Results for “safety testing” — Page 88

NASA NTRS2001

Specification and Error Pattern Based Program Monitoring

We briefly present Java PathExplorer (JPAX), a tool developed at NASA Ames for monitoring the execution of Java programs. JPAX can be used not only during program testing to reveal subtle errors, but also can be applied during operation to survey safety critical systems. The tool facilitates automated instrumentation of a program in order to properly observe its execution. The instrumentation can be either at the bytecode level or at the source level when the source code is available. JPaX is an instance of a more general project, called PathExplorer (PAX), which is a basis for experiments rather than a fixed system, capable of monitoring various programming languages and experimenting with other logics and analysis techniques

Havelund, Klaus↗

NASA NTRS2002

NASA Runway Incursion Prevention System (RIPS) Dallas-Fort Worth Demonstration Performance Analysis

NASA's Aviation Safety Program Synthetic Vision System project conducted a Runway Incursion Prevention System (RIPS) flight test at the Dallas-Fort Worth International Airport in October 2000. The RIPS research system includes advanced displays, airport surveillance system, data links, positioning system, and alerting algorithms to provide pilots with enhanced situational awareness, supplemental guidance cues, a real-time display of traffic information, and warnings of runway incursions. This report describes the aircraft and ground based runway incursion alerting systems and traffic positioning systems (Automatic Dependent Surveillance - Broadcast (ADS-B) and Traffic Information Service - Broadcast (TIS-B)). A performance analysis of these systems is also presented.

Cassell, Rick↗

NASA NTRS1997

Invisible Flame Imaging

Stennis Space Center uses more than one million gallons of liquid hydrogen per month in its rocket testing program. Firefighters responding to a hydrogen fire had to give the area "the broom test" to determine the presence and location of a fire. This technique has significant safety and accuracy shortfalls. Stennis then developed technology to visually assess the presence, location and extent of hydrogen fires. SafetyScan, LLC. is now manufacturing FIRESCAPE, the first affordable commercial product for invisible (or ashless) fire imaging based on the original technology, to aid firefighters in seeing the invisible flames from alcohol and hydrogen fires during the day and even through smoke. The hand-held device weighs five pounds, is used like a pair of binoculars and can run for up to two hours before recharging.

Source record↗

NASA NTRS2003

Effects of Impact Damage in Midplane Asymmetric Sandwich Composites

Several structural sandwich composites arc in service on military and commercial aerospace vehicles, however, these components have been limited to secondary structures partly because the impact damage and damage tolerance of these composites have not been extensively characterized. To improve durability, safety, and life cycle performance of PMCs while reducing maintenance costs, combined analysis, and test methods that provide a means of predicting critical engineering properties after impact damage of the structure, must be developed. A key enabling technology here is the establishment of the correlation between the impact test results conducted in the laboratory and the mechanics-based phenomenological solutions. This research was undertaken to investigate the compression and flexural properties following low velocity impact of a nomex/phenolic honeycomb core, fiberglass/epoxy facesheet, midplane asymmetric sandwich composite. One facesheet (thin side) was composed of two plies of the fiberglass/epoxy (0/90), while the other facesheet (thick side) was composed of four plies (0/90/0/90) of fiberglass/epoxy. Due to the differences in facesheet thickness, impact damage was separately induced on the thick side as well as the thin side. The compression and flexural strength properties for each damage arrangement were compared using different levels of impact energy ranging from 0 to 452 Joules. In all cases, higher impact energy resulted in decreased compression and flexural strength. Impact on the thin side showed slightly more retention of compression strength at low impact levels, whereas higher residual compressive strength was observed from impact on the thick side at higher impact levels. Different facesheet thicknesses or midplane asymmetry, played an important role in the flexural strength, however, low velocity impact on the both the thick and thin fiberglass/epoxy facesheet side showed an almost linear loss of flexural strength to saturation.

Meador, Michael↗

NASA NTRS2005

Damage-Tolerant, Affordable Composite Engine Cases Designed and Fabricated

An integrated team of NASA personnel, Government contractors, industry partners, and university staff have developed an innovative new technology for commercial fan cases that will substantially influence the safety and efficiency of future turbine engines. This effective team, under the direction of the NASA Glenn Research Center and with the support of the Federal Aviation Administration, has matured a new class of carbon/polymer composites and demonstrated a 30- to 50-percent improvement in specific containment capacity (blade fragment kinetic energy/containment system weight). As the heaviest engine component, the engine case/containment system greatly affects both the safety and efficiency of aircraft engines. The ballistic impact research team has developed unique test facilities and methods for screening numerous candidate material systems to replace the traditional heavy, metallic engine cases. This research has culminated in the selection of a polymer matrix composite reinforced with triaxially braided carbon fibers and technology demonstration through the fabrication of prototype engine cases for three major commercial engine manufacturing companies.

