Engineering PapersSearch

SEARCH · Engineering Papers

Results for “hazard analysis and control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

Application of System-Theoretic Process Analysis (STPA) to a NASA Concept Electric Aircraft Battery System

System-Theoretic Process Analysis (STPA) is a systems-based hazard analysis method that identifies unsafe interactions and control deficiencies in complex systems but has been rarely used for NASA programs in favor of more well-established hazard analyses. To evaluate its applicability, a NASA Safety and Mission Assurance (SMA) team applied the STPA method to an early-stage hybrid electrified aircraft concept, focusing on the energy storage system and electric powertrain. Objectives include assessing STPA’s value relative to traditional methods and its suitability for early design phases. Activities include team training, system review, detailed STPA execution, and comparison with traditional analyses. Findings show STPA provides a structured, comprehensive hazard evaluation and can identify additional risks by expanding analysis boundaries. However, traditional methods can yield similar results when applied rigorously, though they typically require more mature designs. Overall, STPA is a valuable addition, particularly for early development, informing safety requirements and supporting preliminary hazard analyses. Further pilot applications are recommended.

Electric Aviation

Crewed Space Vehicle Battery Safety Requirements

This requirements document is applicable to all batteries on crewed spacecraft, including vehicle, payload, and crew equipment batteries. It defines the specific provisions required to design a battery that is safe for ground personnel and crew members to handle and/or operate during all applicable phases of crewed missions, safe for use in the enclosed environment of a crewed space vehicle, and safe for use in launch vehicles, as well as in unpressurized spaces adjacent to the habitable portion of a space vehicle. The required provisions encompass hazard controls, design evaluation, and verification. The extent of the hazard controls and verification required depends on the applicability and credibility of the hazard to the specific battery design and applicable missions under review. Evaluation of the design and verification program results shall be completed prior to certification for flight and ground operations. This requirements document is geared toward the designers of battery systems to be used in crewed vehicles, crew equipment, crew suits, or batteries to be used in crewed vehicle systems and payloads (or experiments). This requirements document also applies to ground handling and testing of flight batteries. Specific design and verification requirements for a battery are dependent upon the battery chemistry, capacity, complexity, charging, environment, and application. The variety of battery chemistries available, combined with the variety of battery-powered applications, results in each battery application having specific, unique requirements pertinent to the specific battery application. However, there are basic requirements for all battery designs and applications, which are listed in section 4. Section 5 includes a description of hazards and controls and also includes requirements.

Jeevarajan, Judith A.

Proper battery system design for GAS experiments

The purpose of this paper is to help the GAS experimenter to design a battery system that meets mission success requirements while at the same time reducing the hazards associated with the battery system. Lead-acid, silver-zinc and alkaline chemistry batteries will be discussed. Lithium batteries will be briefly discussed with emphasis on back-up power supply capabilities. The hazards associated with different battery configurations will be discussed along with the controls necessary to make the battery system two-fault tolerant.

Calogero, Stephen A.

Planning for Execution Monitoring on A Planetary Rover

A planetary rover will be traversing largely unknown and often unknowable terrain. In addition to geometric obstacles such as cliffs, rocks, and holes, it may also have to deal with non-geometric hazards such as soft soil and surface breakthroughs which often cannot be detected until rover is in imminent danger. Therefore, the rover must monitor its progress throughout a traverse, making sure to stay on course and to detect and act on any previously unseen hazards. Its onboard planning system must decide what sensors to monitor, what landmarks to take position readings from, and what actions to take if something should go wrong. The planning systems being developed for the Pathfinder Planetary Rover to perform these execution monitoring tasks are discussed. This system includes a network of planners to perform path planning, expectation generation, path analysis, sensor and reaction selection, and resource allocation.

