Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety profile”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 199 records · Page 11
All sourcesNASA NTRSDOE OSTI
NASA NTRS1973

Nuclear safety considerations for the design of a shuttle launched 500 to 2000 watt isotope Brayton power system.

An extensive study was conducted to evaluate the safety requirements for the design of a heat source assembly for use in a shuttle launched, isotope Brayton electric power system for the 500-W(e) to 2 kWe range. The assembly is a self-contained package which supplies heat to a power conversion system. A typical mission profile for a shuttle launched, earth orbital mission was assumed. Critical mission accidents were identified and evaluated to determine their impact upon the design of the Heat Source Assembly. Earth-orbital decay reentry analyses were performed to demonstrate survivability of the heat source. Safety design requirements were developed to ensure survivability under credible accident conditions including loss of the power conversion system in orbit.

Garate, J. A.↗
DOE OSTI2022

Nuclear Data Adjustment with Whisper for Criticality Safety Applications [Slides]

Nuclear data adjustment is used by Whisper to compute residual nuclear data uncertainties within a full suite of benchmarks; in order to do so, a complete set of nuclear data covariances, benchmarks and k-effective sensitivity profiles (for both benchmarks and applications) is required. For applications that are similar to the full benchmark suite, the residual uncertainties add a small margin to the overall USL calculation. For applications that are dissimilar to the full benchmark suite, the residual uncertainties add a reasonable margin to the overall USL calculation (more conservative). This methodology helps to overcome any issues in the released covariance libraries where nuclear data uncertainties appear to be too large.

73 NUCLEAR PHYSICS AND RADIATION PHYSICS↗
NASA NTRS2019

Real-Time UAV Trajectory Prediction for Safety Monitoring in Low-Altitude Airspace

The rising number of small unmanned aerial vehicles (UAVs) expected in the next decade will enable a new series of commercial, service, and military operations in low altitude airspace as well as above densely populated areas. These operations may include on-demand delivery, medical transportation services, law enforcement operations, traffic surveillance and many more. Such unprecedented scenarios create the need for robust, efficient ways to monitor the UAV state in time to guarantee safety and mitigate contingencies throughout the operations. This work proposes a generalized monitoring and prediction methodology that utilizes realtime measurements of an autonomous UAV following a series of way-points. Two different methods, based on sinusoidal acceleration profiles and high-order splines, are utilized to generate the predicted path. The monitoring approach includes dynamic trajectory re-planning in the event of unexpected detour or hovering of the UAV during flight. It can be further extended to different vehicle types, to quantify uncertainty affecting the state variables, e.g., aerodynamic and other environmental effects, and can also be implemented to prognosticate safety-critical metrics which depend on the estimated flight path and required thrust. The proposed framework is implemented on a simplified, scalable UAV modeling and control system traversing 3D trajectories. Results presented include examples of real-time predictions of the UAV trajectories during flight and a critical analysis of the proposed scenarios under uncertainty constraints.

UAV trajectory prognosis↗
DOE OSTI2024

High-Temperature Gas-Cooled Pebble-Bed Reactors Running In And Transient Modeling Capabilities Demonstration

