SEARCH · Search NASA

Results for “contingency control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 181 records · Page 10

All sources NASA NTRS DOE OSTI

NASA NTRS2017

Dawn Spacecraft Performance at Ceres: Results of Hybrid Control for Ceres Mapping

Dawn is a low-thrust interplanetary spacecraft currently orbiting the dwarf planet Ceres, to better understand the early creation of the solar system. Launched in September 2007, Dawn arrived at Vesta in July 2011. After a 16-month successful science campaign at Vesta, Dawn departed for Ceres, arriving in early 2015. The Dawn spacecraft uses both reaction wheel assemblies (RWA) and a reaction control system (RCS) to provide 3-axis attitude control for the spacecraft. Reaction wheels were designed to be the primary system for attitude control, however two wheels have shown high friction anomalies and have been removed from service. The project has implemented a hybrid control algorithm using two reaction wheels and RCS thrusters. This hybrid control capability enabled Dawn to achieve very high science return, while significantly conserving remaining hydrazine propellant. With only two remaining healthy RWA’s, hybrid control became part of the baseline plan for Ceres science operations. The Dawn team developed specific operational approaches in which sequences were developed with careful consideration of science versus resource trades. Commanding and sequence planning also incorporated contingency planning, in the event that another reaction wheel may fail. Despite the differences in operational approach between Vesta and Ceres, both campaigns achieved very rich scientific data return. This paper highlights Dawn’s recent flight experience with hybrid attitude control during Ceres orbit operations. The discussion includes the approaches utilized by the Dawn team to address unique operational challenges presented by the hybrid approach, and reviews spacecraft performance under hybrid control in low orbit at Ceres. Additionally, methods used to optimize hydrazine use and thereby extend the science campaign will be presented. Finally, a preliminary assessment of an orbit transfer with two reaction wheels, during extended mission operations, is discussed.

Smith, Brett A.↗

NASA NTRS2011

Docking Offset Between the Space Shuttle and the International Space Station and Resulting Impacts to the Transfer of Attitude Reference and Control

The Space Shuttle does not dock at an exact 90 degrees to the International Space Station (ISS) x-body axis. This offset from 90 degrees, along with error sources within their respective attitude knowledge, causes the two vehicles to never completely agree on their attitude, even though they operate as a single, mated stack while docked. The docking offset can be measured in flight when both vehicles have good attitude reference and is a critical component in calculations to transfer attitude reference from one vehicle to another. This paper will describe how the docking offset and attitude reference errors between both vehicles are measured and how this information would be used to recover Shuttle attitude reference from ISS in the event of multiple failures. During STS-117, ISS on-board Guidance, Navigation and Control (GNC) computers began having problems and after several continuous restarts, the systems failed. The failure took the ability for ISS to maintain attitude knowledge. This paper will also demonstrate how with knowledge of the docking offset, the contingency procedure to recover Shuttle attitude reference from ISS was reversed in order to provide ISS an attitude reference from Shuttle. Finally, this paper will show how knowledge of the docking offset can be used to speed up attitude control handovers from Shuttle to ISS momentum management. By taking into account the docking offset, Shuttle can be commanded to hold a more precise attitude which better agrees with the ISS commanded attitude such that start up transients with the ISS momentum management controllers are reduced. By reducing start-up transients, attitude control can be transferred from Shuttle to ISS without the use of ISS thrusters saving precious on-board propellant, crew time and minimizing loads placed upon the mated stack.

