Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Software Verification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 1,549 records · Page 86

Flight test evaluation of a digital controller used in a VTOL automatic approach and landing system

As part of the NASA Langley Research Center's effort to develop technology for VTOL operation in the air transportation system in the late 1980's and beyond, research has been conducted aimed at developing digital controller design procedures. This paper describes the verification of one design procedure by the flight evaluation of an advanced digital control algorithm. The control algorithm, operating at 10 iterations per second, follows step guidance commands with zero steady state error and thus provides an autotrim capability for the nonlinear vehicle. Changes in vehicle dynamics are accounted for using a gain scheduling technique. This control algorithm is combined with sensor filters, a trajectory generator, and a closed loop guidance algorithm to form a VTOL autoland system. A CH-47 tandem rotor helicopter which contains a set of sensors, onboard digital flight computers and electro-hydraulic actuators is used in the evaluation. All software, except input-output routines, is coded in FORTRAN using floating point arithmetic and executed in the flight computer. This autoland system is exercised by automatically flying straight-in descending decelerating trajectories typical of VFR manual approaches to a predetermined landing pad.

Downing, D. R.↗

Coupled Fluid-Structure Interaction Analysis of Solid Rocket Motor with Flexible Inhibitors

Flexible inhibitors are generally used in solid rocket motors (SRMs) as a means to control the burning of propellant. Vortices generated by the flow of propellant around the flexible inhibitors have been identified as a driving source of instabilities that can lead to thrust oscillations in launch vehicles. Potential coupling between the SRM thrust oscillations and structural vibration modes is an important risk factor in launch vehicle design. As a means to predict and better understand these phenomena, a multidisciplinary simulation capability that couples the NASA production CFD code, Loci/CHEM, with CFDRC's structural finite element code, CoBi, has been developed. This capability is crucial to the development of NASA's new space launch system (SLS). This paper summarizes the efforts in applying the coupled software to demonstrate and investigate fluid-structure interaction (FSI) phenomena between pressure waves and flexible inhibitors inside reusable solid rocket motors (RSRMs). The features of the fluid and structural solvers are described in detail, and the coupling methodology and interfacial continuity requirements are then presented in a general Eulerian-Lagrangian framework. The simulations presented herein utilize production level CFD with hybrid RANS/LES turbulence modeling and grid resolution in excess of 80 million cells. The fluid domain in the SRM is discretized using a general mixed polyhedral unstructured mesh, while full 3D shell elements are utilized in the structural domain for the flexible inhibitors. Verifications against analytical solutions for a structural model under a steady uniform pressure condition and under dynamic modal analysis show excellent agreement in terms of displacement distribution and eigenmode frequencies. The preliminary coupled results indicate that due to acoustic coupling, the dynamics of one of the more flexible inhibitors shift from its first modal frequency to the first acoustic frequency of the solid rocket motor. This insight could have profound implications for SRM and flexible inhibitor designs for current and future launch vehicles including SLS.

Yang, H. Q.↗

Mars 2020 Entry, Descent, and Landing System Software Implementation

On February 18th, 2021, the Mars 2020 project's Perseverance Rover successfully touched down on the Martian surface after nearly eight years of development. The Mars 2020 Entry, Descent, and Landing (EDL) System largely leveraged heritage from the Mars Science Laboratory (MSL) EDL System while employing targeted technological advancements. The landing process is autonomously directed by a software behavior implemented in the rover's primary flight computer called the EDL Timeline that assumes control of the vehicle six days before atmospheric entry. This paper first walks through the basics of the EDL Timeline mechanics and how the behavior is designed to account for internal system variations and environmental unknowns. It then summarizes the interactions between the EDL timeline and other high-level system behaviors like spacecraft mode transitions and system fault protection, focusing on the complications that arise when passing spacecraft control between executive functions. Although the MSL-inherited EDL System is reliable and capable, targeted updates and a thorough verification and validation program were required for Mars 2020. This paper discusses changes made to close vulnerabilities discovered during both MSL and Mars 2020 development cycles, landing system capability enhancements that were enabling for Mars 2020's mission, and how these updates were integrated with the heritage system. It then describes how both analysis and testing campaigns were utilized to verify and validate all aspects of EDL and system behaviors that run during the six days before landing, as well as the operational workarounds that were needed to address problems found during the development and commissioning process. Finally, this paper imparts lessons learned from Mars 2020 EDL development, implementation, and operations, emphasizing how systems designed to conduct time-critical mission events with low margin of error can be improved in the future.

