Search NASA⌕ Search

SEARCH · Search NASA

Results for “Failure Tolerance”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12
All sourcesNASA NTRSDOE OSTI
NASA NTRS1982

Control optimization, stabilization and computer algorithms for aircraft applications

The analysis and design of complex multivariable reliable control systems are considered. High performance and fault tolerant aircraft systems are the objectives. A preliminary feasibility study of the design of a lateral control system for a VTOL aircraft that is to land on a DD963 class destroyer under high sea state conditions is provided. Progress in the following areas is summarized: (1) VTOL control system design studies; (2) robust multivariable control system synthesis; (3) adaptive control systems; (4) failure detection algorithms; and (5) fault tolerant optimal control theory.

Athans, M.↗
NASA NTRS1983

Autonomous failure detection and correction on Landsat-4

An integrated hardware/software fault tolerant system for an earth oriented, computer controlled spacecraft is described. The design philosophy as well as the rationale behind the chosen fault tolerant system is outlined. In-flight performance of the system is included for several different instances where the Failure Detection and Correction system acted autonomously to protect the spacecraft. This system exceeded the expectations of the designers by demonstrating the capability to provide a measure of safety to the spacecraft for inadvertent and undesirable ground commands as well as satisfying its primary function of monitoring the flight hardware and software for failures.

Welch, R. V.↗
NASA NTRS2023

Software Error Incident Categorizations in Aerospace

Since the first use of computers in space and aircraft, software errors have occurred. These errors can manifest as loss-of-life or less catastrophically. As the demand for automation increases, software in safety-critical systems should be designed to be tolerant to the most likely software faults. This paper categorizes historic aerospace software errors to determine trends of how and where automation is most likely to fail. A distinction between software producing wrong (erroneous) output versus no output (fail-silent) is introduced. Of the historical incidents analyzed, 87% were from software acting unexpectedly rather than simply stopping. Rebooting was found to be ineffective to clear erroneous behavior, and only partially effective for silent software. Errors were traced back to the software logic itself in 62% of cases, 13% within configurable data, and 25% introduced through input. Thirty percent (30%) of unexpected software behavior was caused by the absence of software and 20% was due to “unknown-unknowns”. These findings indicate that to achieve fault tolerance in safety-critical systems, backup strategies must be employed to detect and respond to erroneous software behavior beyond only fail-silent cases, and robust off-nominal testing should be performed to uncover unanticipated situations.

Software↗
NASA NTRS1985

Study of fault tolerant software technology for dynamic systems

The major aim of this study is to investigate the feasibility of using systems-based failure detection isolation and compensation (FDIC) techniques in building fault-tolerant software and extending them, whenever possible, to the domain of software fault tolerance. First, it is shown that systems-based FDIC methods can be extended to develop software error detection techniques by using system models for software modules. In particular, it is demonstrated that systems-based FDIC techniques can yield consistency checks that are easier to implement than acceptance tests based on software specifications. Next, it is shown that systems-based failure compensation techniques can be generalized to the domain of software fault tolerance in developing software error recovery procedures. Finally, the feasibility of using fault-tolerant software in flight software is investigated. In particular, possible system and version instabilities, and functional performance degradation that may occur in N-Version programming applications to flight software are illustrated. Finally, a comparative analysis of N-Version and recovery block techniques in the context of generic blocks in flight software is presented.

Caglayan, A. K.↗
NASA NTRS1987

Failure detection and identification for a reconfigurable flight control system

Failure detection and identification logic for a fault-tolerant longitudinal control system were investigated. Aircraft dynamics were based upon the cruise condition for a hypothetical transonic business jet transport configuration. The fault-tolerant control system consists of conventional control and estimation plus a new outer loop containing failure detection, identification, and reconfiguration (FDIR) logic. It is assumed that the additional logic has access to all measurements, as well as to the outputs of the control and estimation logic. The pilot may also command the FDIR logic to perform special tests.

Dallery, Francois↗
NASA NTRS1989

Study of a unified hardware and software fault-tolerant architecture

A unified architectural concept, called the Fault Tolerant Processor Attached Processor (FTP-AP), that can tolerate hardware as well as software faults is proposed for applications requiring ultrareliable computation capability. An emulation of the FTP-AP architecture, consisting of a breadboard Motorola 68010-based quadruply redundant Fault Tolerant Processor, four VAX 750s as attached processors, and four versions of a transport aircraft yaw damper control law, is used as a testbed in the AIRLAB to examine a number of critical issues. Solutions of several basic problems associated with N-Version software are proposed and implemented on the testbed. This includes a confidence voter to resolve coincident errors in N-Version software. A reliability model of N-Version software that is based upon the recent understanding of software failure mechanisms is also developed. The basic FTP-AP architectural concept appears suitable for hosting N-Version application software while at the same time tolerating hardware failures. Architectural enhancements for greater efficiency, software reliability modeling, and N-Version issues that merit further research are identified.

