Search NASA⌕ Search

SEARCH · Search NASA

Results for “Certificate Program”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

Adding Assurance to Automatically Generated Code

Code to estimate position and attitude of a spacecraft or aircraft belongs to the most safety-critical parts of flight software. The complex underlying mathematics and abundance of design details make it error-prone and reliable implementations costly. AutoFilter is a program synthesis tool for the automatic generation of state estimation code from compact specifications. It can automatically produce additional safety certificates which formally guarantee that each generated program individually satisfies a set of important safety policies. These safety policies (e.g.. array-bounds, variable initialization) form a core of properties which are essential for high-assurance software. Here we describe the AutoFilter system and its certificate generator and compare our approach to the static analysis tool PolySpace.

Denney, Ewen↗

System Engineering for J-2X Development: The Simpler, the Better

The Ares I and Ares V Vehicles will utilize the J-2X rocket engine developed for NASA by the Pratt and Whitney Rocketdyne Company (PWR) as the upper stage engine (USE). The J-2X is an improved higher power version of the original J-2 engine used for Apollo. System Engineering (SE) facilitates direct and open discussions of issues and problems. This simple idea is often overlooked in large, complex engineering development programs. Definition and distribution of requirements from the engine level to the component level is controlled by Allocation Reports which breaks down numerical design objectives (weight, reliability, etc.) into quanta goals for each component area. Linked databases of design and verification requirements help eliminate redundancy and potential mistakes inherent in separated systems. Another tool, the Architecture Design Description (ADD), is used to control J-2X system architecture and effectively communicate configuration changes to those involved in the design process. But the proof of an effective process is in successful program accomplishment. SE is the methodology being used to meet the challenge of completing J-2X engine certification 2 years ahead of any engine program ever developed at PWR. This paper describes the simple, better SE tools and techniques used to achieve this success.

Kelly, William M.↗

System Engineering on the Use for Ares I,V - the Simpler, the Better

The Ares I and Ares V Vehicles will utilize the J-2X rocket engine developed for NASA by the Pratt & Whitney Rocketdyne Company. The J-2X is an improved higher power version of the original J-2 engine used during the Apollo program. With higher power and updated requirements for safety and performance, the J-2X becomes a new engine using state-of-the-art design methodology, materials and manufacturing processes. The implementation of Systems Engineering (SE) principles enables the rapid J-2X development program to remain aligned with the ARES I and V vehicle programs, Meeting the aggressive development schedule is a challenge. Coordinating the best expertise thai NASA and PWR have to offer requires effectively utilizing resources at multiple sites. This presents formidable communication challenges. SE allows honest and open discussions of issues and problems. This simple idea is often overlooked in large and complex SE programs. Regular and effective meetings linking SE objectives to component designs are used to voice differences of opinions with customer and contractor in attendance so that the best mutual decisions can be made on the shortest possible schedule. Regular technical interchange meetings on secure program wide computer networks and CM processes are effective,in the "Controlled Change" process that exemplifies good SE. Good communication is a key effective SE implementation. The System of Systems approach is the vision of the Orion program which facilitates the establishment of dynamic SE processes at all levels including the engine. SE enables requirements evolution by facilitating organizational and process agility. Flow down and distribution of requirements is controlled by Allocation Reports which breakdown numerical design objectives (weight, reliability, etc.) into quanta goals for each component area. Linked databases of design and verification requirements helps eliminate redundancy and potential mistakes inherent m separated systems. Another tool, the Architecture Design Description, is being used to control J-2X system architecture and effectively communicate configuration changes to those involved in the design process. But the proof is in successful program accomplishment. The SE is the methodology being used to meet the challenge of completing J-2X engine certification 2 years ahead of any engine program ever developed at PWR. The Ares I SE system of systems has delivered according to expectations thus far. All major design reviews (SRR. PDR, CDR) have been successfully conducted to satisfy overall program objectives using SE as the basis for accomplishment. The paper describes SE tools and techniques utilized to achieve this success.

