SEARCH · Search NASA

Results for “System Safety Assessment”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

SourceResearch connectionFrom yearThrough year

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

All sources NASA NTRS DOE OSTI

NASA NTRS2021

Understanding Pilot Breathing – A Case Study in Systems Engineering

This position paper assesses the Pilot Breathing Assessment’s driving requirement to collect missing data on pilot breathing pressure, flow, rate, oxygen and CO2, simultaneously with aircraft data. Repeat measures data were collected over a 2-year period from 5 NASA test-pilots flying 8 flight profiles on NASA F-15 and F/A-18 (A, B) aircraft. This Pilot Breathing Assessment Systems Engineering (PiBASE) position paper serves as a case-study of systems engineering that accommodates the human as a distinct part of the whole. It acknowledges that a successful machine design intended for human use must include human systems biology/physiology as an integral part of planning, design, and implementation.

Pilot Breathing Assessment Systems Engineering↗

NASA NTRS2005

Taking the Risk Out of Risk Assessment

The ability to understand risks and have the right strategies in place when risky events occur is essential in the workplace. More and more organizations are being confronted with concerns over how to measure their risks or what kind of risks they can take when certain events transpire that could have a negative impact. NASA is one organization that faces these challenges on a daily basis, as effective risk management is critical to the success of its missions especially the Space Shuttle missions. On July 29, 1996, former NASA Administrator Daniel Goldin charged NASA s Office of Safety and Mission Assurance with developing a probabilistic risk assessment (PRA) tool to support decisions on the funding of Space Shuttle upgrades. When issuing the directive, Goldin said, "Since I came to NASA [in 1992], we've spent billions of dollars on Shuttle upgrades without knowing how much they improve safety. I want a tool to help base upgrade decisions on risk." Work on the PRA tool began immediately. The resulting prototype, the Quantitative Risk Assessment System (QRAS) Version 1.0, was jointly developed by NASA s Marshall Space Flight Center, its Office of Safety and Mission Assurance, and researchers at the University of Maryland. QRAS software automatically expands the reliability logic models of systems to evaluate the probability of highly detrimental outcomes occurring in complex systems that are subject to potential accident scenarios. Even in its earliest forms, QRAS was used to begin PRA modeling of the Space Shuttle. In parallel, the development of QRAS continued, with the goal of making it a world-class tool, one that was especially suited to NASA s unique needs. From the beginning, an important conceptual goal in the development of QRAS was for it to help bridge the gap between the professional risk analyst and the design engineer. In the past, only the professional risk analyst could perform, modify, use, and perhaps even adequately understand PRA. NASA wanted to change this by developing a PRA tool that would be friendlier, more understandable, and more useful to the broader engineering community. This concept ultimately led to the look, feel, and functionality that QRAS has today.

Source record↗

NASA NTRS2012

Global Precipitation Measurement (GPM) Safety Inhibit Timeline Tool

The Global Precipitation Measurement (GPM) Observatory is a joint mission under the partnership by National Aeronautics and Space Administration (NASA) and the Japan Aerospace Exploration Agency (JAXA), Japan. The NASA Goddard Space Flight Center (GSFC) has the lead management responsibility for NASA on GPM. The GPM program will measure precipitation on a global basis with sufficient quality, Earth coverage, and sampling to improve prediction of the Earth's climate, weather, and specific components of the global water cycle. As part of the development process, NASA built the spacecraft (built in-house at GSFC) and provided one instrument (GPM Microwave Imager (GMI) developed by Ball Aerospace) JAXA provided the launch vehicle (H2-A by MHI) and provided one instrument (Dual-Frequency Precipitation Radar (DPR) developed by NTSpace). Each instrument developer provided a safety assessment which was incorporated into the NASA GPM Safety Hazard Assessment. Inhibit design was reviewed for hazardous subsystems which included the High Gain Antenna System (HGAS) deployment, solar array deployment, transmitter turn on, propulsion system release, GMI deployment, and DPR radar turn on. The safety inhibits for these listed hazards are controlled by software. GPM developed a "pathfinder" approach for reviewing software that controls the electrical inhibits. This is one of the first GSFC in-house programs that extensively used software controls. The GPM safety team developed a methodology to document software safety as part of the standard hazard report. As part of this process a new tool "safety inhibit time line" was created for management of inhibits and their controls during spacecraft buildup and testing during 1& Tat GSFC and at the Range in Japan. In addition to understanding inhibits and controls during 1& T the tool allows the safety analyst to better communicate with others the changes in inhibit states with each phase of hardware and software testing. The tool was very useful for communicating compliance with safety requirements especially when working with a foreign partner.

