Search NASA⌕ Search

SEARCH · Search NASA

Results for “assurance case”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12
All sourcesNASA NTRSDOE OSTI
NASA NTRS2015

Wear-Out Sensitivity Analysis Project Abstract

During the course of the Summer 2015 internship session, I worked in the Reliability and Maintainability group of the ISS Safety and Mission Assurance department. My project was a statistical analysis of how sensitive ORU's (Orbital Replacement Units) are to a reliability parameter called the wear-out characteristic. The intended goal of this was to determine a worst case scenario of how many spares would be needed if multiple systems started exhibiting wear-out characteristics simultaneously. The goal was also to determine which parts would be most likely to do so. In order to do this, my duties were to take historical data of operational times and failure times of these ORU's and use them to build predictive models of failure using probability distribution functions, mainly the Weibull distribution. Then, I ran Monte Carlo Simulations to see how an entire population of these components would perform. From here, my final duty was to vary the wear-out characteristic from the intrinsic value, to extremely high wear-out values and determine how much the probability of sufficiency of the population would shift. This was done for around 30 different ORU populations on board the ISS.

Harris, Adam↗
NASA NTRSDate not supplied

Machine-Learning for Safety Critical Airborne Applications Part II: Case Study

The exceptional progress in the field of Artificial Intelligence (AI) systems, enabled by Machine Learning (ML) technology in recent years provides historic opportunities for the aviation industry. Current certification standards for avionics were developed prior to the ML renaissance and have several fundamental incompatibilities with the ML technology. WG-114 is working hard to release a new standard as soon as possible but for now there is no recognized means of compliance for ML based systems even of low criticality. In this talk, we present the custom ML workflow that can be used comply with all objectives of the current certification standards for a low-criticality (DAL D and C) ML-based system. To illustrate the practical application of the custom ML workflow we present a case study of a system based on a Deep Neural Network (DNN) intended to detect and identify airport runway signs. We present the system design, data generation, training, and verification in detail and describe how the design assurance objectives can be met for a DAL D and DAL C systems.

Johann Schumann↗
NASA NTRS1974

Attitude control concepts for precision-pointing nonrigid spacecraft

Literal criteria are developed for the controllability and observability of general models of flexible spacecraft. Results are interpreted in special cases and in physical terms, permitting in some cases the identification of uncontrollable and unobservable states simply by examination of scalars composed of modal parameters and location matrices for sensors and actuators. A procedure is established for isolation of uncontrollable states, whereby sensor and actuator configurations assure that uncontrollable flexible mode states are also unobservable; in many applications such states can then be removed by coordinate truncation.

Likins, P. W.↗
NASA NTRS1974

The influence of spacecraft flexibility on system controllability and observability

Literal criteria are developed for the controllability and observability of general models of flexible spacecraft. Results are interpreted in special cases and in physical terms, permitting in some cases the identification of uncontrollable and unobservable states simply by examination of scalars composed of modal parameters and location matrices for sensors and actuators. A procedure is established for isolation of uncontrollable states, whereby sensor and actuator configuration assure that uncontrollable flexible mode states are also unobservable; in many applications such states can then be removed by coordinate truncation.

Ohkami, Y.↗
NASA NTRSDate not supplied

Improved Prediction of Losses with Large Eddy Simulation in a Low-Pressure Turbine

There is a need to improve predictions of losses resulting from large eddy simulations (LES) of low-pressure turbines (LPT) in gas turbines. This may be done by assessing the accuracy of predictions against validation data and understanding the source of any inaccuracies. LES is a promising approach for capturing the laminar/turbulent transition process in a LPT. In previous studies, the authors utilized LES to model the flow field over a Variable Speed Power Turbine (VSPT) blade and successfully captured characteristic features of separation/reattachment and transition on the suction side at both the cruise (positive incidence) and take-off conditions (negative incidence) and as well, simulated the effect of freestream turbulence (FST) on those phenomena. The predicted pressure loading profiles agreed well with the experimental data for both a high and a low FST case at a Reynolds number of Reex=220,000. In this paper, we present wake profiles resulting from computations for a range of FST values. Although the predicted wake profiles for the lowest FST case (Tu=0.5%) matched the experimental data, at higher FST (Tu=10-15%,) the wake was wider than the experimentally measured wake and for both cases were displaced laterally when compared to the experimental measurements. In our investigation of the causes of the said discrepancies we have identified important effects which could strongly influence the predicted wake profile. Predicted losses were improved by assuring the validity of the flow solution. This was done by utilizing spectral analysis to scrutinize the dynamic behavior of the wake and determine solution accuracy resulting from low mesh density and low accuracy of convective modeling.

