Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failure Tolerance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10
All sourcesNASA NTRSDOE OSTI
NASA NTRS2007

Model Checking a Byzantine-Fault-Tolerant Self-Stabilizing Protocol for Distributed Clock Synchronization Systems

This report presents the mechanical verification of a simplified model of a rapid Byzantine-fault-tolerant self-stabilizing protocol for distributed clock synchronization systems. This protocol does not rely on any assumptions about the initial state of the system. This protocol tolerates bursts of transient failures, and deterministically converges within a time bound that is a linear function of the self-stabilization period. A simplified model of the protocol is verified using the Symbolic Model Verifier (SMV) [SMV]. The system under study consists of 4 nodes, where at most one of the nodes is assumed to be Byzantine faulty. The model checking effort is focused on verifying correctness of the simplified model of the protocol in the presence of a permanent Byzantine fault as well as confirmation of claims of determinism and linear convergence with respect to the self-stabilization period. Although model checking results of the simplified model of the protocol confirm the theoretical predictions, these results do not necessarily confirm that the protocol solves the general case of this problem. Modeling challenges of the protocol and the system are addressed. A number of abstractions are utilized in order to reduce the state space. Also, additional innovative state space reduction techniques are introduced that can be used in future verification efforts applied to this and other protocols.

Malekpour, Mahyar R.↗
NASA NTRS2008

Safety Review Panel (SRP) Special Topic Presentation on the Iodine Compatible Water Container (ICWC)

This viewgraph presentation reviews the safety requirements for the Iodine Compatible Water Container (ICWC). The topics include: 1) ICWC Team; 2) Purpose of presentation; 3) Background/Description of ICWC System; 4) Current status of ICWC Project; 5) HTV launch NCR Processing; 6) Tox 1 containment NCR processing; and 7) ISS on-orbit failure propagation and fault tolerance NCR processing.

Thomas, Evan A.↗
NASA NTRS2008

Verification of a Byzantine-Fault-Tolerant Self-stabilizing Protocol for Clock Synchronization

This paper presents the mechanical verification of a simplified model of a rapid Byzantine-fault-tolerant self-stabilizing protocol for distributed clock synchronization systems. This protocol does not rely on any assumptions about the initial state of the system except for the presence of sufficient good nodes, thus making the weakest possible assumptions and producing the strongest results. This protocol tolerates bursts of transient failures, and deterministically converges within a time bound that is a linear function of the self-stabilization period. A simplified model of the protocol is verified using the Symbolic Model Verifier (SMV). The system under study consists of 4 nodes, where at most one of the nodes is assumed to be Byzantine faulty. The model checking effort is focused on verifying correctness of the simplified model of the protocol in the presence of a permanent Byzantine fault as well as confirmation of claims of determinism and linear convergence with respect to the self-stabilization period. Although model checking results of the simplified model of the protocol confirm the theoretical predictions, these results do not necessarily confirm that the protocol solves the general case of this problem. Modeling challenges of the protocol and the system are addressed. A number of abstractions are utilized in order to reduce the state space.

Malekpour, Mahyar R.↗
NASA NTRS2009

A Self-Stabilizing Byzantine-Fault-Tolerant Clock Synchronization Protocol

This report presents a rapid Byzantine-fault-tolerant self-stabilizing clock synchronization protocol that is independent of application-specific requirements. It is focused on clock synchronization of a system in the presence of Byzantine faults after the cause of any transient faults has dissipated. A model of this protocol is mechanically verified using the Symbolic Model Verifier (SMV) [SMV] where the entire state space is examined and proven to self-stabilize in the presence of one arbitrary faulty node. Instances of the protocol are proven to tolerate bursts of transient failures and deterministically converge with a linear convergence time with respect to the synchronization period. This protocol does not rely on assumptions about the initial state of the system other than the presence of sufficient number of good nodes. All timing measures of variables are based on the node s local clock, and no central clock or externally generated pulse is used. The Byzantine faulty behavior modeled here is a node with arbitrarily malicious behavior that is allowed to influence other nodes at every clock tick. The only constraint is that the interactions are restricted to defined interfaces.