Dion, Shirley↗

NASA NTRS2022

NESC Peer Review of Exploration Systems Development (ESD) Integrated Vehicle Modal Test, Model Correlation, Development Flight Instrumentation (DFI) and Flight Loads Readiness; Uncertainty Propagation for Model Validation Sub-task

This report details a sub-task (regarding Uncertainty Propagation for Model Validation) from a NASA Engineering and Safety Center assessment that is a multi-year activity spanning the complete development of the Space Launch System integrated vehicle structural dynamic models, and the development of the certification of flight readiness for the Artemis 1 and Artemis 2 vehicles and their variants.

Exploration Systems Development; Development Fligh↗

NASA NTRS2016

Preliminary Assessment of Operational Hazards and Safety Requirements for Airborne Trajectory Management (ABTM) Roadmap Applications

A set of five developmental steps building from the NASA TASAR (Traffic Aware Strategic Aircrew Requests) concept are described, each providing incrementally more efficiency and capacity benefits to airspace system users and service providers, culminating in a Full Airborne Trajectory Management capability. For each of these steps, the incremental Operational Hazards and Safety Requirements are identified for later use in future formal safety assessments intended to lead to certification and operational approval of the equipment and the associated procedures. Two established safety assessment methodologies that are compliant with the FAA's Safety Management System were used leading to Failure Effects Classifications (FEC) for each of the steps. The most likely FEC for the first three steps, Basic TASAR, Digital TASAR, and 4D TASAR, is "No effect". For step four, Strategic Airborne Trajectory Management, the likely FEC is "Minor". For Full Airborne Trajectory Management (Step 5), the most likely FEC is "Major".

Cotton, William B.↗

NASA NTRS1995

Probabilistic risk assessment of the Space Shuttle. Phase 3: A study of the potential of losing the vehicle during nominal operation. Volume 5: Auxiliary shuttle risk analyses

Volume 5 is Appendix C, Auxiliary Shuttle Risk Analyses, and contains the following reports: Probabilistic Risk Assessment of Space Shuttle Phase 1 - Space Shuttle Catastrophic Failure Frequency Final Report; Risk Analysis Applied to the Space Shuttle Main Engine - Demonstration Project for the Main Combustion Chamber Risk Assessment; An Investigation of the Risk Implications of Space Shuttle Solid Rocket Booster Chamber Pressure Excursions; Safety of the Thermal Protection System of the Space Shuttle Orbiter - Quantitative Analysis and Organizational Factors; Space Shuttle Main Propulsion Pressurization System Probabilistic Risk Assessment, Final Report; and Space Shuttle Probabilistic Risk Assessment Proof-of-Concept Study - Auxiliary Power Unit and Hydraulic Power Unit Analysis Report.

Fragola, Joseph R.↗

NASA NTRS2014

A Comprehensive Analysis of the X-15 Flight 3-65 Accident

The November 15, 1967, loss of X-15 Flight 3-65-97 (hereafter referred to as Flight 3-65) was a unique incident in that it was the first and only aerospace flight accident involving loss of crew on a vehicle with an adaptive flight control system (AFCS). In addition, Flight 3-65 remains the only incidence of a single-pilot departure from controlled flight of a manned entry vehicle in a hypersonic flight regime. To mitigate risk to emerging aerospace systems, the NASA Engineering and Safety Center (NESC) proposed a comprehensive review of this accident. The goal of the assessment was to resolve lingering questions regarding the failure modes of the aircraft systems (including the AFCS) and thoroughly analyze the interactions among the human agents and autonomous systems that contributed to the loss of the pilot and aircraft. This document contains the outcome of the accident review.

