Search NASA⌕ Search

SEARCH · Search NASA

Results for “safety certification”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 217 records · Page 12
All sourcesNASA NTRSDOE OSTI
NASA NTRS1994

Some inadequacies of the current human factors certification process of advanced aircraft technologies

Automation related accidents or serious incidents are not limited to advanced technology aircraft. There is a full history of such accidents with conventional technology aircraft. However, this type of occurrence is far from sparing the newest 'glass cockpit' generation, and it even seems to be a growing contributor to its accident rate. Nevertheless, all these aircraft have been properly certificated according to the relevant airworthiness regulations. Therefore, there is a growing concern that with the technological advancement of air transport aircraft cockpits, the current airworthiness regulations addressing cockpit design and human factors may have reached some level of inadequacy. This paper reviews some aspects of the current airworthiness regulations and certification process related to human factors of cockpit design and focuses on questioning their ability to guarantee the intended safety objectives.

Paries, Jean↗
NASA NTRS2013

Towards Real-time, On-board, Hardware-Supported Sensor and Software Health Management for Unmanned Aerial Systems

Unmanned aerial systems (UASs) can only be deployed if they can effectively complete their missions and respond to failures and uncertain environmental conditions while maintaining safety with respect to other aircraft as well as humans and property on the ground. In this paper, we design a real-time, on-board system health management (SHM) capability to continuously monitor sensors, software, and hardware components for detection and diagnosis of failures and violations of safety or performance rules during the flight of a UAS. Our approach to SHM is three-pronged, providing: (1) real-time monitoring of sensor and/or software signals; (2) signal analysis, preprocessing, and advanced on the- fly temporal and Bayesian probabilistic fault diagnosis; (3) an unobtrusive, lightweight, read-only, low-power realization using Field Programmable Gate Arrays (FPGAs) that avoids overburdening limited computing resources or costly re-certification of flight software due to instrumentation. Our implementation provides a novel approach of combining modular building blocks, integrating responsive runtime monitoring of temporal logic system safety requirements with model-based diagnosis and Bayesian network-based probabilistic analysis. We demonstrate this approach using actual data from the NASA Swift UAS, an experimental all-electric aircraft.

System & Software Health Management↗
NASA NTRS2022

NESC Peer Review of Exploration Systems Development (ESD) Integrated Vehicle Modal Test, Model Correlation, Development Flight Instrumentation (DFI) and Flight Loads Readiness; Uncertainty Propagation for Model Validation Sub-task

This report details a sub-task (regarding Uncertainty Propagation for Model Validation) from a NASA Engineering and Safety Center assessment that is a multi-year activity spanning the complete development of the Space Launch System integrated vehicle structural dynamic models, and the development of the certification of flight readiness for the Artemis 1 and Artemis 2 vehicles and their variants.

Exploration Systems Development; Development Fligh↗
NASA NTRS1976

Teledyne Continental Motors emissions data and analysis and flight test results

Five different engine models were tested covering combinations of all engine categories in current production in the range from 100 to 435 brake horsepower. Engines were divided into five major types: carbureted, fuel injected, direct drive, geared, and turbocharged. Emissions data were categorized by three separate fuel system schedules: baseline, case 1, and case 2. Baseline was defined as the average fuel flow rate established by the fuel system's production tolerance band when operated with the mixture control at the full-rich position. Case 1 was defined as the minimum allowable fuel flow rate established by the engine certification. Case 2 was defined as the fuel rate corresponding to the leanest fuel-air ratio obtainable before a safety limit occurred with the engine operating on a propeller test stand. Safety limits that developed during testing were cylinder-head overheating or inadequate acceleration from a given mode of operation.

Rezy, B. J.↗
NASA NTRS2010

The Certification of Environmental Chambers for Testing Flight Hardware

The JPL chamber certification process for ensuring that test chambers used to test flight hardware meet a minimum standard is critical to the safety of the hardware and personnel. Past history has demonstrated that this process is important due to the catastrophic incidents that could occur if the chamber is not set up correctly. Environmental testing is one of the last phases in the development of a subsystem, and it typically occurs just before integration of flight hardware into the fully assembled flight system. A seemingly insignificant -miscalculation or missed step can necessitate rebuilding or replacing a subsystem due to over-testing or damage from the test chamber. Conversely, under-testing might fail to detect weaknesses that might cause failure when the hardware is in service. This paper describes the process that identifies the many variables that comprise the testing scenario and screening of as built chambers, the training of qualified operators, and a general "what-to-look-for" in minimum standards.