Kelly, William↗

Space Shuttle Main Engine /SSME/ - The 'maturing' process

The basic Space Shuttle Main Engine (SSME) concept called for an operational life of 55 missions, as well as an exceptionally high specific impulse. While these requirements are considered achievable in the cases of the basic engine structure, powerhead, main combustion chamber, propellant ducts, hydraulic lines and engine controller, other components may experience excessive wear and deterioration and may not achieve specification life without removal and overhaul. Most SSME components have been designed as line replaceable units, which have demonstrated good operational durability and will meet flight certification requirement upgrading. The Flight Confidence Program of the SSME test program currently being instituted will recertify existing engines for use in more than the 10 flights stipulated until now. The testing of two engines in repeated cycles should add 10 flights for every two successfully completed certification cycles.

Dankhoff, W.↗

Mission Risk Reduction Regulatory Change Management

NASA Headquarters Environmental Management Division supports NASA's mission to pioneer the future in space exploration, scientific discovery, and aeronautics research by integrating environmental considerations into programs and projects early-on, thereby proactively reducing NASA's exposure to institutional, programmatic and operational risk. As part of this effort, NASA established the Principal Center for Regulatory Risk Analysis and Communication (RRAC PC) as a resource for detecting, analyzing, and communicating environmental regulatory risks to the NASA stakeholder community. The RRAC PC focuses on detecting emerging environmental regulations and other operational change drivers that may pose risks to NASA programs and facilities, and effectively communicating the potential risks. For example, regulatory change may restrict how and where certain activities or operations may be conducted. Regulatory change can also directly affect the ability to use certain materials by mandating a production phase-out or restricting usage applications of certain materials. Regulatory change can result in significant adverse impacts to NASA programs and facilities due to NASA's stringent performance requirements for materials and components related to human-rated space vehicles. Even if a regulation does not directly affect NASA operations, U.S. and international regulations can pose program risks indirectly through requirements levied on manufacturers and vendors of components and materials. For example, manufacturers can change their formulations to comply with new regulatory requirements. Such changes can require time-consuming and costly requalification certification for use in human spaceflight programs. The RRAC PC has implemented a system for proactively managing regulatory change to minimize potential adverse impacts to NASA programs and facilities. This presentation highlights the process utilized by the RRACPC to communicate regulatory change and the associated potential risks within NASA, as well as the process for communicating and cooperating with other government agencies and industry partners, both domestic and international, to ensure mission success.

Scroggins, Sharon↗

NASA's Agency-Wide Strategy for Environmental Regulatory Risk Analysis and Communication

NASA's mission is to pioneer the future in space exploration, scientific discovery, and aeronautics research. To help enable existing and future programs to pursue this mission, NASA has established the Principal Center for Regulatory Risk Analysis and Communication (RRAC PC) to proactively identify, analyze, and communicate environmental regulatory risks to the NASA community. The RRAC PC is chartered to evaluate the risks posed to NASA Programs and facilities by environmentally related drivers. The RRAC PC focuses on emerging environmental regulations, as well as risks related to operational changes that can trigger existing environmental requirements. Changing regulations have the potential to directly affect program activities. For example, regulatory changes can restrict certain activities or operations by mandating changes in how operations may be done or limiting where or how certain operations can take place. Regulatory changes also can directly affect the ability to use certain materials by mandating a production phase-out or restricting usage applications of certain materials. Such changes can result in NASA undertaking material replacement efforts. Even if a regulation does not directly affect NASA operations, U.S. and international regulations can pose program risks indirectly through requirements levied on manufacturers and vendors of components and materials. For example, manufacturers can change their formulations to comply with new regulatory requirements. Such changes can require time-consuming and costly requalification certification for use in human spaceflight programs. The RRAC PC has implemented several strategies for proactively managing regulatory change to minimize potential adverse impacts to NASA Programs and facilities. This presentation highlights the lessons learned through establishing the RRAC PC, the process by which the RRAC PC monitors and distributes information about emerging regulatory requirements, and the cross-Agency cooperation that is vital to supporting NASA's mission.