Helms, W. Jason↗

NASA NTRS2011

COMPASS Final Report: Enceladus Solar Electric Propulsion Stage

The results of the NASA Glenn Research Center (GRC) COllaborative Modeling and Parametric Assessment of Space Systems (COMPASS) internal Solar Electric Propulsion (SEP) stage design are documented in this report (Figure 1.1). The SEP Stage was designed to deliver a science probe to Saturn (the probe design was performed separately by the NASA Goddard Space Flight Center s (GSFC) Integrated Mission Design Center (IMDC)). The SEP Stage delivers the 2444 kg probe on a Saturn trajectory with a hyperbolic arrival velocity of 5.4 km/s. The design carried 30 percent mass, 10 percent power, and 6 percent propellant margins. The SEP Stage relies on the probe for substantial guidance, navigation and control (GN&C), command and data handling (C&DH), and Communications functions. The stage is configured to carry the probe and to minimize the packaging interference between the probe and the stage. The propulsion system consisted of a 1+1 (one active, one spare) configuration of gimbaled 7 kW NASA Evolutionary Xenon Thruster (NEXT) ion propulsion thrusters with a throughput of 309 kg Xe propellant. Two 9350 W GaAs triple junction (at 1 Astronomical Unit (AU), includes 10 percent margin) ultra-flex solar arrays provided power to the stage, with Li-ion batteries for launch and contingency operations power. The base structure was an Al-Li hexagonal skin-stringer frame built to withstand launch loads. A passive thermal control system consisted of heat pipes to north and south radiator panels, multilayer insulation (MLI) and heaters for the Xe tank. All systems except tanks and solar arrays were designed to be single fault tolerant.

Oleson, Steven R.↗

DOE OSTI2023

Data Privacy for the Grid: Toward a Data Privacy Standard for Inverter-Based and Distributed Energy Resources

The traditional approach to planning the distribution grid has focused on reliability in the context of gradual and reasonably predictable load growth. Forecasts of load growth, combined with asset management practices, were used by system planners to identify upgrades to the system to maintain or improve reliability. The decisions, typically based within load flow analysis tools, included considerations about contingency scenarios and corporate forecasts (i.e., top-down predictions at a summary level of what would happen in a particular area that could impact load growth and behavior). As a result, today, this traditional approach no longer fits all purposes.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

DOE OSTI2020

Dynamic Modeling of Full Converter Adjustable-speed Pumped Storage Hydropower (FC AS-PSH)

Full converter adjustable-speed pumped storage hydropower (FC AS-PSH) technology, as one of advanced-PSH technology, is developed from wind turbine technology. By making the synchronous machine connect to the grid through a full-size converter, FC AS-PSH has a wider adjustment range of speed and a better reactive power control capability compared with a doubly-fed asynchronous generator AS-PSH technology. When it plays as an energy backup in the power system, FC AS-PSH can provide a much faster response than conventional-PSH (C-PSH) which makes this technology provide better ancillary service for a high renewable penetrated system. In this paper, the dynamic modeling of FC AS-PSH is fully studied. We develop a detailed model of this technology in the IEEE 14-bus system based on GE Positive Sequence Load Flow (PSLF) platform. Especially, the first governor model is developed based on the Engineer’s Program Control Language (EPCL) user-defined model in this platform. All operation modes are validated and studied under a system contingency. Besides, comparison cases between FC AS-PSH and C-PSH are studied to show advantages providing from FC AS-PSH when it works with renewable energy.

50 EE - Wind and Water Power Program - Water (EE-4↗

NASA NTRS1980

Orbiter integrated active thermal control subsystem test

Integrated subsystem level testing of the systems within the orbiter active thermal chamber capable of simulating ground, orbital, and entry temperature and pressure profiles. The test article was in a closed loop configuration that included flight type and functionally simulated protions of all ATCS components for collecting, transporting, and rejecting orbiter waste heat. Specially designed independently operating equipment simulated the transient thermal input from the cabin, payload, fuel cells, freon cold plates, hydraulic system, and space environment. Test team members using data, controls, and procedures available to a flight crew controlled the operation of the ATCS. The ATCS performance met or exceeded all thermal and operational requirements for planned and contingency mission support.