Lala, Jaynarayan↗
DOE OSTI2023

Superiority of compensatory reserve measurement compared with the Shock index for early and accurate detection of reduced central blood volume status

Shock index (SI) equals the ratio of heart rate (HR) to systolic blood pressure (SBP) with clinical evidence that it is more sensitive for trauma patient status assessment and prediction of outcome compared with either HR or SBP alone. We used lower body negative pressure (LBNP) as a human model of central hypovolemia and compensatory reserve measurement (CRM) validated for accurate tracking of reduced central blood volume to test the hypotheses that SI: (1) presents a late signal of central blood volume status; (2) displays poor sensitivity and specificity for predicting the onset of hemodynamic decompensation; and (3) cannot identify individuals at greatest risk for the onset of circulatory shock. We measured HR, SBP, and CRM in 172 human subjects (19–55 years) during progressive LBNP designed to determine tolerance to central hypovolemia as a model of hemorrhage. Subjects were subsequently divided into those with high tolerance (HT) (n = 118) and low tolerance (LT) (n = 54) based on completion of 60 mm Hg LBNP. The time course relationship between SI and CRM was determined and receiver operating characteristic (ROC) area under the curve (AUC) was calculated for sensitivity and specificity of CRM and SI to predict hemodynamic decompensation using clinically defined thresholds of 40% for CRM and 0.9 for SI. The time and level of LBNP required to reach a SI = 0.9 (~60 mm Hg LBNP) was significantly greater (p < 0.001) compared with CRM that reached 40% at ~40 mm Hg LBNP. Shock index did not differ between HT and LT subjects at 45 mm Hg LBNP levels. ROC AUC for CRM was 0.95 (95% CI = 0.94–0.97) compared with 0.91 (0.89–0.94) for SI (p = 0.0002). Despite high sensitivity and specificity, SI delays time to detect reductions in central blood volume with failure to distinguish individuals with varying tolerances to central hypovolemia.

60 APPLIED LIFE SCIENCES↗
NASA NTRS1983

DC-10 composite vertical stabilizer ground test program

A review of the structural configuration and ground test program is presented. Particular emphasis is placed on the testing of a full-scale stub box test subcomponent and full span ground test unit. The stub box subcomponent was tested in an environmental chamber under ambient, cold/wet, and hot/wet conditions. The test program included design limit static loads, fatigue spectrum loading to approximately two service lifetimes (with and without damage), design limit damage tolerance tests, and a final residual strength test to a structural failure. The first full-scale ground test unit was tested under ambient conditions. The test unit was to have undergone static, fatigue, and damage tolerance tests but a premature structural failure occurred at design limit load during the third limit load test. A failure theory was developed which explains the similarity in types of failure and the large load discrepancy at failure between the two test articles. The theory attributes both failures to high stress concentrations at the edge of the lower rear spar access opening. A second full-scale ground test unit has been modified to incorporate the various changes resulting from the premature failure. The article has been assembled and is active in the test program.

Palmer, J. M., Jr.↗
NASA NTRS1994

Micromechanics of fatigue in woven and stitched composites

The goals of this research program were to: (1) determine how microstructural factors, especially the architecture of reinforcing fibers, control stiffness, strength, and fatigue life in 3D woven composites; (2) identify mechanisms of failure; (3) model composite stiffness; (4) model notched and unnotched strength; and (5) model fatigue life. We have examined a total of eleven different angle and orthogonal interlock woven composites. Extensive testing has revealed that these 3D woven composites possess an extraordinary combination of strength, damage tolerance, and notch insensitivity in compression and tension and in monotonic and cyclic loading. In many important regards, 3D woven composites far outstrip conventional 2D laminates or stitched laminates. Detailed microscopic analysis of damage has led to a comprehensive picture of the essential mechanisms of failure and how they are related to the reinforcement geometry. The critical characteristics of the weave architecture that promote favorable properties have been identified. Key parameters are tow size and the distributions in space and strength of geometrical flaws. The geometrical flaws should be regarded as controllable characteristics of the weave in design and manufacture. In addressing our goals, the simplest possible models of properties were always sought, in a blend of old and new modeling concepts. Nevertheless, certain properties, especially regarding damage tolerance, ultimate failure, and the detailed effects of weave architecture, require computationally intensive stochastic modeling. We have developed a new model, the 'binary model,' to carry out such tasks in the most efficient manner and with faithful representation of crucial mechanisms. This is the final report for contract NAS1-18840. It covers all work from April 1989 up to the conclusion of the program in January 1993.