Vacuum Chamber↗
NASA NTRS2009

The Certification of Environmental Chambers for Testing Flight Hardware

The JPL chamber certification process for ensuring that test chambers used to test flight hardware meet a minimum standard is critical to the safety of the hardware and personnel. Past history as demonstrated that this process is important due to the catastrophic incidents that could occur if the chamber is not set up correctly. Environmental testing is one of the last phases in the development of a subsystem, and it typically occurs just before integration of flight hardware into the fully assembled flight system. A seemingly insignificant -miscalculation or missed step can necessitate rebuilding or replacing a subsystem due to over-testing or damage from the test chamber. Conversely, under-testing might fail to detect weaknesses that might cause failure when the hardware is in service. This paper describes the process that identifies the many variables that comprise the testing scenario and screening of as built chambers, the training of qualified operators, and a general "what-to-look-for" in minimum standards.

Thermal↗
NASA NTRS2013

Analysis of Operational Hazards and Safety Requirements for Traffic Aware Strategic Aircrew Requests (TASAR)

Safety analyses of the Traffic Aware Strategic Aircrew Requests (TASAR) Electronic Flight Bag (EFB) application are provided to establish its Failure Effects Classification which affects certification and operational approval requirements. TASAR was developed by NASA Langley Research Center to offer flight path improvement opportunities to the pilot during flight for operational benefits (e.g., reduced fuel, flight time). TASAR, using own-ship and network-enabled information concerning the flight and its environment, including weather and Air Traffic Control (ATC) system constraints, provides recommended improvements to the flight trajectory that the pilot can choose to request via Change Requests to ATC for revised clearance. This study reviews the Change Request process of requesting updates to the current clearance, examines the intended function of TASAR, and utilizes two safety assessment methods to establish the Failure Effects Classification of TASAR. Considerable attention has been given in this report to the identification of operational hazards potentially associated with TASAR.

Koczo, Stefan, Jr.↗
NASA NTRS2012

SOFIA: Flying the Telescope

The primary focus of this paper is how the flight test team for the Stratospheric Observatory For Infrared Astronomy (SOFIA) re-cast an extensive developmental test program to meet key milestones while simultaneously ensuring safe certification of the airframe and delivery of an operationally relevant platform, ultimately saving the overall program from financial demise. Following a brief introduction to the observatory and what it is designed to do, SOFIAs planned developmental test program is summarized, including analysis and design philosophy, envelope expansion, model validation and airframe certification. How NASA used lessons learned from other aircraft that employed open cavities in flight is explained as well as how and why the chosen design was selected. The approach to aerodynamic analysis, including bare airframe testing, wind tunnel testing, computational fluid dynamics and finite element modeling proved absolutely critical. Despite a solid analytical foundation, many unknowns remained. History provides several examples of disastrous effects on both systems and flight safety if cavity design is not approached properly. For these reasons, an extensive test plan was developed to ensure a safe and thorough build-up for envelope expansion, airframe certification and early science missions. Unfortunately, as is often the case, because of chronic delays in overall program execution, severe schedule and funding pressures were present. If critical milestones were not met, domestic as well as international funding was in serious jeopardy, and the demise of the entire program loomed large. Concentrating on rigorous model validation, the test team challenged certification requirements, increased test efficiency and streamlined engineering analysis. This resulted in the safe reduction of test point count by 72%, meeting all program milestones and a platform that soundly satisfied all operational science requirements. Results from early science missions are shown and a proof of concept mission for which SOFIA was opportunely positioned is showcased. Success on this time-critical mission to observe a rare astronomical event proved the usefulness of an airborne observatory and the value in waiting for the capability provided by SOFIA. Finally, lessons learned in the test program are presented with emphasis on how lessons from previous aircraft and successful test programs were applied to SOFIA. Effective application of these lessons was crucial to the success of the SOFIA flight test program. SOFIA is an international cooperative program between NASA and the German Space Agency, DLR. It is a 2.5 meter (100-inch) telescope mounted in a Boeing 747SP aircraft used for astronomical observations at altitudes above 35,000 feet. SOFIA will accommodate a host of scientific instruments from the international science community and has a planned operational lifespan of more than 20 years.

Asher, Troy A.↗
NASA NTRS1995

Optimal Trajectories and Control Strategies for the Helicopter in One-Engine-Inoperative Terminal-Area Operations

