Search NASA⌕ Search

SEARCH · Search NASA

Results for “REDUNDANT SYSTEM”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Reuse International Space Station (ISS) Modules as Lunar Habitat

NASA currently projects ending the ISS mission in approximately 2016, due primarily to the expense of re-boost and re-supply. Lunar outposts are expected to be in place in the same timeframe. In support of these mission goals, a scheme to reuse ISS modules on the moon has been identified. These modules could function as pressurized volumes for human habitation in a lunar vacuum as they have done in low-earth orbit. The ISS hull is structurally capable of withstanding a lunar landing because there is no atmospheric turbulence or friction. A compelling reason to send ISS modules to the moon is their large mass; a large portion of the ISS would survive re-entry if allowed to de-orbit to Earth. ISS debris could pose a serious risk to people or structures on Earth unless a controlled re-entry is performed. If a propulsive unit is devised to be attached to the ISS and control re-entry, a propulsion system could be used to propel the modules to the moon and land them there. ISS modules on the lunar surface would not require re-boost. Radiation protection can be attained by burying the module in lunar regolith. Power and a heat removal system would be required for the lunar modules which would need little support structure other than the lunar surface. With planetary mass surrounding the module, heat flux may be controlled by conductance. The remaining requirement is the re-supply of life-support expendables. There are raw materials on the moon to supplement these vital resources. The lunar maria is known to contain approximately 40% oxygen by mass in inorganic mineral compounds. Chemical conversion of moon rocks to release gaseous oxygen is known science. Recycling and cleaning of air and water are currently planned to be accomplished with ISS Environmental Control & Life Support Systems (ECLSS). By developing a Propulsion and Landing Module (PLM) to dock to the Common Berthing Mechanism (CBM), several identical PLMs could be produced to rescue and transfer the ISS modules to the lunar surface, one by one. The propulsion does not need to be as swift as Apollo, nor would the modules need to be manned during transportation to the moon. The trajectory from low-Earth to lunar orbit would avoid or quickly pass through the Van Allen belts to minimize radiation exposure to electronics onboard. A landing technology similar to Apollo's could be utilized to land an ISS module on the moon. Since the mission will be unmanned, system redundancy could be minimized to keep the cost down. If the mission failed and a module crashed landed on the moon, the risk of debris landing on Earth would be avoided and the raw materials could be used in future lunar missions.

Miernik, Janie↗

Adaptive Failure Compensation for Aircraft Flight Control Using Engine Differentials: Regulation

The problem of using engine thrust differentials to compensate for rudder and aileron failures in aircraft flight control is addressed in this paper in a new framework. A nonlinear aircraft model that incorporates engine di erentials in the dynamic equations is employed and linearized to describe the aircraft s longitudinal and lateral motion. In this model two engine thrusts of an aircraft can be adjusted independently so as to provide the control flexibility for rudder or aileron failure compensation. A direct adaptive compensation scheme for asymptotic regulation is developed to handle uncertain actuator failures in the linearized system. A design condition is specified to characterize the system redundancy needed for failure compensation. The adaptive regulation control scheme is applied to the linearized model of a large transport aircraft in which the longitudinal and lateral motions are coupled as the result of using engine thrust differentials. Simulation results are presented to demonstrate the effectiveness of the adaptive compensation scheme.

Yu, Liu↗

Method and apparatus for multiplexing switch signals

Apparatus for multiplexing switch state signals comprises a plurality of switches and parallel weighted resistors connected in series between circuit ground and a node at a utilization device. The resistors are weighted as a function of a power of the same base, such as the power of the base 2, for coding the multiplexed switch state signals. A constant current source connected between the node and circuit ground drives current over a single cable conductor through the resistor. Each switch may be independently closed to change the switch state voltage signals multiplexed to the node. An analog-to-digital converter connected between the node and circuit ground demultiplexes the switch state signals received at the node and provides a switch state signal at each analog-to-digital output corresponding to the state of the switches at the moment. A potentiometer may replace a resistor and bypass switch combination in a position where the potentiometer has a maximum value of the lowest power of the base in order to multiplex a true analog voltage signal while switch state signals are unambiguously coded and multiplexed. The potentiometer in the least significant position permits the analog value to be in the range from 0 to a maximum corresponding to the least significant position of the switch state encoding. The invention may be used in redundancy systems by duplicating the invention with corresponding switches in each duplication ganged to open and close simultaneously upon operation of a pushbutton switch.

