SEARCH · Search NASA
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Flight simulated subsonic off-pad landing and escape maneuvers for vertically launched hypersonic glider - pilot performance and safety requirements
The use of overhead traveling bridge cranes in many varied applications is common practice. In particular, the use of cranes in the nuclear, military, commercial, aerospace, and other industries can involve safety critical situations. Considerations for Human Injury or Casualty, Loss of Assets, Endangering the Environment, or Economic Reduction must be addressed. Traditionally, in order to achieve additional safety in these applications, mechanical systems have been augmented with a variety of devices. These devices assure that a mechanical component failure shall reduce the risk of a catastrophic loss of the correct and/or safe load carrying capability. ASME NOG-1-1998, (Rules for Construction of Overhead and Gantry Cranes, Top Running Bridge, and Multiple Girder), provides design standards for cranes in safety critical areas. Over and above the minimum safety requirements of todays design standards, users struggle with obtaining a higher degree of reliability through more precise functional specifications while attempting to provide "smart" safety systems. Electrical control systems also may be equipped with protective devices similar to the mechanical design features. Demands for improvement of the cranes "control system" is often recognized, but difficult to quantify for this traditionally "mechanically" oriented market. Finite details for each operation must be examined and understood. As an example, load drift (or small motions) at close tolerances can be unacceptable (and considered critical). To meet these high functional demands encoders and other devices are independently added to control systems to provide motion and velocity feedback to the control drive. This paper will examine the implementation of Programmable Electronic Systems (PES). PES is a term this paper will use to describe any control system utilizing any programmable electronic device such as Programmable Logic Controllers (PLC), or an Adjustable Frequency Drive (AID) 'smart' programmable motion controller. Therefore the use of the term Programmable Electronic Systems (PES) is an encompassing description for a large spectrum of programmable electronic control devices.
The NASA Integrated Vehicle Health Management (IVHM) Technology Experiment for X-37 was intended to run IVHM software on-board the X-37 spacecraft. The X-37 is intended to be an unpiloted vehicle that would orbit the Earth for up to 21 days before landing on a runway. The objectives of the experiment were to demonstrate the benefits of in-flight IVHM to the operation of a Reusable Launch Vehicle, to advance the Technology Readiness Level of this IVHM technology within a flight environment, and to demonstrate that the IVHM software could operate on the Vehicle Management Computer. The scope of the experiment was to perform real-time fault detection and isolation for X-37's electrical power system and electro-mechanical actuators. The experiment used Livingstone, a software system that performs diagnosis using a qualitative, model-based reasoning approach that searches system-wide interactions to detect and isolate failures. Two of the challenges we faced were to make this research software more efficient so that it would fit within the limited computational resources that were available to us on the X-37 spacecraft, and to modify it so that it satisfied the X-37's software safety requirements. Although the experiment is currently unfunded, the development effort had value in that it resulted in major improvements in Livingstone's efficiency and safety. This paper reviews some of the details of the modeling and integration efforts, and some of the lessons that were learned.
A robotic manipulator, DTF-1, developed as part of the Flight Telerobotic Servicer (FTS) project at Goddard Space Flight Center is discussed focusing on the technical, operational, and safety requirements. The DTF-1 system design, which is based on the manipulator, gripper, cameras, computer, and an operator control station incorporates the fundamental building blocks of the original FTS, the end product of which was to have been a light-weight, dexterous telerobotic device. For the first time in the history of NASA, space technology and robotics were combined to find new and unique solutions to the demanding requirements of flying a sophisticated robotic manipulator in space. DTF-1 is considered to be the prototype for all future development in space robotics.
This report is a document tree of the safety and integration documents required to develop a space experiment. Pertinent document information for each of the top level (tier one) safety and integration documents, and their applicable and reference (tier two) documents has been identified. This information includes: document title, revision level, configuration management, electronic availability, listed applicable and reference documents, source for obtaining the document, and document owner. One of the main conclusions of this report is that no single document tree exists for all safety and integration documents, regardless of the Shuttle carrier. This document also identifies the need for a single point of contact for customers wishing to access documents. The data in this report serves as a valuable information source for the NASA Lewis Research Center Project Documentation Center, as well as for all developers of space experiments.