CFD↗
NASA NTRS2022

Improved Prediction of Losses with Large Eddy Simulation in a Low-Pressure Turbine

There is a need to improve predictions of losses resulting from large eddy simulations (LES) of low-pressure turbines (LPT) in gas turbines. This may be done by assessing the accuracy of predictions against validation data and understanding the source of any inaccuracies. LES is a promising approach for capturing the laminar/turbulent transition process in a LPT. In previous studies, the authors utilized LES to model the flow field over a Variable Speed Power Turbine (VSPT) blade and successfully captured characteristic features of separation/reattachment and transition on the suction side at both the cruise (positive incidence) and take-off conditions (negative incidence) and as well, simulated the effect of free-stream turbulence (FST) on those phenomena. The predicted pressure loading profiles agreed well with the experimental data for both a high and a low FST case at a Reynolds number of Re(ex)=220,000. In this paper, we present wake profiles resulting from computations for a range of FST values. Although the predicted wake profiles for the lowest FST case (Tu=0.5%) matched the experimental data, at higher FST (Tu=10-15%,) the wake was wider than the experimentally measured wake and for both cases were displaced laterally when compared to the experimental measurements. In our investigation of the causes of the said discrepancies we have identified important effects which could strongly influence the predicted wake profile. Predicted losses were improved by assuring the validity of the flow solution. This was done by utilizing spectral analysis to scrutinize the dynamic behavior of the wake and determine solution accuracy resulting from low mesh density and low accuracy of convective modeling.

LES-LDKM↗
NASA NTRSDate not supplied

Flight Testing of In-Time Safety Assurance Technologies for UAS Operations

Ongoing research at NASA is driven by a strategic plan defined by the Aeronautics Research Mission Directorate and a vision for future In-Time Aviation Safety Management Systems (IASMS) as described by the National Academies. In both visions, system safety awareness and provision are expanded through increased access to relevant data; integrated analysis and predictive capabilities; improved real-time detection and alerting of domain-specific hazards; decision support, and in some cases, automated risk mitigation strategies. One primary research focus is to develop means by which more timely (i.e., “in-time”) actions may be taken to mitigate precursors, anomalies, or trends that are observed during operations. In this paper, we describe such means as a collection of Services, Functions, and Capabilities (SFCs) that are supported by an underlying information system. For example, an integrated risk assessment capability is envisioned that continuously monitors safety-related metrics and margins and recommends timely operational changes. Assessment functions and/or services can be based on data analytics and predictive models derived from heterogeneous data sets that span relevant indicator metrics and their time histories. Likewise, on-board functions can identify and reduce susceptibility to precursor conditions that have led (and can lead) to aircraft loss-of-control or out-of-control accidents. This paper summarizes development and testing of such an information system tailored to hazards anticipated for future highly autonomous flight missions near and over densely populated areas. Testing is accomplished via simulation and by using small, unmanned aircraft operating over a test range at NASA’s Langley Research Center. Flight plans and test scenarios are defined to emulate several use-cases, including package delivery; reconnaissance; fire management; and urban air taxi vertiport operations. Two test phases are summarized with Phase 1 occurring in (2019-2020) and Phase 2 ongoing (2021-present). Results focus on SFC performance, technology readiness level assessment, and requirements discovery/validation. Companion papers are cited throughout for additional details on the recent testing.

safety management↗
NASA NTRSDate not supplied

From BERTopic to SysML: Informing Model-Based Failure Analysis With Natural Language Processing for Complex Aerospace Systems

