Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Failing Safely”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 163 records · Page 9

An astrometric facility for planetary detection on the Space Station

The preliminary system definition study for an Astrometric Telescope Facility (ATF) designed for the Space Station IOC is discussed, and a strawman system is designed which is found to meet the requirements for extrasolar planetary systems search and study. The strawman facility design, with a prime-focus 1.25-m aperture telescope and an f ratio of 13, was selected to minimize random and systematic errors. A basic operations approach is identified, including the approach to launch, initial on-orbit assembly and checkout, normal operations, and the response to anomolous conditions or failures. The preliminary system is designed to be fail-safe and single-fault tolerant. Mission analysis indicates that the basic viewing required for planetary detection can be accomplished in about 2/3 of the total viewing time.

Nishioka, Kenji↗

Design, development, and test of Shuttle/Centaur G-prime cryogenic tankage thermal protection systems

The thermal protection systems (TPS) for the Shuttle/Centaur were designed to provide fail-safe thermal protection during prelaunch, launch ascent, and on-orbit operations as well as during potential abort, where the Shuttle and Centaur would return to earth. The TPS selected used a helium-purged polyimide foam beneath three radiation shields for the liquid-hydrogen (LH2) tank and radiation shields only for the liquid-oxygen (LO2) tank. A double-walled vacuum bulkhead separated the two tanks. The LH2 tank had one 1.9 cm-thick layer of foam on the forward bulkhead and two layers on the larger-area sidewall. Full scale tests of the flight vehicle in a simulated Shuttle cargo bay gave total prelaunch heating rates of 29.5 and 12.9 kW for the LH2 and LO2 tanks, respectively. Calorimeter tests on a representative sample of the LH2 tank sidewall TPS indicated that the measured unit heating one would rapidly decrease from the prelaunch rate of about 300 W/sq m to a desired rate less than 4 W/sq m once on-orbit.

Macneil, Peter N.↗

Superfluid Helium Tanker (SFHT) study

Replenishment of superfluid helium (SFHe) offers the potential of extending the on-orbit life of observatories, satellite instruments, sensors and laboratories which operate in the 2 K temperature regime. A reference set of resupply customers was identified as representing realistic helium servicing requirements and interfaces for the first 10 years of superfluid helium tanker (SFHT) operations. These included the Space Infrared Telescope Facility (SIRTF), the Advanced X-ray Astrophysics Facility (AXAF), the Particle Astrophysics Magnet Facility (Astromag), and the Microgravity and Materials Processing Sciences Facility (MMPS)/Critical Point Phenomena Facility (CPPF). A mixed-fleet approach to SFHT utilization was considered. The tanker permits servicing from the Shuttle cargo bay, in situ when attached to the OMV and carried to the user spacecraft, and as a depot at the Space Station. A SFHT Dewar ground servicing concept was developed which uses a dedicated ground cooling heat exchanger to convert all the liquid, after initial fill as normal fluid, to superfluid for launch. This concept permits the tanker to be filled to a near full condition, and then cooled without any loss of fluid. The final load condition can be saturated superfluid with any desired ullage volume, or the tank can be totally filed and pressurized. The SFHT Dewar and helium plumbing system design has sufficient component redundancy to meet fail-operational, fail-safe requirements, and is designed structurally to meet a 50 mission life usage requirement. Technology development recommendations were made for the selected SFHT concept, and a Program Plan and cost estimate prepared for a phase C/D program spanning 72 months from initiation through first launch in 1997.

Eberhardt, Ralph N.↗

Maturity of the Bosch CO2 reduction technology for Space Station application

The Bosch process, which catalytically reduces CO2 with H2 to solid carbon and water, is a promising technique for the reduction of the CO2 removed from the Space Station atmosphere and the subsequent water formation for O2 recovery. A Bosch engineering subsystem prototype CO2 reduction unit was developed to demonstrate the feasibility of the Bosch process as a viable technology for Space Station application. A man-rated prototype unit is then described as part of the ECLSS Technology Demonstrator Program. The goal was to develop a Bosch subsystem that not only meets the performance requirements of two 60 person-day carbon cartridge capacities, but also satisfies inherent man-rated requirements such as offgassing characteristics, fail-safe operation, and ease of maintainability. It is concluded that the technology is at a state of maturity directly applicable to flight status for the NASA Space Station program.

