Search NASA⌕ Search

SEARCH · Search NASA

Results for “Contingency Management”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Tell Me about Your Lemonade Stand

At STARSYS, we execute many Firm Fixed Price (FFP) programs for the development of mechanical systems for spacecraft. Contracting this way pre-suppose that we have the ability to establish and hold scope for a system that has yet to be defined. To do FFP, it is critical that we have program managers who are masters at cost control. Fortunately, we have some "masters" in our company. They just seem to have a knack for driving to a financial target. Doesn't matter if the program has contingency or not. Doesn't seem to matter if they use MS Project, Excel spread-sheets, or the back of an envelope. Doesn't even seem to matter whether the program is set up as a financial challenge or a winner.

Tibbitts, Scott↗

Application of Hybrid Optimization-Expert System for Optimal Power Management on Board Space Power Station

The space power system has two sources of energy: photo-voltaic blankets and batteries. The optimal power management problem on-board has two broad operations: off-line power scheduling to determine the load allocation schedule of the next several hours based on the forecast of load and solar power availability. The nature of this study puts less emphasis on speed requirement for computation and more importance on the optimality of the solution. The second category problem, on-line power rescheduling, is needed in the event of occurrence of a contingency to optimally reschedule the loads to minimize the 'unused' or 'wasted' energy while keeping the priority on certain type of load and minimum disturbance of the original optimal schedule determined in the first-stage off-line study. The computational performance of the on-line 'rescheduler' is an important criterion and plays a critical role in the selection of the appropriate tool. The Howard University Center for Energy Systems and Control has developed a hybrid optimization-expert systems based power management program. The pre-scheduler has been developed using a non-linear multi-objective optimization technique called the Outer Approximation method and implemented using the General Algebraic Modeling System (GAMS). The optimization model has the capability of dealing with multiple conflicting objectives viz. maximizing energy utilization, minimizing the variation of load over a day, etc. and incorporates several complex interaction between the loads in a space system. The rescheduling is performed using an expert system developed in PROLOG which utilizes a rule-base for reallocation of the loads in an emergency condition viz. shortage of power due to solar array failure, increase of base load, addition of new activity, repetition of old activity etc. Both the modules handle decision making on battery charging and discharging and allocation of loads over a time-horizon of a day divided into intervals of 10 minutes. The models have been extensively tested using a case study for the Space Station Freedom and the results for the case study will be presented. Several future enhancements of the pre-scheduler and the 'rescheduler' have been outlined which include graphic analyzer for the on-line module, incorporating probabilistic considerations, including spatial location of the loads and the connectivity using a direct current (DC) load flow model.

Momoh, James↗

SPHERES and Astrobee: Space Station Robotic Free Flyers

Free-flying space robots can be used when humans are present to off-load routine work, to increase astronaut productivity, and to handle contingencies. The International Space Station (ISS), for example, is a continuously manned orbital laboratory the size of a large house, which contains many thousands of inventory items and hundreds of diverse payloads and experiments - all of which have to be managed by 6 person crew. To help with this, NASA is developing and testing robotic free-flyers on the ISS. SPHERES (Synchronized Position Hold, Engage, Reorient, Experimental Satellites) is an ISS facility with three nano-satellites designed to research estimation, control, and autonomy algorithms. SPHERES are volleyball-sized, have their own power, propulsion and navigation systems, and work on the ISS under astronaut supervision. For more than 10 years, NASA has made SPHERES available to other U.S. government agencies, schools, commercial companies and students as a platform for science, technology development, and education. SPHERES will soon be succeeded by the new Astrobee free-flying robot. Astrobee builds on the success of SPHERES, but in addition to research, the robot will also be used for housekeeping and monitoring duties without astronaut supervision. Astrobee makes extensive use of open-source (the complete software stack is available on GitHub) and is scheduled to be installed on the ISS in late Spring 2018.