Hannaford, Blake↗

Orion Touchdown Heading Control

At touchdown Orion must be aligned so that the crew person's feet are forward in the direction of the horizontal velocity. To ensure that this requirement is met active heading control is being implemented on the Orion crew module. This technique reduces probability of roll-over during splashdown, assures axial loads on the crew at touchdown, and alleviates structural requirements on impact allowing for a light-weight structural design. On-board sensors are used to measure current vehicle orientation and horizontal velocity used in generation of the heading error signal. Linear velocity measured by the IMU drifts while under parachutes due to wind gusts and has to be corrected by GPS; this makes GPS critical for successful landing. Jet fire logic is achieved by use of a phase-plane and commands are realized by using roll jets from the reaction control system (RCS); using pre existing hardware eliminates additional hardware and structural requirements. Touchdown performance is measured by an orientation envelope that was co-developed with structures so that the performance requirements overlap adding system redundancy. Heading control also introduces new difficulties to be addressed such as parachute line twist torque as well as increasing vehicle sensitivity to wind shifts and sea states. Solving these difficulties requires added complexity to flight software as well as increasing the propellant required to achieve successful touchdown. while offering promising results, the criticality of GPS along with a significant propellant cost raises questions on the effectiveness of using touchdown heading control.

Kane, Mark A.↗

Sublimator Driven Coldplate Engineering Development Unit Test Results

The Sublimator Driven Coldplate (SDC) is a unique piece of thermal control hardware that has several advantages over a traditional thermal control scheme. The principal advantage is the possible elimination of a pumped fluid loop, potentially increasing reliability and reducing complexity while saving both mass and power. Because the SDC requires a consumable feedwater, it can only be used for short mission durations. Additionally, the SDC is ideal for a vehicle with small transport distances and low heat rejection requirements. An SDC Engineering Development Unit was designed and fabricated. Performance tests were performed in a vacuum chamber to quantify and assess the performance of the SDC. The test data was then used to develop correlated thermal math models. Nonetheless, an Integrated Sublimator Driven Coldplate (ISDC) concept is being developed. The ISDC couples a coolant loop with the previously described SDC hardware. This combination allows the SDC to be used as a traditional coldplate during long mission phases and provides for dissimilar system redundancy

Sheth, Rubik B.↗

Space Shuttle Main Engine (SSME) Operational Capability

Through the years of the Space Shuttle Main Engine (SSME) program the engine has evolved and operational capabilities have been demonstrated beyond the original Shuttle requirements. In an effort to enhance flight safety and demonstrate safety features and margins, engines have been analyzed and tested at many different operating points. Various studies through the years evaluating the SSME for different applications both as a boost stage and upper stage have also added insight into the overall operational characteristics of the engine and have further defined safety margins for the Shuttle application. This paper will summarize the operational characteristics of the SSME from the original design requirements to the expanded capabilities demonstrated through analysis, lab testing and especially "off-nominal" engine testing leading to an increased understanding of the engine operational characteristics and safety margins. Basic engine characteristics such as thrust, mixture ratio, propellant inlet conditions, system redundancy, etc. will be examined.

