Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “containment assurance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 19 records
All sourcesNASA NTRSDOE OSTI
NASA NTRSDate not supplied

The Containment Assurance Risk Framework of the Mars Sample Return Program

The Mars Sample Return campaign aims at bringing rock and atmospheric samples from Mars to Earth through a series of robotic missions. These missions would collect the samples being cached and deposited on Martian soil by the Perseverance rover, place them in a container, and launch them into Martian orbit for subsequent capture by an orbiter that would bring them back. Given there exists a non-zero probability that the samples contain biological material, precautions are being taken to design systems that would break the chain of contact between Mars and Earth. These include techniques such as sterilization of Martian particles, redundant containment vessels, and a robust reentry capsule capable of accurate landings without a parachute. Requirements exist that the probability of containment not assured of Martian-contaminated material into Earth’s biosphere be less than one in a million. To demonstrate compliance with this strict requirement, a statistical framework was developed to assess the likelihood of containment loss during each sample return phase and make a statement about the total combined mission probability of containment not assured. The work presented here describes this framework, which considers failure modes or fault conditions that can initiate failure sequences ultimately leading to containment not assured. Reliability estimates are generated from databases, design heritage, component specifications, or expert opinion in the form of probability density functions or point estimates and provided as inputs to the mathematical models that simulate the different failure sequences. The probabilistic outputs are then combined following the logic of several fault trees to compute the ultimate probability of containment not assured. Given the multidisciplinary nature of the problem and the different types of mathematical models used, the statistical tools needed for analysis are required to be computationally efficient. While standard Monte Carlo approaches are used for fast models, a multi-fidelity approach to rare event probabilities is proposed for expensive models. In this paradigm, inexpensive low-fidelity models are developed for computational acceleration purposes while the expensive high-fidelity model is kept in the loop to retain accuracy in the results. This work presents an example of end-to-end application of this framework highlighting the computational benefits of a multi-fidelity approach.

Giuseppe Cataldo↗
NASA NTRS2000

A Reliable Earth Return System for Safe Recovery of Mars Samples

The objective of a Mars sample return mission is to bring selected Mars surface materials to Earth. Numerous approaches for the Earth-return segment have been analyzed including propulsive or aerocapture return to low-Earth orbit followed by Space Shuttle rendezvous and direct entry. Of these approaches, ballistic entry of a small capsule terminating in a ground landing has been shown to be the lowest risk strategy. Over the past two years, significant work has been performed towards development of a robust direct entry vehicle for Mars sample return. In June 1999, the NASA Planetary Protection Officer provided initial guidance to the former Mars Sample Return Project. The sample return phase of the mission was assigned a restricted Earth return planetary protection classification. The draft mission requirement states that the total mean probability of release of unsterilized Mars material into the Earth;s biosphere must be less than 1.0E-06 (1 in a million). This strict requirement drives the approach and design of the Earth return system. To meet this requirement, selection of the Earth return strategy and development of the Earth return system must be guided by risk, not performance, based decisions. An initial Probabilistic Risk Assessment (PRA) was performed to address the direct entry Earth return system containment assurance reliability and to identify high-risk elements of this system. The results of this PRA identified risk elements that include thermal protection system performance during entry, spin-eject orientation and aerodynamic stability during entry, structural integrity under atmospheric deceleration and impact loads, and tracking/recovery of this system. This initial probabilistic risk quantification demonstrates that, with the proper development program, a prototypical direct entry design can satisfy the containment assurance reliability requirement. Through the current Mars Sample Return Advanced Technology Development effort, an extensive design, analysis, and test program is presently proceeding with the aim of reducing the containment assurance risk of this system. This technology development effort, guided by a continuing PRA, focuses on key risk areas of a direct entry Earth return system including: the thermal protection system, impact dynamics, structural performance, aerodynamic stability, and ground recovery. This development program will culminate in a system validation flight test, 1-2 years prior to launch of the flight system. This flight test would include the launch, entry, and recovery of a full-scale Earth return system, as a scientific validation of the key risk elements to verify nominal design performance. The results of the initial PRA suggested several dominant failure sequences that can be validated in a flight test. These include: demonstrating the thermal protection system reliability and performance during entry, demonstrating the spin-eject orientation and aero-dynamic stability during entry, demonstrating the structural integrity under atmospheric deceleration and impact loads, and demonstrating tracking and recovery of the Earth return system. This single test will directly address over 50% of the total containment assurance risk elements. This presentation will begin by presenting the relative risk of various Earth return strategies. The results of the initial probabilistic risk assessment will be presented followed by a discussion of the development accomplishments and plans for demonstration of a highly reliable direct entry Earth return system.

