Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “fault analysis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

1,616 records · Page 90
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Relation Inference among Sensor Time Series in Smart Buildings with Metric Learning

Smart Building Technologies hold promise for better livability for residents and lower energy footprints. Yet, the rollout of these technologies, from demand response controls to fault detection and diagnosis, significantly lags behind and is impeded by the current practice of manual identification of sensing point relationships, e.g., how equipment is connected or which sensors are co-located in the same space. This manual process is still error-prone, albeit costly and laborious.We study relation inference among sensor time series. Our key insight is that, as equipment is connected or sensors co-locate in the same physical environment, they are affected by the same real-world events, e.g., a fan turning on or a person entering the room, thus exhibiting correlated changes in their time series data. To this end, we develop a deep metric learning solution that first converts the primitive sensor time series to the frequency domain, and then optimizes a representation of sensors that encodes their relations. Built upon the learned representation, our solution pinpoints the relationships among sensors via solving a combinatorial optimization problem. Extensive experiments on real-world buildings demonstrate the effectiveness of our solution.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗
NASA NTRS2013

Investigation of a Cross-Correlation Based Optical Strain Measurement Technique for Detecting radial Growth on a Rotating Disk

The Aeronautical Sciences Project under NASA`s Fundamental Aeronautics Program is extremely interested in the development of novel measurement technologies, such as optical surface measurements in the internal parts of a flow path, for in situ health monitoring of gas turbine engines. In situ health monitoring has the potential to detect flaws, i.e. cracks in key components, such as engine turbine disks, before the flaws lead to catastrophic failure. In the present study, a cross-correlation imaging technique is investigated in a proof-of-concept study as a possible optical technique to measure the radial growth and strain field on an already cracked sub-scale turbine engine disk under loaded conditions in the NASA Glenn Research Center`s High Precision Rotordynamics Laboratory. The optical strain measurement technique under investigation offers potential fault detection using an applied high-contrast random speckle pattern and imaging the pattern under unloaded and loaded conditions with a CCD camera. Spinning the cracked disk at high speeds induces an external load, resulting in a radial growth of the disk of approximately 50.0-im in the flawed region and hence, a localized strain field. When imaging the cracked disk under static conditions, the disk will be undistorted; however, during rotation the cracked region will grow radially, thus causing the applied particle pattern to be .shifted`. The resulting particle displacements between the two images will then be measured using the two-dimensional cross-correlation algorithms implemented in standard Particle Image Velocimetry (PIV) software to track the disk growth, which facilitates calculation of the localized strain field. In order to develop and validate this optical strain measurement technique an initial proof-of-concept experiment is carried out in a controlled environment. Using PIV optimization principles and guidelines, three potential speckle patterns, for future use on the rotating disk, are developed and investigated in the controlled experiment. A range of known shifts are induced on the patterns; reference and data images are acquired before and after the induced shift, respectively, and the images are processed using the cross-correlation algorithms in order to determine the particle displacements. The effectiveness of each pattern at resolving the known shift is evaluated and discussed in order to choose the most suitable pattern to be implemented onto a rotating disk in the Rotordynamics Lab. Although testing on the rotating disk has not yet been performed, the driving principles behind the development of the present optical technique are based upon critical aspects of the future experiment, such as the amount of expected radial growth, disk analysis, and experimental design and are therefore addressed in the paper.