This study presents a comprehensive benchmarking and verification effort of several thermal-hydraulic and multiphysics capabilities for high-temperature gas-cooled reactor (HTGR) applications. The first part of this effort focuses on the running-in verification of Griffin's multiphysics capabilities, specifically for simulating the evolution of Pebble Bed reactor cores from startup to equilibrium. In the absence of validation data, code-to-code comparisons are conducted with Kugelpy, showing good agreement for key quantities like maximum power density and fresh core k-eigenvalue predictions. However, discrepancies in equilibrium core predictions suggest potential issues with cross sections, underscoring the need for further refinement and evaluation. The HTTF system analysis code benchmark involves RELAP5-3D, SAM, and GAMMA+ to assess their predictive capabilities for HTTF behavior under both normal operation and pressurized conduction cooldown (PCC) transient conditions. While there is good agreement in predicting major parameters such as coolant temperature, solid temperature, and flow distribution, discrepancies in transient behavior highlight differences in modeling approaches, nodalizations, and heat transfer models. The HTTF lower plenum CFD benchmark employs nekRS to simulate flow mixing phenomena, successfully capturing relevant flow physics and demonstrating mesh independence in complex geometries. Preliminary results suggest a relatively uniform temperature field but significant unsteadiness in the flow, requiring time-averaging analyses. The GPBR200 system analysis code benchmark uses SAM's core channel and porous media models, incorporating an RCCS loop for decay heat removal. During steady-state and transient conditions, including protected de-pressurized and pressurized loss of forced cooling (DLOFC and PLOFC), both models show good agreement in predicting temperature profiles and key parameters. Notably, while the core channel model underpredicts convective heat transfer effects, both models maintain temperatures well below the TRISO fuel safety limit. These benchmarking efforts collectively enhance the predictive capabilities of the tools used in HTGR design and safety analysis, guiding developments to improve their accuracy and applicability.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗
NASA NTRS2012

A Proposed Study Examining Individual Differences in Temporal Profiles of Cardiovascular Responses to Head Down Tilt During Fluid Loading

Susceptibility of healthy astronauts to orthostatic hypotension and presyncope is exacerbated upon return from spaceflight. The effect of altered gravity during space flight and planetary transition on human cardiovascular function is of critical importance to maintenance of astronaut health and safety. Hypovolemia, reduced plasma volume, is suspected to play an important role in cardiovascular deconditioning following exposure to spaceflight, which may lead to increased peripheral resistance, attenuated arterial baroreflex, and changes in cardiac function. A promising countermeasure for post-flight orthostatic intolerance is fluid loading used to restore lost plasma volume by giving crew salt tablets and water prior to re-entry. The main purpose of the proposed study is to define the temporal profile of cardiac responses to simulated 0-G conditions before and following a fluid loading countermeasure. 8 men and 8 women will be tested during 4 hour exposures at 6o head down tilt (HDT). Each subject will be given two exposures to HDT on separate days, one with and one without fluid loading (one liter of 0.9% saline solution). Stand tests (orthostatic stress) will be done before and after each HDT. Cardiac measures will be obtained with both impedance cardiography and echo ultrasound

Cowings, Patricia↗
NASA NTRS2000

System Risk Balancing Profiles: Software Component

The Software QA / V&V guide will be reviewed and updated based on feedback from NASA organizations and others with a vested interest in this area. Hardware, EEE Parts, Reliability, and Systems Safety are a sample of the future guides that will be developed. Cost Estimates, Lessons Learned, Probability of Failure and PACTS (Prevention, Avoidance, Control or Test) are needed to provide a more complete risk management strategy. This approach to risk management is designed to help balance the resources and program content for risk reduction for NASA's changing environment.

Kelly, John C.↗
NASA NTRSDate not supplied

NASA's Office Safety Mission Assurance Efforts to Improve Non-destructive Evaluation Methods for Additive Manufacturing and In-Space Inspection

National Aeronautics and Space Administration (NASA) continues to push the boundary of manned flight. Current mission profiles include flights to the Moon and Mars. Many of these missions require advance manufacturing and planned off planet resource utilization. As NASA continues to develop highly advance materials and manufacturing techniques to meet these mission profiles, inspection of these increasingly complex parts has had to evolve as well. Additive manufacturing is coming to the forefront as a primary manufacturing technique but offers unique challenges when inspection and certification are required. NASA has been working diligently to be a leader in developing and utilizing inspection techniques capable of inspecting these highly advanced parts. Additionally additive manufacturing techniques can also be used to build parts in space and provides a vehicle for in-situ resource utilization for off world missions. As NASA and its commercial crew partners move forward, inspection techniques will need to continue to advance to ensure safe manned space flight. In this talk NASA will highlight many of the advanced nondestructive evaluation efforts going on across the agency, as well as providing highlights for points of infusion for helping NASA meet its future mission goals.

NDE↗
NASA NTRS2020

Prognostics for Systems Health Management - Model and Hybrid Based Approaches. Where are We Heading?