Benavides, Jose V.↗

Protecting intellectual property in space; Proceedings of the Aerospace Computer Security Conference, McLean, VA, March 20, 1985

The primary purpose of the Aerospace Computer Security Conference was to bring together people and organizations which have a common interest in protecting intellectual property generated in space. Operational concerns are discussed, taking into account security implications of the space station information system, Space Shuttle security policies and programs, potential uses of probabilistic risk assessment techniques for space station development, key considerations in contingency planning for secure space flight ground control centers, a systematic method for evaluating security requirements compliance, and security engineering of secure ground stations. Subjects related to security technologies are also explored, giving attention to processing requirements of secure C3/I and battle management systems and the development of the Gemini trusted multiple microcomputer base, the Restricted Access Processor system as a security guard designed to protect classified information, and observations on local area network security.

Source record↗

ISS Regenerative Life Support: Challenges and Success in the Quest for Long-Term Habitability in Space

This presentation will discuss the International Space Station s (ISS) Regenerative Environmental Control and Life Support System (ECLSS) operations with discussion of the on-orbit lessons learned, specifically regarding the challenges that have been faced as the system has expanded with a growing ISS crew. Over the 10 year history of the ISS, there have been numerous challenges, failures, and triumphs in the quest to keep the crew alive and comfortable. Successful operation of the ECLSS not only requires maintenance of the hardware, but also management of the station resources in case of hardware failure or missed re-supply. This involves effective communication between the primary International Partners (NASA and Roskosmos) and the secondary partners (JAXA and ESA) in order to keep a reserve of the contingency consumables and allow for re-supply of failed hardware. The ISS ECLSS utilizes consumables storage for contingency usage as well as longer-term regenerative systems, which allow for conservation of the expensive resources brought up by re-supply vehicles. This long-term hardware, and the interactions with software, was a challenge for Systems Engineers when they were designed and require multiple operational workarounds in order to function continuously. On a day-to-day basis, the ECLSS provides big challenges to the on console controllers. Main challenges involve the utilization of the resources that have been brought up by the visiting vehicles prior to undocking, balance of contributions between the International Partners for both systems and resources, and maintaining balance between the many interdependent systems, which includes providing the resources they need when they need it. The current biggest challenge for ECLSS is the Regenerative ECLSS system, which continuously recycles urine and condensate water into drinking water and oxygen. These systems were brought to full functionality on STS-126 (ULF-2) mission. Through system failures and recovery, the ECLSS console has learned how to balance the water within the systems, store and use water for contingencies, and continue to work with the International Partners for short-term failures. Through these challenges and the system failures, the most important lesson learned has been the importance of redundancy and operational workarounds. It is only because of the flexibility of the hardware and the software that flight controllers have the opportunity to continue operating the system as a whole for mission success.

Bazley, Jesse A.↗

Testing Enabling Technologies for Safe UAS Urban Operations

A set of more than 100 flight operations were conducted at NASA Langley Research Center using small UAS (sUAS) to demonstrate, test, and evaluate a set of technologies and an overarching air-ground system concept aimed at enabling safety. The research vehicle was tracked continuously during nominal traversal of planned flight paths while autonomously operating over moderately populated land. For selected flights, off-nominal risks were introduced, including vehicle-to-vehicle (V2V) encounters. Three contingency maneuvers were demonstrated that provide safe responses. These maneuvers made use of an integrated air/ground platform and two on-board autonomous capabilities. Flight data was monitored and recorded with multiple ground systems and was forwarded in real time to a UAS traffic management (UTM) server for airspace coordination and supervision.

Moore, Andrew J.↗

Trajectory Design and Control for the Compton Gamma Ray Observatory Re-Entry

The Compton Gamma Ray Observatory (CGRO) controlled re-entry operation was successfully conducted in June of 2000. The surviving parts of the spacecraft landed in the Pacific Ocean within the predicted footprint. The design of the maneuvers to control the trajectory to accomplish this re-entry presented several challenges. These challenges included timing and duration of the maneuvers, fuel management, post maneuver position knowledge, collision avoidance with other spacecraft, accounting for the break-up of the spacecraft into several pieces with a wide range of ballistic coefficients, and ensuring that the impact footprint would remain within the desired landing area in the event of contingencies. This paper presents the initial re-entry trajectory design and the evolution of the design into the maneuver sequence used for the re-entry. The paper discusses the constraints on the trajectory design, the modifications made to the initial design and the reasons behind these modifications. Data from the re-entry operation are presented.

