Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failure Tolerance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Pathophysiological basis of orthostatic hypotension in autonomic failure

In patients with autonomic failure orthostatic hypotension results from an impaired capacity to increase vascular resistance during standing. This fundamental defect leads to increased downward pooling of venous blood and a consequent reduction in stroke volume and cardiac output that exaggerates the orthostatic fall in blood pressure. The location of excessive venous blood pooling has not been established so far, but present data suggest that the abdominal compartment and perhaps leg skin vasculature are the most likely candidates. To improve the orthostatic tolerance in patients with autonomic failure, protective measures that reduce excessive orthostatic blood pooling have been developed and evaluated. These measures include physical counter-manoeuvres and abdominal compression.

Review, Academic↗

Adaptive Mission Assurance (AMA) – A Conceptual Guide for NASA Missions

NASA is well acquainted with and skilled in conducting Risk Class A Safety and Mission Assurance (SMA). Class A missions are characterized as having highly specific performance with an ultra-low risk tolerance for risk and mission failure. But space is rapidly changing, and the space enterprise is challenged to pursue faster more agile mission developments with fewer resources and directed schedules. To meet this demand mission development teams face accepting more risk and trading performance within strict cost and schedule constraints. In responding to this challenge, The Aerospace Corporation has evolved the Adaptive Mission Assurance (AMA) approach. The benefit of an “adaptive” approach is most realized for smaller Research and Development (R&D), or Science and Technology (S&T) demonstration missions constrained by significantly smaller budgets and directed schedules. The challenge for these “risk tolerant, constraints-driven” missions is how to identify the most valuable mission assurance tasks that will fit within strict budgetary and schedule constraints for “gracefully” accepting risk that still achieves an agreeable expectation of mission success. AMA can respond to this challenge with little to no impact to team staffing or existing workload. This conceptual guide introduces AMA as a potential implementation for NASA Risk Class D and Sub-Class D missions.

Douglas A. Harris↗

CoREC: Scalable and Resilient In-memory Data Staging for In-situ Workflows

The dramatic increase in the scale of current and planned high-end HPC systems is leading new challenges, such as the growing costs of data movement and IO, and the reduced mean time between failures (MTBF) of system components. In-situ workflows, i.e., executing the entire application workflows on the HPC system, have emerged as an attractive approach to address data-related challenges by moving computations closer to the data, and staging-based frameworks have been effectively used to support in-situ workflows at scale. However, the resilience of these staging-based solutions has not been addressed, and they remain susceptible to expensive data failures. Furthermore, naive use of data resilience techniques such as n-way replication and erasure codes can impact latency and/or result in significant storage overheads. In this article, we present CoREC, a scalable and resilient in-memory data staging runtime for large-scale in-situ workflows. CoREC uses a novel hybrid approach that combines dynamic replication with erasure coding based on data access patterns. It also leverages multiple levels of replications and erasure coding to support diverse data resiliency requirements. Furthermore, the article presents optimizations for load balancing and conflict-avoiding encoding, and a low overhead, lazy data recovery scheme. We have implemented the CoREC runtime and have deployed with the DataSpaces staging service on leadership class computing machines and present an experimental evaluation in the article. Here, the experiments demonstrate that CoREC can tolerate in-memory data failures while maintaining low latency and sustaining high overall storage efficiency at large scales.

97 MATHEMATICS AND COMPUTING↗

A lightweight, high strength dexterous manipulator for commercial applications

The concept, design, and features are described of a lightweight, high strength, modular robot manipulator being developed for space and commercial applications. The manipulator has seven fully active degrees of freedom and is fully operational in 1 G. Each of the seven joints incorporates a unique drivetrain design which provides zero backlash operation, is insensitive to wear, and is single fault tolerant to motor or servo amplifier failure. Feedback sensors provide position, velocity, torque, and motor winding temperature information at each joint. This sensing system is also designed to be single fault tolerant. The manipulator consists of five modules (not including gripper). These modules join via simple quick-disconnect couplings and self-mating connectors which allow rapid assembly and/or disassembly for reconfiguration, transport, or servicing. The manipulator is a completely enclosed assembly, with no exposed components or wires. Although the initial prototype will not be space qualified, the design is well suited to meeting space requirements. The control system provides dexterous motion by controlling the endpoint location and arm pose simultaneously. Potential applications are discussed.