Braun, R.↗
NASA NTRS2021

Sample Return Container Opening Process Concept for Potential Mars Sample Return

Proposed Mars Sample Return (MSR) missions would require a pristine and secure opening method to ensure sample Contamination Control and backward Planetary Protection. In order to reach the samples, a series of five containers would need to be opened inside of a Mars Returned Sample Handling (MRSH) facility. The process would include opening the Containment Assurance Module (CAM) aboard the Earth Entry Vehicle (EEV), the Secondary Containment Vessel (SCV), Primary Containment Vessel (PCV), and the Orbiting Sample (OS) container, and finally removing and opening the Returned Sample Tube Assemblies (RSTA). Some of these containers can be opened by reversing the mechanical assembly process while others would require destructive means. Several containers are still in a conceptual design phase while others are en route to Mars aboard the M2020 rover. In order to inform the design of the containers that are still in the conceptual stages, a study was performed at each level of the containment assembly. The studies were used to determine the least destructive and most robust methods to disassemble and open the containers while minimizing risk to the samples or the personnel. In addition to the envisioned disassembly and breaching method, contingency plans were made for completing the disassembly if damage to the vehicle and containment system occurred.

Liu, Yang↗
NASA NTRS2005

Planetary Protection Technology for Mars Sample Return

The NASA Mars Exploration Program has recently adopted a plan that includes a first Mars sample return (MSR) mission proposed for launch in 2013. Such a mission would deal with two new categories of planetary protection requirements: (1) assuring a very low probability of inadvertent release of the sample in order to provide extra protection against the extremely unlikely possibility of biological hazards in the returned material and (2) keeping the samples free of round-trip Earth organisms to facilitate confirmation of safety after return to Earth. This paper describes the planetary-protection-related technical challenges awaiting any MSR mission and describes work in progress on technology needed to meet these challenges. New technology is needed for several functions. Containment assurance requires breaking the chain of contact with Mars: the exterior of the sample container must not be contaminated with Mars material either during the loading process or during launch from the Mars surface.

planetary protection↗
NASA NTRS1981

The laboratory module

Of the five modules comprising the Orbiting Quarantine Facility, the Laboratory Module must provide not only an extensive research capability to permit execution of the protocol, but also the flexibility to accommodate second-order testing if nonterrestrial life is discovered in the sample. The biocontainment barriers that protect the sample and the researchers from cross contamination are described. Specifically, the laboratory layout, laboratory equipment, the environmental control and life support system, and containment assurance procedures are discussed. The metal manipulation arm proposed for use within the biocontainment cabinets is described. Sample receipt and processing procedures are outlined.

Source record↗
NASA NTRS2001

An Earth Entry Vehicle For Returning Samples From Mars

The driving requirement for design of a Mars Sample return mission is assuring containment of the returned samples. The impact of this requirement on developmental costs, mass allocation, and design approach of the Earth Entry Vehicle is significant. A simple Earth entry vehicle is described which can meet these requirements and safely transport the Mars Sample Return mission's sample through the Earth's atmosphere to a recoverable location on the surface. Detailed analysis and test are combined with probabilistic risk assessment to design this entirely passive concept that circumvents the potential failure modes of a parachute terminal descent system. The design also possesses features that mitigate other risks during the entry, descent, landing and recovery phases. The results of a full-scale drop test are summarized.

Mitcheltree, R.↗
NASA NTRS2000

Earth Entry Vehicle for Mars Sample Return

The driving requirement for design of a Mars Sample return mission is assuring containment of the returned samples. The impact of this requirement on developmental costs, mass allocation, and design approach of the Earth Entry Vehicle is significant. A simple Earth entry vehicle is described which can meet these requirements and safely transport the Mars Sample Return mission's sample through the Earth's atmosphere to a recoverable location on the surface. Detailed analysis and test are combined with probabilistic risk assessment to design this entirely passive concept that circumvents the potential failure modes of a parachute terminal descent system. The design also possesses features that mitigate other risks during the entry, descent, landing and recovery phases. The results of a full-scale drop test are summarized.