To facilitate and solve the prediction problem, awareness of the current state and health of the system is key, since it is necessary to perform condition-based system health predictions. To accurately predict the future state of any system, it is required to possess knowledge of its current health state and future operational conditional. In case of next generation electric aircrafts, computing remaining flying time is safety-critical, since an aircraft that runs out of power (battery charge) while in the air will eventually lose control leading to catastrophe. In order to tackle and solve the prediction problem, it is essential to have awareness of the current health state of the system, especially since it is necessary to perform condition-based predictions. To be able to predict the future state of the system, it is also required to possess knowledge of the current and future operational conditions and flight profiles for accurate estimation of end-of-discharge (EOD) for the batteries. Similar framework can be implemented to other complex systems and subsystems. Our research approach is to develop a system level health monitoring safety indicator which runs estimation and prediction algorithms to estimate remaining useful life predictions at system, subsystem swell as component levels. Given models of the current and future system behavior, a general approach of model-based prognostics is discussed as a solution to the prediction problem and further for decision making. Data driven prognostics approaches have been equally used with good results in the past, where respective approaches have their own challenges to tackle. This limits their applicability to complex real-world domains: (a) high complexity or incompleteness of physics-based models and (b) limited representativeness of the training dataset for data-driven models. With the advent of internet of things for data collection and increased use of ML algorithms, hybrid approaches are the next avenue to reduce the challenges and achieve better results. An hybrid framework for fusing information from physics-based performance models along with deep learning algorithms for prognostics of complex safety critical systems is presented. In this framework, we use physics-based performance models to infer unobservable model parameters related to the system's components health solving a calibration problem.

Prognostics↗
NASA NTRSDate not supplied

Predicting Thermal Response in a Li-ion Cell on a UAV Fight Profile

As the energy storage devices continue to "pack" more energy in a small space, any damage, battery component failure, manufacturing defect, or electrically abusing the battery can lead to catastrophic thermal runaway events. A catastrophic thermal event in a cell leads to high temperature, in some instances spewing of battery materials due to gas development from side reactions initiated due to high internal temperatures. Also, a thermal runaway event can propagate from a single "failed" cell to the pack in a battery pack, leading to a more significant event. Mitigating a thermal runaway event is important in the commercial and automotive sectors. However, preventing such events in an electric aircraft (or air taxis) is paramount due to the lack of alternatives in the event of a failure. Battery prognostics algorithms allow the prediction of state-of-charge (SOC) and end-of-life (EOL) of a Li-ion battery in a UAV (unmanned air vehicle) [1]. For this presentation, we will extend this two-level battery predictive algorithm to predict SOC, EOL, and estimated maximum temperature during a simulated flight. The model is extended by integrating a lumped physics-driven thermal model for high current densities [2]. The parameters used to control SOC and EOL are maximum storable charge, time constant for Li-ion diffusivity in the carbon particles, and internal cell resistance. Cycling leads to an increase in the heat generated by an aged Li-ion cell with a LiyCoO2 (LCO) cathode and a LixC6 (MCMB) anode. The aging of a cell leads to increase in SEI layer thickness, the diffusion time for the lithium ions inside the electrodes, and the local reaction rates, in addition to the thermodynamic abuse caused by fixed cycling voltages controlled by a Battery Management System. As the battery ages, the cell resistance increases, while the onset temperature of the thermal runaway decreases (depends on the cell chemistry and cell abuse history). Any large deviation of the cell temperature from the estimated (expected) value can identify a faulty cell. Since SEI decomposition has the lowest onset temperature in the series of reactions leading to thermal runaway, the model considers the self-heating rate of the SEI decomposition as onset temperature (similar to Ref. [3]). The parameters in the Arrhenius equation for the SEI heating rate depend on the number of cycles, the cell's operating temperature, and the cell's abuse history [4,5]. Coupling the electrochemical, thermal, and aging model allow the prognostic algorithm to estimate a typical cell voltage and temperature as a function of age (cycling and calendar), whose departure from measured values from the BMS is used to identify a safety event. In addition, we will present the results from two simulated flight scenarios for a UAV: typical and extreme, since the power requirements vary significantly during take-off, landing, and changing altitudes, while the power requirements remain low during the cruise. For this presentation, the power requirement for a battery pack in a UAV is scaled to a single cell. This cell is cycled through a simulated profile, and the data is collected and used to predict a safety event.

