Search NASA⌕ Search

SEARCH · Search NASA

Results for “Launch Abort System”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12

Advanced Health Management Algorithms for Crew Exploration Applications

Achieving the goals of the President's Vision for Exploration will require new and innovative ways to achieve reliability increases of key systems and sub-systems. The most prominent approach used in current systems is to maintain hardware redundancy. This imposes constraints to the system and utilizes weight that could be used for payload for extended lunar, Martian, or other deep space missions. A technique to improve reliability while reducing the system weight and constraints is through the use of an Advanced Health Management System (AHMS). This system contains diagnostic algorithms and decision logic to mitigate or minimize the impact of system anomalies on propulsion system performance throughout the powered flight regime. The purposes of the AHMS are to increase the probability of successfully placing the vehicle into the intended orbit (Earth, Lunar, or Martian escape trajectory), increase the probability of being able to safely execute an abort after it has developed anomalous performance during launch or ascent phases of the mission, and to minimize or mitigate anomalies during the cruise portion of the mission. This is accomplished by improving the knowledge of the state of the propulsion system operation at any given turbomachinery vibration protection logic and an overall system analysis algorithm that utilizes an underlying physical model and a wide array of engine system operational parameters to detect and mitigate predefined engine anomalies. These algorithms are generic enough to be utilized on any propulsion system yet can be easily tailored to each application by changing input data and engine specific parameters. The key to the advancement of such a system is the verification of the algorithms. These algorithms will be validated through the use of a database of nominal and anomalous performance from a large propulsion system where data exists for catastrophic and noncatastrophic propulsion sytem failures.

Davidson, Matt↗

Autonomous Guidance, Navigation and Control

The NASA Autonomous Guidance, Navigation and Control (GN&C) Bridging program is reviewed to demonstrate the program plan and GN&C systems for the Space Shuttle. The ascent CN&C system is described in terms of elements such as the general-purpose digital computers, sensors for the navigation subsystem, the guidance-system software, and the flight-control subsystem. Balloon-based and lidar wind soundings are used for operations assessment on the day of launch, and the guidance software is based on dedicated units for atmospheric powered flight, vacuum powered flight, and abort-specific situations. Optimization of the flight trajectories is discussed, and flight-control responses are illustrated for wavelengths of 500-6000 m. Alternate sensors are used for load relief, and adaptive GN&C systems based on alternate gain synthesis are used for systems failures.

Bordano, A. J.↗

Modeling in the State Flow Environment to Support Launch Vehicle Verification Testing for Mission and Fault Management Algorithms in the NASA Space Launch System

