Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11

Generating Code Review Documentation for Auto-Generated Mission-Critical Software

Model-based design and automated code generation are increasingly used at NASA to produce actual flight code, particularly in the Guidance, Navigation, and Control domain. However, since code generators are typically not qualified, there is no guarantee that their output is correct, and consequently auto-generated code still needs to be fully tested and certified. We have thus developed AUTOCERT, a generator-independent plug-in that supports the certification of auto-generated code. AUTOCERT takes a set of mission safety requirements, and formally verifies that the autogenerated code satisfies these requirements. It generates a natural language report that explains why and how the code complies with the specified requirements. The report is hyper-linked to both the program and the verification conditions and thus provides a high-level structured argument containing tracing information for use in code reviews.

Denney, Ewen↗

Assuring Safety-Critical Machine Learning Enabled Systems: Challenges and Promise

Machine learning is increasingly being used in safety-critical systems, where the public safety requires a rigorous assurance process. We shall outline how assurance processes work for conventional systems and identify the primary difficulty in applying them to machine learning enabled systems. We will then outline a path forward including identifying where considerable basic research remains

Safety-critical systems↗

Beware of agents when flying aircraft: Basic principles behind a generic methodology for the evaluation and certification of advanced aviation systems

There is currently a growing interest in the aeronautical community to assess the effects of the increasing levels of automation on pilots' performance and overall safety. The first effect of automation is the change in the nature of the pilot's role on the flight deck. Pilots have become supervisors who monitor aircraft systems in usual situations and intervene only when unanticipated events occur. Instead of 'hand flying' the airplane, pilots contribute to the control of aircraft by acting as mediators, instructions given to the automation. By eliminating the need for manually controlling normal situations, such a role division has reduced the opportunities for the pilot to acquire experience and skills necessary to safely cope with abnormal events. Difficulties in assessing the state and behavior of automation arise mainly from four factors: (1) the complexity of current systems and consequence mode-related problems; (2) the intrinsic autonomy of automation which is able to fire mode transitions without explicit commands from the pilots; (3) the bad quality of feed-back from the control systems displays and interfaces to the pilots; and (4) the fact that the automation currently has no explicit representation of the current pilots' intentions and strategy. Assuming certification has among its major goals to guarantee the passengers' and pilots' safety and the airplane integrity under normal and abnormal operational conditions, the authors suggest it would be particularly fruitful to come up with a conceptual reference system providing the certification authorities both with a theoretical framework and a list of principles usable for assessing the quality of the equipment and designs under examination. This is precisely the scope of this paper. However, the authors recognize that the conceptual presented is still under development and would thus be best considered as a source of reflection for the design, evaluation and certification processes of advanced aviation technologies.

Javaux, Denis↗

Global Trends of ASME "N-Stamp" Certifications for Nuclear Component Vendors

Historically, nuclear component manufacturing vendors, from small businesses through large conglomerates, have felt compelled to obtain an American Society for Mechanical Engineers (ASME) Nuclear Certification, known colloquially as an "N-stamp", to assure supply chain quality standards that will be acceptable to regulators and safety concerns. Since the N-stamp quality standard is a U.S.-origin code, combined with the apparent decline in the U.S. nuclear industry alongside the growth of the Asian nuclear industry, there is the question of whether the rest of the world, including new entrants to the nuclear industry, also regard N-stamp as a needed certification. This study addresses this question through analysis of the entire N-stamp database of holders, and former holders, of N-stamp certificates of all types and for all regions worldwide from 1989-2020 (the dates available in the database). From this 30 years of data, we find that actually U.S.-based vendors still consistently obtain the largest number of N-stamps worldwide over all time periods, but also find that the countries participating in the N-stamp certification process has broadly expanded beyond just North America, Japan, S. Korea and Western Europe (the primary N-stamp recipients before the mid-2000's). We produced global heats maps and bar charts to illustrate our findings, as well as further investigation into why the data shows changes over time and region. We note that nuclear entities involved with Soviet-type reactors do not participate in the N-stamp process, but instead pursue the Russian version PNAE, which is substantially similar to the ASME code. We conclude that at least from the N-stamp database, the United States nuclear component manufacturing industry is alive and well, although there have been some consolidations, and that the ASME N-stamp appears to still be a valued certificate worldwide, including in China which now ranks second only to the United States in obtaining N-stamp certificates in recent years. We further note that the vendors of new reactor types, in particular High Temperature Gas-Cooled Reactors (HTGRs) and Small Modular Reactors (SMRs), are actively engaged with ASME (and other U.S.-based nuclear standards bodies such as the American Nuclear Society and Nuclear Energy Institute) to coordinate updates to the ASME N-Stamp criteria to ensure applicability of the code for these new designs. Implications of these findings include the following: The global use of the U.S.-origin N-stamp certification supports the view that, despite the decline of the U.S. nuclear industry, the United States remains an esteemed global leader in the area of nuclear safety. As the U.S. Government works to revitalize the U.S. nuclear industry, especially in the area of exports, it may be beneficial to leverage the global standing of the N-stamp certification. The findings indicate that the N-stamp database would be a useful tool for the U.S. Government to use to track the growth of the civil nuclear industry in foreign countries, under certain circumstances. The Excel-format N-stamp database produced as part of this study may be a useful tool for this purpose. N-stamp data may be a useful tool for foreign governments to use to identify nuclear manufacturers within their own country, especially to identify "targets" for outreach on nuclear export control compliance. The U.S. Government could carry this message to foreign partners during bilateral engagements or as part of Nuclear Suppliers Group (NSG) discussions on industry outreach.