Wagner, Robert C.↗

New advances in non-dispersive IR technology for CO2 detection

This paper discusses new technology developments in CO2 detection using Non-Dispersive Infrared (NDIR) techniques. The method described has successfully been used in various applications and environments. It has exhibited extremely reliable long-term stability without the need of routine calibration. The analysis employs a dual wavelength, differential detection approach with compensating circuitry for component aging and dirt accumulation on optical surfaces. The instrument fails 'safe' and provides the operator with a 'fault' alarm in the event of a system failure. The NDIR analyzer described has been adapted to NASA Space Station requirements.

Small, John W.↗

Space shuttle Production Verification Motor 1 (PV-1) static fire

All inspection and instrumentation data indicate that the PV-1 static test firing conducted 18 Aug. 1988 was successful. With the exception of the intentionally flawed joints and static test modifications, PV-1 was flight configuration. Fail-safe flaws guaranteeing pressure to test the sealing capability of primary O-rings were included in the aft field joint, case-to-nozzle joint, and nozzle internal Joint 5. The test was conducted at ambient conditions, with the exception of the field joints and case/nozzle joints which were maintained at a minimum of 75 F. Ballistics performance values were within specification requirements. The PV-1 motor exhibited chamber pressure oscillations similar to previously tested Space Shuttle redesigned solid rocket motors, particularly QM-7. The first longitudinal mode oscillations experienced by PV-1 were the strongest ever measured in a Space Shuttle motor. Investigation into this observation is being conducted. Joint insulation performed as designed with no evidence of gas flow within unflawed forward field joints. The intentionally flawed center and aft case field joint insulation performance was excellent. There was no evidence of hot gas past the center field joint capture feature O-ring, the case-to-nozzle joint primary O-ring, or the aft field joint primary O-ring. O-ring seals and barriers with assured pressure at the flaws showed erosion and heat effect, but all sealed against passage of hot gases with the exception of the aft field joint capture feature O-ring. There was no evidence of erosion, heat effect, or blowby on any O-ring seals or barriers at the unflawed joints. Nozzle performance was nominal with typical erosion. Post-test examination revealed that the forward nose ring was of the old high performance motor design configuration with the 150-deg ply angle. All nozzle components remained intact for post-test evaluation. The thrust vector control system operated correctly. The water deluge system, CO2 quench, and other test equipment performed as planned during all required test operations.

Source record↗

Methods used to investigate and resolve the Space Shuttle helium pressure regulator instability

The Space Shuttle main propulsion system (MPS) has seven 750-psia regulators used to purge the Space Shuttle main engines to prevent mixture between oxygen and hydrogen and to pneumatically actuate the propellant valves. Methods used to investigate the instability of the MPS regulators which caused a failure of the 750-psia regulator during a test in 1986 are discussed, with special attention given to the analytical tools and the facilities. As a result of this investigation, a well-understood regulator was designed, with excellent stability over a wide range of inlet pressures from 900 to 4500 psia, flow rates from 1 to 2000 scfm, very fast response, minimal overshoot and undershoot, and durable cycle life. Diagrams of the MPS helium system and of a new -0006 fail-safe improved-stability regulator are presented.

Hurlbert, Eric A.↗

Welding space vacuum technology

The objective was to assist the EH 42 Division in putting together a vacuum system that could attain the desired pressure and be large enough to accommodate the gas-metal arc (GMA) welding fixture apparatus. A major accomplishment was the design and fabrication of the controller/annunciator for the 4' by 8' system. It contains many safety features such as thermocouple set point relays that will only allow inlet and exit gas and vacuum valves to be operated at pre-selected system pressures, and a fail safe mode for power interruptions and operator mistakes. It is felt that significant progress was made in this research effort to weld in a vacuum environment. With continued efforts to increase the pump speeds for vacuum chambers and further studies on weld fixtures and gas inlet pressures, the NASA program will be successful.

