Search NASA⌕ Search

SEARCH · Search NASA

Results for “Critical Functions”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

Development of Design Data for Propulsion PMR-15 Composites

The continuing development of PMR-15 composite materials and their associated design properties is pacing the implementation of this technology on commercial aircraft. The guidelines that the FAA has issued regarding the certification of advanced composite structures are very significant with respect to future PMR-15 research and development activities. The FAA has issued an advisory circular dated 1-5-83 concerning guidelines for composite aircraft structures. Of particular significance to PMR-15 technology development is the reliance on combined environmental exposure and component testing, coupled with the stipulation that reliance on previous experience be limited to where common structures and materials have been used for a similar function. Critical environmental exposures for commercial propulsion structures include 50,000 cycle service life, exposure to skydrol, moisture and other fluids, and nacelle fire conditions.

Postlewaite, J.↗

The SIFT hardware/software systems. Volume 1: A detailed description

This report contains a detailed description of the software implemented fault-tolerant computer's operating system and hardware subsystems. The Software Implemented Fault-Tolerant (SIFT) computer system was developed as an experimental vehicle for fault-tolerant systems research. The SIFT effort began with broad, in-depth studies stating the reliability and processing requirements for digital computers which would, in the aircraft of the 1990's, control flight-critical functions.

Palumbo, Daniel L.↗

Environmental Control Life Support for the Space Station

The preliminary design of the nation's Space Station is presently being developed. The Environmental Control and Life Support System (ECLSS), consisting of regenerative and nonregenerative technologies, has progressed through a series of trade studies including evaluation of the closure and distribution within the evolutionary Space Station configuration. The analysis has included the identification of the time-critical functions, redundancy (backup) management, definition of common subsystem interfaces and quantification of technology options for the process equipment. Each technology has been characterized by its physical characteristics of weight, power, volume, heat rejection, etc. Summaries of the trade study findings for the overall ECLSS in terms of physical characteristics and the impact of selected technologies is presented.

Miller, Craig W.↗

Software reliability perspectives

Software which is used in life critical functions must be known to be highly reliable before installation. This requires a strong testing program to estimate the reliability, since neither formal methods, software engineering nor fault tolerant methods can guarantee perfection. Prior to the final testing software goes through a debugging period and many models have been developed to try to estimate reliability from the debugging data. However, the existing models are poorly validated and often give poor performance. This paper emphasizes the fact that part of their failures can be attributed to the random nature of the debugging data given to these models as input, and it poses the problem of correcting this defect as an area of future research.

Wilson, Larry↗

Independent Orbiter Assessment (IOA): Analysis of the electrical power generation/power reactant storage and distribution subsystem

The results of the Independent Orbiter Assessment (IOA) of the Failure Modes and Effects Analysis (FMEA) and Critical Items List (CIL) are presented. The IOA approach features a top-down analysis of the hardware to determine failure modes, criticality, and potential critical items. To preserve independence, this analysis was accomplished without reliance upon the results contained within the NAA FMEA/CIL documentation. The independent analysis results corresponding to the Orbiter Electrical Power Generation (EPG)/Power Reactants Storage and Distribution (PRSD) System Hardware is documented. The EPG/PRSD hardware is required for performing critical functions of cryogenic hydrogen and oxygen storage and distribution to the Fuel Cell Powerplants (FCP) and Atmospheric Revitalization Pressure Control Subsystem (ARPCS). Specifically, the EPG/PRSD hardware consists of the following: Hydryogen (H2) tanks; Oxygen (O2) tanks; H2 Relief Valve/Filter Packages (HRVFP); O2 Relief Valve/Filter Packages (ORVFP); H2 Valve Modules (HVM); O2 Valve Modules (OVM); and O2 and H2 lines, components, and fittings.