Hopkins, Dale A.↗

NASA NTRS2005

Materials Examination of the Vertical Stabilizer from American Airlines Flight 587

The first in-flight failure of a primary structural component made from composite material on a commercial airplane led to the crash of American Airlines Flight 587. As part of the National Transportation Safety Board investigation of the accident, the composite materials of the vertical stabilizer were tested, microstructure was analyzed, and fractured composite lugs that attached the vertical stabilizer to the aircraft tail were examined. In this paper the materials testing and analysis is presented, composite fractures are described, and the resulting clues to the failure events are discussed.

Fox, Matthew R.↗

NASA NTRS2008

Reactive, Safe Navigation for Lunar and Planetary Robots

When humans return to the moon, Astronauts will be accompanied by robotic helpers. Enabling robots to safely operate near astronauts on the lunar surface has the potential to significantly improve the efficiency of crew surface operations. Safely operating robots in close proximity to astronauts on the lunar surface requires reactive obstacle avoidance capabilities not available on existing planetary robots. In this paper we present work on safe, reactive navigation using a stereo based high-speed terrain analysis and obstacle avoidance system. Advances in the design of the algorithms allow it to run terrain analysis and obstacle avoidance algorithms at full frame rate (30Hz) on off the shelf hardware. The results of this analysis are fed into a fast, reactive path selection module, enforcing the safety of the chosen actions. The key components of the system are discussed and test results are presented.

Utz, Hans↗

NASA NTRS2010

Distributed Impact Detector System (DIDS) Health Monitoring System Evaluation

Damage due to impacts from micrometeoroids and orbital debris is one of the most significant on-orbit hazards for spacecraft. Impacts to thermal protection systems must be detected and the damage evaluated to determine if repairs are needed to allow safe re-entry. To address this issue for the International Space Station Program, Langley Research Center and Johnson Space Center technologists have been working to develop and implement advanced methods for detecting impacts and resultant leaks. LaRC funded a Small Business Innovative Research contract to Invocon, Inc. to develop special wireless sensor systems that are compact, light weight, and have long battery lifetimes to enable applications to long duration space structures. These sensor systems are known as distributed impact detection systems (DIDS). In an assessment, the NASA Engineering and Safety Center procured two prototype DIDS sensor units to evaluate their capabilities in laboratory testing and field testing in an ISS Node 1 structural test article. This document contains the findings of the assessment.

Prosser, William H.↗

NASA NTRS2009

Testing First-Order Logic Axioms in AutoCert

AutoCert [2] is a formal verification tool for machine generated code in safety critical domains, such as aerospace control code generated from MathWorks Real-Time Workshop. AutoCert uses Automated Theorem Provers (ATPs) [5] based on First-Order Logic (FOL) to formally verify safety and functional correctness properties of the code. These ATPs try to build proofs based on user provided domain-specific axioms, which can be arbitrary First-Order Formulas (FOFs). These axioms are the most crucial part of the trusted base, since proofs can be submitted to a proof checker removing the need to trust the prover and AutoCert itself plays the part of checking the code generator. However, formulating axioms correctly (i.e. precisely as the user had really intended) is non-trivial in practice. The challenge of axiomatization arise from several dimensions. First, the domain knowledge has its own complexity. AutoCert has been used to verify mathematical requirements on navigation software that carries out various geometric coordinate transformations involving matrices and quaternions. Axiomatic theories for such constructs are complex enough that mistakes are not uncommon. Second, adjusting axioms for ATPs can add even more complexity. The axioms frequently need to be modified in order to have them in a form suitable for use with ATPs. Such modifications tend to obscure the axioms further. Thirdly, speculating validity of the axioms from the output of existing ATPs is very hard since theorem provers typically do not give any examples or counterexamples.

