Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety basis”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

A Distributed Simulation-to-Flight Framework to Support Investigating Trust/Trustworthiness in Multi-Agent Systems

As autonomous systems continue to grow both in use and complexity, the necessity for robust and extensible simulation-to-flight frameworks is paramount for establishing an effective architecture for autonomous systems. Hardware test flights are time-consuming and cost prohibitive during early system design and development. Simulation environments can be useful tools to accelerate algorithm development and testing. However, transitions from simulation to flight (sim-to-flight) can be challenging, unless systems are designed with this transition in mind and with the necessary capabilities built into the architecture and framework. One of the objectives of Autonomy Teaming and TRAjectories for Complex Trusted Operational Reliability (ATTRACTOR) was to design and develop a distributed mixed-reality simulation environment to begin establishing a basis for certification of autonomous systems via research into trust and trustworthiness. ATTRACTOR’s objective was to construct computational concepts of trustworthiness and justifiable trust in multi-agent autonomous teams, to inform future certification of safety-critical and time-critical autonomous systems in aviation. In this paper, we present an autonomous systems architecture and development framework paired with a persistent distributed modeling and simulation (ModSim) environment for test and evaluation of autonomous systems. They were designed under ATTRACTOR in order to measure and establish trustworthiness and trust in single-and multi-agent human-machine systems whether these machines are fixed-wing general aviation, rotary-wing Unmanned Aerial Vehicles (UAVs), ground rovers, or even spacecraft. The Autonomous Entity Operational Network (AEON) framework enables autonomous system development with an easily extensible collection of libraries and plug-n-play nodes facilitated by the Data Distribution Service (DDS) communication protocol standard. The Baseline Environment for Autonomous Modeling (BEAM) simulation environment is a distributed mixed-reality Unity™-based environment built around the same DDS communication paradigm allowing for easy integration with AEON-based autonomous applications, enabling sim-to-flight with minimal configuration changes. Using AEON and BEAM, source code that runs in simulation ports directly to hardware and has successfully flown in the National Airspace System (NAS) at NASA LaRC many times over the lifetime of ATTRACTOR.

Benjamin N Kelley↗

A Unique Hybrid Propulsion System Design for Large Space Boosters

A study was made of the application of hybrid rocket propulsion technology to large space boosters. Safety, reliability, cost, and performance comprised the evaluation criteria, in order of relative importance, for this study. The effort considered the so called classic hybrid design approach versus a novel approach which utilizes a fuel-rich gas generator for the fuel source. Other trades included various fuel/oxidizer combinations, pressure-fed versus pump fed oxidizer delivery systems, and reusable versus expandable booster systems. Following this initial trade study, a point design was generated. A gas generated-type fuel grain with pump fed liquid oxygen comprised the basis of this point design. This design study provided a mechanism for considering the means of implementing the gas generator approach for further defining details of the design. Subsequently, a system trade study was performed which determined the sensitivity of the design to various design parameters and predicted optimum values for these same parameters. The study concluded that a gas generator hybrid booster design offers enhanced safety and reliability over current of proposed solid booster designs while providing equal or greater performance levels. These improvements can be accomplished at considerably lower cost than for the liquid booster designs of equivalent capability.

Rodgers, Frederick C.↗

Single pilot IFR accident data analysis

The aircraft accident data recorded by the National Transportation and Safety Board (NTSR) for 1964-1979 were analyzed to determine what problems exist in the general aviation (GA) single pilot instrument flight rule (SPIFR) environment. A previous study conducted in 1978 for the years 1964-1975 provided a basis for comparison. This effort was generally limited to SPIFR pilot error landing phase accidents but includes some SPIFR takeoff and enroute accident analysis as well as some dual pilot IFR accident analysis for comparison. Analysis was performed for 554 accidents of which 39% (216) occurred during the years 1976-1979.

Harris, D. F.↗

Orbital transfer vehicle concept definition and systems analysis study. Volume 11: Study extension 2 results

Work conducted in the second extension of the Phase A Orbit Transfer Vehicle Concept Definition and Systems Analysis Study is summarized. Four major tasks were identified: (1) define an initial OTV program consistent with near term Civil Space Leadership Initiative missions; (2) develop program evolution to long term advanced missions; (3) investigate the implications of current STS safety policy on an Aft Cargo Carrier based OTV; and (4) expand the analysis of high entry velocity aeroassist. An increased emphasis on the breath of OTV applications was undertaken to show the need for the program on the basis of the expansion of the nation's capabilities in space.

