans. The EOI Acceptance Test is designed to demonstrate satisfactory functionality of the EOI, primarily fail-safe throughput of the F404 sensor signals in the normal mode, and validation, switching, and output of the five analog sensor signals as generated from validated optical sensor inputs, in the optical mode. The EOI System Test is designed to demonstrate acceptable F404 ECU functionality as interfaced with the EOI, making use of a production ECU test stand. The Optical Control Engine Test Request describes planned hardware installation, optical signal calibrations, data system coordination, test procedures, and data signal comparisons for an engine test demonstration of the optical closed-loop control.

Poppel, Gary L.↗

The Small Aircraft Transportation System (SATS): Research Collaborations with the NASA Langley Research Center

The aviation industry is an integral part of the world s economy. Travelers have consistently chosen aviation as their mode of transportation as it is reliable, time efficient and safe. The out- dated Hub and Spoke system, coupled with high demand, has led to delays, cancellations and gridlock. NASA is developing innovative solutions to these and other air transportation problems. This research is being conducted through partnerships with federal agencies, industry stakeholders, and academia, specifically the University of Nebraska at Omaha. Each collaborator is pursuing the NASA General Aviation Roadmap through their involvement in the expansion of the Small Aircraft Transportation System (SATS). SATS will utilize technologically advanced small aircraft to transport travelers to and from rural and isolated communities. Additionally, this system will provide a safe alternative to the hub and spoke system, giving more time to more people through high-speed mobility and increased accessibility.

Tarry, Scott E.↗

Flight Simulator Demonstration and Certification Implications of Powertrain Failure Mitigation in a Partial Turboelectric Aircraft

The Single-aisle Turboelectric AiRCraft with Aft Boundary Layer propulsor (STARC ABL) is a concept aircraft with a partial turboelectric powertrain. The complexity and integrated nature of the partial turboelectric powertrain architecture presents failure modes and hazards not found in conventional aircraft propulsion designs. Previously, various electrical and mechanical faults and associated recovery modes were demonstrated in a dynamic model of the powertrain. It was shown that certain faults were catastrophic without recovery logic, due specifically to the interaction of the subsystems. However, in each case, the logic, known as a reversionary control mode, enabled continued operation with assumed sufficient thrust to maintain safe flight. The current work evaluates the powertrain faults and recovery strategies using a full aircraft model in a piloted flight simulator, and places it in the context of current regulatory practice. Faults initiated in flight were successfully mitigated, with the accommodated aircraft subsequently evaluated against certification requirements for three-engine aircraft, which were shown to be appropriate for the STARC-ABL configuration.

STARC-ABL↗

Flight Simulator Demonstration and Certification Implications of Powertrain Failure Mitigation in a Partial Turboelectric Aircraft

The Single-aisle Turboelectric AiRCraft with Aft Boundary Layer propulsor (STARC ABL) is a concept aircraft with a partial turboelectric powertrain. The complexity and integrated nature of the partial turboelectric powertrain architecture presents failure modes and hazards not found in conventional aircraft propulsion designs. Previously, various electrical and mechanical faults and associated recovery modes were demonstrated in a dynamic model of the powertrain. It was shown that certain faults were catastrophic without recovery logic, due specifically to the interaction of the subsystems. However, in each case, the logic, known as a reversionary control mode, enabled continued operation with assumed sufficient thrust to maintain safe flight. The current work evaluates the powertrain faults and recovery strategies using a full aircraft model in a piloted flight simulator, and places it in the context of current regulatory practice. Faults initiated in flight were successfully mitigated, with the accommodated aircraft subsequently evaluated against certification requirements for three-engine aircraft, which were shown to be appropriate for the STARC-ABL configuration.

STARC-ABL↗

Flight Simulator Demonstration and Certification Implications of Powertrain Failure Mitigation in a Partial Turboelectric Aircraft

The Single-aisle Turboelectric AiRCraft with Aft Boundary Layer propulsor (STARC ABL) is a concept aircraft with a partial turboelectric powertrain. The complexity and integrated nature of the partial turboelectric powertrain architecture presents failure modes and hazards not found in conventional aircraft propulsion designs. Previously, various electrical and mechanical faults and associated recovery modes were demonstrated in a dynamic model of the powertrain. It was shown that certain faults were catastrophic without recovery logic, due specifically to the interaction of the subsystems. However, in each case, the logic, known as a reversionary control mode, enabled continued operation with assumed sufficient thrust to maintain safe flight. The current work evaluates the powertrain faults and recovery strategies using a full aircraft model in a piloted flight simulator, and places it in the context of current regulatory practice. Faults initiated in flight were successfully mitigated, with the accommodated aircraft subsequently evaluated against certification requirements for three-engine aircraft, which were shown to be appropriate for the STARC-ABL configuration.

certification↗

An Augmentation of G-Guidance Algorithms

The original G-Guidance algorithm provided an autonomous guidance and control policy for small-body proximity operations that took into account uncertainty and dynamics disturbances. However, there was a lack of robustness in regards to object proximity while in autonomous mode. The modified GGuidance algorithm was augmented with a second operational mode that allows switching into a safety hover mode. This will cause a spacecraft to hover in place until a mission-planning algorithm can compute a safe new trajectory. No state or control constraints are violated. When a new, feasible state trajectory is calculated, the spacecraft will return to standard mode and maneuver toward the target. The main goal of this augmentation is to protect the spacecraft in the event that a landing surface or obstacle is closer or further than anticipated. The algorithm can be used for the mitigation of any unexpected trajectory or state changes that occur during standard mode operations

Carson, John M. III↗