Hoge, Susan↗

Docking Offset Between the Space Shuttle and the International Space Station and Resulting Impacts to the Transfer of Attitude Reference and Control

The Space Shuttle does not dock at an exact 90 degrees to the International Space Station (ISS) x-body axis. This offset from 90 degrees, along with error sources within their respective attitude knowledge, causes the two vehicles to never completely agree on their attitude, even though they operate as a single, mated stack while docked. The docking offset can be measured in flight when both vehicles have good attitude reference and is a critical component in calculations to transfer attitude reference from one vehicle to another. This paper will describe how the docking offset and attitude reference errors between both vehicles are measured and how this information would be used to recover Shuttle attitude reference from ISS in the event of multiple failures. During STS-117, ISS on-board Guidance, Navigation and Control (GNC) computers began having problems and after several continuous restarts, the systems failed. The failure took the ability for ISS to maintain attitude knowledge. This paper will also demonstrate how with knowledge of the docking offset, the contingency procedure to recover Shuttle attitude reference from ISS was reversed in order to provide ISS an attitude reference from Shuttle. Finally, this paper will show how knowledge of the docking offset can be used to speed up attitude control handovers from Shuttle to ISS momentum management. By taking into account the docking offset, Shuttle can be commanded to hold a more precise attitude which better agrees with the ISS commanded attitude such that start up transients with the ISS momentum management controllers are reduced. By reducing start-up transients, attitude control can be transferred from Shuttle to ISS without the use of ISS thrusters saving precious on-board propellant, crew time and minimizing loads placed upon the mated stack.

Helms, W. Jason↗

Aerospace Safety Advisory Panel

This report covers the activities of the Aerospace Safety Advisory Panel (ASAP) for calendar year 1998-a year of sharp contrasts and significant successes at NASA. The year opened with the announcement of large workforce cutbacks. The slip in the schedule for launching the International Space Station (ISS) created a five-month hiatus in Space Shuttle launches. This slack period ended with the successful and highly publicized launch of the STS-95 mission. As the year closed, ISS assembly began with the successful orbiting and joining of the Functional Cargo Block (FGB), Zarya, from Russia and the Unity Node from the United States. Throughout the year, the Panel maintained its scrutiny of NASA's safety processes. Of particular interest were the potential effects on safety of workforce reductions and the continued transition of functions to the Space Flight Operations Contractor. Attention was also given to the risk management plans of the Aero-Space Technology programs, including the X-33, X-34, and X-38. Overall, the Panel concluded that safety is well served for the present. The picture is not as clear for the future. Cutbacks have limited the depth of talent available. In many cases, technical specialties are 'one deep.' The extended hiring freeze has resulted in an older workforce that will inevitably suffer significant departures from retirements in the near future. The resulting 'brain drain' could represent a future safety risk unless appropriate succession planning is started expeditiously. This and other topics are covered in the section addressing workforce. The major NASA programs are also limited in their ability to plan property for the future. This is of particular concern for the Space Shuttle and ISS because these programs are scheduled to operate well into the next century. In the case of the Space Shuttle, beneficial and mandatory safety and operational upgrades are being delayed because of a lack of sufficient present funding. Likewise, the ISS has little flexibility to begin long lead-time items for upgrades or contingency planning. For example, the section on computer hardware and software contains specific findings related to required longer range safety-related actions. NASA can be proud of its accomplishments this past year, but must remain ever vigilant, particularly as ISS assembly begins to accelerate. The Panel will continue to focus on both the short- and long-term aspects of risk management and safety planning. This task continues to be made manageable and productive by the excellent cooperation the Panel receives from both NASA and its contractors. Particular emphasis will continue to be directed to longer term workforce and program planning issues as well as the immediate risks associated with ISS assembly and the initial flights of the X-33 and X-34. Section 2 of this report presents specific findings and recommendations generated by ASAP activities during 1998. Section 3 contains more detailed information in support of these findings and recommendations. Appendix A is a current roster of Panel members, consultants, and staff. Appendix B contains NASA's response to the findings and recommendations from the 1997 ASAP Annual Report. Appendix C details the fact-finding activities of the Panel in 1998. During the year, Mr. Richard D. Blomberg was elected chair of the Panel and Vice Admiral (VADM) Robert F Dunn was elected deputy chair. VADM Bernard M. Kauderer moved from consultant to member. Mr. Charles J. Donlan retired from the Panel after many years of meritorious service. Ms. Shirley C. McCarty and Mr. Robert L. ('Hoot') Gibson joined the Panel as consultants.