Marzwell, Neville I.↗

Virtually-synchronous communication based on a weak failure suspector

Failure detectors (or, more accurately Failure Suspectors (FS)) appear to be a fundamental service upon which to build fault-tolerant, distributed applications. This paper shows that a FS with very weak semantics (i.e., that delivers failure and recovery information in no specific order) suffices to implement virtually-synchronous communication (VSC) in an asynchronous system subject to process crash failures and network partitions. The VSC paradigm is particularly useful in asynchronous systems and greatly simplifies building fault-tolerant applications that mask failures by replicating processes. We suggest a three-component architecture to implement virtually-synchronous communication: (1) at the lowest level, the FS component; (2) on top of it, a component (2a) that defines new views; and (3) a component (2b) that reliably multicasts messages within a view. The issues covered in this paper also lead to a better understanding of the various membership service semantics proposed in recent literature.

Schiper, Andre↗

The implementation and use of Ada on distributed systems with high reliability requirements

The use and implementation of Ada in distributed environments in which reliability is the primary concern were investigted. A distributed system, programmed entirely in Ada, was studied to assess the use of individual tasks without concern for the processor used. Continued development and testing of the fault tolerant Ada testbed; development of suggested changes to Ada to cope with the failures of interest; design of approaches to fault tolerant software in real time systems, and the integration of these ideas into Ada; and the preparation of various papers and presentations were discussed.

Knight, J. C.↗

Digital flight control systems

The design of stable feedback control laws for sampled-data systems with variable rate sampling was investigated. These types of sampled-data systems arise naturally in digital flight control systems which use digital actuators where it is desirable to decrease the number of control computer output commands in order to save wear and tear of the associated equipment. The design of aircraft control systems which are optimally tolerant of sensor and actuator failures was also studied. Detection of the failed sensor or actuator must be resolved and if the estimate of the state is used in the control law, then it is also desirable to have an estimator which will give the optimal state estimate even under the failed conditions.

Caglayan, A. K.↗

A fault tolerant design for autonomous attitude control of the DSCS-III communication satellite

The first of a new series of satellites, which will provide the principal elements in the Defense Space Communications System (DSCS), was launched on Oct. 31, 1982. This satellite, DSCS-III, is part of a system which will consist of super-high frequency communications satellites in synchronous, equatorial orbits, continuously operating in four widely separate geographic regions. The DSCS-III is designed both to maintain critical communications in the presence of an electronic jamming threat and to survive nuclear radiation exposure. The results of the present investigation are to provide a basis for the design of a spacecraft tolerant of on-board failures, survivable against external threats, and capable of performing its mission autonomously for periods as long as six months.

Matijevic, J.↗

Rule-based mechanisms of learning for intelligent adaptive flight control

How certain aspects of human learning can be used to characterize learning in intelligent adaptive control systems is investigated. Reflexive and declarative memory and learning are described. It is shown that model-based systems-theoretic adaptive control methods exhibit attributes of reflexive learning, whereas the problem-solving capabilities of knowledge-based systems of artificial intelligence are naturally suited for implementing declarative learning. Issues related to learning in knowledge-based control systems are addressed, with particular attention given to rule-based systems. A mechanism for real-time rule-based knowledge acquisition is suggested, and utilization of this mechanism within the context of failure diagnosis for fault-tolerant flight control is demonstrated.

Handelman, David A.↗

Effect of lightning strike on bromine intercalated graphite fiber/epoxy composites

Laminar composites were fabricated from pristine and bromine intercalated pitch based graphite fibers. It was found that laminar composites could be fabricated using either pristine or intercalated graphite fibers using standard fabrication techniques. The intercalated graphite fiber composites had electrical properties which were markedly improved over both the corresponding pitch based and polyacrylonitrile (PAN) based composites. Despite composites resistivities more than an order of magnitude lower for pitch based fiber composites, the lightning strike resistance was poorer than that of the Pan based fiber composites. This leads to the conclusion that the mechanical properties of the pitch fibers are more important than electrical or thermal properties in determining the lightning strike resistance. Based on indicated lightning strike tolerance for high elongation to failure materials, the use of vapor grown, rather than pitch based graphite fibers appears promising.