42 ENGINEERING↗

Safety Arguments for Next Generation, Location Aware Computing

Concerns over accuracy, availability, integrity, and continuity have limited the integration of Global Positioning System (GPS) and Global Navigation Satellite System (GLONASS) for safety-critical applications. More recent augmentation systems, such as the European Geostationary Navigation Overlay Service (EGNOS) and the North American Wide Area Augmentation System (WAAS) have begun to address these concerns. Augmentation architectures build on the existing GPS/GLONASS infrastructures to support location based services in Safety of Life (SoL) applications. Much of the technical development has been directed by air traffic management requirements, in anticipation of the more extensive support to be offered by GPS III and Galileo. WAAS has already been approved to provide vertical guidance for aviation applications. During the next twelve months, the full certification of EGNOS for SoL applications is expected. This paper discusses similarities and differences between the safety assessment techniques used in Europe and North America.

Johnson, C. W.↗

Study of Advanced Occupant Models to Quantify Injury Risk for eVTOL Vehicles

Urban transportation is currently evolving from traditional ground-based vehicles (cars, taxis, and buses) to include air-based electric vertical take-off and landing (eVTOL) vehicles which can be utilized for on-demand transportation, cargo transport, and emergency services. These new eVTOL vehicles are designed to be small, lightweight, and able to operate autonomously without user intervention. Safety is a big part of eventual eVTOL adoption, however gaps in the consideration of safety features exist. Anthropomorphic test devices (ATDs) are used in aerospace crashworthiness standards to quantify occupant injury risk and develop improved safety designs for emergency landing situations, but the ATDs currently used in aircraft certification requirements were developed many decades ago. Developments have occurred over the years involving ATD technology, which includes a host of newer and more biofidelic ATDs such as the Test Device for Human Occupant Restraint (THOR). Increased computing power has also allowed for detailed computational human body models (HBMs) to be created, such as the Global Human Body Model Consortium (GHBMC). This study aims to assess the capability of both HBMs and new ATD designs to identify injury mechanisms within eVTOL relevant emergency landing conditions. Finite element (FE) analysis was used to expand upon full-scale and seat level impact testing conducted by researchers at the National Aeronautics and Space Administration (NASA) to look at effects of occupant model configurations on prediction of injury. The GHBMC HBM and THOR ATD models were simulated in the seat level test conditions to characterize differences between these advanced assessment tools and traditional ATDs in the isolated seat loading environment. Results identified key differences in the responses from each of the models utilized and compared their impact response in head, neck, and spinal injury metrics. The THOR model identified potential risks for head injuries due to head impacts on the seat, however it predicted lower spinal loads than the other occupant surrogates. The GHBMC showed distinctly different biomechanical responses compared to the ATD. The GHBMC model is much more deformable than the ATDs and it exhibited higher distribution of forces and increased sensitivity to the duration of acceleration pulses. Both models incorporated into this study identified key mechanisms for injury that should be considered for passenger safety in the development of these novel aircraft. In addition, this study demonstrated the value of FE modeling for running a variety of complex human surrogates to identify potential injury mechanisms for consideration in regulation and development of new aircraft. Continued research in this field to improve validation these models will only lead to safer aircraft and more comprehensive safety measures.

