Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Fault mitigation strategy”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRS2018

Automated Contingency Management for Water Recycling System

To enable effective management, planning, and operations for future missions that involve a crewed space habitat, operational support must be migrated from Earth to the habitat. Intelligent System Health Management technologies (ISHM) promise to enable the future space habitats to increase the safety and mission success while minimizing operational risks. In this paper, Water Recycling System (WRS) deployed at NASA Ames Research Center's Sustainability Base is used for verification and validation of the proposed solution. Our work includes the development of the WRS simulation model based on its dynamic physical characteristics and the design of Automatic Contingency Management (ACM) framework that integrates fault diagnosis and optimization. In WRS modeling, a nominal model with fault injectors is developed. Fault detection and isolation techniques are then developed for isolating causes and identifying the severity of the faults. Dynamic Programming (DP) based fault mitigation strategies are designed to accommodate the faults in the system. A series of simulations are presented with different fault modes and the results indicate that the proposed ACM system can alleviate the fault in the WRS optimally regarding energy consumption and effects of the fault.

Systems Health Management↗
NASA NTRS2015

Radiation Tolerant, FPGA-Based SmallSat Computer System

The Radiation Tolerant, FPGA-based SmallSat Computer System (RadSat) computing platform exploits a commercial off-the-shelf (COTS) Field Programmable Gate Array (FPGA) with real-time partial reconfiguration to provide increased performance, power efficiency and radiation tolerance at a fraction of the cost of existing radiation hardened computing solutions. This technology is ideal for small spacecraft that require state-of-the-art on-board processing in harsh radiation environments but where using radiation hardened processors is cost prohibitive.

On-board processing for harsh radiation environmen↗
DOE OSTI2022

Node Monitoring as a Fault Detection Countermeasure against Information Leakage within a RISC-V Microprocessor

Advanced, superscalar microprocessors (μP) are highly susceptible to wear-out failures because of their highly complex, densely packed circuit structure and extreme operational frequencies. Although many types of fault detection and mitigation strategies have been proposed, none have addressed the specific problem of detecting faults that lead to information leakage events on I/O channels of the μP. Information leakage can be defined very generally as any type of output that the executing program did not intend to produce. In this work, we restrict this definition to output that represents a security concern, and in particular, to the leakage of plaintext or encryption keys, and propose a counter-based countermeasure to detect faults that cause this type of leakage event. Fault injection (FI) experiments are carried out on two RISC-V microprocessors emulated as soft cores on a Xilinx multi-processor System-on-chip (MPSoC) FPGA. The μP designs are instrumented with a set of counters that records the number of transitions that occur on internal nodes. The transition counts are collected from all internal nodes under both fault-free and faulty conditions, and are analyzed to determine which counters provide the highest fault coverage and lowest latency for detecting leakage faults. We show that complete coverage of all leakage faults is possible using only a single counter strategically placed within the branch compare logic of the μPs.

42 ENGINEERING↗
NASA NTRS2002

REE radiation fault model: a tool for organizing and communication radiation test data and construction COTS based spacebourne computing systems

The growth in data rates of instruments on future NASA spacecraft continues to outstrip the improvement in communications bandwidth and processing capabilities of radiation-hardened computers. Sophisticated autonomous operations strategies will further increase the processing workload. Given the reductions in spacecraft size and available power, standard radiation hardened computing systems alone will not be able to address the requirements of future missions. The REE project was intended to overcome this obstacle by developing a COTS- based supercomputer suitable for use as a science and autonomy data processor in most space environments. This development required a detailed knowledge of system behavior in the presence of Single Event Effect (SEE) induced faults so that mitigation strategies could be designed to recover system level reliability while maintaining the COTS throughput advantage. The REE project has developed a suite of tools and a methodology for predicting SEU induced transient fault rates in a range of natural space environments from ground-based radiation testing of component parts. In this paper we provide an overview of this methodology and tool set with a concentration on the radiation fault model and its use in the REE system development methodology. Using test data reported elsewhere in this and other conferences, we predict upset rates for a particular COTS single board computer configuration in several space environments.