Stehura, Aaron↗

Information barrier experimental: Toward a trusted and open-source computing platform for nuclear warhead verification

Trusted measurement systems are critical for the verification of future arms-control treaties that involve confirming the authenticity of nuclear warheads on the basis of their radiation signatures. Several research efforts have produced prototype systems, but their designs are typically not published in detail, making it difficult to enable trust in these devices. The Information Barrier Experimental (IBX) is a new prototype built around the Red Pitaya computing platform using passive gamma spectroscopy. It is the first such platform designed to help a broad research community study vulnerabilities and define the required specifications for a common, trusted inspection system. It is low-cost, simple to assemble, and enables comprehensive hardware and software authentication studies. The device follows a digital data acquisition approach, which significantly reduces the number of components between scintillator and spectrum output. Finally, measurements demonstrate that this approach is technically feasible and produces excellent measurement results.

97 MATHEMATICS AND COMPUTING↗

SU-E-T-40: Analysis of Composite MVCT Planning Dosimetry with SBRT of Upper Peripheral Lung Cancer

Purpose: Quantitatively evaluate and compare the final adaptive planning doses of upper peripherally located lung SBRT treated with Tomotherapy using 3rd party software tool. Methods: With tumor located in the upper quadrant of lung, a 3rd party software tool was implemented to evaluate the Tomotherapy composite dosimetry created by adaptive fan beam MVCT images described by RTOG 0915 dose criteria (48 Gy / 4 fractions). The composite doses was then summarized with deformable registration in this package with corresponding target and critical structures. The final dosimetry variation, both for target and critical structures, were evaluated in a tabular format and isodose distribution comparisons. Results: Composite SBRT treatment doses were evaluated with adaptive planning. The PTV and several critical structures were mapped/deformed into the package via DICOM from Tomotherapy after the final composite doses were created. Initial plan versus the final composite plan calculated from verification images were compared. The ITV defined by 4D CT and contoured on MVCT images were correlated in patient repositioning. Final composite dose calculated for PTV coverage has shown 0.1–0.17 cGy coverage (0.2–0.4% of prescription dose) variation. Total lung and cord were both less than 0.17 Gy which represented <0.4% difference. All other critical structure were within statistical significance. The adaptive plans justified/included the breathing and motion during the treatment process. Final 95% isotope line coverage from prescription has been met without issues. Conclusions: With lung tumor location in the upper peripheral area, breathing control was not necessary required during SBRT treatment using Tomotherapy technique. Slow fan beam CT provides definitive ITV information and the adaptive composite plan for all fractions were suitable for final dose delivery. The final composite dose calculated with Tomotherapy adaptive tool indicated that the composite dosimetry justified the target location with SBRT delivery, safe with minimum margin of errors.

60 APPLIED LIFE SCIENCES↗

SU-E-T-644: Evaluation of Angular Dependence Correction for 2D Array Detector Using for Quality Assurance of Volumetric Modulated Arc Therapy

Purpose: To evaluate the angular dependence correction for Matrix Evolution 2D array detector in quality assurance of volumetric modulated arc therapy(VMAT). Methods: Total ten patients comprising of different sites were planned for VMAT and taken for the study. Each plan was exposed on Matrix Evolution 2D array detector with Omnipro IMRT software based on the following three different methods using 6MV photon beams from Elekta Synergy linear accelerator. First method, VMAT plan was delivered on Matrix Evolution detector as it gantry mounted with dedicated holder with build-up of 2.3cm. Second, the VMAT plan was delivered with the static gantry angle on to the table mounted setup. Third, the VMAT plan was delivered with actual gantry angle on Matrix Evolution detector fixed in Multicube phantom with gantry angle sensor and angular dependence correction were applied to quantify the plan quality. For all these methods, the corresponding QA plans were generated in TPS and the dose verification was done for both point and 2D fluence analysis with pass criteria of 3% dose difference and 3mm distance to agreement. Results: The measured point dose variation for the first method was observed as 1.58±0.6% of mean and SD with TPS calculated. For second and third method, the mean and standard deviation(SD) was observed as 1.67±0.7% and 1.85±0.8% respectively. The 2D fluence analysis of measured and TPS calculated has the mean and SD of 97.9±1.1%, 97.88±1.2% and 97.55±1.3% for first, second and third methods respectively. The calculated two-tailed Pvalue for point dose and 2D fluence analysis shows the insignificance with values of 0.9316 and 0.9015 respectively, among the different methods of QA. Conclusion: The qualitative evaluation of angular dependence correction for Matrix Evolution 2D array detector shows its competency in accuracy of quality assurance measurement of composite dose distribution of volumetric modulated arc therapy.

