Results for “Failing Safely”

NASA NTRS1972

Investigation of safe-life fail-safe criteria for the space shuttle

An investigation was made to determine the effects of a safe-life design approach and a fail-safe design approach on the space shuttle booster vehicle structure, and to recommend any changes to the structural design criteria. Two configurations of the booster vehicle were considered, one incorporating a delta wing (B-9U configuration) and the other a swept wing (B-16B configuration). Several major structural components of the booster were studied to determine the fatigue life, safe-life, and fail-safe capabilities of the baseline design. Each component was investigated to determine the practicability of applying a safe-life or fail-safe design philosophy, the changes such design approaches might require, and the impact of these changes on weight, cost, development plans, and performance.

Source record↗

DOE OSTI2024

Fail-Safe Logic Design Strategies Within Modern FPGA Architectures

Fail-safe computing refers to computing systems that revert to a non-operational safe state when a fault occurs. In this paper, we investigate a circuit level technique as mitigation for single event upsets (SEUs) and fault injection attacks on field programmable gate arrays (FPGAs), and analyze the effectiveness of the technique as a fail-safe monitor for an encryption algorithm. The propagation of fault effects through FPGA primitives including lookup tables (LUTs) and programmable interconnect points (PIPs) is assessed within an FPGA architecture created using an open source tool, and validated using fault injection experiments on an FPGA. The analysis reveals additional vulnerabilities exist within reconfigurable architectures over those in equivalent fail-safe application specific integrated circuit (ASIC), thus requiring a more elaborate network of redundant circuits and checking logic. The configuration memory bits (CMBs), which configure routing and designate logic functions within the LUTs of the FPGA, add complexity to fail-safe design strategies by introducing additional fault conditions and fault propagation paths. A resource-efficient fail-safe circuit design technique called DEsign for Fail-safe in reCONfigurable systems (DEFCON) is proposed. The benefits and limitations associated with DEFCON are described in the context of fault injection experiments carried out as simulations and in FPGA hardware.

Bhakta, Priya A. [Univ. of New Mexico, Albuquerque↗

DOE OSTI2023

An all-electronic fail-safe for stimulated Brillouin scattering suppression

The mitigation of transverse stimulated Brillouin scattering (SBS) via phase modulation is mandatory to avoid damage in high-energy laser systems. A novel fail-safe system that indirectly monitors the optical bandwidth applied to suppress SBS by monitoring the input, reflected, and through rf power of the SBS-suppression lithium-niobate phase modulator is demonstrated. The fail-safe system has high sensitivity and reliability provided by optimized redundant circuits for power monitoring and fail-safe decision logic. Calibration of the fail-safe’s thresholds is straightforward. Furthermore, the fail-safe circuitry reacts within 45 ns to stop an incorrectly modulated pulse by blocking the propagation of an electronic timing trigger.

fail-safe↗

NASA NTRS1975

Fail-safe system for activity cooled supersonic and hypersonic aircraft

A fail-safe-system concept was studied as an alternative to a redundant active cooling system for supersonic and hypersonic aircraft which use the heat sink of liquid-hydrogen fuel for cooling the aircraft structure. This concept consists of an abort maneuver by the aircraft and a passive thermal protection system (TPS) for the aircraft skin. The abort manuever provides a low-heat-load descent from normal cruise speed to a lower speed at which cooling is unnecessary, and the passive TPS allows the aircraft skin to absorb the abort heat load without exceeding critical skin temperature. On the basis of results obtained, it appears that this fail-safe-system concept warrants further consideration, inasmuch as a fail-safe system could possibly replace a redundant active cooling system with no increase in weight and would offer other potential advantages.

Jones, R. A.↗

NASA NTRS1976

Study of fail-safe abort system for an actively cooled hypersonic aircraft, volume 2

Conceptual designs of a fail-safe abort system for hydrogen fueled actively cooled high speed aircraft are examined. The fail-safe concept depends on basically three factors: (1) a reliable method of detecting a failure or malfunction in the active cooling system, (2) the optimization of abort trajectories which minimize the descent heat load to the aircraft, and (3) fail-safe thermostructural concepts to minimize both the weight and the maximum temperature the structure will reach during descent. These factors are examined and promising approaches are evaluated based on weight, reliability, ease of manufacture and cost.