Erann Gat

Some Experiments on the Passage of High-Energy Protons in Dense Matter

A series of experiments designed to study the nuclear cascade resulting from the passage of 1 to 3 GeV protons in matter has been in progress at the Brookhaven Cosmotron. Preliminary results on the fluxes of fast neutrons (upper limits) and of strongly interacting particles above 50 MeV are summarized here (Fig. 1 and Table 1). The four cases studied are: 1-GeV protons on Fe, on chondritic material, and on C 5 H 8 O 2 , and 3-GeV protons on Fe.

Proton Irradiation

Biocybernetic Closed-Loop System for Mitigating Hazardous States of Awareness

The past century of passenger flight has seen continuous improvement in aviation safety by the aerospace industry. However, while commercial aviation accident rates have continued to decline, human error-related incident and accident rates remain remarkably constant across all types of aviation (Shappell, et al., 2007). Unfortunately, this level of human error is unacceptable when considering projections for increased traffic volume (FAA, 2009), and is likely to yield more incidents and accidents unless a more complete understanding of operator error is achieved and remediations are implemented. One area of interest highlighted by researchers is Hazardous States of Awareness (HSAs) that can result from deficiencies in the design and inappropriate use of human-machine interfaces. Identifying and mitigating HSAs is critical for reducing operator errors. One promising approach uses psychophysiological measures which enable automated systems to adapt to the operator?s state and modify modes of operation to support optimal human performance (Scerbo, 2007). This paper will survey previous research and describe future directions for the application of psychophysiological measures of operators derived from cortical and autonomic assessment to perform real-time adaptive modulation of human-automation task mode mixes. The authors will present a summary of previous work done at NASA LaRC and Old Dominion University using a Psychophysiologically Adaptive System (PAS) in which the level of automation of the NASA Multi-Attribute Task Battery was modulated based on Engagement Indices derived from the users? electroencephalogram (Pope, Bogart, & Bartolome, 1995; for review see, Scerbo, Freeman, & Mikulka, 2003). Future theoretical and methodological directions for this type of closed-loop research will be discussed. Specifically, the capacity for this type of PAS to maintain effective operator state and to enable validation of candidate physiological indices will be described. Consideration will also be given to critical system characteristics (e.g., engagement indices, methods for invoking changes among system states, individual differences among users, etc.) that have been or still need to be studied. The potential of the PAS approach for interactive system design and prototyping will also be described. Examples of adaptive automation flight deck concepts in recent experiments will be highlighted and discussed.

Chad L Stephens

Primary battery design and safety guidelines handbook

This handbook provides engineers and safety personnel with guidelines for the safe design or selection and use of primary batteries in spaceflight programs. Types of primary batteries described are silver oxide zinc alkaline, carbon-zinc, zinc-air alkaline, manganese dioxide-zionc alkaline, mercuric oxide-zinc alkaline, and lithium anode cells. Along with typical applications, the discussions of the individual battery types include electrochemistry, construction, capacities and configurations, and appropriate safety measures. A chapter on general battery safety covers hazard sources and controls applicable to all battery types. Guidelines are given for qualification and acceptance testing that should precede space applications. Permissible failure levels for NASA applications are discussed.

Bragg, Bobby J.

Manned Mars Systems Study

A study is underway to determine attractive system options, perform trade studies, and provide comparative data for astronaut missions to Mars. Because of an emphasis in this work on deriving requirements and candidates for the transportation and facility infrastructure for such missions, all relevant technologies and mission constraints are also being considered. These include on-orbit assembly, trajectory type, launch opportunities, propellant storage, crew size, cabin pressure, artificial gravity, life-support systems, radiation hazards, power/energy storage, thermal control, human factors, communications, abort scenarios, landing techniques, exploration strategies and science activities. It is planned to scope several example missions and to identify enabling and significantly enhancing technologies for accomplishing the goals of the human exploration of Mars.

