SEARCH · Search NASA

Results for “Assurance Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

All sources NASA NTRS DOE OSTI

NASA NTRS2008

Closing the Certification Gaps in Adaptive Flight Control Software

Over the last five decades, extensive research has been performed to design and develop adaptive control systems for aerospace systems and other applications where the capability to change controller behavior at different operating conditions is highly desirable. Although adaptive flight control has been partially implemented through the use of gain-scheduled control, truly adaptive control systems using learning algorithms and on-line system identification methods have not seen commercial deployment. The reason is that the certification process for adaptive flight control software for use in national air space has not yet been decided. The purpose of this paper is to examine the gaps between the state-of-the-art methodologies used to certify conventional (i.e., non-adaptive) flight control system software and what will likely to be needed to satisfy FAA airworthiness requirements. These gaps include the lack of a certification plan or process guide, the need to develop verification and validation tools and methodologies to analyze adaptive controller stability and convergence, as well as the development of metrics to evaluate adaptive controller performance at off-nominal flight conditions. This paper presents the major certification gap areas, a description of the current state of the verification methodologies, and what further research efforts will likely be needed to close the gaps remaining in current certification practices. It is envisioned that closing the gap will require certain advances in simulation methods, comprehensive methods to determine learning algorithm stability and convergence rates, the development of performance metrics for adaptive controllers, the application of formal software assurance methods, the application of on-line software monitoring tools for adaptive controller health assessment, and the development of a certification case for adaptive system safety of flight.

Jacklin, Stephen A.↗

NASA NTRS2011

State-Based Implicit Coordination and Applications

In air traffic management, pairwise coordination is the ability to achieve separation requirements when conflicting aircraft simultaneously maneuver to solve a conflict. Resolution algorithms are implicitly coordinated if they provide coordinated resolution maneuvers to conflicting aircraft when only surveillance data, e.g., position and velocity vectors, is periodically broadcast by the aircraft. This paper proposes an abstract framework for reasoning about state-based implicit coordination. The framework consists of a formalized mathematical development that enables and simplifies the design and verification of implicitly coordinated state-based resolution algorithms. The use of the framework is illustrated with several examples of algorithms and formal proofs of their coordination properties. The work presented here supports the safety case for a distributed self-separation air traffic management concept where different aircraft may use different conflict resolution algorithms and be assured that separation will be maintained.

Narkawicz, Anthony J.↗

NASA NTRS2016

Traveler Trustworthy Autonomy

NASAs Armstrong Flight Research Center has been engaged in the development of highly automatic safety systems for aviation since the mid 80s. For the past three years under Seedling and Center Innovation funding this work has moved toward the development of a software architecture applicable to autonomous safety. This work is now broadening and accelerating to address the airworthiness issues surrounding making a case for trustworthy autonomy. This software architecture is called the expandable variable-autonomy architecture (EVAA) and utilizes a run-time assurance approach to safety assurance.

autonomy↗

DOE OSTI2025

IEEE PES GM Poster - Cyber-Informed Engineering Approach to Mitigating BESS Supply Chain Concerns

Battery energy storage systems (BESS) are increasingly important to meet the needs of grid resilience and reliability. BESS provide critical grid services, maintaining stability of the grid with increased variable conditions. However, there are significant geopolitical and security concerns regarding their operation in critical infrastructure, due to lack of a domestic supply chain and prevalence of foreign entity of concern (FEOC) components in BESS and associated inverter-based resources. The supply chain challenge is dually exacerbated by a lack of alternative suppliers who can meet the economic targets for energy delivery and a potentially adversarial supply chain. Solutions are needed to secure components, addressing mixed layers of risk and engineering controls. This paper presents a specific application of Cyber-Informed Engineering (CIE) principles for BESS and recommends an alternative strategy to blocking the supply chain, ensuring that grid modernization targets can be met despite lack of a validated or secure supply chain. This study focuses on the United State (U.S.) use case, but the process can be applied globally to address supply chain security challenges. CIE practices represent the next step in functional assurance and risk mitigation, ensuring optimal resource allocation and enhancing security measures to safeguard the future of energy in the U.S. and beyond.

25 - ENERGY STORAGE↗

NASA NTRS1978

On-line parameter estimation using a high sensitivity estimator

An on-line parameter identification method is presented. The method is based on a recursive formulation of the maximum likelihood method, with a significant modification on the gains of the state estimator. In the conventional maximum likelihood method, the Kalman gains are used in the state estimator. This produces unbiased, minimum variance parameter estimates in the presence of process noise and measurement noise, but it also slows the convergence rate when the identification is done on-line. Here we suggest choosing the gains to maximize a measure of the sensitivities of the state estimates to parameter variations. One such criterion is to minimize the trace of the inverse information matrix. This increases the convergence rate significantly. After one or two time constants, the gains are switched to the Kalman values to assure unbiased, minimum-variance estimates. The state estimate will initially be nonoptimal, and may not be adequate for control purposes. In this case, a parallel Kalman filter which uses the identifier's parameter estimates can be used. This method is applied here for the identification of a simple first-order system, and for the identification of short-period stability derivatives of an F-8 aircraft from simulated data.