Willcockson, W. H.↗

NASA pyrotechnically actuated systems program

The Office of Safety and Mission Quality initiated a Pyrotechnically Actuated Systems (PAS) Program in FY-92 to address problems experienced with pyrotechnically actuated systems and devices used both on the ground and in flight. The PAS Program will provide the technical basis for NASA's projects to incorporate new technological developments in operational systems. The program will accomplish that objective by developing/testing current and new hardware designs for flight applications and by providing a pyrotechnic data base. This marks the first applied pyrotechnic technology program funded by NASA to address pyrotechnic issues. The PAS Program has been structured to address the results of a survey of pyrotechnic device and system problems with the goal of alleviating or minimizing their risks. Major program initiatives include the development of a Laser Initiated Ordnance System, a pyrotechnic systems data base, NASA Standard Initiator model, a NASA Standard Linear Separation System and a NASA Standard Gas Generator. The PAS Program sponsors annual aerospace pyrotechnic systems workshops.

Schulze, Norman R.↗

Implementing an Objectives-Driven, Risk-Informed, and Case-Assured Approach to Safety and Mission Success at NASA

NASA is developing a “Standard for Assurance of Space Flight Safety and Mission Success” that implements an objectives-driven, risk-informed, and case-assured approach to safety and mission success (S&MS) for NASA space flight programs and projects. The standard aligns with the philosophy of risk leadership that has recently been established in NASA policy to assure acceptable levels of flight crew safety and mission success risk. It is consistent with existing NASA risk management requirements and is compatible with NASA program management and systems engineering requirements. The methodology described in the standard is presented in terms of an S&MS assurance framework that is designed to allow substantial flexibility in the specific means by which programs and projects achieve acceptable mission S&MS risk. Such flexibility is necessary to accommodate the increasingly broad range of acquisition strategies employed by NASA, including commercial transportation services, as well as to accommodate the increasingly rapid evolution of space flight-related technologies and practices. A key feature of the S&MS assurance framework is the specification of S&MS success criteria for each life-cycle review (LCR). The S&MS assurance case is structured around these criteria, the satisfaction of which indicates that the program/project is adhering to the S&MS risk posture. This enables the evolving S&MS assurance case to be used as a fundamental program/project submittal at each LCR, where its inherent structure of argument, supported by evidence, directly supports the evaluation of the program/project with respect to the S&MS success criteria, and by extension, the S&MS risk posture. As such, the S&MS assurance case is integral to program/project systems engineering, risk management, and S&MS oversight activities, and provides the principal basis for S&MS risk acceptance by the Decision Authority throughout the program/project life cycle.

Risk Posture↗

Program for transfer research and impact studies

Research activities conducted under the Program for Transfer Research and Impact Studies (TRIS) during 1972 included: (1) preparation of 10,196 TSP requests for TRIS application analysis; (2) interviews with over 500 individuals concerning the technical, economic, and social impacts of NASA-generated technology; (3) preparation of 38 new technology transfer example files and 101 new transfer cases; and (4) maintenance of a technology transfer library containing more than 2,900 titles. Six different modes of technology utilization are used to illustrate the pervasiveness of the transfer and diffusion of aerospace innovations. These modes also provide a basis for distinguishing the unique characteristics of the NASA Technology Utilization Program. An examination is reported of the ways in which NASA-generated technology is contributing to beneficial social change in five major areas of human concern: health, environment, safety, transportation, and communication.

Rusnak, J. J.↗

Mock Certification Basis for an Unmanned Rotorcraft for Precision Agricultural Spraying

This technical report presents the results of a case study using a hazard-based approach to develop preliminary design and performance criteria for an unmanned agricultural rotorcraft requiring airworthiness certification. This case study is one of the first in the public domain to examine design and performance criteria for an unmanned aircraft system (UAS) in tandem with its concept of operations. The case study results are intended to support development of airworthiness standards that could form a minimum safety baseline for midsize unmanned rotorcraft performing precision agricultural spraying operations under beyond visual line-of-sight conditions in a rural environment. This study investigates the applicability of current methods, processes, and standards for assuring airworthiness of conventionally piloted (manned) aircraft to assuring the airworthiness of UAS. The study started with the development of a detailed concept of operations for precision agricultural spraying with an unmanned rotorcraft (pp. 5-18). The concept of operations in conjunction with a specimen unmanned rotorcraft were used to develop an operational context and a list of relevant hazards (p. 22). Minimum design and performance requirements necessary to mitigate the hazards provide the foundation of a proposed (or mock) type certification basis. A type certification basis specifies the applicable standards an applicant must show compliance with to receive regulatory approval. A detailed analysis of the current airworthiness regulations for normal-category rotorcraft (14 Code of Federal Regulations, Part 27) was performed. Each Part 27 regulation was evaluated to determine whether it mitigated one of the relevant hazards for the specimen UAS. Those regulations that did were included in the initial core of the type certification basis (pp. 26-31) as written or with some simple modifications. Those regulations that did not mitigate a recognized hazard were excluded from the certification basis. The remaining regulations were applicable in intent, but the text could not be easily tailored. Those regulations were addressed in separate issue papers. Exploiting established regulations avoids the difficult task of generating and interpreting novel requirements, through the use of acceptable, standardized language. The rationale for the disposition of the regulations was assessed and captured (pp. 58-115). The core basis was then augmented by generating additional requirements (pp. 38-47) to mitigate hazards for an unmanned sprayer that are not covered in Part 27.