Ahn, Ki Yung↗

NASA NTRS2010

Integral Battery Power Limiting Circuit for Intrinsically Safe Applications

A circuit topology has been designed to guarantee the output of intrinsically safe power for the operation of electrical devices in a hazardous environment. This design uses a MOSFET (metal oxide semiconductor field-effect transistor) as a switch to connect and disconnect power to a load. A test current is provided through a separate path to the load for monitoring by a comparator against a preset threshold level. The circuit is configured so that the test current will detect a fault in the load and open the switch before the main current can respond. The main current passes through the switch and then an inductor. When a fault occurs in the load, the current through the inductor cannot change immediately, but the voltage drops immediately to safe levels. The comparator detects this drop and opens the switch before the current in the inductor has a chance to respond. This circuit protects both the current and voltage from exceeding safe levels. Typically, this type of protection is accomplished by a fuse or a circuit breaker, but in order for a fuse or a circuit breaker to blow or trip, the current must exceed the safe levels momentarily, which may be just enough time to ignite anything in a hazardous environment. To prevent this from happening, a fuse is typically current-limited by the addition of the resistor to keep the current within safe levels while the fuse reacts. The use of a resistor is acceptable for non-battery applications where the wasted energy and voltage drop across the resistor can be tolerated. The use of the switch and inductor minimizes the wasted energy. For example, a circuit runs from a 3.6-V battery that must be current-limited to 200 mA. If the circuit normally draws 10 mA, then an 18-ohm resistor would drop 180 mV during normal operation, while a typical switch (0.02 ohm) and inductor (0.97 ohm) would only drop 9.9 mV. From a power standpoint, the current-limiting resistor protection circuit wastes about 18 times more power than the switch and the inductor configuration. In the fault condition, both the resistor and the inductor react immediately. The resistor reacts by allowing more current to flow and dropping the voltage. Initially, the inductor reacts by dropping the voltage, and then by not allowing the current to change. When the comparator detects the drop in voltage, it opens the switch, thus preventing any further current flow. The inductor alone is not sufficient protection, because after the voltage drop has settled, the inductor would then allow the current to change, in this example, the current would be 3.7 A. In the fault condition, the resistor is flowing 200 mA until the fuse blows (anywhere from 1 ms to 100 s), while the switch and inductor combination is flowing about 2 A test current while monitoring for the fault to be corrected. Finally, as an additional safety feature, the circuit can be configured to hold the switch opened until both the load and source are disconnected.

Burns, Bradley M.↗

NASA NTRS2011

Formal Verification Toolkit for Requirements and Early Design Stages

Efficient flight software development from natural language requirements needs an effective way to test designs earlier in the software design cycle. A method to automatically derive logical safety constraints and the design state space from natural language requirements is described. The constraints can then be checked using a logical consistency checker and also be used in a symbolic model checker to verify the early design of the system. This method was used to verify a hybrid control design for the suit ports on NASA Johnson Space Center's Space Exploration Vehicle against safety requirements.

Badger, Julia M.↗

NASA NTRS2015

Development and Capabilities of ISS Flow Boiling and Condensation Experiment

An experimental facility to perform flow boiling and condensation experiments in long duration microgravity environment is being designed for operation on the International Space Station (ISS). This work describes the design of the subsystems of the FBCE including the Fluid subsystem modules, data acquisition, controls, and diagnostics. Subsystems and components are designed within the constraints of the ISS Fluid Integrated Rack in terms of power availability, cooling capability, mass and volume, and most importantly the safety requirements. In this work we present the results of ground-based performance testing of the FBCE subsystem modules and test module which consist of the two condensation modules and the flow boiling module. During this testing, we evaluated the pressure drop profile across different components of the fluid subsystem, heater performance, on-orbit degassing subsystem, heat loss from different modules and components, and performance of the test modules. These results will be used in the refinement of the flight system design and build-up of the FBCE which is manifested for flight in late 2017-early 2018.

microgravity↗

NASA NTRS2018

Metrology and Calibration

The purpose of this NASA Technical Standard is to ensure the accuracy of measurements affecting safety and mission success through the proper selection, calibration, and use of Measuring and Test Equipment (MTE).