Dennehy, Cornelius J.↗

NASA NTRSDate not supplied

The High Density Vertiplex Advanced Onboard Automation Overview

While many studies have been performed examining Urban Air Mobility (UAM) operations from UAM Maturity Level (UML) UML-1 to UML-4, [1, 2] some uncertainty exists regarding the integration and role of onboard autonomous systems, airspace management systems, ground control and fleet management systems, and how they integrate with vertiport automation systems to ensure safe high-density future operations. One thrust of the Advanced Air Mobility (AAM) High Density Vertiplex (HDV) sub-project is to perform rapid prototyping and assessment of an Urban Air Mobility (UAM) Ecosystem within the terminal operational area to help inform future research investments and technology development. Another thrust within HDV is to perform integration, testing, and safety risk assessments required to acquire operational credit for several NASA small Unmanned Aerial Systems (sUAS) beyond visual line of sight (BVLOS) enabling technologies to expand test capabilities and to expedite technology transfer and ultimate effective usage. Both thrusts leverage sUAS to serve as surrogates for the highly-technologically-similar envisioned UAM aircraft as well as to provide significant contributions to sUAS Part-135 operators. This report provides an overview of the activities accomplished within the Advanced Onboard Automation (AOA) schedule work package of HDV.

Human Factors, Simulation↗

NASA NTRS2012

Assessment of Microphone Phased Array for Measuring Launch Vehicle Lift-off Acoustics

The specific purpose of the present work was to demonstrate the suitability of a microphone phased array for launch acoustics applications via participation in selected firings of the Ares I Scale Model Acoustics Test. The Ares I Scale Model Acoustics Test is a part of the discontinued Constellation Program Ares I Project, but the basic understanding gained from this test is expected to help development of the Space Launch System vehicles. Correct identification of sources not only improves the predictive ability, but provides guidance for a quieter design of the launch pad and optimization of the water suppression system. This document contains the results of the NASA Engineering and Safety Center assessment.

Garcia, Roberto↗

NASA NTRS1981

Report of activities of the advanced coal extraction systems definition project, 1979 - 1980

During this period effort was devoted to: formulation of system performance goals in the areas of production cost, miner safety, miner health, environmental impact, and coal conservation, survey and in depth assessment of promising technology, and characterization of potential resource targets. Primary system performance goals are to achieve a return on incremental investment of 150% of the value required for a low risk capital improvement project and to reduce deaths and disability injuries per million man-hour by 50%. Although these performance goals were developed to be immediately applicable to the Central Appalachian coal resources, they were also designed to be readily adaptable to other coals by appending a geological description of the new resource. The work done on technology assessment was concerned with the performance of the slurry haulage system.

Lavin, M. L.↗

NASA NTRS2002

NASA Aviation Safety Program Weather Accident Prevention/weather Information Communications (WINCOMM)

Weather is a contributing factor in approximately 25-30 percent of general aviation accidents. The lack of timely, accurate and usable weather information to the general aviation pilot in the cockpit to enhance pilot situational awareness and improve pilot judgment remains a major impediment to improving aviation safety. NASA Glenn Research Center commissioned this 120 day weather datalink market survey to assess the technologies, infrastructure, products, and services of commercial avionics systems being marketed to the general aviation community to address these longstanding safety concerns. A market survey of companies providing or proposing to provide graphical weather information to the general aviation cockpit was conducted. Fifteen commercial companies were surveyed. These systems are characterized and evaluated in this report by availability, end-user pricing/cost, system constraints/limits and technical specifications. An analysis of market survey results and an evaluation of product offerings were made. In addition, recommendations to NASA for additional research and technology development investment have been made as a result of this survey to accelerate deployment of cockpit weather information systems for enhancing aviation safety.