Source record↗

Trajectory Design and Control for the Compton Gamma Ray Observatory Re-Entry

The Compton Gamma Ray Observatory (CGRO) controlled re-entry operation was successfully conducted in June of 2000. The surviving parts of the spacecraft landed in the Pacific Ocean within the nominal impact target zone. The design of the maneuvers to control the trajectory to accomplish this re-entry presented several challenges. These challenges included the timing and duration of the maneuvers, propellant management, post-maneuver state determination, collision avoidance with other spacecraft, accounting for the break-up of the spacecraft into several pieces with a wide range of ballistic coefficients, and ensuring that the impact footprint would remain within the desired impact target zone in the event of contingencies. This paper presents the initial re-entry trajectory design and traces the evolution of that design into the maneuver sequence used for the re-entry. The paper also discusses the spacecraft systems and operational constraints imposed on the trajectory design and the required modifications to the initial design based on those constraints. Data from the reentry operation are also presented.

Hoge, Susan↗

STS-114: Discovery L-2 Countdown Status Briefing

George Diller of NASA Public Affairs hosted this briefing. Pete Nickolenko, NASA Test Director; Scott Higgenbotham, STS-114 Payload-Mission Manager; Cathy Winters, Shuttle Weather Officer were present. Pete reports his team has completed the avionics system check ups, servicing of the cryogenic tanks will take about seven hours that day, and will perform engine system checks and pad close outs come evening. Pete also summarized other standard close out activities: check ups of the Orbiter and ground communications network, rotary service, structure retraction, and external tank load (ETL). Pete reported that the mission will be 12 days with two weather contingency days, and end of mission landing scheduled at Kennedy Space Center (KSC) at approximately 11:00 in the morning, Eastern time on July 25th. Scott briefly reported that all hardware is on board Discovery, closed out, and ready to fly. Cathy reported that hurricane Dennis moved to the North and looking forward to launch. She mentioned of a new hurricane looming and will be named Emily, spotted some crosswinds which will migrate to the west, there is 30% probability weather prohibiting launch. Cathy further gave current weather forecast supported with charts: the Launch Forecast, Tanking Forecast, SRB (Shuttle Solid Rocket Booster) Forecast, CONUS and TAL Launch Sites Forecast, and with 24 hours and 48 hours turn around plan. Launch constraints, weather, crosswinds, cloud cover, ground imagery system, launch countdown, launch crews, mission management simulations, launch team simulations were topics covered with the News Media.

Source record↗

NASA Enterprise Managed Cloud Computing (EMCC): Delivering an Initial Operating Capability (IOC) for NASA use of Commercial Infrastructure-as-a-Service (IaaS)

In 2016, Ames supported the NASA CIO in delivering an initial operating capability for Agency use of commercial cloud computing. This presentation provides an overview of the project, the services approach followed, and the major components of the capability that was delivered. The presentation is being given at the request of Amazon Web Services to a contingent representing the Brazilian Federal Government and Defense Organization that is interested in the use of Amazon Web Services (AWS). NASA is currently a customer of AWS and delivered the Initial Operating Capability using AWS as its first commercial cloud provider. The IOC, however, designed to also support other cloud providers in the future.