Mishne, D.↗

NASA NTRS1985

Assuring structural integrity in Army systems

The object of this study was to recommend possible improvements in the manner in which structural integrity of Army systems is assured. The elements of a structural integrity program are described, and relevant practices used in various industries and government organizations are reviewed. Some case histories of Army weapon systems are examined. The mandatory imposition of a structural integrity program patterned after the Air Force Aircraft Structural Integrity Program is recommended and the benefits of such an action are identified.

Source record↗

NASA NTRS1990

Project EGRESS: The design of an assured crew return vehicle for the space station

Keeping preliminary studies by NASA in mind, an Assured Crew Return Vehicle (ACRV) was developed. The system allows the escape of one or more crew members from Space Station Freedom in case of emergency. The design of the vehicle addresses propulsion, orbital operations, reentry, landing and recovery, power and communication, and life support. In light of recent modifications in Space Station design, Project EGRESS (Earthbound Guaranteed ReEntry from Space Station) pays particular attention to its impact on Space Station operations, interfaces and docking facilities, and maintenance needs. A water landing, medium lift vehicle was found to best satisfy project goals of simplicity and cost efficiency without sacrificing the safety and reliability requirements. With a single vehicle, one injured crew member could be returned to Earth with minimal pilot involvement. Since the craft is capable of returning up to five crew members, two such permanently docked vehicles would allow full evacuation of the Space Station. The craft could be constructed entirely with available 1990 technology and launched aboard a shuttle orbiter.

Source record↗

NASA NTRS2008

Reliability Practice at NASA Goddard Space Flight Center

This paper describes in brief the Reliability and Maintainability (R&M) Programs performed directly by the reliability branch at Goddard Space Flight Center (GSFC). The mission assurance requirements flow down is explained. GSFC practices for PRA, reliability prediction/fault tree analysis/reliability block diagram, FMEA, part stress and derating analysis, worst case analysis, trend analysis, limit life items are presented. Lessons learned are summarized and recommendations on improvement are identified.

Pruessner, Paula S.↗

NASA NTRS2011

History of POIC Capabilities and Limitations to Conduct International Space Station Payload Operations

Payload science operations on the International Space Station (ISS) have been conducted continuously twenty-four hours per day, 365 days a year beginning February, 2001 and continuing through present day. The Payload Operations Integration Center (POIC), located at the Marshall Space Flight Center in Huntsville, Alabama, has been a leader in integrating and managing NASA distributed payload operations. The ability to conduct science operations is a delicate balance of crew time, onboard vehicle resources, hardware up-mass to the vehicle, and ground based flight control team manpower. Over the span of the last ten years, the POIC flight control team size, function, and structure has been modified several times commensurate with the capabilities and limitations of the ISS program. As the ISS vehicle has been expanded and its systems changed throughout the assembly process, the resources available to conduct science and research have also changed. Likewise, as ISS program financial resources have demanded more efficiency from organizations across the program, utilization organizations have also had to adjust their functionality and structure to adapt accordingly. The POIC has responded to these often difficult challenges by adapting our team concept to maximize science research return within the utilization allocations and vehicle limitations that existed at the time. In some cases, the ISS and systems limitations became the limiting factor in conducting science. In other cases, the POIC structure and flight control team size were the limiting factors, so other constraints had to be put into place to assure successful science operations within the capabilities of the POIC. This paper will present the POIC flight control team organizational changes responding to significant events of the ISS and Shuttle programs.

Grimaldi, Rebecca↗

NASA NTRS2006

The Modern Design of Experiments for Configuration Aerodynamics: A Case Study

The effects of slowly varying and persisting covariate effects on the accuracy and precision of experimental result is reviewed, as is the rationale for run-order randomization as a quality assurance tactic employed in the Modern Design of Experiments (MDOE) to defend against such effects. Considerable analytical complexity is introduced by restrictions on randomization in configuration aerodynamics tests because they involve hard-to-change configuration variables that cannot be randomized conveniently. Tradeoffs are examined between quality and productivity associated with varying degrees of rigor in accounting for such randomization restrictions. Certain characteristics of a configuration aerodynamics test are considered that may justify a relaxed accounting for randomization restrictions to achieve a significant reduction in analytical complexity with a comparably negligible adverse impact on the validity of the experimental results.