07 ISOTOPE AND RADIATION SOURCES↗

Spacecraft Data Simulator for the test of level zero processing systems

The Microelectronic Systems Branch (MSB) at Goddard Space Flight Center (GSFC) has developed a Spacecraft Data Simulator (SDS) to support the development, test, and verification of prototype and production Level Zero Processing (LZP) systems. Based on a disk array system, the SDS is capable of generating large test data sets up to 5 Gigabytes and outputting serial test data at rates up to 80 Mbps. The SDS supports data formats including NASA Communication (Nascom) blocks, Consultative Committee for Space Data System (CCSDS) Version 1 & 2 frames and packets, and all the Advanced Orbiting Systems (AOS) services. The capability to simulate both sequential and non-sequential time-ordered downlink data streams with errors and gaps is crucial to test LZP systems. This paper describes the system architecture, hardware and software designs, and test data designs. Examples of test data designs are included to illustrate the application of the SDS.

Shi, Jeff↗

Algorithm Optimally Orders Forward-Chaining Inference Rules

People typically develop knowledge bases in a somewhat ad hoc manner by incrementally adding rules with no specific organization. This often results in a very inefficient execution of those rules since they are so often order sensitive. This is relevant to tasks like Deep Space Network in that it allows the knowledge base to be incrementally developed and have it automatically ordered for efficiency. Although data flow analysis was first developed for use in compilers for producing optimal code sequences, its usefulness is now recognized in many software systems including knowledge-based systems. However, this approach for exhaustively computing data-flow information cannot directly be applied to inference systems because of the ubiquitous execution of the rules. An algorithm is presented that efficiently performs a complete producer/consumer analysis for each antecedent and consequence clause in a knowledge base to optimally order the rules to minimize inference cycles. An algorithm was developed that optimally orders a knowledge base composed of forwarding chaining inference rules such that independent inference cycle executions are minimized, thus, resulting in significantly faster execution. This algorithm was integrated into the JPL tool Spacecraft Health Inference Engine (SHINE) for verification and it resulted in a significant reduction in inference cycles for what was previously considered an ordered knowledge base. For a knowledge base that is completely unordered, then the improvement is much greater.

James, Mark↗

Modeling and Simulation Credibility Assessments of Musculoskeletal Computational Models for Simulating Astronaut Injuries Due to a Poor Spacesuit Fit

The musculoskeletal (MS) system of astronauts is subject to physiological changes, potentially leading to injuries due to the exposure to different gravitational environments experienced during spaceflight. These injuries can occur while an astronaut is performing an Extravehicular Activity (EVA) in space, on lunar or planetary surfaces or while wearing a spacesuit during terrestrial training for an EVA. The OpenSim MS modeling software can assess EVA induced MS injury mechanisms such as muscle strains, ligament injuries and joint injuries. One area of concern, since there are only a few different spacesuit sizes with limited adjustability, is the possibility of a poorly fitting spacesuit. This can cause unnatural joint motions and torques resulting in various MS injuries. A credibility assessment of the OpenSim modeling and simulation procedures is performed per NASA-STD-7009A to provide information on the credibility of the model’s use in simulating EVA related injury mechanisms. The credibility assessment evaluated various OpenSim models against the following eight credibility factors: data pedigree, input pedigree, code verification, solution verification, conceptual validation, referent validation, results uncertainty and results robustness (sensitivity). The models evaluated for EVA injuries will require additional credibility factor analysis and upgrades to the model features, such as adding ligaments to a whole-body model, to reliably predict and analyze the EVA injuries expected to occur due to a poor spacesuit fit. The degree of elevation strategy required to increase the credibility assessment scores will depend on the model complexity and the injury mechanism.