Duda, Kristen↗

NASA's Agency-wide Strategy for Environmental Regulatory Risk Analysis and Communication

NASA's mission is to pioneer the future in space exploration, scientific discovery, and aeronautics research. To help enable existing and future programs to pursue this mission, NASA has established the Principal Center for Regulatory Risk Analysis and Communication (RRAC PC) to proactively identify, analyze, and communicate environmental regulatory risks to the NASA community. The RRAC PC is chartered to evaluate the risks posed to NASA Programs and facilities by environmentally related drivers. The RRAC PC focuses on emerging environmental regulations, as well as risks related to operational changes that can trigger existing environmental requirements. Changing regulations have the potential to directly affect program activities. For example, regulatory changes can restrict certain activities or operations by mandating changes in how operations may be done or limiting where or how certain operations can take place. Regulatory changes also can directly affect the ability to use certain materials by mandating a production phase-out or restricting usage aPi'iications of certain materials. Such changes can result in NASA undertaking material replacement efforts. Even if a regulation does not directly affect NASA operations, U.S. and international regulations can pose program risks indirectly through requirements levied on manufacturers and vendors of components and materials. For example, manufacturers can change their formulations to comply with new regulatory requirements. Such changes can require time-consuming and costly requalification certification for use in human spaceflight programs. The RRAC PC has implemented several strategies for proactively managing regulatory change to minimize potential adverse impacts to NASA Programs and facilities. This presentation highlights the lessons learned through establishing the RRAC PC, the process by which the RRAC PC monitors and distributes information about emerging regulatory requirements, and the cross-Agency cooperation that is vital to supporting NASA's mission.

Duda, Kristen↗

NASA Class A Certification of Core Flight Software (cFS)

NASA Gateway program has named cFS as the software architecture for the vehicle. The core CFS team (GSFC+JSC) is tasked to develop a certifiable release of the cFS bundle, by components, as class A, safety-critical flight software. It is to be available to all Gateway software developers, including our element vendors and international partners. Its availability & usage will be as stated by the Gateway User Agreement license. In this presentation, we will describe our general certification process, and more importantly, our certification artifacts that can be re-run to certify cFS on different platforms. Our goal is to also make available these certifiable packages to the open source community, specifically for cFE, OSAL and certain cFS applications and libraries that are currently hosted on NASA github (https://github.com/nasa).

Tam M Ngo↗

NASA Class A Certification of Core Flight Software (cFS)

NASA Gateway program has named cFS as the software architecture for the vehicle. The core CFS team (GSFC+JSC) is tasked to develop a certifiable release of the cFS bundle, by components, as class A, safety-critical flight software. It is to be available to all Gateway software developers, including our element vendors and international partners. Its availability & usage will be as stated by the Gateway User Agreement license. In this presentation, we will describe our general certification process, and more importantly, our certification artifacts that can be re-run to certify cFS on different platforms. Our goal is to also make available these certifiable packages to the open source community, specifically for cFE, OSAL and certain cFS applications and libraries that are currently hosted on NASA github (https://github.com/nasa).

Tam M Ngo↗

Experimental evaluation of certification trails using abstract data type validation

Certification trails are a recently introduced and promising approach to fault-detection and fault-tolerance. Recent experimental work reveals many cases in which a certification-trail approach allows for significantly faster program execution time than a basic time-redundancy approach. Algorithms for answer-validation of abstract data types allow a certification trail approach to be used for a wide variety of problems. An attempt to assess the performance of algorithms utilizing certification trails on abstract data types is reported. Specifically, this method was applied to the following problems: heapsort, Hullman tree, shortest path, and skyline. Previous results used certification trails specific to a particular problem and implementation. The approach allows certification trails to be localized to 'data structure modules,' making the use of this technique transparent to the user of such modules.

