Search NASA⌕ Search

SEARCH · Search NASA

Results for “Safety Cases”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Flight motor set 360L001 (STS-26R). Volume 1: System overview, revision A

The NASA space shuttle flight STS-26R, launched at 11:37.00.009 am, EDT on 29 Sep. 1988, used the redesigned solid rocket motors (RSRM) 360L001A and 360L001B. Evaluation of the ground environment instrumentation (GEI) data recorded prior to flight showed no launch commit criteria violations; that the field joint heater and aft skirt thermal conditioning systems performed adequately; and that the GEI data showed good agreement with thermal model predictions. Evaluation of the developmental flight instrumentation (DFI) revealed excellent agreement with both the predicted and required ballistic specifications. All parameters were well within the GEI specification requirements including propellant burn rates, specific impulse values, and thrust imbalance. Recorded strain values also indicated satisfactory radial growth and stress levels, as well as verification of adequate safety factors. Postflight inspection of the insulation, seals, case, and nozzles showed overall excellent performance. Some thermal DFI protective cork was missing, and inoperative field joint vent valves on the thermal protection cork allowed water entry into the field joints upon splashdown. Evaluation of these anomalies, as well as complete evaluation of all Redesigned Solid Rocket Motor components, is contained.

Garecht, Diane M.↗

Interactive Software Fault Analysis Tool for Operational Anomaly Resolution

Resolving software operational anomalies frequently requires a significant amount of resources for software troubleshooting activities. The time required to identify a root cause of the anomaly in the software may lead to significant timeline impacts and in some cases, may extend to compromise of mission and safety objectives. An integrated tool that supports software fault analysis based on the observed operational effects of an anomaly could significantly reduce the time required to resolve operational anomalies; increase confidence for the proposed solution; identify software paths to be re-verified during regression testing; and, as a secondary product of the analysis, identify safety critical software paths.

Chen, Ken↗

Solid Modeling of Crew Exploration Vehicle Structure Concepts for Mass Optimization

Parametric solid and surface models of the crew exploration vehicle (CEV) command module (CM) structure concepts are developed for rapid finite element analyses, structural sizing and estimation of optimal structural mass. The effects of the structural configuration and critical design parameters on the stress distribution are visualized, examined to arrive at an efficient design. The CM structural components consisted of the outer heat shield, inner pressurized crew cabin, ring bulkhead and spars. For this study only the internal cabin pressure load case is considered. Component stress, deflection, margins of safety and mass are used as design goodness criteria. The design scenario is explored by changing the component thickness parameters and materials until an acceptable design is achieved. Aluminum alloy, titanium alloy and an advanced composite material properties are considered for the stress analysis and the results are compared as a part of lessons learned and to build up a structural component sizing knowledge base for the future CEV technology support. This independent structural analysis and the design scenario based optimization process may also facilitate better CM structural definition and rapid prototyping.

Mukhopadhyay, Vivek↗

Certification

Objective 1: Provide regulators with a methodology for development of airworthiness requirements for certification of UAS. a) Rationale: a comprehensive methodology does not currently exist to support development of regulation for certification of UAS. Regulation is essential to enable routine access to the NAS. b) Approach: 1) assess existing approaches and classification schemes for deriving acceptable means of compliance to airworthiness requirements. 2) investigate a service-based approach to classification of UAS. 3) conduct comparative analysis of different methodologies. 4) work with FAA to determine best approach and conduct case study. 5) participate in regulatory/standards organizations developing safety and performance requirements for UAS. Objective 2: Provide regulators and industry with hazard and risk-related data to support criteria for UAS type design. a) Rationale: There is presently little UAS specific data (incident, accident, and reliability), especially in a civil context, to support risk assessment and development of standards and regulation. b) Approach: Identify gaps in existing data, provide measured data as needed, and formulate recommendations by: 1) evaluating UAS incident/accident data collection efforts and determining additional support necessary for regulation. 2) assessing UAS-specific hazards and risks. 3) evaluating need for reliability data for UAS-unique systems, components and subsystem, and determining additional measurement requirements. 4) developing guidance and best practices for UAS type design.