Benefield, Philip↗

Terrain Hazard Detection and Avoidance During the Descent and Landing Phase of the Altair Mission

This paper describes some of the environmental challenges associated with landing a crewed or robotic vehicle at any certified location on the lunar surface (i.e. not a mountain peak, permanently dark crater floor or overly steep terrain), with a specific focus on how hazard detection technology may be incorporated to mitigate these challenges. For this discussion, the vehicle of interest is the Altair Lunar Lander, being the vehicle element of the NASA Constellation Program aimed at returning humans to the moon. Lunar environmental challenges for such global lunar access primarily involve terrain and lighting. These would include sizable rocks and slopes, which are more concentrated in highland areas; small craters, which are essentially everywhere independent of terrain type; and for polar regions, low-angle sunlight, which leaves significant terrain in shadow. To address these issues, as well as to provide for precision landing, the Autonomous Landing and Hazard Avoidance Technology (ALHAT) Project was charted by NASA Headquarters, and has since been making significant progress. The ALHAT team considered several sensors for real-time hazard detection, settling on the use of a Flash Lidar mounted to a high-speed gimbal, with computationally intense image processing and elevation interpretation software. The Altair Project has been working with the ALHAT team to understand the capabilities and limitations of their concept, and has incorporated much of the ALHAT hazard detection system into the Altair baseline design. This integration, along with open issues relating to computational performance, the need for system redundancy, and potential pilot interaction, will be explored further in this paper.

Strhan, Alan L.↗

NASA Tech Briefs, August 2012

Topics covered include: Mars Science Laboratory Drill; Ultra-Compact Motor Controller; A Reversible Thermally Driven Pump for Use in a Sub-Kelvin Magnetic Refrigerator; Shape Memory Composite Hybrid Hinge; Binding Causes of Printed Wiring Assemblies with Card-Loks; Coring Sample Acquisition Tool; Joining and Assembly of Bulk Metallic Glass Composites Through Capacitive Discharge; 670-GHz Schottky Diode-Based Subharmonic Mixer with CPW Circuits and 70-GHz IF; Self-Nulling Lock-in Detection Electronics for Capacitance Probe Electrometer; Discontinuous Mode Power Supply; Optimal Dynamic Sub-Threshold Technique for Extreme Low Power Consumption for VLSI; Hardware for Accelerating N-Modular Redundant Systems for High-Reliability Computing; Blocking Filters with Enhanced Throughput for X-Ray Microcalorimetry; High-Thermal-Conductivity Fabrics; Imidazolium-Based Polymeric Materials as Alkaline Anion-Exchange Fuel Cell Membranes; Electrospun Nanofiber Coating of Fiber Materials: A Composite Toughening Approach; Experimental Modeling of Sterilization Effects for Atmospheric Entry Heating on Microorganisms; Saliva Preservative for Diagnostic Purposes; Hands-Free Transcranial Color Doppler Probe; Aerosol and Surface Parameter Retrievals for a Multi-Angle, Multiband Spectrometer LogScope; TraceContract; AIRS Maps from Space Processing Software; POSTMAN: Point of Sail Tacking for Maritime Autonomous Navigation; Space Operations Learning Center; OVERSMART Reporting Tool for Flow Computations Over Large Grid Systems; Large Eddy Simulation (LES) of Particle-Laden Temporal Mixing Layers; Projection of Stabilized Aerial Imagery Onto Digital Elevation Maps for Geo-Rectified and Jitter-Free Viewing; Iterative Transform Phase Diversity: An Image-Based Object and Wavefront Recovery; 3D Drop Size Distribution Extrapolation Algorithm Using a Single Disdrometer; Social Networking Adapted for Distributed Scientific Collaboration; General Methodology for Designing Spacecraft Trajectories; Hemispherical Field-of-View Above-Water Surface Imager for Submarines; and Quantum-Well Infrared Photodetector (QWIP) Focal Plane Assembly.