Mitcheltree, R. A.↗
NASA NTRS2002

Probabilistic Design of a Mars Sample Return Earth Entry Vehicle Thermal Protection System

The driving requirement for design of a Mars Sample Return mission is to assure containment of the returned samples. Designing to, and demonstrating compliance with, such a requirement requires physics based tools that establish the relationship between engineer's sizing margins and probabilities of failure. The traditional method of determining margins on ablative thermal protection systems, while conservative, provides little insight into the actual probability of an over-temperature during flight. The objective of this paper is to describe a new methodology for establishing margins on sizing the thermal protection system (TPS). Results of this Monte Carlo approach are compared with traditional methods.

Dec, John A.↗
NASA NTRSDate not supplied

The Planetary Protection Strategy of the Earth Return Orbiter–Capture, Containment & Return System in the Context of the Mars Sample Return Campaign

The Mars Sample Return Campaign aims at bringing back to Earth the rock and atmospheric samples that the rover Perseverance has started to collect on the surface of Mars with the goal of analyzing them in a facility built specifically for this purpose to answer questions about the habitability of Mars. The Campaign consists of several missions, including the Earth Return Orbiter–Capture, Containment & Return System (ERO-CCRS), which will capture the samples previously put in Martian orbit, contain them in redundant containers to ensure that no unsterilized particles are released, and return them to Earth through a parachute-less entry vehicle. Both NASA and ESA policies address the United Nations’ Outer Space Treaty by addressing potential harm from material returned from solar system bodies beyond the Earth-Moon system. In the conduct of Mars Sample Return, the two agencies have agreed to apply approaches consistent with their own standards to campaign elements each provides. This work presents the overall strategy for both forward and backward planetary protection for the ERO-CCRS mission. Specifically, for forward planetary protection, CCRS is not required to meet specific bioburden requirements as a Category III mission provided the ERO (1) meets orbital lifetime requirements during orbiter operations and (2) any elements jettisoned at Mars meet orbital lifetime requirements. CCRS is required to be built in ISO-8 or better cleanrooms and, by agreement with ERO, be compatible with direct bioburden verification methods. For backward planetary protection, the overall approach includes building robust, highly reliable systems to prevent inadvertent release of unsterilized Mars material through redundant containment vessels and particle transport analyses. Ongoing work to define verification approaches and quantify containment assurance levels for specific sample return systems will also be discussed, along with how those data will inform launch approval for ERO-CCRS.

Giuseppe Cataldo↗
NASA NTRSDate not supplied

Overview of Micrometeoroid and Orbital Debris Analysis Process for Mars Sample Return Earth Entry System

Introduction: Micrometeoroid and orbital debris (MMOD) risk analyses for the Mars Sample Return (MSR) Earth Entry System (EES) have been significantly more rigorous than previously flown missions because of its categorization as a Class V restricted return mission. This means the returned samples present significant concern for biogenic contamination. These analyses seek to determine if a micrometeoroid or orbital debris strike would result in loss of containment assurance and are summarized in the flowchart in Fig. 1. Methodology: The mission is considered in two MMOD phases: a pre-release phase where the EES is protected by a Micrometeoroid Protection System (MMPS) and a post-release phase called “free-flight” where the EES is exposed directly to the MMOD environment. These phases correspond to interplanetary cruise and imminent re-entry, respectively. To inform the MMPS design, a 30-shot high velocity impact testing (HVIT) series on candidate configurations at NASA White Sands Test Facility was completed in the summer of 2022. Sample post-shot images are shown in Fig 2 [1]. These data are used to baseline the MMPS design and to tune the hydrocode simulations. ALE3D, CTH, and SPHC are the hydrocodes that simulate physics of high-speed impacts [2]. Results generated with these populate a penetration depth versus energy space beyond the testable velocity regime of HVIT (~7 km/s). The penetration depth versus energy space data are used to define a critical projectile diameter function called a Ballistic Limit Equation (BLE), where the projectile “criticality” is determined by zone dependent failure criteria defined a-priori [3]. For example, the nose of the heatshield has a failure criterion of 50% TPS penetration, assigned because the landing loads are concentrated on that region and no substructure damage is permitted. The BLEs for each vehicle material zone are input into the BUMPER 3 code, along with the vehicle surface mesh and the corresponding space environment model, to calculate a probability of penetration or number of penetrations. The environment models, MEM3 for MM and ORDEM 3.2 for OD, simulate the meteoroid environment from 0.2 to 2 au based on the Grün flux equation, and the debris environment up to 40,000 km altitude from Earth surface, respectively [4,5]. Presentation Focus: The presentation or poster will present the results to-date focusing on the full risk analysis process flow seen in Fig. 1. Details on the derivation of the failure criteria will be discussed, along with HVIT results and how these influenced the MMPS configuration baseline decision. Further, results of hydrocode simulations will be presented and the tuning to HVIT outputs will be described. Finally, the strategies that direct the BLE formulation will be reviewed, specifically, for the EES elements that are most exposed to the MMOD environment.