Analysis methods and testing processes are essential activities in the engineering development and verification of the National Aeronautics and Space Administration's (NASA) new Space Launch System (SLS). Central to mission success is reliable verification of the Mission and Fault Management (M&FM) algorithms for the SLS launch vehicle (LV) flight software. This is particularly difficult because M&FM algorithms integrate and operate LV subsystems, which consist of diverse forms of hardware and software themselves, with equally diverse integration from the engineering disciplines of LV subsystems. M&FM operation of SLS requires a changing mix of LV automation. During pre-launch the LV is primarily operated by the Kennedy Space Center (KSC) Ground Systems Development and Operations (GSDO) organization with some LV automation of time-critical functions, and much more autonomous LV operations during ascent that have crucial interactions with the Orion crew capsule, its astronauts, and with mission controllers at the Johnson Space Center. M&FM algorithms must perform all nominal mission commanding via the flight computer to control LV states from pre-launch through disposal and also address failure conditions by initiating autonomous or commanded aborts (crew capsule escape from the failing LV), redundancy management of failing subsystems and components, and safing actions to reduce or prevent threats to ground systems and crew. To address the criticality of the verification testing of these algorithms, the NASA M&FM team has utilized the State Flow environment6 (SFE) with its existing Vehicle Management End-to-End Testbed (VMET) platform which also hosts vendor-supplied physics-based LV subsystem models. The human-derived M&FM algorithms are designed and vetted in Integrated Development Teams composed of design and development disciplines such as Systems Engineering, Flight Software (FSW), Safety and Mission Assurance (S&MA) and major subsystems and vehicle elements such as Main Propulsion Systems (MPS), boosters, avionics, Guidance, Navigation, and Control (GN&C), Thrust Vector Control (TVC), liquid engines, and the astronaut crew office. Since the algorithms are realized using model-based engineering (MBE) methods from a hybrid of the Unified Modeling Language (UML) and Systems Modeling Language (SysML), SFE methods are a natural fit to provide an in depth analysis of the interactive behavior of these algorithms with the SLS LV subsystem models. For this, the M&FM algorithms and the SLS LV subsystem models are modeled using constructs provided by Matlab which also enables modeling of the accompanying interfaces providing greater flexibility for integrated testing and analysis, which helps forecast expected behavior in forward VMET integrated testing activities. In VMET, the M&FM algorithms are prototyped and implemented using the same C++ programming language and similar state machine architectural concepts used by the FSW group. Due to the interactive complexity of the algorithms, VMET testing thus far has verified all the individual M&FM subsystem algorithms with select subsystem vendor models but is steadily progressing to assessing the interactive behavior of these algorithms with LV subsystems, as represented by subsystem models. The novel SFE applications has proven to be useful for quick look analysis into early integrated system behavior and assessment of the M&FM algorithms with the modeled LV subsystems. This early MBE analysis generates vital insight into the integrated system behaviors, algorithm sensitivities, design issues, and has aided in the debugging of the M&FM algorithms well before full testing can begin in more expensive, higher fidelity but more arduous environments such as VMET, FSW testing, and the Systems Integration Lab7 (SIL). SFE has exhibited both expected and unexpected behaviors in nominal and off nominal test cases prior to full VMET testing. In many findings, these behavioral characteristics were used to correct the M&FM algorithms, enable better test coverage, and develop more effective test cases for each of the LV subsystems. This has improved the fidelity of testing and planning for the next generation of M&FM algorithms as the SLS program evolves from non-crewed to crewed flight, impacting subsystem configurations and the M&FM algorithms that control them. SFE analysis has improved robustness and reliability of the M&FM algorithms by revealing implementation errors and documentation inconsistencies. It is also improving planning efficiency for future VMET testing of the M&FM algorithms hosted in the LV flight computers, further reducing risk for the SLS launch infrastructure, the SLS LV, and most importantly the crew.

Trevino, Luis↗

Space Launch System Aeroacoustic Wind Tunnel Test Results

Characterization of accurate launch vehicle unsteady aerodynamics is critical for component and secondary structure vibroacoustic design. For the National Aeronautics and Space Administration (NASA) Space Launch System (SLS), aeroacoustic environments have been derived primarily through sub-scale wind tunnel testing. Both optical techniques and high frequency pressure measurements have been utilized across multiple testing facilities and numerous vehicle configurations to develop a range of preliminary and detailed environments. As the vehicle has matured and evolved, the data collected from each subsequent configuration has allowed for comparison studies which isolate the effects of certain outer mold line (OML) features on measured fluctuating pressure levels. This paper presents observations on some of those effects for features which include abort system protuberances, various fairings geometries, interstage flanges, and multibody interactions between a central core and fall away boosters. These features, and the flow conditions produced by them, are broadly applicable to many launch vehicle configurations.

Steva, Thomas B.↗

Low-Enriched Uranium Nuclear Thermal Propulsion Systems

The fundamental capability of Nuclear Thermal Propulsion (NTP) is game changing for space exploration. For example, using NTP for human Mars missions can provide faster transit and/or round trip times for crew; larger mission payloads; off nominal mission opportunities (including wider injection windows); and crew mission abort options not available from other architectures. The use of NTP can also reduce required earth-to-orbit launches, reducing cost and improving ground logistics. In addition to enabling robust human Mars mission architectures, NTP can be used on exploration missions throughout the solar system. A first generation NTP system could provide high thrust at a specific impulse above 900 s, roughly double that of state of the art chemical engines. Characteristics of fission and NTP indicate that useful first generation systems will provide a foundation for future systems with extremely high performance. Progress made under the NTP project could also help enable high performance fission power systems and Nuclear Electric Propulsion (NEP). Guidance, navigation, and control of NTP may have some unique but manageable characteristics.