Jaax, J. R.↗

NASA NTRS2014

Identification of Medical Training Methods for Exploration Missions

As the National Aeronautics and Space Administration (NASA) and its international partner agencies anticipate eventual exploration missions of longer duration, there is a need to plan for the medical capabilities necessary to maximize crew health and provide the best likelihood of mission success. Current spaceflights consist of 5- to 6-month excursions to the International Space Station (ISS) in low-Earth orbit (LEO), and a 12-month ISS mission is currently in planning stages. However, missions to a near-Earth asteroid (NEA), a return to the moon, or even a mission to Mars will demand unprecedented medical capabilities, particularly relating to the training of the crew medical officers (CMOs). In its attempts to address the questions about medical preparation for spaceflight beyond LEO, the Exploration Medical Capability (ExMC) element within NASA's Human Research Program (HRP) defines a series of gaps. These gaps are shortcomings in knowledge, training, or technology that require resolution before an exploration mission can be undertaken. The ExMC element maintains current information about measures to close these gaps while developing plans for further investigation and research. Data pertaining to the gaps and their present status are available to the general public on the NASA Human Research Wiki and the NASA Human Research Roadmap Web sites (34, 36). One such gap, Gap 3.01, identifies a lack of knowledge about the optimal training methods for in-flight medical conditions identified on the Exploration Medical Condition List (EMCL), taking into account the crew medical officer s (CMOs) clinical background (33). This broad statement encompasses several related issues with the current methods of training CMOs and the medical ground support staff, specifically flight surgeons and biomedical engineers (BMEs) located in mission control, in addition to questions pertaining to the ways in which training will need to be adapted for the medical contingencies unique to exploration missions. To determine the optimal methods of medical training for an exploration medical crew and their ground support team, the historical context of medical operations, the current CMO training methods, and potential alternative training methods were identified.

Long duration space flight↗

NASA NTRSDate not supplied

Supervisory Control with Dual Tasking in Post G-Transition Vehicle Landings

BACKGROUND Landing during exploration spaceflight may consist of both planned automated supervisory control and unplanned crew override. Supervisory control, particularly when performed under cognitive load with additional monitoring tasks, is essential for ensuring overall mission success during landing contingencies. Evaluating performance in a relevant Human Landing System (HLS) supervisory landing task after long-duration microgravity exposure can help identify potential risks from human error and sensorimotor alterations. Adaptive changes in the sensorimotor system can manifest during g-transitions as spatial disorientation. Although training and landing aids facilitate successful landings despite disorientation, these adaptive changes may heighten cognitive demand, which must be considered in the landing strategy. It is important to characterize these effects as soon as possible following the G-transition while the sensorimotor system remains in a state of adaptive flux to inform appropriate countermeasures. METHODS A Multi-attribute Lunar Table Battery (MALTB) task was developed for an iOS tablet device to provide flexible crew testing and training capabilities in-flight and on the ground. Elements of the tablet task were derived from the Multi-Attribute Task Battery (MATB, Cegarra et al. 2020). The task requires crew members to study a map of a planned landing site and memorizing the terrain and surface landmarks to inform potential divert maneuvers during landing. The user will oversee a series of approaches through touchdown simulations on the tablet with an external camera view of the Lunar surface. The primary responsibility of the crew member will be to execute a divert if the guidance recommended site is erroneous (e.g., the guidance projected landing target is not within 10m of the planned landing site center), or the projected landing site is no longer suitable due to surface obstacles. Considering vehicle maneuverability and fuel reserves, the divert capabilities will diminish as the task progresses. In cases where a divert is initiated, a new landing target will need to be designated by the user and will be evaluated for the proximity to the original pre-planned site. A secondary operational monitoring task will challenge the user's cognitive reserve by requiring the user to maintain several gauges within acceptable limits and respond to a visual indicator while completing the landing approach. Outcome measures include distance from the planned landing site to the user-initiate divert landing location, ground slope at the new landing site, time to divert, the ability to accomplish the secondary monitoring tasks, and perceived workload. The tablet task is being evaluated in a ground-based study to determine the learning effect of first-time users. The tablet task will be utilized in a flight study to test performance multiple times postflight. Future potential testing in-flight have been identified for capsules with iOS tablet devices. Multi-attribute Lunar Table Battery Task MALTB comprises video footage of thirty distinct landing conditions. The landing scenarios feature various landing sites (n = 3), hazardous object sizes (n = 6), sun azimuth degrees (n = 4), camera modes (i.e., fixed or gimbaled), and navigation bias (i.e., true or false). Each seventy second trial uses a sixty-degree constant glideslope trajectory. The application architecture and layout include user identification setup and data storing, a guided walkthrough of the task and interface components, practice mode for task familiarization, and a modified Bedford workload scale administered following task completion. The time-based dependent measures are saved locally to the iOS Files application and post-processing scripts have been developed to evaluate the remaining measures of performance. RELEVANCE This project will deliver an operational demonstration of crew monitoring capability following spaceflight and identify potential deficits that may require remediation. Comparison of individual vestibular and cognitive changes with crew performance will help better characterize the landing risks associated with sensorimotor alterations. ACKNOWLEDGEMENTS: This project is funded by NASA’s Human Research Program Human Health Countermeasures Element. REFERENCES Cegarra J, Valery B, Avril E, Calmettes C, Navarro J (2020) OpenMATB: A Multi-Attribute Task Battery promoting task customization, software extensibility and experiment replicability. Behav Res Methods 52:1980-1990 doi: 10.3758/s13428-020-01364-w