Clem, Michelle M.↗
DOE OSTI2025

Preliminary Analysis of Nuclear-Powered Data Center Scenarios

This report provides a comprehensive analysis of the potential for nuclear energy to meet the growing energy demands of data centers (DCs). It evaluates the technical, economic, and socio-environmental implications of coupling Nuclear Power Plants (NPPs) with DCs, providing initial responses to several key research questions: What is the potential increased energy demand from DCs in the U.S., in the short, medium and long term? The U.S. is experiencing a rapid increase in energy demand from DCs, with projections indicating a total increase of 24-74 GWy(e) by 2028. Meeting this demand with nuclear energy would require 27–85 GWe of installed capacity. While this surge is expected to slow in the long term, the DC industry needs reliable, scalable, and clean energy sources. How much nuclear capacity can be deployed to meet DC demand and in which timeframe? Several pathways for increasing nuclear capacity were identified, including uprates, restarts of recently retired reactors, power purchase agreements with existing fleet, and new construction. Approximately 20‒28 GWe of nuclear capacity could be dedicated to DCs by the early 2030s. How much High Assay Low Enriched Uranium (HALEU) would be needed to support some nuclear deployment scenarios for DCs? Meeting the deployment targets announced by Google and Amazon for the Kairos Power Fluoride-Salt-Cooled High-Temperature Reactor or KP-FHR (~500 MWe by 2035) and the Xe-100 (~1 GWe by 2040), respectively, requires ramping up 19.75% enriched HALEU production to ~6 t/yr by 2040. What types of nuclear energy/DC coupling options exist, and what are the different benefits/challenges? Five coupling options were analyzed, ranging from grid-connected configurations to colocated, behind-the-meter setups. Key design considerations include the proximity to high- and/or medium-voltage transmission lines, the desired internal fault tolerance, and the sources of alternative/backup power during outages. Each coupling option offers unique benefits and challenges in terms of reliability, system costs, regulation, timeline, etc. A list of NPP/DC deployment scenarios was developed, considering existing or newly built NPP or DC projects. Colocated DCs with new small modular reactors or large reactors on greenfield and brownfield sites are the focus of this report. What types of reactors, especially what size, may be incentivized by DCs? Reactor sizing optimization revealed that the ideal reactor size and number of units depend on DC demand, coupling configurations defined in this report, and other economic factors. Larger reactors are preferred for high-demand DCs and grid-connected systems, while larger number of smaller reactors are better suited for DC configurations without grid backup. Which sites may be compatible with co-located nuclear-powered DCs? Siting those projects is a complicated evaluation factoring local water resources, grid connection availability and reliability, IT infrastructure, local work force, proximity to population zones, etc. For this effort greenfield and brownfield sites such as retired coal-fired plants were used to evaluate this question. This evaluation is not meant to recommend any particular site but it highlights key siting criteria and demonstrates large-scale site availability. What are the socio-economic impacts of co-located nuclear-powered DCs? Those projects generate substantial economic benefits to the local economy, particularly in urban settings. Hyperscale DCs colocated with nuclear power plants (sized around 1 GW of power) can create nearly 1,700 jobs for annual operations and more than 7,300 jobs among the supply chain and local businesses as a result of increased household spending. Rural projects also provide significant benefits, but at lower magnitudes compared to urban deployments.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
DOE OSTI2026

Unsupervised anomaly detection in MeV ultrafast electron diffraction

MeV ultrafast electron diffraction (MUED) is a pump-probe technique used to study the dynamic structural evolution of materials. An ultrashort laser pulse triggers structural changes, which are then probed by an ultrashort relativistic electron beam. To overcome low signal-to-noise ratios, diffraction patterns are averaged over thousands of shots. However, shot-to-shot instabilities in the electron beam can distort individual patterns, introducing uncertainty. Improving MUED accuracy requires detecting and removing these anomalous patterns from large datasets. In this work, we developed a fully unsupervised methodology for the detection of anomalous diffraction patterns. Using a convolutional autoencoder, we calculate the reconstruction mean squared error of the diffraction patterns. Based on the statistical analysis of this error, we provide the user an estimation of the probability that the pattern is normal, which also allows a posterior visual inspection of the images that are difficult to classify. This method has been trained with only 100 diffraction patterns and tested on 1521 patterns, resulting in a false positive rate between 0.2% and 0.4%, with a training time of 10 s per image and a test time of about 1 s per image. Here, the proposed methodology can also be applied to other diffraction techniques in which large datasets are collected that include faulty images due to instrumental instabilities.