Urban air mobility (UAM) refers to air transportation services within an urban area, often in an on-demand fashion. We study air traffic management (ATM) for vehicles in a UAM fleet, while guaranteeing system safety requirements such as traffic separation. Existing ATM methods for unmanned aerial systems, such as UAS traffic management, utilize alternative approaches which do not provide strict safety guarantees. No established infrastructure exists for providing ATM at scale for UAM. We provide a decentralized, hierarchical approach for UAM ATM that allows for scalability to high traffic densities as well as providing theoretical guarantees of correctness with respect to user-provided safety specifications. Our main contributions are two-fold. First, we propose a novel UAM ATM architecture that divides the control authority between vertihubs that are each in charge of all UAM vehicles in their local airspace. Each vertihub also contains a number of vertiports that are in charge of UAM vehicle takeoffs and landings. The resulting architecture is decentralized and hierarchical, which not only enables scalability, but also robustness in the event of any individual vertihub or vertiport no longer being operational. Second, we provide a contract-based correct-by-construction reactive synthesis approach that provably guarantees safety properties with respect to user-provided specifications in linear temporal logic. We demonstrate the approach on large-volume UAM air traffic data.
Mechanical draft cooling towers (MDCTs) serve a critical heat management role in a variety of industries. For nuclear reactors in particular, the consistent, predictable operation of MDCTs is required to avoid damage to infrastructure and reduce the potential for catastrophic failure. Accurate, reliable measurement of MDCT fan speed is therefore an important maintenance and safety requirement. To that end, we have developed an algorithm for automatically predicting the rotational speeds of multiple, simultaneously operating fan rotors using contactless, infrasound measurements. The algorithm is based on identifying the blade passing frequencies (BPFs), their harmonics, as well as the motor frequencies (MFs) for each fan in operation. Using the algorithm, these frequencies can be automatically identified in the acoustic waveform’s short-time Fourier transform spectrogram. Attribution is aided by a set of filters that rely on the unique spectral and temporal characteristics of fan operation, as well as the intrinsic frequency ratios of the BPF harmonics and the BPF/MF signals. The algorithm was tested against infrasound data acquired from infrasound sensors deployed at two research reactors: the Advanced Test Reactor (ATR) located at Idaho National Laboratory (INL) and the High Flux Isotope Reactor (HFIR) located at Oak Ridge National Laboratory (ORNL). After manually identifying the MDCT gearbox ratio, the algorithm was able to quickly yield fan speeds at both reactors in good agreement with ground truth. Ultimately, this work demonstrates the ease by which MDCT fans may be monitored in order to optimize operational conditions and avoid infrastructure damage.
A reactivity insertion accident (RIA) is a design basis accident in which reactivity is rapidly injected as a result of a control rod ejection or blade drop scenario. The resultant power increase can result in fuel rod failure and subsequent release of radioactive material into the reactor’s primary system. For light water reactors, failure under RIAs is typically a result of fuel melt, pellet-cladding interaction, or rod over-pressurization. Fuel melt occurs when the fuel system is unable to transport heat out of the fuel system. Pellet-cladding interaction occurs when an aggressive fuel pellet expansion pushes on an embrittled cladding beyond its strain limit. Rod over-pressurization occurs when a fuel rod exceeds the critical heat flux and departs from nucleate boiling, causing the rod internal pressure to rapidly increase, exceeding the systems pressure, and balloon until it bursts. To prevent failure, regulators have developed safety requirements that limit the injected enthalpy based on the state of the fuel system. However, dispersed fuel could enable the removal or relaxation of regulator-imposed safety criteria. Dispersed fuel embeds fuel particles in a highly conductive metal. Dispersed particles can have a particle radius of 1 µm to greater than 100 µm. Traditional fuel systems are plagued by poor thermal conductivity, especially at higher burnups, thus reducing the ability of the fuel system to respond to an RIA. However, dispersed fuel could improve the ability of the fuel system to transport injected energy away from the fissile material and into the coolant more efficiently. Furthermore, dispersing the fuel particles mitigates hard contact that typically occurs in the traditional zirconium-uranium dioxide fuel system, thus removing pellet-cladding mechanical interaction as a potential failure mechanism. This paper evaluates fuel particles dispersed in a metal matrix using the BISON fuel performance code to develop an initial failure threshold based on melt temperature of the fuel particle and/or cladding material as a function of fission density for beginning-of-life and end-of-life conditions. BISON results show that (1) reducing the size of the particles allows fission density to increase as a function of time, (2) particle-to-particle proximity must be considered to evaluate the limiting conditions, and (3) improving the fuel particle thermal conductivity improves thermal performance.