Source record↗

Orion MPCV Touchdown Detection Threshold Development and Testing

A robust method of detecting Orion Multi ]Purpose Crew Vehicle (MPCV) splashdown is necessary to ensure crew and hardware safety during descent and after touchdown. The proposed method uses a triple redundant system to inhibit Reaction Control System (RCS) thruster firings, detach parachute risers from the vehicle, and transition to the post ]landing segment of the Flight Software (FSW). The vehicle crew is the prime input for touchdown detection, followed by an autonomous FSW algorithm, and finally a strictly time based backup timer. RCS thrusters must be inhibited before submersion in water to protect against possible damage due to firing these jets under water. In addition, neglecting to declare touchdown will not allow the vehicle to transition to post ]landing activities such as activating the Crew Module Up ]righting System (CMUS), resulting in possible loss of communication and difficult recovery. A previous AIAA paper gAssessment of an Automated Touchdown Detection Algorithm for the Orion Crew Module h concluded that a strictly Inertial Measurement Unit (IMU) based detection method using an acceleration spike algorithm had the highest safety margins and shortest detection times of other methods considered. That study utilized finite element simulations of vehicle splashdown, generated by LS ]DYNA, which were expanded to a larger set of results using a Kriging surface fit. The study also used the Decelerator Systems Simulation (DSS) to generate flight dynamics during vehicle descent under parachutes. Proto ]type IMU and FSW MATLAB models provided the basis for initial algorithm development and testing. This paper documents an in ]depth trade study, using the same dynamics data and MATLAB simulations as the earlier work, to further develop the acceleration detection method. By studying the combined effects of data rate, filtering on the rotational acceleration correction, data persistence limits and values of acceleration thresholds, an optimal configuration was determined. The lever arm calculation, which removes the centripetal acceleration caused by vehicle rotation, requires that the vehicle angular acceleration be derived from vehicle body rates, necessitating the addition of a 2nd order filter to smooth the data. It was determined that using 200 Hz data directly from the vehicle IMU outperforms the 40 Hz FSW data rate. Data persistence counter values and acceleration thresholds were balanced in order to meet desired safety and performance. The algorithm proved to exhibit ample safety margin against early detection while under parachutes, and adequate performance upon vehicle splashdown. Fall times from algorithm initiation were also studied, and a backup timer length was chosen to provide a large safety margin, yet still trigger detection before CMUS inflation. This timer serves as a backup to the primary acceleration detection method. Additionally, these parameters were tested for safety on actual flight test data, demonstrating expected safety margins.

Daum, Jared↗

CPAS Parachute Testing, Model Development, & Verification

Capsule Parachute Assembly System (CPAS) is the human rated parachute system for the Orion vehicle used during re-entry. Similar to Apollo parachute design. Human rating requires additional system redundancy. A Government Furnished Equipment (GFE) project responsible for: Design; Development testing; Performance modeling; Fabrication; Qualification; Delivery

Romero, Leah M.↗

Shooting the Moon

This story is about an unlikely NASA mission to the Moon. It was unlikely because it was started with far too little time and too-little money to complete. It was unlikely because it was able to take chances to accept risk of failure. It was unlikely because it was searching for the unthinkable: water-ice on the moon... Figure 1-1: LCROSS Mission. The mission of the Lunar CRater Observation and Sensing Satellite (LCROSS) was to investigate the possibility of water ice in craters on the Moon s poles. This is certainly an interesting scientific topic in itself, but I intend to focus on the compelling experience of managing the LCROSS Project in the context of this storied Agency. Perhaps most interesting are the implications this story has for managing any development effort, lunar or not, and working a balance to achieve success. NASA is by design a risk-taking agency within the US Government. It could be argued that NASA s purpose in the aerospace community is to take on the really big challenges that either the corporate world can t afford, are not yet profitable endeavors, or are just too risky for private corporations to entertain. However, expectations of the Agency have evolved. A combination of grim human tragedies and some very public cost and schedule overruns have challenged the public s and Congress s tolerance for risk-taking within the Agency. NASA, which is supposed to be in the business of taking risks to do bold, difficult things, has become less and less able to do so within its cost framework. Yet effectively replacing prudent risk management with attempts to "risk-eliminate" is completely unaffordable. So where does risk-taking fit within the Agency, or within private/corporate organizations for that matter? Where astronauts play there is clearly concern about risk. When an organization puts humans in harm s way, it is understandably going to take extra effort to assure nobody gets hurt. Doing so, of course, costs money - a lot of money to pay for labor and hardware which is attempting to assure nothing will go wrong. Sophisticated designs, with doubly- or triply-redundant systems, extensive testing to verify those systems, and numerous engineering test units built to learn and evolve a hardware design, all drive the cost and time required to implement. Human spaceflight is an expensive business because of the exceptional system complexity and levels of assurance required for human space travel. What about missions that do not involve human spaceflight? What about missions whose potential failure will not take a human life, whose costs are small and whose urgency and importance are limited by design? A portfolio consisting of this type of mission can be designed to be risk tolerant, not requiring large expenditures to guarantee against failure. With the money saved, the number of missions that can be executed within the portfolio grows, or the total cost of the portfolio can be reduced. The NASA LCROSS mission is a pathfinder example of a low-cost, quick turn-around mission which struck a balance on mission risk, while accomplishing big objectives, like defining how we understand the Moon.