Fission↗

ET TPS Development Criteria and Flight Instrumentation Program

The objective was to verify the design thermal environments for the Space Shuttle External Tank. These environments encompassed a myraid of potential flight cases which included nominal and dispersed trajectories launched from Kennedy Space Center (KSC) and Vandenberg and abort cases. Many iterations of environments have been produced during the evolution of the Space Shuttle system which required an analysis and assessment of each environment. A significant effort was expended in the analysis and application of wind tunnel and heat transfer data to develop math/computer models. Various versions of the aeroheating computer code MINIVER were tailored to calculate ascent aeroheating environments for the External Tank. The significant environment assessment results are summarized.

Warmbrod, John D.↗

Journey into tomorrow - Developing nuclear propulsion for the Space Exploration Initiative

Nuclear propulsion, either nuclear thermal propulsion or nuclear electric propulsion, offers the potential of reduced trip times and/or reduced mass into low earth orbit, compared to chemical propulsion systems. In addition, the greater performance benefits of nuclear propulsion can provide the added margin for greater operational flexibility, including mission abort options and increased launch windows. During the 1950s and 1960s experimental and analytical studies showed the feasibility of nuclear propulsion. NASA, in cooperation with other agencies and organizations, is currently planning a technology development program for nuclear propulsion. The overall objective is to develop at least one NTP concept and one NEP concept for piloted and robotic (e.g., cargo) missions to Mars.

Harer, Kathleen F.↗

Libration Point Navigation Concepts Supporting Exploration Vision

Farquhar described several libration point navigation concepts that would appear to support NASA s current exploration vision. One concept is a Lunar Relay Satellite operating in the vicinity of Earth-Moon L2, providing Earth-to-lunar far-side and long- range surface-to-surface navigation and communications capability. Reference [ 1] lists several advantages of such a system in comparison to a lunar orbiting relay satellite constellation. Among these are one or two vs. many satellites for coverage, simplified acquisition and tracking due to very low relative motion, much longer contact times, and simpler antenna pointing. An obvious additional advantage of such a system is that uninterrupted links to Earth avoid performing critical maneuvers "in the blind." Another concept described is the use of Earth-Moon L1 for lunar orbit rendezvous, rather than low lunar orbit as was done for Apollo. This rendezvous technique would avoid large plane change and high fuel cost associated with high latitude landing sites and long stay times. Earth-Moon L1 also offers unconstrained launch windows from the lunar surface. Farquhar claims this technique requires only slightly higher fuel cost than low lunar orbit rendezvous for short-stay equatorial landings. Farquhar also describes an Interplanetary Transportation System that would use libration points as terminals for an interplanetary shuttle. This approach would offer increased operational flexibility in terms of launch windows, rendezvous, aborts, etc. in comparison to elliptical orbit transfers. More recently, other works including Folta[3] and Howell[4] have shown that patching together unstable trajectories departing Earth-Moon libration points with stable trajectories approaching planetary libration points may also offer lower overall fuel costs than elliptical orbit transfers. Another concept Farquhar described was a Deep Space Relay at Earth-Moon IA and/or L5 that would serve as a high data rate optical navigation and communications relay satellite. The advantages in comparison to a geosynchronous relay are minimal Earth occultation, distance from large noise sources on Earth, easier pointing due to smaller relative velocity, and a large baseline for interferometry if both L4 and L5 are used.

Carpenter, J. Russell↗

Software Tool for Tracking & Mapping the NASA Orion AA-2 Test Flight Ejectable Data Recorders in Real Time

On 2 July 2019, the NASA Ascent Abort 2 flight took place off the Florida coast to test the emergency systems to separate the Orion Crew Module (CM) from the future Space Launch System rocket in the event of a malfunction. During this high-altitude test, instrumentation data was recorded on twelve customized buoyant Ejectable Data Recorders (EDRs) and subsequently jettisoned from the CM in mid-air. Upon release, the EDRs activated their GPS-Iridium beacon systems and began transmitting Short Burst Data (SBD) messages via the Iridium satellite network to relay their individual location and system health information. To locate, track and retrieve each EDR from the ocean surface in real-time, multiple open-source programming tools (Python and Linux shells) were developed for parsing the incoming Iridium binary SBD messages. For this, a Linux laptop was used to receive the Iridium-generated emails containing the SBD messages and autonomously execute the parsing tools. The received SBD data contained location, timestamp and health status information that was translated, saved, and subsequently used for simultaneously generating a continuously updated color-coded tabular display summary and unique KML files used with Google Earth to track their locations. Once their locations were known, dedicated recovery vessels retrieved all EDRs from the ocean. An additional tool was also developed in order to generate 5- and 10-minute geolocation predictions for each EDR by deriving the displacement distance, elapsed time, displacement heading and velocity based on the latest known information available. The recovery vessels were also tracked with the use of a separate commercial GPS beacon system. After jettison, 67% of the EDRs transmitted valid data by the time they were retrieved from the ocean. However, the real-time information presented by the plotting tool allowed for the ready depiction of EDR dispersal patterns and reference drift trajectories, which contributed to the recovery of all twelve EDRs and the AA-2 flight data. Lastly, the available data showed that the distance between the software’s reported drift/predicted locations and the recovery locations did not exceed 38 meters, therefore demonstrating the advantages of this software tool for supporting real-time tracking and recovery efforts of beacon devices.