Gaier, James R.↗

Design of a blade-stiffened composite panel with a hole

A procedure is developed analytically to design and produce an optimized stiffened panel with a centrally located hole. The PASCO panel-buckling analysis and sizing code is employed with the Engineering Analysis Language (EAL) code for finite-element analysis to optimize the design variables. Important design considerations are stiffener height and ply thicknesses in the skin and the stiffener laminates. The EAL code calculates the maximum strains around the hole boundary, and the resulting constraints are combined with the buckling constraint developed by the PASCO code. Cooptimization of the two codes is effected until convergence on the optimal solution is achieved. Results of the analytical procedure are experimentally verified by applying a compressive end-load to graphite-fiber laminated plates with center holes. The experimental results support the analytical procedure, and it is found that for the same weight, the soft-skin designs tested are found to have the best tolerance characteristics and resistance to failure.

Nagendra, S.↗

Atmospheric Compensation for Uplink Arrays via Radiometry

Uplink arrays for communications applications are gaining increased visibility within the NASA and military community due to the enhanced flexibility and reliability they provide. When compared with the conventional large, single aperture antennas currently comprising the Deep Space Network (DSN), for example, smaller aperture antenna arrays have the benefits of providing fault tolerance (reduced single-point failure), reduced maintenance cost, and enhanced capabilities such as electronic beam-steering and multi-beam operation. However, signal combining of antenna array elements spaced many wavelengths apart becomes problematic due to the inherent instability of earth's turbulent atmosphere, particularly at the frequencies of interest to the DSN (i.e., Ka-band). Degradation in the power combining of the individual elements comprising the array arises due to uncorrelated phase errors introduced as the signals propagate through the troposphere. It is well known that the fundamental source of this error is due to the inhomogeneous distribution of water vapor in the atmosphere [1]. Several techniques have been proposed to circumvent this issue, including the use of phase calibration towers and a moon bounce to generate a feedback loop which would provide a means of intermittent calibration of the system phase errors (thermal drifts, atmosphere) [2,3]. However, these techniques require repositioning of the antenna elements to perform this operation which ultimately results in reduced system availability. And, though they are sufficient for compensating for slow varying phase drifts, they are insufficient to compensate for faster varying phase errors, such as those introduced by the atmosphere. In this paper, preliminary radiometry and interferometry measurements collected by the NASA Glenn Research Center are analyzed and indicate that the use of optimized water vapor radiometers as a feedback system in a communications platform could provide the necessary atmospheric compensation technique to enhance the beamforming of uplink arrays.

Nessel, James A.↗

SNE Industrial Fieldbus Interface

Programmable logic controllers (PLCs) have very limited diagnostic and no prognostic capabilities, while current smart sensor designs do not have the capability to communicate over Fieldbus networks. The aim is to interface smart sensors with PLCs so that health and status information, such as failure mode identification and measurement tolerance, can be communicated via an industrial Fieldbus such as ControlNet. The SNE Industrial Fieldbus Interface (SIFI) is an embedded device that acts as a communication module in a networked smart sensor. The purpose is to enable a smart sensor to communicate health and status information to other devices, such as PLCs, via an industrial Fieldbus networking protocol. The SNE (Smart Network Element) is attached to a commercial off-the-shelf Any bus-S interface module through the SIFI. Numerous Anybus-S modules are available, each one designed to interface with a specific Fieldbus. Development of the SIFI focused on communications using the ControlNet protocol, but any of the Anybus-S modules can be used. The SIFI communicates with the Any-bus module via a data buffer and mailbox system on the Anybus module, and supplies power to the module. The Anybus module transmits and receives data on the Fieldbus using the proper protocol. The SIFI is intended to be connected to other existing SNE modules in order to monitor the health and status of a transducer. The SIFI can also monitor aspects of its own health using an onboard watchdog timer and voltage monitors. The SIFI also has the hardware to drive a touchscreen LCD (liquid crystal display) unit for manual configuration and status monitoring.

