SEARCH · Engineering Papers

Results for “Correctness proofs”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

153 records · Page 9

All sources NASA NTRS DOE OSTI

NASA NTRS2017

Evaluating Process Effectiveness to Reduce Risk

It is well documented that government agencies do not have the same incentive as the private sector to focus on process effectiveness and continual improvement of those processes. It is also well documented whenever government agencies fail to deliver efficient, effective, consistent, and fair services to the citizens. In spite of the various "reinventing government" and "effectiveness initiatives" of the past decades, and in spite of the efforts on the part of many agencies to improve, government in general still lags behind industry in creating a culture of effective processes and systems. While the tragic events that unfolded recently in Flint, Michigan, teach us that running government "like a business" does not always take the needs of the citizenry into account, there are many lessons and techniques from the private sector that government agencies can use to improve. The incentive to improve, while mandated by various administrations1, needs to come from within the workforce, in order to effectively take root. The best, most effective incentive is to reduce, control or eliminate risk. Government agencies face some of the same risks as the private sector, while some are unique. While ISO 310002 has been around since 2009, risk has taken on increased visibility within the private sector with the advent of the emphasis on risk-based thinking in ISO 9001:20153. The relationship between risk-based thinking and effective processes is simple and direct. Those processes that are well thought out and standardized (i.e. Plan-Do-Check-Act), will have taken into account the applicable policy, statutory, regulatory, safety, quality and technical parameters, which may not occur to someone performing the process with minimal experience or training; and thus protect the employees, the public and the agency from statutory and regulatory violations; delay in providing services; non-delivery of services; harm to public or employee safety and health; cost overruns; breaches in security; loss of confidence in government; failure of publicly funded projects; damage to the environment; ethics violations, and the list goes on; with local, national and even international consequences. The Plan-Do-Check-Act process, also known as the "process approach" can be used at any time to establish and standardize a process, and it can also be used to check periodically for "process creep" (i.e., informal, unauthorized changes that have occurred over time), any necessary updates and improvements. While ISO 9001 compliance is not mandated for all government agencies, if interpreted correctly, it can be useful in establishing a framework and implementing effective management systems and processes.4 Another method that can be used to evaluate effectiveness is the scorecard definitions in Mallory's Process Management Standard5 as a basis for evaluating work on the process level on effective, and continuously improved and improving processes. With processes on the lower end of the scale, agencies are vulnerable to a great many risks, with employees and managers making up many of the rules as they go, leading to the above listed negative results. Without clear guidance for nominal operations, off-nominal situations can, and do, increase the likelihood of chaos. In an increasingly technical environment, with inter-agency communication and collaboration becoming the norm, agencies need to come to grips with the fact that processes can become rapidly outdated, and that the technical community should take on an increased role in the maturation of the agency's processes. Industry has long known that effective processes are also efficient, and process improvement methods such as Kaizen, Lean, Six Sigma, 5S, and mistake proofing lead to increased productivity, improved quality, and decreased cost. Again, government agencies have different concerns, but inefficiencies and mistakes can have dire and wide reaching consequences for the public that they serve. While no one goes to work planning to cause harm, it is up to agencies to establish upper level systems, which make establishment and compliance with processes possible. Again, Mallory provides us with a Systems Management Standard6, similar to the Process Management Standard, with a scale of 0-5 for systems effectiveness and maturity. Deming determined that "eighty-five percent of the reasons for failure are deficiencies in the systems and process rather than the employee. The role of management is to change the process rather than badgering individual employees to do better." 7 It is not just the working level employees who need effective processes, but the mid-and upper level managers as well. A disciplined management culture sets the tone for the employees, aids both routine and off-nominal decision-making, and incorporates risk -based thinking into the systems and processes as a matter of normal activity. Figure 1, illustrates the relationship between ineffective and effective processes and risk, through the use of the "stoplight" colors that are commonly used to show serious situations (red), situations which may be improving or deteriorating depending on trends (yellow), and situations that are under control and continuously improved (green).