43 PARTICLE ACCELERATORS↗
DOE OSTI2021

Data Analysis of the 2020 Central Idaho Mainshock-Aftershock Sequence

In an effort to inform the Senior Seismic Hazard Analysis Committee for the Idaho National Laboratory, we provide an improved aftershock catalog related to the March 31, 2020, Mw6.5 Stanley, Idaho earthquake from picks related to a temporary network of two real-time and 15 non-telemetered seismometers within the epicentral area. From the permanent and temporary (XP) real-time network, the USGS cataloged 1,946 aftershocks between April 1, 2020 and October 31, 2020. To improve aftershock location and magnitudes, we manually picked arrival times of P and S waves from off-line stations in the XP temporary network, generated a new crustal velocity model, and independently relocated each event using the HypoDD double-difference earthquake algorithm. We created our new velocity model from existing broadband and active source seismic campaign data that were acquired near the epicentral region prior to the 2020 earthquake. We compare arrival time differences, epicentral locations and depths between aftershocks recorded with the two catalogs. We find the addition of local stations provides tighter aftershock clustering that suggests an improved aftershock locations. To detect lower magnitude events, we employed deep learning. Our method solves common problems associated with detecting many events that have a low signal-to-noise ratio. From the machine learning database, we detected more than 74,000 aftershocks. Based on the number of identified earthquakes and Gutenberg-Richter relationships derived from the USGS catalog, we estimate that we have reduced the completion magnitude for the Stanley earthquake sequence to below M1 using this machine learning approach. We located each aftershock with our new velocity model. Our new velocity model and picks suggests aftershocks occurred mostly at shallower depths than assessed in the USGS catalog. These aftershocks align along two linear trends that suggest the activation of two unnamed primary faults.

58 GEOSCIENCES↗
DOE OSTI2022

Provably-Stable Overload Ride-Through Control for Grid-Forming Inverters Using System-Wide Lyapunov Function Analysis

A key challenge associated with a grid-forming (GFM) inverter based resource (IBR) is its behavior during severe grid disturbances: since a GFM inverter regulates voltage in the fast timescale instead of current or power, it may experience a transient overload of current, power and/or energy during a severe grid disturbance. While many promising control strategies for overload ride-through have been proposed over the past two decades, transient stability of the system during and after the transition to an overload ride-through control mode remains difficult to guarantee. In this work, a novel overload ride-through control strategy is proposed for a system of grid-forming inverters that takes both self-protection and system-wide transient stability into account. A proposed system-level supervisory control uses slow communication to pre-emptively assign a set of local ride through control parameters to individual GFM IBR, including a current-limiting virtual reactance, that guarantees that synchronism is still preserved for any set of anticipated grid disturbances. At the core of the supervisory control lies a Lyapunov-function-based routine capable of establishing a strong, albeit conservative, transient stability guarantee for the system. Here, the proposed overload ride-through control strategy is validated via numerical integration of a reduced-order model, as well as through detailed electromagnetic transient (EMT) simulation.

30 DIRECT ENERGY CONVERSION↗
NASA NTRS2019

Supporting Crew Autonomy in Deep Space Exploration: Preliminary Onboard Capability Requirements and Proposed Research Questions. Technical Report of the Autonomous Crew Operations Technical Interchange Meeting