Wilson, Dwight S.↗

Experimental evaluation of the certification-trail method

Certification trails are a recently introduced and promising approach to fault-detection and fault-tolerance. A comprehensive attempt to assess experimentally the performance and overall value of the method is reported. The method is applied to algorithms for the following problems: huffman tree, shortest path, minimum spanning tree, sorting, and convex hull. Our results reveal many cases in which an approach using certification-trails allows for significantly faster overall program execution time than a basic time redundancy-approach. Algorithms for the answer-validation problem for abstract data types were also examined. This kind of problem provides a basis for applying the certification-trail method to wide classes of algorithms. Answer-validation solutions for two types of priority queues were implemented and analyzed. In both cases, the algorithm which performs answer-validation is substantially faster than the original algorithm for computing the answer. Next, a probabilistic model and analysis which enables comparison between the certification-trail method and the time-redundancy approach were presented. The analysis reveals some substantial and sometimes surprising advantages for ther certification-trail method. Finally, the work our group performed on the design and implementation of fault injection testbeds for experimental analysis of the certification trail technique is discussed. This work employs two distinct methodologies, software fault injection (modification of instruction, data, and stack segments of programs on a Sun Sparcstation ELC and on an IBM 386 PC) and hardware fault injection (control, address, and data lines of a Motorola MC68000-based target system pulsed at logical zero/one values). Our results indicate the viability of the certification trail technique. It is also believed that the tools developed provide a solid base for additional exploration.

Sullivan, Gregory F.↗

Initial Experimental Airworthiness Certification Guidance for UAS. UAS Experimental Certification Process and Guidance

This paper addresses the regulatory processes and requirements already in place by which an applicant might obtain experimental airworthiness certification for a civil Unmanned Aircraft System (UAS). It is more extensive and subsequent to an earlier, similar deliverable, PD007, which was an interim study of the same topic. Since few regulatory airworthiness and operating standards exist for UAS like those for traditional manned aircraft and since most UAS have historically been developed and operated under military auspices, civil use of UAS in the NAS is a new and unfamiliar challenge requiring specific and unique considerations. Experimental certification is the most basic level of FAA approval toward routine UAS operation in the NAS. The paper reviews and explains existing FAA requirements for an applicant seeking experimental airworthiness approval and details the process for submission of necessary information. It summarizes the limited purposes for which experimental aircraft may be used and addresses pertinent aspects of UAS design, construction and operation in the NAS in harmony with traditional manned aircraft. Policy IPT position is that UAS, while different from manned aircraft, can use the same initial processes to gain civil operating experience under the experimental approval. Particular note is taken of those UAS-unique characteristics which require extra attention to assure equivalent safety of operation, such as the UAS control station and sense-and-avoid. The paper also provides "best practices" guidance for UAS manufacturers and FAA personnel in two appendices. The material in Appendix A is intended to provide guidance on assuring UAS safety to FAA, and provides FAA personnel with a suggested list of items to review, with a focus on UAS unique factors, prior to issuance of an experimental airworthiness certificate. Appendix B provides an outline for a program letter which a manufacturer could use in preparing the application for an UAS experimental airworthiness certificate.

Source record↗

Advancement of Certification Methods and Applications for Industrial Deployments of Components Derived from Advanced Manufacturing Technologies

One goal of the Advanced Materials and Manufacturing Technologies subprogram, within the Department of Energy’s (DOE) crosscutting technology development program, is to advance the qualification and certification of parts and components created via additive manufacturing (AM). AM offers a new paradigm for the design and optimization of new nuclear components, and for observing and tracking manufacturing performance and potential defects in a way that is not possible with traditional approaches. Tracking and evaluating these in situ data can lead to the estimation of local material properties and, with the use of engineering analysis tools, the estimation of component performance during operation. To achieve these objectives, a digital platform certification approach was developed and is summarized in this report.

36 MATERIALS SCIENCE↗

Performance of the NASA Airborne Radar with the Windshear Database for Forward-Looking Systems

This document describes the simulation approach used to test the performance of the NASA airborne windshear radar. An explanation of the actual radar hardware and processing algorithms provides an understanding of the parameters used in the simulation program. This report also contains a brief overview of the NASA airborne windshear radar experimental flight test results. A description of the radar simulation program shows the capabilities of the program and the techniques used for certification evaluation. Simulation of the NASA radar is comprised of three steps. First, the choice of the ground clutter data must be made. The ground clutter is the return from objects in or nearby an airport facility. The choice of the ground clutter also dictates the aircraft flight path since ground clutter is gathered while in flight. The second step is the choice of the radar parameters and the running of the simulation program which properly combines the ground clutter data with simulated windshear weather data. The simulated windshear weather data is comprised of a number of Terminal Area Simulation System (TASS) model results. The final step is the comparison of the radar simulation results to the known windshear data base. The final evaluation of the radar simulation is based on the ability to detect hazardous windshear with the aircraft at a safe distance while at the same time not displaying false alerts.

