Results for “Failing Safely”

NASA NTRS1972

Investigation of safe-life fail-safe criteria for the space shuttle

An investigation was made to determine the effects of a safe-life design approach and a fail-safe design approach on the space shuttle booster vehicle structure, and to recommend any changes to the structural design criteria. Two configurations of the booster vehicle were considered, one incorporating a delta wing (B-9U configuration) and the other a swept wing (B-16B configuration). Several major structural components of the booster were studied to determine the fatigue life, safe-life, and fail-safe capabilities of the baseline design. Each component was investigated to determine the practicability of applying a safe-life or fail-safe design philosophy, the changes such design approaches might require, and the impact of these changes on weight, cost, development plans, and performance.

Source record↗

NASA NTRS1975

Fail-safe system for activity cooled supersonic and hypersonic aircraft

A fail-safe-system concept was studied as an alternative to a redundant active cooling system for supersonic and hypersonic aircraft which use the heat sink of liquid-hydrogen fuel for cooling the aircraft structure. This concept consists of an abort maneuver by the aircraft and a passive thermal protection system (TPS) for the aircraft skin. The abort manuever provides a low-heat-load descent from normal cruise speed to a lower speed at which cooling is unnecessary, and the passive TPS allows the aircraft skin to absorb the abort heat load without exceeding critical skin temperature. On the basis of results obtained, it appears that this fail-safe-system concept warrants further consideration, inasmuch as a fail-safe system could possibly replace a redundant active cooling system with no increase in weight and would offer other potential advantages.

Jones, R. A.↗

NASA NTRS1976

Study of fail-safe abort system for an actively cooled hypersonic aircraft, volume 2

Conceptual designs of a fail-safe abort system for hydrogen fueled actively cooled high speed aircraft are examined. The fail-safe concept depends on basically three factors: (1) a reliable method of detecting a failure or malfunction in the active cooling system, (2) the optimization of abort trajectories which minimize the descent heat load to the aircraft, and (3) fail-safe thermostructural concepts to minimize both the weight and the maximum temperature the structure will reach during descent. These factors are examined and promising approaches are evaluated based on weight, reliability, ease of manufacture and cost.

Peeples, M. E.↗

NASA NTRS1976

Study of a fail-safe abort system for an actively cooled hypersonic aircraft. Volume 1: Technical summary

Conceptual designs of a fail-safe abort system for hydrogen fueled actively cooled high speed aircraft are examined. The fail-safe concept depends on basically three factors: (1) a reliable method of detecting a failure or malfunction in the active cooling system, (2) the optimization of abort trajectories which minimize the descent heat load to the aircraft, and (3) fail-safe thermostructural concepts to minimize both the weight and the maximum temperature the structure will reach during descent. These factors are examined and promising approaches are evaluated based on weight, reliability, ease of manufacture and cost.

Pirello, C. J.↗

NASA NTRS1972

Establishment of design criteria for acceptable failure modes and fail safe considerations for the space shuttle structural system

Investigations of fatigue life, and safe-life and fail-safe design concepts as applied to space shuttle structure are summarized. The results are evaluated to select recommended structural design criteria to provide assurance that premature failure due to propagation of undetected crack-like defects will not occur during shuttle operational service. The space shuttle booster, GDC configuration B-9U, is selected as the reference vehicle. Structural elements used as basis of detail analyses include wing spar caps, vertical stabilizer skins, crew compartment skin, orbiter support frame, and propellant tank shell structure. Fatigue life analyses of structural elements are performed to define potential problem areas and establish upper limits of operating stresses. Flaw growth analyses are summarized in parametric form over a range of initial flaw types and sizes, operating stresses and service life requirements. Service life of 100 to 500 missions is considered.

Westrup, R. W.↗

NASA NTRS1993

Fail-Safe Synchronizer For Power Supply

Fail-safe synchronizer feeds external synchronizing signal to switching power supply. When external synchronizing signal lost, it feeds signal from relaxation oscillator to power supply.