Moxey, Lucas↗

Bantam: A Systematic Approach to Reusable Launch Vehicle Technology Development

The Bantam technology project is focused on providing a low cost launch capability for very small (100 kilogram) NASA and University science payloads. The cost goal has been set at one million dollars per launch. The Bantam project, however, represents much more than a small payload launch capability. Bantam represents a unique, systematic approach to reusable launch vehicle technology development. This technology maturation approach will enable future highly reusable launch concepts in any payload class. These launch vehicle concepts of the future could deliver payloads for hundreds of dollars per pound, enabling dramatic growth in civil and commercial space enterprise. The National Aeronautics and Space Administration (NASA) has demonstrated a better, faster, and cheaper approach to science discovery in recent years. This approach is exemplified by the successful Mars Exploration Program lead by the Jet Propulsion Laboratory (JPL) for the NASA Space Science Enterprise. The Bantam project represents an approach to space transportation technology maturation that is very similar to the Mars Exploration Program. The NASA Advanced Space Transportation Program (ASTP) and Future X Pathfinder Program will combine to systematically mature reusable space transportation technology from low technology readiness to system level flight demonstration. New reusable space transportation capability will be demonstrated at a small (Bantam) scale approximately every two years. Each flight demonstration will build on the knowledge derived from the previous flight tests. The Bantam scale flight demonstrations will begin with the flights of the X-34. The X-34 will demonstrate reusable launch vehicle technologies including; flight regimes up to Mach 8 and 250,000 feet, autonomous flight operations, all weather operations, twenty-five flights in one year with a surge capability of two flights in less than twenty-four hours and safe abort. The Bantam project will build on this initial capability to expand the capability of a reusable first stage, including ground launch, powered return to the launch site, and a fully reusable rocket propulsion system. A Bantam technology goal is to demonstrate twenty-five flights with no unplanned rocket engine maintenance and only minor planned maintenance or inspections. The design goal of the propulsion system is a mission life of one hundred.

Griner, Carolyn↗

Collaborative Systems Engineering in the Ascent Abort-2 Crew Module/Separation Ring Project

Generally speaking, systems engineering (SE) tool-sets face a dilemma balancing power and accessibility. High-powered SE tools (MagicDraw, Cradle, Core, etc.) tend to be specialized and are available only to highly trained Systems Engineers, and/or through the use of a 'back room' developer team making the output products available to the broader team. On the other hand, highly accessible tools (MS Word, Excel, etc.) do not have the power to implement SE in a rigorous manner. NASA has to test all aspects of the new human-rated Orion Multi-Purpose Crew Vehicle spacecraft prior to its first crewed mission. The test program includes uncrewed launch abort flight tests to demonstrate the capability to save the crew in the event that a launch failure occurs. Orion's second abort flight test will be a low-altitude flight test known as "Ascent Abort 2 (AA-2)." This test is currently scheduled to be carried out at Cape Canaveral Air Force Station's Space Launch Complex 46 (SLC-46) in Florida in 2019. NASA's in-house AA-2 Crew Module and Separation Ring (CSR) Team is producing the crew module and separation ring. Operating jointly as both an Advanced Exploration Systems (AES) Project and an Orion Project, the CSR project charter includes development of innovative, streamlined and generally more efficient practices for creation of flight hardware and software. One result of this tasking has been development of a collaborative and data-centric systems engineering environment within the team's shared web environment (Microsoft SharePoint). Through the use of built-in, 'out of the box capabilities' present in MS SharePoint, the CSR Systems Engineering team has created (with some limited developer support) a data-centric architecture for the project's SE implementation, including functional and interface analysis, requirements development and management, risk management, verification planning and management, test results, and end item management. Data elements are linked between data structures so as to define and control relationships between item types, link requirements to parents and children, and link tests to the requirements that they verify. The overall project team integration is increased by also linking SE content to project management content over the project life cycle, including team communication, action items, configuration management, decisional and meeting materials, and life cycle reviews. This presentation will provide an overview of the collaborative SE environment, showing how it provides the power for a number of SE tasks while still providing the accessibility and transparency to allow the full project team to collaborate and succeed. Given the project phase, we'll be able to present a nearly full lifecycle discussion, from concept through verification and approaching delivery.