Benton C Clark

NASA. Johnson Space Center primary battery applications

The role of the Power Branch/EP5 of JSC in primary battery applications is to support those JSC organizations having direct application responsibility with trade studies, battery selection recommendations, and with development, qualification, and provisioning of primary batteries. Battery subsystem management is provided. Payload hazard report preparation is supported, as is the review and comment of such reports for the JSC Payload Safety Panel, who approves the flight safety for all Orbiter payloads. JSC battery users are provided with safety analysis and test support to achieve safety approval. Finally, it is the responsibility of the Power Branch to define and maintain battery safety requirement documentation for JSC.

Bragg, Bob J.

High-Precision Shape Control of In-Space Deployable Large Membrane/Thin-Shell Reflectors

This innovation has been developed to improve the resolutions of future spacebased active and passive microwave antennas for earth-science remote sensing missions by maintaining surface figure precisions of large membrane/thin-shell reflectors during orbiting. The intention is for these sensing instruments to be deployable at orbit altitudes one or two orders of magnitude higher than Low Earth Orbit (LEO), but still being able to acquire measurements at spatial resolution and sensitivity similar to those of LEO. Because active and passive microwave remote sensors are able to penetrate through clouds to acquire vertical profile measurements of geophysical parameters, it is desirable to elevate them to the higher orbits to obtain orbital geometries that offer large spatial coverage and more frequent observations. This capability is essential for monitoring and for detailed understanding of the life cycles of natural hazards, such as hurricanes, tropical storms, flash floods, and tsunamis. Major components of this high-precision antenna-surface-control system include a membrane/thin shell reflector, a metrology sensor, a controller, actuators, and corresponding power amplifier and signal conditioning electronics (see figure). Actuators are attached to the back of the reflector to produce contraction/ expansion forces to adjust the shape of the thin-material reflector. The wavefront-sensing metrology system continuously measures the surface figure of the reflector, converts the surface figure to digital data and feeds the data to the controller. The controller determines the control parameters and generates commands to the actuator system. The flexible, piezoelectric polymer actuators are thus activated, providing the control forces needed to correct any distortions that exist in the reflector surface. Piezoelectric polymer actuators are very thin and flexible. They can be implemented on the back of the membrane/thin-shell reflector without introducing significant amounts of mass or stiffness to the reflector. They can be rolled up or folded to accommodate the packaging needed for launch. An analytical model of the system, which includes the membrane reflector, actuator, and controller has been developed to investigate the functionality of this control system on a 35-meter-diameter membrane reflector. The performance of this system under external disturbances such as in space thermal loads and W-error due to inflation has been investigated. A subscale breadboard has been developed, and the functionality of this control concept has been demonstrated by this breadboard.

Houfei Fang

The Trash Compaction Processing Systems (TCPS) Ground Unit Control Sample Testing

The Trash Compaction Processing System (TCPS) is being developed by NASA and Sierra Space to process crew trash for long-duration missions. The system compacts and thermally processes mixed spacecraft waste to reduce volume and stabilize the material while managing gas and liquid effluents. A Ground Unit (GU) located at Sierra Space in Madison, Wisconsin was used to run a series of tests using standardized control samples representing different trash conditions, including nominal, high liquid, high cloth, benign, and foam. Gas grab samples were collected during processing and analyzed to identify the compounds present in the effluent stream and compare the concentrations to the NASA spacecraft maximum allowable concentrations (SMACs). Additional testing included odor testing at White Sands Test Facility, aerosol measurements, microbiology, and tile characterization. Overall, the compounds detected in the gas samples were well below the SMAC limits for all trash models tested. The results from this testing are being used to help guide the verification approach and test planning for the TCPS Flight Unit that is planned for on-orbit testing on the International Space Station.

Control Samples

The NASA Aerospace Battery Safety Handbook

This handbook has been written for the purpose of acquainting those involved with batteries with the information necessary for the safe handling, storage, and disposal of these energy storage devices. Included in the document is a discussion of the cell and battery design considerations and the role of the components within a cell. The cell and battery hazards are related to user- and/or manufacturer-induced causes. The Johnson Space Center (JSC) Payload Safety Guidelines for battery use in Shuttle applications are also provided. The electrochemical systems are divided into zinc anode and lithium anode primaries, secondary cells, and fuel cells. Each system is briefly described, typical applications are given, advantages and disadvantages are tabulated, and most importantly, safety hazards associated with its use are given.