Katz, Richard B.↗

NASA NTRS1975

On the calculation of low-thrust fail-safe trajectories

A guidance algorithm is developed for a low-thrust spacecraft such that target intercept is possible in spite of premature thrust termination along the trajectory. Such a trajectory is called a 'fail-safe' trajectory and the spacecraft thrust is utilized to minimize the relative target-spacecraft approach speed. The fail-safe guidance algorithm is solved using the concept of a critical thrust plane and a non-critical thrust direction. Several examples of fail-safe guidance are presented for a solar-electric propulsion flyby mission to the comet Encke.

Sauer, C. G., Jr.↗

NASA NTRS1976

Study of a fail-safe abort system for an actively cooled hypersonic aircraft: Computer program documentation

The Fail-Safe Abort System TEMPerature Analysis Program, (FASTEMP), user's manual is presented. This program was used to analyze fail-safe abort systems for an actively cooled hypersonic aircraft. FASTEMP analyzes the steady state or transient temperature response of a thermal model defined in rectangular, cylindrical, conical and/or spherical coordinate system. FASTEMP provides the user with a large selection of subroutines for heat transfer calculations. The various modes of heat transfer available from these subroutines are: heat storage, conduction, radiation, heat addition or generation, convection, and fluid flow.

Haas, L. A., Sr.↗

NASA NTRS1990

A fail-safe CMOS logic gate

This paper reports a design technique to make Complex CMOS Gates fail-safe for a class of faults. Two classes of faults are defined. The fail-safe design presented has limited fault-tolerance capability. Multiple faults are also covered.

Bobin, V.↗

NASA NTRS1978

A fail safe laser activated switch used as an emergency control link at the Langley Vortex Research Facility

A fail safe light activated switch was used as an emergency control link at the Langley Vortex Research Facility. In this facility aircraft models were towed through a still air test chamber by a gasoline powered vehicle which was launched from one end of a 427-meter track and attained velocities to 31 m/sec in the test chamber. A 5 mW HeNe laser with a mechanical copper provided a connecting link with the moving tow vehicle on which a silicon photodiode receiver with a specially designed amplifier provided a fail safe switching action. This system provided an emergency means of stopping the vehicle by turning off the laser to interrupt the power to the vehicle ignition and brake release systems.

Kassel, P. C., Jr.↗

NASA NTRS2015

New Developments in FPGA: SEUs and Fail-Safe Strategies from the NASA Goddard Perspective

It has been shown that, when exposed to radiation environments, each Field Programmable Gate Array (FPGA) device has unique error signatures. Subsequently, fail-safe and mitigation strategies will differ per FPGA type. In this session several design approaches for safe systems will be presented. It will also explore the benefits and limitations of several mitigation techniques. The intention of the presentation is to provide information regarding FPGA types, their susceptibilities, and proven fail-safe strategies; so that users can select appropriate mitigation and perform the required trade for system insertion. The presentation will describe three types of FPGA devices and their susceptibilities in radiation environments.

hardware description language (HDL)↗

NASA NTRS2016

New Developments in FPGA Devices: SEUs and Fail-Safe Strategies from the NASA Goddard Perspective

It has been shown that, when exposed to radiation environments, each Field Programmable Gate Array (FPGA) device has unique error signatures. Subsequently, fail-safe and mitigation strategies will differ per FPGA type. In this session several design approaches for safe systems will be presented. It will also explore the benefits and limitations of several mitigation techniques. The intention of the presentation is to provide information regarding FPGA types, their susceptibilities, and proven fail-safe strategies; so that users can select appropriate mitigation and perform the required trade for system insertion. The presentation will describe three types of FPGA devices and their susceptibilities in radiation environments.

Field Programmable Gate Array (FPGA)↗

NASA NTRS2016

New Developments in FPGA: SEUs and Fail-Safe Strategies from the NASA Goddard Perspective

It has been shown that, when exposed to radiation environments, each Field Programmable Gate Array (FPGA) device has unique error signatures. Subsequently, fail-safe and mitigation strategies will differ per FPGA type. In this session several design approaches for safe systems will be presented. It will also explore the benefits and limitations of several mitigation techniques. The intention of the presentation is to provide information regarding FPGA types, their susceptibilities, and proven fail-safe strategies; so that users can select appropriate mitigation and perform the required trade for system insertion. The presentation will describe three types of FPGA devices and their susceptibilities in radiation environments.