Feinberg, Arthur↗

NASA NTRS2018

A Component-Level Model of Automatic Dependent Surveillance - Broadcast (ADS-B)

Automatic Dependent Surveillance – Broadcast (ADS-B) is being employed in numerous peer-to-peer initiatives attempting to expand the capacity of the National Airspace System (NAS) or enable mixed operations of manned and unmanned vehicles. Safety assessments of these initiatives rely, in part, on modeling the accuracy of ADS-B in reporting the position and direction of an ownship and surrounding traffic. Frequently, these initiatives utilize a position uncertainty model that applies a reported ADS-B estimation position uncertainty (EPU) value to a Rayleigh distribution and uses a Gauss-Markov random walk to add error to the ADS-B output of a vehicle. This model of ADS-B state error is easy to implement and apply to numerous problems. However, it has a couple of draw-backs. First, the ADS-B state errors are equally probable in all directions. This is a good assumption in situations where aircraft maneuvering is not constrained. However, in situations where the aircraft maneuvering is constrained such as landing, the error distribution is likely to exhibit directionality and the non-directional model may skew results especially when assessing very low probabilities (e.g., 10(exp -9)) of catastrophic encounters. Second, the model does not account for processing latency in the receiving aircraft. NASA Langley Research Center (LaRC) recently examined the feasibility of decreasing the spacing of aircraft on parallel approaches to runways separated by as little as 700 feet. For Monte-Carlo analysis using a high-fidelity simulation of a large transport, LaRC started with a Gauss-Markov model of ADS-B error but then developed a component level model of ADS-B error to increase the fidelity of results.

Madden, Michael M.↗

NASA NTRS2009

Refractory Materials for Flame Deflector Protection System Corrosion Control: Refractory Ceramics Literature Survey

Ceramics can be defmed as a material consisting of hard brittle properties produced from inorganic and nonmetallic minerals made by firing at high temperatures. These materials are compounds between metallic and nonmetallic elements and are either totally ionic, or predominately ionic but having some covalent character. This definition allows for a large range of materials, not all applicable to refractory applications. As this report is focused on potential ceramic materials for high temperature, aggressive exposure applications, the ceramics reviewed as part of this report will focus on refractory ceramics specifically designed and used for these applications. Ceramic materials consist of a wide variety of products. Callister (2000) 1 characterized ceramic materials into six classifications: glasses, clay products, refractories, cements, abrasives, and advanced ceramics. Figure 1 shows this classification system. This review will focus mainly on refractory ceramics and cements as in general, the other classifications are neither applicable nor economical for use in large structures such as the flame trench. Although much work has been done in advanced ceramics over the past decade or so, these materials are likely cost prohibitive and would have to be fabricated off-site, transported to the NASA facilities, and installed, which make these even less feasible. Although the authors reviewed the literature on advanced ceramic refractories 2 center dot 3 center dot 4 center dot 5 center dot 6 center dot 7 center dot 8 center dot 9 center dot 10 center dot 11 center dot 12 after the review it was concluded that these materials should not be ' the focus of this report. A review is in progress on materials and systems for prefabricated refractory ceramic panels, but this review is focusing more on typical refractory materials for prefabricated systems, which could make the system more economically feasible. Refractory ceramics are used for a wide variety of applications. Figure 2 shows many ofthese applications, their life expectancy or requirement, and the exposure temperature for the refractory ceramic. Note that the exposure temperatures for refractory ceramics are very similar to the exposure conditions for specialty ceramics (rocket nozzles, space vehicle re-entry fields, etc.) and yet the life expectancy or requirement is relatively low. Currently NASA is repairing the refractory lining in the flame trench after every launch - although this is not a direct indication of low life expectancy, it does indicate that the current system may not be sufficiently durable to maximize economy. Better performing refractory ceramics are needed to improve the performance, economy, and safety during and after launches at the flame trenches at Kennedy Space Center (KSC). To achieve this goal a current study is underway to assess different refractory systems for possible use in the flame trenches at KSC. This report will target the potential applicability of refractory ceramics for use in the flame trenches. An overview of the different refractory ceramics will be provided (see Figure I). This will be followed with a brief description of the structure of refractory products, the properties and characteristics of different systems, the methodology for selecting refractories, and then a general design methodology. Based on these sections, future challenges and opportunities will be identified with the objective of improving the durability, performance, economy, and safety of the launch complex. Refractory ceramics are used for a wide variety of applications. Figure 2 shows many ofthese applications, their life expectancy or requirement, and the exposure temperature for the refractory ceramic. Note that the exposure temperatures for refractory ceramics are very similar to the exposure conditions for specialty ceramics (rocket nozzles, space vehicle re-entry fields, etc.) and yet the life expectancy or requirement is relatively low. Currently NASA is repairing the refractory lining in the flame trench after every launch - although this is not a direct indication of low life expectancy, it does indicate that the current system may not be sufficiently durable to maximize economy. Better performing refractory ceramics are needed to improve the performance, economy, and safety during and after launches at the flame trenches at Kennedy Space Center (KSC). To achieve this goal a current study is underway to assess different refractory systems for possible use in the flame trenches at KSC. This report will target the potential applicability of refractory ceramics for use in the flame trenches. An overview of the different refractory ceramics will be provided (see Figure I). This will be followed with a brief description of the structure of refractory products, the properties and characteristics of different systems, the methodology for selecting refractories, and then a general design methodology. Based on these sections, future challenges and opportunities will be identified with the objective of improving the durability, performance, economy, and safety of the launch complex.