mmod↗
NASA NTRSDate not supplied

Atmosphere Modeling and Performance Sensitivity for the Mars Sample Return Earth Entry System

The Capture, Containment, and Return System (CCRS) mission is a key element of the joint NASA-European Space Agency (ESA) planned Mars Sample Return (MSR) Campaign. The CCRS assembled Earth Entry System (EES) will enter the mission’s final segment in its Approach, Entry, Descent, and Landing (AEDL) Phase. The EES AEDL aims to deliver a highly reliable, safe, and accurate return while maintaining strict containment assurance targets established by the campaign. As currently designed, the EES would be the first fully passive sample return capsule with no parachute or onboard control system, prompting a significant effort in Earth atmosphere characterization and modeling. Earth’s atmosphere, specifically winds, have a strong influence on EES flight mechanics and landing footprint during its free fall landing. This paper describes Earth atmosphere modeling, atmosphere characterization, and performance sensitivities incorporated into the teams’s efforts to ensure AEDL success. By utilizing high resolution balloon radiosondes, analyzing wind structural and distributional compositions, and investigating flight mechanics sensitivities, the AEDL atmosphere team has been able to better understand and simulate local wind conditions at the Utah Test and Training Range (UTTR). Utilizing tools such as horizontal turbulent kinetic energy, vertical wind shear, or integrated wind, the team have been able to reveal valuable information about wind profiles in a deeper context than previously conducted, ultimately improving understanding of AEDL flight mechanics sensitivity and EES design.

Kaustubh Ray↗
NASA NTRS2001

Facility Concepts for Mars Returned Sample Handling

Samples returned from Mars must be held in quarantine until their biological safety has been determined. A significant challenge, unique to NASA's needs, is how to contain the samples (to protect the blaspheme) while simultaneously protecting their pristine nature. This paper presents a comparative analysis of several quarantine facility concepts for handling and analyzing these samples. The considerations in this design analysis include: modes of manipulation; capability for destructive as well as non-destructive testing; avoidance of cross-contamination; linear versus recursive processing; and sample storage and retrieval within a closed system. The ability to rigorously contain biologically hazardous materials has been amply demonstrated by facilities that meet the specifications of the Center for Disease Control Biosafety Level 4. The newly defined Planetary Protection Level Alpha must provide comparable containment while assuring that the samples remain pristine; the latter requirement is based on the need to avoid compromising science analyses by instrumentation of the highest possible sensitivity (among other things this will assure that there is no false positive detection of organisms or organic molecules - a situation that would delay or prevent the release of the samples from quarantine). Protection of the samples against contamination by terrestrial organisms and organic molecules makes a considerable impact upon the sample handling facility. The use of glove boxes appears to be impractical because of their tendency to leak and to surges. As a result, a returned sample quarantine facility must consider the use of automation and remote manipulation to carry out the various functions of sample handling and transfer within the system. The problem of maintaining sensitive and bulky instrumentation under the constraints of simultaneous sample containment and contamination protection also places demands on the architectural configuration of the facility that houses it.