Error Correction and Detection (EDAC)↗

NASA NTRS2001

Fail-Safe Magnetic Bearing Controller Demonstrated Successfully

The Structural Mechanics and Dynamics Branch has successfully demonstrated a fail-safe controller for the Fault-Tolerant Magnetic Bearing rig at the NASA Glenn Research Center. The rotor is supported by two 8-pole redundant radial bearings, and coil failing situations are simulated by manually shutting down their control current commands from the controller cockpit. The effectiveness of the controller was demonstrated when only two active coils from each radial bearing could be used (that is, 14 coils failed). These remaining two coils still levitated the rotor and spun it without losing stability or desired position up to the maximum allowable speed of 20,000 rpm.

Choi, Benjamin B.↗

NASA NTRS1995

(abstract) The Design of a Benign Fail-safe Mechanism Using a Low-melting-point Metal Alloy Coupler

Because the alpha proton X ray spectrometer (APXS) sensor head on the Mars Pathfinder rover, Sojourner, is placed on Martian soil by the deployment mechanism (ADM), the rover would be crippled if the actuator fails when the mechanism is in its deployed position, as rover ground clearance is then reduced to zero. This paper describes the unique fail-safe mounted on the ADM, especially the use of a low-temperature-melting alloy as a coupler device. The final form of the design is a low-melting-point metal pellet coupler, made from Cerrobend, in parallel with a Negator spring pack. In its solid state, the metal rigidly connects the driver (the actuator) and the driven part (the mechanism). When commanded, a strip heater wrapped around the coupler melts the metal pellet (at 60(deg)C), allowing the driven part to turn independent of the driver. The Negator spring retracts the mechanism to its fully stowed position. This concept meets all the design criteria, and provides an added benefit. When the metal hardens the coupler once again rigidly connects the actuator and the mechanism. The concept presented here can easily be applied to other applications. Anywhere release devices are needed, low-melting-point couplers can be considered. The issues to be concerned with are thermal isolation, proper setting of the parts before actuation, and possible outgassing concerns. However, when these issues are overcome, the resulting release mechanism can promise to be the most light, simple, power conserving alternative available.

low-melting-point alloys couplers Negator springs ↗

NASA NTRS2009

Active Fail-Safe Micro-Array Flow Control for Advanced Embedded Propulsion Systems

The primary objective of this research effort was to develop and analytically demonstrate enhanced first generation active "fail-safe" hybrid flow-control techniques to simultaneously manage the boundary layer on the vehicle fore-body and to control the secondary flow generated within modern serpentine or embedded inlet S-duct configurations. The enhanced first-generation technique focused on both micro-vanes and micro-ramps highly-integrated with micro -jets to provide nonlinear augmentation for the "strength' or effectiveness of highly-integrated flow control systems. The study focused on the micro -jet mass flow ratio (Wjet/Waip) range from 0.10 to 0.30 percent and jet total pressure ratios (Pjet/Po) from 1.0 to 3.0. The engine bleed airflow range under study represents about a 10 fold decrease in micro -jet airflow than previously required. Therefore, by pre-conditioning, or injecting a very small amount of high-pressure jet flow into the vortex generated by the micro-vane and/or micro-ramp, active flow control is achieved and substantial augmentation of the controlling flow is realized.

Anderson, Bernhard H.↗

NASA NTRS1974

Fail-safe bidirectional valve driver

Cross-coupled diodes are added to commonly used bidirectional valve driver circuit to protect circuit and power supply. Circuit may be used in systems requiring fail-safe bidirectional valve operation, particularly in chemical- and petroleum-processing control systems and computer-controlled hydraulic or pneumatic systems.

Fujimoto, H.↗

NASA NTRS1966

Automatic protective vent has fail-safe feature

Delayed vent valve system in a mechanical backing pump in a vacuum system allows the pneumatic foreline valve to seal before the pump vent opens. The system is designed to be fail-safe and operate even though there is loss of electrical power.

Dameron, C. E.↗