Systems Engineering environments↗

The HL-20 Personnel Launch System

A lifting-body approach to the design of a personnel launch system spacecraft for Space Station crew rotation missions is presented. Recent study findings in the areas of wind tunnel tests, landing dynamics, handling qualities, and abort are summarized. HL-20, which is designed for safe and reliable operations, has improved operability, maintainability, and affordability as compared to current manned transportation operations. The high lift-to-drag ratio of the HL-20 provides significant advantages in reduced g-loads during entry, high crossrange capability, ability to fly to landing sites over an extensive part of the earth, and multiple landing opportunities per day at specific landing sites. Pilot ratings of the flying qualities are at level 1 on the Cooper-Harper scale. Attention is also given to a streamlined management approach to HL-20 PLS development and operations which are presently under study.

Talay, Theodore A.↗

NASA's Advanced solid rocket motor

The Advanced Solid Rocket Motor (ASRM) will not only bring increased safety, reliability and performance for the Space Shuttle Booster, it will enhance overall Shuttle safety by effectively eliminating 174 failure points in the Space Shuttle Main Engine throttling system and by reducing the exposure time to aborts due to main engine loss or shutdown. In some missions, the vulnerability time to Return-to-Launch Site aborts is halved. The ASRM uses case joints which will close or remain static under the effects of motor ignition and pressurization. The case itself is constructed of the weldable steel alloy HP 9-4-0.30, having very high strength and with superior fracture toughness and stress corrosion resistance. The internal insulation is strip-wound and is free of asbestos. The nozzle employs light weight ablative parts and is some 5,000 pounds lighter than the Shuttle motor used to date. The payload performance of the ASRM-powered Shuttle is 12,000 pounds higher than that provided by the present motor. This is of particular benefit for payloads delivered to higher inclinations and/or altitudes. The ASRM facility uses state-of-the-art manufacturing techniques, including continuous propellant mixing and direct casting.

Mitchell, Royce E.↗

Overview of Integrated Random Vibration Testing of the NASA Orion Crew Survival Suit

The launch ascent and abort random vibration environments from NASA’s Orion spacecraft drove the need to test the NASA Orion Crew Survival Suit as an integrated system with exposure to the design levels. In order to properly characterize component responses, a series of integrated tests were designed to incorporate the interaction between a crew member, suit, seat, and the attenuation system. The first Development Test (2017) included human subjects, and was performed with early development seat and suit components, and low level inputs. It provided a baseline for frequency response and behavior of the integrated system. The next two tests, Development Test (2019) and Qualification Test (2020), used manikin surrogates to represent the crew member and increasing levels of component hardware fidelity in order to test to higher input levels. Testing was performed at NASA Johnson Space Center (JSC) and Kennedy Space Center (KSC) Vibration Labs and provided the input levels required to represent the ascent and abort vehicle profiles as well as recorded component response behavior from accelerometer instrumentation and high speed cameras. Inspection of the suit and related components showed that for all seat orientations, and input environments, no damage occurred. Additional pre and post-test checks confirmed the functionality of all suited hardware. Response data of the suited components generally showed heavy attenuation across most of the tested frequency range. Transmissibility plots showed some amplification of components at lower frequency ranges. Overall this series of integrated tests showed that 1) the use of surrogate manikins in the tests were adequate for representing crew in a vibration environment, 2) full vibration levels for ascent and abort were heavily attenuated in the suit components and were non-damaging, and 3) the suit and related components are qualified for the Orion random vibration environments.

