SEARCH · Engineering Papers

Results for “Redundant Designs”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records

All sources NASA NTRS DOE OSTI

NASA NTRS1974

Yield analysis of large capacity magnetic bubble circuits with redundancy design

The fabrication yield of an on-chip modifiable redundant circuit design for a 100M bit serial shift register is evaluated. The yield model is a redundancy design in which there is a primary loop and a set of secondary loops which can be enabled/disabled without introducing blanks to the data stream. This function has a finite yield, the loop-modification yield factor, which must be greater than 0.9 to make the system more economical than the simple nonredundant design. It is further established that small loop capacities greatly degrade the yield because of the effect of the modification yield factor, while large loop capacities degrade the yield because of defects in the operating area. As the modification yield increases the optimum loop capacity decreases. An optimum value for the number of redundant loops exists for each loop capacity. Other factors that affect the yield are the garnet film and the processed circuit.

Bailey, R. F.↗

NASA NTRSDate not supplied

Power System Redundancy Design Trends for All-Electric eVTOL Quadrotors

Electrical vertical takeoff and landing (eVTOL) vehicles promise to enable a variety of new local and intraregional air transport missions. However, there are significant challenges that must be solved to enable their use. One challenge is the relatively low reliability of power components (e.g. motors, power electronic devices, and batteries). No clear development path to create reliable eVTOL power systems has been articulated in the literature, though it is generally assumed redundancy is part of the solution. This work proposes an analysis process to examine the redundancy design space and select mass optimal designs for eVTOL power systems. The process is applied to a six passenger quadrotor vehicle, and results are used to highlight redundancy design trends for this class of vehicle. This process and associated data can help vehicle designers more effectively develop eVTOLs that meet reliability requirements.

Electric vertical takeoff and landing↗

NASA NTRSDate not supplied

Power System Redundancy Design Trends for All-Electric eVTOL Quadrotors

Electric vertical takeoff and landing↗

DOE OSTI2022

Availability and redundancy design considerations for Electron-Ion Collider cooling water systems and components

The Electron-Ion Collider (EIC) is composed of several large-scale systems, which all require highly available cooling systems based on the Conceptual Design Report. Since the overall EIC availability goal is 85%, all the subsystems will contribute. Availability is defined by the time that a component or system is functional given a required or scheduled run time. The focus of the project was to determine if redundant or extra cooling water and deionized water pumps were needed in a subsystem to increase the overall EIC availability. The largest subsystem in the ring is the 10 o’clock cooling system, so this was used for redundancy analysis. Relationships between the components were defined as parallel, series, or m-out-of-n for the cooling towers, valves, pumps and heat exchangers to perform calculations. A comparison between an original system versus a redundant one was then done using component availability from industry standards. Cost analysis was also performed to see how much the availability and cost would decrease if the redundancy application was not chosen. The Collider-Accelerator Department (CAD) also has a calculation in place for the Relativistic-Heavy Ion Collider (RHIC), so cooling water failure data was collected from their operational log and analyzed for real-life component availability. A comparison of component availability from the CAD data to the industry standards was made through the 10 o’clock cooling system layout. The results showed that the subsystems need to have over a 98% availability for an 85% goal, and that the CAD data is very close to the industry component standards. The cost differential is miniscule compared to the potential availability increase. Therefore, redundant systems can increase the overall EIC availability by a sizable amount and are worth implementing.

43 PARTICLE ACCELERATORS↗

DOE OSTI2020

HAZARD ANALYSIS OF DIGITAL ENGINEERED SAFETY FEATURES ACTUATION SYSTEM IN ADVANCED NUCLEAR POWER PLANTS USING A REDUNDANCY-GUIDED APPROACH

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. This paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the triggers of potential single points of failure in the design of digital safety systems in advanced plant designs.

46 INSTRUMENTATION RELATED TO NUCLEAR SCIENCE AND ↗

DOE OSTI2020

Hazard analysis for identifying common cause failures of digital safety systems using a redundancy-guided systems-theoretic approach

Replacing the existing aging analog instrumentation and control (I&C) systems with modern safety control and protection, digital technology offers one of the foremost means of performance improvements and cost reductions for the existing nuclear power plants (NPPs). However, the qualification of digital I&C systems remains a challenge, especially considering the issue of software common-cause failures (CCFs), which are difficult to address. With the application and upgrades of advanced digital I&C systems, software CCFs have become a potential threat to plant safety because most redundant designs use similar digital platforms or software in the operating and application systems. With complex designs of multilayer redundancy to meet the single-failure criterion, digital I&C safety systems (e.g., engineered safety-features actuation system [ESFAS]) are of a particular concern in the U.S. Nuclear Regulatory Commission (NRC) licensing procedures. Here, this paper applies a modularized approach to conduct redundancy-guided systems-theoretic hazard analysis for an advanced digital ESFAS with multilevel redundancy designs. Systematic methods and risk-informed tools are incorporated to address both hardware and software CCFs, which provide guidance to eliminate the causal factors of potential single points of failure in the design of digital safety systems in advanced plant designs.