Hayhurst, Kelly↗

Advanced Vehicle Concepts and Implications for NextGen

This report presents the results of a major NASA study of advanced vehicle concepts and their implications for the Next Generation Air Transportation System (NextGen). Comprising the efforts of dozens of researchers at multiple institutions, the analyses presented here cover a broad range of topics including business-case development, vehicle design, avionics, procedure design, delay, safety, environmental impacts, and metrics. The study focuses on the following five new vehicle types: Cruise-efficient short takeoff and landing (CESTOL) vehicles Large commercial tiltrotor aircraft (LCTRs) Unmanned aircraft systems (UAS) Very light jets (VLJs) Supersonic transports (SST). The timeframe of the study spans the years 2025-2040, although some analyses are also presented for a 3X scenario that has roughly three times the number of flights as today. Full implementation of NextGen is assumed.

Air traffic control↗

Innovative Comparison of Transient Ignition Temperature at the Booster Interface, New Stainless Steel Pyrovalve Primer Chamber Assembly "V" (PCA) Design Versus the Current Aluminum "Y" PCA Design

An assessment of four spacecraft pyrovalve anomalies that occurred during ground testing was conducted by the NASA Engineering & Safety Center (NESC) in 2008. In all four cases, a common aluminum (Al) primer chamber assembly (PCA) was used with dual NASA Standard Initiators (NSIs) and the nearly simultaneous (separated by less than 80 microseconds) firing of both initiators failed to ignite the booster charge. The results of the assessment and associated test program were reported in AIAA Paper AIAA-2008-4798, NESC Independent Assessment of Pyrovalve Ground Test Anomalies. As a result of the four Al PCA anomalies, and the test results and findings of the NESC assessment, the Mars Science Laboratory (MSL) project team decided to make changes to the PCA. The material for the PCA body was changed from aluminum (Al) to stainless steel (SS) to avoid melting, distortion, and potential leakage of the NSI flow passages when the device functioned. The flow passages, which were interconnected in a Y-shaped configuration (Y-PCA) in the original design, were changed to a V-shaped configuration (V-PCA). The V-shape was used to more efficiently transfer energy from the NSIs to the booster. Development and qualification testing of the new design clearly demonstrated faster booster ignition times compared to the legacy AL Y-PCA design. However, the final NESC assessment report recommended that the SS V-PCA be experimentally characterized and quantitatively compared to the Al Y-PCA design. This data was deemed important for properly evaluating the design options for future NASA projects. This test program has successfully quantified the improvement of the SS V-PCA over the Al Y-PCA. A phase B of the project was also conducted and evaluated the effect of firing command skew and enlargement of flame channels to further assist spacecraft applications.

Saulsberry, Regor L.↗

Reducing Conservatism in Aircraft Engine Response Using Conditionally Active Min-Max Limit Regulators

Current aircraft engine control logic uses a Min-Max control selection structure to prevent the engine from exceeding any safety or operational limits during transients due to throttle commands. This structure is inherently conservative and produces transient responses that are slower than necessary. In order to utilize the existing safety margins more effectively, a modification to this architecture is proposed, referred to as a Conditionally Active (CA) limit regulator. This concept uses the existing Min-Max architecture with the modification that limit regulators are active only when the operating point is close to a particular limit. This paper explores the use of CA limit regulators using a publicly available commercial aircraft engine simulation. The improvement in thrust response while maintaining all necessary safety limits is demonstrated in a number of cases.

May, Ryan D.↗

Utilizing Commercial Hardware and Open Source Computer Vision Software to Perform Motion Capture for Reduced Gravity Flight