Radiation Effects Modeling COTS computers REE SEU ↗
NASA NTRSDate not supplied

Synthetic Failure Mode Generation for Resilience Analysis and Failure Mechanism Discovery

Traditional risk-based design processes seek to mitigate operational hazards by manually identifying possible faults and corresponding mitigation strategies—a tedious process which critically relies on the designer’s limited knowledge. Resilience-based design, on the other hand, seeks to embody generic hazard-mitigating properties in the system to mitigate unknown hazards, often by modelling the system's response to potential hazardous events. This work adapts this approach to the traditional risk-based design process to synthetically generate hazardous modes, by representing them as a unique combination of internal component health-states which can then be injected and simulated in a model of the system failure dynamics. The design process may then reduce the risk of unknown internal hazards by iteratively mitigating the effects of these modes. The performance of this approach is evaluated in a model of an autonomous rover, where cluster analysis shows that elaborating the space of synthetic faults in the drive system using this approach uncovers a wider range of possible hazardous trajectories and failure consequences within each trajectory. However, this increase in hazard information comes at a high computational expense, highlighting the need for advanced, efficient methods to search and sample the hazard space.

Simulation↗
NASA NTRSDate not supplied

Synthetic Failure Mode Generation for Resilience Analysis and Failure Mechanism Discovery

Traditional risk-based design processes seek to mitigate operational hazards by manually identifying possible faults and corresponding mitigation strategies—a tedious process which critically relies on the designer’s limited knowledge. Resilience-based design, on the other hand, seeks to embody generic hazard-mitigating properties in the system to mitigate unknown hazards, often by modelling the system's response to potential hazardous events. This work adapts this approach to the traditional risk-based design process to synthetically generate hazardous modes, by representing them as a unique combination of internal component health-states which can then be injected and simulated in a model of the system failure dynamics. The design process may then reduce the risk of unknown internal hazards by iteratively mitigating the effects of these modes. The performance of this approach is evaluated in a model of an autonomous rover, where cluster analysis shows that elaborating the space of synthetic faults in the drive system using this approach uncovers a wider range of possible hazardous trajectories and failure consequences within each trajectory. However, this increase in hazard information comes at a high computational expense, highlighting the need for advanced, efficient methods to search and sample the hazard space.

Simulation↗
DOE OSTI2022

SRF Cavity Fault Classification and Prediction at Jefferson Lab

Over the last few years several machine learning projects at Jefferson Lab have had a common focus to optimize operation of superconducting RF (SRF) cavities in the Continuous Electron Beam Accelerator Facility (CEBAF). In this talk we highlight work to identify and classify types of faults from C100-type cavities and then to extend those capabilities to provide real-time fault prediction. Early prediction may enable mitigation strategies to prevent some types of faults. In our approach we apply a two-step fault prediction pipeline. In the first step, a model distinguishes between faulty and normal signals. In the second step, signals flagged as faulty by the first model are classified into one of seven fault types based on learned signatures in the data. Initial results show that our model can successfully predict most fault types 200 ms before onset. In additional to model performance, we also highlight challenges in working with real-world data and challenges for deploying models.

Tennant, C.↗
NASA NTRS2006

Methodology for Designing Fault-Protection Software

A document describes a methodology for designing fault-protection (FP) software for autonomous spacecraft. The methodology embodies and extends established engineering practices in the technical discipline of Fault Detection, Diagnosis, Mitigation, and Recovery; and has been successfully implemented in the Deep Impact Spacecraft, a NASA Discovery mission. Based on established concepts of Fault Monitors and Responses, this FP methodology extends the notion of Opinion, Symptom, Alarm (aka Fault), and Response with numerous new notions, sub-notions, software constructs, and logic and timing gates. For example, Monitor generates a RawOpinion, which graduates into Opinion, categorized into no-opinion, acceptable, or unacceptable opinion. RaiseSymptom, ForceSymptom, and ClearSymptom govern the establishment and then mapping to an Alarm (aka Fault). Local Response is distinguished from FP System Response. A 1-to-n and n-to- 1 mapping is established among Monitors, Symptoms, and Responses. Responses are categorized by device versus by function. Responses operate in tiers, where the early tiers attempt to resolve the Fault in a localized step-by-step fashion, relegating more system-level response to later tier(s). Recovery actions are gated by epoch recovery timing, enabling strategy, urgency, MaxRetry gate, hardware availability, hazardous versus ordinary fault, and many other priority gates. This methodology is systematic, logical, and uses multiple linked tables, parameter files, and recovery command sequences. The credibility of the FP design is proven via a fault-tree analysis "top-down" approach, and a functional fault-mode-effects-and-analysis via "bottoms-up" approach. Via this process, the mitigation and recovery strategy(s) per Fault Containment Region scope (width versus depth) the FP architecture.