Our understanding of the fire safety risk in manned spacecraft has been limited by the small scale of the testing we have been able to conduct in low-gravity. Fire growth and spread cannot be expected to scale linearly with sample size so we cannot make accurate predictions of the behavior of realistic scale fires in spacecraft based on the limited low-g testing to date. As a result, spacecraft fire safety protocols are necessarily very conservative and costly. Future crewed missions are expected to be longer in duration than previous exploration missions outside of low-earth orbit and accordingly, more complex in terms of operations, logistics, and safety. This will increase the challenge of ensuring a fire-safe environment for the crew throughout the mission. Based on our fundamental uncertainty of the behavior of fires in low-gravity, the need for realistic scale testing at reduced gravity has been demonstrated. To address this concern, a spacecraft fire safety research project is underway to reduce the uncertainty and risk in the design of spacecraft fire safety systems by testing at nearly full scale in low-gravity. This project is supported by the NASA Advanced Exploration Systems Program Office in the Human Exploration and Operations Mission Directorate. The activity of this project is supported by an international topical team of fire experts from other space agencies to maximize the utility of the data and to ensure the widest possible scrutiny of the concept. The large-scale space flight experiment will be conducted on three missions; each in an Orbital Sciences Corporation Cygnus vehicle after it has deberthed from the ISS. Although the experiment will need to meet rigorous safety requirements to ensure the carrier vehicle does not sustain damage, the absence of a crew allows the fire products to be released into the cabin. The tests will be fully automated with the data downlinked at the conclusion of the test before the Cygnus vehicle reenters the atmosphere. The international topical team is collaborating with the NASA team in the definition of the experiment requirements and performing supporting analysis, experimentation and technology development.
Probabilistic safety requirements currently formulated or proposed for space systems, nuclear reactor systems, nuclear weapon systems, and other types of systems that have a low-probability potential for high-consequence accidents depend on showing that the probability of such accidents is below a specified safety threshold or goal. Verification of compliance depends heavily upon synthetic modeling techniques such as PRA. To determine whether or not a system meets its probabilistic requirements, it is necessary to consider whether there are significant risks that are not fully considered in the PRA either because they are not known at the time or because their importance is not fully understood. The ultimate objective is to establish a reasonable margin to account for the difference between known risks and actual risks in attempting to validate compliance with a probabilistic safety threshold or goal. In this paper, we examine data accumulated over the past 60 years from the space program, from nuclear reactor experience, from aircraft systems, and from human reliability experience to formulate guidelines for estimating probabilistic margins to account for risks that are initially unknown or underappreciated. The formulation includes a review of the safety literature to identify the principal causes of such risks.
The approach, development, and limited system studies associated with a system simulation for an Airport Trailing Vortex Warning System are documented. The usefulness is shown of a systems engineering approach to the problem of developing a system, as dictated by aircraft vortices, which will increase air-traffic flow in the takeoff/landing corridors of busy airports while maintaining the required safety factor for each operation. The simulation program has been developed in a modular form which permits new, more sophisticated component models, when they become available and are required, to be incorporated into the program with a minimum of program modifications. This report documents a limited system study that has been performed using this Total System Simulation Model. The resulting preliminary system requirements, conclusions, and recommendations are given.
The technology effort is identified and assessed that is required to bring the civil uses of RPVs to fruition and to determine whether or not the potential market is real and economically practical, the technologies are within reach, the operational problems are manageable, and the benefits are worth the cost. To do so, the economic, technical, and environmental implications are examined. The time frame is 1980-85. Representative uses are selected; detailed functional and performance requirements are derived for RPV systems; and conceptual system designs are devised. Total system cost comparisons are made with non-RPV alternatives. The potential market demand for RPV systems is estimated. Environmental and safety requirements are examined, and legal and regulatory concerns are identified. A potential demand for 2,000-11,000 RPV systems is estimated. Typical cost savings of 25-35% compared to non-RPV alternatives are determined. There appear to be no environmental problems, and the safety issue appears manageable.
The economic, technical, and environmental implications of remotely piloted vehicles (RVP) are examined. The time frame is 1980-85. Representative uses are selected; detailed functional and performance requirements are derived for RPV systems; and conceptual system designs are devised. Total system cost comparisons are made with non-RPV alternatives. The potential market demand for RPV systems is estimated. Environmental and safety requirements are examined, and legal and regulatory concerns are identified. A potential demand for 2,000-11,000 RVP systems is estimated. Typical cost savings of 25 to 35% compared to non-RPV alternatives are determined. There appear to be no environmental problems, and the safety issue appears manageable.