Long duration space travel to Mars or to an asteroid will expose astronauts to extended periods of reduced gravity. Since gravity is not present to aid loading, astronauts will use resistive and aerobic exercise regimes for the duration of the space flight to minimize the loss of bone density, muscle mass and aerobic capacity that occurs during exposure to a reduced gravity environment. Unlike the International Space Station (ISS), the area available for an exercise device in the next generation of spacecraft is limited. Therefore, compact resistance exercise device prototypes are being developed. The NASA Digital Astronaut Project (DAP) is supporting the Advanced Exercise Concepts (AEC) Project, Exercise Physiology and Countermeasures (ExPC) project and the National Space Biomedical Research Institute (NSBRI) funded researchers by developing computational models of exercising with these new advanced exercise device concepts. To perform validation of these models and to support the Advanced Exercise Concepts Project, several candidate devices have been flown onboard NASAs Reduced Gravity Aircraft. In terrestrial laboratories, researchers typically have available to them motion capture systems for the measurement of subject kinematics. Onboard the parabolic flight aircraft it is not practical to utilize the traditional motion capture systems due to the large working volume they require and their relatively high replacement cost if damaged. To support measuring kinematics on board parabolic aircraft, a motion capture system is being developed utilizing open source computer vision code with commercial off the shelf (COTS) video camera hardware. While the systems accuracy is lower than lab setups, it provides a means to produce quantitative comparison motion capture kinematic data. Additionally, data such as required exercise volume for small spaces such as the Orion capsule can be determined. METHODS: OpenCV is an open source computer vision library that provides the ability to perform multi-camera 3 dimensional reconstruction. Utilizing OpenCV, via the Python programming language, a set of tools has been developed to perform motion capture in confined spaces using commercial cameras. Four Sony Video Cameras were intrinsically calibrated prior to flight. Intrinsic calibration provides a set of camera specific parameters to remove geometric distortion of the lens and sensor (specific to each individual camera). A set of high contrast markers were placed on the exercising subject (safety also necessitated that they be soft in case they become detached during parabolic flight); small yarn balls were used. Extrinsic calibration, the determination of camera location and orientation parameters, is performed using fixed landmark markers shared by the camera scenes. Additionally a wand calibration, the sweeping of the camera scenes simultaneously, was also performed. Techniques have been developed to perform intrinsic calibration, extrinsic calibration, isolation of the markers in the scene, calculation of marker 2D centroids, and 3D reconstruction from multiple cameras. These methods have been tested in the laboratory side-by-side comparison to a traditional motion capture system and also on a parabolic flight.

Biodynamics↗

Examining the Role of IMU Health Characterization and Monitoring in UAS Safety

Inertial measurement units (IMUs) can be vital for vehicle attitude and position estimation in unmanned aerial vehicles (UAVs). Degradation in these units could result in incorrect position estimates that are utilized in vehicle control, trajectory prediction, and other critical systems; however, the modes and effects of degradation in these IMUs are not well understood. In order to quantify the risk posed by degradation in these sensors, a study was conducted on the types of IMUs prevalent in the commercial market, their known failure modes, and the applicability to health monitoring methods for risk reduction and increased safety in an increasingly autonomous airspace. First, use cases and failure modes of the various types and reliability of commercially available IMUs were reviewed, and knowledge gaps and issues in the field were identified. Noting that inexpensive and lightweight MEMS (Microelectromechanical Systems) IMUs are some of the most commonly used but least reliable sensors in sUAS (small Unmanned Aerial Systems), five inexpensive MEMS IMUs were chosen for a performance evaluation study, selected from the Pixhawk autopilot systems, hobby sUAS, and prior NASA experimental studies. For each of these IMUs, a 10-minute bias test and a 12-hour drift test were performed for the accelerometers in a benchtop setting, using a BeagleBone Black for data collection. Using these results, the sensors’ performance is compared to their reported specifications, and the utility of implementing diagnostic methods for MEMS IMUs for research and commercial applications is evaluated. The paper concludes with a planned study for the evaluation of vibration-induced degradation for the selected sensors.

IMUs↗

Assured Contingency Landing Management for Advanced Air Mobility

Advanced Air Mobility (AAM) is quickly developing as a new air transportation system that moves people and packages in the regions previously not / less served by the current aviation systems. Such AAM must operate safely despite the potential to encounter hazards and experience anomalies and failures in-flight. It becomes especially important to have systematic auto-mitigation strategies to perform safe contingency actions in AAM flight operations, as pilots have limited Situational Awareness (SA) and limited time to make prompt decisions when encountering failures/anomalies in high-density low altitude airspace. This paper presents Assured Contingency Landing Management (ACLM) with an online landing strategy selection to decide between the following three options when a contingency landing is required: (1) Return-to-launch landing site, (2) Land immediately at a nearby clear but unprepared site, (3) Land at a prepared landing site from the approximate footprint. Our presented algorithm shows a real-time auto-mitigation loop with multiple threads that run simultaneously to check controllability, reachability, and intermediate decisions to hold/ loiter or continue the flight plan as the landing strategy solution is being computed. Case study simulation is demonstrated with the safety-critical propulsion system and battery system and shows how different failure scenarios impact the landing strategy selection.