Barltrop, Kevin↗
NASA NTRS2020

Driving Curiosity: Mars Rover Mobility Trends During the First Seven Years

NASA’s Mars Science Laboratory (MSL) mission landed the Curiosity rover on Mars on August 6, 2012. As of August 6, 2019 (sol 2488), Curiosity has driven 21,318.5 meters over a variety of terrain types and slopes, employing multiple drive modes with varying amounts of onboard autonomy. Curiosity’s drive distances each sol have ranged from its shortest drive of 2.6 centimeters to its longest drive of 142.5 meters, with an average drive distance of 28.9 meters. Real-time human intervention during Curiosity drives on Mars is not possible due to the latency in uplinking commands and downlinking telemetry, so the operations team relies on the rover’s flight software to prevent an unsafe state during driving. Over the first seven years of the mission, Curiosity has attempted 738 drives. While 622 drives have completed successfully, 116 drives were prevented or stopped early by the rover’s fault protection software. The primary risks to mobility success have been wheel wear, wheel entrapment, progressive wheel sinkage (which can lead to rover embedding), and terrain interactions or hardware or cabling failures that result in an inability to command one or more steer or drive actuators. In this paper, we describe mobility trends over the first 21.3km of the mission, operational aspects of the mobility fault protection, and risk mitigation strategies that will support continued mobility success for the remainder of the mission.

Rankin, Arturo↗
NASA NTRSDate not supplied

Historical Aerospace Software Errors Categorized to Influence Fault Tolerance

- Motivation - Very little literature exists characterizing software errors in real-time avionic systems - How, where, and why is software most likely to fail? - Purpose - Raise awareness of how software fails through historical study - Recommend improvements to software fault tolerant design based on historical study - Outline - Discuss Software Failures - Common Cause, Failure Classes, Mitigation strategies - Review NASA requirements for Software Fault Tolerance - Review Historical Software Failures - Analyze failures and provide statistics - Erroneous vs. fail-Silent - Reboot recoverability likelihood - Code Location - Missing or unknown code?

Flilght↗
DOE OSTI2026

Study the Protection Improvements for a Weak Grid Area With High IBRs

NLR is collaborating with Florida Power & Light (FPL) and GE to investigate power system stability and protection reliability challenges in a weak-grid region with high penetration of inverter-based resources (IBRs). This presentation will primarily focus on the protection aspects of the study. We will share key insights from this real-world project, including best practices for developing high-fidelity fault study models, establishing a controller-hardware-in-the-loop (CHIL) platform for testing physical relays, identifying system-level protection challenges, and designing enhanced protection schemes to address those issues. Through this discussion, the audience will gain practical understanding of protection studies in IBR-dominated systems, the emerging challenges associated with reduced fault current and altered transient behavior, and effective mitigation strategies. In particular, we will highlight the critical importance of IBR compliance with IEEE 2800-2022 to ensure dependable and secure protection relay operation in modern transmission systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗
NASA NTRS2015

Overview of Threats and Failure Models for Safety-Relevant Computer-Based Systems

This document presents a high-level overview of the threats to safety-relevant computer-based systems, including (1) a description of the introduction and activation of physical and logical faults; (2) the propagation of their effects; and (3) function-level and component-level error and failure mode models. These models can be used in the definition of fault hypotheses (i.e., assumptions) for threat-risk mitigation strategies. This document is a contribution to a guide currently under development that is intended to provide a general technical foundation for designers and evaluators of safety-relevant systems.