Hayhurst, Kelly J.↗

Flat sheet metal girders with very thin metal web. Part I : general theories and assumptions

The object of this report was to develop the structural method of sheet metal girders and should for that reason be considered solely from this standpoint. The ensuing methods were based on the assumption of the infinitely low stiffness in bending of the metal web. This simplifies the basis of calculations to such an extent that many questions of great practical importance can be examined which otherwise cannot be included in any analysis of the bending stiffness of the buckled plate. This report refers to such points as the safety in buckling of uprights to the effect of bending flexibility of spars, to spars not set parallel, etc.

Wagner, Herbert↗

Cockpit napping

The results of a NASA-sponsored study examining the effectiveness of a brief, preplanned cockpit rest period to improve pilot alertness and performance in nonaugmented long-haul flight operations are discussed. Four regularly scheduled trans-Pacific flight legs were studied. The shortest flight legs were about 7 h and the longest about 9.5 h, with duty periods averaging about 11 h and layovers about 25 h. Three-person B747 crews were divided randomly into two volunteer pilot groups. These crews were nonaugmented, and therefore no relief pilots were available. The rest group, consisting of four crews, was allowed a 40 min opportunity to rest during the overwater cruise portion of the flight. On a preplanned, rotating basis, individual crew members were allowed to nap. It is concluded that a preplanned cockpit nap is associated with significantly better behavioral performance and higher levels of physiological alertness and that this can be accomplished without disrupting normal flight operations or compromising safety.

Graeber, R. Curtis↗

Radiation Exposure Effects and Shielding Analysis of Carbon Nanotube Materials

Carbon nanotube materials promise to be the basis for a variety of emerging technologies with aerospace applications. Potential applications to human space flight include spacecraft shielding, hydrogen storage, structures and fixtures and nano-electronics. Appropriate risk analysis on the properties of nanotube materials is essential for future mission safety. Along with other environmental hazards, materials used in space flight encounter a hostile radiation environment for all mission profiles, from low earth orbit to interplanetary space.

Wilkins, Richard↗

Advanced missions safety. Volume 2: Technical discussion. Part 3: Emergency crew transfer

An evaluation of methods for emergency rescue of space crews using the Earth Orbit Shuttle was conducted. Emergency situations were analyzed for the mission categories of extravehicular activity, space shuttle orbiter, space station, and research applications module (RAM). Five different transfer concept categories were analyzed and each was scored on the basis of its operational effectiveness. A cost analysis of the transfer operations was developed.

Source record↗

Design with brittle materials - An interdisciplinary educational program

A series of interdisciplinary design courses being offered to senior and graduate engineering students at the University of Washington is described. Attention is given to the concepts and some of the details on group design projects that have been undertaken during the past two years. It is noted that ceramic materials normally demonstrate a large scatter in strength properties. As a consequence, when designing with these materials, the conventional 'mil standards' design stresses with acceptable margins of safety cannot by employed and the designer is forced to accept a probable number of failures in structures of a given brittle material. It is this prediction of the probability of failure for structures of given, well-characterized materials that forms the basis for this series of courses.

Mueller, J. I.↗

Session 2 summary and key issues identification

Identification of specific areas for the technology development; payload/facility requirements; crew safety as the highest priority for the space station; identification of preliminary operational constraints (facilities/experiments requiring specialized equipment and/or procedures, and crew limitations and protective gear requirements); frame of reference of baseline of applicable waste handling experience; use of the workshop as a basis for assessing the current and applicable space station requirements; provision of an educational, and informational forum for government employees, contractors, experimental facility developers, and potential hardware suppliers involved with the Space Station program; and documentation of workshop results and follow-on study issues are examined.