Matthew McDonnell↗

DOE OSTI2020

Real-Time Federated Cyber-Transmission-Distribution Testbed Architecture for the Resiliency Analysis

With the ongoing automation driven by the push toward the smart electric grid and the advancement in associated cyber infrastructure, the interaction between physical [electric transmission and distribution (T&D) systems], cyber (communication, automation, and control), and human (grid operators and decision-makers) is increasingly becoming more complex. This creates the requirement of analyzing the effect of the transmission system on the distribution system and vice versa with consideration of the additional complexity of the cyber infrastructure. Such an integrated testbed will also help with resiliency analysis, where resiliency refers to the ability of the system to continue serving energy to the critical loads even with limited extreme contingencies. Interaction of the physical power grid with the cyber layer can be effectively modeled using real-time (RT) simulator for developing and validating various operational and control algorithms. Testbeds using RT simulators with multiple capabilities have been developed at different institutions. Still, no single existing testbed can offer full scalability while simultaneously meeting high fidelity requirements for resiliency experimentation. Co-simulating federated testbed assets can provide a scalable experimentation platform that can be leveraged for verification and validation. In this article, an architecture is developed for federated cyber-physical testbed. A local federation with two real-time simulators is developed: real-time digital simulator (RTDS) and OPAL-RT have been interfaced using VILLAS framework for end-to-end testing. Also, a real-time linear predictor is developed and integrated here to address the communication latency impact on geographically allocated federated RT simulation. Finally, resiliency analysis tools are formulated and utilized for T&D systems. Finally as an illustrative use case, the resiliency of a T&D test system is simulated, and the results are analyzed. A 179-bus Western Electricity Coordinating Council (WECC) transmission system is developed using OPAL-RT/ HYPERSIM, and a modified IEEE 13 node feeder system is modeled in RTDS/RSCAD and interfaced for resiliency analysis.