42 ENGINEERING↗

DOE OSTI2021

INTEGRATED RISK ASSESSMENT OF DIGITAL I&C SAFETY SYSTEMS FOR NUCLEAR POWER PLANTS

Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems provides the foremost means to improve performance and reduce costs for existing light-water reactors (LWRs). However, qualification of digital technologies remains a challenge?especially the issue of software common cause failure (CCF), which has been difficult to address. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, software CCFs due to design flaws might become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multi-layer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission (NRC) licensing procedures. In 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy?s (DOE?s) Light Water Reactor Sustainability (LWRS) Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, secure DI&C technologies for digital upgrades/designs. An integrated risk assessment for the DI&C (RADIC) process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. This paper summarizes these RISA efforts in the risk analysis of safety-related DI& systems at Idaho National Laboratory.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2022

An Integrated Risk Assessment Process of Safety-Related Digital I&C Systems in Nuclear Power Plants

Upgrading the existing analog instrumentation and control (I&C) systems to state-of-the-art digital I&C (DI&C) systems will greatly benefit existing light water reactors. However, the issue of software common cause failure (CCF) remains an obstacle in terms of qualification for digital technologies. Existing analyses of CCFs in I&C systems mainly focus on hardware failures. With the application and upgrading of new DI&C systems, design flaws could cause software CCFs to become a potential threat to plant safety, considering that most redundancy designs use similar digital platforms or software in their operating and application systems. With complex multilayer redundancy designs to meet the single failure criterion, these I&C safety systems are of particular concern in U.S. Nuclear Regulatory Commission licensing procedures. In Fiscal Year 2019, the Risk-Informed Systems Analysis (RISA) Pathway of the U.S. Department of Energy’s Light Water Reactor Sustainability Program initiated a project to develop a risk assessment strategy for delivering a strong technical basis to support effective, licensable, and secure DI&C technologies for digital upgrades and designs. An integrated risk assessment for the DI&C process was proposed for this strategy to identify potential key digital-induced failures, implement reliability analyses of related digital safety I&C systems, and evaluate the unanalyzed sequences introduced by these failures (particularly software CCFs) at the plant level. Here this paper summarizes these RISA efforts in the risk analysis of safety-related DI&C systems at Idaho National Laboratory.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

NASA NTRS1987

Steering Law Design for Redundant Single Gimbal Control Moment Gyro Systems

The correspondence between robotic manipulators and single gimbal Control Moment Gyro (CMG) systems was exploited to aid in the understanding and design of single gimbal CMG Steering laws. A test for null motion near a singular CMG configuration was derived which is able to distinguish between escapable and unescapable singular states. Detailed analysis of the Jacobian matrix null-space was performed and results were used to develop and test a variety of single gimbal CMG steering laws. Computer simulations showed that all existing singularity avoidance methods are unable to avoid Elliptic internal singularities. A new null motion algorithm using the Moore-Penrose pseudoinverse, however, was shown by simulation to avoid Elliptic type singularities under certain conditions. The SR-inverse, with appropriate null motion was proposed as a general approach to singularity avoidance, because of its ability to avoid singularities through limited introduction of torque error. Simulation results confirmed the superior performance of this method compared to the other available and proposed pseudoinverse-based Steering laws.

Bedrossian, Nazareth Sarkis↗

NASA NTRS1978

Verification of redundancy management design

Statistical method checks designs by simulating system operating conditions and adding error factors. Method has potential applicability to commercial and industrial situations where redundancy management system is used to detect and isolate failed components.

Gelderloos, H. C.↗

NASA NTRS1977

Design of redundant systems

Algorithmic approach is useful for analysis of systems with noisy inputs and when outputs are required in terms of statistical quantities and probabilities of signal excursions beyond desired levels. Procedure can be used with circuits, chemical processes, material design, and other systems with known transfer functions and parameter tolerances.