Shepherd, Christena C.↗

NASA NTRS2002

High Resolution X-ray Imaging

Cash, Webster↗

NASA NTRS2002

High Resolution X-ray Imaging

NAG5-5020 covered a period of 7.5 years during which a great deal of progress was made in x-ray optical techniques under this grant. We survived peer review numerous times during the effort to keep the grant going. In 1994, when the grant started we were actively pursuing the application of spherical mirrors to improving x-ray telescopes. We had found that x-ray detectors were becoming rapidly more sophisticated and affordable, but that x-ray telescopes were only being improved through the intense application of money within the AXAF program. Clearly new techniques for the future were needed. We were successful in developing and testing at the HELSTF facility in New Mexico a four reflection coma-corrected telescope made from spheres. We were able to demonstrate 0.3 arcsecond resolution, almost to the diffraction limit of the system. The community as a whole was, at that time, not particularly interested in looking past AXAF (Chandra) and the effort needed to evolve. Since we had reached the diffraction limit using non-Wolter optics we then decided to see if we could build an x-ray interferometer in the laboratory. In the lab the potential for improved resolution was substantial. If synthetic aperture telescopes could be built in space, then orders of magnitude improvement would become feasible. In 1998 NASA, under the direction of Dr Nick White of Goddard, started a study to assess the potential and feasibility of x-ray interferometry in space. My work became of central interest to the committee because it indicated that such was possible. In early 1999 we had the breakthrough that allowed us build a practical interferometer. By using flats and hooking up with the Marshall Space Flight Center facilities we were able to demonstrate fringes at 1.25keV on a one millimeter baseline. This actual laboratory demonstration provided the solid proof of concept that NASA needed. As the year progressed the future of x-ray astronomy jelled around the Maxim program. Maxim is a set of two major x-ray astronomy missions based on the concepts I developed and demonstrated under this SR&T grant. The first Maxim is to image the sky at 100 micro-arcsecond resolution. That is one thousand times higher resolution than Hubble. The full Maxim has the ultimate goal of imaging the event horizon of a black hole in an active galactic nucleus (ALAN). This will require 0.1 micro-arcsecond resolution - one million times higher than Hubble! Nonetheless, using the techniques developed under this grant, it has become possible. Maxim Pathfinder is now in the NASA planning for a new start in approximately 20 10. The full Maxim is carried as a vision mission for the post 2015 timeframe. Finally, this grant is the evolved version of the SR&T grant we carried during the 1980s and up to 1994. At that point in time this grant was also working on x-ray optics, but concentrating on x-ray spectroscopy. The techniques developed by 1990 were not chosen for use on Chandra or XMM-Newton because they were too new. During the last year, however, the Constellation-X mission recognized the need for better spectroscopy techniques and tapped our expertise. We were able to support the initial work on Con-X through this program. It now appears that the off-plane mount will be used in Con-X, increasing performance and decreasing cost and risk.

Cash, Webster↗

NASA NTRS2021

Microstructural Observations on Advanced Multilayer Protective Coatings for Nuclear Thermal Propulsion

The present research discusses the microstructures of a new multilayered coating concept proposed to solve the “midrange corrosion” problem observed in NbC and ZrC-coated graphite (Gr) nuclear fuels during the NERVA/Rover programs. The concept envisions designing a compliant multilayered coatings architecture to accommodate the thermal expansion mismatch strains between the ZrC outer coating and the Gr/(U,Zr)C fuel matrix along with using a diffusion barrier to minimize carbon and hydrogen diffusion, respectively. Multilayered coatings were deposited on Gr substrates by chemical vapor deposition (CVD). Graphite disks, as well as the inner channels of a 19-hole hexagonal rod 152.4 mm long, were coated by CVD in proof-of concept process demonstration studies. Coated disk specimens were thermally-cycled between ambient and 1900 K for as long as 20 cycles with a 1h hold time at the temperature using both stepped and non-interrupted thermal cycling methods. Detailed cross-sectional microstructural analyses were conducted on the thermally-cycled coated disks. These results showed that the coatings were intact after 20 thermal cycles at 1900 K although the bonding of the overlay Mo coating appeared to be influenced by the oxygen content in the layer. Seven transverse sections were cut along the length from the coated hexagonal rod for microstructural studies. All the nineteen channels were observed to have been coated in all the sections. This paper reports the results of detailed microstructural analyses, compositional line scans and x-ray dot maps conducted on three coated channels from a mid-section of the rod. The measured values of carbon (C) were observed to be exceptionally high in all the specimens, which were attributed to hydrocarbon contamination of the specimen surfaces. It was observed that the oxygen (O) levels were high in all the coating layers even after approximately correcting for the observed high values of C. The source of O contamination of the CVD reactor system was attributed to either the presence of oxychloride impurities in the precursor salts or a pin hole leak in the coating system. It is concluded that high values of O result in poor bonding of the Mo overlay to the ZrC layer. These trials have established that it is possible to deposit multilayered coatings by CVD in 19-hole hexagonal rods 152.4 mm long similar to the NERVA fuel rod design although the quality of the coatings and the uniformity of their thicknesses require further improvement.