42 ENGINEERING↗

NASA NTRS2019

Effectiveness of Redundant Communications Systems in Maintaining Operational Control of Small Unmanned Aircraft

NASA has been researching prototype technologies for an Unmanned Aircraft System (UAS) Traffic Management (UTM) system to facilitate enabling of safe and efficient civilian low-altitude airspace and UAS operations, in a series of Technical Capability Levels (TCL) activities that are increasingly complex. In TCL1, completed in 2015, visual line-of-sight operations such as agriculture, firefighting and infrastructure monitoring were addressed with a focus on geofencing and operations scheduling. Technologies and requirements needed for beyond visual line-of-sight (BVLOS) operations in sparsely populated areas were examined in TCL2 in 2016, and those for operations over moderately populated areas in TCL3 in 2017 and 2018. TCL4 will build on the earlier TCLs and focus on technologies and requirements for operations in higher-density urban areas for tasks such as news gathering, package delivery and for managing large-scale contingencies. This paper describes a communications test conducted in TCL3 and discusses insights gained from the test. In the test, operators were directed to equip UAS with redundant Command and Control (C2) communications systems, send a maneuver command to Unmanned Aircraft (UA) via the primary system, then verify execution of the sent command. This exercise was repeated with each redundant system. The test was designed to assess effectiveness of redundant C2 systems in maintaining operational control of UA. Several UAS were configured with varying arrangements to achieve redundancy, including two identical radio modems using the same frequency band, WiFi and Long-Term Evolution (LTE) cellular modems, etc. From the test, digital data such as time maneuver command sent, time maneuver verified, etc., were collected. Descriptions of methods to detect loss of C2 communications and contingency steps for such event were collected and assessed. The final paper will include a detailed analysis of the collected data leading to the following insights. First, effectiveness of redundant C2 systems depends on several factors, such as operational environment and communications service availability. For example, use of two identical point-to-point radio to connect operator and UA on the same frequency band can be effective in mitigating radio malfunction when operating in an environment where possibility of Radio Frequency (RF) interference is low, such as over open plains. However, the same arrangement may not be effective where high level of RF transmissions in broad spectrum ranges can be expected, such as over or near urban areas. For redundant systems that consist of external communications services, such as cellular and satellite communications network, redundancy is maintained only in the areas where more than one services are available. Therefore, UAS operators should have the means to plan for and monitor the performance of external communications services they are relying on to control UA. Second, communications performance needs, such as the minimum data transfer rate and the maximum tolerable latency, should be assessed to reflect the potential hazard that can come from loss of UA control. For example, UA operations over desolate area pose less hazard to people than operations over densely populated area and performance need for the former would be less than the latter.

Jung, Jaewoo↗

DOE OSTI2022

Design, Deployment, and Characterization of the World’s First Flexible Large Power Transformer