Cox, B. N.↗
NASA NTRS2001

Reliability of Fault Tolerant Control Systems

This paper reports Part I of a two part effort, that is intended to delineate the relationship between reliability and fault tolerant control in a quantitative manner. Reliability analysis of fault-tolerant control systems is performed using Markov models. Reliability properties, peculiar to fault-tolerant control systems are emphasized. As a consequence, coverage of failures through redundancy management can be severely limited. It is shown that in the early life of a syi1ein composed of highly reliable subsystems, the reliability of the overall system is affine with respect to coverage, and inadequate coverage induces dominant single point failures. The utility of some existing software tools for assessing the reliability of fault tolerant control systems is also discussed. Coverage modeling is attempted in Part II in a way that captures its dependence on the control performance and on the diagnostic resolution.

Wu, N. Eva↗
NASA NTRS2002

Improved Re-Configurable Sliding Mode Controller for Reusable Launch Vehicle of Second Generation Addressing Aerodynamic Surface Failures and Thrust Deficiencies

In this report we present a time-varying sliding mode control (TV-SMC) technique for reusable launch vehicle (RLV) attitude control in ascent and entry flight phases. In ascent flight the guidance commands Euler roll, pitch and yaw angles, and in entry flight it commands the aerodynamic angles of bank, attack and sideslip. The controller employs a body rate inner loop and the attitude outer loop, which are separated in time-scale by the singular perturbation principle. The novelty of the TVSMC is that both the sliding surface and the boundary layer dynamics can be varied in real time using the PD-eigenvalue assignment technique. This salient feature is used to cope with control command saturation and integrator windup in the presence of severe disturbance or control effector failure, which enhances the robustness and fault tolerance of the controller. The TV-SMC is developed and tuned up for the X-33 sub-orbital technology demonstration vehicle in launch and re-entry modes. A variety of nominal, dispersion and failure scenarios have tested via high fidelity 6DOF simulations using MAVERIC/SLIM simulation software.

Shtessel, Yuri B.↗
NASA NTRS1992

Failure detection and fault management techniques for flush airdata sensing systems

A high-angle-of-attack flush airdata sensing system was installed and flight tested on the F-18 High Alpha Research Vehicle at NASA-Dryden. This system uses a matrix of pressure orifices arranged in concentric circles on the nose of the vehicle to determine angles of attack, angles of sideslip, dynamic pressure, and static pressure as well as other airdata parameters. Results presented use an arrangement of 11 symmetrically distributed ports on the aircraft nose. Experience with this sensing system data indicates that the primary concern for real-time implementation is the detection and management of overall system and individual pressure sensor failures. The multiple port sensing system is more tolerant to small disturbances in the measured pressure data than conventional probe-based intrusive airdata systems. However, under adverse circumstances, large undetected failures in individual pressure ports can result in algorithm divergence and catastrophic failure of the entire system. How system and individual port failures may be detected using chi sq. analysis is shown. Once identified, the effects of failures are eliminated using weighted least squares.

Whitmore, Stephen A.↗
DOE OSTI2023

Benchmarking quantum logic operations relative to thresholds for fault tolerance

Contemporary methods for benchmarking noisy quantum processors typically measure average error rates or process infidelities. However, thresholds for fault-tolerant quantum error correction are given in terms of worst-case error rates—defined via the diamond norm—which can differ from average error rates by orders of magnitude. One method for resolving this discrepancy is to randomize the physical implementation of quantum gates, using techniques like randomized compiling (RC). In this work, we use gate set tomography to perform precision characterization of a set of two-qubit logic gates to study RC on a superconducting quantum processor. We find that, under RC, gate errors are accurately described by a stochastic Pauli noise model without coherent errors, and that spatially correlated coherent errors and non-Markovian errors are strongly suppressed. We further show that the average and worst-case error rates are equal for randomly compiled gates, and measure a maximum worst-case error of 0.0197(3) for our gate set. Our results show that randomized benchmarks are a viable route to both verifying that a quantum processor’s error rates are below a fault-tolerance threshold, and to bounding the failure rates of near-term algorithms, if—and only if—gates are implemented via randomization methods which tailor noise.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2022