Robey, Judith↗

Orion MPCV Touchdown Detection Threshold Development and Testing

A robust method of detecting Orion Multi ]Purpose Crew Vehicle (MPCV) splashdown is necessary to ensure crew and hardware safety during descent and after touchdown. The proposed method uses a triple redundant system to inhibit Reaction Control System (RCS) thruster firings, detach parachute risers from the vehicle, and transition to the post ]landing segment of the Flight Software (FSW). The vehicle crew is the prime input for touchdown detection, followed by an autonomous FSW algorithm, and finally a strictly time based backup timer. RCS thrusters must be inhibited before submersion in water to protect against possible damage due to firing these jets under water. In addition, neglecting to declare touchdown will not allow the vehicle to transition to post ]landing activities such as activating the Crew Module Up ]righting System (CMUS), resulting in possible loss of communication and difficult recovery. A previous AIAA paper gAssessment of an Automated Touchdown Detection Algorithm for the Orion Crew Module h concluded that a strictly Inertial Measurement Unit (IMU) based detection method using an acceleration spike algorithm had the highest safety margins and shortest detection times of other methods considered. That study utilized finite element simulations of vehicle splashdown, generated by LS ]DYNA, which were expanded to a larger set of results using a Kriging surface fit. The study also used the Decelerator Systems Simulation (DSS) to generate flight dynamics during vehicle descent under parachutes. Proto ]type IMU and FSW MATLAB models provided the basis for initial algorithm development and testing. This paper documents an in ]depth trade study, using the same dynamics data and MATLAB simulations as the earlier work, to further develop the acceleration detection method. By studying the combined effects of data rate, filtering on the rotational acceleration correction, data persistence limits and values of acceleration thresholds, an optimal configuration was determined. The lever arm calculation, which removes the centripetal acceleration caused by vehicle rotation, requires that the vehicle angular acceleration be derived from vehicle body rates, necessitating the addition of a 2nd order filter to smooth the data. It was determined that using 200 Hz data directly from the vehicle IMU outperforms the 40 Hz FSW data rate. Data persistence counter values and acceleration thresholds were balanced in order to meet desired safety and performance. The algorithm proved to exhibit ample safety margin against early detection while under parachutes, and adequate performance upon vehicle splashdown. Fall times from algorithm initiation were also studied, and a backup timer length was chosen to provide a large safety margin, yet still trigger detection before CMUS inflation. This timer serves as a backup to the primary acceleration detection method. Additionally, these parameters were tested for safety on actual flight test data, demonstrating expected safety margins.

Daum, Jared↗

Design definition study of a lift/cruise fan technology V/STOL aircraft. Volume 2: Technology aircraft

Technology flight vehicles were defined for three different approaches which demonstrate the concept and characteristics of the multipurpose aircraft established for Navy missions. The propulsion system used for the various technology flight vehicles was representative of that established for the multipurpose aircraft. Existing J97-GE100 gas generators were selected based on cost, availability and exhaust characteristics. The LF459 fans were also selected and are compatible with both technology and operational vehicles. To comply with the design guideline safety criteria, it was determined that three gas generators were required to provide engine out safety in the hover flight mode. The final propulsion system established for the technology aircraft was three existing J97 gas generators powering three LF459 fans. Different aircraft candidates were evaluated for application to the three designated design approaches. Each configuration was evaluated on the basis of (1) propulsion system integration, (2) modification required, (3) pilot's visibility, (4) payload volume, and (5) adaptability to compatible location of center-of-gravity/aerodynamic center and thrust center.

Source record↗

Magnetostrictive direct drive motors

A new rare earth alloy, Terfenol-D, combines low frequency operation and extremely high energy density with high magnetostriction. Its material properties make it suitable as a drive element for actuators requiring high output torque. The high strains, the high forces and the high controllability of Terfenol alloys provide a powerful and challenging basis for new ways to generate motion in actuators. Two prototypes of motors using Terfenol-D rods were developed at NASA Goddard. The basic principles of operation are provided of the motor along with other relevant details. A conceptual design of a torque limiting safety clutch/brake under development is illustrated. Also, preliminary design drawings of a linear actuator using Terfenol-D is shown.

Naik, Dipak↗

Timing analysis by model checking

The safety of modern avionics relies on high integrity software that can be verified to meet hard real-time requirements. The limits of verification technology therefore determine acceptable engineering practice. To simplify verification problems, safety-critical systems are commonly implemented under the severe constraints of a cyclic executive, which make design an expensive trial-and-error process highly intolerant of change. Important advances in analysis techniques, such as rate monotonic analysis (RMA), have provided a theoretical and practical basis for easing these onerous restrictions. But RMA and its kindred have two limitations: they apply only to verifying the requirement of schedulability (that tasks meet their deadlines) and they cannot be applied to many common programming paradigms. We address both these limitations by applying model checking, a technique with successful industrial applications in hardware design. Model checking algorithms analyze finite state machines, either by explicit state enumeration or by symbolic manipulation. Since quantitative timing properties involve a potentially unbounded state variable (a clock), our first problem is to construct a finite approximation that is conservative for the properties being analyzed-if the approximation satisfies the properties of interest, so does the infinite model. To reduce the potential for state space explosion we must further optimize this finite model. Experiments with some simple optimizations have yielded a hundred-fold efficiency improvement over published techniques.

Naydich, Dimitri↗