The development of emerging complex aerospace systems will require new approaches for capturing safety incident scenarios as early as possible in the design phase. However, for novel systems, relevant data available is limited. In this work, we propose a framework informing model-based mission assurance activities with historical incident reports, lessons learned, or other relevant engineering documents using natural language processing. In doing so, we investigate whether there is useful information in data sets that are relevant, if not identical, to the system under design and whether, through rigorous systems engineering practice, this information can be effectively leveraged through model-based failure analysis. In a worked case study, we apply state-of-the-art topic modeling techniques to two data sets, a mission relevant data set and a system relevant data set. The sets of topics are merged and interpreted to form a preliminary list of failure topics that can be used to inform the identification of off-nominal modes in the model-based failure modes and effects analysis development. Once data from the system in operation is available, it can be used to update the topics identified. By extracting information about likely failures from relevant historical data sets and utilizing model-based mission assurance to ensure relevance and rigor, unanticipated failures can be reduced, and projects can more effectively learn from past missions.

Failure Analysis↗
NASA NTRSDate not supplied

From BERTopic to SysML: Informing Model-Based Failure Analysis With Natural Language Processing for Complex Aerospace Systems

The development of emerging complex aerospace systems will require new approaches for capturing safety incident scenarios as early as possible in the design phase. However, for novel systems, relevant data available is limited. In this work, we propose a framework informing model-based mission assurance activities with historical incident reports, lessons learned, or other relevant engineering documents using natural language processing. In doing so, we investigate whether there is useful information in data sets that are relevant, if not identical, to the system under design and whether, through rigorous systems engineering practice, this information can be effectively leveraged through model-based failure analysis. In a worked case study, we apply state-of-the-art topic modeling techniques to two data sets, a mission relevant data set and a system relevant data set. The sets of topics are merged and interpreted to form a preliminary list of failure topics that can be used to inform the identification of off-nominal modes in the model-based failure modes and effects analysis development. Once data from the system in operation is available, it can be used to update the topics identified. By extracting information about likely failures from relevant historical data sets and utilizing model-based mission assurance to ensure relevance and rigor, unanticipated failures can be reduced, and projects can more effectively learn from past missions.

Failure Analysis↗
NASA NTRS2019

Trends in Human Spaceflight: Failure Tolerance, High Reliability and Correlated Failure History

In a half century of human spaceflight, NASA has continuously refined agency safety and reliability requirements in response to mission demands, critical failures, and technology development. Early spacecraft, including Mercury, Gemini and Apollo vehicles, were highly reliant on dissimilar redundancy and demonstrated test margins. Later programs, such as the reusable Space Transportation System (STS) and International Space Station (ISS), introduced probabilistic studies and isolated two-failure tolerance to improve robustness at the expense of added complexity. More recently, the Orion Multi-Program Crew Vehicle (MPCV) program adopted universal single-failure tolerance with two categorical exceptions; Zero-Failure Tolerant (0FT) and Design for Minimum Risk (DFMR) hardware. Failure tolerance variances are defined and managed in accordance with agency human-rating requirements, and require concurrence from program Technical Authorities (TA) as well as the MPCV Safety and Mission Assurance Safety and Engineering Review Panel (MSERP). To understand and reaffirm standards applied to Apollo, Space Shuttle and Orion vehicles, Orion and Deep Space Gateway Safety and Mission Assurance (S&MA) representatives conducted accelerated research to compare unique safety and reliability criteria against ground and flight anomalies, based on information contained in post-mission reports and the Problem Reporting and Corrective Action (PRACA) database. In some cases, high-profile failures and narrow escapes have reinforced decisions to maintain or adapt safety requirements. In others, empirical trends have highlighted the need for vigilance and innovative safety guidelines. Given the inability to achieve absolute compliance with evolving safety and reliability requirements, the team conducted a targeted review of DFMR and 0FT propulsion elements within the framework of changing system design, inspection, materials and process developments to formulate conclusions on technological maturity, failure density, and net changes in safety risk. Based on the aggregate performance of high-reliability and failure-tolerant systems, the authors have attempted to establish best practices and guidelines to inform future program decisions. On a somewhat cautionary note, this study is not intended to direct a universal set of requirements for future missions based on prior lessons learned. Spacecraft safety is a multi-variable problem, and attempts to mitigate past failures will not guarantee future success. However, this assessment offers a retrospective review of policy changes, implementation and effectiveness. In the future, NASA, European Space Agency (ESA) and industry partners may benefit from a more robust correlation between requirements and performance, as space-faring nations work toward more challenging, complex and long-duration commercial and deep-space ventures.