Malekpour, Mahyar R.↗
NASA NTRS2010

Byzantine-fault tolerant self-stabilizing protocol for distributed clock synchronization systems

A rapid Byzantine self-stabilizing clock synchronization protocol that self-stabilizes from any state, tolerates bursts of transient failures, and deterministically converges within a linear convergence time with respect to the self-stabilization period. Upon self-stabilization, all good clocks proceed synchronously. The Byzantine self-stabilizing clock synchronization protocol does not rely on any assumptions about the initial state of the clocks. Furthermore, there is neither a central clock nor an externally generated pulse system. The protocol converges deterministically, is scalable, and self-stabilizes in a short amount of time. The convergence time is linear with respect to the self-stabilization period.

Malekpour, Mahyar R.↗
NASA NTRS2012

Self-stabilizing byzantine-fault-tolerant clock synchronization system and method

Systems and methods for rapid Byzantine-fault-tolerant self-stabilizing clock synchronization are provided. The systems and methods are based on a protocol comprising a state machine and a set of monitors that execute once every local oscillator tick. The protocol is independent of specific application specific requirements. The faults are assumed to be arbitrary and/or malicious. All timing measures of variables are based on the node's local clock and thus no central clock or externally generated pulse is used. Instances of the protocol are shown to tolerate bursts of transient failures and deterministically converge with a linear convergence time with respect to the synchronization period as predicted.

Malekpour, Mahyar R.↗
NASA NTRSDate not supplied

TPSAS-NF1676L-15315-DND

Some advantages over mechanical joints: - Lower structural weight - Lower manufacturing cost - Improve damage tolerance However: - Lack of failure criteria and material/structural validated models - Lack of an accurate and reliable quality control

Donato Girolamo↗
NASA NTRS1978

SIFT - Design and analysis of a fault-tolerant computer for aircraft control

SIFT (Software Implemented Fault Tolerance) is an ultrareliable computer for critical aircraft control applications that achieves fault tolerance by the replication of tasks among processing units. The main processing units are off-the-shelf minicomputers, with standard microcomputers serving as the interface to the I/O system. Fault isolation is achieved by using a specially designed redundant bus system to interconnect the processing units. Error detection and analysis and system reconfiguration are performed by software. Iterative tasks are redundantly executed, and the results of each iteration are voted upon before being used. Thus, any single failure in a processing unit or bus can be tolerated with triplication of tasks, and subsequent failures can be tolerated after reconfiguration. Independent execution by separate processors means that the processors need only be loosely synchronized, and a novel fault-tolerant synchronization method is described.

Wensley, J. H.↗
NASA NTRS1978

Critical fault patterns determination in fault-tolerant computer systems

The method proposed tries to enumerate all the critical fault-patterns (successive occurrences of failures) without analyzing every single possible fault. The conditions for the system to be operating in a given mode can be expressed in terms of the static states. Thus, one can find all the system states that correspond to a given critical mode of operation. The next step consists in analyzing the fault-detection mechanisms, the diagnosis algorithm and the process of switch control. From them, one can find all the possible system configurations that can result from a failure occurrence. Thus, one can list all the characteristics, with respect to detection, diagnosis, and switch control, that failures must have to constitute critical fault-patterns. Such an enumeration of the critical fault-patterns can be directly used to evaluate the overall system tolerance to failures. Present research is focused on how to efficiently make use of these system-level characteristics to enumerate all the failures that verify these characteristics.

Mccluskey, E. J.↗
NASA NTRS1981

Photovoltaic module and array reliability

Several statistical reliability studies have been conducted in areas of photovoltaic component design covering cell failure, interconnect fatigue, glass breakage and electrical insulation breakdown. This paper integrates the results from these various studies and draws general conclusions relative to optimal reliability features for future modules. The described analysis is based on designing for specified low levels of component failures and then controlling the degrading effects of the failures through the use of fault tolerant circuitry and module replacement. Means of selecting the cost-optimal level of component failures, circuit redundancy, and module replacement are described.