Crashworthiness↗

Study of Advanced Occupant Models to Quantify Injury Risk for eVTOL Vehicles

Urban transportation is currently evolving from traditional ground-based vehicles (cars, taxis, and buses) to include air-based electric vertical take-off and landing (eVTOL) vehicles which can be utilized for on-demand transportation, cargo transport, and emergency services. These new eVTOL vehicles are designed to be small, lightweight, and able to operate autonomously without user intervention. Safety is a big part of eventual eVTOL adoption, however gaps in the consideration of safety features exist. Anthropomorphic test devices (ATDs) are used in aerospace crashworthiness standards to quantify occupant injury risk and develop improved safety designs for emergency landing situations, but the ATDs currently used in aircraft certification requirements were developed many decades ago. Developments have occurred over the years involving ATD technology, which includes a host of newer and more biofidelic ATDs such as the Test Device for Human Occupant Restraint (THOR). Increased computing power has also allowed for detailed computational human body models (HBMs) to be created, such as the Global Human Body Model Consortium (GHBMC). This study aims to assess the capability of both HBMs and new ATD designs to identify injury mechanisms within eVTOL relevant emergency landing conditions. Finite element (FE) analysis was used to expand upon full-scale and seat level impact testing conducted by researchers at the National Aeronautics and Space Administration (NASA) to look at effects of occupant model configurations on prediction of injury. The GHBMC HBM and THOR ATD models were simulated in the seat level test conditions to characterize differences between these advanced assessment tools and traditional ATDs in the isolated seat loading environment. Results identified key differences in the responses from each of the models utilized and compared their impact response in head, neck, and spinal injury metrics. The THOR model identified potential risks for head injuries due to head impacts on the seat, however it predicted lower spinal loads than the other occupant surrogates. The GHBMC showed distinctly different biomechanical responses compared to the ATD. The GHBMC model is much more deformable than the ATDs and it exhibited higher distribution of forces and increased sensitivity to the duration of acceleration pulses. Both models incorporated into this study identified key mechanisms for injury that should be considered for passenger safety in the development of these novel aircraft. In addition, this study demonstrated the value of FE modeling for running a variety of complex human surrogates to identify potential injury mechanisms for consideration in regulation and development of new aircraft. Continued research in this field to improve validation these models will only lead to safer aircraft and more comprehensive safety measures.

Crashworthiness↗

Workmanship Standards Personnel Training and Certification Explained

This slide presentation reviews the standards that NASA requires for workmanship and discusses the rationale and the NASA-STD-8739.x standard series. The training and certification of inspectors and operators is to guarantee that workmanship is qualified for NASA applications. The NASA workmanship standard documents review the standards for: Polymeric Applications, Surface Mount Technology, Soldered Electrical Connections, Crimp, Cable and Harnesses, Fiber Optic Terminations, including ANSI and IPC standards for Electrostatic Discharge Safety, Space Applications Electronic Hardware and Requirements for Soldered Electrical and Electronic Assemblies. It also reviews the certification requirements for appropriate personnel. It also reviews the various levels of trainers for the various requirements. There is also a review of calibration requirements for training equipment. Some variations on the curriculum are allowed. NASA requires operators and inspectors to be certified by their employer to ensure that oversight is being performed.

Plante, Jeannette F.↗

AutoBayes/CC: Combining Program Synthesis with Automatic Code Certification: System Description

Code certification is a lightweight approach to formally demonstrate software quality. It concentrates on aspects of software quality that can be defined and formalized via properties, e.g., operator safety or memory safety. Its basic idea is to require code producers to provide formal proofs that their code satisfies these quality properties. The proofs serve as certificates which can be checked independently, by the code consumer or by certification authorities, e.g., the FAA. It is the idea underlying such approaches as proof-carrying code [6]. Code certification can be viewed as a more practical version of traditional Hoare-style program verification. The properties to be verified are fairly simple and regular so that it is often possible to use an automated theorem prover to automatically discharge all emerging proof obligations. Usually, however, the programmer must still splice auxiliary annotations (e.g., loop invariants) into the program to facilitate the proofs. For complex properties or larger programs this quickly becomes the limiting factor for the applicability of current certification approaches.