Johnson, R. Barry↗

Aging commuter aeroplanes: Fatigue evaluation and control methods

The risks associated with old aeroplanes arise in the main from the difficulty of obtaining support from the manufacturer and other skilled people, and from a general loss of reliability caused by wear and other deterioration. The loss of reliability is caused by two broad classes of problem. There are those problems which are self evident, and hazardous rather than catastrophic. These are the problem areas where characteristically there have been multiple overhauls, repairs, and replacements, and where aging really means the results of repair ineffectiveness that accumulates. The other class of problem is the insidious and potentially catastrophic class. It includes the progressive deterioration of items which are not maintained, and often cannot be maintained because the deterioration cannot be seen. It includes loss of physical properties in adhesives and other organic compounds, corrosion, and the response to repeated loads. This paper deals with a currently unnecessarily troublesome aspect of that response. The present working definition of "commuter aeroplanes" encompasses a wide range of aging types, from the Fairchild F27, through deHavilland Canada Twin Otters to the smaller twin engined Piper and Cessna models. It includes such types as the Lockheed 10, the Beech 18, and the Grumman Mallard. Although we must remain concerned about those types which have been certificated under a design standard or operational rule which embodies the elementary fail-safe concept and which have not been subjected to a subsequent structural audit, this paper is directed, in the first instance, towards types for which fatigue and damage tolerance evaluation was not required as a condition of certification. It will be seen, however, that the principles are robust enough for more general application.

Aging Aircraft↗

Stability test and analysis of the Space Shuttle Primary Reaction Control Subsystem thruster

The results are reported of a test program conducted on the Space Shuttle Primary Reaction Control Subsystem thruster in order to investigate the effects of trapped helium bubbles and saturated propellants on stability, determine if thruster-to-thruster stability variations are significant, and determine stability under STS-representative conditions. It is concluded that the thruster design is highly reliable in flight and that burn-through has not occurred. Significantly unstable thrusters are screened out, and wire wrap is found to protect against chamber burn-throughs and to provide a fail-safe thruster for this situation.

Applewhite, John↗

SSME Automated Engine Calibration System (AECS)

An algorithm is derived for the real-time calibration of the engine fuel flowmeter and the engine mixture ratio during Space Shuttle Main Engine (SSME) ground testing. Because currently used calibration methods are post-test operations, there exists no fail-safe way of predicting at what mixture ratio a planned test will run. It is proposed that the algorithm developed here be used as part of an Automated Engine Calibration System (AECS) which could ensure that nearly all SSME tests are run at the proper mixture ratio. In this way, AECS has the potential of increasing the efficiency of the SSME ground test program. In addition to the derivation of the algorithm, an overview of this calibration system is presented along with the list of test stand facility instrumentation necessary for AECS implementation.

Greene, William D.↗

Composite Tiedown Fastener

Taut fastener formed from flat tape and buckles. Flexible, tiedown composite fastener for joining two or more material panels or other structural components dispensed from roll and cut to desired length. Fastener made partly of polyvinyl chloride or other resilient synthetic material and designed for joining components for which snug all-around fits required. Easily installed and removed by hand without use of tools. Potential application extends to many areas. One use of fastener is to bind pages and covers together to make book. Also utilized to provide energy-absorbing and breakaway structural fasteners for fail-safe vehicles in crashes.

Ng, Gim Shek↗

Magnetostrictive Roller-Drive Stepping Motor

Proposed motor based on magnetostrictive effect provides stepped angular motion with angular increments of order of 100 microradians. Driven to repeat stepping cycle rapidly enough to achieve maximum speed of about 20 rpm, provides torque an order of magnitude greater than electric motors, and brakes itself when power turned off. Magnetostrictive rods in electromagnet coils push against drive plate, causing it to rotate slightly. This slight rotation jams conical rollers between cam surfaces on outer drive ring and split drum, so rollers transmit rotation to drum. Suitable for precise, high-torque, fail-safe-braking, direct drive of robot joint, without bulk and weight of additional brake mechanism and gear train.