Jeffrey D Suhey↗

Overview of Integrated Random Vibration Testing of the NASA Orion Crew Survival Suit

The launch ascent and abort random vibration environments from NASA’s Orion spacecraft drove the need to test the NASA Orion Crew Survival Suit as an integrated system with exposure to the design levels. In order to properly characterize component responses, a series of integrated tests were designed to incorporate the interaction between a crew member, suit, seat, and the attenuation system. The first Development Test (2017) included human subjects, and was performed with early development seat and suit components, and low level inputs. It provided a baseline for frequency response and behavior of the integrated system. The next two tests, Development Test (2019) and Qualification Test (2020), used manikin surrogates to represent the crew member and increasing levels of component hardware fidelity in order to test to higher input levels. Testing was performed at NASA Johnson Space Center (JSC) and Kennedy Space Center (KSC) Vibration Labs and provided the input levels required to represent the ascent and abort vehicle profiles as well as recorded component response behavior from accelerometer instrumentation and high speed cameras. Inspection of the suit and related components showed that for all seat orientations, and input environments, no damage occurred. Additional pre and post-test checks confirmed the functionality of all suited hardware. Response data of the suited components generally showed heavy attenuation across most of the tested frequency range. Transmissibility plots showed some amplification of components at lower frequency ranges. Overall this series of integrated tests showed that 1) the use of surrogate manikins in the tests were adequate for representing crew in a vibration environment, 2) full vibration levels for ascent and abort were heavily attenuated in the suit components and were non-damaging, and 3) the suit and related components are qualified for the Orion random vibration environments.

Jeffrey Suhey↗

Orion GN and C Overview and Architecture

The Crew Exploration Vehicle, named Orion, is a critical element in the Constellation Program to develop the transportation system needed to send humans back to the moon and then beyond. Lockheed Martin is the prime contractor for the Orion spacecraft, which is managed by the Johnson Space Center. The Orion GN&C sub-system is being jointly developed by NASA and Lockheed Martin through a mode team approach. The GN&C is a critical element of the Orion mission to carry astronauts to low earth orbit to service the International Space Station and then on later flights to transfer and return a crew of four to the moon. The Orion GN&C system must perform monitoring and abort functions during ascent, rendezvous and docking in both low earth and lunar orbits, perform uncrewed lunar loiter operations, perform trans earth injection and atmospheric entry and landing. The Orion also must be integrated with the Ares I Crew Launch Vehicle, the Earth Departure Stage of the Ares V and the Lunar Surface Access Module. This paper provides an overview of the Orion GN&C system. The functional capabilities of the Orion GN&C will be provided in the context of Constellation architecture, the key GN&C requirements will be summarized, the GN&C architecture will be presented, the development schedule and plans will summarized and finally conclusions will be presented.

Hu, Howard↗

Development and test of the Shuttle/Centaur cryogenic tankage thermal protection system

The Thermal Protection System (TPS) for the Shuttle/Centaur had to provide fail-safe thermal protection during prelaunch, launch ascent, and on-orbit operations as well as during potential abort where the Shuttle and Centaur would return to earth. The TPS selected used a helium-purged polyimide foam beneath three radiation shields for the liquid hydrogen (LH2) tank and radiation shields only for the liquid oxygen (LO2) tank (three shields on the tank sidewall and four on the aft bulkhead). An evacuated common intermediate bulkhead separated the two tanks. The LH2 tank had one 1.9-cm thick layer of foam on the forward bulkhead and two layers on the larger area side-wall. Full scale tests of the flight vehicle in a simulated Shuttle cargo bay, that was purged with gaseous nitrogen, gave total prelaunch heating rates of 25.9 kW and 12.9 kW for LH2 and LO2 tanks, respectively. Calorimeter tests on a representative LH2 tank sidewall TPS sample indicated that the measured unit heating rate would rapidly decrease from the prelaunch rate of 300 W/sq m to a desired rate of less than 4 W/sq m once on-orbit.