Halpert, Gerald

A SIMULINK Environment for Flight Dynamics and Control Analysis - Application to the DHC-2 'Beaver', Part 1. Implementation of a Model Library in SIMULINK

The design of advanced Automatic Aircraft Control Systems (AACS's) can be improved upon considerably if the designer can access all models and tools required for control system design and analysis through a graphical user-interface, from within one software environment. This MSc-thesis presents the first step in the development of such an environment, which is currently being done at the Section for Stability and Control of Delft University of Technology, Faculty of Aerospace Engineering. The environment is implemented within the commercially available software package MATLAB/SIMULINK. The report consists of two parts. Part I gives a detailed description of the AACS design environment. The heart of this environment is formed by the SIMULINK implementation of a nonlinear aircraft model in block-diagram format. The model has been worked out for the old laboratory aircraft of the Faculty, the De Havilland DHC-2 'Beaver', but due to its modular structure, it can easily be adapted for other aircraft. Part I also describes MATLAB programs which can be applied for finding steady-state trimmed-flight conditions and for linearization of the aircraft model, and it shows how the built-in simulation routines of SIMULINK have been used for open-loop analysis of the aircraft dynamics. Apart from the implementation of the models and tools, a thorough treatment of the theoretical backgrounds is presented. Part II of this report presents a part of an autopilot design process for the 'Beaver' aircraft, which clearly demonstrates the power and flexibility of the AACS design environment from part I. Evaluations of all longitudinal and lateral control laws by means of nonlinear simulations are treated in detail. The AACS design environment from part I proved to be a very useful tool for designing the control laws of the 'Beaver' autopilot within a very tight time-schedule. The autopilot design process itself will be used as a guideline for future AACS research at the Faculty of Aerospace Engineering. Flight tests of the 'Beaver' autopilot, done after evaluating the control laws in the SIMULINK package, proved to be quite successful. In the future, the AACS design package will evolve into a standardized, integrated design environment which can be applied to virtually any type of aircraft. The AACS design cycle will be shortened further by developing tools for automatically porting control laws from the MATLAB/SIMULINK environment to a piloted real-time flight simulator and the Flight Control Computers of the aircraft.

Aircraft Modelling

Dynamic analysis of a photovoltaic power system with battery storage capability

A photovolataic power system with a battery storage capability is analyzed. A dual battery current control concept is proposed, which enables the battery to either supply or accept power depending upon system environment and load conditions. A simulation of the power system, including the battery current control, is developed and evaluated. The evaulation demonstrate the visbility of the battery control concept of switch the battery from a charge to discharge mode and back as required by load and environmental conditions. An acceptable system operation is demonstrated over the entire insolation range. Additionally, system sensitivity, bandwidth, and damping characteristics of the battery control are shown to be acceptable for a projected hardware implementation.

Merrill, W. C.

Analysis of Screen Channel LAD Bubble Point Tests in Liquid Methane at Elevated Temperature

This paper examines the effect of varying the liquid temperature and pressure on the bubble point pressure for screen channel Liquid Acquisition Devices in cryogenic liquid methane using gaseous helium across a wide range of elevated pressures and temperatures. Testing of a 325 x 2300 Dutch Twill screen sample was conducted in the Cryogenic Components Lab 7 facility at the NASA Glenn Research Center in Cleveland, Ohio. Test conditions ranged from 105 to 160K and 0.0965 – 1.78 MPa. Bubble point is shown to be a strong function of the liquid temperature and a weak function of the amount of subcooling at the LAD screen. The model predicts well for saturated liquid but under predicts the subcooled data.

Reaction Control System