Li-ion↗
NASA NTRS1986

The NCAR Airborne Infrared Lidar System (NAILS)

A planned airborne lidar system is presented which is intended to provide a remote sensing facility for a variety of applications. The eventual goal of the system development is a Doppler wind measurement capability for boundary layer dynamics and cloud physics applications. The first stage of development is focused initially on a direct detection lidar to measure aerosol profiles and depolarization from cloud backscatter. Because of the Doppler goal, interest in larger particles to define the top of the mixed layer, and eye safety, the first stage of the system is based on a pulsed CO2 laser. A compact, relatively simple and inexpensive system that achieves flexibility to meet the data requirements of a variety of investigators by being easily modified rather than having many different capabilities built in is the goal. Although the direct detection sensitivity is less than that for heterodyne detection, the simpler system allows the achievement of useful scientific results and operating experience towards more complex lidars while staying within budget and time constraints.

Schwiesow, R. L.↗
DOE OSTI2022

On the characterization of biases arising from methods and approximations used for sensitivity analyses

The preliminary assessment of the performance and safety of advanced reactors, as well as the identification of research and development needs, rely on computer simulations due to the lack of operational experience. Those simulations should be based on verified and validated computational tools, calculation schemes, and nuclear data libraries, and should be accompanied of a proper characterization of the involved uncertainties, providing confidence in the computational-based predictions. Thus, sensitivity and uncertainty studies, together with integral experiments, play an essential role in that process. Sensitivities are then a critical element and guidelines about how to produce accurate enough sensitivities depending on the subsequent analyses to be performed are of interest. The present study addresses the sensitivities biases arising from the use of different nuclear data libraries, computational methods and the assumption of modelling simplifications. Not only sensitivities for multiplication factor but also for safety-relevant reactivity responses have been analyzed. In the study, propagated uncertainties are also included for the considered parameters to illustrate the impact of the sensitivity profiles obtained for each case on the final uncertainty. Then, relevant recommendations are given for sensitivity analyses of highly complex systems. (authors)

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
DOE OSTI2025

ORNL Portable Diagnostic Package for Evaluating Mirror Performance

Oak Ridge National Laboratory (ORNL) and Realta Fusion successfully executed a one-year collaborative effort to deploy the Portable Diagnostic Package (PDP) on the Wisconsin HTS Axisymmetric Mirror (WHAM) and to assess future diagnostic needs. The PDP consists of an optical emission spectroscopy (OES) subsystem and a Thomson scattering (TS) subsystem. Within the first two months, the PDP OES subsystem was installed, integrated with WHAM timing, and handed over to trained Realta personnel. It immediately delivered multi-channel impurity surveys and the first spatially resolved plasma-rotation profiles inferred from C III Doppler shifts. The TS subsystem was commissioned within the first six months; transportation of the class IV laser system, approval of the safety plan, and the integration with WHAM timing with 100 ns resolution. The TS subsystem provided the first localized electron temperature measurements in WHAM commissioning shots. Leveraging these results, the team has discussed a diagnostic concept map for Realta’s next-step facility, Anvil, identifying line-of-sight constraints, required temporal resolution, and hardware upgrades.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2023

Mapping the performance of a versatile water-based condensation particle counter (vWCPC) with numerical simulation and experimental study