IT Governance for Cloud Computing↗

Voyager engineering improvements for Uranus encounter

Engineering changes made on the Voyager spacecraft during their explorations of the outer solar system are discussed. A recovery from a scan actuator fault, achieved by ground testing, in flight capability enhancement and testing, conservation of actuator usage and a set of contingency plans to substitute roll motion of the spacecraft for motion of the scan platform in the AZ direction, is discussed. General engineering improvements made are addressed, including a scan platform anticreep patch modification, an improvement of dynamic performance during maneuvers, and adaptive control of the attitude control deadband. Changes made in the power management are described. Finally, engineering improvements made in order to enhance scientific findings at the Uranus encounter are reviewed in detail. The two most important were the increased gyro drift turn rate capability to accommodate image motion compensation for the close fly-by of Miranda and the reduction in spacecraft rates to accommodate increased imaging exposure times without incurring excessive image smear.

Marderness, H. P.↗

Introduction and Mission Response Team (MRT)

On February 1, 2003 the Space Shuttle Columbia, returning to Earth with a crew of seven astronauts, disintegrated along a track extending from California to Louisiana. Observers on the ground filmed breakup of the spacecraft. Debris fell along a 567 statute mile track from Littlefield, Texas to Fort Polk, Louisiana; the largest ever recorded debris field. At the time of the accident the National Aeronautics and Space Administration (NASA) flight surgeon on-duty at the Mission Control Center (MCC) in Houston, Texas initiated the medical contingency response. The DOD surgeon at Patrick Air Force Base was notified, NASA medical personnel were recalled and the services of Armed Forces Institute of Pathology (AFIP) were requested. Subsequent to the accident the NASA flight surgeons that had supported the crew on orbit now provided medical support to the crewmember s families. Federal Emergency Management Agency (FEMA), the National Transportation Safety Board (NTSB), the Federal Bureau of Investigation (FBI) and numerous other federal, state and local agencies along with the citizens of Texas and Louisiana responded to the disaster. Search and recovery was managed from a Disaster Field Office (DFO) established in Lufkin, Texas. Mishap Investigation Team (MIT) medical operations were managed from Barksdale Air Force Base, Louisiana. Accident investigation teams (Columbia Accident Investigation Task Force (CAITF) and Columbia Accident Investigation Board (CAIB)) appointed immediately after the disaster included current and former authorities in space medicine. In August 2003, the CAIB concluded its investigation and released its findings in a report published in February 2004.

Pool, Sam↗

Conceptual Drivers for an Exploration Medical System

Interplanetary spaceflight, such as NASA's proposed three-year mission to Mars, provides unique and novel challenges when compared with human spaceflight to date. Extended distance and multi-year missions introduce new elements of operational complexity and additional risk. These elements include: inability to resupply medications and consumables, inability to evacuate injured or ill crew, uncharted psychosocial conditions, and communication delays that create a requirement for some level of autonomous medical capability. Because of these unique challenges, the approaches used in prior programs have limited application to a Mars mission. On a Mars mission, resource limitations will significantly constrain available medical capabilities, and require a paradigm shift in the approach to medical system design and risk mitigation for crew health. To respond to this need for a new paradigm, the Exploration Medical Capability (ExMC) Element is assessing each Mars mission phase-transit, surface stay, rendezvous, extravehicular activity, and return-to identify and prioritize medical needs for the journey beyond low Earth orbit (LEO). ExMC is addressing both planned medical operations, and unplanned contingency medical operations that meld clinical needs and research needs into a single system. This assessment is being used to derive a gap analysis and studies to support meaningful medical capabilities trades. These trades, in turn, allow the exploration medical system design to proceed from both a mission centric and ethics-based approach, and to manage the risks associated with the medical limitations inherent in an exploration class mission. This paper outlines the conceptual drivers used to derive medical system and vehicle needs from an integrated vision of how medical care will be provided within this paradigm. Keywords: (Max 6 keywords: exploration, medicine, spaceflight, Mars, research, NASA)