Engine failure represents a major safety concern to helicopter operations, especially in the critical flight phases of takeoff and landing from/to small, confined areas. As a result, the JAA and FAA both certificate a transport helicopter as either Category-A or Category-B according to the ability to continue its operations following engine failures. A Category-B helicopter must be able to land safely in the event of one or all engine failures. There is no requirement, however, for continued flight capability. In contrast, Category-A certification, which applies to multi-engine transport helicopters with independent engine systems, requires that they continue the flight with one engine inoperative (OEI). These stringent requirements, while permitting its operations from rooftops and oil rigs and flight to areas where no emergency landing sites are available, restrict the payload of a Category-A transport helicopter to a value safe for continued flight as well as for landing with one engine inoperative. The current certification process involves extensive flight tests, which are potentially dangerous, costly, and time consuming. These tests require the pilot to simulate engine failures at increasingly critical conditions, Flight manuals based on these tests tend to provide very conservative recommendations with regard to maximum takeoff weight or required runway length. There are very few theoretical studies on this subject to identify the fundamental parameters and tradeoff factors involved. Furthermore, a capability for real-time generation of OEI optimal trajectories is very desirable for providing timely cockpit display guidance to assist the pilot in reducing his workload and to increase safety in a consistent and reliable manner. A joint research program involving NASA Ames Research Center, the FAA, and the University of Minnesota is being conducted to determine OEI optimal control strategies and the associated optimal,trajectories for continued takeoff (CTO), rejected takeoff (RTO), balked landing (BL), and continued landing (CL) for a twin engine helicopter in both VTOL and STOL terminal-area operations. This proposed paper will present the problem formulation, the optimal control solution methods, and the key results of the trajectory optimization studies for both STOL and VTOL OEI operations. In addition, new results concerning the recently developed methodology, which enable a real-time generation of optimal OEI trajectories, will be presented in the paper. This new real-time capability was developed to support the second piloted simulator investigation on cockpit displays for Category-A operations being scheduled for the NASA Ames Vertical Motion Simulator in June-August of 1995. The first VMS simulation was conducted in 1994 and reported.

Chen, Robert T. N.↗
NASA NTRS1998

Streamlining Software Aspects of Certification: Technical Team Report on the First Industry Workshop

To address concerns about time and expense associated with software aspects of certification, the Federal Aviation Administration (FAA) began the Streamlining Software Aspects of Certification (SSAC) program. As part of this program, a Technical Team was established to determine whether the cost and time associated with certifying aircraft can be reduced while maintaining or improving safety, with the intent of impacting the FAA's Flight 2000 program. The Technical Team conducted a workshop to gain a better understanding of the major concerns in industry about software cost and schedule. Over 120 people attended the workshop, including representatives from the FAA,commercial transport and general aviation aircraft manufacturers and suppliers, and procurers and developers of non-airborne systems; and, more than 200 issues about software aspects of certification were recorded. This paper provides an overview of the SSAC program, motivation for the workshop, details of the workshop activities and outcomes, and recommendations for follow-on work.

Hayhurst, Kelly J.↗
NASA NTRS2014

Aviation Safety Risk Modeling: Lessons Learned From Multiple Knowledge Elicitation Sessions

Aviation safety risk modeling has elements of both art and science. In a complex domain, such as the National Airspace System (NAS), it is essential that knowledge elicitation (KE) sessions with domain experts be performed to facilitate the making of plausible inferences about the possible impacts of future technologies and procedures. This study discusses lessons learned throughout the multiple KE sessions held with domain experts to construct probabilistic safety risk models for a Loss of Control Accident Framework (LOCAF), FLightdeck Automation Problems (FLAP), and Runway Incursion (RI) mishap scenarios. The intent of these safety risk models is to support a portfolio analysis of NASA's Aviation Safety Program (AvSP). These models use the flexible, probabilistic approach of Bayesian Belief Networks (BBNs) and influence diagrams to model the complex interactions of aviation system risk factors. Each KE session had a different set of experts with diverse expertise, such as pilot, air traffic controller, certification, and/or human factors knowledge that was elicited to construct a composite, systems-level risk model. There were numerous "lessons learned" from these KE sessions that deal with behavioral aggregation, conditional probability modeling, object-oriented construction, interpretation of the safety risk results, and model verification/validation that are presented in this paper.

Luxhoj, J. T.↗
NASA NTRS2010

Handheld White Light Interferometer for Measuring Defect Depth in Windows

Accurate quantification of defects (scratches and impacts) is vital to the certification of flight hardware and other critical components. The amount of damage to a particular component contributes to the performance, reliability, and safety of a system, which ultimately affects the success or failure of a mission or test. The launch-commit criteria on a Space Shuttle Orbiter window are governed by the depth of the defects that are identified by a visual inspection. This measurement of a defect is not easy to obtain given the environment, size of the defect, and location of the window(s). The determination of depth has typically been performed by taking a mold impression and measuring the impression with an optical profiling instrument. Another method of obtaining an estimate of the depth is by using a refocus microscope. To use a refocus microscope, the surface of the glass and bottom of the defect are, in turn, brought into focus by the operator. The amount of movement between the two points corresponds to the depth of the defect. The refocus microscope requires a skilled operator and has been proven to be unreliable when used on Orbiter windows. White light interferometry was chosen as a candidate to replace the refocus microscope. The White Light Interferometer (WLI) was developed to replace the refocus microscope as the instrument used for measuring the depth of defects in Orbiter windows. The WLI consists of a broadband illumination source, interferometer, detector, motion control, displacement sensor, mechanical housing, and support electronics. The illumination source for the WLI is typically a visible light emitting diode (LED) or a near-infrared superluminescent diode (SLD) with power levels of less than a milliwatt. The interferometer is a Michelson configuration consisting of a 1-in. (2.5-cm) cube beam splitter, a 0.5-in. (1.3-cm) optical window as a movable leg (used to closely match the return intensity of the fixed leg from the window), and a mirrored prism to fold the optics into the mechanical housing. The detector may be one of many C-mount CCD (charge-coupled device) cameras. Motion is provided by a commercial nanostepping motor with a serial interface. The displacement sensor is a custom device specifically designed for this application. The mechanical housing and support electronics were designed to integrate the various components into an instrument that could be physically handled by a technician and easily transported.