In the frame of the International Space Station (ISS) Program cooperation, in 1998, the European Space Agency (ESA) approached the National Aeronautics and Space Administration (NASA) with the unique concept of a Payload Safety Review Panel (PSRP) "franchise" based at the European Space Technology Center (ESTEC), where the panel would be capable of autonomously reviewing flight hardware for safety. This paper will recount the course of an ambitious idea as it progressed into a fully functional reality. It will show how a panel initially conceived at NASA to serve a national programme has evolved into an international safety cooperation asset. The PSRP established at NASA began reviewing ISS payloads approximately in late 1994 or early 1995 as an expansion of the pre-existing Shuttle Program PSRP. This paper briefly describes the fundamental Shuttle safety process and the establishment of the safety requirements for payloads intending to use the Space Transportation System and International Space Station (ISS). The paper will also offer some historical statistics about the experiments that completed the payload safety process for Shuttle and ISS. The paper 1 then presents the background of ISS agreements and international treaties that had to be taken into account when establishing the ESA PSRP. The detailed franchising model will be expounded upon, followed by an outline of the cooperation charter approved by the NASA Associate Administrator, Office of Space Flight, and ESA Director of Manned Spaceflight and Microgravity. The resulting ESA PSRP implementation and its success statistics to date will then be addressed. Additionally the paper presents the ongoing developments with the Japan Aerospace Exploration Agency. The discussion will conclude with ideas for future developments, such to achieve a fully integrated international system of payload safety panels for ISS.
A conceptual design study was conducted to devise and evaluate techniques for the external vaporization of fuel for use in an aircraft gas turbine with characteristics similar to the Energy Efficient Engine (E(3)). Three vaporizer concepts were selected and they were analyzed from the standpoint of fuel thermal stability, integration of the vaporizer system into the aircraft engine, engine and vaporizer dynamic response, startup and altitude restart, engine performance, control requirements, safety, and maintenance. One of the concepts was found to improve the performance of the baseline E(3) engine without seriously compromising engine startup and power change response. Increased maintenance is required because of the need for frequent pyrolytic cleaning of the surfaces in contact with hot fuel.
Preparing a vehicle and its payload for a single launch is a complex process that involves thousands of operations. Because the equipment and facilities required to carry out these operations are extremely expensive and limited in number, optimal assignment and efficient use are critically important. Overlapping missions that compete for the same resources, ground rules, safety requirements, and the unique needs of processing vehicles and payloads destined for space impose numerous constraints that, when combined, require advanced scheduling. Traditional scheduling systems use simple algorithms and criteria when selecting activities and assigning resources and times to each activity. Schedules generated by these simple decision rules are, however, frequently far from optimal. To resolve mission-critical scheduling issues and predict possible problem areas, NASA historically relied upon expert human schedulers who used their judgment and experience to determine where things should happen, whether they will happen on time, and whether the requested resources are truly necessary.
The NASA/Navy Benchmarking Exchange (NNBE) was undertaken to identify practices and procedures and to share lessons learned in the Navy's submarine and NASA's human space flight programs. The NNBE focus is on safety and mission assurance policies, processes, accountability, and control measures. This report is an interim summary of activity conducted through October 2002, and it coincides with completion of the first phase of a two-phase fact-finding effort.In August 2002, a team was formed, co-chaired by senior representatives from the NASA Office of Safety and Mission Assurance and the NAVSEA 92Q Submarine Safety and Quality Assurance Division. The team closely examined the two elements of submarine safety (SUBSAFE) certification: (1) new design/construction (initial certification) and (2) maintenance and modernization (sustaining certification), with a focus on: (1) Management and Organization, (2) Safety Requirements (technical and administrative), (3) Implementation Processes, (4) Compliance Verification Processes, and (5) Certification Processes.
Emerging operations involving Advanced Air Mobility (AAM), such as Urban Air Mobility (UAM), pose a challenge to safety assurance and to accessibility within the National Airspace System (NAS).In particular, the public has a low tolerance for risk in aviation and the current NAS tends to be labor-intensive with limited ability to scale up for UAM. In response to this landscape, NASA is collaborating with industry to define a Concept of Operations (ConOps) for In-time System-Wide Safety Assurance (ISSA) for scalable UAM involving a service-oriented architecture. This architecture focuses safety investments for technological solutions that can overcome safety related barriers for emerging operations. By working with industry, consensus can be reached on desirable system traits that are based on integration and fusion of data and leverage increasingly autonomous and automated systems. These complex systems can identify anomalies, precursors, and trends that together enable more proactive management of operational risks. AAM and UAM elevate the need for risk management in relation to increasing density and heterogeneity of vehicles and operations. Whereas safety in today’s NAS is built on a history of programs and technologies that react to incidents and accidents, AAM presents an opportunity to leverage that experience and its implications and proactively integrate safety into the earliest designs of vehicles and systems. In a perfect world AAM and UAM would not be inherently dangerous but until then ensuring the highest quality of safety requirements is the bridge to mitigating risks.