Whalen, Michael↗

Installation package for air flat plate collector

The Solar 2 dimensions are four feet by eight feet by two and one half inches. The collector weighs 130 pounds and has an effective solar collection area of over 29.5 square feet. This area represents 95 percent of the total surface of the collector. The installation, operation and maintenance manual, safety hazard analysis, special handling instructions, materials list, installation concept drawings, warranty and certification statement are included in the installation package.

Source record↗

The aerospace plane design challenge: Credible computational fluid dynamics results

Computational fluid dynamics (CFD) is necessary in the design processes of all current aerospace plane programs. Single-stage-to-orbit (STTO) aerospace planes with air-breathing supersonic combustion are going to be largely designed by means of CFD. The challenge of the aerospace plane design is to provide credible CFD results to work from, to assess the risk associated with the use of those results, and to certify CFD codes that produce credible results. To establish the credibility of CFD results used in design, the following topics are discussed: CFD validation vis-a-vis measurable fluid dynamics (MFD) validation; responsibility for credibility; credibility requirement; and a guide for establishing credibility. Quantification of CFD uncertainties helps to assess success risk and safety risks, and the development of CFD as a design tool requires code certification. This challenge is managed by designing the designers to use CFD effectively, by ensuring quality control, and by balancing the design process. For designing the designers, the following topics are discussed: how CFD design technology is developed; the reasons Japanese companies, by and large, produce goods of higher quality than the U.S. counterparts; teamwork as a new way of doing business; and how ideas, quality, and teaming can be brought together. Quality control for reducing the loss imparted to the society begins with the quality of the CFD results used in the design process, and balancing the design process means using a judicious balance of CFD and MFD.

Mehta, Unmeel B.↗

Operational Experience with Long Duration Wildfire Mapping: UAS Missions Over the Western United States

The National Aeronautics and Space Administration, United States Forest Service, and National Interagency Fire Center have developed a partnership to develop and demonstrate technology to improve airborne wildfire imaging and data dissemination. In the summer of 2007, a multi-spectral infrared scanner was integrated into NASA's Ikhana Unmanned Aircraft System (UAS) (a General Atomics Predator-B) and launched on four long duration wildfire mapping demonstration missions covering eight western states. Extensive safety analysis, contingency planning, and mission coordination were key to securing an FAA certificate of authorization (COA) to operate in the national airspace. Infrared images were autonomously geo-rectified, transmitted to the ground station by satellite communications, and networked to fire incident commanders within 15 minutes of acquisition. Close coordination with air traffic control ensured a safe operation, and allowed real-time redirection around inclement weather and other minor changes to the flight plan. All objectives of the mission demonstrations were achieved. In late October, wind-driven wildfires erupted in five southern California counties. State and national emergency operations agencies requested Ikhana to help assess and manage the wildfires. Four additional missions were launched over a 5-day period, with near realtime images delivered to multiple emergency operations centers and fire incident commands managing 10 fires.

Hall, Philip↗

PCC Framework for Program-Generators

In this paper, we propose a proof-carrying code framework for program-generators. The enabling technique is abstract parsing, a static string analysis technique, which is used as a component for generating and validating certificates. Our framework provides an efficient solution for certifying program-generators whose safety properties are expressed in terms of the grammar representing the generated program. The fixed-point solution of the analysis is generated and attached with the program-generator on the code producer side. The consumer receives the code with a fixed-point solution and validates that the received fixed point is indeed a fixed point of the received code. This validation can be done in a single pass.

Kong, Soonho↗

Assurance of Autonomy

This presentation gives an overview of the research directions taken by the System Wide Safety project (NASA ARMD) with respect to the assurance of autonomy to support certification of aviation systems for emerging markets. The talk gives an overview of the project and a quick overview of some of the research tools being developed at NASA Ames.