Accurate airborne aerosol instrumentation is required to determine the spatial distribution of ambient aerosol particles, particularly when dealing with the complex vertical profiles and horizontal variations of atmospheric aerosols. A versatile water-based condensation particle counter (vWCPC) has been developed to provide aerosol concentration measurements under various environments with the advantage of reducing the health and safety concerns associated with using butanol or other chemicals as the working fluid. However, the airborne deployment of vWCPCs is relatively limited due to the lack of characterization of vWCPC performance at reduced pressures. Given the complex combinations of operating parameters in vWCPCs, modeling studies have advantages in mapping vWCPC performance. In this work, we thoroughly investigated the performance of a laminar-flow vWCPC using COMSOL Multiphysics® simulation coupled with MATLAB™. We compared it against a modified vWCPC (vWCPC model 3789, TSI, Shoreview, MN, USA). Our simulation determined the performance of particle activation and droplet growth in the vWCPC growth tube, including the supersaturation, $D$ p,kel,0 (smallest size of particle that can be activated), $D$ p,kel,50 (particle size activated with 50 % efficiency) profile, and final growth particle size D d under wide operating temperatures, inlet pressures $P$ (30–101 kPa), and growth tube geometry (diameter $D$ and initiator length $L$ ini ). The effect of inlet pressure and conditioner temperature on vWCPC 3789 performance was also examined and compared with laboratory experiments. The COMSOL simulation result showed that increasing the temperature difference (Δ$T$) between conditioner temperature $T$ con and initiator $T$ ini will reduce $D$ p,kel,0 and the cut-off size $D$ p,kel,50 of the vWCPC. In addition, lowering the temperature midpoint ($T$ mid = $\frac{T_{con}+T_{ini}}{2}$ increases the supersaturation and slightly decreases the $D$ p,kel . The droplet size at the end of the growth tube is not significantly dependent on raising or lowering the temperature midpoint but significantly decreases at reduced inlet pressure, which indirectly alters the vWCPC empirical cut-off size. Our study shows that the current simulated growth tube geometry ($D$=6.3 mm and $L$ ini =30 mm) is an optimized choice for current vWCPC flow and temperature settings. The current simulation can more realistically represent the $D$ p,kel for 7 nm vWCPC and also achieved good agreement with the 2 nm setting. Using the new simulation approach, we provide an optimized operation setting for the 7 nm setting. This study will guide further vWCPC performance optimization for applications requiring precise particle detection and atmospheric aerosol monitoring.

47 OTHER INSTRUMENTATION↗
DOE OSTI2020

An Improved Model For Determining Salinity Recharge Time for Deep Borehole Disposal - 20405

In a previous publication (K. P. Travis, D. Burley and F. G. F. Gibb, WM2017 Conference, Phoenix Arizona paper no. 17480) we introduced a numerical model to estimate the time it would take for a pressure perturbation to subside following its creation from the construction of a deep geological borehole in water-saturated rock. The model was based on the notion of a point source of momentum - a solution of the time-dependent pressure-diffusion equation. Using the model, we estimated that it would take on the order of 10 k years for physical equilibrium to become re-established following the sinking of a 5 km borehole in granite. The significance of such a model is that it places an upper bound on the lifetime required of a borehole sealing system - a necessary input to a borehole post-closure safety case assessment. No engineered sealing system has ever been devised which is capable of retaining its sealing properties for 10 half-lives of long-lived radioisotopes in spent fuel or high-level waste. One of the key advantages of disposing of nuclear waste via Deep Borehole Disposal (DBD) is the natural sealing provided by density stratified groundwater. Upon sinking of a borehole, and subsequent filling with fresh water, brine or drilling mud, this natural barrier may be temporarily damaged. Over time, fresh brine from the far-field will flow towards or away from the hole (driven by a pressure gradient) and will eventually re-establish the original salinity gradient. It follows that the engineered seals need last only as long as the time required for this salinity gradient to reset itself. One of the limitations of our previous model was the use of a static boundary condition on the borehole wall. The model used a boundary pressure which varied quadratically with depth (arising from differences between the pressure of a column of fresh water in the borehole and that of a column of brine in the host rock). However as brine replaces fresh water in the borehole (driven by a pressure gradient), the boundary function must change with time. We now introduce an improved model which takes this time dependent boundary condition into account. The model also takes into account the time taken for a mixture of brine and fresh water to re-establish chemical equilibrium through the process of diffusion. The paper contains the mathematical details of our new iterative model as well as results showing the time taken to reach steady state, and concentration profiles for the components of the brine-filled borehole as a function of time together with a discussion on the implications of the results for developing a post-closure safety assessment for DBD. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗
DOE OSTI2023