Autonomous Mitigation↗

Another Approach to Enhance Airline Safety: Using Management Safety Tools

The ultimate goal of conducting an accident investigation is to prevent similar accidents from happening again and to make operations safer system-wide. Based on the findings extracted from the investigation, the "lesson learned" becomes a genuine part of the safety database making risk management available to safety analysts. The airline industry is no exception. In the US, the FAA has advocated the usage of the System Safety concept in enhancing safety since 2000. Yet, in today s usage of System Safety, the airline industry mainly focuses on risk management, which is a reactive process of the System Safety discipline. In order to extend the merit of System Safety and to prevent accidents beforehand, a specific System Safety tool needs to be applied; so a model of hazard prediction can be formed. To do so, the authors initiated this study by reviewing 189 final accident reports from the National Transportation Safety Board (NTSB) covering FAR Part 121 scheduled operations. The discovered accident causes (direct hazards) were categorized into 10 groups Flight Operations, Ground Crew, Turbulence, Maintenance, Foreign Object Damage (FOD), Flight Attendant, Air Traffic Control, Manufacturer, Passenger, and Federal Aviation Administration. These direct hazards were associated with 36 root factors prepared for an error-elimination model using Fault Tree Analysis (FTA), a leading tool for System Safety experts. An FTA block-diagram model was created, followed by a probability simulation of accidents. Five case studies and reports were provided in order to fully demonstrate the usefulness of System Safety tools in promoting airline safety.

Lu, Chien-tsug↗

Adopting an Objectives-Driven Assurance Case Approach for Achieving Space Flight Mission Planetary Protection Objectives

Traditionally, NASA has utilized prescriptive technical and process requirements to ensure safety and mission assurance performance objectives for space flight missions are achieved. While prescriptive re-quirements may be easier to communicate and manage throughout the systems engineering process, the highly-constrained nature of prescriptive requirements can limit the ability to take advantage of cost-saving opportunities and offer limited ability to explore other options or alternative designs, processes, and methods. It can also be difficult to develop prescriptive requirements for objectives that are prob-abilistic in nature or that cannot be satisfied by direct verification. In contrast, the development of an assurance case allows for a compelling, comprehensible, and valid argument to be developed with support-ing evidence that shows safety and mission assurance objectives have been satisfied. Analogous to how patent applications are constructed for inventions, an assurance case has a high-level claim of meeting a safety and mission assurance objective, followed by a more specific set of sub-claims and technical evidence which supports the claims. The objectives-driven assurance case approach allows for a better understand-ing and exploration of the trade space, more flexibility to balance trades, and the ability to realize and implement technical and process innovations for resource, time, and cost savings. The assurance case is a living case that evolves over the entire program life cycle. Recently, NASA’s Office of Planetary Pro-tection (OPP) has adopted the assurance case approach as an acceptable methodology for demonstrating avoidance of contamination of target solar system bodies explored by NASA space flight missions. This methodology has been incorporated into NASA’s new technical standard for planetary protection and is currently being utilized by the Mars Sample Return campaign for safe sample containment during sample return. This presentation will explore the development and implementation of an assurance case approach in the context of planetary protection, the shift from prescriptive requirements and the ongoing culture change in the technical community, and the support and guidance from NASA’s OPP in adopting the assurance case approach for achieving planetary protection objectives on NASA’s space flight missions.

Elaine Seasly↗

Implementation of Programmatic Quality and the Impact on Safety

The purpose of this paper is to discuss the implementation of a programmatic quality assurance discipline within the International Space Station Program and the resulting impact on safety. NASA culture has continued to stress safety at the expense of quality when both are extremely important and both can equally influence the success or failure of a Program or Mission. Although safety was heavily criticized in the media after Col~imbiaa, strong case can be made that it was the failure of quality processes and quality assurance in all processes that eventually led to the Columbia accident. Consequently, it is possible to have good quality processes without safety, but it is impossible to have good safety processes without quality. The ISS Program quality assurance function was analyzed as representative of the long-term manned missions that are consistent with the President s Vision for Space Exploration. Background topics are as follows: The quality assurance organizational structure within the ISS Program and the interrelationships between various internal and external organizations. ISS Program quality roles and responsibilities with respect to internal Program Offices and other external organizations such as the Shuttle Program, JSC Directorates, NASA Headquarters, NASA Contractors, other NASA Centers, and International Partner/participants will be addressed. A detailed analysis of implemented quality assurance responsibilities and functions with respect to NASA Headquarters, the JSC S&MA Directorate, and the ISS Program will be presented. Discussions topics are as follows: A comparison of quality and safety resources in terms of staffing, training, experience, and certifications. A benchmark assessment of the lessons learned from the Columbia Accident Investigation (CAB) Report (and follow-up reports and assessments), NASA Benchmarking, and traditional quality assurance activities against ISS quality procedures and practices. The lack of a coherent operational and sustaining quality assurance strategy for long-term manned space flight. An analysis of the ISS waiver processes and the Problem Reporting and Corrective Action (PRACA) process implemented as quality functions. Impact of current ISS Program procedures and practices with regards to operational safety and risk A discussion regarding a "defense-in-depth" approach to quality functions will be provided to address the issue of "integration vs independence" with respect to the roles of Programs, NASA Centers, and NASA Headquarters. Generic recommendations are offered to address the inadequacies identified in the implementation of ISS quality assurance. A reassessment by the NASA community regarding the importance of a "quality culture" as a component within a larger "safety culture" will generate a more effective and value-added functionality that will ultimately enhance safety.