Communication delays are a critical challenge posed by long duration deep space exploration. Space missions historically have relied on an ever-present Mission Control Center (MCC) to direct operations in near real-time. As unanticipated anomalies that defeat fault detection and resolution systems do arise, the lack of real-time communication will significantly weaken what the MCC support represents: a reliable safety net for the flight crew through its deep and diverse areas of expertise and investigative resources. As a consequence, future space vehicles and habitats need to be equipped with capabilities to support the flight crew to operate with little or no ground support. Considerations must be given to vehicle and mission designs that will fortify the traditionally ground-centered safety net and forge new support systems, when communication delays exist. In August 2018, NASA’s Human Research Program, through its Human Factors and Behavioral Performance Element, convened a Technical Interchange Meeting (TIM) on Autonomous Crew Operations at NASA Ames Research Center. The goal of the meeting was to gather input from NASA centers, industry, academia, and branches of the Department of Defense (DoD) to address how intelligent technologies can be applied to augment onboard capabilities to support crew anomaly response. The TIM featured 24 presentations by 29 speakers and hosted a total of 59 attendees, including 43 from 5 NASA centers (Ames, Johnson, Langley, Marshall, and Jet Propulsion Lab) and 4 from the DoD (3 from Army Research Lab and 1 from Naval Postgraduate School), with remaining attendees from academia (e.g., UC Davis, CMU) and industry (e.g., IBM, Siemens). Discussions were centered around three themes: standards and guidelines, lessons learned in analog environments, and technologies. To help provide a framework for discussion, a concept matrix describing anomaly response processes was created prior to the TIM (Figure 1, page 6). The matrix captures the steps involved (monitoring and detection, diagnosis, solution development and evaluation, solution implementation and verification, resolution documentation) as well as the resources and capabilities required to support these steps (data, knowledge, analysis, synthesis, resource management). A wallpaper size printout of the matrix was utilized at the TIM to solicit attendee inputs along the three themes; the activity garnered 108 submissions of ideas. Overall, what emerged from TIM discussions was a picture of mismatch between crew anomaly response needs and support that can be provided by existing intelligent technologies. The needs are broad, spanning multiple steps and processes/resources, with many of which lacking support from existing technologies, such as knowledge management throughout the steps of problem solving (especially in resolution documentation) and manpower management. The solutions provided by existing intelligent technologies are specific to the steps/processes that they are designed to support and constrained to solving only problems similar to those that have occurred before. What is lacking from technologies is typically made up by humans, specifically their complex critical thinking, creative problem solving, and domain expertise. In the end, the TIM highlighted the pressing need to support responses to onboard anomalies during autonomous crew operations, particularly those that have eluded the system tests, inspection, and other assurance processes. Such anomalies can potentially threaten crew and vehicle safety, as well as significantly impact overall operations with additional workload. These fairly rare events are difficult to anticipate and prepare for, given the state-of-the-art in intelligent technologies. This is true even for anomalies that stem from “unknown knowns”—cases in which there is sufficient external information to characterize the problem but the overall pattern fails to be recognized by the problem solver, or in which the internal knowledge needed to solve a problem is held tacitly and potentially accessible by the problem solver but not articulated. It follows that the ability to tackle anomalies lies not only with the availability of relevant information and knowledge but also their accessibility in times of need. To that end, we propose research questions along the following three broad themes: • How intelligent technologies can help make relevant knowledge and information available? • How intelligent technologies can help make relevant knowledge and information accessible? • How intelligent technologies can help support the crew operating as a team in anomaly response processes?

autonomous crew operations↗
NASA NTRS2017

Board Level Proton Testing Book of Knowledge for NASA Electronic Parts and Packaging Program