Brat, Guillaume↗

Unified Analysis of Aerospace Structures through Implementation of Rapid Tools into a Stress Framework

Rapid structural analysis tools have become an important part of the design cycle for aerospace companies for the last several decades. As these tools have been developed over time, there is often little consideration for shared software infrastructure between the tools, which makes design and analysis cumbersome due to a lack of commonality in input and output data and reporting, as well as poor traceability of results. Under the Rapid Tools task of the Advanced Composites Consortium (ACC), four aerospace tools were recently implemented or enhanced in the HyperSizer stress framework and then evaluated by this consortium of industry and government organizations. The framework provides an automated software environment for executing the rapid tools for analysis and sizing, quantifying margins of safety for thousands of load cases, and generating reports in support of FAA certification. This paper describes the process by which the tools were enhanced or implemented in the stress framework under the ACC project, and the evaluation conducted by industry consortium members.

Craig S Collier↗

An Overview of the NASA Lift+Cruise eVTOL Crash Test

Introduction – NASA RVLT Project Impact Dynamics / Crash Safety Task - Task Objective: “To improve the crashworthiness and impact safety of Urban Air Mobility (UAM) vehicle and provide data to simplify the certification process. Efforts will include development of validated computational models of these vehicles, as well as other impacting bodies such as birds and drones. Efforts will also focus on developing and evaluating energy absorbing and crush properties of emerging and non-traditional composite materials and processes. Finally, occupant protection will be addressed using computational models and physical assets as it pertains to all rotorcraft environments.” - Problem Statement: “There currently is a lack of data for requirements regarding the crashworthy performance of UAM vehicles and impact loads generated by a bird strike. To address this technology gap, NASA will develop test guidelines, adopt modeling methodologies demonstrating capability for ‘certification by analysis’, acquire vehicle and occupant data on full-scale representative vehicles, and provide data/guidance to consensus standards organizations and the UAM community.” - 4 Main focus points - The investigation of occupant injury using physical and computational assets - The development of energy absorbing technology - The generation of data from sub- and full-scale crash test data - The execution of advanced finite element modelling techniques

evtol↗

Quality Assurance Surveillance Tool Designed for SLS EM-1 Certificate of Flight Readiness

Exploration Mission-1 (EM-1) is an uncrewed mission that is launching on the Space Launch System (SLS) Block 1 vehicle. This is a critical flight test for the agency's human deep space exploration goals. Exploration Ground Systems (EGS) Quality (SA-F2) is responsible for providing Quality Assurance Surveillance Plans (QASPs) for NASA contracts and facilities. A QASP assures products and services are provided to EGS in accordance with the contract requirements. In order to encapsulate the multiple KSC Safety and Mission Assurance surveillance and audit activities that need to be accomplished specifically for EM-1 Certificate of Flight Reediness (CoFR), a QASP tool needed to be implemented. This tool would be able to intuitively track Work Authorization Documents (WADs) under development by Test Operations Support Contract (TOSC), reviewed and accepted WADs, Government Mandatory Inspection Points (GMIPs), Nonconformances (NCs), Material Review Board (MRB) Status, Corrective Actions, Alterations, Deviations, and Waivers for flight hardware and Ground Support Equipment (GSE). This would help ensure that all SLS EM-1 flight hardware and related GSE surveillances and requirements are being recognized and completed with zero constraints identified for the mission.

Morris, Patrick↗

Assessment and Coordination of EVSE Cybersecurity Standards

Cybersecurity certification programs for Electric Vehicle Supply Equipment (EVSE) are fragmented due to no single certification covering all aspects of the device and additionally the existence of multiple programs and under different levels of regulation. These devices are also confronted by the intricate assembly of product software, firmware, and hardware. Devices contain both logical and physical interfaces. These multifaceted devices have vulnerabilities at many levels and interconnect with other potentially vulnerable systems including the electric vehicle, the cloud where data and payment information are stored, and the electric grid and electric grid equipment including utilities. Of the EVSE certification programs that are found, none are directly for the cybersecurity of EVSE. Many standards are for safety, specifically battery safety, some are cybersecurity standards for other types of equipment and can be modeled for EVSE. In specific, ISA/IEC 62443 is found to be significantly in line with EVSE security needs and will be used in future testing to certify EVSE and help guide the project to demonstrate where gaps exist, where strengths lie in the standard and how this can be used to lead the certification efforts in harmonizing EVSE cybersecurity standards. In addition, there are multiple efforts that are currently seeking to build EVSE standards or revise existing standards to address gaps. This effort is seeking to establish a cybersecurity program for EVSE that will inform customers and help increase the level of security across products and state EVSE procurements to achieve consistency across different jurisdictions.

33 ADVANCED PROPULSION SYSTEMS↗