Ross, R. G., Jr.↗
NASA NTRS1982

Photovoltaic module reliability improvement through application testing and failure analysis

During the first four years of the U.S. Department of Energy (DOE) National Photovoltatic Program, the Jet Propulsion Laboratory Low-Cost Solar Array (LSA) Project purchased about 400 kW of photovoltaic modules for test and experiments. In order to identify, report, and analyze test and operational problems with the Block Procurement modules, a problem/failure reporting and analysis system was implemented by the LSA Project with the main purpose of providing manufacturers with feedback from test and field experience needed for the improvement of product performance and reliability. A description of the more significant types of failures is presented, taking into account interconnects, cracked cells, dielectric breakdown, delamination, and corrosion. Current design practices and reliability evaluations are also discussed. The conducted evaluation indicates that current module designs incorporate damage-resistant and fault-tolerant features which address field failure mechanisms observed to date.

Dumas, L. N.↗
NASA NTRS1991

NASA test flights with increased flight stress indices

This paper presents the objectives, results, and conclusions stemming from a series of six test flights conducted for the National Aeronautics and Space Administration (NASA) by the National Scientific Balloon Facility (NSBF). Results from the test flights indicate that: (1) the current two U.S. balloon films are capable of being flown at significantly increased flight stress index values; (2) payload weights less than the design minimum payload can be reliably flown without fear of structural failure due to increased circumferential stress; and (3) large and rapid decreases in payload weight can be tolerated by current balloons without structural failure.

Smith, I. S., Jr.↗
NASA NTRS1997

Robot Position Sensor Fault Tolerance

Robot systems in critical applications, such as those in space and nuclear environments, must be able to operate during component failure to complete important tasks. One failure mode that has received little attention is the failure of joint position sensors. Current fault tolerant designs require the addition of directly redundant position sensors which can affect joint design. A new method is proposed that utilizes analytical redundancy to allow for continued operation during joint position sensor failure. Joint torque sensors are used with a virtual passive torque controller to make the robot joint stable without position feedback and improve position tracking performance in the presence of unknown link dynamics and end-effector loading. Two Cartesian accelerometer based methods are proposed to determine the position of the joint. The joint specific position determination method utilizes two triaxial accelerometers attached to the link driven by the joint with the failed position sensor. The joint specific method is not computationally complex and the position error is bounded. The system wide position determination method utilizes accelerometers distributed on different robot links and the end-effector to determine the position of sets of multiple joints. The system wide method requires fewer accelerometers than the joint specific method to make all joint position sensors fault tolerant but is more computationally complex and has lower convergence properties. Experiments were conducted on a laboratory manipulator. Both position determination methods were shown to track the actual position satisfactorily. A controller using the position determination methods and the virtual passive torque controller was able to servo the joints to a desired position during position sensor failure.

Aldridge, Hal A.↗
NASA NTRS1973

Fused slurry silicide coatings for columbium alloys reentry heat shields. Volume 1: Evaluation analysis

The R-512E (Si-20Cr-20Fe) fused slurry silicide coating process was optimized to coat full size (20in x 20in) single face rib and corrugation stiffened panels fabricated from FS-85 columbium alloy for 100 mission space shuttle heat shield applications. Structural life under simulated space shuttle lift-off stresses and reentry conditions demonstrated reuse capability well beyond 100 flights for R-512E coated FS-85 columbium heat shield panels. Demonstrated coating damage tolerance showed no immediate structural failure on exposure. The FS-85 columbium alloy was selected from five candidate alloys (Cb-752, C-129Y, WC-3015, B-66 and FS-85) based on the evaluation tests which have designed to determine: (1) change in material properties due to coating and reuse; (2) alloy tolerance to coating damage; (3) coating emittance characteristics under reuse conditions; and (4) new coating chemistries for improved coating life.

