Generalized parallel redundancy in digital computers.
Failure probability of n-fold redundant system, stressing space computer reliability
SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Failure probability of n-fold redundant system, stressing space computer reliability
Reliability optimization of series, parallel, and combined redundancy systems
Computerized metropolitan air transit system, discussing system redundancy for safety level maintainance and all-weather dependability
Many of the commercial aircraft now flying will have to be phased out in the early 1980s because of fuel inefficiency and unacceptable noise levels. This paper discusses the role of new digital technology in making aircraft more fuel efficient, more reliable, and quieter. Attention is given to the integration of sensing and control functions in an aircraft in order to provide a simple, lightweight, and high-redundancy system. Technology under development now is expected to come on-line in the 1990s.
The experience gained in digital fly-by-wire technology through a flight test program being conducted by the NASA Dryden Flight Research Center in an F-8C aircraft is described. The system requirements are outlined, along with the requirements for flight qualification. The system is described, including the hardware components, the aircraft installation, and the system operation. The flight qualification experience is emphasized. The qualification process included the theoretical validation of the basic design, laboratory testing of the hardware and software elements, systems level testing, and flight testing. The most productive testing was performed on an iron bird aircraft, which used the actual electronic and hydraulic hardware and a simulation of the F-8 characteristics to provide the flight environment. The iron bird was used for sensor and system redundancy management testing, failure modes and effects testing, and stress testing in many cases with the pilot in the loop. The flight test program confirmed the quality of the validation process by achieving 50 flights without a known undetected failure and with no false alarms.
To provide a suitable electromagnetic torque summing approach to flight control system redundancy, a four channel motor capable of sustaining full performance after any two credible failures was designed, fabricated, and tested. The design consists of a single samarium cobalt permanent magnet rotor with four separate three phase windings arrayed in individual stator quadrants around the periphery. Trade studies established the sensitivities of weight and performance to such parameters as design speed, winding pattern, number of poles, magnet configuration, and strength. The motor electromagnetically sums the torque of the individual channels on a single rotor and eliminate complex mechanical gearing arrangements.
This paper develops a framework for the design of failure detection and isolation (FDI) algorithms. Rather than trying to apply 'optimal' techniques in a top-down manner, the system redundancies are evaluated with respect to their ability to provide reliable FDI information. Previous work of Pattipati et al. (1984) and Weiss et al. (1984) defined a useful context and several useful analytical results, which provide a basis for the FDI design methodology developed here. A general decision structure which can take advantage of redundancy evaluation is presented, and examples of typical design considerations are discussed. The operation of the decision structure is then demonstrated for a sensor FDI application involving the F-100 jet engine.
The Cal Poly Space Project is an effort on the part of several highly motivated students to deploy a space canister which will examine the effects of microgravity on electroplating and immiscible metals. The experiments will be controlled and monitored by a specialized triple redundancy system developed to defer the possible electronic errors due to uncontrollable factors such as photons from the Sun. With the finalization of the payload design and the near completion of the data control system, the integration phase of the project is anticipated to be completed and the project ready for launching by early 1987. It is hoped that the experiments will lead to new insights in space research and also prove profitable to industry.
Multiversion programming is a redundancy approach to developing highly reliable software. In applications of this method, two or more versions of a program are developed independently by different programmers and the versions are combined to form a redundant system. One variation of this approach consists of developing a set of n program versions and testing the versions to predict the failure probability of a particular program or a system formed from a subset of the programs. The precision that might be obtained, and also the effect of programmer variability if predictions are made over repetitions of the process of generating different program versions, are examined.
Growth power requirements for Space Station Freedom will be met through addition of 25 kW solar dynamic (SD) power modules. The SD module rejects waste heat from the power conversion cycle to space through a pumped-loop, multi-panel, deployable radiator. The baseline radiator configuration was defined during the Space Station conceptual design phase and is a function of the state point and heat rejection requirements of the power conversion unit. Requirements determined by the overall station design such as mass, system redundancy, micrometeoroid and space debris impact survivability, launch packaging, costs, and thermal and structural interaction with other station components have also been design drivers for the radiator configuration. Extensive thermal and power cycle modeling capabilities have been developed which are powerful tools in Station design and analysis, but which prove cumbersome and costly for simple component preliminary design studies. In order to aid in refining the SD radiator to the mature design stage, a simple and flexible numerical model was developed. The model simulates heat transfer and fluid flow performance of the radiator and calculates area mass and impact survivability for many combinations of flow tube and panel configurations, fluid and material properties, and environmental and cycle variations. A brief description and discussion of the numerical model, it's capabilities and limitations, and results of the parametric studies performed is presented.
The follow-on agreement will implement needed systems enhancements of the satellite ground station installed under the previous SPSSD/WS project. These enhancements include the purchase and installation of an Uninterruptible Power Supply (UPS) and lightning protection unit, hardware modifications to provide system redundancy and increased data storage capacity, software modifications for the new Japanese GMS digital data, upgrades of the image processing software, and both hardware maintenance and tropical cyclone analysis training, and a non-renewable grant to provide emergency field repairs and replacement/spare parts. In March 1988, the UPS and lightning protection unit was installed at the Fiji Meteorological Service by NASA personnel. A tape recorder and demodulator was shipped to Fiji to record the new digital GMS data. Data tapes are not yet available from the Japanese Meteorological Service of the new digital format. This data is required to test the GMS digital software being developed for the Fiji SPSSD/WS facility.
Together, programs form "reliability workbench", offering several theoretical approaches to design of redundant systems used in situations where failure catastrophic.