Peeples, M. E.↗

NASA NTRS1976

Study of a fail-safe abort system for an actively cooled hypersonic aircraft. Volume 1: Technical summary

Conceptual designs of a fail-safe abort system for hydrogen fueled actively cooled high speed aircraft are examined. The fail-safe concept depends on basically three factors: (1) a reliable method of detecting a failure or malfunction in the active cooling system, (2) the optimization of abort trajectories which minimize the descent heat load to the aircraft, and (3) fail-safe thermostructural concepts to minimize both the weight and the maximum temperature the structure will reach during descent. These factors are examined and promising approaches are evaluated based on weight, reliability, ease of manufacture and cost.

Pirello, C. J.↗

NASA NTRS1972

Establishment of design criteria for acceptable failure modes and fail safe considerations for the space shuttle structural system

Investigations of fatigue life, and safe-life and fail-safe design concepts as applied to space shuttle structure are summarized. The results are evaluated to select recommended structural design criteria to provide assurance that premature failure due to propagation of undetected crack-like defects will not occur during shuttle operational service. The space shuttle booster, GDC configuration B-9U, is selected as the reference vehicle. Structural elements used as basis of detail analyses include wing spar caps, vertical stabilizer skins, crew compartment skin, orbiter support frame, and propellant tank shell structure. Fatigue life analyses of structural elements are performed to define potential problem areas and establish upper limits of operating stresses. Flaw growth analyses are summarized in parametric form over a range of initial flaw types and sizes, operating stresses and service life requirements. Service life of 100 to 500 missions is considered.

Westrup, R. W.↗

DOE OSTI2021

Fail-safe reactivity compensation method for a nuclear reactor

The present invention relates generally to the field of compensation methods for nuclear reactors and, in particular to a method for fail-safe reactivity compensation in solution-type nuclear reactors. In one embodiment, the fail-safe reactivity compensation method of the present invention augments other control methods for a nuclear reactor. In still another embodiment, the fail-safe reactivity compensation method of the present invention permits one to control a nuclear reaction in a nuclear reactor through a method that does not rely on moving components into or out of a reactor core, nor does the method of the present invention rely on the constant repositioning of control rods within a nuclear reactor in order to maintain a critical state.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2024

Fail-safe reactivity compensation method for a nuclear reactor

The present invention relates generally to the field of compensation methods for nuclear reactors and, in particular to a method for fail-safe reactivity compensation in solution-type nuclear reactors. In one embodiment, the fail-safe reactivity compensation method of the present invention augments other control methods for a nuclear reactor. In still another embodiment, the fail-safe reactivity compensation method of the present invention permits one to control a nuclear reaction in a nuclear reactor through a method that does not rely on moving components into or out of a reactor core, nor does the method of the present invention rely on the constant repositioning of control rods within a nuclear reactor in order to maintain a critical state.

Nygaard, Erik T.↗

NASA NTRS1993

Fail-Safe Synchronizer For Power Supply

Fail-safe synchronizer feeds external synchronizing signal to switching power supply. When external synchronizing signal lost, it feeds signal from relaxation oscillator to power supply.

Katz, Richard B.↗

NASA NTRS1975

On the calculation of low-thrust fail-safe trajectories

A guidance algorithm is developed for a low-thrust spacecraft such that target intercept is possible in spite of premature thrust termination along the trajectory. Such a trajectory is called a 'fail-safe' trajectory and the spacecraft thrust is utilized to minimize the relative target-spacecraft approach speed. The fail-safe guidance algorithm is solved using the concept of a critical thrust plane and a non-critical thrust direction. Several examples of fail-safe guidance are presented for a solar-electric propulsion flyby mission to the comet Encke.