Huls, Dale Thomas↗

Issues in Software System Safety: Polly Ann Smith Co. versus Ned I. Ludd

This paper is a work of fiction, but it is fiction with a very real purpose: to stimulate careful thought and friendly discussion about some questions for which thought is often careless and discussion is often unfriendly. To accomplish this purpose, the paper creates a fictional legal case. The most important issue in this fictional case is whether certain proffered expert testimony about software engineering for safety critical systems should be admitted. Resolving this issue requires deciding the extent to which current practices and research in software engineering, especially for safety-critical systems, can rightly be considered based on knowledge, rather than opinion.

Holloway, C. Michael↗

Hard and Soft Safety Verifications

The purpose of this paper is to examine the differences between and the effects of hard and soft safety verifications. Initially, the terminology should be defined and clarified. A hard safety verification is datum which demonstrates how a safety control is enacted. An example of this is relief valve testing. A soft safety verification is something which is usually described as nice to have but it is not necessary to prove safe operation. An example of a soft verification is the loss of the Solid Rocket Booster (SRB) casings from Shuttle flight, STS-4. When the main parachutes failed, the casings impacted the water and sank. In the nose cap of the SRBs, video cameras recorded the release of the parachutes to determine safe operation and to provide information for potential anomaly resolution. Generally, examination of the casings and nozzles contributed to understanding of the newly developed boosters and their operation. Safety verification of SRB operation was demonstrated by examination for erosion or wear of the casings and nozzle. Loss of the SRBs and associated data did not delay the launch of the next Shuttle flight.

Wetherholt, Jon↗

Integrating Safety and Mission Assurance into Systems Engineering Modeling Practices

During the early development of products, flight, or experimental hardware, emphasis is often given to the identification of technical requirements, utilizing such tools as use case and activity diagrams. Designers and project teams focus on understanding physical and performance demands and challenges. It is typically only later, during the evaluation of preliminary designs that a first pass, if performed, is made to determine the process, safety, and mission quality assurance requirements. Evaluation early in the life cycle, though, can yield requirements that force a fundamental change in design. This paper discusses an alternate paradigm for using the concepts of use case or activity diagrams to identify safety hazard and mission quality assurance risks and concerns using the same systems engineering modeling tools being used to identify technical requirements. It contains two examples of how this process might be used in the development of a space flight experiment, and the design of a Human Powered Pizza Delivery Vehicle, along with the potential benefits to decrease development time, and provide stronger budget estimates.

Requirements↗

Commercial Space In The Age Of “New Space”, Reusable Rockets and The Ongoing Tech Revolutions

A plethora of converging frontier technologies are reducing the costs of space access and utilization, enabling major growth going forward in commercial space, both in orbits up to Geosynchronous Earth Orbit (GEO) and in “Deep Space” beyond GEO. This paper reviews these frontier technologies and enabling technological approaches, the landscape of enabled emerging commercial applications, their issues, and in some cases their competition and outlook, along with the attendant “hard problems”. Major issues include mitigation of the inspace human health issues, reliability and safety, details regarding on body space resources, and a closed competitive and timely business case.

Bushnell, Dennis M↗

Total Quality Management and the System Safety Secretary

The system safety secretary is a valuable member of the system safety team. As downsizing occurs to meet economic constraints, the Total Quality Management (TQM) approach is frequently adopted as a formula for success and, in some cases, for survival.

Quality Management System Safety Secretary↗