Search NASA⌕ Search

SEARCH · Search NASA

Results for “fault protection”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11
All sourcesNASA NTRSDOE OSTI
NASA NTRS1984

Fault-tolerant system considerations for a redundant strapdown inertial measurement unit

The development and evaluation of a fault-tolerant system for the Redundant Strapdown Inertial Measurement Unit (RSDIMU) being developed and evaluated by the NASA Langley Research Center was continued. The RSDIMU consists of four two-degree-of-freedom gyros and accelerometers mounted on the faces of a semi-octahedron which can be separated into two halves for damage protection. Compensated and uncompensated fault-tolerant system failure decision algorithms were compared. An algorithm to compensate for sensor noise effects in the fault-tolerant system thresholds was evaluated via simulation. The effects of sensor location and magnitude of the vehicle structural modes on system performance were assessed. A threshold generation algorithm, which incorporates noise compensation and filtered parity equation residuals for structural mode compensation, was evaluated. The effects of the fault-tolerant system on navigational accuracy were also considered. A sensor error parametric study was performed in an attempt to improve the soft failure detection capability without obtaining false alarms. Also examined was an FDI system strategy based on the pairwise comparison of sensor measurements. This strategy has the specific advantage of, in many instances, successfully detecting and isolating up to two simultaneously occurring failures.

Motyka, P.↗
NASA NTRS1991

An Investigative Redesign of the ECG and EMG Signal Conditioning Circuits for Two-fault Tolerance and Circuit Improvement

An investigation was undertaken to make the elctrocardiography (ECG) and the electromyography (EMG) signal conditioning circuits two-fault tolerant and to update the circuitry. The present signal conditioning circuits provide at least one level of subject protection against electrical shock hazard but at a level of 100 micro-A (for voltages of up to 200 V). However, it is necessary to provide catastrophic fault tolerance protection for the astronauts and to provide protection at a current level of less that 100 micro-A. For this study, protection at the 10 micro-A level was sought. This is the generally accepted value below which no possibility of microshock exists. Only the possibility of macroshock exists in the case of the signal conditioners. However, this extra amount of protection is desirable. The initial part deals with current limiter circuits followed by an investigation into the signal conditioner specifications and circuit design.

Obrien, Edward M.↗
NASA NTRS1993

A fault-tolerant intelligent robotic control system

This paper describes the concept, design, and features of a fault-tolerant intelligent robotic control system being developed for space and commercial applications that require high dependability. The comprehensive strategy integrates system level hardware/software fault tolerance with task level handling of uncertainties and unexpected events for robotic control. The underlying architecture for system level fault tolerance is the distributed recovery block which protects against application software, system software, hardware, and network failures. Task level fault tolerance provisions are implemented in a knowledge-based system which utilizes advanced automation techniques such as rule-based and model-based reasoning to monitor, diagnose, and recover from unexpected events. The two level design provides tolerance of two or more faults occurring serially at any level of command, control, sensing, or actuation. The potential benefits of such a fault tolerant robotic control system include: (1) a minimized potential for damage to humans, the work site, and the robot itself; (2) continuous operation with a minimum of uncommanded motion in the presence of failures; and (3) more reliable autonomous operation providing increased efficiency in the execution of robotic tasks and decreased demand on human operators for controlling and monitoring the robotic servicing routines.

Marzwell, Neville I.↗
NASA NTRS1996

Design of a power management and distribution system for a thermionic-diode powered spacecraft