Andrews, Daniel R.↗

Orion MPCV Touchdown Detection Threshold Development and Testing

A robust method of detecting Orion Multi-Purpose Crew Vehicle (MPCV) splashdown is necessary to ensure crew and hardware safety during descent and after touchdown. The proposed method uses a triple redundant system to inhibit Reaction Control System (RCS) thruster firings, detach parachute risers from the vehicle, and transition to the post-landing segment of the Flight Software (FSW). An in-depth trade study was completed to determine optimal characteristics of the touchdown detection method resulting in an algorithm monitoring filtered, lever-arm corrected, 200 Hz Inertial Measurement Unit (IMU) vehicle acceleration magnitude data against a tunable threshold using persistence counter logic. Following the design of the algorithm, high fidelity environment and vehicle simulations, coupled with the actual vehicle FSW, were used to tune the acceleration threshold and persistence counter value to result in adequate performance in detecting touchdown and sufficient safety margin against early detection while descending under parachutes. An analytical approach including Kriging and adaptive sampling allowed for a sufficient number of finite element analysis (FEA) impact simulations to be completed using minimal computation time. The combination of a persistence counter of 10 and an acceleration threshold of approximately 57.3 ft/s2 resulted in an impact performance factor of safety (FOS) of 1.0 and a safety FOS of approximately 2.6 for touchdown declaration. An RCS termination acceleration threshold of approximately 53.1 ft/s(exp)2 with a persistence counter of 10 resulted in an increased impact performance FOS of 1.2 at the expense of a lowered under-parachutes safety factor of 2.2. The resulting tuned algorithm was then tested on data from eight Capsule Parachute Assembly System (CPAS) flight tests, showing an experimental minimum safety FOS of 6.1. The formulated touchdown detection algorithm will be flown on the Orion MPCV FSW during the Exploration Flight Test 1 (EFT-1) mission in the second half of 2014.

Daum, Jared↗

Limitations of Reliability for Long-Endurance Human Spaceflight

Long-endurance human spaceflight - such as missions to Mars or its moons - will present a never-before-seen maintenance logistics challenge. Crews will be in space for longer and be farther way from Earth than ever before. Resupply and abort options will be heavily constrained, and will have timescales much longer than current and past experience. Spare parts and/or redundant systems will have to be included to reduce risk. However, the high cost of transportation means that this risk reduction must be achieved while also minimizing mass. The concept of increasing system and component reliability is commonly discussed as a means to reduce risk and mass by reducing the probability that components will fail during a mission. While increased reliability can reduce maintenance logistics mass requirements, the rate of mass reduction decreases over time. In addition, reliability growth requires increased test time and cost. This paper assesses trends in test time requirements, cost, and maintenance logistics mass savings as a function of increase in Mean Time Between Failures (MTBF) for some or all of the components in a system. In general, reliability growth results in superlinear growth in test time requirements, exponential growth in cost, and sublinear benefits (in terms of logistics mass saved). These trends indicate that it is unlikely that reliability growth alone will be a cost-effective approach to maintenance logistics mass reduction and risk mitigation for long-endurance missions. This paper discusses these trends as well as other options to reduce logistics mass such as direct reduction of part mass, commonality, or In-Space Manufacturing (ISM). Overall, it is likely that some combination of all available options - including reliability growth - will be required to reduce mass and mitigate risk for future deep space missions.