Mathews, Kenneth W.↗

NASA NTRS2019

Revision of Paschen's Law Relating to the ESD of Aerospace Vehicle Surfaces

The purpose of this work is to develop a form of Paschen's law that takes into account the flow of gas past electrode surfaces. This work was performed under a NASA Science Innovation Fund (SIF) project at the Kennedy Space Center in collaboration with the University of Central Florida. In 2010 the Electrostatics and Surface Physics Laboratory (ESPL) at the Kennedy Space Center performed an electrostatic safety analysis on the flight termination system (FTS) antenna for the Ares I rocket. Paschen's law, derived by Friedrich Paschen in 1889 to relate sparking voltage to gas pressure and electrode separation, does not take into account the effect of flowing gas between the electrodes. The safety of the FTS housing to triboelectric charging was shown only after extensive laboratory testing. Potential benefits are of a form of Paschen's law that considers gas velocity. This work is applicable to current and planned rockets and aerospace vehicles and could lead to possible relaxation of electrostatic launch criteria. Launch aborts can cost up to about a million US dollars depending on the vehicle. [ElectroStatic Discharge (ESD)]

Paschen↗

NASA NTRSDate not supplied

A Concept of Operations for Power Beaming of Electric Air Vehicles

A concept of operations is presented for power beaming of microwaves to extend battery charge of an electric air vehicle. Critical aspects of airspace operations and power beam charging are addressed. Three classes of electric Vertical Take-Off and Landing vehicle models are considered for recharging. The effects of transmitter frequency, antenna size, and beam width are analyzed. Based on past experiments in the industry, a 2.5 kW power beam is selected. A no-drag rectifying antenna under the belly of the vehicle is selected along with the conversion efficiency, power density, and its size. The combined efficiency of the transmit/receive system as well as the beam containment values are addressed. These parameters are chosen to assess viability and feasibility of the energy augmentation method to establish safety for humans on-board from exposure to the transmitted energy. NASA will test the concept of operations in a laboratory experiment with parameters selected and presented in this paper.

eVTOL vehicles↗

NASA NTRSDate not supplied

A Concept of Operations for Power Beaming of Electric Air Vehicles

A concept of operations is presented for power beaming of microwaves to extend battery charge of an electric air vehicle. Critical aspects of airspace operations and power beam charging are addressed. Three classes of electric Vertical Take-Off and Landing vehicle models are considered for recharging. The effects of transmitter frequency, antenna size, and beam width are analyzed. Based on past experiments in the industry, a 2.5 kW power beam is selected. A no-drag rectifying antenna under the belly of the vehicle is selected along with the conversion efficiency, power density, and its size. The combined efficiency of the transmit/receive system as well as the beam containment values are addressed. These parameters are chosen to assess viability and feasibility of the energy augmentation method to establish safety for humans on-board from exposure to the transmitted energy. NASA will test the concept of operations in a laboratory experiment with parameters selected and presented here.

eVTOL vehicles↗

NASA NTRS2024

ISS External Microorganisms: A Planetary Protection Experiment to Inform Requirements for Crewed Missions to Mars

We have developed, tested, and flown a caddy capable of collecting aseptic samples from external surfaces of the ISS (International Space Station). The sampling caddy is certified for use during US EVA (extra vehicular activity) and was launched to ISS in the summer of 2023. We are scheduled to collect samples from 6 locations outside ISS during an EVA in May of 2024. We will freeze these samples at -80°C on orbit and return them to Earth. We will then extract and sequence any DNA collected during the EVA using next generation sequencing technologies to characterize the community composition and function of each sample. Measuring the type and quantity of microbes present on the exterior of ISS will allow us to address knowledge gap 2B, “Acceptable levels of microbial/organic releases from humans and support systems” described in a 2019 COSPAR report. Collecting data about microbial release from current crewed vehicles will inform requirements for acceptable leak rates for future crewed missions to Mars. The sampling kit consists of eight commercially available, sterile, DNA free, macrofoam swabs ( 23 mm. diameter ) installed in custom aluminum end effectors. Each end effector is housed in and individual aluminum canister. Each canister contains a 0.2 μm Teflon filter to allow the interior volume to accommodate pressure changes without permitting microbial contaminants to enter the sterile interior volume. A handle repurposed from the space shuttle tile repair kit is used to remove the end effector from the sample canister, collect a sample by swabbing a surface and then replace the end effector in its canister. The canisters and end effectors were cleaned and assembled on Earth. Prior to installing the sterile swab the canisters and end effectors were sterilized in an autoclave at 134°C, 215 kPA, for 7 min.. The final assembly occurred in a sterilized class II biosafety cabinet. We will collect six samples from the 1) airlock vestibule, 2) airlock thermal cover, 3) a gap in the micrometeorite shielding near the airlock, 4) a handrail near the airlock, 5) the CDRA (Carbon Dioxide Removal Assembly) vent, and 6) the VES (Vacuum Exhaust System) vent. The remaining two swabs will be reserved as controls. One swab will be exposed during the EVA without touching any surfaces to act as a blank. The final swab will remain sealed until the entire sampling kit is returned to earth. Based on previously published results from the Russian segment, we hypothesize that there will be detectable microbes at some or all of these locations. Ground-based testing of this sampling caddy confirms that the swabs remain sterile as the canisters transition in and out of vacuum. We were able to retrieve, viable bacterial and fungal cells as well as DNA from samples collected from US space suits during vacuum chamber tests lasting as long as seven hours. Based on these results and feedback from the test subjects the sampling caddy was modified to improve ergonomics and meet US EVA safety requirements. Bayonet probes were added to the sides of the sample kit as alternate mounting points. Additional locking features were added to the end effector and the filter stack to prevent inadvertent release during use. The opening mechanism was changed from one where the end effector was rocked laterally to defeat a ball detent to a twist-to-open threaded closure for similar reasons. Demonstrating, this sampling caddy’s effectiveness during a US EVA will allow us to address knowledge gaps identified in COSPAR reports and begin to define planetary protection requirements for life support systems on crewed missions to mars. This kit could also be used to collect contamination control samples during Artemis missions to verify requirements and could be easily modified for robotic sample collection.