This book of knowledge (BoK) provides a critical review of the benefits and difficulties associated with using proton irradiation as a means of exploring the radiation hardness of commercial-off-the-shelf (COTS) systems. This work was developed for the NASA Electronic Parts and Packaging (NEPP) Board Level Testing for the COTS task. The fundamental findings of this BoK are the following. The board-level test method can reduce the worst case estimate for a board's single-event effect (SEE) sensitivity compared to the case of no test data, but only by a factor of ten. The estimated worst case rate of failure for untested boards is about 0.1 SEE/board-day. By employing the use of protons with energies near or above 200 MeV, this rate can be safely reduced to 0.01 SEE/board-day, with only those SEEs with deep charge collection mechanisms rising this high. For general SEEs, such as static random-access memory (SRAM) upsets, single-event transients (SETs), single-event gate ruptures (SEGRs), and similar cases where the relevant charge collection depth is less than 10 μm, the worst case rate for SEE is below 0.001 SEE/board-day. Note that these bounds assume that no SEEs are observed during testing. When SEEs are observed during testing, the board-level test method can establish a reliable event rate in some orbits, though all established rates will be at or above 0.001 SEE/board-day. The board-level test approach we explore has picked up support as a radiation hardness assurance technique over the last twenty years. The approach originally was used to provide a very limited verification of the suitability of low cost assemblies to be used in the very benign environment of the International Space Station (ISS), in limited reliability applications. Recently the method has been gaining popularity as a way to establish a minimum level of SEE performance of systems that require somewhat higher reliability performance than previous applications. This sort of application of the method suggests a critical analysis of the method is in order. This is also of current consideration because the primary facility used for this type of work, the Indiana University Cyclotron Facility (IUCF) (also known as the Integrated Science and Technology (ISAT) hall), has closed permanently, and the future selection of alternate test facilities is critically important. This document reviews the main theoretical work on proton testing of assemblies over the last twenty years. It augments this with review of reported data generated from the method and other data that applies to the limitations of the proton board-level test approach. When protons are incident on a system for test they can produce spallation reactions. From these reactions, secondary particles with linear energy transfers (LETs) significantly higher than the incident protons can be produced. These secondary particles, together with the protons, can simulate a subset of the space environment for particles capable of inducing single event effects (SEEs). The proton board-level test approach has been used to bound SEE rates, establishing a maximum possible SEE rate that a test article may exhibit in space. This bound is not particularly useful in many cases because the bound is quite loose. We discuss the established limit that the proton board-level test approach leaves us with. The remaining possible SEE rates may be as high as one per ten years for most devices. The situation is actually more problematic for many SEE types with deep charge collection. In cases with these SEEs, the limits set by the proton board-level test can be on the order of one per 100 days. Because of the limited nature of the bounds established by proton testing alone, it is possible that tested devices will have actual SEE sensitivity that is very low (e.g., fewer than one event in 1 × 10(exp 4) years), but the test method will only be able to establish the limits indicated above. This BoK further examines other benefits of proton board-level testing besides hardness assurance. The primary alternate use is the injection of errors. Error injection, or fault injection, is something that is often done in a simulation environment. But the proton beam has the benefit of injecting the majority of actual SEEs without risk of something being missed, and without the risk of simulation artifacts misleading the SEE investigation.

Guertin, Steven M.↗
NASA NTRS2014

Application of Fault Management Theory to the Quantitative Selection of a Launch Vehicle Abort Trigger Suite

The theory of System Health Management (SHM) and of its operational subset Fault Management (FM) states that FM is implemented as a "meta" control loop, known as an FM Control Loop (FMCL). The FMCL detects that all or part of a system is now failed, or in the future will fail (that is, cannot be controlled within acceptable limits to achieve its objectives), and takes a control action (a response) to return the system to a controllable state. In terms of control theory, the effectiveness of each FMCL is estimated based on its ability to correctly estimate the system state, and on the speed of its response to the current or impending failure effects. This paper describes how this theory has been successfully applied on the National Aeronautics and Space Administration's (NASA) Space Launch System (SLS) Program to quantitatively estimate the effectiveness of proposed abort triggers so as to select the most effective suite to protect the astronauts from catastrophic failure of the SLS. The premise behind this process is to be able to quantitatively provide the value versus risk trade‐off for any given abort trigger, allowing decision makers to make more informed decisions. All current and planned crewed launch vehicles have some form of vehicle health management system integrated with an emergency launch abort system to ensure crew safety. While the design can vary, the underlying principle is the same: detect imminent catastrophic vehicle failure, initiate launch abort, and extract the crew to safety. Abort triggers are the detection mechanisms that identify that a catastrophic launch vehicle failure is occurring or is imminent and cause the initiation of a notification to the crew vehicle that the escape system must be activated. While ensuring that the abort triggers provide this function, designers must also ensure that the abort triggers do not signal that a catastrophic failure is imminent when in fact the launch vehicle can successfully achieve orbit. That is, the abort triggers must have low false negative rates to be sure that real crew‐threatening failures are detected, and also low false positive rates to ensure that the crew does not abort from non‐crew‐threatening launch vehicle behaviors. The analysis process described in this paper is a compilation of over six years of lessons learned and refinements from experiences developing abort triggers for NASA's Constellation Program (Ares I Project) and the SLS Program, as well as the simultaneous development of SHM/FM theory. The paper will describe the abort analysis concepts and process, developed in conjunction with SLS Safety and Mission Assurance (S&MA) to define a common set of mission phase, failure scenario, and Loss of Mission Environment (LOME) combinations upon which the SLS Loss of Mission (LOM) Probabilistic Risk Assessment (PRA) models are built. This abort analysis also requires strong coordination with the Multi‐Purpose Crew Vehicle (MPCV) and SLS Structures and Environments (STE) to formulate a series of abortability tables that encapsulate explosion dynamics over the ascent mission phase. The design and assessment of abort conditions and triggers to estimate their Loss of Crew (LOC) Benefits also requires in‐depth integration with other groups, including Avionics, Guidance, Navigation and Control(GN&C), the Crew Office, Mission Operations, and Ground Systems. The outputs of this analysis are a critical input to SLS S&MA's LOC PRA models. The process described here may well be the first full quantitative application of SHM/FM theory to the selection of a sensor suite for any aerospace system.