Christopher A. Gallo↗

Modeling and Simulation Credibility Assessments of Musculoskeletal Computational Models for Simulating Astronaut Injuries Due to a Poor Spacesuit Fit

The musculoskeletal (MS) system of astronauts is subject to physiological changes, potentially leading to injuries due to the exposure to different gravitational environments experienced during spaceflight. These injuries can occur while an astronaut is performing an Extravehicular Activity (EVA) in space, on lunar or planetary surfaces or while wearing a spacesuit during terrestrial training for an EVA. The OpenSim MS modeling software can assess EVA induced MS injury mechanisms such as muscle strains, ligament injuries and joint injuries. One area of concern, since there are only a few different spacesuit sizes with limited adjustability, is the possibility of a poorly fitting spacesuit. This can cause unnatural joint motions and torques resulting in various MS injuries. A credibility assessment of the OpenSim modeling and simulation procedures is performed per NASA-STD-7009A to provide information on the credibility of the model’s use in simulating EVA related injury mechanisms. The credibility assessment evaluated various OpenSim models against the following eight credibility factors: data pedigree, input pedigree, code verification, solution verification, conceptual validation, referent validation, results uncertainty and results robustness (sensitivity). The models evaluated for EVA injuries will require additional credibility factor analysis and upgrades to the model features, such as adding ligaments to a whole-body model, to reliably predict and analyze the EVA injuries expected to occur due to a poor spacesuit fit. The degree of elevation strategy required to increase the credibility assessment scores will depend on the model complexity and the injury mechanism.

Christopher A Gallo↗

BRAINformat: A Data Standardization Framework for Neuroscience Data

Neuroscience is entering the era of `extreme data` with little experience and few plans for the associated volume, velocity, variety, and veracity challenges. This is a serious impediment for both the sharing of data across labs, as well as the utilization of modern and high-performance computing capabilities to enable data driven discovery. Here, we introduce BRAINformat, a novel file format and model for management and storage of neuroscience data. The BRAINformat library defines application-independent design concepts and modules that together create a general framework for standardization of scientific data. We describe the formal specification of scientific data standards, which facilitates sharing and verification of data and formats. We introduce the concept of Managed Objects, enabling semantic components of data formats to be specified as self-contained units, supporting modular and reusable design of data format components and file storage. The BRAINformat is built off of HDF5, enabling portable, scalable, and self-describing data storage. We introduce the novel concept of Relationship Attributes for modeling and use of semantic relationships between data objects, and discuss the annotation of data using dedicated data annotation modules provided by the BRAINformat library. Based on these concepts we implement dedicated, application-oriented modules and design a data standard for neuroscience data.The BRAINformat software library is open source, easy-to-use, and provides detailed user and developer documentation and is freely available at: https://bitbucket.org/oruebel/brainformat.

59 BASIC BIOLOGICAL SCIENCES↗

Homogenizing Advanced Alloys: Thermodynamic and Kinetic Simulations Followed by Experimental Results

Segregation of solute elements occurs in nearly all metal alloys during solidification. The resultant elemental partitioning can severely degrade as-cast material properties and lead to difficulties during post-processing (e.g., hot shorts and incipient melting). Many cast articles are subjected to a homogenization heat treatment in order to minimize segregation and improve their performance. Traditionally, homogenization heat treatments are based upon past practice or time-consuming trial and error experiments. Through the use of thermodynamic and kinetic modeling software, NETL has designed a systematic method to optimize homogenization heat treatments. Use of the method allows engineers and researchers to homogenize casting chemistries to levels appropriate for a given application. The method also allows for the adjustment of heat treatment schedules to fit limitations on in-house equipment (capability, reliability, etc.) while maintaining clear numeric targets for segregation reduction. In this approach, the Scheil module within Thermo-Calc is used to predict the as-cast segregation present within an alloy, and then diffusion controlled transformations is used to model homogenization kinetics as a function of time and temperature. Examples of computationally designed heat treatments and verification of their effects on segregation and properties of real castings are presented.