Planetary Protection↗

NASA NTRSDate not supplied

ISS External Microorganisms: Collecting Planetary Protection Samples During Extravehicular Activity

We have developed, tested, and flown a caddy capable of collecting aseptic samples from external surfaces of the ISS (International Space Station). The sampling caddy is certified for use during US EVA (extra vehicular activity) and was launched to ISS in the summer of 2023. We are scheduled to collect samples from 6 locations outside ISS during an EVA in May of 2024. We will freeze these samples at -80°C on orbit and return them to Earth. We will then extract and sequence any DNA collected during the EVA using next generation sequencing technologies to characterize the community composition and function of each sample. Measuring the type and quantity of microbes present on the exterior of ISS will allow us to address knowledge gap 2B, “Acceptable levels of microbial/organic releases from humans and support systems” described in a 2019 COSPAR report. Collecting data about microbial release from current crewed vehicles will inform requirements for acceptable leak rates for future crewed missions to Mars. The sampling kit consists of eight commercially available, sterile, DNA free, macrofoam swabs ( 23 mm. diameter ) installed in custom aluminum end effectors. Each end effector is housed in and individual aluminum canister. Each canister contains a 0.2 μm Teflon filter to allow the interior volume to accommodate pressure changes without permitting microbial contaminants to enter the sterile interior volume. A handle repurposed from the space shuttle tile repair kit is used to remove the end effector from the sample canister, collect a sample by swabbing a surface and then replace the end effector in its canister. The canisters and end effectors were cleaned and assembled on Earth. Prior to installing the sterile swab the canisters and end effectors were sterilized in an autoclave at 134°C, 215 kPA, for 7 min.. The final assembly occurred in a sterilized class II biosafety cabinet. We will collect six samples from the 1) airlock vestibule, 2) airlock thermal cover, 3) a gap in the micrometeorite shielding near the airlock, 4) a handrail near the airlock, 5) the CDRA (Carbon Dioxide Removal Assembly) vent, and 6) the VES (Vacuum Exhaust System) vent. The remaining two swabs will be reserved as controls. One swab will be exposed during the EVA without touching any surfaces to act as a blank. The final swab will remain sealed until the entire sampling kit is returned to earth. Based on previously published results from the Russian segment, we hypothesize that there will be detectable microbes at some or all of these locations. Ground-based testing of this sampling caddy confirms that the swabs remain sterile as the canisters transition in and out of vacuum. We were able to retrieve, viable bacterial and fungal cells as well as DNA from samples collected from US space suits during vacuum chamber tests lasting as long as seven hours. Based on these results and feedback from the test subjects the sampling caddy was modified to improve ergonomics and meet US EVA safety requirements. Bayonet probes were added to the sides of the sample kit as alternate mounting points. Additional locking features were added to the end effector and the filter stack to prevent inadvertent release during use. The opening mechanism was changed from one where the end effector was rocked laterally to defeat a ball detent to a twist-to-open threaded closure for similar reasons. Demonstrating, this sampling caddy’s effectiveness during a US EVA will allow us to address knowledge gaps identified in COSPAR reports and begin to define planetary protection requirements for life support systems on crewed missions to mars. This kit could also be used to collect contamination control samples during Artemis missions to verify requirements and could be easily modified for robotic sample collection.

Planetary Protection↗