Torres-Pomales, Wilfredo↗
DOE OSTI2025

Phase II Field Demonstration at Lansing Smith Generating Plant, Southport, Florida (Final Report)

The Final Technical Report: Field Test Design and Pressure Management Strategies for Phase II Field Demonstration of Optimal Pressure Control, Plume Management, and Produced Water Strategies presents the culmination of multi-year efforts under the U.S. Department of Energy’s Brine Extraction and Storage Test (BEST) program, led by EPRI in partnership with Gulf Power at the Plant Smith site near Panama City, Florida. The project was designed to evaluate and demonstrate the technical feasibility of managing subsurface pressures and fluid movement associated with large-scale CO₂ injection, using low-salinity water as a proxy fluid. Through a combination of field injection testing, reservoir modeling, and optimization studies, the research team developed and refined active and passive brine extraction strategies aimed at controlling injection-induced pressure buildup, mitigating risks of fault activation, and managing plume migration. The field demonstration incorporated a new injection well (TIW-2), a new monitoring/extraction well (TEMW-A), and an existing well (TIW-1) repurposed for passive pressure relief. Complementary geophysical monitoring was designed to track plume development and evaluate the effectiveness of pressure management strategies. The report details the integrated workflow encompassing wellfield development, regulatory permitting, model calibration, and survey design. It includes a comprehensive electromagnetic (EM) modeling and inversion study used to develop a cost-effective, time-lapse geophysical monitoring plan capable of imaging the evolving low-salinity plume within the highly saline Lower Tuscaloosa formation. Reservoir simulation results guided the design of the 17-month injection program and the timing of active extraction to maintain formation pressures below a hypothetical fault reactivation threshold. Supporting analyses evaluated potential injectivity risks related to clay fines migration and geochemical incompatibility, identifying practical mitigation measures such as salinity and pH control. The final design recommends a series of crosswell EM surveys—conducted before, during, and after injection—as the most effective and economical approach for plume imaging, supplemented by continuous downhole pressure and flow monitoring. Collectively, the study provides a field-ready framework for cost-effective pressure management and monitoring in support of future CO₂ storage projects.

01 COAL, LIGNITE, AND PEAT↗
DOE OSTI2020

Mitigation of Motor Stalling and FIDVR via Energy Storage Systems with Temporal Logic Specifications

The fault-induced delayed voltage recovery (FIDVR) phenomenon has been very common from the distribution system through the transmission system. It causes a delay on recovering significantly depressed local voltage after the fault is cleared, and it can also lead to more widespread cascading system failures. Mitigating this event with current control approaches is challenging and becoming a crucial issue. Here, a model predictive control-based strategy employing signal temporal logic specifications is proposed to help mitigate FIDVR. To this end, it investigates and extends a dynamic performance model allowing analytic insights into the system-wide impact of motor stalling and FIDVR. The proposed controller provides richer descriptions of voltage specifications addressing both magnitude and time simultaneously. We consider different control specifications with reactive power support from energy storage systems to prevent the voltage during/after the fault from dropping too low, and reduce the delay time of voltage recovery. The simulation results conducted with the IEEE 57 bus test network validate the proposed method and demonstrate the effectiveness of the mitigation strategy on FIDVR.

25 ENERGY STORAGE↗
DOE OSTI2021

Mitigating Injection‐Induced Seismicity Along Basement Faults by Extraction: Application to 2016–2018 Pohang Earthquakes

Abstract The risk of induced earthquake is considered as the major obstacle for sustainable subsurface energy activities. As a mitigation approach, mechanistic risk assessment can be essential to minimize the potential of seismic hazard. Coupled hydro‐mechanical modeling approach is integrated with geomechanical analysis to better assess the occurrence of seismicity induced by injection and/or extraction, which will provide a basis to update operational conditions (e.g., number and location of mitigating wells, rate and duration of operations) for mitigating earthquake nucleation. The Coulomb stability analysis and seismicity rate estimates from this generic study indicate that simultaneous extraction can relieve injection‐induced pore‐pressure buildup, but also transfer and accumulate elastic energy along the faults. Field‐scale simulation with variation in well design for the Pohang EGS site, South Korea, show that multiple wells aligned across a preexisting fault form gradients of pressure and stress fields normal to the fault, which can enhance the direct impact of diffusion process and poroelastic stressing on the fault stability perturbation. Our mechanistic study suggests multiphysics‐oriented mitigation strategies that consider (1) possible mechanical deformation, caused by hydro‐mechanical coupling effects, and (2) proper configuration of well operations based on site‐specific geological characteristics.