Gotch, S. M.↗

Independent Orbiter Assessment: Assessment of the FMEA/CIL Instructions and Ground Rules

The McDonnell Douglas Astronautics Company was selected to conduct an independent assessment of the Orbiter Failure Mode and Effects Analysis/Critical Items List (FMEA/CIL). Part of this effort involved an examination of the FMEA/CIL preparation instructions and ground rules. Assessment objectives were to identify omissions and ambiguities in the ground rules that may impede the identification of shuttle orbiter safety and mission critical items, and to ensure that ground rules allow these items to receive proper management visibility for risk assessment. Assessment objectives were followed during the performance of the assessment without being influenced by external considerations such as effects on budget, schedule, and documentation growth. Assessment personnel were employed who had a strong reliability background but no previous space shuttle FMEA/CIL experience to ensure an independent assessment would be achieved. The following observations were made: (1) not all essential items are in the CIL for management visibility; (2) ground rules omit FMEA/CIL coverage of items that perform critical functions; (3) essential items excluded from the CIL do not receive design justification; and (4) FMEAs/CILs are not updated in a timely manner. In addition to the above issues, a number of other issues were identified that correct FMEA/CIL preparation instruction omissions and clarify ambiguities. The assessment was successful in that many of the issues have significant safety implications.

Traves, S. T.↗

Real-time closed-loop simulation and upset evaluation of control systems in harsh electromagnetic environments

Digital control systems for applications such as aircraft avionics and multibody systems must maintain adequate control integrity in adverse as well as nominal operating conditions. For example, control systems for advanced aircraft, and especially those with relaxed static stability, will be critical to flight and will, therefore, have very high reliability specifications which must be met regardless of operating conditions. In addition, multibody systems such as robotic manipulators performing critical functions must have control systems capable of robust performance in any operating environment in order to complete the assigned task reliably. Severe operating conditions for electronic control systems can result from electromagnetic disturbances caused by lightning, high energy radio frequency (HERF) transmitters, and nuclear electromagnetic pulses (NEMP). For this reason, techniques must be developed to evaluate the integrity of the control system in adverse operating environments. The most difficult and illusive perturbations to computer-based control systems that can be caused by an electromagnetic environment (EME) are functional error modes that involve no component damage. These error modes are collectively known as upset, can occur simultaneously in all of the channels of a redundant control system, and are software dependent. Upset studies performed to date have not addressed the assessment of fault tolerant systems and do not involve the evaluation of a control system operating in a closed-loop with the plant. A methodology for performing a real-time simulation of the closed-loop dynamics of a fault tolerant control system with a simulated plant operating in an electromagnetically harsh environment is presented. In particular, considerations for performing upset tests on the controller are discussed. Some of these considerations are the generation and coupling of analog signals representative of electromagnetic disturbances to a control system under test, analog data acquisition, and digital data acquisition from fault tolerant systems. In addition, a case study of an upset test methodology for a fault tolerant electromagnetic aircraft engine control system is presented.

Belcastro, Celeste M.↗

Lightning protection of full authority digital electronic systems

Modern electronic systems are vulnerable to transient and they now provide safety critical functions such as full authority digital electronic control (FADEC) units for fly by wire aircraft. Of the traditional suppression technologies available diodes have gained the wider acceptance, however, they lack the current handling capacity to meet existing threat levels. The development of high speed fold back devices where, at a specified voltage, the off state resistance switches to a very low on state one has provided the equivalent to a semiconductor spark gap. The size of the technology enables it to be integrated into connectors of interconnection cables. To illustrate the performance the technology was developed to meet the Lightning Protection requirements for FADEC units within aeroengines. Work was also carried out to study switching behavior with the waveform 5, the 500 us, 10 kA pulse applied to cable assemblies. This test enabled all the switches in a connector to be fired simultaneously.

Crofts, David↗

Robotic missions to Mars - Paving the way for humans

NASA is in the planning stages of a program leading to the human exploration of Mars. A critical element in that program is a set of robotic missions that will acquire information on the Martian environment and test critical functions (such as aerobraking) at the planet. This paper presents some history of Mars missions, as well as results of recent studies of the Mars robotic missions that are under consideration as part of the exploration program. These missions include: (1) global synoptic geochemical and climatological characterization from orbit (Mars Observer), (2) global network of small meteorological and seismic stations, (3) sample returns, (4) reconnaissance orbiters and (5) rovers.