Calle, Luz Marina↗

NASA NTRS2020

Architecture and Information Requirements to Assess and Predict Flight Safety Risks During Highly Autonomous Urban Flight Operations

As aviation adopts new and increasingly complex operational paradigms, vehicle types, and technologies to broaden airspace capability and efficiency, maintaining a safe system will require recognition and timely mitigation of new safety issues as they emerge and before significant consequences occur. A shift toward a more predictive risk mitigation capability becomes critical to meet this challenge. In-time safety assurance comprises monitoring, assessment, and mitigation functions that proactively reduce risk in complex operational environments where the interplay of hazards may not be known (and therefore not accounted for) during design. These functions can also help to understand and predict emergent effects caused by the increased use of automation or autonomous functions that may exhibit unexpected non-deterministic behaviors. The envisioned monitoring and assessment functions can look for precursors, anomalies, and trends (PATs) by applying model-based and data-driven methods. Outputs would then drive downstream mitigation(s) if needed to reduce risk. These mitigations may be accomplished using traditional design revision processes or via operational (and sometimes automated) mechanisms. The latter refers to the ‘in-time’ aspect of the system concept. This report comprises architecture and information requirements and considerations toward enabling such a capability within the domain of low altitude highly autonomous urban flight operations. This domain may span, for example, public-use surveillance missions flown by small unmanned aircraft (e.g., infrastructure inspection, facility management, emergency response, law enforcement, and/or security) to transportation missions flown by larger aircraft that may carry passengers or deliver products. Caveat: Any stated requirements in this report should be considered initial requirements that are intended to drive research and development (R&D). These initial requirements are likely to evolve based on R&D findings, refinement of operational concepts, industry advances, and new industry or regulatory policies or standards related to safety assurance.