Nuclear thermal propulsion, multilayer coatings, m↗

NASA NTRS2006

Microwave Oscillators Based on Nonlinear WGM Resonators

Optical oscillators that exploit resonantly enhanced four-wave mixing in nonlinear whispering-gallery-mode (WGM) resonators are under investigation for potential utility as low-power, ultra-miniature sources of stable, spectrally pure microwave signals. There are numerous potential uses for such oscillators in radar systems, communication systems, and scientific instrumentation. The resonator in an oscillator of this type is made of a crystalline material that exhibits cubic Kerr nonlinearity, which supports the four-photon parametric process also known as four-wave mixing. The oscillator can be characterized as all-optical in the sense that the entire process of generation of the microwave signal takes place within the WGM resonator. The resonantly enhanced four-wave mixing yields coherent, phase-modulated optical signals at frequencies governed by the resonator structure. The frequency of the phase-modulation signal, which is in the microwave range, equals the difference between the frequencies of the optical signals; hence, this frequency is also governed by the resonator structure. Hence, further, the microwave signal is stable and can be used as a reference signal. The figure schematically depicts the apparatus used in a proof-of-principle experiment. Linearly polarized pump light was generated by an yttrium aluminum garnet laser at a wavelength of 1.32 microns. By use of a 90:10 fiber-optic splitter and optical fibers, some of the laser light was sent into a delay line and some was transmitted to one face of glass coupling prism, that, in turn, coupled the laser light into a crystalline CaF2 WGM disk resonator that had a resonance quality factor (Q) of 6x10(exp 9). The output light of the resonator was collected via another face of the coupling prism and a single-mode optical fiber, which transmitted the light to a 50:50 fiber-optic splitter. One output of this splitter was sent to a slow photodiode to obtain a DC signal for locking the laser to a particular resonator mode. The other output of this splitter was combined with the delayed laser signal in another 50:50 fiber-optic splitter used as a combiner. The output.of the combiner was fed to a fast photodiode that demodulated light and generated microwave signal. In this optical configuration, the resonator was incorporated into one arm of a Mach-Zehnder interferometer, which was necessary for the following reasons: It was found that when the output of the resonator was sent directly to a fast photodiode, the output of the photodiode did not include a measurable microwave signal. However, when the resonator was placed in an arm of the interferometer and the delay in the other arm was set at the correct value, the microwave signal appeared. Such behavior is distinctly characteristic of phase-modulated light. The phase-modulation signal had a frequency of about 8 GHz, corresponding to the free spectral range of the resonator. The spectral width of this microwave signal was less than 200 Hz. The threshold pump power for generating the microwave signal was about 1 mW. It would be possible to reduce the threshold power by several orders of magnitude if resonators could be made from crystalline materials in dimensions comparable to those of micro-resonators heretofore made from fused silica.