Chang, K. W.↗
DOE OSTI2022

Context and mitigation of lost circulation during geothermal drilling in diverse geologic settings

Lost circulation is one of the most common and expensive problems facing geothermal energy development, representing up to 30% of drilling costs. We examined drilling records from four geothermal fields—McGinness Hills in central Nevada, Don A. Campbell and Steamboat Hills in western Nevada, and Puna Geothermal Venture on the Big Island of Hawai'i— to identify geologies most prone to lost circulation, as well as common mitigation strategies. Depths of lost circulation events varied, but their frequency often increased in the production interval. Lost circulation commonly occurred near fault intersections, and heavily faulted fields like McGinness Hills and Don A. Campbell showed secondary mineralization within approximately 100 m (328 ft) or less of where circulation was lost. Lost circulation mitigation strategies included using locally available materials (e.g., cotton seed hulls) as well as more expensive proprietary lost circulation materials, cement plugs above the reservoir, and drilling blind with aerated, polymer-based mud in the production zone. Addressing lost circulation using a well thought out decision-making approach and materials above the reservoir will save time and cost, and provide needed well integrity. Mitigation often requires a series of steps, typically applied from perceived least expensive to most, and are dependent on the severity and location in the well where circulation was lost and availability of materials. Placing cement plugs can cure lost circulation events, however these plugs are often expensive, time-consuming, and may not be successful.

15 GEOTHERMAL ENERGY↗
DOE OSTI2022

Potential Seismicity Along Basement Faults Induced by Geological Carbon Sequestration

Large-scale CO 2 sequestration into geological formations has been suggested to reduce CO 2 emissions from industrial activities. However, much like enhanced geothermal stimulation and wastewater injection, CO 2 sequestration has a potential to induce earthquake along weak faults, which can be considered a negative impact on safety and public opinion. This research shows the physical mechanisms of potential seismic hazards along basement faults driven by CO 2 sequestration under variation in geological and operational constraints. Specifically we compare the poroelastic behaviors between multiphase flow and single-phase flow cases, highlighting specific needs of evaluating induced seismicity associated with CO 2 sequestration. In contrast to single-phase injection scenario, slower migration of the CO 2 plume than pressure pulse may delay accumulation of pressure and stress along basement faults that may not be mitigated immediately by shut-in of injection. The impact of multiphase flow system, therefore, needs to be considered for proper monitoring and mitigation strategies.

58 GEOSCIENCES↗
NASA NTRS2019

Electrified Aircraft Propulsion Systems: Potential Failure Modes and Failure Mitigation Strategies

Electrified aircraft propulsion (EAP) systems hold great potential for the reduction of aircraft fuel burn, emissions, and noise. Currently, NASA and other organizations are actively working to identify and mature technologies necessary to bring EAP designs to reality. A requirement for the development of any civil aircraft and its systems is to ensure that potential hazards in the design are identified and appropriately mitigated to ensure that the system is safe. During aircraft development, a system safety assessment that consists of a functional hazard assessment is conducted to identify all potential failure conditions of each function, and classify those failures according to the severity of their effects on the aircraft or its occupants. The more severe a function's failure condition classification, the greater the development assurance level required for the function to ensure that the probability of the hazard is acceptably low. Today, aircraft engines and their control systems receive type certificate approval as a stand-alone system to signify their airworthiness. However, the complex coupling and distributed nature of EAP designs are expected to place added challenges on the certification of these systems. This presentation will provide an initial high-level review of the potential failure modes and hazards posed by a generic EAP system along with potential mitigation strategies for those failures. The EAP system is assumed to be a hybrid design consisting of gas turbine engines, mechanical drives, electric machines, power electronics and distribution systems, energy storage devices, and motor driven propulsors. The functionality provided by each of these EAP subsystems will be discussed along with the potential failure modes they may encounter. This will include a discussion of coupled failure effects, where a fault in one EAP subsystem effects the operation of other subsystems in the architecture. Next, potential failure mitigation strategies are discussed including both software-based and hardware-based mitigation strategies. The presentation will conclude with an example evaluation of the potential failure modes and mitigation strategies for a concept EAP system proposed by NASA.

Simon, Donald L.↗