Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “security verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

128 records · Page 8

Design Evolution and Verification of the A-3 Chemical Steam Generator

Following is an overview of the Chemical Steam Generator system selected to provide vacuum conditions for a new altitude test facility, the A-3 Test Stand at Stennis Space Center (SSC) in Bay St. Louis, MS. A-3 will serve as NASA s primary facility for altitude testing of the J-2X rocket engine, to be used as the primary propulsion device for the upper stages of the Ares launch vehicles. The Chemical Steam Generators (CSGs) will produce vacuum conditions in the test cell through the production and subsequent supersonic ejection of steam into a diffuser downstream of the J-2X engine nozzle exit. The Chemical Steam Generators chosen have a rich heritage of operation at rocket engine altitude test facilities since the days of the Apollo program and are still in use at NASA White Sands Test Facility (WSTF) in New Mexico. The generators at WSTF have been modified to a degree, but are still very close to the heritage design. The intent for the A-3 implementation is to maintain this heritage design as much as possible, making minimal updates only where necessary to substitute for obsolete parts and to increase reliability. Reliability improvements are especially desired because the proposed system will require 27 generators, which is nine times the largest system installed in the 1960s. Improvements were suggested by the original design firm, Reaction Motors, by NASA SSC and NASA WSTF engineers, and by the A-3 test stand design contractor, Jacobs Technology, Inc. (JTI). This paper describes the range of improvements made to the design to date, starting with the heritage generator and the minor modifications made over time at WSTF, to the modernized configuration which will be used at A-3. The paper will discuss NASA s investment in modifications to SSC s E-2 test facility fire a full-scale Chemical Steam Generator in advance of the larger steam system installation at A-3. Risk mitigation testing will be performed in early 2009 at this test facility to verify that the CSGs operate as expected. The generator which will undergo this testing is of the most recent A-3 configuration, and will be instrumented far in excess of what is normally required for operation. The extra data will allow for easier troubleshooting and more complete knowledge of expected generator performance. In addition, the early testing will give SSC personnel experience in operating the CSG systems, which will expedite the process of installation and activation at A-3. Each Chemical Steam Generator is supported by a complement of valves, instruments, and flow control devices, with the entire assembly called a "module." The generators will be installed in groups of three, historically called "units". A module is so called because of its modular ability to be replaced or serviced without disturbing the other two modules installed on the same unit. A module is pictured in Figure 1, shown with its generator secured by white bands in its shipping (vs. installed) configuration. The heritage system at WSTF is composed of a single unit (three generator modules), pictured in Figure 2 as it was installed in 1965. In contrast, A-3 will have nine units operating in parallel to achieve vacuum conditions appropriate for testing the J-2X engine. Each of the combustors operates in two modes and achieves the so-called "full-steam" mode after all three of its stages ignite. Ignition of the first stage is achieved by exciting a spark plug; the second stage and main stage are lit by the flame front of the previous stage. The main stage burns approximately 97% of the total propellant flow and uses the heat energy to vaporize water into superheated steam. While the main stage remains unlit, the combustor is in so-called "idle" mode. In the WSTF system, this idle mode is not optimized for water usage, and does not need to be, as the water is pumped from a large reservoir. The water supply at A-3 will be contained in tanks with finite volume, so water optimization is preferred for the modnized configuration. Multiple solutions for this issue have been proposed, with the leading concept being a change to the operational definition of "idle mode," with the generator running in a lower heat flux condition.

Kirchner, Casey K.↗

R2U2 in Space: System and Software Health Management for Small Satellites

In order for small but complex systems like rovers, SmallSats, or Unmanned Aircraft (UAS) to operate autonomously, they must have a real-time solution for assessing their own system health. System and Software Health Management (SHM) enables better detection of faulty sensors and software problems, and enables better fault management including mitigation of unpredicted fault scenarios in the absence of a human on-board. In recent work, we have developed a Responsive, Realizable, Unobtrusive Unit (R2U2) for on-board SHM of autonomous UAS and demonstrated its ability to detect faults during flight time. These faults, from sensor failures, to software problems, to malicious security attacks, can present as transient temporal faults that even humans are challenged to find. An R2U2 congfiuration is a modular combination of multiple types of temporal logic runtime observers with fault-specic Bayesian Nets and sensor filters. R2U2 reasons about both on-board hardware and software components; R2U2 itself can be instantiated as an independent FPGA (Field-Programmable Gate Array)-based conguration or as a software component running independently from other software on-board. Small satellites, such as CubeSats, also require on-board SHM and failure mitigation, as limited telemetry bandwidth does not allow the transmission of the entire system state for ground-based health management. However, the autonomous operation of satellites brings a set of challenges different from UAS, including the effects of radiation on non-rad-hard, low-cost components, and the harsher environment of space. We surmise that a new extension of R2U2 could be adapted to help better detect, for example, radiation errors in cheaper COTS (Commercial Off the Shelf) (not rad-hard) components often used in small space systems. Since small satellites often operate in coordination, we will also examine new ways of distributed monitoring of their communication and cooperation and real-time detection of off-nominal situations utilizing multiple satellites. This talk will discuss preliminary work and ideas for building on terrestrial success of system and software health management for the harsher, and differently challenging, environment of space.

Runtime Verification & Validation↗