Fitzgerald, B.↗
NASA NTRS1998

An Analysis of Failure Handling in Chameleon, A Framework for Supporting Cost-Effective Fault Tolerant Services

The desire for low-cost reliable computing is increasing. Most current fault tolerant computing solutions are not very flexible, i.e., they cannot adapt to reliability requirements of newly emerging applications in business, commerce, and manufacturing. It is important that users have a flexible, reliable platform to support both critical and noncritical applications. Chameleon, under development at the Center for Reliable and High-Performance Computing at the University of Illinois, is a software framework. for supporting cost-effective adaptable networked fault tolerant service. This thesis details a simulation of fault injection, detection, and recovery in Chameleon. The simulation was written in C++ using the DEPEND simulation library. The results obtained from the simulation included the amount of overhead incurred by the fault detection and recovery mechanisms supported by Chameleon. In addition, information about fault scenarios from which Chameleon cannot recover was gained. The results of the simulation showed that both critical and noncritical applications can be executed in the Chameleon environment with a fairly small amount of overhead. No single point of failure from which Chameleon could not recover was found. Chameleon was also found to be capable of recovering from several multiple failure scenarios.

Haakensen, Erik Edward↗
NASA NTRS1990

Healing of voids in the aluminum metallization of integrated circuit chips

The thermal stability of GaAs modulation-doped field effect transistors (MODFETs) is evaluated in order to identify failure mechanisms and validate the reliability of these devices. The transistors were exposed to thermal step-stress and characterized at ambient temperatures to indicate device reliability, especially that of the transistor ohmic contacts with and without molybdenum diffusion barriers. The devices without molybdenum exhibited important transconductance deterioration. MODFETs with molybdenum diffusion barriers were tolerant to temperatures above 300 C. This tolerance indicates that thermally activated failure mechanisms are slow at operational temperatures. Therefore, high-reliability MODFET-based circuits are possible.

Cuddihy, Edward F.↗
NASA NTRS2001

Crack Turning Mechanics of Composite Wing Skin Panels

The safety of future composite wing skin integral stiffener panels requires a full understanding of failure mechanisms of these damage tolerance critical structures under both in-plane and bending loads. Of primary interest is to derive mathematical models using fracture mechanics in anisotropic cracked plate structures, to assess the crack turning mechanisms, and thereby to enhance the residual strength in the integral stiffener composite structures. The use of fracture mechanics to assess the failure behavior in a cracked structure requires the identification of critical fracture parameters which govern the severity of stress and deformation field ahead of the flaw, and which can be evaluated using information obtained from the flaw tip. In the three-year grant, the crack-tip fields under plane deformation, crack-tip fields for anisotropic plates and anisotropic shells have been obtained. In addition, methods for determining the stress intensity factors, energy release rate, and the T-stresses have been proposed and verified. The research accomplishments can be summarized as follows: (1) Under plane deformation in anisotropic solids, the asymptotic crack-tip fields have been obtained using Stroh formalism; (2) The T-stress and the coefficient of the second term for sigma(sub y), g(sub 32), have been obtained using path-independent integral, the J-integral and Betti's reciprocal theorem together with auxiliary fields; (3) With experimental data performed by NASA, analyses indicated that the mode-I critical stress intensity factor K(sub Q) provides a satisfactory characterization of fracture initiation for a given laminate thickness, provided the failure is fiber-dominated and crack extends in a self-similar manner; (4) The high constraint specimens, especially for CT specimens, due to large T-stress and large magnitude of negative g(sub 32) term may be expected to inhibit the crack extension in the same plane and promote crack turning; (5) Crack turning out of crack plane in generally anisotropic solids under plane deformation has been studied; (6) The role of T-stress and the higher-order term of sigma(sub y) on the crack turning and stability of the kinked crack has been quantified; (7) Asymptotic crack-tip fields including the effect of transverse shear deformation (Reissner plate theory) in an anisotropic plate under bending, twisting moments, and transverse shear loads has been presented; (8) The expression of the path-independent J-integral in terms of the generalized stress and strain has been derived; (9) Asymptotic crack-tip fields including the effect of transverse shear deformation (Reissner shallow shell theory) in a general anisotropic shell has been developed; (10) The Stroh formalism was used to characterize the crack tip fields in shells up to the second term and the energy release rate was expressed in a very compact form.

Yuan, F. G.↗