Lo, Yunnhon↗
DOE OSTI2020

Validation of (not-historical) large-event near-fault ground-motion simulations for use in civil engineering applications

Ground-motion simulations generated from physics-based wave propagation models are gaining increasing interest in the engineering community for their potential to inform the performance-based design and assessment of infrastructure residing in active seismic areas. A key prerequisite before the ground-motion simulations can be used with confidence for application in engineering domains is their comprehensive and rigorous investigation and validation. This article provides a four-step methodology and acceptance criteria to assess the reliability of simulated ground motions of not historical events, which includes (1) the selection of a population of real records consistent with the simulated scenarios, (2) the comparison of the distribution of Intensity Measures (IMs) from the simulated records, real records, and Ground-Motion Prediction Equations (GMPEs), (3) the comparison of the distribution of simple proxies for building response, and (4) the comparison of the distribution of Engineering Demand Parameters (EDPs) for a realistic model of a structure. Specific focus is laid on near-field ground motions (<10km) from large earthquakes (M w 7), for which the database of real records for potential use in engineering applications is severely limited. The methodology is demonstrated through comparison of (2490) near-field synthetic records with 5 Hz resolution generated from the Pitarka et al (2019) kinematic rupture model with a population of (38) pulse-like near-field real records from multiple events and, when applicable, with NGA-W2 GMPEs. Lastly, the proposed procedure provides an effective method for informing and advancing the science needed to generate realistic ground-motion simulations, and for building confidence in their use in engineering domains.

42 ENGINEERING↗
DOE OSTI2021

Relocating microseismicity from downhole monitoring of the Decatur CCS site using a modified double-difference algorithm

SUMMARY The injection of CO2 at the Decatur carbon capture and storage site has generated significant microseismic activity, which occurs in distinct spatial clusters up to approximately 2.2 km from the primary injection well. Accurate and precise event locations are vital for the characterization of the microseismicity to help understand the reservoir response to the CO2 injection, whilst enabling the identification of minor faults and fractures below the resolution of conventional active seismic imaging. However, microseismic monitoring of fluid injection sites, such as Decatur, is often performed using a network of borehole sensors often from a single well. While these downhole sensors have excellent detection capabilities, their poor azimuthal coverage limits the ability to precisely determine event locations. We have developed a modified double-difference relocation algorithm suitable for both 1-D and 3-D velocity models, and which incorporates differential back azimuth observations to allow the benefits of the original double-difference algorithm to be applicable to a downhole microseismic monitoring setting. Applying the modified double-difference algorithm to the microseismicity at Decatur, we have successfully relocated 4293 events. The relocation included over 59 million observations for 757 285 event pairs, split across seven geographic regions. Despite the majority of observations being recorded in only two boreholes, with an almost identical azimuthal coverage, the results have shown to be reliable with significantly reduced residuals and low uncertainties associated with the final locations. We have analysed the residuals in terms of their association with each geographic region, data type, station and individual events, to fully appreciate their influence in the inversion and the fit of the data to the final set of event locations. For each region, the relocated seismicity has become less diffuse with improved clustering, and with newly visible linear features often orientated in a NE–SW direction. These results show the potential improvements that can be made to microseismic event locations recorded by a borehole network with a limited and variable azimuthal distribution.