Thermal Hydraulic Experimental Test Article - Fiscal Year 2023 (Final Report)

The Thermal Hydraulic Experimental Test Article (THETA) is a facility that is used to develop sodium components and instrumentation as well as acquire experimental data for validation of reactor thermal hydraulic and safety analysis codes. The facility simulates nominal conditions as well as protected/unprotected loss of flow accidents in a sodium-cooled fast reactor (SFR). High fidelity distributed temperature profiles of the developed flow field may be acquired with Rayleigh backscatter based optical fiber temperature sensors. The facility was designed in partnership with systems code experts to tailor the experiment to ensure the most relevant and highest quality data for code validation. THETA is comprised of a traditional primary coolant and secondary coolant system. The primary system is submerged in the pool of sodium and consists of a pump, electrically heated core, intermediate heat exchanger, and connected piping and thermal barriers (redan). The secondary system, located outside of the sodium pool, consists of a pump, sodium to air heat exchanger, and connected piping and valves. To date a test matrix has been completed utilizing the primary system of THETA. These tests, along with computational fluid dynamics and systems code models, determined the heat transfer across the core barrel and intermediate heat exchanger outlet was too great to effectively represent scaled thermal hydraulic phenomena of a liquid metal cooled reactor. Therefore, a significant effort was made to remove the primary system from the METL 28” test vessel #4 and clean the residual sodium from the primary system to facilitate upgrades. Thermal insulation was then incorporated in the core barrel and intermediate heat exchanger outlets. The primary system was then replaced, and a series of tests were performed to assess the performance of the thermal insulation. With primary system testing and upgrades complete, the secondary system could then be brought online. The tube side of the shell-and-tube intermediate heat exchanger was installed onto the primary system flange to begin installing the secondary system. The support structure for the secondary system was then erected on the METL mezzanine alongside the THETA primary system to facilitate installation of the secondary system components (sodium-to-air heat exchanger, flowmeter and pump). The piping and expansion tank were welded into the secondary system. Non-destructive examination of the secondary system welds was completed in order to satisfy ASME B31.3 pipe code for class M process fluids. The heating system and insulation were then added to prepare the system to be filled with sodium. The ancillary electrical equipment was installed which included the pump control box, blower VFD, pipe heater control system, etc. The secondary system will be filled, and a test matrix will be completed in early FY2024.

21 SPECIFIC NUCLEAR REACTORS AND ASSOCIATED PLANTS↗
NASA NTRS2002

Five-Segment Booster (FSB) Abort to Orbit (ATO) Studies

The Five Segment Booster (FSB) concept has been evolving for a number of years as a means to enhance the overall safety and reliability of the Space Shuttle system by minimizing the need to fly the more challenging Return to Launch Site (RTLS) and Transoceanic Abort Landing (TAL) abort profiles. The initial evaluation of the FSB concept was conducted in 1996 to determine the feasibility of the FSB in achieving transatlantic abort leading TAL from the pad, thus eliminating the return to launch site (RTLS) abort mode. The initial study was conducted by ATK Thiokol and did show the potential for the FSB to eliminate the RTLS abort mode. Later Rockwell (now Boeing) conducted a similar study utilizing FSB performance characteristics and verified that the FSB could indeed achieve TAL from the pad, thereby eliminating the necessity for the RTLS abort. The purpose of this paper is to discuss the details of the enhancements achieved through the internally funded study conducted by Boeing and ATK Thiokol. To better understand the enhancements that were addressed as part of this follow-on study, some background on what was achieved in the Phase A study is appropriate.