Maleki, Lute↗

NASA NTRS1992

Micro Electric Propulsion Feasibility

Miniature, 50 kg class, strategic satellites intended for extended deployment in space require an on-board propulsion capability to perform needed attitude control adjustments and drag compensation maneuvers. Even on such very small spacecraft, these orbit maintenance functions can be significant and result in a substantial propellant mass requirement. Development of advanced propulsion technology could reduce this propellant mass significantly, and thereby maximize the payload capability of these spacecraft. In addition, spacecraft maneuverability could be enhanced and/or multi-year mission lifetimes realized. These benefits cut spacecraft replacement costs, and reduce services needed to maintain the launch vehicles. For SDIO brilliant pebble spacecraft, a miniaturized hydrazine propulsion system provides both boost and divert thrust control. This type of propulsion system is highly integrated and is capable of delivering large thrust levels for short time periods. However, orbit maintenance functions such as drag make-up require only very small velocity corrections. Using the boost and/or divert thrusters for these small corrections exposes this highly integrated propulsion system to continuous on/off cycling and thereby increases the risk of system failure. Furthermore, since drag compensation velocity corrections would be orders of magnitude less than these thrusters were designed to deliver, their effective specific impulse would be expected to be lower when operated at very short pulse lengths. The net result of these effects would be a significant depletion of the on-board hydrazine propellant supply throughout the mission, and a reduced propulsion system reliability, both of which would degrade the interceptors usefulness. In addition to SDIO brilliant pebble spacecraft, comparably small spacecraft can be anticipated for other future strategic defense applications such as surveillance and communication. For such spacecraft, high capability and reliability, minimal detectability and low cost are requirements. All these miniature spacecraft share a common characteristic: because of their on-board electronic equipment they have, by design, solar order 50-100 W. In a relative sense, such spacecraft are power rich when compared to other larger spacecraft. This power rich situation is offset by very tight mass budgets, which make reductions in propellant mass requirements a key issue in meeting overall spacecraft minimum mass goals. In principle, power rich and propellant poor brilliant pebbles class spacecraft can benefit from using high specific impulse electric propulsion to reduce chemical propellant mass requirements. However, at power levels of order 50 W, arcjets cannot be made to function, ion thrusters are too complex and heavy and resistojets have too low a specific impulse. Recognizing these capability limitations in existing electric propulsion technology, the SDIO/IST sponsored the Phase I SBIR Micro Electric Propulsion (MEP) thruster study described in this report. The objective of this study was to examine the feasibility of developing a very simple, low mass and small volume, electric thruster for operation on hydrazine at less than 100 W of input power. The feasibility of developing such a MEP thruster was successfully demonstrated by EPL by the discovery of a novel plasma acceleration process. The sections in this report summarize the approach, test results and major accomplishments of this proof-of-concept program.

Aston, Graeme↗

NASA NTRS2020

Evaluation of Low Cost, User-Centered Alerting Devices for the Mitigation of Flight Crew Spatial Disorientation

The National Aeronautics and Space Administration (NASA) is conducting research into technologies which have the potential to reduce flight crew Spatial Disorientation (SD). While flight deck technology has advanced rapidly over the past fifty (50) years, the reported occurrences of flight crew SD have not decreased. The Cost-Effective Devices for Alerting Research (CEDAR) effort has focused on the identification and development of low cost, user-centered alerting solutions for the purpose of mitigating the occurrence of flight crew SD. This effort seeks to evaluate both existing technologies as well as new and emerging technologies which have a viable path to implementation in commercial aviation within the next five (5) years. This research is intended to develop a proof-of-concept for real-time SD mitigation which could eventually be utilized to improve safety in future air transport operations. NASA has partnered with the United States Naval Aeromedical Research Unit in Dayton, OH (NAMRU-D) to conduct flight crew SD research utilizing their Disorientation Research Device (DRD), dubbed “The Kraken”. This high-tech simulator features never-before-seen capabilities for side-by-side commercial aviation flight crew SD research, and is capable of re-creating the forces necessary to induce SD illusions in a safe and repeatable manner. Prototype SD mitigation solutions were incorporated into this simulator for scenario-based testing and evaluation using airline pilots within a contextually representative operational environment. SD mitigation technology prototypes designed to provide haptic feedback for both alerting and guidance, as well as innovative visual and aural alerting displays were evaluated. In December 2014, as a result of analyzing eighteen (18) loss-of-control events, the Commercial Aviation Safety Team (CAST) recommended research into flight deck technologies that have potential to mitigate the problems and contributing factors that lead to flight crew loss of airplane state awareness (ASA) and conditions likely to produce SD. The aviation community (government, industry and academia) have been charged with conducting research into cost-effective, user-centered flight deck alerting systems to alert flight crews; especially for the two conditions that produced SD (sub-threshold rolls and the somatogravic illusion). Somatogravic illusions are defined as illusions in which “there is a false perception of attitude on exposure to a force vector that differs in direction and/or magnitude from the normal gravitational force”. The sub-threshold roll illusion (aka the “leans” illusion) is a false sensation of roll attitude. A prolonged roll of less than two degrees becomes physiologically imperceptible to the pilot, and can lead to an incorrect perception of aircraft orientation. The sub-threshold roll illusion forms the entry point for the “graveyard spiral”, a maneuver in which the pilot’s corrective action (based on their false perception of aircraft orientation) causes the aircraft to spiral down into the ground. In both of these SD illusions, it is when the pilot attempts to correct the aircraft’s attitude (based on a false perception of its state) that problems arise, sometimes with lethal consequences.