Sauer, C. G., Jr.↗

NASA NTRS1976

Study of a fail-safe abort system for an actively cooled hypersonic aircraft: Computer program documentation

The Fail-Safe Abort System TEMPerature Analysis Program, (FASTEMP), user's manual is presented. This program was used to analyze fail-safe abort systems for an actively cooled hypersonic aircraft. FASTEMP analyzes the steady state or transient temperature response of a thermal model defined in rectangular, cylindrical, conical and/or spherical coordinate system. FASTEMP provides the user with a large selection of subroutines for heat transfer calculations. The various modes of heat transfer available from these subroutines are: heat storage, conduction, radiation, heat addition or generation, convection, and fluid flow.

Haas, L. A., Sr.↗

NASA NTRS1990

A fail-safe CMOS logic gate

This paper reports a design technique to make Complex CMOS Gates fail-safe for a class of faults. Two classes of faults are defined. The fail-safe design presented has limited fault-tolerance capability. Multiple faults are also covered.

Bobin, V.↗

NASA NTRS1978

A fail safe laser activated switch used as an emergency control link at the Langley Vortex Research Facility

A fail safe light activated switch was used as an emergency control link at the Langley Vortex Research Facility. In this facility aircraft models were towed through a still air test chamber by a gasoline powered vehicle which was launched from one end of a 427-meter track and attained velocities to 31 m/sec in the test chamber. A 5 mW HeNe laser with a mechanical copper provided a connecting link with the moving tow vehicle on which a silicon photodiode receiver with a specially designed amplifier provided a fail safe switching action. This system provided an emergency means of stopping the vehicle by turning off the laser to interrupt the power to the vehicle ignition and brake release systems.

Kassel, P. C., Jr.↗

NASA NTRS2015

New Developments in FPGA: SEUs and Fail-Safe Strategies from the NASA Goddard Perspective

It has been shown that, when exposed to radiation environments, each Field Programmable Gate Array (FPGA) device has unique error signatures. Subsequently, fail-safe and mitigation strategies will differ per FPGA type. In this session several design approaches for safe systems will be presented. It will also explore the benefits and limitations of several mitigation techniques. The intention of the presentation is to provide information regarding FPGA types, their susceptibilities, and proven fail-safe strategies; so that users can select appropriate mitigation and perform the required trade for system insertion. The presentation will describe three types of FPGA devices and their susceptibilities in radiation environments.

hardware description language (HDL)↗

NASA NTRS2016

New Developments in FPGA Devices: SEUs and Fail-Safe Strategies from the NASA Goddard Perspective

It has been shown that, when exposed to radiation environments, each Field Programmable Gate Array (FPGA) device has unique error signatures. Subsequently, fail-safe and mitigation strategies will differ per FPGA type. In this session several design approaches for safe systems will be presented. It will also explore the benefits and limitations of several mitigation techniques. The intention of the presentation is to provide information regarding FPGA types, their susceptibilities, and proven fail-safe strategies; so that users can select appropriate mitigation and perform the required trade for system insertion. The presentation will describe three types of FPGA devices and their susceptibilities in radiation environments.

Field Programmable Gate Array (FPGA)↗

NASA NTRS2016

New Developments in FPGA: SEUs and Fail-Safe Strategies from the NASA Goddard Perspective

It has been shown that, when exposed to radiation environments, each Field Programmable Gate Array (FPGA) device has unique error signatures. Subsequently, fail-safe and mitigation strategies will differ per FPGA type. In this session several design approaches for safe systems will be presented. It will also explore the benefits and limitations of several mitigation techniques. The intention of the presentation is to provide information regarding FPGA types, their susceptibilities, and proven fail-safe strategies; so that users can select appropriate mitigation and perform the required trade for system insertion. The presentation will describe three types of FPGA devices and their susceptibilities in radiation environments.

Error Correction and Detection (EDAC)↗

DOE OSTI2020

Battery models, systems, and methods using robust fail-safe iteration free approach for solving differential algebraic equations

Battery models using robust fail-safe iteration free approach for solving Differential Algebraic Equations, and associated systems and methods are disclosed. In one embodiment, a method includes generating a model of the rechargeable battery; determining one or more initial conditions for one or more algebraic variables of the model using a solver; holding differential variables of the model static by a switch function while determining the one or more initial conditions; applying the initial conditions to the model by the switch function; and determining one or more parameters for the rechargeable battery by solving the algebraic and differential equations.

25 ENERGY STORAGE↗