Doty, L. F.↗

NASA NTRS1990

Steering law design for redundant single-gimbal control moment gyroscopes

Two steering laws are presented for single-gimbal control moment gyroscopes. An approach using the Moore-Penrose pseudoinverse with a nondirectional null-motion algorithm is shown by example to avoid internal singularities for unidirectional torque commands, for which existing algorithms fail. Because this is still a tangent-based approach, however, singularity avoidance cannot be guaranteed. The singularity robust inverse is introduced as an alternative to the pseudoinverse for computing torque-producing gimbal rates near singular states. This approach, coupled with the nondirectional null algorithm, is shown by example to provide better steering law performance by allowing torque errors to be produced in the vicinity of singular states.

Bedrossian, Nazareth S.↗

NASA NTRS1980

HEAO - Signature of a successful space science program

The HEAO (High Energy Astronomy Observatory) Program consists of three large automated scientific observatories launched between 1977 and 1979 to observe from near-earth orbit stellar X-ray and gamma-ray sources and to measure incoming cosmic ray particles. The HEAO-2 and HEAO-3 spacecraft are expected to exceed their design lifetimes by a factor of three, as did HEAO-1, which operated for 18 months. All three missions are considered successful in that target dates have essentially been met, launch and flight operations have been relatively smooth, instrumentation has performed well, and there have been no cost overruns. The paper lists ten factors contributing to the missions' success, among them a thorough definition before program start, commonality of spacecraft design, redundancy of mission critical equipment, ample design margins, and tight control of system changes. Specific mission parameters are included in the paper as well as the technological advances engendered by the HEAO Program in such areas as high-resolution X-ray optics and solid-state spectrometry.

Speer, F. A.↗

NASA NTRS2007

Evolution of the Space Station Robotic Manipulator

The Space Station Remote Manipulator System (SSRMS), Canadarm2, was launched in 2001 and deployed on the International Space Station (ISS). The Canadarm2 has been instrumental in ISS assembly and maintenance. Canadarm2 shares its heritage with the Space Shuttle Arm (Canadarm). This article explores the evolution from the Shuttle Canadarm to the Space Station Canadarm2 design, which incorporates a 7 degree of freedom design, larger joints, and changeable operating base. This article also addresses phased design, redundancy, life and maintainability requirements. The design of Canadarm2 meets unique ISS requirements, including expanded handling capability and the ability to be maintained on orbit. The size of ISS necessitated a mobile manipulator, resulting in the unique capability of Canadarm2 to relocate by performing a walk off to base points located along the Station, and interchanging the tip and base of the manipulator. This provides the manipulator with reach and access to a large part of the Station, enabling on-orbit assembly of the Station and providing support to Extra-Vehicular Activity (EVA). Canadarm2 is evolving based on on-orbit operational experience and new functionality requirements. SSRMS functionality is being developed in phases to support evolving ISS assembly and operation as modules are added and the Station becomes more complex. Changes to sustaining software, hardware architecture, and operations have significantly enhanced SSRMS capability to support ISS mission requirements. As a result of operational experience, SSRMS changes have been implemented for Degraded Joint Operations, Force Moment Sensor Thermal Protection, Enabling Ground Controlled Operations, and Software Commutation. Planned Canadarm2 design modifications include: Force Moment Accommodation, Smart Safing, Separate Safing, and Hot Backup. In summary, Canadarm2 continues to evolve in support of new ISS requirements and improved operations. It is a tribute to the design that this evolution can be accomplished while conducting critical on-orbit operations with minimal hardware changes.

Razvi, Shakeel↗

NASA NTRS1985

Intelligent redundant actuation system requirements and preliminary system design

Several redundant actuation system configurations were designed and demonstrated to satisfy the stringent operational requirements of advanced flight control systems. However, this has been accomplished largely through brute force hardware redundancy, resulting in significantly increased computational requirements on the flight control computers which perform the failure analysis and reconfiguration management. Modern technology now provides powerful, low-cost microprocessors which are effective in performing failure isolation and configuration management at the local actuator level. One such concept, called an Intelligent Redundant Actuation System (IRAS), significantly reduces the flight control computer requirements and performs the local tasks more comprehensively than previously feasible. The requirements and preliminary design of an experimental laboratory system capable of demonstrating the concept and sufficiently flexible to explore a variety of configurations are discussed.