Pivirotto, D. S.↗

Attitude and articulation control for CRAF/Cassini

The Comet Rendezvous/Asteroid Flyby (CRAF) and Cassini planetary missions provide exciting pointing and control challenges. The mission and science objectives, and an attitude and articulation control concept designed to meet these challenges, are described. CRAF/Cassini mission characteristics which drive pointing and control include: close range flybys of asteroids and icy satellites; Huygens probe guidance and communication; Saturn orbit insertion; comet rendezvous and orbit insertion; closed loop target tracking from a comet orbit perturbed by gas and dust pressure; fine spacecraft pointing for Titan radar mapping and Earth communications; requirements for autonomous failure detection; isolation; recovery; and 13.5 year lifetime. The philosophy and approach chosen to meet these challenges and the overall control architecture are addressed, including operational and autonomous safe modes. Critical functions are highlighted, such as charge coupled device imaging of stars and extended bodies which provide references for inertial and target referenced pointing respectively. Tradeoffs and rationale for the selection and location of sensors and actuators are reviewed.

Bell, C. E.↗

The role of clocks in operating deep space missions

Operation of deep space missions requires stable frequency references and clocks to perform several mission critical functions. These references are used in generating the telecommunication links to maintain communications between earth and spacecraft, in generating accurate doppler, range, and very long baseline interferometry (VLBI) observables for determining the spacecraft's time varying position, and to generate on-board timing information for clocking out timed commands and time tagging instrument data. In addition, science applications exist, particularly those utilizing radio instrumentation, which can require additional functions and levels of performance. The design necessary to support these functions affects both the spacecraft and the ground tracking stations. This paper provides a brief description of these functions and some of the key requirements needed to support them.

S. W. Asmar↗

Condenser design for AMTEC power conversion

The condenser and the electrodes are the two elements of an alkali metal thermal-to-electric conversion (AMTEC) cell which most greatly affect the energy conversion performance. A condenser is described which accomplishes two critical functions in an AMTEC cell: management of the fluid under microgravity conditions and optimization of conversion efficiency. The first function is achieved via the use of a controlled surface shape, along with drainage grooves and arteries to collect the fluid. Capillary forces manage the fluid in microgravity and dominate hydrostatic effects on the ground so the device is ground-testable. The second function is achieved via a smooth film of highly reflective liquid sodium on the condensing surface, resulting in minimization of parasitic heat losses due to radiation heat transfer. Power conversion efficiencies of 25 percent to 30 percent are estimated with this condenser using present technology for the electrodes.

Crowley, Christopher J.↗

Conceptual design of a fleet of autonomous regolith throwing devices for radiation shielding of lunar habitats

The National Aeronautics and Space Administration (NASA) in conjunction with Universities Space Research Association (USRA) has requested that the feasibility of a fleet of regolith tossing devices designed to cover a lunar habitat for radiation protection be demonstrated. The regolith, or lunar soil, protects the lunar habitat and its inhabitants from radiation. Ideally, the device will operate autonomously in the lunar environment. To prove the feasibility of throwing regolith on the Moon, throwing solutions were compared to traditional, Earth-based methods for moving soil. Various throwing configurations were investigated. A linear throwing motion combined with a spring and motor energizing system proved a superior solution. Three different overall configurations for the lunar device are presented. A single configuration is chosen and critical parameters such as operating procedure, system volume, mass, and power are developed. The report is divided into seven main sections. First, the Introduction section gives background information, defines the project requirements and the design criteria, and presents the methodology used for the completion of this design. Next, the Preliminary Analysis section presents background information on characteristics of lunar habitats and the lunar environment. Then, the Alternate Designs section presents alternate solutions to each of the critical functions of the device. Fourth, a detailed analysis of throwing the regolith is done to demonstrate its feasibility. Then, the three overall design configurations are presented. Next, a configuration is selected and the conceptual design is expanded to include system performance characteristics, size, and mass. Finally, the Conclusions and Recommendations for Future Work section evaluates the design, outlines the next step to be taken in the design process, and suggests possible goals for future design work.

Armstrong, Karem↗

Electro-optical rendezvous and docking sensors

Electro-optical sensors provide unique and critical functionality for space missions requiring rendezvous, docking, and berthing. McDonnell Douglas is developing a complete rendezvous and docking system for both manned and unmanned missions. This paper examines our sensor development and the systems and missions which benefit from rendezvous and docking sensors. Simulation results quantifying system performance improvements in key areas are given, with associated sensor performance requirements. A brief review of NASA-funded development activities and the current performance of electro-optical sensors for space applications is given. We will also describe current activities at McDonnell Douglas for a fully functional demonstration to address specific NASA mission needs.