Antonsen, Erik↗

Solar Dynamics Observatory Guidance, Navigation, and Control System Overview

The Solar Dynamics Observatory (SDO) was designed and built at the Goddard Space Flight Center, launched from Cape Canaveral on February 11, 2010, and reached its final geosynchronous science orbit on March 16, 2010. The purpose of SDO is to observe the Sun and continuously relay data to a dedicated ground station. SDO remains Sun-pointing throughout most of its mission for the instruments to take measurements of the Sun. The SDO attitude control system (ACS) is a single-fault tolerant design. Its fully redundant attitude sensor complement includes sixteen coarse Sun sensors (CSSs), a digital Sun sensor (DSS), three two-axis inertial reference units (IRUs), and two star trackers (STs). The ACS also makes use of the four guide telescopes included as a part of one of the science instruments. Attitude actuation is performed using four reaction wheels assemblies (RWAs) and eight thrusters, with a single main engine used to provide velocity-change thrust for orbit raising. The attitude control software has five nominal control modes, three wheel-based modes and two thruster-based modes. A wheel-based Safehold running in the attitude control electronics box improves the robustness of the system as a whole. All six modes are designed on the same basic proportional-integral-derivative attitude error structure, with more robust modes setting their integral gains to zero. This paper details the final overall design of the SDO guidance, navigation, and control (GN&C) system and how it was used in practice during SDO launch, commissioning, and nominal operations. This overview will include the ACS control modes, attitude determination and sensor calibration, the high gain antenna (HGA) calibration, and jitter mitigation operation. The Solar Dynamics Observatory mission is part of the NASA Living With a Star program, which seeks to understand the changing Sun and its effects on the Solar System, life, and society. To this end, the SDO spacecraft carries three Sun-observing instruments: Helioseismic and Magnetic Imager (HMI), led by Stanford University; Atmospheric Imaging Assembly (AIA), led by Lockheed Martin Space and Astrophysics Laboratory; and Extreme Ultraviolet Variability Experiment (EVE), led by the University of Colorado. The basic mission is to observe the Sun for a very high percentage of the 5-year mission (10-year goal) with long stretches of uninterrupted observations and with constant, high-data-rate transmission to a dedicated ground station to be located in White Sands, New Mexico. These goals guided the design of the spacecraft bus that will carry and service the three-instrument payload. Overarching design goals for the bus are geosynchronous orbit, near-constant Sun observations with the ability to fly through eclipses, and constant HGA contact with the dedicated ground station. A three-axis stabilized ACS is needed both to point at the Sun accurately and to keep the roll about the Sun vector correctly positioned with respect to the solar north pole. This roll control is especially important for the magnetic field imaging of HM I. The mission requirements have several general impacts on the ACS design. Both the AIA and HMI instruments are very sensitive to the blurring caused by jitter. Each has an image stabilization system (ISS) with some ability to filter out high frequency motion, but below the bandwidth of the ISS the control system must compensate for disturbances within the ACS bandwidth or avoid exciting jitter at higher frequencies. Within the ACS bandwidth, the control requirement imposed by AIA is to place the center of the solar disk no more than 2 arc sec, 3 , from a body-defined target based on one of the GTs that accompany the instrument. This body-defined target, called the science reference boresight (SRB), was determined from the postlaunch orientation of the GTs by averaging the bounding telescope boresights for pitch to get a pitch SRB coordinate, and by averaging the bounding boresights for yaw toet the yaw SRB coordinate. The location of this SRB in the 0.5-deg field-of-view for each GT then becomes the central target for each telescope; one GT is selected for use as the ACS controlling guide telescope (CGT) at any given time. Fine Sun-pointing is effected based on this SRB for all three instruments when the Sun is within the linear range of the CGT. In addition to limiting jitter, HMI science requires averaging several observations, making the instrument sensitive to low frequency motion that induces differential motion between each observation. This requires the spacecraft attitude to be stable about the roll axis to approximately 10 arcsec over a ten-minute period. Instrument calibrations require that the spacecraft point the SRB up to 2.5 degrees in pitch and yaw away from the center of the Sun, placing the Sun outside the field-of-view of the guide telescopes. In such instances, when the GTs cannot provide the definitive target for the ACS, on-board attitude determination combined with ephemeris prediction of the Sun direction must provide the definitive target. EVE is capable of observing the Sun with less dependence on attitude control. However, the ground data processing needs for calibrations result in the most strict attitude knowledge requirements for the mission: [35,70,70] arcsec, 3 , of knowledge with respect to the center of the solar disk. In addition to driving the ACS sensor selection, the knowledge requirements, which have their effect primarily during Inertial mode calibrations, drive the accuracy requirements for the solar ephemeris. The need to achieve and maintain geosynchronous orbit (GEO) drove the need for high-efficiency propulsive systems and appropriate attitude control. The main engine provided high specific impulse for the maneuvers to attain GEO, while the smaller ACS thrusters managed the disturbance torques of the larger engine and provided the capability for much smaller adjustment burns on orbit. SDO s large solar profile means that solar radiation pressure is a large torque disturbance, and the momentum buildup from this disturbance and the GEO altitude drives the ACS to use thrusters to manage vehicle momentum. The demanding data capture budget for the mission, however, requires SDO to avoid frequent thruster maneuvers, while concerns about on-orbit jitter restrict the maximum desired wheel speeds desired from the RWAs. The plan for on-orbit wheel speed and momentum management will be discussed as well as what is now being done in operation after the jitter environment was characterized. The SDO ACS hardware complement is single-fault tolerant. Two main processors carry virtually identical copies of the command and data handling and ACS software, and two identical attitude control electronics (ACE) boxes carry Coldfire processors with contingency ACS software and other hardware interface cards; the ACE structure allows reaction wheels to be commanded by the Sun-pointing Safehold independent of the Mil Std 1553 data bus. The sixteen Adcole CSSs are grouped into primary and backup sets of eight sensors, each set providing the ability to calculate a sun vector. Each set of eight eyes provides full 4 -steradian coverage. The Adcole DSS comprises an optics head and a separate electronics box providing a 1553 data interface. The electronics box is mounted inside the Faraday cage created by the spacecraft bus module. The DSS head with its 32- deg square FOV is mounted on the instrument module with its boresight along the spacecraft X axis, nearly aligned with the Sun during observations. Adcole has designed the DSS calibration parameters so that the accuracy is 0.24 arcminutes within 10 deg of the boresight, and diminishes to 3 arcminutes as the Sun moves towards the edges of its FOV . This DSS calibration scheme provides higher accuracy attitude determination over the range of the instrument calibration maneuvers.