The Electrical Systems Development Branch of the Power Technology Division at the NASA Lewis Research Center in Cleveland, Ohio is designing a Power Management and Distribution (PMAD) System for the Air Force's Integrated Solar Upper Stage (ISUS) Engine Ground Test Demonstration (EGD). The ISUS program uses solar-thermal propulsion to perform orbit transfers from Low Earth Orbit (LEO) to Geosynchronous Orbit (GEO) and from LEO to Molnya. The ISUS uses the same energy conversion receiver to perform the LEO to High Earth Orbit (HEO) transfer and to generate on-orbit electric power for the payloads. On-orbit power generation is accomplished via two solar concentrators heating a dual-cavity graphite-core which has Thermionic Diodes (TMD's) encircling each cavity. The graphite core and concentrators together are called the Receiver and Concentrator (RAC). The TDM-emitters reach peak temperatures of approximately 2200K, and the TID-collectors are run at approximately 1000K. Because of the high Specific Impulse (I(sup sp)) of solar thermal propulsion relative to chemical propulsion, and because a common bus is used for communications, GN&C, power, etc., a substantial increase in payload weight is possible. This potentially allows for a stepdown in the required launch vehicle size or class for similar payload weight using conventional chemical propulsion and a separate spacecraft bus. The ISUS power system is to provide 1000W(sub e) at 28+/-6V(sub dc) to the payload/spacecraft from a maximum TID generation capability of 1070W(sub e) at 2200K. Producing power with this quality, protecting the spacecraft from electrical faults and accommodating operational constraints of the TID's are the responsibilities of the PMAD system. The design strategy and system options examined along with the proposed designs for the Flight and EGD configurations are discussed herein.

Kimnach, Greg L.↗
NASA NTRS1997

Mars Surveyor '98 Landers MVACS Robotic Arm Control System Design Concepts

This paper describes the control system design concepts for the Mars Volatiles and Climate Surveyor (MVACS) Robotic Arm which supports the scientific investigations to be conducted as part of the Mars Surveyor '98 Lander project. Solutions are presented to some of the problems encountered in this demanding space application with its tight constraints on mass, power, volume, and computing resources. Problems addressed include 4-DOF forward and inverse kinematics, trajectory planning to minimize potential impact damage, joint drive train protection, Lander tilt prevention, hardware fault monitoring, and collision avoidance.

Bonitz, Robert G.↗
NASA NTRS2002

Modeling International Space Station (ISS) Floating Potentials

The floating potential of the International Space Station (ISS) as a function of the electron current collection of its high voltage solar array panels is derived analytically. Based on Floating Potential Probe (FPP) measurements of the ISS potential and ambient plasma characteristics, it is shown that the ISS floating potential is a strong function of the electron temperature of the surrounding plasma. While the ISS floating potential has so far not attained the pre-flight predicted highly negative values, it is shown that for future mission builds, ISS must continue to provide two-fault tolerant arc-hazard protection for astronauts on EVA.

Ferguson, Dale C.↗
NASA NTRS2022

Electrical Ground Support Equipment for the Sampling Caching System of the Mars 2020 Rover

In this work we describe in detail the architecture, design, testing and operation of the Electrical Ground Support Equipment (EGSE) “Blue Box” used to test and validate the Sampling Caching System (SCS) of the Mars 2020 Perseverance rover. The Blue Box architecture is centered around COTS motor controllers and COTS input-output modules communicating over an EtherCAT bus. A custom, low-level safety subsystem ensures no harm can be done to the flight articles. The modular architecture of the EGSE reduces cost and complexity while expediting assembly time. The Blue Box drives the 19 actuators of the SCS which span the main robotic arm, the corer system, the internal sample handling arm, the sample tube sealing system and the gas dust removal tool; mimicking the Rover Motor Control Assembly (RMCA). Due to the limited availability of RMCA’s, the EGSE enabled and performed the bulk of testing activities for SCS. The majority of the SCS actuators are composed of a 3-phase DC brushless motors, hall sensors for commutation, dual resolvers for output angular measurement, brakes, heaters and platinum thermistors. Additionally, the EGSE read 12 strain gauges forming part of a force torque sensor, and switches used for external positioning references. Over the 3-year span of the V&V campaign for the SCS, over 32 EGSE systems were built, tested and deployed to test venues at JPL and externally. The EGSE tested several families of the SCS subsystem, ranging from engineering units, life test units and two flight units. Test venues that this EGSE supported included lab benches, ultra-clean cleanrooms, ATLO facilities, and thermal vacuum chambers. Together with the test software systems, SSDEV and SSDEV-ECAT, the Blue Box EGSE enabled the team to efficiently test flight hardware and flight software together. We go over the safety features and fault management techniques employed to protect flight hardware. The effects of the long, 50-feet, EGSE harnesses on motor performance, EMI, electrical noise, and motor control performance are explained. Mitigations to these unwanted effects, including shielding strategy and inductance compensation, are summarized. We go over an excerpt of notable anomalies that this EGSE suffered through its operation, along with investigations and resolutions. Lessons learned, areas of improvement as part of future work, and recommendations for future implementations for similar EGSE’s, are shared.