58 GEOSCIENCES↗
NASA NTRS2013

Goal-Function Tree Modeling for Systems Engineering and Fault Management

The draft NASA Fault Management (FM) Handbook (2012) states that Fault Management (FM) is a "part of systems engineering", and that it "demands a system-level perspective" (NASAHDBK- 1002, 7). What, exactly, is the relationship between systems engineering and FM? To NASA, systems engineering (SE) is "the art and science of developing an operable system capable of meeting requirements within often opposed constraints" (NASA/SP-2007-6105, 3). Systems engineering starts with the elucidation and development of requirements, which set the goals that the system is to achieve. To achieve these goals, the systems engineer typically defines functions, and the functions in turn are the basis for design trades to determine the best means to perform the functions. System Health Management (SHM), by contrast, defines "the capabilities of a system that preserve the system's ability to function as intended" (Johnson et al., 2011, 3). Fault Management, in turn, is the operational subset of SHM, which detects current or future failures, and takes operational measures to prevent or respond to these failures. Failure, in turn, is the "unacceptable performance of intended function." (Johnson 2011, 605) Thus the relationship of SE to FM is that SE defines the functions and the design to perform those functions to meet system goals and requirements, while FM detects the inability to perform those functions and takes action. SHM and FM are in essence "the dark side" of SE. For every function to be performed (SE), there is the possibility that it is not successfully performed (SHM); FM defines the means to operationally detect and respond to this lack of success. We can also describe this in terms of goals: for every goal to be achieved, there is the possibility that it is not achieved; FM defines the means to operationally detect and respond to this inability to achieve the goal. This brief description of relationships between SE, SHM, and FM provide hints to a modeling approach to provide formal connectivity between the nominal (SE), and off-nominal (SHM and FM) aspects of functions and designs. This paper describes a formal modeling approach to the initial phases of the development process that integrates the nominal and off-nominal perspectives in a model that unites SE goals and functions of with the failure to achieve goals and functions (SHM/FM). This methodology and corresponding model, known as a Goal-Function Tree (GFT), provides a means to represent, decompose, and elaborate system goals and functions in a rigorous manner that connects directly to design through use of state variables that translate natural language requirements and goals into logical-physical state language. The state variable-based approach also provides the means to directly connect FM to the design, by specifying the range in which state variables must be controlled to achieve goals, and conversely, the failures that exist if system behavior go out-of-range. This in turn allows for the systems engineers and SHM/FM engineers to determine which state variables to monitor, and what action(s) to take should the system fail to achieve that goal. In sum, the GFT representation provides a unified approach to early-phase SE and FM development. This representation and methodology has been successfully developed and implemented using Systems Modeling Language (SysML) on the NASA Space Launch System (SLS) Program. It enabled early design trade studies of failure detection coverage to ensure complete detection coverage of all crew-threatening failures. The representation maps directly both to FM algorithm designs, and to failure scenario definitions needed for design analysis and testing. The GFT representation provided the basis for mapping of abort triggers into scenarios, both needed for initial, and successful quantitative analyses of abort effectiveness (detection and response to crew-threatening events).