Tubbs, David J.↗

Development of a proposed international standard for certification of aircraft to High Intensity Radiated Fields (HIRF)

Avionic systems performing critical functions in modern aircraft are potentially susceptible to the hazards of electromagnetic radiation from ground and airborne transmitters. The Federal Aviation Administration (FAA) requested that the Society of Automotive Engineers (SAE) coordinate the development of procedures and guidance material which can be used during the aircraft certification process to ensure adequate protection against high intensity radiated fields (HIRF). This paper addresses both the technical challenge of drafting a certification procedure and guidance standard as well as the management process used by the SAE subcommittee AE4R to converge a diverse range of opinions by its international membership in the shortest possible time.

Sargent, Noel B.↗

Verification of fault-tolerant clock synchronization systems

A critical function in a fault-tolerant computer architecture is the synchronization of the redundant computing elements. The synchronization algorithm must include safeguards to ensure that failed components do not corrupt the behavior of good clocks. Reasoning about fault-tolerant clock synchronization is difficult because of the possibility of subtle interactions involving failed components. Therefore, mechanical proof systems are used to ensure that the verification of the synchronization system is correct. In 1987, Schneider presented a general proof of correctness for several fault-tolerant clock synchronization algorithms. Subsequently, Shankar verified Schneider's proof by using the mechanical proof system EHDM. This proof ensures that any system satisfying its underlying assumptions will provide Byzantine fault-tolerant clock synchronization. The utility of Shankar's mechanization of Schneider's theory for the verification of clock synchronization systems is explored. Some limitations of Shankar's mechanically verified theory were encountered. With minor modifications to the theory, a mechanically checked proof is provided that removes these limitations. The revised theory also allows for proven recovery from transient faults. Use of the revised theory is illustrated with the verification of an abstract design of a clock synchronization system.

Miner, Paul S.↗

Recommendations resulting from the SPDS Community-Wide Workshop

The Data Systems Panel identified three critical functionalities of a Space Physics Data System (SPDS): the delivery of self-documenting data, the existence of a matrix of translators between various standard formats (IDFS, CDF, netCDF, HDF, TENNIS, UCLA flat file, and FITS), and a network-based capability for browsing and examining inventory records for the system's data holdings. The recommendations resulting from the workshop include the philosophy, funding, and objectives of a SPDS. Access to quality data is seen as the most important objective by the Policy Panel, with curation and information about the data being integral parts of any accessible data set. The Data Issues Panel concluded that the SPDS can supply encouragement, guidelines, and ultimately provide a mechanism for financial support for data archiving, restoration, and curation. The Software Panel of the SPDS focused on defining the requirements and priorities for SPDS to support common data analysis and data visualization tools and packages.

Source record↗

A mission planning concept and mission planning system for future manned space missions

The international character of future manned space missions will compel the involvement of several international space agencies in mission planning tasks. Additionally, the community of users requires a higher degree of freedom for experiment planning. Both of these problems can be solved by a decentralized mission planning concept using the so-called 'envelope method,' by which resources are allocated to users by distributing resource profiles ('envelopes') which define resource availabilities at specified times. The users are essentially free to plan their activities independently of each other, provided that they stay within their envelopes. The new developments were aimed at refining the existing vague envelope concept into a practical method for decentralized planning. Selected critical functions were exercised by planning an example, founded on experience acquired by the MSCC during the Spacelab missions D-1 and D-2. The main activity regarding future mission planning tasks was to improve the existing MSCC mission planning system, using new techniques. An electronic interface was developed to collect all formalized user inputs more effectively, along with an 'envelope generator' for generation and manipulation of the resource envelopes. The existing scheduler and its data base were successfully replaced by an artificial intelligence scheduler. This scheduler is not only capable of handling resource envelopes, but also uses a new technology based on neuronal networks. Therefore, it is very well suited to solve the future scheduling problems more efficiently. This prototype mission planning system was used to gain new practical experience with decentralized mission planning, using the envelope method. In future steps, software tools will be optimized, and all data management planning activities will be embedded into the scheduler.

Wickler, Martin↗