DeLoach, Richard↗

DOE OSTI2020

Technical and Licensing Considerations for Micro-Reactors

The U.S. Nuclear Regulatory Commission (NRC) has interacted with vendors pursuing the commercialization of micro-reactors (i.e., reactors capable of producing about 1 MW(th) to 20 MW(th) of energy from nuclear fission). It is envisioned that micro-reactors could be assembled and fueled in a factory and shipped to a site. Many of the sites are expected to be remote locations requiring off-grid power or in some cases military bases. The objective of this effort is to explore the technical issues and the approach required to reach a finding of "reasonable assurance of public health and safety" for this new and different class of reactors. The analysis performed here leverages available micro-reactor design and testing data available from national laboratory experience as well as commercial design information to explore technical issues. Some factors considered include source term, accidents that would need to be analyzed, and the extent of the probabilistic risk assessment (PRA). The technical evaluation was performed within the framework of the Licensing Modernization Project (LMP) to identify licensing basis events, classification of structures, systems and components, and defense-in-depth needed to provide regulatory certainty. With this framework and technical evaluation in mind, the scope and content of a micro-reactor licensing application is discussed.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

DOE OSTI2024

R&D to Ensure a Scientific Basis for Qualification Tests and Standards (Final Report)

Project return on investment in a photovoltaic (PV) system depends increasingly on maintaining high energy yields, and the system lifetime is a major factor in levelized cost of electricity (LCOE). Thus, the rate of PV deployment and the success of these assets depends upon reliable long-term power generation. The overarching objective of this program is to improve photovoltaic (PV) module reliability via development of tests and standards. Where reliability problems or risk are discovered, we can design tests to ensure that these liabilities don't affect future generations of products. Customers can use these tests to understand which products are susceptible to certain degradation mechanisms, and manufacturers can use the tests to design unwanted characteristics out of their products. The work under this program identifies PV reliability needs, performs characterization that provides scientific understanding of targeted degradation mechanisms, and translates those data into practical and predictive test protocols and standards. Major accomplishments include: A model for polarization-type potential induced degradation (PID-p) was developed and validated against experimental data. NREL is currently leading a new edition of IEC 62804-1 for PID detection. PID-p can cause large losses in current and voltage for some module designs on cloudy days. Finite element modeling (FEM) and experiment was used to determine when cells crack in a module. It was shown that cells in landscape orientation are much more likely to crack than those on portrait orientation. Shortly thereafter, the first products with portrait-oriented cells were introduced. Studies of how to test for light and elevated temperature degradation (LeTID) culminated with the publication of IEC TS 63342. Software to predict the progression of LeTID was developed, validated, and made publicly available. Field validated tests and international standards for durability of PV module coatings abrasion, backsheets, and encapsulants were developed. Examples are IEC 62788-1-1, IEC 62788-2 ED2, IEC TS 62788-7-2, IEC 62788-7-3 ED1, IEC 63209-2. NREL led the development a high-temperature testing technical specification, and published guidelines that enable installers to determine whether higher-temperature testing is needed, simply based on location and mounting configuration. In a number of our case studies, variations in the bills of materials or workmanship have been associated with variations in reliability. These observations emphasize the importance of quality assurance to reliability. A framework for criticality (i.e. Pareto) analysis was developed and published. The framework helps us and other researchers determine what problems should be addressed for reliability research to have the biggest industry impact. NREL continues to participate actively in international standards development and stakeholder engagement activities, including organizing an annual PV Reliability Workshop. These activities are important for ensuring we address issues that are relevant and timely, and that we convey our results to those who may benefit.

14 SOLAR ENERGY↗

NASA NTRS1989

Space shuttle Production Verification Motor 1 (PV-1) static fire

All inspection and instrumentation data indicate that the PV-1 static test firing conducted 18 Aug. 1988 was successful. With the exception of the intentionally flawed joints and static test modifications, PV-1 was flight configuration. Fail-safe flaws guaranteeing pressure to test the sealing capability of primary O-rings were included in the aft field joint, case-to-nozzle joint, and nozzle internal Joint 5. The test was conducted at ambient conditions, with the exception of the field joints and case/nozzle joints which were maintained at a minimum of 75 F. Ballistics performance values were within specification requirements. The PV-1 motor exhibited chamber pressure oscillations similar to previously tested Space Shuttle redesigned solid rocket motors, particularly QM-7. The first longitudinal mode oscillations experienced by PV-1 were the strongest ever measured in a Space Shuttle motor. Investigation into this observation is being conducted. Joint insulation performed as designed with no evidence of gas flow within unflawed forward field joints. The intentionally flawed center and aft case field joint insulation performance was excellent. There was no evidence of hot gas past the center field joint capture feature O-ring, the case-to-nozzle joint primary O-ring, or the aft field joint primary O-ring. O-ring seals and barriers with assured pressure at the flaws showed erosion and heat effect, but all sealed against passage of hot gases with the exception of the aft field joint capture feature O-ring. There was no evidence of erosion, heat effect, or blowby on any O-ring seals or barriers at the unflawed joints. Nozzle performance was nominal with typical erosion. Post-test examination revealed that the forward nose ring was of the old high performance motor design configuration with the 150-deg ply angle. All nozzle components remained intact for post-test evaluation. The thrust vector control system operated correctly. The water deluge system, CO2 quench, and other test equipment performed as planned during all required test operations.