Cohen, Marc M.↗
NASA NTRSDate not supplied

Mars Sample Return – An Overview of the Capture, Containment and Return System

The Mars Sample Return campaign aims at bringing back soil, rock and atmospheric samples from Mars to Earth to answer key questions about Mars’ biological evolution by means of four missions. The first one, Mars 2020, landed on the red planet on February 18, 2021 and has to date collected a number of samples through the Perseverance rover. The three subsequent missions will recover the sample tubes, launch them into Mars orbit and transport them back to Earth. These missions are currently in the planning and design stages of development and represent an international effort comprising NASA, ESA and many industry partners. The work presented here provides an overview of the current design and concept of operations of the NASA-provided Capture, Containment, and Return System (CCRS), which is the payload of the ESA-provided Earth Return Orbiter (ERO). ERO will rendezvous with the orbiting samples and CCRS will capture them, contain them and robotically insert them into a capsule that will return the samples to Earth, the Earth Entry System (EES). Three days before arrival on Earth, CCRS will release the EES, which will fly through space, enter Earth’s atmosphere, descend on a well-defined trajectory and safely land at the Utah Test and Training Range. The decision to implement Mars Sample Return will not be finalized until NASA’s completion of the National Environmental Policy Act process. This document is being made available for information purposes only.

Mars Sample Return↗
NASA NTRS1981

Analysis of SPAR 8 single-axis levitation experiment

The melting and resolidification of SPAR 8 payload melting and resolidification of a glass specimen from the in a containerless condition and the retrieval and examination of the specimen from the. The absence of container contact was assured by use of a single-axis acoustic levitation system. However, the sample contacted a wire cage after being held without container contact by the acoustic field for only approximately 87 seconds. At this time, the sample was still molten and, therefore, flowed aroung the wire and continued to adhere to it. An analysis of why the sample did not remain levitated free of container contact is presented. The experiment is described, and experimental observations are discussed and analyzed.

Rush, J. E.↗
NASA NTRS2024

Recommendations on Evidence and Process for Certification of Learning-enabled Components in Aerospace Systems

This report primarily identifies a collection of relevant and necessary evidence for assurance of machine learnt components (MLCs)—also known as learning-enabled components—integrated into aircraft systems, and gives preliminary suggestions on the elements of a certification process that invoke the identified evidence. The main focus is on feedforward neural networks that are static and trained offline through supervised learning. A brief background on the generic elements of the lifecycle of an MLC is given to contextualize the assurance considerations and, consequently, the evidence that is relevant and necessary to support certification. At the level of an MLC, those considerations relate to: (i) the consistency and correctness of MLC contributions to system functions in the context of a validated functional intent; and (ii) the absence of MLC contributions to aircraft-level failure conditions. At an ML model level, confidence in model and data properties contribute to assurance of the containing MLC, in particular: (a) generalizability and robustness of models, in the presence of inputs not previously seen during training, disturbances to inputs, and unexpected inputs; and (b) valid data, i.e., data that are at least representative, relevant, complete, and accurate. Evidence for the above span the elements of the ML lifecycle, and includes, at a minimum, lifecycle artifacts that pertain to: (1) properties of requirements capturing functional intent, safety constraints, and aspects of the intended use and operating environment; (2) model performance, model complexity and design, and algorithm choice; (3) achievement of required performance at the levels of a trained model during model development, a trained model after model development is complete, and a trained model that is transformed into an executable equivalent; (4) model implementation aspects necessary for transforming a trained model into the executable equivalent; (5) integration of the executable trained model into the containing MLC, and eventually the larger system; and, (6) lastly, the verification and validation (V&V) of each of the above. Such V&V lifecycle artifacts themselves include: aspects of coverage, e.g., of various levels of requirements by the input space of the model and the data; traceability (where applicable); application of formal methods for property specification, analysis, and checking. Examples of evidence generation methods and tools further ground the discussion on what constitutes evidence, and the contribution to assurance during certification. The identified assurance considerations and supporting evidence is not a comprehensive set. Additionally, neither what should be considered as sufficient evidence relative to the assigned criticality of an MLC, nor how criticality ought to be determined and adjusted, have been considered in this report. However, suggestions are made for potential activities of the ML lifecycle that are aimed at providing confidence that an MLC can be relied upon when integrated into its containing (aircraft) system. Those activities are proposed as candidate elements of a certification process for MLCs. The main purpose of this report to inform regulatory guidance and consensus standards that may be used to meet the safety intent of the applicable regulations.

Aviation safety↗