Young, Steven↗

NASA NTRS2011

Risk Assessment Overview

Risk assessment is used in many industries to identify and manage risks. Initially developed for use on aeronautical and nuclear systems, risk assessment has been applied to transportation, chemical, computer, financial, and security systems among others. It is used to gain an understanding of the weaknesses or vulnerabilities in a system so modification can be made to increase operability, efficiency, and safety and to reduce failure and down-time. Risk assessment results are primary inputs to risk-informed decision making; where risk information including uncertainty is used along with other pertinent information to assist management in the decision-making process. Therefore, to be useful, a risk assessment must be directed at specific objectives. As the world embraces the globalization of trade and manufacturing, understanding the associated risk become important to decision making. Applying risk assessment techniques to a global system of development, manufacturing, and transportation can provide insight into how the system can fail, the likelihood of system failure and the consequences of system failure. The risk assessment can identify those elements that contribute most to risk and identify measures to prevent and mitigate failures, disruptions, and damaging outcomes. In addition, risk associated with public and environment impact can be identified. The risk insights gained can be applied to making decisions concerning suitable development and manufacturing locations, supply chains, and transportation strategies. While risk assessment has been mostly applied to mechanical and electrical systems, the concepts and techniques can be applied across other systems and activities. This paper provides a basic overview of the development of a risk assessment.

Prassinos, Peter G.↗

NASA NTRS1990

National plan to enhance aviation safety through human factors improvements

The purpose of this section of the plan is to establish a development and implementation strategy plan for improving safety and efficiency in the Air Traffic Control (ATC) system. These improvements will be achieved through the proper applications of human factors considerations to the present and future systems. The program will have four basic goals: (1) prepare for the future system through proper hiring and training; (2) develop a controller work station team concept (managing human errors); (3) understand and address the human factors implications of negative system results; and (4) define the proper division of responsibilities and interactions between the human and the machine in ATC systems. This plan addresses six program elements which together address the overall purpose. The six program elements are: (1) determine principles of human-centered automation that will enhance aviation safety and the efficiency of the air traffic controller; (2) provide new and/or enhanced methods and techniques to measure, assess, and improve human performance in the ATC environment; (3) determine system needs and methods for information transfer between and within controller teams and between controller teams and the cockpit; (4) determine how new controller work station technology can optimally be applied and integrated to enhance safety and efficiency; (5) assess training needs and develop improved techniques and strategies for selection, training, and evaluation of controllers; and (6) develop standards, methods, and procedures for the certification and validation of human engineering in the design, testing, and implementation of any hardware or software system element which affects information flow to or from the human.

Foushee, Clay↗

NASA NTRS1976

Civil uses of remotely piloted aircraft

An overview of an ongoing study of civil applications of Remotely Piloted Vehicles (RPVs) is presented, including a summation of results to date and the status of work yet to be completed. The intent of the study is to examine the total technical, economic, and environmental impact of RPVs in the civil environment in order to identify and assess the technological effort required to bring these vehicles to realization. The paper describes a market survey in which some 35 civil applications of RPVs have been defined and categorized into groups which have similar mission requirements. From this broad analysis of many potential uses, a smaller number of promising and representative applications have been selected for more in-depth analysis. Using one or two of these applications as specific examples, the paper briefly describes system performance requirements and vehicle concepts, and compares the benefits and costs with those of present methods. The paper also reports on the status of other work such as subsystem concepts, assessment of the technology, and the influence of safety and environmental considerations on these future civil RPV systems.

Nelms, W. P., Jr.↗

NASA NTRS2005

On Automating Failure Mode Analysis and Enforcing its Integrity

This paper reports our experience on the development of a design-for-safety (DFS) workbench called Risk Assessment and Management Environment (RAME) for microelectronic avionics systems. Our objective is to transform DFS practice from an ad-hoc, inefficient, error-prone approach to a stringent engineering process such that DFS can keep up with the rapidly growing complexity of avionics systems. In particular, RAME is built upon an information infrastructure that comprises a fault model, a knowledge base, and a failure reporting/tracking system. This infrastructure permits systematic learning from prior projects and enables the automation of failure modes, effects and criticality analysis (FMECA). Among other unique features, the most important advantage of RAME is its capability of directly accepting design source code in hardware description languages (HDLs) for automated failure mode analysis, which enables RAME to be compatible and to evolve with most electronic-computer-aided-design systems. Through an initial experimental evaluation of the RAME prototype, we show that our approach to FMECA automation improves failure mode analysis turn-around-time, completeness, and accuracy.

design for safety↗