Switzer, George F.↗

Composite Overwrapped Pressure Vessels (COPV): Developing Flight Rationale for the Space Shuttle Program

Introducing composite vessels into the Space Shuttle Program represented a significant technical achievement. Each Orbiter vehicle contains 24 (nominally) Kevlar tanks for storage of pressurized helium (for propulsion) and nitrogen (for life support). The use of composite cylinders saved 752 pounds per Orbiter vehicle compared with all-metal tanks. The weight savings is significant considering each Shuttle flight can deliver 54,000 pounds of payload to the International Space Station. In the wake of the Columbia accident and the ensuing Return to Flight activities, the Space Shuttle Program, in 2005, re-examined COPV hardware certification. Incorporating COPV data that had been generated over the last 30 years and recognizing differences between initial Shuttle Program requirements and current operation, a new failure mode was identified, as composite stress rupture was deemed credible. The Orbiter Project undertook a comprehensive investigation to quantify and mitigate this risk. First, the engineering team considered and later deemed as unfeasible the option to replace existing all flight tanks. Second, operational improvements to flight procedures were instituted to reduce the flight risk and the danger to personnel. Third, an Orbiter reliability model was developed to quantify flight risk. Laser profilometry inspection of several flight COPVs identified deep (up to 20 mil) depressions on the tank interior. A comprehensive analysis was performed and it confirmed that these observed depressions were far less than the criterion which was established as necessary to lead to liner buckling. Existing fleet vessels were exonerated from this failure mechanism. Because full validation of the Orbiter Reliability Model was not possible given limited hardware resources, an Accelerated Stress Rupture Test of a flown flight vessel was performed to provide increased confidence. A Bayesian statistical approach was developed to evaluate possible test results with respect to the model credibility and thus flight rationale for continued operation of the Space Shuttle with existing flight hardware. A non-destructive evaluation (NDE) technique utilizing Raman Spectroscopy was developed to directly measure the overwrap residual stress state. Preliminary results provide optimistic results that patterns of fluctuation in fiber elastic strains over the outside vessel surface could be directly correlated with increased fiber stress ratios and thus reduced reliability.

Kezirian, Michael T.↗

Flight service evaluation of composite helicopter components

This paper presents the results of a NASA funded contract and Sikorsky research and development programs to evaluate structural composite components in flight service on Sikorsky Model S-76 helicopters. Selected components were removed and tested at prescribed intervals over a nine year time frame. Four horizontal stabilizers and thirteen tail rotor spars were returned from commercial service in West Palm Beach, Florida and in the Gulf Coast region of Louisiana to determine the long term effects of operations in hot and humid climates on component performance. Concurrent with the flight component evaluation, panels of materials used in their fabrication were exposed to the environment in ground racks. Selected panels were tested annually to determine the effects of exposure on physical and mechanical properties. The results of 55,741 component flight hours and 911 months of field exposure are reported and compared with initial Federal Aviation Administration (FAA) certification data. The findings of this program have provided increased confidence in the long term durability of advanced composite materials used in helicopter structural applications.

Mardoian, George H.↗

Results of shuttle EMU thermal vacuum tests incorporating an infrared imaging camera data acquisition system

Manned tests in Chamber B at NASA JSC were conducted in May and June of 1990 to better quantify the Space Shuttle Extravehicular Mobility Unit's (EMU) thermal performance in the cold environmental extremes of space. Use of an infrared imaging camera with real-time video monitoring of the output significantly added to the scope, quality and interpretation of the test conduct and data acquisition. Results of this test program have been effective in the thermal certification of a new insulation configuration and the '5000 Series' glove. In addition, the acceptable thermal performance of flight garments with visually deteriorated insulation was successfully demonstrated, thereby saving significant inspection and garment replacement cost. This test program also established a new method for collecting data vital to improving crew thermal comfort in a cold environment.

Anderson, James E.↗