Morgenstern, Wendy M.↗

Design and Testing of an Approach to Automated In-Flight Safety Risk Management for sUAS Operations

An onboard risk management automation design is presented based on run-time assurance principles, as well as the concept for In-Time Aviation Safety Management Systems (IASMS) as described by the National Academies. The automation is designed to operate independently of the autopilot and perform real-time risk assessment spanning multiple classes of hazards, predict constraint violations, and track autopilot states. In the event of elevated risk conditions or predicted constraint violations, the automation will select from a set of available contingencies and trigger autopilot mode changes if necessary to mitigate risk exposure. The onboard automation also informs the remote operator/pilot of what the independent monitor is observing and any contingency decisions or actions that may arise during flight. Details of an implementation of this design and results of verification and validation activities, as required to meet stringent NASA software and system assurance standards, are also presented. This includes simulation and flight testing using small unmanned aircraft systems.

Ersin Ancel↗

G189A modelling of Space Station Freedom's ECLSS

This paper contains a review of the requirements and design of the Environmental Control and Life Support System (ECLSS) for Space Station Freedom; a review of the G189A ECLSS computer program model developed at Boeing for the complete configuration of pressurized elements or volumes; and some significant computed results from this model showing transient performance for subsystems responsible for Temperature and Humidity Control,. Atmosphere Control and Supply, Air Revitalization, and Water Recovery and Management. The computed results presented here are important in assessing the capabilities of the ECLSS equipment in maintaining acceptable levels of temperature, humidity, 02, N2 and (2% in the occupied volumes during crew changeout events. These events involve up to four extra crew members from the Orbiter being located temporarily in the Space Station modules in addition to the normal contingent of four crew members. These additional crew members impose additional demands on the ECLSS equipment, in order to control the levels of the aforementioned quantities. Satisfactory control of all of these quantities was achieved. The maximum computed pp C02 was in the acceptable degraded performance regime. This level is higher than the 3.00 mm Hg upper limit for normal conditions

Environmental Control and Life Support Systems (EC↗