Green, Carrie↗
NASA NTRS1988

Considerations in development and implementation of elasto-viscoplastic constitutive model for high temperature applications

The prediction of inelastic behavior of metallic materials at elevated temperatures has increased in importance in recent years. The operating conditions within the hot section of a rocket motor or a modern gas turbine engine present an extremely harsh thermomechanical environment. Large thermal transients are induced each time the engine is started or shut down. Additional thermal transients from an elevated ambient occur whenever the engine power level is adjusted to meet flight requirements. The structural elements employed in such hot sections, as well as any engine components located therein, must be capable of withstanding such extreme conditions. Failure of a component would, due to the critical nature of the hot section, lead to an immediate and catastrophic loss in power. Consequently, assuring satisfactory long term performance for such components is a major concern. Nonisothermal loading of structures often causes excursion of stress well into the inelastic range. Moreover, the influence of geometry changes on the response is also significant in most cases. Therefore, both material and geometric nonlinear effects are considered.

Riff, Richard↗
NASA NTRS2004

Radiation Assurance for the Space Environment

The space radiation environment can lead to extremely harsh operating conditions for spacecraft electronic systems. A hardness assurance methodology must be followed to assure that the space radiation environment does not compromise the functionality and performance of space-based systems during the mission lifetime. The methodology includes a definition of the radiation environment, assessment of the radiation sensitivity of parts, worst-case analysis of the impact of radiation effects, and part acceptance decisions which are likely to include mitigation measures.

Barth, Janet L.↗
NASA NTRS2017

Open-Source RTOS Space Qualification: An RTEMS Case Study

NASA space-qualification of reusable off-the-shelf real-time operating systems (RTOSs) remains elusive due to several factors notably (1) The diverse nature of RTOSs utilized across NASA, (2) No single NASA space-qualification criteria, lack of verification and validation (V&V) analysis, or test beds, and (3) different RTOS heritages, specifically open-source RTOSs and closed vendor-provided RTOSs. As a leader in simulation test beds, the NASA IV&V Program is poised to help jump-start and lead the space-qualification effort of the open source Real-Time Executive for Multiprocessor Systems (RTEMS) RTOS. RTEMS, as a case-study, can be utilized as an example of how to qualify all RTOSs, particularly the reusable non-commercial (open-source) ones that are gaining usage and popularity across NASA. Qualification will improve the overall safety and mission assurance of RTOSs for NASA-agency wide usage. NASA's involvement in space-qualification of an open-source RTOS such as RTEMS will drive the RTOS industry toward a more qualified and mature open-source RTOS product.

Real-time operating system↗
NASA NTRS2018

Space Environments & Effects

The space radiation environment can lead to extremely harsh operating conditions for spacecraft electronic systems. A hardness assurance methodology must be followed to assure that the space radiation environment does not compromise the functionality and performance of space-based systems during the mission lifetime. The methodology includes a definition of the radiation environment, assessment of the radiation sensitivity of parts, worst-case analysis of the impact of radiation effects, and part acceptance decisions which are likely to include mitigation measures.

Space radiation spacecraft mitigation space-based ↗
NASA NTRS1995

Failures and anomalies attributed to spacecraft charging

The effects of spacecraft charging can be very detrimental to electronic systems utilized in space missions. Assuring that subsystems and systems are protected against charging is an important engineering function necessary to assure mission success. Spacecraft charging is expected to have a significant role in future space activities and programs. Objectives of this reference publication are to present a brief overview of spacecraft charging, to acquaint the reader with charging history, including illustrative cases of charging anomalies, and to introduce current spacecraft charging prevention activities of the Electromagnetics and Environments Branch, Marshall Space Flight Center (MSFC), National Aeronautics and Space Administration (NASA).