Owens, Andrew C.↗

Flat H Redundant Frangible Joint Development

Orion and Commercial Crew Program (CCP) Partners have chosen to use frangible joints for certain separation events. The joints currently available are zero failure tolerant and will be used in mission safety applications. The goal is to further develop a NASA designed redundant frangible joint that will lower flight risk and increase reliability. FY16 testing revealed a successful design in subscale straight test specimens that gained efficiency and supports Orion load requirements. Approach / Innovation A design constraint is that the redundant joint must fit within the current Orion architecture, without the need for additional vehicle modification. This limitation required a design that changed the orientation of the expanding tube assemblies (XTAs), by rotating them 90deg from the standard joint configuration. The change is not trivial and affects the fracture mechanism and structural load paths. To address these changes, the design incorporates cantilevered arms on the break plate. The shock transmission and expansion of the XTA applies force to these arms and creates a prying motion to push the plate walls outward to the point of structural failure at the notched section. The 2014 test design revealed that parts could slip during functioning wasting valuable energy needed to separate the structure with only a single XTA functioning. Dual XTA functioning fully separated the assembly showing a discrepancy can be backed up with redundancy. Work on other fully redundant systems outside NASA is limited to a few patents that have not been subjected to functionality testing Design changes to prevent unwanted slippage (with ICA funding in 2015) showed success with a single XTA. The main goal for FY 2016 was to send the new Flat H RFJ to WSTF where single XTA test failures occurred back in 2014. The plan was to gain efficiency in this design by separating the Flat H RFJ with thicker ligaments with dimensions baselined in 2014. Other modifications included geometry changes to better disperse loads paths and to minimize air gaps. The design additionally added more structural strength to enhance the structural limits in static loads testing. The design also implemented a smoother load line through the assembly. Results / Knowledge Gained The new Flat H RFJ successfully fractured at WSTF with thicker ligaments and lower cord size. Where failure to separate occurred earlier, there is now excessive energy available for structural separation. The new challenge to provide some structural support to prevent secondary fracturing of the break plate remains to be completed. This future work is being funded by the JSC Engineering Directorate in 2017 to elevate the TRL on curved Flat H RFJs that configure with the Orion Service Panel Separation. Additional funding from JSC Engineering will provide new design testing to avoid secondary fracturing.

Brown, Chris↗

Redundant asynchronous microprocessor system for fault tolerant flight control and navigation

Unlike their synchronized counterparts, redundant channels in an asynchronous flight system can, under no-fault conditions, exhibit cross-channel data disparities. Sources of these errors are examined in terms of the general, individual functions of the flight control and navigation application in the asynchronous digital environment. The effects of asynchronism on trajectory programmers, dynamic control algorithms and data reconstruction processes are examined in terms of data skews, data latencies, and clock rate uncertainties. An example is presented in which time corrections are applied to reduce the data disparities. Practical limitations of the approach of the example are discussed.

Dunn, W. R.↗

A reliable dual-redundant sensor FDI system for the NASA F8C-DFBW aircraft

In this paper we outline the structure of a sensor failure detection and identification (FDI) system designed for the NASA F8C DFBW aircraft. The system is for use in a dual-redundant environment, and it takes maximal advantage of all functional and kinematic relationships among the sensed variables. The technique is reliable in that we have designed the system to account for a variety of unmodeled effects and have introduced a new concept - the quality sequential probability ratio (QSPR) - that provides a useful measure of our confidence in each test. The methodology used for determining detector parameters and the 'outer loop logic' for combining the various sources of information are described.

Deckert, J. C.↗