Youngquist, Robert↗
NASA NTRS1981

Report by the Aerospace Safety Advisory Panel

The process of preparation for the first two shuttle flights was observed and information from both flights was gathered in order to confirm the concept and performance of the major elements of the space transportation system. To achieve truly operational operating safety, regularity, and minimum practical cost, the organization of efforts between the R&D community and any transportation service organization should be clearly separated with the latter organization assuming responsibilities for marketing its services; planning and acquiring prime hardware and spares; maintainance; certification of procedures; training; and creation of requirements for future development. A technical audit of the application of redundancy concepts to shuttle systems is suggested. The state of the art of space transportation hardware suggests that a number of concept changes may improve reliability, costs, and operational safety. For the remaining R&D flights, it is suggested that a redline audit be made of limits that should not be exceeded for ready to launch.

Source record↗
NASA NTRS2009

Ares I Stage Separation System Design Certification Testing

NASA is committed to the development of a new crew launch vehicle, the Ares I, that can support human missions to low Earth orbit (LEO) and the moon with unprecedented safety and reliability. NASA's Constellation program comprises the Ares I and Ares V launch vehicles, the Orion crew vehicle, and the Altair lunar lander. Based on historical precedent, stage separation is one of the most significant technical and systems engineering challenges that must be addressed in order to achieve this commitment. This paper surveys historical separation system tests that have been completed in order to ensure staging of other launch vehicles. Key separation system design trades evaluated for Ares I include single vs. dual separation plane options, retro-rockets vs. pneumatic gas actuators, small solid motor quantity/placement/timing, and continuous vs. clamshell interstage configuration options. Both subscale and full-scale tests are required to address the prediction of complex dynamic loading scenarios present during staging events. Test objectives such as separation system functionality, and pyroshock and debris field measurements for the full-scale tests are described. Discussion about the test article, support infrastructure and instrumentation are provided.

Mayers, Stephen L.↗
NASA NTRS2015

Who's Got the Bridge? - Towards Safe, Robust Autonomous Operations at NASA Langley's Autonomy Incubator

NASA aeronautics research has made decades of contributions to aviation. Both aircraft and air traffic management (ATM) systems in use today contain NASA-developed and NASA sponsored technologies that improve safety and efficiency. Recent innovations in robotics and autonomy for automobiles and unmanned systems point to a future with increased personal mobility and access to transportation, including aviation. Automation and autonomous operations will transform the way we move people and goods. Achieving this mobility will require safe, robust, reliable operations for both the vehicle and the airspace and challenges to this inevitable future are being addressed now in government labs, universities, and industry. These challenges are the focus of NASA Langley Research Center's Autonomy Incubator whose R&D portfolio includes mission planning, trajectory and path planning, object detection and avoidance, object classification, sensor fusion, controls, machine learning, computer vision, human-machine teaming, geo-containment, open architecture design and development, as well as the test and evaluation environment that will be critical to prove system reliability and support certification. Safe autonomous operations will be enabled via onboard sensing and perception systems in both data-rich and data-deprived environments. Applied autonomy will enable safety, efficiency and unprecedented mobility as people and goods take to the skies tomorrow just as we do on the road today.

Allen, B. Danette↗
NASA NTRS2008

Recent NASA Dryden COA Experience

This viewgraph presentation concerns the experience that Dryden has had with Certificate of Authorization (COA) in reference to unmanned aerial systems (UAS). It reviews recent Certificate of Authorization UAS's i.e., 2005 Altair NOAA Mission, 2006 Altair Western States Fire Mission, and 2007 Ikhana. The priorities for the safety process is reviewed, as are typical UAS hazards. Slides also review the common COA provisions, best practices and lessons learned, the 2005 NOAA/NASA Science Demonstration Flights and the use of the UAS systems during fire emergencies.

Cobleigh, Brent↗