Source record↗

NASA NTRS2009

Evaluation of Margins of Safety in Brazed Joints

One of the essential steps in assuring reliable performance of high cost critical brazed structures is the assessment of the Margin of Safety (MS) of the brazed joints. In many cases the experimental determination of the failure loads by destructive testing of the brazed assembly is not practical and cost prohibitive. In such cases the evaluation of the MS is performed analytically by comparing the maximum design loads with the allowable ones and incorporating various safety or knock down factors imposed by the customer. Unfortunately, an industry standard methodology for the design and analysis of brazed joints has not been developed. This paper provides an example of an approach that was used to analyze an AlBeMet 162 (38%Be-62%Al) structure brazed with the AWS BAlSi-4 (Al-12%Si) filler metal. A practical and conservative interaction equation combining shear and tensile allowables was developed and validated to evaluate an acceptable (safe) combination of tensile and shear stresses acting in the brazed joint. These allowables are obtained from testing of standard tensile and lap shear brazed specimens. The proposed equation enables the assessment of the load carrying capability of complex brazed joints subjected to multi-axial loading.

Flom, Yury↗

NASA NTRS2020

NASA quality assurance in an MBSE world

We explore the impact and consequences of the MBSE Value items discussed above and how they impact the disciplines of quality assurance, reliability and maintainability, system safety, and software assurance. We provide insight into how the MBSE modeling tools can be used to define S&MA processes (ideally as a result of Use Case [1] elaboration of processes represented in MagicDraw®), produce S&MA products (ViewEditor output of various items), and represent S&MA disciplines (S&MA inside of MagicDraw). We also provide insight into the degree to which some elements can be directly integrated into a SysML® model and when, as often happens, an interface to some external source must be provided.

Evans, John W.↗

NASA NTRS2015

Check-Cases for Verification of 6-Degree-of-Freedom Flight Vehicle Simulations

The rise of innovative unmanned aeronautical systems and the emergence of commercial space activities have resulted in a number of relatively new aerospace organizations that are designing innovative systems and solutions. These organizations use a variety of commercial off-the-shelf and in-house-developed simulation and analysis tools including 6-degree-of-freedom (6-DOF) flight simulation tools. The increased affordability of computing capability has made highfidelity flight simulation practical for all participants. Verification of the tools' equations-of-motion and environment models (e.g., atmosphere, gravitation, and geodesy) is desirable to assure accuracy of results. However, aside from simple textbook examples, minimal verification data exists in open literature for 6-DOF flight simulation problems. This assessment compared multiple solution trajectories to a set of verification check-cases that covered atmospheric and exo-atmospheric (i.e., orbital) flight. Each scenario consisted of predefined flight vehicles, initial conditions, and maneuvers. These scenarios were implemented and executed in a variety of analytical and real-time simulation tools. This tool-set included simulation tools in a variety of programming languages based on modified flat-Earth, round- Earth, and rotating oblate spheroidal Earth geodesy and gravitation models, and independently derived equations-of-motion and propagation techniques. The resulting simulated parameter trajectories were compared by over-plotting and difference-plotting to yield a family of solutions. In total, seven simulation tools were exercised.

Murri, Daniel G.↗

NASA NTRS1977

Feeding the feeder

Too often the equipment used to move difficult to handle powdery material from a hopper to process creates a complex of devices whose end result falls short on good performance...simply because equipment design, in many cases, has not kept up with advanced technological concepts in fine powder handling. The Feeder, being the key to an efficient feed system, must be assured a continuous flow from the storage tank...without bridging, arching, spasmodic flow or uncontrolled flushing. The causes and effects of flow problems are discussed and also solutions are offered based on the combination of theoretical and practical experience.

Kurylchek, A. L.↗

NASA NTRS1985

Motivational contracting in space programs - Government and industry prospectives

NASA's Marshall Space Flight Center has used incentive-free policies in contracting for Apollo's Saturn Launch vehicle hardware, as well as award-fee contracts for major development and early production programs in the case of the Space Shuttle Program. These programs have evolved to a point at which multiple incentive fees are useful in motivating cost reductions and assuring timely achievement of delivery requirements and flight mission goals. An examination is presently conducted of the relative success of these motivation-oriented techniques, drawing on the comments of both government and industry personnel.

Clough, D. R.↗