Defeo, P.↗

DOE OSTI2025

Operation at Reduced Atmospheric Pressure and Concept of Reliability Redundancy for Optimized Design of Insulation Systems

Electrified transportation is calling for insulation design criteria that is adequate to provide elevated levels of power density, power dynamics and reliability. Increasing voltage levels are expected to cause accelerated intrinsic and extrinsic aging effects which will not be easily predictable at the design stage due to a lack of suitable modeling. Designing reliable insulation systems would require finding solutions able to control accelerated aging due to an unpredictable increase of intrinsic stresses and the onset of extrinsic stresses as partial discharges. This paper proposes the concept of reliability redundancy for the insulation design of aerospace electrical asset components, which is also validated at lower-than-standard atmospheric pressure. The principle is that extrinsic-aging-free design might be achieved upon determining the aging stress or abnormal service stresses distribution and being sure that aging will not generate conditions that can incept extrinsic aging (partial discharges) during operation life. However, such information is never, in practice, fully available to insulation system designers. Hence, especially in critical applications such as electrified aircraft, aerospace, and combat ships a further level of reliability should be added to a partial-discharge-free design, which can consist of the use of corona-resistant materials and/or of life models able to consider the accelerated aging effect of partial discharges (or any other type of extrinsic-accelerated aging factor). Innovative life modeling considering both extrinsic and intrinsic aging stresses, insulating material testing to estimate model parameters, and a metric for quantifying the extent of corona (or partial discharge) resistance can lead to establishing feasibility and limit conditions for optimized or fully reliability-redundant design. It is shown in the paper that if an extrinsic-aging-free design is not feasible, and it is therefore replaced by a redundant design, a further level of reliability redundancy can be provided by effective condition monitoring plans.

Montanari, Gian Carlo↗

NASA NTRS2016

Flat H Redundant Frangible Joint Development

Orion and Commercial Crew Program (CCP) Partners have chosen to use frangible joints for certain separation events. The joints currently available are zero failure tolerant and will be used in mission safety applications. The goal is to further develop a NASA designed redundant frangible joint that will lower flight risk and increase reliability. FY16 testing revealed a successful design in subscale straight test specimens that gained efficiency and supports Orion load requirements. Approach / Innovation A design constraint is that the redundant joint must fit within the current Orion architecture, without the need for additional vehicle modification. This limitation required a design that changed the orientation of the expanding tube assemblies (XTAs), by rotating them 90deg from the standard joint configuration. The change is not trivial and affects the fracture mechanism and structural load paths. To address these changes, the design incorporates cantilevered arms on the break plate. The shock transmission and expansion of the XTA applies force to these arms and creates a prying motion to push the plate walls outward to the point of structural failure at the notched section. The 2014 test design revealed that parts could slip during functioning wasting valuable energy needed to separate the structure with only a single XTA functioning. Dual XTA functioning fully separated the assembly showing a discrepancy can be backed up with redundancy. Work on other fully redundant systems outside NASA is limited to a few patents that have not been subjected to functionality testing Design changes to prevent unwanted slippage (with ICA funding in 2015) showed success with a single XTA. The main goal for FY 2016 was to send the new Flat H RFJ to WSTF where single XTA test failures occurred back in 2014. The plan was to gain efficiency in this design by separating the Flat H RFJ with thicker ligaments with dimensions baselined in 2014. Other modifications included geometry changes to better disperse loads paths and to minimize air gaps. The design additionally added more structural strength to enhance the structural limits in static loads testing. The design also implemented a smoother load line through the assembly. Results / Knowledge Gained The new Flat H RFJ successfully fractured at WSTF with thicker ligaments and lower cord size. Where failure to separate occurred earlier, there is now excessive energy available for structural separation. The new challenge to provide some structural support to prevent secondary fracturing of the break plate remains to be completed. This future work is being funded by the JSC Engineering Directorate in 2017 to elevate the TRL on curved Flat H RFJs that configure with the Orion Service Panel Separation. Additional funding from JSC Engineering will provide new design testing to avoid secondary fracturing.

Brown, Chris↗

NASA NTRS1976

Preliminary design of a redundant strapped down inertial navigation unit using two-degree-of-freedom tuned-gimbal gyroscopes

This redundant strapdown INS preliminary design study demonstrates the practicality of a skewed sensor system configuration by means of: (1) devising a practical system mechanization utilizing proven strapdown instruments, (2) thoroughly analyzing the skewed sensor redundancy management concept to determine optimum geometry, data processing requirements, and realistic reliability estimates, and (3) implementing the redundant computers into a low-cost, maintainable configuration.

Source record↗