GE Research and its partner Prolec GE have designed, built and deployed in the field the world’s first flexible power transformer. The flexible power transformer is a transmission class 3-phase autotransformer configurable in impedance and in voltage which allows it to serve as a universal spare for multiple units in a given fleet. However, the key innovation in this new concept is the online adjustable leakage impedance which allows the transformer to change its impedance without interrupting the transmission line operation. The flexible power transformer can be designed with up to three low voltage transmission class ratings and up to 12 impedance values changeable both online and offline. This report provides an overview of the design, manufacturing, testing, and commissioning of the 165kV, 60MVA prototype built including the results of the field performance validation tests. The prototype was specified in collaboration with Cooperative Energy, the utility host. It was designed and tested in the factory according to IEEE standard C57.12.00 and followed all protocols for transportation, installation, and commissioning of a power transformer. In addition to the prototype, a flexible protection system capable of automatically adjusting its settings upon the transformer impedance was also developed and deployed in the for testing and validation. On September 3, 2021 the prototype was energized in Cooperative Energy’s substation in Columbia, Mississippi to become the world’s first flexible power transformer in operation. Its performances and impact on the grid operation were demonstrated through different field tests. Results obtained confirm that the impedance of the flexible transformer can be varied under load through its full range, from 4.3% to 9.3%, without adverse impacts on the line operation, the protection system, the transformer stability and health condition. Results also proved that the flexible transformer is very effective in controlling power transfer through the line or load sharing between units operating in parallel. Indeed, it was proven that higher impedances decrease the thruput power of the transformer while lower impedances increase it. Up to 26MW was controllable on a line loading of 45MVA. It was also possible to demonstrate that the variation of the transformer impedance has no effect on the circulating current between units in parallel, except a minor transient during the impedance change. It was also proven that the flexible protection relay can update its protection settings automatically when the impedance change was detected. The prototype has operated continuously for more than 12 months now with a peak load exceeding 50MVA corresponding to >80% of its ONAN power rating. No alarm, trip or sign of failure has been reported by the utility. In addition to the development and deployment of the flexible transformer prototype, investigations were carried out on new nanodielectric fluids to replace the mineral oil used in power transformers with the goal of reducing their footprint and weight. The key parameters that were targeted for improvement included the breakdown voltage to reduce clearances between windings and tank hence the footprint; viscosity and thermal conductivity to increase the cooling efficiency and therefore to reduce the winding material. Several nanodielectric mixtures with mineral oil including with alumina (Al2O3), titania (TiO2) and Borum Nitrate (BN) with different surfactants have been analyzed and tested. Unfortunately, despite encouraging results no nanofluid candidate has been found viable to replace mineral oil. With the formulations tested, breakdown voltages are generally similar to mineral oil at lower particle contents and worse at higher particle contents. Viscosity appreciably increased at particles concertation over 2 wt% and thermal conductivity increased slightly at 5wt% and appears to be 10-15% higher at 10 wt% particle content. It is recommended to continue investigations to find solutions that can help increase the power density of future flexible power transformers. Flexible power transformers can significantly help the future power grid by providing more flexibility and resiliency. Indeed, by providing voltage and impedance flexibility, flexible power transformers reduce the need for multiple spares, hence inventory costs for utilities. With their online controllable impedance, they can provide support to the grid and help manage short-circuit currents, power flow, line congestion, and grid stability which will become more important with higher penetrations of intermittent renewable resources. During the field validation tests, it was demonstrated that up to 26MW was controllable on a line loading of 45MVA when the transformer impedance was varied from its minimum to its maximum range. Also, with the impedance range, the short-circuit currents could be reduced by up to 38% at the load side of the transformer. With its controllable impedance, flexible transformers can be used in future strategies of grid resilience to help better prepare the grid to face forecasted severe events including storms, heat waves and contingencies. The flexible power transformers can also find role in other applications including high voltage transmission cables such as offshore wind farms where solutions for energizing the cables and managing the reactive power are of critical importance. The designed flexible power transformer is now fully validated and ready for commercialization. Further analysis on the benefits of flexible power transformers for grid stability and short-circuit management including current limiting capability, reclosure and line restoration, control of inrush current, sizing of flexible AC components (FACTS) would help its rapid adoption by the industry.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS1975

Tug fleet and ground operations schedules and controls. Volume 1: Executive summary

This study presents Tug Fleet and Ground Operations Schedules and Controls plan. This plan was developed and optimized out of a combination of individual Tug program phased subplans, special emphasis studies, contingency analyses and sensitivity analyses. The subplans cover the Tug program phases: (1) Tug operational, (2) Interim Upper Stage (IUS)/Tug fleet utilization, (3) and IUS/Tug payload integration, (4) Tug site activation, (5) IUS/Tug transition, (6) Tug acquisition. Resource requirements (facility, GSE, TSE, software, manpower, logistics) are provided in each subplan, as are appropriate Tug processing flows, active and total IUS and Tug fleet requirements, fleet management and Tug payload integration concepts, facility selection recommendations, site activation and IUS to Tug transition requirements. The impact of operational concepts on Tug acquisition is assessed and the impact of operating Tugs out of KSC and WTR is analyzed and presented showing WTR as a delta. Finally, cost estimates for fleet management and ground operations of the DDT&E and operational phases of the Tug program are given.