The US Air Force is currently faced with the problem of providing adequate close air support for ground forces. Air response to troops engaged in combat must be rapid and devastating due to the highly fluid battle lines of the future. The A-2000 is the result of a study to design an aircraft to deliver massive fire power accurately. The low cost A-2000 incorporates: large weapons payload; excellent maneuverability; all weather and terrain following capacity; redundant systems; and high survivability.
NASA-JPL and Japan's Institute of Space and Astronautical Science collaborated at the Usuda Deep Space Center in the Voyager-2 Neptune occultation experiment. Phase information is extracted from the recorded data by means of a digital filter that can track the carrier frequency and narrow the filter bandwidth by up to 3 mHz. The results thus obtained can verify the phase-stability of the receiving system as a whole. Problems experienced by low-noise amplifiers were solved through the use of system redundancies.
This paper addresses the design considerations for Earth observation spacecraft bus and payload subsystems such that cost-effective spacecraft maintainability is enhanced through optimized reliability and the application of robotic on-orbit support. In the past, for most satellites, maintainability has been associated with the clever application of telemetry reconfiguration and the use of redundant systems as necessary over the life cycle of the spacecraft. This presentation addresses the opportunities and challenges of leveraging the extensive work already accomplished in the development of on-orbit servicing technologies.
An ever increasing number of actuation functions historically performed by hydraulics or pneumatics are being accomplished by electric actuation. If 'end to end' systems are considered, electric actuators (EA's) are potentially lighter and more efficient. In general, system redundancies may be more easily implemented and operationally monitored. Typically, electrical components exhibit longer mean times to failure and projected lifetime costs of EA's are potentially much lower than those of other options. EA's have certain characteristics which must be considered in their application. The actual mechanical loadings must be established, for the more easily controlled EA may be operated much closer to its full capabilities. At higher rates of motion, EA's are operating as constant power devices. Therefore, it may be possible to start a movement that can not be stopped. The incorporation of high power electronics into remote locations introduces new concerns of EMI and thermal control. It is the management of these and other characteristics that forms the engineering design challenges. Work is currently in progress on EA's for aircraft and expendable launch vehicles. These applications span from ten to 40+ horsepower. The systematics and status of these actuators will be reported along with current technical trends in this area.
Checklists are used by the flight crew to properly configure an aircraft for safe flight and to ensure a high level of safety throughout the duration of the flight. In addition, the checklist provides a sequential framework to meet cockpit operational requirements, and it fosters cross-checking of the flight deck configuration among crew members. This study examined the feasibility of integrating multiple checklists for non-normal procedures into a single procedure for a typical transport aircraft. For the purposes of this report, a typical transport aircraft is one that represents a midpoint between early generation aircraft (B-727/737-200 and DC-10) and modern glass cockpit aircraft (B747-400/777 and MD-11). In this report, potential conflicts among non-normal checklist items during multiple failure situations for a transport aircraft are identified and analyzed. The non-normal checklist procedure that would take precedence for each of the identified multiple failure flight conditions is also identified. The rationale behind this research is that potential conflicts among checklist items might exist when integrating multiple checklists for non-normal procedures into a single checklist. As a rule, multiple failures occurring in today's highly automated and redundant system transport aircraft are extremely improbable. In addition, as shown in this analysis, conflicts among checklist items in a multiple failure flight condition are exceedingly unlikely. The possibility of a multiple failure flight condition occurring with a conflict among checklist items is so remote that integration of the non-normal checklists into a single checklist appears to be a plausible option.
Instantaneous net radiation flux at the top of the atmosphere is one of the primary drivers of climate and global change. Since the dawn of the satellite era, great efforts and expense have gone into measuring this flux from single satellites and even (for a several-year period) from a constellation of three satellites called ERBE. However, the reflected solar flux is an angular and spectral integral over the so-called "BRDF" or Bidirectional Reflectance Distribution Function, which is the angular distribution of reflected solar radiation for each solar zenith angle and each wavelength. Previous radiation flux satellites could not measure instantaneous BRDF, so scientists have had to fall back on models or composites. Because their range of observed solar zenith angles was very limited due to sunsynchronous orbits, the resultant flux maps are too inaccurate to see the dynamics of radiation flux or to reliably correlate it with specific phenomena (hurricanes, biomass fires, urban pollution, dust outbreaks, etc.). Accuracy only becomes acceptable after monthly averaging, but this washes out almost all cause-and-effect information, further exacerbated by the lack of spectral resolution. Leonardo-BRDF is a satellite system designed to measure the instantaneous spectral BRDF using a formation of highly coordinated satellites, all pointing at the same Earth targets at the same time. It will allow scientists for the first time to assess the radiative forcing of climate due to specific phenomena, which is bound to be important in the ongoing debate about global warming and what is causing it. The formation is composed of two satellite types having, as instrument payloads, single highly-integrated miniature imaging spectrometers or radiometers. Two nearby "keystone" satellites anchor the formation and fly in static orbits. They employ wide field of view imaging spectrometers that are extremely light and compact. The keystone satellites are identical and can operate in alongtrack or cross-track mode, or anything in between, at ground command. This provides inherent system redundancy and cross-calibration capability. Several "wing-man" satellites in non-static orbits fly in formation up to 1000 km out from the keystone satellites to provide additional along- and cross-track angular sampling. They view the target(s) observed by the keystone satellites from different zenith and azimuth angles and are maneuverable within a limited range of zenith angle using thrusters, and within a large range of azimuth angle using clever orbit design. The wing-man satellites carry single miniature imaging radiometers with just a few wavelength bands in order to be lighter and more agile.