Knoll, R. H.↗

A Vehicle Management End-to-End Testing and Analysis Platform for Validation of Mission and Fault Management Algorithms to Reduce Risk for NASAs Space Launch System

The engineering development of the National Aeronautics and Space Administration's (NASA) new Space Launch System (SLS) requires cross discipline teams with extensive knowledge of launch vehicle subsystems, information theory, and autonomous algorithms dealing with all operations from pre-launch through on orbit operations. The nominal and off-nominal characteristics of SLS's elements and subsystems must be understood and matched with the autonomous algorithm monitoring and mitigation capabilities for accurate control and response to abnormal conditions throughout all vehicle mission flight phases, including precipitating safing actions and crew aborts. This presents a large and complex systems engineering challenge, which is being addressed in part by focusing on the specific subsystems involved in the handling of off-nominal mission and fault tolerance with response management. Using traditional model-based system and software engineering design principles from the Unified Modeling Language (UML) and Systems Modeling Language (SysML), the Mission and Fault Management (M&FM) algorithms for the vehicle are crafted and vetted in Integrated Development Teams (IDTs) composed of multiple development disciplines such as Systems Engineering (SE), Flight Software (FSW), Safety and Mission Assurance (S&MA) and the major subsystems and vehicle elements such as Main Propulsion Systems (MPS), boosters, avionics, Guidance, Navigation, and Control (GNC), Thrust Vector Control (TVC), and liquid engines. These model-based algorithms and their development lifecycle from inception through FSW certification are an important focus of SLS's development effort to further ensure reliable detection and response to off-nominal vehicle states during all phases of vehicle operation from pre-launch through end of flight. To test and validate these M&FM algorithms a dedicated test-bed was developed for full Vehicle Management End-to-End Testing (VMET). For addressing fault management (FM) early in the development lifecycle for the SLS program, NASA formed the M&FM team as part of the Integrated Systems Health Management and Automation Branch under the Spacecraft Vehicle Systems Department at the Marshall Space Flight Center (MSFC). To support the development of the FM algorithms, the VMET developed by the M&FM team provides the ability to integrate the algorithms, perform test cases, and integrate vendor-supplied physics-based launch vehicle (LV) subsystem models. Additionally, the team has developed processes for implementing and validating the M&FM algorithms for concept validation and risk reduction. The flexibility of the VMET capabilities enables thorough testing of the M&FM algorithms by providing configurable suites of both nominal and off-nominal test cases to validate the developed algorithms utilizing actual subsystem models such as MPS, GNC, and others. One of the principal functions of VMET is to validate the M&FM algorithms and substantiate them with performance baselines for each of the target vehicle subsystems in an independent platform exterior to the flight software test and validation processes. In any software development process there is inherent risk in the interpretation and implementation of concepts from requirements and test cases into flight software compounded with potential human errors throughout the development and regression testing lifecycle. Risk reduction is addressed by the M&FM group but in particular by the Analysis Team working with other organizations such as S&MA, Structures and Environments, GNC, Orion, Crew Office, Flight Operations, and Ground Operations by assessing performance of the M&FM algorithms in terms of their ability to reduce Loss of Mission (LOM) and Loss of Crew (LOC) probabilities. In addition, through state machine and diagnostic modeling, analysis efforts investigate a broader suite of failure effects and associated detection and responses to be tested in VMET to ensure reliable failure detection, and confirm responses do not create additional risks or cause undesired states through interactive dynamic effects with other algorithms and systems. VMET further contributes to risk reduction by prototyping and exercising the M&FM algorithms early in their implementation and without any inherent hindrances such as meeting FSW processor scheduling constraints due to their target platform - the ARINC 6535-partitioned Operating System, resource limitations, and other factors related to integration with other subsystems not directly involved with M&FM such as telemetry packing and processing. The baseline plan for use of VMET encompasses testing the original M&FM algorithms coded in the same C++ language and state machine architectural concepts as that used by FSW. This enables the development of performance standards and test cases to characterize the M&FM algorithms and sets a benchmark from which to measure their effectiveness and performance in the exterior FSW development and test processes. This paper is outlined in a systematic fashion analogous to a lifecycle process flow for engineering development of algorithms into software and testing. Section I describes the NASA SLS M&FM context, presenting the current infrastructure, leading principles, methods, and participants. Section II defines the testing philosophy of the M&FM algorithms as related to VMET followed by section III, which presents the modeling methods of the algorithms to be tested and validated in VMET. Its details are then further presented in section IV followed by Section V presenting integration, test status, and state analysis. Finally, section VI addresses the summary and forward directions followed by the appendices presenting relevant information on terminology and documentation.

Trevino, Luis↗