Tobias, Mark↗
NASA NTRS2003

Polar Dunes Resolved by the Mars Orbiter Laser Altimeter Gridded Topography and Pulse Widths

The Mars Orbiter Laser Altimeter (MOLA) polar data have been refined to the extent that many features poorly imaged by Viking Orbiters are now resolved in densely gridded altimetry. Individual linear polar dunes with spacings of 0.5 km or more can be seen as well as sparsely distributed and partially mantled dunes. The refined altimetry will enable measurements of the extent and possibly volume of the north polar ergs. MOLA pulse widths have been recalibrated using inflight data, and a robust algorithm applied to solve for the surface optical impulse response. It shows the surface root-mean-square (RMS) roughness at the 75-m-diameter MOLA footprint scale, together with a geological map. While the roughness is of vital interest for landing site safety studies, a variety of geomorphological studies may also be performed. Pulse widths corrected for regional slope clearly delineate the extent of the polar dunes. The MOLA PEDR profile data have now been re-released in their entirety (Version L). The final Mission Experiment Gridded Data Records (MEGDR's) are now provided at up to 128 pixels per degree globally. Densities as high as 512 pixels per degree are available in a polar stereographic projection. A large computational effort has been expended in improving the accuracy of the MOLA altimetry themselves, both in improved orbital modeling and in after-the-fact adjustment of tracks to improve their registration at crossovers. The current release adopts the IAU2000 rotation model and cartographic frame recommended by the Mars Cartography Working Group. Adoption of the current standard will allow registration of images and profiles globally with an uncertainty of less than 100 m. The MOLA detector is still operational and is currently collecting radiometric data at 1064 nm. Seasonal images of the reflectivity of the polar caps can be generated with a resolution of about 300 m per pixel.

Gregory A Neumann↗
NASA NTRS2007

NASA's Software Safety Standard

NASA relies more and more on software to control, monitor, and verify its safety critical systems, facilities and operations. Since the 1960's there has hardly been a spacecraft launched that does not have a computer on board that will provide command and control services. There have been recent incidents where software has played a role in high-profile mission failures and hazardous incidents. For example, the Mars Orbiter, Mars Polar Lander, the DART (Demonstration of Autonomous Rendezvous Technology), and MER (Mars Exploration Rover) Spirit anomalies were all caused or contributed to by software. The Mission Control Centers for the Shuttle, ISS, and unmanned programs are highly dependant on software for data displays, analysis, and mission planning. Despite this growing dependence on software control and monitoring, there has been little to no consistent application of software safety practices and methodology to NASA's projects with safety critical software. Meanwhile, academia and private industry have been stepping forward with procedures and standards for safety critical systems and software, for example Dr. Nancy Leveson's book Safeware: System Safety and Computers. The NASA Software Safety Standard, originally published in 1997, was widely ignored due to its complexity and poor organization. It also focused on concepts rather than definite procedural requirements organized around a software project lifecycle. Led by NASA Headquarters Office of Safety and Mission Assurance, the NASA Software Safety Standard has recently undergone a significant update. This new standard provides the procedures and guidelines for evaluating a project for safety criticality and then lays out the minimum project lifecycle requirements to assure the software is created, operated, and maintained in the safest possible manner. This update of the standard clearly delineates the minimum set of software safety requirements for a project without detailing the implementation for those requirements. This allows the projects leeway to meet these requirements in many forms that best suit a particular project's needs and safety risk. In other words, it tells the project what to do, not how to do it. This update also incorporated advances in the state of the practice of software safety from academia and private industry. It addresses some of the more common issues now facing software developers in the NASA environment such as the use of Commercial-Off-the-Shelf Software (COTS), Modified OTS (MOTS), Government OTS (GOTS), and reused software. A team from across NASA developed the update and it has had both NASA-wide internal reviews by software engineering, quality, safety, and project management. It has also had expert external review. This presentation and paper will discuss the new NASA Software Safety Standard, its organization, and key features. It will start with a brief discussion of some NASA mission failures and incidents that had software as one of their root causes. It will then give a brief overview of the NASA Software Safety Process. This will include an overview of the key personnel responsibilities and functions that must be performed for safety-critical software.

Ramsay, Christopher M.↗