Levine, Dan↗
NASA NTRS2018

Electrical Engineering Medium Voltage Protection and Coordination

This presentation covers the basics of the medium voltage electrical system on the Kennedy Space Center. The material will include the process of selective coordination between protective devices and the analysis of a fault that occurred in the electrical system. I will discuss the most common causes of faults found and how the system reacts to the faults at different locations in the subsystem. Explain the importance of the sensitivity and coordination between the devices to protect the equipment it is supplying.

Wessner, Jason R.↗
NASA NTRS1984

Fault-tolerant software for the FIMP

The work reported here provides protection against software failures in the task dispatcher of the FTMP, a particularly critical portion of the system software. Faults in other system modules and application programs can be handled by similar techniques but are not covered in this effort. Goals of the work reported here are: (1) to develop provisions in the software design that will detect and mitigate software failures in the dispatcher portion of the FTMP Executive and, (2) to propose the implementation of specific software reliability measures in other parts of the system. Beyond the specific support to the FTMP project, the work reported here represents a considerable advance in the practical application of the recovery block methodology for fault tolerant software design.

Hecht, H.↗
NASA NTRS2014

Fault Management Design Strategies

Development of dependable systems relies on the ability of the system to determine and respond to off-nominal system behavior. Specification and development of these fault management capabilities must be done in a structured and principled manner to improve our understanding of these systems, and to make significant gains in dependability (safety, reliability and availability). Prior work has described a fundamental taxonomy and theory of System Health Management (SHM), and of its operational subset, Fault Management (FM). This conceptual foundation provides a basis to develop framework to design and implement FM design strategies that protect mission objectives and account for system design limitations. Selection of an SHM strategy has implications for the functions required to perform the strategy, and it places constraints on the set of possible design solutions. The framework developed in this paper provides a rigorous and principled approach to classifying SHM strategies, as well as methods for determination and implementation of SHM strategies. An illustrative example is used to describe the application of the framework and the resulting benefits to system and FM design and dependability.

systems engineering↗
NASA NTRS1988

Expert system structures for fault detection in spaceborne power systems

This paper presents an architecture for an expert system structure suitable for use with power system fault detection algorithms. The system described is not for the purpose of reacting to faults which have occurred, but rather for the purpose of performing on-line diagnostics and parameter evaluation to determine potential or incipient fault conditions. The system is also designed to detect high impedance or arcing faults which cannot be detected by conventional protection devices. This system is part of an overall monitoring computer hierarchy which would provide a full evaluation of the status of the power system and react to both incipient and catastrophic faults. An approximate hardware structure is suggested and software requirements are discussed. Modifications to CLIPS software, to capitalize on features offered by expert systems, are presented. It is suggested that such a system would have significant advantages over existing protection philosophy.

Watson, Karan↗
NASA NTRS1974

Life support subsystem monitoring instrumentation

The recognition of the need for instrumentation in manned spacecraft life-support subsystems has increased significantly over the past several years. Of the required control and monitoring instrumentation, this paper will focus on the monitoring instrumentation as applied to life-support subsystems. The initial approach used independent sensors, independent sensor signal conditioning circuitry, and independent logic circuitry to provide shutdown protection only. This monitoring system was replaced with a coordinated series of printed circuit cards, each of which contains all the electronics to service one sensor and provide performance trend information, fault detection and isolation information, and shutdown protection. Finally, a review of sensor and instrumentation problems is presented, and the requirement for sensors with built-in signal conditioning and provisions for in situ calibration is discussed.