36 MATERIALS SCIENCE↗

Modeling the TetraSpar Floating Offshore Wind Turbine Foundation as a Flexible Structure in OrcaFlex and OpenFAST

Floating offshore wind turbine technology has seen an increasing and continuous development in recent years. When designing the floating platforms, both experimental and numerical tools are applied, with the latter often using time-domain solvers based on hydro-load estimation from a Morison approach or a boundary element method. Commercial software packages such as OrcaFlex, or open-source software such as OpenFAST, are often used where the floater is modeled as a rigid six degree-of-freedom body with loads applied at the center of gravity. However, for final structural design, it is necessary to have information on the distribution of loads over the entire body and to know local internal loads in each component. This paper uses the TetraSpar floating offshore wind turbine design as a case study to examine new modeling approaches in OrcaFlex and OpenFAST that provide this information. The study proves the possibility of applying the approach and the extraction of internal loads, while also presenting an initial code-to-code verification between OrcaFlex and OpenFAST. As can be expected, comparing the flexible model to a rigid-body model proves how motion and loads are affected by the flexibility of the structure. OrcaFlex and OpenFAST generally agree, but there are some differences in results due to different modeling approaches. Since no experimental data are available in the study, this paper only forms a baseline for future studies but still proves and describes the possibilities of the approach and codes.

17 WIND ENERGY↗

Remote Sensing of Volcanic Clouds: Sulfur Gases and Plume Top Topography

New absorption line parameters for H2S were published and submitted to the Gestion et Etude des Informations Spectroscopiques Atmospheriques (GEISA) and high resolution transmission molecular absorption (HITRAN) databases. These new absorption line parameters will make it possible to use observations from the future Tropospheric Emission Spectrometer (TES) instrument [Earth Observing System (EOS) Chemistry Mission (CHEM) platform] to make more accurate H2S measurements if it observes an H2S-rich volcanic cloud. H2S is the second most abundant volcanic sulfur gas, and like SO2, it also converts to H2SO4 aerosols and can have a climate impact. A paper on the Moderate-resolution Imaging-Spectroradiometer (MODIS) SO2 alert is being revised. New aspects in the revision include verification of the SO2 alert during the EOS mission; factors affecting SO2 detection at thermal infrared, ultraviolet, and microwave wavelengths; radiative transfer tests; more description of satellite instruments; and thermal surface alert installed for MODIS. Her research involves the use of remote sensing to generate maps of plume top altitude. This parameter is important for models of volcanic eruption, aircraft hazards, and climate impact. The topographic shape of the top surface of a volcanic plume can provide information necessary to understand the physics controlling the injection and dispersal of a volcanic plume in the atmosphere. Glaze et al. describe the application of a photoclinometric technique to volcanic plumes. The software algorithm has been improved to account for more general plume and illumination geometries and for easily extracting position information directly from Advanced Very High-Resolution Radiometer (AVHRR) level 1B data. Testing of the algorithm has focused on acquiring AVHRR data for a variety of volcanic plumes in an effort to identify problems with the software as well as model sensitivities. The plumes chosen were erupted from volcanoes at a variety of latitudes, at different times of day, and in different seasons. Another important issue that is being investigated is the importance of plume opacity. A diagram illustrates the method for deriving phi, the angle a wind-blown plume makes with the horizontal, in the direction perpendicular to the remote sensing scan. A figure shows a sample output of the algorithm, a wire mesh map of plume top topography. Additional information is contained in the original.

Crisp, Joy A.↗

Fission Meter Information Barrier Attribute Measurement System: FY2018 Office of Nuclear Verification FNI/UKC Task 2 Documentation Package

The ORTEC Fission Meter is a neutron multiplicity detector developed by Oak Ridge, TN based Advanced Measurement Technology (AMETEK), ORTEC Division. Data analysis techniques developed for neutron multiplicity detectors allows determination of mass and multiplication of unknown objects of special nuclear material (SNM). This can be done based on the physics of fission neutrons with little or no a priori information about the object. The articulating panel design and “5-Mode Counter” neutron multiplicity data-acquisition hardware were licensed to ORTEC by Lawrence Livermore National Laboratory in 2005 based on a 2004 prototype. The “5-Mode Counter” development started in 2000 in order to produce a compact neutron multiplicity file containing the full neutron count timing distribution. Development of this hardware along with the prototype detector design continued through 2004. Photographs of the Fission Meter are shown in Figure 1. In 2011, the Lawrence Livermore National Laboratory developed a software-based information barrier (IB) for the Fission Meter to control transmission of some for potential use in treaty applications. This IB was extended over the next several years to include improvements to the algorithms, more automated processing, and list mode data acquisition and processing. This report provides design and operational documentation for the Fission Meter and the Information Barrier additions.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

Geomagnetically Induced Current Field Test on Large Grid-Connected Power Transformers: Analysis, Model Development, and Simulations