Vranish, John M.↗

Concurrent-scene/alternate-pattern analysis for robust video-based docking systems

A typical docking target employs a three-point design of retroreflective tape, one at each endpoint of the center-line, and one on the tip of the central post. Scenes, sensed via laser diode illumination, produce pictures with spots corresponding to desired reflection from the retroreflectors and other reflections. Control corrections for each axis of the vehicle can then be properly applied if the desired spots are accurately tracked. However, initial acquisition of these three spots (detection and identification problem) are non-trivial under a severe noise environment. Signal-to-noise enhancement, accomplished by subtracting the non-illuminated scene from the target scene illuminated by laser diodes, can not eliminate every false spot. Hence, minimization of docking failures due to target mistracking would suggest needed inclusion of added processing features pertaining to target locations. In this paper, we present a concurrent processing scheme for a modified docking target scene which could lead to a perfect docking system. Since the non-illuminated target scene is already available, adding another feature to the three-point design by marking two non-reflective lines, one between the two end-points and one from the tip of the central post to the center-line, would allow this line feature to be picked-up only when capturing the background scene (sensor data without laser illumination). Therefore, instead of performing the image subtraction to generate a picture with a high signal-to-noise ratio, a processed line-image based on the robust line detection technique (Hough transform) can be used to fuse with the actively sensed three-point target image to deduce the true locations of the docking target. This dual-channel confirmation scheme is necessary if a fail-safe system is to be realized from both the sensing and processing point-of-views. Detailed algorithms and preliminary results are presented.

Udomkesmalee, Suraphol↗

SSME Automated Engine Calibrating System (AECS) alternative algorithm

An algorithm is derived for the real-time calibration of the engine mixture ratio during SSME ground testing. Because currently used calibration methods are post-test operations, there exists no fail-safe way of predicting at what mixture ratio a planned test will run. It is proposed that the algorithm developed here be used as part of an AECS which could ensure that nearly all SSME tests are run at the proper mixture ratio. In this way, AECS has the potential of increasing the efficiency of the SSME ground test program. This algorithm is an alternative to that presented in a previous paper. In addition to the derivation of the algorithm, an overview of this calibration system is presented along with a discussion of a possible single coefficient calibration system and the list of test stand facility instrumentation necessary for AECS implementation.

Greene, William D.↗

Tele/Autonomous Robot For Nuclear Facilities

Fail-safe tele/autonomous robotic system makes it unnecessary for human technicians to enter nuclear-fuel-reprocessing facilities and other high-radiation or otherwise hazardous industrial environments. Used to carry out experiments as exchanging equipment modules, turning bolts, cleaning surfaces, and grappling turning objects by use of mixture of autonomous actions and teleoperation with either single arm or two cooperating arms. System capable of fully autonomous operation, teleoperation or shared control.

Backes, Paul G.↗

Reliable VLSI sequential controllers

A VLSI architecture for synchronous sequential controllers is presented that has attractive qualities for producing reliable circuits. In these circuits, one hardware implementation can realize any flow table with a maximum of 2(exp n) internal states and m inputs. Also all design equations are identical. A real time fault detection means is presented along with a strategy for verifying the correctness of the checking hardware. This self check feature can be employed with no increase in hardware. The architecture can be modified to achieve fail safe designs. With no increase in hardware, an adaptable circuit can be realized that allows replacement of faulty transitions with fault free transitions.

Whitaker, S.↗

Deployable and retractable telescoping tubular structure development

A new deployable and retractable telescoping boom capable of high deployed stiffness and strength is described. Deployment and retraction functions are controlled by simple, reliable, and fail-safe latches between the tubular segments. The latch and a BI-STEM (Storable Tubular Extendible Member) actuator work together to eliminate the need for the segments to overlap when deployed. This yields an unusually lightweight boom and compact launch configuration. An aluminum space-flight prototype with three joints displays zero structural deadband, low hysteresis, and high damping. The development approach and difficulties are discussed. Test results provide a joint model for sizing flight booms of any diameter and length.

Thomson, M. W.↗