Ronald J Daiker↗

NASA NTRS2004

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗

NASA NTRSDate not supplied

Meteorite Sample Section Repair at NASA Johnson Space Center

Introduction: Meteorite thin and thick sections are routinely shipped from NASA Johnson Space Center to fulfill sample allocation requests from principle investigators around the world. Sections are also re-turned to JSC when researchers are finished studying them since, in most cases, they can be reused for other studies. The sections are very fragile unfortunately, and sometimes return to us needing repairs. The fol-lowing should give you an idea of how we repair sections here in the very lab where they were created. NOTE: Please do not attempt to repair ANSMET meteorite sections that are in your possession. We will perform the repairs for you at NASA JSC if you send the section back to us. Section Delamination: The majority of the meteorite sections that we produce here are secured to the glass slide using a high quality, two-part epoxy. Occasionally, we are asked to use superglue if the researcher wishes to dismount the section from the slide. Both epoxy and superglue are excellent adhesives, but they both tend to embrittle with time which results in delamination from the slide. Exposure to vacuum can also degrade the adhesion between the sample section and the glass slide. Repeated handling of the slide edges can accelerate delamination and, as a preventive measure, the outer 1-2 mm of epoxy is trimmed from newly created sections at JSC. If conductive tapes (copper, carbon, etc.) are used on the section during analysis, great care must be taken in removing the tape so that the epoxy is not pulled up with it. If in doubt, the tape can be left on the section when it is returned to JSC. Before we perform any repairs to sample sections, carbon, gold, or other coatings are removed. We accomplish this using a slurry of 0.05 micron alumina and 190 proof ethyl alcohol applied to a felt polishing pad fitted to a rotating lap wheel. Coatings are re-moved in this manner from all sections that are re-turned to JSC. The extent of the delamination determines how we proceed with the section repair. If the meteorite sample area of the section is not disturbed, then we carefully remove the delaminated epoxy. This is done using a binocular microscope with a 6X zoom, cut-proof gloves, and a very sharp, single edged razor blade. We cut the delaminated epoxy with the blade angled away from the sample area and using very light pressure. The trimmed section is then cleaned in an ultrasonic bath of 200 proof ethyl alcohol for no more than 10 seconds and carefully dried using a lint-free clean room wipe. The section is then placed into a lab oven at 110o F in preparation for epoxy. We mix the resin and hardener components of the low viscosity epoxy and very small amounts are applied to the cut edges of the section using a needle probe and the binocular microscope. Warming the epoxy helps secure the existing section by filling any voids between the glass slide and the section. After the new epoxy cures, we give the section a light polish on a lap wheel fitted with cotton polishing paper that is charged with 1 micron diamond paste. If the section has delaminated to the point of sample area being lifted from the glass, then it may be irreparable. We employ the above technique along with clamping the section in a Teflon pad arrangement in order to flatten the sample while the epoxy cures. Otherwise, the sample will tend to curl. This works to some degree, but once the sample area curls, it seldom re-turns to the original flatness without cracking or bending. Canada Balsam and Crystalbond: We repair damaged sections that had originally been prepared using Canada Balsam or Crystalbond adhesives through the gradual application of heat. We take great care with these samples since these bonding materials tend to get brittle with age. The section is heated in gradual steps (40-50o F per hour) to the melting point of the adhesive. We repair the sample while the adhesive is fluid and then the section is cooled in the same gradual manner in which it was heated. Slide Cracks and Breaks: Accidents happen. Especially with something as small and fragile as a thin/thick section. We all know someone who has driven a microscope objective into a section. As bad as the damage may look, the section can be repaired in most instances. NOTE: Please do not try to tape or glue section pieces back together prior to returning the dam-aged section. This practice usually renders the section irreparable. If the glass slide is cracked but the section is still in one piece, we repair it by infilling the crack with the low viscosity epoxy mentioned earlier. If the slide is in pieces, we can reassemble it with epoxy on a new backer slide. This is a tricky task as the pieces need to be in the correct plane with respect to each other, especially if the sample area is split among several pieces.

Meteorite↗