Leach, R. D.↗
NASA NTRS2010

Lunar Surface Operations with Dual Rovers

Lunar Electric Rovers (LER) are currently being developed that are substantially more capable than the Apollo vehicle (LRN ,"). Unlike the LRV, the new LERs provide a pressurized cabin that serves as short-sleeve environment for the crew of two, including sleeping accommodations and other provisions that allow for long tern stays, possibly up to 60 days, on the hear surface, without the need to replenish consumables from some outside source, such as a lander or outpost. As a consequence, significantly larger regions may be explored in the future and traverse distances may be measured in a few hundred kilometers (1, 2). However, crew safety remains an overriding concern, and methods other than "walk back", the major operational constraint of all Apollo traverses, must be implemented to assure -at any time- the safe return of the crew to the lander or outpost. This then causes current Constellation plans to envision long-tern traverses to be conducted with 2 LERs exclusively, each carrying a crew of two: in case one rover fails, the other will rescue the stranded crew and return all 4 astronauts in a single LER to base camp. Recent Desert Research and Technology Studies (DRATS) analog field tests simulated a continuous 14 day traverse (3), covering some 135 km, and included a rescue operation that transferred the crew and diverse consumables from one LER to another these successful tests add substantial realism to the development of long-term, dual rover operations. The simultaneous utilization of 2 LERs is of course totally unlike Apollo and raises interesting issues regarding science productivity and mission operations, the thrust of this note.

Horz, Friedrich↗
NASA NTRS1991

The space shuttle advanced solid rocket motor: Quality control and testing

The Congressional committees that authorize the activities of NASA requested that the National Research Council (NRC) review the testing and quality assurance programs for the Advanced Solid Rocket Motor (ASRM) program. The proposed ASRM design incorporates numerous features that are significant departures from the Redesigned Solid Rocket Motor (RSRM). The NRC review concentrated mainly on these features. Primary among these are the steel case material, welding rather than pinning of case factory joints, a bolted field joint designed to close upon firing the rocket, continuous mixing and casting of the solid propellant in place of the current batch processes, use of asbestos-free insulation, and a lightweight nozzle. The committee's assessment of these and other features of the ASRM are presented in terms of their potential impact on flight safety.

Source record↗
NASA NTRS2008

Guidance and Control Software Project Data - Volume 4: Configuration Management and Quality Assurance Documents

The Guidance and Control Software (GCS) project was the last in a series of software reliability studies conducted at Langley Research Center between 1977 and 1994. The technical results of the GCS project were recorded after the experiment was completed. Some of the support documentation produced as part of the experiment, however, is serving an unexpected role far beyond its original project context. Some of the software used as part of the GCS project was developed to conform to the RTCA/DO-178B software standard, "Software Considerations in Airborne Systems and Equipment Certification," used in the civil aviation industry. That standard requires extensive documentation throughout the software development life cycle, including plans, software requirements, design and source code, verification cases and results, and configuration management and quality control data. The project documentation that includes this information is open for public scrutiny without the legal or safety implications associated with comparable data from an avionics manufacturer. This public availability has afforded an opportunity to use the GCS project documents for DO-178B training. This report provides a brief overview of the GCS project, describes the 4-volume set of documents and the role they are playing in training, and includes configuration management and quality assurance documents from the GCS project. Volume 4 contains six appendices: A. Software Accomplishment Summary for the Guidance and Control Software Project; B. Software Configuration Index for the Guidance and Control Software Project; C. Configuration Management Records for the Guidance and Control Software Project; D. Software Quality Assurance Records for the Guidance and Control Software Project; E. Problem Report for the Pluto Implementation of the Guidance and Control Software Project; and F. Support Documentation Change Reports for the Guidance and Control Software Project.

Hayhurst, Kelly J.↗