Patterson, Jonathan D.↗
NASA NTRS2018

Initial Criticality Assessments to Guide FMEAs on Rocket Engine Hot Fire Testing

Presented is an explanation of the use of the Initial Criticality Assessment (ICA) technique, a triage process for prioritizing required Failure Modes and Effects Analysis (FMEAs), for the European Service Module's main propulsion system's hot-fire test bed at White Sands New Mexico. Rather than instinctively performing many FMEAs of subsystems, or one large system level FMEA where every subcomponent is analyzed, the ICA guided an informed analysis of only the hardware that had a large impact to hazards. The low criticality hardware was documented via the ICA and no FMEA was performed; the work could then focus on the high criticality hardware. Thus a savings of Program resources was achieved. The experiences gained in creating these ICAs for this international collaborative project confirmed that the need for continuous communication across the technical teams is one of the greatest areas of emphasis. The European Space Agency (ESA) is developing the European Service Module (ESM), with its primary contractor, Airbus Defence and Space in Germany, for delivery to the National Aeronautics and Space Administration (NASA). The module will be equipped with a total of 21 engines to support NASA’s Orion spacecraft: one U.S. Space Shuttle Orbital Maneuvering System-Engine (OMS-E), eight auxiliary thrusters and 12 smaller RCS (Reaction Control System) thrusters. The main ESM propulsion system, used for large translational maneuvers, consists of one OMS-E... To qualify the design of the ESM propulsion subsystem (PSS) an all-steel Propulsion Qualification Module (PQM) structure is used to test the propulsion systems on Orion, including “hot firing” of the OMS engine, thrusters, and RCS. The PQM has been developed as a hot-fire test bed to be tested at the NASA White Sands Test Facility (WSTF). One of the objectives of the testing is to assure that the OMS-E can be safely operated with the PQM. Testing will also demonstrate that the PQM can set the proper upstream pressures and temperatures for the OMS-E to operate nominally given the PQM has never been tested in hot-fire operation with OMS-E before. In order to safely conduct the test campaign, hardware such as the engine subassembly, fluid feed lines, valves, electrical power lines, instrumentation, stiff links, installation Ground Support Equipment (GSE), and diffuser [whose objectives are to collect the exhaust of the OMS-E to actively cool down the exhaust gases, reduce thermal exchanges, and create a vacuum at OMS-E level before igniting], had to be analyzed for any hazards and failure modes.

Fault Tolerance↗
DOE OSTI2021

Newly acquired core enhances geologic understanding of the northern Paradox Basin Cane Creek play, southeastern Utah

The Cane Creek interval is an emerging unconventional heterolithic play within the Pennsylvanian Paradox Formation of the northern Paradox Basin, southeastern Utah. Structural controls (basement uplifts, salt movement, faults, fractures) likely control production from the Cane Creek, where total oil production of ~10 MMBO is just a fraction of current estimates of the undiscovered resource (up to 1.2 BBOE). Oil production has been most successful from unstimulated horizontal wells in the Cane Creek Unit in the central play area, whereas areas to the north (Greentown and Gunnison Valley) have to date proven to be largely unproductive from vertical and horizontal wells drilled without the benefit of 3D seismic or the deployment of modern hydraulic fracturing techniques. However, the limited historical drilling has shown significant promise (e.g., significant shows). The lack of core data in the northern part of the play has impeded thorough assessment of reservoir quality, character, and lithological facies heterogeneity. The Cane Creek is informally divided into three distinct zones. The upper A and basal C zones are composed of fabric destructive and wavy bedded anhydrite, dolomitic mudstone, and organic-rich algal laminated mudstones (source rock). The middle B zone is generally wave rippled and burrowed, low-permeability sandstone-siltstone (reservoir) with subordinate displacive anhydrite. Recent potash cores collected from the Salt Valley anticline near Crescent Junction, Utah (but east of the main play area), show thicker reservoir sandstone/siltstone packages (~40 ft) in the B zone, and parts of the C zone, in the northern part of the Paradox Basin in comparison to the central (~35 ft) and southern (~30 ft) areas. Source rock analyses from northern core/cuttings also indicate that it is well positioned within the oil window (VRo ~0.8), with thin organic-rich mudstone beds containing up to 20 wt% TOC. Because the siliciclastic reservoir rocks have low permeabilities (0.009–0.202 mD) and variable porosities (6–17%) due to dolomite-anhydrite cement, naturally occurring and possibly stimulated fractures may be essential for hydrocarbon recovery. To better understand the northern part of the Cane Creek play, a new core was obtained from the research stratigraphic well State 16-2 (January 2021). Details from this new core will help characterize reservoir quality via core analyses, petrography, fracture orientations, geomechanics, and correlation of facies and depositional trends. Additionally, an evaluation of matrix porosity/permeability will be conducted to determine its contribution to productivity.

02 PETROLEUM↗