Powell, J. D.↗
NASA NTRS1986

Hybrid routing technique for a fault-tolerant, integrated information network

The evolutionary growth of the space station and the diverse activities onboard are expected to require a hierarchy of integrated, local area networks capable of supporting data, voice, and video communications. In addition, fault-tolerant network operation is necessary to protect communications between critical systems attached to the net and to relieve the valuable human resources onboard the space station of time-critical data system repair tasks. A key issue for the design of the fault-tolerant, integrated network is the development of a robust routing algorithm which dynamically selects the optimum communication paths through the net. A routing technique is described that adapts to topological changes in the network to support fault-tolerant operation and system evolvability.

Meredith, B. D.↗
NASA NTRS1980

Base drive for paralleled inverter systems

In a paralleled inverter system, a positive feedback current derived from the total current from all of the modules of the inverter system is applied to the base drive of each of the power transistors of all modules, thereby to provide all modules protection against open or short circuit faults occurring in any of the modules, and force equal current sharing among the modules during turn on of the power transistors.

Nagano, S.↗
NASA NTRS1981

The SMART MIL-STD-1553 bus adapter hardware manual

The SMART Multiplexer Interface Adapter, (SMIA) a complete system interface for message structure of the MIL-STD-1553, is described. It provides buffering and storage for transmitted and received data and handles all the necessary handshaking to interface between parallel 8-bit data bus and a MIL-STD serial bit stream. The bus adapter is configured as either a bus controller of a remote terminal interface. It is coupled directly to the multiplex bus, or stub coupled through an additional isolation transformer located at the connection point. Fault isolation resistors provide short circuit protection.

Ton, T. T.↗
NASA NTRS1985

Operational considerations in monitoring oxygen levels at the National Transonic Facility

Laboratory monitoring of the level of oxygen in sample gas mixtures is a process which can be performed with accurate and repeatable results. Operations at the National Transonic Facility require the storage and pumping of large volumes of liquid nitrogen. To protect against the possibility of a fault resulting in a localized oxygen deficient atmosphere, the facility is equipped with a monitoring system with an array of sensors. During the early operational stages, the system produced recurrent alarms, none of which could be traced to a true oxygen deficiency. A thorough analysis of the system was undertaken with primary emphasis placed on the sensor units. These units sense the partial pressure of oxygen which, after signal conditioning, is presented as a % by volume indication at the system output. It was determined that many of the problems experienced were due to a lack of proper accounting for the partial pressure/% by volume relationship, with a secondary cause being premature sensor failure. Procedures were established to consider atmospherically induced partial pressure variations. Sensor rebuilding techniques were examined, and those elements contributing to premature sensor failure were identified. The system now operates with a high degree of confidence and reliability.

Zalenski, M. A.↗
NASA NTRS2006

Power Actuation and Switching Module Test Results

The X2000 Power System Electronics (PSE) is a Jet Propulsion Laboratory (JPL) task to develop a new generation of power system building blocks for use on future deep-space missions. The effort includes the development of electronic components and modules that can be used as building blocks in the design of generic spacecraft power systems. All X2000 avionics components and modules are designed for use in centralized or distributed spacecraft architectures. The Power Actuation and Switching Module (PASM) has been developed under the X2000 program. This component enables a modular and scalable design approach for power switching applications, which can result in a wide variety of power switching architectures using this simple building block. The PASM is designed to provide most of the necessary power switching functions of spacecraft for various Deep Space missions including future missions to Mars, comets, Jupiter and its moons. It is fabricated using an ASIC process that is tolerant of high radiation. The development included two application specific integrated circuits (ASICs) and support circuitry all packaged using High Density Interconnect (HDI) technology. It can be operated in series or parallel with other PASMs. It can be used as a high-side or low-side switch and it can drive thruster valves, pyrotechnic devices such as NASA standard initiators, bus shunt resistors, and regular spacecraft component loads. Each PASM contains two independent switches with internal current limiting and over-current trip-off functions to protect the power subsystem from load faults. During turnon and turnoff each switch can limit the rate of current change (di/dt) to a value determined by the user. Three-way majority-voted On/Off commandability and full switch status telemetry (both analog and digital) are built into the module. This paper is a follow up to the one presented at he IECEC 2004 conference that will include the lessons learned and test results from the development.

X2000↗