Source record↗

DOE OSTI2022

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗

NASA NTRS2010

NASA Ares I Launch Vehicle First Stage Roll Control System Cold Flow Development Test Program Overview

The Ares I launch vehicle is the selected design, chosen to return humans to the moon, Mars, and beyond. It is configured in two inline stages: the First Stage is a Space Shuttle derived five-segment Solid Rocket Booster and the Upper Stage is powered by a Saturn V derived J-2X engine. During launch, roll control for the First Stage (FS) is handled by a dedicated Roll Control System (RoCS) located on the connecting Interstage. That system will provide the Ares I with the ability to counteract induced roll torque while any induced yaw or pitch moments are handled by vectoring of the booster nozzle. This paper provides an overview of NASA s Ares I FS RoCS cold flow development test program including detailed test objectives, types of tests run to meet those objectives, an overview of the results, and applicable lessons learned. The test article was built and tested at the NASA Marshall Space Flight Center in Huntsville, AL. The FS RoCS System Development Test Article (SDTA) is a full scale, flight representative water flow test article whose primary objective was to obtain fluid system performance data to evaluate integrated system level performance characteristics and verify analytical models. Development testing and model correlation was deemed necessary as there is little historical precedent for similar large flow, pulsing systems such as the FS RoCS. The cold flow development test program consisted of flight-similar tanks, pressure regulators, and thruster valves, as well as plumbing simulating flight geometries, combined with other facility grade components and structure. Orifices downstream of the thruster valves were used to simulate the pressure drop through the thrusters. Additional primary objectives of this test program were to: evaluate system surge pressure (waterhammer) characteristics due to thruster valve operation over a range of mission duty cycles at various feed system pressures, evaluate temperature transients and heat transfer in the pressurization system, including regulator blowdown and propellant ullage performance, measure system pressure drops for comparison to analysis of tubing and components, and validate system activation and re-activation procedures for the helium pressurant system. Secondary objectives included: validating system processes for loading, unloading, and purging, validating procedures and system response for multiple failure scenarios, including relief valve operation, and evaluating system performance for contingency scenarios. The test results of the cold flow development test program are essential in validating the performance and interaction of the Roll Control System and anchoring analysis tools and results to a Critical Design Review level of fidelity.

Butt, Adam↗

NASA NTRSDate not supplied

Dynamic Vehicle Assessment for Intelligent Contingency Management of Urban Air Mobility Vehicles

New algorithms will be required to ensure passenger and bystander safety during the expected era of autonomous urban air mobility (UAM) aircraft. This paper examines an approach for assessing the vehicle capability to fly itself and to complete a mission safely. The concepts combine elements of system identification, adaptive control, flight dynamics, envelope predictions, and handling qualities, as well as human pilot intuition. The approach is applied to a simulation of a generic distributed electric propulsion urban air mobility-type aircraft, which was developed under the NASA Transformational Tools and Technologies (TTT) project, Autonomous Systems / Intelligent Contingency Management subproject.

flight envelope↗

NASA NTRSDate not supplied

Dynamic Vehicle Assessment for Intelligent Contingency Management for Urban Air Mobility Vehicles

flight envelope prediction↗

NASA NTRS1998

Initial flight results of the TRMM Kalman filter

The Tropical Rainfall Measuring Mission (TRMM) spacecraft is a nadir pointing spacecraft that nominally controls attitude based on the Earth Sensor Assembly (ESA) output. After a potential single point failure in the ESA was identified, the contingency attitude determination method chosen to backup the ESA-based system was a sixth-order extended Kalman filter that uses magnetometer and digital sun sensor measurements. A brief description of the TRMM Kalman filter will be given, including some implementation issues and algorithm heritage. Operational aspects of the Kalman filter and some failure detection and correction will be described. The Kalman filter was tested in a sun pointing attitude and in a nadir pointing attitude during the in-orbit checkout period, and results from those tests will be presented. This paper will describe some lessons learned from the experience of the TRMM team.

Andrews, Stephen F.↗

NASA NTRS1998

Initial Flight Results of the TRMM Kalman Filter

Andrews, Stephen F.↗