Geomagnetic-induced current (GIC) flow in power grids can cause undesirable effects such as transformer overheating, harmonics, higher reactive power demand, etc. Many simulation models have been developed to study these effects, but real-world verification on modern transformer designs is rare. Here, this paper presents the first long-duration GIC field test in the U.S. performed on high-voltage, grid-connected transformers featuring winding clamps and tie rods instead of conventional tie bars. Field measurements were taken to evaluate GIC effects. These measurements also aided in developing and validating thermal and electromagnetic transient (EMT) models of the transformers. During the test, significant current and voltage distortions were observed along with considerable transformer reactive power losses. Analysis of the field measurements showed that the transformers’ hottest spot was at the inner windings, and their k-factors were close to factory test and software default values. Thermal simulations indicated that the transformers would not violate their thermal limits even for a GIC waveform that peaks at about 200 A/phase. EMT simulations revealed that increased transformer loading may reduce GIC-induced reactive power demand and harmonics in certain scenarios. The study also highlighted potential inaccuracies in using the k-factor method to calculate transformer reactive power losses.

EMTDC↗

Development and Demonstration of an Ada Test Generation System

In this project we have built a prototype system that performs Feasible Path Analysis on Ada programs: given a description of a set of control flow paths through a procedure, and a predicate at a program point feasible path analysis determines if there is input data which causes execution to flow down some path in the collection reaching the point so that tile predicate is true. Feasible path analysis can be applied to program testing, program slicing, array bounds checking, and other forms of anomaly checking. FPA is central to most applications of program analysis. But, because this problem is formally unsolvable, syntactic-based approximations are used in its place. For example, in dead-code analysis the problem is to determine if there are any input values which cause execution to reach a specified program point. Instead an approximation to this problem is computed: determine whether there is a control flow path from the start of the program to the point. This syntactic approximation is efficiently computable and conservative: if there is no such path the program point is clearly unreachable, but if there is such a path, the analysis is inconclusive, and the code is assumed to be live. Such conservative analysis too often yields unsatisfactory results because the approximation is too weak. As another example, consider data flow analysis. A du-pair is a pair of program points such that the first point is a definition of a variable and the second point a use and for which there exists a definition-free path from the definition to the use. The sharper, semantic definition of a du-pair requires that there be a feasible definition-free path from the definition to the use. A compiler using du-pairs for detecting dead variables may miss optimizations by not considering feasibility. Similarly, a program analyzer computing program slices to merge parallel versions may report conflicts where none exist. In the context of software testing, feasibility analysis plays an important role in identifying testing requirements which are infeasible. This is especially true for data flow testing and modified condition/decision coverage. Our system uses in an essential way symbolic analysis and theorem proving technology, and we believe this work represents one of the few successful uses of a theorem prover working in a completely automatic fashion to solve a problem of practical interest. We believe this work anticipates an important trend away from purely syntactic-based methods for program analysis to semantic methods based on symbolic processing and inference technology. Other results demonstrating the practical use of automatic inference is being reported in hardware verification, although there are significant differences between the hardware work and ours. However, what is common and important is that general purpose theorem provers are being integrated with more special-purpose decision procedures to solve problems in analysis and verification. We are pursuina commercial opportunities for this work, and will use and extend the work in other projects we are engaged in. Ultimately we would like to rework the system to analyze C, C++, or Java as a key step toward commercialization.

Source record↗

The Unparalleled Systems Engineering of MSL's Backup Entry, Descent, and Landing System: Second Chance

Second Chance (SECC) was a bare bones version of Mars Science Laboratory's (MSL) Entry Descent & Landing (EDL) flight software that ran on Curiosity's backup computer, which could have taken over swiftly in the event of a reset of Curiosity's prime computer, in order to land her safely on Mars. Without SECC, a reset of Curiosity's prime computer would have lead to catastrophic mission failure. Even though a reset of the prime computer never occurred, SECC had the important responsibility as EDL's guardian angel, and this responsibility would not have seen such success without unparalleled systems engineering. This paper will focus on the systems engineering behind SECC: Covering a brief overview of SECC's design, the intense schedule to use SECC as a backup system, the verification and validation of the system's "Do No Harm" mandate, the system's overall functional performance, and finally, its use on the fateful day of August 5th, 2012.

fault protection↗