Mechanisms of woody-plant mortality under rising drought, CO 2 and vapour pressure deficit

Drought-associated woody plant mortality may have increased over the past several decades, and is projected to increase in the future, impacting terrestrial climate forcing, biodiversity, and resource availability. The mechanisms underlying such mortality, however, are debated owing to interactions between multiple drivers and mechanisms. In this work, we synthesize knowledge of drought-related tree mortality under a warming and drying atmosphere with rising atmospheric CO 2 . Drought-associated mortality results from the depletion of pools of water and carbon within a plant and declines in their fluxes relative to demand by living tissues. These pools and fluxes are interdependent and underlay plant defenses against biotic agents. Death via failure to maintain a positive water balance is particularly dependent on soil-to-root conductance, capacitance, vulnerability to hydraulic failure, cuticular water losses, and dehydration tolerance, all of which could be exacerbated by reduced carbon supply rates to support cellular survival e.g. the carbon starvation process. The depletion of plant water and carbon pools accelerates under rising vapor pressure deficit; however, increasing CO 2 can mitigate these impacts. Advancing knowledge and reducing predictive uncertainties requires studies that integrate carbon, water, and defensive processes, and utilize a range of experimental and modeling approaches.

54 ENVIRONMENTAL SCIENCES↗
NASA NTRS1986

Effects of transient propellant dynamics on deployment of large liquid stages in zero-gravity with application to Shuttle/Centaur

This paper describes the application of a recently developed CFD program, HYDR-3D, to the analysis of separation of the Centaur G-Prime vehicle from the Shuttle Orbiter. The typical application presented illustrates a particularly difficult design task - deployment of a large, liquid-filled, densely packaged vehicle from a manned vehicle. Since it represents a potential catastrophic hazard, a vast number of conditions and parameters must be analyzed to ensure tolerance of at least two credible failures. Validation of the HYDR-3D program against zero- and low-gravity experimental data is also presented. Using the fluid dynamics program, this approach can be used confidently to analyze and determine design requirements for a variety of OTV/space-station deployment and docking problems.

Martin, R. E.↗
NASA NTRS1995

Thermal barrier coatings issues in advanced land-based gas turbines

The Department of Energy's Advanced Turbine System (ATS) program is aimed at forecasting the development of a new generation of land-based gas turbine systems with overall efficiencies significantly beyond those of current state-of-the-art machines, as well as greatly increased times between inspection and refurbishment, improved environmental impact, and decreased cost. The proposed duty cycle of ATS turbines will require the use of different criteria in the design of the materials for the critical hot gas path components. In particular, thermal barrier coatings will be an essential feature of the hot gas path components in these machines. While such coatings are routinely used in high-performance aircraft engines and are becoming established in land-based turbines, the requirements of the ATS turbine application are sufficiently different that significant improvements in thermal barrier coating technology will be necessary. In particular, it appears that thermal barrier coatings will have to function on all airfoil sections of the first stage vanes and blades to provide the significant temperature reduction required. In contrast, such coatings applied to the blades and vances of advanced aircraft engines are intended primarily to reduce air cooling requirements and extend component lifetime; failure of those coatings can be tolerated without jeopardizing mechanical or corrosion performance. A major difference is that in ATS turbines these components will be totally reliant on thermal barrier coatings which will, therefore, need to be highly reliable even over the leading edges of first stage blades. Obviously, the ATS program provides a very challenging opportunity for TBC's, and involves some significant opportunities to extend this technology.

Parks, W. P.↗
NASA NTRS2003

Probabilistic Evaluation of Blade Impact Damage

The response to high velocity impact of a composite blade is probabilistically evaluated. The evaluation is focused on quantifying probabilistically the effects of uncertainties (scatter) in the variables that describe the impact, the blade make-up (geometry and material), the blade response (displacements, strains, stresses, frequencies), the blade residual strength after impact, and the blade damage tolerance. The results of probabilistic evaluations results are in terms of probability cumulative distribution functions and probabilistic sensitivities. Results show that the blade has relatively low damage tolerance at 0.999 probability of structural failure and substantial at 0.01 probability.

Chamis, C. C.↗