Lucena, Angel↗

X-57 Traction Power and Command Systems Development

This paper describes the final, as-built design of the X‑57 Maxwell aircraft power and command system architecture that implements the electrified propulsion capability. The development of the traction power, command, and avionics power subsystems proceeded as planned at the initial project critical design review, but improvements to the design were identified following the development of detailed operations concepts and integrated subsystem and system testing. The redundant architecture with A‑side and B‑side buses provided a robust framework for a developmental system that would turn out to have a lower technology readiness than had been assumed upon project formulation. As the project team identified reliability or performance gaps in the electrified propulsion powertrain components and their interactions with the other vehicle systems, the traction power, command, and avionics architectures were modified to accommodate the modified systems. Following the publication of the planned design approach at the critical design review milestone [1], the project team developed the flight hardware and software, integrated the systems, and adjusted the design and qualification activities to address gaps in the components, system architecture, and requirements as the gaps were realized. In addition to inherent challenges in development of these subsystems, the integration of this new technology with adjacent critical systems in an aircraft configuration posed additional challenges that drove design considerations across the subsystem development and the other vehicle systems. Integration complications included electromagnetic compatibility, thermal performance, and tolerance of single-point failures internal and external to the powerplant. Development of a qualification program was required for the new motors, inverters, and batteries, and hardware performance during component qualification fed back into the development process and led lessons learned and redesign of key elements.

distributed propulsion↗

Experimental Robot Position Sensor Fault Tolerance Using Accelerometers and Joint Torque Sensors

Robot systems in critical applications, such as those in space and nuclear environments, must be able to operate during component failure to complete important tasks. One failure mode that has received little attention is the failure of joint position sensors. Current fault tolerant designs require the addition of directly redundant position sensors which can affect joint design. The proposed method uses joint torque sensors found in most existing advanced robot designs along with easily locatable, lightweight accelerometers to provide a joint position sensor fault recovery mode. This mode uses the torque sensors along with a virtual passive control law for stability and accelerometers for joint position information. Two methods for conversion from Cartesian acceleration to joint position based on robot kinematics, not integration, are presented. The fault tolerant control method was tested on several joints of a laboratory robot. The controllers performed well with noisy, biased data and a model with uncertain parameters.

Aldridge, Hal A.↗

Fault-tolerance techniques for high-speed fiber-optic networks

Four fiber optic network topologies (linear bus, ring, central star, and distributed star) are discussed relative to their application to high data throughput, fault tolerant networks. The topologies are also examined in terms of redundancy and the need to provide for single point, failure free (or better) system operation. Linear bus topology, although traditionally the method of choice for wire systems, presents implementation problems when larger fiber optic systems are considered. Ring topology works well for high speed systems when coupled with a token passing protocol, but it requires a significant increase in protocol complexity to manage system reconfiguration due to ring and node failures. Star topologies offer a natural fault tolerance, without added protocol complexity, while still providing high data throughput capability.

Deruiter, John↗

Review on Switching Device Fault, Protection, and Fault-Tolerant Topologies of Current Source Inverter

The fault modes, protection, and fault-tolerant topologies of voltage source inverters have been investigated for decades. However, issues and solutions related to the fault modes of current source inverters are less well understood. This paper summarizes some of the key topics relevant to a fault in current source inverters, including types of fault modes and their ramifications, post-fault protection methods, and fault- tolerant current source inverter topologies that have been presented in the literature.

42 ENGINEERING↗

The X-43 Fin Actuation System Problem - Reliability in Shades of Gray

Following the loss of the first X-43 during launch, the mishap investigation board indicated the Fin Actuator System (FAS) needed to have a larger torque margin. To supply this added torque, a second actuator was added. The consequences of what seemed to be a simple modification would trouble the X-43 program. Because of the second actuator, a new computer board was required. This proved to be subject to electronic noise. This resulted in the actuator latch up in ground tests of the FAS for the second launch. Such a latch up would cause the Pegasus booster to fail, as the FAS was a single string system. The problem was corrected and the second flight was successful. The same modifications were added to the FAS for flight three. When the FAS underwent ground tests, it also latched up. The failure indicated that each computer board had a different tolerance to electronic noise. The problem with the FAS was corrected. Subsequently, another failure occurred, raising questions about the design, and the probability of failure for the X-43 Mach 10 flight. This was not simply a technical issue, but illuminated the difficulties facing both managers and engineers in assessing risk, design requirements, and probabilities in cutting edge aerospace projects.

Peebles, Curtis↗